Index: 1066_OTP_FLASH/do.bat =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/do.bat (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/do.bat (working copy) @@ -0,0 +1,81 @@ +@set FPGA_PATH=fpgajic\fpga +@set ROM_PATH=. +@set MV_PATCH=mv\src\yichip +@set YC_PATCH_FILE=yc_patch_yc1021.h +@set enc=1 +@set enckey=0000000000000000 + +@set device_option=hci_boot +@echo off + +setlocal enabledelayedexpansion +for /f %%f in ('dir /b /o program\*.prog') do @if not %%f==bt.prog if not %%f==patch.prog if not %%f==sim.prog set progs=!progs! program\%%f +type program\bt.prog %progs% > output\bt_program23.meta +for /f %%f in ('dir /b /o format\*.format') do @if not %%f==bt.format if not %%f==command.format set fmts=!fmts! format\%%f +type format\bt.format %fmts% format\command.format > output\bt_format.meta +perl util/mergepatch.pl output/bt_program23.meta +perl util/memalloc.pl output/bt_format.meta + +cd output +osiuasm bt_program23 -O-W + +if "%device_option%" equ "hci_boot" ( + copy ..\sched\hci_boot.dat ..\output\sched.rom +) else ( + +cd .. +echo ********************************** +echo Error: illegal device_option ! +echo ********************************** +goto end +) + +if "%1" equ "eep" ( + goto genromrevc +)else ( + goto downloadram +) + + +:genromrevc +echo off +@echo Start to generate EEPROM code + +geneep -n ramcode.rom sched.rom 0 %enckey% c + + rem geneep -n -k key.txt + +cd ..\output + +echo eeprom.dat Generated...... + + +echo **********define info************* +cd ..\program +perl ..\util\define_info.pl + + +:gen_eep_end +cd .. +echo ********************************** +echo EEPROM Generated. +echo The Device is %device_option%. +echo ********************************** +goto end + + + +:downloadram +echo on +@echo Start to download ram code +e ku +e hu +e su sched.rom +@echo ********************************** +@echo RAM CODE has been downloaded. +@echo The Device is %device_option%. +@echo ********************************** +cd .. + + +:end Index: 1066_OTP_FLASH/format/24g.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/24g.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/24g.format (working copy) @@ -0,0 +1,305 @@ + +xmemalloc( + +) + +( +//add +0 offset_24g_rxbuf +1 offset_24g_rxbuf_add1 +2 offset_24g_rxbuf_add2 +34 offset_24g_txbuf +66 offset_24g_txpayload +100 offset_24g_rxpayload +102 offset_24g_rxpayload_add2 +132 offset_24g_rxdata_length +133 offset_24g_pid +134 offset_24g_datalen +135 offset_24g_data_type +136 offset_24g_txlen +137 offset_24g_rx_window +139 offset_24g_ensure +140 offset_24g_txfail_cnt +141 offset_24g_get_ack_fail +142 offset_24g_tx_without_int +143 offset_24g_retry +144 offset_24g_ch +145 offset_24g_current_ch_number +146 offset_24g_paring_addr +150 offset_24g_pairing_sm +151 offset_24g_ch_map1 +155 offset_24g_ch_map2 +159 offset_24g_ch_map3 +163 offset_24g_ch_map4 +167 offset_24g_tx_btclk +171 offset_24g_interval +172 offset_24g_interval_min +173 offset_24g_interval_max +174 offset_24g_addr +178 offset_24g_abort_pac +179 offset_24g_sync_pac +180 offset_24g_hop_pac +181 offset_24g_check_dongle_times +182 offset_24g_enter_hibernate +190 offset_24g_device_addr +194 offset_24g_pac_index +195 offset_24g_no_ack +196 offset_24g_sta_crc +199 offset_24g_last_crc +202 offset_24g_sta_pid +203 offset_24g_last_pid +204 offset_24g_max_retry +205 offset_24g_mode +206 offset_24g_rf_last_sta +207 offset_24g_rf_hop_ch +208 offset_24g_sync_cnt +209 offset_24g_hop_pac_retry +210 offset_24g_rf_work_stage +211 offset_24g_hop_fastly_cnt +212 offset_24g_short_sleep_timer +216 offset_24g_cb_data +218 offset_24g_cb_lpm_prepare +220 offset_24g_cb_lpm_before +222 offset_24g_cb_rxdata_type1 +224 offset_rssi_signal_index +225 offset_rssi_signal_avg +226 offset_rssi_signal_buf +234 offset_rssi_noise_index +235 offset_rssi_noise_avg +236 offset_rssi_noise_buf +244 offset_rssi_ctrl_threshold_down +245 offset_rssi_noise_dg_index +246 offset_rssi_noise_kb_index +247 offset_rssi_noise_ms_index +248 offset_rssi_noise_dg_avg +249 offset_rssi_noise_kb_avg +250 offset_rssi_noise_ms_avg +251 offset_tx_power_temp +252 offset_power_ctrl_packet_cnt +253 offset_power_ctrl_ack_cnt +254 offset_power_ctrl_level +255 offset_power_ctrl_txpwr_level2 +//iadd +256 offset_power_ctrl_txpwr_level1 +257 offset_power_ctrl_txpwr_level0 +258 offset_power_ctrl_threshold_up +259 offset_power_ctrl_threshold_down +260 offset_dongle_mode_init +261 offset_dongle_work_mode +262 offset_dongle_ms_bind_step +263 offset_dongle_kb_bind_step +264 offset_dongle_bind_device_status +265 offset_24g_rxdata_temp +267 offset_24g_rxdata_temp_add2 +268 offset_24g_rxdata_temp_add3 +269 offset_24g_rxdata_temp_add4 +299 offset_24g_rx_addr +303 offset_24g_bind_payload +304 offset_24g_bind_payload_add1 +305 offset_24g_bind_payload_add2 +309 offset_24g_rf_laststa +310 offset_24g_hop_btclk +314 offset_24g_hop_interval +315 offset_24g_ackpayload_enable +316 offset_24g_ackpayload +348 offset_24g_mode_switch +349 offset_24g_pair_mode +350 offset_24g_nodata_timer_enable +351 offset_24g_time_slice +352 offset_24g_mouse_addr +356 offset_24g_kb_addr +360 offset_24g_kb_data_sta_data +368 offset_24g_kb_data_last_data +376 offset_24g_kb_multikey_sta_data +379 offset_24g_kb_multikey_last_data +382 offset_24g_kb_blank_data_enable +383 offset_24g_kb_mul_blank_data_enable +384 offset_24g_ms_blank_data_enable +385 offset_24g_dg_last_ch +386 offset_24g_dg_ch_number +387 offset_24g_dg_config_ch_once +388 offset_24g_kb_last_ch +389 offset_24g_kb_ch_number +390 offset_24g_kb_config_ch_once +391 offset_24g_ms_last_ch +392 offset_24g_ms_ch_number +393 offset_24g_ms_config_ch_once +394 offset_24g_pair_txpower +395 offset_24g_auto_pair_switch +) + +( +1 NO_ACK_24G +0 WITH_ACK_24G + +0 ENSURE_OFF_24G +1 ENSURE_ON_24G + +0x4e G24_PAIR_CH +) + +( +0 disable_24g +1 tx_24g +2 rx_24g + +0 bit_ack_24g +) + +//mem_24g_interrupt +( +0 rx_dr +1 rx_sync +4 tx_ds +5 tx_fail +) + +//mem_24g_data_type +( +0x07 bits_data +//0-2 data type +3 bit_abort +4 bit_hop +5 bit_sync +//6-7 channel offset +) + + + +//mem_24g_pairing_sm +( +0 STATE_24G_PAIRING_NULL +1 STATE_24G_PAIRING_1 +2 STATE_24G_PAIRING_2 +3 STATE_24G_PAIRING_3 +0X11 STATE_24G_PAIRING_1_WAITING_ACK +0X12 STATE_24G_PAIRING_2_WAITING_ACK +0X13 STATE_24G_PAIRING_3_WAITING_ACK +0XFF STATE_24G_PAIRING_SUCCESS +) + +( +0 DONGLE_WORK //connect mode normal +1 DONGLE_BIND //code pair mode +2 DONGLE_TEST //test mode +3 DONGLE_CODE //PC_application +4 DONGLE_PCBA //PCBA_TEST +5 DONGLE_DEBUG +6 DONGLE_MODE_MAX +7 DONGLE_SEARCH +0 CLEAR_INIT +) + +( +0x01 DATATYPE_MOUSE //mouse +0x02 DATATYPE_KEYBOARD //keyboard +0xAA DATATYPE_BIND //bind step 1 +0x55 DATATYPE_CONFIG //bind step 2 +0x22 DATATYPE_OK //bind step 3 + +0x01 BIND_MOUSE +0x02 BIND_KEYBOARD +) + +( +112 G24_DONGLE_ADDR +) + +( +0xa0 COMMAND_MODE //BYTE 0 +0X81 COM_MODE_BIND //BYTE 1 +0X82 COM_MODE_TEST //BYTE 1 +) +( +0xa1 COMMAND_BIND //BYTE 0 +0X01 COM_BIND_GET //1 +0X84 COM_BIND_EXIT //1 +0XA7 COM_READ_MODE //1 +) +( +0xa2 COMMAND_TEST //BYTE 0 +0X81 COM_TEST_SC // 进入单载波 +0x82 COM_TEST_CD // fcc测试 +0x83 COM_TEST_DAT // 数据测试 +0X84 COM_TEST_LOW_CH //低频点 +0X85 COM_TEST_MID_CH //中频点 +0X86 COM_TEST_HIG_CH //高频点 +0X87 COM_TEST_SW_HIG //自动切换频点为高 1mhz +0X88 COIM_TEST_SW_LOW //自动切换频点为低 1mhz +0X89 COM_TEST_SW_STOP //停止自动切换频点 +0X8A COM_TEST_POW_5 //设置输出功率5dbm +0X8B COM_TEST_POW_0 //0dbm +0X8C COM_TEST_POW_N5 //-5dbm +0X8D COM_TEST_POW_N10 //-10dbm +0X8E COM_TEST_EXIT //退出测试模式 +) +( +0xa6 COMMAND_CURRENT_PROJECT +0xa7 COMMAND_CURRENT_MODE +0xa9 COMMAND_CURRENT_FW_VERSION +) + +//user defined cmd +( +0xb0 COMMAND_USER_DEFINED +) + +( +0x15 PRODUCT_ID +0 FW_VERSION0 +0 FW_VERSION1 +1 FW_VERSION2 +) + + +( +8 TIMER_NODATA +640 TIMER_NODATA_DELAY //200ms + +11 TIMER_MS_BLANK +320 TIMER_MS_BLANK_DELAY + +12 TIMER_KB_MUL_BLANK +320 TIMER_KB_MUL_BLANK_DELAY + +14 TIMER_KB_BLANK +320 TIMER_KB_BLANK_DELAY +) + +( +0 KB_NORMAL_REPORT_ID +1 MS_REPORT_ID +3 KB_MULTIKEY_REPORT_ID +) + +( +7 RSSI_BUF_LEN_SIGNAL +255 RSSI_BUF_LEN_NOISE +0x50 RSSI_THRESH_NOISE +) +( +//power control +0x01 TXPWR_0DB +0x02 TXPWR_3DB +0x04 TXPWR_5DB +0x10 TXPWR_f5DB + +124 POWER_CTRL_MAX_PACKET_CNT + +2 POWER_CTRL_LOSSPAC_THRESH_UP0 +0 POWER_CTRL_LOSSPAC_THRESH_DOWN0 +0x20 POWER_CTRL_RSSI_THRESH_DOWN0 + +5 POWER_CTRL_LOSSPAC_THRESH_UP1 +0 POWER_CTRL_LOSSPAC_THRESH_DOWN1 +0x60 POWER_CTRL_RSSI_THRESH_DOWN1 + +10 POWER_CTRL_LOSSPAC_THRESH_UP2 +0 POWER_CTRL_LOSSPAC_THRESH_DOWN2 +0x80 POWER_CTRL_RSSI_THRESH_DOWN2 +) + + + + + Index: 1066_OTP_FLASH/format/Hid.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/Hid.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/Hid.format (working copy) @@ -0,0 +1,21 @@ + +( +/*HID TYPE*/ +0x01 HID_TYPE_CONTROL +0x04 HID_TYPE_GET_REPORT +0x05 HID_TYPE_SET_REPORT +0x07 HID_TYPE_SET_PROTOCOL +0x09 HID_TYPE_SET_IDLE +0x0a HID_TYPE_DATA +/*HID REPORT ID*/ +0x01 HID_REPORT_ID_KB + +0x00 HID_CONTROL_P_NOOPERATION +0x01 HID_CONTROL_P_HARDRESET +0x02 HID_CONTROL_P_SOFTRESET +0x03 HID_CONTROL_P_SUSPEND +0x04 HID_CONTROL_P_EXITSUSPEND +0x05 HID_CONTROL_P_VIRTUALCABLEUNPLUG +) + + Index: 1066_OTP_FLASH/format/app.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app.format (working copy) @@ -0,0 +1,324 @@ + +memalloc( + +/* load code */ +1 mem_ucode_status +2 mem_otp_ucode_flag +1 mem_spid_tbuf /* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */ +0 mem_iicd_tbuf /* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */ +1 mem_addr_hi +1 mem_addr_mi +1 mem_addr_lo +1 mem_iicd_addr +4 mem_spid_rbuf +2 mem_ucode_buf +2 mem_ucode_len +2 mem_sched_addr +2 mem_ucode_ptr +16 mem_ucode_keybuf +18 mem_check_plap_temp + + +1 mem_reconnect_flag +1 mem_switch_fail_master_count +1 mem_app_evt_timer_count + +) + +xmemalloc( +1 mem_app_handshake_flag +2 mem_sniff_param_interval +2 mem_sniff_param_attempt +2 mem_sniff_param_timeout + +/*App Callback Functons*/ +2 mem_cb_check_wakelock +2 mem_cb_before_hibernate +2 mem_cb_before_lpm +2 mem_cb_le_process +2 mem_cb_bt_process +2 mem_cb_idle_process +2 mem_cb_bb_event_process +2 mem_cb_discovry_timeout +2 mem_cb_att_write +2 mem_cb_ble_transmit +2 mem_cb_event_timer +2 mem_cb_bt_set_mult +2 mem_cb_spi_flash_write_complate + + + + +2 mem_eeprom_base + +1 mem_unsniff2sniff_timer_count +//lpm mode +1 mem_wake_up_delay_timer + +1 mem_app_connection_options + +// +2 mem_app_disconn_reason +2 mem_app_disconn_reason_flag +4 mem_lpm_delay_after_sniff +1 mem_xrecord_mode + +1 mem_eeprom_block_size +1 mem_spi_init_clk +1 mem_spi_init_delay_time +1 mem_spi_ncs_gpio + +2 mem_nv_data_ptr +1 mem_nv_data_number + +2 mem_queue_ptr + +1 mem_ui_led_struct_num +2 mem_ui_led_struct_ptr + +//adc +2 mem_0_5_adc_io_data +2 mem_1v_adc_hvin_data +2 mem_2v_adc_vinlpm_data +2 mem_1v_adc_io_data +2 mem_5v_adc_hvin_data +2 mem_3v_adc_vinlpm_data +2 mem_otp_adc_flag +2 mem_reference_voltage +1 mem_adc_config_flag +1 mem_adc_channel +2 mem_adc_current_value +1 mem_adc_power_flag //bit0:low power falg ; bit1:no power flag + +3 mem_spi_write_addr +2 mem_spi_write_ptr +2 mem_spi_write_len +1 mem_spi_write_flash_sm +1 mem_eeprom_wp_gpio +2 mem_kscan_ptr +ifdef SPI_SIMULATE +//spi gpio config +0 mem_spi_simulate_struct +1 mem_spi_simulate_cs_gpio +1 mem_spi_simulate_sclk_gpio +1 mem_spi_simulate_mosi_gpio +1 mem_spi_simulate_miso_gpio +1 mem_spi_simulate_motion_gpio +//spi slave read byte +50 mem_spi_simulate_read_byte_slave +1 mem_spi_simulate_read_byte_slave_temp +1 mem_spi_simulate_read_length_slave +1 mem_spi_simulate_read_length_slave_temp +//spi slave write byte +50 mem_spi_simulate_write_byte_slave +1 mem_spi_simulate_write_byte_slave_temp +1 mem_spi_simulate_write_byte_slave_temp_temp +1 mem_spi_simulate_write_length_slave +1 mem_spi_simulate_write_length_slave_temp +endif + +0 mem_key_num_ptr +2 mem_keyscan_ptr + +2 mem_power_param_ptr +2 mem_24g_head_ptr +) +//adc read +( +0 ADC_CONFIG_VINLPM +1 ADC_CONFIG_HVIN +2 ADC_CONFIG_GPIO +) + + +( +0 QUEUE_OFFSET_EACH_SIZE +1 QUEUE_OFFSET_LENGTH +2 QUEUE_OFFSET_CURR_NUM +3 QUEUE_OFFSET_READ_PTR +4 QUEUE_OFFSET_WRITE_PTR +5 QUEUE_OFFSET_ELE_INIT_ADDR +) +( +//Flash Register +0x05 FLASH_READ_SATUS + +// Flash Status Register +0x00 FLASH_STATUS_WIP +0X01 FLASH_STATUS_WEL +0X02 FLASH_STATUS_BP0 +0X03 FLASH_STATUS_BP1 + +//Flash Write Sm +0X00 FLASH_SM_NO_BUYS +0X01 FLASH_SM_START +0X02 FLASH_SM_ERASE_SECTOR +0X03 FLASH_SM_WAIT_ERASE_SECTOR +0X04 FLASH_SM_WRITE_DATA +0X05 FLASH_SM_WAIT_WRITE_DATA + + +//Flash Command +0x02 FLASH_COMMAND_WRITE_DATA +0x03 FLASH_COMMAND_READ_DATA +0x20 FLASH_COMMAND_SECTOR_ERASE +) + +0x0000 otp_ucode_flag +0x07f0 otp_ucode_aeskey + +/* adc data addr and flag */ +( +0x07e0 OTP_CHIP_FUNCTIONS +0x07e2 otp_adc_io_0_5V_addr +0x07e4 otp_adc_hvin_1V_addr +0x07e6 otp_adc_vinlpm_2V_addr +0x07e8 otp_adc_io_1V_addr +0x07ea otp_adc_hvin_5V_addr +0x07ec otp_adc_vinlpm_3V_addr +0x07ee otp_adc_flag_addr +0xaa55 OTP_ADC_FLAG +) + +/* data stored in eeprom */ +( +0 eeprom_nv_ram + +195 eeprom_module_init_flag//2 + +) + +/*mem_app_handshake_flag*/ +( +0 APP_HANDSHAKE_NULL +1 APP_HANDSHAKE_DONE + +) +/*mem_device_option*/ +( +1 dvc_op_hci +4 dvc_op_dongle +5 dvc_op_spp +6 dvc_op_ukey +7 dvc_op_ir + +9 dvc_op_shutter +10 dvc_op_module +11 dvc_op_ble_mouse +12 dvc_op_ble_kb +13 dvc_op_ble_prcp +14 dvc_op_car +15 dvc_op_AntiLost +16 dvc_op_remote_car +255 dvc_op_test +//device option hight 4 +6 dvc_op_mouse +7 dvc_op_keyboard +//device option low 2 +( +0 MODE_3_MOUSE +1 MODE_4_MOUSE +) +) + +( +3 twspi_sclk +4 twspi_sdio +) + +( +4 pan_clk_bit +5 pan_dat_bit +6 pan_mov_bit +) + +( +7 otp_uflag_aes +6 otp_uflag_skip_eep +5 otp_uflag_skip_flash +4 otp_uflag_hci +) + +/* ir command */ +( +1 ircmd_record +2 ircmd_play +3 ircmd_write_pulse +4 ircmd_write_seq +5 ircmd_write_next + +8 ircmd_test_play +9 ircmd_test_rec + +10 ircmd_report_pulse +11 ircmd_report_seq +12 ircmd_report_raw + +20 ircmd_screen_on +21 ircmd_screen_off +) + +( +7 gpio_active_bit +) +( +2 HID_HANDSHAKE_TIMEOUT + +) + +( +1 APP_FLAG_RECONNECT +) +( +5 LPM_WAKE_UP_DELAY_TIMER +) + + +//mem_app_disconn_reason +//mem_app_disconn_reason_flag +//bit map +( +2 APP_DISC_RSN_SIZE +) +( +0 APP_DISC_BY_BUTTON +1 APP_DISC_AFTER_PAIRING +2 APP_DISC_AFTER_RECONN +3 APP_DISC_AFTER_SNIFF +4 APP_DISC_AFTER_SETUP_DONE +5 APP_DISC_AFTER_HANDSHAKE +6 APP_DISC_BT +7 APP_DISC_BLE +8 APP_DISC_L2CAP_REFUSED +9 APP_DISC_SWITCH_FAIL +) +//eeprom init flag +( + 0xaa55 EEPROM_INIT_FLAG +) + +( +1 KEY_CONF_STRUCT_LEN +0 KEY_PIN_OFFSET +) + +( +12000000 PWM_12MHZ +) +( +0 POWER_OFF +1 POWER_STARTING +2 POWER_STANDBY +) +//power parameter offset(8 byte) +( +0 power_state_offset +1 power_timer_offset +2 power_off_timeout_offset +3 power_starting_timeout_offset +4 power_off_cb_offset +6 power_starting_cb_offset +8 power_standby_cb_offset +10 ui_butten_up_cb_offset +) + Index: 1066_OTP_FLASH/format/app_antiLost.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_antiLost.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_antiLost.format (working copy) @@ -0,0 +1,202 @@ +omemalloc( +// memblock for cover the variables portion at shutter.format +2 mem_antl_lpm_interval +2 mem_antl_adv_interval +2 mem_antl_slow_adv_lpm_interval +2 mem_antl_slow_adv_adv_interval +0 mem_antl_led_style +1 mem_antl_led_type +1 mem_antl_led_blink_count +1 mem_antl_led_gpio +2 mem_antl_led_on_time +2 mem_antl_led_off_time +2 mem_antl_led_cb_on +2 mem_antl_led_cb_off + +0 mem_antl_buzzer_style +1 mem_antl_buzzer_type +1 mem_antl_buzzer_blink_count +1 mem_antl_buzzer_gpio +2 mem_antl_buzzer_on_time +2 mem_antl_buzzer_off_time +2 mem_antl_buzzer_cb_on +2 mem_antl_buzzer_cb_off + +0 mem_antl_fast_adv_led_style +1 mem_antl_fast_adv_led_type +1 mem_antl_fast_adv_led_blink_count +1 mem_antl_fast_adv_led_gpio +2 mem_antl_fast_adv_led_on_time +2 mem_antl_fast_adv_led_off_time + +0 mem_antl_slow_adv_led_style +1 mem_antl_slow_adv_led_type +1 mem_antl_slow_adv_led_blink_count +1 mem_antl_slow_adv_led_gpio +2 mem_antl_slow_adv_led_on_time +2 mem_antl_slow_adv_led_off_time + +0 mem_antl_power_starting_led_style +1 mem_antl_power_starting_led_type +1 mem_antl_power_starting_led_blink_count +1 mem_antl_power_starting_led_gpio +2 mem_antl_power_starting_led_on_time +2 mem_antl_power_starting_led_off_time + +7 mem_antl_power_starting_buzzer_style + +0 mem_antl_power_off_led_style +1 mem_antl_power_off_led_type +1 mem_antl_power_off_led_link_count +1 mem_antl_power_off_led_gpio +2 mem_antl_power_off_led_on_time +2 mem_antl_power_off_led_off_time + +0 mem_antl_power_off_buzzer_style +1 mem_antl_power_off_buzzer_type +1 mem_antl_power_off_buzzer_link_count +1 mem_antl_power_off_buzzer_gpio +2 mem_antl_power_off_buzzer_on_time +2 mem_antl_power_off_buzzer_off_time + +7 mem_antl_alert_led_stlye + +0 mem_antl_alert_buzzer_stlye +1 mem_antl_alert_buzzer_type +1 mem_antl_alert_buzzer_blink_count +1 mem_antl_alert_buzzer_gpio +2 mem_antl_alert_buzzer_on_time +2 mem_antl_alert_buzzer_off_time + +0 mem_antl_key_led_style +1 mem_antl_key_led_type +1 mem_antl_key_led_blink_count +1 mem_antl_key_led_gpio +2 mem_antl_key_led_on_time +2 mem_antl_key_led_off_time + +7 mem_antl_key_buzzer_style + +1 mem_antl_queue_width +1 mem_antl_queue_depth +1 mem_antl_queue_curr_num +1 mem_antl_queue_read_ptr +1 mem_antl_queue_write_ptr +80 mem_antl_queue_buff + +1 mem_antl_key_scan_enable +1 mem_antl_led_num +4 mem_antl_led_gpio_map + +0 mem_antl_power_param +1 mem_antl_power_state +1 mem_antl_power_timer +1 mem_antl_power_off_timeout +1 mem_antl_power_starting_timeout +2 mem_antl_power_off_cb +2 mem_antl_power_starting_cb +2 mem_antl_power_standby_cb +2 mem_event_button_up_cb + +1 mem_antl_key_num +2 mem_cb_antl_key +4 mem_antl_key_conf0 + +15 mem_antl_key0_press +15 mem_antl_key0_release + +/////// +1 mem_antl_conn_updata_procedure_state +2 mem_client_characteristic_configuration_descriptor +/////// + + +//100ms timer +2 mem_adc_timer +1 mem_antl_conn_update_timer +1 mem_antl_send_updata_le_param_timer +//// + +2 mem_antl_le_sleep_timer +2 mem_antl_fast_adv_timer +2 mem_antl_fast_adv_timeout +2 mem_antl_le_sleep_timeout +1 mem_double_click_timer +1 mem_butten_click_cnt + +//1 mem_dvc_seq +/////////anti lost alarm state///// +1 mem_antl_led_state +1 mem_antl_buzzer_state +1 mem_antl_key_state +1 mem_antl_lost_mode +1 mem_alarm_config +1 mem_alarm_config_notfy_cnt + +6 mem_buzzer_pwm_conf + + +/////////anti lost battery adc read//////// +2 mem_adc_timeout +1 mem_voltage_remain_percent + +0 mem_battery_calculate_set +2 mem_battery_full_voltage +2 mem_battery_empty_voltage +2 mem_battery_low_voltage +2 mem_battery_current_voltage + + +2 mem_rx_window_sniff_inc +2 mem_interval_increment + +2 mem_antl_le_interval_min +2 mem_antl_le_interval_max +2 mem_antl_le_latency +2 mem_antl_le_timeout +2 mem_antl_le_unnormal_interval_min +2 mem_antl_le_unnormal_interval_max +2 mem_antl_le_unnormal_latency +2 mem_antl_le_unnormal_timeout + +400 mem_AntiLost_le_att_list +) + +//app new specific +( +0 CONN_PARAM_UPDATA_PROCEDURE_NO_INIT +1 CONN_PARAM_UPDATA_PROCEDURE_STARTING +2 CONN_PARAM_UPDATA_PROCEDURE_COMPLETE +3 CONN_PARAM_UPDATA_PROCEDURE_FAILD +) +( +0 NEW_SPEC_HEADER_OFFSET +2 NEW_SPEC_OPCODE_OFFSET +3 NEW_SPEC_DLEGTH_OFFSET //data length offset +5 NEW_SPEC_DADDR_OFFSET //data address offset +) +( +1 OPCODE1_BUTTEN_CLICK_ONCE +2 OPCODE2_BUTTEN_DOUBLE_CLICK +3 OPCODE3_ANTL_START_ALRAM +4 OPCODE4_CURRENT_ALARM_STATE +5 OPCODE5_BATTER_INFORMATION +7 OPCODE7_ANTL_CONFIG_ALRAM +) +( +0x0a NEW_SPEC_NOTIFY_HANDLE +0x0b NEW_SPEC_NOTIFICATION_ENABLE_HANDLE +0x0d NEW_SPEC_WRITE_HANDLE +) +//app new specific end + +//mem_anti_lost_mode +( +0x01 ANTI_LE_ALARM_ON +0x00 ANTI_LE_ALARM_OFF +) +( +0 NOTIFICATION_ENABLE_BIT +1 INDICATION_ENABLE_BIT +) + Index: 1066_OTP_FLASH/format/app_car.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_car.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_car.format (working copy) @@ -0,0 +1,287 @@ + + +omemalloc( +1 mem_car_hard_soft_switch +1 mem_car_queue_each_size +1 mem_car__queue_length + +1 mem_car_queue_curr_num +1 mem_car_queue_read_ptr +1 mem_car_queue_write_ptr +120 mem_car_queue_ele + +20 mem_car_pop_queue_buff + +1 mem_car_led_num +10 mem_car_led_map + +1 mem_car_style1_led_type +1 mem_car_style1_blink_count +1 mem_car_style1_struct_led_gpio +2 mem_car_style1_on_time +2 mem_car_style1_off_time +2 mem_car_style1_cb_ledon +2 mem_car_style1_cb_ledoff + +1 mem_car_style2_led_type +1 mem_car_style2_blink_count +1 mem_car_style2_struct_led_gpio +2 mem_car_style2_on_time +2 mem_car_style2_off_time +2 mem_car_style2_cb_ledon +2 mem_car_style2_cb_ledoff + +//////motor +0 mem_le_receive_data +2 mem_le_receive_packet_head +1 mem_le_receive_cmd +2 mem_le_receive_length +10 mem_le_receive_payload +1 mem_le_receive_checksum +1 mem_motor1_status +1 mem_motor1_speed +1 mem_motor2_status +1 mem_motor2_speed +1 mem_motor3_status +1 mem_motor3_speed + +0 mem_motor1_pwm_set +1 mem_motor1_pwm_pin1_set +1 mem_motor1_pwm_pin2_set +1 mem_motor1_pwm_pin_set +1 mem_motor1_pwm_channel_set +3 mem_motor1_pwm_freq_set +1 mem_motor1_pwm_dute_set +0 mem_motor2_pwm_set +1 mem_motor2_pwm_pin1_set +1 mem_motor2_pwm_pin2_set +1 mem_motor2_pwm_pin_set +1 mem_motor2_pwm_channel_set +3 mem_motor2_pwm_freq_set +1 mem_motor2_pwm_dute_set +0 mem_motor3_pwm_set +1 mem_motor3_pwm_pin1_set +1 mem_motor3_pwm_pin2_set +1 mem_motor3_pwm_pin_set +1 mem_motor3_pwm_channel_set +3 mem_motor3_pwm_freq_set +1 mem_motor3_pwm_dute_set + +1 mem_motor_select_p_n +1 mem_car_motor_status +1 mem_car_motor_speed +0 mem_motor_pwm_set +1 mem_motor_pwm_pin1_set +1 mem_motor_pwm_pin2_set +1 mem_motor_pwm_pin_set +1 mem_motor_pwm_channel_set +3 mem_motor_pwm_freq_set +1 mem_motor_pwm_dute_set + +1 mem_ir_rx_gpio +2 mem_ir_data +2 mem_ir_rx_buf +4 mem_ir_receive_clkn + +3 mem_ir_notify_data +5 mem_ir_notify_data_head +2 mem_ir_notify_data_payload +1 mem_ir_notify_data_check_sum +1 mem_car_ir_breakdown_check_timer +1 mem_car_ir_breakdown_flag + +0 mem_car_led_control +1 mem_car_led1_status +1 mem_car_led2_status +1 mem_car_led3_status +1 mem_car_led4_status +1 mem_car_led5_status +1 mem_car_led6_status +1 mem_car_led7_status +1 mem_car_led8_status +1 mem_car_led_control_timer +1 mem_car_led_blink_status +1 mem_car_led_no + +3 mem_car_info_request +5 mem_car_info_request_head +8 mem_car_info_request_payload +1 mem_car_info_request_checksum + +0 mem_car_config_param +1 mem_car_config_setting_flag +1 mem_car_config_device_select +1 mem_car_config_motor_layout +1 mem_car_config_ir_enable +1 mem_car_config_ir_rx_gpio +1 mem_car_config_pairing_led_conn_status +1 mem_car_config_pairing_led_gpio +1 mem_car_config_led_num +0 mem_car_config_blood_led_gpio +1 mem_car_config_blood_led1_gpio +1 mem_car_config_blood_led2_gpio +1 mem_car_config_blood_led3_gpio +1 mem_car_config_blood_led4_gpio +1 mem_car_config_blood_led5_gpio +1 mem_car_config_blood_led6_gpio +1 mem_car_config_blood_led7_gpio +1 mem_car_config_blood_led8_gpio +1 mem_car_config_bat_notify_enable +1 mem_car_config_low_voltage_led_gpio +1 mem_car_config_low_voltage_percent +1 mem_car_config_soft_switch_enable +1 mem_car_config_soft_switch_gpio + +1 mem_car_notify_vdd_count +1 mem_car_notify_vdd_timer +1 mem_car_notify_vdd_value_last +1 mem_car_notify_vdd_percent +1 mem_car_working_flag +1 mem_low_bat_flag + +3 mem_notify_bat_packet +5 mem_notify_bat_head +1 mem_notify_bat_payload +1 mem_notify_bat_check_sum + +1 mem_vdd_notify_flag +2 mem_car_current_vdd_value_temp +2 mem_car_last_vdd_value + +0 mem_vdd_calculate_set +2 mem_vdd_full_vol +2 mem_vdd_empty_vol +2 mem_vdd_low_vol +2 mem_vdd_now_vol + + +1 mem_car_24g_status +2 mem_car_24g_no_data_timeout_count +2 mem_car_24g_no_data_timeout_timer + +1 mem_car_24g_ir_receive_attack_count +1 mem_car_24g_go_die_flag +1 mem_car_attack_shake_timer +1 mem_car_attack_shake_flag + +0 mem_car_soft_power +1 mem_car_power_state +1 mem_car_power_timer +1 mem_car_power_off_timeout +1 mem_car_power_starting_timeout +2 mem_car_power_off_cb +2 mem_car_power_starting_cb +2 mem_car_power_standby_cb +2 mem_car_ui_button_up_cb + + +500 mem_car_le_att_list + +1 mem_car_moto1_blank_timer +1 mem_car_moto2_blank_timer +1 mem_car_moto3_blank_timer +1 mem_car_24g_received_pac +400 mem_24g_car_head_ptr +) + +( +//20ms +0x0020 FAST_ADV_INTERVAL_VALUE_CAR +) + +( +0x14 ATT_CAR_CONTROL_HANDLE +0x14 ATT_SPEED_SET_HANDLE +) + + +( +0 TURN_FRONT +1 TURN_LEFT +2 TURN_RIGHT +0 MOTOR_STOP +1 GO_FRONT +2 GO_BACK +0x6b5a LE_RECEIVE_PACKET_HEAD +) + +( +0 FLAG_IR_DISABLE +1 FLAG_IR_ENABLE +) + +( +0 DEVICE_CAR +1 DEVICE_TANK +2 DEVICE_BATTLE_CAR +3 DEVICE_BATTLE_TANK +4 DEVICE_REMOTE +) + +( +0 F_B_MOTOR +1 L_R_MOTOR +2 F_B_BATTERY +3 L_R_BATTERY +) + + + +( +1 SPEED_LEVEL_1 +2 SPEED_LEVEL_2 +3 SPEED_LEVEL_3 +4 SPEED_LEVEL_4 +5 SPEED_LEVEL_5 +6 SPEED_LEVEL_6 +7 SPEED_LEVEL_7 +8 SPEED_LEVEL_8 +9 SPEED_LEVEL_9 +10 SPEED_LEVEL_10 +) + +( +0 PWM0_DUTY_SETTING +1 PWM1_DUTY_SETTING +2 PWM2_DUTY_SETTING +) + +( +1 CAR_CMD_BATTERY +2 CAR_CMD_OLD_CAR_CONTROL +3 CAR_CMD_OLD_SPEED_CONTROL +4 CAR_CMD_L_R_MOTOR_CONTROL +5 CAR_CMD_F_B_MOTOR_CONTROL +6 CAR_CMD_IR_CONTROL +7 CAR_CMD_LED_CONTROL +8 CAR_CMD_DEVICE_INFO +) + +( +0 CAR_REMOTE_CHECK_BUTTON +1 CAR_REMOTE_CHECK_ROCKER +) + +( +0x11 CAR_NOTIFY_HANDLE +) + +( +0 LED_OFF +1 LED_ON +2 LED_BLINK +0xFF LED_INVALID +) + +( +0xFF INVALID_PIN_NUM +) + + +( +0 POWER_ON +1 WORK_PAIRED +2 WORK_SEARCH +) + + Index: 1066_OTP_FLASH/format/app_light.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_light.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_light.format (working copy) @@ -0,0 +1,34 @@ +omemalloc( +1 mem_light_pwm0 +1 mem_light_pwm1 +1 mem_light_pwm2 +1 mem_light_pwm3 +1 mem_light_pwm4 +1 mem_light_pwm5 + +1 mem_light_pairing_enable +2 mem_light_pairing_timer +1 mem_light_cnum +1 mem_light_next_record +80 mem_light_clist + + +1 mem_light_crr_cmd_count +1 mem_curr_packet_num +) + +( +0 LIGHT_GROUP0 +) + +( +0 LIGHT_CMD_PWM0 +1 LIGHT_CMD_PWM1 +2 LIGHT_CMD_PWM2 +3 LIGHT_CMD_PWM3 +4 LIGHT_CMD_PWM4 +5 LIGHT_CMD_PWM5 +6 LIGHT_CMD_AUTO_MODE +0xff LIGHT_CMD_PAIRING + +) Index: 1066_OTP_FLASH/format/app_lightc.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_lightc.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_lightc.format (working copy) @@ -0,0 +1,30 @@ +omemalloc( +1 mem_lightc_led_gpio +6 mem_lightc_row +6 mem_lightc_col + +1 mem_adv_time + +20 mem_cmd0_string +20 mem_cmd1_string +20 mem_cmd2_string +20 mem_cmd3_string +20 mem_cmd4_string +20 mem_cmd5_string +20 mem_cmd6_string +20 mem_cmd7_string +20 mem_cmd8_string +20 mem_cmd9_string +20 mem_cmd10_string +20 mem_cmd11_string +20 mem_cmd12_string +20 mem_cmd13_string +20 mem_cmd14_string +20 mem_cmd15_string +20 mem_cmd16_string +20 mem_cmd17_string +20 mem_cmd18_string +20 mem_cmd19_string +20 mem_cmd20_string +) + Index: 1066_OTP_FLASH/format/app_module.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_module.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_module.format (working copy) @@ -0,0 +1,222 @@ +memalloc( +) +omemalloc( + 2 mem_soft_version_num + 1 mem_module_wake_up_gpio + 1 mem_module_state_gpio + 1 mem_module_connect_state_gpio + + 2 mem_current_packet_length + 1 mem_module_state + + 1 mem_module_mcu_wake_pin + 4 mem_module_mcu_wake_delay_us + + 1 mem_module_spp_lpm_mult + 1 mem_module_le_lpm_mult + 1 mem_module_bluetooth_stauts_by_command + + //uart + 2 mem_module_uart_rx_buffer + 2 mem_module_uart_rx_buffer_end + 2 mem_module_uart_tx_buffer + 2 mem_module_uart_tx_buffer_end + + //ADC + 1 mem_module_read_vdd_flag + 1 mem_module_read_vdd_count + 1 mem_module_vdd_quotient + 1 mem_module_vdd_remainder + + //ble + 1 mem_module_le_rx_data_len + 2 mem_module_le_rx_data_address + 2 mem_module_le_rx_data_handle + //ble write handle + 2 mem_module_data_write_handle + 2 mem_module_data_write_handle2 + //flag + 1 mem_module_flag + + 1 mem_module_hci_notify_len + 2 mem_module_hci_notify_handle + 2 mem_module_hci_nofiy_addr + + 4 mem_last_transmite_clock + + 300 mem_module_uuid_list + 0 mem_module_uuid_list_end + 600 mem_module_le_att_list + 0 mem_module_le_att_list_end + 0 mem_module_nv_data + 34 mem_module_nv_data0 + 34 mem_module_nv_data1 + 34 mem_module_nv_data2 + 34 mem_module_nv_data3 + 34 mem_module_nv_data4 +) + + +(//mem_module_flag +//bit0~bit3 config module function +0 MODULE_FLAG_UART_FLOW_CONTROL +1 MODULE_FLAG_BLE_SEND_MTU23 +2 MODULE_FLAG_BLE_DATA_ENCRYPT + +//bit4~bit7 module states change +4 MODULE_FLAG_BLE_DATA_FINISH +5 MOUDLE_TASK_UNSNIFF +6 MOUDLE_TASK_SNIFF + +) + +( +34 NV_DATA_LEN +-1 DECREASED_ONE +) + + + +( + 10 FLAG_MODULE_READ_VDD_COUNT +) + +( + 110 DM_REFCOM_BUFF_LEN +) +( + 0x200 UART_AIR_CONTROL_THRESHOLD +) + +( +0x01 HCI_DISCARD_PACKET +0x00 HCI_NOT_DISCARD_PACKET +) + + + +(//Command +0x00 HCI_CMD_SET_BT_ADDR_REQ +0x01 HCI_CMD_SET_LE_ADDR_REQ +0x02 HCI_CMD_SET_VISIBILITY_REQ +0x03 HCI_CMD_SET_BT_NAME_REQ +0x04 HCI_CMD_SET_LE_NAME_REQ +0x05 HCI_CMD_SPP_DATA_REQ +0x09 HCI_CMD_LE_DATA_REQ +0x0b HCI_CMD_STATUS_IRQ +0x0c HCI_CMD_SET_PAIRING_REQ +0x0d HCI_CMD_SET_PINCODE_REQ +0x0e HCI_CMD_SET_UARTCONTROL_REQ +0x0f HCI_CMD_SET_UART_BAUD_REQ +0x10 HCI_CMD_VERSION_REQ +0x11 HCI_CMD_BT_DISCONNECT +0x12 HCI_CMD_BLE_DISCONNECT +0x13 HCI_CMD_DELETE_DEVICE +0x14 HCI_CMD_CREATE_CONNECT +0x26 HCI_CMD_SET_NVRAM_REQ +0x27 HCI_CMD_SLEEP +0x28 HCI_CMD_CONFIRM_GKEY +0x29 HCI_CMD_SET_CREDIT_GIVEN +0x2a HCI_CMD_AUTO_ADV_SCAN +0x2b HCI_CMD_POWER_REQ +0x2c HCI_CMD_POWER_SET +0x30 HCI_CMD_PASSKEY_ENTRY +0x31 HCI_CMD_SET_GPIO +0x32 HCI_CMD_READ_GPIO +0x33 HCI_CMD_LE_SET_PAIRING +0x34 HCI_CMD_LE_SET_ADV_DATA +0x35 HCI_CMD_LE_SET_SCAN_DATA +0x36 HCI_CMD_LE_SEND_CONN_UPDATE_REQ +0x37 HCI_CMD_LE_SET_ADV_PARM +0x38 HCI_CMD_LE_START_PAIRING +0x40 HCI_CMD_SET_WAKE_GPIO +0x42 HCI_CMD_SET_TX_POWER +0x43 HCI_CMD_BOOT_VERSION_REQ +0x48 HCI_CMD_LE_CONFIRM_GKEY +0x49 HCI_CMD_REJECT_JUSTWORK +0x51 HCI_CMD_RESET_CHIP_REQ + +0x61 HCI_CMD_LE_SET_FIXED_PASSKEY + +0xff HCI_TEST_CMD_CLOSE_LPM +) + +(//event +0x00 HCI_EVENT_SPP_CONN_REP +0x01 HCI_EVENT_HID_CONN_REP +0x02 HCI_EVENT_LE_CONN_REP +0x03 HCI_EVENT_SPP_DIS_REP +0x04 HCI_EVENT_HID_DIS_REP +0x05 HCI_EVENT_LE_DIS_REP +0x06 HCI_EVENT_CMD_RES +0x07 HCI_EVENT_SPP_DATA_REP +0x08 HCI_EVENT_LE_DATA_REP +0x09 HCI_EVENT_STANDBY_REP +0x0a HCI_EVENT_STATUS_RES +0x0b HCI_EVENT_FINISH_PACK_NUM +0X0C HCI_EVENT_SNIFF_MD_CHANGE +0x0D HCI_EVENT_NVRAM_REP +0x0e HCI_EVENT_GKEY +0x0F HCI_EVENT_INVALID_PACKET +0x10 HCI_EVENT_GET_PASSKEY +0x11 HCI_EVENT_LE_TK +0x12 HCI_EVENT_REMOTE_MTU +0x14 HCI_EVENT_LE_PAIRING_STATE +0X15 HCI_EVENT_LE_ENCRYPTION_STATE +0x17 HCI_EVENT_LE_CONNECTION_UPDATE +0x1d HCI_EVENT_LE_GKEY + +) + + +(//command HCI_CMD_SET_GPIO +//byte 0 +0x00 HCI_CMD_CONFIG_GPIO_INPUT +0x01 HCI_CMD_CONFIG_GPIO_OUTPUT +//byte 1 input state +0x00 GPIO_INPUT_PULLUP +0x01 GPIO_INPUT_PULLDOWN +0x02 GPIO_INPUT_HIGH_IMPEDANCE +) + + + +( +0x7e0 OTP_ADDR_RF_PARAM_FIX +//struct of RF_PARAM_FIX +// uint8 //length = param_pair_count * 2 +// uint16 //param-pair-1 +// uint16 //param-pair-2 +// uint16 //param-pair-3 +// uint16 //param-pair-4 +// uint16 //param-pair-5 +// uint16 //param-pair-6 +// uint16 //param-pair-7 +) + +( +0 PAIRING_PINCODE +1 PAIRING_JUSTWORK +2 PAIRING_PASSKEY +3 PAIRING_CONFIRM +) + + +( +0x0001 FLAG_BT_PAIRING_SUCCESS +0x0101 FLAG_BT_PAIRING_FAIL +0x0080 FLAG_BLE_PAIRING_SUCCESS +0x0180 FLAG_BLE_PAIRING_FAIL +) + + +( +1 FLAG_EVENT_START_ENC +0 FLAG_EVENT_PAUSE_ENC +) + +( + 0 MOUDLE_STATE_BT_BIT + 1 MOUDLE_STATE_BLE_BIT +) + Index: 1066_OTP_FLASH/format/app_mouse.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_mouse.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_mouse.format (working copy) @@ -0,0 +1,334 @@ + +memalloc( +2 mem_init_cnt +) +//dpi eeprom addr + + +omemalloc( +// Mouse Work Area +1 mem_mouse_key +2 mem_mouse_x +2 mem_mouse_y +1 mem_mouse_z +1 mem_mouse_tz +1 mem_mouse_xy_h +1 mem_sensor_shutter_hi +1 mem_sensor_shutter_lo +1 mem_sensor_smart_flag +1 mem_sensor_squal_reg +1 mem_sensor_iqc +1 mem_mouse_move_flag +2 mem_mouse_direct_timeout +2 mem_mouse_no_data_timeout +2 mem_mouse_discovery_timer +2 mem_mouse_direct_timer +2 mem_mouse_no_data_timer +2 mem_mouse_blank_data_timer +1 mem_mouse_send_blank_timer + +1 mem_mouse_cpi_count +1 mem_mouse_dpi_button_state + + +//mouse T wheel +1 mem_wheel_tb_old_pinlevel +1 mem_wheel_tb_new_pinlevel +1 mem_wheel_tog +1 mem_mouse_tz_data +1 mem_mouse_tz_data_count +1 mem_mouse_tz_data_count1 + + +1 mem_mwheel_b_old_pinlevel +1 mem_mwheel_b_new_pinlevel +1 mem_mwheel_tog +1 mem_mouse_z_data +1 mem_mouse_z_data_count +1 mem_mouse_z_data_count1 + +1 mem_reconn_mode +1 mem_mouse_statue_led_timer +1 mem_le_connect_statue_flag +1 mem_le_start_encrypt_timer + +7 mem_device_addr_temp + +1 mem_adc_read_timer +1 mem_adc_low_volatage_led_timer_count +2 mem_adc_reference_voltage +1 mem_device_number +2 mem_mouse_flag +2 mem_mouse_function_enable +1 mem_combination_select_device_timer_init +1 mem_combination_select_device_count +1 mem_select_device_button_statue + +1 mem_combination_ui_button_count +1 mem_bt_discovey_button_statue +1 mem_sensor_reset_gpio + +1 mem_sensor_id1 +1 mem_sensor_id2 +//eeprom config param +1 mem_mouse_dpi_led_delay_count +1 mem_config_sensor_type +1 mem_config_sensor_motion +1 mem_lbutton_gpio +1 mem_rbutton_gpio +1 mem_mbutton_gpio +1 mem_bk_button_gpio +1 mem_fw_button_gpio +1 mem_dpi_button_gpio +1 mem_whee_a_data_gpio +1 mem_whee_b_data_gpio +1 mem_whee_ta_data_gpio +1 mem_whee_tb_data_gpio +1 mem_config_bt_button_gpio +1 mem_config_select_device_button_gpio +1 mem_config_paraing_led_gpio +1 mem_config_low_voltage_alarm_gpio +1 mem_config_device1_led_gpio +1 mem_config_device2_led_gpio +1 mem_config_device3_led_gpio +1 mem_sensor_data_gpio +1 mem_dpi_led_gpio +1 mem_config_function_enable +1 mem_config_sensor_angle +1 mem_select_sensor_angle_gpio +1 mem_select_adc_gpio +0 mem_config_end +//max length 1f +4 mem_btclk_sensor +1 mem_wire_usb_interval +1 mem_mouse_mode_flag +1 mem_usb_addr +3 mem_flash_base +1 mem_24g_device_number +1 mem_24g_enter_lpm_timer +1 mem_mouse_1step_up_count +1 mem_mouse_2step_up_count +2 mem_24g_pairing_timer_count + +//adc struct +0 mem_mouse_vdd_calculate_set +2 mem_mouse_vdd_full_vol +2 mem_mouse_vdd_empty_vol +2 mem_mouse_vdd_low_vol +2 mem_mouse_vdd_now_vol +// sensor led +1 mem_mouse_sensor_timer_count +1 mem_sensor_led_style + +//led struct +1 mem_mouse_led_type +1 mem_mouse_blink_count +1 mem_mouse_struct_led_gpio +2 mem_mouse_on_time +2 mem_mouse_off_time +2 mem_mouse_cb_ledon +2 mem_mouse_cb_ledoff + +//three devices param +1 mem_reconn_times +1 mem_reconn_times_init +0 mem_mouse_information_start +1 mem_device_flag +1 mem_device1_type +6 mem_device1_addr +16 mem_device1_link_key +6 mem_device1_locall_addr + +1 mem_device2_type +6 mem_device2_addr +16 mem_device2_link_key +6 mem_device2_locall_addr + +1 mem_device3_type +6 mem_device3_addr +16 mem_device3_link_key +6 mem_device3_locall_addr +2 mem_store_flag +1 mem_mouse_dpi +4 mem_mouse_24g_addr +0 mem_mouse_information_end + +0 mem_mouse_dpi_seting +1 mem_320x_dpi_1 +1 mem_320x_dpi_2 +1 mem_320x_dpi_3 +1 mem_320x_dpi_4 + +1 mem_3212_dpi_1 +1 mem_3212_dpi_2 +1 mem_3212_dpi_3 +1 mem_3212_dpi_4 + +1 mem_3610_dpi_1 +1 mem_3610_dpi_2 +1 mem_3610_dpi_3 +1 mem_3610_dpi_4 + +1 mem_mouse_24g_enter_lpm_enable + +400 mem_24g_ms_head_ptr +) +( +//SPI GPIO +0x19 MOUSE_SPI1_CLK_GPIO +0x1A MOUSE_SPI1_SDIO_GPIO +0X1E MOUSE_SPI2_CLK_GPIO +0X1F MOUSE_SPI2_SDIO_GPIO +//combination +0x01 MOUSE_L_BUTTON +0X02 MOUSE_R_BUTTON +0X04 MOUSE_M_BUTTON +0X06 MOUSE_RM_BUTTON +0X07 MOUSE_LMR_BUTTON +//mouse default gpio +0x1B MOUSE_DEFAULT_XA_GPIO +0x1C MOUSE_DEFAULT_XB_GPIO + +//ui led blink +0X00C8 LED_RECONNECT_BLINK //200 +0X0190 LED_DPI_BLINK //400 +0X03E8 LED_DISCOVERY_BLINK //1000 +0XFF LED_LONG_BLINK +0x05 LED_SENSOR_BLINK_CNT +//bt mode device number +0x01 MODE_BT_DEVICE1 +0x02 MODE_BT_DEVICE2 +0x03 MODE_BT_DEVICE3 +0x02 MODE_24G_DEVICE +//mouse flag +0X00 WRITE_REQ_ENABLE_FLAG +0X01 LL_START_ENC_FLAG +0X02 LL_PAIRING_SUCCESS_FLAG + + +//mouse_function_flag +0X04 MOUSE_FLAG_LEN +//1byte +0X00 MOUSE_SELECT_DEVICE_FLAG +0X01 MOUSE_CPI_FLAG +0X02 MOUSE_BT_CANNEL_RECONN_FLAG +0X03 MOSUE_24G_PAIRING_FLAG +0X04 MOUSE_LOW_VOLTAGE_FLAG +0X05 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG +0X06 MOUSE_LONG_BT_BUTTON_FLAG +0X07 MOUSE_STORE_EEPROM_FLAG +0x08 MOUSE_STATUE_UP_FLAG + +//3byte +0X10 MOUSE_ENABLE_USB +0X11 MOUSE_ENABLE_24G +0X12 MOUSE_ENABLE_SPI2 +0X13 MOUSE_ENABLE_FLASH +0X14 MOUSE_ENABLE_EEPROM +0X15 MOUSE_ENABLE_STATUE_UP_THREE_LED +0X16 MOUSE_ENABLE_STATUE_UP +0X17 MOUSE_ENABLE_DPI_LED_BLINK +//4byte +0X18 MOUSE_ENABLE_BLE_RANDOM_ADDRE +0X19 MOUSE_ENABLE_2K_EEPROM +0X1A MOUSE_ENABLE_ADC +0X1B MOUSE_ENABLE_INIT_DELAY +0X1C MOUSE_ENABLE_DISCOVERY_SENSOR_LED +0X1D MOUSE_ENABLE_AUTO_24G_PARING +0X1E MOUSE_ENABLE_WAKEUP_FROM_POWER +0X1F MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR + + + +//mouse dpi level +0x00 MOUSE_DPI_LEVEL1 +0x01 MOUSE_DPI_LEVEL2 +0x02 MOUSE_DPI_LEVEL3 +0x03 MOUSE_DPI_LEVEL4 + + +//mouse sensor angle +0x00 MOUSE_6CLK_ANGLE +0X01 MOUSE_9CLK_ANGLE +0X02 MOUSE_12CLK_ANGLE +0X03 MOUSE_3CLK_ANGLE + + +//mem_config_function_enable +0 ENABLE_BT_DISCOVERY_BY_GPIO_LED +1 ENABLE_MODE_LED +2 ENABLE_LOW_VOLTAGE_LED +3 ENABLE_DEVICE_LED +4 ENABLE_BT_BUTTON +5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON +6 ENABLE_SELECT_DEVICE_BY_SWITCH + +0xFF GPIO_DISABLE + + +//DPI button state +0x00 DPI_BUTTON_STATE_DOWN +0x01 DPI_BUTTON_STATE_UP + + +//eeprom address offect +0X00 MOUSE_INFO_EEPROM_OFFECT +0X5A MOUSE_DPI_EEPROM_OFFECT +0X5B MOUSE_G24_ADDR_EEPROM_OFFECT + +// Sensor id number +0x30 P32XX_ID1 +0x31 P3065_ID1 +0x3E P3610_ID1 +0x02 P3212_ID2 +0xD1 P3205_TJ3T_ID2 +0XD2 P3204_TJ3L_ID2 +0x54 PKA8_ID2 +0x70 P3065_XY_ID2 + + +//Sensor type +0X00 P3205 +0X01 P3065 +0X02 KA8 +0X03 P3204 +0X04 P3212 +0X05 P3610 +0X06 P3065_XY + + +//p3610 smart enable flag +0X00 P3610_SMART_ENABLE +0X01 P3610_SMART_DISABLE + + +//SENSOR REG +0x00 PAN_REG_PID_L +0x01 PAN_REG_PID_H +0x02 PAN_REG_MOTION_STAUS +0x03 PAN_REG_DELTA_X +0x04 PAN_REG_DELTA_Y +0x05 PAN_REG_OPRATION_MODE +0x06 PAN_REG_CONFIG +0x07 PAN_REG_IMAGE_QUALITY +0x08 PAN_REG_OPRATION_STATE +0x09 PAN_REG_WRITE_PROTECT +0x0A PAN_REG_SLEEP_1 +0x0B PAN_REG_ENTER_TIME +0x0C PAN_REG_SLEEP_2 +0x0D PAN_REG_IMAGE_THRESHOLD +0x0E PAN_REG_IMAGE_RECGNITION + + +0x06 MOUSE_DPI_ADDRESS +0x05 MOUSE_P3610_DPI_ADDRESS +0x0D MOUSE_P3212_DPI_XADDRESS +0x0E MOUSE_P3212_DPI_YADDRESS + + +0x06 MOUSE_FPGA_RF_WORK_DEBUG_GPIO +0x02 MOUSE_FPGA_DEBUG_GPIO + +) + + Index: 1066_OTP_FLASH/format/app_remote_car.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_remote_car.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_remote_car.format (working copy) @@ -0,0 +1,150 @@ + +omemalloc( +1 mem_remote_car_hard_soft_switch + +1 mem_remote_car_queue_each_size +1 mem_remote_car_queue_length + +1 mem_remote_car_queue_curr_num +1 mem_remote_car_queue_read_ptr +1 mem_remote_car_queue_write_ptr +90 mem_remote_car_queue_ele + +1 mem_remote_style_led_type +1 mem_remote_style_blink_count +1 mem_remote_style_struct_led_gpio +2 mem_remote_style_on_time +2 mem_remote_style_off_time +2 mem_remote_style_cb_ledon +2 mem_remote_style_cb_ledoff + + +1 mem_remote_car_led_num +8 mem_remote_car_led_map + +0 mem_remote_car_keyscan +1 mem_remote_car_key_num +2 mem_cb_remote_car_keyscan + +0 mem_remote_car_key_conf0 +1 mem_remote_car_key_conf0_pin +0 mem_remote_car_key_conf1 +1 mem_remote_car_key_conf1_pin +0 mem_remote_car_key_conf2 +1 mem_remote_car_key_conf2_pin +0 mem_remote_car_key_conf3 +1 mem_remote_car_key_conf3_pin +0 mem_remote_car_key_conf4 +1 mem_remote_car_key_conf4_pin +0 mem_remote_car_key_conf5 +1 mem_remote_car_key_conf5_pin +0 mem_remote_car_key_conf6 +1 mem_remote_car_key_conf6_pin + + +//rocker +1 mem_rocker_negative_flag +1 mem_rocker_work_status +2 mem_current_vdd_value_default_mid_x +2 mem_current_vdd_value_default_mid_y +2 mem_current_vdd_value_default_mid_temp +2 mem_current_vdd_default_range +2 mem_rocker_last_status +0 mem_rocker_status +1 mem_rocker_x_status +1 mem_rocker_y_status + +0 mem_remote_car_config_param +1 mem_remote_car_config_setting_flag +1 mem_remote_car_config_key_map +1 mem_remote_car_config_layout +1 mem_remote_car_config_connect_led_gpio +1 mem_remote_car_config_check_way +1 mem_remote_car_config_soft_switch_enable +1 mem_remote_car_config_soft_switch_gpio +1 mem_remote_car_config_timeout_shutdown_enable + +0 mem_remote_car_24g_motor_packet +1 mem_remote_car_24g_motor_packet_lenght +2 mem_remote_car_24g_motor_send_packet_head +1 mem_remote_car_24g_motor_send_cmd +2 mem_remote_car_24g_motor_send_length +0 mem_remote_car_24g_motor_send_payload +2 mem_remote_car_24g_motor1_payload +2 mem_remote_car_24g_motor2_payload +2 mem_remote_car_24g_motor3_payload +1 mem_remote_car_24g_motor_send_checksum + +0 mem_remote_car_24g_fire_packet +1 mem_remote_car_24g_fire_packet_lenght +2 mem_remote_car_24g_fire_send_packet_head +1 mem_remote_car_24g_fire_send_cmd +2 mem_remote_car_24g_fire_send_length +2 mem_remote_car_24g_fire_send_payload +1 mem_remote_car_24g_fire_send_checksum + +15 mem_remote_car_24g_tx_temp + +2 mem_remote_car_no_data_timeout +2 mem_remote_car_no_data_timer + +0 mem_remote_car_soft_power +1 mem_remote_car_power_state +1 mem_remote_car_power_timer +1 mem_remote_car_power_off_timeout +1 mem_remote_car_power_starting_timeout +2 mem_remote_car_power_off_cb +2 mem_remote_car_power_starting_cb +2 mem_remote_car_power_standby_cb + +1 mem_remote_key_status +1 mem_remote_car_24g_status + +1 mem_remote_car_24g_auto_work_step +1 mem_remote_car_24g_pair_success_flag +1 mem_remote_car_24g_enter_lpm_enable +1 mem_remote_car_empty_packet +400 mem_24g_RC_head_ptr +) + + +( +// eeprom config +0xb0 REMOTE_PARAM_EEPROM_CONFIG_ADDR + +) + + +( +0x00 CONTROL_F_B_MOTOR +0x02 CONTROL_L_R_MOTOR +) + +( +0x00 KEY_MAP_TEN +0x01 KEY_MAP_LR +) + +( +0x00 CONTROL_F_B_TEN +0x02 CONTROL_L_R_TEN +0x03 CONTROL_L_R_LR +) + +( +0 KEY_CHECK +1 ROCKER_CHECK +) + +( +1 MOTOR_POSITIVE +2 MOTOR_NEGATIVE +) + +( +0 ROCKER_MIDDLE_KEY +1 ROCKER_POSITIVE_KEY +2 ROCKER_NEGATIVE_KEY +) + + Index: 1066_OTP_FLASH/format/app_shutter.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_shutter.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_shutter.format (working copy) @@ -0,0 +1,252 @@ + + +omemalloc( + +//////////////////////////////////// +//shutter common config +1 mem_shutter_bluetooth_type +//////////////////////////////////// + +//shutter config name by GPIO +1 mem_shutter_config_enable +2 mem_shutter_config_otp_base_address +1 mem_shutter_config_size +1 mem_shutter_config_select_gpio1 +1 mem_shutter_config_select_gpio2 +1 mem_shutter_config_select_gpio3 + +2 mem_shutter_config_user_otp_address +2 mem_shutter_config_eeprom_offset_addr + +//////// +2 mem_shutter_config_eeprom_start_flag +1 mem_shutter_config_user_size +/////// +1 mem_shutter_config_label +2 mem_shutter_config_otp_addr +/////////////////////////////////// + +//////////////////////////////////// +//classic shutter config +1 mem_classic_shutter_cable_unplug_conut +1 mem_classic_shutter_hid_disconn_count +2 mem_classic_shutter_random_mac_offset_addr +//////////////////////////////////// + +//////////////////////////////////// +//ble shutter config +1 mem_ble_shutter_enable_notify +2 mem_ble_shutter_reconn_dav_interval +2 mem_ble_shutter_discovery_adv_interval +2 mem_ble_shutter_reconn_timeout +2 mem_ble_shutter_reconn_timer +2 mem_ble_shutter_reconn_blink_on_time +2 mem_ble_shutter_reconn_blink_off_time +2 mem_ble_shutter_discovery_blink_on_time +2 mem_ble_shutter_discovery_blink_off_time + +2 mem_ble_shutter_interval_min +2 mem_ble_shutter_interval_max +2 mem_ble_shutter_latency +2 mem_ble_shutter_timeout + +2 mem_ble_shutter_interval_min_new +2 mem_ble_shutter_interval_max_new +2 mem_ble_shutter_latency_new +2 mem_ble_shutter_timeout_new + +//////////////////shutter sleep timeout////////////////// +2 mem_classic_shutter_discovery_timeout +2 mem_classic_shutter_connect_timeout +2 mem_ble_shutter_discovery_timeout +2 mem_ble_shutter_connect_timeout +2 mem_shutter_sleep_timeout +2 mem_shutter_sleep_timer + +///////////////////////////////////////////////////////////////// +1 mem_shutter_hard_soft_switch_case +1 mem_shutter_soft_switch_button_gpio +1 mem_shutter_soft_switch_power_state +1 mem_shutter_soft_switch_poweron_time +1 mem_shutter_soft_switch_poweroff_time +2 mem_shutter_soft_switch_poweron_callback_function +2 mem_shutter_soft_switch_poweroff_callback_function + + +0 mem_shutter_keyscan +1 mem_shutter_key_num +2 mem_cb_shutter_keycan +1 mem_shutter_key_conf0 +1 mem_shutter_key_conf1 +1 mem_shutter_key_conf2 +1 mem_shutter_key_conf3 +1 mem_shutter_key_conf4 +1 mem_shutter_key_conf5 +1 mem_shutter_key_conf6 +1 mem_shutter_key_conf7 + + +5 mem_key0_press +5 mem_key1_press +5 mem_key2_press +5 mem_key3_press +5 mem_key4_press +5 mem_key5_press +5 mem_key6_press +5 mem_key7_press + +5 mem_key0_release +5 mem_key1_release +5 mem_key2_release +5 mem_key3_release +5 mem_key4_release +5 mem_key5_release +5 mem_key6_release +5 mem_key7_release + +5 mem_ble_data_buffer1 +5 mem_ble_data_buffer2 +5 mem_ble_data_buffer3 +5 mem_ble_data_buffer4 +5 mem_ble_data_buffer5 +5 mem_ble_data_buffer6 +5 mem_ble_data_buffer7 +5 mem_ble_data_buffer8 +50 mem_ble_data_buffer9_58 + +5 mem_classic_data_buffer + +5 mem_classic_data_buffer1 +5 mem_classic_data_buffer2 +5 mem_classic_data_buffer3 +5 mem_classic_data_buffer4 +5 mem_classic_data_buffer5 +5 mem_classic_data_buffer6 +5 mem_classic_data_buffer7 +5 mem_classic_data_buffer8 +50 mem_classic_data_buffer9_58 + +1 mem_queue_each_size +1 mem_queue_length +1 mem_queue_curr_num +1 mem_queue_read_ptr +1 mem_queue_write_ptr +32 mem_queue_ele + + +170 mem_shutter_nv_data + +0 mem_shutter_led_struct_app_led +1 mem_shutter_led_struct_app_led_type +1 mem_shutter_led_struct_app_led_blink_count +1 mem_shutter_led_struct_app_led_gpio +2 mem_shutter_led_struct_app_led_on_time +2 mem_shutter_led_struct_app_led_off_time +2 mem_shutter_led_struct_app_led_on_callback +2 mem_shutter_led_struct_app_led_off_callback + +0 mem_shutter_power_off_led_style +1 mem_shutter_power_off_led_style_type +1 mem_shutter_power_off_led_style_blink_count +1 mem_shutter_power_off_led_style_gpio +2 mem_shutter_power_off_led_style_on_time +2 mem_shutter_power_off_led_style_off_time +2 mem_shutter_power_off_led_style_on_callback +2 mem_shutter_power_off_led_style_off_callback + +1 mem_shutter_soft_swtich_botton_down +11 mem_shutter_soft_swtich_led_struct_temp +1 mem_shutter_power_off_timeout +1 mem_shutter_power_off_timer + +) + + + + +( +0 BLE_SHUTTER +1 CLASSIC_SHUTTER +) + +( +0x0000 NVRAM_EEPROM_OFFSET +) + +( +0x1b3a SHUTTER_EEPROM_CONFIG_CRC +) + +( +5 MAX_QUEUE_NUM +5 SHUTTER_BLE_DATA_BUFFER +5 SHUTTER_CLASSIC_DATA_BUFFER +) + + +( +0x13 GATT_CONSUMER_NOTIFY_HANDLE +0x14 GATT_CONSUMER_WRITE_HANDLE +0x17 GATT_KEYBOARD_NOTIFY_HANDLE +0x18 GATT_KEYBOARD_WRITE_HANDLE +) + +( +//20ms +0x0020 FAST_ADV_INTERVAL_VALUE +//100ms +0x00a0 SLOW_ADV_INTERVAL_VALUE +) + + +( +0 ATT_BIT_NOTIFICATION +1 ATT_BIT_INDICATION +) +/////////////////////////////////////////////////////////////////////////////////////// + +( +0 HARD_SWITCH +1 SOFT_SWITCH +) + + +( +1 FLAG_SHUTTER_HID_DISCONN_TIMEOUT +5 FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT +) + +(//Data Rom Buffer Addr +382 BLE_GATT_LIST_SIZE +487 BT_SDP_LIST_SIZE +40 BLE_KEY_VALUE_LIST_SIZE +40 BT_KEY_VALUE_LIST_SIZE +0x913A BLE_SHUTTER_GATT_LIST +0x92B8 CLASSIC_SHUTTER_SDP_LIST +0x949F BLE_SHUTTER_KEY_VALUE_LIST +0x94C7 CLASSIC_SHUTTER_KEY_VALUE_LIST +) + + +(//soft switch power state +0 SS_STATE_POWER_UP +1 SS_STATE_POWER_ON +2 SS_STATE_POWER_OFF +) + +( +0 SS_POWER_STATE_OFFSET +1 SS_POWER_ON_TIME +2 SS_POWER_OFF_TIME +3 SS_POWER_ON_CB +5 SS_POWER_OFF_CB + +) + +( + +0x4FFE SIM_IIC_SCL_GPIO_NUM +0x4FFF SIM_IIC_SDA_GPIO_NUM + +) + Index: 1066_OTP_FLASH/format/app_usb.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/app_usb.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/app_usb.format (working copy) @@ -0,0 +1,179 @@ + +omemalloc( +500 mem_24g_dongle_head_ptr +) + + + +//class type +( +0x00 STANDARD_REQ +0x01 CLASS_REQ +0x02 MANUFACTURER_REQ +) +//Standard Request Codes +( +0x00 GET_STATUS // Code for Get Status +0x01 CLEAR_FEATURE // Code for Clear Feature +0x03 SET_FEATURE // Code for Set Feature +0x05 SET_ADDRESS // Code for Set Address +0x06 GET_DESCRIPTOR // Code for Get Descriptor +0x07 SET_DESCRIPTOR // Code for Set Descriptor(not used) +0x08 GET_CONFIGURATION // Code for Get Configuration +0x09 SET_CONFIGURATION // Code for Set Configuration +0x0A GET_INTERFACE // Code for Get Interface +0x0B SET_INTERFACE // Code for Set Interface +0x0C SYNCH_FRAME // Code for Synch Frame(not used) +) +//Standard Descriptor Types +( +0x01 DSC_DEVICE // Device Descriptor +0x02 DSC_CONFIG // Configuration Descriptor +0x03 DSC_STRING // String Descriptor +0x04 DSC_INTERFACE // Interface Descriptor +0x05 DSC_ENDPOINT // Endpoint Descriptor +) +//HID Descriptor Types +( +0x21 DSC_HID // HID Class Descriptor +0x22 DSC_HID_REPORT // HID Report Descriptor +) +//Define bmRequestType bitmaps +( +0x80 IN_DEVICE // Request made to device, + // direction is IN +0x00 OUT_DEVICE // Request made to device, + // direction is OUT +0x81 IN_INTERFACE // Request made to interface, + // direction is IN +0x01 OUT_INTERFACE // Request made to interface, + // direction is OUT +0x82 IN_ENDPOINT // Request made to endpoint, + // direction is IN +0x02 OUT_ENDPOINT // Request made to endpoint, +) +//HID Request Codes +( +0x01 GET_REPORT // Code for Get Report +0x02 GET_IDLE // Code for Get Idle +0x03 GET_PROTOCOL // Code for Get Protocol +0x09 SET_REPORT // Code for Set Report +0x0A SET_IDLE // Code for Set Idle +0x0B SET_PROTOCOL // Code for Set Protocol +0xF2 HID_REPORT_ID +64 EP0_PACKET_SIZE +6 EP1_PACKET_SIZE +16 HID_REPORT_SIZE +0x001B HID_REPORT_DESCRIPTOR_SIZE +) +//math cordic +( +0 TYPE_SIN +1 TYPE_ATAN +2 TYPE_MULT +3 TYPE_DIV +4 TYPE_ASIN +5 TYPE_SQRT +6 TYPE_COS +7 TYPE_TAN +) + +( +0 DFIFO0_IN_EMPTY +1 DFIFO1_IN_EMPTY +2 DFIFO2_IN_EMPTY +3 DFIFO3_IN_EMPTY +4 DFIFO0_OUT_EMPTY +5 DFIFO1_OUT_EMPTY +6 DFIFO2_OUT_EMPTY +7 DFIFO3_OUT_EMPTY +) + +( +4 USB_STATUS_SETUP +6 USB_STATUS_NAK +) + +( +1 USB_GOT_REPORT_REQ +2 USB_CONNECTED +3 USB_SLEEP +4 USB_RESUME +5 USB_SETIDLE_1 +) + +( +0x10 USB_EP1_KB +0x20 USB_EP2_MS +0x21 USB_EP2_MULTIKEY +0x01 MAC_BOOT_MODE +0x02 R_KEY +0x03 LR_KEY +) + +( +0x8ffa HID_KBDATA_ADDR +0x903a HID_MSDATA_ADDR +0x90fe HID_CONFDATA_ADDR +) + + +( +0x01ba PC_GET_REPORT +0x02ba PC_SET_REPORT +0x0200 PC_SET_REPORT_bValue +0x0000 PC_SET_REPORT_wIndex +0x0001 PC_SET_REPORT_bLength +0xba PC_REPORT_ID + +0x01 PC_GET_DATA +0x00 PC_GET_NONDATA +) + +( +//-------------------------------------------------- +// Define device states +0x00 DEV_ATTACHED // Device is in Attached State +0x01 DEV_POWERED // Device is in Powered State +0x02 DEV_DEFAULT // Device is in Default State +0x03 DEV_ADDRESS // Device is in Addressed State +0x04 DEV_CONFIGURED // Device is in Configured State +0x05 DEV_SUSPENDED // Device is in Suspended State +) + +( +// Define wIndex bitmaps +0x81 IN_EP1 // Index values used by Set and Clear +0x01 OUT_EP1 // commands for Endpoint_Halt +0x82 IN_EP2 +0x02 OUT_EP2 +0x83 IN_EP3 +0x03 OUT_EP3 +) + +( +0 EP0_STALL +1 EP1_IN_STALL +2 EP1_OUT_STALL +3 EP2_IN_STALL +4 EP2_OUT_STALL +5 EP3_IN_STALL +6 EP3_OUT_STALL +) + +( +// Define wValue bitmaps for Standard Feature Selectors +0x00 ENDPOINT_HALT // Endpoint_Halt feature selector +0x01 DEVICE_REMOTE_WAKEUP // Remote wakeup feature(not used) +0x00 BOOT_PROTOCOL +0x01 REPORT_PROTOCOL +0x01 USB_MAX_NUM_CFG +) + +( +0 TIMER_NAK +640 TIMER_NAK_DELAY +15 TIMER_WAKEUP +5000 TIMER_WAKEUP_DELAY +) + Index: 1066_OTP_FLASH/format/bt.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/bt.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/bt.format (working copy) @@ -0,0 +1,1028 @@ + + width = 32 + const length = 12000 + + /* ========= memory ============== */ +memalloc( +/* 00-0f most frequently used area */ +1 mem_le_adv_transmit +1 mem_le_adv_waitcnt +1 mem_le_adv_rcv +1 mem_le_req_rcv +1 mem_le_scanrsp_rcv +1 mem_le_conn_rcv + +1 mem_inquiryscan_waitcnt +1 mem_inquiryscan_rcvcnt +1 mem_pagescan_waitcnt +1 mem_pagescan_rcvcnt +1 mem_pagescan_rcvfhscnt +1 mem_slave_rcvcnt +1 mem_page_transmit +1 mem_page_rcv +1 mem_page_rcv_fhs +1 mem_master_rcvcnt + +/* 10-1f debug area */ +1 mem_fhs_wait_counter +1 mem_newconnto_counter +1 mem_inquiry_transmit +1 mem_inquiry_rcv +1 mem_fw_ver +1 mem_current_context +1 mem_le_ch_mapped +1 mem_last_freq +1 mem_rssi +1 mem_rx_type +2 mem_rx_hec_err +2 mem_rx_crc_err +2 mem_context_ptr +8 mem_display +8 mem_bcd + + /* context swappable area */ +1 mem_state +1 mem_mode +2 mem_tsniff +4 mem_sniff_anchor +6 mem_clk_offset +2 mem_rx_window +3 mem_plap +1 mem_puap +2 mem_pnap +1 mem_conn_handle +1 mem_arq +1 mem_lmp_to_send +1 mem_lmi_opcode +1 mem_lmo_reason +1 mem_op +1 mem_state_map +4 mem_supervision_timer +2 mem_supervision_to +1 mem_name_offset +1 mem_key_size +1 mem_conn_sm +12 mem_aco +16 mem_kc +1 mem_conn_timer +1 mem_sniff_attempt +1 mem_sniff_timeout +2 mem_dsniff +1 mem_amaddr +1 mem_lmo_opcode1 +1 mem_lmi_opcode1 +1 mem_lmo_reason1 +1 mem_lmo_tid1 +1 mem_lmo_opcode2 +1 mem_lmi_opcode2 +1 mem_lmo_reason2 +1 mem_lmo_tid2 + +3 mem_hci_version +2 mem_acl_pktlen +1 mem_sco_pktlen +2 mem_acl_pktcnt +2 mem_sco_pktcnt + +1 mem_current_sniff_attempt +1 mem_current_sniff_timeout +1 mem_sniff_timeout_temp +1 mem_nfreq_index_inq +1 mem_nfreq_index_page +1 mem_ninqy_index +1 mem_fhs_misc + + + +/* lpo related */ +4 mem_subsniff_instant +1 mem_subsniff_rate +2 mem_subsniff_tcmax +1 mem_subsniff_tsniff +1 mem_lpm_adjust +6 mem_sync_clke +1 mem_lpm_current_mult +4 mem_gpio_wakeup_low +4 mem_gpio_wakeup_high + + +/* sco & esco */ +1 mem_air_mode +1 mem_sco_asso_handle +2 mem_sco_handle +1 mem_esco_desco +1 mem_esco_type +1 mem_neogotiation_state +1 mem_saved_amaddr +1 mem_esco_arq +1 mem_esco_saved_arq +30 mem_sco_obuf +30 mem_sco_ibuf +1 mem_sco_poll + + + +//page +1 mem_npage_index +1 mem_page_mode +4 mem_page_clk + + +/* test related */ +2 mem_tst_pktcnt_sync +2 mem_tst_pktcnt_hec +2 mem_tst_pktcnt_crc +2 mem_tst_pktcnt_dmh +3 mem_tmp_buffer_head +80 mem_tmp_buffer + + +1 mem_tester_emulate +0 mem_temp_payload +1 test_mode_scenario +1 test_mode_hopping_mode +1 test_mode_tx_freq +1 test_mode_rx_freq +1 test_mode_power_mode +1 test_mode_poll_period +1 test_mode_packet_type +2 test_mode_data_length +1 mem_test_mode_old_debug_config +1 mem_tester_cnt + + +/*temp mem*/ +1 mem_temp_am_addr +1 mem_temp_arq + +// +2 mem_len +4 mem_clkn_bt +4 mem_clke_bt +4 mem_dpll_clkn +1 mem_connection_options + +1 mem_nameres_cnt +2 mem_txptr +2 mem_slot_offset + +//extm +1 extm_fhs_misc +1 extm_newconn_am_addr +3 extm_class +3 extm_lap +1 extm_uap +3 extm_nap + + +//debug +1 mem_debug_config +1 mem_lch_code +1 mem_fhs_am_addr +2 mem_dpll_error +1 mem_select_list_item +0 mem_temp_reconn_record +1 mem_record_bt_mode +6 mem_temp_lap +2 mem_list_item_ptr + +100 mem_eir +) + + +xmemalloc( +/* patch enable 0x4000-0x403f */ + +1 mem_patch00 +1 mem_patch01 +1 mem_patch02 +1 mem_patch03 +1 mem_patch04 +1 mem_patch05 +1 mem_patch06 +1 mem_patch07 +1 mem_patch08 +1 mem_patch09 +1 mem_patch0a +1 mem_patch0b +1 mem_patch0c +1 mem_patch0d +1 mem_patch0e +1 mem_patch0f +1 mem_patch10 +1 mem_patch11 +1 mem_patch12 +1 mem_patch13 +1 mem_patch14 +1 mem_patch15 +1 mem_patch16 +1 mem_patch17 +1 mem_patch18 +1 mem_patch19 +1 mem_patch1a +1 mem_patch1b +1 mem_patch1c +1 mem_patch1d +1 mem_patch1e +1 mem_patch1f +1 mem_patch20 +1 mem_patch21 +1 mem_patch22 +1 mem_patch23 +1 mem_patch24 +1 mem_patch25 +1 mem_patch26 +1 mem_patch27 +1 mem_patch28 +1 mem_patch29 +1 mem_patch2a +1 mem_patch2b +1 mem_patch2c +1 mem_patch2d +1 mem_patch2e +1 mem_patch2f +1 mem_patch30 +1 mem_patch31 +1 mem_patch32 +1 mem_patch33 +1 mem_patch34 +1 mem_patch35 +1 mem_patch36 +1 mem_patch37 +1 mem_patch38 +1 mem_patch39 +1 mem_patch3a +1 mem_patch3b +1 mem_patch3c +1 mem_patch3d +1 mem_patch3e +1 mem_patch3f + + /* 3 device contexts */ +80 mem_context +1 mem_current_amaddr +1 mem_lpm_mode +1 mem_device_option +1 mem_scan_mode +4 mem_last_clkn + + /* parameters */ +8 mem_features +3 mem_lap +1 mem_uap +2 mem_nap +1 mem_npage +3 mem_glap +3 mem_class +2 mem_iscan_window +2 mem_iscan_interval +2 mem_pscan_window +2 mem_pscan_interval +2 mem_page_interval +2 mem_page_window +2 mem_page_to +2 mem_inq_window +1 mem_fcomp_mul +1 mem_fcomp_div +2 mem_rx_window_init +2 mem_rx_window_sniff +2 mem_rf_init_ptr + + /* connection related */ +1 mem_last_type +1 mem_last_type_esco +1 mem_last_type_saved +2 mem_retransmission_cnt +4 mem_next_btclk + +1 mem_rf_rccal +1 mem_handle_num +1 mem_max_slot +1 mem_eir_enable + +/* AFH related */ +4 mem_afh_instant +2 mem_afh_error_total +1 mem_afh_cfg +1 mem_afh_new_mod +5 mem_afh_map_lo +5 mem_afh_map_hi +1 mem_afh_used +2 mem_afh_index +11 mem_afh_map_new +80 mem_afh_map +4 mem_afh_timer +10 mem_afh_classify_channel_map + + + /* lpm related */ +2 mem_chip_functions +2 mem_lpm_wake_lock +2 mem_lpm_interval +1 mem_lpm_overhead +1 mem_lpm_hibernate_switch +1 mem_esco_addr +1 mem_sniff_unint_lost +1 mem_ptt +4 mem_sleep_counter //should be 0x41fc in REVC +4 mem_sleep_counter_all +6 mem_sleep_clkn +3 mem_sniff_rcv +3 mem_sniff_lost +3 mem_clks_per_lpo + +1 mem_lpm_mult +1 mem_lpm_mult_timeout +1 mem_lpm_mult_cnt + +/* 8139-813b lpm_ctrl[31:12] */ +3 mem_lpm_config + +1 mem_lpm_xtalcnt +1 mem_lpm_buckcnt +1 mem_lpm_ldocnt +1 mem_lpm_isogate +1 mem_lpm_isogate_final +16 mem_saved_gpio // should be 0x421e in REVC +3 mem_saved_gsel +8 mem_saved_mark +1 mem_saved_spidctrl +2 mem_patch_ptr +2 mem_patch_len + +32 mem_timers + +/*LINK KEY*/ +1 mem_link_key_exists +16 mem_link_key + + +/* HCI */ +1 mem_hci_cmd +1 mem_hci_conn_handle +3 mem_hci_plap +1 mem_hci_puap +2 mem_hci_pnap + +/*Peripherals*/ +1 mem_uartd_rxitems_got_data +1 mem_uartd_rxitems_threshold +2 mem_uartd_rx_timeout + +1 mem_loadcode_times + +1 mem_tx_lch +2 mem_tx_len + +1 mem_tx_power + +1 mem_context_number + +1 mem_250k_freq_enable + +ifdef DEBUG_RF_INIT +1 mem_rf_init_data +endif +) + +(//bluetooth tx power +0 TX_POWER_0DB +1 TX_POWER_3DB +2 TX_POWER_5DB +3 TX_POWER_f3DB +4 TX_POWER_f5DB + +0x20 TX_POWER_PAIR +) + + +ifdef RAM_VERSION +0x4b17 rom_lpm_sleep +0x4b1d rom_lpm_enter_sleep +0x4b16 rom_lpm_write_ctrl +0x6b1a rom_otpd_read_data +0x6ada rom_otp_write +else +0x3b17 rom_lpm_sleep +0x59e0 rom_save_ucode + +0x4219 rom_mem_lpm_xtalcnt +0x423b rom_mem_patch_ptr +0x423d rom_mem_patch_len + +0x5b1a rom_otpd_read_data +0x5ada rom_otp_write +endif + /* context */ +( +0x01 coffset_mode +0x02 coffset_tsniff +0x04 coffset_sniff_anchor +0x08 coffset_clk_offset +0x0e coffset_rx_window +0x10 coffset_plap +0x16 coffset_conn_handle +0x17 coffset_arq + /* 3.0 only */ +0x18 coffset_lmp_to_send +0x1b coffset_op +0x1c coffset_state_map + /* le only */ +0x18 coffset_le_ch +0x19 coffset_le_hop +0x1a coffset_le_event_cnt + +80 context_size +1 context_num +) + +( +0 lpm_flag_wake +1 lpm_flag_loadcode +) + +/* ========= parameters ============== */ +( +0x0050 param_newconn_arq +0x0007 param_esco_addr +0x0010 param_conn_handle +0x01f0 param_conn_handle_comp +0x0020 param_newconnto +0x0008 param_pagerespto +0x0a00 param_snooze_setup_orig +0x5353 param_snooze_ahead_orig +0x00ff param_ninquiry +0x2000 param_page_to +0x0005 param_max_slot +0x0010 param_sco_poll + +/* 6Mhz clock setting */ +ifdef CLK6M +0x0721 param_tx_setup +0x06e8 param_rx_setup +0x04e8 param_rx_setup_earlier +0x0300 param_rf_setup +0x01d8 param_clke_cal +0x0500 param_conn_access +0x0400 param_conn_access_wider +200 param_pll_setup +else +/* 12Mhz clock setting */ +0x0e43 param_tx_setup +0x09d0 param_rx_setup_earlier +0x0600 param_rf_setup +0x03bb param_clke_cal +0x0600 param_conn_access +0x0800 param_conn_access_wider +0x0500 param_pll_setup // 120 is minimum +0x0d00 param_rx_setup // 114us before sync +2000 param_dpll_start_delay +endif + +110 param_lpm_fix +10 param_lpo_extra +200 param_lpm_adjmax + +ifdef SIM +20 param_hibernate_clks +3 param_chgpump_delay +else +-1 param_hibernate_clks +3000 param_chgpump_delay +endif + +3 param_featrue_ssp +0x0101 param_lmpext_ssp_enable +339 param_acl_pktlen +30 param_sco_pktlen +1 param_acl_pktcnt /*buffer acl pkt cnt*/ +7 param_sco_pktcnt + + +0x8fffff param_features0 +0x9d83fe param_features1 // not support afh +0x8359 param_features2 +0x000033 param_unap +0x001177 param_lap +0x9e8b33 param_glap +0x002540 param_class//0x180208 //0x002580//402500//240404 +0x12e904 param_hci_version +0x000a04 param_lmp_version//0x0a04 +0x000a06 param_lmp_version0 +0x12e9 param_lmp_subversion +0x0012 param_tisw +0x0012 param_tpsw +0x1000 param_tisi +0x0800 param_tpsi +0x0020 param_page_window +0x0020 param_inq_window +0x1c80 param_supervision_to +39 param_fcomp_div +2 param_fcomp_mul +6 param_name_len +0x535442 param_name +0x344950 param_name1 + + +) + +/* ======= packet types ========= */ +( +0x0 type_null +0x1 type_poll +0x2 type_fhs +0x3 type_dm1 +0x4 type_dh1 +0x5 type_hv1 +0x6 type_hv2 +0x7 type_hv3 +0x8 type_3dh1 +0x9 type_aux1 +0xa type_dm3 +0xb type_dh3 +0xe type_dm5 +0xf type_dh5 +0x10 type_id +0x11 type_shutdown +0x13 type_lmp +) + +/* ========== flag[6] =============== */ +( +0 always /* always 1 */ +1 true /* set/rstn by verify,compare,icompare (true) */ +2 positive /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output >= 0 */ +3 timeout /* read only, the timeout from timers */ +5 zero /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output == 0 */ +6 crc_failed /* level, cleared by hop_start */ +7 enable_white /* outside mux decide whether to load bt_clk or response_X */ +8 enable_parity /* level */ +9 enable_crc /* level */ +10 enable_hec /* level */ +11 decode_fec1 /* level */ +12 decode_fec2 /* level */ +13 decode_fec0 /* level */ +14 encrypt /* level */ +15 crc16 /* for caculate ccitt crc16 */ +16 swfine /* =0 stop_watch count based on oneslot =1 on 1 clock */ +20 rqst_freq /* pulse, to start calculating frequency */ +21 recalc /* pulse, to recalculate the fhs_parity */ +22 init_encrypt /* pulse, issued to initialize encrption */ +23 mhalfbnd /* half slot boundary of clke_rt, or when clke_bt[0] toggles */ +24 sync /* sync found as a result of correlation,set/rstn by correlate opcode */ +25 user10 /* user10 */ +26 kc_p_activate /* pulse to recalc the kc_p */ +27 encode_fec1 /* level */ +28 encode_fec2 /* level */ +29 encode_fec0 /* level */ +30 packet_end /* pulse */ +32 is_tx /* level */ +33 is_rx /* level */ +34 halfslot /* pulse, read only, when clkn_bt[0] toggles */ +35 oneslot /* pulse, read only, when clkn_bt[1] toggles */ +36 mslotbnd /* pulse, read only, when clke_bt[1] toggles */ +37 expire /* level, read only, when selected clock source exceed timeup value */ +38 meet /* level, read only, when selected clock source meet timeup value */ +39 tx_clear /* level, read only, indicate tx pipe is cleared */ +40 user /* user0 */ +41 master /* user1 */ +42 slave2 /* user2 */ +43 wake /* user3 */ +44 user2 /* user4 */ +45 match /* user5 */ +46 attempt /* user6 */ +47 user3 /* user7 */ +48 clknt /* user8 */ +49 user7 /* user9 */ +50 synchronize /* synchronize lpo and regular version of the clock */ +51 lpo_edge /* read only, 3 clocks after risling edge of lpo clock */ +52 blank /* C0 only, means pdata == 0 */ +53 modone /* set divide operation is done */ +54 le /* bluetooth 4.0 LE enable */ +55 aes_ready /* set when aes is ok */ +63 never /* read only, always 0 */ +) + +default flag = always + +/* ========== reg[6] =============== */ +( +0 mark /* for keeping strobes, more permanent */ +1 type /* save and verify during rx */ /* rw */ +2 temp /* general purpose register, 64 bits */ +3 contru /* contr uart */ +4 am_addr /* verify during rx, read and send during tx */ /* ro */ +5 contw /* last mem_addr during write */ +6 contr /* last mem_addr during read */ +7 queue /* the index of qset*,qisolate* commands, ie, if queue = 3, qset/qisolate operate on bit3 */ +8 debug /* can be wired out for observation */ +9 access /* the 72 bit access word */ +10 contwu /* contw uart */ +11 timeup /* when does certain counter expire */ +12 pwindow /* bit 71-61 of pdata; because on rx, bits shifts in from 71 down */ +13 fhs_parity /* re-gernated based on bt_adr( {nap,uap,lap} ) when recalc flag is pulsed */ +14 white_init /* init value of the whitening */ +15 crc24_init /* init crc24 lfsr, 24 bits */ +16 interrupts /* set interrupts, 40 bits */ +17 rega /* general purpose register, 32 bits */ +18 regb /* general purpose register, 32 bits */ +19 regc /* general purpose register, 17 bits */ +20 regab /* concat of {rega,regb}, thus 64 bits */ +21 radio_ctrl /* radio i/f direct i/o ctrl, check following "radio_ctrl" section */ +21 ctrl_reg /* 2023 and after */ +22 jtag_addr /* load jtag address field, lsb */ +23 freq_index /* 7 bit read only */ +24 jtag_data /* wdata to and rdata from jtag */ +25 clkn /* {clkn_bt, clkn_rt} */ +26 clke /* {clke_bt, clke_rt} */ +27 stop_watch +28 fhs_misc /* SR, SP, pscan mode */ +29 fhs_class /* class field in fhs */ +30 fhs0 /* read only, bit 0-71 of fhs word */ +31 fhs1 /* read only, bit 72-142 of fhs word */ +32 bt_adr /* r/w, the bt_addr to access gen and freq hopping, contain only lap and uap */ +33 bt_clk /* r/w, the bt_clk for freq hopping */ +34 clkn_bt /* read only, native bluetooth clock, free running 3.2KHz or controlled by RTHALFSLOT register */ +35 clkn_rt /* read only, native realtime clock, free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */ +36 freq_mode +/* wire even_train = freq_mode[4]; // odd even train */ +/* wire conn_mode = 3; // connection */ +/* wire iqpgscan_mode = 2; // slave in inquiry and page (not response) */ +/* wire iqpgresp_mode = 1; // slave in inquriy and page (response only) */ +/* wire inqypage_mode = 0; // master in inquiry and page(response or not response) */ +37 xin /* x parameter, read only */ +38 N_tx_slot /* the N factor in equations for Xi,Xp,Xprm,Xprs */ +39 auxcnt +40 clke_bt /* r/w, external bluetooth clock , free running 3.2KHz or controlled by RTHALFSLOT register */ +41 clke_rt /* r/w, external realtime clock, , free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */ +43 host_mode /* generic stuff for kick starts */ +44 lap +45 uap +46 nap +47 regext /* r/w extended 12x32bit registers, indexed by regext_index */ +48 alarm /* r/w, lpo wake up time, this is also how lpo and current clock keep sync */ +49 lpo_time /* read only, this is the value to be copied back to clkn/clke after wakeup */ +50 kc_ls /* secret key, 71: 0 */ +51 kc_ms /* secret key, 127:72 */ +52 g1l /* encryption length */ +53 mask3ff /* for mask 0x3ff operation */ +54 aes_ctrl +56 regext_index /* index of regext */ +57 loopcnt +58 stack /* current return address */ +59 stack_ptr /* stack depth */ +61 pc /* direct goto */ +62 null /* to nowhere */ +63 pdata /* the shift register */ +) +default reg = pdata + +/* regext_index */ +( +0 regidx_data +4 regidx_key +8 regidx_xor +12 regidx_result +) +/* ========== radio_ctrl========= */ +( +0 TXGFSK +1 PSK +2 PSK3M +3 RESET +) +/* assign BPWR = radio_ctrl[0]; */ +/* assign PARAMP = radio_ctrl[1]; */ +/* assign XTALPU = radio_ctrl[2]; */ +/* assign SYNTHPU = radio_ctrl[3]; */ +/* assign TXPU = radio_ctrl[4]; */ +/* assign RXPU = radio_ctrl[5]; */ +/* assign SLCTRL = radio_ctrl[6]; */ +/* assign XTALSEL_MUX_SEL = radio_ctrl[7] */ + + +/* =========== destination[4] ============== */ +( +0 bucket +1 rxf +2 back +3 mod +) +default dest = bucket + +/* =========== source[4] ============= */ +( +1 txf +3 demod +) +default source = 0 + + +/* ============== mark ============= *//*0 - 47 */ +( + +0 mark_fhs_eir +1 mark_rxbuf_inuse +2 mark_tx_l2cap +3 mark_switch_initiated +4 mark_accept_switch +5 mark_loopback +7 mark_esco +8 mark_esco_rxok +9 mark_context +10 mark_am_addr_broadcast +11 mark_fhs_already_good +12 mark_page_trainb +13 mark_lpm_mult_enable +14 mark_usb_flag +15 mark_old_packet +16 mark_longpacket +17 mark_testmode +18 mark_ar2 +19 mark_h5tx_rp +20 mark_h5tx_crc +21 mark_h5tx_retransmit +22 mark_h5rx_pstart +23 mark_h5_sync +24 mark_h5_reinit +28 mark_inquiry_on +29 mark_inquiry_state +30 mark_inquiry_trainb +31 mark_periodical_diac +32 mark_all_diac +33 mark_slave_in_rand_accepted +34 mark_reconn_recieve_switch +35 mark_isstr +36 mark_loadcode +37 mark_ext_patch +38 mark_24g +39 mark_24g_conext +40 mark_eeprom_size +// REVAB:max 35, REVC:max 63 +41 mark_ble_tx_md +42 mark_ble_rx_md +43 mark_otp_encrypt +) + +( +1 reload_type_otp +2 reload_type_spi +3 reload_type_iic +) + + +/* ============== soft timers ============== */ +( +0 le_adv_interval_timer +1 inquiry_length_timer +2 le_scan_interval_timer +3 page_length_timer +4 iscan_interval_timer +5 pscan_interval_timer +6 switch_wait_timer +7 enpt_delay_timer +8 page_interval_timer +9 key_scan_timer +10 smp_pairing_timer +11 ui_led_blink //led timer 可扩展 +12 ui_led_blink1 +13 ui_led_blink2 + +) + +( +1 hci_cmd_inquiry +2 hci_cmd_inquiry_cancel +3 hci_cmd_remote_name_req +4 hci_cmd_remote_feature_req +5 hci_cmd_create_conn +6 hci_cmd_disconn +7 hci_cmd_accept_conn +8 hci_cmd_reject_conn +9 hci_cmd_pair +10 hci_cmd_nopair +11 hci_cmd_linkkey +12 hci_cmd_nokey +13 hci_cmd_auth +14 hci_cmd_stopencrypt +15 hci_cmd_startencrypt +16 hci_cmd_setup_sco +17 hci_cmd_disconn_sco +18 hci_cmd_in_sniff +19 hci_cmd_exit_sniff +20 hci_cmd_remote_version_req +21 hci_cmd_remote_ext_features_req +22 hci_cmd_io_cap +23 hci_cmd_role_discovery +24 hci_cmd_role_switch +25 hci_cmd_accept_with_switch +26 hci_cmd_detach +27 hci_cmd_le_create_conn +28 hci_cmd_accept_sco_conn +80 hci_cmd_wait_remote_feature +81 hci_cmd_wait_remote_ext_feature +82 hci_cmd_wait_remote_name +) + + + +/* ============== debug ============= */ +( +0 debug_neg_skew +1 debug_bitbucket +2 debug_dont_clear_got_tx +3 debug_scatter_enabled +4 debug_tx_fixed_freq +5 debug_rx_fixed_freq +6 debug_tx_pattern +) + +/* ============== tester_emulator ============= */ +( +0 tester_fixed_flow +1 tester_fixed_flow_polarity +2 tester_change +3 tester_exit +4 tester_pattern_test +5 tester_whitening_change +6 tester_fixed_freq +7 tester_no_whitening +) + +/* ============== mode ==========*/ +( +0 mode_le +1 mode_master +2 afh_enable +3 afh_change +4 send_sco_when_slave +5 first_seqnx +) + +/* ============== state_map ==========*/ +( +0 smap_lmptidinit +1 smap_lmptid +2 smap_encryption +3 smap_name_res +4 smap_name_req +5 smap_edr +6 smap_rxlmp +7 smap_rxl2cap +) +( +0 state_inconn +1 state_insniff +2 state_insco +3 state_inpage +4 state_conn_comp +5 state_init_seq +6 state_combkey +7 state_linkkey +) +( +0 op_send_sres +1 op_auth_req +2 op_inrand_req +3 op_disconn +4 op_stop_enc +5 op_start_enc +6 op_txl2cap +7 op_pkt_comp +) + + +/* ============== arq [3] ================ */ +( +0 flow +1 arqn +2 seqn +3 wack +4 flowx /* out */ /* not really in memory */ +5 arqnx /* out */ +6 seqnx /* out */ +7 bcast1 /* first broadcast received */ +) + +/* arq {flow,arqn,seqn}, read/write */ +/* [0] flow r/w acl full status of the other, store during rx, checked during tx */ +/* [1] arqn r/w ack of the other during rx (ack tx fifo), */ +/* [2] seqn r/w seqn of the other, check during rx */ +/* arqx {flowx,arqnx,seqnx} */ +/* [0] flowx r/o flow back to the other, 1 alow send, 0 not to send, read only tx */ +/* [1] arqnx r/w ack to the other, set by rx, send back on tx */ +/* [2] seqnx r/w toggled by arqn, to be send during tx */ + +( +0 llid0 +1 llid1 +2 nesn +3 sn +4 md +5 wak +) + +/* AFH flags */ +( +0 AFH_CFG_ON +1 AFH_CFG_TIMER +2 send_lmp_set_afh +3 AFH_CFG_REPORT_MODE +4 AFH_CFG_MASTER_SENT_REQ +) + +/* LLID CODE */ +( +1 LLID_L2CAP_CONT +2 LLID_L2CAP_START +3 LLID_LMP +) + +/* ============== master_state ==========*/ +( +0 master_in_idle +1 master_in_inquiry +2 master_in_page +10 master_in_becoming_slave +15 master_in_conn +) +( +0 newrev_feature_bettx +1 newrev_feature_betplltx +2 newrev_feature_skip_retransmit +3 newrev_feature_init_radio_after_sleep +4 newrev_feature_no_lpolog +) +/*************mem_pincode_state****************/ +( +0 pincode_state_ilde +1 pincode_state_wait_pincode +2 pincode_state_pincode_ready +) + + +// lpm_write +( +1 lpmreg_sel_ctrl +2 lpmreg_sel_ctrl2 +4 lpmreg_sel_gpiolow +8 lpmreg_sel_gpiohigh +16 lpmreg_sel_counter +) + +//scan_mode +( +0 inq_scan_mode +1 page_scan_mode +2 page_inq_enable +) +//mem_neogotiation_state +( + 0 default_neogotiation_state + 1 prarm_neogotiation +) + +//mem_lpm_wake_lock +( +0 wake_lock_ble_rx +1 wake_lock_ble_tx + +3 wake_lock_key_press +4 wake_lock_ble_tx_patch +5 wake_lock_uart_tx +6 wake_lock_uart_rx +7 wake_lock_button +8 wake_lock_cmd +9 wake_lock_app +10 wake_lock_lmp_tx +11 wake_lock_lmp_rx +12 wake_lock_l2cap_tx +13 wake_lock_l2cap_rx +14 wake_lock_ipc_c512bt +15 wake_lock_ipc_bt2c51 + +) + +( +0 bt_disabled +1 ble_disabled +2 module_disable + +) + +( +0x33 REC_3_MODE +0x34 REC_4_MODE +0x35 REC_4_MODE_STATIC_ADDRESS +0x36 REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS +0x37 REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS +) + + +//sniff UART_TX UART_RX +( +6 UART_WAKEUP_TX +7 UART_WAKEUP_RX +) + + Index: 1066_OTP_FLASH/format/command.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/command.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/command.format (working copy) @@ -0,0 +1,1396 @@ + +/* Parse Command: +TX: take bits from tx fifo, jam it into shift and a destination (rf,bucket) +RX: take bits from demod, jam it into shift and a destination (acl,sco,bucket) */ + +/* Inject Command: +TX: 0 into shift, send tail of shift into a destination (rf,bucket) +RX: 0 into shift, send tail of shift into a destination (acl,sco,bucket) */ + +format + ! 15 romdat + % d0 + % d1 + % d2 + % d3 + [8] d0 + [8] d1 + [8] d2 + [8] d3 +end + +format + ! 15 enable /* set flag to 1 */ + % flag + [5] opcode + [6] 1 + [6] flag + [6] null + [9] 0 +end + /* High 5 bytes of channel map */ +format + ! 15 pulse /* set flag to 1 */ + % flag + [5] opcode + [6] 1 + [6] flag + [6] null + [9] 0 +end + +format + ! 15 disable /* set flag to 0 */ + % flag + [5] opcode + [6] 2 + [6] flag + [6] null + [9] 0 +end + +format + ! 15 set0 /* set selected bit of reg to 0 */ + % immediate + % reg + [5] opcode + [6] 9 + [6] never + [6] reg + [9] immediate +end + +format + ! 15 set1 /* set selected bit of reg to 1 */ + % immediate + % reg + [5] opcode + [6] 9 /* alu op demux */ + [6] always + [6] reg + [9] immediate +end + +format + ! 15 setflag /* set selected bit of the reg to the polarity of the flag */ + % flag + % immediate + % reg + [5] opcode + [6] 9 + [6] flag + [6] reg + [9] immediate +end + +format + ! 15 nsetflag /* set the selected bit of the reg to the opposite polarity of the flag */ + % flag + % immediate + % reg + [5] opcode + [6] 0x29 + [6] flag + [6] reg + [9] immediate +end + +format + ! 15 setflip /* invert the selected bit of the reg */ + % immediate + % reg + [5] opcode + [6] 10 /* this is alu op */ + [6] always + [6] reg + [9] immediate +end + +format + ! 0x1f qset1 /* demux the lowest 4 bit of queue and OR it with regr into regw */ + % reg /* in short, set the bit in reg indexed by queue to 1 */ + [5] opcode + [6] 9 + [6] always + [6] reg + [9] 0 +end + +format + ! 0x1f qset0 /* demux the lowest 4 bit of queue and AND it with regr into regw */ + % reg /* in short, set the bit in reg indexed by queue to 0 */ + [5] opcode + [6] 9 + [6] never + [6] reg + [9] 0 +end + +format + ! 0x1f qsetflag /* set the bit in reg index by queue to same as flag */ + % flag + % reg + [5] opcode + [6] 9 + [6] flag + [6] reg + [9] 0 +end + +format + ! 0x1f nqsetflag /* set the bit in the reg index by queue to opposite of flag */ + % flag + % reg + [5] opcode + [6] 0x29 + [6] flag + [6] reg + [9] 0 +end + +format + ! 0x1f qsetflip /* flip the bit in reg index by queue */ + % reg + [5] opcode + [6] 10 + [6] always + [6] reg + [9] 0 +end + +format + ! 1 parse /* take bits out of source (sco_tx,tx_buffer,rx-elas) into pdata and dest (sco_rx,rx_fifo,tx-elas) */ + % source + % dest + % immediate + [5] opcode + [4] source /* voice, data, demod */ + [2] 0 + [6] 0 + [2] 0 /* parse or inject */ + [4] dest /* acl, sco, mod, bucket */ + [9] immediate /* number of bits to parse off */ +end + +format + ! 1 inject /* shift data from pdata into destination (tx-elas,rx_fifo,sco_rx) */ + % destination + % immediate + [5] opcode + [4] 0 + [2] 0 + [6] 1 + [2] 0 + [4] destination /* acl,sco,mod,bucket */ + [9] immediate /* number of bits to be injected */ +end + +format + ! 1 iinject + % destination + % regr + [5] opcode + [6] regr /* contain the number of bits to inject */ + [6] 3 + [2] 0 + [4] destination /* acl,sco,mod,bucket */ + [9] 0 +end + +format + ! 1 stuff /* automatic parse, stuff_counter decrement on every bit until hits zero */ + % source + % destination + [5] opcode + [4] source + [2] 0 + [6] 2 + [2] 0 + [4] destination + [9] 0 +end + +format /* force immediate value into registers */ + ! 3 force + % immediate + % regw + [5] opcode + [6] 0 + [6] 0 /* alu operation force */ + [6] regw /* destination register */ + [9] immediate +end + +format /* force whatever is on shift_reg to regsiters */ + ! 0x13 iforce + % regw + [5] opcode + [6] 0 + [6] 0 /* alu operation force */ + [6] regw /* destination register */ + [9] 0 +end + +format /* force immediate value into registers */ + ! 3 increase + % immediate + % reg + [5] opcode + [6] reg + [6] 1 /* alu operation add */ + [6] reg + [9] immediate +end + +format + ! 3 pincrease + % immediate + [5] opcode + [6] -1 /* pdata */ + [6] 1 /* alu add */ + [6] -1 /* back to pdata */ + [9] immediate +end + +format /* force immediate value into registers */ + ! 3 and_into + % immediate + % reg + [5] opcode + [6] reg + [6] 2 /* alu operation and into */ + [6] reg + [9] immediate +end + +format + ! 3 and + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 2 /* alu operation and into */ + [6] regw + [9] immediate +end + +format + ! 0x13 iand /* pdata & regr -> regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 2 /* alu operation and into */ + [6] regw + [9] 0 +end + + +format /* and whatever is in shiftreg with reg */ + ! 0x13 iand_into + % reg + [5] opcode + [6] reg + [6] 2 /* alu operation and into */ + [6] reg + [9] 0 +end + +format + ! 3 or_into + % immediate + % reg + [5] opcode + [6] reg + [6] 3 /* alu operation or into */ + [6] reg + [9] immediate +end + +format + ! 3 or + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 3 /* alu operation or into */ + [6] regw + [9] immediate +end + +format + ! 0x13 ior + % regr + % regw + [5] opcode + [6] regr + [6] 3 /* alu operation or into */ + [6] regw + [9] 0 +end + +format + ! 0x13 ior_into + % reg + [5] opcode + [6] reg + [6] 3 /* alu operation or into */ + [6] reg + [9] 0 +end + +format + ! 3 skip_to /* jump to location stored in reg */ + % reg + [5] opcode + [6] reg + [6] 4 /* alu operation copy */ + [6] rom_addr + [9] 0 +end + +format + ! 3 copy + % regr + % regw + [5] opcode + [6] regr + [6] 4 /* alu operation copy */ + [6] regw + [9] 0 +end + +format + ! 3 deposit /* copy the register content thru alu to shift register, not prealigned like preload */ + % reg + [5] opcode + [6] reg + [6] 4 /* alu operation copy */ + [6] -1 /* pdata */ + [9] 0 +end + +format + ! 3 icopy /* copy the shift register lsb content directly to register, not aligned */ + % regw + [5] opcode + [6] -1 /* pdata */ + [6] 4 /* alu copy */ + [6] regw + [9] 0 +end + +format + ! 3 add + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 1 + [6] regw + [9] immediate +end + +format + ! 0x13 iadd /* regr + pdata -> regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 1 + [6] regw + [9] 0 +end + +format + ! 3 sub /* immediate - regr -> regw */ + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 12 + [6] regw + [9] immediate +end + +format + ! 0x13 isub /* pdata - regr -> regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 12 + [6] regw + [9] 0 +end + + +format + ! 3 flip + % immediate + % reg + [5] opcode + [6] reg + [6] 5 + [6] reg + [9] immediate +end + +format + ! 0x13 iflip /* use shift register as immediate to do xor */ + % regr + % regw + [5] opcode + [6] regr + [6] 5 + [6] regw + [9] 0 +end + +format + ! 3 xor + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 5 + [6] regw + [9] immediate +end + +format + ! 3 xor_into + % immediate + % reg + [5] opcode + [6] reg + [6] 5 + [6] reg + [9] immediate +end + +format + ! 0x13 ixor /* pdata xor regr and store result in regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 5 + [6] regw + [9] 0 +end + +format + ! 3 invert + % regr + % regw + [5] opcode + [6] regr + [6] 8 + [6] regw + [9] 0 +end + +format + ! 3 pinvert /* invert pdata into itself */ + [5] opcode + [6] -1 + [6] 8 + [6] -1 + [9] 0 +end + +format + ! 3 div /* regr div immediate div */ + % reg + % immediate + [5] opcode + [6] reg + [6] 13 /* generate diven pulse to div */ + [6] null + [9] immediate +end + +format + ! 0x13 idiv /* pdata div regr data ready at most after 41 nops */ + % reg + [5] opcode + [6] reg + [6] 13 /* generate diven pulse to div */ + [6] null + [9] 0 +end + +format + ! 3 remainder /* harvest div remainder */ + % regw + [5] opcode + [6] 0 + [6] 14 + [6] regw + [9] 0 +end + +format + ! 3 quotient /* harvest div quotient */ + % regw + [5] opcode + [6] 0 + [6] 15 + [6] regw + [9] 0 +end + +format + ! 3 rshift + % regr + % regw + [5] opcode + [6] regr + [6] 6 + [6] regw + [9] 0 +end + +format + ! 3 rshift2 + % regr + % regw + [5] opcode + [6] regr + [6] 22 + [6] regw + [9] 0 +end + +format + ! 3 rshift3 + % regr + % regw + [5] opcode + [6] regr + [6] 18 + [6] regw + [9] 0 +end + +format + ! 3 rshift4 + % regr + % regw + [5] opcode + [6] regr + [6] 35 + [6] regw + [9] 0 +end + +format + ! 3 rshift8 + % regr + % regw + [5] opcode + [6] regr + [6] 25 + [6] regw + [9] 0 +end + +format + ! 3 rshift16 + % regr + % regw + [5] opcode + [6] regr + [6] 34 + [6] regw + [9] 0 +end + +format + ! 3 rshift32 + % regr + % regw + [5] opcode + [6] regr + [6] 30 + [6] regw + [9] 0 +end + +format + ! 3 lshift + % regr + % regw + [5] opcode + [6] regr + [6] 7 + [6] regw + [9] 0 +end + +format + ! 3 lshift2 + % regr + % regw + [5] opcode + [6] regr + [6] 23 + [6] regw + [9] 0 +end + +format + ! 3 lshift8 + % regr + % regw + [5] opcode + [6] regr + [6] 26 + [6] regw + [9] 0 +end + + +format + ! 3 lshift3 + % regr + % regw + [5] opcode + [6] regr + [6] 19 + [6] regw + [9] 0 +end + +format + ! 3 lshift4 + % regr + % regw + [5] opcode + [6] regr + [6] 36 + [6] regw + [9] 0 +end + + +format + ! 3 lshift16 + % regr + % regw + [5] opcode + [6] regr + [6] 32 + [6] regw + [9] 0 +end + +format + ! 3 random /* random number into regw */ + % reg + [5] opcode + [6] 0 + [6] 20 + [6] reg + [9] 0 +end + +format /* bit reverse within a byte */ + ! 3 reverse + % reg + % regw + [5] opcode + [6] reg + [6] 27 + [6] regw + [9] 0 +end + +format + ! 3 priority /* priority encode reg into regw, lsb is the top priority, ie, priority(8'b00010000) = 4 */ + % reg + % regw + [5] opcode + [6] reg + [6] 21 + [6] regw + [9] 0 +end + +format + ! 7 setsect /* set a section of pdata */ + % section /* 0 sets 17:0 of pdata with set_data, 1 sets 35:18, 2 sets 53:36, 3 sets 71:54 */ + % set_data + [5] opcode + [7] 0 + [2] section + [18] set_data +end + +format + ! 10 preload /* load stuff into pdata according to fhs format, check us.v */ + % reg + [5] opcode + [6] reg + [6] 0 + [6] -1 + [9] 0 +end + +format /* load register with pdata content, according to fhs format, check us.v */ + ! 10 ialigned /* all bits are in position */ + % regw + [5] opcode + [6] -1 + [6] 0 + [6] regw + [9] 0 +end + +format /* load register to another according to fhs format */ + ! 10 aligned + % regr + % regw + [5] opcode + [6] regr + [6] 0 + [6] regw + [9] 0 +end + +format + ! 4 branch + % addr + % flag + [5] opcode + [6] 1 + [6] flag + [15] addr +end + +format + ! 4 call + % addr + % flag + [5] opcode + [6] 2 + [6] flag + [15] addr +end + +format + ! 4 rtn + % flag + [5] opcode + [6] 3 + [6] flag + [15] 0 +end + +format + ! 0x0c store /* write to memory, data from pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x0c hstore /* write to memory, data from pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x1c istore /* write to memory, data from pdata, address from regr then mem_ptr */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 0 + [4] num_bytes + [15] 0 +end + +format + ! 0x0d fetch /* read from memory, data into pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x0d hfetch /* read from memory, data into pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x0d crc /* read from memory, count from loopcnt, put crc result into pdata */ + % addr + [5] opcode + [6] 0 + [1] 0 + [1] 0 + [4] 0 + [15] addr +end + +format + ! 0x1d icrc /* read from memory, address from reg, count from loopcnt, put crc result into pdata */ + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 0 + [4] 0 + [15] 0 +end + + +format + ! 0x1d ifetch /* read from memory, data into pdata, address from regr then mem_ptr */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 0 + [4] num_bytes + [15] 0 +end + +format + ! 0x0c storet /* write to memory, data from temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x0c hstoret /* write to corereg, data from temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x1c istoret /* write to memory, data from temp, address from regr won't increment */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 1 + [4] num_bytes + [15] 0 +end + +format + ! 0x0d fetcht /* read from memory, data into temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x0d hfetcht /* read from corereg, data into temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x1d ifetcht /* read from memory, data into temp, address from regr won't increment */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 1 + [4] num_bytes + [15] 0 +end + +format + ! 0x0e jam + % immediate + % addr + [5] opcode + [3] 0 + [1] 0 /* msb */ + [15] addr + [8] immediate +end + +format + ! 0x0e hjam + % immediate + % addr + [5] opcode + [3] 0 + [1] 1 /* msb */ + [15] addr + [8] immediate +end + +format /* 0x242... */ + ! 4 nbranch + % addr + % flag + [5] opcode + [1] 1 + [5] 1 + [6] flag + [15] addr +end + +format + ! 4 ncall + % addr + % flag + [5] opcode + [1] 1 + [5] 2 + [6] flag + [15] addr +end + +format + ! 4 nrtn + % flag + [5] opcode + [1] 1 + [5] 3 + [6] flag + [15] 0 +end + +format + ! 4 nop + % addr /* no-op for addr+2 clocks */ + [5] opcode + [6] 0 + [6] 0 /* always */ + [15] addr +end + +format + ! 4 clear_stack + [5] opcode + [6] 4 + [6] 0 /* always */ + [15] 0 +end + +format + ! 6 until + % reg + % flag + [5] opcode + [6] reg + [6] flag + [6] 1 + [9] 0 +end + +format + ! 6 correlate /* quit if 1. flag is true 2, regr time up 3, found sync,(cond_true) */ + % reg /* expire counter to check against */ + % flag + [5] opcode + [6] reg + [6] flag + [6] 2 /* correlate */ + [9] 0 +end + +format + ! 5 compare /* sets cond flag, if reg equals immediate */ + % immediate + % reg + % mask + [5] opcode + [6] reg + [3] 0 + [9] mask + [9] immediate +end + +format + ! 0x15 icompare /* sets cond flag, if reg equals pdata */ + % mask + % reg + [5] opcode + [6] reg + [3] 0 + [9] mask + [9] 0 +end + +format /* sets cond. flag, if reg equals LS half of shift reg with MS half of reg being mask */ + ! 5 iverify + % reg + [5] opcode + [6] reg + [3] 2 + [18] 0 +end + +format + ! 0x15 qisolate1 + % reg + [5] opcode + [6] reg + [3] 3 + [18] -1 +end + +format + ! 0x15 qisolate0 + % reg + [5] opcode + [6] reg + [3] 3 + [18] 0 +end + + /* REVAB bug: cannot access bit above 35 */ +format + ! 5 isolate1 + % addr + % reg + [5] opcode + [6] reg + [3] 3 + [9] -1 + [9] addr +end + +format + ! 5 isolate0 + % addr + % reg + [5] opcode + [6] reg + [3] 3 + [9] 0 + [9] addr +end + +format + ! 11 setarg + % immediate + [5] opcode + [27] immediate +end + +format + ! 0x1b arg + % immediate + % reg + [5] opcode + [6] reg + [21] immediate +end + + +format + ! 0 sleep + [5] opcode + [27] 0 +end + +format + ! 0 snooze + [5] opcode + [6] -1 + [21] 0 +end + +format + ! 0 revision + % rev_num + [5] opcode + [27] rev_num +end + +format + ! 0x18 loop /* branch when loopcnt is NOT zero, and decrease loopcnt */ + % addr + [5] opcode + [4] 4 + [8] 0 + [15] addr +end + +format + ! 0x18 beq /* branch when pdata is equal to immediate */ + % imme + % addr + [5] opcode + [4] 0 + [8] imme + [15] addr +end + +format + ! 0x18 bne /* branch when pdata is NOT equal to immediate */ + % imme + % addr + [5] opcode + [4] 1 + [8] imme + [15] addr +end + +format + ! 0x18 rtneq /* return when pdata is equal to immediate */ + % imme + [5] opcode + [4] 2 + [8] imme + [15] 0 +end + +format + ! 0x18 rtnne /* return when pdata is NOT equal to immediate */ + % imme + [5] opcode + [4] 3 + [8] imme + [15] 0 +end + +format + ! 0x18 bbit1 /* branch when pdata's imme bit is 1 */ + % imme + % addr + [5] opcode + [4] 5 + [8] imme + [15] addr +end + +format + ! 0x18 bbit0 /* branch when pdata's imme bit is 0 */ + % imme + % addr + [5] opcode + [4] 6 + [8] imme + [15] addr +end + +format + ! 0x18 rtnbit1 /* return when pdata's imme bit is 0 */ + % imme + [5] opcode + [4] 7 + [8] imme + [15] 0 +end + +format + ! 0x18 rtnbit0 /* return when pdata's imme bit is 0 */ + % imme + [5] opcode + [4] 8 + [8] imme + [15] 0 +end + +format + ! 8 bpatch + % imme + % addr + [5] opcode + [4] 9 + [8] imme + [15] addr +end + +format + ! 8 bpatchx + % imme + % addr + [5] opcode + [4] 14 + [8] imme + [15] addr +end + +format + ! 0x18 bmark1 /* branch when mark's imme bit is 1 */ + % imme + % addr + [5] opcode + [4] 10 + [8] imme + [15] addr +end + +format + ! 0x18 bmark0 /* branch when mark's imme bit is 0 */ + % imme + % addr + [5] opcode + [4] 11 + [8] imme + [15] addr +end + +format + ! 0x18 rtnmark1 /* return when mark's imme bit is 0 */ + % imme + [5] opcode + [4] 12 + [8] imme + [15] 0 +end + +format + ! 0x18 rtnmark0 /* return when mark's imme bit is 0 */ + % imme + [5] opcode + [4] 13 + [8] imme + [15] 0 +end + + +format + ! 3 mult /* immediate mult regr */ /* the product will be ready 17 clks later */ + % immediate /* use "product" instruction to get the result */ + % reg + [5] opcode + [6] reg + [6] 16 /* generate diven pulse to div */ + [6] null + [9] immediate +end + +format + ! 0x13 imult /* pdata mult regr */ /* the product will be ready after 15 nops */ + % reg /* use product opcode to get the result */ + [5] opcode + [6] reg + [6] 16 /* generate mult pulse to multiplier */ + [6] null + [9] 0 +end + +format + ! 3 mul32 /* immediate mult regr */ + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 31 + [6] regw + [9] immediate +end + +format + ! 0x13 imul32 /* pdata mult regr 32x32=64bit */ + % regr + % regw + [5] opcode + [6] regr + [6] 31 + [6] regw + [9] 0 +end + +format + ! 3 product /* harvest mult product */ + % regw + [5] opcode + [6] 0 + [6] 17 + [6] regw + [9] 0 +end + +format + ! 3 byteswap + % regr + % regw + [5] opcode + [6] regr + [6] 33 + [6] regw + [9] 0 +end + +format + ! 3 shasx /* SHA256 Sx operation, immediate is Sx */ + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 28 + [6] regw + [9] immediate +end + + +format + ! 0x13 regexrot /* regext[0] <- regext[7], regext[1] <- regext[0], regext[2] <- regext[1] ... */ + [5] opcode + [6] 0 + [6] 29 + [6] null + [9] 0 +end + Index: 1066_OTP_FLASH/format/hci.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/hci.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/hci.format (working copy) @@ -0,0 +1,570 @@ + + +memalloc( +1 mem_h5rx_ackcnt +1 mem_check_err_acl_cont + +1 mem_rp_packets +2 mem_packet_type + +2 mem_hci_sniff_conn_handle +2 mem_hci_sniff_max_interval +2 mem_hci_sniff_min_interval +2 mem_hci_sniff_attempt +2 mem_hci_sniff_timeout +2 mem_voice_setting +1 mem_retransmission_effort +2 mem_sco_ptype +3 mem_extm_uap_restore + +2 mem_h5rx_rptr +1 mem_h5rx_ack +1 mem_h5tx_ack +2 mem_h5tx_rptr +2 mem_h5tx_wptr +2 mem_h5tx_free +1 mem_h5rx_tmp +1 mem_h5tx_seq + +2 mem_hci_acl_queue_wptr +2 mem_hci_acl_queue_rptr +2 mem_hci_acl_queue_end +1 mem_hci_acl_queue_wcnt +1 mem_hci_acl_cnt + +2 mem_hci_acl_tx_trigger_wptr //tx via uart + + +1 mem_hci_curr_len +2 mem_hci_curr_target +) + +xmemalloc( + +2 mem_baud +1 mem_hci_lt_rx_state +) + +15 hci_flag_rp +//mem_hci_options bit map +( +1 hci_option_h4 +2 hci_option_protocol2 +3 hci_option_protocol3 +4 hci_option_uart +5 hci_option_usb +6 hci_option_phy2 +7 hci_option_phy3 +) +// UART baud rate @6MHz +( +0 uart_ctrl_bit_enable +3 uart_ctrl_bit_slip_protocol + +) + +//bit map of core_uart_ctrl +( + +) +//bit map of core_uart_status +( +0 uart_status_tx_fifo_full +1 uart_status_tx_fifo_empty +2 uart_status_tx_busy +3 uart_status_rx_fifo_empty + +) +//HCI H4 LOG related +( +0x4850 mem_hci_log +8 hci_log_size +100 hci_log_cnt + +) +//HCI H4 Packet TYPE +( +0x01 HCI_H4_TYPE_CMD +0x02 HCI_H4_TYPE_ACL +0x04 HCI_H4_TYPE_EVENT + +) +// HCI command opcode group field values +( +0x01 HCI_OGF_LINK_CONTROL +0x02 HCI_OGF_LINK_POLICY +0x03 HCI_OGF_BASEBAND +0x04 HCI_OGF_INFO +0x05 HCI_OGF_STATUS +0x06 HCI_OGF_TEST +0x08 HCI_OGF_LOW_ENERGY +0x3e HCI_OGF_LOGO_TESTING +0x3f HCI_OGF_VENDOR_SPECIFIC +) + +// HCI link control opcode command field values, OGF=1 +( +0x01 HCI_INQUIRY +0x02 HCI_INQUIRY_CANCEL +0x03 HCI_PERIODIC_INQUIRY_MODE +0x04 HCI_EXIT_PERIODIC_INQUIRY_MODE +0x05 HCI_CREATE_CONNECTION +0x06 HCI_DISCONNECT +0x07 HCI_ADD_SCO_CONNECTION +0x08 HCI_CREATE_CONNECTION_CANCEL +0x09 HCI_ACCEPT_CONNECTION +0x0A HCI_REJECT_CONNECTION +0x0B HCI_LINK_KEY_REQUEST_REPLY +0x0C HCI_LINK_KEY_REQUEST_NEGATIVE_REPLY +0x0D HCI_PIN_CODE_REQUEST_REPLY +0x0E HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY +0x0F HCI_CHANGE_CONNECTION_PACKET_TYPE +0x11 HCI_AUTHENTICATION_REQUESTED +0x13 HCI_SET_CONNECTION_ENCRYPTION +0x15 HCI_CHANGE_CONNECTION_LINK_KEY +0x17 HCI_MASTER_LINK_KEY +0x19 HCI_REMOTE_NAME_REQUEST +0x1A HCI_REMOTE_NAME_REQUEST_CANCEL +0x1B HCI_READ_REMOTE_SUPPORTED_FEATURES +0x1C HCI_READ_REMOTE_EXT_FEATURES +0x1D HCI_READ_REMOTE_VERSION_INFORMATION +0x1F HCI_READ_CLOCK_OFFSET +0x20 HCI_READ_LMP_HANDLE +0x28 HCI_SETUP_SCO_CONNECTION +0x29 HCI_ACCEPT_SCO_CONNECTION +0x2A HCI_REJECT_SCO_CONNECTION +0x2B HCI_IO_CAP_REQUEST_REPLY +0x2C HCI_USER_CONFIRMATION_REQUEST_REPLY +0x2D HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY +0x2E HCI_USER_PASSKEY_REQUEST_REPLY +0x2F HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY +0x30 HCI_REMOTE_OOB_DATA_REQUEST_REPLY +0x33 HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY +0x34 HCI_IO_CAPABILITY_REQUEST_NEGATIVE_REPLY +0x35 HCI_CREATE_PHYSICAL_LINK +0x36 HCI_ACCEPT_PHYSICAL_LINK +0x37 HCI_DISCONNECT_PHYSICAL_LINK +0x38 HCI_CREATE_LOGICAL_LINK +0x39 HCI_ACCEPT_LOGICAL_LINK +0x3A HCI_DISCONNECT_LOGICAL_LINK +0x3B HCI_LOGICAL_LINK_CANCEL +0x3C HCI_FLOW_SPEC_MODIFY +0x3D HCI_ENHANCED_SETUP_SYNCHRONOUS_CONNECTION +0x3E HCI_ENHANCED_ACCEPT_SYNCHRONOUS_CONNECTION_REQUEST +0x3F HCI_TRUNCATED_PAGE +0x40 HCI_TRUNCATED_PAGE_CANCEL +0x41 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST +0x42 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE +0x43 HCI_START_SYNCHRONIZATION_TRAIN +0x44 HCI_RECEIVE_SYNCHRONIZATION_TRAIN +0x45 HCI_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY +) + + +// HCI link policy commands OCF value, OGF=2 +( +0x01 HCI_HOLD_MODE +0x03 HCI_SNIFF_MODE +0x04 HCI_EXIT_SNIFF_MODE +0x05 HCI_PARK_MODE +0x06 HCI_EXIT_PARK_MODE +0x07 HCI_QOS_SETUP +0x09 HCI_ROLE_DISCOVERY +0x0B HCI_SWITCH_ROLE +0x0C HCI_READ_LINK_POLICY_SETTINGS +0x0D HCI_WRITE_LINK_POLICY_SETTINGS +0x0e HCI_READ_DEFAULT_LINK_POLICY_SETTINGS +0x0f HCI_WRITE_DEFAULT_LINK_POLICY_SETTINGS +0x10 HCI_FLOW_SPECIFICATION +0x11 HCI_SNIFF_SUBRATING +) + +// HCI host controller and baseband commands OCF values, OGF=3 +( +0x01 HCI_SET_EVENT_MASK +0x03 HCI_RESET +0x05 HCI_SET_EVENT_FILTER +0x08 HCI_FLUSH +0x09 HCI_READ_PIN_TYPE +0x0A HCI_WRITE_PIN_TYPE +0x0B HCI_CREATE_NEW_UNIT_KEY +0x0D HCI_READ_STORED_LINK_KEY +0x11 HCI_WRITE_STORED_LINK_KEY +0x12 HCI_DELETE_STORED_LINK_KEY +0x13 HCI_WRITE_LOCAL_NAME +0x14 HCI_READ_LOCAL_NAME +0x15 HCI_READ_CONN_ACCEPT_TIMEOUT +0x16 HCI_WRITE_CONN_ACCEPT_TIMEOUT +0x17 HCI_READ_PAGE_TIMEOUT +0x18 HCI_WRITE_PAGE_TIMEOUT +0x19 HCI_READ_SCAN_ENABLE +0x1A HCI_WRITE_SCAN_ENABLE +0x1B HCI_READ_PAGE_SCAN_ACTIVITY +0x1C HCI_WRITE_PAGE_SCAN_ACTIVITY +0x1D HCI_READ_INQUIRY_SCAN_ACTIVITY +0x1E HCI_WRITE_INQUIRY_SCAN_ACTIVITY +0x1F HCI_READ_AUTHENTICATION_ENABLE +0x20 HCI_WRITE_AUTHENTICATION_ENABLE +0x21 HCI_READ_ENCRYPTION_MODE +0x22 HCI_WRITE_ENCRYPTION_MODE +0x23 HCI_READ_CLASS_OF_DEVICE +0x24 HCI_WRITE_CLASS_OF_DEVICE +0x25 HCI_READ_VOICE_SETTING +0x26 HCI_WRITE_VOICE_SETTING +0x27 HCI_READ_AUTOMATIC_FLUSH_TIMEOUT +0x28 HCI_WRITE_AUTOMATIC_FLUSH_TIMEOUT +0x29 HCI_READ_NUM_BROADCAST_RETRANSMISSIONS +0x2A HCI_WRITE_NUM_BROADCAST_RETRANSMISSIONS +0x2B HCI_READ_HOLD_MODE_ACTIVITY +0x2C HCI_WRITE_HOLD_MODE_ACTIVITY +0x2D HCI_READ_TRANSMIT_POWER_LEVEL +0x2E HCI_READ_SCO_FLOW_CONTROL_ENABLE +0x2F HCI_WRITE_SCO_FLOW_CONTROL_ENABLE +0x31 HCI_SET_CONTROLLER_TO_HOST_FLOW_CONTROL +0x33 HCI_HOST_BUFFER_SIZE +0x35 HCI_HOST_NUM_COMPLETED_PACKETS +0x36 HCI_READ_LINK_SUPERVISION_TIMEOUT +0x37 HCI_WRITE_LINK_SUPERVISION_TIMEOUT +0x38 HCI_READ_NUMBER_OF_SUPPORTED_IAC +0x39 HCI_READ_CURRENT_IAC_LAP +0x3A HCI_WRITE_CURRENT_IAC_LAP +0x3B HCI_READ_PAGE_SCAN_PERIOD_MODE +0x3C HCI_WRITE_PAGE_SCAN_PERIOD_MODE +0x3D HCI_READ_PAGE_SCAN_MODE +0x3E HCI_WRITE_PAGE_SCAN_MODE +0x3F HCI_SET_AFH_CHANNEL_CLASSIFICATION + + +0x42 HCI_READ_INQUIRY_SCAN_TYPE +0x43 HCI_WRITE_INQUIRY_SCAN_TYPE +0x44 HCI_READ_INQUIRY_MODE +0x45 HCI_WRITE_INQUIRY_MODE +0x46 HCI_READ_PAGE_SCAN_TYPE +0x47 HCI_WRITE_PAGE_SCAN_TYPE + +0x48 HCI_READ_AFH_CHANNEL_ACCESSMENT_MODE +0x49 HCI_WRITE_AFH_CHANNEL_ACCESSMENT_MODE +0x51 HCI_READ_EXTENDED_INQUIRY_RESPONSE +0x52 HCI_WRITE_EXTENDED_INQUIRY_RESPONSE +0x53 HCI_REFRESH_ENCRYPTION_KEY +0x55 HCI_READ_SIMPLE_PAIRING_MODE +0x56 HCI_WRITE_SIMPLE_PAIRING_MODE +0x57 HCI_READ_LOCAL_OOB_DATA +0x58 HCI_READ_INQUIRY_RESPONSE_TRANSMIT_POWER_LEVEL +0x59 HCI_WRITE_INQUIRY_TRANSMIT_POWER_LEVEL +0x60 HCI_SEND_KEYPRESS_NOTIFICATION +0x5A HCI_READ_DEFAULT_ERRONEOUS_DATA_REPORTING +0x5B HCI_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING +0x5F HCI_ENHANCED_FLUSH +0x61 HCI_READ_LOGICAL_LINK_ACCEPT_TIMEOUT +0x62 HCI_WRITE_LOGICAL_LINK_ACCEPT_TIMEOUT +0x63 HCI_SET_EVENT_MASK_PAGE_2 +0x64 HCI_READ_LOCATION_DATA +0x65 HCI_WRITE_LOCATION_DATA +0x66 HCI_READ_FLOW_CONTROL_MODE +0x67 HCI_WRITE_FLOW_CONTROL_MODE +0x68 HCI_READ_ENHANCE_TRANSMIT_POWER_LEVEL +0x69 HCI_READ_BEST_EFFORT_FLUSH_TIMEOUT +0x6A HCI_WRITE_BEST_EFFORT_FLUSH_TIMEOUT +0x6B HCI_SHORT_RANGE_MODE +0x6C HCI_READ_LE_HOST_SUPPORT +0x6D HCI_WRITE_LE_HOST_SUPPORT +0x6E HCI_SET_MWS_CHANNEL_PARAMETERS +0x6F HCI_SET_EXTERNAL_FRAME_CONFIGURATION +0x70 HCI_SET_MWS_SIGNALING +0x71 HCI_SET_MWS_TRANSPORT_LAYER +0x72 HCI_SET_MWS_SCAN_FREQUENCY_TABLE +0x73 HCI_SET_MWS_PATTERN_CONFIGURATION +0x74 HCI_SET_RESERVED_LT_ADDR +0x75 HCI_DELETE_RESERVED_LT_ADDR +0x76 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_DATA +0x77 HCI_READ_SYNCHRONIZATION_TRAIN_PARAMETERS +0x78 HCI_WRITE_SYNCHRONIZATION_TRAIN_PARAMETERS +0x79 HCI_READ_SECURE_CONNECTIONS_HOST_SUPPORT +0x7A HCI_WRITE_SECURE_CONNECTIONS_HOST_SUPPORT +0x7B HCI_READ_AUTHENTICATED_PAYLOAD_TIMEOUT +0x7C HCI_WRITE_AUTHENTICATED_PAYLOAD_TIMEOUT +0x7D HCI_READ_LOCAL_OOB_EXTENDED_DATA +0x7E HCI_READ_EXTENDED_PAGE_TIMEOUT +0x7F HCI_WRITE_EXTENDED_PAGE_TIMEOUT +0x80 HCI_READ_EXTENDED_INQUIRY_LENGTH +0x81 HCI_WRITE_EXTENDED_INQUIRY_LENGTH +) + + +// HCI informational parameters OCF values, OGF=4 +( +0x01 HCI_READ_LOCAL_VERSION_INFORMATION +0x02 HCI_READ_LOCAL_SUPPORTED_COMMANDS +0x03 HCI_READ_LOCAL_SUPPORTED_FEATURES +0x04 HCI_READ_LOCAL_EXT_FEATURES +0x05 HCI_READ_BUFFER_SIZE +0x07 HCI_READ_COUNTRY_CODE +0x09 HCI_READ_BD_ADDR +0x0A HCI_REJECT_CONNECTION_REQUEST +0x0B HCI_READ_LOCAL_SUPPORTED_CODECS +) + +// HCI status parameters OCF values, OGF=5 +( +0x01 HCI_READ_FAILED_CONTACT_COUNTER +0x02 HCI_RESET_FAILED_CONTACT_COUNTER +0x03 HCI_GET_LINK_QUALITY +0x05 HCI_READ_RSSI +0x06 HCI_READ_AFH_CHANNEL_MAP +0x07 HCI_READ_BD_CLOCK +0x08 HCI_READ_ENCRYPTION_KEY_SIZE +0x09 HCI_READ_LOCAL_AMP_INFO +0x0A HCI_READ_LOCAL_AMP_ASSOC +0x0B HCI_WRITE_REMOTE_AMP_ASSOC +0x0C HCI_GET_MWS_TRANSPORT_LAYER_CONFIGURATION +0x0D HCI_SET_TRIGGERED_CLOCK_CAPTURE +) + +// HCI testing command OCF values, OGF=6 +( +0x01 HCI_READ_LOOPBACK_MODE +0x02 HCI_WRITE_LOOPBACK_MODE +0x03 HCI_ENABLE_DEVICE_UNDER_TEST_MODE +0x04 HCI_WRITE_SIMPLE_PAIRING_DEBUG_MODE +0x07 HCI_ENABLE_AMP_RECEIVER_REPORTS +0x08 HCI_AMP_TEST_END +0x09 HCI_AMP_TEST +0x0A HCI_WRITE_SECURE_CONNECTIONS_TEST_MODE +) + +// HCI vendor specific command OCF values -OGF=3F +( +0x01 HCI_WRITE_BD_ADDR +0x02 HCI_READ_INQUIRY_RESPONSE_TIMEOUT +0x03 HCI_WRITE_INQUIRY_RESPONSE_TIMEOUT +0x04 HCI_READ_PAGE_SCAN_REPETITION_MODE +0x05 HCI_WRITE_PAGE_SCAN_REPETITION_MODE +0x06 HCI_READ_PAGE_RESPONSE_TIMEOUT +0x07 HCI_WRITE_PAGE_RESPONSE_TIMEOUT +0x08 HCI_READ_NEW_CONNECTION_TIMEOUT +0x09 HCI_WRITE_NEW_CONNECTION_TIMEOUT +0x0a HCI_INITIALIZE_BASEBAND +0x0b HCI_WRITE_LOCAL_SUPPORTED_FEATURES +0x0c HCI_WRITE_PARK_PARAMETERS +0x0d HCI_READ_PARK_PARAMETERS +0x0e HCI_WRITE_QUALITY_OF_SERVICE +0x0f HCI_NOT_USED +0x10 HCI_MODIFY_BEACON_PARAMETERS +0x11 HCI_UNPARK_USING_PM_ADDR +0x12 HCI_WRITE_HOPPING_CHANNELS +0x13 HCI_SLEEP_FOREVER_MODE +0x14 HCI_WRITE_AUTO_PAGE_SCAN_ENABLE +0x15 HCI_READ_AUTO_PAGE_SCAN_ENABLE +0x16 HCI_SET_ENCRYPTION_KEY_SIZE +0x17 HCI_INVALIDATE_FLASH_AND_REBOOT +0x18 HCI_UPDATE_UART_BAUD_RATE +0x19 HCI_WRITE_GPIO_1_4_AS_OUTPUT +0x1A HCI_WRITE_GPIO_2_LED +0x1B HCI_SET_TESTMODE_TYPE +0x1C HCI_WRITE_SCO_PCM_INT_PARAM +0x1D HCI_READ_SCO_PCM_INT_PARAM +0x1E HCI_WRITE_PCM_DATA_FORMAT_PARAM +0x1F HCI_READ_PCM_DATA_FORMAT_PARAM +0x20 HCI_WRITE_COMFORT_NOISE_PARAM +0x21 HCI_READ_COMFORT_NOISE_PARAM +0x22 HCI_WRITE_SCO_TS +0x23 HCI_READ_SCO_TS +0x24 HCI_WRITE_PCM_LOOPBACK_MODE +0x25 HCI_READ_PCM_LOOPBACK_MODE +0x26 HCI_SET_TRANSMIT_POWER +0x27 HCI_SET_SLEEPMODE_PARAM +0x28 HCI_READ_SLEEPMODE_PARAM +0x29 HCI_SLEEPMODE_CMD +0x2A HCI_DELAY_PERIPHERAL_SCO_STARTUP +0x2B HCI_WRITE_RECEIVE_ONLY +0x2C HCI_WRITE_RATE_CONTROL +0x2D HCI_TX_UNMOD_CARRIER +0x2E HCI_DOWNLOAD_MINIDRIVER +0x2F HCI_CRYSTAL_PPM +0x30 HCI_SET_POWER_AMP_BIAS +0x31 HCI_SET_HAM_BEHAVIOR +0x32 HCI_SET_AFH_BEHAVIOR +0x33 HCI_READ_USER_DEFINED_NVRAM +0x34 HCI_ENABLE_RADIO +0x35 HCI_READ_DIAGNOSTIC_INFO +0x36 HCI_GET_HID_DEVICE_LIST +0x37 HCI_ADD_HID_DEVICE +0x38 HCI_READ_APP_FW_CONFIG_VERSION +0x39 HCI_DELETE_HID_DEVICE +0x3B HCI_ENABLE_USB_HID_EMULATION +// 0x3A available +// 0x3B available +0x3C HCI_SEND_LMPDU +0x3D HCI_AUTO_PAIR_REQ +0x3E HCI_READ_VS_EXTENSION +0x3F HCI_WRITE_VS_EXTENSION + +0x77 HCI_OPCODE_FC77 +0x79 HCI_OPCODE_FC79 +0xC4 HCI_DOWNLOAD_PATCH +0xCC HCI_OPCODE_FCCC + +0x00 HCI_VENDOR_CMD_RESET +0x01 HCI_VENDOR_CMD_CHIPID +0x02 HCI_VENDOR_CMD_BAUD +0x03 HCI_VENDOR_CMD_PATCH +0x04 HCI_VENDOR_CMD_PATCH_DONE +0x05 HCI_VENDOR_CMD_ECHO +0x06 HCI_VENDOR_CMD_BDADDR + +0x07 HCI_VENDOR_CMD_ENTER_LPM +0x08 HCI_VENDOR_CMD_COMMU_READY + +0x10 HCI_VENDOR_CMD_MEM +0x11 HCI_VENDOR_CMD_EEP + +0X12 HCI_VENDOR_CMD_PATCH_SEC_INIT +0X13 HCI_VENDOR_CMD_PATCH_SEC +) + +//HCI LE controller command OCF values, OGF=8 +( +0x01 HCI_LE_SET_EVENT_MASK +0x02 HCI_LE_READ_BUFFER_SIZE +0x03 HCI_LE_READ_LOCAL_SUPPORTED_FEATURES +0x05 HCI_LE_SET_RANDOM_ADDRESS +0x06 HCI_LE_SET_ADVERTISING_PARAMETERS +0x07 HCI_LE_READ_ADVERTISING_CHANNEL_TX_POWER +0x08 HCI_LE_SET_ADVERTISING_DATA +0x09 HCI_LE_SET_SCAN_RESPONSE_DATA +0x0A HCI_LE_SET_ADVERTISE_ENABLE +0x0B HCI_LE_SET_SCAN_PARAMETERS +0x0C HCI_LE_SET_SCAN_ENABLE +0x0D HCI_LE_CREATE_CONNECTION +0x0E HCI_LE_CREATE_CONNECTION_CANCEL +0x0F HCI_LE_READ_WHITE_LIST_SIZE +0x10 HCI_LE_CLEAR_WHITE_LIST +0x11 HCI_LE_ADD_DEVICE_TO_WHITE_LIST +0x12 HCI_LE_REMOVE_DEVICE_FROM_WHITE_LIST +0x13 HCI_LE_CONNECTION_UPDATE +0x14 HCI_LE_SET_HOST_CHANNEL_CLASSIFICATION +0x15 HCI_LE_READ_CHANNEL_MAP +0x16 HCI_LE_READ_REMOTE_USED_FEATURES +0x17 HCI_LE_ENCRYPT +0x18 HCI_LE_RAND +0x19 HCI_LE_START_ENCRYPTION +0x1A HCI_LE_LONG_TERM_KEY_REQUEST_REPLY +0x1B HCI_LE_LONG_TERM_KEY_REQUEST_NEGATIVE_REPLY +0x1C HCI_LE_READ_SUPPORTED_STATES +0x1D HCI_LE_RECEIVER_TEST +0x1E HCI_LE_TRANSMITTER_TEST +0x1F HCI_LE_TEST_END +0x20 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_REPLY +0x21 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_NEGATIVE_REPLY +) +// HCI event code +( +0x01 HCI_EVENT_INQUIRY_COMPLETE +0x02 HCI_EVENT_INQUIRY_RESULT +0x03 HCI_EVENT_CONNECTION_COMPLETE +0x04 HCI_EVENT_CONNECTION_REQUEST +0x05 HCI_EVENT_DISCONNECTION_COMPLETE +0x06 HCI_EVENT_AUTHENTICATION_COMPLETE +0x07 HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE +0x08 HCI_EVENT_ENCRYPTION_CHANGE_COMPLETE +0x09 HCI_EVENT_CHANGE_CONNECTION_LINK_KEY_COMPLETE +0x0A HCI_EVENT_MASTER_LINK_KEY_COMPLETE +0x0B HCI_EVENT_READ_REMOTE_FEATURES_COMPLETE +0x0C HCI_EVENT_READ_REMOTE_VERSION_INFORMATION_COMPLETE +0x0D HCI_EVENT_QOS_SETUP_COMPLETE +0x0E HCI_EVENT_COMMAND_COMPLETE +0x0F HCI_EVENT_COMMAND_STATUS +0x10 HCI_EVENT_HARDWARE_ERROR +0x11 HCI_EVENT_FLUSH_OCCURRED +0x12 HCI_EVENT_ROLE_CHANGE +0x13 HCI_EVENT_NUM_COMPLETED_PACKETS +0x14 HCI_EVENT_MODE_CHANGE +0x15 HCI_EVENT_RETURN_LINK_KEYS +0x16 HCI_EVENT_PIN_CODE_REQUEST +0x17 HCI_EVENT_LINK_KEY_REQUEST +0x18 HCI_EVENT_LINK_KEY_NOTIFICATION +0x19 HCI_EVENT_LOOPBACK_COMMAND +0x1A HCI_EVENT_DATA_BUFFER_OVERFLOW +0x1B HCI_EVENT_MAX_SLOTS_CHANGE +0x1C HCI_EVENT_READ_CLOCK_OFFSET_COMPLETE +0x1D HCI_EVENT_CONNECTION_PACKET_TYPE_CHANGED +0x1E HCI_EVENT_QOS_VIOLATION +0x1F HCI_EVENT_PAGE_SCAN_MODE_CHANGE +0x20 HCI_EVENT_PAGE_SCAN_REPETITION_MODE_CHANGE +0x21 HCI_EVENT_FLOW_SPECIFICATION_COMPLETE +0x22 HCI_EVENT_INQUIRY_RESULT_WITHRSSI +0x23 HCI_EVENT_READ_REMOTE_EXT_FEATURES_COMPLETE +0x2C HCI_EVENT_SCO_CONNECTION_COMPLETE +0x2D HCI_EVENT_SCO_CONNECTION_CHANGED +0x2E HCI_EVENT_SNIFF_SUBRATING +0x2F HCI_EVENT_EXT_INQUIRY_RESULT +0x30 HCI_EVENT_ENCRYPT_KEY_REFRESH_COMPLETE +0x31 HCI_EVENT_IO_CAP_REQ +0x32 HCI_EVENT_IO_CAP_RESPONSE +0x33 HCI_EVENT_USER_CONFIRMATION_REQUEST +0x34 HCI_EVENT_UESR_PASSKEY_REQUEST +0x35 HCI_EVENT_REMOTE_OOB_DATA_REQUEST +0x36 HCI_EVENT_SIMPLE_PAIRING_COMPLETE +0x38 HCI_EVENT_LINK_SUPERVISION_TIMEOUT_CHANGED +0x39 HCI_EVENT_ENHANCED_FLUSH_COMPLETE +0x3B HCI_EVENT_USER_PASSKEY_NOTIFICATION +0x3C HCI_EVENT_KEYPRESS_NOTIFICATION +0x3D HCI_EVENT_REMOTE_HOST_SUPPORTED_FEATURES_NOTIFICATION +0x3E HCI_EVENT_LE_META_EVENT +0x40 HCI_EVENT_PHYSICAL_LINK_COMPLETE +0x41 HCI_EVENT_CHANNEL_SELECTED +0x42 HCI_EVENT_DISCONNECTION_PHYSICAL_LINK_COMPLETE +0x43 HCI_EVENT_PHYSICAL_LINK_LOSS_EARLY_WARNING +0x44 HCI_EVENT_PHYSICAL_LINK_RECOVERY +0x45 HCI_EVENT_LOGICAL_LINK_COMPLETE +0x46 HCI_EVENT_DISCONNECTION_LOGICAL_LINK_COMPLETE +0x47 HCI_EVENT_FLOW_SPEC_MODIFY_COMPLETE +0x48 HCI_EVENT_NUMBER_OF_COMPLETED_DATA_BLOCKS +0x49 HCI_EVENT_AMP_START_TEST +0x4A HCI_EVENT_AMP_TEST_END +0x4B HCI_EVENT_AMP_RECEIVER_REPORT +0x4C HCI_EVENT_SHORT_RANGE_MODE_CHANGE_COMPLETE +0x4D HCI_EVENT_AMP_STATUS_CHANGE +0x4E HCI_EVENT_TRIGGERED_CLOCK_CAPTURE +0x4F HCI_EVENT_SYNCHRONIZATION_TRAIN_COMPLETE +0x50 HCI_EVENT_SYNCHRONIZATION_TRAIN_RECEIVED +0x51 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE +0x52 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_TIMEOUT +0x53 HCI_EVENT_TRUNCATED_PAGE_COMPLETE +0x54 HCI_EVENT_SLAVE_PAGE_RESPONSE_TIMEOUT +0x55 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_CHANNEL_MAP_CHANGE +0x56 HCI_EVENT_INQUIRY_RESPONSE_NOTIFICATION +0x57 HCI_EVENT_AUTHENTICATED_PAYLOAD_TIMEOUT_EXPIRED + +0xFE HCI_EVENT_LOGO_TESTING +0xFF HCI_EVENT_VENDOR_SPECIFIC +) +( +0x01 HCI_VENDOR_EVENT_COMMU_READY +) +//HCI LE SUBEVENT CODE +( +0x01 HCI_LE_SUBEVENT_CONN_COMPLETE +0x02 HCI_LE_SUBEVENT_ADV_REPORT +0x03 HCI_LE_SUBEVENT_CONN_UPDATE_COMPLETE +0x04 HCI_LE_SUBEVENT_REMOTE_FEATURE_COMPLETE +0x05 HCI_LE_SUBEVENT_LTK_REQUEST +0x06 HCI_LE_SUBEVENT_REMOTE_CONN_PARAM_REQ +) + +( +0x00 HCI_LPM_OFF +0x01 HCI_LPM_ON +) + + +( +33 HOST_WAKE_TIME +) + +( +1 HCI_RX_WAKE +0 HCI_RX_READY +) + Index: 1066_OTP_FLASH/format/kscan_peipherals.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/kscan_peipherals.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/kscan_peipherals.format (working copy) @@ -0,0 +1,35 @@ + + + + + + +//0 mem_kscan_head_ptr +//1 mem_col_num +//1 mem_row_num +//4 mem_col_conf_pin +//4 mem_row_conf_pin +//1 mem_row_count +//1 mem_count_shift +//2 mem_kscan_value_temp +//2 mem_kscan_lastvalue +//2 mem_kscan_value +//4 mem_btclk_kscan +//1 mem_btclk_kscan_interval + + +0x00 KEYSCAN_OFFECT_COL_NUM +0x01 KEYSCAN_OFFECT_ROW_NUM +0x02 KEYSCAN_OFFECT_COL_CONF_PIN +0x06 KEYSCAN_OFFECT_ROW_CONF_PIN + +0x0a KEYSCAN_OFFECT_ROW_COUNT +0x0b KEYSCAN_OFFECT_SHIFT_COUNT + +0X0C KEYSCAN_OFFECT_VALUE_TEMP +0X0E KEYSCAN_OFFECT_LASVALUE +0X10 KEYSCAN_OFFECT_VALUE +0x12 KEYSCAN_OFFECT_BTCLK +0x16 KEYSCAN_OFFECT_BTCLK_INTERVAL + + Index: 1066_OTP_FLASH/format/l2cap.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/l2cap.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/l2cap.format (working copy) @@ -0,0 +1,442 @@ + +memalloc( +0 mem_l2cap_mem_start +// L2CAP RX +2 mem_l2cap_rxbuff1_len +2 mem_l2cap_rxbuff2_len +2 mem_l2cap_rxbuff_new +1 mem_l2cap_rxbuff_inuse +2 mem_l2cap_payload_ptr +2 mem_l2cap_rx_pkt_length +2 mem_l2cap_rx_cid +1 mem_l2cap_rx_done + + + +// L2CAP TX Signal channel +2 mem_l2cap_signal_tx_buff_ptr +2 mem_l2cap_signal_tx_payload_ptr +2 mem_l2cap_signal_tx_length +// L2CAP TX SDP channel +2 mem_sdp_tx_buff_ptr +2 mem_sdp_tx_payload_ptr +2 mem_sdp_tx_pkt_length +// L2CAP TX RFCOMM channel +2 mem_rfcomm_tx_buff_ptr +2 mem_rfcomm_tx_payload_ptr +2 mem_rfcomm_tx_pkt_length + + + +//L2CAP Util + +2 memL2CAP_T1 + +1 mem_CONTROL_tasks +1 mem_send_config_req + + +1 mem_config_identifier +2 mem_config_req_dest_CID +1 mem_rfcomm_malloc_fail_flag + +//L2CAP STATE MACHINE +1 mem_message_to_uppersm +1 mem_upper_sm_remote_page +1 mem_upper_sm_reconn +1 mem_upper_sm_ss + + +64 mem_tx_malloc_log +0 mem_l2cap_mem_end + + +2 mem_scid +2 mem_cmd_length +2 mem_tt2 +2 mem_tt3 +2 mem_id +2 mem_psm + + +4 mem_l2cap_sdpres_delay_time +) + +xmemalloc( +0 mem_l2cap_xmem_start +//*******************L2CAP TX MULTI-PACKET*********************// +2 mem_l2cap_tx_multi_offset //0 means single packet + +//*******************CHANNEL ID*********************// +2 mem_sdp_remote_cid +2 mem_rfcomm_remote_cid +2 mem_hid_ctrl_remote_cid +2 mem_hid_int_remote_cid +//*******************CHANNEL STATE*********************// +1 mem_sdp_state +1 mem_rfcomm_state +1 mem_hid_control_state +1 mem_hid_interrupt_state +1 mem_spp_state +1 mem_ML2CAP_comm_id + +//*******************L2CAP malloc********************// +1 mem_used_map +0 mem_tx_fifo0 +1 mem_tx_fifo0_map +2 mem_tx_fifo0_ptr +0 mem_tx_fifo1 +1 mem_tx_fifo1_map +2 mem_tx_fifo1_ptr +0 mem_tx_fifo2 +1 mem_tx_fifo2_map +2 mem_tx_fifo2_ptr +0 mem_tx_fifo3 +1 mem_tx_fifo3_map +2 mem_tx_fifo3_ptr +0 mem_tx_fifo_end +256 mem_l2cap_lpm_txbuf +//*******************MISC*********************// +1 mem_l2cap_flow_ctrl_flag +1 mem_l2cap_pending_item +0 mem_l2cap_xmem_end + +) + + +//mem_l2cap_lpm_txbuf +( +256 l2cap_lpm_txbuf_len +) + +( +4 L2CAP_TX_FIFO_SIZE +8 L2CAP_TX_BUFF_CNT + +) +( +0x0002 L2CAP_SIG_EXT_FEATRUE +0x0003 L2CAP_SIG_FIX_FEATRUE +) + + +( +0 HS_IDLE +1 AG_INIT_CALL +2 HS_INIT_CALL +) +( +0 M_ACL_LINK_ABSENT +1 M_ACL_LINK_EXIST +) + +( +0 L2CAP_INUSE_BUFF1 +1 L2CAP_INUSE_BUFF2 +) +/* upper layer interface w/ lower layer */ +( +1 MAX_NUM_LINKS_ALLOWED +1 MAX_NUM_SCO_ALLOWED +1 ACL_LINK_PRESENT +0 ACL_LINK_ABSENT +) +( +1 L2CAP_RX_DONE +0 L2CAP_RX_CLEAR +) +/* Scheduler */ +( +0 L2CAP_DISCONNECT_INTERRUPT +1 RFCOMM_wants_service +2 L2CAP_sig_Tx_buff_full +3 RFCOMM_Tx_buff_full +4 SDP_Tx_buff_full +5 got_complete_L2CAP_pkt +6 L2CAP_init_Config_Req +7 L2CAP_DISCONNECT_CONTROL +) + +/* mem_CONTROL_tasks2 */ +( +0 UI_NEED_SERVICE +) +/* L2CAP logic channel identifiers (2 bytes) p.261 */ +( +0x0001 L2CAP_signal_channel +0x0050 L2CAP_SDP_channel +0x0051 L2CAP_RFCOMM_channel +0x0052 L2CAP_HID_Control_channel +0x0053 L2CAP_HID_Interrupt_channel +0x0077 L2CAP_AVDTP_signal_channel //------avdtp +0x0078 L2CAP_AVDTP_media_channel +0x0079 L2CAP_AVDTP_report_channel +0x0080 L2CAP_AVDTP_recovery_channel +0x00dd L2CAP_AVCTP_Control_channel +) +/* L2CAP signalling command codes (1 byte) p.284 */ +( +0x00 reserved +0x01 signal_cmd_reject +0x02 signal_connect_req +0x03 signal_connect_rsp +0x04 signal_config_req +0x05 signal_config_rsp +0x06 signal_disconnect_req +0x07 signal_disconnect_rsp +0x08 signal_echo_req +0x09 signal_echo_rsp +0x0a signal_info_req +0x0b signal_info_rsp +) +/* L2CAP signal_command_reject reason code (2 bytes), p.285 */ +( +0x0000 cmd_not_understood +0x0001 signalling_MTU_exceeded +0x0002 invalid_CID_in_req +) +/* L2CAP PSM values used in signal_connect_req (2 bytes), p.286 */ +( +0x0001 PSM_SDP +0x0003 PSM_RFCOMM +0x0005 PSM_TCS +0x0011 PSM_HID_control +0x0013 PSM_HID_interrupt +0x0017 PSM_AVCTP +0x0019 PSM_AVDTP +) +/* L2CAP connection response result code (2 bytes), p.288 */ +( +0x0000 L2CAP_connect_successful +0x0001 L2CAP_connect_pending +0x0002 L2CAP_connect_refused_PSM_unsupported +0x0003 L2CAP_connect_refused_security_block +0x0004 L2CAP_connect_refused_no_resources +) +/* L2CAP connection status values (2 bytes), p.288 */ +( +0x0000 L2CAP_no_info_available +0x0001 L2CAP_authentication_pending +0x0002 L2CAP_authorization_pending +) +/* L2CAP configuration response result code (2 bytes), p.292 */ +( +0x0000 L2CAP_config_success +0x0001 L2CAP_config_failure_bad_parameters +0x0002 L2CAP_config_failure_no_reason +0x0003 L2CAP_config_failure_unknown_options +) +/* L2CAP constant definitions */ +( +128 L2CAP_Rx_buff_size +48 L2CAP_signal_Tx_buff_size +128 SDP_Tx_buff_size +128 RFCOMM_Tx_buff_size +1 AM_ADDRESS +3 DM1TYPE +4 DH1TYPE +11 DH3TYPE +8 DVTYPE +0 channel_state_closed +1 channel_state_config +2 channel_state_open +0x0030 L2CAP_config_MTU_SDP +0xffff L2CAP_config_ftimeout_SDP +0x03e3 L2CAP_config_MTU_RFCOMM +0xffff L2CAP_config_ftimeout_RFCOMM +260 l2cap_max_pkt_len +) + +( +0 FAILURE +1 SUCCESS +2 IN_PROGRESS +) +( +0x00 IDLE +0x01 WAIT_4_BB_PAGE +0x02 WAIT_4_LMP_CONN +0x03 WAIT_4_SCO_CONN +0x04 WAIT_4_SCO_KILLED +) + +/*mem_master_mss*/ +( +0 STOP_ENC +1 SEND_SWITCH_REQ +) +( +0 HF_HS_READY +1 HF_AG_READY +) +/* mem_hf_state */ +( +0 HF_STATE_WAITING_RFCOMM_CONN +1 HF_STATE_HF_SEND_FEATURE +2 HF_STATE_WAITING_AG_FEATURE_OK +3 HF_STATE_HF_SEND_INDICATORS +4 HF_STATE_WAITING_AG_INDICATORS_OK +5 HF_STATE_HF_SEND_CURR_STATUS +6 HF_STATE_WAITING_AG_STATUS_OK +7 HF_STATE_HF_SEND_UPDATE_STATUS +8 HF_STATE_WAITING_AG_UPDATE_STATUS_OK +9 HF_STATE_CONNECTED +0x0a HF_STATE_HF_SEND_RECEIVE_INFO +0x0b HF_STATE_WAITING_AG_INFO +0x0c HF_STATE_HF_SEND_AT_CLIP +0x0d HF_STATE_WAITING_AT_CLIP +0x0e HF_STATE_HF_SEND_AT_CCWA +0x0f HF_STATE_WAITING_AT_CCWA +) +/*mem_hf_call_state*/ +( +0 HF_CALL_STATE_INACTIVE +1 HF_CALL_STATE_SETUP +2 HF_CALL_STATE_ACTIVE +) +/* mem_pairing_state bit definition */ +( +0 PAIR_INQUIRY_START +1 PAIR_INQUIRY_TIME_OUT +2 PAIR_INQUIRY_FAILED +3 PAIR_INQUIRY_SUCCESS +4 PAIR_READY_CONN +5 PAIR_WAIT_CANCEL_RESPONSE +6 PAIR_CONN_SUCCESS +7 PAIR_WAIT_DETACH +) + +/* mem_pairing_mode bit definition */ +( +0 FORCE_AUTHENTICATION +) +/* mem_hid_protecol_type */ +( +0 PROTECOL_BOOT /*default*/ +1 PROTECOL_REPORT +) + +/* mem_upper_sm_reconn */ +( +1 UPPERSM_SEND_SDP_CONN_REQ +2 UPPERSM_SEND_SDP_CFG_REQ +3 UPPERSM_SEND_SDP_HF_SS +4 UPPERSM_SEND_SDP_DISC_REQ +5 UPPERSM_SEND_RFCOMM_CONN_REQ +6 UPPERSM_SEND_RFCOMM_CFG_REQ +7 UPPERSM_SEND_SABM_CMD +8 UPPERSM_SEND_DISC +9 UPPERSM_SEND_WAIT +10 UPPERSM_SEND_HID_CONTROL_CONN_REQ +11 UPPERSM_SEND_HID_CONTROL_CFG_REQ +12 UPPERSM_SEND_HID_INTERRUPT_CONN_REQ +13 UPPERSM_SEND_HID_INTERRUPT_CFG_REQ +14 UPPERSM_SEND_SDP_HS_SS +15 UPPERSM_SEND_SDP_PBAP_SS +16 UPPERSM_SEND_SDP_AVTARG_SS +) +/* mem_upper_sm_remote_page */ +( +1 UPPERSM_RP_SEND_SDP_CONN_REQ +2 UPPERSM_RP_SEND_SDP_CFG_REQ +3 UPPERSM_RP_SEND_SDP_HF_SS +4 UPPERSM_RP_SEND_SDP_HS_SS +5 UPPERSM_RP_SEND_SDP_PBAP_SS +6 UPPERSM_RP_SEND_SDP_AVTARG_SS +7 UPPERSM_RP_SEND_SDP_DISC_REQ +8 UPPERSM_RP_SEND_AVCTP_CONN_REQ +9 UPPERSM_RP_SEND_AVCTP_CFG_REQ +) + +/* mem_ML2CAP_flag */ +( +0 MSCHEDULER_HID_CONTROL_CONN_DONE +1 MSCHEDULER_HID_INTERRUPT_CONN_DONE +2 MSCHEDULER_HID_CONTROL_CFG_REQ_DONE +3 MSCHEDULER_HID_CONTROL_CFG_RSP_DONE +4 MSCHEDULER_HID_INTERRUPT_CFG_REQ_DONE +5 MSCHEDULER_HID_INTERRUPT_CFG_RSP_DONE +6 MSCHEDULER_HID_CONTROL_DISC_DONE +7 MSCHEDULER_HID_INTERRUPT_DISC_DONE +) +/* ui event --add by lj*/ +( +0x00 UI_DATA_EVNET_NONE +0x01 UI_DATA_EVNET_HID +0x02 UI_DATA_EVNET_AVDTP_S +0x03 UI_DATA_EVNET_AVDTP_M +0x04 UI_DATA_EVNET_AVCTP +0x05 UI_DATA_EVNET_HS +0x06 UI_DATA_EVNET_HF +0x07 UI_DATA_EVNET_SPP +0x08 UI_DATA_EVNET_OBEX +) +/* ui ack --add by lj*/ +( +0x00 UI_DATA_TX_NONE +0x01 UI_DATA_TX_HID +0x02 UI_DATA_TX_AVDTP_S +0x03 UI_DATA_TX_AVDTP_M +0x04 UI_DATA_TX_AVCTP +0x05 UI_DATA_TX_HS +0x06 UI_DATA_TX_HF +0x07 UI_DATA_TX_SPP +0x08 UI_DATA_TX_OBEX +0x10 ACL_TX_L2CAP_SIGNAL +0x11 ACL_TX_SDP +0x12 ACL_TX_RFCOMM + +) + +( +0 L2CAP_SDP_interface_conn +1 L2CAP_SDP_interface_cfg +) + +( +0 L2CAP_CHANNEL_STATE_CONN_REQ +1 L2CAP_CHANNEL_STATE_CONN_RES +2 L2CAP_CHANNEL_STATE_SND_CFG_REQ +3 L2CAP_CHANNEL_STATE_SND_CFG_RES +4 L2CAP_CHANNEL_STATE_RCV_CFG_REQ +5 L2CAP_CHANNEL_STATE_RCV_CFG_RES +6 L2CAP_CHANNEL_RFCOMM_ONLY_SABM +7 L2CAP_CHANNEL_RFCOMM_ONLY_UA +6 L2CAP_CHANNEL_AVDTP_SIGNAL_INIT //set avdtp init complete +6 L2CAP_CHANNEL_HID_HANDSHAKE_DONE +0x3f L2CAP_CHANNEL_SETUP_COMPLETE +0x7f L2CAP_CHANNEL_AVDTP_SIGNAL_COMPLETE +0xff L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED +) + +/* AVDTP---lj*/ +( +0 L2CAP_AVDTP_SIGNAL_CONNECT +1 L2CAP_AVDTP_SIGNAL_CONFIG +2 L2CAP_AVDTP_MEDIA_CONNECT +3 L2CAP_AVDTP_MEDIA_CONFIG +4 L2CAP_AVDTP_REPORT_CONNECT +5 L2CAP_AVDTP_REPORT_CONFIG +6 L2CAP_AVDTP_RECOVERY_CONNECT +7 L2CAP_AVDTP_RECOVERY_CONFIG +) +/* AVCTP---lj*/ +( +0 L2CAP_AVCTP_SIGNAL_CONNECT +1 L2CAP_AVCTP_SIGNAL_CONFIG +) + +127 L2CAP_SIGNAL_MALLOC_SIZE + +//1 mem_rfcomm_malloc_fail_flag +( +0 RFCOMM_MALLOC_SUCCEED +1 RFCOMM_MALLOC_FAIL +) + +//mem_l2cap_flow_ctrl_flag +( +0 L2CAP_FLOW_CTRL_DISABLE +1 L2CAP_FLOW_CTRL_ENABLE +) + Index: 1066_OTP_FLASH/format/le.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/le.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/le.format (working copy) @@ -0,0 +1,722 @@ + +memalloc( +56 mem_le_rxbuf +262 mem_le_l2capbuf + + +/* security temp */ +4 mem_le_mic +4 mem_le_peer_mic +//8 mem_le_skdm +//8 mem_le_skds +16 mem_le_peer_ltk +16 mem_le_mrand + + +/* ========= le context =========== */ +1 mem_le_state +1 mem_le_mode +2 mem_le_tsniff +4 mem_le_anchor +6 mem_le_clk_offset +2 mem_le_receive_window +6 mem_le_plap +1 mem_le_conn_handle +1 mem_le_arq +1 mem_le_ch +1 mem_le_hop +2 mem_le_event_count +4 mem_le_supervision_timer +2 mem_le_instant +1 mem_le_channels +1 mem_le_op + + /* these 3 should NOT be seperated */ +4 mem_le_access +3 mem_le_crcinit +1 mem_le_window_size + + /* these 3 should NOT be seperated */ +2 mem_le_slave_latency +2 mem_le_superto +5 mem_le_channel_map + +2 mem_le_no_using +1 mem_le_peer_sca + +/* should be together */ +1 mem_le_att_opcode +2 mem_le_att_handle + +1 mem_le_err_code +1 mem_le_ll_pairing_fail_reason + +16 mem_le_sk + +/* test */ +1 mem_le_testtype +2 mem_le_test_sync +2 mem_le_test_pcnt + +6 mem_le_rxon_ts + +1 mem_le_rx_ll_opcode + +2 mem_le_notify_attr_start +1 mem_le_notify_len + +1 mem_cmd_le_create_conn + +2 mem_le_cur_attlist_start_ptr +2 mem_le_cur_handle_start +2 mem_le_cur_handle_end +1 mem_le_cur_uuid_length +16 mem_le_cur_uuid + +1 mem_le_curr_att_len +1 mem_le_search_res + +1 mem_le_continue_type + +) + + +xmemalloc( +2 mem_le_dsniff + +// parameters +2 mem_le_conn_interval +1 mem_le_scan_enable +2 mem_le_scan_interval +2 mem_le_scan_window + +1 mem_le_adv_enable +1 mem_le_adv_data_len +31 mem_le_adv_data +1 mem_le_scan_data_len +31 mem_le_scan_data + +//modified name +1 mem_le_name_len +30 mem_le_name + + +5 mem_le_new_map +0 mem_le_new_param +1 mem_le_new_transmitwindowsize +2 mem_le_new_transmitwindowoffset +2 mem_le_new_conninterval +2 mem_le_new_connslavelatency +2 mem_le_new_connsupervisiontimeout + +1 mem_le_txheader +1 mem_le_txlen +2 mem_le_txpayload +2 mem_le_txcid +1 mem_le_l2cap +1 mem_le_l2cap_response +31 mem_le_txbdy + +/* smp related */ +5 mem_le_pcnt_tx +5 mem_le_pcnt_rx +4 mem_le_last_mic +4 mem_le_ivm +4 mem_le_ivs +16 mem_le_ltk +1 mem_ltk_exists +16 mem_le_rconfirm +16 mem_le_srand +1 mem_le_iat +1 mem_le_rat +1 mem_le_preq +1 mem_le_preq_iocap +1 mem_le_preq_oob +1 mem_le_preq_auth +1 mem_le_preq_max_keysize +1 mem_le_preq_init_key_distribution +1 mem_le_preq_resp_key_distribution +1 mem_le_pres +1 mem_le_pres_iocap +1 mem_le_pres_oob +1 mem_le_pres_auth +1 mem_le_pres_max_keysize +1 mem_le_pres_init_key_distribution +1 mem_le_pres_resp_key_distribution + +/* att related */ +2 mem_le_search_handle_start +2 mem_le_search_handle_end +0 mem_le_att_offset +1 mem_le_search_att_type_length +16 mem_le_search_att_type +2 mem_le_notify_handle +1 mem_le_search_uuid_length +16 mem_le_search_uuid + + +//START of LE adv parameter structure +0 mem_le_adv_param +2 mem_le_adv_interval +1 mem_le_adv_type +1 mem_le_adv_own_addr_type +1 mem_le_adv_direct_addr_type +6 mem_le_adv_direct_addr +1 mem_le_adv_channel_map +//END of LE adv parameter structure + +//START of LE conn parameter structure +0 mem_le_conn_param +1 mem_le_conn_peer_addr_type +6 mem_le_conn_peer_addr +1 mem_le_conn_own_addr_type +2 mem_le_interval_min +2 mem_le_interval_max +2 mem_le_latency +2 mem_le_timeout +//START of LE conn parameter structure + +//START of LE scan parameter structure +0 mem_le_scan_params +1 mem_le_scan_type +1 mem_le_scan_own_addr_type +//END of LE scan parameter structure + +3 mem_le_lap +1 mem_le_uap +2 mem_le_nap + + +2 mem_le_local_mtu +2 mem_le_remote_mtu + +8 mem_le_skdm +8 mem_le_skds + +2 mem_le_init_superto +2 mem_ui_le_uuid_table + +1 mem_le_secure_connect_enable +1 mem_le_secure_connect_flag +1 mem_le_sc_calc +1 mem_le_secure_connect_state +1 mem_le_sc_confirm_gkey_flag +1 mem_le_sc_local_key_invalid + + +1 mem_le_pairing_state +1 mem_le_enc_state +1 mem_le_pairing_mode +4 mem_le_tk +2 mem_le_ediv +8 mem_le_rand +16 mem_le_irk + +//LE attribute list +4 mem_le_transmit_window + +//ble General configuration +1 mem_le_configuration +16 mem_le_fixed_ltk +2 mem_le_pairing_handle + +//for continue +2 mem_le_l2cap_size +1 mem_le_packet_len_recved + +//for fifo +1 mem_le_tx_buff_used +2 mem_le_tx_ptr0 +2 mem_le_tx_ptr1 +2 mem_le_tx_ptr2 +2 mem_le_tx_ptr3 + +//ble gatt signaling +1 mem_le_signaling_identifier +2 mem_le_l2cap_signaling_conn_param_update_rsp_result + +1 mem_le_packet_size +1 mem_le_packet_llid +2 mem_le_payload_ptr + +1 mem_le_md_count + +) + + +( +0x000001 param_le_features + +1636 param_sifs +0x1e0 param_clke_cal_le +0xa0 param_le_sca +) + +( +0 DEFAULT_STATES +1 IPHONE_LOST_LTK +2 MODULE_LOST_LTK +3 LTK_NOT_LOST +) + + +( +27 LE_MAX_PAKET_LEN +) + +/* advertising channel PDU type */ +( +0 ADV_IND +1 ADV_DIRECT_IND +2 ADV_NONCONN_IND +3 SCAN_REQ +4 SCAN_RSP +5 CONNECT_REQ +6 ADV_SCAN_IND +) + +( +0x01 GAP_ADTYPE_FLAGS +0x02 GAP_ADTYPE_16BIT_MORE +0x03 GAP_ADTYPE_16BIT_COMPLETE +0x04 GAP_ADTYPE_32BIT_MORE +0x05 GAP_ADTYPE_32BIT_COMPLETE +0x06 GAP_ADTYPE_128BIT_MORE +0x07 GAP_ADTYPE_128BIT_COMPLETE +0x08 GAP_ADTYPE_LOCAL_NAME_SHORT +0x09 GAP_ADTYPE_LOCAL_NAME_COMPLETE +0x0a GAP_ADTYPE_POWER_LEVEL +0xff GAP_ADTYPE_MANUFACTURER_SPECIFIC +) + + + /* LE control packet type */ + ( + 0x00 LL_CONNECTION_UPDATE_REQ + 0x01 LL_CHANNEL_MAP_REQ + 0x02 LL_TERMINATE_IND + 0x03 LL_ENC_REQ + 0x04 LL_ENC_RSP + 0x05 LL_START_ENC_REQ + 0x06 LL_START_ENC_RSP + 0x07 LL_UNKNOWN_RSP + 0x08 LL_FEATURE_REQ + 0x09 LL_FEATURE_RSP + 0x0A LL_PAUSE_ENC_REQ + 0x0B LL_PAUSE_ENC_RSP + 0x0C LL_VERSION_IND + 0x0D LL_REJECT_IND + 0x0E LL_SLAVE_FEATURE_REQ + 0x0F LL_CONNECTION_PARAM_REQ + 0x10 LL_CONNECTION_PARAM_RSP + 0x11 LL_REJECT_IND_EXT + 0x12 LL_PING_REQ + 0x13 LL_PING_RSP + ) + + /* Security Manager Protocol Code */ + ( + 0x01 SMP_PAIRING_REQUEST + 0x02 SMP_PAIRING_RESPONSE + 0x03 SMP_PAIRING_CONFIRM + 0x04 SMP_PAIRING_RANDOM + 0x05 SMP_PAIRING_FAILED + 0x06 SMP_ENCRYPTION_INFORMATION + 0x07 SMP_MASTER_IDENTIFICATION + 0x08 SMP_IDENTITY_INFORMATION + 0x09 SMP_IDENTITY_ADDRESS_INFORMATION + 0x0A SMP_SIGNING_INFORMATION + 0x0B SMP_SECURITY_REQUEST + 0x0c SMP_PAIRING_PUBLIC_KEY + 0x0d SMP_PAIRING_DHKEY_CHECK + ) + + /* L2CAP Signaling OPCODE */ + ( + 0x12 L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST + 0x13 L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE + ) + + /* ATT OPCODE */ + ( + 0x01 ATTOP_ERROR_RESPONSE + 0x02 ATTOP_EXCHANGE_MTU_REQUEST + 0x03 ATTOP_EXCHANGE_MTU_RESPONSE + 0x04 ATTOP_FIND_INFORMATION_REQUEST + 0x05 ATTOP_FIND_INFORMATION_RESPONSE + 0x06 ATTOP_FIND_BY_TYPE_VALUE_REQUEST + 0x07 ATTOP_FIND_BY_TYPE_VALUE_RESPONSE + 0x08 ATTOP_READ_BY_TYPE_REQUEST + 0x09 ATTOP_READ_BY_TYPE_RESPONSE + 0x0A ATTOP_READ_REQUEST + 0x0B ATTOP_READ_RESPONSE + 0x0C ATTOP_READ_BLOB_REQUEST + 0x0D ATTOP_READ_BLOB_RESPONSE + 0x0E ATTOP_READ_MULTIPLE_REQUEST + 0x0F ATTOP_READ_MULTIPLE_RESPONSE + 0x10 ATTOP_READ_BY_GROUP_TYPE_REQUEST + 0x11 ATTOP_READ_BY_GROUP_TYPE_RESPONSE + 0x12 ATTOP_WRITE_REQUEST + 0x13 ATTOP_WRITE_RESPONSE + 0x16 ATTOP_PREPARE_WRITE_REQUEST + 0x17 ATTOP_PREPARE_WRITE_RESPONSE + 0x18 ATTOP_EXECUTE_WRITE_REQUEST + 0x19 ATTOP_EXECUTE_WRITE_RESPONSE + 0x1B ATTOP_HANDLE_VALUE_NOTIFICATION + 0x1D ATTOP_HANDLE_VALUE_INDICATION + 0x1E ATTOP_HANDLE_VALUE_CONFIRMATION + 0x52 ATTOP_WRITE_COMMAND + 0xD2 ATTOP_SIGNED_WRITE_COMMAND + 0x1f ATTOP_CONTINUE + 0x9e EMPTY_LE_DATA_PRE + 0x9f EMPTY_LE_DATA + ) + + /* ATT error code */ + ( + 0x01 ATT_ERR_INVALID_HANDLE + 0x02 ATT_ERR_READ_NOT_PERMITTED + 0x03 ATT_ERR_WRITE_NOT_PERMITTED + 0x04 ATT_ERR_INVALID_PDU + 0x05 ATT_ERR_INSUFFICIENT_AUTHENTICATION + 0x06 ATT_ERR_REQUEST_NOT_SUPPORTED + 0x07 ATT_ERR_INVALID_OFFSET + 0x08 ATT_ERR_INSUFFICIENT_AUTHORIZATION + 0x09 ATT_ERR_PREPARE_QUEUE_FULL + 0x0A ATT_ERR_ATTRIBUTE_NOT_FOUND + 0x0B ATT_ERR_ATTRIBUTE_NOT_LONG + 0x0C ATT_ERR_INSUFFICIENT_ENCRYPTION_KEY_SIZE + 0x0D ATT_ERR_INVALID_ATTRIBUTE_VALUE_LENGTH + 0x0E ATT_ERR_UNLIKELY_ERROR + 0x0F ATT_ERR_INSUFFICIENT_ENCRYPTION + 0x10 ATT_ERR_UNSUPPORTED_GROUP_TYPE + 0x11 ATT_ERR_INSUFFICIENT_RESOURCES + ) + /* SERVICE UUID */ + ( + 0x1800 UUID_SERVICE_GENERIC_ACC + 0x1801 UUID_SERVICE_GENERIC_ATT + 0x180a UUID_SERVICE_DEVICE_INFO + 0x180f UUID_SERVICE_BATTERY + 0x1812 UUID_SERVICE_HIDS + 0x2800 UUID_GATT_PRIMARY_SERVICE + 0x2801 UUID_GATT_SECONDARY_SERVICE + 0X2802 UUID_GATT_INCLUDE + 0X2803 UUID_GATT_CHARACTERISTIC + 0X2A00 UUID_CHRCTR_DEVICE_NAME + 0X2A19 UUID_CHRCTR_BATTERY_LEVEL + 0X2A22 UUID_CHRCTR_KEYBOARD_INPUT + 0X2A23 UUID_CHRCTR_SYSTEM_ID + 0X2A25 UUID_CHRCTR_SERIAL_NUMBER + 0X2A26 UUID_CHRCTR_FIRMWARE + 0X2A32 UUID_CHRCTR_KEYBOARD_OUTPUT + 0X2A33 UUID_CHRCTR_MOUSE_INPUT + 0X2A4A UUID_CHRCTR_HID_INFO + 0X2A4B UUID_CHRCTR_REPORT_MAP + 0X2A4C UUID_CHRCTR_HID_CTRL_POINT + 0X2A4D UUID_CHRCTR_REPORT + 0X2A4E UUID_CHRCTR_PROTOCOL_MODE + ) + + (// pairing failed reason + 0x00 PAIRING_FAILED_RESERVED + 0X01 PAIRING_FAILED_PASSKEY_ENTRY_FAILED + 0X02 PAIRING_FAILED_OOB_NOT_AVAILABLE + 0X03 PAIRING_FAILED_AUTHENTICATION_REQUIRE + 0X04 PAIRING_FAILED_CONFIRM_VALUE_FAILED + 0X05 PAIRING_FAILED_PAIRING_NOT_SUPPORTED + 0X06 PAIRING_FAILED_ENCRYPTION_KEY_SIZE + 0X07 PAIRING_FAILED_COMMAND_NOT_SUPPORTED + 0X08 PAIRING_FAILED_UNSPECIFIED_REASON + 0X09 PAIRING_FAILED_REPEATED_ATTEMPTS + 0X0A PAIRING_FAILED_INVALID_PARAMETERS + 0X0B PAIRING_FAILED_DHKEY_CHECK_FAILED + 0X0C PAIRING_FAILED_NUMERIC_COMPARISON_FAILED + 0X0D PAIRING_FAILED_BR_EDR_PAIRING_IN_PROGRESS + 0X0E PAIRING_FAILED_KEY_DERIVATION_GENERATION_NOT_ALLOWED + ) + + + //BLE ErrorCodes + ( + 0x01 ERROR_UNKNOWN_HCI_COMMAND + 0x02 ERROR_NO_CONNECTION + 0x03 ERROR_HARDWARE_FAILURE + 0x04 ERROR_PAGE_TIMEOUT + 0x05 ERROR_AUTHENTICATION_FAILURE + 0x06 ERROR_KEY_MISSING + 0x07 ERROR_MEMORY_FULL + 0x08 ERROR_CONNECTION_TIMEOUT + 0x09 ERROR_MAX_CONNECTIONS + 0x0A ERROR_MAX_SCO_CONNECTIONS + 0x0B ERROR_MAX_ACL_CONNECTIONS + 0x0C ERROR_COMMAND_DISALLOWED + 0x0D ERROR_HOST_REJECT_LIMITED_RESOURCES + 0x0E ERROR_HOST_REJECT_SECURITY_REASONS + 0x0F ERROR_HOST_REJECT_REMOTE_IS_ONLY_PERSONAL + 0x10 ERROR_HOST_TIMEOUT + 0x11 ERROR_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE + 0x12 ERROR_INVALID_HCI_COMMAND_PARAMETERS + 0x13 ERROR_REMOTE_USER_TERMINATED_CONNECTION + 0x14 ERROR_REMOTE_LOW_RESOURCES + 0x15 ERROR_REMOTE_POWERING_OFF + 0x16 ERROR_CONNECTION_TERMINATED_BY_LOCAL_HOST + 0x17 ERROR_REPEATED_ATTEMPTS + 0x18 ERROR_PAIRING_NOT_ALLOWED + 0x19 ERROR_UNKNOWN_LMP_PDU + 0x1A ERROR_UNSUPPORTED_REMOTE_FEATURE + 0x1B ERROR_SCO_OFFSET_REJECTED + 0x1C ERROR_SCO_INTERVAL_REJECTED + 0x1D ERROR_SCO_AIR_MODE_REJECTED + 0x1E ERROR_INVALID_LMP_PARAMETER + 0x1F ERROR_UNSPECIFIED_ERROR + 0x20 ERROR_UNSUPPORTED_LMP_PARAMETER_VALUE + 0x21 ERROR_ROLE_CHANGE_NOT_ALLOWD + 0x22 ERROR_LMP_RESPONSE_TIMEOUT + 0x23 ERROR_ERROR_TRANSACTION_COLLISION + 0x24 ERROR_LMP_PDU_NOT_ALLOWED + 0x25 ERROR_ENCRYPTION_MODE_NOT_ACCEPTABLE + 0x26 ERROR_UNIT_KEY_USED + 0x27 ERROR_QOS_NOT_SUPPORTED + 0x28 ERROR_INSTANT_PASSED + 0x29 ERROR_PAIRING_W_UNIT_KEY_NOT_SUPPORTED + 0x2a ERROR_DIFFERENT_TRANSACTION_COLLISION + 0x2c ERROR_QOS_UNACCEPTABLE_PARAMETER + 0x2d ERROR_QOS_REJECTED + 0x2e ERROR_CHANNEL_CLASSIFICATION_NOT_SUPPORTED + 0x2f ERROR_INSUFFICIENT_SECURITY + 0x30 ERROR_PARAMETER_OUT_OF_MANDATORY_PANGE + 0x32 ERROR_ROLE_SWITCH_PENDING + 0x34 ERROR_RESERVED_SLOT_VIOLATION + 0x35 ERROR_ROLE_SWITCH_FAILED + 0x36 ERROR_EXTENDED_INQUIRY_RESPONSE_TOO_LARGE + 0x37 ERROR_SIMPLE_PAIRING_NOT_SUPPORTED_BY_HOST + 0x38 ERROR_HOST_BUSY_PAIRING + ) + + + //modified_name + ( + 0x14 MAX_NAME_LEN + 0x16 ADV_DATA_NAME_LEN + 0X20 SPACE + + ) + /* GATT Specifications*/ + ( + 0X2900 CHARACTERTIC_EXTENDED_PROPERTIES + 0X2901 CHARACTERTIC_USER_DESCRIPTION + 0X2902 CLIENT_CHARACTERTIC_CONFIGURATION + 0X2903 SERVER_CHARACTERTIC_CONFIGURATION + 0X2904 CHARACTERTIC_PRESENTATION_FORMAT + 0X2905 CHARACTERTIC_AGGREGATE + 0X2906 VALID_RANGE + 0X2907 EXTERNAL_REPORT_REFERENCE + 0X2908 REPORT_REFERENCE + 0X290B ENVIR_SENSING_CONFIGURATION + 0X290C ENVIR_SENSING_MEASUREMENT + 0X290D ENVIR_SENSING_TRIGGER_SETTING + ) + /* LE L2CAP CID */ + ( + 0x0004 LE_L2CAP_CID_ATT + 0x0005 LE_L2CAP_CID_SIGNAL + 0x0006 LE_L2CAP_CID_SMP + ) + + //LE address type + ( + 0 LE_ADDR_TYPE_PUBLIC + 1 LE_ADDR_TYPE_RANDOM + ) + //LE address type bitmap + ( + 7 LE_RECEIVER_ADDR_BIT + 6 LE_SENDER_ADDR_BIT + ) + //LE SCAN TYPE + ( + 0x00 LE_SCAN_TYPE_PASSIVE //no SCAN_REQ shall be sent + 0x01 LE_SCAN_TYPE_ACTIVE + ) + + //LE SCAN ENABLE + ( + 0x00 LE_SCAN_DISABLE + 0x01 LE_SCAN_ENABLE + 0x0101 LE_ACTIVE_SCAN_ENABLE + ) + + //LE FIND INFORMATION RESPONSE + //THE FORMAT OF THE INFORMATION DATA + ( + 0x01 UUID_SIZE_16BIT + 0x02 UUID_SIZE_128BIT + ) + + ( + 0x0000 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED + 0x0001 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED + ) + +// le_state_map 0-2 is reserved for state_inconn,state_insniff and state_sco +( +3 lestate_got_first_packet +4 lestate_encryption +5 lestate_update_param +6 lestate_update_map +) + +// le mode +( +0 lemode_idle +1 lemode_slave +3 lemode_master +) + + +( +0x01 LLID_CONTINUE +0x02 LLID_START +0x03 LLID_LE_LL +0x01 LLID_EMPTY +) + +( +4 LE_TX_BUFF_COUNT +3 LE_TX_BUFF_UPDATE_LOOPCNT //LE_TX_BUFF_COUNT-1 + +12 LE_MD_MAX_COUNT +) + + +( +0 LE_INITATOR_LTK_BIT +1 LE_INITATOR_IRK_BIT +2 LE_INITATOR_CSRK_BIT +) + +( +0x00 LE_PAIRING_MODE_NONE +0x01 LE_PAIRING_MODE_LAGACY_JUSTWORK +0x02 LE_PAIRING_MODE_LAGACY_PASSKEY +0x81 LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK +0x82 LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC +0x83 LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY + +7 LE_PAIRING_MODE_SECURE_CONNECT_BIT +) + + +( +0 FLAG_IOCAP_DISPLAYONLY +1 FLAG_IOCAP_DISPLAYYESNO +2 FLAG_IOCAP_KEYBOARDONLY +3 FLAG_IOCAP_NOINPUTNOOUTPUT +4 FLAG_IOCAP_KEYBOARDDISPLAY + +0x00 FLAG_OOB_DATA_FLAG_NO +) + +( +0x00 FLAG_LE_NO_BONDING_NO_MITM +0x01 FLAG_LE_BONDING_NO_MITM +0x04 FLAG_LE_NO_BONDING_MITM +0x05 FLAG_LE_BONDING_MITM +0x09 FLAG_LE_BONDING_NO_MITM_SECURE +0x0D FLAG_LE_BONDING_MITM_SECURE + +2 LE_AUTH_MITM_BIT +3 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT +) + +( +0 LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND +1 LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE +2 LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE + +) + +( +0 MASTER_PUBLIC_ADDR +1 MASTER_RANDOM_ADDR +) + +( +0x06 LE_ERR_PIN_OR_KEY_MISSING +) + + +( +96000 TIMER_SMP_PAIRING_TIMEOUT //30S +) +//mem_le_pairing_state +( +0 FLAG_LE_PAIRING_NULL +1 FLAG_LE_PAIRING_START +2 FLAG_LE_PAIRING_SEND_RECURITY_REQ +3 FLAG_LE_PAIRING_RCV_PAIRING_REQ +4 FLAG_LE_PAIRING_AUTH +5 FLAG_LE_PAIRING_AFTER_AUTH +6 FLAG_LE_PAIRING_SEND_START_ENC_RSP +7 FLAG_LE_PARING_SEND_ENC_INFORMATION +8 FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION +9 FLAG_LE_PARING_SEND_INDENTITY_INFORMATION +0xff FLAG_LE_PAIRING_END +) + + + +/*LE secure connect state */ +( +0x00 LE_SC_STAT_NULL +0x01 LE_SC_STAT_RECEIVE_PUBLIC_KEY +0x02 LE_SC_STAT_WAIT_SEND_PUBLIC_KEY +0x03 LE_SC_STAT_SEND_PUBLIC_KEY +0x04 LE_SC_STAT_RECEIVE_RANDOM +0x05 LE_SC_STAT_SEND_RANDOM +0x06 LE_SC_STAT_RECEIVE_DHKEY +0x07 LE_SC_STAT_WAIT_CONFIRM_GKEY +0x08 LE_SC_STAT_PASSKEY_WAIT_CONFIRM +) + + +( +0 FLAG_LE_SC_CONFRIM_NULL +1 FLAG_LE_SC_CONFRIM_GKEY_OK +) + +//mem_le_enc_state +( +0 FLAG_LE_ENC_NULL +1 FLAG_LE_RCV_ENC_START +2 FLAG_LE_ENC_PAUSE +3 FLAG_LE_RCV_START_ENC_RSP +4 FLAG_LE_SEND_START_ENC_RSP +0xff FLAG_LE_ENC_END +) + +(//mem_le_configuration +//bit0:use fixed key , ble passkey pairing +0 BIT_BLE_PASSKEY_FIXED_KEY +//bit1:ble pairing use fixed long term key +1 BIT_BLE_PAIRING_FIXED_LTK +//bit2:ble transmit packet will set more data flag +2 BIT_BLE_TRANSMIT_PACKET_BY_MD +//bit3:master read handle, with requires an authenticated link +3 BIT_BLE_READ_AUTH +//bit4:master write handle, with requires an authenticated link +4 BIT_BLE_WRITE_AUTH +//bit5:cannot enter long sleep +5 BIT_BLE_SHORT_MULT + +) + +( +0 BIT_ADV_CHANNEL_MAP_37 +1 BIT_ADV_CHANNEL_MAP_38 +2 BIT_ADV_CHANNEL_MAP_39 +) + + + Index: 1066_OTP_FLASH/format/lmp.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/lmp.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/lmp.format (working copy) @@ -0,0 +1,224 @@ + +memalloc( + +1 mem_lmo_header_length +1 mem_lmo_header_opcode +17 mem_lmo_payload +1 mem_lmi_accepted_opcode +1 mem_disconn_reason_send +1 mem_tx_fixed_freq +1 mem_rx_fixed_freq +1 mem_ext_features_page +2 mem_lmpext_ssp_enable +1 mem_remote_sppcap + +1 mem_lmp_conn_state +2 mem_soft_timer +1 mem_pincode_state + +1 mem_sres_tid +1 mem_accptsco_tid + +1 mem_auth_enable +1 mem_wait_encryption + +16 mem_sniff_payload +4 mem_aurand_send_delay_time +) + +xmemalloc( +3 mem_lmp_version +2 mem_lmp_subversion +1 mem_local_name_length +3 mem_local_name +64 mem_local_name2 +1 mem_local_name_end +1 mem_unsniff2sniff_timer +1 mem_switch_flag +1 mem_classic_bt_flag +) + + ( + //bit flag:mem_classic_bt_flag + 0 FLAG_SSP_REJECT_JUSTWORK + 1 SHORT_MULT_FLAG + ) + + ( + //bit map + 0 pair_state_inrand + 1 pair_state_inrand_acpt + 2 pair_state_send_comb + 3 pair_state_recv_comb + 4 pair_state_send_aurand + 5 pair_state_recv_sres + 6 pair_state_recv_aurand + 7 pair_state_send_sres + ) + /* LMP opcodes */ + ( + 1 LMP_NAME_REQ + 2 LMP_NAME_RES + 3 LMP_ACCEPTED + 4 LMP_NOT_ACCEPTED + 5 LMP_CLKOFFSET_REQ + 6 LMP_CLKOFFSET_RES + 7 LMP_DETACH + 8 LMP_IN_RAND + 9 LMP_COMB_KEY + 10 LMP_UNIT_KEY + 11 LMP_AU_RAND + 12 LMP_SRES + 13 LMP_TEMP_RAND + 14 LMP_TEMP_KEY + 15 LMP_ENCRYPTION_MODE_REQ + 16 LMP_ENCRYPTION_KEY_SIZE_REQ + 17 LMP_START_ENCRYPTION_REQ + 18 LMP_STOP_ENCRYPTION_REQ + 19 LMP_SWITCH_REQ + 20 LMP_HOLD + 21 LMP_HOLD_REQ + 23 LMP_SNIFF_REQ + 24 LMP_UNSNIFF_REQ + 26 LMP_PARK_REQ + 27 LMP_SET_BROADCAST_SCAN_WINDOW + 28 LMP_MODIFY_BEACON + 29 LMP_UNPARK_BD_ADDR_REQ + 30 LMP_UNPARK_PM_ADDR_REQ + 31 LMP_INCR_POWER_REQ + 32 LMP_DECR_POWER_REQ + 33 LMP_MAX_POWER + 34 LMP_MIN_POWER + 35 LMP_AUTO_RATE + 36 LMP_PREFERRED_RATE + 37 LMP_VERSION_REQ + 38 LMP_VERSION_RES + 39 LMP_FEATURES_REQ + 40 LMP_FEATURES_RES + 41 LMP_QUALITY_OF_SERVICE + 42 LMP_QUALITY_OF_SERVICE_REQ + 43 LMP_SCO_LINK_REQ + 44 LMP_REMOVE_SCO_LINK_REQ + 45 LMP_MAX_SLOT + 46 LMP_MAX_SLOT_REQ + 47 LMP_TIMING_ACCURACY_REQ + 48 LMP_TIMING_ACCURACY_RES + 49 LMP_SETUP_COMPLETE + 50 LMP_USE_SEMI_PERMANENT_KEY + 51 LMP_HOST_CONNECTION_REQ + 52 LMP_SLOT_OFFSET + 53 LMP_PAGE_MODE_REQ + 54 LMP_PAGE_SCAN_MODE_REQ + 55 LMP_SUPERVISION_TIMEOUT + 56 LMP_TEST_ACTIVATE + 57 LMP_TEST_CONTROL + 58 LMP_ENC_KEY_SIZE_MASK_REQ + 59 LMP_ENC_KEY_SIZE_MASK_RES + 60 LMP_SET_AFH + + /* simple pairing support */ + 61 LMP_ENCAPSULATED_HEADER + 62 LMP_ENCAPSULATED_PAYLOAD + 63 LMP_SIMPLE_PAIRING_CONFIRM + 64 LMP_SIMPLE_PAIRING_NUMBER + 65 LMP_DHKEY_CHECK + 127 LMP_ESCAPE + 127 LMP_ESCAPE_4 /* add 2bytes LMP header support */ + ) + /* LMP EXT opcodes, ORed with bit 7 to make difference to nonEXT */ + ( + 129 LMP_EXT_ACCEPTED + 130 LMP_NOT_ACCEPTED_EXT + 131 LMP_EXT_FEATURES_REQ + 132 LMP_EXT_FEATURES_RES + 139 LMP_PACKET_TYPE_TABLE_REQ + 140 LMP_EXT_ESCO_LINK_REQ + 141 LMP_EXT_REMOVE_ESCO_REQ + 144 LMP_EXT_CHN_CLASSIFICATION_REQ + 145 LMP_EXT_CHN_CLASSIFICATION + 149 LMP_SNIFF_SUBRATING_REQ + 150 LMP_SNIFF_SUBRATING_RES + 151 LMP_PAUSE_ENCRYPTION_REQ + 152 LMP_RESUME_ENCRYPTION_REQ + 153 LMP_IO_CAP_REQ + 154 LMP_IO_CAP_RES + ) + /* LMP reason codes */ + ( + 0x05 AUTHENTICATION_FAILURE_ERROR + 0x06 KEY_MISSING + 0x0b ACL_CONNECTION_ALREADY_EXISTS + 0x13 OTHER_END_TERMINATED + 0x15 ABOUT_TO_POEWR_OFF + 0x16 LOCAL_HOST + 0x18 PAIRING_NOT_ALLOWED + 0x19 UNKNOWN_LMP_PDU + 0x1A UNSUPPORTED_LMP_FEATURE + 0x1F UNSPECIFIED_ERROR + 0x20 UNSUPPORTED_PARAMETERS + 0x21 SWITCH_NOT_ALLOWED + 0x23 TRANSACTION_COLLISION + 0x24 PDU_NOT_ALLOWED + 0x25 ENCRYPTION_MODE_NOT_ACCEPTABLE + 0x2e NOT_SUPPORT_CHN_CLASSIFICATION + 0x37 NOT_SUPPORT_SSP + ) + + /* test mode scenarios */ + ( + 0 PAUSE_TEST_MODE + 1 ZERO_PATTERN + 2 ONE_PATTERN + 3 ALT_PATTERN + 4 PSEUDORANDOM + 5 CLOSED_LOOP_BACK_ACL + 6 CLOSED_LOOP_BACK_SCO + 7 ACL_WITHOUT_WHITENING + 8 SCO_WITHOUT_WHITENING + 9 ALT2_PATTERN + 255 EXIT_TEST_MODE + ) + /* test mode hoppig modes */ + ( + 0 FIXED_FREQ + 1 NORMAL_HOP + ) + + /* mem_lmp_tid indicates which type of LMP will be sent */ + ( + 0 TID_NORM_REPLY + 1 TID_NORM_SEND + 2 TID_ONE + 3 TID_ZERO + 4 TID_PAIRING + 5 TID_ENCRYPTION + 6 TID_VARIABLE + 7 TID_RX + ) + + /* ============== lmp status ==========*/ + ( + 0 lmp_incoming + 1 lmp_outgoing + 2 lmp_reject_msg + 3 lmp_clear_msg + 4 upper_reject_msg + 5 upper_clear_msg + ) + +( +0x2ee00 TIMER_ONE_MINUTE //96000*2 +80 TIMER_SWITCH_WAITE +12 TIMER_ENPT_WAITE +) + +( +0 SWITCH_FLAG_INIT +1 SWITCH_FLAG_ACCEPT +2 SWITCH_FLAG_NOT_ACCEPT +) +( +0 NULL_ENCRYP +1 DONE_ENCRYP +) + Index: 1066_OTP_FLASH/format/memblocks.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/memblocks.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/memblocks.format (working copy) @@ -0,0 +1,71 @@ +// +// +//Large memory blocks defined in this file. +//Blocks Shall be defined with absolute address. +//Blocks' length Shall be specified in comment following Blocks' names. +//Different blocks MAY be overlap. +//Blocks defined in this file Shall NOT be overlap with variable in memmap.format. + +// USB C51 exchange area +( +0xff0 mem_mcmd +0xff1 mem_mouse_data +) + +//l2cap RX buffers +( +0x1000 mem_l2cap_rxbuff1 //0x400 +0x1400 mem_l2cap_rxbuff2 //0x400 +//end address:0x17ff +) +//l2cap TX buffers +( +0x1800 mem_tx_buff0 //128 +0x1880 mem_tx_buff1 //128 +0x1900 mem_tx_buff2 //128 +0x1980 mem_tx_buff3 //128 +0x1a00 mem_tx_buff4 //128 +0x1a80 mem_tx_buff5 //128 +0x1b00 mem_tx_buff6 //128 +0x1b80 mem_tx_buff7 //128 +//end address: 0x1bff +) + +( +0x1800 mem_le_tx_buffer0 +0x1900 mem_le_tx_buffer1 +0x1a00 mem_le_tx_buffer2 +0x1b00 mem_le_tx_buffer3 +//end addr:0x1dff +) + + +//uart buffer +( +0x1800 mem_h5rx_buf//0x400 +0x1bff mem_h5rx_buf_end +0x1c00 mem_h5tx_buf +0x1fff mem_h5tx_buf_end +) + +( +0x4c00 mem_module_rx_buf//0x400 +0x4c00 mem_module_rx_buf_little +0x4fff mem_module_rx_buf_end +0x1c00 mem_module_tx_buf +0x1fff mem_module_tx_buf_end +) + +( +0x1800 mem_ir_record +0x1c mem_ir_record_max +) + +ifndef REVD +( +0x4b00 memk +) + + +endif + Index: 1066_OTP_FLASH/format/patch.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/patch.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/patch.format (working copy) @@ -0,0 +1,516 @@ + +( + 0 patch00_0 + 1 patch00_1 + 2 patch00_2 + 3 patch00_3 + 4 patch00_4 + 5 patch00_5 + 6 patch00_6 + 7 patch00_7 + 8 patch01_0 + 9 patch01_1 + 10 patch01_2 + 11 patch01_3 + 12 patch01_4 + 13 patch01_5 + 14 patch01_6 + 15 patch01_7 + 16 patch02_0 + 17 patch02_1 + 18 patch02_2 + 19 patch02_3 + 20 patch02_4 + 21 patch02_5 + 22 patch02_6 + 23 patch02_7 + 24 patch03_0 + 25 patch03_1 + 26 patch03_2 + 27 patch03_3 + 28 patch03_4 + 29 patch03_5 + 30 patch03_6 + 31 patch03_7 + 32 patch04_0 + 33 patch04_1 + 34 patch04_2 + 35 patch04_3 + 36 patch04_4 + 37 patch04_5 + 38 patch04_6 + 39 patch04_7 + 40 patch05_0 + 41 patch05_1 + 42 patch05_2 + 43 patch05_3 + 44 patch05_4 + 45 patch05_5 + 46 patch05_6 + 47 patch05_7 + 48 patch06_0 + 49 patch06_1 + 50 patch06_2 + 51 patch06_3 + 52 patch06_4 + 53 patch06_5 + 54 patch06_6 + 55 patch06_7 + 56 patch07_0 + 57 patch07_1 + 58 patch07_2 + 59 patch07_3 + 60 patch07_4 + 61 patch07_5 + 62 patch07_6 + 63 patch07_7 + 64 patch08_0 + 65 patch08_1 + 66 patch08_2 + 67 patch08_3 + 68 patch08_4 + 69 patch08_5 + 70 patch08_6 + 71 patch08_7 + 72 patch09_0 + 73 patch09_1 + 74 patch09_2 + 75 patch09_3 + 76 patch09_4 + 77 patch09_5 + 78 patch09_6 + 79 patch09_7 + 80 patch0a_0 + 81 patch0a_1 + 82 patch0a_2 + 83 patch0a_3 + 84 patch0a_4 + 85 patch0a_5 + 86 patch0a_6 + 87 patch0a_7 + 88 patch0b_0 + 89 patch0b_1 + 90 patch0b_2 + 91 patch0b_3 + 92 patch0b_4 + 93 patch0b_5 + 94 patch0b_6 + 95 patch0b_7 + 96 patch0c_0 + 97 patch0c_1 + 98 patch0c_2 + 99 patch0c_3 + 100 patch0c_4 + 101 patch0c_5 + 102 patch0c_6 + 103 patch0c_7 + 104 patch0d_0 + 105 patch0d_1 + 106 patch0d_2 + 107 patch0d_3 + 108 patch0d_4 + 109 patch0d_5 + 110 patch0d_6 + 111 patch0d_7 + 112 patch0e_0 + 113 patch0e_1 + 114 patch0e_2 + 115 patch0e_3 + 116 patch0e_4 + 117 patch0e_5 + 118 patch0e_6 + 119 patch0e_7 + 120 patch0f_0 + 121 patch0f_1 + 122 patch0f_2 + 123 patch0f_3 + 124 patch0f_4 + 125 patch0f_5 + 126 patch0f_6 + 127 patch0f_7 + 128 patch10_0 + 129 patch10_1 + 130 patch10_2 + 131 patch10_3 + 132 patch10_4 + 133 patch10_5 + 134 patch10_6 + 135 patch10_7 + 136 patch11_0 + 137 patch11_1 + 138 patch11_2 + 139 patch11_3 + 140 patch11_4 + 141 patch11_5 + 142 patch11_6 + 143 patch11_7 + 144 patch12_0 + 145 patch12_1 + 146 patch12_2 + 147 patch12_3 + 148 patch12_4 + 149 patch12_5 + 150 patch12_6 + 151 patch12_7 + 152 patch13_0 + 153 patch13_1 + 154 patch13_2 + 155 patch13_3 + 156 patch13_4 + 157 patch13_5 + 158 patch13_6 + 159 patch13_7 + 160 patch14_0 + 161 patch14_1 + 162 patch14_2 + 163 patch14_3 + 164 patch14_4 + 165 patch14_5 + 166 patch14_6 + 167 patch14_7 + 168 patch15_0 + 169 patch15_1 + 170 patch15_2 + 171 patch15_3 + 172 patch15_4 + 173 patch15_5 + 174 patch15_6 + 175 patch15_7 + 176 patch16_0 + 177 patch16_1 + 178 patch16_2 + 179 patch16_3 + 180 patch16_4 + 181 patch16_5 + 182 patch16_6 + 183 patch16_7 + 184 patch17_0 + 185 patch17_1 + 186 patch17_2 + 187 patch17_3 + 188 patch17_4 + 189 patch17_5 + 190 patch17_6 + 191 patch17_7 + 192 patch18_0 + 193 patch18_1 + 194 patch18_2 + 195 patch18_3 + 196 patch18_4 + 197 patch18_5 + 198 patch18_6 + 199 patch18_7 + 200 patch19_0 + 201 patch19_1 + 202 patch19_2 + 203 patch19_3 + 204 patch19_4 + 205 patch19_5 + 206 patch19_6 + 207 patch19_7 + 208 patch1a_0 + 209 patch1a_1 + 210 patch1a_2 + 211 patch1a_3 + 212 patch1a_4 + 213 patch1a_5 + 214 patch1a_6 + 215 patch1a_7 + 216 patch1b_0 + 217 patch1b_1 + 218 patch1b_2 + 219 patch1b_3 + 220 patch1b_4 + 221 patch1b_5 + 222 patch1b_6 + 223 patch1b_7 + 224 patch1c_0 + 225 patch1c_1 + 226 patch1c_2 + 227 patch1c_3 + 228 patch1c_4 + 229 patch1c_5 + 230 patch1c_6 + 231 patch1c_7 + 232 patch1d_0 + 233 patch1d_1 + 234 patch1d_2 + 235 patch1d_3 + 236 patch1d_4 + 237 patch1d_5 + 238 patch1d_6 + 239 patch1d_7 + 240 patch1e_0 + 241 patch1e_1 + 242 patch1e_2 + 243 patch1e_3 + 244 patch1e_4 + 245 patch1e_5 + 246 patch1e_6 + 247 patch1e_7 + 248 patch1f_0 + 249 patch1f_1 + 250 patch1f_2 + 251 patch1f_3 + 252 patch1f_4 + 253 patch1f_5 + 254 patch1f_6 + 255 patch1f_7 + 0 patch20_0 + 1 patch20_1 + 2 patch20_2 + 3 patch20_3 + 4 patch20_4 + 5 patch20_5 + 6 patch20_6 + 7 patch20_7 + 8 patch21_0 + 9 patch21_1 + 10 patch21_2 + 11 patch21_3 + 12 patch21_4 + 13 patch21_5 + 14 patch21_6 + 15 patch21_7 + 16 patch22_0 + 17 patch22_1 + 18 patch22_2 + 19 patch22_3 + 20 patch22_4 + 21 patch22_5 + 22 patch22_6 + 23 patch22_7 + 24 patch23_0 + 25 patch23_1 + 26 patch23_2 + 27 patch23_3 + 28 patch23_4 + 29 patch23_5 + 30 patch23_6 + 31 patch23_7 + 32 patch24_0 + 33 patch24_1 + 34 patch24_2 + 35 patch24_3 + 36 patch24_4 + 37 patch24_5 + 38 patch24_6 + 39 patch24_7 + 40 patch25_0 + 41 patch25_1 + 42 patch25_2 + 43 patch25_3 + 44 patch25_4 + 45 patch25_5 + 46 patch25_6 + 47 patch25_7 + 48 patch26_0 + 49 patch26_1 + 50 patch26_2 + 51 patch26_3 + 52 patch26_4 + 53 patch26_5 + 54 patch26_6 + 55 patch26_7 + 56 patch27_0 + 57 patch27_1 + 58 patch27_2 + 59 patch27_3 + 60 patch27_4 + 61 patch27_5 + 62 patch27_6 + 63 patch27_7 + 64 patch28_0 + 65 patch28_1 + 66 patch28_2 + 67 patch28_3 + 68 patch28_4 + 69 patch28_5 + 70 patch28_6 + 71 patch28_7 + 72 patch29_0 + 73 patch29_1 + 74 patch29_2 + 75 patch29_3 + 76 patch29_4 + 77 patch29_5 + 78 patch29_6 + 79 patch29_7 + 80 patch2a_0 + 81 patch2a_1 + 82 patch2a_2 + 83 patch2a_3 + 84 patch2a_4 + 85 patch2a_5 + 86 patch2a_6 + 87 patch2a_7 + 88 patch2b_0 + 89 patch2b_1 + 90 patch2b_2 + 91 patch2b_3 + 92 patch2b_4 + 93 patch2b_5 + 94 patch2b_6 + 95 patch2b_7 + 96 patch2c_0 + 97 patch2c_1 + 98 patch2c_2 + 99 patch2c_3 + 100 patch2c_4 + 101 patch2c_5 + 102 patch2c_6 + 103 patch2c_7 + 104 patch2d_0 + 105 patch2d_1 + 106 patch2d_2 + 107 patch2d_3 + 108 patch2d_4 + 109 patch2d_5 + 110 patch2d_6 + 111 patch2d_7 + 112 patch2e_0 + 113 patch2e_1 + 114 patch2e_2 + 115 patch2e_3 + 116 patch2e_4 + 117 patch2e_5 + 118 patch2e_6 + 119 patch2e_7 + 120 patch2f_0 + 121 patch2f_1 + 122 patch2f_2 + 123 patch2f_3 + 124 patch2f_4 + 125 patch2f_5 + 126 patch2f_6 + 127 patch2f_7 + 128 patch30_0 + 129 patch30_1 + 130 patch30_2 + 131 patch30_3 + 132 patch30_4 + 133 patch30_5 + 134 patch30_6 + 135 patch30_7 + 136 patch31_0 + 137 patch31_1 + 138 patch31_2 + 139 patch31_3 + 140 patch31_4 + 141 patch31_5 + 142 patch31_6 + 143 patch31_7 + 144 patch32_0 + 145 patch32_1 + 146 patch32_2 + 147 patch32_3 + 148 patch32_4 + 149 patch32_5 + 150 patch32_6 + 151 patch32_7 + 152 patch33_0 + 153 patch33_1 + 154 patch33_2 + 155 patch33_3 + 156 patch33_4 + 157 patch33_5 + 158 patch33_6 + 159 patch33_7 + 160 patch34_0 + 161 patch34_1 + 162 patch34_2 + 163 patch34_3 + 164 patch34_4 + 165 patch34_5 + 166 patch34_6 + 167 patch34_7 + 168 patch35_0 + 169 patch35_1 + 170 patch35_2 + 171 patch35_3 + 172 patch35_4 + 173 patch35_5 + 174 patch35_6 + 175 patch35_7 + 176 patch36_0 + 177 patch36_1 + 178 patch36_2 + 179 patch36_3 + 180 patch36_4 + 181 patch36_5 + 182 patch36_6 + 183 patch36_7 + 184 patch37_0 + 185 patch37_1 + 186 patch37_2 + 187 patch37_3 + 188 patch37_4 + 189 patch37_5 + 190 patch37_6 + 191 patch37_7 + 192 patch38_0 + 193 patch38_1 + 194 patch38_2 + 195 patch38_3 + 196 patch38_4 + 197 patch38_5 + 198 patch38_6 + 199 patch38_7 + 200 patch39_0 + 201 patch39_1 + 202 patch39_2 + 203 patch39_3 + 204 patch39_4 + 205 patch39_5 + 206 patch39_6 + 207 patch39_7 + 208 patch3a_0 + 209 patch3a_1 + 210 patch3a_2 + 211 patch3a_3 + 212 patch3a_4 + 213 patch3a_5 + 214 patch3a_6 + 215 patch3a_7 + 216 patch3b_0 + 217 patch3b_1 + 218 patch3b_2 + 219 patch3b_3 + 220 patch3b_4 + 221 patch3b_5 + 222 patch3b_6 + 223 patch3b_7 + 224 patch3c_0 + 225 patch3c_1 + 226 patch3c_2 + 227 patch3c_3 + 228 patch3c_4 + 229 patch3c_5 + 230 patch3c_6 + 231 patch3c_7 + 232 patch3d_0 + 233 patch3d_1 + 234 patch3d_2 + 235 patch3d_3 + 236 patch3d_4 + 237 patch3d_5 + 238 patch3d_6 + 239 patch3d_7 + 240 patch3e_0 + 241 patch3e_1 + 242 patch3e_2 + 243 patch3e_3 + 244 patch3e_4 + 245 patch3e_5 + 246 patch3e_6 + 247 patch3e_7 + 248 patch3f_0 + 249 patch3f_1 + 250 patch3f_2 + 251 patch3f_3 + 252 patch3f_4 + 253 patch3f_5 + 254 patch3f_6 + 255 patch3f_7 + +) Index: 1066_OTP_FLASH/format/regs.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/regs.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/regs.format (working copy) @@ -0,0 +1,298 @@ +( + 0x8000 core_chipid + 0x8003 core_kick + 0x8005 core_lpm_wr + 0x8006 core_misc_ctrl + 0x8007 core_otp_rdata + 0x8009 core_pcmoutfifo + 0x8010 core_reset + 0x8011 core_encrypt + 0x8015 core_uart_txd + 0x8022 core_ucode_hi + 0x8023 core_ucode_ctrl + 0x8024 core_ucode_low + 0x8025 core_ucode_data + 0x8040 core_halfslot + 0x8042 core_clksel + 0x8043 core_uart_clksel + 0x8043 core_config + 0x8044 core_xtal_stable_time + 0x8045 core_otp_addr + 0x8046 core_otp_din + 0x8047 core_otp_ctrl + 0x8048 core_otpd_addr + 0x804a core_otpd_len + 0x804b core_otpd_ctrl + 0x804c core_lpm_reg + 0x804f core_lpm_isogate + 0x8050 core_clkoff + 0x8052 core_uart_baud + 0x8054 core_uart_rsaddr + 0x8056 core_uart_readdr + 0x8058 core_uart_rrptr + 0x805a core_uart_tsaddr + 0x805c core_uart_teaddr + 0x805e core_uart_twptr + 0x8060 core_uart_trptrp + 0x8062 core_uart_ctrl + 0x8063 core_bist_ctrl + 0x8064 core_pwm_pcnt3 + 0x8066 core_pwm_ncnt3 + 0x8068 core_pwm_pcnt4 + 0x806a core_pwm_ncnt4 + 0x806c core_pwm_pcnt5 + 0x806e core_pwm_ncnt5 + 0x8070 core_gpio_oe0 + 0x8071 core_gpio_oe1 + 0x8072 core_gpio_oe2 + 0x8073 core_gpio_oe3 + 0x8074 core_gpio_out0 + 0x8075 core_gpio_out1 + 0x8076 core_gpio_out2 + 0x8077 core_gpio_out3 + 0x8078 core_gpio_pu0 + 0x8079 core_gpio_pu1 + 0x807a core_gpio_pu2 + 0x807b core_gpio_pu3 + 0x807c core_gpio_pd0 + 0x807d core_gpio_pd1 + 0x807e core_gpio_pd2 + 0x807f core_gpio_pd3 + 0x8080 core_gpio_sel + 0x8081 core_gpio_sel1 + 0x8082 core_gpio_sel2 + 0x8083 core_gpio_key0 + 0x8084 core_gpio_key1 + 0x8085 core_gpio_key2 + 0x8086 core_spid_ctrl + 0x8087 core_spid_delay + 0x8088 core_spid_txlen + 0x808a core_spid_txaddr + 0x808c core_spid_rxaddr + 0x808e core_spid_rxlen + 0x8090 core_iicd_ctrl + 0x8091 core_iicd_scl_low + 0x8092 core_iicd_scl_high + 0x8093 core_iicd_start_setup + 0x8094 core_iicd_start_hold + 0x8095 core_iicd_stop_setup + 0x8096 core_iicd_data_setup + 0x8097 core_iicd_data_hold + 0x8098 core_iicd_txlen + 0x809a core_iicd_txaddr + 0x809c core_iicd_rxaddr + 0x809e core_iicd_rxlen + 0x80a0 core_pwm_pcnt0 + 0x80a2 core_pwm_ncnt0 + 0x80a4 core_pwm_pcnt1 + 0x80a6 core_pwm_ncnt1 + 0x80a8 core_pwm_pcnt2 + 0x80aa core_pwm_ncnt2 + 0x80b0 core_enc_ctrl + 0x80b1 core_cvsd_ctrl + 0x80b2 core_codec_ctrl + 0x80b3 core_dec_ctrl + + + + + + 0x8108 core_misc_status + 0x8109 core_qdec_cntx + 0x810a core_qdec_cnty + 0x810b core_qdec_cntz + 0x810c core_uart_status + 0x810d core_uart_rbaud + 0x810e core_uart_txitems + 0x8110 core_uart_trptr + 0x8112 core_uart_rxitems + 0x8114 core_uart_rdptr + 0x8116 core_uart_rwptr + 0x8119 core_kscn_kstat + 0x811a core_kscn_event + 0x811b core_kscn_event_num + 0x811c core_gpio_in + 0x811d core_gpio_in1 + 0x8124 core_current_otp_addr + 0x8126 core_otpd_remain + 0x8128 core_spid_remain + 0x812a core_iicd_remain + 0x812c core_dma_status + 0x812d core_perf_status + 0x812e core_adc_in + 0x8134 core_pcminfifo + 0x8135 core_pcminfifo_remain + 0x8136 core_pcmoutfifo_remain + 0x8138 core_lpm_ctrl + 0x813c core_lpm_xtalcnt + 0x813d core_lpm_buckcnt + 0x813e core_lpm_ldocnt + 0x813f core_lpm_latch + 0x8140 core_gpio_wakeup_low + 0x8144 core_gpio_wakeup_high + 0x8149 core_clk_counter + 0x8150 core_adc_sum +// dummy regs + + 0x8203 core_ice_ctrl + 0x8204 core_ice_status + 0x8205 core_ice_break0 + 0x8207 core_ice_break1 + + 0x8280 core_docd_ctrl + 0x8288 core_docd_paddr + 0x828a core_docd_pdata + + 0x8300 iic_prer_low + 0x8301 iic_slave_addr + 0x8302 iic_ctr + 0x8303 iic_cr + 0x8304 iic_rxr + 0x8305 iic_txr + 0x8306 iic_sr + 0x8307 iic_fifo + + 0x8400 mem_b_box /* entire bank */ + 0x8500 mem_e_box /* entire bank */ + 0x8600 mem_l_box /* entire bank */ + +ifdef REVD + 0x8700 memk +endif + + 0x8900 rfen_rx + 0x8901 rfen_tx + 0x8902 rfen_mdm + 0x8903 rfen_sn + 0x8904 rfen_msc + 0x8905 rfen_ck + 0x8906 rfen_adc + 0x8912 rf_agc_ctrl + 0x8914 rfen_ulp + 0x8973 rfen_chgpump + 0x894b rf_rx_vctrl_reg1 + 0x894c rf_rx_vctrl_reg2 + 0x894d rf_rx_ib_lna + 0x894e rf_rx_lna_ctrim + + 0x8950 rf_bpf_ctrim + 0x8951 rf_bpf_ib + 0x8952 rf_adc_rccal + 0x8952 rf_rccal_ctrl + 0x8953 rf_rccal_sel + 0x8955 rf_tx_pa + 0x895f rf_pll_rstn + 0x8964 rf_sdm_en + 0x8960 rf_pll_intg + 0x8961 rf_pll_frac + 0x8963 rf_pll_frachi + 0x896c rf_afc_cap + 0x8967 rf_clkpll_bias + 0x896f rf_clkpll_en + 0x8968 rf_clkpll_int + 0x8969 rf_clkpll_frac + 0x896d rf_balun_ctrim + 0x8971 rf_adc_mode + 0x8972 rf_adc_gc + 0x8973 rf_adc_ch + 0x8980 rf_rccal_result + 0x8981 rf_afc_d2a + 0x8982 rf_rssi + + +0x8a00 core_usb_config +0x8a01 core_usb_int_mask +0x8a04 core_usb_addr +0x8a10 core_usb_trig +0x8a11 core_usb_stall +0x8a12 core_usb_clear +0x8a18 core_usb_ep +0x8a18 core_usb_dfifo0 +0x8a19 core_usb_dfifo1 +0x8a1a core_usb_dfifo2 +0x8a20 core_usb_ep_len +0x8a26 core_usb_status +0x8a27 core_usb_fifo_empty +0x8a28 core_usb_fifo_full + + +4 rx_freq_offset +1 tx_freq_offset + +/* bit difinitions */ + 4 whiteoff_bit + 6 clksel_rc + 5 clksel_dpll + 4 clksel_xtal + 5 adc_rccal + 0 bpf_rccal + 1 demod_clkoff + +( + 2 reload_code + 3 gpio_latch + 4 enable_retmem + 7 cold_wake + 0xef isogate_mask + 0xe0 cs_mask +) + +// misc ctrl +( + 0x01 otpd_start + 0x02 spid_start + 0x04 iicd_start + 0x08 lock_otp + 0x10 x_sethi + 0x20 y_sethi + 0x40 z_sethi + 0x80 ccnt_start +) +// dma status bit +( + 0 otpd_crcok + 1 otpd_done + 2 spid_crcok + 3 spid_done + 4 iicd_crcok + 5 iicd_done + 6 iicd_ack +) + +0x8b uart_ctrl_default //BCSP +0x81 uart_ctrl_h4 //H4 +0x81 uart_ctrl_normal +0x91 uart_ctrl_5line +0x81 uart_ctrl_57600 +2 uart_baud_len +0x00 uartclk_crystal +0x01 uartclk_dpll +0x1a0 uart_baud_115200 +0xbb uart_baud_256000 +0x340 uart_baud_57600 +0x34 uart_baud_921600 +0x9c4 uart_baud_9600 +0x2dc6c00 uart_clk +0x16E3600 uart_clk_24 + +//core_clkoff +( + 0 CLOCK_OFF_AUTH_ROM + 1 CLOCK_OFF_UC_ROM + 2 CLOCK_OFF_DEBUG_UART + 3 CLOCK_OFF_SCHED_RAM + 4 CLOCK_OFF_TRANCE_FIFO + 5 CLOCK_OFF_CORDIC + 6 CLOCK_OFF_OTPD + 7 CLOCK_OFF_I2C + 8 CLICK_OFF_8051 + 9 CLOCK_OFF_KEYSCAN + 0x0a CLOCK_OFF_USB + 0x0b CLOCK_OFF_QDECODER + 0x0c CLOCK_OFF_SPI + 0x0d CLOCK_OFF_PWM + 0x0e CLOCK_OFF_CODEC + 0x0f CLOCK_OFF_UART +) + + Index: 1066_OTP_FLASH/format/rfcomm.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/rfcomm.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/rfcomm.format (working copy) @@ -0,0 +1,391 @@ +/*****************************************************************************/ +/* RCS HEADER -- DO NOT ERASE */ +/* $Author: Administrator $ */ +/* $Id: bt_rfcomm_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */ +/* Orisil Technology */ +/*****************************************************************************/ + +/**********/ +/* memory */ +/**********/ + +memalloc( +1 memRemoteRPNBitRate +1 memRemotePRNDataBits +1 memRemotePRNStopBit +1 memRemotePRNParity +1 memRemotePRNFlowControl +1 memRemotePRNXon +1 memRemotePRNXoff + + +3 mem_mod2div_temp +2 mem_contw_temp +2 mem_attrib_list + +//rfcomm head +1 mem_current_adss +1 mem_current_channel +1 mem_current_frame_type +1 mem_current_fcs +2 mem_current_length +2 mem_rfcomm_uih_payload_ptr + +//rfcomm uih +1 mem_uih_cmd_type +2 mem_uih_length +2 mem_param_payload_ptr + + +//rfcomm modem status +1 mem_ms_param + +//rfcomm pn +1 mem_pn_credit_flow_type_info +1 mem_pn_priority +1 mem_pn_acknowledg_timer +1 mem_pn_max_retrans + +1 mem_rfcomm_send_adss +1 mem_rfcomm_send_frame_type +1 mem_rfcomm_send_fcs +1 mem_rfcomm_send_offset + +) + +xmemalloc( +1 mem_pn_dlci +2 mem_pn_max_frame_size + +1 memFCStemp1 +1 memFCStemp2 +1 memFCStemp3 + +1 mem_rfcomm_initiator + +1 mem_remote_spp_channel + +1 mem_HIUfcs_SPP +1 mem_HIUfcs_SPP_WCredits + +1 mem_rfcomm_send_more_pkt + +1 mem_remote_credits +1 mem_credit_given + +//rfcomm modem status +1 mem_ms_channel + +1 mem_credit_flag + +2 mem_rfcomm_max_frame_size +1 mem_rfcomm_credit_init_data + +2 mem_cb_receive_spp_data + +2 mem_nl_rx_data_src +2 mem_nl_rx_len_all +) + + +( +0 CREDIT_DISABLE +1 CREDIT_ENABLE +) + + +/************************************************************************/ + + + +/************/ +/* constant */ +/************/ + +/* RFCOMM state for Headset (memRFCOMM_State) */ + ( + 0 RFCOMM_IDLE /* before the responsor HS receive SABM */ + 1 RFCOMM_W4_DLCI0_OPEN + 2 RFCOMM_W4_DLCI0_CLOSE + 3 RFCOMM_START_DLCI0 /* After respond SABM frame (DLCI=0) */ + 4 RFCOMM_W4_DLCI_OPEN + 5 RFCOMM_W4_DLCI_CLOSE + 6 RFCOMM_DLCI_OPENED + + ) + +/* RFCOMM timer constants */ + ( + 1000 RFCOMM_T1 /* Used by SABM and DISC frames,100*20ms = 20s */ + 1000 RFCOMM_T2 /* Used by commands send in UIH on DLCI0, */ + 300 RFCOMM_T3_RINGON /* 6s for ring fade time */ + + ) + +/* Command Type */ + ( + 0x3F RSP_RX_SABM /*responsor expect SABM from initiator */ + 0x3F INI_TX_SABM + + 0x73 RSP_TX_UA /*responsor send out UA command */ + 0x73 UA_WFBIT_SET /* UA control field with F bit set */ + + 0xEF RSP_RX_UIH /*responsor expect UIH from initiator */ + + 0xEF RSP_TX_UIH /*responsor send UIH to initiator */ + + 0x1F RSP_TX_DM /*responsor send DM to initiator */ + 0x1F DM_WFBIT_SET /* DM control field with F bit set */ + 0x0F DM_WFBIT_CLEAR /* DM control field with F bit clear */ + + 0x53 RSP_RX_DISC /*responsor expect DISC from initiator */ + 0x53 INI_TX_DISC /*initiator send DISC control type command */ + + 0xFF RSP_RX_UIH_WDATA /*UIH data with credit flow control info */ + + + ) + +/* Multiplexor commands and responses frames */ + ( + 0x83 PN_COMMAND /* Bit 0 EA C/R Type = 000001 */ + 0x81 PN_RESPONSOR /* Bit 0 EA C/R Type = 000001 */ + + 0xE3 MSC_COMMAND /* Bit 0 EA C/R Type = 000111 */ + 0xE1 MSC_RESPONSOR + + 0x13 NSC_COMMAND /* Bit 0 EA C/R Type = 001000 */ + 0x11 NSC_RESPONSOR /* Bit 0 EA C/R Type = 001000 */ + + 0x23 TEST_COMMAND /* Bit 0 EA C/R Type = 000111 */ + 0x21 TEST_RESPONSOR + + 0x93 RPN_COMMAND /* Bit 0 EA C/R Type = 001001 */ + 0x91 RPN_RESPONSOR + + 0x53 RLS_COMMAND /* Bit 0 EA C/R Type = 001010 */ + 0x51 RLS_RESPONSOR + + 0xA3 FCON_COMMAND /* Bit 0 EA C/R Type = 000101 */ + 0xA1 FCON_RESPONSOR + + 0x63 FCOFF_COMMAND /* Bit 0 EA C/R Type = 000110 */ + 0x61 FCOFF_RESPONSOR + + 0x03 RLS_OVERRUN + 0x05 RLS_PARITY_ERROR + 0x09 RLS_FRAMING_ERROR + ) + +/* memLocalCredit */ + ( + 0x01 RFCOMM_CREDIT + ) + + ( + 0x007f RFCOMM_MAX_FRAME_SIZE + ) + +/* UIH received Data length */ + ( + 0 LENGTH_ZERO + + 6 LENGTH_OK + 7 LENGTH_HOT + 8 LENGTH_RING + 9 LENGTH_ERROR + 9 LENGTH_AGVOL_ONEBYTE + 10 LENGTH_AGVOL_TWOBYTE + 10 LENGTH_VOL_ONEBYTE + 11 LENGTH_VOL_TWOBYTE + 12 LENGTH_BRSF + 13 LENGTH_PLUS_CIEV + 15 LENGTH_INBANDRING + 14 LENGTH_CIEV_CALL + 17 LENGTH_CRING + 20 LENGTH_BRSF_OK + 24 LENGTH_CIND0 + 28 LENGTH_CIEV_TWO + 32 LENGTH_CIND_OK + 59 LENGTH_CIND_OK2 + 100 LENGTH_DISCARD + ) + +/************/ +/* flags */ +/************/ + +/* memRFCOMM_L2CAP_Interface */ + ( + 0 RFCOMM_TX_W4BUF_FLAG /* Wait for Tx buffer empty flag */ + 1 RFCOMM_CLOSE_LINK_FLAG + ) + + + +/* memRemoteMSC */ + ( + 0 MSC_EA_BIT + 1 MSC_FC_BIT + 2 MSC_RTC_BIT + 3 MSC_RTR_BIT + 6 MSC_IC_BIT + 7 MSC_DV_BIT + ) + +/* memRemoteRLS */ + ( + 0x0C OVERRUN_ERROR + 0x0A PARITY_ERROR + 0x09 FRAMING_RERROR + ) + +/* memRemoteRPNBitRate */ + ( + 0x00 BITS2400 + 0x01 BITS4800 + 0x02 BITS7200 + 0x03 BITS9600 + 0x04 BITS19200 + 0x05 BITS38400 + 0x06 BITS57600 + 0x07 BITS115200 + 0x08 BITS230400 + ) + +/* memRemotePRNDataBits */ + ( + 0x00 DATABITS5 + 0x01 DATABITS6 + 0x02 DATABITS7 + 0x03 DATABITS8 + ) + +/* memRemotePRNStopBit */ + ( + 0 ONESTOP + 1 ONEHALFSTOP + ) + +/* memRemotePRNParity */ + ( + 0 ODDPARITY + 1 EVENPARITY + 2 MARKPARITY + 3 SPACEPARITY + + 7 PARITY_ENABLE_BIT + ) + +/* RPN bit mask(in) */ + ( + 0 BIT_RATE_MASK_BIT + 1 DATA_BITS_MASK_BIT + 2 STOP_BITS_MASK_BIT + 3 PARITY_MASK_BIT + 4 PARITY_TYPE_MASK_BIT + 5 XON_CHAR_MASK_BIT + 6 XOFF_CHAR_MASK_BIT + ) + +/* RPN bit mask(in) 2 */ + ( + 0 XON_XOFF_INPUT_MASK_BIT + 1 XON_XOFF_OUTPUT_MASK_BIT + 2 RTR_INPUT_MASK_BIT + 3 RTR_OUTPUT_MASK_BIT + 4 RTC_INPUT_MASK_BIT + 5 RTC_OUTPUT_MASK_BIT + + ) + +/* memRFCOMM_Request */ + ( + 0 SEND_MSC_CMD_REQ_FLAG + 1 SEND_AT_CKPD_REQ_FLAG + 2 SEND_RING_REQ_FLAG + 3 SEND_SABM_CMD + ) + +/* memRFCOMM_Misc_Flag */ + ( + 0 MSC_CDM_ALREADY_SEND_FLAG + 1 CREDIT_FLOW_USED_FLAG + 2 DONT_EMBEDDED_CREDIT_FLAG + 3 MSC_EXCHANGE_DONE_FLAG + 4 FLOW_CONTROL_FCOFF_BIT /* set when receive FCoff, clear when FCon */ + ) + +/* memRemoteMSC */ + ( + 1 FLOW_CONTROL_FC_BIT /* received MSC FC bits */ + + ) +/* Address filed */ + ( + 0 ADDR_EA_BIT + 1 ADDR_CR_BIT + 2 ADDR_D_BIT + ) +//should be same as descripted in SDP +( + 1 SPP_SLAVE_CHANNEL + 7 OBEX_SERVER_CHANNEL + 8 HF_SERVER_CHANNEL + 9 HS_SERVER_CHANNEL +) +/* memRFCOMM_Flag */ +( + 0 USING_HF_PROFILE + 1 USING_HS_PROFILE + 2 USING_SPP_PROFILE +) +/*RFCOMM Frame Type*/ +( + 0x3f RFCOMM_FRAME_TYPE_SABM + 0x73 RFCOMM_FRAME_TYPE_UA + 0xEF RFCOMM_FRAME_TYPE_UIH + 0xFF RFCOMM_FRAME_TYPE_UIH_CREDITS + 0x53 RFCOMM_FRAME_TYPE_DISCONN +) +/*RFCOMM UIH CMD TYPE*/ +( + 0x41 UIH_PARAM_NEG_CMD + 0x40 UIH_PARAM_NEG_RES + 0x49 UIH_PARAM_CMD_REMOVE_PORT + 0x71 UIH_MODEM_STATUS_CMD + 0x70 UIH_MODEM_STATUS_RES +) + +/*bits in rfcomm address*/ +( + 0 RFCOMM_ADDRESS_EXT_LEN + 1 RFCOMM_ADDRESS_CR + 2 RFCOMM_ADDRESS_DERECTION + + +) + + ( + 0 RFCOMM_CHANNEL_STATE_PN_CMD + 1 RFCOMM_CHANNEL_STATE_PN_RES + 2 RFCOMM_CHANNEL_STATE_SABM + 3 RFCOMM_CHANNEL_STATE_UA + 4 RFCOMM_CHANNEL_STATE_SND_MS_CMD + 5 RFCOMM_CHANNEL_STATE_RCV_MS_CMD + 6 RFCOMM_CHANNEL_STATE_SND_MS_RES + 7 RFCOMM_CHANNEL_STATE_RCV_MS_RES + 0xff RFCOMM_CHANNEL_SETUP_COMPLETE + ) + + /*mem_rfcomm_send_more_pkt*/ + ( + 1 MORE_PKT_MSC_CMD_HF + 2 MORE_PKT_MSC_CMD_HS + 3 MORE_PKT_MSC_CMD_SPP + 4 MORE_PKT_MSC_CMD_OBEX + ) + + ( + 127 RFCOMM_MALLOC_SIZE + ) \ No newline at end of file Index: 1066_OTP_FLASH/format/sdp.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/sdp.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/sdp.format (working copy) @@ -0,0 +1,70 @@ + +memalloc( +0 mem_sdp_mem_start +8 mem_sdp_uuid_search_ptr +2 mem_sdp_continue_byte +1 mem_sdp_pduid +2 mem_sdp_transactionid +2 mem_sdp_transactionid_local +2 mem_sdp_attribute_maxbyte +2 mem_sdp_record_maxcnt +4 mem_sdp_record_handle +1 mem_sdp_LACAP_found +1 mem_sdp_RFCOMM_found +0 mem_sdp_handle_list +32 mem_sdp_attrib_list +2 mem_sdp_error_code +2 mem_sdp_all_length +1 mem_handle_humber +2 mem_search_uuid +0 mem_sdp_mem_end +) +xmemalloc( +2 mem_ui_uuid_table +22 mem_all_uuid_16bits +34 mem_all_uuid_128bits +2 mem_sdp_l2capch_ptr +) +( +0 AGORHS_SERVICE +1 GENAUDIO_SERVICE +2 HANDSFREE_SERVICE +) +( +0 ATTRIBUTEID_0000 +1 ATTRIBUTEID_0001 +2 ATTRIBUTEID_0004 +3 ATTRIBUTEID_0009 +4 ATTRIBUTEID_0100 +5 ATTRIBUTEID_0302 +6 ATTRIBUTEID_0006 +7 ATTRIBUTEID_0311 +) + +( +0x01 SDP_ERROR_RES +0x02 SDP_SEARCH_REQ +0x03 SDP_SEARCH_RES +0x04 SDP_ATTRIBUTE_REQ +0x05 SDP_ATTRIBUTE_RES +0x06 SDP_SEARCHATTRIB_REQ +0x07 SDP_SEARCHATTRIB_RES +) +0x2600 sdp_max_amount +250 SDP_MALLOC_SIZE +0x6e sdp_tid_spp //any number + +( +0x1f11 SDP_UUID_HS_AUDIO_GATEWAY +) + +( +0X09 SDP_ATTRIBUTE_ID +0x0a SDP_ATTRIBUTE_RANGE +) + +(//mem_sdp_handle_list +7 SDP_MAX_HANDLE_NUMBER +) + + Index: 1066_OTP_FLASH/format/security.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/security.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/security.format (working copy) @@ -0,0 +1,141 @@ + +memalloc( +/* moved from bt.format for 3dh5 1021bytes packet buffer */ +17 mem_rxbuf + +16 mem_random_number +16 mem_round_key +16 mem_kinit + +16 mem_input_store +16 mem_x +15 mem_y +1 mem_y15 +17 mem_key_store +1 mem_key_store_end +2 memp_ar_key +2 memp_ar_input +10 mem_ar_hround + + +1 mem_ec_infinite +2 mem_ec_loopc +1 mem_aes_cmac_data_length + +0 memdat +/* ecc calculation */ + +24 mem_ax +24 mem_ay +24 mem_az +24 mem_bx +0 mem_ax_256 //32 bytes +24 mem_by +8 mem_bz +16 mem_ay_256 // 32 bytes +16 mem_cx +8 mem_az_256 // 32 bytes +23 mem_cy +1 mem_cy5 +0 mem_bx_256 // 32 bytes +24 mem_cz +8 mem_k +16 mem_by_256 // 31 bytes +16 mem_align + +0 mem_bz_256 //32 bytes +0 mem_tmp1 +24 memahbak +8 mem_tmp5 +0 mem_cx_256 //32 bytes +16 memahsave +16 mem_tmp2 +0 mem_cy_256 // 32 bytes +0 memahsave_end +1 mem_addr_padding +7 mem_addr_value /* 12 bytes */ +0 mem_tmp3 +5 mem_t1 +3 mem_addr_value_end +15 mem_addr_iocap_end +1 mem_cy5_256 // 1 byte +0 mem_cz_256 // 32 bytes +0 mem_tmp0 +8 mem_t0 +16 mem_tmp0a +8 mem_t2 +16 mem_k_256 //32 bytes +16 mem_t3 +8 mem_tmp1_256 //32 bytes +24 mem_t7 + + +32 mem_tmp5_256 +32 mem_tmp2_256 +0 mem_tmp3_256 +32 mem_t1_256 +0 mem_tmp0_256 +32 mem_t0_256 +32 mem_t2_256 +32 mem_t3_256 +32 mem_t7_256 + +24 mem_p +24 mem_a +24 mem_b +24 mem_gx +24 mem_gy +32 memh0 + +//p256 +//2 mem_ec_loopc_256 +//32 mem_ax_256 +//32 mem_ay_256 +//32 mem_az_256 +//32 mem_bx_256 +//32 mem_by_256 +//32 mem_bz_256 +//32 mem_cx_256 +//31 mem_cy_256 +//1 mem_cy5_256 +//32 mem_cz_256 +//32 mem_k_256 + + +//32 mem_tmp1_256 +//32 mem_tmp5_256 +//32 mem_tmp2_256 + +//0 mem_tmp3_256 +//32 mem_t1_256 +//0 mem_tmp0_256 +//32 mem_t0_256 +//32 mem_t2_256 +//32 mem_t3_256 +//32 mem_t7_256 + +32 mem_p_256 +32 mem_a_256 +32 mem_gx_256 +32 mem_gy_256 +//4 mem_le_keyid +16 mem_le_slat + + +//64 mem_regext +//1 mem_regext_index + +//16 mem_le_mackey + + +//1 mem_AES_CMAC_flag +//16 mem_AES_CMAC_temp +//16 mem_AES_CMAC_M_last + +//4 mem_le_gkey + +//16 mem_le_r + +) + + Index: 1066_OTP_FLASH/format/simple_pairing.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/simple_pairing.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/simple_pairing.format (working copy) @@ -0,0 +1,188 @@ +/* simple pairing page */ + +memalloc( + +//4 mem_hci_ssp_mode +0 mem_sp_state_start +1 mem_sp_state +1 mem_master_sp_state +1 mem_sp_flag +1 mem_master_sp_flag +1 mem_sp_calc +1 mem_sp_dh_ready +1 mem_sp_localsm +1 mem_pairing_auth + +0 mem_sp_flag_start +1 mem_sp_local_key_send_count +1 mem_sp_remote_key_recv_count +1 mem_sp_remote_key_invalid +1 mem_sp_dhkey_invalid + + +4 mem_gkey + + +8 mem_le_pubkey_remote_x_256 +0 mem_sp_pubkey_remote +24 mem_sp_pubkey_remote_x +0 mem_sp_pubkey_remote_x_end +8 mem_le_pubkey_remote_y_256 +24 mem_sp_pubkey_remote_y + +8 mem_le_dhkey_256 +24 mem_sp_dhkey +0 mem_sp_dhkey_end + +16 mem_sp_random_local +0 mem_sp_random_local_end +16 mem_sp_random_remote +0 mem_sp_random_remote_end +0 memresult +0 mem_sp_calc_result +4 memh +4 memg +4 memf +4 meme +0 mem_sp_calc_result_high +4 memd +4 memc +4 memb +4 mema +16 mem_sp_check_result +16 mem_sp_confirm_remote +16 mem_sp_prarm_stack +) + +xmemalloc( +1 mem_sp_local_key_invalid + + +32 mem_le_private_key_256 +32 mem_le_pubkey_local_x_256 +32 mem_le_pubkey_local_y_256 + +24 mem_sp_private_key +0 mem_sp_pubkey_local +24 mem_sp_pubkey_local_x +0 mem_sp_pubkey_local_x_end +24 mem_sp_pubkey_local_y + +1 mem_ssp_enable +3 mem_sp_iocap_local +3 mem_sp_iocap_remote + +1 mem_flag_mode_ssp_pin +1 mem_ssp_mode_flag +1 mem_authentication_passkey_times +1 mem_passkey_1bit +1 mem_flag_pairing_state + +) +/* simple pairing status flag */ +( + 0x00 SP_FLAG_STANDBY + 0x01 SP_FLAG_COMMIT + 0x02 LE_SP_FLAG_COMMIT_256 + +) + +/* simple pairing calc flag */ +( + 0x00 SP_CALC_STANDBY + 0x01 SP_CALC_PUBKEY + 0x02 SP_CALC_DHKEY + 0x03 SP_CALC_PUBKEY_256 + 0x04 SP_CALC_DHKEY_256 +) + +/* simple pairing state */ +( + 0x00 SP_STAT_NULL + 0x01 SP_STAT_KEY_RECV + 0x02 SP_STAT_KEY_GENERATE + 0x03 SP_STAT_KEY_SEND + 0x04 SP_STAT_COMMIT_CALC + 0x05 SP_STAT_COMMIT_SEND + 0x06 SP_STAT_RANDOM_RECV + 0x07 SP_STAT_RANDOM_SEND + 0x08 SP_STAT_CONFIRM_RECV + 0x09 SP_STAT_CONFIRM_CHECK + 0x0A SP_STAT_CONFIRM_CALC + 0x0B SP_STAT_CONFIRM_SEND + 0x0C SP_STAT_LINK_KEY_CALC + 0x0F SP_STAT_DONE + 0x10 SP_STAT_FEATURE_EXT_SEND + 0x11 SP_STAT_GKEY_CALC + /*simple pairing master only*/ + 0x12 SP_MASTER_STAT_START_SKIP + 0x13 SP_MASTER_STAT_START_DONE + 0x14 SP_STAT_COMMITMENT_COMPARE + 0x15 SP_STATE_END +) + + +/* simple paring invalid flag */ +( + 0x00 SP_KEY_INVALID + 0x01 SP_KEY_VALID + 0x03 SP_KEY_VALID_256 + +) + +/* encapsulated defination for P-192 key */ +( + 0x01 ENCAPSULATED_MAJOR_TYPE_P192 + 0x01 ENCAPSULATED_MINOR_TYPE_P192 + 0x30 ENCAPSULATED_LEN_P192 +) + +/* bluetooth 2.1 support flag */ +( + 0x00 SIMPLE_PAIRING_ENABLE + 0x01 ENCRYPTION_PAUSE_ENABLE + 0x02 EXTENDED_INQUIRY_RESPOSE_ENABLE + 0x03 SNIFF_SUBRATING_ENABLE +) + +/*mem_sp_localsm*/ +( + 0x00 DEFAULT_STATEMACHINE + 0x01 LOCAL_STATEMACHINE +) + +( + 0x00 DEFALT_PAIRING_AUTH + 0x01 PAIRING_AUTH +) + +( +1 SSP_MODE_SSP_PIN_FLAG +2 SSP_MODE_PASSKEY_ENTRY_FLAG +3 SSP_MODE_JUST_WORK_FLAG +) + +(//ssp mode +0x040003 SSP_MODE_JUST_WORK_IO_CAP_DATA +0X040001 SSP_MODE_SSP_PIN_IO_CAP_DATA +0X040002 SSP_MODE_PASSKEY_IO_CAP_DATA +) + +( +0x00 DISPLAY_ONLY +0x01 DISPLAY_YESNO +0x02 KEYBOARD_ONLY +0x03 NO_INPUT_NO_OUTPUT +) + +( +7 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT +6 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT +0 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT +) +( +1 FLAG_PAIRING_STATE_PAIRING +0 FLAG_PAIRING_STATE_NOT_PAIRING +) + + Index: 1066_OTP_FLASH/format/ui.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/ui.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/ui.format (working copy) @@ -0,0 +1,448 @@ +/*****************************************************************************/ +/* RCS HEADER -- DO NOT ERASE */ +/* $Author: Administrator $ */ +/* $Id: bt_ui_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */ +/************************************************************************/ + + + /* ========= memory ============== */ +memalloc( +2 mem_UI_data_txbuff_length + +1 mem_ipc_skip_continue_proc +0 mem_ui_timer_temp //length 4 +4 mem_ipc_rega_temp +) + +xmemalloc( +//UI Work area +1 mem_ipc_lock_bt +1 mem_ipc_lock_c51 +8 mem_ipc_fifo_bt2c51 +8 mem_ipc_fifo_c512bt + +1 mem_ui_button_timer +1 mem_ui_button_last_state +4 mem_ui_timer_last_btclk +2 mem_discovery_timeout_timer_count +1 mem_hid_handshake_timer_count +1 memui_reconnect_mode +2 mem_ui_state_map + +//UI Config area +1 mem_ui_profile_supported +1 mem_ui_button_timeout +1 mem_ui_button_gpio +2 mem_discovery_timeout +1 mem_pin_length +16 mem_pin + +) +/************/ +/* constant */ +/************/ + +//mem_ui_state_map +( +0 UI_STATE_BT_CONNECTED +1 UI_STATE_BT_SETUP_COMPLETE +2 UI_STATE_BT_HID_CONN +3 UI_STATE_BT_HID_HANDSHAKE +4 UI_STATE_BT_SPP_CONN +5 UI_STATE_BT_SNIFF +6 UI_STATE_BT_DISCOVERY +7 UI_STATE_BT_RECONNECT +8 UI_STATE_BT_SLAVE_ROLE +9 UI_STATE_BLE_CONNECTED +10 UI_STATE_BLE_WRITE_RCV +11 UI_STATE_BLE_ADV +12 UI_STATE_BTN_DOWN +) + +( +1 UI_STATE_SPP_NL_AUTO_DISCOVER + +) + +/* UI state for Headset (memui_HS_State) */ + ( + 0 UI_HEADSET_DISCONNECT + 1 UI_HEADSET_IDLE /* before the responsor HS receive SABM */ + 2 UI_HEADSET_W4CONNECT + 3 UI_HEADSET_RINGING + 4 UI_HEADSET_CONNECTED + 5 UI_HEADSET_PARING + ) +/* memui_BB_State */ +( + 0 UI_BB_OFF + 1 UI_BB_IDLE + 2 UI_BB_DISCOVERY + 3 UI_BB_CONNECTED_ACTIVE_NO_SCO + 4 UI_BB_CONNECTED_ACTIVE_WITH_SCO + 5 UI_BB_CONNECTED_ACTIVE_WAIT_SNIFF + 6 UI_BB_CONNECTED_SNIFF + 7 UI_BB_RECONNECT + 8 UI_BB_CONNECTED_SNIFF_WITH_SCO +) + +/************/ +/* flags */ +/************/ + +/* memui_Misc_Flags */ + ( + 5 NO_IDLE_TURN_OFF + 7 ANSWER_RING_FLAG /* 1 Answer,0 no*/ + ) + +/* mem_UI_SCH_Interface */ + ( + 0 UI_HS_PAIRING + 2 UI_REQ_CLOSE_RFCOMM + 3 UI_LINK_LOST + 4 UI_REQ_OPEN_SCO + 6 UI_REQ_CLOSE_SCO + ) + +/* memui_PassOverKey */ + ( + 0 ANSWER_RING_BIT + 0 AG_SEND_RING_BIT + 1 VOL_UP_BIT + 2 VOL_DOWN_BIT + 3 INI_CALL_BIT + 4 DAIL_LAST_CALL + 5 END_CALL_BIT + 6 NOKIA_VOICE_ACTIVE + 7 REJECT_CALL_BIT + ) + +/* memui_reconnect_mode */ +( + 0 NO_RECONNECTION + 1 RECONNECT_HID + 2 RECONNECT_HF + 3 RECONNECT_HS + 4 RECONNECT_HID_HF + 5 RECONNECT_HID_HS +) +/* memui_Commands */ +( +0 BT_CMD_STANDBY +1 BT_CMD_START_DISCOVERY +2 BT_CMD_STOP_DISCOVERY +3 BT_CMD_RECONNECT +4 BT_CMD_DISCONNECT +5 BT_CMD_ENTER_SNIFF +6 BT_CMD_EXIT_SNIFF +7 BT_CMD_ENTER_SNIFF_SUBRATING +8 BT_CMD_EXIT_SNIFF_SUBRATING +9 BT_CMD_SNIFF_TEST +10 BT_CMD_SET_PIN_CODE +11 BT_CMD_START_INQUIRY +12 BT_CMD_STOP_INQUIRY +13 BT_CMD_START_ADV +14 BT_CMD_STOP_ADV +15 BT_CMD_START_DIRECT_ADV +16 BT_CMD_STOP_DIRECT_ADV +17 BT_CMD_LE_DISCONNECT +18 BT_CMD_LE_UPDATE_CONN +19 BT_CMD_LED_OFF +20 BT_CMD_LED_ON +21 BT_CMD_LED_BLINK +22 BT_CMD_LE_START_CONN +23 BT_CMD_LE_START_SCAN +24 BT_CMD_LE_STOP_SCAN +25 BT_CMD_ENTER_HIBERNATE +27 BT_CMD_LE_SMP_SECURITY_REQUEST +29 BT_CMD_ROLE_SWITCH +30 BT_CMD_BB_RECONN_CANCEL +31 BT_CMD_STORE_RECONN_INFO_LE +32 BT_CMD_STORE_RECONN_INFO_BT +33 BT_CMD_DHKEY_NOT_ACCEPT +34 BT_CMD_START_24G +35 BT_CMD_STOP_24G +36 BT_CMD_PAIR_24G +37 BT_CMD_STORE_RECONN_INFO +) + +( +0x00 BT_EVT_NULL +0x01 BT_EVT_BB_CONNECTED +0x02 BT_EVT_BB_DISCONNECTED +0x03 BT_EVT_RECONN_STARTED +0x04 BT_EVT_RECONN_FAILED +0x05 BT_EVT_SETUP_COMPLETE +0x06 BT_EVT_HID_CONNECTED +0x07 BT_EVT_HID_DISCONNECTED +0x08 BT_EVT_SPP_CONNECTED +0x09 BT_EVT_SPP_DISCONNECTED +0x0A BT_EVT_PINCODE_REQ +0x0B BT_EVT_ENTER_SNIFF +0x0C BT_EVT_EXIT_SNIFF +0x0D BT_EVT_ENTER_SNIFF_SUB +0x0E BT_EVT_EXIT_SNIFF_SUB +0x0F BT_EVT_DISCOVERY_STOPED +0x10 BT_EVT_BUTTON_LONG_PRESSED +0x12 BT_EVT_HID_HANDSHAKE +0X13 BT_EVT_RECONN_PAGE_TIMEOUT +0x14 BT_EVT_LE_CONNECTED +0X15 BT_EVT_LE_DISCONNECTED +0x16 BT_EVT_ML2CAP_CONN_REFUSED +0x17 BT_EVT_BUTTON_ENTER_HIBERNATE +0x18 BT_EVT_LINKKEY_GENERATE +0x19 BT_EVT_SWITCH_NOT_ACCEPT +0x20 BT_EVT_SWITCH_ACCEPT +0x21 BT_EVT_SNIFF_NOT_ACCEPT +0x22 BT_EVT_SNIFF_ACCEPT +0x23 BT_EVT_UNSNIFF_ACCEPT +0x24 BT_EVT_UNSNIFF_NOT_ACCEPT +0x25 BT_EVT_BUTTON_ADJUST_DPI +0x26 BT_EVT_SEND_UNSNIFF_ACCEPT +0x27 BT_EVT_VIRTUAL_CABLE_UNPLUG +0x28 BT_EVT_LE_WRITE_REQUEST +0x29 BT_EVT_LE_ENC_INFO +0x2a BT_EVT_SWITCH_FAIL_MASTER +0x2b BT_EVT_SWITCH_SUCCESS_MASTER +0x2c BT_EVT_BUTTON_DOWN +0x2d BT_EVT_BUTTON_UP +0x2e BT_EVT_REMOTE_UNSNIFF +0x30 BT_EVT_LE_PAIRING_FAIL +0x31 BT_EVT_LE_PAIRING_SUCCESS +0x32 BT_EVT_LE_START_ENC +0X33 BT_EVT_LE_PAUSE_ENC +0X34 BT_EVT_LE_TK_GENERATE +0x35 BT_EVT_BT_GKEY_GENERATE +0x36 BT_EVT_BT_GET_PASSKEY +0x37 BT_EVT_BT_PAIRING_FAIL +0x38 BT_EVT_BT_PAIRING_SUCCESS +0x39 BT_EVT_24G_PAIRING_COMPLETE +0x3a BT_EVT_24G_ATTEMPT_FAIL +0x3b BT_EVT_LE_GKEY_GENERATE +0x3c BT_EVT_24G_ATTEMPT_SUCCESS +0x3d BT_EVT_STORE_NVRAM +0x3e BT_EVT_LE_PAIRING_COMPLETE +0x3F BT_EVT_LE_RECONNECT_COMPLETE +0x40 BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP +0x41 BT_EVT_LE_LTK_LOST +) +//switch +( +0 OFF +1 ON +) +/* memui_mem_lock */ +( + 0 MEM_UNLOCK + 1 MEM_LOCK +) +/* memui_flag0 */ +( + 0 UI_USER_DATA_FLAG + 1 UI_WII_WAITING_SLEEP + 2 UI_KEYBOARD_SNIFF_SKIP +) +/* mem_master_type */ +( + 0 MTYPE_HID_DEFAULT + 1 MTYPE_HID_SSP + 2 MTYPE_SPP +) + + ( + 0x01 RECIEVE_SDP_CONN_RES + 0x02 RECIEVE_SDP_CFG_REQ + 0x03 RECIEVE_SDP_CFG_RES + 0x04 RECIEVE_RFCOMM_CONN_RES + 0x05 RECIEVE_RFCOMM_CFG_REQ + 0x06 RECIEVE_RFCOMM_CFG_RES + 0x07 RECIEVE_HID_CTRL_CONN_RES + 0x08 RECIEVE_HID_CTRL_CFG_REQ + 0x09 RECIEVE_HID_CTRL_CFG_RES + 0x0A RECIEVE_HID_INT_CONN_RES + 0x0B RECIEVE_HID_INT_CFG_REQ + 0x0C RECIEVE_HID_INT_CFG_RES + 0x0D RECIEVE_AVCTP_CONN_RES + 0x0E RECIEVE_AVCTP_CFG_REQ + 0x0F RECIEVE_AVCTP_CFG_RES + 0x10 RECIEVE_AVDTP_SIGNAL_CONN_RES + 0x11 RECIEVE_AVDTP_SIGNAL_CFG_REQ + 0x12 RECIEVE_AVDTP_SIGNAL_CFG_RES + 0x13 RECIEVE_AVDTP_MEDIA_CONN_RES + 0x14 RECIEVE_AVDTP_MEDIA_CFG_REQ + 0x15 RECIEVE_AVDTP_MEDIA_CFG_RES + 0x16 RECIEVE_SS_REASULT_HS + 0x17 RECIEVE_SS_REASULT_HF + 0x18 RECIEVE_SS_REASULT_AVTARG + 0x19 RECIEVE_SS_REASULT_OBEX + 0x1A RECIEVE_DLCI0_UA + 0x1B RECIEVE_HS_PARAM_NEG_RES + 0x1C RECIEVE_HS_UA + 0x1D RECIEVE_HS_MODEM_STATUS_RES + 0x1E RECIEVE_HS_MODEm_STATUS_CMD + 0x1F RECIEVE_HF_PARAM_NEG_RES + 0x20 RECIEVE_HF_UA + 0x21 RECIEVE_HF_MODEM_STATUS_RES + 0x22 RECIEVE_HF_MODEm_STATUS_CMD + 0x23 RECIEVE_OBEX_PARAM_NEG_RES + 0x24 RECIEVE_OBEX_UA + 0x25 RECIEVE_OBEX_MODEM_STATUS_RES + 0x26 RECIEVE_OBEX_MODEm_STATUS_CMD + 0x27 RECIEVE_SPP_PARAM_NEG_RES + 0x28 RECIEVE_SPP_UA + 0x29 RECIEVE_SPP_MODEM_STATUS_RES + 0x2A RECIEVE_SPP_MODEm_STATUS_CMD + 0x2b RECIEVE_SDP_DISCONN_RES + ) + + + + ( + 0 UPPERSM_RP_IDLE + 1 UPPERSM_RP_SDP_CONN + 2 UPPERSM_RP_SDP_CONN_WAIT + 3 UPPERSM_RP_SDP_CFG + 4 UPPERSM_RP_SDP_CFG_WAIT + 5 UPPERSM_RP_SS_AVTARG + 6 UPPERSM_RP_SS_AVTARG_WAIT + 7 UPPERSM_RP_SS_OBEX + 8 UPPERSM_RP_SS_OBEX_WAIT + 9 UPPERSM_RP_SDP_DISCONN + 10 UPPERSM_RP_SDP_DISCONN_WAIT + 11 UPPERSM_RP_AVDTP_CONN_WAIT + 12 UPPERSM_RP_AVCTP_CONN + 13 UPPERSM_RP_AVCTP_CONN_WAIT + 14 UPPERSM_RP_AVCTP_CFG + 15 UPPERSM_RP_AVCTP_CFG_WAIT + 16 UPPERSM_RP_OBEX_CMD_PN + 17 UPPERSM_RP_OBEX_CMD_PN_WAIT + 18 UPPERSM_RP_OBEX_SABM + 19 UPPERSM_RP_OBEX_SABM_WAIT + 20 UPPERSM_RP_OBEX_CMD_MS + 21 UPPERSM_RP_OBEX_CMD_MS_WAIT + ) + ( /*mem_upper_sm_reconn*/ + 0 UPPERSM_RECONN_IDLE + 1 UPPERSM_RECONN_SDP_CONN + 2 UPPERSM_RECONN_SDP_CONN_WAIT + 3 UPPERSM_RECONN_SDP_CFG + 4 UPPERSM_RECONN_SDP_CFG_WAIT + 5 UPPERSM_RECONN_SS_HS + 6 UPPERSM_RECONN_SS_HS_WAIT + 7 UPPERSM_RECONN_SS_HF + 8 UPPERSM_RECONN_SS_HF_WAIT + 9 UPPERSM_RECONN_SS_AVTARG + 10 UPPERSM_RECONN_SS_AVTARG_WAIT + 11 UPPERSM_RECONN_SS_OBEX + 12 UPPERSM_RECONN_SS_OBEX_WAIT + 13 UPPERSM_RECONN_SDP_DISCONN + 14 UPPERSM_RECONN_SDP_DISCONN_WAIT + 15 UPPERSM_RECONN_HID_CTRL_CONN + 16 UPPERSM_RECONN_HID_CTRL_CONN_WAIT + 17 UPPERSM_RECONN_HID_CTRL_CFG + 18 UPPERSM_RECONN_HID_CTRL_CFG_WAIT + 19 UPPERSM_RECONN_HID_INT_CONN + 20 UPPERSM_RECONN_HID_INT_CONN_WAIT + 21 UPPERSM_RECONN_HID_INT_CFG + 22 UPPERSM_RECONN_HID_INT_CFG_WAIT + 23 UPPERSM_RECONN_RFCOMM_CONN + 24 UPPERSM_RECONN_RFCOMM_CONN_WAIT + 25 UPPERSM_RECONN_RFCOMM_CFG + 26 UPPERSM_RECONN_RFCOMM_CFG_WAIT + 27 UPPERSM_RECONN_RFCOMM_SABM + 28 UPPERSM_RECONN_RFCOMM_SABM_WAIT + 29 UPPERSM_RECONN_SPP_CMD_PN + 30 UPPERSM_RECONN_SPP_CMD_PN_WAIT + 31 UPPERSM_RECONN_SPP_SABM + 32 UPPERSM_RECONN_SPP_SABM_WAIT + 33 UPPERSM_RECONN_SPP_CMD_MS + 34 UPPERSM_RECONN_SPP_CMD_MS_WAIT + 35 UPPERSM_RECONN_HF_CMD_PN + 36 UPPERSM_RECONN_HF_CMD_PN_WAIT + 37 UPPERSM_RECONN_HF_SABM + 38 UPPERSM_RECONN_HF_SABM_WAIT + 39 UPPERSM_RECONN_HF_CMD_MS + 40 UPPERSM_RECONN_HF_CMD_MS_WAIT + 41 UPPERSM_RECONN_AVDTPs_CONN + 42 UPPERSM_RECONN_AVDTPs_CONN_WAIT + 43 UPPERSM_RECONN_AVDTPs_CFG + 44 UPPERSM_RECONN_AVDTPs_CFG_WAIT + 45 UPPERSM_RECONN_AVDTPm_CONN + 46 UPPERSM_RECONN_AVDTPm_CONN_WAIT + 47 UPPERSM_RECONN_AVDTPm_CFG + 48 UPPERSM_RECONN_AVDTPm_CFG_WAIT + 49 UPPERSM_RECONN_AVCTP_CONN + 50 UPPERSM_RECONN_AVCTP_CONN_WAIT + 51 UPPERSM_RECONN_AVCTP_CFG + 52 UPPERSM_RECONN_AVCTP_CFG_WAIT + 53 UPPERSM_RECONN_OBEX_CMD_PN + 54 UPPERSM_RECONN_OBEX_CMD_PN_WAIT + 55 UPPERSM_RECONN_OBEX_SABM + 56 UPPERSM_RECONN_OBEX_SABM_WAIT + 57 UPPERSM_RECONN_OBEX_CMD_MS + 58 UPPERSM_RECONN_OBEX_CMD_MS_WAIT + 59 UPPERSM_RECONN_SS_SPP + 60 UPPERSM_RECONN_SS_SPP_WAIT + ) + (/*mem_UI_profile_supported*/ + 0 support_HID + 1 support_A2DP + 2 support_AVRCP + 3 support_HF + 4 support_HS + 5 support_PBAP + 6 support_SPP + ) + /*mem_upper_sm_ss*/ + ( + 0 UPPERSM_SS_HS + 1 UPPERSM_SS_HF + 2 UPPERSM_SS_AVTARG + 3 UPPERSM_SS_OBEX + ) + + ( + 160 UI_HUNDRED_MILLISECOND_TIME + 0XFF UI_BUTTON_GPIO_DISABLE + ) + ( + 0x01 UI_BB_INCONNECT + 0x10 UI_BB_DISCONNECT + ) +( +0x00 UI_BUTTON_STATE_DOWN +0x01 UI_BUTTON_STATE_UP +) + +//mem_ipc_skip_continue_proc +( + 0 IPC_CONTINUE_PROCESS + 1 IPC_SKIP_CONTINUE_PROCESS +) + + +(//led style struct +0 LED_OFFSET_LED_TYPE +1 LED_OFFSET_BLINK_COUNT +2 LED_OFFSET_LED_GPIO +3 LED_OFFSET_ON_TIME +5 LED_OFFSET_OFF_TIME +7 LED_OFFSET_CB_LEDON +9 LED_OFFSET_CB_LEDOFF +11 LED_OFFSET_LENGTH +) + +(//LED state +0 UI_LED_STATE_BLINK_STOP +1 UI_LED_STATE_BLINK_START +2 UI_LED_STATE_LIGHTING +3 UI_LED_STATE_DARKING +4 UI_LED_STATE_BLINK_LIGHTING +5 UI_LED_STATE_BLINK_DARKING + +0xFF LED_INFINITE_FLASH_NUM + +) + + Index: 1066_OTP_FLASH/format/utility.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/utility.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/utility.format (working copy) @@ -0,0 +1,180 @@ +/** +* @file:bt_utility_format.upper +* @author: lei.zhu +* utility header file. inlcude timer +* Copyright: (C)Hanlynn Technology +*/ + +memalloc( + +/* + temp parameter +*/ +2 mem_hold_contr +2 mem_hold_contw +1 mem_fifo_temp + +8 mem_pdatatemp +8 mem_temp //8 bytes +4 mem_timeup // 4 bytes +4 mem_rega //4 bytes +4 mem_regb //4 bytes +3 mem_regc //3 bytes +2 mem_contr //2 bytes +2 mem_contw //2 bytes + +1 mem_wakup_from_power_flag +4 mem_saved_gpio_in + +0 mem_shutter_random_mac_data_temp +0 mem_shutter_config_data_temp +0 mem_le_adv_channel_map_temp +0 mem_le_data_len_temp //1byte +0 mem_tx_fifo_map_temp +0 mem_rpn_dlci //1byte +0 mem_event_cmd_response_content //2byte +0 mem_le_prand //16byte +0 mem_AES_CMAC_k //16 bytes +0 mem_regext_index //1 bytes +1 mem_temp_block0 +0 mem_le_data_temp //15bytes +15 mem_temp_block1 +0 mem_le_aes_128 //16byte +0 mem_regext //64 bytes +0 mem_AES_CMAC_k1 //16 bytes +16 mem_temp_block2 +0 mem_AES_CMAC_k2 //16 bytes +16 mem_temp_block3 +0 mem_AES_CMAC_temp // 16 bytes +16 mem_temp_block4 +0 mem_AES_CMAC_M_last // 16 bytes +1 mem_module_uart_cmd +1 mem_module_uart_opcode +1 mem_module_uart_len +1 mem_module_temp_nl_discard_packet +12 mem_temp_block5 +0 mem_le_mackey //16 bytes +0 mem_app_receive_temp +2 mem_key_value_temp +2 mem_key_value +1 mem_key_value_temp1 +1 mem_key_value_temp2 +1 mem_key_value_temp3 +1 mem_key_value_temp4 +1 mem_key_value_temp5 +1 mem_key_value_temp6 +6 mem_temp_block6 + + +1 mem_usb_status +1 mem_usb_fifo_empty +1 mem_usb_read_len +64 mem_usb_rxbuf +2 mem_bufptr +1 mem_remain +20 mem_devicedesc +2 mem_hidreportdesc_kb +2 mem_hidreportdesc_m +100 mem_confdesc +5 mem_string0 +30 mem_string1 +64 mem_string2 +30 mem_string3 +2 mem_usb_zero_packet +2 mem_usb_ones_packet +2 mem_usb_two_packet +1 mem_usb0_state + +1 mem_usb_offline_check_gpio +1 mem_usb_tx_interval + +0 mem_usb_clear_mem_start +0 mem_usb_setup +1 mem_usb_setup_bmRequestType +1 mem_usb_setup_bRequest +1 mem_usb_setup_bValue +1 mem_usb_setup_bValueH +2 mem_usb_setup_wIndex +1 mem_usb_setup_bLength +1 mem_usb_setup_bLengthH +64 mem_usb0_setup +64 mem_usb0_set_report_data +64 mem_usb0_get_report_data +1 mem_usb_state +1 mem_usb_tx_wait +1 mem_usb_tx_enable +1 mem_usb_remote_wakeup +1 mem_usb_clear_remote_wakeup +1 mem_usb_ep0_stall_status +1 mem_usb_ep1_stall_status +1 mem_usb_ep2_stall_status +1 mem_usb_ep3_stall_status +2 mem_dsc_info_data_pointer +1 mem_dsc_info_len +1 mem_usb0_data_ready_report +1 mem_usb_tx_win_enable +1 mem_usb_tx_mac_enable +1 mem_usb_device_enumeration_endflag +1 mem_usb_wakestate_onetime_flag +1 mem_usb_mac_wakeup_trig +1 mem_usb_set_high_addr_flag +1 mem_usb_set_protocol_value +1 mem_usb_set_protocol_status +1 mem_usb_get_protocol_flag +1 mem_usb_idle_flag +1 mem_usb_idle_rate +2 mem_usb_setup_bValue_temp +1 mem_usb0_get_set_report +1 mem_usb_ep1_data +1 mem_usb_ep2_data +1 mem_usb_clear_halt +16 mem_usb_mouse_data +16 mem_usb_kb_data +16 mem_usb_kb_multikey +8 mem_usb_kb_data_sta_data +8 mem_usb_kb_data_last_data +3 mem_usb_kb_multikey_sta_data +3 mem_usb_kb_multikey_last_data +1 mem_usb_kb_blank_data_enable +1 mem_usb_kb_mul_blank_data_enable +1 mem_usb_test_cnt +0 mem_usb_clear_mem_end +1 mem_usb_test_kb + +256 mem_rssi_noise_buffer +256 mem_rssi_noise_dg_buffer +256 mem_rssi_noise_ms_buffer +256 mem_rssi_noise_kb_buffer +32 mem_24g_common_temp + +) + + +( +/*mem_util_timer_flag0_7*/ + 0 UTIL_TIMER_0_USED + 1 UTIL_TIMER_1_USED + 2 UTIL_TIMER_2_USED + 3 UTIL_TIMER_3_USED + 4 UTIL_TIMER_4_USED + 5 UTIL_TIMER_5_USED + 6 UTIL_TIMER_6_USED + 7 UTIL_TIMER_7_USED +/*mem_util_timer_flag8_15*/ + 0 UTIL_TIMER_8_USED + 1 UTIL_TIMER_9_USED + 2 UTIL_TIMER_10_USED + 3 UTIL_TIMER_11_USED + 4 UTIL_TIMER_12_USED + 5 UTIL_TIMER_13_USED + 6 UTIL_TIMER_14_USED + 7 UTIL_TIMER_15_USED +) + +//util fifo param +( + +8 UTIL_FIFO_LEN +-1 UTIL_FIFO_OFFSET +) + Index: 1066_OTP_FLASH/format/var.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/format/var.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/format/var.format (working copy) @@ -0,0 +1,442 @@ +/************************************************************************/ +/* RCS HEADER -- DO NOT ERASE */ +/* $Author: Administrator $ */ +/* $Id: bt_var.osi,v 1.1 2009-09-28 04:06:18 Administrator Exp $ */ +/* Orisil Technology */ +/************************************************************************/ + + +/* packet types */ +( + 0x02 FHS_PACKET + 0x03 DM1_PACKET + 0x03 DM1_LMP_PACKET + 0x04 DH1_PACKET + 0x05 HV1_PACKET + 0x06 HV2_PACKET + 0x07 HV3_PACKET + 0x08 DV_PACKET + 0x09 AUX1_PACKET + 0x0a DM3_PACKET + 0x0b DH3_PACKET + 0x0e DM5_PACKET + 0x0f DH5_PACKET +) + + +/* mem_lmp_respond */ +( + 0 RESPOND_TO_ALL + 1 PASS_EVERYTHING + 2 PASS_ONLY_UNKNOWNS + 3 RESPOND_TO_LMPS +) +/* SCO algorithm defines */ +( + 0 ULAW + 1 ALAW + 2 CVSD +) +/* encryption modes */ +( + 0 NO_ENCRYPTION + 1 PT_PT_ENCRYPTION + 2 PT_BROADCAST_ENCRYPTION +) + +/* bits used in mem_lmp_state1 variable */ +( + 0 LMP_STATE_DETACH + 1 LMP_STATE_HOLD + 2 LMP_STATE_SNIFF + 3 LMP_STATE_PARK + 4 LMP_STATE_WAIT_SCO_CREATE + 5 LMP_STATE_WAIT_SCO_KILL + 6 LMP_STATE_SCO3 + 7 LMP_STATE_WAIT_SCO_START +) +/* mem_lmp_state2 */ +( + 0 LMP_WAIT_FOR_SNIFF_ACCEPT + 1 LMP_WAIT_FOR_PARK_ACCEPT + 2 LMP_SEND_UNPARK_ACCEPTED + 3 LMP_SEND_ENCRYPTION_START + 4 LMP_SEND_ENCRYPTION_STOP + 5 MESSAGE_QUEUE + 7 LMP_STATE_WAIT_BEACON +) +/* mem_lmp_state3 */ +( + 0 INQUIRY_STATE_CHECK + 1 HOST_DELAY_MESSAGE + 2 VARIABLE_DELAY + 3 TEST_MODE_START_LOOPBACK + 4 TEST_MODE_START_PATTERN + 5 PARSE_TEST_CONTROL_MESSAGE + 6 H_AUTH_SEND_COMB_KEY +) +/* mem_rx_status */ +( + 0 FROM_MASTER +) +/* mem_ms_flag */ +( + 0 MS_RECEIVE_SWITCH_REQ + 1 MS_SEND_SETUP_COMPLATE +) +/* mem_conn_sm */ +( + 0 CONN_SM_STANDBY + 1 CONN_SM_WAIT_PAGE + 2 CONN_SM_SEND_FEATURES + 3 CONN_SM_WAIT_FEATURES_RES + 4 CONN_SM_SEND_CONN_REQ + 5 CONN_SM_WAIT_CONN_ACCEPT + 6 CONN_SM_AUTH_PAIR + 7 CONN_SM_AUTH_PAIR_WAIT + 8 CONN_SM_WAIT_MUTAL_AUTH + 9 CONN_SM_ENCRYPT + 0xa CONN_SM_ENCRYPT_WAIT + 0xb CONN_SM_ENCRYPT_WAIT_CLEAR + 0xc CONN_SM_SEND_SETUP_COMPLETE + 0xd CONN_SM_WAIT_SETUP_COMPLETE + 0xe CONN_SM_SEND_SWITCH + 0xf CONN_SM_DETACH_DELAY + 0x10 CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION + 0x11 CONN_SM_DELAY_RESTART_CONNECTION + 0x12 CONN_SM_SEND_VERSION + 0X13 CONN_SM_WAIT_VERSION + 0x14 CONN_SM_SEND_FEATURES_EXT + 0x15 CONN_SM_WAIT_FEATURES_EXT + 0x16 CONN_SM_PAIRING + 0x17 CONN_SM_AUTH + 0x18 CONN_SM_PAIRING_WAIT + 0x19 CONN_SM_AUTH_WAIT + 0x1a CONN_SM_DONE + 0x1b CONN_SM_WAIT_DONE +) + +/* btStateConn1 */ +( + 0 CONN_STANDBY + 1 CONN_MASTER_SEND_CONN_REQ + 2 CONN_MASTER_WAIT_FOR_CONN_ACCEPTED + 3 CONN_MASTER_AUTH + 4 CONN_MASTER_WAIT_FOR_FEATURES + 5 CONN_MASTER_WAIT_FOR_SETUP_COMPLETE + 6 CONN_MASTER_WAIT_FOR_MAX_SLOT + 7 CONN_SLAVE_CONN_REQUESTED + 8 CONN_SLAVE_WAIT_FOR_SETUP_COMPLETE + 9 CONN_SLAVE_AUTH + 10 CONN_USING_HOST_OPCODE + 11 CONN_SLAVE_AUTH_WAIT + 12 CONN_SLAVE_ENCRYPT_WAIT +) + +/* mem_lmp_conn_state */ +( + 0 RECEIVED_CONN_REQ + 1 SENT_CONN_REQ + 2 RECEIVED_SETUP_COMPLETE + 3 SENT_SETUP_COMPLETE + 4 HOST_CONNECTION_MADE + 6 INIT_COMPLETE + 7 SNIFF_NEGOTIATE +) +/* btStateAuth1 */ +( + 0 WAIT_FOR_KINIT + 1 WAIT_FOR_LKA + 2 WAIT_FOR_LKB + 3 WAIT_FOR_SRES + 4 EXAMINE_RECEIVED_SRES + 5 SEND_AU_RAND + 6 WAIT_FOR_KC + 7 DELAYED_ENCRYPT_RESPONSE +) +/* btStateAuth2 */ +( + 0 SENT_SRES + 1 RECEIVED_IN_RAND + 2 SENT_AU_RAND + 3 AUTHENTICATION_FAILED + 4 AUTHENTICATION_PASSED + 5 STARTED_AUTH + 6 SENT_COMB_KEY + 7 SENT_IN_RAND +) +/* btStateAuth3 */ +( + 0 RECEIVED_AU_RAND + 1 RECEIVED_SRES + 2 MUTUALLY_AUTHENTICATE +) +/* btStateHost */ +( + 0 H_AUTH_STARTED + 2 H_ENCRYPTION_MODE_REQ_PT + 3 H_ENCRYPTION_KEY_SIZE + 4 H_ENCRYPTION_START + 5 H_ENCRYPTION_STOP + 6 H_AUTH_SECOND_TRY +) +/* btStateEncrypt2 */ +( + 0 RECEIVED_ENCRYPT_MODE_REQ_PT + 1 RECEIVED_ENCRYPT_KEY_SIZE + 2 RECEIVED_ENCRYPT_START + 3 RECEIVED_ENCRYPT_STOP + 4 STARTED_ENCRYPT_START +) +/* mem_ms_state */ +( + 0x00 MS_STANDBY + 0x11 M_MINIT_1 + 0x12 M_MINIT_2 + 0x20 M_SINIT_0 + 0x30 S_MINIT_0 + 0x31 S_MINIT_1 + 0x32 S_MINIT_2 + 0x41 S_SINIT_1 + 0x42 S_SINIT_2 + 0x43 S_SINIT_3 +) +/* mem_test_mode */ +( + 0 TEST_MODE_ALLOWED + 1 TEST_MODE_ACTIVE +) +/* values for mem_tester_emulate */ +( + 0x00 NO_TEST_MODE + 0x00 CONTINUOUS_TRANSMIT + 0x10 TRANSMIT_TEST + 0x08 LOOPBACK +) + +/* mem_tx_misc */ +( + 1 SEND_TX_ADDR +) +/* BBHWREG_page_stat */ +( + 5 PAGE_MODE_END +) +/* host_return_parameters_status codes */ +( + 0x00 HOST_RETURN_SUCCESS + 0x01 HOST_RETURN_SLAVE_CANT_ISSUE + 0x02 HOST_RETURN_NO_CONNECTION + 0x04 HOST_RETURN_PAGE_TIMEOUT + 0x05 HOST_RETURN_INQUIRY_TIMEOUT + 0x08 HOST_RETURN_CONNECTION_TIMEOUT + 0x09 HOST_RETURN_MAX_NUM_CONNECTIONS + 0x0a HOST_RETURN_MAX_NUM_SCO + 0x0b HOST_RETURN_MAX_NUM_ACL + 0x0c HOST_RETURN_SECURITY_REASONS + 0x10 HOST_RETURN_HOST_TIMEOUT + 0x11 HOST_RETURN_UNSUPPORTED_FEATURE_PARAMETER + 0x13 HOST_RETURN_OTHER_END_USER + 0x14 HOST_RETURN_OTHER_END_LOW_RESOURCE + 0x15 HOST_RETURN_OTHER_END_POWER_OFF + 0x16 HOST_RETURN_LOCAL_HOST + 0x18 HOST_RETURN_PAIRING_NOT_ALLOWED + 0x19 HOST_RETURN_UNKNOWN_PDU + 0x1a HOST_RETURN_UNSUPPORTED_REMOTE_FEATURE + 0x1d HOST_RETURN_SCO_AIR_MODE_REJECTED + 0x20 HOST_RETURN_UNSUPPORTED_LMP_VALUE + 0x21 HOST_RETURN_AUTHENTICATION_FAILURE + 0x22 HOST_RETURN_CHANGED_EXISTING_SCO + 0x23 HOST_RETURN_HOST_REJECTED + 0x24 HOST_RETURN_UNSPECIFIED_ERROR + 0x25 HOST_RESET + 0x26 HOST_RETURN_BAD_HANDLE + + 0x00 HOST_RETURN_ACCEPT_COMMAND + 0x01 HOST_RETURN_REJECT_COMMAND +) +/* host_present */ +( + 0 HOST_IS_PRESENT + 1 BCI_IS_PRESENT + 2 DONT_INIT_RADIO +) +/* mem_master_state */ +( + 0 MASTER_STATE_STANDBY + 1 MASTER_INQUIRY +) +/* misc */ +( + 92 SECOND_SWITCH_REQ + 93 SLAVE_DELAY_DETACH + 94 MASTER_DELAY_DETACH + 95 UNSNIFF_DELAY_DETACH + 0 WE_STARTED_AS_MASTER + 1 WE_STARTED_AS_SLAVE +) +/* mem_host_commands */ +( + 0x01 HOST_INQUIRY + 0x02 HOST_INQUIRY_CANCEL + 0x03 HOST_CREATE_CONNECTION + 0x04 HOST_DISCONNECT_CONNECTION + 0x05 HOST_ADD_SCO_REQUEST + 0x06 HOST_REMOTE_NAME_REQUEST + 0x07 HOST_WRITE_SUPPORTED_FEATURES + 0x08 HOST_SET_TX_LEVEL + 0x09 HOST_SET_RX_LEVEL + 0x0a HOST_SNIFF_REQUEST + 0x0b HOST_UNSNIFF_REQUEST + 0x0c HOST_WRITE_LINK_SUPERVISION_TIMEOUT + 0x0e HOST_WRITE_SCAN_ENABLE + 0x0f HOST_READ_AUDIO_QUALITY + 0x10 HOST_ENABLE_DEVICE_UNDER_TEST + 0x14 HOST_BUTTON_CONFIGURE + 0x15 HOST_SET_LOW_BATTERY_LEVEL + 0x16 HOST_WRITE_LOCAL_NAME + 0x17 HOST_WRITE_LOCAL_PIN + 0x18 HOST_KILL_SCO_REQUEST + 0x19 HOST_QOS_REQ + + 0x1a HOST_FEATURES_REQUEST + 0x1b HOST_VERSION_REQUEST + 0x1c HOST_TIMING_REQUEST + 0x1d HOST_CLK_OFFSET_REQUEST + 0x1e HOST_AUTHENTICATE + 0x1f HOST_START_ENCRYPTION + 0x20 HOST_STOP_ENCRYPTION + 0x21 HOST_HOLD_REQUEST + 0x22 HOST_HOLD_FORCE + 0x23 HOST_PARK_REQUEST + 0x24 HOST_MOD_BEACON + 0x25 HOST_SET_BROADCAST_SCAN_WINDOW + 0x26 HOST_UNPARK_PM_REQUEST + 0x27 HOST_UNPARK_BD_REQUEST + 0x28 HOST_SLAVE_REQUEST_UNPARK + 0x29 HOST_DECREASE_POWER_REQUEST + 0x2a HOST_INCREASE_POWER_REQUEST + 0x2b HOST_SEND_PREFERRED_RATE + 0x2c HOST_MAX_SLOT_REQ + 0x2d HOST_MAX_SLOT_FORCE + 0x2e HOST_PAGE_MODE_REQUEST + 0x2f HOST_PAGE_SCAN_MODE_REQUEST + 0x30 HOST_MASTER_SLAVE_SWITCH + 0x31 HOST_SEND_AUTO_RATE + 0x32 HOST_PAGE_CANCEL + 0x33 HOST_CHANGE_LINK_KEY + 0x34 HOST_RADIO_READ + 0x35 HOST_RADIO_WRITE + 0x36 HOST_REMOTE_SLAVE_INIT_UNPARK_REQUESTED + + 0x40 HOST_REMOTE_CONNECTION_REQUESTED + 0x41 HOST_REMOTE_DETACH + 0x42 HOST_REMOTE_SCO_CREATE_REQUESTED + 0x43 HOST_REMOTE_SCO_KILL_REQUESTED + 0x44 HOST_REMOTE_PARK_REQUESTED + 0x45 HOST_REMOTE_UNPARK_REQUESTED + 0x46 HOST_REMOTE_SNIFF_REQUESTED + 0x47 HOST_REMOTE_UNSNIFF_REQUESTED + 0x48 HOST_REMOTE_HOLD_REQUESTED + 0x49 HOST_REMOTE_AUTHENTICATION + 0x4a HOST_REMOTE_START_ENCRYPTION_REQUESTED + 0x4b HOST_REMOTE_STOP_ENCRYPTION_REQUESTED + 0x4c HOST_MODE_CHANGE_EVENT + 0x4d HOST_REMOTE_TEST_ACTIVATE + 0x4e HOST_REMOTE_TEST_CONTROL + 0x4f HOST_REMOTE_TIMING_REQUEST +) +/* BCI interface (not used if not compiled in ) */ +( + 0x01 BCI_INQUIRY + 0x02 BCI_INQUIRY_CANCEL + 0x03 BCI_CREATE_CONNECTION + 0x04 BCI_DISCONNECT + 0x05 BCI_ADD_SCO_CONNECTION + 0x06 BCI_REMOTE_NAME_REQUEST + 0x07 BCI_WRITE_SUPPORTED_FEATURES + 0x08 BCI_SET_TX_POWER_LEVEL + 0x09 BCI_SET_RX_POWER_LEVEL + 0x0a BCI_SNIFF_MODE + 0x0b BCI_EXIT_SNIFF_MODE + 0x0c BCI_WRITE_LINK_SUPERVISION_TIMEOUT + 0x0d BCI_WRITE_PAGE_TIMEOUT + 0x0e BCI_WRITE_SCAN_ENABLE + 0x0f BCI_GET_AUDIO_QUALITY + 0x10 BCI_ENABLE_DEVICE_UNDER_TEST + 0x11 BCI_SEND_DATA + 0x12 BCI_REGISTER_SERVICE_RECORD + 0x13 BCI_SERVICE_SEARCH_ATTRIB_REQ + 0x14 BCI_BUTTON_CONFIGURE + 0x15 BCI_SET_LOW_BATTERY_LEVEL + 0x16 BCI_WRITE_LOCAL_NAME + 0x17 BCI_WRITE_LOCAL_PIN + 0x18 BCI_REMOVE_SCO_CONNECTION + 0x19 BCI_QUALITY_OF_SERVICE + 0x40 BCI_REMOTE_CONNECTION_REQUEST + 0x41 BCI_REMOTE_DETACH + 0x42 BCI_REMOTE_ADD_SCO_REQUEST + 0x43 BCI_REMOTE_REMOVE_SCO_REQUEST + 0x44 BCI_REMOTE_PARK_REQUEST + 0x45 BCI_REMOTE_UNPARK_REQUEST + 0x46 BCI_REMOTE_SNIFF_REQUEST + 0x47 BCI_REMOTE_UNSNIFF_REQUEST + 0x48 BCI_REMOTE_HOLD_REQUEST + 0x49 BCI_REMOTE_AUTHENTICATION_PAIRING_REQUEST + 0x4a BCI_REMOTE_START_ENCRYPTION_REQUEST + 0x4b BCI_REMOTE_STOP_ENCRYPTION_REQUEST + 0x4c BCI_MODE_CHANGE_EVENT +) +/* mode changes */ +( + 0 MODE_CHANGE_ACTIVE + 1 MODE_CHANGE_SNIFFING + 2 MODE_CHANGE_PARKED + 3 MODE_CHANGE_HOLDING + 4 MODE_CHANGE_SCO_ADDED + 5 MODE_CHANGE_SCO_REMOVED + 6 MODE_CHANGE_ACL_CONNECTION + 7 MODE_CHANGE_DISCONNECT + 8 MODE_CHANGE_SCO_CHANGED + 9 MODE_CHANGE_ENCRYPTING + 10 MODE_CHANGE_NOT_ENCRYPTING + 11 MODE_CHANGE_BUTTON_UP + 12 MODE_CHANGE_BUTTON_DOWN + 13 MODE_CHANGE_BATTERY_LOW + 14 MODE_CHANGE_RESET + 15 MODE_CHANGE_INQUIRY_CANCELED_RMTCMD + 16 MODE_ACTIVE_MSSWITCH_PASSED + 17 MODE_ACTIVE_MSSWITCH_FAILED +) +/* mem_battery - low nibble is level information, upper nibble is status info */ +( + 6 BATTERY_CHECK_LEVEL + 7 BATTERY_SENT_STATUS +) +/* mem_radio_version */ +( + 0x02 RADIO_2001 + 0x12 RADIO_2002 + 0x32 RADIO_2002_DDM + 0x42 RADIO_1008A1 + 0x52 RADIO_1018A0 +) +/* mem_slave_initiated_conn */ +( + 0 SLAVE_INIT_AUTHENTICATION + 1 SLAVE_INIT_ENCRYPTION + 2 SLAVE_INIT_MASTER_SLAVE_SWITCH +) +/* connection_options */ +( + 0 CONNECTION_AUTH + 1 CONNECTION_ENCRYPT + 2 CONNECTION_SWITCH + 3 CONNECTION_ACL + 4 CONNECTION_FEATURE_EXT +) +/* mem_debug_config */ +( + 7 AA_INSERTION +) + Index: 1066_OTP_FLASH/output/bt_format.meta =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_format.meta (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_format.meta (working copy) @@ -0,0 +1,8888 @@ +0x4000 mem_patch00 +0x4001 mem_patch01 +0x4002 mem_patch02 +0x4003 mem_patch03 +0x4004 mem_patch04 +0x4005 mem_patch05 +0x4006 mem_patch06 +0x4007 mem_patch07 +0x4008 mem_patch08 +0x4009 mem_patch09 +0x400a mem_patch0a +0x400b mem_patch0b +0x400c mem_patch0c +0x400d mem_patch0d +0x400e mem_patch0e +0x400f mem_patch0f +0x4010 mem_patch10 +0x4011 mem_patch11 +0x4012 mem_patch12 +0x4013 mem_patch13 +0x4014 mem_patch14 +0x4015 mem_patch15 +0x4016 mem_patch16 +0x4017 mem_patch17 +0x4018 mem_patch18 +0x4019 mem_patch19 +0x401a mem_patch1a +0x401b mem_patch1b +0x401c mem_patch1c +0x401d mem_patch1d +0x401e mem_patch1e +0x401f mem_patch1f +0x4020 mem_patch20 +0x4021 mem_patch21 +0x4022 mem_patch22 +0x4023 mem_patch23 +0x4024 mem_patch24 +0x4025 mem_patch25 +0x4026 mem_patch26 +0x4027 mem_patch27 +0x4028 mem_patch28 +0x4029 mem_patch29 +0x402a mem_patch2a +0x402b mem_patch2b +0x402c mem_patch2c +0x402d mem_patch2d +0x402e mem_patch2e +0x402f mem_patch2f +0x4030 mem_patch30 +0x4031 mem_patch31 +0x4032 mem_patch32 +0x4033 mem_patch33 +0x4034 mem_patch34 +0x4035 mem_patch35 +0x4036 mem_patch36 +0x4037 mem_patch37 +0x4038 mem_patch38 +0x4039 mem_patch39 +0x403a mem_patch3a +0x403b mem_patch3b +0x403c mem_patch3c +0x403d mem_patch3d +0x403e mem_patch3e +0x403f mem_patch3f +0x4040 mem_context +0x4090 mem_current_amaddr +0x4091 mem_lpm_mode +0x4092 mem_device_option +0x4093 mem_scan_mode +0x4094 mem_last_clkn +0x4098 mem_features +0x40a0 mem_lap +0x40a3 mem_uap +0x40a4 mem_nap +0x40a6 mem_npage +0x40a7 mem_glap +0x40aa mem_class +0x40ad mem_iscan_window +0x40af mem_iscan_interval +0x40b1 mem_pscan_window +0x40b3 mem_pscan_interval +0x40b5 mem_page_interval +0x40b7 mem_page_window +0x40b9 mem_page_to +0x40bb mem_inq_window +0x40bd mem_fcomp_mul +0x40be mem_fcomp_div +0x40bf mem_rx_window_init +0x40c1 mem_rx_window_sniff +0x40c3 mem_rf_init_ptr +0x40c5 mem_last_type +0x40c6 mem_last_type_esco +0x40c7 mem_last_type_saved +0x40c8 mem_retransmission_cnt +0x40ca mem_next_btclk +0x40ce mem_rf_rccal +0x40cf mem_handle_num +0x40d0 mem_max_slot +0x40d1 mem_eir_enable +0x40d2 mem_afh_instant +0x40d6 mem_afh_error_total +0x40d8 mem_afh_cfg +0x40d9 mem_afh_new_mod +0x40da mem_afh_map_lo +0x40df mem_afh_map_hi +0x40e4 mem_afh_used +0x40e5 mem_afh_index +0x40e7 mem_afh_map_new +0x40f2 mem_afh_map +0x4142 mem_afh_timer +0x4146 mem_afh_classify_channel_map +0x4150 mem_chip_functions +0x4152 mem_lpm_wake_lock +0x4154 mem_lpm_interval +0x4156 mem_lpm_overhead +0x4157 mem_lpm_hibernate_switch +0x4158 mem_esco_addr +0x4159 mem_sniff_unint_lost +0x415a mem_ptt +0x415b mem_sleep_counter//should be 0x41fc in REVC +0x415f mem_sleep_counter_all +0x4163 mem_sleep_clkn +0x4169 mem_sniff_rcv +0x416c mem_sniff_lost +0x416f mem_clks_per_lpo +0x4172 mem_lpm_mult +0x4173 mem_lpm_mult_timeout +0x4174 mem_lpm_mult_cnt +0x4175 mem_lpm_config +0x4178 mem_lpm_xtalcnt +0x4179 mem_lpm_buckcnt +0x417a mem_lpm_ldocnt +0x417b mem_lpm_isogate +0x417c mem_lpm_isogate_final +0x417d mem_saved_gpio// should be 0x421e in REVC +0x418d mem_saved_gsel +0x4190 mem_saved_mark +0x4198 mem_saved_spidctrl +0x4199 mem_patch_ptr +0x419b mem_patch_len +0x419d mem_timers +0x41bd mem_link_key_exists +0x41be mem_link_key +0x41ce mem_hci_cmd +0x41cf mem_hci_conn_handle +0x41d0 mem_hci_plap +0x41d3 mem_hci_puap +0x41d4 mem_hci_pnap +0x41d6 mem_uartd_rxitems_got_data +0x41d7 mem_uartd_rxitems_threshold +0x41d8 mem_uartd_rx_timeout +0x41da mem_loadcode_times +0x41db mem_tx_lch +0x41dc mem_tx_len +0x41de mem_tx_power +0x41df mem_context_number +0x41e0 mem_250k_freq_enable +0x41e1 mem_rf_init_data +0x41e2 mem_app_handshake_flag +0x41e3 mem_sniff_param_interval +0x41e5 mem_sniff_param_attempt +0x41e7 mem_sniff_param_timeout +0x41e9 mem_cb_check_wakelock +0x41eb mem_cb_before_hibernate +0x41ed mem_cb_before_lpm +0x41ef mem_cb_le_process +0x41f1 mem_cb_bt_process +0x41f3 mem_cb_idle_process +0x41f5 mem_cb_bb_event_process +0x41f7 mem_cb_discovry_timeout +0x41f9 mem_cb_att_write +0x41fb mem_cb_ble_transmit +0x41fd mem_cb_event_timer +0x41ff mem_cb_bt_set_mult +0x4201 mem_cb_spi_flash_write_complate +0x4203 mem_eeprom_base +0x4205 mem_unsniff2sniff_timer_count +0x4206 mem_wake_up_delay_timer +0x4207 mem_app_connection_options +0x4208 mem_app_disconn_reason +0x420a mem_app_disconn_reason_flag +0x420c mem_lpm_delay_after_sniff +0x4210 mem_xrecord_mode +0x4211 mem_eeprom_block_size +0x4212 mem_spi_init_clk +0x4213 mem_spi_init_delay_time +0x4214 mem_spi_ncs_gpio +0x4215 mem_nv_data_ptr +0x4217 mem_nv_data_number +0x4218 mem_queue_ptr +0x421a mem_ui_led_struct_num +0x421b mem_ui_led_struct_ptr +0x421d mem_0_5_adc_io_data +0x421f mem_1v_adc_hvin_data +0x4221 mem_2v_adc_vinlpm_data +0x4223 mem_1v_adc_io_data +0x4225 mem_5v_adc_hvin_data +0x4227 mem_3v_adc_vinlpm_data +0x4229 mem_otp_adc_flag +0x422b mem_reference_voltage +0x422d mem_adc_config_flag +0x422e mem_adc_channel +0x422f mem_adc_current_value +0x4231 mem_adc_power_flag//bit0:low power falg ; bit1:no power flag +0x4232 mem_spi_write_addr +0x4235 mem_spi_write_ptr +0x4237 mem_spi_write_len +0x4239 mem_spi_write_flash_sm +0x423a mem_eeprom_wp_gpio +0x423b mem_kscan_ptr +0x423d mem_key_num_ptr +0x423d mem_keyscan_ptr +0x423f mem_power_param_ptr +0x4241 mem_24g_head_ptr +0x4243 mem_baud +0x4245 mem_hci_lt_rx_state +0x4246 mem_l2cap_xmem_start +0x4246 mem_l2cap_tx_multi_offset//0 means single packet +0x4248 mem_sdp_remote_cid +0x424a mem_rfcomm_remote_cid +0x424c mem_hid_ctrl_remote_cid +0x424e mem_hid_int_remote_cid +0x4250 mem_sdp_state +0x4251 mem_rfcomm_state +0x4252 mem_hid_control_state +0x4253 mem_hid_interrupt_state +0x4254 mem_spp_state +0x4255 mem_ML2CAP_comm_id +0x4256 mem_used_map +0x4257 mem_tx_fifo0 +0x4257 mem_tx_fifo0_map +0x4258 mem_tx_fifo0_ptr +0x425a mem_tx_fifo1 +0x425a mem_tx_fifo1_map +0x425b mem_tx_fifo1_ptr +0x425d mem_tx_fifo2 +0x425d mem_tx_fifo2_map +0x425e mem_tx_fifo2_ptr +0x4260 mem_tx_fifo3 +0x4260 mem_tx_fifo3_map +0x4261 mem_tx_fifo3_ptr +0x4263 mem_tx_fifo_end +0x4263 mem_l2cap_lpm_txbuf +0x4363 mem_l2cap_flow_ctrl_flag +0x4364 mem_l2cap_pending_item +0x4365 mem_l2cap_xmem_end +0x4365 mem_le_dsniff +0x4367 mem_le_conn_interval +0x4369 mem_le_scan_enable +0x436a mem_le_scan_interval +0x436c mem_le_scan_window +0x436e mem_le_adv_enable +0x436f mem_le_adv_data_len +0x4370 mem_le_adv_data +0x438f mem_le_scan_data_len +0x4390 mem_le_scan_data +0x43af mem_le_name_len +0x43b0 mem_le_name +0x43ce mem_le_new_map +0x43d3 mem_le_new_param +0x43d3 mem_le_new_transmitwindowsize +0x43d4 mem_le_new_transmitwindowoffset +0x43d6 mem_le_new_conninterval +0x43d8 mem_le_new_connslavelatency +0x43da mem_le_new_connsupervisiontimeout +0x43dc mem_le_txheader +0x43dd mem_le_txlen +0x43de mem_le_txpayload +0x43e0 mem_le_txcid +0x43e2 mem_le_l2cap +0x43e3 mem_le_l2cap_response +0x43e4 mem_le_txbdy +0x4403 mem_le_pcnt_tx +0x4408 mem_le_pcnt_rx +0x440d mem_le_last_mic +0x4411 mem_le_ivm +0x4415 mem_le_ivs +0x4419 mem_le_ltk +0x4429 mem_ltk_exists +0x442a mem_le_rconfirm +0x443a mem_le_srand +0x444a mem_le_iat +0x444b mem_le_rat +0x444c mem_le_preq +0x444d mem_le_preq_iocap +0x444e mem_le_preq_oob +0x444f mem_le_preq_auth +0x4450 mem_le_preq_max_keysize +0x4451 mem_le_preq_init_key_distribution +0x4452 mem_le_preq_resp_key_distribution +0x4453 mem_le_pres +0x4454 mem_le_pres_iocap +0x4455 mem_le_pres_oob +0x4456 mem_le_pres_auth +0x4457 mem_le_pres_max_keysize +0x4458 mem_le_pres_init_key_distribution +0x4459 mem_le_pres_resp_key_distribution +0x445a mem_le_search_handle_start +0x445c mem_le_search_handle_end +0x445e mem_le_att_offset +0x445e mem_le_search_att_type_length +0x445f mem_le_search_att_type +0x446f mem_le_notify_handle +0x4471 mem_le_search_uuid_length +0x4472 mem_le_search_uuid +0x4482 mem_le_adv_param +0x4482 mem_le_adv_interval +0x4484 mem_le_adv_type +0x4485 mem_le_adv_own_addr_type +0x4486 mem_le_adv_direct_addr_type +0x4487 mem_le_adv_direct_addr +0x448d mem_le_adv_channel_map +0x448e mem_le_conn_param +0x448e mem_le_conn_peer_addr_type +0x448f mem_le_conn_peer_addr +0x4495 mem_le_conn_own_addr_type +0x4496 mem_le_interval_min +0x4498 mem_le_interval_max +0x449a mem_le_latency +0x449c mem_le_timeout +0x449e mem_le_scan_params +0x449e mem_le_scan_type +0x449f mem_le_scan_own_addr_type +0x44a0 mem_le_lap +0x44a3 mem_le_uap +0x44a4 mem_le_nap +0x44a6 mem_le_local_mtu +0x44a8 mem_le_remote_mtu +0x44aa mem_le_skdm +0x44b2 mem_le_skds +0x44ba mem_le_init_superto +0x44bc mem_ui_le_uuid_table +0x44be mem_le_secure_connect_enable +0x44bf mem_le_secure_connect_flag +0x44c0 mem_le_sc_calc +0x44c1 mem_le_secure_connect_state +0x44c2 mem_le_sc_confirm_gkey_flag +0x44c3 mem_le_sc_local_key_invalid +0x44c4 mem_le_pairing_state +0x44c5 mem_le_enc_state +0x44c6 mem_le_pairing_mode +0x44c7 mem_le_tk +0x44cb mem_le_ediv +0x44cd mem_le_rand +0x44d5 mem_le_irk +0x44e5 mem_le_transmit_window +0x44e9 mem_le_configuration +0x44ea mem_le_fixed_ltk +0x44fa mem_le_pairing_handle +0x44fc mem_le_l2cap_size +0x44fe mem_le_packet_len_recved +0x44ff mem_le_tx_buff_used +0x4500 mem_le_tx_ptr0 +0x4502 mem_le_tx_ptr1 +0x4504 mem_le_tx_ptr2 +0x4506 mem_le_tx_ptr3 +0x4508 mem_le_signaling_identifier +0x4509 mem_le_l2cap_signaling_conn_param_update_rsp_result +0x450b mem_le_packet_size +0x450c mem_le_packet_llid +0x450d mem_le_payload_ptr +0x450f mem_le_md_count +0x4510 mem_lmp_version +0x4513 mem_lmp_subversion +0x4515 mem_local_name_length +0x4516 mem_local_name +0x4519 mem_local_name2 +0x4559 mem_local_name_end +0x455a mem_unsniff2sniff_timer +0x455b mem_switch_flag +0x455c mem_classic_bt_flag +0x455d mem_pn_dlci +0x455e mem_pn_max_frame_size +0x4560 memFCStemp1 +0x4561 memFCStemp2 +0x4562 memFCStemp3 +0x4563 mem_rfcomm_initiator +0x4564 mem_remote_spp_channel +0x4565 mem_HIUfcs_SPP +0x4566 mem_HIUfcs_SPP_WCredits +0x4567 mem_rfcomm_send_more_pkt +0x4568 mem_remote_credits +0x4569 mem_credit_given +0x456a mem_ms_channel +0x456b mem_credit_flag +0x456c mem_rfcomm_max_frame_size +0x456e mem_rfcomm_credit_init_data +0x456f mem_cb_receive_spp_data +0x4571 mem_nl_rx_data_src +0x4573 mem_nl_rx_len_all +0x4575 mem_ui_uuid_table +0x4577 mem_all_uuid_16bits +0x458d mem_all_uuid_128bits +0x45af mem_sdp_l2capch_ptr +0x45b1 mem_sp_local_key_invalid +0x45b2 mem_le_private_key_256 +0x45d2 mem_le_pubkey_local_x_256 +0x45f2 mem_le_pubkey_local_y_256 +0x4612 mem_sp_private_key +0x462a mem_sp_pubkey_local +0x462a mem_sp_pubkey_local_x +0x4642 mem_sp_pubkey_local_x_end +0x4642 mem_sp_pubkey_local_y +0x465a mem_ssp_enable +0x465b mem_sp_iocap_local +0x465e mem_sp_iocap_remote +0x4661 mem_flag_mode_ssp_pin +0x4662 mem_ssp_mode_flag +0x4663 mem_authentication_passkey_times +0x4664 mem_passkey_1bit +0x4665 mem_flag_pairing_state +0x4666 mem_ipc_lock_bt +0x4667 mem_ipc_lock_c51 +0x4668 mem_ipc_fifo_bt2c51 +0x4670 mem_ipc_fifo_c512bt +0x4678 mem_ui_button_timer +0x4679 mem_ui_button_last_state +0x467a mem_ui_timer_last_btclk +0x467e mem_discovery_timeout_timer_count +0x4680 mem_hid_handshake_timer_count +0x4681 memui_reconnect_mode +0x4682 mem_ui_state_map +0x4684 mem_ui_profile_supported +0x4685 mem_ui_button_timeout +0x4686 mem_ui_button_gpio +0x4687 mem_discovery_timeout +0x4689 mem_pin_length +0x468a mem_pin +0x469a mem_antl_lpm_interval +0x469c mem_antl_adv_interval +0x469e mem_antl_slow_adv_lpm_interval +0x46a0 mem_antl_slow_adv_adv_interval +0x46a2 mem_antl_led_style +0x46a2 mem_antl_led_type +0x46a3 mem_antl_led_blink_count +0x46a4 mem_antl_led_gpio +0x46a5 mem_antl_led_on_time +0x46a7 mem_antl_led_off_time +0x46a9 mem_antl_led_cb_on +0x46ab mem_antl_led_cb_off +0x46ad mem_antl_buzzer_style +0x46ad mem_antl_buzzer_type +0x46ae mem_antl_buzzer_blink_count +0x46af mem_antl_buzzer_gpio +0x46b0 mem_antl_buzzer_on_time +0x46b2 mem_antl_buzzer_off_time +0x46b4 mem_antl_buzzer_cb_on +0x46b6 mem_antl_buzzer_cb_off +0x46b8 mem_antl_fast_adv_led_style +0x46b8 mem_antl_fast_adv_led_type +0x46b9 mem_antl_fast_adv_led_blink_count +0x46ba mem_antl_fast_adv_led_gpio +0x46bb mem_antl_fast_adv_led_on_time +0x46bd mem_antl_fast_adv_led_off_time +0x46bf mem_antl_slow_adv_led_style +0x46bf mem_antl_slow_adv_led_type +0x46c0 mem_antl_slow_adv_led_blink_count +0x46c1 mem_antl_slow_adv_led_gpio +0x46c2 mem_antl_slow_adv_led_on_time +0x46c4 mem_antl_slow_adv_led_off_time +0x46c6 mem_antl_power_starting_led_style +0x46c6 mem_antl_power_starting_led_type +0x46c7 mem_antl_power_starting_led_blink_count +0x46c8 mem_antl_power_starting_led_gpio +0x46c9 mem_antl_power_starting_led_on_time +0x46cb mem_antl_power_starting_led_off_time +0x46cd mem_antl_power_starting_buzzer_style +0x46d4 mem_antl_power_off_led_style +0x46d4 mem_antl_power_off_led_type +0x46d5 mem_antl_power_off_led_link_count +0x46d6 mem_antl_power_off_led_gpio +0x46d7 mem_antl_power_off_led_on_time +0x46d9 mem_antl_power_off_led_off_time +0x46db mem_antl_power_off_buzzer_style +0x46db mem_antl_power_off_buzzer_type +0x46dc mem_antl_power_off_buzzer_link_count +0x46dd mem_antl_power_off_buzzer_gpio +0x46de mem_antl_power_off_buzzer_on_time +0x46e0 mem_antl_power_off_buzzer_off_time +0x46e2 mem_antl_alert_led_stlye +0x46e9 mem_antl_alert_buzzer_stlye +0x46e9 mem_antl_alert_buzzer_type +0x46ea mem_antl_alert_buzzer_blink_count +0x46eb mem_antl_alert_buzzer_gpio +0x46ec mem_antl_alert_buzzer_on_time +0x46ee mem_antl_alert_buzzer_off_time +0x46f0 mem_antl_key_led_style +0x46f0 mem_antl_key_led_type +0x46f1 mem_antl_key_led_blink_count +0x46f2 mem_antl_key_led_gpio +0x46f3 mem_antl_key_led_on_time +0x46f5 mem_antl_key_led_off_time +0x46f7 mem_antl_key_buzzer_style +0x46fe mem_antl_queue_width +0x46ff mem_antl_queue_depth +0x4700 mem_antl_queue_curr_num +0x4701 mem_antl_queue_read_ptr +0x4702 mem_antl_queue_write_ptr +0x4703 mem_antl_queue_buff +0x4753 mem_antl_key_scan_enable +0x4754 mem_antl_led_num +0x4755 mem_antl_led_gpio_map +0x4759 mem_antl_power_param +0x4759 mem_antl_power_state +0x475a mem_antl_power_timer +0x475b mem_antl_power_off_timeout +0x475c mem_antl_power_starting_timeout +0x475d mem_antl_power_off_cb +0x475f mem_antl_power_starting_cb +0x4761 mem_antl_power_standby_cb +0x4763 mem_event_button_up_cb +0x4765 mem_antl_key_num +0x4766 mem_cb_antl_key +0x4768 mem_antl_key_conf0 +0x476c mem_antl_key0_press +0x477b mem_antl_key0_release +0x478a mem_antl_conn_updata_procedure_state +0x478b mem_client_characteristic_configuration_descriptor +0x478d mem_adc_timer +0x478f mem_antl_conn_update_timer +0x4790 mem_antl_send_updata_le_param_timer +0x4791 mem_antl_le_sleep_timer +0x4793 mem_antl_fast_adv_timer +0x4795 mem_antl_fast_adv_timeout +0x4797 mem_antl_le_sleep_timeout +0x4799 mem_double_click_timer +0x479a mem_butten_click_cnt +0x479b mem_antl_led_state +0x479c mem_antl_buzzer_state +0x479d mem_antl_key_state +0x479e mem_antl_lost_mode +0x479f mem_alarm_config +0x47a0 mem_alarm_config_notfy_cnt +0x47a1 mem_buzzer_pwm_conf +0x47a7 mem_adc_timeout +0x47a9 mem_voltage_remain_percent +0x47aa mem_battery_calculate_set +0x47aa mem_battery_full_voltage +0x47ac mem_battery_empty_voltage +0x47ae mem_battery_low_voltage +0x47b0 mem_battery_current_voltage +0x47b2 mem_rx_window_sniff_inc +0x47b4 mem_interval_increment +0x47b6 mem_antl_le_interval_min +0x47b8 mem_antl_le_interval_max +0x47ba mem_antl_le_latency +0x47bc mem_antl_le_timeout +0x47be mem_antl_le_unnormal_interval_min +0x47c0 mem_antl_le_unnormal_interval_max +0x47c2 mem_antl_le_unnormal_latency +0x47c4 mem_antl_le_unnormal_timeout +0x47c6 mem_AntiLost_le_att_list +0x469a mem_car_hard_soft_switch +0x469b mem_car_queue_each_size +0x469c mem_car__queue_length +0x469d mem_car_queue_curr_num +0x469e mem_car_queue_read_ptr +0x469f mem_car_queue_write_ptr +0x46a0 mem_car_queue_ele +0x4718 mem_car_pop_queue_buff +0x472c mem_car_led_num +0x472d mem_car_led_map +0x4737 mem_car_style1_led_type +0x4738 mem_car_style1_blink_count +0x4739 mem_car_style1_struct_led_gpio +0x473a mem_car_style1_on_time +0x473c mem_car_style1_off_time +0x473e mem_car_style1_cb_ledon +0x4740 mem_car_style1_cb_ledoff +0x4742 mem_car_style2_led_type +0x4743 mem_car_style2_blink_count +0x4744 mem_car_style2_struct_led_gpio +0x4745 mem_car_style2_on_time +0x4747 mem_car_style2_off_time +0x4749 mem_car_style2_cb_ledon +0x474b mem_car_style2_cb_ledoff +0x474d mem_le_receive_data +0x474d mem_le_receive_packet_head +0x474f mem_le_receive_cmd +0x4750 mem_le_receive_length +0x4752 mem_le_receive_payload +0x475c mem_le_receive_checksum +0x475d mem_motor1_status +0x475e mem_motor1_speed +0x475f mem_motor2_status +0x4760 mem_motor2_speed +0x4761 mem_motor3_status +0x4762 mem_motor3_speed +0x4763 mem_motor1_pwm_set +0x4763 mem_motor1_pwm_pin1_set +0x4764 mem_motor1_pwm_pin2_set +0x4765 mem_motor1_pwm_pin_set +0x4766 mem_motor1_pwm_channel_set +0x4767 mem_motor1_pwm_freq_set +0x476a mem_motor1_pwm_dute_set +0x476b mem_motor2_pwm_set +0x476b mem_motor2_pwm_pin1_set +0x476c mem_motor2_pwm_pin2_set +0x476d mem_motor2_pwm_pin_set +0x476e mem_motor2_pwm_channel_set +0x476f mem_motor2_pwm_freq_set +0x4772 mem_motor2_pwm_dute_set +0x4773 mem_motor3_pwm_set +0x4773 mem_motor3_pwm_pin1_set +0x4774 mem_motor3_pwm_pin2_set +0x4775 mem_motor3_pwm_pin_set +0x4776 mem_motor3_pwm_channel_set +0x4777 mem_motor3_pwm_freq_set +0x477a mem_motor3_pwm_dute_set +0x477b mem_motor_select_p_n +0x477c mem_car_motor_status +0x477d mem_car_motor_speed +0x477e mem_motor_pwm_set +0x477e mem_motor_pwm_pin1_set +0x477f mem_motor_pwm_pin2_set +0x4780 mem_motor_pwm_pin_set +0x4781 mem_motor_pwm_channel_set +0x4782 mem_motor_pwm_freq_set +0x4785 mem_motor_pwm_dute_set +0x4786 mem_ir_rx_gpio +0x4787 mem_ir_data +0x4789 mem_ir_rx_buf +0x478b mem_ir_receive_clkn +0x478f mem_ir_notify_data +0x4792 mem_ir_notify_data_head +0x4797 mem_ir_notify_data_payload +0x4799 mem_ir_notify_data_check_sum +0x479a mem_car_ir_breakdown_check_timer +0x479b mem_car_ir_breakdown_flag +0x479c mem_car_led_control +0x479c mem_car_led1_status +0x479d mem_car_led2_status +0x479e mem_car_led3_status +0x479f mem_car_led4_status +0x47a0 mem_car_led5_status +0x47a1 mem_car_led6_status +0x47a2 mem_car_led7_status +0x47a3 mem_car_led8_status +0x47a4 mem_car_led_control_timer +0x47a5 mem_car_led_blink_status +0x47a6 mem_car_led_no +0x47a7 mem_car_info_request +0x47aa mem_car_info_request_head +0x47af mem_car_info_request_payload +0x47b7 mem_car_info_request_checksum +0x47b8 mem_car_config_param +0x47b8 mem_car_config_setting_flag +0x47b9 mem_car_config_device_select +0x47ba mem_car_config_motor_layout +0x47bb mem_car_config_ir_enable +0x47bc mem_car_config_ir_rx_gpio +0x47bd mem_car_config_pairing_led_conn_status +0x47be mem_car_config_pairing_led_gpio +0x47bf mem_car_config_led_num +0x47c0 mem_car_config_blood_led_gpio +0x47c0 mem_car_config_blood_led1_gpio +0x47c1 mem_car_config_blood_led2_gpio +0x47c2 mem_car_config_blood_led3_gpio +0x47c3 mem_car_config_blood_led4_gpio +0x47c4 mem_car_config_blood_led5_gpio +0x47c5 mem_car_config_blood_led6_gpio +0x47c6 mem_car_config_blood_led7_gpio +0x47c7 mem_car_config_blood_led8_gpio +0x47c8 mem_car_config_bat_notify_enable +0x47c9 mem_car_config_low_voltage_led_gpio +0x47ca mem_car_config_low_voltage_percent +0x47cb mem_car_config_soft_switch_enable +0x47cc mem_car_config_soft_switch_gpio +0x47cd mem_car_notify_vdd_count +0x47ce mem_car_notify_vdd_timer +0x47cf mem_car_notify_vdd_value_last +0x47d0 mem_car_notify_vdd_percent +0x47d1 mem_car_working_flag +0x47d2 mem_low_bat_flag +0x47d3 mem_notify_bat_packet +0x47d6 mem_notify_bat_head +0x47db mem_notify_bat_payload +0x47dc mem_notify_bat_check_sum +0x47dd mem_vdd_notify_flag +0x47de mem_car_current_vdd_value_temp +0x47e0 mem_car_last_vdd_value +0x47e2 mem_vdd_calculate_set +0x47e2 mem_vdd_full_vol +0x47e4 mem_vdd_empty_vol +0x47e6 mem_vdd_low_vol +0x47e8 mem_vdd_now_vol +0x47ea mem_car_24g_status +0x47eb mem_car_24g_no_data_timeout_count +0x47ed mem_car_24g_no_data_timeout_timer +0x47ef mem_car_24g_ir_receive_attack_count +0x47f0 mem_car_24g_go_die_flag +0x47f1 mem_car_attack_shake_timer +0x47f2 mem_car_attack_shake_flag +0x47f3 mem_car_soft_power +0x47f3 mem_car_power_state +0x47f4 mem_car_power_timer +0x47f5 mem_car_power_off_timeout +0x47f6 mem_car_power_starting_timeout +0x47f7 mem_car_power_off_cb +0x47f9 mem_car_power_starting_cb +0x47fb mem_car_power_standby_cb +0x47fd mem_car_ui_button_up_cb +0x47ff mem_car_le_att_list +0x49f3 mem_car_moto1_blank_timer +0x49f4 mem_car_moto2_blank_timer +0x49f5 mem_car_moto3_blank_timer +0x49f6 mem_car_24g_received_pac +0x49f7 mem_24g_car_head_ptr +0x469a mem_light_pwm0 +0x469b mem_light_pwm1 +0x469c mem_light_pwm2 +0x469d mem_light_pwm3 +0x469e mem_light_pwm4 +0x469f mem_light_pwm5 +0x46a0 mem_light_pairing_enable +0x46a1 mem_light_pairing_timer +0x46a3 mem_light_cnum +0x46a4 mem_light_next_record +0x46a5 mem_light_clist +0x46f5 mem_light_crr_cmd_count +0x46f6 mem_curr_packet_num +0x469a mem_lightc_led_gpio +0x469b mem_lightc_row +0x46a1 mem_lightc_col +0x46a7 mem_adv_time +0x46a8 mem_cmd0_string +0x46bc mem_cmd1_string +0x46d0 mem_cmd2_string +0x46e4 mem_cmd3_string +0x46f8 mem_cmd4_string +0x470c mem_cmd5_string +0x4720 mem_cmd6_string +0x4734 mem_cmd7_string +0x4748 mem_cmd8_string +0x475c mem_cmd9_string +0x4770 mem_cmd10_string +0x4784 mem_cmd11_string +0x4798 mem_cmd12_string +0x47ac mem_cmd13_string +0x47c0 mem_cmd14_string +0x47d4 mem_cmd15_string +0x47e8 mem_cmd16_string +0x47fc mem_cmd17_string +0x4810 mem_cmd18_string +0x4824 mem_cmd19_string +0x4838 mem_cmd20_string +0x469a mem_soft_version_num +0x469c mem_module_wake_up_gpio +0x469d mem_module_state_gpio +0x469e mem_module_connect_state_gpio +0x469f mem_current_packet_length +0x46a1 mem_module_state +0x46a2 mem_module_mcu_wake_pin +0x46a3 mem_module_mcu_wake_delay_us +0x46a7 mem_module_spp_lpm_mult +0x46a8 mem_module_le_lpm_mult +0x46a9 mem_module_bluetooth_stauts_by_command +0x46aa mem_module_uart_rx_buffer +0x46ac mem_module_uart_rx_buffer_end +0x46ae mem_module_uart_tx_buffer +0x46b0 mem_module_uart_tx_buffer_end +0x46b2 mem_module_read_vdd_flag +0x46b3 mem_module_read_vdd_count +0x46b4 mem_module_vdd_quotient +0x46b5 mem_module_vdd_remainder +0x46b6 mem_module_le_rx_data_len +0x46b7 mem_module_le_rx_data_address +0x46b9 mem_module_le_rx_data_handle +0x46bb mem_module_data_write_handle +0x46bd mem_module_data_write_handle2 +0x46bf mem_module_flag +0x46c0 mem_module_hci_notify_len +0x46c1 mem_module_hci_notify_handle +0x46c3 mem_module_hci_nofiy_addr +0x46c5 mem_last_transmite_clock +0x46c9 mem_module_uuid_list +0x47f5 mem_module_uuid_list_end +0x47f5 mem_module_le_att_list +0x4a4d mem_module_le_att_list_end +0x4a4d mem_module_nv_data +0x4a4d mem_module_nv_data0 +0x4a6f mem_module_nv_data1 +0x4a91 mem_module_nv_data2 +0x4ab3 mem_module_nv_data3 +0x4ad5 mem_module_nv_data4 +0x469a mem_mouse_key +0x469b mem_mouse_x +0x469d mem_mouse_y +0x469f mem_mouse_z +0x46a0 mem_mouse_tz +0x46a1 mem_mouse_xy_h +0x46a2 mem_sensor_shutter_hi +0x46a3 mem_sensor_shutter_lo +0x46a4 mem_sensor_smart_flag +0x46a5 mem_sensor_squal_reg +0x46a6 mem_sensor_iqc +0x46a7 mem_mouse_move_flag +0x46a8 mem_mouse_direct_timeout +0x46aa mem_mouse_no_data_timeout +0x46ac mem_mouse_discovery_timer +0x46ae mem_mouse_direct_timer +0x46b0 mem_mouse_no_data_timer +0x46b2 mem_mouse_blank_data_timer +0x46b4 mem_mouse_send_blank_timer +0x46b5 mem_mouse_cpi_count +0x46b6 mem_mouse_dpi_button_state +0x46b7 mem_wheel_tb_old_pinlevel +0x46b8 mem_wheel_tb_new_pinlevel +0x46b9 mem_wheel_tog +0x46ba mem_mouse_tz_data +0x46bb mem_mouse_tz_data_count +0x46bc mem_mouse_tz_data_count1 +0x46bd mem_mwheel_b_old_pinlevel +0x46be mem_mwheel_b_new_pinlevel +0x46bf mem_mwheel_tog +0x46c0 mem_mouse_z_data +0x46c1 mem_mouse_z_data_count +0x46c2 mem_mouse_z_data_count1 +0x46c3 mem_reconn_mode +0x46c4 mem_mouse_statue_led_timer +0x46c5 mem_le_connect_statue_flag +0x46c6 mem_le_start_encrypt_timer +0x46c7 mem_device_addr_temp +0x46ce mem_adc_read_timer +0x46cf mem_adc_low_volatage_led_timer_count +0x46d0 mem_adc_reference_voltage +0x46d2 mem_device_number +0x46d3 mem_mouse_flag +0x46d5 mem_mouse_function_enable +0x46d7 mem_combination_select_device_timer_init +0x46d8 mem_combination_select_device_count +0x46d9 mem_select_device_button_statue +0x46da mem_combination_ui_button_count +0x46db mem_bt_discovey_button_statue +0x46dc mem_sensor_reset_gpio +0x46dd mem_sensor_id1 +0x46de mem_sensor_id2 +0x46df mem_mouse_dpi_led_delay_count +0x46e0 mem_config_sensor_type +0x46e1 mem_config_sensor_motion +0x46e2 mem_lbutton_gpio +0x46e3 mem_rbutton_gpio +0x46e4 mem_mbutton_gpio +0x46e5 mem_bk_button_gpio +0x46e6 mem_fw_button_gpio +0x46e7 mem_dpi_button_gpio +0x46e8 mem_whee_a_data_gpio +0x46e9 mem_whee_b_data_gpio +0x46ea mem_whee_ta_data_gpio +0x46eb mem_whee_tb_data_gpio +0x46ec mem_config_bt_button_gpio +0x46ed mem_config_select_device_button_gpio +0x46ee mem_config_paraing_led_gpio +0x46ef mem_config_low_voltage_alarm_gpio +0x46f0 mem_config_device1_led_gpio +0x46f1 mem_config_device2_led_gpio +0x46f2 mem_config_device3_led_gpio +0x46f3 mem_sensor_data_gpio +0x46f4 mem_dpi_led_gpio +0x46f5 mem_config_function_enable +0x46f6 mem_config_sensor_angle +0x46f7 mem_select_sensor_angle_gpio +0x46f8 mem_select_adc_gpio +0x46f9 mem_config_end +0x46f9 mem_btclk_sensor +0x46fd mem_wire_usb_interval +0x46fe mem_mouse_mode_flag +0x46ff mem_usb_addr +0x4700 mem_flash_base +0x4703 mem_24g_device_number +0x4704 mem_24g_enter_lpm_timer +0x4705 mem_mouse_1step_up_count +0x4706 mem_mouse_2step_up_count +0x4707 mem_24g_pairing_timer_count +0x4709 mem_mouse_vdd_calculate_set +0x4709 mem_mouse_vdd_full_vol +0x470b mem_mouse_vdd_empty_vol +0x470d mem_mouse_vdd_low_vol +0x470f mem_mouse_vdd_now_vol +0x4711 mem_mouse_sensor_timer_count +0x4712 mem_sensor_led_style +0x4713 mem_mouse_led_type +0x4714 mem_mouse_blink_count +0x4715 mem_mouse_struct_led_gpio +0x4716 mem_mouse_on_time +0x4718 mem_mouse_off_time +0x471a mem_mouse_cb_ledon +0x471c mem_mouse_cb_ledoff +0x471e mem_reconn_times +0x471f mem_reconn_times_init +0x4720 mem_mouse_information_start +0x4720 mem_device_flag +0x4721 mem_device1_type +0x4722 mem_device1_addr +0x4728 mem_device1_link_key +0x4738 mem_device1_locall_addr +0x473e mem_device2_type +0x473f mem_device2_addr +0x4745 mem_device2_link_key +0x4755 mem_device2_locall_addr +0x475b mem_device3_type +0x475c mem_device3_addr +0x4762 mem_device3_link_key +0x4772 mem_device3_locall_addr +0x4778 mem_store_flag +0x477a mem_mouse_dpi +0x477b mem_mouse_24g_addr +0x477f mem_mouse_information_end +0x477f mem_mouse_dpi_seting +0x477f mem_320x_dpi_1 +0x4780 mem_320x_dpi_2 +0x4781 mem_320x_dpi_3 +0x4782 mem_320x_dpi_4 +0x4783 mem_3212_dpi_1 +0x4784 mem_3212_dpi_2 +0x4785 mem_3212_dpi_3 +0x4786 mem_3212_dpi_4 +0x4787 mem_3610_dpi_1 +0x4788 mem_3610_dpi_2 +0x4789 mem_3610_dpi_3 +0x478a mem_3610_dpi_4 +0x478b mem_mouse_24g_enter_lpm_enable +0x478c mem_24g_ms_head_ptr +0x469a mem_remote_car_hard_soft_switch +0x469b mem_remote_car_queue_each_size +0x469c mem_remote_car_queue_length +0x469d mem_remote_car_queue_curr_num +0x469e mem_remote_car_queue_read_ptr +0x469f mem_remote_car_queue_write_ptr +0x46a0 mem_remote_car_queue_ele +0x46fa mem_remote_style_led_type +0x46fb mem_remote_style_blink_count +0x46fc mem_remote_style_struct_led_gpio +0x46fd mem_remote_style_on_time +0x46ff mem_remote_style_off_time +0x4701 mem_remote_style_cb_ledon +0x4703 mem_remote_style_cb_ledoff +0x4705 mem_remote_car_led_num +0x4706 mem_remote_car_led_map +0x470e mem_remote_car_keyscan +0x470e mem_remote_car_key_num +0x470f mem_cb_remote_car_keyscan +0x4711 mem_remote_car_key_conf0 +0x4711 mem_remote_car_key_conf0_pin +0x4712 mem_remote_car_key_conf1 +0x4712 mem_remote_car_key_conf1_pin +0x4713 mem_remote_car_key_conf2 +0x4713 mem_remote_car_key_conf2_pin +0x4714 mem_remote_car_key_conf3 +0x4714 mem_remote_car_key_conf3_pin +0x4715 mem_remote_car_key_conf4 +0x4715 mem_remote_car_key_conf4_pin +0x4716 mem_remote_car_key_conf5 +0x4716 mem_remote_car_key_conf5_pin +0x4717 mem_remote_car_key_conf6 +0x4717 mem_remote_car_key_conf6_pin +0x4718 mem_rocker_negative_flag +0x4719 mem_rocker_work_status +0x471a mem_current_vdd_value_default_mid_x +0x471c mem_current_vdd_value_default_mid_y +0x471e mem_current_vdd_value_default_mid_temp +0x4720 mem_current_vdd_default_range +0x4722 mem_rocker_last_status +0x4724 mem_rocker_status +0x4724 mem_rocker_x_status +0x4725 mem_rocker_y_status +0x4726 mem_remote_car_config_param +0x4726 mem_remote_car_config_setting_flag +0x4727 mem_remote_car_config_key_map +0x4728 mem_remote_car_config_layout +0x4729 mem_remote_car_config_connect_led_gpio +0x472a mem_remote_car_config_check_way +0x472b mem_remote_car_config_soft_switch_enable +0x472c mem_remote_car_config_soft_switch_gpio +0x472d mem_remote_car_config_timeout_shutdown_enable +0x472e mem_remote_car_24g_motor_packet +0x472e mem_remote_car_24g_motor_packet_lenght +0x472f mem_remote_car_24g_motor_send_packet_head +0x4731 mem_remote_car_24g_motor_send_cmd +0x4732 mem_remote_car_24g_motor_send_length +0x4734 mem_remote_car_24g_motor_send_payload +0x4734 mem_remote_car_24g_motor1_payload +0x4736 mem_remote_car_24g_motor2_payload +0x4738 mem_remote_car_24g_motor3_payload +0x473a mem_remote_car_24g_motor_send_checksum +0x473b mem_remote_car_24g_fire_packet +0x473b mem_remote_car_24g_fire_packet_lenght +0x473c mem_remote_car_24g_fire_send_packet_head +0x473e mem_remote_car_24g_fire_send_cmd +0x473f mem_remote_car_24g_fire_send_length +0x4741 mem_remote_car_24g_fire_send_payload +0x4743 mem_remote_car_24g_fire_send_checksum +0x4744 mem_remote_car_24g_tx_temp +0x4753 mem_remote_car_no_data_timeout +0x4755 mem_remote_car_no_data_timer +0x4757 mem_remote_car_soft_power +0x4757 mem_remote_car_power_state +0x4758 mem_remote_car_power_timer +0x4759 mem_remote_car_power_off_timeout +0x475a mem_remote_car_power_starting_timeout +0x475b mem_remote_car_power_off_cb +0x475d mem_remote_car_power_starting_cb +0x475f mem_remote_car_power_standby_cb +0x4761 mem_remote_key_status +0x4762 mem_remote_car_24g_status +0x4763 mem_remote_car_24g_auto_work_step +0x4764 mem_remote_car_24g_pair_success_flag +0x4765 mem_remote_car_24g_enter_lpm_enable +0x4766 mem_remote_car_empty_packet +0x4767 mem_24g_RC_head_ptr +0x469a mem_shutter_bluetooth_type +0x469b mem_shutter_config_enable +0x469c mem_shutter_config_otp_base_address +0x469e mem_shutter_config_size +0x469f mem_shutter_config_select_gpio1 +0x46a0 mem_shutter_config_select_gpio2 +0x46a1 mem_shutter_config_select_gpio3 +0x46a2 mem_shutter_config_user_otp_address +0x46a4 mem_shutter_config_eeprom_offset_addr +0x46a6 mem_shutter_config_eeprom_start_flag +0x46a8 mem_shutter_config_user_size +0x46a9 mem_shutter_config_label +0x46aa mem_shutter_config_otp_addr +0x46ac mem_classic_shutter_cable_unplug_conut +0x46ad mem_classic_shutter_hid_disconn_count +0x46ae mem_classic_shutter_random_mac_offset_addr +0x46b0 mem_ble_shutter_enable_notify +0x46b1 mem_ble_shutter_reconn_dav_interval +0x46b3 mem_ble_shutter_discovery_adv_interval +0x46b5 mem_ble_shutter_reconn_timeout +0x46b7 mem_ble_shutter_reconn_timer +0x46b9 mem_ble_shutter_reconn_blink_on_time +0x46bb mem_ble_shutter_reconn_blink_off_time +0x46bd mem_ble_shutter_discovery_blink_on_time +0x46bf mem_ble_shutter_discovery_blink_off_time +0x46c1 mem_ble_shutter_interval_min +0x46c3 mem_ble_shutter_interval_max +0x46c5 mem_ble_shutter_latency +0x46c7 mem_ble_shutter_timeout +0x46c9 mem_ble_shutter_interval_min_new +0x46cb mem_ble_shutter_interval_max_new +0x46cd mem_ble_shutter_latency_new +0x46cf mem_ble_shutter_timeout_new +0x46d1 mem_classic_shutter_discovery_timeout +0x46d3 mem_classic_shutter_connect_timeout +0x46d5 mem_ble_shutter_discovery_timeout +0x46d7 mem_ble_shutter_connect_timeout +0x46d9 mem_shutter_sleep_timeout +0x46db mem_shutter_sleep_timer +0x46dd mem_shutter_hard_soft_switch_case +0x46de mem_shutter_soft_switch_button_gpio +0x46df mem_shutter_soft_switch_power_state +0x46e0 mem_shutter_soft_switch_poweron_time +0x46e1 mem_shutter_soft_switch_poweroff_time +0x46e2 mem_shutter_soft_switch_poweron_callback_function +0x46e4 mem_shutter_soft_switch_poweroff_callback_function +0x46e6 mem_shutter_keyscan +0x46e6 mem_shutter_key_num +0x46e7 mem_cb_shutter_keycan +0x46e9 mem_shutter_key_conf0 +0x46ea mem_shutter_key_conf1 +0x46eb mem_shutter_key_conf2 +0x46ec mem_shutter_key_conf3 +0x46ed mem_shutter_key_conf4 +0x46ee mem_shutter_key_conf5 +0x46ef mem_shutter_key_conf6 +0x46f0 mem_shutter_key_conf7 +0x46f1 mem_key0_press +0x46f6 mem_key1_press +0x46fb mem_key2_press +0x4700 mem_key3_press +0x4705 mem_key4_press +0x470a mem_key5_press +0x470f mem_key6_press +0x4714 mem_key7_press +0x4719 mem_key0_release +0x471e mem_key1_release +0x4723 mem_key2_release +0x4728 mem_key3_release +0x472d mem_key4_release +0x4732 mem_key5_release +0x4737 mem_key6_release +0x473c mem_key7_release +0x4741 mem_ble_data_buffer1 +0x4746 mem_ble_data_buffer2 +0x474b mem_ble_data_buffer3 +0x4750 mem_ble_data_buffer4 +0x4755 mem_ble_data_buffer5 +0x475a mem_ble_data_buffer6 +0x475f mem_ble_data_buffer7 +0x4764 mem_ble_data_buffer8 +0x4769 mem_ble_data_buffer9_58 +0x479b mem_classic_data_buffer +0x47a0 mem_classic_data_buffer1 +0x47a5 mem_classic_data_buffer2 +0x47aa mem_classic_data_buffer3 +0x47af mem_classic_data_buffer4 +0x47b4 mem_classic_data_buffer5 +0x47b9 mem_classic_data_buffer6 +0x47be mem_classic_data_buffer7 +0x47c3 mem_classic_data_buffer8 +0x47c8 mem_classic_data_buffer9_58 +0x47fa mem_queue_each_size +0x47fb mem_queue_length +0x47fc mem_queue_curr_num +0x47fd mem_queue_read_ptr +0x47fe mem_queue_write_ptr +0x47ff mem_queue_ele +0x481f mem_shutter_nv_data +0x48c9 mem_shutter_led_struct_app_led +0x48c9 mem_shutter_led_struct_app_led_type +0x48ca mem_shutter_led_struct_app_led_blink_count +0x48cb mem_shutter_led_struct_app_led_gpio +0x48cc mem_shutter_led_struct_app_led_on_time +0x48ce mem_shutter_led_struct_app_led_off_time +0x48d0 mem_shutter_led_struct_app_led_on_callback +0x48d2 mem_shutter_led_struct_app_led_off_callback +0x48d4 mem_shutter_power_off_led_style +0x48d4 mem_shutter_power_off_led_style_type +0x48d5 mem_shutter_power_off_led_style_blink_count +0x48d6 mem_shutter_power_off_led_style_gpio +0x48d7 mem_shutter_power_off_led_style_on_time +0x48d9 mem_shutter_power_off_led_style_off_time +0x48db mem_shutter_power_off_led_style_on_callback +0x48dd mem_shutter_power_off_led_style_off_callback +0x48df mem_shutter_soft_swtich_botton_down +0x48e0 mem_shutter_soft_swtich_led_struct_temp +0x48eb mem_shutter_power_off_timeout +0x48ec mem_shutter_power_off_timer +0x469a mem_24g_dongle_head_ptr + + width = 32 + const length = 12000 + + /* ========= memory ============== */ +0x0000 mem_le_adv_transmit +0x0001 mem_le_adv_waitcnt +0x0002 mem_le_adv_rcv +0x0003 mem_le_req_rcv +0x0004 mem_le_scanrsp_rcv +0x0005 mem_le_conn_rcv +0x0006 mem_inquiryscan_waitcnt +0x0007 mem_inquiryscan_rcvcnt +0x0008 mem_pagescan_waitcnt +0x0009 mem_pagescan_rcvcnt +0x000a mem_pagescan_rcvfhscnt +0x000b mem_slave_rcvcnt +0x000c mem_page_transmit +0x000d mem_page_rcv +0x000e mem_page_rcv_fhs +0x000f mem_master_rcvcnt +0x0010 mem_fhs_wait_counter +0x0011 mem_newconnto_counter +0x0012 mem_inquiry_transmit +0x0013 mem_inquiry_rcv +0x0014 mem_fw_ver +0x0015 mem_current_context +0x0016 mem_le_ch_mapped +0x0017 mem_last_freq +0x0018 mem_rssi +0x0019 mem_rx_type +0x001a mem_rx_hec_err +0x001c mem_rx_crc_err +0x001e mem_context_ptr +0x0020 mem_display +0x0028 mem_bcd +0x0030 mem_state +0x0031 mem_mode +0x0032 mem_tsniff +0x0034 mem_sniff_anchor +0x0038 mem_clk_offset +0x003e mem_rx_window +0x0040 mem_plap +0x0043 mem_puap +0x0044 mem_pnap +0x0046 mem_conn_handle +0x0047 mem_arq +0x0048 mem_lmp_to_send +0x0049 mem_lmi_opcode +0x004a mem_lmo_reason +0x004b mem_op +0x004c mem_state_map +0x004d mem_supervision_timer +0x0051 mem_supervision_to +0x0053 mem_name_offset +0x0054 mem_key_size +0x0055 mem_conn_sm +0x0056 mem_aco +0x0062 mem_kc +0x0072 mem_conn_timer +0x0073 mem_sniff_attempt +0x0074 mem_sniff_timeout +0x0075 mem_dsniff +0x0077 mem_amaddr +0x0078 mem_lmo_opcode1 +0x0079 mem_lmi_opcode1 +0x007a mem_lmo_reason1 +0x007b mem_lmo_tid1 +0x007c mem_lmo_opcode2 +0x007d mem_lmi_opcode2 +0x007e mem_lmo_reason2 +0x007f mem_lmo_tid2 +0x0080 mem_hci_version +0x0083 mem_acl_pktlen +0x0085 mem_sco_pktlen +0x0086 mem_acl_pktcnt +0x0088 mem_sco_pktcnt +0x008a mem_current_sniff_attempt +0x008b mem_current_sniff_timeout +0x008c mem_sniff_timeout_temp +0x008d mem_nfreq_index_inq +0x008e mem_nfreq_index_page +0x008f mem_ninqy_index +0x0090 mem_fhs_misc +0x0091 mem_subsniff_instant +0x0095 mem_subsniff_rate +0x0096 mem_subsniff_tcmax +0x0098 mem_subsniff_tsniff +0x0099 mem_lpm_adjust +0x009a mem_sync_clke +0x00a0 mem_lpm_current_mult +0x00a1 mem_gpio_wakeup_low +0x00a5 mem_gpio_wakeup_high +0x00a9 mem_air_mode +0x00aa mem_sco_asso_handle +0x00ab mem_sco_handle +0x00ad mem_esco_desco +0x00ae mem_esco_type +0x00af mem_neogotiation_state +0x00b0 mem_saved_amaddr +0x00b1 mem_esco_arq +0x00b2 mem_esco_saved_arq +0x00b3 mem_sco_obuf +0x00d1 mem_sco_ibuf +0x00ef mem_sco_poll +0x00f0 mem_npage_index +0x00f1 mem_page_mode +0x00f2 mem_page_clk +0x00f6 mem_tst_pktcnt_sync +0x00f8 mem_tst_pktcnt_hec +0x00fa mem_tst_pktcnt_crc +0x00fc mem_tst_pktcnt_dmh +0x00fe mem_tmp_buffer_head +0x0101 mem_tmp_buffer +0x0151 mem_tester_emulate +0x0152 mem_temp_payload +0x0152 test_mode_scenario +0x0153 test_mode_hopping_mode +0x0154 test_mode_tx_freq +0x0155 test_mode_rx_freq +0x0156 test_mode_power_mode +0x0157 test_mode_poll_period +0x0158 test_mode_packet_type +0x0159 test_mode_data_length +0x015b mem_test_mode_old_debug_config +0x015c mem_tester_cnt +0x015d mem_temp_am_addr +0x015e mem_temp_arq +0x015f mem_len +0x0161 mem_clkn_bt +0x0165 mem_clke_bt +0x0169 mem_dpll_clkn +0x016d mem_connection_options +0x016e mem_nameres_cnt +0x016f mem_txptr +0x0171 mem_slot_offset +0x0173 extm_fhs_misc +0x0174 extm_newconn_am_addr +0x0175 extm_class +0x0178 extm_lap +0x017b extm_uap +0x017c extm_nap +0x017f mem_debug_config +0x0180 mem_lch_code +0x0181 mem_fhs_am_addr +0x0182 mem_dpll_error +0x0184 mem_select_list_item +0x0185 mem_temp_reconn_record +0x0185 mem_record_bt_mode +0x0186 mem_temp_lap +0x018c mem_list_item_ptr +0x018e mem_eir + + + +(//bluetooth tx power +0 TX_POWER_0DB +1 TX_POWER_3DB +2 TX_POWER_5DB +3 TX_POWER_f3DB +4 TX_POWER_f5DB + +0x20 TX_POWER_PAIR +) + + +0x3b17 rom_lpm_sleep +0x59e0 rom_save_ucode + +0x4219 rom_mem_lpm_xtalcnt +0x423b rom_mem_patch_ptr +0x423d rom_mem_patch_len + +0x5b1a rom_otpd_read_data +0x5ada rom_otp_write + /* context */ +( +0x01 coffset_mode +0x02 coffset_tsniff +0x04 coffset_sniff_anchor +0x08 coffset_clk_offset +0x0e coffset_rx_window +0x10 coffset_plap +0x16 coffset_conn_handle +0x17 coffset_arq + /* 3.0 only */ +0x18 coffset_lmp_to_send +0x1b coffset_op +0x1c coffset_state_map + /* le only */ +0x18 coffset_le_ch +0x19 coffset_le_hop +0x1a coffset_le_event_cnt + +80 context_size +1 context_num +) + +( +0 lpm_flag_wake +1 lpm_flag_loadcode +) + +/* ========= parameters ============== */ +( +0x0050 param_newconn_arq +0x0007 param_esco_addr +0x0010 param_conn_handle +0x01f0 param_conn_handle_comp +0x0020 param_newconnto +0x0008 param_pagerespto +0x0a00 param_snooze_setup_orig +0x5353 param_snooze_ahead_orig +0x00ff param_ninquiry +0x2000 param_page_to +0x0005 param_max_slot +0x0010 param_sco_poll + +/* 6Mhz clock setting */ +/* 12Mhz clock setting */ +0x0e43 param_tx_setup +0x09d0 param_rx_setup_earlier +0x0600 param_rf_setup +0x03bb param_clke_cal +0x0600 param_conn_access +0x0800 param_conn_access_wider +0x0500 param_pll_setup // 120 is minimum +0x0d00 param_rx_setup // 114us before sync +2000 param_dpll_start_delay + +110 param_lpm_fix +10 param_lpo_extra +200 param_lpm_adjmax + +-1 param_hibernate_clks +3000 param_chgpump_delay + +3 param_featrue_ssp +0x0101 param_lmpext_ssp_enable +339 param_acl_pktlen +30 param_sco_pktlen +1 param_acl_pktcnt /*buffer acl pkt cnt*/ +7 param_sco_pktcnt + + +0x8fffff param_features0 +0x9d83fe param_features1 // not support afh +0x8359 param_features2 +0x000033 param_unap +0x001177 param_lap +0x9e8b33 param_glap +0x002540 param_class//0x180208 //0x002580//402500//240404 +0x12e904 param_hci_version +0x000a04 param_lmp_version//0x0a04 +0x000a06 param_lmp_version0 +0x12e9 param_lmp_subversion +0x0012 param_tisw +0x0012 param_tpsw +0x1000 param_tisi +0x0800 param_tpsi +0x0020 param_page_window +0x0020 param_inq_window +0x1c80 param_supervision_to +39 param_fcomp_div +2 param_fcomp_mul +6 param_name_len +0x535442 param_name +0x344950 param_name1 + + +) + +/* ======= packet types ========= */ +( +0x0 type_null +0x1 type_poll +0x2 type_fhs +0x3 type_dm1 +0x4 type_dh1 +0x5 type_hv1 +0x6 type_hv2 +0x7 type_hv3 +0x8 type_3dh1 +0x9 type_aux1 +0xa type_dm3 +0xb type_dh3 +0xe type_dm5 +0xf type_dh5 +0x10 type_id +0x11 type_shutdown +0x13 type_lmp +) + +/* ========== flag[6] =============== */ +( +0 always /* always 1 */ +1 true /* set/rstn by verify,compare,icompare (true) */ +2 positive /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output >= 0 */ +3 timeout /* read only, the timeout from timers */ +5 zero /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output == 0 */ +6 crc_failed /* level, cleared by hop_start */ +7 enable_white /* outside mux decide whether to load bt_clk or response_X */ +8 enable_parity /* level */ +9 enable_crc /* level */ +10 enable_hec /* level */ +11 decode_fec1 /* level */ +12 decode_fec2 /* level */ +13 decode_fec0 /* level */ +14 encrypt /* level */ +15 crc16 /* for caculate ccitt crc16 */ +16 swfine /* =0 stop_watch count based on oneslot =1 on 1 clock */ +20 rqst_freq /* pulse, to start calculating frequency */ +21 recalc /* pulse, to recalculate the fhs_parity */ +22 init_encrypt /* pulse, issued to initialize encrption */ +23 mhalfbnd /* half slot boundary of clke_rt, or when clke_bt[0] toggles */ +24 sync /* sync found as a result of correlation,set/rstn by correlate opcode */ +25 user10 /* user10 */ +26 kc_p_activate /* pulse to recalc the kc_p */ +27 encode_fec1 /* level */ +28 encode_fec2 /* level */ +29 encode_fec0 /* level */ +30 packet_end /* pulse */ +32 is_tx /* level */ +33 is_rx /* level */ +34 halfslot /* pulse, read only, when clkn_bt[0] toggles */ +35 oneslot /* pulse, read only, when clkn_bt[1] toggles */ +36 mslotbnd /* pulse, read only, when clke_bt[1] toggles */ +37 expire /* level, read only, when selected clock source exceed timeup value */ +38 meet /* level, read only, when selected clock source meet timeup value */ +39 tx_clear /* level, read only, indicate tx pipe is cleared */ +40 user /* user0 */ +41 master /* user1 */ +42 slave2 /* user2 */ +43 wake /* user3 */ +44 user2 /* user4 */ +45 match /* user5 */ +46 attempt /* user6 */ +47 user3 /* user7 */ +48 clknt /* user8 */ +49 user7 /* user9 */ +50 synchronize /* synchronize lpo and regular version of the clock */ +51 lpo_edge /* read only, 3 clocks after risling edge of lpo clock */ +52 blank /* C0 only, means pdata == 0 */ +53 modone /* set divide operation is done */ +54 le /* bluetooth 4.0 LE enable */ +55 aes_ready /* set when aes is ok */ +63 never /* read only, always 0 */ +) + +default flag = always + +/* ========== reg[6] =============== */ +( +0 mark /* for keeping strobes, more permanent */ +1 type /* save and verify during rx */ /* rw */ +2 temp /* general purpose register, 64 bits */ +3 contru /* contr uart */ +4 am_addr /* verify during rx, read and send during tx */ /* ro */ +5 contw /* last mem_addr during write */ +6 contr /* last mem_addr during read */ +7 queue /* the index of qset*,qisolate* commands, ie, if queue = 3, qset/qisolate operate on bit3 */ +8 debug /* can be wired out for observation */ +9 access /* the 72 bit access word */ +10 contwu /* contw uart */ +11 timeup /* when does certain counter expire */ +12 pwindow /* bit 71-61 of pdata; because on rx, bits shifts in from 71 down */ +13 fhs_parity /* re-gernated based on bt_adr( {nap,uap,lap} ) when recalc flag is pulsed */ +14 white_init /* init value of the whitening */ +15 crc24_init /* init crc24 lfsr, 24 bits */ +16 interrupts /* set interrupts, 40 bits */ +17 rega /* general purpose register, 32 bits */ +18 regb /* general purpose register, 32 bits */ +19 regc /* general purpose register, 17 bits */ +20 regab /* concat of {rega,regb}, thus 64 bits */ +21 radio_ctrl /* radio i/f direct i/o ctrl, check following "radio_ctrl" section */ +21 ctrl_reg /* 2023 and after */ +22 jtag_addr /* load jtag address field, lsb */ +23 freq_index /* 7 bit read only */ +24 jtag_data /* wdata to and rdata from jtag */ +25 clkn /* {clkn_bt, clkn_rt} */ +26 clke /* {clke_bt, clke_rt} */ +27 stop_watch +28 fhs_misc /* SR, SP, pscan mode */ +29 fhs_class /* class field in fhs */ +30 fhs0 /* read only, bit 0-71 of fhs word */ +31 fhs1 /* read only, bit 72-142 of fhs word */ +32 bt_adr /* r/w, the bt_addr to access gen and freq hopping, contain only lap and uap */ +33 bt_clk /* r/w, the bt_clk for freq hopping */ +34 clkn_bt /* read only, native bluetooth clock, free running 3.2KHz or controlled by RTHALFSLOT register */ +35 clkn_rt /* read only, native realtime clock, free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */ +36 freq_mode +/* wire even_train = freq_mode[4]; // odd even train */ +/* wire conn_mode = 3; // connection */ +/* wire iqpgscan_mode = 2; // slave in inquiry and page (not response) */ +/* wire iqpgresp_mode = 1; // slave in inquriy and page (response only) */ +/* wire inqypage_mode = 0; // master in inquiry and page(response or not response) */ +37 xin /* x parameter, read only */ +38 N_tx_slot /* the N factor in equations for Xi,Xp,Xprm,Xprs */ +39 auxcnt +40 clke_bt /* r/w, external bluetooth clock , free running 3.2KHz or controlled by RTHALFSLOT register */ +41 clke_rt /* r/w, external realtime clock, , free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */ +43 host_mode /* generic stuff for kick starts */ +44 lap +45 uap +46 nap +47 regext /* r/w extended 12x32bit registers, indexed by regext_index */ +48 alarm /* r/w, lpo wake up time, this is also how lpo and current clock keep sync */ +49 lpo_time /* read only, this is the value to be copied back to clkn/clke after wakeup */ +50 kc_ls /* secret key, 71: 0 */ +51 kc_ms /* secret key, 127:72 */ +52 g1l /* encryption length */ +53 mask3ff /* for mask 0x3ff operation */ +54 aes_ctrl +56 regext_index /* index of regext */ +57 loopcnt +58 stack /* current return address */ +59 stack_ptr /* stack depth */ +61 pc /* direct goto */ +62 null /* to nowhere */ +63 pdata /* the shift register */ +) +default reg = pdata + +/* regext_index */ +( +0 regidx_data +4 regidx_key +8 regidx_xor +12 regidx_result +) +/* ========== radio_ctrl========= */ +( +0 TXGFSK +1 PSK +2 PSK3M +3 RESET +) +/* assign BPWR = radio_ctrl[0]; */ +/* assign PARAMP = radio_ctrl[1]; */ +/* assign XTALPU = radio_ctrl[2]; */ +/* assign SYNTHPU = radio_ctrl[3]; */ +/* assign TXPU = radio_ctrl[4]; */ +/* assign RXPU = radio_ctrl[5]; */ +/* assign SLCTRL = radio_ctrl[6]; */ +/* assign XTALSEL_MUX_SEL = radio_ctrl[7] */ + + +/* =========== destination[4] ============== */ +( +0 bucket +1 rxf +2 back +3 mod +) +default dest = bucket + +/* =========== source[4] ============= */ +( +1 txf +3 demod +) +default source = 0 + + +/* ============== mark ============= *//*0 - 47 */ +( + +0 mark_fhs_eir +1 mark_rxbuf_inuse +2 mark_tx_l2cap +3 mark_switch_initiated +4 mark_accept_switch +5 mark_loopback +7 mark_esco +8 mark_esco_rxok +9 mark_context +10 mark_am_addr_broadcast +11 mark_fhs_already_good +12 mark_page_trainb +13 mark_lpm_mult_enable +14 mark_usb_flag +15 mark_old_packet +16 mark_longpacket +17 mark_testmode +18 mark_ar2 +19 mark_h5tx_rp +20 mark_h5tx_crc +21 mark_h5tx_retransmit +22 mark_h5rx_pstart +23 mark_h5_sync +24 mark_h5_reinit +28 mark_inquiry_on +29 mark_inquiry_state +30 mark_inquiry_trainb +31 mark_periodical_diac +32 mark_all_diac +33 mark_slave_in_rand_accepted +34 mark_reconn_recieve_switch +35 mark_isstr +36 mark_loadcode +37 mark_ext_patch +38 mark_24g +39 mark_24g_conext +40 mark_eeprom_size +// REVAB:max 35, REVC:max 63 +41 mark_ble_tx_md +42 mark_ble_rx_md +43 mark_otp_encrypt +) + +( +1 reload_type_otp +2 reload_type_spi +3 reload_type_iic +) + + +/* ============== soft timers ============== */ +( +0 le_adv_interval_timer +1 inquiry_length_timer +2 le_scan_interval_timer +3 page_length_timer +4 iscan_interval_timer +5 pscan_interval_timer +6 switch_wait_timer +7 enpt_delay_timer +8 page_interval_timer +9 key_scan_timer +10 smp_pairing_timer +11 ui_led_blink //led timer 可扩展 +12 ui_led_blink1 +13 ui_led_blink2 + +) + +( +1 hci_cmd_inquiry +2 hci_cmd_inquiry_cancel +3 hci_cmd_remote_name_req +4 hci_cmd_remote_feature_req +5 hci_cmd_create_conn +6 hci_cmd_disconn +7 hci_cmd_accept_conn +8 hci_cmd_reject_conn +9 hci_cmd_pair +10 hci_cmd_nopair +11 hci_cmd_linkkey +12 hci_cmd_nokey +13 hci_cmd_auth +14 hci_cmd_stopencrypt +15 hci_cmd_startencrypt +16 hci_cmd_setup_sco +17 hci_cmd_disconn_sco +18 hci_cmd_in_sniff +19 hci_cmd_exit_sniff +20 hci_cmd_remote_version_req +21 hci_cmd_remote_ext_features_req +22 hci_cmd_io_cap +23 hci_cmd_role_discovery +24 hci_cmd_role_switch +25 hci_cmd_accept_with_switch +26 hci_cmd_detach +27 hci_cmd_le_create_conn +28 hci_cmd_accept_sco_conn +80 hci_cmd_wait_remote_feature +81 hci_cmd_wait_remote_ext_feature +82 hci_cmd_wait_remote_name +) + + + +/* ============== debug ============= */ +( +0 debug_neg_skew +1 debug_bitbucket +2 debug_dont_clear_got_tx +3 debug_scatter_enabled +4 debug_tx_fixed_freq +5 debug_rx_fixed_freq +6 debug_tx_pattern +) + +/* ============== tester_emulator ============= */ +( +0 tester_fixed_flow +1 tester_fixed_flow_polarity +2 tester_change +3 tester_exit +4 tester_pattern_test +5 tester_whitening_change +6 tester_fixed_freq +7 tester_no_whitening +) + +/* ============== mode ==========*/ +( +0 mode_le +1 mode_master +2 afh_enable +3 afh_change +4 send_sco_when_slave +5 first_seqnx +) + +/* ============== state_map ==========*/ +( +0 smap_lmptidinit +1 smap_lmptid +2 smap_encryption +3 smap_name_res +4 smap_name_req +5 smap_edr +6 smap_rxlmp +7 smap_rxl2cap +) +( +0 state_inconn +1 state_insniff +2 state_insco +3 state_inpage +4 state_conn_comp +5 state_init_seq +6 state_combkey +7 state_linkkey +) +( +0 op_send_sres +1 op_auth_req +2 op_inrand_req +3 op_disconn +4 op_stop_enc +5 op_start_enc +6 op_txl2cap +7 op_pkt_comp +) + + +/* ============== arq [3] ================ */ +( +0 flow +1 arqn +2 seqn +3 wack +4 flowx /* out */ /* not really in memory */ +5 arqnx /* out */ +6 seqnx /* out */ +7 bcast1 /* first broadcast received */ +) + +/* arq {flow,arqn,seqn}, read/write */ +/* [0] flow r/w acl full status of the other, store during rx, checked during tx */ +/* [1] arqn r/w ack of the other during rx (ack tx fifo), */ +/* [2] seqn r/w seqn of the other, check during rx */ +/* arqx {flowx,arqnx,seqnx} */ +/* [0] flowx r/o flow back to the other, 1 alow send, 0 not to send, read only tx */ +/* [1] arqnx r/w ack to the other, set by rx, send back on tx */ +/* [2] seqnx r/w toggled by arqn, to be send during tx */ + +( +0 llid0 +1 llid1 +2 nesn +3 sn +4 md +5 wak +) + +/* AFH flags */ +( +0 AFH_CFG_ON +1 AFH_CFG_TIMER +2 send_lmp_set_afh +3 AFH_CFG_REPORT_MODE +4 AFH_CFG_MASTER_SENT_REQ +) + +/* LLID CODE */ +( +1 LLID_L2CAP_CONT +2 LLID_L2CAP_START +3 LLID_LMP +) + +/* ============== master_state ==========*/ +( +0 master_in_idle +1 master_in_inquiry +2 master_in_page +10 master_in_becoming_slave +15 master_in_conn +) +( +0 newrev_feature_bettx +1 newrev_feature_betplltx +2 newrev_feature_skip_retransmit +3 newrev_feature_init_radio_after_sleep +4 newrev_feature_no_lpolog +) +/*************mem_pincode_state****************/ +( +0 pincode_state_ilde +1 pincode_state_wait_pincode +2 pincode_state_pincode_ready +) + + +// lpm_write +( +1 lpmreg_sel_ctrl +2 lpmreg_sel_ctrl2 +4 lpmreg_sel_gpiolow +8 lpmreg_sel_gpiohigh +16 lpmreg_sel_counter +) + +//scan_mode +( +0 inq_scan_mode +1 page_scan_mode +2 page_inq_enable +) +//mem_neogotiation_state +( + 0 default_neogotiation_state + 1 prarm_neogotiation +) + +//mem_lpm_wake_lock +( +0 wake_lock_ble_rx +1 wake_lock_ble_tx + +3 wake_lock_key_press +4 wake_lock_ble_tx_patch +5 wake_lock_uart_tx +6 wake_lock_uart_rx +7 wake_lock_button +8 wake_lock_cmd +9 wake_lock_app +10 wake_lock_lmp_tx +11 wake_lock_lmp_rx +12 wake_lock_l2cap_tx +13 wake_lock_l2cap_rx +14 wake_lock_ipc_c512bt +15 wake_lock_ipc_bt2c51 + +) + +( +0 bt_disabled +1 ble_disabled +2 module_disable + +) + +( +0x33 REC_3_MODE +0x34 REC_4_MODE +0x35 REC_4_MODE_STATIC_ADDRESS +0x36 REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS +0x37 REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS +) + + +//sniff UART_TX UART_RX +( +6 UART_WAKEUP_TX +7 UART_WAKEUP_RX +) + + + + +( +//add +0 offset_24g_rxbuf +1 offset_24g_rxbuf_add1 +2 offset_24g_rxbuf_add2 +34 offset_24g_txbuf +66 offset_24g_txpayload +100 offset_24g_rxpayload +102 offset_24g_rxpayload_add2 +132 offset_24g_rxdata_length +133 offset_24g_pid +134 offset_24g_datalen +135 offset_24g_data_type +136 offset_24g_txlen +137 offset_24g_rx_window +139 offset_24g_ensure +140 offset_24g_txfail_cnt +141 offset_24g_get_ack_fail +142 offset_24g_tx_without_int +143 offset_24g_retry +144 offset_24g_ch +145 offset_24g_current_ch_number +146 offset_24g_paring_addr +150 offset_24g_pairing_sm +151 offset_24g_ch_map1 +155 offset_24g_ch_map2 +159 offset_24g_ch_map3 +163 offset_24g_ch_map4 +167 offset_24g_tx_btclk +171 offset_24g_interval +172 offset_24g_interval_min +173 offset_24g_interval_max +174 offset_24g_addr +178 offset_24g_abort_pac +179 offset_24g_sync_pac +180 offset_24g_hop_pac +181 offset_24g_check_dongle_times +182 offset_24g_enter_hibernate +190 offset_24g_device_addr +194 offset_24g_pac_index +195 offset_24g_no_ack +196 offset_24g_sta_crc +199 offset_24g_last_crc +202 offset_24g_sta_pid +203 offset_24g_last_pid +204 offset_24g_max_retry +205 offset_24g_mode +206 offset_24g_rf_last_sta +207 offset_24g_rf_hop_ch +208 offset_24g_sync_cnt +209 offset_24g_hop_pac_retry +210 offset_24g_rf_work_stage +211 offset_24g_hop_fastly_cnt +212 offset_24g_short_sleep_timer +216 offset_24g_cb_data +218 offset_24g_cb_lpm_prepare +220 offset_24g_cb_lpm_before +222 offset_24g_cb_rxdata_type1 +224 offset_rssi_signal_index +225 offset_rssi_signal_avg +226 offset_rssi_signal_buf +234 offset_rssi_noise_index +235 offset_rssi_noise_avg +236 offset_rssi_noise_buf +244 offset_rssi_ctrl_threshold_down +245 offset_rssi_noise_dg_index +246 offset_rssi_noise_kb_index +247 offset_rssi_noise_ms_index +248 offset_rssi_noise_dg_avg +249 offset_rssi_noise_kb_avg +250 offset_rssi_noise_ms_avg +251 offset_tx_power_temp +252 offset_power_ctrl_packet_cnt +253 offset_power_ctrl_ack_cnt +254 offset_power_ctrl_level +255 offset_power_ctrl_txpwr_level2 +//iadd +256 offset_power_ctrl_txpwr_level1 +257 offset_power_ctrl_txpwr_level0 +258 offset_power_ctrl_threshold_up +259 offset_power_ctrl_threshold_down +260 offset_dongle_mode_init +261 offset_dongle_work_mode +262 offset_dongle_ms_bind_step +263 offset_dongle_kb_bind_step +264 offset_dongle_bind_device_status +265 offset_24g_rxdata_temp +267 offset_24g_rxdata_temp_add2 +268 offset_24g_rxdata_temp_add3 +269 offset_24g_rxdata_temp_add4 +299 offset_24g_rx_addr +303 offset_24g_bind_payload +304 offset_24g_bind_payload_add1 +305 offset_24g_bind_payload_add2 +309 offset_24g_rf_laststa +310 offset_24g_hop_btclk +314 offset_24g_hop_interval +315 offset_24g_ackpayload_enable +316 offset_24g_ackpayload +348 offset_24g_mode_switch +349 offset_24g_pair_mode +350 offset_24g_nodata_timer_enable +351 offset_24g_time_slice +352 offset_24g_mouse_addr +356 offset_24g_kb_addr +360 offset_24g_kb_data_sta_data +368 offset_24g_kb_data_last_data +376 offset_24g_kb_multikey_sta_data +379 offset_24g_kb_multikey_last_data +382 offset_24g_kb_blank_data_enable +383 offset_24g_kb_mul_blank_data_enable +384 offset_24g_ms_blank_data_enable +385 offset_24g_dg_last_ch +386 offset_24g_dg_ch_number +387 offset_24g_dg_config_ch_once +388 offset_24g_kb_last_ch +389 offset_24g_kb_ch_number +390 offset_24g_kb_config_ch_once +391 offset_24g_ms_last_ch +392 offset_24g_ms_ch_number +393 offset_24g_ms_config_ch_once +394 offset_24g_pair_txpower +395 offset_24g_auto_pair_switch +) + +( +1 NO_ACK_24G +0 WITH_ACK_24G + +0 ENSURE_OFF_24G +1 ENSURE_ON_24G + +0x4e G24_PAIR_CH +) + +( +0 disable_24g +1 tx_24g +2 rx_24g + +0 bit_ack_24g +) + +//mem_24g_interrupt +( +0 rx_dr +1 rx_sync +4 tx_ds +5 tx_fail +) + +//mem_24g_data_type +( +0x07 bits_data +//0-2 data type +3 bit_abort +4 bit_hop +5 bit_sync +//6-7 channel offset +) + + + +//mem_24g_pairing_sm +( +0 STATE_24G_PAIRING_NULL +1 STATE_24G_PAIRING_1 +2 STATE_24G_PAIRING_2 +3 STATE_24G_PAIRING_3 +0X11 STATE_24G_PAIRING_1_WAITING_ACK +0X12 STATE_24G_PAIRING_2_WAITING_ACK +0X13 STATE_24G_PAIRING_3_WAITING_ACK +0XFF STATE_24G_PAIRING_SUCCESS +) + +( +0 DONGLE_WORK //connect mode normal +1 DONGLE_BIND //code pair mode +2 DONGLE_TEST //test mode +3 DONGLE_CODE //PC_application +4 DONGLE_PCBA //PCBA_TEST +5 DONGLE_DEBUG +6 DONGLE_MODE_MAX +7 DONGLE_SEARCH +0 CLEAR_INIT +) + +( +0x01 DATATYPE_MOUSE //mouse +0x02 DATATYPE_KEYBOARD //keyboard +0xAA DATATYPE_BIND //bind step 1 +0x55 DATATYPE_CONFIG //bind step 2 +0x22 DATATYPE_OK //bind step 3 + +0x01 BIND_MOUSE +0x02 BIND_KEYBOARD +) + +( +112 G24_DONGLE_ADDR +) + +( +0xa0 COMMAND_MODE //BYTE 0 +0X81 COM_MODE_BIND //BYTE 1 +0X82 COM_MODE_TEST //BYTE 1 +) +( +0xa1 COMMAND_BIND //BYTE 0 +0X01 COM_BIND_GET //1 +0X84 COM_BIND_EXIT //1 +0XA7 COM_READ_MODE //1 +) +( +0xa2 COMMAND_TEST //BYTE 0 +0X81 COM_TEST_SC // 进入单载波 +0x82 COM_TEST_CD // fcc测试 +0x83 COM_TEST_DAT // 数据测试 +0X84 COM_TEST_LOW_CH //低频点 +0X85 COM_TEST_MID_CH //中频点 +0X86 COM_TEST_HIG_CH //高频点 +0X87 COM_TEST_SW_HIG //自动切换频点为高 1mhz +0X88 COIM_TEST_SW_LOW //自动切换频点为低 1mhz +0X89 COM_TEST_SW_STOP //停止自动切换频点 +0X8A COM_TEST_POW_5 //设置输出功率5dbm +0X8B COM_TEST_POW_0 //0dbm +0X8C COM_TEST_POW_N5 //-5dbm +0X8D COM_TEST_POW_N10 //-10dbm +0X8E COM_TEST_EXIT //退出测试模式 +) +( +0xa6 COMMAND_CURRENT_PROJECT +0xa7 COMMAND_CURRENT_MODE +0xa9 COMMAND_CURRENT_FW_VERSION +) + +//user defined cmd +( +0xb0 COMMAND_USER_DEFINED +) + +( +0x15 PRODUCT_ID +0 FW_VERSION0 +0 FW_VERSION1 +1 FW_VERSION2 +) + + +( +8 TIMER_NODATA +640 TIMER_NODATA_DELAY //200ms + +11 TIMER_MS_BLANK +320 TIMER_MS_BLANK_DELAY + +12 TIMER_KB_MUL_BLANK +320 TIMER_KB_MUL_BLANK_DELAY + +14 TIMER_KB_BLANK +320 TIMER_KB_BLANK_DELAY +) + +( +0 KB_NORMAL_REPORT_ID +1 MS_REPORT_ID +3 KB_MULTIKEY_REPORT_ID +) + +( +7 RSSI_BUF_LEN_SIGNAL +255 RSSI_BUF_LEN_NOISE +0x50 RSSI_THRESH_NOISE +) +( +//power control +0x01 TXPWR_0DB +0x02 TXPWR_3DB +0x04 TXPWR_5DB +0x10 TXPWR_f5DB + +124 POWER_CTRL_MAX_PACKET_CNT + +2 POWER_CTRL_LOSSPAC_THRESH_UP0 +0 POWER_CTRL_LOSSPAC_THRESH_DOWN0 +0x20 POWER_CTRL_RSSI_THRESH_DOWN0 + +5 POWER_CTRL_LOSSPAC_THRESH_UP1 +0 POWER_CTRL_LOSSPAC_THRESH_DOWN1 +0x60 POWER_CTRL_RSSI_THRESH_DOWN1 + +10 POWER_CTRL_LOSSPAC_THRESH_UP2 +0 POWER_CTRL_LOSSPAC_THRESH_DOWN2 +0x80 POWER_CTRL_RSSI_THRESH_DOWN2 +) + + + + + + +0x01f2 mem_ucode_status +0x01f3 mem_otp_ucode_flag +0x01f5 mem_spid_tbuf/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */ +0x01f6 mem_iicd_tbuf/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */ +0x01f6 mem_addr_hi +0x01f7 mem_addr_mi +0x01f8 mem_addr_lo +0x01f9 mem_iicd_addr +0x01fa mem_spid_rbuf +0x01fe mem_ucode_buf +0x0200 mem_ucode_len +0x0202 mem_sched_addr +0x0204 mem_ucode_ptr +0x0206 mem_ucode_keybuf +0x0216 mem_check_plap_temp +0x0228 mem_reconnect_flag +0x0229 mem_switch_fail_master_count +0x022a mem_app_evt_timer_count + +//adc read +( +0 ADC_CONFIG_VINLPM +1 ADC_CONFIG_HVIN +2 ADC_CONFIG_GPIO +) + + +( +0 QUEUE_OFFSET_EACH_SIZE +1 QUEUE_OFFSET_LENGTH +2 QUEUE_OFFSET_CURR_NUM +3 QUEUE_OFFSET_READ_PTR +4 QUEUE_OFFSET_WRITE_PTR +5 QUEUE_OFFSET_ELE_INIT_ADDR +) +( +//Flash Register +0x05 FLASH_READ_SATUS + +// Flash Status Register +0x00 FLASH_STATUS_WIP +0X01 FLASH_STATUS_WEL +0X02 FLASH_STATUS_BP0 +0X03 FLASH_STATUS_BP1 + +//Flash Write Sm +0X00 FLASH_SM_NO_BUYS +0X01 FLASH_SM_START +0X02 FLASH_SM_ERASE_SECTOR +0X03 FLASH_SM_WAIT_ERASE_SECTOR +0X04 FLASH_SM_WRITE_DATA +0X05 FLASH_SM_WAIT_WRITE_DATA + + +//Flash Command +0x02 FLASH_COMMAND_WRITE_DATA +0x03 FLASH_COMMAND_READ_DATA +0x20 FLASH_COMMAND_SECTOR_ERASE +) + +0x0000 otp_ucode_flag +0x07f0 otp_ucode_aeskey + +/* adc data addr and flag */ +( +0x07e0 OTP_CHIP_FUNCTIONS +0x07e2 otp_adc_io_0_5V_addr +0x07e4 otp_adc_hvin_1V_addr +0x07e6 otp_adc_vinlpm_2V_addr +0x07e8 otp_adc_io_1V_addr +0x07ea otp_adc_hvin_5V_addr +0x07ec otp_adc_vinlpm_3V_addr +0x07ee otp_adc_flag_addr +0xaa55 OTP_ADC_FLAG +) + +/* data stored in eeprom */ +( +0 eeprom_nv_ram + +195 eeprom_module_init_flag//2 + +) + +/*mem_app_handshake_flag*/ +( +0 APP_HANDSHAKE_NULL +1 APP_HANDSHAKE_DONE + +) +/*mem_device_option*/ +( +1 dvc_op_hci +4 dvc_op_dongle +5 dvc_op_spp +6 dvc_op_ukey +7 dvc_op_ir + +9 dvc_op_shutter +10 dvc_op_module +11 dvc_op_ble_mouse +12 dvc_op_ble_kb +13 dvc_op_ble_prcp +14 dvc_op_car +15 dvc_op_AntiLost +16 dvc_op_remote_car +255 dvc_op_test +//device option hight 4 +6 dvc_op_mouse +7 dvc_op_keyboard +//device option low 2 +( +0 MODE_3_MOUSE +1 MODE_4_MOUSE +) +) + +( +3 twspi_sclk +4 twspi_sdio +) + +( +4 pan_clk_bit +5 pan_dat_bit +6 pan_mov_bit +) + +( +7 otp_uflag_aes +6 otp_uflag_skip_eep +5 otp_uflag_skip_flash +4 otp_uflag_hci +) + +/* ir command */ +( +1 ircmd_record +2 ircmd_play +3 ircmd_write_pulse +4 ircmd_write_seq +5 ircmd_write_next + +8 ircmd_test_play +9 ircmd_test_rec + +10 ircmd_report_pulse +11 ircmd_report_seq +12 ircmd_report_raw + +20 ircmd_screen_on +21 ircmd_screen_off +) + +( +7 gpio_active_bit +) +( +2 HID_HANDSHAKE_TIMEOUT + +) + +( +1 APP_FLAG_RECONNECT +) +( +5 LPM_WAKE_UP_DELAY_TIMER +) + + +//mem_app_disconn_reason +//mem_app_disconn_reason_flag +//bit map +( +2 APP_DISC_RSN_SIZE +) +( +0 APP_DISC_BY_BUTTON +1 APP_DISC_AFTER_PAIRING +2 APP_DISC_AFTER_RECONN +3 APP_DISC_AFTER_SNIFF +4 APP_DISC_AFTER_SETUP_DONE +5 APP_DISC_AFTER_HANDSHAKE +6 APP_DISC_BT +7 APP_DISC_BLE +8 APP_DISC_L2CAP_REFUSED +9 APP_DISC_SWITCH_FAIL +) +//eeprom init flag +( + 0xaa55 EEPROM_INIT_FLAG +) + +( +1 KEY_CONF_STRUCT_LEN +0 KEY_PIN_OFFSET +) + +( +12000000 PWM_12MHZ +) +( +0 POWER_OFF +1 POWER_STARTING +2 POWER_STANDBY +) +//power parameter offset(8 byte) +( +0 power_state_offset +1 power_timer_offset +2 power_off_timeout_offset +3 power_starting_timeout_offset +4 power_off_cb_offset +6 power_starting_cb_offset +8 power_standby_cb_offset +10 ui_butten_up_cb_offset +) + + +//app new specific +( +0 CONN_PARAM_UPDATA_PROCEDURE_NO_INIT +1 CONN_PARAM_UPDATA_PROCEDURE_STARTING +2 CONN_PARAM_UPDATA_PROCEDURE_COMPLETE +3 CONN_PARAM_UPDATA_PROCEDURE_FAILD +) +( +0 NEW_SPEC_HEADER_OFFSET +2 NEW_SPEC_OPCODE_OFFSET +3 NEW_SPEC_DLEGTH_OFFSET //data length offset +5 NEW_SPEC_DADDR_OFFSET //data address offset +) +( +1 OPCODE1_BUTTEN_CLICK_ONCE +2 OPCODE2_BUTTEN_DOUBLE_CLICK +3 OPCODE3_ANTL_START_ALRAM +4 OPCODE4_CURRENT_ALARM_STATE +5 OPCODE5_BATTER_INFORMATION +7 OPCODE7_ANTL_CONFIG_ALRAM +) +( +0x0a NEW_SPEC_NOTIFY_HANDLE +0x0b NEW_SPEC_NOTIFICATION_ENABLE_HANDLE +0x0d NEW_SPEC_WRITE_HANDLE +) +//app new specific end + +//mem_anti_lost_mode +( +0x01 ANTI_LE_ALARM_ON +0x00 ANTI_LE_ALARM_OFF +) +( +0 NOTIFICATION_ENABLE_BIT +1 INDICATION_ENABLE_BIT +) + + + + +( +//20ms +0x0020 FAST_ADV_INTERVAL_VALUE_CAR +) + +( +0x14 ATT_CAR_CONTROL_HANDLE +0x14 ATT_SPEED_SET_HANDLE +) + + +( +0 TURN_FRONT +1 TURN_LEFT +2 TURN_RIGHT +0 MOTOR_STOP +1 GO_FRONT +2 GO_BACK +0x6b5a LE_RECEIVE_PACKET_HEAD +) + +( +0 FLAG_IR_DISABLE +1 FLAG_IR_ENABLE +) + +( +0 DEVICE_CAR +1 DEVICE_TANK +2 DEVICE_BATTLE_CAR +3 DEVICE_BATTLE_TANK +4 DEVICE_REMOTE +) + +( +0 F_B_MOTOR +1 L_R_MOTOR +2 F_B_BATTERY +3 L_R_BATTERY +) + + + +( +1 SPEED_LEVEL_1 +2 SPEED_LEVEL_2 +3 SPEED_LEVEL_3 +4 SPEED_LEVEL_4 +5 SPEED_LEVEL_5 +6 SPEED_LEVEL_6 +7 SPEED_LEVEL_7 +8 SPEED_LEVEL_8 +9 SPEED_LEVEL_9 +10 SPEED_LEVEL_10 +) + +( +0 PWM0_DUTY_SETTING +1 PWM1_DUTY_SETTING +2 PWM2_DUTY_SETTING +) + +( +1 CAR_CMD_BATTERY +2 CAR_CMD_OLD_CAR_CONTROL +3 CAR_CMD_OLD_SPEED_CONTROL +4 CAR_CMD_L_R_MOTOR_CONTROL +5 CAR_CMD_F_B_MOTOR_CONTROL +6 CAR_CMD_IR_CONTROL +7 CAR_CMD_LED_CONTROL +8 CAR_CMD_DEVICE_INFO +) + +( +0 CAR_REMOTE_CHECK_BUTTON +1 CAR_REMOTE_CHECK_ROCKER +) + +( +0x11 CAR_NOTIFY_HANDLE +) + +( +0 LED_OFF +1 LED_ON +2 LED_BLINK +0xFF LED_INVALID +) + +( +0xFF INVALID_PIN_NUM +) + + +( +0 POWER_ON +1 WORK_PAIRED +2 WORK_SEARCH +) + + + +( +0 LIGHT_GROUP0 +) + +( +0 LIGHT_CMD_PWM0 +1 LIGHT_CMD_PWM1 +2 LIGHT_CMD_PWM2 +3 LIGHT_CMD_PWM3 +4 LIGHT_CMD_PWM4 +5 LIGHT_CMD_PWM5 +6 LIGHT_CMD_AUTO_MODE +0xff LIGHT_CMD_PAIRING + +) + + + +(//mem_module_flag +//bit0~bit3 config module function +0 MODULE_FLAG_UART_FLOW_CONTROL +1 MODULE_FLAG_BLE_SEND_MTU23 +2 MODULE_FLAG_BLE_DATA_ENCRYPT + +//bit4~bit7 module states change +4 MODULE_FLAG_BLE_DATA_FINISH +5 MOUDLE_TASK_UNSNIFF +6 MOUDLE_TASK_SNIFF + +) + +( +34 NV_DATA_LEN +-1 DECREASED_ONE +) + + + +( + 10 FLAG_MODULE_READ_VDD_COUNT +) + +( + 110 DM_REFCOM_BUFF_LEN +) +( + 0x200 UART_AIR_CONTROL_THRESHOLD +) + +( +0x01 HCI_DISCARD_PACKET +0x00 HCI_NOT_DISCARD_PACKET +) + + + +(//Command +0x00 HCI_CMD_SET_BT_ADDR_REQ +0x01 HCI_CMD_SET_LE_ADDR_REQ +0x02 HCI_CMD_SET_VISIBILITY_REQ +0x03 HCI_CMD_SET_BT_NAME_REQ +0x04 HCI_CMD_SET_LE_NAME_REQ +0x05 HCI_CMD_SPP_DATA_REQ +0x09 HCI_CMD_LE_DATA_REQ +0x0b HCI_CMD_STATUS_IRQ +0x0c HCI_CMD_SET_PAIRING_REQ +0x0d HCI_CMD_SET_PINCODE_REQ +0x0e HCI_CMD_SET_UARTCONTROL_REQ +0x0f HCI_CMD_SET_UART_BAUD_REQ +0x10 HCI_CMD_VERSION_REQ +0x11 HCI_CMD_BT_DISCONNECT +0x12 HCI_CMD_BLE_DISCONNECT +0x13 HCI_CMD_DELETE_DEVICE +0x14 HCI_CMD_CREATE_CONNECT +0x26 HCI_CMD_SET_NVRAM_REQ +0x27 HCI_CMD_SLEEP +0x28 HCI_CMD_CONFIRM_GKEY +0x29 HCI_CMD_SET_CREDIT_GIVEN +0x2a HCI_CMD_AUTO_ADV_SCAN +0x2b HCI_CMD_POWER_REQ +0x2c HCI_CMD_POWER_SET +0x30 HCI_CMD_PASSKEY_ENTRY +0x31 HCI_CMD_SET_GPIO +0x32 HCI_CMD_READ_GPIO +0x33 HCI_CMD_LE_SET_PAIRING +0x34 HCI_CMD_LE_SET_ADV_DATA +0x35 HCI_CMD_LE_SET_SCAN_DATA +0x36 HCI_CMD_LE_SEND_CONN_UPDATE_REQ +0x37 HCI_CMD_LE_SET_ADV_PARM +0x38 HCI_CMD_LE_START_PAIRING +0x40 HCI_CMD_SET_WAKE_GPIO +0x42 HCI_CMD_SET_TX_POWER +0x43 HCI_CMD_BOOT_VERSION_REQ +0x48 HCI_CMD_LE_CONFIRM_GKEY +0x49 HCI_CMD_REJECT_JUSTWORK +0x51 HCI_CMD_RESET_CHIP_REQ + +0x61 HCI_CMD_LE_SET_FIXED_PASSKEY + +0xff HCI_TEST_CMD_CLOSE_LPM +) + +(//event +0x00 HCI_EVENT_SPP_CONN_REP +0x01 HCI_EVENT_HID_CONN_REP +0x02 HCI_EVENT_LE_CONN_REP +0x03 HCI_EVENT_SPP_DIS_REP +0x04 HCI_EVENT_HID_DIS_REP +0x05 HCI_EVENT_LE_DIS_REP +0x06 HCI_EVENT_CMD_RES +0x07 HCI_EVENT_SPP_DATA_REP +0x08 HCI_EVENT_LE_DATA_REP +0x09 HCI_EVENT_STANDBY_REP +0x0a HCI_EVENT_STATUS_RES +0x0b HCI_EVENT_FINISH_PACK_NUM +0X0C HCI_EVENT_SNIFF_MD_CHANGE +0x0D HCI_EVENT_NVRAM_REP +0x0e HCI_EVENT_GKEY +0x0F HCI_EVENT_INVALID_PACKET +0x10 HCI_EVENT_GET_PASSKEY +0x11 HCI_EVENT_LE_TK +0x12 HCI_EVENT_REMOTE_MTU +0x14 HCI_EVENT_LE_PAIRING_STATE +0X15 HCI_EVENT_LE_ENCRYPTION_STATE +0x17 HCI_EVENT_LE_CONNECTION_UPDATE +0x1d HCI_EVENT_LE_GKEY + +) + + +(//command HCI_CMD_SET_GPIO +//byte 0 +0x00 HCI_CMD_CONFIG_GPIO_INPUT +0x01 HCI_CMD_CONFIG_GPIO_OUTPUT +//byte 1 input state +0x00 GPIO_INPUT_PULLUP +0x01 GPIO_INPUT_PULLDOWN +0x02 GPIO_INPUT_HIGH_IMPEDANCE +) + + + +( +0x7e0 OTP_ADDR_RF_PARAM_FIX +//struct of RF_PARAM_FIX +// uint8 //length = param_pair_count * 2 +// uint16 //param-pair-1 +// uint16 //param-pair-2 +// uint16 //param-pair-3 +// uint16 //param-pair-4 +// uint16 //param-pair-5 +// uint16 //param-pair-6 +// uint16 //param-pair-7 +) + +( +0 PAIRING_PINCODE +1 PAIRING_JUSTWORK +2 PAIRING_PASSKEY +3 PAIRING_CONFIRM +) + + +( +0x0001 FLAG_BT_PAIRING_SUCCESS +0x0101 FLAG_BT_PAIRING_FAIL +0x0080 FLAG_BLE_PAIRING_SUCCESS +0x0180 FLAG_BLE_PAIRING_FAIL +) + + +( +1 FLAG_EVENT_START_ENC +0 FLAG_EVENT_PAUSE_ENC +) + +( + 0 MOUDLE_STATE_BT_BIT + 1 MOUDLE_STATE_BLE_BIT +) + + +0x022b mem_init_cnt +//dpi eeprom addr + + +( +//SPI GPIO +0x19 MOUSE_SPI1_CLK_GPIO +0x1A MOUSE_SPI1_SDIO_GPIO +0X1E MOUSE_SPI2_CLK_GPIO +0X1F MOUSE_SPI2_SDIO_GPIO +//combination +0x01 MOUSE_L_BUTTON +0X02 MOUSE_R_BUTTON +0X04 MOUSE_M_BUTTON +0X06 MOUSE_RM_BUTTON +0X07 MOUSE_LMR_BUTTON +//mouse default gpio +0x1B MOUSE_DEFAULT_XA_GPIO +0x1C MOUSE_DEFAULT_XB_GPIO + +//ui led blink +0X00C8 LED_RECONNECT_BLINK //200 +0X0190 LED_DPI_BLINK //400 +0X03E8 LED_DISCOVERY_BLINK //1000 +0XFF LED_LONG_BLINK +0x05 LED_SENSOR_BLINK_CNT +//bt mode device number +0x01 MODE_BT_DEVICE1 +0x02 MODE_BT_DEVICE2 +0x03 MODE_BT_DEVICE3 +0x02 MODE_24G_DEVICE +//mouse flag +0X00 WRITE_REQ_ENABLE_FLAG +0X01 LL_START_ENC_FLAG +0X02 LL_PAIRING_SUCCESS_FLAG + + +//mouse_function_flag +0X04 MOUSE_FLAG_LEN +//1byte +0X00 MOUSE_SELECT_DEVICE_FLAG +0X01 MOUSE_CPI_FLAG +0X02 MOUSE_BT_CANNEL_RECONN_FLAG +0X03 MOSUE_24G_PAIRING_FLAG +0X04 MOUSE_LOW_VOLTAGE_FLAG +0X05 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG +0X06 MOUSE_LONG_BT_BUTTON_FLAG +0X07 MOUSE_STORE_EEPROM_FLAG +0x08 MOUSE_STATUE_UP_FLAG + +//3byte +0X10 MOUSE_ENABLE_USB +0X11 MOUSE_ENABLE_24G +0X12 MOUSE_ENABLE_SPI2 +0X13 MOUSE_ENABLE_FLASH +0X14 MOUSE_ENABLE_EEPROM +0X15 MOUSE_ENABLE_STATUE_UP_THREE_LED +0X16 MOUSE_ENABLE_STATUE_UP +0X17 MOUSE_ENABLE_DPI_LED_BLINK +//4byte +0X18 MOUSE_ENABLE_BLE_RANDOM_ADDRE +0X19 MOUSE_ENABLE_2K_EEPROM +0X1A MOUSE_ENABLE_ADC +0X1B MOUSE_ENABLE_INIT_DELAY +0X1C MOUSE_ENABLE_DISCOVERY_SENSOR_LED +0X1D MOUSE_ENABLE_AUTO_24G_PARING +0X1E MOUSE_ENABLE_WAKEUP_FROM_POWER +0X1F MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR + + + +//mouse dpi level +0x00 MOUSE_DPI_LEVEL1 +0x01 MOUSE_DPI_LEVEL2 +0x02 MOUSE_DPI_LEVEL3 +0x03 MOUSE_DPI_LEVEL4 + + +//mouse sensor angle +0x00 MOUSE_6CLK_ANGLE +0X01 MOUSE_9CLK_ANGLE +0X02 MOUSE_12CLK_ANGLE +0X03 MOUSE_3CLK_ANGLE + + +//mem_config_function_enable +0 ENABLE_BT_DISCOVERY_BY_GPIO_LED +1 ENABLE_MODE_LED +2 ENABLE_LOW_VOLTAGE_LED +3 ENABLE_DEVICE_LED +4 ENABLE_BT_BUTTON +5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON +6 ENABLE_SELECT_DEVICE_BY_SWITCH + +0xFF GPIO_DISABLE + + +//DPI button state +0x00 DPI_BUTTON_STATE_DOWN +0x01 DPI_BUTTON_STATE_UP + + +//eeprom address offect +0X00 MOUSE_INFO_EEPROM_OFFECT +0X5A MOUSE_DPI_EEPROM_OFFECT +0X5B MOUSE_G24_ADDR_EEPROM_OFFECT + +// Sensor id number +0x30 P32XX_ID1 +0x31 P3065_ID1 +0x3E P3610_ID1 +0x02 P3212_ID2 +0xD1 P3205_TJ3T_ID2 +0XD2 P3204_TJ3L_ID2 +0x54 PKA8_ID2 +0x70 P3065_XY_ID2 + + +//Sensor type +0X00 P3205 +0X01 P3065 +0X02 KA8 +0X03 P3204 +0X04 P3212 +0X05 P3610 +0X06 P3065_XY + + +//p3610 smart enable flag +0X00 P3610_SMART_ENABLE +0X01 P3610_SMART_DISABLE + + +//SENSOR REG +0x00 PAN_REG_PID_L +0x01 PAN_REG_PID_H +0x02 PAN_REG_MOTION_STAUS +0x03 PAN_REG_DELTA_X +0x04 PAN_REG_DELTA_Y +0x05 PAN_REG_OPRATION_MODE +0x06 PAN_REG_CONFIG +0x07 PAN_REG_IMAGE_QUALITY +0x08 PAN_REG_OPRATION_STATE +0x09 PAN_REG_WRITE_PROTECT +0x0A PAN_REG_SLEEP_1 +0x0B PAN_REG_ENTER_TIME +0x0C PAN_REG_SLEEP_2 +0x0D PAN_REG_IMAGE_THRESHOLD +0x0E PAN_REG_IMAGE_RECGNITION + + +0x06 MOUSE_DPI_ADDRESS +0x05 MOUSE_P3610_DPI_ADDRESS +0x0D MOUSE_P3212_DPI_XADDRESS +0x0E MOUSE_P3212_DPI_YADDRESS + + +0x06 MOUSE_FPGA_RF_WORK_DEBUG_GPIO +0x02 MOUSE_FPGA_DEBUG_GPIO + +) + + + + + +( +// eeprom config +0xb0 REMOTE_PARAM_EEPROM_CONFIG_ADDR + +) + + +( +0x00 CONTROL_F_B_MOTOR +0x02 CONTROL_L_R_MOTOR +) + +( +0x00 KEY_MAP_TEN +0x01 KEY_MAP_LR +) + +( +0x00 CONTROL_F_B_TEN +0x02 CONTROL_L_R_TEN +0x03 CONTROL_L_R_LR +) + +( +0 KEY_CHECK +1 ROCKER_CHECK +) + +( +1 MOTOR_POSITIVE +2 MOTOR_NEGATIVE +) + +( +0 ROCKER_MIDDLE_KEY +1 ROCKER_POSITIVE_KEY +2 ROCKER_NEGATIVE_KEY +) + + + + + + + + +( +0 BLE_SHUTTER +1 CLASSIC_SHUTTER +) + +( +0x0000 NVRAM_EEPROM_OFFSET +) + +( +0x1b3a SHUTTER_EEPROM_CONFIG_CRC +) + +( +5 MAX_QUEUE_NUM +5 SHUTTER_BLE_DATA_BUFFER +5 SHUTTER_CLASSIC_DATA_BUFFER +) + + +( +0x13 GATT_CONSUMER_NOTIFY_HANDLE +0x14 GATT_CONSUMER_WRITE_HANDLE +0x17 GATT_KEYBOARD_NOTIFY_HANDLE +0x18 GATT_KEYBOARD_WRITE_HANDLE +) + +( +//20ms +0x0020 FAST_ADV_INTERVAL_VALUE +//100ms +0x00a0 SLOW_ADV_INTERVAL_VALUE +) + + +( +0 ATT_BIT_NOTIFICATION +1 ATT_BIT_INDICATION +) +/////////////////////////////////////////////////////////////////////////////////////// + +( +0 HARD_SWITCH +1 SOFT_SWITCH +) + + +( +1 FLAG_SHUTTER_HID_DISCONN_TIMEOUT +5 FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT +) + +(//Data Rom Buffer Addr +382 BLE_GATT_LIST_SIZE +487 BT_SDP_LIST_SIZE +40 BLE_KEY_VALUE_LIST_SIZE +40 BT_KEY_VALUE_LIST_SIZE +0x913A BLE_SHUTTER_GATT_LIST +0x92B8 CLASSIC_SHUTTER_SDP_LIST +0x949F BLE_SHUTTER_KEY_VALUE_LIST +0x94C7 CLASSIC_SHUTTER_KEY_VALUE_LIST +) + + +(//soft switch power state +0 SS_STATE_POWER_UP +1 SS_STATE_POWER_ON +2 SS_STATE_POWER_OFF +) + +( +0 SS_POWER_STATE_OFFSET +1 SS_POWER_ON_TIME +2 SS_POWER_OFF_TIME +3 SS_POWER_ON_CB +5 SS_POWER_OFF_CB + +) + +( + +0x4FFE SIM_IIC_SCL_GPIO_NUM +0x4FFF SIM_IIC_SDA_GPIO_NUM + +) + + + + + +//class type +( +0x00 STANDARD_REQ +0x01 CLASS_REQ +0x02 MANUFACTURER_REQ +) +//Standard Request Codes +( +0x00 GET_STATUS // Code for Get Status +0x01 CLEAR_FEATURE // Code for Clear Feature +0x03 SET_FEATURE // Code for Set Feature +0x05 SET_ADDRESS // Code for Set Address +0x06 GET_DESCRIPTOR // Code for Get Descriptor +0x07 SET_DESCRIPTOR // Code for Set Descriptor(not used) +0x08 GET_CONFIGURATION // Code for Get Configuration +0x09 SET_CONFIGURATION // Code for Set Configuration +0x0A GET_INTERFACE // Code for Get Interface +0x0B SET_INTERFACE // Code for Set Interface +0x0C SYNCH_FRAME // Code for Synch Frame(not used) +) +//Standard Descriptor Types +( +0x01 DSC_DEVICE // Device Descriptor +0x02 DSC_CONFIG // Configuration Descriptor +0x03 DSC_STRING // String Descriptor +0x04 DSC_INTERFACE // Interface Descriptor +0x05 DSC_ENDPOINT // Endpoint Descriptor +) +//HID Descriptor Types +( +0x21 DSC_HID // HID Class Descriptor +0x22 DSC_HID_REPORT // HID Report Descriptor +) +//Define bmRequestType bitmaps +( +0x80 IN_DEVICE // Request made to device, + // direction is IN +0x00 OUT_DEVICE // Request made to device, + // direction is OUT +0x81 IN_INTERFACE // Request made to interface, + // direction is IN +0x01 OUT_INTERFACE // Request made to interface, + // direction is OUT +0x82 IN_ENDPOINT // Request made to endpoint, + // direction is IN +0x02 OUT_ENDPOINT // Request made to endpoint, +) +//HID Request Codes +( +0x01 GET_REPORT // Code for Get Report +0x02 GET_IDLE // Code for Get Idle +0x03 GET_PROTOCOL // Code for Get Protocol +0x09 SET_REPORT // Code for Set Report +0x0A SET_IDLE // Code for Set Idle +0x0B SET_PROTOCOL // Code for Set Protocol +0xF2 HID_REPORT_ID +64 EP0_PACKET_SIZE +6 EP1_PACKET_SIZE +16 HID_REPORT_SIZE +0x001B HID_REPORT_DESCRIPTOR_SIZE +) +//math cordic +( +0 TYPE_SIN +1 TYPE_ATAN +2 TYPE_MULT +3 TYPE_DIV +4 TYPE_ASIN +5 TYPE_SQRT +6 TYPE_COS +7 TYPE_TAN +) + +( +0 DFIFO0_IN_EMPTY +1 DFIFO1_IN_EMPTY +2 DFIFO2_IN_EMPTY +3 DFIFO3_IN_EMPTY +4 DFIFO0_OUT_EMPTY +5 DFIFO1_OUT_EMPTY +6 DFIFO2_OUT_EMPTY +7 DFIFO3_OUT_EMPTY +) + +( +4 USB_STATUS_SETUP +6 USB_STATUS_NAK +) + +( +1 USB_GOT_REPORT_REQ +2 USB_CONNECTED +3 USB_SLEEP +4 USB_RESUME +5 USB_SETIDLE_1 +) + +( +0x10 USB_EP1_KB +0x20 USB_EP2_MS +0x21 USB_EP2_MULTIKEY +0x01 MAC_BOOT_MODE +0x02 R_KEY +0x03 LR_KEY +) + +( +0x8ffa HID_KBDATA_ADDR +0x903a HID_MSDATA_ADDR +0x90fe HID_CONFDATA_ADDR +) + + +( +0x01ba PC_GET_REPORT +0x02ba PC_SET_REPORT +0x0200 PC_SET_REPORT_bValue +0x0000 PC_SET_REPORT_wIndex +0x0001 PC_SET_REPORT_bLength +0xba PC_REPORT_ID + +0x01 PC_GET_DATA +0x00 PC_GET_NONDATA +) + +( +//-------------------------------------------------- +// Define device states +0x00 DEV_ATTACHED // Device is in Attached State +0x01 DEV_POWERED // Device is in Powered State +0x02 DEV_DEFAULT // Device is in Default State +0x03 DEV_ADDRESS // Device is in Addressed State +0x04 DEV_CONFIGURED // Device is in Configured State +0x05 DEV_SUSPENDED // Device is in Suspended State +) + +( +// Define wIndex bitmaps +0x81 IN_EP1 // Index values used by Set and Clear +0x01 OUT_EP1 // commands for Endpoint_Halt +0x82 IN_EP2 +0x02 OUT_EP2 +0x83 IN_EP3 +0x03 OUT_EP3 +) + +( +0 EP0_STALL +1 EP1_IN_STALL +2 EP1_OUT_STALL +3 EP2_IN_STALL +4 EP2_OUT_STALL +5 EP3_IN_STALL +6 EP3_OUT_STALL +) + +( +// Define wValue bitmaps for Standard Feature Selectors +0x00 ENDPOINT_HALT // Endpoint_Halt feature selector +0x01 DEVICE_REMOTE_WAKEUP // Remote wakeup feature(not used) +0x00 BOOT_PROTOCOL +0x01 REPORT_PROTOCOL +0x01 USB_MAX_NUM_CFG +) + +( +0 TIMER_NAK +640 TIMER_NAK_DELAY +15 TIMER_WAKEUP +5000 TIMER_WAKEUP_DELAY +) + + + +0x022d mem_h5rx_ackcnt +0x022e mem_check_err_acl_cont +0x022f mem_rp_packets +0x0230 mem_packet_type +0x0232 mem_hci_sniff_conn_handle +0x0234 mem_hci_sniff_max_interval +0x0236 mem_hci_sniff_min_interval +0x0238 mem_hci_sniff_attempt +0x023a mem_hci_sniff_timeout +0x023c mem_voice_setting +0x023e mem_retransmission_effort +0x023f mem_sco_ptype +0x0241 mem_extm_uap_restore +0x0244 mem_h5rx_rptr +0x0246 mem_h5rx_ack +0x0247 mem_h5tx_ack +0x0248 mem_h5tx_rptr +0x024a mem_h5tx_wptr +0x024c mem_h5tx_free +0x024e mem_h5rx_tmp +0x024f mem_h5tx_seq +0x0250 mem_hci_acl_queue_wptr +0x0252 mem_hci_acl_queue_rptr +0x0254 mem_hci_acl_queue_end +0x0256 mem_hci_acl_queue_wcnt +0x0257 mem_hci_acl_cnt +0x0258 mem_hci_acl_tx_trigger_wptr//tx via uart +0x025a mem_hci_curr_len +0x025b mem_hci_curr_target + + +15 hci_flag_rp +//mem_hci_options bit map +( +1 hci_option_h4 +2 hci_option_protocol2 +3 hci_option_protocol3 +4 hci_option_uart +5 hci_option_usb +6 hci_option_phy2 +7 hci_option_phy3 +) +// UART baud rate @6MHz +( +0 uart_ctrl_bit_enable +3 uart_ctrl_bit_slip_protocol + +) + +//bit map of core_uart_ctrl +( + +) +//bit map of core_uart_status +( +0 uart_status_tx_fifo_full +1 uart_status_tx_fifo_empty +2 uart_status_tx_busy +3 uart_status_rx_fifo_empty + +) +//HCI H4 LOG related +( +0x4850 mem_hci_log +8 hci_log_size +100 hci_log_cnt + +) +//HCI H4 Packet TYPE +( +0x01 HCI_H4_TYPE_CMD +0x02 HCI_H4_TYPE_ACL +0x04 HCI_H4_TYPE_EVENT + +) +// HCI command opcode group field values +( +0x01 HCI_OGF_LINK_CONTROL +0x02 HCI_OGF_LINK_POLICY +0x03 HCI_OGF_BASEBAND +0x04 HCI_OGF_INFO +0x05 HCI_OGF_STATUS +0x06 HCI_OGF_TEST +0x08 HCI_OGF_LOW_ENERGY +0x3e HCI_OGF_LOGO_TESTING +0x3f HCI_OGF_VENDOR_SPECIFIC +) + +// HCI link control opcode command field values, OGF=1 +( +0x01 HCI_INQUIRY +0x02 HCI_INQUIRY_CANCEL +0x03 HCI_PERIODIC_INQUIRY_MODE +0x04 HCI_EXIT_PERIODIC_INQUIRY_MODE +0x05 HCI_CREATE_CONNECTION +0x06 HCI_DISCONNECT +0x07 HCI_ADD_SCO_CONNECTION +0x08 HCI_CREATE_CONNECTION_CANCEL +0x09 HCI_ACCEPT_CONNECTION +0x0A HCI_REJECT_CONNECTION +0x0B HCI_LINK_KEY_REQUEST_REPLY +0x0C HCI_LINK_KEY_REQUEST_NEGATIVE_REPLY +0x0D HCI_PIN_CODE_REQUEST_REPLY +0x0E HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY +0x0F HCI_CHANGE_CONNECTION_PACKET_TYPE +0x11 HCI_AUTHENTICATION_REQUESTED +0x13 HCI_SET_CONNECTION_ENCRYPTION +0x15 HCI_CHANGE_CONNECTION_LINK_KEY +0x17 HCI_MASTER_LINK_KEY +0x19 HCI_REMOTE_NAME_REQUEST +0x1A HCI_REMOTE_NAME_REQUEST_CANCEL +0x1B HCI_READ_REMOTE_SUPPORTED_FEATURES +0x1C HCI_READ_REMOTE_EXT_FEATURES +0x1D HCI_READ_REMOTE_VERSION_INFORMATION +0x1F HCI_READ_CLOCK_OFFSET +0x20 HCI_READ_LMP_HANDLE +0x28 HCI_SETUP_SCO_CONNECTION +0x29 HCI_ACCEPT_SCO_CONNECTION +0x2A HCI_REJECT_SCO_CONNECTION +0x2B HCI_IO_CAP_REQUEST_REPLY +0x2C HCI_USER_CONFIRMATION_REQUEST_REPLY +0x2D HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY +0x2E HCI_USER_PASSKEY_REQUEST_REPLY +0x2F HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY +0x30 HCI_REMOTE_OOB_DATA_REQUEST_REPLY +0x33 HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY +0x34 HCI_IO_CAPABILITY_REQUEST_NEGATIVE_REPLY +0x35 HCI_CREATE_PHYSICAL_LINK +0x36 HCI_ACCEPT_PHYSICAL_LINK +0x37 HCI_DISCONNECT_PHYSICAL_LINK +0x38 HCI_CREATE_LOGICAL_LINK +0x39 HCI_ACCEPT_LOGICAL_LINK +0x3A HCI_DISCONNECT_LOGICAL_LINK +0x3B HCI_LOGICAL_LINK_CANCEL +0x3C HCI_FLOW_SPEC_MODIFY +0x3D HCI_ENHANCED_SETUP_SYNCHRONOUS_CONNECTION +0x3E HCI_ENHANCED_ACCEPT_SYNCHRONOUS_CONNECTION_REQUEST +0x3F HCI_TRUNCATED_PAGE +0x40 HCI_TRUNCATED_PAGE_CANCEL +0x41 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST +0x42 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE +0x43 HCI_START_SYNCHRONIZATION_TRAIN +0x44 HCI_RECEIVE_SYNCHRONIZATION_TRAIN +0x45 HCI_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY +) + + +// HCI link policy commands OCF value, OGF=2 +( +0x01 HCI_HOLD_MODE +0x03 HCI_SNIFF_MODE +0x04 HCI_EXIT_SNIFF_MODE +0x05 HCI_PARK_MODE +0x06 HCI_EXIT_PARK_MODE +0x07 HCI_QOS_SETUP +0x09 HCI_ROLE_DISCOVERY +0x0B HCI_SWITCH_ROLE +0x0C HCI_READ_LINK_POLICY_SETTINGS +0x0D HCI_WRITE_LINK_POLICY_SETTINGS +0x0e HCI_READ_DEFAULT_LINK_POLICY_SETTINGS +0x0f HCI_WRITE_DEFAULT_LINK_POLICY_SETTINGS +0x10 HCI_FLOW_SPECIFICATION +0x11 HCI_SNIFF_SUBRATING +) + +// HCI host controller and baseband commands OCF values, OGF=3 +( +0x01 HCI_SET_EVENT_MASK +0x03 HCI_RESET +0x05 HCI_SET_EVENT_FILTER +0x08 HCI_FLUSH +0x09 HCI_READ_PIN_TYPE +0x0A HCI_WRITE_PIN_TYPE +0x0B HCI_CREATE_NEW_UNIT_KEY +0x0D HCI_READ_STORED_LINK_KEY +0x11 HCI_WRITE_STORED_LINK_KEY +0x12 HCI_DELETE_STORED_LINK_KEY +0x13 HCI_WRITE_LOCAL_NAME +0x14 HCI_READ_LOCAL_NAME +0x15 HCI_READ_CONN_ACCEPT_TIMEOUT +0x16 HCI_WRITE_CONN_ACCEPT_TIMEOUT +0x17 HCI_READ_PAGE_TIMEOUT +0x18 HCI_WRITE_PAGE_TIMEOUT +0x19 HCI_READ_SCAN_ENABLE +0x1A HCI_WRITE_SCAN_ENABLE +0x1B HCI_READ_PAGE_SCAN_ACTIVITY +0x1C HCI_WRITE_PAGE_SCAN_ACTIVITY +0x1D HCI_READ_INQUIRY_SCAN_ACTIVITY +0x1E HCI_WRITE_INQUIRY_SCAN_ACTIVITY +0x1F HCI_READ_AUTHENTICATION_ENABLE +0x20 HCI_WRITE_AUTHENTICATION_ENABLE +0x21 HCI_READ_ENCRYPTION_MODE +0x22 HCI_WRITE_ENCRYPTION_MODE +0x23 HCI_READ_CLASS_OF_DEVICE +0x24 HCI_WRITE_CLASS_OF_DEVICE +0x25 HCI_READ_VOICE_SETTING +0x26 HCI_WRITE_VOICE_SETTING +0x27 HCI_READ_AUTOMATIC_FLUSH_TIMEOUT +0x28 HCI_WRITE_AUTOMATIC_FLUSH_TIMEOUT +0x29 HCI_READ_NUM_BROADCAST_RETRANSMISSIONS +0x2A HCI_WRITE_NUM_BROADCAST_RETRANSMISSIONS +0x2B HCI_READ_HOLD_MODE_ACTIVITY +0x2C HCI_WRITE_HOLD_MODE_ACTIVITY +0x2D HCI_READ_TRANSMIT_POWER_LEVEL +0x2E HCI_READ_SCO_FLOW_CONTROL_ENABLE +0x2F HCI_WRITE_SCO_FLOW_CONTROL_ENABLE +0x31 HCI_SET_CONTROLLER_TO_HOST_FLOW_CONTROL +0x33 HCI_HOST_BUFFER_SIZE +0x35 HCI_HOST_NUM_COMPLETED_PACKETS +0x36 HCI_READ_LINK_SUPERVISION_TIMEOUT +0x37 HCI_WRITE_LINK_SUPERVISION_TIMEOUT +0x38 HCI_READ_NUMBER_OF_SUPPORTED_IAC +0x39 HCI_READ_CURRENT_IAC_LAP +0x3A HCI_WRITE_CURRENT_IAC_LAP +0x3B HCI_READ_PAGE_SCAN_PERIOD_MODE +0x3C HCI_WRITE_PAGE_SCAN_PERIOD_MODE +0x3D HCI_READ_PAGE_SCAN_MODE +0x3E HCI_WRITE_PAGE_SCAN_MODE +0x3F HCI_SET_AFH_CHANNEL_CLASSIFICATION + + +0x42 HCI_READ_INQUIRY_SCAN_TYPE +0x43 HCI_WRITE_INQUIRY_SCAN_TYPE +0x44 HCI_READ_INQUIRY_MODE +0x45 HCI_WRITE_INQUIRY_MODE +0x46 HCI_READ_PAGE_SCAN_TYPE +0x47 HCI_WRITE_PAGE_SCAN_TYPE + +0x48 HCI_READ_AFH_CHANNEL_ACCESSMENT_MODE +0x49 HCI_WRITE_AFH_CHANNEL_ACCESSMENT_MODE +0x51 HCI_READ_EXTENDED_INQUIRY_RESPONSE +0x52 HCI_WRITE_EXTENDED_INQUIRY_RESPONSE +0x53 HCI_REFRESH_ENCRYPTION_KEY +0x55 HCI_READ_SIMPLE_PAIRING_MODE +0x56 HCI_WRITE_SIMPLE_PAIRING_MODE +0x57 HCI_READ_LOCAL_OOB_DATA +0x58 HCI_READ_INQUIRY_RESPONSE_TRANSMIT_POWER_LEVEL +0x59 HCI_WRITE_INQUIRY_TRANSMIT_POWER_LEVEL +0x60 HCI_SEND_KEYPRESS_NOTIFICATION +0x5A HCI_READ_DEFAULT_ERRONEOUS_DATA_REPORTING +0x5B HCI_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING +0x5F HCI_ENHANCED_FLUSH +0x61 HCI_READ_LOGICAL_LINK_ACCEPT_TIMEOUT +0x62 HCI_WRITE_LOGICAL_LINK_ACCEPT_TIMEOUT +0x63 HCI_SET_EVENT_MASK_PAGE_2 +0x64 HCI_READ_LOCATION_DATA +0x65 HCI_WRITE_LOCATION_DATA +0x66 HCI_READ_FLOW_CONTROL_MODE +0x67 HCI_WRITE_FLOW_CONTROL_MODE +0x68 HCI_READ_ENHANCE_TRANSMIT_POWER_LEVEL +0x69 HCI_READ_BEST_EFFORT_FLUSH_TIMEOUT +0x6A HCI_WRITE_BEST_EFFORT_FLUSH_TIMEOUT +0x6B HCI_SHORT_RANGE_MODE +0x6C HCI_READ_LE_HOST_SUPPORT +0x6D HCI_WRITE_LE_HOST_SUPPORT +0x6E HCI_SET_MWS_CHANNEL_PARAMETERS +0x6F HCI_SET_EXTERNAL_FRAME_CONFIGURATION +0x70 HCI_SET_MWS_SIGNALING +0x71 HCI_SET_MWS_TRANSPORT_LAYER +0x72 HCI_SET_MWS_SCAN_FREQUENCY_TABLE +0x73 HCI_SET_MWS_PATTERN_CONFIGURATION +0x74 HCI_SET_RESERVED_LT_ADDR +0x75 HCI_DELETE_RESERVED_LT_ADDR +0x76 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_DATA +0x77 HCI_READ_SYNCHRONIZATION_TRAIN_PARAMETERS +0x78 HCI_WRITE_SYNCHRONIZATION_TRAIN_PARAMETERS +0x79 HCI_READ_SECURE_CONNECTIONS_HOST_SUPPORT +0x7A HCI_WRITE_SECURE_CONNECTIONS_HOST_SUPPORT +0x7B HCI_READ_AUTHENTICATED_PAYLOAD_TIMEOUT +0x7C HCI_WRITE_AUTHENTICATED_PAYLOAD_TIMEOUT +0x7D HCI_READ_LOCAL_OOB_EXTENDED_DATA +0x7E HCI_READ_EXTENDED_PAGE_TIMEOUT +0x7F HCI_WRITE_EXTENDED_PAGE_TIMEOUT +0x80 HCI_READ_EXTENDED_INQUIRY_LENGTH +0x81 HCI_WRITE_EXTENDED_INQUIRY_LENGTH +) + + +// HCI informational parameters OCF values, OGF=4 +( +0x01 HCI_READ_LOCAL_VERSION_INFORMATION +0x02 HCI_READ_LOCAL_SUPPORTED_COMMANDS +0x03 HCI_READ_LOCAL_SUPPORTED_FEATURES +0x04 HCI_READ_LOCAL_EXT_FEATURES +0x05 HCI_READ_BUFFER_SIZE +0x07 HCI_READ_COUNTRY_CODE +0x09 HCI_READ_BD_ADDR +0x0A HCI_REJECT_CONNECTION_REQUEST +0x0B HCI_READ_LOCAL_SUPPORTED_CODECS +) + +// HCI status parameters OCF values, OGF=5 +( +0x01 HCI_READ_FAILED_CONTACT_COUNTER +0x02 HCI_RESET_FAILED_CONTACT_COUNTER +0x03 HCI_GET_LINK_QUALITY +0x05 HCI_READ_RSSI +0x06 HCI_READ_AFH_CHANNEL_MAP +0x07 HCI_READ_BD_CLOCK +0x08 HCI_READ_ENCRYPTION_KEY_SIZE +0x09 HCI_READ_LOCAL_AMP_INFO +0x0A HCI_READ_LOCAL_AMP_ASSOC +0x0B HCI_WRITE_REMOTE_AMP_ASSOC +0x0C HCI_GET_MWS_TRANSPORT_LAYER_CONFIGURATION +0x0D HCI_SET_TRIGGERED_CLOCK_CAPTURE +) + +// HCI testing command OCF values, OGF=6 +( +0x01 HCI_READ_LOOPBACK_MODE +0x02 HCI_WRITE_LOOPBACK_MODE +0x03 HCI_ENABLE_DEVICE_UNDER_TEST_MODE +0x04 HCI_WRITE_SIMPLE_PAIRING_DEBUG_MODE +0x07 HCI_ENABLE_AMP_RECEIVER_REPORTS +0x08 HCI_AMP_TEST_END +0x09 HCI_AMP_TEST +0x0A HCI_WRITE_SECURE_CONNECTIONS_TEST_MODE +) + +// HCI vendor specific command OCF values -OGF=3F +( +0x01 HCI_WRITE_BD_ADDR +0x02 HCI_READ_INQUIRY_RESPONSE_TIMEOUT +0x03 HCI_WRITE_INQUIRY_RESPONSE_TIMEOUT +0x04 HCI_READ_PAGE_SCAN_REPETITION_MODE +0x05 HCI_WRITE_PAGE_SCAN_REPETITION_MODE +0x06 HCI_READ_PAGE_RESPONSE_TIMEOUT +0x07 HCI_WRITE_PAGE_RESPONSE_TIMEOUT +0x08 HCI_READ_NEW_CONNECTION_TIMEOUT +0x09 HCI_WRITE_NEW_CONNECTION_TIMEOUT +0x0a HCI_INITIALIZE_BASEBAND +0x0b HCI_WRITE_LOCAL_SUPPORTED_FEATURES +0x0c HCI_WRITE_PARK_PARAMETERS +0x0d HCI_READ_PARK_PARAMETERS +0x0e HCI_WRITE_QUALITY_OF_SERVICE +0x0f HCI_NOT_USED +0x10 HCI_MODIFY_BEACON_PARAMETERS +0x11 HCI_UNPARK_USING_PM_ADDR +0x12 HCI_WRITE_HOPPING_CHANNELS +0x13 HCI_SLEEP_FOREVER_MODE +0x14 HCI_WRITE_AUTO_PAGE_SCAN_ENABLE +0x15 HCI_READ_AUTO_PAGE_SCAN_ENABLE +0x16 HCI_SET_ENCRYPTION_KEY_SIZE +0x17 HCI_INVALIDATE_FLASH_AND_REBOOT +0x18 HCI_UPDATE_UART_BAUD_RATE +0x19 HCI_WRITE_GPIO_1_4_AS_OUTPUT +0x1A HCI_WRITE_GPIO_2_LED +0x1B HCI_SET_TESTMODE_TYPE +0x1C HCI_WRITE_SCO_PCM_INT_PARAM +0x1D HCI_READ_SCO_PCM_INT_PARAM +0x1E HCI_WRITE_PCM_DATA_FORMAT_PARAM +0x1F HCI_READ_PCM_DATA_FORMAT_PARAM +0x20 HCI_WRITE_COMFORT_NOISE_PARAM +0x21 HCI_READ_COMFORT_NOISE_PARAM +0x22 HCI_WRITE_SCO_TS +0x23 HCI_READ_SCO_TS +0x24 HCI_WRITE_PCM_LOOPBACK_MODE +0x25 HCI_READ_PCM_LOOPBACK_MODE +0x26 HCI_SET_TRANSMIT_POWER +0x27 HCI_SET_SLEEPMODE_PARAM +0x28 HCI_READ_SLEEPMODE_PARAM +0x29 HCI_SLEEPMODE_CMD +0x2A HCI_DELAY_PERIPHERAL_SCO_STARTUP +0x2B HCI_WRITE_RECEIVE_ONLY +0x2C HCI_WRITE_RATE_CONTROL +0x2D HCI_TX_UNMOD_CARRIER +0x2E HCI_DOWNLOAD_MINIDRIVER +0x2F HCI_CRYSTAL_PPM +0x30 HCI_SET_POWER_AMP_BIAS +0x31 HCI_SET_HAM_BEHAVIOR +0x32 HCI_SET_AFH_BEHAVIOR +0x33 HCI_READ_USER_DEFINED_NVRAM +0x34 HCI_ENABLE_RADIO +0x35 HCI_READ_DIAGNOSTIC_INFO +0x36 HCI_GET_HID_DEVICE_LIST +0x37 HCI_ADD_HID_DEVICE +0x38 HCI_READ_APP_FW_CONFIG_VERSION +0x39 HCI_DELETE_HID_DEVICE +0x3B HCI_ENABLE_USB_HID_EMULATION +// 0x3A available +// 0x3B available +0x3C HCI_SEND_LMPDU +0x3D HCI_AUTO_PAIR_REQ +0x3E HCI_READ_VS_EXTENSION +0x3F HCI_WRITE_VS_EXTENSION + +0x77 HCI_OPCODE_FC77 +0x79 HCI_OPCODE_FC79 +0xC4 HCI_DOWNLOAD_PATCH +0xCC HCI_OPCODE_FCCC + +0x00 HCI_VENDOR_CMD_RESET +0x01 HCI_VENDOR_CMD_CHIPID +0x02 HCI_VENDOR_CMD_BAUD +0x03 HCI_VENDOR_CMD_PATCH +0x04 HCI_VENDOR_CMD_PATCH_DONE +0x05 HCI_VENDOR_CMD_ECHO +0x06 HCI_VENDOR_CMD_BDADDR + +0x07 HCI_VENDOR_CMD_ENTER_LPM +0x08 HCI_VENDOR_CMD_COMMU_READY + +0x10 HCI_VENDOR_CMD_MEM +0x11 HCI_VENDOR_CMD_EEP + +0X12 HCI_VENDOR_CMD_PATCH_SEC_INIT +0X13 HCI_VENDOR_CMD_PATCH_SEC +) + +//HCI LE controller command OCF values, OGF=8 +( +0x01 HCI_LE_SET_EVENT_MASK +0x02 HCI_LE_READ_BUFFER_SIZE +0x03 HCI_LE_READ_LOCAL_SUPPORTED_FEATURES +0x05 HCI_LE_SET_RANDOM_ADDRESS +0x06 HCI_LE_SET_ADVERTISING_PARAMETERS +0x07 HCI_LE_READ_ADVERTISING_CHANNEL_TX_POWER +0x08 HCI_LE_SET_ADVERTISING_DATA +0x09 HCI_LE_SET_SCAN_RESPONSE_DATA +0x0A HCI_LE_SET_ADVERTISE_ENABLE +0x0B HCI_LE_SET_SCAN_PARAMETERS +0x0C HCI_LE_SET_SCAN_ENABLE +0x0D HCI_LE_CREATE_CONNECTION +0x0E HCI_LE_CREATE_CONNECTION_CANCEL +0x0F HCI_LE_READ_WHITE_LIST_SIZE +0x10 HCI_LE_CLEAR_WHITE_LIST +0x11 HCI_LE_ADD_DEVICE_TO_WHITE_LIST +0x12 HCI_LE_REMOVE_DEVICE_FROM_WHITE_LIST +0x13 HCI_LE_CONNECTION_UPDATE +0x14 HCI_LE_SET_HOST_CHANNEL_CLASSIFICATION +0x15 HCI_LE_READ_CHANNEL_MAP +0x16 HCI_LE_READ_REMOTE_USED_FEATURES +0x17 HCI_LE_ENCRYPT +0x18 HCI_LE_RAND +0x19 HCI_LE_START_ENCRYPTION +0x1A HCI_LE_LONG_TERM_KEY_REQUEST_REPLY +0x1B HCI_LE_LONG_TERM_KEY_REQUEST_NEGATIVE_REPLY +0x1C HCI_LE_READ_SUPPORTED_STATES +0x1D HCI_LE_RECEIVER_TEST +0x1E HCI_LE_TRANSMITTER_TEST +0x1F HCI_LE_TEST_END +0x20 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_REPLY +0x21 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_NEGATIVE_REPLY +) +// HCI event code +( +0x01 HCI_EVENT_INQUIRY_COMPLETE +0x02 HCI_EVENT_INQUIRY_RESULT +0x03 HCI_EVENT_CONNECTION_COMPLETE +0x04 HCI_EVENT_CONNECTION_REQUEST +0x05 HCI_EVENT_DISCONNECTION_COMPLETE +0x06 HCI_EVENT_AUTHENTICATION_COMPLETE +0x07 HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE +0x08 HCI_EVENT_ENCRYPTION_CHANGE_COMPLETE +0x09 HCI_EVENT_CHANGE_CONNECTION_LINK_KEY_COMPLETE +0x0A HCI_EVENT_MASTER_LINK_KEY_COMPLETE +0x0B HCI_EVENT_READ_REMOTE_FEATURES_COMPLETE +0x0C HCI_EVENT_READ_REMOTE_VERSION_INFORMATION_COMPLETE +0x0D HCI_EVENT_QOS_SETUP_COMPLETE +0x0E HCI_EVENT_COMMAND_COMPLETE +0x0F HCI_EVENT_COMMAND_STATUS +0x10 HCI_EVENT_HARDWARE_ERROR +0x11 HCI_EVENT_FLUSH_OCCURRED +0x12 HCI_EVENT_ROLE_CHANGE +0x13 HCI_EVENT_NUM_COMPLETED_PACKETS +0x14 HCI_EVENT_MODE_CHANGE +0x15 HCI_EVENT_RETURN_LINK_KEYS +0x16 HCI_EVENT_PIN_CODE_REQUEST +0x17 HCI_EVENT_LINK_KEY_REQUEST +0x18 HCI_EVENT_LINK_KEY_NOTIFICATION +0x19 HCI_EVENT_LOOPBACK_COMMAND +0x1A HCI_EVENT_DATA_BUFFER_OVERFLOW +0x1B HCI_EVENT_MAX_SLOTS_CHANGE +0x1C HCI_EVENT_READ_CLOCK_OFFSET_COMPLETE +0x1D HCI_EVENT_CONNECTION_PACKET_TYPE_CHANGED +0x1E HCI_EVENT_QOS_VIOLATION +0x1F HCI_EVENT_PAGE_SCAN_MODE_CHANGE +0x20 HCI_EVENT_PAGE_SCAN_REPETITION_MODE_CHANGE +0x21 HCI_EVENT_FLOW_SPECIFICATION_COMPLETE +0x22 HCI_EVENT_INQUIRY_RESULT_WITHRSSI +0x23 HCI_EVENT_READ_REMOTE_EXT_FEATURES_COMPLETE +0x2C HCI_EVENT_SCO_CONNECTION_COMPLETE +0x2D HCI_EVENT_SCO_CONNECTION_CHANGED +0x2E HCI_EVENT_SNIFF_SUBRATING +0x2F HCI_EVENT_EXT_INQUIRY_RESULT +0x30 HCI_EVENT_ENCRYPT_KEY_REFRESH_COMPLETE +0x31 HCI_EVENT_IO_CAP_REQ +0x32 HCI_EVENT_IO_CAP_RESPONSE +0x33 HCI_EVENT_USER_CONFIRMATION_REQUEST +0x34 HCI_EVENT_UESR_PASSKEY_REQUEST +0x35 HCI_EVENT_REMOTE_OOB_DATA_REQUEST +0x36 HCI_EVENT_SIMPLE_PAIRING_COMPLETE +0x38 HCI_EVENT_LINK_SUPERVISION_TIMEOUT_CHANGED +0x39 HCI_EVENT_ENHANCED_FLUSH_COMPLETE +0x3B HCI_EVENT_USER_PASSKEY_NOTIFICATION +0x3C HCI_EVENT_KEYPRESS_NOTIFICATION +0x3D HCI_EVENT_REMOTE_HOST_SUPPORTED_FEATURES_NOTIFICATION +0x3E HCI_EVENT_LE_META_EVENT +0x40 HCI_EVENT_PHYSICAL_LINK_COMPLETE +0x41 HCI_EVENT_CHANNEL_SELECTED +0x42 HCI_EVENT_DISCONNECTION_PHYSICAL_LINK_COMPLETE +0x43 HCI_EVENT_PHYSICAL_LINK_LOSS_EARLY_WARNING +0x44 HCI_EVENT_PHYSICAL_LINK_RECOVERY +0x45 HCI_EVENT_LOGICAL_LINK_COMPLETE +0x46 HCI_EVENT_DISCONNECTION_LOGICAL_LINK_COMPLETE +0x47 HCI_EVENT_FLOW_SPEC_MODIFY_COMPLETE +0x48 HCI_EVENT_NUMBER_OF_COMPLETED_DATA_BLOCKS +0x49 HCI_EVENT_AMP_START_TEST +0x4A HCI_EVENT_AMP_TEST_END +0x4B HCI_EVENT_AMP_RECEIVER_REPORT +0x4C HCI_EVENT_SHORT_RANGE_MODE_CHANGE_COMPLETE +0x4D HCI_EVENT_AMP_STATUS_CHANGE +0x4E HCI_EVENT_TRIGGERED_CLOCK_CAPTURE +0x4F HCI_EVENT_SYNCHRONIZATION_TRAIN_COMPLETE +0x50 HCI_EVENT_SYNCHRONIZATION_TRAIN_RECEIVED +0x51 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE +0x52 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_TIMEOUT +0x53 HCI_EVENT_TRUNCATED_PAGE_COMPLETE +0x54 HCI_EVENT_SLAVE_PAGE_RESPONSE_TIMEOUT +0x55 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_CHANNEL_MAP_CHANGE +0x56 HCI_EVENT_INQUIRY_RESPONSE_NOTIFICATION +0x57 HCI_EVENT_AUTHENTICATED_PAYLOAD_TIMEOUT_EXPIRED + +0xFE HCI_EVENT_LOGO_TESTING +0xFF HCI_EVENT_VENDOR_SPECIFIC +) +( +0x01 HCI_VENDOR_EVENT_COMMU_READY +) +//HCI LE SUBEVENT CODE +( +0x01 HCI_LE_SUBEVENT_CONN_COMPLETE +0x02 HCI_LE_SUBEVENT_ADV_REPORT +0x03 HCI_LE_SUBEVENT_CONN_UPDATE_COMPLETE +0x04 HCI_LE_SUBEVENT_REMOTE_FEATURE_COMPLETE +0x05 HCI_LE_SUBEVENT_LTK_REQUEST +0x06 HCI_LE_SUBEVENT_REMOTE_CONN_PARAM_REQ +) + +( +0x00 HCI_LPM_OFF +0x01 HCI_LPM_ON +) + + +( +33 HOST_WAKE_TIME +) + +( +1 HCI_RX_WAKE +0 HCI_RX_READY +) + + +( +/*HID TYPE*/ +0x01 HID_TYPE_CONTROL +0x04 HID_TYPE_GET_REPORT +0x05 HID_TYPE_SET_REPORT +0x07 HID_TYPE_SET_PROTOCOL +0x09 HID_TYPE_SET_IDLE +0x0a HID_TYPE_DATA +/*HID REPORT ID*/ +0x01 HID_REPORT_ID_KB + +0x00 HID_CONTROL_P_NOOPERATION +0x01 HID_CONTROL_P_HARDRESET +0x02 HID_CONTROL_P_SOFTRESET +0x03 HID_CONTROL_P_SUSPEND +0x04 HID_CONTROL_P_EXITSUSPEND +0x05 HID_CONTROL_P_VIRTUALCABLEUNPLUG +) + + + + + + + + +//0 mem_kscan_head_ptr +//1 mem_col_num +//1 mem_row_num +//4 mem_col_conf_pin +//4 mem_row_conf_pin +//1 mem_row_count +//1 mem_count_shift +//2 mem_kscan_value_temp +//2 mem_kscan_lastvalue +//2 mem_kscan_value +//4 mem_btclk_kscan +//1 mem_btclk_kscan_interval + + +0x00 KEYSCAN_OFFECT_COL_NUM +0x01 KEYSCAN_OFFECT_ROW_NUM +0x02 KEYSCAN_OFFECT_COL_CONF_PIN +0x06 KEYSCAN_OFFECT_ROW_CONF_PIN + +0x0a KEYSCAN_OFFECT_ROW_COUNT +0x0b KEYSCAN_OFFECT_SHIFT_COUNT + +0X0C KEYSCAN_OFFECT_VALUE_TEMP +0X0E KEYSCAN_OFFECT_LASVALUE +0X10 KEYSCAN_OFFECT_VALUE +0x12 KEYSCAN_OFFECT_BTCLK +0x16 KEYSCAN_OFFECT_BTCLK_INTERVAL + + + +0x025d mem_l2cap_mem_start +0x025d mem_l2cap_rxbuff1_len +0x025f mem_l2cap_rxbuff2_len +0x0261 mem_l2cap_rxbuff_new +0x0263 mem_l2cap_rxbuff_inuse +0x0264 mem_l2cap_payload_ptr +0x0266 mem_l2cap_rx_pkt_length +0x0268 mem_l2cap_rx_cid +0x026a mem_l2cap_rx_done +0x026b mem_l2cap_signal_tx_buff_ptr +0x026d mem_l2cap_signal_tx_payload_ptr +0x026f mem_l2cap_signal_tx_length +0x0271 mem_sdp_tx_buff_ptr +0x0273 mem_sdp_tx_payload_ptr +0x0275 mem_sdp_tx_pkt_length +0x0277 mem_rfcomm_tx_buff_ptr +0x0279 mem_rfcomm_tx_payload_ptr +0x027b mem_rfcomm_tx_pkt_length +0x027d memL2CAP_T1 +0x027f mem_CONTROL_tasks +0x0280 mem_send_config_req +0x0281 mem_config_identifier +0x0282 mem_config_req_dest_CID +0x0284 mem_rfcomm_malloc_fail_flag +0x0285 mem_message_to_uppersm +0x0286 mem_upper_sm_remote_page +0x0287 mem_upper_sm_reconn +0x0288 mem_upper_sm_ss +0x0289 mem_tx_malloc_log +0x02c9 mem_l2cap_mem_end +0x02c9 mem_scid +0x02cb mem_cmd_length +0x02cd mem_tt2 +0x02cf mem_tt3 +0x02d1 mem_id +0x02d3 mem_psm +0x02d5 mem_l2cap_sdpres_delay_time + + + +//mem_l2cap_lpm_txbuf +( +256 l2cap_lpm_txbuf_len +) + +( +4 L2CAP_TX_FIFO_SIZE +8 L2CAP_TX_BUFF_CNT + +) +( +0x0002 L2CAP_SIG_EXT_FEATRUE +0x0003 L2CAP_SIG_FIX_FEATRUE +) + + +( +0 HS_IDLE +1 AG_INIT_CALL +2 HS_INIT_CALL +) +( +0 M_ACL_LINK_ABSENT +1 M_ACL_LINK_EXIST +) + +( +0 L2CAP_INUSE_BUFF1 +1 L2CAP_INUSE_BUFF2 +) +/* upper layer interface w/ lower layer */ +( +1 MAX_NUM_LINKS_ALLOWED +1 MAX_NUM_SCO_ALLOWED +1 ACL_LINK_PRESENT +0 ACL_LINK_ABSENT +) +( +1 L2CAP_RX_DONE +0 L2CAP_RX_CLEAR +) +/* Scheduler */ +( +0 L2CAP_DISCONNECT_INTERRUPT +1 RFCOMM_wants_service +2 L2CAP_sig_Tx_buff_full +3 RFCOMM_Tx_buff_full +4 SDP_Tx_buff_full +5 got_complete_L2CAP_pkt +6 L2CAP_init_Config_Req +7 L2CAP_DISCONNECT_CONTROL +) + +/* mem_CONTROL_tasks2 */ +( +0 UI_NEED_SERVICE +) +/* L2CAP logic channel identifiers (2 bytes) p.261 */ +( +0x0001 L2CAP_signal_channel +0x0050 L2CAP_SDP_channel +0x0051 L2CAP_RFCOMM_channel +0x0052 L2CAP_HID_Control_channel +0x0053 L2CAP_HID_Interrupt_channel +0x0077 L2CAP_AVDTP_signal_channel //------avdtp +0x0078 L2CAP_AVDTP_media_channel +0x0079 L2CAP_AVDTP_report_channel +0x0080 L2CAP_AVDTP_recovery_channel +0x00dd L2CAP_AVCTP_Control_channel +) +/* L2CAP signalling command codes (1 byte) p.284 */ +( +0x00 reserved +0x01 signal_cmd_reject +0x02 signal_connect_req +0x03 signal_connect_rsp +0x04 signal_config_req +0x05 signal_config_rsp +0x06 signal_disconnect_req +0x07 signal_disconnect_rsp +0x08 signal_echo_req +0x09 signal_echo_rsp +0x0a signal_info_req +0x0b signal_info_rsp +) +/* L2CAP signal_command_reject reason code (2 bytes), p.285 */ +( +0x0000 cmd_not_understood +0x0001 signalling_MTU_exceeded +0x0002 invalid_CID_in_req +) +/* L2CAP PSM values used in signal_connect_req (2 bytes), p.286 */ +( +0x0001 PSM_SDP +0x0003 PSM_RFCOMM +0x0005 PSM_TCS +0x0011 PSM_HID_control +0x0013 PSM_HID_interrupt +0x0017 PSM_AVCTP +0x0019 PSM_AVDTP +) +/* L2CAP connection response result code (2 bytes), p.288 */ +( +0x0000 L2CAP_connect_successful +0x0001 L2CAP_connect_pending +0x0002 L2CAP_connect_refused_PSM_unsupported +0x0003 L2CAP_connect_refused_security_block +0x0004 L2CAP_connect_refused_no_resources +) +/* L2CAP connection status values (2 bytes), p.288 */ +( +0x0000 L2CAP_no_info_available +0x0001 L2CAP_authentication_pending +0x0002 L2CAP_authorization_pending +) +/* L2CAP configuration response result code (2 bytes), p.292 */ +( +0x0000 L2CAP_config_success +0x0001 L2CAP_config_failure_bad_parameters +0x0002 L2CAP_config_failure_no_reason +0x0003 L2CAP_config_failure_unknown_options +) +/* L2CAP constant definitions */ +( +128 L2CAP_Rx_buff_size +48 L2CAP_signal_Tx_buff_size +128 SDP_Tx_buff_size +128 RFCOMM_Tx_buff_size +1 AM_ADDRESS +3 DM1TYPE +4 DH1TYPE +11 DH3TYPE +8 DVTYPE +0 channel_state_closed +1 channel_state_config +2 channel_state_open +0x0030 L2CAP_config_MTU_SDP +0xffff L2CAP_config_ftimeout_SDP +0x03e3 L2CAP_config_MTU_RFCOMM +0xffff L2CAP_config_ftimeout_RFCOMM +260 l2cap_max_pkt_len +) + +( +0 FAILURE +1 SUCCESS +2 IN_PROGRESS +) +( +0x00 IDLE +0x01 WAIT_4_BB_PAGE +0x02 WAIT_4_LMP_CONN +0x03 WAIT_4_SCO_CONN +0x04 WAIT_4_SCO_KILLED +) + +/*mem_master_mss*/ +( +0 STOP_ENC +1 SEND_SWITCH_REQ +) +( +0 HF_HS_READY +1 HF_AG_READY +) +/* mem_hf_state */ +( +0 HF_STATE_WAITING_RFCOMM_CONN +1 HF_STATE_HF_SEND_FEATURE +2 HF_STATE_WAITING_AG_FEATURE_OK +3 HF_STATE_HF_SEND_INDICATORS +4 HF_STATE_WAITING_AG_INDICATORS_OK +5 HF_STATE_HF_SEND_CURR_STATUS +6 HF_STATE_WAITING_AG_STATUS_OK +7 HF_STATE_HF_SEND_UPDATE_STATUS +8 HF_STATE_WAITING_AG_UPDATE_STATUS_OK +9 HF_STATE_CONNECTED +0x0a HF_STATE_HF_SEND_RECEIVE_INFO +0x0b HF_STATE_WAITING_AG_INFO +0x0c HF_STATE_HF_SEND_AT_CLIP +0x0d HF_STATE_WAITING_AT_CLIP +0x0e HF_STATE_HF_SEND_AT_CCWA +0x0f HF_STATE_WAITING_AT_CCWA +) +/*mem_hf_call_state*/ +( +0 HF_CALL_STATE_INACTIVE +1 HF_CALL_STATE_SETUP +2 HF_CALL_STATE_ACTIVE +) +/* mem_pairing_state bit definition */ +( +0 PAIR_INQUIRY_START +1 PAIR_INQUIRY_TIME_OUT +2 PAIR_INQUIRY_FAILED +3 PAIR_INQUIRY_SUCCESS +4 PAIR_READY_CONN +5 PAIR_WAIT_CANCEL_RESPONSE +6 PAIR_CONN_SUCCESS +7 PAIR_WAIT_DETACH +) + +/* mem_pairing_mode bit definition */ +( +0 FORCE_AUTHENTICATION +) +/* mem_hid_protecol_type */ +( +0 PROTECOL_BOOT /*default*/ +1 PROTECOL_REPORT +) + +/* mem_upper_sm_reconn */ +( +1 UPPERSM_SEND_SDP_CONN_REQ +2 UPPERSM_SEND_SDP_CFG_REQ +3 UPPERSM_SEND_SDP_HF_SS +4 UPPERSM_SEND_SDP_DISC_REQ +5 UPPERSM_SEND_RFCOMM_CONN_REQ +6 UPPERSM_SEND_RFCOMM_CFG_REQ +7 UPPERSM_SEND_SABM_CMD +8 UPPERSM_SEND_DISC +9 UPPERSM_SEND_WAIT +10 UPPERSM_SEND_HID_CONTROL_CONN_REQ +11 UPPERSM_SEND_HID_CONTROL_CFG_REQ +12 UPPERSM_SEND_HID_INTERRUPT_CONN_REQ +13 UPPERSM_SEND_HID_INTERRUPT_CFG_REQ +14 UPPERSM_SEND_SDP_HS_SS +15 UPPERSM_SEND_SDP_PBAP_SS +16 UPPERSM_SEND_SDP_AVTARG_SS +) +/* mem_upper_sm_remote_page */ +( +1 UPPERSM_RP_SEND_SDP_CONN_REQ +2 UPPERSM_RP_SEND_SDP_CFG_REQ +3 UPPERSM_RP_SEND_SDP_HF_SS +4 UPPERSM_RP_SEND_SDP_HS_SS +5 UPPERSM_RP_SEND_SDP_PBAP_SS +6 UPPERSM_RP_SEND_SDP_AVTARG_SS +7 UPPERSM_RP_SEND_SDP_DISC_REQ +8 UPPERSM_RP_SEND_AVCTP_CONN_REQ +9 UPPERSM_RP_SEND_AVCTP_CFG_REQ +) + +/* mem_ML2CAP_flag */ +( +0 MSCHEDULER_HID_CONTROL_CONN_DONE +1 MSCHEDULER_HID_INTERRUPT_CONN_DONE +2 MSCHEDULER_HID_CONTROL_CFG_REQ_DONE +3 MSCHEDULER_HID_CONTROL_CFG_RSP_DONE +4 MSCHEDULER_HID_INTERRUPT_CFG_REQ_DONE +5 MSCHEDULER_HID_INTERRUPT_CFG_RSP_DONE +6 MSCHEDULER_HID_CONTROL_DISC_DONE +7 MSCHEDULER_HID_INTERRUPT_DISC_DONE +) +/* ui event --add by lj*/ +( +0x00 UI_DATA_EVNET_NONE +0x01 UI_DATA_EVNET_HID +0x02 UI_DATA_EVNET_AVDTP_S +0x03 UI_DATA_EVNET_AVDTP_M +0x04 UI_DATA_EVNET_AVCTP +0x05 UI_DATA_EVNET_HS +0x06 UI_DATA_EVNET_HF +0x07 UI_DATA_EVNET_SPP +0x08 UI_DATA_EVNET_OBEX +) +/* ui ack --add by lj*/ +( +0x00 UI_DATA_TX_NONE +0x01 UI_DATA_TX_HID +0x02 UI_DATA_TX_AVDTP_S +0x03 UI_DATA_TX_AVDTP_M +0x04 UI_DATA_TX_AVCTP +0x05 UI_DATA_TX_HS +0x06 UI_DATA_TX_HF +0x07 UI_DATA_TX_SPP +0x08 UI_DATA_TX_OBEX +0x10 ACL_TX_L2CAP_SIGNAL +0x11 ACL_TX_SDP +0x12 ACL_TX_RFCOMM + +) + +( +0 L2CAP_SDP_interface_conn +1 L2CAP_SDP_interface_cfg +) + +( +0 L2CAP_CHANNEL_STATE_CONN_REQ +1 L2CAP_CHANNEL_STATE_CONN_RES +2 L2CAP_CHANNEL_STATE_SND_CFG_REQ +3 L2CAP_CHANNEL_STATE_SND_CFG_RES +4 L2CAP_CHANNEL_STATE_RCV_CFG_REQ +5 L2CAP_CHANNEL_STATE_RCV_CFG_RES +6 L2CAP_CHANNEL_RFCOMM_ONLY_SABM +7 L2CAP_CHANNEL_RFCOMM_ONLY_UA +6 L2CAP_CHANNEL_AVDTP_SIGNAL_INIT //set avdtp init complete +6 L2CAP_CHANNEL_HID_HANDSHAKE_DONE +0x3f L2CAP_CHANNEL_SETUP_COMPLETE +0x7f L2CAP_CHANNEL_AVDTP_SIGNAL_COMPLETE +0xff L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED +) + +/* AVDTP---lj*/ +( +0 L2CAP_AVDTP_SIGNAL_CONNECT +1 L2CAP_AVDTP_SIGNAL_CONFIG +2 L2CAP_AVDTP_MEDIA_CONNECT +3 L2CAP_AVDTP_MEDIA_CONFIG +4 L2CAP_AVDTP_REPORT_CONNECT +5 L2CAP_AVDTP_REPORT_CONFIG +6 L2CAP_AVDTP_RECOVERY_CONNECT +7 L2CAP_AVDTP_RECOVERY_CONFIG +) +/* AVCTP---lj*/ +( +0 L2CAP_AVCTP_SIGNAL_CONNECT +1 L2CAP_AVCTP_SIGNAL_CONFIG +) + +127 L2CAP_SIGNAL_MALLOC_SIZE + +//1 mem_rfcomm_malloc_fail_flag +( +0 RFCOMM_MALLOC_SUCCEED +1 RFCOMM_MALLOC_FAIL +) + +//mem_l2cap_flow_ctrl_flag +( +0 L2CAP_FLOW_CTRL_DISABLE +1 L2CAP_FLOW_CTRL_ENABLE +) + + +0x02d9 mem_le_rxbuf +0x0311 mem_le_l2capbuf +0x0417 mem_le_mic +0x041b mem_le_peer_mic +0x041f mem_le_peer_ltk +0x042f mem_le_mrand +0x043f mem_le_state +0x0440 mem_le_mode +0x0441 mem_le_tsniff +0x0443 mem_le_anchor +0x0447 mem_le_clk_offset +0x044d mem_le_receive_window +0x044f mem_le_plap +0x0455 mem_le_conn_handle +0x0456 mem_le_arq +0x0457 mem_le_ch +0x0458 mem_le_hop +0x0459 mem_le_event_count +0x045b mem_le_supervision_timer +0x045f mem_le_instant +0x0461 mem_le_channels +0x0462 mem_le_op +0x0463 mem_le_access +0x0467 mem_le_crcinit +0x046a mem_le_window_size +0x046b mem_le_slave_latency +0x046d mem_le_superto +0x046f mem_le_channel_map +0x0474 mem_le_no_using +0x0476 mem_le_peer_sca +0x0477 mem_le_att_opcode +0x0478 mem_le_att_handle +0x047a mem_le_err_code +0x047b mem_le_ll_pairing_fail_reason +0x047c mem_le_sk +0x048c mem_le_testtype +0x048d mem_le_test_sync +0x048f mem_le_test_pcnt +0x0491 mem_le_rxon_ts +0x0497 mem_le_rx_ll_opcode +0x0498 mem_le_notify_attr_start +0x049a mem_le_notify_len +0x049b mem_cmd_le_create_conn +0x049c mem_le_cur_attlist_start_ptr +0x049e mem_le_cur_handle_start +0x04a0 mem_le_cur_handle_end +0x04a2 mem_le_cur_uuid_length +0x04a3 mem_le_cur_uuid +0x04b3 mem_le_curr_att_len +0x04b4 mem_le_search_res +0x04b5 mem_le_continue_type + + + + +( +0x000001 param_le_features + +1636 param_sifs +0x1e0 param_clke_cal_le +0xa0 param_le_sca +) + +( +0 DEFAULT_STATES +1 IPHONE_LOST_LTK +2 MODULE_LOST_LTK +3 LTK_NOT_LOST +) + + +( +27 LE_MAX_PAKET_LEN +) + +/* advertising channel PDU type */ +( +0 ADV_IND +1 ADV_DIRECT_IND +2 ADV_NONCONN_IND +3 SCAN_REQ +4 SCAN_RSP +5 CONNECT_REQ +6 ADV_SCAN_IND +) + +( +0x01 GAP_ADTYPE_FLAGS +0x02 GAP_ADTYPE_16BIT_MORE +0x03 GAP_ADTYPE_16BIT_COMPLETE +0x04 GAP_ADTYPE_32BIT_MORE +0x05 GAP_ADTYPE_32BIT_COMPLETE +0x06 GAP_ADTYPE_128BIT_MORE +0x07 GAP_ADTYPE_128BIT_COMPLETE +0x08 GAP_ADTYPE_LOCAL_NAME_SHORT +0x09 GAP_ADTYPE_LOCAL_NAME_COMPLETE +0x0a GAP_ADTYPE_POWER_LEVEL +0xff GAP_ADTYPE_MANUFACTURER_SPECIFIC +) + + + /* LE control packet type */ + ( + 0x00 LL_CONNECTION_UPDATE_REQ + 0x01 LL_CHANNEL_MAP_REQ + 0x02 LL_TERMINATE_IND + 0x03 LL_ENC_REQ + 0x04 LL_ENC_RSP + 0x05 LL_START_ENC_REQ + 0x06 LL_START_ENC_RSP + 0x07 LL_UNKNOWN_RSP + 0x08 LL_FEATURE_REQ + 0x09 LL_FEATURE_RSP + 0x0A LL_PAUSE_ENC_REQ + 0x0B LL_PAUSE_ENC_RSP + 0x0C LL_VERSION_IND + 0x0D LL_REJECT_IND + 0x0E LL_SLAVE_FEATURE_REQ + 0x0F LL_CONNECTION_PARAM_REQ + 0x10 LL_CONNECTION_PARAM_RSP + 0x11 LL_REJECT_IND_EXT + 0x12 LL_PING_REQ + 0x13 LL_PING_RSP + ) + + /* Security Manager Protocol Code */ + ( + 0x01 SMP_PAIRING_REQUEST + 0x02 SMP_PAIRING_RESPONSE + 0x03 SMP_PAIRING_CONFIRM + 0x04 SMP_PAIRING_RANDOM + 0x05 SMP_PAIRING_FAILED + 0x06 SMP_ENCRYPTION_INFORMATION + 0x07 SMP_MASTER_IDENTIFICATION + 0x08 SMP_IDENTITY_INFORMATION + 0x09 SMP_IDENTITY_ADDRESS_INFORMATION + 0x0A SMP_SIGNING_INFORMATION + 0x0B SMP_SECURITY_REQUEST + 0x0c SMP_PAIRING_PUBLIC_KEY + 0x0d SMP_PAIRING_DHKEY_CHECK + ) + + /* L2CAP Signaling OPCODE */ + ( + 0x12 L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST + 0x13 L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE + ) + + /* ATT OPCODE */ + ( + 0x01 ATTOP_ERROR_RESPONSE + 0x02 ATTOP_EXCHANGE_MTU_REQUEST + 0x03 ATTOP_EXCHANGE_MTU_RESPONSE + 0x04 ATTOP_FIND_INFORMATION_REQUEST + 0x05 ATTOP_FIND_INFORMATION_RESPONSE + 0x06 ATTOP_FIND_BY_TYPE_VALUE_REQUEST + 0x07 ATTOP_FIND_BY_TYPE_VALUE_RESPONSE + 0x08 ATTOP_READ_BY_TYPE_REQUEST + 0x09 ATTOP_READ_BY_TYPE_RESPONSE + 0x0A ATTOP_READ_REQUEST + 0x0B ATTOP_READ_RESPONSE + 0x0C ATTOP_READ_BLOB_REQUEST + 0x0D ATTOP_READ_BLOB_RESPONSE + 0x0E ATTOP_READ_MULTIPLE_REQUEST + 0x0F ATTOP_READ_MULTIPLE_RESPONSE + 0x10 ATTOP_READ_BY_GROUP_TYPE_REQUEST + 0x11 ATTOP_READ_BY_GROUP_TYPE_RESPONSE + 0x12 ATTOP_WRITE_REQUEST + 0x13 ATTOP_WRITE_RESPONSE + 0x16 ATTOP_PREPARE_WRITE_REQUEST + 0x17 ATTOP_PREPARE_WRITE_RESPONSE + 0x18 ATTOP_EXECUTE_WRITE_REQUEST + 0x19 ATTOP_EXECUTE_WRITE_RESPONSE + 0x1B ATTOP_HANDLE_VALUE_NOTIFICATION + 0x1D ATTOP_HANDLE_VALUE_INDICATION + 0x1E ATTOP_HANDLE_VALUE_CONFIRMATION + 0x52 ATTOP_WRITE_COMMAND + 0xD2 ATTOP_SIGNED_WRITE_COMMAND + 0x1f ATTOP_CONTINUE + 0x9e EMPTY_LE_DATA_PRE + 0x9f EMPTY_LE_DATA + ) + + /* ATT error code */ + ( + 0x01 ATT_ERR_INVALID_HANDLE + 0x02 ATT_ERR_READ_NOT_PERMITTED + 0x03 ATT_ERR_WRITE_NOT_PERMITTED + 0x04 ATT_ERR_INVALID_PDU + 0x05 ATT_ERR_INSUFFICIENT_AUTHENTICATION + 0x06 ATT_ERR_REQUEST_NOT_SUPPORTED + 0x07 ATT_ERR_INVALID_OFFSET + 0x08 ATT_ERR_INSUFFICIENT_AUTHORIZATION + 0x09 ATT_ERR_PREPARE_QUEUE_FULL + 0x0A ATT_ERR_ATTRIBUTE_NOT_FOUND + 0x0B ATT_ERR_ATTRIBUTE_NOT_LONG + 0x0C ATT_ERR_INSUFFICIENT_ENCRYPTION_KEY_SIZE + 0x0D ATT_ERR_INVALID_ATTRIBUTE_VALUE_LENGTH + 0x0E ATT_ERR_UNLIKELY_ERROR + 0x0F ATT_ERR_INSUFFICIENT_ENCRYPTION + 0x10 ATT_ERR_UNSUPPORTED_GROUP_TYPE + 0x11 ATT_ERR_INSUFFICIENT_RESOURCES + ) + /* SERVICE UUID */ + ( + 0x1800 UUID_SERVICE_GENERIC_ACC + 0x1801 UUID_SERVICE_GENERIC_ATT + 0x180a UUID_SERVICE_DEVICE_INFO + 0x180f UUID_SERVICE_BATTERY + 0x1812 UUID_SERVICE_HIDS + 0x2800 UUID_GATT_PRIMARY_SERVICE + 0x2801 UUID_GATT_SECONDARY_SERVICE + 0X2802 UUID_GATT_INCLUDE + 0X2803 UUID_GATT_CHARACTERISTIC + 0X2A00 UUID_CHRCTR_DEVICE_NAME + 0X2A19 UUID_CHRCTR_BATTERY_LEVEL + 0X2A22 UUID_CHRCTR_KEYBOARD_INPUT + 0X2A23 UUID_CHRCTR_SYSTEM_ID + 0X2A25 UUID_CHRCTR_SERIAL_NUMBER + 0X2A26 UUID_CHRCTR_FIRMWARE + 0X2A32 UUID_CHRCTR_KEYBOARD_OUTPUT + 0X2A33 UUID_CHRCTR_MOUSE_INPUT + 0X2A4A UUID_CHRCTR_HID_INFO + 0X2A4B UUID_CHRCTR_REPORT_MAP + 0X2A4C UUID_CHRCTR_HID_CTRL_POINT + 0X2A4D UUID_CHRCTR_REPORT + 0X2A4E UUID_CHRCTR_PROTOCOL_MODE + ) + + (// pairing failed reason + 0x00 PAIRING_FAILED_RESERVED + 0X01 PAIRING_FAILED_PASSKEY_ENTRY_FAILED + 0X02 PAIRING_FAILED_OOB_NOT_AVAILABLE + 0X03 PAIRING_FAILED_AUTHENTICATION_REQUIRE + 0X04 PAIRING_FAILED_CONFIRM_VALUE_FAILED + 0X05 PAIRING_FAILED_PAIRING_NOT_SUPPORTED + 0X06 PAIRING_FAILED_ENCRYPTION_KEY_SIZE + 0X07 PAIRING_FAILED_COMMAND_NOT_SUPPORTED + 0X08 PAIRING_FAILED_UNSPECIFIED_REASON + 0X09 PAIRING_FAILED_REPEATED_ATTEMPTS + 0X0A PAIRING_FAILED_INVALID_PARAMETERS + 0X0B PAIRING_FAILED_DHKEY_CHECK_FAILED + 0X0C PAIRING_FAILED_NUMERIC_COMPARISON_FAILED + 0X0D PAIRING_FAILED_BR_EDR_PAIRING_IN_PROGRESS + 0X0E PAIRING_FAILED_KEY_DERIVATION_GENERATION_NOT_ALLOWED + ) + + + //BLE ErrorCodes + ( + 0x01 ERROR_UNKNOWN_HCI_COMMAND + 0x02 ERROR_NO_CONNECTION + 0x03 ERROR_HARDWARE_FAILURE + 0x04 ERROR_PAGE_TIMEOUT + 0x05 ERROR_AUTHENTICATION_FAILURE + 0x06 ERROR_KEY_MISSING + 0x07 ERROR_MEMORY_FULL + 0x08 ERROR_CONNECTION_TIMEOUT + 0x09 ERROR_MAX_CONNECTIONS + 0x0A ERROR_MAX_SCO_CONNECTIONS + 0x0B ERROR_MAX_ACL_CONNECTIONS + 0x0C ERROR_COMMAND_DISALLOWED + 0x0D ERROR_HOST_REJECT_LIMITED_RESOURCES + 0x0E ERROR_HOST_REJECT_SECURITY_REASONS + 0x0F ERROR_HOST_REJECT_REMOTE_IS_ONLY_PERSONAL + 0x10 ERROR_HOST_TIMEOUT + 0x11 ERROR_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE + 0x12 ERROR_INVALID_HCI_COMMAND_PARAMETERS + 0x13 ERROR_REMOTE_USER_TERMINATED_CONNECTION + 0x14 ERROR_REMOTE_LOW_RESOURCES + 0x15 ERROR_REMOTE_POWERING_OFF + 0x16 ERROR_CONNECTION_TERMINATED_BY_LOCAL_HOST + 0x17 ERROR_REPEATED_ATTEMPTS + 0x18 ERROR_PAIRING_NOT_ALLOWED + 0x19 ERROR_UNKNOWN_LMP_PDU + 0x1A ERROR_UNSUPPORTED_REMOTE_FEATURE + 0x1B ERROR_SCO_OFFSET_REJECTED + 0x1C ERROR_SCO_INTERVAL_REJECTED + 0x1D ERROR_SCO_AIR_MODE_REJECTED + 0x1E ERROR_INVALID_LMP_PARAMETER + 0x1F ERROR_UNSPECIFIED_ERROR + 0x20 ERROR_UNSUPPORTED_LMP_PARAMETER_VALUE + 0x21 ERROR_ROLE_CHANGE_NOT_ALLOWD + 0x22 ERROR_LMP_RESPONSE_TIMEOUT + 0x23 ERROR_ERROR_TRANSACTION_COLLISION + 0x24 ERROR_LMP_PDU_NOT_ALLOWED + 0x25 ERROR_ENCRYPTION_MODE_NOT_ACCEPTABLE + 0x26 ERROR_UNIT_KEY_USED + 0x27 ERROR_QOS_NOT_SUPPORTED + 0x28 ERROR_INSTANT_PASSED + 0x29 ERROR_PAIRING_W_UNIT_KEY_NOT_SUPPORTED + 0x2a ERROR_DIFFERENT_TRANSACTION_COLLISION + 0x2c ERROR_QOS_UNACCEPTABLE_PARAMETER + 0x2d ERROR_QOS_REJECTED + 0x2e ERROR_CHANNEL_CLASSIFICATION_NOT_SUPPORTED + 0x2f ERROR_INSUFFICIENT_SECURITY + 0x30 ERROR_PARAMETER_OUT_OF_MANDATORY_PANGE + 0x32 ERROR_ROLE_SWITCH_PENDING + 0x34 ERROR_RESERVED_SLOT_VIOLATION + 0x35 ERROR_ROLE_SWITCH_FAILED + 0x36 ERROR_EXTENDED_INQUIRY_RESPONSE_TOO_LARGE + 0x37 ERROR_SIMPLE_PAIRING_NOT_SUPPORTED_BY_HOST + 0x38 ERROR_HOST_BUSY_PAIRING + ) + + + //modified_name + ( + 0x14 MAX_NAME_LEN + 0x16 ADV_DATA_NAME_LEN + 0X20 SPACE + + ) + /* GATT Specifications*/ + ( + 0X2900 CHARACTERTIC_EXTENDED_PROPERTIES + 0X2901 CHARACTERTIC_USER_DESCRIPTION + 0X2902 CLIENT_CHARACTERTIC_CONFIGURATION + 0X2903 SERVER_CHARACTERTIC_CONFIGURATION + 0X2904 CHARACTERTIC_PRESENTATION_FORMAT + 0X2905 CHARACTERTIC_AGGREGATE + 0X2906 VALID_RANGE + 0X2907 EXTERNAL_REPORT_REFERENCE + 0X2908 REPORT_REFERENCE + 0X290B ENVIR_SENSING_CONFIGURATION + 0X290C ENVIR_SENSING_MEASUREMENT + 0X290D ENVIR_SENSING_TRIGGER_SETTING + ) + /* LE L2CAP CID */ + ( + 0x0004 LE_L2CAP_CID_ATT + 0x0005 LE_L2CAP_CID_SIGNAL + 0x0006 LE_L2CAP_CID_SMP + ) + + //LE address type + ( + 0 LE_ADDR_TYPE_PUBLIC + 1 LE_ADDR_TYPE_RANDOM + ) + //LE address type bitmap + ( + 7 LE_RECEIVER_ADDR_BIT + 6 LE_SENDER_ADDR_BIT + ) + //LE SCAN TYPE + ( + 0x00 LE_SCAN_TYPE_PASSIVE //no SCAN_REQ shall be sent + 0x01 LE_SCAN_TYPE_ACTIVE + ) + + //LE SCAN ENABLE + ( + 0x00 LE_SCAN_DISABLE + 0x01 LE_SCAN_ENABLE + 0x0101 LE_ACTIVE_SCAN_ENABLE + ) + + //LE FIND INFORMATION RESPONSE + //THE FORMAT OF THE INFORMATION DATA + ( + 0x01 UUID_SIZE_16BIT + 0x02 UUID_SIZE_128BIT + ) + + ( + 0x0000 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED + 0x0001 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED + ) + +// le_state_map 0-2 is reserved for state_inconn,state_insniff and state_sco +( +3 lestate_got_first_packet +4 lestate_encryption +5 lestate_update_param +6 lestate_update_map +) + +// le mode +( +0 lemode_idle +1 lemode_slave +3 lemode_master +) + + +( +0x01 LLID_CONTINUE +0x02 LLID_START +0x03 LLID_LE_LL +0x01 LLID_EMPTY +) + +( +4 LE_TX_BUFF_COUNT +3 LE_TX_BUFF_UPDATE_LOOPCNT //LE_TX_BUFF_COUNT-1 + +12 LE_MD_MAX_COUNT +) + + +( +0 LE_INITATOR_LTK_BIT +1 LE_INITATOR_IRK_BIT +2 LE_INITATOR_CSRK_BIT +) + +( +0x00 LE_PAIRING_MODE_NONE +0x01 LE_PAIRING_MODE_LAGACY_JUSTWORK +0x02 LE_PAIRING_MODE_LAGACY_PASSKEY +0x81 LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK +0x82 LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC +0x83 LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY + +7 LE_PAIRING_MODE_SECURE_CONNECT_BIT +) + + +( +0 FLAG_IOCAP_DISPLAYONLY +1 FLAG_IOCAP_DISPLAYYESNO +2 FLAG_IOCAP_KEYBOARDONLY +3 FLAG_IOCAP_NOINPUTNOOUTPUT +4 FLAG_IOCAP_KEYBOARDDISPLAY + +0x00 FLAG_OOB_DATA_FLAG_NO +) + +( +0x00 FLAG_LE_NO_BONDING_NO_MITM +0x01 FLAG_LE_BONDING_NO_MITM +0x04 FLAG_LE_NO_BONDING_MITM +0x05 FLAG_LE_BONDING_MITM +0x09 FLAG_LE_BONDING_NO_MITM_SECURE +0x0D FLAG_LE_BONDING_MITM_SECURE + +2 LE_AUTH_MITM_BIT +3 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT +) + +( +0 LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND +1 LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE +2 LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE + +) + +( +0 MASTER_PUBLIC_ADDR +1 MASTER_RANDOM_ADDR +) + +( +0x06 LE_ERR_PIN_OR_KEY_MISSING +) + + +( +96000 TIMER_SMP_PAIRING_TIMEOUT //30S +) +//mem_le_pairing_state +( +0 FLAG_LE_PAIRING_NULL +1 FLAG_LE_PAIRING_START +2 FLAG_LE_PAIRING_SEND_RECURITY_REQ +3 FLAG_LE_PAIRING_RCV_PAIRING_REQ +4 FLAG_LE_PAIRING_AUTH +5 FLAG_LE_PAIRING_AFTER_AUTH +6 FLAG_LE_PAIRING_SEND_START_ENC_RSP +7 FLAG_LE_PARING_SEND_ENC_INFORMATION +8 FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION +9 FLAG_LE_PARING_SEND_INDENTITY_INFORMATION +0xff FLAG_LE_PAIRING_END +) + + + +/*LE secure connect state */ +( +0x00 LE_SC_STAT_NULL +0x01 LE_SC_STAT_RECEIVE_PUBLIC_KEY +0x02 LE_SC_STAT_WAIT_SEND_PUBLIC_KEY +0x03 LE_SC_STAT_SEND_PUBLIC_KEY +0x04 LE_SC_STAT_RECEIVE_RANDOM +0x05 LE_SC_STAT_SEND_RANDOM +0x06 LE_SC_STAT_RECEIVE_DHKEY +0x07 LE_SC_STAT_WAIT_CONFIRM_GKEY +0x08 LE_SC_STAT_PASSKEY_WAIT_CONFIRM +) + + +( +0 FLAG_LE_SC_CONFRIM_NULL +1 FLAG_LE_SC_CONFRIM_GKEY_OK +) + +//mem_le_enc_state +( +0 FLAG_LE_ENC_NULL +1 FLAG_LE_RCV_ENC_START +2 FLAG_LE_ENC_PAUSE +3 FLAG_LE_RCV_START_ENC_RSP +4 FLAG_LE_SEND_START_ENC_RSP +0xff FLAG_LE_ENC_END +) + +(//mem_le_configuration +//bit0:use fixed key , ble passkey pairing +0 BIT_BLE_PASSKEY_FIXED_KEY +//bit1:ble pairing use fixed long term key +1 BIT_BLE_PAIRING_FIXED_LTK +//bit2:ble transmit packet will set more data flag +2 BIT_BLE_TRANSMIT_PACKET_BY_MD +//bit3:master read handle, with requires an authenticated link +3 BIT_BLE_READ_AUTH +//bit4:master write handle, with requires an authenticated link +4 BIT_BLE_WRITE_AUTH +//bit5:cannot enter long sleep +5 BIT_BLE_SHORT_MULT + +) + +( +0 BIT_ADV_CHANNEL_MAP_37 +1 BIT_ADV_CHANNEL_MAP_38 +2 BIT_ADV_CHANNEL_MAP_39 +) + + + + +0x04b6 mem_lmo_header_length +0x04b7 mem_lmo_header_opcode +0x04b8 mem_lmo_payload +0x04c9 mem_lmi_accepted_opcode +0x04ca mem_disconn_reason_send +0x04cb mem_tx_fixed_freq +0x04cc mem_rx_fixed_freq +0x04cd mem_ext_features_page +0x04ce mem_lmpext_ssp_enable +0x04d0 mem_remote_sppcap +0x04d1 mem_lmp_conn_state +0x04d2 mem_soft_timer +0x04d4 mem_pincode_state +0x04d5 mem_sres_tid +0x04d6 mem_accptsco_tid +0x04d7 mem_auth_enable +0x04d8 mem_wait_encryption +0x04d9 mem_sniff_payload +0x04e9 mem_aurand_send_delay_time + + + ( + //bit flag:mem_classic_bt_flag + 0 FLAG_SSP_REJECT_JUSTWORK + 1 SHORT_MULT_FLAG + ) + + ( + //bit map + 0 pair_state_inrand + 1 pair_state_inrand_acpt + 2 pair_state_send_comb + 3 pair_state_recv_comb + 4 pair_state_send_aurand + 5 pair_state_recv_sres + 6 pair_state_recv_aurand + 7 pair_state_send_sres + ) + /* LMP opcodes */ + ( + 1 LMP_NAME_REQ + 2 LMP_NAME_RES + 3 LMP_ACCEPTED + 4 LMP_NOT_ACCEPTED + 5 LMP_CLKOFFSET_REQ + 6 LMP_CLKOFFSET_RES + 7 LMP_DETACH + 8 LMP_IN_RAND + 9 LMP_COMB_KEY + 10 LMP_UNIT_KEY + 11 LMP_AU_RAND + 12 LMP_SRES + 13 LMP_TEMP_RAND + 14 LMP_TEMP_KEY + 15 LMP_ENCRYPTION_MODE_REQ + 16 LMP_ENCRYPTION_KEY_SIZE_REQ + 17 LMP_START_ENCRYPTION_REQ + 18 LMP_STOP_ENCRYPTION_REQ + 19 LMP_SWITCH_REQ + 20 LMP_HOLD + 21 LMP_HOLD_REQ + 23 LMP_SNIFF_REQ + 24 LMP_UNSNIFF_REQ + 26 LMP_PARK_REQ + 27 LMP_SET_BROADCAST_SCAN_WINDOW + 28 LMP_MODIFY_BEACON + 29 LMP_UNPARK_BD_ADDR_REQ + 30 LMP_UNPARK_PM_ADDR_REQ + 31 LMP_INCR_POWER_REQ + 32 LMP_DECR_POWER_REQ + 33 LMP_MAX_POWER + 34 LMP_MIN_POWER + 35 LMP_AUTO_RATE + 36 LMP_PREFERRED_RATE + 37 LMP_VERSION_REQ + 38 LMP_VERSION_RES + 39 LMP_FEATURES_REQ + 40 LMP_FEATURES_RES + 41 LMP_QUALITY_OF_SERVICE + 42 LMP_QUALITY_OF_SERVICE_REQ + 43 LMP_SCO_LINK_REQ + 44 LMP_REMOVE_SCO_LINK_REQ + 45 LMP_MAX_SLOT + 46 LMP_MAX_SLOT_REQ + 47 LMP_TIMING_ACCURACY_REQ + 48 LMP_TIMING_ACCURACY_RES + 49 LMP_SETUP_COMPLETE + 50 LMP_USE_SEMI_PERMANENT_KEY + 51 LMP_HOST_CONNECTION_REQ + 52 LMP_SLOT_OFFSET + 53 LMP_PAGE_MODE_REQ + 54 LMP_PAGE_SCAN_MODE_REQ + 55 LMP_SUPERVISION_TIMEOUT + 56 LMP_TEST_ACTIVATE + 57 LMP_TEST_CONTROL + 58 LMP_ENC_KEY_SIZE_MASK_REQ + 59 LMP_ENC_KEY_SIZE_MASK_RES + 60 LMP_SET_AFH + + /* simple pairing support */ + 61 LMP_ENCAPSULATED_HEADER + 62 LMP_ENCAPSULATED_PAYLOAD + 63 LMP_SIMPLE_PAIRING_CONFIRM + 64 LMP_SIMPLE_PAIRING_NUMBER + 65 LMP_DHKEY_CHECK + 127 LMP_ESCAPE + 127 LMP_ESCAPE_4 /* add 2bytes LMP header support */ + ) + /* LMP EXT opcodes, ORed with bit 7 to make difference to nonEXT */ + ( + 129 LMP_EXT_ACCEPTED + 130 LMP_NOT_ACCEPTED_EXT + 131 LMP_EXT_FEATURES_REQ + 132 LMP_EXT_FEATURES_RES + 139 LMP_PACKET_TYPE_TABLE_REQ + 140 LMP_EXT_ESCO_LINK_REQ + 141 LMP_EXT_REMOVE_ESCO_REQ + 144 LMP_EXT_CHN_CLASSIFICATION_REQ + 145 LMP_EXT_CHN_CLASSIFICATION + 149 LMP_SNIFF_SUBRATING_REQ + 150 LMP_SNIFF_SUBRATING_RES + 151 LMP_PAUSE_ENCRYPTION_REQ + 152 LMP_RESUME_ENCRYPTION_REQ + 153 LMP_IO_CAP_REQ + 154 LMP_IO_CAP_RES + ) + /* LMP reason codes */ + ( + 0x05 AUTHENTICATION_FAILURE_ERROR + 0x06 KEY_MISSING + 0x0b ACL_CONNECTION_ALREADY_EXISTS + 0x13 OTHER_END_TERMINATED + 0x15 ABOUT_TO_POEWR_OFF + 0x16 LOCAL_HOST + 0x18 PAIRING_NOT_ALLOWED + 0x19 UNKNOWN_LMP_PDU + 0x1A UNSUPPORTED_LMP_FEATURE + 0x1F UNSPECIFIED_ERROR + 0x20 UNSUPPORTED_PARAMETERS + 0x21 SWITCH_NOT_ALLOWED + 0x23 TRANSACTION_COLLISION + 0x24 PDU_NOT_ALLOWED + 0x25 ENCRYPTION_MODE_NOT_ACCEPTABLE + 0x2e NOT_SUPPORT_CHN_CLASSIFICATION + 0x37 NOT_SUPPORT_SSP + ) + + /* test mode scenarios */ + ( + 0 PAUSE_TEST_MODE + 1 ZERO_PATTERN + 2 ONE_PATTERN + 3 ALT_PATTERN + 4 PSEUDORANDOM + 5 CLOSED_LOOP_BACK_ACL + 6 CLOSED_LOOP_BACK_SCO + 7 ACL_WITHOUT_WHITENING + 8 SCO_WITHOUT_WHITENING + 9 ALT2_PATTERN + 255 EXIT_TEST_MODE + ) + /* test mode hoppig modes */ + ( + 0 FIXED_FREQ + 1 NORMAL_HOP + ) + + /* mem_lmp_tid indicates which type of LMP will be sent */ + ( + 0 TID_NORM_REPLY + 1 TID_NORM_SEND + 2 TID_ONE + 3 TID_ZERO + 4 TID_PAIRING + 5 TID_ENCRYPTION + 6 TID_VARIABLE + 7 TID_RX + ) + + /* ============== lmp status ==========*/ + ( + 0 lmp_incoming + 1 lmp_outgoing + 2 lmp_reject_msg + 3 lmp_clear_msg + 4 upper_reject_msg + 5 upper_clear_msg + ) + +( +0x2ee00 TIMER_ONE_MINUTE //96000*2 +80 TIMER_SWITCH_WAITE +12 TIMER_ENPT_WAITE +) + +( +0 SWITCH_FLAG_INIT +1 SWITCH_FLAG_ACCEPT +2 SWITCH_FLAG_NOT_ACCEPT +) +( +0 NULL_ENCRYP +1 DONE_ENCRYP +) + +// +// +//Large memory blocks defined in this file. +//Blocks Shall be defined with absolute address. +//Blocks' length Shall be specified in comment following Blocks' names. +//Different blocks MAY be overlap. +//Blocks defined in this file Shall NOT be overlap with variable in memmap.format. + +// USB C51 exchange area +( +0xff0 mem_mcmd +0xff1 mem_mouse_data +) + +//l2cap RX buffers +( +0x1000 mem_l2cap_rxbuff1 //0x400 +0x1400 mem_l2cap_rxbuff2 //0x400 +//end address:0x17ff +) +//l2cap TX buffers +( +0x1800 mem_tx_buff0 //128 +0x1880 mem_tx_buff1 //128 +0x1900 mem_tx_buff2 //128 +0x1980 mem_tx_buff3 //128 +0x1a00 mem_tx_buff4 //128 +0x1a80 mem_tx_buff5 //128 +0x1b00 mem_tx_buff6 //128 +0x1b80 mem_tx_buff7 //128 +//end address: 0x1bff +) + +( +0x1800 mem_le_tx_buffer0 +0x1900 mem_le_tx_buffer1 +0x1a00 mem_le_tx_buffer2 +0x1b00 mem_le_tx_buffer3 +//end addr:0x1dff +) + + +//uart buffer +( +0x1800 mem_h5rx_buf//0x400 +0x1bff mem_h5rx_buf_end +0x1c00 mem_h5tx_buf +0x1fff mem_h5tx_buf_end +) + +( +0x4c00 mem_module_rx_buf//0x400 +0x4c00 mem_module_rx_buf_little +0x4fff mem_module_rx_buf_end +0x1c00 mem_module_tx_buf +0x1fff mem_module_tx_buf_end +) + +( +0x1800 mem_ir_record +0x1c mem_ir_record_max +) + + + +( + 0 patch00_0 + 1 patch00_1 + 2 patch00_2 + 3 patch00_3 + 4 patch00_4 + 5 patch00_5 + 6 patch00_6 + 7 patch00_7 + 8 patch01_0 + 9 patch01_1 + 10 patch01_2 + 11 patch01_3 + 12 patch01_4 + 13 patch01_5 + 14 patch01_6 + 15 patch01_7 + 16 patch02_0 + 17 patch02_1 + 18 patch02_2 + 19 patch02_3 + 20 patch02_4 + 21 patch02_5 + 22 patch02_6 + 23 patch02_7 + 24 patch03_0 + 25 patch03_1 + 26 patch03_2 + 27 patch03_3 + 28 patch03_4 + 29 patch03_5 + 30 patch03_6 + 31 patch03_7 + 32 patch04_0 + 33 patch04_1 + 34 patch04_2 + 35 patch04_3 + 36 patch04_4 + 37 patch04_5 + 38 patch04_6 + 39 patch04_7 + 40 patch05_0 + 41 patch05_1 + 42 patch05_2 + 43 patch05_3 + 44 patch05_4 + 45 patch05_5 + 46 patch05_6 + 47 patch05_7 + 48 patch06_0 + 49 patch06_1 + 50 patch06_2 + 51 patch06_3 + 52 patch06_4 + 53 patch06_5 + 54 patch06_6 + 55 patch06_7 + 56 patch07_0 + 57 patch07_1 + 58 patch07_2 + 59 patch07_3 + 60 patch07_4 + 61 patch07_5 + 62 patch07_6 + 63 patch07_7 + 64 patch08_0 + 65 patch08_1 + 66 patch08_2 + 67 patch08_3 + 68 patch08_4 + 69 patch08_5 + 70 patch08_6 + 71 patch08_7 + 72 patch09_0 + 73 patch09_1 + 74 patch09_2 + 75 patch09_3 + 76 patch09_4 + 77 patch09_5 + 78 patch09_6 + 79 patch09_7 + 80 patch0a_0 + 81 patch0a_1 + 82 patch0a_2 + 83 patch0a_3 + 84 patch0a_4 + 85 patch0a_5 + 86 patch0a_6 + 87 patch0a_7 + 88 patch0b_0 + 89 patch0b_1 + 90 patch0b_2 + 91 patch0b_3 + 92 patch0b_4 + 93 patch0b_5 + 94 patch0b_6 + 95 patch0b_7 + 96 patch0c_0 + 97 patch0c_1 + 98 patch0c_2 + 99 patch0c_3 + 100 patch0c_4 + 101 patch0c_5 + 102 patch0c_6 + 103 patch0c_7 + 104 patch0d_0 + 105 patch0d_1 + 106 patch0d_2 + 107 patch0d_3 + 108 patch0d_4 + 109 patch0d_5 + 110 patch0d_6 + 111 patch0d_7 + 112 patch0e_0 + 113 patch0e_1 + 114 patch0e_2 + 115 patch0e_3 + 116 patch0e_4 + 117 patch0e_5 + 118 patch0e_6 + 119 patch0e_7 + 120 patch0f_0 + 121 patch0f_1 + 122 patch0f_2 + 123 patch0f_3 + 124 patch0f_4 + 125 patch0f_5 + 126 patch0f_6 + 127 patch0f_7 + 128 patch10_0 + 129 patch10_1 + 130 patch10_2 + 131 patch10_3 + 132 patch10_4 + 133 patch10_5 + 134 patch10_6 + 135 patch10_7 + 136 patch11_0 + 137 patch11_1 + 138 patch11_2 + 139 patch11_3 + 140 patch11_4 + 141 patch11_5 + 142 patch11_6 + 143 patch11_7 + 144 patch12_0 + 145 patch12_1 + 146 patch12_2 + 147 patch12_3 + 148 patch12_4 + 149 patch12_5 + 150 patch12_6 + 151 patch12_7 + 152 patch13_0 + 153 patch13_1 + 154 patch13_2 + 155 patch13_3 + 156 patch13_4 + 157 patch13_5 + 158 patch13_6 + 159 patch13_7 + 160 patch14_0 + 161 patch14_1 + 162 patch14_2 + 163 patch14_3 + 164 patch14_4 + 165 patch14_5 + 166 patch14_6 + 167 patch14_7 + 168 patch15_0 + 169 patch15_1 + 170 patch15_2 + 171 patch15_3 + 172 patch15_4 + 173 patch15_5 + 174 patch15_6 + 175 patch15_7 + 176 patch16_0 + 177 patch16_1 + 178 patch16_2 + 179 patch16_3 + 180 patch16_4 + 181 patch16_5 + 182 patch16_6 + 183 patch16_7 + 184 patch17_0 + 185 patch17_1 + 186 patch17_2 + 187 patch17_3 + 188 patch17_4 + 189 patch17_5 + 190 patch17_6 + 191 patch17_7 + 192 patch18_0 + 193 patch18_1 + 194 patch18_2 + 195 patch18_3 + 196 patch18_4 + 197 patch18_5 + 198 patch18_6 + 199 patch18_7 + 200 patch19_0 + 201 patch19_1 + 202 patch19_2 + 203 patch19_3 + 204 patch19_4 + 205 patch19_5 + 206 patch19_6 + 207 patch19_7 + 208 patch1a_0 + 209 patch1a_1 + 210 patch1a_2 + 211 patch1a_3 + 212 patch1a_4 + 213 patch1a_5 + 214 patch1a_6 + 215 patch1a_7 + 216 patch1b_0 + 217 patch1b_1 + 218 patch1b_2 + 219 patch1b_3 + 220 patch1b_4 + 221 patch1b_5 + 222 patch1b_6 + 223 patch1b_7 + 224 patch1c_0 + 225 patch1c_1 + 226 patch1c_2 + 227 patch1c_3 + 228 patch1c_4 + 229 patch1c_5 + 230 patch1c_6 + 231 patch1c_7 + 232 patch1d_0 + 233 patch1d_1 + 234 patch1d_2 + 235 patch1d_3 + 236 patch1d_4 + 237 patch1d_5 + 238 patch1d_6 + 239 patch1d_7 + 240 patch1e_0 + 241 patch1e_1 + 242 patch1e_2 + 243 patch1e_3 + 244 patch1e_4 + 245 patch1e_5 + 246 patch1e_6 + 247 patch1e_7 + 248 patch1f_0 + 249 patch1f_1 + 250 patch1f_2 + 251 patch1f_3 + 252 patch1f_4 + 253 patch1f_5 + 254 patch1f_6 + 255 patch1f_7 + 0 patch20_0 + 1 patch20_1 + 2 patch20_2 + 3 patch20_3 + 4 patch20_4 + 5 patch20_5 + 6 patch20_6 + 7 patch20_7 + 8 patch21_0 + 9 patch21_1 + 10 patch21_2 + 11 patch21_3 + 12 patch21_4 + 13 patch21_5 + 14 patch21_6 + 15 patch21_7 + 16 patch22_0 + 17 patch22_1 + 18 patch22_2 + 19 patch22_3 + 20 patch22_4 + 21 patch22_5 + 22 patch22_6 + 23 patch22_7 + 24 patch23_0 + 25 patch23_1 + 26 patch23_2 + 27 patch23_3 + 28 patch23_4 + 29 patch23_5 + 30 patch23_6 + 31 patch23_7 + 32 patch24_0 + 33 patch24_1 + 34 patch24_2 + 35 patch24_3 + 36 patch24_4 + 37 patch24_5 + 38 patch24_6 + 39 patch24_7 + 40 patch25_0 + 41 patch25_1 + 42 patch25_2 + 43 patch25_3 + 44 patch25_4 + 45 patch25_5 + 46 patch25_6 + 47 patch25_7 + 48 patch26_0 + 49 patch26_1 + 50 patch26_2 + 51 patch26_3 + 52 patch26_4 + 53 patch26_5 + 54 patch26_6 + 55 patch26_7 + 56 patch27_0 + 57 patch27_1 + 58 patch27_2 + 59 patch27_3 + 60 patch27_4 + 61 patch27_5 + 62 patch27_6 + 63 patch27_7 + 64 patch28_0 + 65 patch28_1 + 66 patch28_2 + 67 patch28_3 + 68 patch28_4 + 69 patch28_5 + 70 patch28_6 + 71 patch28_7 + 72 patch29_0 + 73 patch29_1 + 74 patch29_2 + 75 patch29_3 + 76 patch29_4 + 77 patch29_5 + 78 patch29_6 + 79 patch29_7 + 80 patch2a_0 + 81 patch2a_1 + 82 patch2a_2 + 83 patch2a_3 + 84 patch2a_4 + 85 patch2a_5 + 86 patch2a_6 + 87 patch2a_7 + 88 patch2b_0 + 89 patch2b_1 + 90 patch2b_2 + 91 patch2b_3 + 92 patch2b_4 + 93 patch2b_5 + 94 patch2b_6 + 95 patch2b_7 + 96 patch2c_0 + 97 patch2c_1 + 98 patch2c_2 + 99 patch2c_3 + 100 patch2c_4 + 101 patch2c_5 + 102 patch2c_6 + 103 patch2c_7 + 104 patch2d_0 + 105 patch2d_1 + 106 patch2d_2 + 107 patch2d_3 + 108 patch2d_4 + 109 patch2d_5 + 110 patch2d_6 + 111 patch2d_7 + 112 patch2e_0 + 113 patch2e_1 + 114 patch2e_2 + 115 patch2e_3 + 116 patch2e_4 + 117 patch2e_5 + 118 patch2e_6 + 119 patch2e_7 + 120 patch2f_0 + 121 patch2f_1 + 122 patch2f_2 + 123 patch2f_3 + 124 patch2f_4 + 125 patch2f_5 + 126 patch2f_6 + 127 patch2f_7 + 128 patch30_0 + 129 patch30_1 + 130 patch30_2 + 131 patch30_3 + 132 patch30_4 + 133 patch30_5 + 134 patch30_6 + 135 patch30_7 + 136 patch31_0 + 137 patch31_1 + 138 patch31_2 + 139 patch31_3 + 140 patch31_4 + 141 patch31_5 + 142 patch31_6 + 143 patch31_7 + 144 patch32_0 + 145 patch32_1 + 146 patch32_2 + 147 patch32_3 + 148 patch32_4 + 149 patch32_5 + 150 patch32_6 + 151 patch32_7 + 152 patch33_0 + 153 patch33_1 + 154 patch33_2 + 155 patch33_3 + 156 patch33_4 + 157 patch33_5 + 158 patch33_6 + 159 patch33_7 + 160 patch34_0 + 161 patch34_1 + 162 patch34_2 + 163 patch34_3 + 164 patch34_4 + 165 patch34_5 + 166 patch34_6 + 167 patch34_7 + 168 patch35_0 + 169 patch35_1 + 170 patch35_2 + 171 patch35_3 + 172 patch35_4 + 173 patch35_5 + 174 patch35_6 + 175 patch35_7 + 176 patch36_0 + 177 patch36_1 + 178 patch36_2 + 179 patch36_3 + 180 patch36_4 + 181 patch36_5 + 182 patch36_6 + 183 patch36_7 + 184 patch37_0 + 185 patch37_1 + 186 patch37_2 + 187 patch37_3 + 188 patch37_4 + 189 patch37_5 + 190 patch37_6 + 191 patch37_7 + 192 patch38_0 + 193 patch38_1 + 194 patch38_2 + 195 patch38_3 + 196 patch38_4 + 197 patch38_5 + 198 patch38_6 + 199 patch38_7 + 200 patch39_0 + 201 patch39_1 + 202 patch39_2 + 203 patch39_3 + 204 patch39_4 + 205 patch39_5 + 206 patch39_6 + 207 patch39_7 + 208 patch3a_0 + 209 patch3a_1 + 210 patch3a_2 + 211 patch3a_3 + 212 patch3a_4 + 213 patch3a_5 + 214 patch3a_6 + 215 patch3a_7 + 216 patch3b_0 + 217 patch3b_1 + 218 patch3b_2 + 219 patch3b_3 + 220 patch3b_4 + 221 patch3b_5 + 222 patch3b_6 + 223 patch3b_7 + 224 patch3c_0 + 225 patch3c_1 + 226 patch3c_2 + 227 patch3c_3 + 228 patch3c_4 + 229 patch3c_5 + 230 patch3c_6 + 231 patch3c_7 + 232 patch3d_0 + 233 patch3d_1 + 234 patch3d_2 + 235 patch3d_3 + 236 patch3d_4 + 237 patch3d_5 + 238 patch3d_6 + 239 patch3d_7 + 240 patch3e_0 + 241 patch3e_1 + 242 patch3e_2 + 243 patch3e_3 + 244 patch3e_4 + 245 patch3e_5 + 246 patch3e_6 + 247 patch3e_7 + 248 patch3f_0 + 249 patch3f_1 + 250 patch3f_2 + 251 patch3f_3 + 252 patch3f_4 + 253 patch3f_5 + 254 patch3f_6 + 255 patch3f_7 + +) +( + 0x8000 core_chipid + 0x8003 core_kick + 0x8005 core_lpm_wr + 0x8006 core_misc_ctrl + 0x8007 core_otp_rdata + 0x8009 core_pcmoutfifo + 0x8010 core_reset + 0x8011 core_encrypt + 0x8015 core_uart_txd + 0x8022 core_ucode_hi + 0x8023 core_ucode_ctrl + 0x8024 core_ucode_low + 0x8025 core_ucode_data + 0x8040 core_halfslot + 0x8042 core_clksel + 0x8043 core_uart_clksel + 0x8043 core_config + 0x8044 core_xtal_stable_time + 0x8045 core_otp_addr + 0x8046 core_otp_din + 0x8047 core_otp_ctrl + 0x8048 core_otpd_addr + 0x804a core_otpd_len + 0x804b core_otpd_ctrl + 0x804c core_lpm_reg + 0x804f core_lpm_isogate + 0x8050 core_clkoff + 0x8052 core_uart_baud + 0x8054 core_uart_rsaddr + 0x8056 core_uart_readdr + 0x8058 core_uart_rrptr + 0x805a core_uart_tsaddr + 0x805c core_uart_teaddr + 0x805e core_uart_twptr + 0x8060 core_uart_trptrp + 0x8062 core_uart_ctrl + 0x8063 core_bist_ctrl + 0x8064 core_pwm_pcnt3 + 0x8066 core_pwm_ncnt3 + 0x8068 core_pwm_pcnt4 + 0x806a core_pwm_ncnt4 + 0x806c core_pwm_pcnt5 + 0x806e core_pwm_ncnt5 + 0x8070 core_gpio_oe0 + 0x8071 core_gpio_oe1 + 0x8072 core_gpio_oe2 + 0x8073 core_gpio_oe3 + 0x8074 core_gpio_out0 + 0x8075 core_gpio_out1 + 0x8076 core_gpio_out2 + 0x8077 core_gpio_out3 + 0x8078 core_gpio_pu0 + 0x8079 core_gpio_pu1 + 0x807a core_gpio_pu2 + 0x807b core_gpio_pu3 + 0x807c core_gpio_pd0 + 0x807d core_gpio_pd1 + 0x807e core_gpio_pd2 + 0x807f core_gpio_pd3 + 0x8080 core_gpio_sel + 0x8081 core_gpio_sel1 + 0x8082 core_gpio_sel2 + 0x8083 core_gpio_key0 + 0x8084 core_gpio_key1 + 0x8085 core_gpio_key2 + 0x8086 core_spid_ctrl + 0x8087 core_spid_delay + 0x8088 core_spid_txlen + 0x808a core_spid_txaddr + 0x808c core_spid_rxaddr + 0x808e core_spid_rxlen + 0x8090 core_iicd_ctrl + 0x8091 core_iicd_scl_low + 0x8092 core_iicd_scl_high + 0x8093 core_iicd_start_setup + 0x8094 core_iicd_start_hold + 0x8095 core_iicd_stop_setup + 0x8096 core_iicd_data_setup + 0x8097 core_iicd_data_hold + 0x8098 core_iicd_txlen + 0x809a core_iicd_txaddr + 0x809c core_iicd_rxaddr + 0x809e core_iicd_rxlen + 0x80a0 core_pwm_pcnt0 + 0x80a2 core_pwm_ncnt0 + 0x80a4 core_pwm_pcnt1 + 0x80a6 core_pwm_ncnt1 + 0x80a8 core_pwm_pcnt2 + 0x80aa core_pwm_ncnt2 + 0x80b0 core_enc_ctrl + 0x80b1 core_cvsd_ctrl + 0x80b2 core_codec_ctrl + 0x80b3 core_dec_ctrl + + + + + + 0x8108 core_misc_status + 0x8109 core_qdec_cntx + 0x810a core_qdec_cnty + 0x810b core_qdec_cntz + 0x810c core_uart_status + 0x810d core_uart_rbaud + 0x810e core_uart_txitems + 0x8110 core_uart_trptr + 0x8112 core_uart_rxitems + 0x8114 core_uart_rdptr + 0x8116 core_uart_rwptr + 0x8119 core_kscn_kstat + 0x811a core_kscn_event + 0x811b core_kscn_event_num + 0x811c core_gpio_in + 0x811d core_gpio_in1 + 0x8124 core_current_otp_addr + 0x8126 core_otpd_remain + 0x8128 core_spid_remain + 0x812a core_iicd_remain + 0x812c core_dma_status + 0x812d core_perf_status + 0x812e core_adc_in + 0x8134 core_pcminfifo + 0x8135 core_pcminfifo_remain + 0x8136 core_pcmoutfifo_remain + 0x8138 core_lpm_ctrl + 0x813c core_lpm_xtalcnt + 0x813d core_lpm_buckcnt + 0x813e core_lpm_ldocnt + 0x813f core_lpm_latch + 0x8140 core_gpio_wakeup_low + 0x8144 core_gpio_wakeup_high + 0x8149 core_clk_counter + 0x8150 core_adc_sum +// dummy regs + + 0x8203 core_ice_ctrl + 0x8204 core_ice_status + 0x8205 core_ice_break0 + 0x8207 core_ice_break1 + + 0x8280 core_docd_ctrl + 0x8288 core_docd_paddr + 0x828a core_docd_pdata + + 0x8300 iic_prer_low + 0x8301 iic_slave_addr + 0x8302 iic_ctr + 0x8303 iic_cr + 0x8304 iic_rxr + 0x8305 iic_txr + 0x8306 iic_sr + 0x8307 iic_fifo + + 0x8400 mem_b_box /* entire bank */ + 0x8500 mem_e_box /* entire bank */ + 0x8600 mem_l_box /* entire bank */ + + 0x8700 memk + + 0x8900 rfen_rx + 0x8901 rfen_tx + 0x8902 rfen_mdm + 0x8903 rfen_sn + 0x8904 rfen_msc + 0x8905 rfen_ck + 0x8906 rfen_adc + 0x8912 rf_agc_ctrl + 0x8914 rfen_ulp + 0x8973 rfen_chgpump + 0x894b rf_rx_vctrl_reg1 + 0x894c rf_rx_vctrl_reg2 + 0x894d rf_rx_ib_lna + 0x894e rf_rx_lna_ctrim + + 0x8950 rf_bpf_ctrim + 0x8951 rf_bpf_ib + 0x8952 rf_adc_rccal + 0x8952 rf_rccal_ctrl + 0x8953 rf_rccal_sel + 0x8955 rf_tx_pa + 0x895f rf_pll_rstn + 0x8964 rf_sdm_en + 0x8960 rf_pll_intg + 0x8961 rf_pll_frac + 0x8963 rf_pll_frachi + 0x896c rf_afc_cap + 0x8967 rf_clkpll_bias + 0x896f rf_clkpll_en + 0x8968 rf_clkpll_int + 0x8969 rf_clkpll_frac + 0x896d rf_balun_ctrim + 0x8971 rf_adc_mode + 0x8972 rf_adc_gc + 0x8973 rf_adc_ch + 0x8980 rf_rccal_result + 0x8981 rf_afc_d2a + 0x8982 rf_rssi + + +0x8a00 core_usb_config +0x8a01 core_usb_int_mask +0x8a04 core_usb_addr +0x8a10 core_usb_trig +0x8a11 core_usb_stall +0x8a12 core_usb_clear +0x8a18 core_usb_ep +0x8a18 core_usb_dfifo0 +0x8a19 core_usb_dfifo1 +0x8a1a core_usb_dfifo2 +0x8a20 core_usb_ep_len +0x8a26 core_usb_status +0x8a27 core_usb_fifo_empty +0x8a28 core_usb_fifo_full + + +4 rx_freq_offset +1 tx_freq_offset + +/* bit difinitions */ + 4 whiteoff_bit + 6 clksel_rc + 5 clksel_dpll + 4 clksel_xtal + 5 adc_rccal + 0 bpf_rccal + 1 demod_clkoff + +( + 2 reload_code + 3 gpio_latch + 4 enable_retmem + 7 cold_wake + 0xef isogate_mask + 0xe0 cs_mask +) + +// misc ctrl +( + 0x01 otpd_start + 0x02 spid_start + 0x04 iicd_start + 0x08 lock_otp + 0x10 x_sethi + 0x20 y_sethi + 0x40 z_sethi + 0x80 ccnt_start +) +// dma status bit +( + 0 otpd_crcok + 1 otpd_done + 2 spid_crcok + 3 spid_done + 4 iicd_crcok + 5 iicd_done + 6 iicd_ack +) + +0x8b uart_ctrl_default //BCSP +0x81 uart_ctrl_h4 //H4 +0x81 uart_ctrl_normal +0x91 uart_ctrl_5line +0x81 uart_ctrl_57600 +2 uart_baud_len +0x00 uartclk_crystal +0x01 uartclk_dpll +0x1a0 uart_baud_115200 +0xbb uart_baud_256000 +0x340 uart_baud_57600 +0x34 uart_baud_921600 +0x9c4 uart_baud_9600 +0x2dc6c00 uart_clk +0x16E3600 uart_clk_24 + +//core_clkoff +( + 0 CLOCK_OFF_AUTH_ROM + 1 CLOCK_OFF_UC_ROM + 2 CLOCK_OFF_DEBUG_UART + 3 CLOCK_OFF_SCHED_RAM + 4 CLOCK_OFF_TRANCE_FIFO + 5 CLOCK_OFF_CORDIC + 6 CLOCK_OFF_OTPD + 7 CLOCK_OFF_I2C + 8 CLICK_OFF_8051 + 9 CLOCK_OFF_KEYSCAN + 0x0a CLOCK_OFF_USB + 0x0b CLOCK_OFF_QDECODER + 0x0c CLOCK_OFF_SPI + 0x0d CLOCK_OFF_PWM + 0x0e CLOCK_OFF_CODEC + 0x0f CLOCK_OFF_UART +) + + +/*****************************************************************************/ +/* RCS HEADER -- DO NOT ERASE */ +/* $Author: Administrator $ */ +/* $Id: bt_rfcomm_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */ +/* Orisil Technology */ +/*****************************************************************************/ + +/**********/ +/* memory */ +/**********/ + +0x04ed memRemoteRPNBitRate +0x04ee memRemotePRNDataBits +0x04ef memRemotePRNStopBit +0x04f0 memRemotePRNParity +0x04f1 memRemotePRNFlowControl +0x04f2 memRemotePRNXon +0x04f3 memRemotePRNXoff +0x04f4 mem_mod2div_temp +0x04f7 mem_contw_temp +0x04f9 mem_attrib_list +0x04fb mem_current_adss +0x04fc mem_current_channel +0x04fd mem_current_frame_type +0x04fe mem_current_fcs +0x04ff mem_current_length +0x0501 mem_rfcomm_uih_payload_ptr +0x0503 mem_uih_cmd_type +0x0504 mem_uih_length +0x0506 mem_param_payload_ptr +0x0508 mem_ms_param +0x0509 mem_pn_credit_flow_type_info +0x050a mem_pn_priority +0x050b mem_pn_acknowledg_timer +0x050c mem_pn_max_retrans +0x050d mem_rfcomm_send_adss +0x050e mem_rfcomm_send_frame_type +0x050f mem_rfcomm_send_fcs +0x0510 mem_rfcomm_send_offset + + + +( +0 CREDIT_DISABLE +1 CREDIT_ENABLE +) + + +/************************************************************************/ + + + +/************/ +/* constant */ +/************/ + +/* RFCOMM state for Headset (memRFCOMM_State) */ + ( + 0 RFCOMM_IDLE /* before the responsor HS receive SABM */ + 1 RFCOMM_W4_DLCI0_OPEN + 2 RFCOMM_W4_DLCI0_CLOSE + 3 RFCOMM_START_DLCI0 /* After respond SABM frame (DLCI=0) */ + 4 RFCOMM_W4_DLCI_OPEN + 5 RFCOMM_W4_DLCI_CLOSE + 6 RFCOMM_DLCI_OPENED + + ) + +/* RFCOMM timer constants */ + ( + 1000 RFCOMM_T1 /* Used by SABM and DISC frames,100*20ms = 20s */ + 1000 RFCOMM_T2 /* Used by commands send in UIH on DLCI0, */ + 300 RFCOMM_T3_RINGON /* 6s for ring fade time */ + + ) + +/* Command Type */ + ( + 0x3F RSP_RX_SABM /*responsor expect SABM from initiator */ + 0x3F INI_TX_SABM + + 0x73 RSP_TX_UA /*responsor send out UA command */ + 0x73 UA_WFBIT_SET /* UA control field with F bit set */ + + 0xEF RSP_RX_UIH /*responsor expect UIH from initiator */ + + 0xEF RSP_TX_UIH /*responsor send UIH to initiator */ + + 0x1F RSP_TX_DM /*responsor send DM to initiator */ + 0x1F DM_WFBIT_SET /* DM control field with F bit set */ + 0x0F DM_WFBIT_CLEAR /* DM control field with F bit clear */ + + 0x53 RSP_RX_DISC /*responsor expect DISC from initiator */ + 0x53 INI_TX_DISC /*initiator send DISC control type command */ + + 0xFF RSP_RX_UIH_WDATA /*UIH data with credit flow control info */ + + + ) + +/* Multiplexor commands and responses frames */ + ( + 0x83 PN_COMMAND /* Bit 0 EA C/R Type = 000001 */ + 0x81 PN_RESPONSOR /* Bit 0 EA C/R Type = 000001 */ + + 0xE3 MSC_COMMAND /* Bit 0 EA C/R Type = 000111 */ + 0xE1 MSC_RESPONSOR + + 0x13 NSC_COMMAND /* Bit 0 EA C/R Type = 001000 */ + 0x11 NSC_RESPONSOR /* Bit 0 EA C/R Type = 001000 */ + + 0x23 TEST_COMMAND /* Bit 0 EA C/R Type = 000111 */ + 0x21 TEST_RESPONSOR + + 0x93 RPN_COMMAND /* Bit 0 EA C/R Type = 001001 */ + 0x91 RPN_RESPONSOR + + 0x53 RLS_COMMAND /* Bit 0 EA C/R Type = 001010 */ + 0x51 RLS_RESPONSOR + + 0xA3 FCON_COMMAND /* Bit 0 EA C/R Type = 000101 */ + 0xA1 FCON_RESPONSOR + + 0x63 FCOFF_COMMAND /* Bit 0 EA C/R Type = 000110 */ + 0x61 FCOFF_RESPONSOR + + 0x03 RLS_OVERRUN + 0x05 RLS_PARITY_ERROR + 0x09 RLS_FRAMING_ERROR + ) + +/* memLocalCredit */ + ( + 0x01 RFCOMM_CREDIT + ) + + ( + 0x007f RFCOMM_MAX_FRAME_SIZE + ) + +/* UIH received Data length */ + ( + 0 LENGTH_ZERO + + 6 LENGTH_OK + 7 LENGTH_HOT + 8 LENGTH_RING + 9 LENGTH_ERROR + 9 LENGTH_AGVOL_ONEBYTE + 10 LENGTH_AGVOL_TWOBYTE + 10 LENGTH_VOL_ONEBYTE + 11 LENGTH_VOL_TWOBYTE + 12 LENGTH_BRSF + 13 LENGTH_PLUS_CIEV + 15 LENGTH_INBANDRING + 14 LENGTH_CIEV_CALL + 17 LENGTH_CRING + 20 LENGTH_BRSF_OK + 24 LENGTH_CIND0 + 28 LENGTH_CIEV_TWO + 32 LENGTH_CIND_OK + 59 LENGTH_CIND_OK2 + 100 LENGTH_DISCARD + ) + +/************/ +/* flags */ +/************/ + +/* memRFCOMM_L2CAP_Interface */ + ( + 0 RFCOMM_TX_W4BUF_FLAG /* Wait for Tx buffer empty flag */ + 1 RFCOMM_CLOSE_LINK_FLAG + ) + + + +/* memRemoteMSC */ + ( + 0 MSC_EA_BIT + 1 MSC_FC_BIT + 2 MSC_RTC_BIT + 3 MSC_RTR_BIT + 6 MSC_IC_BIT + 7 MSC_DV_BIT + ) + +/* memRemoteRLS */ + ( + 0x0C OVERRUN_ERROR + 0x0A PARITY_ERROR + 0x09 FRAMING_RERROR + ) + +/* memRemoteRPNBitRate */ + ( + 0x00 BITS2400 + 0x01 BITS4800 + 0x02 BITS7200 + 0x03 BITS9600 + 0x04 BITS19200 + 0x05 BITS38400 + 0x06 BITS57600 + 0x07 BITS115200 + 0x08 BITS230400 + ) + +/* memRemotePRNDataBits */ + ( + 0x00 DATABITS5 + 0x01 DATABITS6 + 0x02 DATABITS7 + 0x03 DATABITS8 + ) + +/* memRemotePRNStopBit */ + ( + 0 ONESTOP + 1 ONEHALFSTOP + ) + +/* memRemotePRNParity */ + ( + 0 ODDPARITY + 1 EVENPARITY + 2 MARKPARITY + 3 SPACEPARITY + + 7 PARITY_ENABLE_BIT + ) + +/* RPN bit mask(in) */ + ( + 0 BIT_RATE_MASK_BIT + 1 DATA_BITS_MASK_BIT + 2 STOP_BITS_MASK_BIT + 3 PARITY_MASK_BIT + 4 PARITY_TYPE_MASK_BIT + 5 XON_CHAR_MASK_BIT + 6 XOFF_CHAR_MASK_BIT + ) + +/* RPN bit mask(in) 2 */ + ( + 0 XON_XOFF_INPUT_MASK_BIT + 1 XON_XOFF_OUTPUT_MASK_BIT + 2 RTR_INPUT_MASK_BIT + 3 RTR_OUTPUT_MASK_BIT + 4 RTC_INPUT_MASK_BIT + 5 RTC_OUTPUT_MASK_BIT + + ) + +/* memRFCOMM_Request */ + ( + 0 SEND_MSC_CMD_REQ_FLAG + 1 SEND_AT_CKPD_REQ_FLAG + 2 SEND_RING_REQ_FLAG + 3 SEND_SABM_CMD + ) + +/* memRFCOMM_Misc_Flag */ + ( + 0 MSC_CDM_ALREADY_SEND_FLAG + 1 CREDIT_FLOW_USED_FLAG + 2 DONT_EMBEDDED_CREDIT_FLAG + 3 MSC_EXCHANGE_DONE_FLAG + 4 FLOW_CONTROL_FCOFF_BIT /* set when receive FCoff, clear when FCon */ + ) + +/* memRemoteMSC */ + ( + 1 FLOW_CONTROL_FC_BIT /* received MSC FC bits */ + + ) +/* Address filed */ + ( + 0 ADDR_EA_BIT + 1 ADDR_CR_BIT + 2 ADDR_D_BIT + ) +//should be same as descripted in SDP +( + 1 SPP_SLAVE_CHANNEL + 7 OBEX_SERVER_CHANNEL + 8 HF_SERVER_CHANNEL + 9 HS_SERVER_CHANNEL +) +/* memRFCOMM_Flag */ +( + 0 USING_HF_PROFILE + 1 USING_HS_PROFILE + 2 USING_SPP_PROFILE +) +/*RFCOMM Frame Type*/ +( + 0x3f RFCOMM_FRAME_TYPE_SABM + 0x73 RFCOMM_FRAME_TYPE_UA + 0xEF RFCOMM_FRAME_TYPE_UIH + 0xFF RFCOMM_FRAME_TYPE_UIH_CREDITS + 0x53 RFCOMM_FRAME_TYPE_DISCONN +) +/*RFCOMM UIH CMD TYPE*/ +( + 0x41 UIH_PARAM_NEG_CMD + 0x40 UIH_PARAM_NEG_RES + 0x49 UIH_PARAM_CMD_REMOVE_PORT + 0x71 UIH_MODEM_STATUS_CMD + 0x70 UIH_MODEM_STATUS_RES +) + +/*bits in rfcomm address*/ +( + 0 RFCOMM_ADDRESS_EXT_LEN + 1 RFCOMM_ADDRESS_CR + 2 RFCOMM_ADDRESS_DERECTION + + +) + + ( + 0 RFCOMM_CHANNEL_STATE_PN_CMD + 1 RFCOMM_CHANNEL_STATE_PN_RES + 2 RFCOMM_CHANNEL_STATE_SABM + 3 RFCOMM_CHANNEL_STATE_UA + 4 RFCOMM_CHANNEL_STATE_SND_MS_CMD + 5 RFCOMM_CHANNEL_STATE_RCV_MS_CMD + 6 RFCOMM_CHANNEL_STATE_SND_MS_RES + 7 RFCOMM_CHANNEL_STATE_RCV_MS_RES + 0xff RFCOMM_CHANNEL_SETUP_COMPLETE + ) + + /*mem_rfcomm_send_more_pkt*/ + ( + 1 MORE_PKT_MSC_CMD_HF + 2 MORE_PKT_MSC_CMD_HS + 3 MORE_PKT_MSC_CMD_SPP + 4 MORE_PKT_MSC_CMD_OBEX + ) + + ( + 127 RFCOMM_MALLOC_SIZE + ) +0x0511 mem_sdp_mem_start +0x0511 mem_sdp_uuid_search_ptr +0x0519 mem_sdp_continue_byte +0x051b mem_sdp_pduid +0x051c mem_sdp_transactionid +0x051e mem_sdp_transactionid_local +0x0520 mem_sdp_attribute_maxbyte +0x0522 mem_sdp_record_maxcnt +0x0524 mem_sdp_record_handle +0x0528 mem_sdp_LACAP_found +0x0529 mem_sdp_RFCOMM_found +0x052a mem_sdp_handle_list +0x052a mem_sdp_attrib_list +0x054a mem_sdp_error_code +0x054c mem_sdp_all_length +0x054e mem_handle_humber +0x054f mem_search_uuid +0x0551 mem_sdp_mem_end +( +0 AGORHS_SERVICE +1 GENAUDIO_SERVICE +2 HANDSFREE_SERVICE +) +( +0 ATTRIBUTEID_0000 +1 ATTRIBUTEID_0001 +2 ATTRIBUTEID_0004 +3 ATTRIBUTEID_0009 +4 ATTRIBUTEID_0100 +5 ATTRIBUTEID_0302 +6 ATTRIBUTEID_0006 +7 ATTRIBUTEID_0311 +) + +( +0x01 SDP_ERROR_RES +0x02 SDP_SEARCH_REQ +0x03 SDP_SEARCH_RES +0x04 SDP_ATTRIBUTE_REQ +0x05 SDP_ATTRIBUTE_RES +0x06 SDP_SEARCHATTRIB_REQ +0x07 SDP_SEARCHATTRIB_RES +) +0x2600 sdp_max_amount +250 SDP_MALLOC_SIZE +0x6e sdp_tid_spp //any number + +( +0x1f11 SDP_UUID_HS_AUDIO_GATEWAY +) + +( +0X09 SDP_ATTRIBUTE_ID +0x0a SDP_ATTRIBUTE_RANGE +) + +(//mem_sdp_handle_list +7 SDP_MAX_HANDLE_NUMBER +) + + + +0x0551 mem_rxbuf +0x0562 mem_random_number +0x0572 mem_round_key +0x0582 mem_kinit +0x0592 mem_input_store +0x05a2 mem_x +0x05b2 mem_y +0x05c1 mem_y15 +0x05c2 mem_key_store +0x05d3 mem_key_store_end +0x05d4 memp_ar_key +0x05d6 memp_ar_input +0x05d8 mem_ar_hround +0x05e2 mem_ec_infinite +0x05e3 mem_ec_loopc +0x05e5 mem_aes_cmac_data_length +0x05e6 memdat +0x05e6 mem_ax +0x05fe mem_ay +0x0616 mem_az +0x062e mem_bx +0x0646 mem_ax_256//32 bytes +0x0646 mem_by +0x065e mem_bz +0x0666 mem_ay_256// 32 bytes +0x0676 mem_cx +0x0686 mem_az_256// 32 bytes +0x068e mem_cy +0x06a5 mem_cy5 +0x06a6 mem_bx_256// 32 bytes +0x06a6 mem_cz +0x06be mem_k +0x06c6 mem_by_256// 31 bytes +0x06d6 mem_align +0x06e6 mem_bz_256//32 bytes +0x06e6 mem_tmp1 +0x06e6 memahbak +0x06fe mem_tmp5 +0x0706 mem_cx_256//32 bytes +0x0706 memahsave +0x0716 mem_tmp2 +0x0726 mem_cy_256// 32 bytes +0x0726 memahsave_end +0x0726 mem_addr_padding +0x0727 mem_addr_value/* 12 bytes */ +0x072e mem_tmp3 +0x072e mem_t1 +0x0733 mem_addr_value_end +0x0736 mem_addr_iocap_end +0x0745 mem_cy5_256// 1 byte +0x0746 mem_cz_256// 32 bytes +0x0746 mem_tmp0 +0x0746 mem_t0 +0x074e mem_tmp0a +0x075e mem_t2 +0x0766 mem_k_256//32 bytes +0x0776 mem_t3 +0x0786 mem_tmp1_256//32 bytes +0x078e mem_t7 +0x07a6 mem_tmp5_256 +0x07c6 mem_tmp2_256 +0x07e6 mem_tmp3_256 +0x07e6 mem_t1_256 +0x0806 mem_tmp0_256 +0x0806 mem_t0_256 +0x0826 mem_t2_256 +0x0846 mem_t3_256 +0x0866 mem_t7_256 +0x0886 mem_p +0x089e mem_a +0x08b6 mem_b +0x08ce mem_gx +0x08e6 mem_gy +0x08fe memh0 +0x091e mem_p_256 +0x093e mem_a_256 +0x095e mem_gx_256 +0x097e mem_gy_256 +0x099e mem_le_slat + + +/* simple pairing page */ + +0x09ae mem_sp_state_start +0x09ae mem_sp_state +0x09af mem_master_sp_state +0x09b0 mem_sp_flag +0x09b1 mem_master_sp_flag +0x09b2 mem_sp_calc +0x09b3 mem_sp_dh_ready +0x09b4 mem_sp_localsm +0x09b5 mem_pairing_auth +0x09b6 mem_sp_flag_start +0x09b6 mem_sp_local_key_send_count +0x09b7 mem_sp_remote_key_recv_count +0x09b8 mem_sp_remote_key_invalid +0x09b9 mem_sp_dhkey_invalid +0x09ba mem_gkey +0x09be mem_le_pubkey_remote_x_256 +0x09c6 mem_sp_pubkey_remote +0x09c6 mem_sp_pubkey_remote_x +0x09de mem_sp_pubkey_remote_x_end +0x09de mem_le_pubkey_remote_y_256 +0x09e6 mem_sp_pubkey_remote_y +0x09fe mem_le_dhkey_256 +0x0a06 mem_sp_dhkey +0x0a1e mem_sp_dhkey_end +0x0a1e mem_sp_random_local +0x0a2e mem_sp_random_local_end +0x0a2e mem_sp_random_remote +0x0a3e mem_sp_random_remote_end +0x0a3e memresult +0x0a3e mem_sp_calc_result +0x0a3e memh +0x0a42 memg +0x0a46 memf +0x0a4a meme +0x0a4e mem_sp_calc_result_high +0x0a4e memd +0x0a52 memc +0x0a56 memb +0x0a5a mema +0x0a5e mem_sp_check_result +0x0a6e mem_sp_confirm_remote +0x0a7e mem_sp_prarm_stack + +/* simple pairing status flag */ +( + 0x00 SP_FLAG_STANDBY + 0x01 SP_FLAG_COMMIT + 0x02 LE_SP_FLAG_COMMIT_256 + +) + +/* simple pairing calc flag */ +( + 0x00 SP_CALC_STANDBY + 0x01 SP_CALC_PUBKEY + 0x02 SP_CALC_DHKEY + 0x03 SP_CALC_PUBKEY_256 + 0x04 SP_CALC_DHKEY_256 +) + +/* simple pairing state */ +( + 0x00 SP_STAT_NULL + 0x01 SP_STAT_KEY_RECV + 0x02 SP_STAT_KEY_GENERATE + 0x03 SP_STAT_KEY_SEND + 0x04 SP_STAT_COMMIT_CALC + 0x05 SP_STAT_COMMIT_SEND + 0x06 SP_STAT_RANDOM_RECV + 0x07 SP_STAT_RANDOM_SEND + 0x08 SP_STAT_CONFIRM_RECV + 0x09 SP_STAT_CONFIRM_CHECK + 0x0A SP_STAT_CONFIRM_CALC + 0x0B SP_STAT_CONFIRM_SEND + 0x0C SP_STAT_LINK_KEY_CALC + 0x0F SP_STAT_DONE + 0x10 SP_STAT_FEATURE_EXT_SEND + 0x11 SP_STAT_GKEY_CALC + /*simple pairing master only*/ + 0x12 SP_MASTER_STAT_START_SKIP + 0x13 SP_MASTER_STAT_START_DONE + 0x14 SP_STAT_COMMITMENT_COMPARE + 0x15 SP_STATE_END +) + + +/* simple paring invalid flag */ +( + 0x00 SP_KEY_INVALID + 0x01 SP_KEY_VALID + 0x03 SP_KEY_VALID_256 + +) + +/* encapsulated defination for P-192 key */ +( + 0x01 ENCAPSULATED_MAJOR_TYPE_P192 + 0x01 ENCAPSULATED_MINOR_TYPE_P192 + 0x30 ENCAPSULATED_LEN_P192 +) + +/* bluetooth 2.1 support flag */ +( + 0x00 SIMPLE_PAIRING_ENABLE + 0x01 ENCRYPTION_PAUSE_ENABLE + 0x02 EXTENDED_INQUIRY_RESPOSE_ENABLE + 0x03 SNIFF_SUBRATING_ENABLE +) + +/*mem_sp_localsm*/ +( + 0x00 DEFAULT_STATEMACHINE + 0x01 LOCAL_STATEMACHINE +) + +( + 0x00 DEFALT_PAIRING_AUTH + 0x01 PAIRING_AUTH +) + +( +1 SSP_MODE_SSP_PIN_FLAG +2 SSP_MODE_PASSKEY_ENTRY_FLAG +3 SSP_MODE_JUST_WORK_FLAG +) + +(//ssp mode +0x040003 SSP_MODE_JUST_WORK_IO_CAP_DATA +0X040001 SSP_MODE_SSP_PIN_IO_CAP_DATA +0X040002 SSP_MODE_PASSKEY_IO_CAP_DATA +) + +( +0x00 DISPLAY_ONLY +0x01 DISPLAY_YESNO +0x02 KEYBOARD_ONLY +0x03 NO_INPUT_NO_OUTPUT +) + +( +7 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT +6 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT +0 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT +) +( +1 FLAG_PAIRING_STATE_PAIRING +0 FLAG_PAIRING_STATE_NOT_PAIRING +) + + +/*****************************************************************************/ +/* RCS HEADER -- DO NOT ERASE */ +/* $Author: Administrator $ */ +/* $Id: bt_ui_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */ +/************************************************************************/ + + + /* ========= memory ============== */ +0x0a8e mem_UI_data_txbuff_length +0x0a90 mem_ipc_skip_continue_proc +0x0a91 mem_ui_timer_temp//length 4 +0x0a91 mem_ipc_rega_temp + +/************/ +/* constant */ +/************/ + +//mem_ui_state_map +( +0 UI_STATE_BT_CONNECTED +1 UI_STATE_BT_SETUP_COMPLETE +2 UI_STATE_BT_HID_CONN +3 UI_STATE_BT_HID_HANDSHAKE +4 UI_STATE_BT_SPP_CONN +5 UI_STATE_BT_SNIFF +6 UI_STATE_BT_DISCOVERY +7 UI_STATE_BT_RECONNECT +8 UI_STATE_BT_SLAVE_ROLE +9 UI_STATE_BLE_CONNECTED +10 UI_STATE_BLE_WRITE_RCV +11 UI_STATE_BLE_ADV +12 UI_STATE_BTN_DOWN +) + +( +1 UI_STATE_SPP_NL_AUTO_DISCOVER + +) + +/* UI state for Headset (memui_HS_State) */ + ( + 0 UI_HEADSET_DISCONNECT + 1 UI_HEADSET_IDLE /* before the responsor HS receive SABM */ + 2 UI_HEADSET_W4CONNECT + 3 UI_HEADSET_RINGING + 4 UI_HEADSET_CONNECTED + 5 UI_HEADSET_PARING + ) +/* memui_BB_State */ +( + 0 UI_BB_OFF + 1 UI_BB_IDLE + 2 UI_BB_DISCOVERY + 3 UI_BB_CONNECTED_ACTIVE_NO_SCO + 4 UI_BB_CONNECTED_ACTIVE_WITH_SCO + 5 UI_BB_CONNECTED_ACTIVE_WAIT_SNIFF + 6 UI_BB_CONNECTED_SNIFF + 7 UI_BB_RECONNECT + 8 UI_BB_CONNECTED_SNIFF_WITH_SCO +) + +/************/ +/* flags */ +/************/ + +/* memui_Misc_Flags */ + ( + 5 NO_IDLE_TURN_OFF + 7 ANSWER_RING_FLAG /* 1 Answer,0 no*/ + ) + +/* mem_UI_SCH_Interface */ + ( + 0 UI_HS_PAIRING + 2 UI_REQ_CLOSE_RFCOMM + 3 UI_LINK_LOST + 4 UI_REQ_OPEN_SCO + 6 UI_REQ_CLOSE_SCO + ) + +/* memui_PassOverKey */ + ( + 0 ANSWER_RING_BIT + 0 AG_SEND_RING_BIT + 1 VOL_UP_BIT + 2 VOL_DOWN_BIT + 3 INI_CALL_BIT + 4 DAIL_LAST_CALL + 5 END_CALL_BIT + 6 NOKIA_VOICE_ACTIVE + 7 REJECT_CALL_BIT + ) + +/* memui_reconnect_mode */ +( + 0 NO_RECONNECTION + 1 RECONNECT_HID + 2 RECONNECT_HF + 3 RECONNECT_HS + 4 RECONNECT_HID_HF + 5 RECONNECT_HID_HS +) +/* memui_Commands */ +( +0 BT_CMD_STANDBY +1 BT_CMD_START_DISCOVERY +2 BT_CMD_STOP_DISCOVERY +3 BT_CMD_RECONNECT +4 BT_CMD_DISCONNECT +5 BT_CMD_ENTER_SNIFF +6 BT_CMD_EXIT_SNIFF +7 BT_CMD_ENTER_SNIFF_SUBRATING +8 BT_CMD_EXIT_SNIFF_SUBRATING +9 BT_CMD_SNIFF_TEST +10 BT_CMD_SET_PIN_CODE +11 BT_CMD_START_INQUIRY +12 BT_CMD_STOP_INQUIRY +13 BT_CMD_START_ADV +14 BT_CMD_STOP_ADV +15 BT_CMD_START_DIRECT_ADV +16 BT_CMD_STOP_DIRECT_ADV +17 BT_CMD_LE_DISCONNECT +18 BT_CMD_LE_UPDATE_CONN +19 BT_CMD_LED_OFF +20 BT_CMD_LED_ON +21 BT_CMD_LED_BLINK +22 BT_CMD_LE_START_CONN +23 BT_CMD_LE_START_SCAN +24 BT_CMD_LE_STOP_SCAN +25 BT_CMD_ENTER_HIBERNATE +27 BT_CMD_LE_SMP_SECURITY_REQUEST +29 BT_CMD_ROLE_SWITCH +30 BT_CMD_BB_RECONN_CANCEL +31 BT_CMD_STORE_RECONN_INFO_LE +32 BT_CMD_STORE_RECONN_INFO_BT +33 BT_CMD_DHKEY_NOT_ACCEPT +34 BT_CMD_START_24G +35 BT_CMD_STOP_24G +36 BT_CMD_PAIR_24G +37 BT_CMD_STORE_RECONN_INFO +) + +( +0x00 BT_EVT_NULL +0x01 BT_EVT_BB_CONNECTED +0x02 BT_EVT_BB_DISCONNECTED +0x03 BT_EVT_RECONN_STARTED +0x04 BT_EVT_RECONN_FAILED +0x05 BT_EVT_SETUP_COMPLETE +0x06 BT_EVT_HID_CONNECTED +0x07 BT_EVT_HID_DISCONNECTED +0x08 BT_EVT_SPP_CONNECTED +0x09 BT_EVT_SPP_DISCONNECTED +0x0A BT_EVT_PINCODE_REQ +0x0B BT_EVT_ENTER_SNIFF +0x0C BT_EVT_EXIT_SNIFF +0x0D BT_EVT_ENTER_SNIFF_SUB +0x0E BT_EVT_EXIT_SNIFF_SUB +0x0F BT_EVT_DISCOVERY_STOPED +0x10 BT_EVT_BUTTON_LONG_PRESSED +0x12 BT_EVT_HID_HANDSHAKE +0X13 BT_EVT_RECONN_PAGE_TIMEOUT +0x14 BT_EVT_LE_CONNECTED +0X15 BT_EVT_LE_DISCONNECTED +0x16 BT_EVT_ML2CAP_CONN_REFUSED +0x17 BT_EVT_BUTTON_ENTER_HIBERNATE +0x18 BT_EVT_LINKKEY_GENERATE +0x19 BT_EVT_SWITCH_NOT_ACCEPT +0x20 BT_EVT_SWITCH_ACCEPT +0x21 BT_EVT_SNIFF_NOT_ACCEPT +0x22 BT_EVT_SNIFF_ACCEPT +0x23 BT_EVT_UNSNIFF_ACCEPT +0x24 BT_EVT_UNSNIFF_NOT_ACCEPT +0x25 BT_EVT_BUTTON_ADJUST_DPI +0x26 BT_EVT_SEND_UNSNIFF_ACCEPT +0x27 BT_EVT_VIRTUAL_CABLE_UNPLUG +0x28 BT_EVT_LE_WRITE_REQUEST +0x29 BT_EVT_LE_ENC_INFO +0x2a BT_EVT_SWITCH_FAIL_MASTER +0x2b BT_EVT_SWITCH_SUCCESS_MASTER +0x2c BT_EVT_BUTTON_DOWN +0x2d BT_EVT_BUTTON_UP +0x2e BT_EVT_REMOTE_UNSNIFF +0x30 BT_EVT_LE_PAIRING_FAIL +0x31 BT_EVT_LE_PAIRING_SUCCESS +0x32 BT_EVT_LE_START_ENC +0X33 BT_EVT_LE_PAUSE_ENC +0X34 BT_EVT_LE_TK_GENERATE +0x35 BT_EVT_BT_GKEY_GENERATE +0x36 BT_EVT_BT_GET_PASSKEY +0x37 BT_EVT_BT_PAIRING_FAIL +0x38 BT_EVT_BT_PAIRING_SUCCESS +0x39 BT_EVT_24G_PAIRING_COMPLETE +0x3a BT_EVT_24G_ATTEMPT_FAIL +0x3b BT_EVT_LE_GKEY_GENERATE +0x3c BT_EVT_24G_ATTEMPT_SUCCESS +0x3d BT_EVT_STORE_NVRAM +0x3e BT_EVT_LE_PAIRING_COMPLETE +0x3F BT_EVT_LE_RECONNECT_COMPLETE +0x40 BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP +0x41 BT_EVT_LE_LTK_LOST +) +//switch +( +0 OFF +1 ON +) +/* memui_mem_lock */ +( + 0 MEM_UNLOCK + 1 MEM_LOCK +) +/* memui_flag0 */ +( + 0 UI_USER_DATA_FLAG + 1 UI_WII_WAITING_SLEEP + 2 UI_KEYBOARD_SNIFF_SKIP +) +/* mem_master_type */ +( + 0 MTYPE_HID_DEFAULT + 1 MTYPE_HID_SSP + 2 MTYPE_SPP +) + + ( + 0x01 RECIEVE_SDP_CONN_RES + 0x02 RECIEVE_SDP_CFG_REQ + 0x03 RECIEVE_SDP_CFG_RES + 0x04 RECIEVE_RFCOMM_CONN_RES + 0x05 RECIEVE_RFCOMM_CFG_REQ + 0x06 RECIEVE_RFCOMM_CFG_RES + 0x07 RECIEVE_HID_CTRL_CONN_RES + 0x08 RECIEVE_HID_CTRL_CFG_REQ + 0x09 RECIEVE_HID_CTRL_CFG_RES + 0x0A RECIEVE_HID_INT_CONN_RES + 0x0B RECIEVE_HID_INT_CFG_REQ + 0x0C RECIEVE_HID_INT_CFG_RES + 0x0D RECIEVE_AVCTP_CONN_RES + 0x0E RECIEVE_AVCTP_CFG_REQ + 0x0F RECIEVE_AVCTP_CFG_RES + 0x10 RECIEVE_AVDTP_SIGNAL_CONN_RES + 0x11 RECIEVE_AVDTP_SIGNAL_CFG_REQ + 0x12 RECIEVE_AVDTP_SIGNAL_CFG_RES + 0x13 RECIEVE_AVDTP_MEDIA_CONN_RES + 0x14 RECIEVE_AVDTP_MEDIA_CFG_REQ + 0x15 RECIEVE_AVDTP_MEDIA_CFG_RES + 0x16 RECIEVE_SS_REASULT_HS + 0x17 RECIEVE_SS_REASULT_HF + 0x18 RECIEVE_SS_REASULT_AVTARG + 0x19 RECIEVE_SS_REASULT_OBEX + 0x1A RECIEVE_DLCI0_UA + 0x1B RECIEVE_HS_PARAM_NEG_RES + 0x1C RECIEVE_HS_UA + 0x1D RECIEVE_HS_MODEM_STATUS_RES + 0x1E RECIEVE_HS_MODEm_STATUS_CMD + 0x1F RECIEVE_HF_PARAM_NEG_RES + 0x20 RECIEVE_HF_UA + 0x21 RECIEVE_HF_MODEM_STATUS_RES + 0x22 RECIEVE_HF_MODEm_STATUS_CMD + 0x23 RECIEVE_OBEX_PARAM_NEG_RES + 0x24 RECIEVE_OBEX_UA + 0x25 RECIEVE_OBEX_MODEM_STATUS_RES + 0x26 RECIEVE_OBEX_MODEm_STATUS_CMD + 0x27 RECIEVE_SPP_PARAM_NEG_RES + 0x28 RECIEVE_SPP_UA + 0x29 RECIEVE_SPP_MODEM_STATUS_RES + 0x2A RECIEVE_SPP_MODEm_STATUS_CMD + 0x2b RECIEVE_SDP_DISCONN_RES + ) + + + + ( + 0 UPPERSM_RP_IDLE + 1 UPPERSM_RP_SDP_CONN + 2 UPPERSM_RP_SDP_CONN_WAIT + 3 UPPERSM_RP_SDP_CFG + 4 UPPERSM_RP_SDP_CFG_WAIT + 5 UPPERSM_RP_SS_AVTARG + 6 UPPERSM_RP_SS_AVTARG_WAIT + 7 UPPERSM_RP_SS_OBEX + 8 UPPERSM_RP_SS_OBEX_WAIT + 9 UPPERSM_RP_SDP_DISCONN + 10 UPPERSM_RP_SDP_DISCONN_WAIT + 11 UPPERSM_RP_AVDTP_CONN_WAIT + 12 UPPERSM_RP_AVCTP_CONN + 13 UPPERSM_RP_AVCTP_CONN_WAIT + 14 UPPERSM_RP_AVCTP_CFG + 15 UPPERSM_RP_AVCTP_CFG_WAIT + 16 UPPERSM_RP_OBEX_CMD_PN + 17 UPPERSM_RP_OBEX_CMD_PN_WAIT + 18 UPPERSM_RP_OBEX_SABM + 19 UPPERSM_RP_OBEX_SABM_WAIT + 20 UPPERSM_RP_OBEX_CMD_MS + 21 UPPERSM_RP_OBEX_CMD_MS_WAIT + ) + ( /*mem_upper_sm_reconn*/ + 0 UPPERSM_RECONN_IDLE + 1 UPPERSM_RECONN_SDP_CONN + 2 UPPERSM_RECONN_SDP_CONN_WAIT + 3 UPPERSM_RECONN_SDP_CFG + 4 UPPERSM_RECONN_SDP_CFG_WAIT + 5 UPPERSM_RECONN_SS_HS + 6 UPPERSM_RECONN_SS_HS_WAIT + 7 UPPERSM_RECONN_SS_HF + 8 UPPERSM_RECONN_SS_HF_WAIT + 9 UPPERSM_RECONN_SS_AVTARG + 10 UPPERSM_RECONN_SS_AVTARG_WAIT + 11 UPPERSM_RECONN_SS_OBEX + 12 UPPERSM_RECONN_SS_OBEX_WAIT + 13 UPPERSM_RECONN_SDP_DISCONN + 14 UPPERSM_RECONN_SDP_DISCONN_WAIT + 15 UPPERSM_RECONN_HID_CTRL_CONN + 16 UPPERSM_RECONN_HID_CTRL_CONN_WAIT + 17 UPPERSM_RECONN_HID_CTRL_CFG + 18 UPPERSM_RECONN_HID_CTRL_CFG_WAIT + 19 UPPERSM_RECONN_HID_INT_CONN + 20 UPPERSM_RECONN_HID_INT_CONN_WAIT + 21 UPPERSM_RECONN_HID_INT_CFG + 22 UPPERSM_RECONN_HID_INT_CFG_WAIT + 23 UPPERSM_RECONN_RFCOMM_CONN + 24 UPPERSM_RECONN_RFCOMM_CONN_WAIT + 25 UPPERSM_RECONN_RFCOMM_CFG + 26 UPPERSM_RECONN_RFCOMM_CFG_WAIT + 27 UPPERSM_RECONN_RFCOMM_SABM + 28 UPPERSM_RECONN_RFCOMM_SABM_WAIT + 29 UPPERSM_RECONN_SPP_CMD_PN + 30 UPPERSM_RECONN_SPP_CMD_PN_WAIT + 31 UPPERSM_RECONN_SPP_SABM + 32 UPPERSM_RECONN_SPP_SABM_WAIT + 33 UPPERSM_RECONN_SPP_CMD_MS + 34 UPPERSM_RECONN_SPP_CMD_MS_WAIT + 35 UPPERSM_RECONN_HF_CMD_PN + 36 UPPERSM_RECONN_HF_CMD_PN_WAIT + 37 UPPERSM_RECONN_HF_SABM + 38 UPPERSM_RECONN_HF_SABM_WAIT + 39 UPPERSM_RECONN_HF_CMD_MS + 40 UPPERSM_RECONN_HF_CMD_MS_WAIT + 41 UPPERSM_RECONN_AVDTPs_CONN + 42 UPPERSM_RECONN_AVDTPs_CONN_WAIT + 43 UPPERSM_RECONN_AVDTPs_CFG + 44 UPPERSM_RECONN_AVDTPs_CFG_WAIT + 45 UPPERSM_RECONN_AVDTPm_CONN + 46 UPPERSM_RECONN_AVDTPm_CONN_WAIT + 47 UPPERSM_RECONN_AVDTPm_CFG + 48 UPPERSM_RECONN_AVDTPm_CFG_WAIT + 49 UPPERSM_RECONN_AVCTP_CONN + 50 UPPERSM_RECONN_AVCTP_CONN_WAIT + 51 UPPERSM_RECONN_AVCTP_CFG + 52 UPPERSM_RECONN_AVCTP_CFG_WAIT + 53 UPPERSM_RECONN_OBEX_CMD_PN + 54 UPPERSM_RECONN_OBEX_CMD_PN_WAIT + 55 UPPERSM_RECONN_OBEX_SABM + 56 UPPERSM_RECONN_OBEX_SABM_WAIT + 57 UPPERSM_RECONN_OBEX_CMD_MS + 58 UPPERSM_RECONN_OBEX_CMD_MS_WAIT + 59 UPPERSM_RECONN_SS_SPP + 60 UPPERSM_RECONN_SS_SPP_WAIT + ) + (/*mem_UI_profile_supported*/ + 0 support_HID + 1 support_A2DP + 2 support_AVRCP + 3 support_HF + 4 support_HS + 5 support_PBAP + 6 support_SPP + ) + /*mem_upper_sm_ss*/ + ( + 0 UPPERSM_SS_HS + 1 UPPERSM_SS_HF + 2 UPPERSM_SS_AVTARG + 3 UPPERSM_SS_OBEX + ) + + ( + 160 UI_HUNDRED_MILLISECOND_TIME + 0XFF UI_BUTTON_GPIO_DISABLE + ) + ( + 0x01 UI_BB_INCONNECT + 0x10 UI_BB_DISCONNECT + ) +( +0x00 UI_BUTTON_STATE_DOWN +0x01 UI_BUTTON_STATE_UP +) + +//mem_ipc_skip_continue_proc +( + 0 IPC_CONTINUE_PROCESS + 1 IPC_SKIP_CONTINUE_PROCESS +) + + +(//led style struct +0 LED_OFFSET_LED_TYPE +1 LED_OFFSET_BLINK_COUNT +2 LED_OFFSET_LED_GPIO +3 LED_OFFSET_ON_TIME +5 LED_OFFSET_OFF_TIME +7 LED_OFFSET_CB_LEDON +9 LED_OFFSET_CB_LEDOFF +11 LED_OFFSET_LENGTH +) + +(//LED state +0 UI_LED_STATE_BLINK_STOP +1 UI_LED_STATE_BLINK_START +2 UI_LED_STATE_LIGHTING +3 UI_LED_STATE_DARKING +4 UI_LED_STATE_BLINK_LIGHTING +5 UI_LED_STATE_BLINK_DARKING + +0xFF LED_INFINITE_FLASH_NUM + +) + + +/** +* @file:bt_utility_format.upper +* @author: lei.zhu +* utility header file. inlcude timer +* Copyright: (C)Hanlynn Technology +*/ + +0x0a95 mem_hold_contr +0x0a97 mem_hold_contw +0x0a99 mem_fifo_temp +0x0a9a mem_pdatatemp +0x0aa2 mem_temp//8 bytes +0x0aaa mem_timeup// 4 bytes +0x0aae mem_rega//4 bytes +0x0ab2 mem_regb//4 bytes +0x0ab6 mem_regc//3 bytes +0x0ab9 mem_contr//2 bytes +0x0abb mem_contw//2 bytes +0x0abd mem_wakup_from_power_flag +0x0abe mem_saved_gpio_in +0x0ac2 mem_shutter_random_mac_data_temp +0x0ac2 mem_shutter_config_data_temp +0x0ac2 mem_le_adv_channel_map_temp +0x0ac2 mem_le_data_len_temp//1byte +0x0ac2 mem_tx_fifo_map_temp +0x0ac2 mem_rpn_dlci//1byte +0x0ac2 mem_event_cmd_response_content//2byte +0x0ac2 mem_le_prand//16byte +0x0ac2 mem_AES_CMAC_k//16 bytes +0x0ac2 mem_regext_index//1 bytes +0x0ac2 mem_temp_block0 +0x0ac3 mem_le_data_temp//15bytes +0x0ac3 mem_temp_block1 +0x0ad2 mem_le_aes_128//16byte +0x0ad2 mem_regext//64 bytes +0x0ad2 mem_AES_CMAC_k1//16 bytes +0x0ad2 mem_temp_block2 +0x0ae2 mem_AES_CMAC_k2//16 bytes +0x0ae2 mem_temp_block3 +0x0af2 mem_AES_CMAC_temp// 16 bytes +0x0af2 mem_temp_block4 +0x0b02 mem_AES_CMAC_M_last// 16 bytes +0x0b02 mem_module_uart_cmd +0x0b03 mem_module_uart_opcode +0x0b04 mem_module_uart_len +0x0b05 mem_module_temp_nl_discard_packet +0x0b06 mem_temp_block5 +0x0b12 mem_le_mackey//16 bytes +0x0b12 mem_app_receive_temp +0x0b12 mem_key_value_temp +0x0b14 mem_key_value +0x0b16 mem_key_value_temp1 +0x0b17 mem_key_value_temp2 +0x0b18 mem_key_value_temp3 +0x0b19 mem_key_value_temp4 +0x0b1a mem_key_value_temp5 +0x0b1b mem_key_value_temp6 +0x0b1c mem_temp_block6 +0x0b22 mem_usb_status +0x0b23 mem_usb_fifo_empty +0x0b24 mem_usb_read_len +0x0b25 mem_usb_rxbuf +0x0b65 mem_bufptr +0x0b67 mem_remain +0x0b68 mem_devicedesc +0x0b7c mem_hidreportdesc_kb +0x0b7e mem_hidreportdesc_m +0x0b80 mem_confdesc +0x0be4 mem_string0 +0x0be9 mem_string1 +0x0c07 mem_string2 +0x0c47 mem_string3 +0x0c65 mem_usb_zero_packet +0x0c67 mem_usb_ones_packet +0x0c69 mem_usb_two_packet +0x0c6b mem_usb0_state +0x0c6c mem_usb_offline_check_gpio +0x0c6d mem_usb_tx_interval +0x0c6e mem_usb_clear_mem_start +0x0c6e mem_usb_setup +0x0c6e mem_usb_setup_bmRequestType +0x0c6f mem_usb_setup_bRequest +0x0c70 mem_usb_setup_bValue +0x0c71 mem_usb_setup_bValueH +0x0c72 mem_usb_setup_wIndex +0x0c74 mem_usb_setup_bLength +0x0c75 mem_usb_setup_bLengthH +0x0c76 mem_usb0_setup +0x0cb6 mem_usb0_set_report_data +0x0cf6 mem_usb0_get_report_data +0x0d36 mem_usb_state +0x0d37 mem_usb_tx_wait +0x0d38 mem_usb_tx_enable +0x0d39 mem_usb_remote_wakeup +0x0d3a mem_usb_clear_remote_wakeup +0x0d3b mem_usb_ep0_stall_status +0x0d3c mem_usb_ep1_stall_status +0x0d3d mem_usb_ep2_stall_status +0x0d3e mem_usb_ep3_stall_status +0x0d3f mem_dsc_info_data_pointer +0x0d41 mem_dsc_info_len +0x0d42 mem_usb0_data_ready_report +0x0d43 mem_usb_tx_win_enable +0x0d44 mem_usb_tx_mac_enable +0x0d45 mem_usb_device_enumeration_endflag +0x0d46 mem_usb_wakestate_onetime_flag +0x0d47 mem_usb_mac_wakeup_trig +0x0d48 mem_usb_set_high_addr_flag +0x0d49 mem_usb_set_protocol_value +0x0d4a mem_usb_set_protocol_status +0x0d4b mem_usb_get_protocol_flag +0x0d4c mem_usb_idle_flag +0x0d4d mem_usb_idle_rate +0x0d4e mem_usb_setup_bValue_temp +0x0d50 mem_usb0_get_set_report +0x0d51 mem_usb_ep1_data +0x0d52 mem_usb_ep2_data +0x0d53 mem_usb_clear_halt +0x0d54 mem_usb_mouse_data +0x0d64 mem_usb_kb_data +0x0d74 mem_usb_kb_multikey +0x0d84 mem_usb_kb_data_sta_data +0x0d8c mem_usb_kb_data_last_data +0x0d94 mem_usb_kb_multikey_sta_data +0x0d97 mem_usb_kb_multikey_last_data +0x0d9a mem_usb_kb_blank_data_enable +0x0d9b mem_usb_kb_mul_blank_data_enable +0x0d9c mem_usb_test_cnt +0x0d9d mem_usb_clear_mem_end +0x0d9d mem_usb_test_kb +0x0d9e mem_rssi_noise_buffer +0x0e9e mem_rssi_noise_dg_buffer +0x0f9e mem_rssi_noise_ms_buffer +0x109e mem_rssi_noise_kb_buffer +0x119e mem_24g_common_temp + + +( +/*mem_util_timer_flag0_7*/ + 0 UTIL_TIMER_0_USED + 1 UTIL_TIMER_1_USED + 2 UTIL_TIMER_2_USED + 3 UTIL_TIMER_3_USED + 4 UTIL_TIMER_4_USED + 5 UTIL_TIMER_5_USED + 6 UTIL_TIMER_6_USED + 7 UTIL_TIMER_7_USED +/*mem_util_timer_flag8_15*/ + 0 UTIL_TIMER_8_USED + 1 UTIL_TIMER_9_USED + 2 UTIL_TIMER_10_USED + 3 UTIL_TIMER_11_USED + 4 UTIL_TIMER_12_USED + 5 UTIL_TIMER_13_USED + 6 UTIL_TIMER_14_USED + 7 UTIL_TIMER_15_USED +) + +//util fifo param +( + +8 UTIL_FIFO_LEN +-1 UTIL_FIFO_OFFSET +) + +/************************************************************************/ +/* RCS HEADER -- DO NOT ERASE */ +/* $Author: Administrator $ */ +/* $Id: bt_var.osi,v 1.1 2009-09-28 04:06:18 Administrator Exp $ */ +/* Orisil Technology */ +/************************************************************************/ + + +/* packet types */ +( + 0x02 FHS_PACKET + 0x03 DM1_PACKET + 0x03 DM1_LMP_PACKET + 0x04 DH1_PACKET + 0x05 HV1_PACKET + 0x06 HV2_PACKET + 0x07 HV3_PACKET + 0x08 DV_PACKET + 0x09 AUX1_PACKET + 0x0a DM3_PACKET + 0x0b DH3_PACKET + 0x0e DM5_PACKET + 0x0f DH5_PACKET +) + + +/* mem_lmp_respond */ +( + 0 RESPOND_TO_ALL + 1 PASS_EVERYTHING + 2 PASS_ONLY_UNKNOWNS + 3 RESPOND_TO_LMPS +) +/* SCO algorithm defines */ +( + 0 ULAW + 1 ALAW + 2 CVSD +) +/* encryption modes */ +( + 0 NO_ENCRYPTION + 1 PT_PT_ENCRYPTION + 2 PT_BROADCAST_ENCRYPTION +) + +/* bits used in mem_lmp_state1 variable */ +( + 0 LMP_STATE_DETACH + 1 LMP_STATE_HOLD + 2 LMP_STATE_SNIFF + 3 LMP_STATE_PARK + 4 LMP_STATE_WAIT_SCO_CREATE + 5 LMP_STATE_WAIT_SCO_KILL + 6 LMP_STATE_SCO3 + 7 LMP_STATE_WAIT_SCO_START +) +/* mem_lmp_state2 */ +( + 0 LMP_WAIT_FOR_SNIFF_ACCEPT + 1 LMP_WAIT_FOR_PARK_ACCEPT + 2 LMP_SEND_UNPARK_ACCEPTED + 3 LMP_SEND_ENCRYPTION_START + 4 LMP_SEND_ENCRYPTION_STOP + 5 MESSAGE_QUEUE + 7 LMP_STATE_WAIT_BEACON +) +/* mem_lmp_state3 */ +( + 0 INQUIRY_STATE_CHECK + 1 HOST_DELAY_MESSAGE + 2 VARIABLE_DELAY + 3 TEST_MODE_START_LOOPBACK + 4 TEST_MODE_START_PATTERN + 5 PARSE_TEST_CONTROL_MESSAGE + 6 H_AUTH_SEND_COMB_KEY +) +/* mem_rx_status */ +( + 0 FROM_MASTER +) +/* mem_ms_flag */ +( + 0 MS_RECEIVE_SWITCH_REQ + 1 MS_SEND_SETUP_COMPLATE +) +/* mem_conn_sm */ +( + 0 CONN_SM_STANDBY + 1 CONN_SM_WAIT_PAGE + 2 CONN_SM_SEND_FEATURES + 3 CONN_SM_WAIT_FEATURES_RES + 4 CONN_SM_SEND_CONN_REQ + 5 CONN_SM_WAIT_CONN_ACCEPT + 6 CONN_SM_AUTH_PAIR + 7 CONN_SM_AUTH_PAIR_WAIT + 8 CONN_SM_WAIT_MUTAL_AUTH + 9 CONN_SM_ENCRYPT + 0xa CONN_SM_ENCRYPT_WAIT + 0xb CONN_SM_ENCRYPT_WAIT_CLEAR + 0xc CONN_SM_SEND_SETUP_COMPLETE + 0xd CONN_SM_WAIT_SETUP_COMPLETE + 0xe CONN_SM_SEND_SWITCH + 0xf CONN_SM_DETACH_DELAY + 0x10 CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION + 0x11 CONN_SM_DELAY_RESTART_CONNECTION + 0x12 CONN_SM_SEND_VERSION + 0X13 CONN_SM_WAIT_VERSION + 0x14 CONN_SM_SEND_FEATURES_EXT + 0x15 CONN_SM_WAIT_FEATURES_EXT + 0x16 CONN_SM_PAIRING + 0x17 CONN_SM_AUTH + 0x18 CONN_SM_PAIRING_WAIT + 0x19 CONN_SM_AUTH_WAIT + 0x1a CONN_SM_DONE + 0x1b CONN_SM_WAIT_DONE +) + +/* btStateConn1 */ +( + 0 CONN_STANDBY + 1 CONN_MASTER_SEND_CONN_REQ + 2 CONN_MASTER_WAIT_FOR_CONN_ACCEPTED + 3 CONN_MASTER_AUTH + 4 CONN_MASTER_WAIT_FOR_FEATURES + 5 CONN_MASTER_WAIT_FOR_SETUP_COMPLETE + 6 CONN_MASTER_WAIT_FOR_MAX_SLOT + 7 CONN_SLAVE_CONN_REQUESTED + 8 CONN_SLAVE_WAIT_FOR_SETUP_COMPLETE + 9 CONN_SLAVE_AUTH + 10 CONN_USING_HOST_OPCODE + 11 CONN_SLAVE_AUTH_WAIT + 12 CONN_SLAVE_ENCRYPT_WAIT +) + +/* mem_lmp_conn_state */ +( + 0 RECEIVED_CONN_REQ + 1 SENT_CONN_REQ + 2 RECEIVED_SETUP_COMPLETE + 3 SENT_SETUP_COMPLETE + 4 HOST_CONNECTION_MADE + 6 INIT_COMPLETE + 7 SNIFF_NEGOTIATE +) +/* btStateAuth1 */ +( + 0 WAIT_FOR_KINIT + 1 WAIT_FOR_LKA + 2 WAIT_FOR_LKB + 3 WAIT_FOR_SRES + 4 EXAMINE_RECEIVED_SRES + 5 SEND_AU_RAND + 6 WAIT_FOR_KC + 7 DELAYED_ENCRYPT_RESPONSE +) +/* btStateAuth2 */ +( + 0 SENT_SRES + 1 RECEIVED_IN_RAND + 2 SENT_AU_RAND + 3 AUTHENTICATION_FAILED + 4 AUTHENTICATION_PASSED + 5 STARTED_AUTH + 6 SENT_COMB_KEY + 7 SENT_IN_RAND +) +/* btStateAuth3 */ +( + 0 RECEIVED_AU_RAND + 1 RECEIVED_SRES + 2 MUTUALLY_AUTHENTICATE +) +/* btStateHost */ +( + 0 H_AUTH_STARTED + 2 H_ENCRYPTION_MODE_REQ_PT + 3 H_ENCRYPTION_KEY_SIZE + 4 H_ENCRYPTION_START + 5 H_ENCRYPTION_STOP + 6 H_AUTH_SECOND_TRY +) +/* btStateEncrypt2 */ +( + 0 RECEIVED_ENCRYPT_MODE_REQ_PT + 1 RECEIVED_ENCRYPT_KEY_SIZE + 2 RECEIVED_ENCRYPT_START + 3 RECEIVED_ENCRYPT_STOP + 4 STARTED_ENCRYPT_START +) +/* mem_ms_state */ +( + 0x00 MS_STANDBY + 0x11 M_MINIT_1 + 0x12 M_MINIT_2 + 0x20 M_SINIT_0 + 0x30 S_MINIT_0 + 0x31 S_MINIT_1 + 0x32 S_MINIT_2 + 0x41 S_SINIT_1 + 0x42 S_SINIT_2 + 0x43 S_SINIT_3 +) +/* mem_test_mode */ +( + 0 TEST_MODE_ALLOWED + 1 TEST_MODE_ACTIVE +) +/* values for mem_tester_emulate */ +( + 0x00 NO_TEST_MODE + 0x00 CONTINUOUS_TRANSMIT + 0x10 TRANSMIT_TEST + 0x08 LOOPBACK +) + +/* mem_tx_misc */ +( + 1 SEND_TX_ADDR +) +/* BBHWREG_page_stat */ +( + 5 PAGE_MODE_END +) +/* host_return_parameters_status codes */ +( + 0x00 HOST_RETURN_SUCCESS + 0x01 HOST_RETURN_SLAVE_CANT_ISSUE + 0x02 HOST_RETURN_NO_CONNECTION + 0x04 HOST_RETURN_PAGE_TIMEOUT + 0x05 HOST_RETURN_INQUIRY_TIMEOUT + 0x08 HOST_RETURN_CONNECTION_TIMEOUT + 0x09 HOST_RETURN_MAX_NUM_CONNECTIONS + 0x0a HOST_RETURN_MAX_NUM_SCO + 0x0b HOST_RETURN_MAX_NUM_ACL + 0x0c HOST_RETURN_SECURITY_REASONS + 0x10 HOST_RETURN_HOST_TIMEOUT + 0x11 HOST_RETURN_UNSUPPORTED_FEATURE_PARAMETER + 0x13 HOST_RETURN_OTHER_END_USER + 0x14 HOST_RETURN_OTHER_END_LOW_RESOURCE + 0x15 HOST_RETURN_OTHER_END_POWER_OFF + 0x16 HOST_RETURN_LOCAL_HOST + 0x18 HOST_RETURN_PAIRING_NOT_ALLOWED + 0x19 HOST_RETURN_UNKNOWN_PDU + 0x1a HOST_RETURN_UNSUPPORTED_REMOTE_FEATURE + 0x1d HOST_RETURN_SCO_AIR_MODE_REJECTED + 0x20 HOST_RETURN_UNSUPPORTED_LMP_VALUE + 0x21 HOST_RETURN_AUTHENTICATION_FAILURE + 0x22 HOST_RETURN_CHANGED_EXISTING_SCO + 0x23 HOST_RETURN_HOST_REJECTED + 0x24 HOST_RETURN_UNSPECIFIED_ERROR + 0x25 HOST_RESET + 0x26 HOST_RETURN_BAD_HANDLE + + 0x00 HOST_RETURN_ACCEPT_COMMAND + 0x01 HOST_RETURN_REJECT_COMMAND +) +/* host_present */ +( + 0 HOST_IS_PRESENT + 1 BCI_IS_PRESENT + 2 DONT_INIT_RADIO +) +/* mem_master_state */ +( + 0 MASTER_STATE_STANDBY + 1 MASTER_INQUIRY +) +/* misc */ +( + 92 SECOND_SWITCH_REQ + 93 SLAVE_DELAY_DETACH + 94 MASTER_DELAY_DETACH + 95 UNSNIFF_DELAY_DETACH + 0 WE_STARTED_AS_MASTER + 1 WE_STARTED_AS_SLAVE +) +/* mem_host_commands */ +( + 0x01 HOST_INQUIRY + 0x02 HOST_INQUIRY_CANCEL + 0x03 HOST_CREATE_CONNECTION + 0x04 HOST_DISCONNECT_CONNECTION + 0x05 HOST_ADD_SCO_REQUEST + 0x06 HOST_REMOTE_NAME_REQUEST + 0x07 HOST_WRITE_SUPPORTED_FEATURES + 0x08 HOST_SET_TX_LEVEL + 0x09 HOST_SET_RX_LEVEL + 0x0a HOST_SNIFF_REQUEST + 0x0b HOST_UNSNIFF_REQUEST + 0x0c HOST_WRITE_LINK_SUPERVISION_TIMEOUT + 0x0e HOST_WRITE_SCAN_ENABLE + 0x0f HOST_READ_AUDIO_QUALITY + 0x10 HOST_ENABLE_DEVICE_UNDER_TEST + 0x14 HOST_BUTTON_CONFIGURE + 0x15 HOST_SET_LOW_BATTERY_LEVEL + 0x16 HOST_WRITE_LOCAL_NAME + 0x17 HOST_WRITE_LOCAL_PIN + 0x18 HOST_KILL_SCO_REQUEST + 0x19 HOST_QOS_REQ + + 0x1a HOST_FEATURES_REQUEST + 0x1b HOST_VERSION_REQUEST + 0x1c HOST_TIMING_REQUEST + 0x1d HOST_CLK_OFFSET_REQUEST + 0x1e HOST_AUTHENTICATE + 0x1f HOST_START_ENCRYPTION + 0x20 HOST_STOP_ENCRYPTION + 0x21 HOST_HOLD_REQUEST + 0x22 HOST_HOLD_FORCE + 0x23 HOST_PARK_REQUEST + 0x24 HOST_MOD_BEACON + 0x25 HOST_SET_BROADCAST_SCAN_WINDOW + 0x26 HOST_UNPARK_PM_REQUEST + 0x27 HOST_UNPARK_BD_REQUEST + 0x28 HOST_SLAVE_REQUEST_UNPARK + 0x29 HOST_DECREASE_POWER_REQUEST + 0x2a HOST_INCREASE_POWER_REQUEST + 0x2b HOST_SEND_PREFERRED_RATE + 0x2c HOST_MAX_SLOT_REQ + 0x2d HOST_MAX_SLOT_FORCE + 0x2e HOST_PAGE_MODE_REQUEST + 0x2f HOST_PAGE_SCAN_MODE_REQUEST + 0x30 HOST_MASTER_SLAVE_SWITCH + 0x31 HOST_SEND_AUTO_RATE + 0x32 HOST_PAGE_CANCEL + 0x33 HOST_CHANGE_LINK_KEY + 0x34 HOST_RADIO_READ + 0x35 HOST_RADIO_WRITE + 0x36 HOST_REMOTE_SLAVE_INIT_UNPARK_REQUESTED + + 0x40 HOST_REMOTE_CONNECTION_REQUESTED + 0x41 HOST_REMOTE_DETACH + 0x42 HOST_REMOTE_SCO_CREATE_REQUESTED + 0x43 HOST_REMOTE_SCO_KILL_REQUESTED + 0x44 HOST_REMOTE_PARK_REQUESTED + 0x45 HOST_REMOTE_UNPARK_REQUESTED + 0x46 HOST_REMOTE_SNIFF_REQUESTED + 0x47 HOST_REMOTE_UNSNIFF_REQUESTED + 0x48 HOST_REMOTE_HOLD_REQUESTED + 0x49 HOST_REMOTE_AUTHENTICATION + 0x4a HOST_REMOTE_START_ENCRYPTION_REQUESTED + 0x4b HOST_REMOTE_STOP_ENCRYPTION_REQUESTED + 0x4c HOST_MODE_CHANGE_EVENT + 0x4d HOST_REMOTE_TEST_ACTIVATE + 0x4e HOST_REMOTE_TEST_CONTROL + 0x4f HOST_REMOTE_TIMING_REQUEST +) +/* BCI interface (not used if not compiled in ) */ +( + 0x01 BCI_INQUIRY + 0x02 BCI_INQUIRY_CANCEL + 0x03 BCI_CREATE_CONNECTION + 0x04 BCI_DISCONNECT + 0x05 BCI_ADD_SCO_CONNECTION + 0x06 BCI_REMOTE_NAME_REQUEST + 0x07 BCI_WRITE_SUPPORTED_FEATURES + 0x08 BCI_SET_TX_POWER_LEVEL + 0x09 BCI_SET_RX_POWER_LEVEL + 0x0a BCI_SNIFF_MODE + 0x0b BCI_EXIT_SNIFF_MODE + 0x0c BCI_WRITE_LINK_SUPERVISION_TIMEOUT + 0x0d BCI_WRITE_PAGE_TIMEOUT + 0x0e BCI_WRITE_SCAN_ENABLE + 0x0f BCI_GET_AUDIO_QUALITY + 0x10 BCI_ENABLE_DEVICE_UNDER_TEST + 0x11 BCI_SEND_DATA + 0x12 BCI_REGISTER_SERVICE_RECORD + 0x13 BCI_SERVICE_SEARCH_ATTRIB_REQ + 0x14 BCI_BUTTON_CONFIGURE + 0x15 BCI_SET_LOW_BATTERY_LEVEL + 0x16 BCI_WRITE_LOCAL_NAME + 0x17 BCI_WRITE_LOCAL_PIN + 0x18 BCI_REMOVE_SCO_CONNECTION + 0x19 BCI_QUALITY_OF_SERVICE + 0x40 BCI_REMOTE_CONNECTION_REQUEST + 0x41 BCI_REMOTE_DETACH + 0x42 BCI_REMOTE_ADD_SCO_REQUEST + 0x43 BCI_REMOTE_REMOVE_SCO_REQUEST + 0x44 BCI_REMOTE_PARK_REQUEST + 0x45 BCI_REMOTE_UNPARK_REQUEST + 0x46 BCI_REMOTE_SNIFF_REQUEST + 0x47 BCI_REMOTE_UNSNIFF_REQUEST + 0x48 BCI_REMOTE_HOLD_REQUEST + 0x49 BCI_REMOTE_AUTHENTICATION_PAIRING_REQUEST + 0x4a BCI_REMOTE_START_ENCRYPTION_REQUEST + 0x4b BCI_REMOTE_STOP_ENCRYPTION_REQUEST + 0x4c BCI_MODE_CHANGE_EVENT +) +/* mode changes */ +( + 0 MODE_CHANGE_ACTIVE + 1 MODE_CHANGE_SNIFFING + 2 MODE_CHANGE_PARKED + 3 MODE_CHANGE_HOLDING + 4 MODE_CHANGE_SCO_ADDED + 5 MODE_CHANGE_SCO_REMOVED + 6 MODE_CHANGE_ACL_CONNECTION + 7 MODE_CHANGE_DISCONNECT + 8 MODE_CHANGE_SCO_CHANGED + 9 MODE_CHANGE_ENCRYPTING + 10 MODE_CHANGE_NOT_ENCRYPTING + 11 MODE_CHANGE_BUTTON_UP + 12 MODE_CHANGE_BUTTON_DOWN + 13 MODE_CHANGE_BATTERY_LOW + 14 MODE_CHANGE_RESET + 15 MODE_CHANGE_INQUIRY_CANCELED_RMTCMD + 16 MODE_ACTIVE_MSSWITCH_PASSED + 17 MODE_ACTIVE_MSSWITCH_FAILED +) +/* mem_battery - low nibble is level information, upper nibble is status info */ +( + 6 BATTERY_CHECK_LEVEL + 7 BATTERY_SENT_STATUS +) +/* mem_radio_version */ +( + 0x02 RADIO_2001 + 0x12 RADIO_2002 + 0x32 RADIO_2002_DDM + 0x42 RADIO_1008A1 + 0x52 RADIO_1018A0 +) +/* mem_slave_initiated_conn */ +( + 0 SLAVE_INIT_AUTHENTICATION + 1 SLAVE_INIT_ENCRYPTION + 2 SLAVE_INIT_MASTER_SLAVE_SWITCH +) +/* connection_options */ +( + 0 CONNECTION_AUTH + 1 CONNECTION_ENCRYPT + 2 CONNECTION_SWITCH + 3 CONNECTION_ACL + 4 CONNECTION_FEATURE_EXT +) +/* mem_debug_config */ +( + 7 AA_INSERTION +) + + +/* Parse Command: +TX: take bits from tx fifo, jam it into shift and a destination (rf,bucket) +RX: take bits from demod, jam it into shift and a destination (acl,sco,bucket) */ + +/* Inject Command: +TX: 0 into shift, send tail of shift into a destination (rf,bucket) +RX: 0 into shift, send tail of shift into a destination (acl,sco,bucket) */ + +format + ! 15 romdat + % d0 + % d1 + % d2 + % d3 + [8] d0 + [8] d1 + [8] d2 + [8] d3 +end + +format + ! 15 enable /* set flag to 1 */ + % flag + [5] opcode + [6] 1 + [6] flag + [6] null + [9] 0 +end + /* High 5 bytes of channel map */ +format + ! 15 pulse /* set flag to 1 */ + % flag + [5] opcode + [6] 1 + [6] flag + [6] null + [9] 0 +end + +format + ! 15 disable /* set flag to 0 */ + % flag + [5] opcode + [6] 2 + [6] flag + [6] null + [9] 0 +end + +format + ! 15 set0 /* set selected bit of reg to 0 */ + % immediate + % reg + [5] opcode + [6] 9 + [6] never + [6] reg + [9] immediate +end + +format + ! 15 set1 /* set selected bit of reg to 1 */ + % immediate + % reg + [5] opcode + [6] 9 /* alu op demux */ + [6] always + [6] reg + [9] immediate +end + +format + ! 15 setflag /* set selected bit of the reg to the polarity of the flag */ + % flag + % immediate + % reg + [5] opcode + [6] 9 + [6] flag + [6] reg + [9] immediate +end + +format + ! 15 nsetflag /* set the selected bit of the reg to the opposite polarity of the flag */ + % flag + % immediate + % reg + [5] opcode + [6] 0x29 + [6] flag + [6] reg + [9] immediate +end + +format + ! 15 setflip /* invert the selected bit of the reg */ + % immediate + % reg + [5] opcode + [6] 10 /* this is alu op */ + [6] always + [6] reg + [9] immediate +end + +format + ! 0x1f qset1 /* demux the lowest 4 bit of queue and OR it with regr into regw */ + % reg /* in short, set the bit in reg indexed by queue to 1 */ + [5] opcode + [6] 9 + [6] always + [6] reg + [9] 0 +end + +format + ! 0x1f qset0 /* demux the lowest 4 bit of queue and AND it with regr into regw */ + % reg /* in short, set the bit in reg indexed by queue to 0 */ + [5] opcode + [6] 9 + [6] never + [6] reg + [9] 0 +end + +format + ! 0x1f qsetflag /* set the bit in reg index by queue to same as flag */ + % flag + % reg + [5] opcode + [6] 9 + [6] flag + [6] reg + [9] 0 +end + +format + ! 0x1f nqsetflag /* set the bit in the reg index by queue to opposite of flag */ + % flag + % reg + [5] opcode + [6] 0x29 + [6] flag + [6] reg + [9] 0 +end + +format + ! 0x1f qsetflip /* flip the bit in reg index by queue */ + % reg + [5] opcode + [6] 10 + [6] always + [6] reg + [9] 0 +end + +format + ! 1 parse /* take bits out of source (sco_tx,tx_buffer,rx-elas) into pdata and dest (sco_rx,rx_fifo,tx-elas) */ + % source + % dest + % immediate + [5] opcode + [4] source /* voice, data, demod */ + [2] 0 + [6] 0 + [2] 0 /* parse or inject */ + [4] dest /* acl, sco, mod, bucket */ + [9] immediate /* number of bits to parse off */ +end + +format + ! 1 inject /* shift data from pdata into destination (tx-elas,rx_fifo,sco_rx) */ + % destination + % immediate + [5] opcode + [4] 0 + [2] 0 + [6] 1 + [2] 0 + [4] destination /* acl,sco,mod,bucket */ + [9] immediate /* number of bits to be injected */ +end + +format + ! 1 iinject + % destination + % regr + [5] opcode + [6] regr /* contain the number of bits to inject */ + [6] 3 + [2] 0 + [4] destination /* acl,sco,mod,bucket */ + [9] 0 +end + +format + ! 1 stuff /* automatic parse, stuff_counter decrement on every bit until hits zero */ + % source + % destination + [5] opcode + [4] source + [2] 0 + [6] 2 + [2] 0 + [4] destination + [9] 0 +end + +format /* force immediate value into registers */ + ! 3 force + % immediate + % regw + [5] opcode + [6] 0 + [6] 0 /* alu operation force */ + [6] regw /* destination register */ + [9] immediate +end + +format /* force whatever is on shift_reg to regsiters */ + ! 0x13 iforce + % regw + [5] opcode + [6] 0 + [6] 0 /* alu operation force */ + [6] regw /* destination register */ + [9] 0 +end + +format /* force immediate value into registers */ + ! 3 increase + % immediate + % reg + [5] opcode + [6] reg + [6] 1 /* alu operation add */ + [6] reg + [9] immediate +end + +format + ! 3 pincrease + % immediate + [5] opcode + [6] -1 /* pdata */ + [6] 1 /* alu add */ + [6] -1 /* back to pdata */ + [9] immediate +end + +format /* force immediate value into registers */ + ! 3 and_into + % immediate + % reg + [5] opcode + [6] reg + [6] 2 /* alu operation and into */ + [6] reg + [9] immediate +end + +format + ! 3 and + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 2 /* alu operation and into */ + [6] regw + [9] immediate +end + +format + ! 0x13 iand /* pdata & regr -> regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 2 /* alu operation and into */ + [6] regw + [9] 0 +end + + +format /* and whatever is in shiftreg with reg */ + ! 0x13 iand_into + % reg + [5] opcode + [6] reg + [6] 2 /* alu operation and into */ + [6] reg + [9] 0 +end + +format + ! 3 or_into + % immediate + % reg + [5] opcode + [6] reg + [6] 3 /* alu operation or into */ + [6] reg + [9] immediate +end + +format + ! 3 or + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 3 /* alu operation or into */ + [6] regw + [9] immediate +end + +format + ! 0x13 ior + % regr + % regw + [5] opcode + [6] regr + [6] 3 /* alu operation or into */ + [6] regw + [9] 0 +end + +format + ! 0x13 ior_into + % reg + [5] opcode + [6] reg + [6] 3 /* alu operation or into */ + [6] reg + [9] 0 +end + +format + ! 3 skip_to /* jump to location stored in reg */ + % reg + [5] opcode + [6] reg + [6] 4 /* alu operation copy */ + [6] rom_addr + [9] 0 +end + +format + ! 3 copy + % regr + % regw + [5] opcode + [6] regr + [6] 4 /* alu operation copy */ + [6] regw + [9] 0 +end + +format + ! 3 deposit /* copy the register content thru alu to shift register, not prealigned like preload */ + % reg + [5] opcode + [6] reg + [6] 4 /* alu operation copy */ + [6] -1 /* pdata */ + [9] 0 +end + +format + ! 3 icopy /* copy the shift register lsb content directly to register, not aligned */ + % regw + [5] opcode + [6] -1 /* pdata */ + [6] 4 /* alu copy */ + [6] regw + [9] 0 +end + +format + ! 3 add + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 1 + [6] regw + [9] immediate +end + +format + ! 0x13 iadd /* regr + pdata -> regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 1 + [6] regw + [9] 0 +end + +format + ! 3 sub /* immediate - regr -> regw */ + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 12 + [6] regw + [9] immediate +end + +format + ! 0x13 isub /* pdata - regr -> regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 12 + [6] regw + [9] 0 +end + + +format + ! 3 flip + % immediate + % reg + [5] opcode + [6] reg + [6] 5 + [6] reg + [9] immediate +end + +format + ! 0x13 iflip /* use shift register as immediate to do xor */ + % regr + % regw + [5] opcode + [6] regr + [6] 5 + [6] regw + [9] 0 +end + +format + ! 3 xor + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 5 + [6] regw + [9] immediate +end + +format + ! 3 xor_into + % immediate + % reg + [5] opcode + [6] reg + [6] 5 + [6] reg + [9] immediate +end + +format + ! 0x13 ixor /* pdata xor regr and store result in regw */ + % regr + % regw + [5] opcode + [6] regr + [6] 5 + [6] regw + [9] 0 +end + +format + ! 3 invert + % regr + % regw + [5] opcode + [6] regr + [6] 8 + [6] regw + [9] 0 +end + +format + ! 3 pinvert /* invert pdata into itself */ + [5] opcode + [6] -1 + [6] 8 + [6] -1 + [9] 0 +end + +format + ! 3 div /* regr div immediate div */ + % reg + % immediate + [5] opcode + [6] reg + [6] 13 /* generate diven pulse to div */ + [6] null + [9] immediate +end + +format + ! 0x13 idiv /* pdata div regr data ready at most after 41 nops */ + % reg + [5] opcode + [6] reg + [6] 13 /* generate diven pulse to div */ + [6] null + [9] 0 +end + +format + ! 3 remainder /* harvest div remainder */ + % regw + [5] opcode + [6] 0 + [6] 14 + [6] regw + [9] 0 +end + +format + ! 3 quotient /* harvest div quotient */ + % regw + [5] opcode + [6] 0 + [6] 15 + [6] regw + [9] 0 +end + +format + ! 3 rshift + % regr + % regw + [5] opcode + [6] regr + [6] 6 + [6] regw + [9] 0 +end + +format + ! 3 rshift2 + % regr + % regw + [5] opcode + [6] regr + [6] 22 + [6] regw + [9] 0 +end + +format + ! 3 rshift3 + % regr + % regw + [5] opcode + [6] regr + [6] 18 + [6] regw + [9] 0 +end + +format + ! 3 rshift4 + % regr + % regw + [5] opcode + [6] regr + [6] 35 + [6] regw + [9] 0 +end + +format + ! 3 rshift8 + % regr + % regw + [5] opcode + [6] regr + [6] 25 + [6] regw + [9] 0 +end + +format + ! 3 rshift16 + % regr + % regw + [5] opcode + [6] regr + [6] 34 + [6] regw + [9] 0 +end + +format + ! 3 rshift32 + % regr + % regw + [5] opcode + [6] regr + [6] 30 + [6] regw + [9] 0 +end + +format + ! 3 lshift + % regr + % regw + [5] opcode + [6] regr + [6] 7 + [6] regw + [9] 0 +end + +format + ! 3 lshift2 + % regr + % regw + [5] opcode + [6] regr + [6] 23 + [6] regw + [9] 0 +end + +format + ! 3 lshift8 + % regr + % regw + [5] opcode + [6] regr + [6] 26 + [6] regw + [9] 0 +end + + +format + ! 3 lshift3 + % regr + % regw + [5] opcode + [6] regr + [6] 19 + [6] regw + [9] 0 +end + +format + ! 3 lshift4 + % regr + % regw + [5] opcode + [6] regr + [6] 36 + [6] regw + [9] 0 +end + + +format + ! 3 lshift16 + % regr + % regw + [5] opcode + [6] regr + [6] 32 + [6] regw + [9] 0 +end + +format + ! 3 random /* random number into regw */ + % reg + [5] opcode + [6] 0 + [6] 20 + [6] reg + [9] 0 +end + +format /* bit reverse within a byte */ + ! 3 reverse + % reg + % regw + [5] opcode + [6] reg + [6] 27 + [6] regw + [9] 0 +end + +format + ! 3 priority /* priority encode reg into regw, lsb is the top priority, ie, priority(8'b00010000) = 4 */ + % reg + % regw + [5] opcode + [6] reg + [6] 21 + [6] regw + [9] 0 +end + +format + ! 7 setsect /* set a section of pdata */ + % section /* 0 sets 17:0 of pdata with set_data, 1 sets 35:18, 2 sets 53:36, 3 sets 71:54 */ + % set_data + [5] opcode + [7] 0 + [2] section + [18] set_data +end + +format + ! 10 preload /* load stuff into pdata according to fhs format, check us.v */ + % reg + [5] opcode + [6] reg + [6] 0 + [6] -1 + [9] 0 +end + +format /* load register with pdata content, according to fhs format, check us.v */ + ! 10 ialigned /* all bits are in position */ + % regw + [5] opcode + [6] -1 + [6] 0 + [6] regw + [9] 0 +end + +format /* load register to another according to fhs format */ + ! 10 aligned + % regr + % regw + [5] opcode + [6] regr + [6] 0 + [6] regw + [9] 0 +end + +format + ! 4 branch + % addr + % flag + [5] opcode + [6] 1 + [6] flag + [15] addr +end + +format + ! 4 call + % addr + % flag + [5] opcode + [6] 2 + [6] flag + [15] addr +end + +format + ! 4 rtn + % flag + [5] opcode + [6] 3 + [6] flag + [15] 0 +end + +format + ! 0x0c store /* write to memory, data from pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x0c hstore /* write to memory, data from pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x1c istore /* write to memory, data from pdata, address from regr then mem_ptr */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 0 + [4] num_bytes + [15] 0 +end + +format + ! 0x0d fetch /* read from memory, data into pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x0d hfetch /* read from memory, data into pdata, address from immediate then mem_ptr */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 0 + [4] num_bytes + [15] addr +end + +format + ! 0x0d crc /* read from memory, count from loopcnt, put crc result into pdata */ + % addr + [5] opcode + [6] 0 + [1] 0 + [1] 0 + [4] 0 + [15] addr +end + +format + ! 0x1d icrc /* read from memory, address from reg, count from loopcnt, put crc result into pdata */ + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 0 + [4] 0 + [15] 0 +end + + +format + ! 0x1d ifetch /* read from memory, data into pdata, address from regr then mem_ptr */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 0 + [4] num_bytes + [15] 0 +end + +format + ! 0x0c storet /* write to memory, data from temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x0c hstoret /* write to corereg, data from temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x1c istoret /* write to memory, data from temp, address from regr won't increment */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 1 + [4] num_bytes + [15] 0 +end + +format + ! 0x0d fetcht /* read from memory, data into temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 0 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x0d hfetcht /* read from corereg, data into temp, address from immediate won't increment */ + % num_bytes + % addr + [5] opcode + [6] 0 /* memory */ + [1] 1 + [1] 1 + [4] num_bytes + [15] addr +end + +format + ! 0x1d ifetcht /* read from memory, data into temp, address from regr won't increment */ + % num_bytes + % reg + [5] opcode + [6] reg /* hold address */ + [1] 0 + [1] 1 + [4] num_bytes + [15] 0 +end + +format + ! 0x0e jam + % immediate + % addr + [5] opcode + [3] 0 + [1] 0 /* msb */ + [15] addr + [8] immediate +end + +format + ! 0x0e hjam + % immediate + % addr + [5] opcode + [3] 0 + [1] 1 /* msb */ + [15] addr + [8] immediate +end + +format /* 0x242... */ + ! 4 nbranch + % addr + % flag + [5] opcode + [1] 1 + [5] 1 + [6] flag + [15] addr +end + +format + ! 4 ncall + % addr + % flag + [5] opcode + [1] 1 + [5] 2 + [6] flag + [15] addr +end + +format + ! 4 nrtn + % flag + [5] opcode + [1] 1 + [5] 3 + [6] flag + [15] 0 +end + +format + ! 4 nop + % addr /* no-op for addr+2 clocks */ + [5] opcode + [6] 0 + [6] 0 /* always */ + [15] addr +end + +format + ! 4 clear_stack + [5] opcode + [6] 4 + [6] 0 /* always */ + [15] 0 +end + +format + ! 6 until + % reg + % flag + [5] opcode + [6] reg + [6] flag + [6] 1 + [9] 0 +end + +format + ! 6 correlate /* quit if 1. flag is true 2, regr time up 3, found sync,(cond_true) */ + % reg /* expire counter to check against */ + % flag + [5] opcode + [6] reg + [6] flag + [6] 2 /* correlate */ + [9] 0 +end + +format + ! 5 compare /* sets cond flag, if reg equals immediate */ + % immediate + % reg + % mask + [5] opcode + [6] reg + [3] 0 + [9] mask + [9] immediate +end + +format + ! 0x15 icompare /* sets cond flag, if reg equals pdata */ + % mask + % reg + [5] opcode + [6] reg + [3] 0 + [9] mask + [9] 0 +end + +format /* sets cond. flag, if reg equals LS half of shift reg with MS half of reg being mask */ + ! 5 iverify + % reg + [5] opcode + [6] reg + [3] 2 + [18] 0 +end + +format + ! 0x15 qisolate1 + % reg + [5] opcode + [6] reg + [3] 3 + [18] -1 +end + +format + ! 0x15 qisolate0 + % reg + [5] opcode + [6] reg + [3] 3 + [18] 0 +end + + /* REVAB bug: cannot access bit above 35 */ +format + ! 5 isolate1 + % addr + % reg + [5] opcode + [6] reg + [3] 3 + [9] -1 + [9] addr +end + +format + ! 5 isolate0 + % addr + % reg + [5] opcode + [6] reg + [3] 3 + [9] 0 + [9] addr +end + +format + ! 11 setarg + % immediate + [5] opcode + [27] immediate +end + +format + ! 0x1b arg + % immediate + % reg + [5] opcode + [6] reg + [21] immediate +end + + +format + ! 0 sleep + [5] opcode + [27] 0 +end + +format + ! 0 snooze + [5] opcode + [6] -1 + [21] 0 +end + +format + ! 0 revision + % rev_num + [5] opcode + [27] rev_num +end + +format + ! 0x18 loop /* branch when loopcnt is NOT zero, and decrease loopcnt */ + % addr + [5] opcode + [4] 4 + [8] 0 + [15] addr +end + +format + ! 0x18 beq /* branch when pdata is equal to immediate */ + % imme + % addr + [5] opcode + [4] 0 + [8] imme + [15] addr +end + +format + ! 0x18 bne /* branch when pdata is NOT equal to immediate */ + % imme + % addr + [5] opcode + [4] 1 + [8] imme + [15] addr +end + +format + ! 0x18 rtneq /* return when pdata is equal to immediate */ + % imme + [5] opcode + [4] 2 + [8] imme + [15] 0 +end + +format + ! 0x18 rtnne /* return when pdata is NOT equal to immediate */ + % imme + [5] opcode + [4] 3 + [8] imme + [15] 0 +end + +format + ! 0x18 bbit1 /* branch when pdata's imme bit is 1 */ + % imme + % addr + [5] opcode + [4] 5 + [8] imme + [15] addr +end + +format + ! 0x18 bbit0 /* branch when pdata's imme bit is 0 */ + % imme + % addr + [5] opcode + [4] 6 + [8] imme + [15] addr +end + +format + ! 0x18 rtnbit1 /* return when pdata's imme bit is 0 */ + % imme + [5] opcode + [4] 7 + [8] imme + [15] 0 +end + +format + ! 0x18 rtnbit0 /* return when pdata's imme bit is 0 */ + % imme + [5] opcode + [4] 8 + [8] imme + [15] 0 +end + +format + ! 8 bpatch + % imme + % addr + [5] opcode + [4] 9 + [8] imme + [15] addr +end + +format + ! 8 bpatchx + % imme + % addr + [5] opcode + [4] 14 + [8] imme + [15] addr +end + +format + ! 0x18 bmark1 /* branch when mark's imme bit is 1 */ + % imme + % addr + [5] opcode + [4] 10 + [8] imme + [15] addr +end + +format + ! 0x18 bmark0 /* branch when mark's imme bit is 0 */ + % imme + % addr + [5] opcode + [4] 11 + [8] imme + [15] addr +end + +format + ! 0x18 rtnmark1 /* return when mark's imme bit is 0 */ + % imme + [5] opcode + [4] 12 + [8] imme + [15] 0 +end + +format + ! 0x18 rtnmark0 /* return when mark's imme bit is 0 */ + % imme + [5] opcode + [4] 13 + [8] imme + [15] 0 +end + + +format + ! 3 mult /* immediate mult regr */ /* the product will be ready 17 clks later */ + % immediate /* use "product" instruction to get the result */ + % reg + [5] opcode + [6] reg + [6] 16 /* generate diven pulse to div */ + [6] null + [9] immediate +end + +format + ! 0x13 imult /* pdata mult regr */ /* the product will be ready after 15 nops */ + % reg /* use product opcode to get the result */ + [5] opcode + [6] reg + [6] 16 /* generate mult pulse to multiplier */ + [6] null + [9] 0 +end + +format + ! 3 mul32 /* immediate mult regr */ + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 31 + [6] regw + [9] immediate +end + +format + ! 0x13 imul32 /* pdata mult regr 32x32=64bit */ + % regr + % regw + [5] opcode + [6] regr + [6] 31 + [6] regw + [9] 0 +end + +format + ! 3 product /* harvest mult product */ + % regw + [5] opcode + [6] 0 + [6] 17 + [6] regw + [9] 0 +end + +format + ! 3 byteswap + % regr + % regw + [5] opcode + [6] regr + [6] 33 + [6] regw + [9] 0 +end + +format + ! 3 shasx /* SHA256 Sx operation, immediate is Sx */ + % regr + % immediate + % regw + [5] opcode + [6] regr + [6] 28 + [6] regw + [9] immediate +end + + +format + ! 0x13 regexrot /* regext[0] <- regext[7], regext[1] <- regext[0], regext[2] <- regext[1] ... */ + [5] opcode + [6] 0 + [6] 29 + [6] null + [9] 0 +end + Index: 1066_OTP_FLASH/output/bt_program23.icode =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_program23.icode (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_program23.icode (working copy) @@ -0,0 +1,24594 @@ + 00000000 0x0000002c call 0x00002978 + 00000001 0x0000002d setarg 0x00000000 + 00000002 0x0000002e store 0x00000003 , 0x000001f6 + 00000003 0x0000002f call 0x0000000a + 00000004 0x00000030 call 0x0000650b + 00000005 0x00000031 arg 0x000000ab , 0x00000002 + 00000006 0x00000032 call 0x00006556 + 00000007 0x00000033 arg 0x00006578 , 0x00000013 + 00000008 0x00000034 call 0x00006429 + 00000009 0x00000035 branch 0x0000643c + 00000010 0x00000038 hjam 0x00000040 , 0x00008086 + 00000011 0x00000039 hjam 0x00000000 , 0x00008087 + 00000012 0x0000003a hfetch 0x00000001 , 0x00008081 + 00000013 0x0000003b set0 0x00000000 , 0x0000003f + 00000014 0x0000003c set0 0x00000001 , 0x0000003f + 00000015 0x0000003d set1 0x00000003 , 0x0000003f + 00000016 0x0000003e hstore 0x00000001 , 0x00008081 + 00000017 0x0000003f setarg 0x00000000 + 00000018 0x00000040 store 0x00000004 , 0x000001f5 + 00000019 0x00000041 rtn + 00008192 0x0000004c call 0x00002abc + 00008193 0x0000004f bpatch 0x00000000 , 0x00004000 + 00008194 0x00000050 clear_stack + 00008195 0x00000051 call 0x0000640d + 00008196 0x00000052 call 0x0000296c + 00008197 0x00000053 call 0x000065a3 + 00008198 0x00000054 call 0x00002a96 + 00008199 0x00000055 call 0x00004d6a + 00008200 0x00000056 bpatch 0x00000001 , 0x00004000 + 00008201 0x00000057 call 0x00006a03 + 00008202 0x00000058 call 0x00005cf6 + 00008203 0x00000059 call 0x00007ccc + 00008204 0x0000005a call 0x000032d8 + 00008205 0x0000005b ncall 0x0000689c , 0x0000002b + 00008206 0x0000005c bpatch 0x00000002 , 0x00004000 + 00008207 0x0000005d call 0x000032e3 , 0x0000002b + 00008208 0x0000005e call 0x0000756a + 00008209 0x0000005f call 0x00002b41 , 0x0000002b + 00008210 0x00000061 bpatch 0x00000003 , 0x00004000 + 00008211 0x00000062 call 0x000076dc + 00008212 0x00000063 call 0x00007aaf + 00008213 0x00000064 call 0x0000756d + 00008214 0x00000065 call 0x0000535c + 00008215 0x00000066 bpatch 0x00000004 , 0x00004000 + 00008216 0x00000067 call 0x00002038 + 00008217 0x00000068 call 0x000032ed + 00008218 0x00000069 call 0x0000208f + 00008219 0x0000006a call 0x000022f8 + 00008220 0x0000006b call 0x0000236a + 00008221 0x0000006c call 0x00002021 + 00008222 0x0000006d call 0x00002b6a + 00008223 0x0000006e call 0x00002c72 + 00008224 0x0000006f branch 0x00002012 + 00008225 0x00000072 call 0x00002026 + 00008226 0x00000073 rtnmark0 0x00000009 + 00008227 0x00000074 set0 0x00000009 , 0x00000000 + 00008228 0x00000075 call 0x00002223 + 00008229 0x00000076 branch 0x000053ce + 00008230 0x00000079 bpatch 0x00000005 , 0x00004000 + 00008231 0x0000007a call 0x0000225e + 00008232 0x0000007b nbranch 0x0000202f , 0x00000005 + 00008233 0x0000007c call 0x0000220a + 00008234 0x0000007d add 0x00000011 , 0x00000001 , 0x00000006 + 00008235 0x0000007e ifetch 0x00000001 , 0x00000006 + 00008236 0x0000007f bbit1 0x00000000 , 0x00005360 + 00008237 0x00000080 bbit1 0x00000001 , 0x00002166 + 00008238 0x00000081 branch 0x000023cf + 00008239 0x00000083 call 0x0000222b + 00008240 0x00000084 copy 0x00000039 , 0x0000003e + 00008241 0x00000085 rtn 0x00000005 + 00008242 0x00000086 call 0x0000220a + 00008243 0x00000087 fetch 0x00000001 , 0x00000030 + 00008244 0x00000088 bbit1 0x00000003 , 0x000020d3 + 00008245 0x00000089 fetch 0x00000001 , 0x00000031 + 00008246 0x0000008a bbit1 0x00000001 , 0x00002166 + 00008247 0x0000008b branch 0x000023cf + 00008248 0x00000094 fetch 0x00000001 , 0x000041ce + 00008249 0x00000095 rtn 0x00000034 + 00008250 0x00000096 beq 0x00000001 , 0x00002048 + 00008251 0x00000097 beq 0x00000002 , 0x0000204d + 00008252 0x00000098 beq 0x00000003 , 0x00002050 + 00008253 0x00000099 beq 0x00000005 , 0x00002055 + 00008254 0x0000009a beq 0x0000001b , 0x00002045 + 00008255 0x0000009b call 0x00002257 + 00008256 0x0000009c rtn 0x00000005 + 00008257 0x0000009d call 0x0000225a + 00008258 0x0000009e rtn 0x00000005 + 00008259 0x000000a0 jam 0x00000000 , 0x000041ce + 00008260 0x000000a1 rtn + 00008261 0x000000a4 jam 0x0000001b , 0x0000049b + 00008262 0x000000a5 jam 0x00000000 , 0x000041ce + 00008263 0x000000a6 rtn + 00008264 0x000000a9 set1 0x0000001c , 0x00000000 + 00008265 0x000000aa set0 0x0000001e , 0x00000000 + 00008266 0x000000ab jam 0x000000ff , 0x0000008f + 00008267 0x000000ac jam 0x0000001f , 0x0000008d + 00008268 0x000000ad branch 0x00002043 + 00008269 0x000000b0 set0 0x0000001c , 0x00000000 + 00008270 0x000000b1 force 0x00000000 , 0x0000001b + 00008271 0x000000b2 branch 0x00002043 + 00008272 0x000000b5 call 0x0000225a + 00008273 0x000000b6 rtn 0x00000005 + 00008274 0x000000b7 force 0x00000001 , 0x00000002 + 00008275 0x000000b8 jam 0x00000005 , 0x0000016e + 00008276 0x000000b9 branch 0x0000205c + 00008277 0x000000bc bpatch 0x00000006 , 0x00004000 + 00008278 0x000000be fetch 0x00000006 , 0x000041d0 + 00008279 0x000000bf branch 0x00002043 , 0x00000034 + 00008280 0x000000c0 jam 0x00000001 , 0x00004681 + 00008281 0x000000c2 jam 0x00000003 , 0x00000055 + 00008282 0x000000c3 branch 0x0000205b + 00008283 0x000000c6 force 0x00000025 , 0x00000002 + 00008284 0x000000c8 bpatch 0x00000007 , 0x00004000 + 00008285 0x000000c9 fetch 0x00000001 , 0x000000f1 + 00008286 0x000000ca branch 0x00002062 , 0x00000034 + 00008287 0x000000cb lshift3 0x0000003f , 0x0000003f + 00008288 0x000000cc lshift4 0x0000003f , 0x0000003f + 00008289 0x000000cd increase 0xffffffff , 0x0000003f + 00008290 0x000000cf store 0x00000001 , 0x000040a6 + 00008291 0x000000d0 store 0x00000001 , 0x000000f0 + 00008292 0x000000d1 jam 0x0000001f , 0x0000008e + 00008293 0x000000d2 set0 0x0000000c , 0x00000000 + 00008294 0x000000d3 call 0x0000223b + 00008295 0x000000d4 nbranch 0x00002083 , 0x00000005 + 00008296 0x000000d5 call 0x00002a6f + 00008297 0x000000d6 store 0x00000001 , 0x00000077 + 00008298 0x000000d7 storet 0x00000001 , 0x0000007c + 00008299 0x000000d8 fetch 0x00000006 , 0x000041d0 + 00008300 0x000000d9 store 0x00000006 , 0x00000040 + 00008301 0x000000da bpatch 0x00000008 , 0x00004001 + 00008302 0x000000db call 0x00007f15 + 00008303 0x000000dc force 0x00000000 , 0x0000003f + 00008304 0x000000dd compare 0x00000001 , 0x00000002 , 0x000000ff + 00008305 0x000000de nsetflag 0x00000001 , 0x00000005 , 0x0000003f + 00008306 0x000000df set1 0x00000003 , 0x0000003f + 00008307 0x000000e0 store 0x00000001 , 0x00000030 + 00008308 0x000000e1 jam 0x00000003 , 0x00000a99 + 00008309 0x000000e2 call 0x00007d86 + 00008310 0x000000e3 force 0x00000000 , 0x0000003f + 00008311 0x000000e4 setflag 0x00000001 , 0x00000004 , 0x0000003f + 00008312 0x000000e5 store 0x00000001 , 0x0000004c + 00008313 0x000000e6 setarg 0x00000000 + 00008314 0x000000e7 set1 0x00000001 , 0x0000003f + 00008315 0x000000e8 store 0x00000001 , 0x00000031 + 00008316 0x000000e9 enable 0x00000029 + 00008317 0x000000ea call 0x00002223 + 00008318 0x000000eb disable 0x00000029 + 00008319 0x000000ec force 0x00000003 , 0x00000007 + 00008320 0x000000ed fetch 0x00000002 , 0x000040b9 + 00008321 0x000000ee call 0x00007f08 + 00008322 0x000000ef branch 0x00002043 + 00008323 0x000000f1 bpatch 0x00000009 , 0x00004001 + 00008324 0x000000f2 fetch 0x00000006 , 0x000041d0 + 00008325 0x000000f3 store 0x00000006 , 0x00000040 + 00008326 0x000000f4 compare 0x00000001 , 0x00000002 , 0x000000ff + 00008327 0x000000f5 branch 0x00002089 , 0x00000001 + 00008328 0x000000f6 branch 0x00002043 + 00008329 0x000000f8 arg 0x00000101 , 0x00000005 + 00008330 0x000000f9 arg 0x00000008 , 0x00000039 + 00008331 0x000000fa call 0x00007ec6 + 00008332 0x000000fb jam 0x00000004 , 0x00000a99 + 00008333 0x000000fc call 0x00007d86 + 00008334 0x000000fd branch 0x00002043 + 00008335 0x00000105 rtnmark0 0x0000001c + 00008336 0x00000106 force 0x00000001 , 0x00000007 + 00008337 0x00000107 call 0x00007f16 + 00008338 0x00000108 nsetflag 0x00000034 , 0x0000001c , 0x00000000 + 00008339 0x00000109 nbranch 0x00002095 , 0x00000034 + 00008340 0x0000010a rtn + 00008341 0x0000010f bpatch 0x0000000a , 0x00004001 + 00008342 0x00000110 fetcht 0x00000002 , 0x000040bb + 00008343 0x00000111 force 0x00000004 , 0x00000007 + 00008344 0x00000112 call 0x0000271c + 00008345 0x00000113 rtn 0x00000028 + 00008346 0x00000114 call 0x000028a4 + 00008347 0x00000115 force 0x00000000 , 0x00000024 + 00008348 0x00000117 rtn 0x00000003 + 00008349 0x00000118 set0 0x0000000b , 0x00000000 + 00008350 0x00000119 set0 0x00000000 , 0x00000000 + 00008351 0x0000011b add 0x00000022 , 0x00000001 , 0x00000021 + 00008352 0x0000011c isolate1 0x0000001e , 0x00000000 + 00008353 0x0000011d setflag 0x00000001 , 0x00000002 , 0x00000024 + 00008354 0x0000011e compare 0x00000000 , 0x00000021 , 0x00000002 + 00008355 0x0000011f nbranch 0x000020be , 0x00000001 + 00008356 0x00000122 bpatch 0x0000000b , 0x00004001 + 00008357 0x00000123 fetch 0x00000001 , 0x00000012 + 00008358 0x00000124 increase 0x00000001 , 0x0000003f + 00008359 0x00000125 store 0x00000001 , 0x00000012 + 00008360 0x00000126 call 0x000028d8 + 00008361 0x00000127 call 0x000028d2 + 00008362 0x00000128 call 0x000028f2 + 00008363 0x00000129 call 0x00002a51 + 00008364 0x0000012a call 0x00002a56 + 00008365 0x0000012b call 0x00002a64 + 00008366 0x0000012c call 0x0000264d + 00008367 0x0000012d call 0x000020b1 + 00008368 0x0000012e branch 0x0000209c + 00008369 0x00000131 bpatch 0x0000000c , 0x00004001 + 00008370 0x00000132 fetch 0x00000001 , 0x0000008d + 00008371 0x00000133 increase 0xffffffff , 0x0000003f + 00008372 0x00000134 store 0x00000001 , 0x0000008d + 00008373 0x00000135 rtn 0x00000002 + 00008374 0x00000136 jam 0x0000001f , 0x0000008d + 00008375 0x00000137 fetch 0x00000001 , 0x0000008f + 00008376 0x00000138 increase 0xffffffff , 0x0000003f + 00008377 0x00000139 store 0x00000001 , 0x0000008f + 00008378 0x0000013a rtn 0x00000002 + 00008379 0x0000013b setflip 0x0000001e , 0x00000000 + 00008380 0x0000013c jam 0x000000ff , 0x0000008f + 00008381 0x0000013d rtn + 00008382 0x00000140 bpatch 0x0000000d , 0x00004001 + 00008383 0x00000141 call 0x000028d8 + 00008384 0x00000142 call 0x000028cc + 00008385 0x00000143 call 0x000028f2 + 00008386 0x00000144 call 0x00002a5b + 00008387 0x00000145 call 0x000029eb + 00008388 0x00000146 call 0x00002a0d + 00008389 0x00000147 branch 0x000020c8 , 0x00000018 + 00008390 0x00000148 call 0x000020b1 + 00008391 0x00000149 branch 0x0000209f + 00008392 0x0000014b bpatch 0x0000000e , 0x00004001 + 00008393 0x0000014c call 0x000029bb + 00008394 0x0000014d call 0x00002a6b + 00008395 0x0000014e call 0x0000251e + 00008396 0x0000014f set0 0x00000001 , 0x00000000 + 00008397 0x00000150 rtnmark0 0x0000000b + 00008398 0x00000152 bpatch 0x0000000f , 0x00004001 + 00008399 0x00000154 fetch 0x00000001 , 0x00000013 + 00008400 0x00000155 increase 0x00000001 , 0x0000003f + 00008401 0x00000156 store 0x00000001 , 0x00000013 + 00008402 0x00000157 rtn + 00008403 0x00000160 bpatch 0x00000010 , 0x00004002 + 00008404 0x00000161 enable 0x00000029 + 00008405 0x00000162 enable 0x00000030 + 00008406 0x00000163 fetch 0x00000002 , 0x000040b5 + 00008407 0x00000164 branch 0x000020db , 0x00000034 + 00008408 0x00000165 force 0x00000008 , 0x00000007 + 00008409 0x00000166 call 0x00007f16 + 00008410 0x00000167 nrtn 0x00000034 + 00008411 0x00000169 bpatch 0x00000011 , 0x00004002 + 00008412 0x0000016a fetcht 0x00000002 , 0x000040b7 + 00008413 0x0000016b force 0x00000028 , 0x00000007 + 00008414 0x0000016c call 0x0000271c + 00008415 0x0000016d branch 0x00002114 , 0x00000028 + 00008416 0x0000016e force 0x00000003 , 0x00000007 + 00008417 0x0000016f call 0x00007f16 + 00008418 0x00000170 nbranch 0x000020f0 , 0x00000034 + 00008419 0x00000171 fetch 0x00000001 , 0x0000004c + 00008420 0x00000172 bbit1 0x00000004 , 0x000020e6 + 00008421 0x00000173 branch 0x000020e9 + 00008422 0x00000175 arg 0x00000101 , 0x00000005 + 00008423 0x00000176 arg 0x00000008 , 0x00000039 + 00008424 0x00000177 call 0x00007ec6 + 00008425 0x00000179 bpatch 0x00000012 , 0x00004002 + 00008426 0x0000017a jam 0x00000000 , 0x00000030 + 00008427 0x0000017b call 0x00005cf7 + 00008428 0x0000017c jam 0x00000000 , 0x00004681 + 00008429 0x0000017d jam 0x00000013 , 0x00000a99 + 00008430 0x0000017e call 0x00007d86 + 00008431 0x0000017f branch 0x00002114 + 00008432 0x00000182 bpatch 0x00000013 , 0x00004002 + 00008433 0x00000183 force 0x00000000 , 0x0000000b + 00008434 0x00000184 until 0x00000023 , 0x00000026 + 00008435 0x00000185 fetch 0x00000001 , 0x000000f2 + 00008436 0x00000186 increase 0xffffffff , 0x0000003f + 00008437 0x00000187 ixor 0x00000022 , 0x0000003f + 00008438 0x00000188 compare 0x00000000 , 0x0000003f , 0x00000003 + 00008439 0x00000189 nbranch 0x000020f0 , 0x00000001 + 00008440 0x0000018a deposit 0x00000004 + 00008441 0x0000018b store 0x00000001 , 0x00000181 + 00008442 0x0000018c force 0x00000000 , 0x00000026 + 00008443 0x0000018d force 0x00000000 , 0x00000024 + 00008444 0x00000190 bpatch 0x00000014 , 0x00004002 + 00008445 0x00000191 branch 0x00002114 , 0x00000003 + 00008446 0x00000192 call 0x000028dc + 00008447 0x00000193 arg 0x00000600 , 0x0000000b + 00008448 0x00000194 until 0x00000023 , 0x00000026 + 00008449 0x00000196 bpatch 0x00000015 , 0x00004002 + 00008450 0x00000197 fetch 0x00000004 , 0x000000f2 + 00008451 0x00000198 iforce 0x00000021 + 00008452 0x00000199 increase 0x00000001 , 0x0000003f + 00008453 0x0000019a store 0x00000004 , 0x000000f2 + 00008454 0x0000019b isolate1 0x0000000c , 0x00000000 + 00008455 0x0000019c setflag 0x00000001 , 0x00000002 , 0x00000024 + 00008456 0x0000019d compare 0x00000000 , 0x00000021 , 0x00000002 + 00008457 0x0000019e nbranch 0x00002128 , 0x00000001 + 00008458 0x0000019f fetch 0x00000001 , 0x0000000c + 00008459 0x000001a0 increase 0x00000001 , 0x0000003f + 00008460 0x000001a1 store 0x00000001 , 0x0000000c + 00008461 0x000001a2 call 0x000028d2 + 00008462 0x000001a3 call 0x00002a51 + 00008463 0x000001a4 call 0x00002a56 + 00008464 0x000001a5 call 0x00002a64 + 00008465 0x000001a6 call 0x0000264d + 00008466 0x000001a7 call 0x0000211a + 00008467 0x000001a8 branch 0x000020fc + 00008468 0x000001aa bpatch 0x00000016 , 0x00004002 + 00008469 0x000001ab disable 0x00000029 + 00008470 0x000001ac fetch 0x00000002 , 0x000040b5 + 00008471 0x000001ad rtn 0x00000034 + 00008472 0x000001ae force 0x00000008 , 0x00000007 + 00008473 0x000001af branch 0x00007f08 + 00008474 0x000001b2 bpatch 0x00000017 , 0x00004002 + 00008475 0x000001b3 fetch 0x00000001 , 0x0000008e + 00008476 0x000001b4 increase 0xffffffff , 0x0000003f + 00008477 0x000001b5 store 0x00000001 , 0x0000008e + 00008478 0x000001b6 rtn 0x00000002 + 00008479 0x000001b7 jam 0x0000001f , 0x0000008e + 00008480 0x000001b8 fetch 0x00000001 , 0x000000f0 + 00008481 0x000001b9 increase 0xffffffff , 0x0000003f + 00008482 0x000001ba store 0x00000001 , 0x000000f0 + 00008483 0x000001bb rtn 0x00000002 + 00008484 0x000001bc setflip 0x0000000c , 0x00000000 + 00008485 0x000001bd fetch 0x00000001 , 0x000040a6 + 00008486 0x000001be store 0x00000001 , 0x000000f0 + 00008487 0x000001bf rtn + 00008488 0x000001c2 bpatch 0x00000018 , 0x00004003 + 00008489 0x000001c3 call 0x000028cc + 00008490 0x000001c4 call 0x00002a5b + 00008491 0x000001c5 call 0x000029eb + 00008492 0x000001c6 call 0x00002a0d + 00008493 0x000001c7 branch 0x00002130 , 0x00000018 + 00008494 0x000001c8 call 0x0000211a + 00008495 0x000001c9 branch 0x00002101 + 00008496 0x000001cb call 0x0000264d + 00008497 0x000001cc fetch 0x00000001 , 0x0000000d + 00008498 0x000001cd increase 0x00000001 , 0x0000003f + 00008499 0x000001ce store 0x00000001 , 0x0000000d + 00008500 0x000001cf force 0x00000000 , 0x0000001b + 00008501 0x000001d0 fetch 0x00000004 , 0x000000f2 + 00008502 0x000001d2 bpatch 0x00000019 , 0x00004003 + 00008503 0x000001d3 call 0x00002a4f + 00008504 0x000001d4 call 0x000028dc + 00008505 0x000001d5 increase 0x00000001 , 0x00000026 + 00008506 0x000001d7 and_into 0x000001fd , 0x00000021 + 00008507 0x000001d8 and_into 0x000001fc , 0x00000024 + 00008508 0x000001d9 call 0x000028d2 + 00008509 0x000001da call 0x00002a51 + 00008510 0x000001db call 0x00002a56 + 00008511 0x000001dc call 0x00002a64 + 00008512 0x000001dd deposit 0x00000022 + 00008513 0x000001de store 0x00000004 , 0x00000161 + 00008514 0x000001df force 0x00000000 , 0x00000004 + 00008515 0x000001e0 force 0x00000002 , 0x00000001 + 00008516 0x000001e1 call 0x00002a6b + 00008517 0x000001e2 call 0x00002766 + 00008518 0x000001e4 bpatch 0x0000001a , 0x00004003 + 00008519 0x000001e5 call 0x00002a4d + 00008520 0x000001e6 or_into 0x00000002 , 0x00000021 + 00008521 0x000001e7 and_into 0x000001fc , 0x00000024 + 00008522 0x000001e8 call 0x000028cc + 00008523 0x000001e9 call 0x00002a5b + 00008524 0x000001ea call 0x000029eb + 00008525 0x000001eb call 0x00002a0d + 00008526 0x000001ec call 0x0000264d , 0x00000018 + 00008527 0x000001ed branch 0x00002155 , 0x00000018 + 00008528 0x000001ee fetch 0x00000001 , 0x00000010 + 00008529 0x000001ef branch 0x000020fc , 0x00000034 + 00008530 0x000001f0 increase 0xffffffff , 0x0000003f + 00008531 0x000001f1 store 0x00000001 , 0x00000010 + 00008532 0x000001f2 branch 0x00002136 + 00008533 0x000001f5 bpatch 0x0000001b , 0x00004003 + 00008534 0x000001f6 fetch 0x00000001 , 0x0000000e + 00008535 0x000001f7 increase 0x00000001 , 0x0000003f + 00008536 0x000001f8 store 0x00000001 , 0x0000000e + 00008537 0x000001f9 call 0x00002435 + 00008538 0x000001fb call 0x000022f2 + 00008539 0x000001fc branch 0x0000215f , 0x00000018 + 00008540 0x000001fd call 0x00002455 + 00008541 0x000001fe nbranch 0x0000215a , 0x00000034 + 00008542 0x000001ff branch 0x000020fc + 00008543 0x00000202 bpatch 0x0000001c , 0x00004003 + 00008544 0x00000203 fetch 0x00000001 , 0x00000030 + 00008545 0x00000204 set0 0x00000003 , 0x0000003f + 00008546 0x00000205 store 0x00000001 , 0x00000030 + 00008547 0x00000206 call 0x00002440 + 00008548 0x00000207 disable 0x00000029 + 00008549 0x00000208 rtn + 00008550 0x0000020c bpatch 0x0000001d , 0x00004003 + 00008551 0x0000020d enable 0x00000029 + 00008552 0x0000020e enable 0x00000030 + 00008553 0x0000020f call 0x000021e1 + 00008554 0x00000210 rtn 0x00000028 + 00008555 0x00000211 call 0x00002c69 + 00008556 0x00000212 call 0x00002a4f + 00008557 0x00000213 add 0x00000022 , 0x00000001 , 0x00000021 + 00008558 0x00000214 call 0x000028e2 + 00008559 0x00000215 force 0x00000003 , 0x00000024 + 00008560 0x00000216 call 0x00006cc2 + 00008561 0x00000217 call 0x00002489 + 00008562 0x00000218 call 0x000028d2 + 00008563 0x00000219 call 0x00002a51 + 00008564 0x0000021a call 0x00002a56 + 00008565 0x0000021b call 0x00002a64 + 00008566 0x0000021c call 0x00002762 + 00008567 0x0000021e bpatch 0x0000001e , 0x00004003 + 00008568 0x0000021f call 0x00005d08 + 00008569 0x00000220 call 0x000022e4 + 00008570 0x00000221 nbranch 0x00002180 , 0x0000002d + 00008571 0x00000222 call 0x00002a88 + 00008572 0x00000223 call 0x00002728 + 00008573 0x00000224 fetch 0x00000001 , 0x0000000f + 00008574 0x00000225 increase 0x00000001 , 0x0000003f + 00008575 0x00000226 store 0x00000001 , 0x0000000f + 00008576 0x00000228 bpatch 0x0000001f , 0x00004003 + 00008577 0x00000229 call 0x00006caa + 00008578 0x0000022a call 0x0000218b + 00008579 0x0000022b nrtn 0x00000029 + 00008580 0x0000022c call 0x000026f3 + 00008581 0x0000022d nbranch 0x00002188 , 0x00000034 + 00008582 0x0000022f disable 0x00000029 + 00008583 0x00000230 rtn + 00008584 0x00000233 call 0x00002489 + 00008585 0x00000234 call 0x000022da + 00008586 0x00000235 branch 0x00002177 + 00008587 0x00000239 branch 0x0000218e , 0x0000002d + 00008588 0x0000023a call 0x00002a7f + 00008589 0x0000023b branch 0x0000219c , 0x00000002 + 00008590 0x0000023d call 0x000021a7 + 00008591 0x0000023e nbranch 0x0000219c , 0x00000028 + 00008592 0x0000023f fetch 0x00000001 , 0x0000004c + 00008593 0x00000240 rtnbit0 0x00000004 + 00008594 0x00000241 rtnbit1 0x00000003 + 00008595 0x00000242 fetch 0x00000001 , 0x0000004b + 00008596 0x00000243 rtnbit1 0x00000003 + 00008597 0x00000244 call 0x000021ae + 00008598 0x00000245 nrtn 0x00000034 + 00008599 0x00000246 fetch 0x00000001 , 0x0000016e + 00008600 0x00000247 increase 0xffffffff , 0x0000003f + 00008601 0x00000248 store 0x00000001 , 0x0000016e + 00008602 0x00000249 nrtn 0x00000034 + 00008603 0x0000024a branch 0x00006006 + 00008604 0x0000024d bpatch 0x00000020 , 0x00004004 + 00008605 0x0000024e call 0x0000245d + 00008606 0x0000024f disable 0x00000029 + 00008607 0x00000250 fetch 0x00000001 , 0x0000004c + 00008608 0x00000251 bbit1 0x00000004 , 0x000021a2 + 00008609 0x00000252 rtn + 00008610 0x00000255 fetch 0x00000001 , 0x0000004c + 00008611 0x00000256 rtnbit1 0x00000003 + 00008612 0x00000258 arg 0x00000101 , 0x00000005 + 00008613 0x00000259 arg 0x00000008 , 0x00000039 + 00008614 0x0000025a branch 0x00007ec6 + 00008615 0x0000025d bpatch 0x00000021 , 0x00004004 + 00008616 0x0000025e enable 0x00000028 + 00008617 0x0000025f fetch 0x00000001 , 0x0000004b + 00008618 0x00000260 rtnbit0 0x00000003 + 00008619 0x00000261 call 0x000021ae + 00008620 0x00000262 nrtn 0x00000034 + 00008621 0x00000263 branch 0x00007fe9 + 00008622 0x00000266 fetch 0x00000001 , 0x00000072 + 00008623 0x00000267 increase 0xffffffff , 0x0000003f + 00008624 0x00000268 store 0x00000001 , 0x00000072 + 00008625 0x00000269 rtn + 00008626 0x0000026c bpatch 0x00000022 , 0x00004004 + 00008627 0x0000026d fetch 0x00000001 , 0x00000030 + 00008628 0x0000026e bbit1 0x00000007 , 0x000021bb + 00008629 0x0000026f fetch 0x00000001 , 0x000009b5 + 00008630 0x00000270 branch 0x000021bb , 0x00000034 + 00008631 0x00000271 jam 0x00000000 , 0x000009b5 + 00008632 0x00000272 jam 0x00000018 , 0x00000a99 + 00008633 0x00000273 call 0x00007d86 + 00008634 0x00000274 branch 0x000021bb + 00008635 0x00000276 bpatch 0x00000023 , 0x00004004 + 00008636 0x00000277 call 0x00002254 + 00008637 0x00000278 fetch 0x00000001 , 0x00000030 + 00008638 0x00000279 set1 0x00000007 , 0x0000003f + 00008639 0x0000027a store 0x00000001 , 0x00000030 + 00008640 0x0000027b jam 0x00000001 , 0x000041bd + 00008641 0x0000027c fetch 0x00000001 , 0x00000055 + 00008642 0x0000027d bne 0x00000016 , 0x000021c3 + 00008643 0x0000027f rtn + 00008644 0x00000282 jam 0x00000001 , 0x000009b5 + 00008645 0x00000284 fetch 0x00000001 , 0x00000030 + 00008646 0x00000285 set0 0x00000007 , 0x0000003f + 00008647 0x00000286 store 0x00000001 , 0x00000030 + 00008648 0x00000287 rtn + 00008649 0x0000028c bpatch 0x00000024 , 0x00004004 + 00008650 0x0000028d disable 0x00000028 + 00008651 0x0000028e fetch 0x00000002 , 0x00000032 + 00008652 0x0000028f arg 0x0000ffff , 0x00000002 + 00008653 0x00000290 isub 0x00000002 , 0x0000003e + 00008654 0x00000291 nrtn 0x00000005 + 00008655 0x00000292 fetch 0x00000004 , 0x00000034 + 00008656 0x00000293 branch 0x000021d3 , 0x00000030 + 00008657 0x00000294 isub 0x00000028 , 0x0000003f + 00008658 0x00000295 branch 0x000021d4 + 00008659 0x00000297 isub 0x00000022 , 0x0000003f + 00008660 0x00000299 sub 0x0000003f , 0x00000004 , 0x0000003e + 00008661 0x0000029a nrtn 0x00000002 + 00008662 0x0000029b force 0x00000000 , 0x0000003f + 00008663 0x0000029c store 0x00000002 , 0x00000032 + 00008664 0x0000029d branch 0x00007fe7 + 00008665 0x000002a2 copy 0x0000003f , 0x00000002 + 00008666 0x000002a3 bpatch 0x00000025 , 0x00004004 + 00008667 0x000002a4 storet 0x00000004 , 0x00000034 + 00008668 0x000002a6 jam 0x00000001 , 0x0000455b + 00008669 0x000002a7 setarg 0x0000ffff + 00008670 0x000002a8 store 0x00000002 , 0x00000032 + 00008671 0x000002a9 jam 0x00000001 , 0x00000073 + 00008672 0x000002aa rtn + 00008673 0x000002ae bpatch 0x00000026 , 0x00004004 + 00008674 0x000002af call 0x000021c9 + 00008675 0x000002b0 nrtn 0x00000028 + 00008676 0x000002b1 disable 0x00000028 + 00008677 0x000002b2 jam 0x00000020 , 0x00000011 + 00008678 0x000002b3 set0 0x0000000b , 0x00000000 + 00008679 0x000002b5 call 0x00002a4f + 00008680 0x000002b6 call 0x000022e6 + 00008681 0x000002b7 bmark1 0x0000000b , 0x000021f4 + 00008682 0x000002b8 call 0x00002455 + 00008683 0x000002b9 nbranch 0x000021e7 , 0x00000034 + 00008684 0x000002bb bpatch 0x00000027 , 0x00004004 + 00008685 0x000002bc disable 0x00000028 + 00008686 0x000002bd deposit 0x00000022 + 00008687 0x000002be store 0x00000004 , 0x000040ca + 00008688 0x000002bf enable 0x00000030 + 00008689 0x000002c0 enable 0x00000029 + 00008690 0x000002c1 jam 0x0000002a , 0x00000a99 + 00008691 0x000002c2 branch 0x00007d86 + 00008692 0x000002c5 bpatch 0x00000028 , 0x00004005 + 00008693 0x000002c6 call 0x00002a4d + 00008694 0x000002c7 arg 0x00000010 , 0x00000001 + 00008695 0x000002c8 call 0x000022dc + 00008696 0x000002c9 disable 0x00000030 + 00008697 0x000002ca disable 0x00000029 + 00008698 0x000002cb call 0x00002818 + 00008699 0x000002cc call 0x00002435 + 00008700 0x000002ce bpatch 0x00000029 , 0x00004005 + 00008701 0x000002cf call 0x0000247c + 00008702 0x000002d0 branch 0x00002202 , 0x0000002d + 00008703 0x000002d1 call 0x00002455 + 00008704 0x000002d2 nbranch 0x000021fc , 0x00000034 + 00008705 0x000002d3 branch 0x000021ec + 00008706 0x000002d5 fetch 0x00000001 , 0x00000031 + 00008707 0x000002d6 set0 0x00000001 , 0x0000003f + 00008708 0x000002d7 store 0x00000001 , 0x00000031 + 00008709 0x000002d8 call 0x00002a88 + 00008710 0x000002d9 call 0x00002841 + 00008711 0x000002da enable 0x00000028 + 00008712 0x000002db jam 0x0000002b , 0x00000a99 + 00008713 0x000002dc branch 0x00007d86 + 00008714 0x000002e2 bpatch 0x0000002a , 0x00004005 + 00008715 0x000002e3 set1 0x00000009 , 0x00000000 + 00008716 0x000002e4 deposit 0x00000011 + 00008717 0x000002e5 store 0x00000002 , 0x0000001e + 00008718 0x000002e6 force 0x00000050 , 0x00000039 + 00008719 0x000002e7 arg 0x0000043f , 0x00000005 + 00008720 0x000002e8 add 0x00000011 , 0x00000001 , 0x00000006 + 00008721 0x000002e9 ifetch 0x00000001 , 0x00000006 + 00008722 0x000002ea copy 0x00000011 , 0x00000006 + 00008723 0x000002eb bbit1 0x00000000 , 0x00007f01 + 00008724 0x000002ec arg 0x00000030 , 0x00000005 + 00008725 0x000002ed call 0x00007f01 + 00008726 0x000002ee disable 0x0000002e + 00008727 0x000002ef fetch 0x00000001 , 0x00000077 + 00008728 0x000002f0 iforce 0x00000004 + 00008729 0x000002f1 jam 0x00000001 , 0x0000008a + 00008730 0x000002f2 branch 0x0000221c , 0x00000029 + 00008731 0x000002f3 jam 0x00000001 , 0x0000008a + 00008732 0x000002f5 fetch 0x00000001 , 0x00000030 + 00008733 0x000002f6 rtnbit0 0x00000001 + 00008734 0x000002f7 fetch 0x00000001 , 0x00000073 + 00008735 0x000002f8 store 0x00000001 , 0x0000008a + 00008736 0x000002f9 fetch 0x00000001 , 0x00000074 + 00008737 0x000002fa store 0x00000001 , 0x0000008b + 00008738 0x000002fb rtn + 00008739 0x000002fe bpatch 0x0000002b , 0x00004005 + 00008740 0x000002ff fetch 0x00000002 , 0x0000001e + 00008741 0x00000300 iforce 0x00000005 + 00008742 0x00000301 force 0x00000050 , 0x00000039 + 00008743 0x00000302 arg 0x0000043f , 0x00000006 + 00008744 0x00000303 branch 0x00007f01 , 0x00000036 + 00008745 0x00000304 arg 0x00000030 , 0x00000006 + 00008746 0x00000305 branch 0x00007f01 + 00008747 0x0000030a arg 0x00000001 , 0x00000039 + 00008748 0x0000030b fetcht 0x00000001 , 0x00000015 + 00008749 0x0000030d increase 0x00000001 , 0x00000002 + 00008750 0x0000030e compare 0x00000001 , 0x00000002 , 0x000000ff + 00008751 0x0000030f nbranch 0x00002231 , 0x00000001 + 00008752 0x00000310 arg 0x00000000 , 0x00000002 + 00008753 0x00000312 storet 0x00000001 , 0x00000015 + 00008754 0x00000313 mul32 0x00000002 , 0x00000050 , 0x0000003f + 00008755 0x00000314 arg 0x00004040 , 0x00000011 + 00008756 0x00000315 iadd 0x00000011 , 0x00000011 + 00008757 0x00000316 ifetch 0x00000001 , 0x00000011 + 00008758 0x00000317 bbit1 0x00000001 , 0x00002239 + 00008759 0x00000318 rtnbit1 0x00000000 + 00008760 0x00000319 rtnbit1 0x00000003 + 00008761 0x0000031b loop 0x0000222d + 00008762 0x0000031c rtn + 00008763 0x0000031f bpatch 0x0000002c , 0x00004005 + 00008764 0x00000320 arg 0x0000226a , 0x00000013 + 00008765 0x00000321 call 0x00002261 + 00008766 0x00000322 nrtn 0x00000005 + 00008767 0x00000323 deposit 0x00000011 + 00008768 0x00000324 store 0x00000002 , 0x0000001e + 00008769 0x00000325 force 0x00000000 , 0x0000003e + 00008770 0x00000326 rtn + 00008771 0x0000032b call 0x00002725 + 00008772 0x0000032c branch 0x0000224b , 0x00000001 + 00008773 0x0000032d fetch 0x00000002 , 0x0000001e + 00008774 0x0000032e add 0x0000003f , 0x00000017 , 0x00000005 + 00008775 0x0000032f fetch 0x00000001 , 0x00000047 + 00008776 0x00000330 istore 0x00000001 , 0x00000005 + 00008777 0x00000331 arg 0x000022aa , 0x00000013 + 00008778 0x00000332 branch 0x00002261 + 00008779 0x00000335 fetch 0x00000001 , 0x00000047 + 00008780 0x00000336 isolate1 0x00000003 , 0x0000003f + 00008781 0x00000337 branch 0x00002250 , 0x00000001 + 00008782 0x00000338 force 0x00000001 , 0x0000003e + 00008783 0x00000339 rtn + 00008784 0x0000033b force 0x00000000 , 0x0000003e + 00008785 0x0000033c rtn + 00008786 0x00000340 arg 0x000022a7 , 0x00000013 + 00008787 0x00000341 branch 0x00002261 + 00008788 0x00000344 fetcht 0x00000002 , 0x0000001e + 00008789 0x00000345 arg 0x000022cf , 0x00000013 + 00008790 0x00000346 branch 0x00002261 + 00008791 0x0000034b fetcht 0x00000001 , 0x000041cf + 00008792 0x0000034d arg 0x00002275 , 0x00000013 + 00008793 0x0000034e branch 0x00002261 + 00008794 0x00000351 bpatch 0x0000002d , 0x00004005 + 00008795 0x00000352 fetcht 0x00000006 , 0x000041d0 + 00008796 0x00000354 arg 0x0000226e , 0x00000013 + 00008797 0x00000355 branch 0x00002261 + 00008798 0x00000358 arg 0x0000227b , 0x00000013 + 00008799 0x00000359 branch 0x00002261 + 00008800 0x0000035c arg 0x000022c6 , 0x00000013 + 00008801 0x0000035e bpatch 0x0000002e , 0x00004005 + 00008802 0x0000035f arg 0x00004040 , 0x00000011 + 00008803 0x00000360 arg 0x00000001 , 0x00000039 + 00008804 0x00000362 ifetch 0x00000001 , 0x00000011 + 00008805 0x00000363 copy 0x00000013 , 0x0000003d + 00008806 0x00000365 increase 0x00000050 , 0x00000011 + 00008807 0x00000366 loop 0x00002264 + 00008808 0x00000367 force 0x00000001 , 0x0000003e + 00008809 0x00000368 rtn + 00008810 0x0000036b bbit1 0x00000000 , 0x00002266 + 00008811 0x0000036c bbit1 0x00000003 , 0x00002266 + 00008812 0x0000036d force 0x00000000 , 0x0000003e + 00008813 0x0000036e rtn + 00008814 0x00000371 bbit1 0x00000003 , 0x00002270 + 00008815 0x00000372 bbit0 0x00000000 , 0x00002266 + 00008816 0x00000374 add 0x00000011 , 0x00000010 , 0x00000006 + 00008817 0x00000375 ifetch 0x00000006 , 0x00000006 + 00008818 0x00000376 isub 0x00000002 , 0x0000003e + 00008819 0x00000377 rtn 0x00000005 + 00008820 0x00000378 branch 0x00002266 + 00008821 0x0000037b bbit0 0x00000000 , 0x00002266 + 00008822 0x0000037c add 0x00000011 , 0x00000016 , 0x00000006 + 00008823 0x0000037d ifetch 0x00000001 , 0x00000006 + 00008824 0x0000037e isub 0x00000002 , 0x0000003e + 00008825 0x0000037f rtn 0x00000005 + 00008826 0x00000380 branch 0x00002266 + 00008827 0x00000383 bbit0 0x00000001 , 0x00002266 + 00008828 0x00000385 call 0x000022b3 + 00008829 0x00000386 call 0x00002297 + 00008830 0x00000387 isub 0x00000002 , 0x0000003f + 00008831 0x00000388 increase 0x00000001 , 0x0000003f + 00008832 0x00000389 branch 0x00002291 , 0x00000002 + 00008833 0x0000038a copy 0x00000006 , 0x00000012 + 00008834 0x0000038b store 0x00000009 , 0x00000aa2 + 00008835 0x0000038c fetch 0x00000001 , 0x000044c0 + 00008836 0x0000038d nbranch 0x00002289 , 0x00000034 + 00008837 0x0000038e fetch 0x00000009 , 0x00000aa2 + 00008838 0x0000038f copy 0x00000012 , 0x00000006 + 00008839 0x00000390 increase 0x00000005 , 0x0000003f + 00008840 0x00000391 branch 0x0000228c + 00008841 0x00000393 fetch 0x00000009 , 0x00000aa2 + 00008842 0x00000394 copy 0x00000012 , 0x00000006 + 00008843 0x00000395 increase 0x00000014 , 0x0000003f + 00008844 0x00000397 nbranch 0x00002266 , 0x00000002 + 00008845 0x00000399 copy 0x00000002 , 0x00000021 + 00008846 0x0000039a call 0x000022bf + 00008847 0x0000039b force 0x00000000 , 0x0000003e + 00008848 0x0000039c rtn + 00008849 0x000003a0 iforce 0x00000012 + 00008850 0x000003a1 add 0x00000011 , 0x00000002 , 0x00000006 + 00008851 0x000003a2 ifetch 0x00000002 , 0x00000006 + 00008852 0x000003a3 branch 0x0000228d , 0x00000034 + 00008853 0x000003a4 call 0x000022bf + 00008854 0x000003a5 branch 0x0000227c + 00008855 0x000003a8 rshift16 0x0000003f , 0x0000000b + 00008856 0x000003a9 rshift8 0x0000000b , 0x0000000b + 00008857 0x000003aa branch 0x000022a1 , 0x00000005 + 00008858 0x000003ab compare 0x0000000f , 0x0000000b , 0x0000000f + 00008859 0x000003ac nrtn 0x00000001 + 00008860 0x000003ad rshift16 0x00000002 , 0x0000000b + 00008861 0x000003ae rshift8 0x0000000b , 0x0000000b + 00008862 0x000003af nrtn 0x00000005 + 00008863 0x000003b0 set1 0x0000001c , 0x00000002 + 00008864 0x000003b1 rtn + 00008865 0x000003b3 rshift16 0x00000002 , 0x0000000b + 00008866 0x000003b4 rshift8 0x0000000b , 0x0000000b + 00008867 0x000003b5 compare 0x0000000f , 0x0000000b , 0x0000000f + 00008868 0x000003b6 nrtn 0x00000001 + 00008869 0x000003b7 set1 0x0000001c , 0x0000003f + 00008870 0x000003b8 rtn + 00008871 0x000003bb bbit0 0x00000000 , 0x00002266 + 00008872 0x000003bc force 0x00000000 , 0x0000003e + 00008873 0x000003bd rtn + 00008874 0x000003c0 bbit0 0x00000000 , 0x00002266 + 00008875 0x000003c1 add 0x00000011 , 0x00000001 , 0x00000006 + 00008876 0x000003c2 ifetch 0x00000001 , 0x00000006 + 00008877 0x000003c3 bbit1 0x00000000 , 0x00002266 + 00008878 0x000003c4 add 0x00000011 , 0x00000017 , 0x00000006 + 00008879 0x000003c5 ifetch 0x00000001 , 0x00000006 + 00008880 0x000003c6 bbit0 0x00000003 , 0x00002266 + 00008881 0x000003c7 force 0x00000000 , 0x0000003e + 00008882 0x000003c8 rtn + 00008883 0x000003cb add 0x00000011 , 0x00000001 , 0x00000006 + 00008884 0x000003cc ifetcht 0x00000001 , 0x00000006 + 00008885 0x000003cd deposit 0x00000022 + 00008886 0x000003ce isolate1 0x00000001 , 0x00000002 + 00008887 0x000003cf add 0x00000011 , 0x00000004 , 0x00000006 + 00008888 0x000003d0 ifetcht 0x00000004 , 0x00000006 + 00008889 0x000003d1 rtn 0x00000001 + 00008890 0x000003d2 add 0x00000011 , 0x00000008 , 0x00000006 + 00008891 0x000003d3 ifetch 0x00000006 , 0x00000006 + 00008892 0x000003d4 call 0x00002854 + 00008893 0x000003d5 deposit 0x00000028 + 00008894 0x000003d6 rtn + 00008895 0x000003d9 add 0x00000011 , 0x00000002 , 0x00000006 + 00008896 0x000003da add 0x00000011 , 0x00000004 , 0x00000005 + 00008897 0x000003db ifetch 0x00000002 , 0x00000006 + 00008898 0x000003dc iadd 0x00000002 , 0x0000000b + 00008899 0x000003dd deposit 0x0000000b + 00008900 0x000003de istore 0x00000004 , 0x00000005 + 00008901 0x000003df branch 0x00005449 + 00008902 0x000003e3 bbit0 0x00000001 , 0x00002266 + 00008903 0x000003e4 call 0x000022b3 + 00008904 0x000003e5 iadd 0x0000001b , 0x0000003f + 00008905 0x000003e6 iadd 0x0000001b , 0x0000003f + 00008906 0x000003e7 iadd 0x00000007 , 0x0000003f + 00008907 0x000003e8 isub 0x00000002 , 0x0000003e + 00008908 0x000003e9 nbranch 0x00002266 , 0x00000002 + 00008909 0x000003ea force 0x00000000 , 0x0000003e + 00008910 0x000003eb rtn + 00008911 0x000003ee bbit0 0x00000000 , 0x00002266 + 00008912 0x000003ef deposit 0x00000002 + 00008913 0x000003f0 isub 0x00000011 , 0x0000003e + 00008914 0x000003f1 branch 0x00002266 , 0x0000003e + 00008915 0x000003f2 add 0x00000011 , 0x00000001 , 0x00000006 + 00008916 0x000003f3 ifetch 0x00000001 , 0x00000006 + 00008917 0x000003f4 bbit1 0x00000000 , 0x00002266 + 00008918 0x000003f5 ifetch 0x00000001 , 0x00000011 + 00008919 0x000003f6 set0 0x00000007 , 0x0000003f + 00008920 0x000003f7 istore 0x00000001 , 0x00000011 + 00008921 0x000003f8 branch 0x00002266 + 00008922 0x000003fc bpatch 0x0000002f , 0x00004005 + 00008923 0x000003fd call 0x00002a4f + 00008924 0x000003ff add 0x00000022 , 0x00000001 , 0x00000021 + 00008925 0x00000400 call 0x000028e2 + 00008926 0x00000401 force 0x00000003 , 0x00000024 + 00008927 0x00000402 call 0x000028d2 + 00008928 0x00000403 call 0x00002a51 + 00008929 0x00000404 call 0x00002a56 + 00008930 0x00000405 call 0x00002a64 + 00008931 0x00000406 branch 0x00002762 + 00008932 0x00000409 bpatch 0x00000030 , 0x00004006 + 00008933 0x0000040a call 0x00002a4d + 00008934 0x0000040c add 0x00000022 , 0x00000001 , 0x00000021 + 00008935 0x0000040d call 0x000028e2 + 00008936 0x0000040e force 0x00000003 , 0x00000024 + 00008937 0x0000040f call 0x000028cc + 00008938 0x00000410 call 0x0000242a + 00008939 0x00000411 call 0x000029f1 + 00008940 0x00000412 call 0x00002a5b + 00008941 0x00000413 call 0x000029eb + 00008942 0x00000415 call 0x00002a0d + 00008943 0x00000416 nrtn 0x00000018 + 00008944 0x00000417 call 0x000029bb + 00008945 0x00000418 branch 0x0000251c + 00008946 0x0000041d bpatch 0x00000031 , 0x00004006 + 00008947 0x0000041e fetch 0x00000001 , 0x00000181 + 00008948 0x0000041f iforce 0x00000004 + 00008949 0x00000420 force 0x00000001 , 0x00000001 + 00008950 0x00000421 call 0x000022da + 00008951 0x00000422 branch 0x000022e4 + 00008952 0x0000042e fetch 0x00000001 , 0x00004093 + 00008953 0x0000042f rtnbit0 0x00000000 + 00008954 0x00000430 force 0x00000004 , 0x00000007 + 00008955 0x00000431 call 0x00007f16 + 00008956 0x00000432 nrtn 0x00000034 + 00008957 0x00000433 fetcht 0x00000002 , 0x000040ad + 00008958 0x00000434 force 0x00000004 , 0x00000007 + 00008959 0x00000435 call 0x0000271c + 00008960 0x00000436 rtn 0x00000028 + 00008961 0x00000437 call 0x00002308 + 00008962 0x00000438 force 0x00000004 , 0x00000007 + 00008963 0x00000439 fetch 0x00000002 , 0x000040af + 00008964 0x0000043a nbranch 0x00007f08 , 0x00000018 + 00008965 0x0000043b random 0x0000003f + 00008966 0x0000043c iand 0x00000035 , 0x0000003f + 00008967 0x0000043d branch 0x00007f08 + 00008968 0x00000441 bpatch 0x00000032 , 0x00004006 + 00008969 0x00000442 jam 0x00000000 , 0x00000181 + 00008970 0x00000443 disable 0x00000030 + 00008971 0x00000444 disable 0x0000002e + 00008972 0x00000445 call 0x000028a4 + 00008973 0x00000446 and 0x00000022 , 0x000001fc , 0x00000021 + 00008974 0x00000447 force 0x00000001 , 0x00000024 + 00008975 0x00000448 call 0x000028d8 + 00008976 0x00000449 call 0x000028cc + 00008977 0x0000044a setflip 0x0000001d , 0x00000000 + 00008978 0x0000044b fetch 0x00000001 , 0x00000006 + 00008979 0x0000044c increase 0x00000001 , 0x0000003f + 00008980 0x0000044d store 0x00000001 , 0x00000006 + 00008981 0x0000044e call 0x000028f2 + 00008982 0x0000044f call 0x000029eb + 00008983 0x00000450 call 0x00002a14 + 00008984 0x00000451 nrtn 0x00000018 + 00008985 0x00000452 bpatch 0x00000033 , 0x00004006 + 00008986 0x00000453 force 0x00000000 , 0x0000001b + 00008987 0x00000454 call 0x000028f9 + 00008988 0x00000455 fetch 0x00000001 , 0x00000007 + 00008989 0x00000456 increase 0x00000001 , 0x0000003f + 00008990 0x00000457 store 0x00000001 , 0x00000007 + 00008991 0x00000458 call 0x000028d8 + 00008992 0x00000459 call 0x00002a4d + 00008993 0x0000045a or_into 0x00000002 , 0x00000021 + 00008994 0x0000045b force 0x00000001 , 0x00000024 + 00008995 0x0000045c call 0x000028d2 + 00008996 0x0000045d call 0x000028f2 + 00008997 0x0000045e call 0x00002a51 + 00008998 0x0000045f call 0x00002a5f + 00008999 0x00000460 deposit 0x00000022 + 00009000 0x00000461 store 0x00000004 , 0x00000161 + 00009001 0x00000462 call 0x00002a64 + 00009002 0x00000463 force 0x00000002 , 0x00000001 + 00009003 0x00000464 force 0x00000000 , 0x00000004 + 00009004 0x00000465 call 0x00002a6b + 00009005 0x00000466 call 0x00002766 + 00009006 0x00000467 call 0x00002332 + 00009007 0x00000468 and_into 0x000001fd , 0x00000021 + 00009008 0x00000469 increase 0x00000001 , 0x00000026 + 00009009 0x0000046a rtn + 00009010 0x0000046d bpatch 0x00000034 , 0x00004006 + 00009011 0x0000046e fetch 0x00000001 , 0x000040d1 + 00009012 0x0000046f rtn 0x00000034 + 00009013 0x00000470 arg 0x0000018e , 0x00000005 + 00009014 0x00000471 fetch 0x00000001 , 0x00004515 + 00009015 0x00000472 copy 0x0000003f , 0x00000039 + 00009016 0x00000473 increase 0x00000001 , 0x0000003f + 00009017 0x00000474 istore 0x00000001 , 0x00000005 + 00009018 0x00000475 copy 0x00000005 , 0x00000002 + 00009019 0x00000476 increase 0x00000001 , 0x0000003f + 00009020 0x00000477 store 0x00000002 , 0x000041dc + 00009021 0x00000478 copy 0x00000002 , 0x00000005 + 00009022 0x00000479 setarg 0x00000009 + 00009023 0x0000047a istore 0x00000001 , 0x00000005 + 00009024 0x0000047b arg 0x00004516 , 0x00000006 + 00009025 0x0000047c call 0x00007f01 + 00009026 0x0000047e arg 0x0000458d , 0x00000013 + 00009027 0x0000047f arg 0x00000004 , 0x00000039 + 00009028 0x00000480 call 0x00002354 + 00009029 0x00000481 arg 0x00004577 , 0x00000013 + 00009030 0x00000482 arg 0x00000001 , 0x00000039 + 00009031 0x00000483 call 0x00002354 + 00009032 0x00000485 force 0x0000000a , 0x00000001 + 00009033 0x00000486 jam 0x00000002 , 0x000041db + 00009034 0x00000487 setarg 0x0000018e + 00009035 0x00000488 store 0x00000002 , 0x0000016f + 00009036 0x00000489 call 0x00002a4d + 00009037 0x0000048a call 0x000028d2 + 00009038 0x0000048b call 0x00002a51 + 00009039 0x0000048c call 0x00002a5f + 00009040 0x0000048d call 0x00002a64 + 00009041 0x0000048e call 0x00002a6b + 00009042 0x0000048f call 0x00002766 + 00009043 0x00000490 rtn + 00009044 0x00000494 copy 0x00000005 , 0x00000002 + 00009045 0x00000495 copy 0x00000013 , 0x00000006 + 00009046 0x00000496 ifetch 0x00000001 , 0x00000006 + 00009047 0x00000497 rtn 0x00000034 + 00009048 0x00000499 lshift 0x0000003f , 0x0000003f + 00009049 0x0000049a loop 0x00002358 + 00009050 0x0000049b copy 0x0000003f , 0x00000011 + 00009051 0x0000049c increase 0x00000002 , 0x0000003f + 00009052 0x0000049d copy 0x0000003f , 0x00000007 + 00009053 0x0000049e fetch 0x00000002 , 0x000041dc + 00009054 0x0000049f iadd 0x00000007 , 0x0000003f + 00009055 0x000004a0 store 0x00000002 , 0x000041dc + 00009056 0x000004a1 copy 0x00000002 , 0x00000005 + 00009057 0x000004a2 copy 0x00000011 , 0x0000003f + 00009058 0x000004a3 increase 0x00000001 , 0x0000003f + 00009059 0x000004a4 istore 0x00000001 , 0x00000005 + 00009060 0x000004a5 copy 0x00000013 , 0x00000006 + 00009061 0x000004a6 ifetch 0x00000001 , 0x00000006 + 00009062 0x000004a7 ifetch 0x00000001 , 0x00000006 + 00009063 0x000004a8 istore 0x00000001 , 0x00000005 + 00009064 0x000004a9 copy 0x00000011 , 0x00000039 + 00009065 0x000004aa branch 0x00007f01 + 00009066 0x000004b1 fetch 0x00000001 , 0x00004093 + 00009067 0x000004b2 rtnbit0 0x00000001 + 00009068 0x000004b3 force 0x00000005 , 0x00000007 + 00009069 0x000004b4 call 0x00007f16 + 00009070 0x000004b5 nrtn 0x00000034 + 00009071 0x000004b6 fetcht 0x00000002 , 0x000040b1 + 00009072 0x000004b7 force 0x00000028 , 0x00000007 + 00009073 0x000004b8 call 0x0000271c + 00009074 0x000004b9 rtn 0x00000028 + 00009075 0x000004ba force 0x00000000 , 0x00000004 + 00009076 0x000004bb jam 0x00000008 , 0x00000010 + 00009077 0x000004bc set0 0x0000000b , 0x00000000 + 00009078 0x000004bd call 0x0000237a + 00009079 0x000004be force 0x00000005 , 0x00000007 + 00009080 0x000004bf fetch 0x00000002 , 0x000040b3 + 00009081 0x000004c0 branch 0x00007f08 + 00009082 0x000004c4 bpatch 0x00000035 , 0x00004006 + 00009083 0x000004c5 disable 0x00000030 + 00009084 0x000004c6 call 0x000028a4 + 00009085 0x000004c7 fetch 0x00000001 , 0x00000008 + 00009086 0x000004c8 increase 0x00000001 , 0x0000003f + 00009087 0x000004c9 store 0x00000001 , 0x00000008 + 00009088 0x000004ca force 0x00000000 , 0x00000026 + 00009089 0x000004cb call 0x000028e2 + 00009090 0x000004cc add 0x00000022 , 0x00000001 , 0x00000021 + 00009091 0x000004cd force 0x00000002 , 0x00000024 + 00009092 0x000004ce bpatch 0x00000036 , 0x00004006 + 00009093 0x000004cf call 0x000028cc + 00009094 0x000004d0 call 0x000029eb + 00009095 0x000004d1 call 0x00002a14 + 00009096 0x000004d2 nrtn 0x00000018 + 00009097 0x000004d3 call 0x000028f9 + 00009098 0x000004d4 fetch 0x00000001 , 0x00000009 + 00009099 0x000004d5 increase 0x00000001 , 0x0000003f + 00009100 0x000004d6 store 0x00000001 , 0x00000009 + 00009101 0x000004d7 force 0x00000000 , 0x0000001b + 00009102 0x000004d8 call 0x00002a4d + 00009103 0x000004d9 or_into 0x00000002 , 0x00000021 + 00009104 0x000004da force 0x00000001 , 0x00000024 + 00009105 0x000004db call 0x000028d2 + 00009106 0x000004dc call 0x00002a51 + 00009107 0x000004dd call 0x00002a5f + 00009108 0x000004de call 0x00002a64 + 00009109 0x000004df call 0x0000264d + 00009110 0x000004e0 force 0x00000000 , 0x00000004 + 00009111 0x000004e1 arg 0x00000600 , 0x0000000b + 00009112 0x000004e2 until 0x00000029 , 0x00000026 + 00009113 0x000004e3 or_into 0x00000003 , 0x00000028 + 00009114 0x000004e4 and_into 0x000001fd , 0x00000021 + 00009115 0x000004e6 bpatch 0x00000037 , 0x00004006 + 00009116 0x000004e7 increase 0x00000001 , 0x00000026 + 00009117 0x000004e8 call 0x000028cc + 00009118 0x000004e9 call 0x000029eb + 00009119 0x000004ea call 0x00002a07 + 00009120 0x000004eb nbranch 0x000023a4 , 0x00000018 + 00009121 0x000004ec call 0x00002a6b + 00009122 0x000004ed call 0x0000251e + 00009123 0x000004ee bmark1 0x0000000b , 0x000023ab + 00009124 0x000004f0 bpatch 0x00000038 , 0x00004007 + 00009125 0x000004f1 fetch 0x00000001 , 0x00000010 + 00009126 0x000004f2 rtn 0x00000034 + 00009127 0x000004f3 increase 0xffffffff , 0x0000003f + 00009128 0x000004f4 store 0x00000001 , 0x00000010 + 00009129 0x000004f5 call 0x00002a4f + 00009130 0x000004f6 branch 0x0000239b + 00009131 0x000004fa bpatch 0x00000039 , 0x00004007 + 00009132 0x000004fb set0 0x00000001 , 0x00000028 + 00009133 0x000004fc set1 0x00000000 , 0x00000028 + 00009134 0x000004fd fetch 0x00000001 , 0x0000000a + 00009135 0x000004fe increase 0x00000001 , 0x0000003f + 00009136 0x000004ff store 0x00000001 , 0x0000000a + 00009137 0x00000500 call 0x00002a4d + 00009138 0x00000501 or_into 0x00000002 , 0x00000021 + 00009139 0x00000502 call 0x000028d2 + 00009140 0x00000503 call 0x00002a51 + 00009141 0x00000504 call 0x00002a5f + 00009142 0x00000505 call 0x00002a64 + 00009143 0x00000506 call 0x0000264d + 00009144 0x00000508 compare 0x00000003 , 0x00000028 , 0x00000003 + 00009145 0x00000509 branch 0x000023bc , 0x00000001 + 00009146 0x0000050a until 0x0000003e , 0x00000017 + 00009147 0x0000050b branch 0x000023b8 + 00009148 0x0000050d fetch 0x00000004 , 0x00000165 + 00009149 0x0000050e or_into 0x00000003 , 0x0000003f + 00009150 0x0000050f icopy 0x00000028 + 00009151 0x00000512 bpatch 0x0000003a , 0x00004007 + 00009152 0x00000513 fetch 0x00000006 , 0x00000178 + 00009153 0x00000514 store 0x00000006 , 0x00000040 + 00009154 0x00000515 call 0x00002435 + 00009155 0x00000517 call 0x0000247c + 00009156 0x00000518 branch 0x000023c8 , 0x0000002d + 00009157 0x00000519 call 0x00002455 + 00009158 0x0000051a nbranch 0x000023c3 , 0x00000034 + 00009159 0x0000051b rtn + 00009160 0x0000051f bpatch 0x0000003b , 0x00004007 + 00009161 0x00000520 call 0x00002440 + 00009162 0x00000521 call 0x0000223b + 00009163 0x00000522 nrtn 0x00000005 + 00009164 0x00000523 jam 0x00000000 , 0x00000031 + 00009165 0x00000524 call 0x00002841 + 00009166 0x00000525 branch 0x00002223 + 00009167 0x0000052b bpatch 0x0000003c , 0x00004007 + 00009168 0x0000052c call 0x00002850 + 00009169 0x0000052d call 0x000023f3 + 00009170 0x0000052e rtn 0x00000028 + 00009171 0x00000530 bpatch 0x0000003d , 0x00004007 + 00009172 0x00000531 call 0x00002c69 + 00009173 0x00000532 call 0x00006caa + 00009174 0x00000533 call 0x00002514 + 00009175 0x00000534 nbranch 0x000023e2 , 0x0000002d + 00009176 0x00000535 call 0x00002a88 + 00009177 0x00000536 call 0x00006cc2 + 00009178 0x00000537 call 0x00002489 + 00009179 0x00000538 call 0x00002757 + 00009180 0x00000539 call 0x00002728 + 00009181 0x0000053a call 0x00005d08 + 00009182 0x0000053b fetch 0x00000001 , 0x0000000b + 00009183 0x0000053c increase 0x00000001 , 0x0000003f + 00009184 0x0000053d store 0x00000001 , 0x0000000b + 00009185 0x0000053e call 0x00002841 + 00009186 0x00000540 bpatch 0x0000003e , 0x00004007 + 00009187 0x00000541 call 0x00002bb1 + 00009188 0x00000542 call 0x00002a7f + 00009189 0x00000543 branch 0x000023eb , 0x00000002 + 00009190 0x00000544 call 0x000021a7 + 00009191 0x00000545 nbranch 0x000023eb , 0x00000028 + 00009192 0x00000546 call 0x000026f3 + 00009193 0x00000547 nbranch 0x000023d3 , 0x00000034 + 00009194 0x00000548 rtn + 00009195 0x0000054b bpatch 0x0000003f , 0x00004007 + 00009196 0x0000054c jam 0x00000000 , 0x00000151 + 00009197 0x0000054d jam 0x00000000 , 0x0000017f + 00009198 0x0000054e call 0x0000245d + 00009199 0x0000054f set0 0x00000011 , 0x00000000 + 00009200 0x00000550 call 0x00007fb0 + 00009201 0x00000551 fetch 0x00000001 , 0x00000030 + 00009202 0x00000552 rtn + 00009203 0x00000556 bpatch 0x00000040 , 0x00004008 + 00009204 0x00000557 call 0x000021c9 + 00009205 0x00000558 nrtn 0x00000028 + 00009206 0x00000559 copy 0x00000004 , 0x00000002 + 00009207 0x0000055a call 0x00002a6f + 00009208 0x0000055b store 0x00000001 , 0x00000181 + 00009209 0x0000055c copy 0x00000002 , 0x00000004 + 00009210 0x0000055d jam 0x00000020 , 0x00000011 + 00009211 0x0000055f bpatch 0x00000041 , 0x00004008 + 00009212 0x00000560 call 0x00002a4f + 00009213 0x00000561 force 0x00000002 , 0x00000001 + 00009214 0x00000562 call 0x0000274f + 00009215 0x00000563 deposit 0x00000022 + 00009216 0x00000564 store 0x00000004 , 0x00000161 + 00009217 0x00000565 call 0x00002762 + 00009218 0x00000566 call 0x00002a4d + 00009219 0x00000567 enable 0x0000002f + 00009220 0x00000568 call 0x000024f6 + 00009221 0x00000569 branch 0x0000240d , 0x00000018 + 00009222 0x0000056a call 0x000028f9 + 00009223 0x0000056b call 0x00002455 + 00009224 0x0000056c nbranch 0x000023fb , 0x00000034 + 00009225 0x0000056d rtnmark0 0x00000004 + 00009226 0x0000056e jam 0x00000034 , 0x0000007c + 00009227 0x0000056f set1 0x00000003 , 0x00000000 + 00009228 0x00000570 rtn + 00009229 0x00000572 enable 0x00000030 + 00009230 0x00000573 call 0x00002435 + 00009231 0x00000574 call 0x000028a4 + 00009232 0x00000576 bpatch 0x00000042 , 0x00004008 + 00009233 0x00000577 call 0x000022f2 + 00009234 0x00000578 branch 0x00002419 , 0x00000018 + 00009235 0x00000579 call 0x00002455 + 00009236 0x0000057a nbranch 0x00002410 , 0x00000034 + 00009237 0x0000057b disable 0x00000030 + 00009238 0x0000057c deposit 0x00000028 + 00009239 0x0000057d store 0x00000004 , 0x000040ca + 00009240 0x0000057e rtn + 00009241 0x00000580 enable 0x00000029 + 00009242 0x00000581 bmark0 0x00000004 , 0x0000241f + 00009243 0x00000582 set0 0x00000004 , 0x00000000 + 00009244 0x00000583 jam 0x00000003 , 0x0000007c + 00009245 0x00000584 jam 0x00000033 , 0x0000007d + 00009246 0x00000585 call 0x000062f8 + 00009247 0x00000587 deposit 0x00000004 + 00009248 0x00000588 store 0x00000001 , 0x00000077 + 00009249 0x00000589 force 0x00000000 , 0x0000003f + 00009250 0x0000058a store 0x00000006 , 0x00000038 + 00009251 0x0000058b fetch 0x00000001 , 0x00000031 + 00009252 0x0000058c set1 0x00000001 , 0x0000003f + 00009253 0x0000058d store 0x00000001 , 0x00000031 + 00009254 0x0000058e call 0x00002a88 + 00009255 0x0000058f disable 0x00000029 + 00009256 0x00000590 enable 0x00000028 + 00009257 0x00000591 rtn + 00009258 0x00000596 bpatch 0x00000043 , 0x00004008 + 00009259 0x00000597 disable 0x0000002d + 00009260 0x00000598 set0 0x00000005 , 0x00000000 + 00009261 0x00000599 set0 0x0000000a , 0x00000000 + 00009262 0x0000059a set0 0x00000010 , 0x00000000 + 00009263 0x0000059b set0 0x0000000f , 0x00000000 + 00009264 0x0000059c fetch 0x00000001 , 0x00000047 + 00009265 0x0000059d set0 0x00000005 , 0x0000003f + 00009266 0x0000059e set1 0x00000004 , 0x0000003f + 00009267 0x0000059f store 0x00000001 , 0x00000047 + 00009268 0x000005a0 rtn + 00009269 0x000005a3 bpatch 0x00000044 , 0x00004008 + 00009270 0x000005a4 jam 0x00000020 , 0x00000011 + 00009271 0x000005a5 jam 0x00000050 , 0x00000047 + 00009272 0x000005a6 fetch 0x00000002 , 0x000040bf + 00009273 0x000005a7 store 0x00000002 , 0x0000003e + 00009274 0x000005a8 deposit 0x00000022 + 00009275 0x000005a9 store 0x00000004 , 0x000040ca + 00009276 0x000005aa rtn 0x00000030 + 00009277 0x000005ab deposit 0x00000028 + 00009278 0x000005ac store 0x00000004 , 0x000040ca + 00009279 0x000005ad rtn + 00009280 0x000005b0 bpatch 0x00000045 , 0x00004008 + 00009281 0x000005b1 call 0x00005d04 + 00009282 0x000005b2 call 0x00002459 + 00009283 0x000005b3 store 0x00000001 , 0x00000046 + 00009284 0x000005b4 setarg 0x00000000 + 00009285 0x000005b5 store 0x00000002 , 0x0000025d + 00009286 0x000005b6 setarg 0x00001c80 + 00009287 0x000005b7 store 0x00000002 , 0x00000051 + 00009288 0x000005b8 fetch 0x00000001 , 0x00000030 + 00009289 0x000005b9 set1 0x00000000 , 0x0000003f + 00009290 0x000005ba store 0x00000001 , 0x00000030 + 00009291 0x000005bb jam 0x00000000 , 0x0000004b + 00009292 0x000005bc jam 0x00000000 , 0x0000004c + 00009293 0x000005bd jam 0x00000000 , 0x000000a0 + 00009294 0x000005be branch 0x00002a88 + 00009295 0x000005c2 bpatch 0x00000046 , 0x00004008 + 00009296 0x000005c3 force 0x00000000 , 0x0000003f + 00009297 0x000005c4 store 0x00000008 , 0x000041be + 00009298 0x000005c5 istore 0x00000008 , 0x00000005 + 00009299 0x000005c6 call 0x000021c5 + 00009300 0x000005c7 branch 0x00002254 + 00009301 0x000005ca fetch 0x00000001 , 0x00000011 + 00009302 0x000005cb increase 0xffffffff , 0x0000003f + 00009303 0x000005cc store 0x00000001 , 0x00000011 + 00009304 0x000005cd rtn + 00009305 0x000005d0 fetch 0x00000001 , 0x000040cf + 00009306 0x000005d1 increase 0x00000001 , 0x0000003f + 00009307 0x000005d2 store 0x00000001 , 0x000040cf + 00009308 0x000005d3 rtn + 00009309 0x000005d7 bpatch 0x00000047 , 0x00004008 + 00009310 0x000005d8 fetch 0x00000001 , 0x000041ce + 00009311 0x000005d9 beq 0x00000003 , 0x00002462 + 00009312 0x000005da fetch 0x00000001 , 0x00000048 + 00009313 0x000005db bne 0x00000001 , 0x00002466 + 00009314 0x000005dd call 0x00004d06 + 00009315 0x000005de nbranch 0x00002466 , 0x00000005 + 00009316 0x000005df call 0x000021a4 + 00009317 0x000005e0 jam 0x00000000 , 0x000041ce + 00009318 0x000005e2 bpatch 0x00000048 , 0x00004009 + 00009319 0x000005e3 call 0x000033af + 00009320 0x000005e4 call 0x000026e9 + 00009321 0x000005e5 jam 0x00000002 , 0x00000a99 + 00009322 0x000005e6 call 0x00007d86 + 00009323 0x000005e7 call 0x00005cf7 + 00009324 0x000005e8 call 0x00004d6b + 00009325 0x000005e9 call 0x0000757d + 00009326 0x000005ea fetch 0x00000001 , 0x00000030 + 00009327 0x000005eb set0 0x00000000 + 00009328 0x000005ec store 0x00000001 , 0x00000030 + 00009329 0x000005ed jam 0x00000000 , 0x00004681 + 00009330 0x000005ef fetch 0x00000001 , 0x0000004c + 00009331 0x000005f0 compare 0x00000000 , 0x0000003f , 0x000000c0 + 00009332 0x000005f1 branch 0x00002476 , 0x00000001 + 00009333 0x000005f2 set0 0x00000001 , 0x00000000 + 00009334 0x000005f4 fetch 0x00000001 , 0x00000047 + 00009335 0x000005f5 bbit0 0x00000003 , 0x00002478 + 00009336 0x000005f7 fetch 0x00000001 , 0x0000004b + 00009337 0x000005f8 rtnbit0 0x00000006 + 00009338 0x000005f9 set0 0x00000002 , 0x00000000 + 00009339 0x000005fa rtn + 00009340 0x000005fd bpatch 0x00000049 , 0x00004009 + 00009341 0x000005fe fetch 0x00000001 , 0x00000174 + 00009342 0x000005ff rtn 0x00000034 + 00009343 0x00000600 icopy 0x00000004 + 00009344 0x00000601 call 0x00002514 + 00009345 0x00000602 nrtn 0x0000002d + 00009346 0x00000603 force 0x00000000 , 0x00000001 + 00009347 0x00000604 call 0x00002757 + 00009348 0x00000605 deposit 0x00000004 + 00009349 0x00000606 store 0x00000001 , 0x00000077 + 00009350 0x00000607 force 0x00000000 , 0x0000003f + 00009351 0x00000608 store 0x00000001 , 0x00000174 + 00009352 0x00000609 rtn + 00009353 0x00000610 bpatch 0x0000004a , 0x00004009 + 00009354 0x00000611 fetch 0x00000001 , 0x00000030 + 00009355 0x00000612 bbit0 0x00000002 , 0x00002496 + 00009356 0x00000613 force 0x00000007 , 0x00000001 + 00009357 0x00000614 bmark0 0x00000007 , 0x00002495 + 00009358 0x00000615 call 0x00002725 + 00009359 0x00000616 nbranch 0x00002496 , 0x00000001 + 00009360 0x00000617 branch 0x00002496 , 0x0000002e + 00009361 0x00000618 call 0x000024c1 + 00009362 0x00000619 setarg 0x00000002 + 00009363 0x0000061a store 0x00000002 , 0x000040c8 + 00009364 0x0000061b rtn + 00009365 0x0000061d nrtn 0x0000002e + 00009366 0x0000061f bpatch 0x0000004b , 0x00004009 + 00009367 0x00000620 call 0x00002243 + 00009368 0x00000621 nbranch 0x000024a7 , 0x00000005 + 00009369 0x00000622 fetch 0x00000001 , 0x00000047 + 00009370 0x00000623 bbit0 0x00000003 , 0x000024b0 + 00009371 0x00000625 bmark1 0x00000005 , 0x000024b4 + 00009372 0x00000626 fetch 0x00000001 , 0x0000017f + 00009373 0x00000627 bbit1 0x00000006 , 0x000024ba + 00009374 0x00000628 fetch 0x00000002 , 0x000040c8 + 00009375 0x00000629 increase 0xffffffff , 0x0000003f + 00009376 0x0000062a store 0x00000002 , 0x000040c8 + 00009377 0x0000062b branch 0x000024a5 , 0x00000034 + 00009378 0x0000062c fetch 0x00000001 , 0x000040c5 + 00009379 0x0000062d iforce 0x00000001 + 00009380 0x0000062e rtn + 00009381 0x00000631 bpatch 0x0000004c , 0x00004009 + 00009382 0x00000632 call 0x00002687 + 00009383 0x00000634 call 0x00002725 + 00009384 0x00000635 branch 0x000024b0 , 0x00000001 + 00009385 0x00000636 call 0x0000600a + 00009386 0x00000637 branch 0x000024be , 0x00000028 + 00009387 0x00000638 fetch 0x00000001 , 0x0000004b + 00009388 0x00000639 bbit1 0x00000006 , 0x000024c0 + 00009389 0x0000063a bmark1 0x00000005 , 0x000024b4 + 00009390 0x0000063b fetch 0x00000001 , 0x0000017f + 00009391 0x0000063c bbit1 0x00000006 , 0x000024ba + 00009392 0x0000063e force 0x00000001 , 0x00000001 + 00009393 0x0000063f rtn 0x00000029 + 00009394 0x00000640 force 0x00000000 , 0x00000001 + 00009395 0x00000641 rtn + 00009396 0x00000643 bpatch 0x0000004d , 0x00004009 + 00009397 0x00000644 fetch 0x00000001 , 0x00000019 + 00009398 0x00000645 iforce 0x00000001 + 00009399 0x00000646 rtnne 0x00000001 + 00009400 0x00000647 force 0x00000000 , 0x00000001 + 00009401 0x00000648 rtn + 00009402 0x0000064a fetch 0x00000001 , 0x00000158 + 00009403 0x0000064b and 0x0000003f , 0x0000000f , 0x00000001 + 00009404 0x0000064c set1 0x00000005 , 0x00000000 + 00009405 0x0000064d rtn + 00009406 0x0000064f force 0x00000013 , 0x00000001 + 00009407 0x00000650 branch 0x000024c1 + 00009408 0x00000652 call 0x000024ca + 00009409 0x00000655 bpatch 0x0000004e , 0x00004009 + 00009410 0x00000656 fetcht 0x00000001 , 0x00000047 + 00009411 0x00000657 set1 0x00000003 , 0x00000002 + 00009412 0x00000658 storet 0x00000001 , 0x00000047 + 00009413 0x00000659 deposit 0x00000001 + 00009414 0x0000065a store 0x00000001 , 0x000040c5 + 00009415 0x0000065b setarg 0x0000ffff + 00009416 0x0000065c store 0x00000002 , 0x000040c8 + 00009417 0x0000065d rtn + 00009418 0x00000660 bpatch 0x0000004f , 0x00004009 + 00009419 0x00000661 fetch 0x00000001 , 0x0000004c + 00009420 0x00000662 isolate1 0x00000005 , 0x0000003f + 00009421 0x00000663 fetch 0x00000002 , 0x000041dc + 00009422 0x00000664 branch 0x000024e0 , 0x00000001 + 00009423 0x00000665 force 0x00000003 , 0x00000001 + 00009424 0x00000666 sub 0x0000003f , 0x00000011 , 0x0000003e + 00009425 0x00000667 rtn 0x00000002 + 00009426 0x00000668 force 0x00000004 , 0x00000001 + 00009427 0x00000669 sub 0x0000003f , 0x0000001b , 0x0000003e + 00009428 0x0000066a rtn 0x00000002 + 00009429 0x0000066b force 0x0000000a , 0x00000001 + 00009430 0x0000066c sub 0x0000003f , 0x00000079 , 0x0000003e + 00009431 0x0000066d rtn 0x00000002 + 00009432 0x0000066e force 0x0000000b , 0x00000001 + 00009433 0x0000066f sub 0x0000003f , 0x000000b7 , 0x0000003e + 00009434 0x00000670 rtn 0x00000002 + 00009435 0x00000671 force 0x0000000e , 0x00000001 + 00009436 0x00000672 sub 0x0000003f , 0x000000e0 , 0x0000003e + 00009437 0x00000673 rtn 0x00000002 + 00009438 0x00000674 force 0x0000000f , 0x00000001 + 00009439 0x00000675 rtn + 00009440 0x00000677 force 0x00000003 , 0x00000001 + 00009441 0x00000678 sub 0x0000003f , 0x00000011 , 0x0000003e + 00009442 0x00000679 rtn 0x00000002 + 00009443 0x0000067a force 0x00000004 , 0x00000001 + 00009444 0x0000067b sub 0x0000003f , 0x00000036 , 0x0000003e + 00009445 0x0000067c rtn 0x00000002 + 00009446 0x0000067d force 0x0000000a , 0x00000001 + 00009447 0x0000067e arg 0x0000016f , 0x00000002 + 00009448 0x0000067f isub 0x00000002 , 0x0000003e + 00009449 0x00000680 nrtn 0x00000002 + 00009450 0x00000681 force 0x0000000e , 0x00000001 + 00009451 0x00000682 arg 0x000002a7 , 0x00000002 + 00009452 0x00000683 isub 0x00000002 , 0x0000003e + 00009453 0x00000684 nrtn 0x00000002 + 00009454 0x00000685 force 0x0000000f , 0x00000001 + 00009455 0x00000686 rtn + 00009456 0x00000690 fetch 0x00000001 , 0x00000030 + 00009457 0x00000691 bbit0 0x00000001 , 0x000024f5 + 00009458 0x00000692 fetch 0x00000002 , 0x00000032 + 00009459 0x00000693 branch 0x000024f5 , 0x00000034 + 00009460 0x00000694 nbranch 0x000024f7 , 0x0000002e + 00009461 0x00000696 call 0x00002a4f + 00009462 0x00000698 add 0x00000028 , 0x00000001 , 0x00000021 + 00009463 0x0000069a enable 0x00000010 + 00009464 0x0000069b fetch 0x00000002 , 0x0000003e + 00009465 0x0000069c rshift 0x0000003f , 0x0000003f + 00009466 0x0000069d arg 0x00000500 , 0x00000002 + 00009467 0x0000069e iadd 0x00000002 , 0x0000003f + 00009468 0x0000069f call 0x00002a24 + 00009469 0x000006a0 call 0x000028ea + 00009470 0x000006a1 force 0x00000003 , 0x00000024 + 00009471 0x000006a2 call 0x000028cc + 00009472 0x000006a3 call 0x0000242a + 00009473 0x000006a4 call 0x000029f1 + 00009474 0x000006a5 bpatch 0x00000050 , 0x0000400a + 00009475 0x000006a6 fetch 0x00000002 , 0x0000003e + 00009476 0x000006a7 rshift 0x0000003f , 0x0000003f + 00009477 0x000006a8 call 0x00002a24 + 00009478 0x000006a9 call 0x000029eb + 00009479 0x000006aa enable 0x0000000d + 00009480 0x000006ab fetch 0x00000002 , 0x0000003e + 00009481 0x000006ac arg 0x000003bb , 0x00000002 + 00009482 0x000006ad iadd 0x00000002 , 0x0000001b + 00009483 0x000006ae correlate 0x0000003e , 0x00000003 + 00009484 0x000006af copy 0x0000001a , 0x00000002 + 00009485 0x000006b0 storet 0x00000006 , 0x0000009a + 00009486 0x000006b1 disable 0x0000000d + 00009487 0x000006b2 nrtn 0x00000018 + 00009488 0x000006b3 arg 0x000003bb , 0x00000029 + 00009489 0x000006b4 copy 0x00000021 , 0x00000028 + 00009490 0x000006b5 branch 0x00002b05 , 0x0000002b + 00009491 0x000006b6 rtn + 00009492 0x000006ba bpatch 0x00000051 , 0x0000400a + 00009493 0x000006bb call 0x000024f0 + 00009494 0x000006bc nbranch 0x000028f9 , 0x00000018 + 00009495 0x000006bd call 0x000029bb + 00009496 0x000006be bmark0 0x00000011 , 0x0000251c + 00009497 0x000006bf fetch 0x00000002 , 0x000000f6 + 00009498 0x000006c0 increase 0x00000001 , 0x0000003f + 00009499 0x000006c1 store 0x00000002 , 0x000000f6 + 00009500 0x000006c3 rshift 0x00000021 , 0x00000002 + 00009501 0x000006c4 or 0x00000002 , 0x00000040 , 0x0000000e + 00009502 0x000006c6 bpatch 0x00000052 , 0x0000400a + 00009503 0x000006c7 enable 0x00000007 + 00009504 0x000006c8 enable 0x0000000a + 00009505 0x000006c9 enable 0x0000000b + 00009506 0x000006ca parse 0x00000003 , 0x00000000 , 0x00000003 + 00009507 0x000006cb rshift8 0x0000000c , 0x0000003f + 00009508 0x000006cc store 0x00000001 , 0x0000015d + 00009509 0x000006cd parse 0x00000003 , 0x00000000 , 0x00000004 + 00009510 0x000006ce inject 0x00000000 , 0x00000007 + 00009511 0x000006cf copy 0x0000000c , 0x0000003f + 00009512 0x000006d0 store 0x00000001 , 0x00000019 + 00009513 0x000006d1 parse 0x00000003 , 0x00000000 , 0x00000003 + 00009514 0x000006d2 rshift8 0x0000000c , 0x0000003f + 00009515 0x000006d3 store 0x00000001 , 0x0000015e + 00009516 0x000006d4 fetch 0x00000001 , 0x00000019 + 00009517 0x000006d5 sub 0x0000003f , 0x00000003 , 0x0000003e + 00009518 0x000006d6 branch 0x00002533 , 0x00000002 + 00009519 0x000006d7 beq 0x00000007 , 0x00002533 + 00009520 0x000006d8 fetch 0x00000001 , 0x0000004c + 00009521 0x000006d9 isolate1 0x00000005 , 0x0000003f + 00009522 0x000006da setflag 0x00000001 , 0x00000001 , 0x00000015 + 00009523 0x000006dc bpatch 0x00000053 , 0x0000400a + 00009524 0x000006dd parse 0x00000003 , 0x00000000 , 0x00000008 + 00009525 0x000006de disable 0x0000000b + 00009526 0x000006df disable 0x0000000a + 00009527 0x000006e0 branch 0x00002631 , 0x00000006 + 00009528 0x000006e1 bmark0 0x00000011 , 0x0000253c + 00009529 0x000006e2 fetch 0x00000002 , 0x000000f8 + 00009530 0x000006e3 increase 0x00000001 , 0x0000003f + 00009531 0x000006e4 store 0x00000002 , 0x000000f8 + 00009532 0x000006e6 bpatch 0x00000054 , 0x0000400a + 00009533 0x000006e7 fetch 0x00000001 , 0x0000015d + 00009534 0x000006e8 compare 0x00000000 , 0x0000003f , 0x00000007 + 00009535 0x000006e9 setflag 0x00000001 , 0x0000000a , 0x00000000 + 00009536 0x000006ea branch 0x0000254c , 0x00000001 + 00009537 0x000006eb icompare 0x00000007 , 0x00000004 + 00009538 0x000006ec branch 0x0000254b , 0x00000001 + 00009539 0x000006ed bmark0 0x00000007 , 0x0000264d + 00009540 0x000006ee fetcht 0x00000001 , 0x000000b0 + 00009541 0x000006ef icompare 0x00000007 , 0x00000002 + 00009542 0x000006f0 nbranch 0x0000264d , 0x00000001 + 00009543 0x000006f1 fetch 0x00000001 , 0x00000047 + 00009544 0x000006f2 set0 0x00000005 , 0x0000003f + 00009545 0x000006f3 set1 0x00000004 , 0x0000003f + 00009546 0x000006f4 store 0x00000001 , 0x00000047 + 00009547 0x000006f6 enable 0x0000002d + 00009548 0x000006f8 bpatch 0x00000055 , 0x0000400a + 00009549 0x000006f9 fetch 0x00000001 , 0x00000019 + 00009550 0x000006fa icopy 0x00000001 + 00009551 0x000006fb bmark1 0x0000000a , 0x0000255b + 00009552 0x000006fc fetcht 0x00000001 , 0x0000015e + 00009553 0x000006fd fetch 0x00000001 , 0x00000047 + 00009554 0x000006fe set0 0x00000000 , 0x0000003f + 00009555 0x000006ff isolate1 0x00000000 , 0x00000002 + 00009556 0x00000700 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00009557 0x00000701 isolate1 0x00000001 , 0x00000002 + 00009558 0x00000702 setflag 0x00000001 , 0x00000001 , 0x0000003f + 00009559 0x00000703 store 0x00000001 , 0x00000047 + 00009560 0x00000704 isolate0 0x00000001 , 0x00000002 + 00009561 0x00000705 branch 0x0000255b , 0x00000001 + 00009562 0x00000706 call 0x00002687 + 00009563 0x00000708 bpatch 0x00000056 , 0x0000400a + 00009564 0x00000709 arg 0x00000000 , 0x00000002 + 00009565 0x0000070a call 0x00002a1c + 00009566 0x0000070b and 0x00000001 , 0x0000000f , 0x0000003f + 00009567 0x0000070c beq 0x00000001 , 0x00002587 + 00009568 0x0000070d beq 0x00000000 , 0x0000264d + 00009569 0x0000070e beq 0x00000002 , 0x00002659 + 00009570 0x0000070f fetcht 0x00000001 , 0x0000015e + 00009571 0x00000710 fetch 0x00000001 , 0x00000047 + 00009572 0x00000711 icompare 0x00000004 , 0x00000002 + 00009573 0x00000712 nbranch 0x00002569 , 0x00000001 + 00009574 0x00000713 bmark0 0x0000000a , 0x00002568 + 00009575 0x00000714 bbit0 0x00000007 , 0x00002569 + 00009576 0x00000716 set1 0x0000000f , 0x00000000 + 00009577 0x00000718 bpatch 0x00000057 , 0x0000400a + 00009578 0x00000719 deposit 0x00000001 + 00009579 0x0000071a beq 0x00000003 , 0x00002589 + 00009580 0x0000071b beq 0x00000004 , 0x0000258d + 00009581 0x0000071c beq 0x00000007 , 0x00002578 + 00009582 0x0000071d beq 0x00000008 , 0x0000258c + 00009583 0x0000071e arg 0x00000004 , 0x00000002 + 00009584 0x0000071f call 0x00002a1c + 00009585 0x00000720 beq 0x0000000a , 0x00002588 + 00009586 0x00000721 beq 0x0000000b , 0x0000258b + 00009587 0x00000722 arg 0x00000008 , 0x00000002 + 00009588 0x00000723 call 0x00002a1c + 00009589 0x00000724 beq 0x0000000e , 0x00002588 + 00009590 0x00000725 beq 0x0000000f , 0x0000258b + 00009591 0x00000726 rtn + 00009592 0x0000072a bpatch 0x00000058 , 0x0000400b + 00009593 0x0000072b enable 0x0000000d + 00009594 0x0000072c enable 0x00000009 + 00009595 0x0000072d enable 0x0000000e + 00009596 0x0000072e arg 0x000000d1 , 0x00000005 + 00009597 0x0000072f force 0x0000001e , 0x00000039 + 00009598 0x00000731 parse 0x00000003 , 0x00000000 , 0x00000008 + 00009599 0x00000732 rshift3 0x0000000c , 0x0000003f + 00009600 0x00000733 istore 0x00000001 , 0x00000005 + 00009601 0x00000734 loop 0x0000257e + 00009602 0x00000735 bmark0 0x00000007 , 0x0000264d + 00009603 0x00000736 parse 0x00000003 , 0x00000000 , 0x00000010 + 00009604 0x00000737 nsetflag 0x00000006 , 0x00000008 , 0x00000000 + 00009605 0x00000738 branch 0x0000263d , 0x00000006 + 00009606 0x00000739 branch 0x00002620 + 00009607 0x0000073d branch 0x0000264d + 00009608 0x00000741 set1 0x00000010 , 0x00000000 + 00009609 0x00000743 enable 0x0000000c + 00009610 0x00000744 branch 0x0000258e + 00009611 0x00000748 set1 0x00000010 , 0x00000000 + 00009612 0x0000074a set1 0x00000002 , 0x00000015 + 00009613 0x0000074c enable 0x0000000d + 00009614 0x0000074e bpatch 0x00000059 , 0x0000400b + 00009615 0x0000074f bmark1 0x00000001 , 0x0000264d + 00009616 0x00000750 isolate0 0x00000001 , 0x00000015 + 00009617 0x00000751 branch 0x0000259a , 0x00000001 + 00009618 0x00000752 disable 0x00000007 + 00009619 0x00000753 enable 0x0000000d + 00009620 0x00000754 disable 0x0000000c + 00009621 0x00000755 add 0x00000022 , 0x00000002 , 0x0000000b + 00009622 0x00000756 correlate 0x00000022 , 0x00000026 + 00009623 0x00000757 nbranch 0x0000263d , 0x00000018 + 00009624 0x00000758 set1 0x00000010 , 0x00000000 + 00009625 0x00000759 enable 0x00000007 + 00009626 0x0000075b bpatch 0x0000005a , 0x0000400b + 00009627 0x0000075c enable 0x0000000e + 00009628 0x0000075d enable 0x00000009 + 00009629 0x0000075e parse 0x00000003 , 0x00000000 , 0x00000003 + 00009630 0x0000075f rshift8 0x0000000c , 0x0000003f + 00009631 0x00000760 store 0x00000001 , 0x00000180 + 00009632 0x00000761 parse 0x00000003 , 0x00000000 , 0x00000005 + 00009633 0x00000762 bmark1 0x00000010 , 0x000025a5 + 00009634 0x00000763 rshift3 0x0000000c , 0x00000039 + 00009635 0x00000764 rshift3 0x00000039 , 0x00000039 + 00009636 0x00000765 branch 0x000025a8 + 00009637 0x00000767 parse 0x00000003 , 0x00000000 , 0x00000005 + 00009638 0x00000768 rshift 0x0000000c , 0x00000039 + 00009639 0x00000769 parse 0x00000003 , 0x00000000 , 0x00000003 + 00009640 0x0000076b bpatch 0x0000005b , 0x0000400b + 00009641 0x0000076c deposit 0x00000039 + 00009642 0x0000076d store 0x00000002 , 0x0000015f + 00009643 0x0000076e branch 0x000025e8 , 0x00000034 + 00009644 0x0000076f isub 0x00000035 , 0x0000003e + 00009645 0x00000770 branch 0x0000263d , 0x00000002 + 00009646 0x00000771 bpatch 0x0000005c , 0x0000400b + 00009647 0x00000772 set0 0x00000000 , 0x00000000 + 00009648 0x00000773 fetch 0x00000001 , 0x00000180 + 00009649 0x00000774 and_into 0x00000003 , 0x0000003f + 00009650 0x00000775 arg 0x00000551 , 0x00000005 + 00009651 0x00000776 beq 0x00000003 , 0x000025ba + 00009652 0x00000777 bmark1 0x00000011 , 0x000025e4 + 00009653 0x00000779 fetch 0x00000001 , 0x00000180 + 00009654 0x0000077a and_into 0x00000003 , 0x0000003f + 00009655 0x0000077b beq 0x00000002 , 0x000025bf + 00009656 0x0000077c beq 0x00000001 , 0x000025d3 + 00009657 0x0000077d branch 0x0000263d + 00009658 0x00000780 fetch 0x00000002 , 0x0000015f + 00009659 0x00000781 sub 0x0000003f , 0x00000070 , 0x0000003e + 00009660 0x00000782 nbranch 0x0000263d , 0x00000002 + 00009661 0x00000783 bmark1 0x0000000f , 0x00002620 + 00009662 0x00000784 branch 0x000025e4 + 00009663 0x00000788 bpatch 0x0000005d , 0x0000400b + 00009664 0x00000789 bmark1 0x0000000f , 0x00002620 + 00009665 0x0000078a fetch 0x00000002 , 0x0000015f + 00009666 0x0000078b arg 0x000002e0 , 0x00000002 + 00009667 0x0000078c isub 0x00000002 , 0x0000003e + 00009668 0x0000078d branch 0x0000263d , 0x00000002 + 00009669 0x0000078e fetch 0x00000001 , 0x00000263 + 00009670 0x0000078f bbit0 0x00000000 , 0x000025c9 + 00009671 0x00000790 bbit0 0x00000001 , 0x000025ce + 00009672 0x00000791 branch 0x0000264d + 00009673 0x00000793 jam 0x00000001 , 0x00000261 + 00009674 0x00000794 fetch 0x00000002 , 0x0000025d + 00009675 0x00000795 bne 0x00000000 , 0x0000264d + 00009676 0x00000796 arg 0x00001000 , 0x00000005 + 00009677 0x00000797 branch 0x000025e4 + 00009678 0x00000799 jam 0x00000002 , 0x00000261 + 00009679 0x0000079a fetch 0x00000002 , 0x0000025f + 00009680 0x0000079b bne 0x00000000 , 0x0000264d + 00009681 0x0000079c arg 0x00001400 , 0x00000005 + 00009682 0x0000079d branch 0x000025e4 + 00009683 0x000007a0 bpatch 0x0000005e , 0x0000400b + 00009684 0x000007a1 bmark1 0x0000000f , 0x00002620 + 00009685 0x000007a2 fetch 0x00000002 , 0x0000015f + 00009686 0x000007a3 arg 0x000002e0 , 0x00000002 + 00009687 0x000007a4 isub 0x00000002 , 0x0000003e + 00009688 0x000007a5 branch 0x0000263d , 0x00000002 + 00009689 0x000007a6 fetch 0x00000001 , 0x00000261 + 00009690 0x000007a7 beq 0x00000001 , 0x000025dd + 00009691 0x000007a8 beq 0x00000002 , 0x000025e1 + 00009692 0x000007a9 branch 0x0000264d + 00009693 0x000007ab arg 0x00001000 , 0x00000005 + 00009694 0x000007ac fetch 0x00000002 , 0x0000025d + 00009695 0x000007ad iadd 0x00000005 , 0x00000005 + 00009696 0x000007ae branch 0x000025e4 + 00009697 0x000007b0 arg 0x00001400 , 0x00000005 + 00009698 0x000007b1 fetch 0x00000002 , 0x0000025f + 00009699 0x000007b2 iadd 0x00000005 , 0x00000005 + 00009700 0x000007b4 parse 0x00000003 , 0x00000000 , 0x00000008 + 00009701 0x000007b5 rshift3 0x0000000c , 0x0000003f + 00009702 0x000007b6 istore 0x00000001 , 0x00000005 + 00009703 0x000007b7 loop 0x000025e4 + 00009704 0x000007b9 bpatch 0x0000005f , 0x0000400b + 00009705 0x000007ba parse 0x00000003 , 0x00000000 , 0x00000010 + 00009706 0x000007bb branch 0x00002637 , 0x00000006 + 00009707 0x000007bc fetch 0x00000001 , 0x00004363 + 00009708 0x000007bd beq 0x00000001 , 0x0000264d + 00009709 0x000007be bmark1 0x00000011 , 0x0000260d + 00009710 0x000007bf bmark1 0x0000000f , 0x0000264a + 00009711 0x000007c0 fetch 0x00000001 , 0x00000180 + 00009712 0x000007c1 compare 0x00000003 , 0x0000003f , 0x00000003 + 00009713 0x000007c2 branch 0x0000260d , 0x00000001 + 00009714 0x000007c3 fetch 0x00000002 , 0x0000015f + 00009715 0x000007c4 branch 0x0000260d , 0x00000034 + 00009716 0x000007c5 bpatch 0x00000060 , 0x0000400c + 00009717 0x000007c6 fetch 0x00000001 , 0x00000261 + 00009718 0x000007c7 beq 0x00000001 , 0x000025f9 + 00009719 0x000007c8 beq 0x00000002 , 0x00002603 + 00009720 0x000007c9 branch 0x00002a8c + 00009721 0x000007cb fetch 0x00000002 , 0x0000025d + 00009722 0x000007cc fetcht 0x00000002 , 0x0000015f + 00009723 0x000007cd iadd 0x00000002 , 0x0000003f + 00009724 0x000007ce store 0x00000002 , 0x0000025d + 00009725 0x000007cf beq 0x00000000 , 0x00002a8c + 00009726 0x000007d0 fetcht 0x00000002 , 0x00001000 + 00009727 0x000007d1 increase 0x00000004 , 0x00000002 + 00009728 0x000007d2 isub 0x00000002 , 0x0000003e + 00009729 0x000007d3 call 0x00002747 , 0x00000005 + 00009730 0x000007d4 branch 0x0000260d + 00009731 0x000007d6 fetch 0x00000002 , 0x0000025f + 00009732 0x000007d7 fetcht 0x00000002 , 0x0000015f + 00009733 0x000007d8 iadd 0x00000002 , 0x0000003f + 00009734 0x000007d9 store 0x00000002 , 0x0000025f + 00009735 0x000007da beq 0x00000000 , 0x00002a8c + 00009736 0x000007db fetcht 0x00000002 , 0x00001400 + 00009737 0x000007dc add 0x00000002 , 0x00000004 , 0x00000002 + 00009738 0x000007dd isub 0x00000002 , 0x0000003e + 00009739 0x000007de call 0x0000274b , 0x00000005 + 00009740 0x000007df branch 0x0000260d + 00009741 0x000007e1 bpatch 0x00000061 , 0x0000400c + 00009742 0x000007e2 fetcht 0x00000001 , 0x0000004c + 00009743 0x000007e3 fetch 0x00000001 , 0x00000180 + 00009744 0x000007e4 compare 0x00000003 , 0x0000003f , 0x00000003 + 00009745 0x000007e5 setflag 0x00000001 , 0x00000006 , 0x00000002 + 00009746 0x000007e6 nsetflag 0x00000001 , 0x00000007 , 0x00000002 + 00009747 0x000007e7 storet 0x00000001 , 0x0000004c + 00009748 0x000007e8 nbranch 0x00002616 , 0x00000001 + 00009749 0x000007e9 set1 0x00000001 , 0x00000000 + 00009750 0x000007eb bmark0 0x00000011 , 0x00002620 + 00009751 0x000007ec isolate1 0x00000006 , 0x00000002 + 00009752 0x000007ed branch 0x00002620 , 0x00000001 + 00009753 0x000007ee fetch 0x00000002 , 0x000000fa + 00009754 0x000007ef increase 0x00000001 , 0x0000003f + 00009755 0x000007f0 store 0x00000002 , 0x000000fa + 00009756 0x000007f1 set1 0x00000005 , 0x00000000 + 00009757 0x000007f2 set0 0x00000007 , 0x00000002 + 00009758 0x000007f3 set0 0x00000001 , 0x00000000 + 00009759 0x000007f4 storet 0x00000001 , 0x0000004c + 00009760 0x000007f6 bpatch 0x00000062 , 0x0000400c + 00009761 0x000007f7 fetcht 0x00000001 , 0x0000015e + 00009762 0x000007f8 fetch 0x00000001 , 0x00000047 + 00009763 0x000007f9 set1 0x00000005 , 0x0000003f + 00009764 0x000007fa isolate1 0x00000002 , 0x00000002 + 00009765 0x000007fb setflag 0x00000001 , 0x00000002 , 0x0000003f + 00009766 0x000007fc isolate1 0x0000000a , 0x00000000 + 00009767 0x000007fd setflag 0x00000001 , 0x00000007 , 0x0000003f + 00009768 0x000007fe store 0x00000001 , 0x00000047 + 00009769 0x000007ff fetch 0x00000002 , 0x0000015f + 00009770 0x00000800 nbranch 0x0000264d , 0x00000034 + 00009771 0x00000801 fetch 0x00000001 , 0x0000004c + 00009772 0x00000802 set0 0x00000007 , 0x0000003f + 00009773 0x00000803 store 0x00000001 , 0x0000004c + 00009774 0x00000804 fetch 0x00000001 , 0x00000180 + 00009775 0x00000805 compare 0x00000001 , 0x0000003f , 0x00000007 + 00009776 0x00000807 branch 0x0000264d + 00009777 0x0000080a bpatch 0x00000063 , 0x0000400c + 00009778 0x0000080b disable 0x0000002d + 00009779 0x0000080c fetch 0x00000002 , 0x0000001a + 00009780 0x0000080d increase 0x00000001 , 0x0000003f + 00009781 0x0000080e store 0x00000002 , 0x0000001a + 00009782 0x0000080f branch 0x0000264d + 00009783 0x00000811 fetch 0x00000002 , 0x0000001c + 00009784 0x00000812 increase 0x00000001 , 0x0000003f + 00009785 0x00000813 store 0x00000002 , 0x0000001c + 00009786 0x00000814 call 0x0000263e + 00009787 0x00000815 bmark0 0x00000011 , 0x0000263d + 00009788 0x00000816 set1 0x00000005 , 0x00000000 + 00009789 0x00000818 branch 0x0000264d + 00009790 0x0000081b bpatch 0x00000064 , 0x0000400c + 00009791 0x0000081c fetch 0x00000001 , 0x00000180 + 00009792 0x0000081d compare 0x00000003 , 0x0000003f , 0x00000003 + 00009793 0x0000081e nbranch 0x00002646 , 0x00000001 + 00009794 0x00000820 fetcht 0x00000001 , 0x0000004c + 00009795 0x00000821 set0 0x00000006 , 0x00000002 + 00009796 0x00000822 storet 0x00000001 , 0x0000004c + 00009797 0x00000823 rtn + 00009798 0x00000827 fetcht 0x00000001 , 0x0000004c + 00009799 0x00000828 set0 0x00000007 , 0x00000002 + 00009800 0x00000829 storet 0x00000001 , 0x0000004c + 00009801 0x0000082a branch 0x00004c0b + 00009802 0x0000082d fetch 0x00000001 , 0x00000047 + 00009803 0x0000082e set1 0x00000005 , 0x0000003f + 00009804 0x0000082f store 0x00000001 , 0x00000047 + 00009805 0x00000831 bpatch 0x00000065 , 0x0000400c + 00009806 0x00000832 disable 0x0000001d + 00009807 0x00000833 disable 0x0000001c + 00009808 0x00000834 disable 0x0000000d + 00009809 0x00000835 disable 0x0000000c + 00009810 0x00000836 disable 0x00000009 + 00009811 0x00000837 disable 0x0000000e + 00009812 0x00000838 disable 0x00000007 + 00009813 0x00000839 branch 0x000028f9 , 0x00000021 + 00009814 0x0000083a until 0x0000003e , 0x00000027 + 00009815 0x0000083b nop 0x00000064 + 00009816 0x0000083c branch 0x000028f9 + 00009817 0x0000083f bpatch 0x00000066 , 0x0000400c + 00009818 0x00000840 enable 0x00000009 + 00009819 0x00000841 enable 0x0000000c + 00009820 0x00000842 parse 0x00000003 , 0x00000000 , 0x00000048 + 00009821 0x00000843 isolate1 0x0000003a , 0x0000003f + 00009822 0x00000844 setflag 0x00000001 , 0x00000000 , 0x00000000 + 00009823 0x00000845 copy 0x00000020 , 0x00000002 + 00009824 0x00000846 ialigned 0x00000020 + 00009825 0x00000847 ialigned 0x0000001e + 00009826 0x00000848 pulse 0x00000015 + 00009827 0x00000849 setsect 0x00000002 , 0x000fffff + 00009828 0x0000084a setsect 0x00000003 , 0x0000ffff + 00009829 0x0000084b nop 0x00000020 + 00009830 0x0000084c iverify 0x0000000d + 00009831 0x0000084d deposit 0x0000002c + 00009832 0x0000084e store 0x00000003 , 0x00000178 + 00009833 0x0000084f deposit 0x0000002d + 00009834 0x00000850 store 0x00000001 , 0x0000017b + 00009835 0x00000851 copy 0x00000002 , 0x00000020 + 00009836 0x00000852 branch 0x0000266e , 0x00000001 + 00009837 0x00000853 branch 0x0000263d + 00009838 0x00000855 bpatch 0x00000067 , 0x0000400c + 00009839 0x00000856 parse 0x00000003 , 0x00000000 , 0x00000048 + 00009840 0x00000857 ialigned 0x0000001f + 00009841 0x00000858 ialigned 0x00000004 + 00009842 0x00000859 ialigned 0x0000002e + 00009843 0x0000085a ialigned 0x00000012 + 00009844 0x0000085b force 0x00000000 , 0x0000003f + 00009845 0x0000085c parse 0x00000003 , 0x00000000 , 0x00000010 + 00009846 0x0000085d branch 0x0000263d , 0x00000006 + 00009847 0x0000085e setarg 0x0ffffffc + 00009848 0x0000085f iand 0x00000012 , 0x0000003f + 00009849 0x00000860 store 0x00000004 , 0x00000165 + 00009850 0x00000861 deposit 0x0000001d + 00009851 0x00000862 store 0x00000003 , 0x00000175 + 00009852 0x00000863 deposit 0x0000001c + 00009853 0x00000864 store 0x00000001 , 0x00000173 + 00009854 0x00000865 deposit 0x00000004 + 00009855 0x00000866 store 0x00000001 , 0x00000174 + 00009856 0x00000867 deposit 0x0000002e + 00009857 0x00000868 store 0x00000002 , 0x0000017c + 00009858 0x00000869 deposit 0x00000021 + 00009859 0x0000086a inject 0x00000001 , 0x00000020 + 00009860 0x0000086b compare 0x00000002 , 0x00000001 , 0x0000000f + 00009861 0x0000086c setflag 0x00000001 , 0x0000000b , 0x00000000 + 00009862 0x0000086d branch 0x0000264d + 00009863 0x00000870 bpatch 0x00000068 , 0x0000400d + 00009864 0x00000871 fetch 0x00000001 , 0x00000047 + 00009865 0x00000872 rtnbit0 0x00000003 + 00009866 0x00000873 set0 0x00000003 , 0x0000003f + 00009867 0x00000874 setflip 0x00000006 , 0x0000003f + 00009868 0x00000875 store 0x00000001 , 0x00000047 + 00009869 0x00000876 fetch 0x00000001 , 0x000040c5 + 00009870 0x00000877 beq 0x00000013 , 0x0000269c + 00009871 0x00000878 rtneq 0x00000007 + 00009872 0x00000879 fetch 0x00000001 , 0x0000004b + 00009873 0x0000087a rtnbit0 0x00000006 , 0x0000003f + 00009874 0x0000087b set0 0x00000006 , 0x0000003f + 00009875 0x0000087c set1 0x00000007 , 0x0000003f + 00009876 0x0000087d store 0x00000001 , 0x0000004b + 00009877 0x0000087e set0 0x00000002 , 0x00000000 + 00009878 0x0000087f fetch 0x00000002 , 0x00004246 + 00009879 0x00000880 nrtn 0x00000034 + 00009880 0x00000881 fetch 0x00000001 , 0x0000004b + 00009881 0x00000882 set0 0x00000007 , 0x0000003f + 00009882 0x00000883 store 0x00000001 , 0x0000004b + 00009883 0x00000884 branch 0x0000525d + 00009884 0x00000887 bpatch 0x00000069 , 0x0000400d + 00009885 0x00000888 fetch 0x00000001 , 0x000004b7 + 00009886 0x00000889 rshift 0x0000003f , 0x0000003f + 00009887 0x0000088a beq 0x00000011 , 0x000026b8 + 00009888 0x0000088b beq 0x00000012 , 0x000026c0 + 00009889 0x0000088c beq 0x00000018 , 0x000026e9 + 00009890 0x0000088d beq 0x0000007f , 0x000026a8 + 00009891 0x0000088e rtnne 0x00000003 + 00009892 0x0000088f fetch 0x00000001 , 0x000004b8 + 00009893 0x00000890 beq 0x0000002b , 0x000026b0 + 00009894 0x00000891 beq 0x00000011 , 0x000026ab + 00009895 0x00000892 rtn + 00009896 0x00000895 fetch 0x00000001 , 0x000004b8 + 00009897 0x00000896 set1 0x00000007 , 0x0000003f + 00009898 0x00000897 rtn + 00009899 0x00000899 rtn 0x00000029 + 00009900 0x0000089a fetch 0x00000001 , 0x00000030 + 00009901 0x0000089b rtnbit1 0x00000004 + 00009902 0x0000089c jam 0x00000031 , 0x0000007c + 00009903 0x0000089d rtn + 00009904 0x000008a1 rtn 0x00000029 + 00009905 0x000008a2 fetch 0x00000001 , 0x00000031 + 00009906 0x000008a3 isolate1 0x00000004 , 0x0000003f + 00009907 0x000008a4 branch 0x000026b5 , 0x00000001 + 00009908 0x000008a6 rtn + 00009909 0x000008a8 set0 0x00000004 , 0x0000003f + 00009910 0x000008a9 store 0x00000001 , 0x00000031 + 00009911 0x000008aa rtn + 00009912 0x000008ad bpatch 0x0000006a , 0x0000400d + 00009913 0x000008ae fetch 0x00000001 , 0x0000004c + 00009914 0x000008af set1 0x00000002 , 0x0000003f + 00009915 0x000008b0 store 0x00000001 , 0x0000004c + 00009916 0x000008b1 hjam 0x00000001 , 0x00008011 + 00009917 0x000008b2 fetch 0x00000001 , 0x00000030 + 00009918 0x000008b3 isolate1 0x00000004 , 0x0000003f + 00009919 0x000008b4 rtn + 00009920 0x000008b7 bpatch 0x0000006b , 0x0000400d + 00009921 0x000008b8 fetch 0x00000001 , 0x0000004c + 00009922 0x000008b9 set0 0x00000002 , 0x0000003f + 00009923 0x000008ba store 0x00000001 , 0x0000004c + 00009924 0x000008bb hjam 0x00000000 , 0x00008011 + 00009925 0x000008bc rtn + 00009926 0x000008c0 bpatch 0x0000006c , 0x0000400d + 00009927 0x000008c1 copy 0x00000022 , 0x0000003f + 00009928 0x000008c2 store 0x00000004 , 0x0000420c + 00009929 0x000008c3 add 0x00000022 , 0x00000003 , 0x00000011 + 00009930 0x000008c4 branch 0x000026cc , 0x00000029 + 00009931 0x000008c5 add 0x00000028 , 0x00000003 , 0x00000011 + 00009932 0x000008c7 fetcht 0x00000002 , 0x00000032 + 00009933 0x000008c8 deposit 0x00000011 + 00009934 0x000008c9 set0 0x0000001b , 0x0000003f + 00009935 0x000008ca idiv 0x00000002 + 00009936 0x000008cb fetch 0x00000002 , 0x00000075 + 00009937 0x000008cc call 0x00007f86 + 00009938 0x000008cd remainder 0x00000013 + 00009939 0x000008ce isub 0x00000013 , 0x0000003f + 00009940 0x000008cf branch 0x000026d6 , 0x00000002 + 00009941 0x000008d0 iadd 0x00000002 , 0x0000003f + 00009942 0x000008d2 iadd 0x00000011 , 0x0000003f + 00009943 0x000008d3 store 0x00000004 , 0x00000034 + 00009944 0x000008d4 jam 0x00000000 , 0x0000455b + 00009945 0x000008d5 fetch 0x00000001 , 0x00000030 + 00009946 0x000008d6 set1 0x00000001 , 0x0000003f + 00009947 0x000008d7 store 0x00000001 , 0x00000030 + 00009948 0x000008d8 fetch 0x00000001 , 0x00000073 + 00009949 0x000008d9 store 0x00000001 , 0x0000008a + 00009950 0x000008da setarg 0x00000000 + 00009951 0x000008db store 0x00000003 , 0x00004169 + 00009952 0x000008dc store 0x00000003 , 0x0000416c + 00009953 0x000008dd store 0x00000001 , 0x00004159 + 00009954 0x000008de jam 0x0000000b , 0x00000a99 + 00009955 0x000008df call 0x00007d86 + 00009956 0x000008e0 fetch 0x00000002 , 0x000040c1 + 00009957 0x000008e1 store 0x00000002 , 0x0000003e + 00009958 0x000008e2 nrtn 0x00000029 + 00009959 0x000008e3 add 0x00000004 , 0xffffffff , 0x00000007 + 00009960 0x000008e4 rtn + 00009961 0x000008e7 bpatch 0x0000006d , 0x0000400d + 00009962 0x000008e8 fetch 0x00000001 , 0x00000030 + 00009963 0x000008e9 rtnbit0 0x00000001 + 00009964 0x000008ea set0 0x00000001 , 0x0000003f + 00009965 0x000008eb store 0x00000001 , 0x00000030 + 00009966 0x000008ec fetch 0x00000002 , 0x000040bf + 00009967 0x000008ed store 0x00000002 , 0x0000003e + 00009968 0x000008ee disable 0x0000002b + 00009969 0x000008ef jam 0x0000000c , 0x00000a99 + 00009970 0x000008f0 branch 0x00007d86 + 00009971 0x000008f4 bpatch 0x0000006e , 0x0000400d + 00009972 0x000008f5 enable 0x0000002e + 00009973 0x000008f6 fetch 0x00000001 , 0x00000030 + 00009974 0x000008f7 bbit1 0x00000001 , 0x00002700 + 00009975 0x000008f8 rtnmark1 0x00000011 + 00009976 0x000008f9 fetch 0x00000001 , 0x00000047 + 00009977 0x000008fa rtnbit1 0x00000003 + 00009978 0x000008fb fetch 0x00000001 , 0x00000048 + 00009979 0x000008fc nrtn 0x00000034 + 00009980 0x000008fd fetch 0x00000001 , 0x0000004b + 00009981 0x000008fe rtnbit1 0x00000006 + 00009982 0x00000900 force 0x00000000 , 0x0000003f + 00009983 0x00000901 rtn + 00009984 0x00000904 bbit0 0x00000002 , 0x0000270f + 00009985 0x00000905 fetch 0x00000001 , 0x0000008a + 00009986 0x00000906 beq 0x00000002 , 0x00002706 + 00009987 0x00000907 fetch 0x00000001 , 0x00000047 + 00009988 0x00000908 bbit1 0x00000003 , 0x00002718 + 00009989 0x00000909 bmark0 0x00000008 , 0x00002718 + 00009990 0x0000090b nbranch 0x00002718 , 0x00000029 + 00009991 0x0000090c fetch 0x00000001 , 0x00000048 + 00009992 0x0000090d nbranch 0x00002718 , 0x00000034 + 00009993 0x0000090f fetch 0x00000001 , 0x000000ef + 00009994 0x00000910 increase 0xffffffff , 0x0000003f + 00009995 0x00000911 store 0x00000001 , 0x000000ef + 00009996 0x00000912 nbranch 0x000026fe , 0x00000034 + 00009997 0x00000913 jam 0x00000010 , 0x000000ef + 00009998 0x00000914 branch 0x00002718 + 00009999 0x0000091c fetch 0x00000001 , 0x0000008a + 00010000 0x0000091d bne 0x00000001 , 0x00002718 + 00010001 0x0000091e fetch 0x00000001 , 0x0000008b + 00010002 0x0000091f branch 0x00002718 , 0x00000034 + 00010003 0x00000920 increase 0xffffffff , 0x0000003f + 00010004 0x00000921 store 0x00000001 , 0x0000008b + 00010005 0x00000922 fetch 0x00000001 , 0x00000047 + 00010006 0x00000923 rtnbit1 0x00000003 + 00010007 0x00000924 nrtn 0x0000002d + 00010008 0x00000926 fetch 0x00000001 , 0x0000008a + 00010009 0x00000927 increase 0xffffffff , 0x0000003f + 00010010 0x00000928 store 0x00000001 , 0x0000008a + 00010011 0x00000929 rtn + 00010012 0x00000935 bpatch 0x0000006f , 0x0000400d + 00010013 0x00000936 disable 0x00000010 + 00010014 0x00000937 copy 0x00000002 , 0x0000001b + 00010015 0x00000938 call 0x00002260 + 00010016 0x00000939 disable 0x00000028 + 00010017 0x0000093a nrtn 0x00000005 + 00010018 0x0000093b force 0x00000000 , 0x0000001b + 00010019 0x0000093c enable 0x00000028 + 00010020 0x0000093d rtn + 00010021 0x00000941 fetch 0x00000001 , 0x00004158 + 00010022 0x00000942 icompare 0x000000ff , 0x00000004 + 00010023 0x00000943 rtn + 00010024 0x00000947 bpatch 0x00000070 , 0x0000400e + 00010025 0x00000948 set0 0x00000001 , 0x00000000 + 00010026 0x0000094a jam 0x00000000 , 0x0000026a + 00010027 0x0000094b fetch 0x00000001 , 0x00000263 + 00010028 0x0000094c rtn 0x00000034 + 00010029 0x0000094d isolate1 0x00000000 , 0x0000003f + 00010030 0x0000094e arg 0x00001000 , 0x00000006 + 00010031 0x0000094f call 0x00004d79 , 0x00000001 + 00010032 0x00000950 bpatch 0x00000071 , 0x0000400e + 00010033 0x00000951 fetch 0x00000001 , 0x0000026a + 00010034 0x00000952 beq 0x00000001 , 0x0000273b + 00010035 0x00000954 jam 0x00000000 , 0x0000026a + 00010036 0x00000955 fetch 0x00000001 , 0x00000263 + 00010037 0x00000956 rtnbit0 0x00000001 + 00010038 0x00000957 arg 0x00001400 , 0x00000006 + 00010039 0x00000958 call 0x00004d79 + 00010040 0x00000959 fetch 0x00000001 , 0x0000026a + 00010041 0x0000095a beq 0x00000001 , 0x00002741 + 00010042 0x0000095b rtn + 00010043 0x0000095e fetch 0x00000001 , 0x00000263 + 00010044 0x0000095f set0 0x00000000 , 0x0000003f + 00010045 0x00000960 store 0x00000001 , 0x00000263 + 00010046 0x00000961 setarg 0x00000000 + 00010047 0x00000962 store 0x00000002 , 0x0000025d + 00010048 0x00000963 rtn + 00010049 0x00000965 fetch 0x00000001 , 0x00000263 + 00010050 0x00000966 set0 0x00000001 , 0x0000003f + 00010051 0x00000967 store 0x00000001 , 0x00000263 + 00010052 0x00000968 setarg 0x00000000 + 00010053 0x00000969 store 0x00000002 , 0x0000025f + 00010054 0x0000096a rtn + 00010055 0x0000096d fetch 0x00000001 , 0x00000263 + 00010056 0x0000096e set1 0x00000000 , 0x0000003f + 00010057 0x0000096f store 0x00000001 , 0x00000263 + 00010058 0x00000970 rtn + 00010059 0x00000973 fetch 0x00000001 , 0x00000263 + 00010060 0x00000974 set1 0x00000001 , 0x0000003f + 00010061 0x00000975 store 0x00000001 , 0x00000263 + 00010062 0x00000976 rtn + 00010063 0x0000097d bpatch 0x00000072 , 0x0000400e + 00010064 0x0000097e add 0x00000028 , 0x00000001 , 0x00000021 + 00010065 0x0000097f call 0x000028ea + 00010066 0x00000980 force 0x00000003 , 0x00000024 + 00010067 0x00000981 call 0x000028d2 + 00010068 0x00000982 call 0x00002a51 + 00010069 0x00000983 call 0x00002a5f + 00010070 0x00000984 branch 0x00002a64 + 00010071 0x00000988 bpatch 0x00000073 , 0x0000400e + 00010072 0x00000989 call 0x00002a4d + 00010073 0x0000098a deposit 0x00000028 + 00010074 0x0000098b fetcht 0x00000004 , 0x000040ca + 00010075 0x0000098c isub 0x00000002 , 0x0000003f + 00010076 0x0000098d rtnne 0x00000001 + 00010077 0x0000098e compare 0x00000000 , 0x00000001 , 0x0000001f + 00010078 0x0000098f nbranch 0x00002761 , 0x00000001 + 00010079 0x00000990 fetch 0x00000001 , 0x00000019 + 00010080 0x00000991 rtn 0x00000034 + 00010081 0x00000993 call 0x0000274f + 00010082 0x00000995 compare 0x00000010 , 0x00000001 , 0x0000001f + 00010083 0x00000996 branch 0x0000264d , 0x00000001 + 00010084 0x00000997 rshift 0x00000021 , 0x00000002 + 00010085 0x00000998 or 0x00000002 , 0x00000040 , 0x0000000e + 00010086 0x0000099a bpatch 0x00000074 , 0x0000400e + 00010087 0x0000099b enable 0x00000007 + 00010088 0x0000099c enable 0x0000000a + 00010089 0x0000099d enable 0x0000001b + 00010090 0x0000099e set0 0x00000010 , 0x00000000 + 00010091 0x0000099f deposit 0x00000004 + 00010092 0x000009a0 inject 0x00000003 , 0x00000003 + 00010093 0x000009a1 deposit 0x00000001 + 00010094 0x000009a2 inject 0x00000003 , 0x00000004 + 00010095 0x000009a3 fetch 0x00000001 , 0x00000047 + 00010096 0x000009a4 inject 0x00000000 , 0x00000004 + 00010097 0x000009a5 inject 0x00000003 , 0x00000003 + 00010098 0x000009a6 enable 0x00000008 + 00010099 0x000009a7 inject 0x00000003 , 0x00000008 + 00010100 0x000009a8 disable 0x0000001b + 00010101 0x000009a9 disable 0x00000008 + 00010102 0x000009aa disable 0x0000000a + 00010103 0x000009ab set0 0x00000002 , 0x00000015 + 00010104 0x000009ac arg 0x00000000 , 0x00000002 + 00010105 0x000009ad call 0x00002a1c + 00010106 0x000009ae bpatch 0x00000075 , 0x0000400e + 00010107 0x000009af and 0x00000001 , 0x0000001f , 0x0000003f + 00010108 0x000009b0 beq 0x00000013 , 0x000027b4 + 00010109 0x000009b1 beq 0x00000000 , 0x0000264d + 00010110 0x000009b2 beq 0x00000001 , 0x0000264d + 00010111 0x000009b3 beq 0x00000002 , 0x00002797 + 00010112 0x000009b4 beq 0x00000003 , 0x000027c5 + 00010113 0x000009b5 beq 0x00000004 , 0x000027cb + 00010114 0x000009b6 beq 0x00000007 , 0x0000278c + 00010115 0x000009b7 beq 0x00000008 , 0x000027ca + 00010116 0x000009b8 arg 0x00000004 , 0x00000002 + 00010117 0x000009b9 call 0x00002a1c + 00010118 0x000009ba beq 0x0000000a , 0x000027c7 + 00010119 0x000009bb beq 0x0000000b , 0x000027cd + 00010120 0x000009bc arg 0x00000008 , 0x00000002 + 00010121 0x000009bd call 0x00002a1c + 00010122 0x000009be beq 0x0000000f , 0x000027cd + 00010123 0x000009bf branch 0x000027c7 + 00010124 0x000009c3 bpatch 0x00000076 , 0x0000400e + 00010125 0x000009c4 enable 0x0000001d + 00010126 0x000009c5 enable 0x00000009 + 00010127 0x000009c6 enable 0x0000000e + 00010128 0x000009c7 force 0x0000001e , 0x00000039 + 00010129 0x000009c8 arg 0x000000b3 , 0x00000006 + 00010130 0x000009ca ifetch 0x00000001 , 0x00000006 + 00010131 0x000009cb inject 0x00000003 , 0x00000008 + 00010132 0x000009cc loop 0x00002792 + 00010133 0x000009cd bmark1 0x00000007 , 0x000027f7 + 00010134 0x000009ce branch 0x0000264d + 00010135 0x000009d1 bpatch 0x00000077 , 0x0000400e + 00010136 0x000009d2 fetch 0x00000001 , 0x00000181 + 00010137 0x000009d3 icopy 0x00000004 + 00010138 0x000009d4 fetch 0x00000001 , 0x00000090 + 00010139 0x000009d5 icopy 0x0000001c + 00010140 0x000009d6 fetch 0x00000003 , 0x000040aa + 00010141 0x000009d7 icopy 0x0000001d + 00010142 0x000009d8 fetch 0x00000002 , 0x000040a4 + 00010143 0x000009d9 icopy 0x0000002e + 00010144 0x000009da enable 0x00000009 + 00010145 0x000009db enable 0x0000001c + 00010146 0x000009dc copy 0x00000020 , 0x00000011 + 00010147 0x000009dd call 0x000028e2 + 00010148 0x000009de pulse 0x00000015 + 00010149 0x000009df nop 0x00000020 + 00010150 0x000009e0 copy 0x00000021 , 0x0000000b + 00010151 0x000009e1 fetch 0x00000004 , 0x00000161 + 00010152 0x000009e2 icopy 0x00000021 + 00010153 0x000009e3 preload 0x0000001e + 00010154 0x000009e4 set1 0x0000003a , 0x0000003f + 00010155 0x000009e5 inject 0x00000003 , 0x00000048 + 00010156 0x000009e6 preload 0x0000001f + 00010157 0x000009e7 inject 0x00000003 , 0x00000048 + 00010158 0x000009e8 copy 0x0000000b , 0x00000021 + 00010159 0x000009e9 copy 0x00000011 , 0x00000020 + 00010160 0x000009ea enable 0x00000008 + 00010161 0x000009eb inject 0x00000003 , 0x00000010 + 00010162 0x000009ec disable 0x00000008 + 00010163 0x000009ed branch 0x0000264d + 00010164 0x000009f0 bpatch 0x00000078 , 0x0000400f + 00010165 0x000009f1 enable 0x0000000e + 00010166 0x000009f2 enable 0x00000009 + 00010167 0x000009f3 enable 0x0000001c + 00010168 0x000009f4 fetch 0x00000001 , 0x000004b6 + 00010169 0x000009f5 and 0x0000003f , 0x000001f8 , 0x00000002 + 00010170 0x000009f6 arg 0x000004b6 , 0x00000006 + 00010171 0x000009f7 increase 0x00000008 , 0x00000002 + 00010172 0x000009f9 add 0x00000002 , 0xffffffb8 , 0x00000013 + 00010173 0x000009fa nbranch 0x000027c2 , 0x00000002 + 00010174 0x000009fb ifetch 0x00000009 , 0x00000006 + 00010175 0x000009fc inject 0x00000003 , 0x00000048 + 00010176 0x000009fd copy 0x00000013 , 0x00000002 + 00010177 0x000009fe branch 0x000027bc + 00010178 0x00000a00 ifetch 0x00000009 , 0x00000006 + 00010179 0x00000a01 iinject 0x00000003 , 0x00000002 + 00010180 0x00000a02 branch 0x000027f7 + 00010181 0x00000a05 enable 0x0000001c + 00010182 0x00000a06 branch 0x000027d0 + 00010183 0x00000a09 enable 0x0000001c + 00010184 0x00000a0a set1 0x00000010 , 0x00000000 + 00010185 0x00000a0b branch 0x000027d0 + 00010186 0x00000a0e set1 0x00000002 , 0x00000015 + 00010187 0x00000a10 enable 0x0000001d + 00010188 0x00000a11 branch 0x000027d0 + 00010189 0x00000a15 set1 0x00000002 , 0x00000015 + 00010190 0x00000a16 enable 0x0000001d + 00010191 0x00000a17 set1 0x00000010 , 0x00000000 + 00010192 0x00000a1a bpatch 0x00000079 , 0x0000400f + 00010193 0x00000a1b fetch 0x00000001 , 0x0000004c + 00010194 0x00000a1c bbit0 0x00000005 , 0x000027e5 + 00010195 0x00000a1d sub 0x00000001 , 0x00000003 , 0x0000003e + 00010196 0x00000a1e branch 0x000027e5 , 0x00000002 + 00010197 0x00000a1f disable 0x0000000e + 00010198 0x00000a20 disable 0x0000001c + 00010199 0x00000a21 enable 0x0000001d + 00010200 0x00000a22 disable 0x00000007 + 00010201 0x00000a23 set1 0x00000001 , 0x00000015 + 00010202 0x00000a24 isolate1 0x00000002 , 0x00000015 + 00010203 0x00000a25 branch 0x000027df , 0x00000001 + 00010204 0x00000a26 setarg 0x000abeee + 00010205 0x00000a27 inject 0x00000003 , 0x00000014 + 00010206 0x00000a28 branch 0x000027e3 + 00010207 0x00000a2a setarg 0x005faeba + 00010208 0x00000a2b inject 0x00000003 , 0x00000018 + 00010209 0x00000a2c setarg 0x00000012 + 00010210 0x00000a2d inject 0x00000003 , 0x00000006 + 00010211 0x00000a2f enable 0x00000007 + 00010212 0x00000a30 set1 0x00000010 , 0x00000000 + 00010213 0x00000a32 enable 0x0000000e + 00010214 0x00000a33 enable 0x00000009 + 00010215 0x00000a34 bmark1 0x00000005 , 0x00002800 + 00010216 0x00000a35 fetch 0x00000001 , 0x000041db + 00010217 0x00000a36 inject 0x00000003 , 0x00000003 + 00010218 0x00000a37 fetch 0x00000002 , 0x000041dc + 00010219 0x00000a38 iforce 0x00000039 + 00010220 0x00000a39 bmark1 0x00000010 , 0x000027ef + 00010221 0x00000a3a inject 0x00000003 , 0x00000005 + 00010222 0x00000a3b branch 0x000027f0 + 00010223 0x00000a3d inject 0x00000003 , 0x0000000d + 00010224 0x00000a3f deposit 0x00000039 + 00010225 0x00000a40 branch 0x000027f7 , 0x00000034 + 00010226 0x00000a41 fetch 0x00000002 , 0x0000016f + 00010227 0x00000a42 iforce 0x00000006 + 00010228 0x00000a44 ifetch 0x00000001 , 0x00000006 + 00010229 0x00000a45 inject 0x00000003 , 0x00000008 + 00010230 0x00000a46 loop 0x000027f4 + 00010231 0x00000a4a enable 0x00000008 + 00010232 0x00000a4b inject 0x00000003 , 0x00000010 + 00010233 0x00000a4c disable 0x00000008 + 00010234 0x00000a4d call 0x000024c1 + 00010235 0x00000a4e fetch 0x00000001 , 0x0000004c + 00010236 0x00000a4f bbit0 0x00000005 , 0x0000264d + 00010237 0x00000a50 force 0x00000000 , 0x0000003f + 00010238 0x00000a51 inject 0x00000003 , 0x00000006 + 00010239 0x00000a52 branch 0x0000264d + 00010240 0x00000a56 bpatch 0x0000007a , 0x0000400f + 00010241 0x00000a57 bmark1 0x00000010 , 0x00002808 + 00010242 0x00000a59 fetch 0x00000001 , 0x00000180 + 00010243 0x00000a5a inject 0x00000003 , 0x00000003 + 00010244 0x00000a5b fetch 0x00000001 , 0x0000015f + 00010245 0x00000a5c iforce 0x00000013 + 00010246 0x00000a5d inject 0x00000003 , 0x00000005 + 00010247 0x00000a5e branch 0x0000280d + 00010248 0x00000a60 fetch 0x00000001 , 0x00000180 + 00010249 0x00000a61 inject 0x00000003 , 0x00000003 + 00010250 0x00000a62 fetch 0x00000002 , 0x0000015f + 00010251 0x00000a63 iforce 0x00000013 + 00010252 0x00000a64 inject 0x00000003 , 0x0000000d + 00010253 0x00000a66 arg 0x00000551 , 0x00000006 + 00010254 0x00000a68 copy 0x00000013 , 0x0000003e + 00010255 0x00000a69 branch 0x00002814 , 0x00000005 + 00010256 0x00000a6a ifetch 0x00000001 , 0x00000006 + 00010257 0x00000a6b inject 0x00000003 , 0x00000008 + 00010258 0x00000a6c increase 0xffffffff , 0x00000013 + 00010259 0x00000a6d branch 0x0000280e + 00010260 0x00000a6f fetch 0x00000002 , 0x000000fc + 00010261 0x00000a70 increase 0x00000001 , 0x0000003f + 00010262 0x00000a71 store 0x00000002 , 0x000000fc + 00010263 0x00000a72 branch 0x000027f7 + 00010264 0x00000a76 fetch 0x00000004 , 0x00000165 + 00010265 0x00000a77 add 0x0000003f , 0x00000007 , 0x00000011 + 00010266 0x00000a78 fetch 0x00000002 , 0x00000171 + 00010267 0x00000a79 nbranch 0x0000281e , 0x00000034 + 00010268 0x00000a7a increase 0xfffffffd , 0x00000011 + 00010269 0x00000a7b branch 0x00002826 + 00010270 0x00000a7d mul32 0x0000003f , 0x0000000c , 0x0000003f + 00010271 0x00000a7e hfetcht 0x00000002 , 0x00008040 + 00010272 0x00000a7f increase 0x00000001 , 0x00000002 + 00010273 0x00000a81 isub 0x00000002 , 0x0000003f + 00010274 0x00000a82 nbranch 0x00002825 , 0x00000002 + 00010275 0x00000a83 increase 0xffffffff , 0x00000011 + 00010276 0x00000a84 branch 0x00002821 + 00010277 0x00000a86 sub 0x0000003f , 0x00000000 , 0x0000003f + 00010278 0x00000a88 until 0x0000003e , 0x00000023 + 00010279 0x00000a89 compare 0x00000000 , 0x00000022 , 0x00000003 + 00010280 0x00000a8a nbranch 0x00002826 , 0x00000001 + 00010281 0x00000a8b iforce 0x00000029 + 00010282 0x00000a8c copy 0x00000011 , 0x00000028 + 00010283 0x00000a8d iforce 0x00000029 + 00010284 0x00000a8e rtn + 00010285 0x00000a92 bpatch 0x0000007b , 0x0000400f + 00010286 0x00000a93 until 0x0000003e , 0x00000022 + 00010287 0x00000a94 deposit 0x0000001a + 00010288 0x00000a95 iforce 0x00000006 + 00010289 0x00000a96 rshift16 , 0x0000003f , 0x0000003f + 00010290 0x00000a97 isub 0x00000022 , 0x00000039 + 00010291 0x00000a98 and_into 0x00000003 , 0x00000039 + 00010292 0x00000a99 nbranch 0x00002837 , 0x00000005 + 00010293 0x00000a9a force 0x00000000 , 0x0000003f + 00010294 0x00000a9b branch 0x0000283b + 00010295 0x00000a9d arg 0x00000ea6 , 0x00000002 + 00010296 0x00000a9e force 0x00000000 , 0x0000003f + 00010297 0x00000aa0 iadd 0x00000002 , 0x0000003f + 00010298 0x00000aa1 loop 0x00002839 + 00010299 0x00000aa3 iadd 0x00000006 , 0x0000003f + 00010300 0x00000aa4 div 0x0000003f , 0x0000000c + 00010301 0x00000aa5 call 0x00007f86 + 00010302 0x00000aa6 quotient 0x0000003f + 00010303 0x00000aa7 store 0x00000002 , 0x00000171 + 00010304 0x00000aa8 rtn + 00010305 0x00000aab bpatch 0x0000007c , 0x0000400f + 00010306 0x00000aac deposit 0x0000001a + 00010307 0x00000aad copy 0x00000019 , 0x00000002 + 00010308 0x00000aae isub 0x00000002 , 0x0000003e + 00010309 0x00000aaf nsetflag 0x00000002 , 0x0000002c , 0x0000003f + 00010310 0x00000ab0 isub 0x00000002 , 0x00000002 + 00010311 0x00000ab1 setarg 0x00000ea6 + 00010312 0x00000ab2 isolate0 0x0000000f , 0x00000002 + 00010313 0x00000ab3 branch 0x0000284c , 0x00000001 + 00010314 0x00000ab4 setarg 0xffff0ea6 + 00010315 0x00000ab5 iadd 0x00000002 , 0x00000002 + 00010316 0x00000ab7 storet 0x00000006 , 0x00000447 + 00010317 0x00000ab8 rtn 0x00000036 + 00010318 0x00000ab9 storet 0x00000006 , 0x00000038 + 00010319 0x00000aba rtn + 00010320 0x00000abd disable 0x00000030 + 00010321 0x00000abe fetch 0x00000006 , 0x00000447 + 00010322 0x00000abf branch 0x00002854 , 0x00000036 + 00010323 0x00000ac0 fetch 0x00000006 , 0x00000038 + 00010324 0x00000ac2 iadd 0x00000019 , 0x00000030 + 00010325 0x00000ac3 increase 0x0000000a , 0x00000030 + 00010326 0x00000ac4 setarg 0x00000ea6 + 00010327 0x00000ac5 isub 0x00000030 , 0x0000003f + 00010328 0x00000ac6 isolate0 0x0000000f , 0x0000003f + 00010329 0x00000ac7 branch 0x0000285e , 0x00000001 + 00010330 0x00000ac8 setarg 0x0000f15a + 00010331 0x00000ac9 iadd 0x00000030 , 0x00000030 + 00010332 0x00000acb copy 0x00000030 , 0x0000001a + 00010333 0x00000acc rtn + 00010334 0x00000ace force 0x00000000 , 0x0000003e + 00010335 0x00000acf branch 0x0000285c + 00010336 0x00000ad7 bpatch 0x0000007d , 0x0000400f + 00010337 0x00000ad8 call 0x00002918 + 00010338 0x00000ad9 copy 0x00000021 , 0x0000003f + 00010339 0x00000ada and_into 0x00000180 , 0x0000003f + 00010340 0x00000adb compare 0x00000003 , 0x00000024 , 0x00000007 + 00010341 0x00000adc nbranch 0x00002869 , 0x00000001 + 00010342 0x00000add rshift3 0x0000003f , 0x0000003f + 00010343 0x00000ade iadd 0x00000017 , 0x0000003f + 00010344 0x00000adf branch 0x0000286a + 00010345 0x00000ae1 copy 0x00000017 , 0x0000003f + 00010346 0x00000ae3 div 0x0000003f , 0x0000004f + 00010347 0x00000ae4 pulse 0x00000015 + 00010348 0x00000ae5 call 0x00007f86 + 00010349 0x00000ae6 remainder 0x00000011 + 00010350 0x00000ae7 add 0x00000011 , 0xffffffd8 , 0x00000002 + 00010351 0x00000ae8 branch 0x00002872 , 0x00000002 + 00010352 0x00000ae9 lshift 0x00000011 , 0x00000002 + 00010353 0x00000aea branch 0x00002874 + 00010354 0x00000aec lshift 0x00000002 , 0x00000002 + 00010355 0x00000aed increase 0x00000001 , 0x00000002 + 00010356 0x00000aef bpatch 0x0000007e , 0x0000400f + 00010357 0x00000af0 fetch 0x00000001 , 0x00000031 + 00010358 0x00000af1 bbit0 0x00000003 , 0x00002885 + 00010359 0x00000af3 fetch 0x00000004 , 0x000040d2 + 00010360 0x00000af4 isub 0x00000021 , 0x0000003e + 00010361 0x00000af5 branch 0x00002885 , 0x00000002 + 00010362 0x00000af6 call 0x000028a4 + 00010363 0x00000af7 fetch 0x00000001 , 0x000040d9 + 00010364 0x00000af8 rtn 0x00000034 + 00010365 0x00000af9 fetch 0x00000001 , 0x00000031 + 00010366 0x00000afa set1 0x00000002 , 0x0000003f + 00010367 0x00000afb store 0x00000001 , 0x00000031 + 00010368 0x00000afc fetch 0x00000005 , 0x000040e7 + 00010369 0x00000afd store 0x00000005 , 0x000040da + 00010370 0x00000afe ifetch 0x00000005 , 0x00000006 + 00010371 0x00000aff store 0x00000005 , 0x000040df + 00010372 0x00000b00 call 0x000028a9 + 00010373 0x00000b02 fetch 0x00000001 , 0x00000031 + 00010374 0x00000b03 rtnbit0 0x00000002 + 00010375 0x00000b04 isolate1 0x00000001 , 0x00000021 + 00010376 0x00000b05 branch 0x000028a1 , 0x00000001 + 00010377 0x00000b06 rshift3 0x00000002 , 0x00000011 + 00010378 0x00000b07 and 0x00000002 , 0x00000007 , 0x00000007 + 00010379 0x00000b08 setarg 0x000040da + 00010380 0x00000b09 iadd 0x00000011 , 0x00000011 + 00010381 0x00000b0a ifetch 0x00000001 , 0x00000011 + 00010382 0x00000b0b qisolate0 0x0000003f + 00010383 0x00000b0c branch 0x00002892 , 0x00000001 + 00010384 0x00000b0d deposit 0x00000002 + 00010385 0x00000b0e branch 0x0000289e + 00010386 0x00000b10 fetch 0x00000001 , 0x000040e4 + 00010387 0x00000b11 iforce 0x00000012 + 00010388 0x00000b12 deposit 0x00000021 + 00010389 0x00000b13 and_into 0x00000180 , 0x0000003f + 00010390 0x00000b14 rshift3 0x0000003f , 0x0000003f + 00010391 0x00000b15 iadd 0x00000017 , 0x0000003f + 00010392 0x00000b16 idiv 0x00000012 + 00010393 0x00000b17 setarg 0x000040f2 + 00010394 0x00000b18 call 0x00007f86 + 00010395 0x00000b19 remainder 0x00000011 + 00010396 0x00000b1a iadd 0x00000011 , 0x00000006 + 00010397 0x00000b1b ifetch 0x00000001 , 0x00000006 + 00010398 0x00000b1d store 0x00000001 , 0x000040e5 + 00010399 0x00000b1e iforce 0x00000002 + 00010400 0x00000b1f rtn + 00010401 0x00000b22 fetch 0x00000001 , 0x000040e5 + 00010402 0x00000b23 iforce 0x00000002 + 00010403 0x00000b24 rtn + 00010404 0x00000b27 fetch 0x00000001 , 0x00000031 + 00010405 0x00000b28 set0 0x00000002 , 0x0000003f + 00010406 0x00000b29 set0 0x00000003 , 0x0000003f + 00010407 0x00000b2a store 0x00000001 , 0x00000031 + 00010408 0x00000b2b rtn + 00010409 0x00000b32 bpatch 0x0000007f , 0x0000400f + 00010410 0x00000b33 arg 0x000040f2 , 0x00000005 + 00010411 0x00000b34 force 0x0000000a , 0x00000039 + 00010412 0x00000b35 call 0x00007ec6 + 00010413 0x00000b36 arg 0x000040f2 , 0x00000005 + 00010414 0x00000b37 force 0x00000000 , 0x00000013 + 00010415 0x00000b38 force 0x00000002 , 0x00000007 + 00010416 0x00000b3a fetch 0x00000005 , 0x000040da + 00010417 0x00000b3b iforce 0x00000002 + 00010418 0x00000b3c compare 0x00000002 , 0x00000007 , 0x000000ff + 00010419 0x00000b3d branch 0x000028b5 , 0x00000001 + 00010420 0x00000b3e rshift 0x00000002 , 0x00000002 + 00010421 0x00000b40 isolate0 0x00000000 , 0x00000002 + 00010422 0x00000b41 branch 0x000028b9 , 0x00000001 + 00010423 0x00000b42 deposit 0x00000013 + 00010424 0x00000b43 istore 0x00000001 , 0x00000005 + 00010425 0x00000b45 rshift2 0x00000002 , 0x00000002 + 00010426 0x00000b46 increase 0x00000002 , 0x00000013 + 00010427 0x00000b47 compare 0x00000028 , 0x00000013 , 0x000000fe + 00010428 0x00000b48 nbranch 0x000028c2 , 0x00000001 + 00010429 0x00000b49 fetch 0x00000005 , 0x000040df + 00010430 0x00000b4a iforce 0x00000002 + 00010431 0x00000b4b compare 0x00000002 , 0x00000007 , 0x000000ff + 00010432 0x00000b4c branch 0x000028c2 , 0x00000001 + 00010433 0x00000b4d rshift 0x00000002 , 0x00000002 + 00010434 0x00000b4f sub 0x00000013 , 0x0000004e , 0x0000003e + 00010435 0x00000b50 branch 0x000028b5 , 0x00000002 + 00010436 0x00000b51 force 0x00000001 , 0x00000013 + 00010437 0x00000b52 increase 0xffffffff , 0x00000007 + 00010438 0x00000b53 nbranch 0x000028b0 , 0x00000005 + 00010439 0x00000b54 arg 0x000040f2 , 0x00000011 + 00010440 0x00000b55 deposit 0x00000005 + 00010441 0x00000b56 isub 0x00000011 , 0x0000003f + 00010442 0x00000b57 store 0x00000001 , 0x000040e4 + 00010443 0x00000b58 rtn + 00010444 0x00000b5b bpatch 0x00000080 , 0x00004010 + 00010445 0x00000b5c call 0x00002860 + 00010446 0x00000b5d fetch 0x00000001 , 0x0000017f + 00010447 0x00000b5e bbit0 0x00000005 , 0x000028d1 + 00010448 0x00000b5f fetcht 0x00000001 , 0x000004cc + 00010449 0x00000b61 branch 0x0000291f + 00010450 0x00000b65 bpatch 0x00000081 , 0x00004010 + 00010451 0x00000b66 call 0x00002860 + 00010452 0x00000b67 fetch 0x00000001 , 0x0000017f + 00010453 0x00000b68 bbit0 0x00000004 , 0x000028d7 + 00010454 0x00000b69 fetcht 0x00000001 , 0x000004cb + 00010455 0x00000b6b branch 0x00002933 + 00010456 0x00000b6f force 0x00000000 , 0x0000002d + 00010457 0x00000b70 fetch 0x00000003 , 0x000040a7 + 00010458 0x00000b71 iforce 0x0000002c + 00010459 0x00000b72 rtn + 00010460 0x00000b75 bpatch 0x00000082 , 0x00004010 + 00010461 0x00000b76 fetch 0x00000001 , 0x000041d3 + 00010462 0x00000b77 icopy 0x0000002d + 00010463 0x00000b78 fetch 0x00000003 , 0x000041d0 + 00010464 0x00000b79 icopy 0x0000002c + 00010465 0x00000b7a rtn + 00010466 0x00000b7d bpatch 0x00000083 , 0x00004010 + 00010467 0x00000b7e fetch 0x00000002 , 0x000040a4 + 00010468 0x00000b7f icopy 0x0000002e + 00010469 0x00000b80 fetch 0x00000001 , 0x000040a3 + 00010470 0x00000b81 icopy 0x0000002d + 00010471 0x00000b82 fetch 0x00000003 , 0x000040a0 + 00010472 0x00000b83 icopy 0x0000002c + 00010473 0x00000b84 rtn + 00010474 0x00000b87 bpatch 0x00000084 , 0x00004010 + 00010475 0x00000b88 fetch 0x00000002 , 0x00000044 + 00010476 0x00000b89 icopy 0x0000002e + 00010477 0x00000b8a fetch 0x00000001 , 0x00000043 + 00010478 0x00000b8b icopy 0x0000002d + 00010479 0x00000b8c fetch 0x00000003 , 0x00000040 + 00010480 0x00000b8d icopy 0x0000002c + 00010481 0x00000b8e rtn + 00010482 0x00000b92 bmark1 0x00000020 , 0x000028f5 + 00010483 0x00000b93 rtnmark0 0x0000001d + 00010484 0x00000b94 rtnmark0 0x0000001f + 00010485 0x00000b96 and_into 0xffffff00 , 0x0000002c + 00010486 0x00000b97 pulse 0x00000015 + 00010487 0x00000b98 nop 0x00000020 + 00010488 0x00000b99 rtn + 00010489 0x00000b9d bpatch 0x00000085 , 0x00004010 + 00010490 0x00000b9e branch 0x0000290a , 0x00000021 + 00010491 0x00000b9f hjam 0x000000d4 , 0x00000955 + 00010492 0x00000ba0 nop 0x00000004 + 00010493 0x00000ba1 hjam 0x000000d2 , 0x00000955 + 00010494 0x00000ba2 nop 0x00000004 + 00010495 0x00000ba3 hjam 0x000000d1 , 0x00000955 + 00010496 0x00000ba4 nop 0x00000004 + 00010497 0x00000ba5 fetch 0x00000001 , 0x000041de + 00010498 0x00000ba6 beq 0x00000000 , 0x00002908 + 00010499 0x00000ba7 beq 0x00000001 , 0x00002915 + 00010500 0x00000ba8 beq 0x00000002 , 0x00002908 + 00010501 0x00000ba9 beq 0x00000003 , 0x00002915 + 00010502 0x00000baa beq 0x00000004 , 0x00002915 + 00010503 0x00000bab beq 0x00000020 , 0x00002915 + 00010504 0x00000bae hjam 0x000000d0 , 0x00000955 + 00010505 0x00000baf hjam 0x000000e0 , 0x00000956 + 00010506 0x00000bb1 force 0x00000000 , 0x00000015 + 00010507 0x00000bb2 disable 0x00000021 + 00010508 0x00000bb3 disable 0x00000020 + 00010509 0x00000bb4 pulse 0x0000001e + 00010510 0x00000bb5 hjam 0x00000000 , 0x00008902 + 00010511 0x00000bb6 hjam 0x00000000 , 0x00008901 + 00010512 0x00000bb7 hjam 0x00000000 , 0x00008900 + 00010513 0x00000bb8 hjam 0x00000000 , 0x00008903 + 00010514 0x00000bb9 hjam 0x00000070 , 0x00008904 + 00010515 0x00000bba hjam 0x00000000 , 0x00008906 + 00010516 0x00000bbb rtn + 00010517 0x00000bc1 hjam 0x000000d0 , 0x00000955 + 00010518 0x00000bc2 hjam 0x000000c0 , 0x00000956 + 00010519 0x00000bc3 branch 0x0000290a + 00010520 0x00000bc6 bpatch 0x00000086 , 0x00004010 + 00010521 0x00000bc7 hjam 0x00000000 , 0x00008902 + 00010522 0x00000bc8 hjam 0x00000000 , 0x00008901 + 00010523 0x00000bc9 hjam 0x00000018 , 0x00008900 + 00010524 0x00000bca hjam 0x000000a7 , 0x00008903 + 00010525 0x00000bcb hjam 0x0000007f , 0x00008904 + 00010526 0x00000bcc rtn + 00010527 0x00000bcf bpatch 0x00000087 , 0x00004010 + 00010528 0x00000bd1 storet 0x00000001 , 0x00000017 + 00010529 0x00000bd2 add 0x00000002 , 0x00000004 , 0x00000011 + 00010530 0x00000bd3 hjam 0x00000007 , 0x0000096d + 00010531 0x00000bd4 branch 0x00002981 + 00010532 0x00000bd6 bpatch 0x00000088 , 0x00004011 + 00010533 0x00000bd7 hjam 0x000000cf , 0x00008901 + 00010534 0x00000bd8 nop 0x0000000a + 00010535 0x00000bd9 hjam 0x000000ff , 0x00008900 + 00010536 0x00000bda hjam 0x000000af , 0x00008903 + 00010537 0x00000bdb hjam 0x000000ff , 0x00008904 + 00010538 0x00000bdc nop 0x0000000a + 00010539 0x00000bdd hjam 0x000000a0 , 0x00008902 + 00010540 0x00000bde rtn + 00010541 0x00000be1 fetch 0x00000001 , 0x000041e0 + 00010542 0x00000be2 branch 0x00002931 , 0x00000034 + 00010543 0x00000be4 add 0x00000002 , 0x00000002 , 0x00000011 + 00010544 0x00000be5 rtn + 00010545 0x00000be7 add 0x00000002 , 0x00000000 , 0x00000011 + 00010546 0x00000be8 rtn + 00010547 0x00000beb bpatch 0x00000089 , 0x00004011 + 00010548 0x00000bec storet 0x00000001 , 0x00000017 + 00010549 0x00000bed call 0x0000292d + 00010550 0x00000bee call 0x00002981 + 00010551 0x00000bef setarg 0x00000500 + 00010552 0x00000bf0 call 0x00002a8f + 00010553 0x00000bf2 hjam 0x00000001 , 0x00008906 + 00010554 0x00000bf3 hjam 0x0000003c , 0x00008900 + 00010555 0x00000bf4 hjam 0x000000e0 , 0x00008901 + 00010556 0x00000bf5 hjam 0x00000012 , 0x0000096d + 00010557 0x00000bf6 nop 0x0000000a + 00010558 0x00000bf7 hjam 0x00000001 , 0x00008902 + 00010559 0x00000bf8 hjam 0x0000003d , 0x00008902 + 00010560 0x00000bf9 nop 0x0000000a + 00010561 0x00000bfa hjam 0x000000b7 , 0x00008903 + 00010562 0x00000bfb nop 0x0000000a + 00010563 0x00000bfc hjam 0x0000007f , 0x00008902 + 00010564 0x00000bfd fetch 0x00000001 , 0x000041de + 00010565 0x00000bfe beq 0x00000000 , 0x0000294b + 00010566 0x00000bff beq 0x00000001 , 0x0000294f + 00010567 0x00000c00 beq 0x00000002 , 0x00002953 + 00010568 0x00000c01 beq 0x00000003 , 0x00002957 + 00010569 0x00000c02 beq 0x00000004 , 0x0000295b + 00010570 0x00000c03 beq 0x00000020 , 0x0000295f + 00010571 0x00000c05 hjam 0x000000f0 , 0x00000956 + 00010572 0x00000c06 call 0x00002965 + 00010573 0x00000c07 hjam 0x000000d8 , 0x00000955 + 00010574 0x00000c08 rtn + 00010575 0x00000c0b hjam 0x000000df , 0x00000956 + 00010576 0x00000c0c call 0x00002965 + 00010577 0x00000c0d hjam 0x000000df , 0x00000955 + 00010578 0x00000c0e rtn + 00010579 0x00000c11 hjam 0x000000ff , 0x00000956 + 00010580 0x00000c12 call 0x00002965 + 00010581 0x00000c13 hjam 0x000000df , 0x00000955 + 00010582 0x00000c14 rtn + 00010583 0x00000c16 hjam 0x000000ce , 0x00000956 + 00010584 0x00000c17 call 0x00002965 + 00010585 0x00000c18 hjam 0x000000d8 , 0x00000955 + 00010586 0x00000c19 rtn + 00010587 0x00000c1c hjam 0x000000cb , 0x00000956 + 00010588 0x00000c1d call 0x00002965 + 00010589 0x00000c1e hjam 0x000000d8 , 0x00000955 + 00010590 0x00000c1f rtn + 00010591 0x00000c22 hjam 0x000000d0 , 0x00000955 + 00010592 0x00000c23 hjam 0x000000c0 , 0x00000956 + 00010593 0x00000c24 hjam 0x0000004c , 0x00000957 + 00010594 0x00000c25 hjam 0x0000006c , 0x00000958 + 00010595 0x00000c26 hjam 0x00000050 , 0x00000959 + 00010596 0x00000c27 rtn + 00010597 0x00000c2a nop 0x00000004 + 00010598 0x00000c2b hjam 0x000000d1 , 0x00000955 + 00010599 0x00000c2c nop 0x00000004 + 00010600 0x00000c2d hjam 0x000000d2 , 0x00000955 + 00010601 0x00000c2e nop 0x00000004 + 00010602 0x00000c2f hjam 0x000000d4 , 0x00000955 + 00010603 0x00000c30 rtn + 00010604 0x00000c34 hjam 0x00000006 , 0x00008042 + 00010605 0x00000c36 fetch 0x00000002 , 0x000040c3 + 00010606 0x00000c37 bbit0 0x0000000e , 0x0000296d + 00010607 0x00000c38 iforce 0x00000006 + 00010608 0x00000c39 arg 0x00008900 , 0x00000002 + 00010609 0x00000c3b ifetch 0x00000001 , 0x00000006 + 00010610 0x00000c3c beq 0x000000ff , 0x00002977 + 00010611 0x00000c3d ior 0x00000002 , 0x00000005 + 00010612 0x00000c3e ifetch 0x00000001 , 0x00000006 + 00010613 0x00000c3f istore 0x00000001 , 0x00000005 + 00010614 0x00000c40 branch 0x00002971 + 00010615 0x00000c42 bpatch 0x0000008a , 0x00004011 + 00010616 0x00000c43 call 0x00002be5 + 00010617 0x00000c44 call 0x000029c9 + 00010618 0x00000c46 setarg 0x000007d0 + 00010619 0x00000c47 iadd 0x00000022 , 0x0000003f + 00010620 0x00000c48 store 0x00000004 , 0x00000169 + 00010621 0x00000c49 set1 0x00000003 , 0x00000015 + 00010622 0x00000c4a force 0x00000000 , 0x00000015 + 00010623 0x00000c4b ncall 0x00002998 , 0x0000002b + 00010624 0x00000c4c branch 0x000029ab + 00010625 0x00000c50 bpatch 0x0000008b , 0x00004011 + 00010626 0x00000c51 setarg 0x00000960 + 00010627 0x00000c52 iadd 0x00000011 , 0x00000002 + 00010628 0x00000c53 fetch 0x00000001 , 0x000040bd + 00010629 0x00000c54 hjam 0x00000004 , 0x0000895f + 00010630 0x00000c55 imul32 0x00000002 , 0x0000003f + 00010631 0x00000c56 fetcht 0x00000001 , 0x000040be + 00010632 0x00000c57 idiv 0x00000002 + 00010633 0x00000c58 call 0x00007f86 + 00010634 0x00000c59 quotient 0x00000011 + 00010635 0x00000c5a remainder 0x0000003f + 00010636 0x00000c5b lshift16 0x0000003f , 0x0000003f + 00010637 0x00000c5c lshift4 0x0000003f , 0x0000003f + 00010638 0x00000c5d idiv 0x00000002 + 00010639 0x00000c5e call 0x00007f86 + 00010640 0x00000c5f quotient 0x0000003f + 00010641 0x00000c60 lshift8 0x0000003f , 0x0000003f + 00010642 0x00000c61 lshift 0x0000003f , 0x0000003f + 00010643 0x00000c62 ior 0x00000011 , 0x0000003f + 00010644 0x00000c63 hstore 0x00000004 , 0x00008960 + 00010645 0x00000c64 hjam 0x00000044 , 0x0000895f + 00010646 0x00000c65 hjam 0x000000c4 , 0x0000895f + 00010647 0x00000c66 rtn + 00010648 0x00000c6a bpatch 0x0000008c , 0x00004011 + 00010649 0x00000c6b hjam 0x00000002 , 0x00008906 + 00010650 0x00000c6c setarg 0x0003d090 + 00010651 0x00000c6d call 0x00002a8f + 00010652 0x00000c6e hjam 0x0000007f , 0x00008900 + 00010653 0x00000c6f nop 0x00000082 + 00010654 0x00000c70 hjam 0x00000030 , 0x00008952 + 00010655 0x00000c71 hjam 0x000000d0 , 0x00008901 + 00010656 0x00000c72 hjam 0x00000070 , 0x00008952 + 00010657 0x00000c73 hjam 0x000000f0 , 0x00008952 + 00010658 0x00000c74 force 0x00000032 , 0x00000039 + 00010659 0x00000c76 hfetch 0x00000001 , 0x00008980 + 00010660 0x00000c77 bbit1 0x00000005 , 0x000029a6 + 00010661 0x00000c78 loop 0x000029a3 + 00010662 0x00000c7a store 0x00000001 , 0x000040ce + 00010663 0x00000c7b hjam 0x00000000 , 0x00008901 + 00010664 0x00000c7c hjam 0x00000000 , 0x00008900 + 00010665 0x00000c7d hjam 0x00000000 , 0x00008906 + 00010666 0x00000c7e rtn + 00010667 0x00000c81 bpatch 0x0000008d , 0x00004011 + 00010668 0x00000c82 fetch 0x00000001 , 0x000040ce + 00010669 0x00000c83 set1 0x00000005 , 0x0000003f + 00010670 0x00000c84 hstore 0x00000001 , 0x00008952 + 00010671 0x00000c85 hfetcht 0x00000001 , 0x00008950 + 00010672 0x00000c86 and_into 0x00000007 , 0x00000002 + 00010673 0x00000c87 lshift3 0x0000003f , 0x0000003f + 00010674 0x00000c88 ior 0x00000002 , 0x0000003f + 00010675 0x00000c89 hstore 0x00000001 , 0x00008950 + 00010676 0x00000c8a hfetch 0x00000001 , 0x00008951 + 00010677 0x00000c8b set0 0x00000000 , 0x0000003f + 00010678 0x00000c8c hstore 0x00000001 , 0x00008951 + 00010679 0x00000c8d hfetch 0x00000001 , 0x00008952 + 00010680 0x00000c8e set0 0x00000005 , 0x0000003f + 00010681 0x00000c8f hstore 0x00000001 , 0x00008952 + 00010682 0x00000c90 rtn + 00010683 0x00000c93 bpatch 0x0000008e , 0x00004011 + 00010684 0x00000c94 hfetch 0x00000002 , 0x00008981 + 00010685 0x00000c95 rshift4 0x0000003f , 0x0000003f + 00010686 0x00000c96 rshift3 0x0000003f , 0x0000003f + 00010687 0x00000c97 sub 0x0000003f , 0x00000000 , 0x0000003f + 00010688 0x00000c98 and_into 0x000000ff , 0x0000003f + 00010689 0x00000c99 div 0x0000003f , 0x0000000a + 00010690 0x00000c9a call 0x00007f86 + 00010691 0x00000c9b quotient 0x0000003f + 00010692 0x00000c9c lshift4 0x0000003f , 0x0000003f + 00010693 0x00000c9d remainder 0x00000002 + 00010694 0x00000c9e ior 0x00000002 , 0x0000003f + 00010695 0x00000c9f store 0x00000001 , 0x00000018 + 00010696 0x00000ca0 rtn + 00010697 0x00000ca4 hjam 0x00000006 , 0x00008042 + 00010698 0x00000ca5 hfetch 0x00000001 , 0x0000896b + 00010699 0x00000ca6 set0 0x00000004 , 0x0000003f + 00010700 0x00000ca7 set0 0x00000005 , 0x0000003f + 00010701 0x00000ca8 hstore 0x00000001 , 0x0000896b + 00010702 0x00000ca9 hjam 0x00000000 , 0x00008905 + 00010703 0x00000caa hjam 0x00000000 , 0x00008904 + 00010704 0x00000cab hjam 0x00000070 , 0x00008904 + 00010705 0x00000cac hjam 0x000000ff , 0x00008905 + 00010706 0x00000cad hfetch 0x00000001 , 0x0000896b + 00010707 0x00000cae set1 0x00000004 , 0x0000003f + 00010708 0x00000caf set1 0x00000005 , 0x0000003f + 00010709 0x00000cb0 hstore 0x00000001 , 0x0000896b + 00010710 0x00000cb1 call 0x000029e9 + 00010711 0x00000cb2 hfetch 0x00000001 , 0x00008968 + 00010712 0x00000cb3 set1 0x00000007 , 0x0000003f + 00010713 0x00000cb4 hstore 0x00000001 , 0x00008968 + 00010714 0x00000cb5 set0 0x00000007 , 0x0000003f + 00010715 0x00000cb6 hstore 0x00000001 , 0x00008968 + 00010716 0x00000cb7 set1 0x00000007 , 0x0000003f + 00010717 0x00000cb8 hstore 0x00000001 , 0x00008968 + 00010718 0x00000cb9 hjam 0x00000005 , 0x00008042 + 00010719 0x00000cba nop 0x00000001 + 00010720 0x00000cbb hjam 0x00000004 , 0x00008042 + 00010721 0x00000cbc hfetch 0x00000001 , 0x0000896b + 00010722 0x00000cbd and_into 0x000000cf , 0x0000003f + 00010723 0x00000cbe hstore 0x00000001 , 0x0000896b + 00010724 0x00000cbf or_into 0x00000030 , 0x0000003f + 00010725 0x00000cc0 hstore 0x00000001 , 0x0000896b + 00010726 0x00000cc1 rtn + 00010727 0x00000cc5 setarg 0x00000f0f + 00010728 0x00000cc6 branch 0x00002c18 + 00010729 0x00000cc9 setarg 0x0000080f + 00010730 0x00000cca branch 0x00002c18 + 00010731 0x00000ccf bpatch 0x0000008f , 0x00004011 + 00010732 0x00000cd0 call 0x00002924 + 00010733 0x00000cd1 disable 0x00000020 + 00010734 0x00000cd2 enable 0x00000021 + 00010735 0x00000cd3 pulse 0x00000016 + 00010736 0x00000cd4 rtn + 00010737 0x00000cd7 bpatch 0x00000090 , 0x00004012 + 00010738 0x00000cd8 fetch 0x00000001 , 0x0000004c + 00010739 0x00000cd9 isolate1 0x00000002 , 0x0000003f + 00010740 0x00000cda setflag 0x00000001 , 0x00000000 , 0x0000003f + 00010741 0x00000cdb hstore 0x00000001 , 0x00008011 + 00010742 0x00000cdc arg 0x00000062 , 0x00000006 + 00010743 0x00000cdd ifetch 0x00000009 , 0x00000006 + 00010744 0x00000cde iforce 0x00000032 + 00010745 0x00000cdf ifetch 0x00000007 , 0x00000006 + 00010746 0x00000ce0 iforce 0x00000033 + 00010747 0x00000ce1 fetch 0x00000001 , 0x00000054 + 00010748 0x00000ce2 add 0x0000003f , 0xffffffff , 0x00000034 + 00010749 0x00000ce3 pulse 0x0000001a + 00010750 0x00000ce4 rtn + 00010751 0x00000ce7 deposit 0x0000001a + 00010752 0x00000ce8 store 0x00000006 , 0x0000009a + 00010753 0x00000ce9 disable 0x0000000d + 00010754 0x00000cea nbranch 0x000028f9 , 0x00000018 + 00010755 0x00000ceb arg 0x000003bb , 0x00000029 + 00010756 0x00000cec increase 0x00000001 , 0x00000028 + 00010757 0x00000ced and_into 0x000001fc , 0x00000028 + 00010758 0x00000cee rtn + 00010759 0x00000cf3 enable 0x0000000d + 00010760 0x00000cf5 correlate 0x0000003e , 0x00000017 + 00010761 0x00000cf6 branch 0x000029ff , 0x00000018 + 00010762 0x00000cf7 compare 0x00000002 , 0x00000028 , 0x00000002 + 00010763 0x00000cf8 nbranch 0x00002a08 , 0x00000001 + 00010764 0x00000cf9 branch 0x000029ff + 00010765 0x00000cfc bpatch 0x00000091 , 0x00004012 + 00010766 0x00000cfd arg 0x00000600 , 0x0000000b + 00010767 0x00000cfe enable 0x0000000d + 00010768 0x00000cff correlate 0x00000023 , 0x00000026 + 00010769 0x00000d00 disable 0x0000000d + 00010770 0x00000d01 nbranch 0x000028f9 , 0x00000018 + 00010771 0x00000d02 rtn + 00010772 0x00000d05 bpatch 0x00000092 , 0x00004012 + 00010773 0x00000d06 enable 0x0000000d + 00010774 0x00000d07 correlate 0x0000003e , 0x00000003 + 00010775 0x00000d08 disable 0x0000000d + 00010776 0x00000d09 nbranch 0x000028f9 , 0x00000018 + 00010777 0x00000d0a arg 0x000003bb , 0x00000029 + 00010778 0x00000d0b and_into 0x000001fc , 0x00000028 + 00010779 0x00000d0c rtn + 00010780 0x00000d10 bpatch 0x00000093 , 0x00004012 + 00010781 0x00000d11 iforce 0x00000011 + 00010782 0x00000d12 deposit 0x00000021 + 00010783 0x00000d13 iadd 0x00000002 , 0x0000000b + 00010784 0x00000d14 copy 0x0000000b , 0x0000003f + 00010785 0x00000d15 store 0x00000004 , 0x000040ca + 00010786 0x00000d16 deposit 0x00000011 + 00010787 0x00000d17 rtn + 00010788 0x00000d1b copy 0x0000003f , 0x00000002 + 00010789 0x00000d1c bpatch 0x00000094 , 0x00004012 + 00010790 0x00000d1d copy 0x00000002 , 0x0000003f + 00010791 0x00000d1e call 0x00007f50 + 00010792 0x00000d1f lshift16 0x00000021 , 0x0000003f + 00010793 0x00000d20 set1 0x0000002c , 0x0000003f + 00010794 0x00000d21 call 0x00007f39 + 00010795 0x00000d22 set0 0x0000002c , 0x0000003f + 00010796 0x00000d23 call 0x00002a77 + 00010797 0x00000d24 call 0x00007f39 + 00010798 0x00000d25 rtn 0x00000028 + 00010799 0x00000d26 call 0x00007f43 + 00010800 0x00000d27 iforce 0x0000001b + 00010801 0x00000d28 until 0x0000003e , 0x00000003 + 00010802 0x00000d29 rtn + 00010803 0x00000d2d bpatch 0x00000095 , 0x00004012 + 00010804 0x00000d2e branch 0x00002a38 , 0x00000030 + 00010805 0x00000d2f until 0x00000029 , 0x00000026 + 00010806 0x00000d31 copy 0x00000028 , 0x00000002 + 00010807 0x00000d32 branch 0x00002a3b + 00010808 0x00000d34 branch 0x00002a3a , 0x0000002e + 00010809 0x00000d35 until 0x00000023 , 0x00000026 + 00010810 0x00000d37 copy 0x00000022 , 0x00000002 + 00010811 0x00000d39 branch 0x00002a47 , 0x00000028 + 00010812 0x00000d3a compare 0x00000001 , 0x00000002 , 0x00000003 + 00010813 0x00000d3b nbranch 0x00002a33 , 0x00000001 + 00010814 0x00000d3d bpatch 0x00000096 , 0x00004012 + 00010815 0x00000d3e fetch 0x00000001 , 0x00000030 + 00010816 0x00000d3f rtnbit0 0x00000000 + 00010817 0x00000d40 fetch 0x00000004 , 0x000040ca + 00010818 0x00000d41 isub 0x00000002 , 0x0000003f + 00010819 0x00000d42 nrtn 0x00000002 + 00010820 0x00000d43 sub 0x0000003f , 0x000000ff , 0x0000003e + 00010821 0x00000d44 branch 0x00002a33 , 0x00000002 + 00010822 0x00000d45 rtn + 00010823 0x00000d47 compare 0x00000003 , 0x00000002 , 0x00000003 + 00010824 0x00000d48 nbranch 0x00002a33 , 0x00000001 + 00010825 0x00000d49 branch 0x00002a3e + 00010826 0x00000d4c bpatch 0x00000097 , 0x00004012 + 00010827 0x00000d4d arg 0x00000600 , 0x0000000b + 00010828 0x00000d4e branch 0x00002a33 + 00010829 0x00000d51 disable 0x00000028 + 00010830 0x00000d52 branch 0x00002a4a + 00010831 0x00000d55 enable 0x00000028 + 00010832 0x00000d56 branch 0x00002a4a + 00010833 0x00000d59 bpatch 0x00000098 , 0x00004013 + 00010834 0x00000d5a call 0x000029f1 + 00010835 0x00000d5b disable 0x00000021 + 00010836 0x00000d5c enable 0x00000020 + 00010837 0x00000d5d rtn + 00010838 0x00000d62 bpatch 0x00000099 , 0x00004013 + 00010839 0x00000d63 arg 0x00000e43 , 0x0000000b + 00010840 0x00000d64 until 0x00000023 , 0x00000026 + 00010841 0x00000d65 pulse 0x00000016 + 00010842 0x00000d66 rtn + 00010843 0x00000d69 bpatch 0x0000009a , 0x00004013 + 00010844 0x00000d6a arg 0x00000d00 , 0x0000000b + 00010845 0x00000d6b until 0x00000023 , 0x00000026 + 00010846 0x00000d6c rtn + 00010847 0x00000d70 bpatch 0x0000009b , 0x00004013 + 00010848 0x00000d71 arg 0x00000e43 , 0x0000000b + 00010849 0x00000d72 until 0x00000029 , 0x00000026 + 00010850 0x00000d73 pulse 0x00000016 + 00010851 0x00000d74 rtn + 00010852 0x00000d77 bpatch 0x0000009c , 0x00004013 + 00010853 0x00000d78 preload 0x00000009 + 00010854 0x00000d79 enable 0x0000001d + 00010855 0x00000d7a set1 0x00000000 , 0x00000015 + 00010856 0x00000d7b inject 0x00000003 , 0x00000048 + 00010857 0x00000d7c disable 0x0000001d + 00010858 0x00000d7d rtn + 00010859 0x00000d81 copy 0x00000025 , 0x00000002 + 00010860 0x00000d82 or_into 0x00000060 , 0x00000002 + 00010861 0x00000d83 copy 0x00000002 , 0x0000000e + 00010862 0x00000d84 rtn + 00010863 0x00000d8a bpatch 0x0000009d , 0x00004013 + 00010864 0x00000d8b fetch 0x00000001 , 0x00004090 + 00010865 0x00000d8c increase 0x00000001 , 0x0000003f + 00010866 0x00000d8d bne 0x00000007 , 0x00002a74 + 00010867 0x00000d8e force 0x00000001 , 0x0000003f + 00010868 0x00000d90 store 0x00000001 , 0x00004090 + 00010869 0x00000d91 iforce 0x00000004 + 00010870 0x00000d92 rtn + 00010871 0x00000d95 copy 0x00000019 , 0x00000002 + 00010872 0x00000d96 rtn 0x00000029 + 00010873 0x00000d97 copy 0x0000001a , 0x00000002 + 00010874 0x00000d98 rtn + 00010875 0x00000d9b deposit 0x00000022 + 00010876 0x00000d9c rtn 0x00000029 + 00010877 0x00000d9d deposit 0x00000028 + 00010878 0x00000d9e rtn + 00010879 0x00000da2 bpatch 0x0000009e , 0x00004013 + 00010880 0x00000da3 fetcht 0x00000004 , 0x0000004d + 00010881 0x00000da4 call 0x00002a7b + 00010882 0x00000da5 isub 0x00000002 , 0x0000000b + 00010883 0x00000da6 deposit 0x0000000b + 00010884 0x00000da7 fetcht 0x00000002 , 0x00000051 + 00010885 0x00000da8 lshift 0x00000002 , 0x00000002 + 00010886 0x00000da9 isub 0x00000002 , 0x0000003f + 00010887 0x00000daa rtn + 00010888 0x00000dad bpatch 0x0000009f , 0x00004013 + 00010889 0x00000dae call 0x00002a7b + 00010890 0x00000daf store 0x00000004 , 0x0000004d + 00010891 0x00000db0 rtn + 00010892 0x00000db3 bpatch 0x000000a0 , 0x00004014 + 00010893 0x00000db4 branch 0x00002a8c + 00010894 0x00000db7 branch 0x00002a8e + 00010895 0x00000dba rtn 0x00000034 + 00010896 0x00000dbc rshift 0x0000003f , 0x0000003f + 00010897 0x00000dbd increase 0xfffffffd , 0x0000003f + 00010898 0x00000dbf increase 0xffffffff , 0x0000003f + 00010899 0x00000dc0 nbranch 0x00002a92 , 0x00000005 + 00010900 0x00000dc1 force 0x00000000 , 0x0000003f + 00010901 0x00000dc2 rtn + 00010902 0x00000dc8 arg 0x00000010 , 0x00000039 + 00010903 0x00000dc9 arg 0x00000000 , 0x00000005 + 00010904 0x00000dca call 0x00007ec6 + 00010905 0x00000dcb arg 0x0000043f , 0x00000005 + 00010906 0x00000dcc arg 0x0000000a , 0x00000039 + 00010907 0x00000dcd call 0x00007ec6 + 00010908 0x00000dce jam 0x00000000 , 0x000009b2 + 00010909 0x00000dcf jam 0x00000000 , 0x00000a99 + 00010910 0x00000dd0 jam 0x00000000 , 0x0000048c + 00010911 0x00000dd1 jam 0x00000000 , 0x0000017f + 00010912 0x00000dd2 jam 0x00000000 , 0x000004d1 + 00010913 0x00000dd3 bpatch 0x000000a1 , 0x00004014 + 00010914 0x00000dd4 jam 0x00000000 , 0x0000016d + 00010915 0x00000dd5 jam 0x00000000 , 0x00000151 + 00010916 0x00000dd6 jam 0x00000000 , 0x0000015c + 00010917 0x00000dd7 setarg 0x009e8b33 + 00010918 0x00000dd8 store 0x00000003 , 0x000040a7 + 00010919 0x00000dd9 setarg 0x00000153 + 00010920 0x00000dda store 0x00000002 , 0x00000083 + 00010921 0x00000ddb jam 0x0000001e , 0x00000085 + 00010922 0x00000ddc jam 0x00000001 , 0x00000086 + 00010923 0x00000ddd jam 0x00000007 , 0x00000088 + 00010924 0x00000dde setarg 0x0012e904 + 00010925 0x00000ddf store 0x00000003 , 0x00000080 + 00010926 0x00000de4 jam 0x00000060 , 0x00000090 + 00010927 0x00000de5 jam 0x00000005 , 0x000040d0 + 00010928 0x00000de6 jam 0x00000002 , 0x00000014 + 00010929 0x00000de7 fetch 0x00000001 , 0x0000465a + 00010930 0x00000de8 ncall 0x000074c1 , 0x00000034 + 00010931 0x00000de9 fetch 0x00000001 , 0x000044be + 00010932 0x00000dea ncall 0x00007518 , 0x00000034 + 00010933 0x00000deb bpatch 0x000000a2 , 0x00004014 + 00010934 0x00000dec rtn 0x0000002b + 00010935 0x00000ded setarg 0x00000000 + 00010936 0x00000dee store 0x00000002 , 0x000041dc + 00010937 0x00000def rshift 0x00000022 , 0x0000003f + 00010938 0x00000df0 store 0x00000004 , 0x00004094 + 00010939 0x00000df1 rtn + 00010940 0x00000df9 setarg 0x0000ee21 + 00010941 0x00000dfa hstore 0x00000002 , 0x00008050 + 00010942 0x00000dfb hfetch 0x00000004 , 0x0000811c + 00010943 0x00000dfc store 0x00000004 , 0x00000abe + 00010944 0x00000dfd hfetch 0x00000001 , 0x0000813e + 00010945 0x00000dfe store 0x00000001 , 0x00000abd + 00010946 0x00000dff bbit0 0x00000003 , 0x0000645b + 00010947 0x00000e00 enable 0x0000002b + 00010948 0x00000e01 bbit0 0x00000007 , 0x00002acc + 00010949 0x00000e02 disable 0x0000002b + 00010950 0x00000e03 deposit 0x00000027 + 00010951 0x00000e04 nbranch 0x00002acc , 0x00000034 + 00010952 0x00000e05 hfetch 0x00000001 , 0x0000813b + 00010953 0x00000e06 bbit1 0x00000002 , 0x00002acc + 00010954 0x00000e07 arg 0xffffffff , 0x00000002 + 00010955 0x00000e08 branch 0x00002b3c + 00010956 0x00000e0a hfetch 0x00000003 , 0x0000813c + 00010957 0x00000e0b hstore 0x00000003 , 0x0000804c + 00010958 0x00000e0c ifetch 0x00000001 , 0x00000006 + 00010959 0x00000e0d or_into 0x000000ef , 0x0000003f + 00010960 0x00000e0e istore 0x00000001 , 0x00000005 + 00010961 0x00000e0f call 0x00002c23 + 00010962 0x00000e10 hfetch 0x00000001 , 0x0000804f + 00010963 0x00000e11 set1 0x00000004 , 0x0000003f + 00010964 0x00000e12 hstore 0x00000001 , 0x0000804f + 00010965 0x00000e13 call 0x00002c23 + 00010966 0x00000e14 call 0x00002adf , 0x0000002b + 00010967 0x00000e15 hfetch 0x00000001 , 0x0000804e + 00010968 0x00000e16 set0 0x00000003 , 0x0000003f + 00010969 0x00000e17 hstore 0x00000001 , 0x0000804e + 00010970 0x00000e18 call 0x00002c23 + 00010971 0x00000e19 nbranch 0x0000645b , 0x0000002b + 00010972 0x00000e1a rtnmark0 0x0000002b + 00010973 0x00000e1b hjam 0x00000008 , 0x00008006 + 00010974 0x00000e1c rtn + 00010975 0x00000e1f fetch 0x00000001 , 0x00004198 + 00010976 0x00000e20 hstore 0x00000001 , 0x00008086 + 00010977 0x00000e21 fetch 0x00000003 , 0x0000418d + 00010978 0x00000e22 hstore 0x00000003 , 0x00008080 + 00010979 0x00000e23 fetch 0x00000004 , 0x00004181 + 00010980 0x00000e24 hstore 0x00000004 , 0x00008074 + 00010981 0x00000e25 fetch 0x00000004 , 0x0000417d + 00010982 0x00000e26 hstore 0x00000004 , 0x00008070 + 00010983 0x00000e27 fetch 0x00000008 , 0x00004185 + 00010984 0x00000e28 hstore 0x00000008 , 0x00008078 + 00010985 0x00000e29 fetch 0x00000008 , 0x00004190 + 00010986 0x00000e2a iforce 0x00000000 + 00010987 0x00000e2b hfetch 0x00000008 , 0x00008140 + 00010988 0x00000e2c store 0x00000008 , 0x000000a1 + 00010989 0x00000e2d call 0x000064ca + 00010990 0x00000e2e rtn + 00010991 0x00000e31 deposit 0x00000000 + 00010992 0x00000e32 store 0x00000008 , 0x00004190 + 00010993 0x00000e33 hfetch 0x00000008 , 0x00008070 + 00010994 0x00000e34 store 0x00000008 , 0x0000417d + 00010995 0x00000e35 ifetch 0x00000008 , 0x00000006 + 00010996 0x00000e36 istore 0x00000008 , 0x00000005 + 00010997 0x00000e37 hfetch 0x00000003 , 0x00008080 + 00010998 0x00000e38 store 0x00000003 , 0x0000418d + 00010999 0x00000e39 hfetch 0x00000001 , 0x00008086 + 00011000 0x00000e3a store 0x00000001 , 0x00004198 + 00011001 0x00000e3b branch 0x00002c29 + 00011002 0x00000e3e hfetch 0x00000001 , 0x00008063 + 00011003 0x00000e3f nbranch 0x00002b00 , 0x00000034 + 00011004 0x00000e40 fetch 0x00000003 , 0x0000416f + 00011005 0x00000e41 nrtn 0x00000034 + 00011006 0x00000e42 hjam 0x000000c0 , 0x00008063 + 00011007 0x00000e43 hjam 0x00000080 , 0x00008006 + 00011008 0x00000e45 hfetch 0x00000001 , 0x0000812d + 00011009 0x00000e46 rtnbit0 0x00000001 + 00011010 0x00000e47 hfetch 0x00000003 , 0x00008149 + 00011011 0x00000e48 store 0x00000003 , 0x0000416f + 00011012 0x00000e49 rtn + 00011013 0x00000e4e bpatch 0x000000a3 , 0x00004014 + 00011014 0x00000e4f deposit 0x0000001a + 00011015 0x00000e50 call 0x00007f37 + 00011016 0x00000e51 fetcht 0x00000004 , 0x0000415f + 00011017 0x00000e52 sub 0x00000002 , 0x000000ff , 0x0000003e + 00011018 0x00000e53 rtn 0x00000002 + 00011019 0x00000e54 lshift8 0x0000003f , 0x0000003f + 00011020 0x00000e55 lshift4 0x0000003f , 0x0000003f + 00011021 0x00000e56 idiv 0x00000002 + 00011022 0x00000e57 call 0x00007f86 + 00011023 0x00000e58 quotient 0x0000003f + 00011024 0x00000e59 arg 0x000000c8 , 0x00000002 + 00011025 0x00000e5a call 0x00007f91 + 00011026 0x00000e5b store 0x00000001 , 0x00000099 + 00011027 0x00000e5c nbranch 0x00002b15 , 0x00000028 + 00011028 0x00000e5d sub 0x0000003f , 0x00000000 , 0x0000003f + 00011029 0x00000e5f fetcht 0x00000003 , 0x0000416f + 00011030 0x00000e60 iadd 0x00000002 , 0x0000003f + 00011031 0x00000e61 store 0x00000003 , 0x0000416f + 00011032 0x00000e63 setarg 0x00000000 + 00011033 0x00000e64 store 0x00000004 , 0x0000415f + 00011034 0x00000e65 rtn + 00011035 0x00000e6a fetch 0x00000001 , 0x00004177 + 00011036 0x00000e6b set1 0x00000002 , 0x0000003f + 00011037 0x00000e6c store 0x00000001 , 0x00004177 + 00011038 0x00000e6d branch 0x00002b23 + 00011039 0x00000e72 arg 0xffffffff , 0x00000002 + 00011040 0x00000e73 fetch 0x00000001 , 0x00004176 + 00011041 0x00000e74 set0 0x00000007 , 0x0000003f + 00011042 0x00000e75 store 0x00000001 , 0x00004176 + 00011043 0x00000e77 bpatch 0x000000a4 , 0x00004014 + 00011044 0x00000e78 call 0x00002c29 + 00011045 0x00000e79 fetch 0x00000001 , 0x00004157 + 00011046 0x00000e7a store 0x00000001 , 0x0000417c + 00011047 0x00000e7b fetch 0x00000001 , 0x0000417a + 00011048 0x00000e7c set1 0x00000007 , 0x0000003f + 00011049 0x00000e7d store 0x00000001 , 0x0000417a + 00011050 0x00000e81 bpatch 0x000000a5 , 0x00004014 + 00011051 0x00000e82 call 0x000029e7 + 00011052 0x00000e83 fetch 0x00000004 , 0x0000415f + 00011053 0x00000e84 iadd 0x00000002 , 0x0000003f + 00011054 0x00000e85 store 0x00000004 , 0x0000415f + 00011055 0x00000e86 call 0x00002aef + 00011056 0x00000e87 fetch 0x00000005 , 0x00004178 + 00011057 0x00000e88 hstore 0x00000004 , 0x0000804c + 00011058 0x00000e89 rshift32 0x0000003f , 0x00000011 + 00011059 0x00000e8a until 0x0000003e , 0x00000033 + 00011060 0x00000e8b deposit 0x00000019 + 00011061 0x00000e8c store 0x00000006 , 0x00004163 + 00011062 0x00000e8d hjam 0x00000002 , 0x00008005 + 00011063 0x00000e8e until 0x0000003e , 0x00000033 + 00011064 0x00000e8f until 0x0000003e , 0x00000033 + 00011065 0x00000e90 deposit 0x00000011 + 00011066 0x00000e91 hstore 0x00000001 , 0x0000804f + 00011067 0x00000e92 hjam 0x00000002 , 0x00008005 + 00011068 0x00000e94 until 0x0000003e , 0x00000033 + 00011069 0x00000e95 until 0x0000003e , 0x00000033 + 00011070 0x00000e96 hstoret 0x00000004 , 0x0000804c + 00011071 0x00000e97 hjam 0x00000010 , 0x00008005 + 00011072 0x00000e98 until 0x0000003e , 0x0000003f + 00011073 0x00000e9e bpatch 0x000000a6 , 0x00004014 + 00011074 0x00000e9f setarg 0x00000000 + 00011075 0x00000ea0 copy 0x00000027 , 0x0000003e + 00011076 0x00000ea1 branch 0x00002b4c , 0x00000005 + 00011077 0x00000ea2 hfetch 0x00000001 , 0x0000813c + 00011078 0x00000ea3 hfetcht 0x00000001 , 0x0000813d + 00011079 0x00000ea4 isub 0x00000002 , 0x0000003e + 00011080 0x00000ea5 branch 0x00002b4a , 0x00000002 + 00011081 0x00000ea6 deposit 0x00000002 + 00011082 0x00000ea8 isub 0x00000027 , 0x0000003f + 00011083 0x00000ea9 increase 0x00000001 , 0x0000003f + 00011084 0x00000eab increase 0x00000008 , 0x0000003f + 00011085 0x00000eac until 0x0000003e , 0x00000033 + 00011086 0x00000ead iadd 0x00000031 , 0x0000003f + 00011087 0x00000eae fetcht 0x00000004 , 0x0000415b + 00011088 0x00000eaf iadd 0x00000002 , 0x0000003f + 00011089 0x00000eb0 fetcht 0x00000003 , 0x0000416f + 00011090 0x00000eb1 imul32 0x00000002 , 0x0000003f + 00011091 0x00000eb2 rshift8 0x0000003f , 0x0000003f + 00011092 0x00000eb3 rshift4 0x0000003f , 0x0000003f + 00011093 0x00000eb4 increase 0x0000006e , 0x0000003f + 00011094 0x00000eb5 arg 0x00000ea6 , 0x00000002 + 00011095 0x00000eb6 idiv 0x00000002 + 00011096 0x00000eb7 call 0x00007f86 + 00011097 0x00000eb8 quotient 0x0000003f + 00011098 0x00000eb9 lshift16 0x0000003f , 0x0000003f + 00011099 0x00000eba remainder 0x00000002 + 00011100 0x00000ebb ior 0x00000002 , 0x0000003f + 00011101 0x00000ebc fetcht 0x00000006 , 0x00004163 + 00011102 0x00000ebd call 0x00007f2c + 00011103 0x00000ebe copy 0x00000002 , 0x00000019 + 00011104 0x00000ebf fetch 0x00000006 , 0x00004048 + 00011105 0x00000ec0 call 0x00002854 + 00011106 0x00000ec1 deposit 0x0000001a + 00011107 0x00000ec2 store 0x00000006 , 0x00000a9a + 00011108 0x00000ec3 deposit 0x00000027 + 00011109 0x00000ec4 istore 0x00000001 , 0x00000005 + 00011110 0x00000ec5 hfetch 0x00000001 , 0x0000811d + 00011111 0x00000ec6 or_into 0x000000f0 , 0x0000003f + 00011112 0x00000ec7 istore 0x00000001 , 0x00000005 + 00011113 0x00000ec8 rtn + 00011114 0x00000ecb bpatch 0x000000a7 , 0x00004014 + 00011115 0x00000ecc call 0x00002afa + 00011116 0x00000ecd fetch 0x00000003 , 0x0000416f + 00011117 0x00000ece rtn 0x00000034 + 00011118 0x00000ecf fetch 0x00000001 , 0x00004091 + 00011119 0x00000ed0 rtn 0x00000034 + 00011120 0x00000ed1 fetch 0x00000001 , 0x0000465a + 00011121 0x00000ed2 branch 0x00002b74 , 0x00000034 + 00011122 0x00000ed3 fetch 0x00000001 , 0x000045b1 + 00011123 0x00000ed4 rtn 0x00000034 + 00011124 0x00000ed6 fetch 0x00000001 , 0x000044c0 + 00011125 0x00000ed7 nrtn 0x00000034 + 00011126 0x00000ed8 call 0x00002c3a + 00011127 0x00000ed9 nrtn 0x00000034 + 00011128 0x00000eda fetch 0x00000001 , 0x00004040 + 00011129 0x00000edb compare 0x00000003 , 0x0000003f , 0x00000007 + 00011130 0x00000edc nbranch 0x00002b9d , 0x00000001 + 00011131 0x00000edd fetch 0x00000002 , 0x00004042 + 00011132 0x00000ede rtn 0x00000034 + 00011133 0x00000edf rtn 0x0000002b + 00011134 0x00000ee0 bpatch 0x000000a8 , 0x00004015 + 00011135 0x00000ee1 fetcht 0x00000001 , 0x000000a0 + 00011136 0x00000ee2 fetch 0x00000002 , 0x00004042 + 00011137 0x00000ee3 imul32 0x00000002 , 0x0000003f + 00011138 0x00000ee4 rshift4 0x00000002 , 0x00000002 + 00011139 0x00000ee5 rshift2 0x00000002 , 0x00000002 + 00011140 0x00000ee6 isub 0x00000002 , 0x0000003f + 00011141 0x00000ee7 fetcht 0x00000004 , 0x00004044 + 00011142 0x00000ee8 iadd 0x00000002 , 0x0000003f + 00011143 0x00000ee9 fetcht 0x00000001 , 0x00004156 + 00011144 0x00000eea isub 0x00000002 , 0x0000003f + 00011145 0x00000eeb lshift16 0x0000003f , 0x00000030 + 00011146 0x00000eec bpatch 0x000000a9 , 0x00004015 + 00011147 0x00000eed fetch 0x00000002 , 0x0000404e + 00011148 0x00000eee rshift 0x0000003f , 0x0000003f + 00011149 0x00000eef call 0x00007f50 + 00011150 0x00000ef0 deposit 0x00000030 + 00011151 0x00000ef1 call 0x00007f39 + 00011152 0x00000ef2 copy 0x0000001a , 0x00000002 + 00011153 0x00000ef3 call 0x00007f37 + 00011154 0x00000ef4 rtn 0x00000028 + 00011155 0x00000ef6 call 0x00007f49 + 00011156 0x00000ef8 bpatch 0x000000aa , 0x00004015 + 00011157 0x00000ef9 fetch 0x00000001 , 0x00004178 + 00011158 0x00000efa isub 0x00000002 , 0x0000003e + 00011159 0x00000efb branch 0x00002b18 , 0x00000002 + 00011160 0x00000efc storet 0x00000004 , 0x0000415b + 00011161 0x00000efd call 0x00003328 + 00011162 0x00000efe call 0x000052fb + 00011163 0x00000eff fetcht 0x00000004 , 0x0000415b + 00011164 0x00000f00 branch 0x00002b2a + 00011165 0x00000f03 bpatch 0x000000ab , 0x00004015 + 00011166 0x00000f04 fetch 0x00000001 , 0x00004040 + 00011167 0x00000f05 rtnbit1 0x00000000 + 00011168 0x00000f06 rtnbit1 0x00000003 + 00011169 0x00000f07 fetch 0x00000001 , 0x0000465a + 00011170 0x00000f08 branch 0x00002ba5 , 0x00000034 + 00011171 0x00000f09 fetch 0x00000001 , 0x000045b1 + 00011172 0x00000f0a rtn 0x00000034 + 00011173 0x00000f0c bpatch 0x000000ac , 0x00004015 + 00011174 0x00000f0d fetch 0x00000001 , 0x0000436e + 00011175 0x00000f0e nbranch 0x00002baa , 0x00000034 + 00011176 0x00000f0f fetch 0x00000001 , 0x00004093 + 00011177 0x00000f10 rtn 0x00000034 + 00011178 0x00000f12 fetch 0x00000002 , 0x00004154 + 00011179 0x00000f13 rtn 0x00000034 + 00011180 0x00000f15 fetcht 0x00000001 , 0x00004156 + 00011181 0x00000f16 isub 0x00000002 , 0x0000003f + 00011182 0x00000f17 arg 0x00001d4c , 0x00000002 + 00011183 0x00000f18 imul32 0x00000002 , 0x0000003f + 00011184 0x00000f19 branch 0x00002b93 + 00011185 0x00000f1c bpatch 0x000000ad , 0x00004015 + 00011186 0x00000f1d disable 0x0000002b + 00011187 0x00000f1e fetch 0x00000001 , 0x00000030 + 00011188 0x00000f1f rtnbit0 0x00000001 + 00011189 0x00000f20 nbranch 0x00002bd0 , 0x0000002d + 00011190 0x00000f21 call 0x00002bcb + 00011191 0x00000f22 fetch 0x00000002 , 0x000040c1 + 00011192 0x00000f23 store 0x00000002 , 0x0000003e + 00011193 0x00000f24 fetch 0x00000001 , 0x00000047 + 00011194 0x00000f25 bbit1 0x00000003 , 0x00002bde + 00011195 0x00000f26 bmark0 0x0000000d , 0x00002bde + 00011196 0x00000f27 call 0x00005274 + 00011197 0x00000f28 nbranch 0x00002bde , 0x00000034 + 00011198 0x00000f29 fetch 0x00000001 , 0x0000455c + 00011199 0x00000f2a bbit1 0x00000001 , 0x00002bde + 00011200 0x00000f2c jam 0x00000000 , 0x000000a0 + 00011201 0x00000f2d bmark0 0x0000000d , 0x00002bde + 00011202 0x00000f2e fetch 0x00000001 , 0x00004174 + 00011203 0x00000f2f branch 0x00002be2 , 0x00000034 + 00011204 0x00000f30 increase 0xffffffff , 0x0000003f + 00011205 0x00000f31 store 0x00000001 , 0x00004174 + 00011206 0x00000f32 rtn + 00011207 0x00000f36 arg 0x00000001 , 0x00000007 + 00011208 0x00000f37 branch 0x000060cd + 00011209 0x00000f3a arg 0x00000001 , 0x00000007 + 00011210 0x00000f3b branch 0x000060d1 + 00011211 0x00000f40 jam 0x00000000 , 0x00004159 + 00011212 0x00000f41 fetch 0x00000003 , 0x00004169 + 00011213 0x00000f42 increase 0x00000001 , 0x0000003f + 00011214 0x00000f43 store 0x00000003 , 0x00004169 + 00011215 0x00000f44 rtn + 00011216 0x00000f47 bpatch 0x000000ae , 0x00004015 + 00011217 0x00000f48 fetcht 0x00000002 , 0x000040c1 + 00011218 0x00000f49 rshift 0x00000002 , 0x00000002 + 00011219 0x00000f4a fetch 0x00000002 , 0x0000003e + 00011220 0x00000f4b iadd 0x00000002 , 0x0000003f + 00011221 0x00000f4c store 0x00000002 , 0x0000003e + 00011222 0x00000f4e jam 0x00000000 , 0x000000a0 + 00011223 0x00000f4f fetch 0x00000003 , 0x0000416c + 00011224 0x00000f50 increase 0x00000001 , 0x0000003f + 00011225 0x00000f51 store 0x00000003 , 0x0000416c + 00011226 0x00000f52 fetch 0x00000001 , 0x00004159 + 00011227 0x00000f53 increase 0x00000001 , 0x0000003f + 00011228 0x00000f54 store 0x00000001 , 0x00004159 + 00011229 0x00000f55 rtn + 00011230 0x00000f58 jam 0x00000000 , 0x000000a0 + 00011231 0x00000f59 fetch 0x00000001 , 0x00004173 + 00011232 0x00000f5a store 0x00000001 , 0x00004174 + 00011233 0x00000f5b rtn + 00011234 0x00000f5e fetcht 0x00000001 , 0x00004172 + 00011235 0x00000f5f storet 0x00000001 , 0x000000a0 + 00011236 0x00000f60 rtn + 00011237 0x00000f63 bpatch 0x000000af , 0x00004015 + 00011238 0x00000f64 fetch 0x00000001 , 0x00004178 + 00011239 0x00000f65 nrtn 0x00000034 + 00011240 0x00000f66 hjam 0x00000006 , 0x00008042 + 00011241 0x00000f67 setarg 0x00000f0c + 00011242 0x00000f68 call 0x00002c18 + 00011243 0x00000f69 setarg 0x00030d40 + 00011244 0x00000f6a call 0x00002a8f + 00011245 0x00000f6b until 0x0000003e , 0x00000033 + 00011246 0x00000f6c copy 0x00000031 , 0x00000030 + 00011247 0x00000f6d call 0x000029e7 + 00011248 0x00000f6e hjam 0x00000004 , 0x00008042 + 00011249 0x00000f6f nop 0x0000000a + 00011250 0x00000f70 until 0x0000003e , 0x00000033 + 00011251 0x00000f71 deposit 0x00000031 + 00011252 0x00000f72 isub 0x00000030 , 0x0000003f + 00011253 0x00000f73 increase 0x00000030 , 0x0000003f + 00011254 0x00000f74 arg 0x000000ff , 0x00000002 + 00011255 0x00000f75 call 0x00007f91 + 00011256 0x00000f76 store 0x00000001 , 0x00004178 + 00011257 0x00000f77 nop 0x00007530 + 00011258 0x00000f78 nop 0x00007530 + 00011259 0x00000f79 nop 0x00007530 + 00011260 0x00000f7a rtn + 00011261 0x00000f7d fetch 0x00000001 , 0x00004178 + 00011262 0x00000f7e nrtn 0x00000034 + 00011263 0x00000f7f hjam 0x000000ff , 0x00008044 + 00011264 0x00000f80 hjam 0x00000006 , 0x00008042 + 00011265 0x00000f81 call 0x000029e7 + 00011266 0x00000f82 setarg 0x000003e8 + 00011267 0x00000f83 iadd 0x00000031 , 0x00000030 + 00011268 0x00000f84 snooze + 00011269 0x00000f85 deposit 0x00000031 + 00011270 0x00000f86 nop 0x00002ee0 + 00011271 0x00000f87 nop 0x00002ee0 + 00011272 0x00000f88 nop 0x00002ee0 + 00011273 0x00000f89 nop 0x00002ee0 + 00011274 0x00000f8a nop 0x00002ee0 + 00011275 0x00000f8b nop 0x00002ee0 + 00011276 0x00000f8c nop 0x00002ee0 + 00011277 0x00000f8d nop 0x00002ee0 + 00011278 0x00000f8e nop 0x00002ee0 + 00011279 0x00000f8f isub 0x00000030 , 0x0000003f + 00011280 0x00000f90 add 0x0000003f , 0x00000030 , 0x0000003f + 00011281 0x00000f91 arg 0x000000ff , 0x00000002 + 00011282 0x00000f92 call 0x00007f91 + 00011283 0x00000f93 store 0x00000001 , 0x00004178 + 00011284 0x00000f94 nop 0x00007530 + 00011285 0x00000f95 nop 0x00007530 + 00011286 0x00000f96 nop 0x00007530 + 00011287 0x00000f97 rtn + 00011288 0x00000f9d arg 0x00000fff , 0x00000005 + 00011289 0x00000f9e iand 0x00000005 , 0x00000005 + 00011290 0x00000f9f fetch 0x00000001 , 0x00004175 + 00011291 0x00000fa0 and_into 0x000000f0 , 0x0000003f + 00011292 0x00000fa1 lshift8 0x0000003f , 0x0000003f + 00011293 0x00000fa2 ior 0x00000005 , 0x0000003f + 00011294 0x00000fa3 hstore 0x00000002 , 0x0000804c + 00011295 0x00000fa4 ifetch 0x00000002 , 0x00000006 + 00011296 0x00000fa5 istore 0x00000002 , 0x00000005 + 00011297 0x00000fa8 setarg 0x00000001 + 00011298 0x00000fa9 branch 0x00002c24 + 00011299 0x00000fac setarg 0x00000002 + 00011300 0x00000fae until 0x0000003e , 0x00000033 + 00011301 0x00000faf hstore 0x00000001 , 0x00008005 + 00011302 0x00000fb0 until 0x0000003e , 0x00000033 + 00011303 0x00000fb1 until 0x0000003e , 0x00000033 + 00011304 0x00000fb2 rtn + 00011305 0x00000fb6 bpatch 0x000000b0 , 0x00004016 + 00011306 0x00000fb7 fetch 0x00000004 , 0x000000a1 + 00011307 0x00000fb8 hstore 0x00000004 , 0x0000804c + 00011308 0x00000fb9 setarg 0x00000004 + 00011309 0x00000fba call 0x00002c24 + 00011310 0x00000fbb fetch 0x00000004 , 0x000000a5 + 00011311 0x00000fbc hstore 0x00000004 , 0x0000804c + 00011312 0x00000fbd setarg 0x00000008 + 00011313 0x00000fbe branch 0x00002c24 + 00011314 0x00000fc1 fetch 0x00000002 , 0x00004152 + 00011315 0x00000fc2 qset1 0x0000003f + 00011316 0x00000fc3 store 0x00000002 , 0x00004152 + 00011317 0x00000fc4 rtn + 00011318 0x00000fc7 fetch 0x00000002 , 0x00004152 + 00011319 0x00000fc8 qset0 0x0000003f + 00011320 0x00000fc9 store 0x00000002 , 0x00004152 + 00011321 0x00000fca rtn + 00011322 0x00000fcf bpatch 0x000000b1 , 0x00004016 + 00011323 0x00000fd0 call 0x00003326 + 00011324 0x00000fd1 fetch 0x00000002 , 0x00004152 + 00011325 0x00000fd2 copy 0x0000003f , 0x00000011 + 00011326 0x00000fd3 fetch 0x00000001 , 0x0000004c + 00011327 0x00000fd4 isolate1 0x00000006 , 0x0000003f + 00011328 0x00000fd5 setflag 0x00000001 , 0x0000000b , 0x00000011 + 00011329 0x00000fd6 fetch 0x00000001 , 0x00000078 + 00011330 0x00000fd7 fetcht 0x00000001 , 0x0000007c + 00011331 0x00000fd8 iadd 0x00000002 , 0x0000003f + 00011332 0x00000fd9 fetcht 0x00000001 , 0x00000048 + 00011333 0x00000fda iadd 0x00000002 , 0x0000003f + 00011334 0x00000fdb nsetflag 0x00000034 , 0x0000000a , 0x00000011 + 00011335 0x00000fdc fetch 0x00000001 , 0x000044ff + 00011336 0x00000fdd nsetflag 0x00000034 , 0x00000001 , 0x00000011 + 00011337 0x00000fde fetch 0x00000002 , 0x0000025d + 00011338 0x00000fdf fetcht 0x00000002 , 0x0000025f + 00011339 0x00000fe0 iadd 0x00000002 , 0x0000003f + 00011340 0x00000fe1 nsetflag 0x00000034 , 0x0000000d , 0x00000011 + 00011341 0x00000fe2 fetch 0x00000008 , 0x00004668 + 00011342 0x00000fe3 nsetflag 0x00000034 , 0x0000000f , 0x00000011 + 00011343 0x00000fe4 fetch 0x00000008 , 0x00004670 + 00011344 0x00000fe5 nsetflag 0x00000034 , 0x0000000e , 0x00000011 + 00011345 0x00000fe6 fetch 0x00000001 , 0x000041ce + 00011346 0x00000fe7 nsetflag 0x00000034 , 0x00000008 , 0x00000011 + 00011347 0x00000fe8 fetch 0x00000001 , 0x00004092 + 00011348 0x00000fe9 compare 0x0000000a , 0x0000003f , 0x000000ff + 00011349 0x00000fea call 0x00002c5b , 0x00000001 + 00011350 0x00000feb setarg 0xfffffff8 + 00011351 0x00000fec iand 0x00000011 , 0x00000011 + 00011352 0x00000fed copy 0x00000011 , 0x0000003f + 00011353 0x00000fee store 0x00000002 , 0x00004152 + 00011354 0x00000fef rtn + 00011355 0x00000ff2 hfetch 0x00000002 , 0x00008112 + 00011356 0x00000ff3 nsetflag 0x00000034 , 0x00000006 , 0x00000011 + 00011357 0x00000ff4 hfetch 0x00000002 , 0x0000810e + 00011358 0x00000ff5 nsetflag 0x00000034 , 0x00000005 , 0x00000011 + 00011359 0x00000ff6 rtn + 00011360 0x00000ff9 hfetch 0x00000004 , 0x00008138 + 00011361 0x00000ffa set0 0x0000001b , 0x0000003f + 00011362 0x00000ffb hstore 0x00000004 , 0x0000804c + 00011363 0x00000ffc call 0x00002c21 + 00011364 0x00000ffd branch 0x00002a8c + 00011365 0x00001000 hfetch 0x00000004 , 0x0000813c + 00011366 0x00001001 set0 0x00000014 , 0x0000003f + 00011367 0x00001002 hstore 0x00000004 , 0x0000804c + 00011368 0x00001003 branch 0x00002c23 + 00011369 0x00001006 fetch 0x00000002 , 0x00004150 + 00011370 0x00001007 bbit1 0x00000000 , 0x00002a8c + 00011371 0x00001008 rtn + 00011372 0x0000100a fetch 0x00000002 , 0x00004150 + 00011373 0x0000100b bbit1 0x00000001 , 0x00002a8c + 00011374 0x0000100c rtn + 00011375 0x0000100e fetch 0x00000002 , 0x00004150 + 00011376 0x0000100f bbit1 0x00000002 , 0x00002a8c + 00011377 0x00001010 rtn + 00011378 0x0000104e bpatch 0x000000b2 , 0x00004016 + 00011379 0x0000104f call 0x00002c7a + 00011380 0x00001050 add 0x00000013 , 0x000000cd , 0x00000012 + 00011381 0x00001051 ifetch 0x00000001 , 0x00000012 + 00011382 0x00001053 rtneq 0x00000000 + 00011383 0x00001054 beq 0x00000001 , 0x00002d06 + 00011384 0x00001055 beq 0x00000002 , 0x00002c7f + 00011385 0x00001056 rtn + 00011386 0x00001059 fetcht 0x00000002 , 0x00004241 + 00011387 0x0000105a copy 0x00000002 , 0x00000013 + 00011388 0x0000105b rtn + 00011389 0x0000105e call 0x00002f3d + 00011390 0x0000105f branch 0x0000307d + 00011391 0x00001062 call 0x00003084 + 00011392 0x00001063 call 0x0000305a + 00011393 0x00001064 call 0x0000305e + 00011394 0x00001065 branch 0x000030a2 + 00011395 0x0000106b call 0x00003231 + 00011396 0x0000106c setarg 0x0000004e + 00011397 0x0000106d call 0x0000322f + 00011398 0x0000106e call 0x000032ba + 00011399 0x00001071 add 0x00000013 , 0x00000092 , 0x00000011 + 00011400 0x00001072 ifetch 0x00000004 , 0x00000011 + 00011401 0x00001073 branch 0x0000322c + 00011402 0x00001076 call 0x00002c7a + 00011403 0x00001077 add 0x00000013 , 0x00000091 , 0x00000012 + 00011404 0x00001078 ifetcht 0x00000001 , 0x00000012 + 00011405 0x0000107a call 0x00002c90 + 00011406 0x0000107b add 0x00000013 , 0x00000091 , 0x00000005 + 00011407 0x0000107d branch 0x00002e56 + 00011408 0x00001080 call 0x00002c94 + 00011409 0x00001081 increase 0x00000001 , 0x00000002 + 00011410 0x00001082 and_into 0x00000003 , 0x00000002 + 00011411 0x00001083 rtn + 00011412 0x00001086 add 0x00000013 , 0x000000ae , 0x00000012 + 00011413 0x00001087 ifetch 0x00000001 , 0x00000012 + 00011414 0x00001089 and_into 0x00000003 , 0x0000003f + 00011415 0x0000108a mul32 0x0000003f , 0x00000004 , 0x00000011 + 00011416 0x0000108b add 0x00000013 , 0x00000097 , 0x0000003f + 00011417 0x0000108d iadd 0x00000011 , 0x0000003f + 00011418 0x0000108e iadd 0x00000002 , 0x00000006 + 00011419 0x0000108f ifetch 0x00000001 , 0x00000006 + 00011420 0x00001091 branch 0x0000322f + 00011421 0x00001094 call 0x0000326c + 00011422 0x00001095 call 0x0000666a + 00011423 0x00001096 setarg 0x000007e2 + 00011424 0x00001097 arg 0x00000aa2 , 0x00000011 + 00011425 0x00001098 arg 0x00000004 , 0x00000002 + 00011426 0x00001099 call 0x000066b3 + 00011427 0x0000109a call 0x0000666d + 00011428 0x0000109b fetch 0x00000004 , 0x00000aa2 + 00011429 0x0000109c call 0x00003227 + 00011430 0x0000109e nrtn 0x00000034 + 00011431 0x0000109f fetch 0x00000004 , 0x000040a0 + 00011432 0x000010a1 branch 0x00003227 + 00011433 0x000010a4 call 0x00003241 + 00011434 0x000010a6 setarg 0x00000000 + 00011435 0x000010a7 call 0x0000323f + 00011436 0x000010aa call 0x0000323a + 00011437 0x000010ac and_into 0x00000007 , 0x0000003f + 00011438 0x000010ae branch 0x0000323c + 00011439 0x000010b1 call 0x0000323a + 00011440 0x000010b3 set1 0x00000004 , 0x0000003f + 00011441 0x000010b4 call 0x0000323c + 00011442 0x000010b7 branch 0x00003235 + 00011443 0x000010ba call 0x0000325d + 00011444 0x000010bc beq 0x00000001 , 0x00002cb7 + 00011445 0x000010bd beq 0x00000002 , 0x00002cbc + 00011446 0x000010be rtn + 00011447 0x000010c1 call 0x0000323e + 00011448 0x000010c4 add 0x00000013 , 0x000000d1 , 0x00000005 + 00011449 0x000010c5 call 0x000032d6 + 00011450 0x000010c7 call 0x00003242 + 00011451 0x000010c9 branch 0x00002cac + 00011452 0x000010cc call 0x0000325a + 00011453 0x000010ce branch 0x00002cb8 + 00011454 0x000010d1 add 0x00000013 , 0x0000008c , 0x00000011 + 00011455 0x000010d2 ifetch 0x00000001 , 0x00000011 + 00011456 0x000010d4 increase 0x00000001 , 0x0000003f + 00011457 0x000010d5 add 0x00000013 , 0x0000008c , 0x00000005 + 00011458 0x000010d6 istore 0x00000001 , 0x00000005 + 00011459 0x000010d8 beq 0x00000020 , 0x00002dd2 + 00011460 0x000010d9 call 0x00003258 + 00011461 0x000010db beq 0x00000001 , 0x00002cca + 00011462 0x000010dc setarg 0x00000001 + 00011463 0x000010dd call 0x0000325b + 00011464 0x000010e0 call 0x00003258 + 00011465 0x000010e2 bne 0x00000001 , 0x00002cac + 00011466 0x000010e4 add 0x00000013 , 0x000000d3 , 0x00000011 + 00011467 0x000010e5 ifetch 0x00000001 , 0x00000011 + 00011468 0x000010e7 increase 0x00000001 , 0x0000003f + 00011469 0x000010e8 call 0x00002cd5 + 00011470 0x000010ea beq 0x00000004 , 0x00002cd2 + 00011471 0x000010eb call 0x00002c8a + 00011472 0x000010ec call 0x00002d04 + 00011473 0x000010ee branch 0x00002d8f + 00011474 0x000010f1 call 0x00002cd4 + 00011475 0x000010f3 branch 0x00002cac + 00011476 0x000010f6 setarg 0x00000000 + 00011477 0x000010f8 add 0x00000013 , 0x000000d3 , 0x00000005 + 00011478 0x000010f9 branch 0x000032b4 + 00011479 0x000010fc call 0x0000323e + 00011480 0x000010ff call 0x0000325a + 00011481 0x00001101 call 0x00003241 + 00011482 0x00001103 branch 0x00002cac + 00011483 0x00001106 call 0x0000325d + 00011484 0x00001108 beq 0x00000003 , 0x00002cd8 + 00011485 0x00001109 call 0x0000323a + 00011486 0x0000110b isolate0 0x00000004 , 0x0000003f + 00011487 0x0000110c branch 0x00002ca9 , 0x00000001 + 00011488 0x0000110d call 0x0000325d + 00011489 0x0000110f beq 0x00000001 , 0x00002cd7 + 00011490 0x00001110 beq 0x00000002 , 0x00002cd8 + 00011491 0x00001111 rtn + 00011492 0x00001114 call 0x00003253 + 00011493 0x00001116 rtnne 0x000000ff + 00011494 0x00001117 call 0x00002ce9 + 00011495 0x00001118 ncall 0x00002cf4 , 0x0000002c + 00011496 0x00001119 rtn + 00011497 0x0000111c disable 0x0000002c + 00011498 0x0000111d add 0x00000013 , 0x000000ce , 0x00000011 + 00011499 0x0000111e ifetch 0x00000001 , 0x00000011 + 00011500 0x00001120 rtnne 0x00000001 + 00011501 0x00001121 add 0x00000013 , 0x000000d0 , 0x00000011 + 00011502 0x00001122 ifetch 0x00000001 , 0x00000011 + 00011503 0x00001124 rtnne 0x00000000 + 00011504 0x00001125 setarg 0x00000001 + 00011505 0x00001126 call 0x00002cfd + 00011506 0x00001128 call 0x00003237 + 00011507 0x0000112a branch 0x00007feb + 00011508 0x0000112d add 0x00000013 , 0x000000d0 , 0x00000011 + 00011509 0x0000112e ifetch 0x00000001 , 0x00000011 + 00011510 0x00001130 branch 0x00002cff , 0x00000034 + 00011511 0x00001131 increase 0xffffffff , 0x0000003f + 00011512 0x00001132 call 0x0000323f + 00011513 0x00001134 setarg 0x00000002 + 00011514 0x00001135 call 0x00002cfd + 00011515 0x00001137 call 0x00002c8a + 00011516 0x00001139 branch 0x00003237 + 00011517 0x0000113c add 0x00000013 , 0x000000d2 , 0x00000005 + 00011518 0x0000113d branch 0x000032b4 + 00011519 0x00001141 setarg 0x00000003 + 00011520 0x00001142 call 0x00002cfd + 00011521 0x00001144 call 0x00003258 + 00011522 0x00001146 nbranch 0x00002cc8 , 0x00000034 + 00011523 0x00001147 call 0x00002c8a + 00011524 0x0000114a setarg 0x00000002 + 00011525 0x0000114b branch 0x00003238 + 00011526 0x0000114e rtnmark0 0x00000026 + 00011527 0x0000114f set1 0x00000027 , 0x00000000 + 00011528 0x00001150 bpatch 0x000000b3 , 0x00004016 + 00011529 0x00001151 add 0x00000013 , 0x0000008e , 0x00000011 + 00011530 0x00001152 ifetch 0x00000001 , 0x00000011 + 00011531 0x00001154 beq 0x00000001 , 0x00002d0f + 00011532 0x00001155 call 0x0000306a + 00011533 0x00001156 nbranch 0x00002d16 , 0x00000028 + 00011534 0x00001157 call 0x00002d1b + 00011535 0x00001159 add 0x00000013 , 0x0000008e , 0x00000005 + 00011536 0x0000115a call 0x000032d6 + 00011537 0x0000115c call 0x00002d2c + 00011538 0x0000115d nbranch 0x00002d7d , 0x00000028 + 00011539 0x0000115e call 0x00002ce4 + 00011540 0x00001160 call 0x00002d8f + 00011541 0x00001161 call 0x00002e7a + 00011542 0x00001163 set0 0x00000027 , 0x00000000 + 00011543 0x00001164 rtn + 00011544 0x00001167 rtn 0x00000005 + 00011545 0x00001168 set1 0x0000001c , 0x0000003f + 00011546 0x00001169 rtn + 00011547 0x0000116c add 0x00000013 , 0x000000c2 , 0x00000011 + 00011548 0x0000116d ifetch 0x00000001 , 0x00000011 + 00011549 0x0000116f increase 0x00000001 , 0x0000003f + 00011550 0x00001170 add 0x00000013 , 0x000000c2 , 0x00000005 + 00011551 0x00001171 istore 0x00000001 , 0x00000005 + 00011552 0x00001173 beq 0x00000004 , 0x00002d23 + 00011553 0x00001174 beq 0x00000005 , 0x00002d27 + 00011554 0x00001175 rtn + 00011555 0x00001177 add 0x00000013 , 0x000000ad , 0x00000011 + 00011556 0x00001178 ifetch 0x00000001 , 0x00000011 + 00011557 0x0000117c add 0x00000013 , 0x000000ab , 0x00000005 + 00011558 0x0000117d branch 0x000032b4 + 00011559 0x00001180 add 0x00000013 , 0x000000c2 , 0x00000005 + 00011560 0x00001181 call 0x000032d6 + 00011561 0x00001183 add 0x00000013 , 0x000000ac , 0x00000011 + 00011562 0x00001184 ifetch 0x00000001 , 0x00000011 + 00011563 0x00001186 branch 0x00002d25 + 00011564 0x00001189 call 0x00003253 + 00011565 0x0000118b bne 0x000000ff , 0x00002eb1 + 00011566 0x0000118c bpatch 0x000000b4 , 0x00004016 + 00011567 0x0000118d call 0x00002d3a + 00011568 0x0000118e nbranch 0x00002d36 , 0x00000028 + 00011569 0x0000118f call 0x00002d53 + 00011570 0x00001190 call 0x00002e71 + 00011571 0x00001193 setarg 0x00000001 + 00011572 0x00001195 add 0x00000013 , 0x0000008b , 0x00000005 + 00011573 0x00001196 branch 0x000032b4 + 00011574 0x00001199 add 0x00000013 , 0x0000008b , 0x00000011 + 00011575 0x0000119a ifetch 0x00000001 , 0x00000011 + 00011576 0x0000119c beq 0x00000001 , 0x00007fe7 + 00011577 0x0000119d rtn + 00011578 0x000011a1 add 0x00000013 , 0x000000d8 , 0x00000002 + 00011579 0x000011a2 ifetch 0x00000002 , 0x00000002 + 00011580 0x000011a4 call 0x00007f9c + 00011581 0x000011a5 nrtn 0x00000028 + 00011582 0x000011a6 copy 0x00000011 , 0x0000003f + 00011583 0x000011a7 store 0x00000001 , 0x00000aae + 00011584 0x000011a8 add 0x00000013 , 0x000000b2 , 0x00000005 + 00011585 0x000011a9 call 0x000032d6 + 00011586 0x000011ab call 0x00002cac + 00011587 0x000011ac store 0x00000001 , 0x0000119e + 00011588 0x000011ad fetch 0x00000001 , 0x00000aae + 00011589 0x000011ae copy 0x0000003f , 0x00000011 + 00011590 0x000011af add 0x00000011 , 0x00000001 , 0x00000002 + 00011591 0x000011b0 arg 0x0000119f , 0x00000005 + 00011592 0x000011b1 copy 0x00000011 , 0x00000039 + 00011593 0x000011b2 copy 0x00000012 , 0x00000006 + 00011594 0x000011b3 call 0x00007f01 + 00011595 0x000011b4 arg 0x0000119e , 0x00000011 + 00011596 0x000011b6 rtnmark0 0x00000027 + 00011597 0x000011b7 add 0x00000013 , 0x00000086 , 0x00000005 + 00011598 0x000011b8 istoret 0x00000001 , 0x00000005 + 00011599 0x000011ba copy 0x00000002 , 0x00000039 + 00011600 0x000011bb add 0x00000013 , 0x00000022 , 0x00000005 + 00011601 0x000011bd copy 0x00000011 , 0x00000006 + 00011602 0x000011be branch 0x00007f01 + 00011603 0x000011c2 add 0x00000013 , 0x00000086 , 0x00000011 + 00011604 0x000011c3 ifetch 0x00000001 , 0x00000011 + 00011605 0x000011c5 increase 0x00000002 , 0x0000003f + 00011606 0x000011c6 add 0x00000013 , 0x00000088 , 0x00000005 + 00011607 0x000011c7 istore 0x00000001 , 0x00000005 + 00011608 0x000011ca call 0x0000323a + 00011609 0x000011cc call 0x00003235 + 00011610 0x000011cf add 0x00000013 , 0x00000086 , 0x00000011 + 00011611 0x000011d0 ifetch 0x00000001 , 0x00000011 + 00011612 0x000011d2 lshift3 0x0000003f , 0x0000003f + 00011613 0x000011d3 add 0x00000013 , 0x00000085 , 0x00000011 + 00011614 0x000011d4 ifetcht 0x00000001 , 0x00000011 + 00011615 0x000011d6 and 0x00000002 , 0x00000003 , 0x00000002 + 00011616 0x000011d7 lshift 0x00000002 , 0x00000002 + 00011617 0x000011d8 ior 0x00000002 , 0x0000003f + 00011618 0x000011d9 add 0x00000013 , 0x000000c3 , 0x00000011 + 00011619 0x000011da ifetcht 0x00000001 , 0x00000011 + 00011620 0x000011dc iadd 0x00000002 , 0x0000003f + 00011621 0x000011dd istore 0x00000001 , 0x00000005 + 00011622 0x000011df add 0x00000013 , 0x00000086 , 0x00000011 + 00011623 0x000011e0 ifetch 0x00000001 , 0x00000011 + 00011624 0x000011e2 iforce 0x00000039 + 00011625 0x000011e3 add 0x00000013 , 0x00000022 , 0x00000006 + 00011626 0x000011e5 branch 0x00007f01 + 00011627 0x000011e8 call 0x0000324f + 00011628 0x000011ea call 0x0000325a + 00011629 0x000011ec call 0x00002e6d + 00011630 0x000011ed call 0x00002cac + 00011631 0x000011ee store 0x00000001 , 0x0000119e + 00011632 0x000011ef call 0x00002d77 + 00011633 0x000011f0 call 0x0000323a + 00011634 0x000011f2 set1 0x00000003 , 0x0000003f + 00011635 0x000011f3 call 0x0000323c + 00011636 0x000011f5 call 0x00002d53 + 00011637 0x000011f6 call 0x00002d33 + 00011638 0x000011f7 branch 0x00002d14 + 00011639 0x000011fa store 0x00000001 , 0x0000119f + 00011640 0x000011fb call 0x00003224 + 00011641 0x000011fd store 0x00000004 , 0x000011a0 + 00011642 0x000011fe arg 0x00000006 , 0x00000002 + 00011643 0x000011ff arg 0x0000119e , 0x00000011 + 00011644 0x00001200 branch 0x00002d4c + 00011645 0x00001203 add 0x00000013 , 0x000000b2 , 0x00000011 + 00011646 0x00001204 ifetch 0x00000001 , 0x00000011 + 00011647 0x00001206 branch 0x00002d6b , 0x00000034 + 00011648 0x00001209 add 0x00000013 , 0x000000da , 0x00000011 + 00011649 0x0000120a ifetch 0x00000002 , 0x00000011 + 00011650 0x0000120c branch 0x00007f9c + 00011651 0x0000120f call 0x00002c7a + 00011652 0x00001211 call 0x00002afa + 00011653 0x00001212 fetch 0x00000003 , 0x0000416f + 00011654 0x00001213 rtn 0x00000034 + 00011655 0x00001214 add 0x00000013 , 0x000000dc , 0x00000002 + 00011656 0x00001215 ifetch 0x00000002 , 0x00000002 + 00011657 0x00001217 call 0x00007f9c + 00011658 0x00001218 add 0x00000013 , 0x000000b6 , 0x00000002 + 00011659 0x00001219 ifetch 0x00000008 , 0x00000002 + 00011660 0x0000121a call 0x00007f49 + 00011661 0x0000121b storet 0x00000004 , 0x0000415b + 00011662 0x0000121c branch 0x00002b2a + 00011663 0x0000121f call 0x00002c7a + 00011664 0x00001220 add 0x00000013 , 0x0000008f , 0x00000005 + 00011665 0x00001221 call 0x000032d6 + 00011666 0x00001224 call 0x00002da4 + 00011667 0x00001225 nbranch 0x00002dae , 0x00000018 + 00011668 0x00001226 nbranch 0x00002dae , 0x0000002f + 00011669 0x00001227 call 0x00002dd6 + 00011670 0x00001228 call 0x00002e75 + 00011671 0x0000122a call 0x00002c7a + 00011672 0x0000122b add 0x00000013 , 0x00000085 , 0x00000011 + 00011673 0x0000122c ifetch 0x00000001 , 0x00000011 + 00011674 0x0000122e increase 0x00000001 , 0x0000003f + 00011675 0x0000122f call 0x00003232 + 00011676 0x00001231 call 0x00003253 + 00011677 0x00001233 bne 0x000000ff , 0x00002ed0 + 00011678 0x00001234 call 0x00002cdb + 00011679 0x00001236 setarg 0x00000000 + 00011680 0x00001237 add 0x00000013 , 0x0000008c , 0x00000005 + 00011681 0x00001238 istore 0x00000002 , 0x00000005 + 00011682 0x0000123c setarg 0x00000000 + 00011683 0x0000123d branch 0x00002d34 + 00011684 0x00001241 disable 0x0000002f + 00011685 0x00001242 call 0x00002df7 + 00011686 0x00001243 call 0x00002c7a + 00011687 0x00001244 add 0x00000013 , 0x000000c3 , 0x00000011 + 00011688 0x00001245 ifetch 0x00000001 , 0x00000011 + 00011689 0x00001247 beq 0x00000001 , 0x00002dac + 00011690 0x00001248 call 0x00002e11 + 00011691 0x00001249 branch 0x00002e45 + 00011692 0x0000124b call 0x00002e45 + 00011693 0x0000124c branch 0x00002d97 + 00011694 0x00001250 bpatch 0x000000b5 , 0x00004016 + 00011695 0x00001251 add 0x00000013 , 0x0000008d , 0x00000011 + 00011696 0x00001252 ifetch 0x00000001 , 0x00000011 + 00011697 0x00001254 increase 0x00000001 , 0x0000003f + 00011698 0x00001255 add 0x00000013 , 0x0000008d , 0x00000005 + 00011699 0x00001256 istore 0x00000001 , 0x00000005 + 00011700 0x00001258 call 0x00003253 + 00011701 0x0000125a bne 0x000000ff , 0x00002dcc + 00011702 0x0000125b add 0x00000013 , 0x0000008f , 0x00000011 + 00011703 0x0000125c ifetcht 0x00000001 , 0x00000011 + 00011704 0x0000125e increase 0x00000001 , 0x00000002 + 00011705 0x0000125f add 0x00000013 , 0x0000008f , 0x00000005 + 00011706 0x00001260 istoret 0x00000001 , 0x00000005 + 00011707 0x00001262 add 0x00000013 , 0x000000cc , 0x00000011 + 00011708 0x00001263 ifetch 0x00000001 , 0x00000011 + 00011709 0x00001265 isub 0x00000002 , 0x0000003f + 00011710 0x00001266 nbranch 0x00002d92 , 0x00000034 + 00011711 0x00001267 bpatch 0x000000b6 , 0x00004016 + 00011712 0x00001268 call 0x0000325d + 00011713 0x0000126a beq 0x00000003 , 0x00002cbe + 00011714 0x0000126b add 0x00000013 , 0x000000d1 , 0x00000011 + 00011715 0x0000126c ifetch 0x00000001 , 0x00000011 + 00011716 0x0000126e increase 0x00000001 , 0x0000003f + 00011717 0x0000126f add 0x00000013 , 0x000000d1 , 0x00000005 + 00011718 0x00001270 istore 0x00000001 , 0x00000005 + 00011719 0x00001272 beq 0x00000002 , 0x00002cb3 + 00011720 0x00001273 call 0x00002caf + 00011721 0x00001274 setarg 0x00000001 + 00011722 0x00001275 call 0x00003238 + 00011723 0x00001277 branch 0x00002d8f + 00011724 0x0000127a add 0x00000013 , 0x0000008d , 0x00000011 + 00011725 0x0000127b ifetch 0x00000001 , 0x00000011 + 00011726 0x0000127d rtnne 0x000000ff + 00011727 0x0000127e add 0x00000013 , 0x0000008d , 0x00000005 + 00011728 0x0000127f call 0x000032d6 + 00011729 0x00001281 branch 0x00002dd4 + 00011730 0x00001284 add 0x00000013 , 0x0000008c , 0x00000005 + 00011731 0x00001285 call 0x000032d6 + 00011732 0x00001288 jam 0x0000003a , 0x00000a99 + 00011733 0x00001289 branch 0x00007d86 + 00011734 0x0000128c call 0x00002dde + 00011735 0x0000128d add 0x00000013 , 0x00000084 , 0x00000011 + 00011736 0x0000128e ifetch 0x00000001 , 0x00000011 + 00011737 0x00001290 rtn 0x00000034 + 00011738 0x00001291 iforce 0x00000039 + 00011739 0x00001292 add 0x00000013 , 0x00000002 , 0x00000006 + 00011740 0x00001294 add 0x00000013 , 0x00000064 , 0x00000005 + 00011741 0x00001296 branch 0x00007f01 + 00011742 0x0000129b call 0x0000325f + 00011743 0x0000129d rshift3 0x0000003f , 0x0000003f + 00011744 0x0000129e add 0x00000013 , 0x00000084 , 0x00000005 + 00011745 0x0000129f istore 0x00000001 , 0x00000005 + 00011746 0x000012a2 increase 0x00000001 , 0x0000003f + 00011747 0x000012a3 add 0x00000013 , 0x00000001 , 0x00000006 + 00011748 0x000012a5 iadd 0x00000006 , 0x00000006 + 00011749 0x000012a6 ifetch 0x00000003 , 0x00000006 + 00011750 0x000012a7 add 0x00000013 , 0x000000c4 , 0x00000005 + 00011751 0x000012a8 istore 0x00000003 , 0x00000005 + 00011752 0x000012ab call 0x0000325f + 00011753 0x000012ad rshift 0x0000003f , 0x0000003f + 00011754 0x000012ae and 0x0000003f , 0x00000003 , 0x0000003f + 00011755 0x000012af add 0x00000013 , 0x000000ca , 0x00000005 + 00011756 0x000012b0 istore 0x00000001 , 0x00000005 + 00011757 0x000012b2 rtn + 00011758 0x000012b5 disable 0x00000009 + 00011759 0x000012b6 disable 0x00000007 + 00011760 0x000012b7 setarg 0x00555555 + 00011761 0x000012b8 iforce 0x0000000f + 00011762 0x000012b9 rtn + 00011763 0x000012bc call 0x00002918 + 00011764 0x000012bd add 0x00000013 , 0x00000090 , 0x00000011 + 00011765 0x000012be ifetcht 0x00000001 , 0x00000011 + 00011766 0x000012c0 branch 0x00002933 + 00011767 0x000012c3 call 0x00002dee + 00011768 0x000012c4 call 0x00002df3 + 00011769 0x000012c5 set1 0x00000000 , 0x00000015 + 00011770 0x000012c6 enable 0x0000001d + 00011771 0x000012c7 enable 0x00000020 + 00011772 0x000012c8 disable 0x00000021 + 00011773 0x000012c9 call 0x000053c4 + 00011774 0x000012ca call 0x0000322a + 00011775 0x000012cc iforce 0x00000009 + 00011776 0x000012cd inject 0x00000003 , 0x00000020 + 00011777 0x000012ce enable 0x00000009 + 00011778 0x000012cf add 0x00000013 , 0x00000088 , 0x00000011 + 00011779 0x000012d0 ifetch 0x00000001 , 0x00000011 + 00011780 0x000012d2 iforce 0x00000039 + 00011781 0x000012d3 add 0x00000013 , 0x00000042 , 0x00000006 + 00011782 0x000012d6 ifetch 0x00000001 , 0x00000006 + 00011783 0x000012d7 inject 0x00000003 , 0x00000008 + 00011784 0x000012d8 loop 0x00002e06 + 00011785 0x000012d9 enable 0x00000008 + 00011786 0x000012da inject 0x00000003 , 0x00000018 + 00011787 0x000012db disable 0x00000008 + 00011788 0x000012dc until 0x0000003e , 0x00000027 + 00011789 0x000012dd bpatch 0x000000b7 , 0x00004016 + 00011790 0x000012de nop 0x00000064 + 00011791 0x000012df disable 0x0000001d + 00011792 0x000012e0 rtn + 00011793 0x000012e3 disable 0x0000002f + 00011794 0x000012e4 force 0x00000000 , 0x00000015 + 00011795 0x000012e5 add 0x00000013 , 0x00000090 , 0x00000011 + 00011796 0x000012e6 ifetcht 0x00000001 , 0x00000011 + 00011797 0x000012e8 call 0x0000291f + 00011798 0x000012e9 call 0x00002924 + 00011799 0x000012eb call 0x00002dee + 00011800 0x000012ec enable 0x0000000d + 00011801 0x000012ed enable 0x00000021 + 00011802 0x000012ee disable 0x00000020 + 00011803 0x000012ef call 0x000053c4 + 00011804 0x000012f0 call 0x0000322a + 00011805 0x000012f2 iforce 0x00000009 + 00011806 0x000012f3 enable 0x00000010 + 00011807 0x000012f4 add 0x00000013 , 0x00000089 , 0x00000011 + 00011808 0x000012f5 ifetch 0x00000002 , 0x00000011 + 00011809 0x000012f7 iforce 0x0000001b + 00011810 0x000012f8 correlate 0x0000003e , 0x00000003 + 00011811 0x000012f9 nbranch 0x00002e4d , 0x00000018 + 00011812 0x000012fa enable 0x00000009 + 00011813 0x000012fb parse 0x00000003 , 0x00000000 , 0x00000008 + 00011814 0x000012fc rshift3 0x0000000c , 0x0000003f + 00011815 0x000012fd add 0x00000013 , 0x00000000 , 0x00000005 + 00011816 0x000012fe istore 0x00000001 , 0x00000005 + 00011817 0x00001300 add 0x00000013 , 0x000000cd , 0x00000011 + 00011818 0x00001301 ifetch 0x00000001 , 0x00000011 + 00011819 0x00001303 beq 0x00000002 , 0x00002e33 + 00011820 0x00001304 bpatch 0x000000b8 , 0x00004017 + 00011821 0x00001305 add 0x00000013 , 0x00000000 , 0x00000011 + 00011822 0x00001306 ifetch 0x00000001 , 0x00000011 + 00011823 0x00001308 add 0x00000013 , 0x00000087 , 0x00000011 + 00011824 0x00001309 ifetcht 0x00000001 , 0x00000011 + 00011825 0x0000130b icompare 0x00000007 , 0x00000002 + 00011826 0x0000130c nbranch 0x00002e45 , 0x00000001 + 00011827 0x0000130e parse 0x00000003 , 0x00000000 , 0x00000008 + 00011828 0x0000130f rshift3 0x0000000c , 0x0000003f + 00011829 0x00001310 istore 0x00000001 , 0x00000005 + 00011830 0x00001311 rshift3 0x0000003f , 0x0000003f + 00011831 0x00001312 and 0x0000003f , 0x0000001f , 0x00000039 + 00011832 0x00001313 branch 0x00002e3d , 0x00000005 + 00011833 0x00001315 parse 0x00000003 , 0x00000000 , 0x00000008 + 00011834 0x00001316 rshift3 0x0000000c , 0x0000003f + 00011835 0x00001317 istore 0x00000001 , 0x00000005 + 00011836 0x00001318 loop 0x00002e39 + 00011837 0x0000131a parse 0x00000003 , 0x00000000 , 0x00000018 + 00011838 0x0000131b rshift32 0x0000003f , 0x0000003f + 00011839 0x0000131c rshift16 0x0000003f , 0x0000003f + 00011840 0x0000131d istore 0x00000003 , 0x00000005 + 00011841 0x0000131e branch 0x00002e45 , 0x00000006 + 00011842 0x0000131f enable 0x0000002f + 00011843 0x00001320 disable 0x0000000d + 00011844 0x00001321 rtn + 00011845 0x00001325 disable 0x0000001d + 00011846 0x00001326 disable 0x0000000d + 00011847 0x00001327 disable 0x00000009 + 00011848 0x00001328 disable 0x00000007 + 00011849 0x00001329 branch 0x000028f9 , 0x00000021 + 00011850 0x0000132a until 0x0000003e , 0x00000027 + 00011851 0x0000132b nop 0x00000064 + 00011852 0x0000132c branch 0x000028f9 + 00011853 0x0000132f call 0x00002e4f + 00011854 0x00001330 branch 0x00002e45 + 00011855 0x00001333 call 0x000029bb + 00011856 0x00001334 rtn 0x00000034 + 00011857 0x00001335 add 0x00000013 , 0x000000ea , 0x00000011 + 00011858 0x00001336 ifetcht 0x00000001 , 0x00000011 + 00011859 0x00001338 arg 0x00000d9e , 0x00000011 + 00011860 0x0000133a call 0x00002e58 + 00011861 0x0000133b add 0x00000013 , 0x000000ea , 0x00000005 + 00011862 0x0000133e istoret 0x00000001 , 0x00000005 + 00011863 0x0000133f rtn + 00011864 0x00001342 arg 0x000000ff , 0x00000012 + 00011865 0x00001343 branch 0x00002e5a + 00011866 0x00001356 copy 0x00000011 , 0x0000003f + 00011867 0x00001357 iadd 0x00000002 , 0x00000005 + 00011868 0x00001358 fetch 0x00000001 , 0x00000018 + 00011869 0x00001359 istore 0x00000001 , 0x00000005 + 00011870 0x0000135a increase 0x00000001 , 0x00000002 + 00011871 0x0000135b copy 0x00000012 , 0x0000003f + 00011872 0x0000135c iand_into 0x00000002 + 00011873 0x0000135d rtn + 00011874 0x00001360 arg 0x00000000 , 0x00000002 + 00011875 0x00001361 copy 0x00000011 , 0x00000006 + 00011876 0x00001363 ifetch 0x00000001 , 0x00000006 + 00011877 0x00001364 iadd 0x00000002 , 0x00000002 + 00011878 0x00001365 loop 0x00002e64 + 00011879 0x00001366 rshift8 0x00000002 , 0x00000002 + 00011880 0x00001367 rtn + 00011881 0x0000136a call 0x00002c7a + 00011882 0x0000136b call 0x00002e9f + 00011883 0x0000136c setarg 0x00000001 + 00011884 0x0000136d call 0x00003272 + 00011885 0x00001370 setarg 0x00000000 + 00011886 0x00001371 call 0x00002e73 + 00011887 0x00001373 istore 0x00000001 , 0x00000005 + 00011888 0x00001375 rtn + 00011889 0x00001378 call 0x00003270 + 00011890 0x0000137a increase 0x00000001 , 0x0000003f + 00011891 0x0000137d add 0x00000013 , 0x000000fc , 0x00000005 + 00011892 0x0000137e branch 0x000032b4 + 00011893 0x00001383 add 0x00000013 , 0x000000fd , 0x00000011 + 00011894 0x00001384 ifetch 0x00000001 , 0x00000011 + 00011895 0x00001385 increase 0x00000001 , 0x0000003f + 00011896 0x00001386 add 0x00000013 , 0x000000fd , 0x00000005 + 00011897 0x00001387 branch 0x000032b4 + 00011898 0x0000138a bpatch 0x000000b9 , 0x00004017 + 00011899 0x0000138b call 0x00003270 + 00011900 0x0000138d sub 0x0000003f , 0x0000007c , 0x0000003e + 00011901 0x0000138e rtn 0x00000002 + 00011902 0x0000138f add 0x00000013 , 0x000000fd , 0x00000011 + 00011903 0x00001390 ifetcht 0x00000001 , 0x00000011 + 00011904 0x00001392 isub 0x00000002 , 0x00000002 + 00011905 0x00001393 call 0x00002e6d + 00011906 0x00001394 setarg 0x00000102 + 00011907 0x00001395 iadd 0x00000013 , 0x00000011 + 00011908 0x00001396 ifetch 0x00000001 , 0x00000011 + 00011909 0x00001398 isub 0x00000002 , 0x0000003e + 00011910 0x00001399 nbranch 0x00002e8d , 0x00000002 + 00011911 0x0000139a setarg 0x00000103 + 00011912 0x0000139b iadd 0x00000013 , 0x00000011 + 00011913 0x0000139c ifetch 0x00000001 , 0x00000011 + 00011914 0x0000139e isub 0x00000002 , 0x0000003e + 00011915 0x0000139f branch 0x00002e99 , 0x00000002 + 00011916 0x000013a0 rtn + 00011917 0x000013a3 add 0x00000013 , 0x000000fe , 0x00000011 + 00011918 0x000013a4 ifetch 0x00000001 , 0x00000011 + 00011919 0x000013a6 beq 0x00000002 , 0x00002e93 + 00011920 0x000013a7 increase 0x00000001 , 0x0000003f + 00011921 0x000013a8 call 0x00003272 + 00011922 0x000013aa beq 0x00000001 , 0x00002e9f + 00011923 0x000013ac setarg 0x0000000a + 00011924 0x000013ad call 0x000032b0 + 00011925 0x000013af setarg 0x00000000 + 00011926 0x000013b0 call 0x000032b2 + 00011927 0x000013b3 add 0x00000013 , 0x000000ff , 0x00000011 + 00011928 0x000013b5 branch 0x00002ea5 + 00011929 0x000013b8 add 0x00000013 , 0x000000fe , 0x00000011 + 00011930 0x000013b9 ifetch 0x00000001 , 0x00000011 + 00011931 0x000013bb beq 0x00000000 , 0x00002ea7 + 00011932 0x000013bc increase 0xffffffff , 0x0000003f + 00011933 0x000013bd call 0x00003272 + 00011934 0x000013bf beq 0x00000000 , 0x00002ea7 + 00011935 0x000013c4 setarg 0x00000005 + 00011936 0x000013c5 call 0x000032b0 + 00011937 0x000013c7 setarg 0x00000000 + 00011938 0x000013c8 call 0x000032b2 + 00011939 0x000013cb setarg 0x00000100 + 00011940 0x000013cd iadd 0x00000013 , 0x00000011 + 00011941 0x000013cf ifetch 0x00000001 , 0x00000011 + 00011942 0x000013d1 branch 0x0000326a + 00011943 0x000013d6 setarg 0x00000002 + 00011944 0x000013d7 call 0x000032b0 + 00011945 0x000013d9 setarg 0x00000000 + 00011946 0x000013da call 0x000032b2 + 00011947 0x000013dd setarg 0x00000101 + 00011948 0x000013df branch 0x00002ea4 + 00011949 0x000013ee set1 0x00000026 , 0x00000000 + 00011950 0x000013ef call 0x00002c83 + 00011951 0x000013f2 setarg 0x00000001 + 00011952 0x000013f3 branch 0x00003256 + 00011953 0x000013f6 add 0x00000013 , 0x0000008b , 0x00000011 + 00011954 0x000013f7 ifetch 0x00000001 , 0x00000011 + 00011955 0x000013f9 beq 0x00000001 , 0x00007fe7 + 00011956 0x000013fa call 0x00003253 + 00011957 0x000013fc beq 0x00000001 , 0x00002eb9 + 00011958 0x000013fd beq 0x00000002 , 0x00002ebd + 00011959 0x000013fe beq 0x00000003 , 0x00002ec1 + 00011960 0x000013ff branch 0x00002a8c + 00011961 0x00001402 setarg 0x00000011 + 00011962 0x00001403 call 0x00003256 + 00011963 0x00001405 jam 0x000000aa , 0x0000119e + 00011964 0x00001406 branch 0x00002ec4 + 00011965 0x00001408 setarg 0x00000012 + 00011966 0x00001409 call 0x00003256 + 00011967 0x0000140b jam 0x00000055 , 0x0000119e + 00011968 0x0000140c branch 0x00002ec4 + 00011969 0x0000140e setarg 0x00000013 + 00011970 0x0000140f call 0x00003256 + 00011971 0x00001411 jam 0x00000022 , 0x0000119e + 00011972 0x00001413 call 0x0000323a + 00011973 0x00001415 and_into 0x00000007 , 0x0000003f + 00011974 0x00001416 store 0x00000001 , 0x0000119f + 00011975 0x00001417 call 0x00003224 + 00011976 0x00001419 store 0x00000004 , 0x000011a0 + 00011977 0x0000141b jam 0x00000000 , 0x000011a4 + 00011978 0x0000141c arg 0x0000119e , 0x00000011 + 00011979 0x0000141d arg 0x00000007 , 0x00000002 + 00011980 0x0000141e call 0x00002d4c + 00011981 0x0000141f call 0x00002d53 + 00011982 0x00001420 call 0x00002d33 + 00011983 0x00001421 branch 0x00007fe7 + 00011984 0x00001424 call 0x00003253 + 00011985 0x00001426 rtneq 0x000000ff + 00011986 0x00001427 beq 0x00000011 , 0x00002ed6 + 00011987 0x00001428 beq 0x00000012 , 0x00002ed9 + 00011988 0x00001429 beq 0x00000013 , 0x00002edc + 00011989 0x0000142a rtn + 00011990 0x0000142d setarg 0x00000002 + 00011991 0x0000142e call 0x00003256 + 00011992 0x00001430 branch 0x00002d9f + 00011993 0x00001432 setarg 0x00000003 + 00011994 0x00001433 call 0x00003256 + 00011995 0x00001435 branch 0x00002d9f + 00011996 0x00001437 setarg 0x000000ff + 00011997 0x00001438 call 0x00003256 + 00011998 0x0000143a jam 0x00000039 , 0x00000a99 + 00011999 0x0000143b call 0x00007d86 + 00012000 0x0000143c add 0x00000013 , 0x00000066 , 0x00000011 + 00012001 0x0000143d ifetch 0x00000004 , 0x00000011 + 00012002 0x0000143f call 0x0000322c + 00012003 0x00001441 branch 0x00002d9f + 00012004 0x00001444 set0 0x00000026 , 0x00000000 + 00012005 0x00001445 call 0x00002f08 + 00012006 0x00001446 call 0x00002f22 + 00012007 0x00001448 call 0x00003263 + 00012008 0x0000144a nop 0x000007d0 + 00012009 0x0000144b call 0x00003261 + 00012010 0x0000144c beq 0x000000ff , 0x00002dd4 + 00012011 0x0000144d call 0x00002da4 + 00012012 0x0000144e nbranch 0x00002efa , 0x00000018 + 00012013 0x0000144f nbranch 0x00002efa , 0x0000002f + 00012014 0x00001450 call 0x00002dd6 + 00012015 0x00001451 call 0x00002c7a + 00012016 0x00001452 add 0x00000013 , 0x00000092 , 0x00000011 + 00012017 0x00001453 ifetcht 0x00000004 , 0x00000011 + 00012018 0x00001454 call 0x000030be + 00012019 0x00001455 branch 0x00002ead , 0x00000005 + 00012020 0x00001456 call 0x00002c7a + 00012021 0x00001457 add 0x00000013 , 0x00000066 , 0x00000011 + 00012022 0x00001458 ifetch 0x00000004 , 0x00000011 + 00012023 0x00001459 beq 0x00000000 , 0x00002ee7 + 00012024 0x0000145a call 0x0000322c + 00012025 0x0000145b branch 0x00002f1c + 00012026 0x0000145e call 0x00003261 + 00012027 0x0000145f increase 0x00000001 , 0x0000003f + 00012028 0x00001460 call 0x00003264 + 00012029 0x00001462 call 0x00002f04 + 00012030 0x00001463 increase 0x00000001 , 0x0000003f + 00012031 0x00001464 and_into 0x00000001 , 0x0000003f + 00012032 0x00001465 call 0x00002f06 + 00012033 0x00001466 beq 0x00000000 , 0x00002f0c + 00012034 0x00001467 beq 0x00000001 , 0x00002f0e + 00012035 0x00001468 rtn + 00012036 0x0000146b setarg 0x0000018b + 00012037 0x0000146c branch 0x000032d0 + 00012038 0x0000146e arg 0x0000018b , 0x00000011 + 00012039 0x0000146f branch 0x000032b3 + 00012040 0x00001472 call 0x00003267 + 00012041 0x00001473 call 0x00003224 + 00012042 0x00001474 call 0x0000322c + 00012043 0x00001475 branch 0x00002c8a + 00012044 0x00001478 call 0x00002f08 + 00012045 0x00001479 branch 0x00002ee8 + 00012046 0x0000147c call 0x00002c83 + 00012047 0x0000147d branch 0x00002ee8 + 00012048 0x00001481 set0 0x00000026 , 0x00000000 + 00012049 0x00001482 call 0x00002c8a + 00012050 0x00001483 call 0x00003253 + 00012051 0x00001485 rtnne 0x000000ff + 00012052 0x00001486 call 0x00002f22 + 00012053 0x00001487 call 0x00003263 + 00012054 0x0000148a nop 0x000007d0 + 00012055 0x0000148b call 0x00003261 + 00012056 0x0000148d beq 0x000000ff , 0x00002dd4 + 00012057 0x0000148e call 0x00002da4 + 00012058 0x0000148f nbranch 0x00002f27 , 0x00000018 + 00012059 0x00001490 nbranch 0x00002f27 , 0x0000002f + 00012060 0x00001492 set1 0x00000026 , 0x00000000 + 00012061 0x00001493 call 0x00003263 + 00012062 0x00001494 setarg 0x000000ff + 00012063 0x00001495 call 0x00003256 + 00012064 0x00001497 jam 0x0000003c , 0x00000a99 + 00012065 0x00001498 branch 0x00007d86 + 00012066 0x0000149b set1 0x00000027 , 0x00000000 + 00012067 0x0000149c jam 0x000000ff , 0x0000119e + 00012068 0x0000149d call 0x0000323a + 00012069 0x0000149f call 0x00002d77 + 00012070 0x000014a0 branch 0x00002d53 + 00012071 0x000014a3 call 0x00003261 + 00012072 0x000014a5 increase 0x00000001 , 0x0000003f + 00012073 0x000014a6 call 0x00003264 + 00012074 0x000014a8 call 0x00002c8a + 00012075 0x000014a9 branch 0x00002f16 + 00012076 0x000014ac call 0x00003267 + 00012077 0x000014af setarg 0x000000ff + 00012078 0x000014b0 call 0x00003256 + 00012079 0x000014b2 branch 0x00002f10 + 00012080 0x000014bc bpatch 0x000000ba , 0x00004017 + 00012081 0x000014bd call 0x00002c7a + 00012082 0x000014be setarg 0x000031b0 + 00012083 0x000014bf add 0x00000013 , 0x000000de , 0x00000005 + 00012084 0x000014c0 istore 0x00000002 , 0x00000005 + 00012085 0x000014c2 call 0x00002f3d + 00012086 0x000014c3 call 0x000048ea + 00012087 0x000014c4 call 0x000032b6 + 00012088 0x000014c6 bpatch 0x000000bb , 0x00004017 + 00012089 0x000014c7 beq 0x00000000 , 0x00003055 + 00012090 0x000014c8 beq 0x00000001 , 0x00002f45 + 00012091 0x000014c9 beq 0x0000000f , 0x00002f41 + 00012092 0x000014ca branch 0x00002a8c + 00012093 0x000014cd call 0x0000326c + 00012094 0x000014ce arg 0x00000080 , 0x00000039 + 00012095 0x000014cf arg 0x00000d9e , 0x00000005 + 00012096 0x000014d0 branch 0x00007ec6 + 00012097 0x000014d3 call 0x00002f4c + 00012098 0x000014d5 call 0x00002f4f + 00012099 0x000014d6 call 0x000048d3 + 00012100 0x000014d7 branch 0x00002f42 + 00012101 0x000014da bpatch 0x000000bc , 0x00004017 + 00012102 0x000014db call 0x00002f4c + 00012103 0x000014dd call 0x00002f4f + 00012104 0x000014de call 0x00002fbd + 00012105 0x000014df call 0x000048d3 + 00012106 0x000014e0 call 0x00003019 + 00012107 0x000014e1 branch 0x00002f47 + 00012108 0x000014e7 call 0x00003291 + 00012109 0x000014e8 call 0x00003296 + 00012110 0x000014e9 branch 0x00003299 + 00012111 0x000014ec call 0x0000328f + 00012112 0x000014ee rtnne 0x00000000 + 00012113 0x000014f0 call 0x00002f55 + 00012114 0x000014f1 call 0x00002f65 + 00012115 0x000014f2 call 0x0000316b + 00012116 0x000014f3 branch 0x00002f96 + 00012117 0x000014f6 call 0x00003294 + 00012118 0x000014f8 rtnbit1 0x00000000 + 00012119 0x000014f9 set1 0x00000000 , 0x0000003f + 00012120 0x000014fa call 0x00003297 + 00012121 0x000014fc call 0x00003267 + 00012122 0x000014ff call 0x00003299 + 00012123 0x00001501 jam 0x00000000 , 0x00000d38 + 00012124 0x00001502 call 0x0000324f + 00012125 0x00001504 call 0x00002f61 + 00012126 0x00001506 add 0x00000013 , 0x00000000 , 0x00000005 + 00012127 0x00001508 arg 0x00000042 , 0x00000039 + 00012128 0x00001509 branch 0x00007ed4 + 00012129 0x0000150c call 0x00003231 + 00012130 0x0000150e call 0x0000327d + 00012131 0x00001510 call 0x0000322c + 00012132 0x00001512 branch 0x00002c8a + 00012133 0x00001515 bpatch 0x000000bd , 0x00004017 + 00012134 0x00001516 call 0x0000324c + 00012135 0x00001518 beq 0x00000001 , 0x00002f8d + 00012136 0x00001519 call 0x00003245 + 00012137 0x0000151b beq 0x00000001 , 0x00002c8a + 00012138 0x0000151c setarg 0x00000136 + 00012139 0x0000151d iadd 0x00000013 , 0x00000011 + 00012140 0x0000151e ifetcht 0x00000004 , 0x00000011 + 00012141 0x00001520 copy 0x00000022 , 0x0000003f + 00012142 0x00001521 isub 0x00000002 , 0x0000003e + 00012143 0x00001522 ncall 0x00002d18 , 0x00000002 + 00012144 0x00001523 copy 0x0000003f , 0x00000012 + 00012145 0x00001524 setarg 0x00000136 + 00012146 0x00001525 iadd 0x00000013 , 0x00000011 + 00012147 0x00001526 ifetch 0x00000004 , 0x00000011 + 00012148 0x00001527 copy 0x0000003f , 0x00000002 + 00012149 0x00001529 setarg 0x0000013a + 00012150 0x0000152a iadd 0x00000013 , 0x00000011 + 00012151 0x0000152b copy 0x00000002 , 0x0000003f + 00012152 0x0000152c ifetcht 0x00000001 , 0x00000011 + 00012153 0x0000152e iadd 0x00000002 , 0x00000002 + 00012154 0x0000152f copy 0x00000012 , 0x0000003f + 00012155 0x00001530 isub 0x00000002 , 0x0000003e + 00012156 0x00001531 nrtn 0x00000002 + 00012157 0x00001532 set0 0x0000001c , 0x0000003f + 00012158 0x00001533 setarg 0x00000136 + 00012159 0x00001534 iadd 0x00000013 , 0x00000005 + 00012160 0x00001535 istore 0x00000004 , 0x00000005 + 00012161 0x00001538 call 0x00002c8a + 00012162 0x00001539 call 0x00003278 + 00012163 0x0000153b increase 0x00000001 , 0x0000003f + 00012164 0x0000153c call 0x0000327b + 00012165 0x0000153e rtnne 0x00000002 + 00012166 0x0000153f call 0x0000327a + 00012167 0x00001543 branch 0x0000324f + 00012168 0x00001546 copy 0x00000022 , 0x0000003f + 00012169 0x00001547 arg 0x00000136 , 0x00000011 + 00012170 0x00001548 call 0x000032bf + 00012171 0x00001549 istore 0x00000004 , 0x00000005 + 00012172 0x0000154d branch 0x0000327a + 00012173 0x00001550 arg 0x00000d9e , 0x00000011 + 00012174 0x00001551 call 0x00002f94 + 00012175 0x00001552 add 0x00000013 , 0x000000eb , 0x00000005 + 00012176 0x00001553 istoret 0x00000001 , 0x00000005 + 00012177 0x00001555 sub 0x00000002 , 0x00000050 , 0x0000003e + 00012178 0x00001556 nrtn 0x00000002 + 00012179 0x00001557 branch 0x00002c8a + 00012180 0x0000155a arg 0x00000100 , 0x00000039 + 00012181 0x0000155b branch 0x00002e62 + 00012182 0x0000155e call 0x00002f99 + 00012183 0x0000155f call 0x00002fa5 + 00012184 0x00001560 branch 0x00002fb1 + 00012185 0x00001563 setarg 0x00000180 + 00012186 0x00001564 call 0x000032d0 + 00012187 0x00001566 rtn 0x00000034 + 00012188 0x00001567 arg 0x0000000b , 0x00000007 + 00012189 0x00001568 call 0x00007f16 + 00012190 0x00001569 nrtn 0x00000034 + 00012191 0x0000156a call 0x000032a7 + 00012192 0x0000156c setarg 0x00000001 + 00012193 0x0000156d store 0x00000001 , 0x00000d54 + 00012194 0x0000156e setarg 0x00000000 + 00012195 0x0000156f istore 0x00000007 , 0x00000005 + 00012196 0x00001570 branch 0x000031b8 + 00012197 0x00001573 setarg 0x0000017e + 00012198 0x00001574 call 0x000032d0 + 00012199 0x00001576 rtn 0x00000034 + 00012200 0x00001577 arg 0x0000000e , 0x00000007 + 00012201 0x00001578 call 0x00007f16 + 00012202 0x00001579 nrtn 0x00000034 + 00012203 0x0000157a call 0x000032aa + 00012204 0x0000157c arg 0x00000d64 , 0x00000005 + 00012205 0x0000157d arg 0x00000002 , 0x00000039 + 00012206 0x0000157e call 0x00007ec6 + 00012207 0x0000157f jam 0x00000000 , 0x00000d64 + 00012208 0x00001580 branch 0x000031ed + 00012209 0x00001583 setarg 0x0000017f + 00012210 0x00001584 call 0x000032d0 + 00012211 0x00001586 rtn 0x00000034 + 00012212 0x00001587 arg 0x0000000c , 0x00000007 + 00012213 0x00001588 call 0x00007f16 + 00012214 0x00001589 nrtn 0x00000034 + 00012215 0x0000158a call 0x000032ad + 00012216 0x0000158c arg 0x00000d74 , 0x00000005 + 00012217 0x0000158d arg 0x00000002 , 0x00000039 + 00012218 0x0000158e call 0x00007ec6 + 00012219 0x0000158f jam 0x00000003 , 0x00000d74 + 00012220 0x00001590 branch 0x00003207 + 00012221 0x00001593 call 0x0000328f + 00012222 0x00001595 rtnne 0x00000001 + 00012223 0x00001596 call 0x00002fc1 + 00012224 0x00001597 branch 0x00002fcb + 00012225 0x0000159a call 0x00003294 + 00012226 0x0000159c rtnbit1 0x00000001 + 00012227 0x0000159d set1 0x00000001 , 0x0000003f + 00012228 0x0000159e call 0x00003297 + 00012229 0x000015a0 call 0x0000329c + 00012230 0x000015a2 call 0x00002c83 + 00012231 0x000015a3 setarg 0x00000000 + 00012232 0x000015a4 arg 0x00000106 , 0x00000011 + 00012233 0x000015a5 call 0x000032bf + 00012234 0x000015a7 branch 0x000032c5 + 00012235 0x000015aa call 0x0000316e + 00012236 0x000015ab nbranch 0x00002f5e , 0x0000002f + 00012237 0x000015ac add 0x00000013 , 0x00000000 , 0x00000006 + 00012238 0x000015ad setarg 0x00000109 + 00012239 0x000015ae iadd 0x00000013 , 0x00000005 + 00012240 0x000015af arg 0x00000008 , 0x00000039 + 00012241 0x000015b0 call 0x00007f01 + 00012242 0x000015b1 setarg 0x0000010b + 00012243 0x000015b2 call 0x000032d0 + 00012244 0x000015b3 beq 0x000000aa , 0x00002fd9 + 00012245 0x000015b4 beq 0x00000055 , 0x00002fed + 00012246 0x000015b5 beq 0x00000022 , 0x00003001 + 00012247 0x000015b6 beq 0x000000ff , 0x00003212 + 00012248 0x000015b7 branch 0x00002f5e + 00012249 0x000015ba call 0x000032bd + 00012250 0x000015bb beq 0x00000001 , 0x00002fdd + 00012251 0x000015bc beq 0x00000002 , 0x00002fe8 + 00012252 0x000015bd rtn + 00012253 0x000015bf setarg 0x00000001 + 00012254 0x000015c0 call 0x00002ff7 + 00012255 0x000015c3 setarg 0x00000001 + 00012256 0x000015c4 call 0x00003289 + 00012257 0x000015c7 setarg 0x00000080 + 00012258 0x000015c8 arg 0x00000130 , 0x00000011 + 00012259 0x000015c9 call 0x000032b3 + 00012260 0x000015cb call 0x0000327d + 00012261 0x000015cd arg 0x00000131 , 0x00000011 + 00012262 0x000015ce call 0x000032bf + 00012263 0x000015d0 branch 0x0000322d + 00012264 0x000015d3 setarg 0x00000001 + 00012265 0x000015d4 call 0x00002fff + 00012266 0x000015d7 setarg 0x00000002 + 00012267 0x000015d8 call 0x00003289 + 00012268 0x000015da branch 0x00002fe1 + 00012269 0x000015dd call 0x000032bd + 00012270 0x000015de beq 0x00000001 , 0x00002ff1 + 00012271 0x000015df beq 0x00000002 , 0x00002ff9 + 00012272 0x000015e0 rtn + 00012273 0x000015e2 call 0x00002fdf + 00012274 0x000015e3 setarg 0x00000106 + 00012275 0x000015e4 call 0x000032d0 + 00012276 0x000015e6 beq 0x00000001 , 0x00002ff6 + 00012277 0x000015e7 rtn + 00012278 0x000015e9 setarg 0x00000002 + 00012279 0x000015ec arg 0x00000106 , 0x00000011 + 00012280 0x000015ed branch 0x000032b3 + 00012281 0x000015f0 call 0x00002fea + 00012282 0x000015f1 setarg 0x00000107 + 00012283 0x000015f2 call 0x000032d0 + 00012284 0x000015f4 beq 0x00000001 , 0x00002ffe + 00012285 0x000015f5 rtn + 00012286 0x000015f7 setarg 0x00000002 + 00012287 0x000015fa arg 0x00000107 , 0x00000011 + 00012288 0x000015fb branch 0x000032b3 + 00012289 0x000015fe call 0x000032bd + 00012290 0x000015ff beq 0x00000001 , 0x00003005 + 00012291 0x00001600 beq 0x00000002 , 0x00003011 + 00012292 0x00001601 rtn + 00012293 0x00001603 setarg 0x00000106 + 00012294 0x00001604 call 0x000032d0 + 00012295 0x00001606 beq 0x00000002 , 0x00003009 + 00012296 0x00001607 rtn + 00012297 0x00001609 call 0x0000328b + 00012298 0x0000160b or_into 0x00000001 , 0x0000003f + 00012299 0x0000160c call 0x0000328d + 00012300 0x0000160f setarg 0x00000000 + 00012301 0x00001610 setarg 0x00000106 + 00012302 0x00001611 iadd 0x00000013 , 0x00000005 + 00012303 0x00001612 istore 0x00000002 , 0x00000005 + 00012304 0x00001613 branch 0x00002f5e + 00012305 0x00001616 setarg 0x00000107 + 00012306 0x00001617 call 0x000032d0 + 00012307 0x00001619 bne 0x00000000 , 0x00003015 + 00012308 0x0000161a rtn + 00012309 0x0000161c call 0x0000328b + 00012310 0x0000161e or_into 0x00000002 , 0x0000003f + 00012311 0x0000161f call 0x0000328d + 00012312 0x00001621 branch 0x0000300c + 00012313 0x00001625 fetch 0x00000001 , 0x00000d50 + 00012314 0x00001626 rtn 0x00000034 + 00012315 0x00001627 jam 0x00000000 , 0x00000d50 + 00012316 0x00001628 fetch 0x00000002 , 0x00000d4e + 00012317 0x00001629 arg 0x000002ba , 0x00000002 + 00012318 0x0000162a isub 0x00000002 , 0x0000003e + 00012319 0x0000162b nrtn 0x00000005 + 00012320 0x0000162d fetch 0x00000001 , 0x00000cb6 + 00012321 0x0000162e rtnne 0x000000ba + 00012322 0x0000162f fetch 0x00000001 , 0x00000cb7 + 00012323 0x00001630 bpatch 0x000000be , 0x00004017 + 00012324 0x00001631 beq 0x000000a0 , 0x0000303b + 00012325 0x00001632 beq 0x000000a1 , 0x0000302c + 00012326 0x00001633 beq 0x000000a6 , 0x00003041 + 00012327 0x00001634 beq 0x000000a7 , 0x00003043 + 00012328 0x00001635 beq 0x000000a9 , 0x00003049 + 00012329 0x00001636 beq 0x000000b0 , 0x0000304d + 00012330 0x00001638 jam 0x00000000 , 0x00000d42 + 00012331 0x00001639 rtn + 00012332 0x0000163b fetch 0x00000001 , 0x00000cb8 + 00012333 0x0000163c beq 0x00000001 , 0x00003031 + 00012334 0x0000163d beq 0x00000084 , 0x00003034 + 00012335 0x0000163e beq 0x000000a7 , 0x00003039 + 00012336 0x0000163f branch 0x0000302a + 00012337 0x00001641 call 0x0000328b + 00012338 0x00001643 store 0x00000001 , 0x00000cf7 + 00012339 0x00001644 branch 0x0000303f + 00012340 0x00001646 call 0x00003291 + 00012341 0x00001648 call 0x00003296 + 00012342 0x0000164a call 0x0000328b + 00012343 0x0000164c store 0x00000001 , 0x00000cf7 + 00012344 0x0000164d branch 0x0000303f + 00012345 0x00001651 jam 0x000000a1 , 0x00000cf7 + 00012346 0x00001652 branch 0x0000303f + 00012347 0x00001655 fetch 0x00000001 , 0x00000cb8 + 00012348 0x00001656 beq 0x00000081 , 0x0000303e + 00012349 0x00001658 branch 0x0000302a + 00012350 0x0000165c call 0x00003090 + 00012351 0x0000165e jam 0x00000001 , 0x00000d42 + 00012352 0x0000165f rtn + 00012353 0x00001665 jam 0x00000015 , 0x00000cf7 + 00012354 0x00001666 branch 0x0000303f + 00012355 0x00001669 call 0x0000328f + 00012356 0x0000166b beq 0x00000000 , 0x00003047 + 00012357 0x0000166c beq 0x00000001 , 0x00003039 + 00012358 0x0000166e rtn + 00012359 0x00001670 jam 0x000000a0 , 0x00000cf7 + 00012360 0x00001671 branch 0x0000303f + 00012361 0x00001677 jam 0x00000000 , 0x00000cf7 + 00012362 0x00001678 jam 0x00000000 , 0x00000cf8 + 00012363 0x00001679 jam 0x00000001 , 0x00000cf9 + 00012364 0x0000167a branch 0x0000303f + 00012365 0x0000167e call 0x0000329c + 00012366 0x0000167f fetch 0x00000001 , 0x00000cb8 + 00012367 0x00001680 increase 0x00000002 , 0x0000003f + 00012368 0x00001681 copy 0x0000003f , 0x00000039 + 00012369 0x00001682 arg 0x00000cb6 , 0x00000006 + 00012370 0x00001683 setarg 0x0000013c + 00012371 0x00001684 iadd 0x00000013 , 0x00000005 + 00012372 0x00001685 branch 0x00007f01 + 00012373 0x00001689 bpatch 0x000000bf , 0x00004017 + 00012374 0x0000168a call 0x0000307d + 00012375 0x0000168c call 0x00002c7f + 00012376 0x0000168d call 0x000048d3 + 00012377 0x0000168e branch 0x00003057 + 00012378 0x00001691 call 0x0000328f + 00012379 0x00001693 rtnne 0x00000000 + 00012380 0x00001694 call 0x00002f51 + 00012381 0x00001695 branch 0x00003098 + 00012382 0x00001698 call 0x0000328f + 00012383 0x0000169a rtnne 0x00000001 + 00012384 0x0000169b call 0x00002fc1 + 00012385 0x0000169c call 0x00002fcb + 00012386 0x0000169d call 0x0000328b + 00012387 0x0000169f rtn 0x00000034 + 00012388 0x000016a0 call 0x00003286 + 00012389 0x000016a2 call 0x00002f4c + 00012390 0x000016a3 call 0x00003093 + 00012391 0x000016a5 setarg 0x00000000 + 00012392 0x000016a6 add 0x00000013 , 0x000000a7 , 0x00000005 + 00012393 0x000016a8 branch 0x0000322d + 00012394 0x000016ab call 0x00007fe9 + 00012395 0x000016ac add 0x00000013 , 0x000000a7 , 0x00000011 + 00012396 0x000016ad ifetcht 0x00000004 , 0x00000011 + 00012397 0x000016af copy 0x00000022 , 0x0000003f + 00012398 0x000016b0 isub 0x00000002 , 0x0000003e + 00012399 0x000016b1 ncall 0x00002d18 , 0x00000002 + 00012400 0x000016b2 copy 0x0000003f , 0x00000012 + 00012401 0x000016b3 add 0x00000013 , 0x000000a7 , 0x00000011 + 00012402 0x000016b4 ifetch 0x00000004 , 0x00000011 + 00012403 0x000016b6 add 0x00000013 , 0x000000ab , 0x00000011 + 00012404 0x000016b7 ifetcht 0x00000001 , 0x00000011 + 00012405 0x000016b9 iadd 0x00000002 , 0x00000002 + 00012406 0x000016ba copy 0x00000012 , 0x0000003f + 00012407 0x000016bb isub 0x00000002 , 0x0000003e + 00012408 0x000016bc nrtn 0x00000002 + 00012409 0x000016bd set0 0x0000001c , 0x0000003f + 00012410 0x000016be add 0x00000013 , 0x000000a7 , 0x00000005 + 00012411 0x000016bf istore 0x00000004 , 0x00000005 + 00012412 0x000016c1 branch 0x00007fe7 + 00012413 0x000016c4 setarg 0x00000001 + 00012414 0x000016c5 call 0x00003287 + 00012415 0x000016c7 call 0x00003283 + 00012416 0x000016c9 setarg 0x000000ff + 00012417 0x000016ca add 0x00000013 , 0x000000ab , 0x00000005 + 00012418 0x000016cb istore 0x00000001 , 0x00000005 + 00012419 0x000016cd branch 0x00003067 + 00012420 0x000016d0 setarg 0x0000015c + 00012421 0x000016d1 call 0x000032d0 + 00012422 0x000016d3 rtn 0x00000034 + 00012423 0x000016d4 call 0x0000306a + 00012424 0x000016d5 nrtn 0x00000028 + 00012425 0x000016d6 call 0x00003281 + 00012426 0x000016d8 increase 0x00000001 , 0x0000003f + 00012427 0x000016d9 and_into 0x00000001 , 0x0000003f + 00012428 0x000016da call 0x00003284 + 00012429 0x000016dc beq 0x00000000 , 0x00002f4c + 00012430 0x000016dd beq 0x00000001 , 0x00003090 + 00012431 0x000016de rtn + 00012432 0x000016e4 setarg 0x00000001 + 00012433 0x000016e5 call 0x00003292 + 00012434 0x000016e6 branch 0x00003296 + 00012435 0x000016e9 setarg 0x00000001 + 00012436 0x000016ea call 0x000032a5 + 00012437 0x000016ec setarg 0x00000280 + 00012438 0x000016ed arg 0x00000008 , 0x00000007 + 00012439 0x000016ee branch 0x00007f08 + 00012440 0x000016f1 call 0x000032a2 + 00012441 0x000016f3 rtn 0x00000034 + 00012442 0x000016f4 arg 0x00000008 , 0x00000007 + 00012443 0x000016f5 call 0x00007f16 + 00012444 0x000016f6 nrtn 0x00000034 + 00012445 0x000016f7 call 0x000032a4 + 00012446 0x000016fa setarg 0x00000007 + 00012447 0x000016fb call 0x00003292 + 00012448 0x000016fd call 0x00003296 + 00012449 0x000016ff branch 0x00002f5e + 00012450 0x00001702 bpatch 0x000000c0 , 0x00004018 + 00012451 0x00001703 call 0x0000328f + 00012452 0x00001705 rtnne 0x00000007 + 00012453 0x00001706 call 0x000030cb + 00012454 0x00001707 call 0x000030e0 + 00012455 0x00001708 call 0x0000316e + 00012456 0x00001709 nbranch 0x00002f5e , 0x0000002f + 00012457 0x0000170b call 0x000030bc + 00012458 0x0000170c call 0x00003172 , 0x00000005 + 00012459 0x00001710 call 0x00002f4c + 00012460 0x00001711 call 0x00003294 + 00012461 0x00001713 set1 0x00000000 , 0x0000003f + 00012462 0x00001714 call 0x00003297 + 00012463 0x00001716 call 0x00002f5e + 00012464 0x00001717 call 0x00003093 + 00012465 0x00001718 call 0x000030bc + 00012466 0x00001719 branch 0x000030c1 , 0x00000005 + 00012467 0x0000171a setarg 0x00000164 + 00012468 0x0000171b call 0x000032d3 + 00012469 0x0000171d call 0x000030be + 00012470 0x0000171e branch 0x000030c5 , 0x00000005 + 00012471 0x0000171f setarg 0x00000160 + 00012472 0x00001720 call 0x000032d3 + 00012473 0x00001722 call 0x000030be + 00012474 0x00001723 branch 0x000030c8 , 0x00000005 + 00012475 0x00001724 rtn + 00012476 0x00001727 setarg 0x0000012b + 00012477 0x00001728 call 0x000032d3 + 00012478 0x0000172b call 0x0000322a + 00012479 0x0000172d isub 0x00000002 , 0x0000003e + 00012480 0x0000172e rtn + 00012481 0x00001731 setarg 0x00000182 + 00012482 0x00001732 call 0x000032d0 + 00012483 0x00001736 add 0x00000013 , 0x00000091 , 0x00000005 + 00012484 0x00001737 branch 0x000032b4 + 00012485 0x0000173a setarg 0x00000185 + 00012486 0x0000173b call 0x000032d0 + 00012487 0x0000173d branch 0x000030c3 + 00012488 0x0000173f setarg 0x00000188 + 00012489 0x00001740 call 0x000032d0 + 00012490 0x00001742 branch 0x000030c3 + 00012491 0x00001745 call 0x00003294 + 00012492 0x00001747 rtnbit1 0x00000007 + 00012493 0x00001748 set1 0x00000007 , 0x0000003f + 00012494 0x00001749 call 0x00003297 + 00012495 0x0000174b call 0x00003283 + 00012496 0x0000174d call 0x0000329c + 00012497 0x0000174f setarg 0x00000000 + 00012498 0x00001750 add 0x00000013 , 0x000000f5 , 0x00000005 + 00012499 0x00001751 istore 0x00000003 , 0x00000005 + 00012500 0x00001753 arg 0x00000183 , 0x00000011 + 00012501 0x00001754 call 0x000032bf + 00012502 0x00001755 istore 0x00000007 , 0x00000005 + 00012503 0x00001758 call 0x000030bc + 00012504 0x00001759 nrtn 0x00000005 + 00012505 0x0000175a add 0x00000013 , 0x00000091 , 0x00000011 + 00012506 0x0000175b ifetch 0x00000001 , 0x00000011 + 00012507 0x0000175d arg 0x00000182 , 0x00000011 + 00012508 0x0000175e call 0x000032b3 + 00012509 0x00001760 add 0x00000013 , 0x00000090 , 0x00000011 + 00012510 0x00001761 ifetch 0x00000001 , 0x00000011 + 00012511 0x00001764 branch 0x0000314a + 00012512 0x00001767 bpatch 0x000000c1 , 0x00004018 + 00012513 0x00001768 call 0x00003281 + 00012514 0x0000176a increase 0x00000001 , 0x0000003f + 00012515 0x0000176b and_into 0x00000003 , 0x0000003f + 00012516 0x0000176c call 0x00003284 + 00012517 0x0000176f beq 0x00000000 , 0x0000310e + 00012518 0x00001770 beq 0x00000001 , 0x00003132 + 00012519 0x00001771 beq 0x00000002 , 0x000030ea + 00012520 0x00001772 beq 0x00000003 , 0x00003132 + 00012521 0x00001773 rtn + 00012522 0x00001776 call 0x00002fdf + 00012523 0x00001777 setarg 0x00000160 + 00012524 0x00001778 call 0x0000327e + 00012525 0x0000177a branch 0x000030e0 , 0x00000034 + 00012526 0x0000177b call 0x0000322c + 00012527 0x0000177d setarg 0x00000189 + 00012528 0x0000177e call 0x000032d0 + 00012529 0x00001780 call 0x00003108 , 0x00000034 + 00012530 0x00001781 setarg 0x00000187 + 00012531 0x00001782 call 0x000032d0 + 00012532 0x00001784 call 0x0000322f + 00012533 0x00001786 add 0x00000013 , 0x000000f7 , 0x00000011 + 00012534 0x00001787 ifetcht 0x00000001 , 0x00000011 + 00012535 0x00001789 arg 0x00000f9e , 0x00000011 + 00012536 0x0000178a call 0x00002e58 + 00012537 0x0000178b add 0x00000013 , 0x000000f7 , 0x00000005 + 00012538 0x0000178c istoret 0x00000001 , 0x00000005 + 00012539 0x0000178e call 0x00002f94 + 00012540 0x0000178f add 0x00000013 , 0x000000fa , 0x00000005 + 00012541 0x00001790 istoret 0x00000001 , 0x00000005 + 00012542 0x00001792 sub 0x00000002 , 0x00000050 , 0x0000003e + 00012543 0x00001793 nrtn 0x00000002 + 00012544 0x00001794 setarg 0x00000188 + 00012545 0x00001795 call 0x00003275 + 00012546 0x00001797 call 0x00002c90 + 00012547 0x00001798 arg 0x00000188 , 0x00000011 + 00012548 0x00001799 call 0x000032c8 + 00012549 0x0000179a istoret 0x00000001 , 0x00000005 + 00012550 0x0000179e arg 0x00000187 , 0x00000011 + 00012551 0x0000179f branch 0x000032b3 + 00012552 0x000017a2 setarg 0x00000001 + 00012553 0x000017a3 arg 0x00000189 , 0x00000011 + 00012554 0x000017a4 call 0x000032b3 + 00012555 0x000017a6 arg 0x00000000 , 0x00000002 + 00012556 0x000017a7 call 0x00002c94 + 00012557 0x000017aa branch 0x00003106 + 00012558 0x000017ad call 0x00002fea + 00012559 0x000017ae setarg 0x00000164 + 00012560 0x000017af call 0x0000327e + 00012561 0x000017b1 branch 0x000030e0 , 0x00000034 + 00012562 0x000017b2 call 0x0000322c + 00012563 0x000017b4 setarg 0x00000186 + 00012564 0x000017b5 call 0x000032d0 + 00012565 0x000017b7 call 0x0000312c , 0x00000034 + 00012566 0x000017b8 setarg 0x00000184 + 00012567 0x000017b9 call 0x000032d0 + 00012568 0x000017bb call 0x0000322f + 00012569 0x000017bd add 0x00000013 , 0x000000f6 , 0x00000011 + 00012570 0x000017be ifetcht 0x00000001 , 0x00000011 + 00012571 0x000017c0 arg 0x0000109e , 0x00000011 + 00012572 0x000017c1 call 0x00002e58 + 00012573 0x000017c2 add 0x00000013 , 0x000000f6 , 0x00000005 + 00012574 0x000017c3 istoret 0x00000001 , 0x00000005 + 00012575 0x000017c5 call 0x00002f94 + 00012576 0x000017c6 add 0x00000013 , 0x000000f9 , 0x00000005 + 00012577 0x000017c7 istoret 0x00000001 , 0x00000005 + 00012578 0x000017c9 sub 0x00000002 , 0x00000050 , 0x0000003e + 00012579 0x000017ca nrtn 0x00000002 + 00012580 0x000017cb setarg 0x00000185 + 00012581 0x000017cc call 0x00003275 + 00012582 0x000017ce call 0x00002c90 + 00012583 0x000017cf arg 0x00000185 , 0x00000011 + 00012584 0x000017d0 call 0x000032c8 + 00012585 0x000017d1 istoret 0x00000001 , 0x00000005 + 00012586 0x000017d5 arg 0x00000184 , 0x00000011 + 00012587 0x000017d6 branch 0x000032b3 + 00012588 0x000017d9 setarg 0x00000001 + 00012589 0x000017da arg 0x00000186 , 0x00000011 + 00012590 0x000017db call 0x000032b3 + 00012591 0x000017dd arg 0x00000000 , 0x00000002 + 00012592 0x000017de call 0x00002c94 + 00012593 0x000017e1 branch 0x0000312a + 00012594 0x000017e4 call 0x00002fdf + 00012595 0x000017e5 call 0x0000327d + 00012596 0x000017e7 call 0x0000322c + 00012597 0x000017e9 setarg 0x00000183 + 00012598 0x000017ea call 0x000032d0 + 00012599 0x000017ec call 0x0000314c , 0x00000034 + 00012600 0x000017ed call 0x0000314f + 00012601 0x000017ee add 0x00000013 , 0x000000f5 , 0x00000011 + 00012602 0x000017ef ifetcht 0x00000001 , 0x00000011 + 00012603 0x000017f1 arg 0x00000e9e , 0x00000011 + 00012604 0x000017f2 call 0x00002e58 + 00012605 0x000017f3 add 0x00000013 , 0x000000f5 , 0x00000005 + 00012606 0x000017f4 istoret 0x00000001 , 0x00000005 + 00012607 0x000017f6 call 0x00002f94 + 00012608 0x000017f7 add 0x00000013 , 0x000000f8 , 0x00000005 + 00012609 0x000017f8 istoret 0x00000001 , 0x00000005 + 00012610 0x000017fa sub 0x00000002 , 0x00000050 , 0x0000003e + 00012611 0x000017fb nrtn 0x00000002 + 00012612 0x000017fc setarg 0x00000182 + 00012613 0x000017fd call 0x00003275 + 00012614 0x000017ff call 0x00002c90 + 00012615 0x00001800 arg 0x00000182 , 0x00000011 + 00012616 0x00001801 call 0x000032c8 + 00012617 0x00001802 istoret 0x00000001 , 0x00000005 + 00012618 0x00001807 arg 0x00000181 , 0x00000011 + 00012619 0x00001808 branch 0x000032b3 + 00012620 0x00001810 setarg 0x00000001 + 00012621 0x00001811 arg 0x00000183 , 0x00000011 + 00012622 0x00001812 call 0x000032b3 + 00012623 0x00001814 setarg 0x00000181 + 00012624 0x00001815 call 0x000032d0 + 00012625 0x00001816 branch 0x0000322f + 00012626 0x0000181b add 0x00000013 , 0x00000000 , 0x00000011 + 00012627 0x0000181c ifetch 0x00000001 , 0x00000011 + 00012628 0x0000181e call 0x0000323c + 00012629 0x00001821 call 0x00002dde + 00012630 0x00001823 call 0x0000325f + 00012631 0x00001825 isolate1 0x00000000 , 0x0000003f + 00012632 0x00001826 branch 0x0000315c , 0x00000001 + 00012633 0x00001828 call 0x0000315d + 00012634 0x00001829 call 0x00002d53 + 00012635 0x0000182a call 0x00002df7 + 00012636 0x0000182c branch 0x00002e45 + 00012637 0x0000182f bpatch 0x000000c2 , 0x00004018 + 00012638 0x00001830 add 0x00000013 , 0x00000086 , 0x00000005 + 00012639 0x00001831 call 0x000032d6 + 00012640 0x00001833 setarg 0x0000013b + 00012641 0x00001834 call 0x000032d0 + 00012642 0x00001836 rtn 0x00000034 + 00012643 0x00001837 setarg 0x00000006 + 00012644 0x00001838 add 0x00000013 , 0x00000086 , 0x00000005 + 00012645 0x00001839 istore 0x00000001 , 0x00000005 + 00012646 0x0000183b arg 0x00000006 , 0x00000039 + 00012647 0x0000183c setarg 0x0000012f + 00012648 0x0000183d iadd 0x00000013 , 0x00000006 + 00012649 0x0000183f add 0x00000013 , 0x00000022 , 0x00000005 + 00012650 0x00001841 branch 0x00007f01 + 00012651 0x00001845 call 0x0000316e + 00012652 0x00001846 nbranch 0x00002f5e , 0x0000002f + 00012653 0x00001847 branch 0x00003172 + 00012654 0x0000184a call 0x00002f5e + 00012655 0x0000184b call 0x00002e11 + 00012656 0x0000184c nrtn 0x0000002f + 00012657 0x0000184d branch 0x00003152 + 00012658 0x00001850 bpatch 0x000000c3 , 0x00004018 + 00012659 0x00001851 call 0x00003188 + 00012660 0x00001852 nbranch 0x00002f5e , 0x00000028 + 00012661 0x00001853 add 0x00000013 , 0x00000084 , 0x00000011 + 00012662 0x00001854 ifetch 0x00000001 , 0x00000011 + 00012663 0x00001856 branch 0x00002f5e , 0x00000034 + 00012664 0x00001857 increase 0x00000002 , 0x0000003f + 00012665 0x00001858 iforce 0x00000039 + 00012666 0x00001859 add 0x00000013 , 0x00000000 , 0x00000006 + 00012667 0x0000185b setarg 0x00000109 + 00012668 0x0000185c iadd 0x00000013 , 0x00000005 + 00012669 0x0000185e call 0x00007f01 + 00012670 0x0000185f call 0x00003286 + 00012671 0x00001861 call 0x000032b6 + 00012672 0x00001863 call 0x00003093 , 0x00000034 + 00012673 0x00001864 setarg 0x0000010b + 00012674 0x00001865 call 0x000032d0 + 00012675 0x00001867 beq 0x00000001 , 0x0000319e + 00012676 0x00001868 beq 0x00000002 , 0x000031c6 + 00012677 0x00001869 beq 0x00000003 , 0x000031f2 + 00012678 0x0000186a beq 0x000000ff , 0x00003212 + 00012679 0x0000186b branch 0x00002f5e + 00012680 0x0000186e call 0x00002c7a + 00012681 0x0000186f call 0x00007fe9 + 00012682 0x00001870 add 0x00000013 , 0x000000ca , 0x00000011 + 00012683 0x00001871 ifetch 0x00000001 , 0x00000011 + 00012684 0x00001873 add 0x00000013 , 0x000000cb , 0x00000011 + 00012685 0x00001874 ifetcht 0x00000001 , 0x00000011 + 00012686 0x00001876 isub 0x00000002 , 0x0000003e + 00012687 0x00001877 ncall 0x00007fe7 , 0x00000005 + 00012688 0x00001878 add 0x00000013 , 0x000000ca , 0x00000011 + 00012689 0x00001879 ifetch 0x00000001 , 0x00000011 + 00012690 0x0000187b add 0x00000013 , 0x000000cb , 0x00000005 + 00012691 0x0000187c istore 0x00000001 , 0x00000005 + 00012692 0x0000187e add 0x00000013 , 0x000000c4 , 0x00000011 + 00012693 0x0000187f ifetch 0x00000003 , 0x00000011 + 00012694 0x00001881 add 0x00000013 , 0x000000c7 , 0x00000011 + 00012695 0x00001882 ifetcht 0x00000003 , 0x00000011 + 00012696 0x00001884 isub 0x00000002 , 0x0000003e + 00012697 0x00001885 ncall 0x00007fe7 , 0x00000005 + 00012698 0x00001886 add 0x00000013 , 0x000000c4 , 0x00000011 + 00012699 0x00001887 ifetch 0x00000003 , 0x00000011 + 00012700 0x00001889 add 0x00000013 , 0x000000c7 , 0x00000005 + 00012701 0x0000188b branch 0x000032c5 + 00012702 0x0000188e call 0x00002f88 + 00012703 0x0000188f call 0x0000324c + 00012704 0x00001890 store 0x00000001 , 0x00000aa2 + 00012705 0x00001892 call 0x00003274 + 00012706 0x00001893 fetch 0x00000001 , 0x00000aa2 + 00012707 0x00001895 isolate1 0x00000003 , 0x00000002 + 00012708 0x00001896 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00012709 0x00001897 add 0x00000013 , 0x000000b2 , 0x00000005 + 00012710 0x00001898 istore 0x00000001 , 0x00000005 + 00012711 0x0000189a beq 0x00000001 , 0x00003216 + 00012712 0x0000189b call 0x00003245 + 00012713 0x0000189d call 0x00003274 + 00012714 0x0000189f isolate1 0x00000004 , 0x00000002 + 00012715 0x000018a0 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00012716 0x000018a1 call 0x00003249 + 00012717 0x000018a3 add 0x00000013 , 0x000000de , 0x00000011 + 00012718 0x000018a4 ifetch 0x00000002 , 0x00000011 + 00012719 0x000018a6 branch 0x00007f9c + 00012720 0x000018a9 setarg 0x00000001 + 00012721 0x000018aa store 0x00000001 , 0x00000d54 + 00012722 0x000018ab call 0x0000329e + 00012723 0x000018ad istore 0x00000007 , 0x00000005 + 00012724 0x000018ae call 0x0000329e + 00012725 0x000018b0 ncall 0x000031bd , 0x00000034 + 00012726 0x000018b1 call 0x0000329e + 00012727 0x000018b3 call 0x000031c2 , 0x00000034 + 00012728 0x000018b5 jam 0x00000020 , 0x00000d52 + 00012729 0x000018b7 fetch 0x00000001 , 0x00000d38 + 00012730 0x000018b8 set1 0x00000002 , 0x0000003f + 00012731 0x000018b9 store 0x00000001 , 0x00000d38 + 00012732 0x000018ba rtn + 00012733 0x000018bd setarg 0x00000001 + 00012734 0x000018be call 0x000032a8 + 00012735 0x000018c0 setarg 0x00000140 + 00012736 0x000018c1 arg 0x0000000b , 0x00000007 + 00012737 0x000018c2 branch 0x00007f08 + 00012738 0x000018c4 call 0x000032a7 + 00012739 0x000018c6 setarg 0x00000000 + 00012740 0x000018c7 arg 0x0000000b , 0x00000007 + 00012741 0x000018c8 branch 0x00007f08 + 00012742 0x000018cb call 0x00003274 + 00012743 0x000018cd isolate1 0x00000003 , 0x00000002 + 00012744 0x000018ce branch 0x0000321b , 0x00000001 + 00012745 0x000018cf arg 0x00000d64 , 0x00000005 + 00012746 0x000018d0 call 0x000031e0 + 00012747 0x000018d1 fetch 0x00000008 , 0x00000d64 + 00012748 0x000018d2 ncall 0x000031e4 , 0x00000034 + 00012749 0x000018d3 fetch 0x00000008 , 0x00000d64 + 00012750 0x000018d4 call 0x000031e9 , 0x00000034 + 00012751 0x000018d5 call 0x00002c7a + 00012752 0x000018d6 fetch 0x00000008 , 0x00000d64 + 00012753 0x000018d7 arg 0x00000168 , 0x00000011 + 00012754 0x000018d8 call 0x000032bf + 00012755 0x000018d9 istore 0x00000008 , 0x00000005 + 00012756 0x000018db setarg 0x00000170 + 00012757 0x000018dc iadd 0x00000013 , 0x00000011 + 00012758 0x000018dd ifetcht 0x00000008 , 0x00000011 + 00012759 0x000018df isub 0x00000002 , 0x0000003e + 00012760 0x000018e0 ncall 0x000031ed , 0x00000005 + 00012761 0x000018e1 setarg 0x00000168 + 00012762 0x000018e2 iadd 0x00000013 , 0x00000011 + 00012763 0x000018e3 ifetch 0x00000008 , 0x00000011 + 00012764 0x000018e5 arg 0x00000170 , 0x00000011 + 00012765 0x000018e6 call 0x000032bf + 00012766 0x000018e7 istore 0x00000008 , 0x00000005 + 00012767 0x000018e9 branch 0x00002f5e + 00012768 0x000018ec setarg 0x0000010b + 00012769 0x000018ed iadd 0x00000013 , 0x00000006 + 00012770 0x000018ef arg 0x00000009 , 0x00000039 + 00012771 0x000018f0 branch 0x00007ff3 + 00012772 0x000018f3 setarg 0x00000001 + 00012773 0x000018f4 call 0x000032ab + 00012774 0x000018f6 setarg 0x00000140 + 00012775 0x000018f7 arg 0x0000000e , 0x00000007 + 00012776 0x000018f8 branch 0x00007f08 + 00012777 0x000018fb call 0x000032aa + 00012778 0x000018fd setarg 0x00000000 + 00012779 0x000018fe arg 0x0000000e , 0x00000007 + 00012780 0x000018ff branch 0x00007f08 + 00012781 0x00001903 jam 0x00000010 , 0x00000d51 + 00012782 0x00001904 fetch 0x00000001 , 0x00000d38 + 00012783 0x00001905 set1 0x00000001 , 0x0000003f + 00012784 0x00001906 store 0x00000001 , 0x00000d38 + 00012785 0x00001907 rtn + 00012786 0x0000190a arg 0x00000d74 , 0x00000005 + 00012787 0x0000190b call 0x000031e0 + 00012788 0x0000190c fetch 0x00000002 , 0x00000d75 + 00012789 0x0000190d ncall 0x00003209 , 0x00000034 + 00012790 0x0000190e fetch 0x00000002 , 0x00000d75 + 00012791 0x0000190f call 0x0000320e , 0x00000034 + 00012792 0x00001910 call 0x00002c7a + 00012793 0x00001911 fetch 0x00000003 , 0x00000d74 + 00012794 0x00001912 arg 0x00000178 , 0x00000011 + 00012795 0x00001913 call 0x000032c4 + 00012796 0x00001915 setarg 0x0000017b + 00012797 0x00001916 iadd 0x00000013 , 0x00000011 + 00012798 0x00001917 ifetcht 0x00000003 , 0x00000011 + 00012799 0x00001919 isub 0x00000002 , 0x0000003e + 00012800 0x0000191a ncall 0x00003207 , 0x00000005 + 00012801 0x0000191b setarg 0x00000178 + 00012802 0x0000191c iadd 0x00000013 , 0x00000011 + 00012803 0x0000191d ifetch 0x00000003 , 0x00000011 + 00012804 0x0000191f arg 0x0000017b , 0x00000011 + 00012805 0x00001920 call 0x000032c4 + 00012806 0x00001922 branch 0x00002f5e + 00012807 0x00001925 jam 0x00000021 , 0x00000d52 + 00012808 0x00001926 branch 0x000031b9 + 00012809 0x00001929 setarg 0x00000001 + 00012810 0x0000192a call 0x000032ae + 00012811 0x0000192c setarg 0x00000140 + 00012812 0x0000192d arg 0x0000000c , 0x00000007 + 00012813 0x0000192e branch 0x00007f08 + 00012814 0x00001931 call 0x000032ad + 00012815 0x00001933 setarg 0x00000000 + 00012816 0x00001934 arg 0x0000000c , 0x00000007 + 00012817 0x00001935 branch 0x00007f08 + 00012818 0x00001938 call 0x000032bd + 00012819 0x0000193a beq 0x00000001 , 0x00003216 + 00012820 0x0000193b beq 0x00000002 , 0x0000321b + 00012821 0x0000193c rtn + 00012822 0x0000193e setarg 0x0000010d + 00012823 0x0000193f call 0x0000327e + 00012824 0x00001940 arg 0x00000160 , 0x00000011 + 00012825 0x00001941 call 0x000032bf + 00012826 0x00001944 branch 0x0000322d + 00012827 0x00001947 setarg 0x0000010d + 00012828 0x00001948 call 0x0000327e + 00012829 0x00001949 arg 0x00000164 , 0x00000011 + 00012830 0x0000194a call 0x000032bf + 00012831 0x0000194d branch 0x0000322d + 00012832 0x00001950 call 0x00002c7a + 00012833 0x00001951 add 0x00000013 , 0x000000cd , 0x00000005 + 00012834 0x00001952 istore 0x00000001 , 0x00000005 + 00012835 0x00001953 rtn + 00012836 0x00001956 call 0x00002c7a + 00012837 0x00001957 add 0x00000013 , 0x000000be , 0x00000011 + 00012838 0x00001958 branch 0x0000327f + 00012839 0x0000195a call 0x00002c7a + 00012840 0x0000195b add 0x00000013 , 0x000000be , 0x00000005 + 00012841 0x0000195c branch 0x0000322d + 00012842 0x0000195f add 0x00000013 , 0x000000ae , 0x00000011 + 00012843 0x00001960 branch 0x0000327f + 00012844 0x00001962 add 0x00000013 , 0x000000ae , 0x00000005 + 00012845 0x00001964 istore 0x00000004 , 0x00000005 + 00012846 0x00001965 rtn + 00012847 0x00001968 add 0x00000013 , 0x00000090 , 0x00000005 + 00012848 0x00001969 branch 0x000032b4 + 00012849 0x0000196c setarg 0x00000000 + 00012850 0x0000196e call 0x00002c7a + 00012851 0x0000196f add 0x00000013 , 0x00000085 , 0x00000005 + 00012852 0x00001970 branch 0x000032b4 + 00012853 0x00001973 add 0x00000013 , 0x00000042 , 0x00000005 + 00012854 0x00001974 branch 0x000032b4 + 00012855 0x00001977 setarg 0x00000004 + 00012856 0x00001979 add 0x00000013 , 0x000000cc , 0x00000005 + 00012857 0x0000197a branch 0x000032b4 + 00012858 0x0000197d add 0x00000013 , 0x00000087 , 0x00000011 + 00012859 0x0000197e branch 0x000032d1 + 00012860 0x00001980 add 0x00000013 , 0x00000087 , 0x00000005 + 00012861 0x00001981 branch 0x000032b4 + 00012862 0x00001984 setarg 0x00000002 + 00012863 0x00001986 add 0x00000013 , 0x000000d0 , 0x00000005 + 00012864 0x00001987 branch 0x000032b4 + 00012865 0x0000198a setarg 0x00000001 + 00012866 0x0000198c call 0x00002c7a + 00012867 0x0000198d add 0x00000013 , 0x000000ce , 0x00000005 + 00012868 0x0000198e branch 0x000032b4 + 00012869 0x00001991 call 0x00002c7a + 00012870 0x00001992 add 0x00000013 , 0x000000b4 , 0x00000011 + 00012871 0x00001993 branch 0x000032d1 + 00012872 0x00001995 setarg 0x00000001 + 00012873 0x00001997 call 0x00002c7a + 00012874 0x00001998 add 0x00000013 , 0x000000b4 , 0x00000005 + 00012875 0x00001999 branch 0x000032b4 + 00012876 0x0000199c call 0x00002c7a + 00012877 0x0000199d add 0x00000013 , 0x000000b2 , 0x00000011 + 00012878 0x0000199e branch 0x000032d1 + 00012879 0x000019a0 setarg 0x00000001 + 00012880 0x000019a2 call 0x00002c7a + 00012881 0x000019a3 add 0x00000013 , 0x000000b2 , 0x00000005 + 00012882 0x000019a4 branch 0x000032b4 + 00012883 0x000019a7 call 0x00002c7a + 00012884 0x000019a8 add 0x00000013 , 0x00000096 , 0x00000011 + 00012885 0x000019a9 branch 0x000032d1 + 00012886 0x000019ab add 0x00000013 , 0x00000096 , 0x00000005 + 00012887 0x000019ac branch 0x000032b4 + 00012888 0x000019af add 0x00000013 , 0x000000cf , 0x00000011 + 00012889 0x000019b0 branch 0x000032d1 + 00012890 0x000019b2 setarg 0x00000000 + 00012891 0x000019b4 add 0x00000013 , 0x000000cf , 0x00000005 + 00012892 0x000019b5 branch 0x000032b4 + 00012893 0x000019b8 add 0x00000013 , 0x000000d2 , 0x00000011 + 00012894 0x000019b9 branch 0x000032d1 + 00012895 0x000019bc add 0x00000013 , 0x00000001 , 0x00000011 + 00012896 0x000019bd branch 0x000032d1 + 00012897 0x000019c0 add 0x00000013 , 0x000000b5 , 0x00000011 + 00012898 0x000019c1 branch 0x000032d1 + 00012899 0x000019c3 setarg 0x00000000 + 00012900 0x000019c5 call 0x00002c7a + 00012901 0x000019c6 add 0x00000013 , 0x000000b5 , 0x00000005 + 00012902 0x000019c7 branch 0x000032b4 + 00012903 0x000019ca call 0x00002c7a + 00012904 0x000019cb add 0x00000013 , 0x000000fb , 0x00000011 + 00012905 0x000019cc ifetch 0x00000001 , 0x00000011 + 00012906 0x000019ce store 0x00000001 , 0x000041de + 00012907 0x000019cf rtn + 00012908 0x000019d2 call 0x00002c7a + 00012909 0x000019d3 fetch 0x00000001 , 0x000041de + 00012910 0x000019d5 add 0x00000013 , 0x000000fb , 0x00000005 + 00012911 0x000019d6 branch 0x000032b4 + 00012912 0x000019d9 add 0x00000013 , 0x000000fc , 0x00000011 + 00012913 0x000019da branch 0x000032d1 + 00012914 0x000019dd add 0x00000013 , 0x000000fe , 0x00000005 + 00012915 0x000019de branch 0x000032b4 + 00012916 0x000019e1 setarg 0x00000109 + 00012917 0x000019e3 iadd 0x00000013 , 0x00000011 + 00012918 0x000019e4 ifetcht 0x00000001 , 0x00000011 + 00012919 0x000019e5 rtn + 00012920 0x000019e8 setarg 0x00000135 + 00012921 0x000019e9 branch 0x000032d0 + 00012922 0x000019eb setarg 0x00000000 + 00012923 0x000019ed arg 0x00000135 , 0x00000011 + 00012924 0x000019ee branch 0x000032b3 + 00012925 0x000019f1 setarg 0x0000012b + 00012926 0x000019f3 call 0x000032cd + 00012927 0x000019f5 ifetch 0x00000004 , 0x00000011 + 00012928 0x000019f6 rtn + 00012929 0x000019f9 setarg 0x0000015f + 00012930 0x000019fa branch 0x000032d0 + 00012931 0x000019fc setarg 0x00000000 + 00012932 0x000019fe arg 0x0000015f , 0x00000011 + 00012933 0x000019ff branch 0x000032b3 + 00012934 0x00001a02 setarg 0x00000000 + 00012935 0x00001a04 arg 0x0000015c , 0x00000011 + 00012936 0x00001a05 branch 0x000032b3 + 00012937 0x00001a08 arg 0x0000012f , 0x00000011 + 00012938 0x00001a09 branch 0x000032b3 + 00012939 0x00001a0c setarg 0x00000108 + 00012940 0x00001a0d branch 0x000032d0 + 00012941 0x00001a0f arg 0x00000108 , 0x00000011 + 00012942 0x00001a10 branch 0x000032b3 + 00012943 0x00001a13 setarg 0x00000105 + 00012944 0x00001a14 branch 0x000032d0 + 00012945 0x00001a16 setarg 0x00000000 + 00012946 0x00001a18 arg 0x00000105 , 0x00000011 + 00012947 0x00001a19 branch 0x000032b3 + 00012948 0x00001a1c setarg 0x00000104 + 00012949 0x00001a1d branch 0x000032d0 + 00012950 0x00001a1f setarg 0x00000000 + 00012951 0x00001a21 arg 0x00000104 , 0x00000011 + 00012952 0x00001a22 branch 0x000032b3 + 00012953 0x00001a25 setarg 0x00000000 + 00012954 0x00001a27 arg 0x0000013b , 0x00000011 + 00012955 0x00001a28 branch 0x000032b3 + 00012956 0x00001a2a setarg 0x00000001 + 00012957 0x00001a2b branch 0x0000329a + 00012958 0x00001a2e setarg 0x0000010c + 00012959 0x00001a2f call 0x000032cd + 00012960 0x00001a30 ifetch 0x00000007 , 0x00000011 + 00012961 0x00001a31 rtn + 00012962 0x00001a34 setarg 0x0000015e + 00012963 0x00001a35 branch 0x000032d0 + 00012964 0x00001a37 setarg 0x00000000 + 00012965 0x00001a39 arg 0x0000015e , 0x00000011 + 00012966 0x00001a3a branch 0x000032b3 + 00012967 0x00001a3d setarg 0x00000000 + 00012968 0x00001a3f arg 0x00000180 , 0x00000011 + 00012969 0x00001a40 branch 0x000032b3 + 00012970 0x00001a43 setarg 0x00000000 + 00012971 0x00001a45 arg 0x0000017e , 0x00000011 + 00012972 0x00001a46 branch 0x000032b3 + 00012973 0x00001a49 setarg 0x00000000 + 00012974 0x00001a4b arg 0x0000017f , 0x00000011 + 00012975 0x00001a4c branch 0x000032b3 + 00012976 0x00001a4f arg 0x00000102 , 0x00000011 + 00012977 0x00001a50 branch 0x000032b3 + 00012978 0x00001a53 arg 0x00000103 , 0x00000011 + 00012979 0x00001a55 call 0x000032c7 + 00012980 0x00001a57 istore 0x00000001 , 0x00000005 + 00012981 0x00001a58 rtn + 00012982 0x00001a5b setarg 0x0000015d + 00012983 0x00001a5c branch 0x000032d0 + 00012984 0x00001a5f arg 0x0000015d , 0x00000011 + 00012985 0x00001a60 branch 0x000032b3 + 00012986 0x00001a63 setarg 0x0000018a + 00012987 0x00001a64 call 0x000032d0 + 00012988 0x00001a65 branch 0x0000326a + 00012989 0x00001a68 setarg 0x0000010c + 00012990 0x00001a69 branch 0x000032d0 + 00012991 0x00001a6c copy 0x0000003f , 0x00000002 + 00012992 0x00001a6d copy 0x00000011 , 0x0000003f + 00012993 0x00001a6e iadd 0x00000013 , 0x00000005 + 00012994 0x00001a6f copy 0x00000002 , 0x0000003f + 00012995 0x00001a70 rtn + 00012996 0x00001a73 call 0x000032bf + 00012997 0x00001a75 istore 0x00000003 , 0x00000005 + 00012998 0x00001a76 rtn + 00012999 0x00001a79 call 0x00002c7a + 00013000 0x00001a7b copy 0x0000003f , 0x00000012 + 00013001 0x00001a7c copy 0x00000011 , 0x0000003f + 00013002 0x00001a7d iadd 0x00000013 , 0x00000005 + 00013003 0x00001a7e copy 0x00000012 , 0x0000003f + 00013004 0x00001a7f rtn + 00013005 0x00001a82 call 0x00002c7a + 00013006 0x00001a83 iadd 0x00000013 , 0x00000011 + 00013007 0x00001a84 rtn + 00013008 0x00001a87 call 0x000032cd + 00013009 0x00001a89 ifetch 0x00000001 , 0x00000011 + 00013010 0x00001a8a rtn + 00013011 0x00001a8d call 0x000032cd + 00013012 0x00001a8e ifetcht 0x00000004 , 0x00000011 + 00013013 0x00001a8f rtn + 00013014 0x00001a92 setarg 0x00000000 + 00013015 0x00001a93 branch 0x000032b4 + 00013016 0x00001a98 bpatch 0x000000c4 , 0x00004018 + 00013017 0x00001a99 fetch 0x00000001 , 0x00004092 + 00013018 0x00001a9a branch 0x000032d8 , 0x00000034 + 00013019 0x00001a9c beq 0x00000004 , 0x00002f30 + 00013020 0x00001a9d beq 0x0000000f , 0x00003436 + 00013021 0x00001a9e beq 0x00000009 , 0x000045de + 00013022 0x00001a9f beq 0x0000000a , 0x0000392a + 00013023 0x00001aa0 beq 0x0000000e , 0x000035bf + 00013024 0x00001aa1 beq 0x00000010 , 0x000044a4 + 00013025 0x00001aa2 bbit1 0x00000006 , 0x00003d00 + 00013026 0x00001aa3 rtn + 00013027 0x00001aa6 bpatch 0x000000c5 , 0x00004018 + 00013028 0x00001aa7 jam 0x00000000 , 0x00000151 + 00013029 0x00001aa8 jam 0x00000000 , 0x0000017f + 00013030 0x00001aa9 jam 0x00000000 , 0x00000180 + 00013031 0x00001aaa setarg 0x00000000 + 00013032 0x00001aab store 0x00000005 , 0x000009ae + 00013033 0x00001aac fetch 0x00000001 , 0x00004092 + 00013034 0x00001aad branch 0x000032e3 , 0x00000034 + 00013035 0x00001aae beq 0x0000000a , 0x00003962 + 00013036 0x00001ab0 rtn + 00013037 0x00001ab4 call 0x00007cd1 + 00013038 0x00001ab5 call 0x00007d9c + 00013039 0x00001ab6 call 0x000032f6 + 00013040 0x00001ab7 fetch 0x00000002 , 0x000041f3 + 00013041 0x00001ab8 branch 0x00007f9c + 00013042 0x00001abb fetch 0x00000002 , 0x000041f1 + 00013043 0x00001abc branch 0x00007f9c + 00013044 0x00001abf fetch 0x00000002 , 0x000041ef + 00013045 0x00001ac0 branch 0x00007f9c + 00013046 0x00001ac3 bpatch 0x000000c6 , 0x00004018 + 00013047 0x00001ac5 arg 0x00004668 , 0x00000011 + 00013048 0x00001ac6 call 0x00007fc4 + 00013049 0x00001ac7 rtn 0x00000034 + 00013050 0x00001ac9 copy 0x0000003f , 0x00000013 + 00013051 0x00001aca call 0x000032ff + 00013052 0x00001acb branch 0x00003324 + 00013053 0x00001ace arg 0x00000000 , 0x00000013 + 00013054 0x00001acf rtn + 00013055 0x00001ad5 beq 0x00000001 , 0x00003311 + 00013056 0x00001ad6 beq 0x00000010 , 0x00003357 + 00013057 0x00001ad7 beq 0x00000005 , 0x00003335 + 00013058 0x00001ad8 beq 0x00000012 , 0x0000333c + 00013059 0x00001ad9 beq 0x00000006 , 0x00003353 + 00013060 0x00001ada beq 0x00000004 , 0x00003394 + 00013061 0x00001adb beq 0x00000002 , 0x00003399 + 00013062 0x00001adc beq 0x00000013 , 0x00003394 + 00013063 0x00001add beq 0x00000014 , 0x0000334b + 00013064 0x00001ade beq 0x00000015 , 0x0000334f + 00013065 0x00001adf beq 0x00000003 , 0x0000332e + 00013066 0x00001ae0 beq 0x0000000b , 0x00003340 + 00013067 0x00001ae1 beq 0x0000000c , 0x00003347 + 00013068 0x00001ae3 beq 0x00000016 , 0x0000335b + 00013069 0x00001ae4 beq 0x00000018 , 0x0000332a + 00013070 0x00001ae5 beq 0x0000002a , 0x0000331a + 00013071 0x00001ae6 beq 0x0000002b , 0x00003318 + 00013072 0x00001ae7 rtn + 00013073 0x00001aeb fetch 0x00000002 , 0x00004682 + 00013074 0x00001aec set1 0x00000000 , 0x0000003f + 00013075 0x00001aed store 0x00000002 , 0x00004682 + 00013076 0x00001aee fetch 0x00000002 , 0x0000420a + 00013077 0x00001aef set0 0x00000000 , 0x0000003f + 00013078 0x00001af0 store 0x00000002 , 0x0000420a + 00013079 0x00001af1 rtn + 00013080 0x00001af4 jam 0x00000000 , 0x00000229 + 00013081 0x00001af5 rtn + 00013082 0x00001af8 fetch 0x00000001 , 0x00000229 + 00013083 0x00001af9 increase 0x00000001 , 0x0000003f + 00013084 0x00001afa store 0x00000001 , 0x00000229 + 00013085 0x00001afb sub 0x0000003f , 0x00000001 , 0x0000003e + 00013086 0x00001afc branch 0x000033df , 0x00000002 + 00013087 0x00001afd jam 0x00000000 , 0x00000229 + 00013088 0x00001afe fetch 0x00000002 , 0x0000420a + 00013089 0x00001aff set1 0x00000009 , 0x0000003f + 00013090 0x00001b00 store 0x00000002 , 0x0000420a + 00013091 0x00001b01 branch 0x000033e9 + 00013092 0x00001b04 fetch 0x00000002 , 0x000041f5 + 00013093 0x00001b05 branch 0x00007f9c + 00013094 0x00001b08 fetch 0x00000002 , 0x000041e9 + 00013095 0x00001b09 branch 0x00007f9c + 00013096 0x00001b0c fetch 0x00000002 , 0x000041ed + 00013097 0x00001b0d branch 0x00007f9c + 00013098 0x00001b10 fetch 0x00000002 , 0x0000420a + 00013099 0x00001b11 set1 0x00000001 , 0x0000003f + 00013100 0x00001b12 store 0x00000002 , 0x0000420a + 00013101 0x00001b13 branch 0x00003412 + 00013102 0x00001b16 fetch 0x00000002 , 0x00004682 + 00013103 0x00001b17 set1 0x00000007 , 0x0000003f + 00013104 0x00001b18 store 0x00000002 , 0x00004682 + 00013105 0x00001b19 fetch 0x00000002 , 0x0000420a + 00013106 0x00001b1a set1 0x00000002 , 0x0000003f + 00013107 0x00001b1b store 0x00000002 , 0x0000420a + 00013108 0x00001b1c rtn + 00013109 0x00001b1f fetch 0x00000002 , 0x00004682 + 00013110 0x00001b20 set1 0x00000001 , 0x0000003f + 00013111 0x00001b21 store 0x00000002 , 0x00004682 + 00013112 0x00001b22 fetch 0x00000002 , 0x0000420a + 00013113 0x00001b23 set1 0x00000004 , 0x0000003f + 00013114 0x00001b24 store 0x00000002 , 0x0000420a + 00013115 0x00001b25 rtn + 00013116 0x00001b28 fetch 0x00000002 , 0x00004682 + 00013117 0x00001b29 set1 0x00000003 , 0x0000003f + 00013118 0x00001b2a store 0x00000002 , 0x00004682 + 00013119 0x00001b2b rtn + 00013120 0x00001b2e fetch 0x00000002 , 0x00004682 + 00013121 0x00001b2f set1 0x00000005 , 0x0000003f + 00013122 0x00001b30 store 0x00000002 , 0x00004682 + 00013123 0x00001b31 fetch 0x00000002 , 0x0000420a + 00013124 0x00001b32 set1 0x00000003 , 0x0000003f + 00013125 0x00001b33 store 0x00000002 , 0x0000420a + 00013126 0x00001b34 rtn + 00013127 0x00001b37 fetch 0x00000002 , 0x00004682 + 00013128 0x00001b38 set0 0x00000005 , 0x0000003f + 00013129 0x00001b39 store 0x00000002 , 0x00004682 + 00013130 0x00001b3a rtn + 00013131 0x00001b3d fetch 0x00000002 , 0x00004682 + 00013132 0x00001b3e set1 0x00000009 , 0x0000003f + 00013133 0x00001b3f store 0x00000002 , 0x00004682 + 00013134 0x00001b40 rtn + 00013135 0x00001b43 fetch 0x00000002 , 0x00004682 + 00013136 0x00001b44 set0 0x00000009 , 0x0000003f + 00013137 0x00001b45 store 0x00000002 , 0x00004682 + 00013138 0x00001b46 branch 0x00003418 + 00013139 0x00001b49 fetch 0x00000002 , 0x00004682 + 00013140 0x00001b4a set1 0x00000002 , 0x0000003f + 00013141 0x00001b4b store 0x00000002 , 0x00004682 + 00013142 0x00001b4c rtn + 00013143 0x00001b4f fetch 0x00000002 , 0x0000420a + 00013144 0x00001b50 set1 0x00000000 , 0x0000003f + 00013145 0x00001b51 store 0x00000002 , 0x0000420a + 00013146 0x00001b52 rtn + 00013147 0x00001b55 fetch 0x00000002 , 0x0000420a + 00013148 0x00001b56 set1 0x00000008 , 0x0000003f + 00013149 0x00001b57 store 0x00000002 , 0x0000420a + 00013150 0x00001b58 branch 0x000033e9 + 00013151 0x00001b5c bpatch 0x000000c7 , 0x00004018 + 00013152 0x00001b5d store 0x00000001 , 0x0000022a + 00013153 0x00001b5f fetch 0x00000001 , 0x0000022a + 00013154 0x00001b60 rtn 0x00000034 + 00013155 0x00001b61 increase 0xffffffff , 0x0000003f + 00013156 0x00001b62 store 0x00000001 , 0x0000022a + 00013157 0x00001b63 call 0x00007cdd + 00013158 0x00001b64 call 0x000033d6 + 00013159 0x00001b65 call 0x00003387 + 00013160 0x00001b66 call 0x0000338d + 00013161 0x00001b67 call 0x0000651b + 00013162 0x00001b68 fetch 0x00000002 , 0x000041fd + 00013163 0x00001b69 call 0x00007f9c + 00013164 0x00001b6a branch 0x00003361 + 00013165 0x00001b70 ifetch 0x00000001 , 0x00000013 + 00013166 0x00001b71 rtn 0x00000034 + 00013167 0x00001b72 pincrease 0xffffffff + 00013168 0x00001b73 istore 0x00000001 , 0x00000013 + 00013169 0x00001b74 nrtn 0x00000034 + 00013170 0x00001b75 copy 0x00000012 , 0x0000003f + 00013171 0x00001b76 branch 0x00007f9c + 00013172 0x00001b7b ifetch 0x00000002 , 0x00000013 + 00013173 0x00001b7c rtn 0x00000034 + 00013174 0x00001b7d pincrease 0xffffffff + 00013175 0x00001b7e istore 0x00000002 , 0x00000013 + 00013176 0x00001b7f nrtn 0x00000034 + 00013177 0x00001b80 copy 0x00000012 , 0x0000003f + 00013178 0x00001b81 branch 0x00007f9c + 00013179 0x00001b84 fetcht 0x00000002 , 0x0000423f + 00013180 0x00001b85 add 0x00000002 , 0x00000001 , 0x00000013 + 00013181 0x00001b86 arg 0x0000337f , 0x00000012 + 00013182 0x00001b87 branch 0x0000336d + 00013183 0x00001b8a call 0x0000342d + 00013184 0x00001b8b beq 0x00000001 , 0x00003382 + 00013185 0x00001b8d branch 0x0000340a + 00013186 0x00001b8f setarg 0x00000002 + 00013187 0x00001b90 istore 0x00000001 , 0x00000013 + 00013188 0x00001b91 add 0x00000002 , 0x00000008 , 0x00000012 + 00013189 0x00001b93 ifetch 0x00000002 , 0x00000012 + 00013190 0x00001b94 branch 0x00007f9c + 00013191 0x00001b97 arg 0x00004205 , 0x00000013 + 00013192 0x00001b98 arg 0x0000338a , 0x00000012 + 00013193 0x00001b99 branch 0x0000336d + 00013194 0x00001b9c call 0x00002252 + 00013195 0x00001b9d branch 0x0000340e , 0x00000005 + 00013196 0x00001b9e rtn + 00013197 0x00001ba2 arg 0x0000467e , 0x00000013 + 00013198 0x00001ba3 arg 0x00003390 , 0x00000012 + 00013199 0x00001ba4 branch 0x00003374 + 00013200 0x00001ba7 call 0x000033f0 + 00013201 0x00001ba8 call 0x00003408 + 00013202 0x00001ba9 fetch 0x00000002 , 0x000041f7 + 00013203 0x00001baa branch 0x00007f9c + 00013204 0x00001bae call 0x000033ac + 00013205 0x00001bb0 fetch 0x00000002 , 0x00004682 + 00013206 0x00001bb1 set0 0x00000007 , 0x0000003f + 00013207 0x00001bb2 store 0x00000002 , 0x00004682 + 00013208 0x00001bb3 rtn + 00013209 0x00001bb6 jam 0x00000000 , 0x00004205 + 00013210 0x00001bb7 fetch 0x00000002 , 0x00004682 + 00013211 0x00001bb8 bbit1 0x00000007 , 0x0000339e + 00013212 0x00001bb9 isolate0 0x00000001 , 0x0000003f + 00013213 0x00001bba call 0x000032fd , 0x00000001 + 00013214 0x00001bbc bpatch 0x000000c8 , 0x00004019 + 00013215 0x00001bbd fetch 0x00000002 , 0x00004682 + 00013216 0x00001bbe set0 0x00000000 , 0x0000003f + 00013217 0x00001bbf set0 0x00000001 , 0x0000003f + 00013218 0x00001bc0 set0 0x00000002 , 0x0000003f + 00013219 0x00001bc1 set0 0x00000003 , 0x0000003f + 00013220 0x00001bc2 set0 0x00000007 , 0x0000003f + 00013221 0x00001bc3 store 0x00000002 , 0x00004682 + 00013222 0x00001bc4 branch 0x00003418 + 00013223 0x00001bc7 call 0x000033a9 + 00013224 0x00001bc8 branch 0x0000340a + 00013225 0x00001bcc setarg 0x00000000 + 00013226 0x00001bcd store 0x00000002 , 0x00004208 + 00013227 0x00001bce rtn + 00013228 0x00001bd0 setarg 0x00000000 + 00013229 0x00001bd1 store 0x00000002 , 0x0000420a + 00013230 0x00001bd2 rtn + 00013231 0x00001bd5 fetch 0x00000002 , 0x0000420a + 00013232 0x00001bd6 store 0x00000002 , 0x00004208 + 00013233 0x00001bd7 setarg 0x00000000 + 00013234 0x00001bd8 store 0x00000002 , 0x0000420a + 00013235 0x00001bd9 rtn + 00013236 0x00001bdc fetch 0x00000002 , 0x0000420a + 00013237 0x00001bdd set1 0x00000007 , 0x0000003f + 00013238 0x00001bde store 0x00000002 , 0x00004208 + 00013239 0x00001bdf setarg 0x00000000 + 00013240 0x00001be0 store 0x00000002 , 0x0000420a + 00013241 0x00001be1 rtn + 00013242 0x00001bea fetch 0x00000001 , 0x00004682 + 00013243 0x00001beb isolate1 0x00000005 , 0x0000003f + 00013244 0x00001bec rtn + 00013245 0x00001bf5 setarg 0x0000aa55 + 00013246 0x00001bf7 store 0x00000002 , 0x00000aaa + 00013247 0x00001bf8 bpatch 0x000000c9 , 0x00004019 + 00013248 0x00001bf9 arg 0x00000002 , 0x00000002 + 00013249 0x00001bfa arg 0x00000aaa , 0x00000011 + 00013250 0x00001bfb arg 0x000000c3 , 0x00000012 + 00013251 0x00001bfc branch 0x00006606 + 00013252 0x00001c00 bpatch 0x000000ca , 0x00004019 + 00013253 0x00001c01 arg 0x00000002 , 0x00000002 + 00013254 0x00001c02 arg 0x00000a9a , 0x00000011 + 00013255 0x00001c03 arg 0x000000c3 , 0x00000012 + 00013256 0x00001c04 call 0x000065df + 00013257 0x00001c05 fetch 0x00000002 , 0x00000a9a + 00013258 0x00001c06 arg 0x0000aa55 , 0x00000002 + 00013259 0x00001c07 isub 0x00000002 , 0x0000003e + 00013260 0x00001c08 rtn + 00013261 0x00001c0c fetch 0x00000001 , 0x0000455a + 00013262 0x00001c0d store 0x00000001 , 0x00004205 + 00013263 0x00001c0e rtn + 00013264 0x00001c11 arg 0x00000009 , 0x00000007 + 00013265 0x00001c12 branch 0x00002c32 + 00013266 0x00001c15 arg 0x00000009 , 0x00000007 + 00013267 0x00001c16 branch 0x00002c36 + 00013268 0x00001c19 jam 0x00000005 , 0x00004206 + 00013269 0x00001c1a branch 0x000033d0 + 00013270 0x00001c1d arg 0x00004206 , 0x00000013 + 00013271 0x00001c1e arg 0x000033d2 , 0x00000012 + 00013272 0x00001c1f branch 0x0000336d + 00013273 0x00001c22 jam 0x00000001 , 0x00004363 + 00013274 0x00001c23 rtn + 00013275 0x00001c26 jam 0x00000000 , 0x00004363 + 00013276 0x00001c27 rtn + 00013277 0x00001c2a jam 0x0000000a , 0x00000a99 + 00013278 0x00001c2b branch 0x00007d8f + 00013279 0x00001c2e jam 0x0000001d , 0x00000a99 + 00013280 0x00001c2f branch 0x00007d8f + 00013281 0x00001c32 bpatch 0x000000cb , 0x00004019 + 00013282 0x00001c33 fetch 0x00000001 , 0x00004207 + 00013283 0x00001c34 store 0x00000001 , 0x0000016d + 00013284 0x00001c35 jam 0x00000001 , 0x00000228 + 00013285 0x00001c36 jam 0x00000003 , 0x00000a99 + 00013286 0x00001c37 branch 0x00007d8f + 00013287 0x00001c3a jam 0x0000001e , 0x00000a99 + 00013288 0x00001c3b branch 0x00007d8f + 00013289 0x00001c3e jam 0x00000004 , 0x00000a99 + 00013290 0x00001c3f branch 0x00007d8f + 00013291 0x00001c42 fetch 0x00000002 , 0x00004687 + 00013292 0x00001c43 store 0x00000002 , 0x0000467e + 00013293 0x00001c45 call 0x00003404 + 00013294 0x00001c47 jam 0x00000001 , 0x00000a99 + 00013295 0x00001c48 branch 0x00007d8f + 00013296 0x00001c4b setarg 0x00000000 + 00013297 0x00001c4c store 0x00000002 , 0x0000467e + 00013298 0x00001c4d jam 0x00000002 , 0x00000a99 + 00013299 0x00001c4e branch 0x00007d8f + 00013300 0x00001c51 jam 0x0000000f , 0x00000a99 + 00013301 0x00001c52 branch 0x00007d8f + 00013302 0x00001c55 jam 0x00000010 , 0x00000a99 + 00013303 0x00001c56 branch 0x00007d8f + 00013304 0x00001c59 jam 0x0000000e , 0x00000a99 + 00013305 0x00001c5a branch 0x00007d8f + 00013306 0x00001c5d jam 0x0000000d , 0x00000a99 + 00013307 0x00001c5e branch 0x00007d8f + 00013308 0x00001c61 jam 0x00000017 , 0x00000a99 + 00013309 0x00001c62 branch 0x00007d8f + 00013310 0x00001c65 jam 0x00000018 , 0x00000a99 + 00013311 0x00001c66 branch 0x00007d8f + 00013312 0x00001c69 jam 0x00000016 , 0x00000a99 + 00013313 0x00001c6a branch 0x00007d8f + 00013314 0x00001c6d jam 0x00000011 , 0x00000a99 + 00013315 0x00001c6e branch 0x00007d8f + 00013316 0x00001c71 jam 0x00000015 , 0x00000a99 + 00013317 0x00001c72 branch 0x00007d8f + 00013318 0x00001c75 jam 0x00000014 , 0x00000a99 + 00013319 0x00001c76 branch 0x00007d8f + 00013320 0x00001c7a jam 0x00000013 , 0x00000a99 + 00013321 0x00001c7b branch 0x00007d8f + 00013322 0x00001c7e jam 0x00000019 , 0x00000a99 + 00013323 0x00001c7f branch 0x00007d8f + 00013324 0x00001c82 jam 0x00000006 , 0x00000a99 + 00013325 0x00001c83 branch 0x00007d8f + 00013326 0x00001c86 jam 0x00000005 , 0x00000a99 + 00013327 0x00001c87 branch 0x00007d8f + 00013328 0x00001c8a jam 0x0000001f , 0x00000a99 + 00013329 0x00001c8b branch 0x00007d8f + 00013330 0x00001c8e jam 0x00000020 , 0x00000a99 + 00013331 0x00001c8f branch 0x00007d8f + 00013332 0x00001c92 jam 0x00000025 , 0x00000a99 + 00013333 0x00001c93 branch 0x00007d8f + 00013334 0x00001c96 set1 0x0000000d , 0x00000000 + 00013335 0x00001c97 rtn + 00013336 0x00001c9a set0 0x0000000d , 0x00000000 + 00013337 0x00001c9b rtn + 00013338 0x00001cb0 call 0x0000342d + 00013339 0x00001cb1 beq 0x00000002 , 0x00003424 + 00013340 0x00001cb3 setarg 0x00000001 + 00013341 0x00001cb4 istore 0x00000001 , 0x00000013 + 00013342 0x00001cb5 add 0x00000002 , 0x00000003 , 0x00000011 + 00013343 0x00001cb6 add 0x00000002 , 0x00000006 , 0x00000012 + 00013344 0x00001cb8 ifetcht 0x00000001 , 0x00000011 + 00013345 0x00001cb9 increase 0x00000001 , 0x00000013 + 00013346 0x00001cba istoret 0x00000001 , 0x00000013 + 00013347 0x00001cbb branch 0x00003385 + 00013348 0x00001cbe setarg 0x00000000 + 00013349 0x00001cbf istore 0x00000001 , 0x00000013 + 00013350 0x00001cc0 fetch 0x00000002 , 0x00004682 + 00013351 0x00001cc1 bbit0 0x00000009 , 0x00003429 + 00013352 0x00001cc2 call 0x00003402 + 00013353 0x00001cc4 fetcht 0x00000002 , 0x0000423f + 00013354 0x00001cc5 add 0x00000002 , 0x00000002 , 0x00000011 + 00013355 0x00001cc6 add 0x00000002 , 0x00000004 , 0x00000012 + 00013356 0x00001cc7 branch 0x00003420 + 00013357 0x00001cca fetcht 0x00000002 , 0x0000423f + 00013358 0x00001ccb add 0x00000002 , 0x00000000 , 0x00000013 + 00013359 0x00001ccc ifetch 0x00000001 , 0x00000013 + 00013360 0x00001ccd rtn + 00013361 0x00001cd0 call 0x0000342d + 00013362 0x00001cd1 bne 0x00000000 , 0x00003434 + 00013363 0x00001cd2 branch 0x0000340a + 00013364 0x00001cd4 add 0x00000002 , 0x0000000a , 0x00000012 + 00013365 0x00001cd5 branch 0x00003385 + 00013366 0x00001cd8 rtn 0x0000002b + 00013367 0x00001cd9 hjam 0x00000000 , 0x00008081 + 00013368 0x00001cda setarg 0x00003463 + 00013369 0x00001cdb store 0x00000002 , 0x000041eb + 00013370 0x00001cdc setarg 0x0000696c + 00013371 0x00001cdd store 0x00000002 , 0x000041ed + 00013372 0x00001cde setarg 0x000034f5 + 00013373 0x00001cdf store 0x00000002 , 0x000041f3 + 00013374 0x00001ce0 setarg 0x000034f4 + 00013375 0x00001ce1 store 0x00000002 , 0x000041ef + 00013376 0x00001ce2 setarg 0x0000347e + 00013377 0x00001ce3 store 0x00000002 , 0x000041f5 + 00013378 0x00001ce4 setarg 0x000034b2 + 00013379 0x00001ce5 store 0x00000002 , 0x000041fd + 00013380 0x00001ce6 setarg 0x00003465 + 00013381 0x00001ce7 store 0x00000002 , 0x000041fb + 00013382 0x00001ce8 setarg 0x00003470 + 00013383 0x00001ce9 store 0x00000002 , 0x000041e9 + 00013384 0x00001cea setarg 0x00003501 + 00013385 0x00001ceb store 0x00000002 , 0x000041f9 + 00013386 0x00001cec bpatch 0x000000cc , 0x00004019 + 00013387 0x00001ced call 0x0000359b + 00013388 0x00001cee call 0x00006948 + 00013389 0x00001cef call 0x000035ad + 00013390 0x00001cf0 call 0x00007d08 + 00013391 0x00001cf1 call 0x00007cd3 + 00013392 0x00001cf2 setarg 0x0000350b + 00013393 0x00001cf3 store 0x00000002 , 0x00004766 + 00013394 0x00001cf4 setarg 0x000034fc + 00013395 0x00001cf5 store 0x00000002 , 0x0000475d + 00013396 0x00001cf6 setarg 0x000034f8 + 00013397 0x00001cf7 store 0x00000002 , 0x0000475f + 00013398 0x00001cf8 setarg 0x0000346c + 00013399 0x00001cf9 store 0x00000002 , 0x00004761 + 00013400 0x00001cfa setarg 0x000035a2 + 00013401 0x00001cfb store 0x00000002 , 0x000046a9 + 00013402 0x00001cfc setarg 0x000035a4 + 00013403 0x00001cfd store 0x00000002 , 0x000046ab + 00013404 0x00001cfe setarg 0x000035a9 + 00013405 0x00001cff store 0x00000002 , 0x000046b4 + 00013406 0x00001d00 setarg 0x000035a6 + 00013407 0x00001d01 store 0x00000002 , 0x000046b6 + 00013408 0x00001d02 fetch 0x00000002 , 0x00004682 + 00013409 0x00001d03 rtnbit1 0x0000000c + 00013410 0x00001d04 branch 0x0000340a + 00013411 0x00001d07 call 0x00003586 + 00013412 0x00001d08 branch 0x0000340a + 00013413 0x00001d0b call 0x00005892 + 00013414 0x00001d0c nrtn 0x00000034 + 00013415 0x00001d0d arg 0x00000b06 , 0x00000011 + 00013416 0x00001d0e call 0x00007e54 + 00013417 0x00001d0f nrtn 0x00000028 + 00013418 0x00001d10 arg 0x00000b06 , 0x00000006 + 00013419 0x00001d11 branch 0x00004746 + 00013420 0x00001d14 fetch 0x00000002 , 0x00004797 + 00013421 0x00001d15 store 0x00000002 , 0x00004791 + 00013422 0x00001d16 jam 0x00000001 , 0x00004753 + 00013423 0x00001d17 branch 0x0000358f + 00013424 0x00001d1a fetch 0x00000001 , 0x0000479d + 00013425 0x00001d1b beq 0x00000001 , 0x00003479 + 00013426 0x00001d1c fetch 0x00000002 , 0x00004682 + 00013427 0x00001d1d bbit0 0x00000009 , 0x00003479 + 00013428 0x00001d1e fetch 0x00000001 , 0x0000479e + 00013429 0x00001d1f beq 0x00000001 , 0x000033d0 + 00013430 0x00001d20 fetch 0x00000001 , 0x00004700 + 00013431 0x00001d21 nbranch 0x000033d0 , 0x00000034 + 00013432 0x00001d22 branch 0x000033d2 + 00013433 0x00001d25 fetch 0x00000001 , 0x0000479b + 00013434 0x00001d26 fetcht 0x00000001 , 0x0000479c + 00013435 0x00001d27 ior 0x00000002 , 0x0000003f + 00013436 0x00001d28 beq 0x00000001 , 0x000033d0 + 00013437 0x00001d29 branch 0x000033d2 + 00013438 0x00001d2c copy 0x00000013 , 0x0000003f + 00013439 0x00001d2d beq 0x0000002d , 0x00003431 + 00013440 0x00001d2e beq 0x00000010 , 0x0000341a + 00013441 0x00001d2f beq 0x00000014 , 0x000034df + 00013442 0x00001d30 beq 0x00000015 , 0x000034e8 + 00013443 0x00001d31 beq 0x00000040 , 0x00003485 + 00013444 0x00001d32 rtn + 00013445 0x00001d34 fetch 0x00000002 , 0x00004509 + 00013446 0x00001d35 beq 0x00000001 , 0x0000348c + 00013447 0x00001d37 fetch 0x00000002 , 0x000043d8 + 00013448 0x00001d38 branch 0x000034a2 , 0x00000034 + 00013449 0x00001d3a jam 0x00000002 , 0x0000478a + 00013450 0x00001d3b jam 0x0000003c , 0x0000478f + 00013451 0x00001d3c rtn + 00013452 0x00001d3f fetch 0x00000002 , 0x0000449a + 00013453 0x00001d40 branch 0x000034a0 , 0x00000034 + 00013454 0x00001d42 jam 0x00000001 , 0x0000478a + 00013455 0x00001d43 fetcht 0x00000002 , 0x000047b4 + 00013456 0x00001d44 fetch 0x00000002 , 0x00004496 + 00013457 0x00001d45 iadd 0x00000002 , 0x0000003f + 00013458 0x00001d46 store 0x00000002 , 0x00004496 + 00013459 0x00001d47 copy 0x0000003f , 0x00000011 + 00013460 0x00001d48 fetch 0x00000002 , 0x00004498 + 00013461 0x00001d49 iadd 0x00000002 , 0x0000003f + 00013462 0x00001d4a store 0x00000002 , 0x00004498 + 00013463 0x00001d4b iadd 0x00000011 , 0x0000003f + 00013464 0x00001d4c rshift 0x0000003f , 0x00000002 + 00013465 0x00001d4d fetch 0x00000002 , 0x000047c0 + 00013466 0x00001d4e idiv 0x00000002 + 00013467 0x00001d4f call 0x00007f86 + 00013468 0x00001d50 quotient 0x0000003f + 00013469 0x00001d51 store 0x00000002 , 0x0000449a + 00013470 0x00001d52 jam 0x00000001 , 0x00004790 + 00013471 0x00001d53 rtn + 00013472 0x00001d55 jam 0x00000003 , 0x0000478a + 00013473 0x00001d56 rtn + 00013474 0x00001d59 jam 0x00000000 , 0x00004172 + 00013475 0x00001d5a jam 0x00000000 , 0x00004790 + 00013476 0x00001d5b fetch 0x00000002 , 0x000043d6 + 00013477 0x00001d5c fetcht 0x00000002 , 0x000047be + 00013478 0x00001d5d isub 0x00000002 , 0x0000003e + 00013479 0x00001d5e setflag 0x00000002 , 0x00000000 , 0x00000011 + 00013480 0x00001d5f fetch 0x00000002 , 0x000047c0 + 00013481 0x00001d60 fetcht 0x00000002 , 0x000043d6 + 00013482 0x00001d61 isub 0x00000002 , 0x0000003f + 00013483 0x00001d62 setflag 0x00000002 , 0x00000001 , 0x00000011 + 00013484 0x00001d63 compare 0x00000003 , 0x00000011 , 0x00000003 + 00013485 0x00001d64 rtn 0x00000001 + 00013486 0x00001d65 fetch 0x00000008 , 0x000047be + 00013487 0x00001d66 store 0x00000008 , 0x00004496 + 00013488 0x00001d67 jam 0x00000001 , 0x00004790 + 00013489 0x00001d68 rtn + 00013490 0x00001d6d call 0x0000337b + 00013491 0x00001d6e call 0x000034b9 + 00013492 0x00001d6f call 0x000034be + 00013493 0x00001d70 call 0x000034d5 + 00013494 0x00001d71 call 0x000034ca + 00013495 0x00001d72 call 0x000034c4 + 00013496 0x00001d73 branch 0x000034d9 + 00013497 0x00001d77 arg 0x00004799 , 0x00000013 + 00013498 0x00001d78 arg 0x000034bc , 0x00000012 + 00013499 0x00001d79 branch 0x0000336d + 00013500 0x00001d7b jam 0x00000000 , 0x0000479a + 00013501 0x00001d7c rtn + 00013502 0x00001d7e arg 0x00004793 , 0x00000013 + 00013503 0x00001d7f arg 0x000034c1 , 0x00000012 + 00013504 0x00001d80 branch 0x00003374 + 00013505 0x00001d82 arg 0x000046bf , 0x00000013 + 00013506 0x00001d83 arg 0x0000469e , 0x00000012 + 00013507 0x00001d84 branch 0x00003591 + 00013508 0x00001d88 arg 0x0000478f , 0x00000013 + 00013509 0x00001d89 arg 0x000034c7 , 0x00000012 + 00013510 0x00001d8a branch 0x0000336d + 00013511 0x00001d8d fetch 0x00000002 , 0x0000449a + 00013512 0x00001d8e store 0x00000001 , 0x00004172 + 00013513 0x00001d8f rtn + 00013514 0x00001d91 arg 0x00004790 , 0x00000013 + 00013515 0x00001d92 arg 0x000034cd , 0x00000012 + 00013516 0x00001d93 branch 0x0000336d + 00013517 0x00001d95 fetch 0x00000001 , 0x0000043f + 00013518 0x00001d96 compare 0x00000000 , 0x0000003f , 0x00000060 + 00013519 0x00001d97 nbranch 0x000034d3 , 0x00000001 + 00013520 0x00001d98 jam 0x00000001 , 0x0000478a + 00013521 0x00001d99 call 0x00003416 + 00013522 0x00001d9a branch 0x00005abf + 00013523 0x00001d9c jam 0x00000001 , 0x00004790 + 00013524 0x00001d9d rtn + 00013525 0x00001da0 arg 0x00004791 , 0x00000013 + 00013526 0x00001da1 arg 0x000034d8 , 0x00000012 + 00013527 0x00001da2 branch 0x00003374 + 00013528 0x00001da6 branch 0x0000341a + 00013529 0x00001dab arg 0x0000478d , 0x00000013 + 00013530 0x00001dac arg 0x000034dc , 0x00000012 + 00013531 0x00001dad branch 0x00003374 + 00013532 0x00001daf fetch 0x00000002 , 0x000047a7 + 00013533 0x00001db0 store 0x00000002 , 0x0000478d + 00013534 0x00001db1 branch 0x000035af + 00013535 0x00001db5 fetch 0x00000002 , 0x000047a7 + 00013536 0x00001db6 store 0x00000002 , 0x0000478d + 00013537 0x00001db7 setarg 0x00000000 + 00013538 0x00001db8 store 0x00000002 , 0x00004793 + 00013539 0x00001db9 store 0x00000002 , 0x00004791 + 00013540 0x00001dba call 0x0000355c + 00013541 0x00001dbb call 0x00003586 + 00013542 0x00001dbc jam 0x00000000 , 0x00004172 + 00013543 0x00001dbd branch 0x000033f8 + 00013544 0x00001dc3 setarg 0x00000000 + 00013545 0x00001dc4 store 0x00000004 , 0x0000478d + 00013546 0x00001dc5 store 0x00000003 , 0x0000478a + 00013547 0x00001dc6 store 0x00000002 , 0x00004509 + 00013548 0x00001dc8 jam 0x00000001 , 0x000047a0 + 00013549 0x00001dc9 fetch 0x00000002 , 0x00004797 + 00013550 0x00001dca store 0x00000002 , 0x00004791 + 00013551 0x00001dcb call 0x00007e38 + 00013552 0x00001dcc fetch 0x00000001 , 0x00004759 + 00013553 0x00001dcd rtneq 0x00000000 + 00013554 0x00001dce call 0x0000358f + 00013555 0x00001dcf branch 0x0000356e + 00013556 0x00001dd4 branch 0x00003508 + 00013557 0x00001dd8 fetch 0x00000001 , 0x00004759 + 00013558 0x00001dd9 rtnne 0x00000002 + 00013559 0x00001dda branch 0x00003508 + 00013560 0x00001de0 arg 0x000046cd , 0x00000013 + 00013561 0x00001de1 call 0x00003582 + 00013562 0x00001de2 arg 0x000046c6 , 0x00000013 + 00013563 0x00001de4 branch 0x00003584 + 00013564 0x00001de7 jam 0x00000000 , 0x0000436e + 00013565 0x00001de8 arg 0x000046db , 0x00000013 + 00013566 0x00001de9 call 0x00003582 + 00013567 0x00001dea arg 0x000046d4 , 0x00000013 + 00013568 0x00001deb branch 0x000034fb + 00013569 0x00001dee fetch 0x00000001 , 0x00000477 + 00013570 0x00001def beq 0x00000012 , 0x00003504 + 00013571 0x00001df0 rtn + 00013572 0x00001df2 fetch 0x00000002 , 0x00000478 + 00013573 0x00001df4 beq 0x0000000d , 0x00003536 + 00013574 0x00001df5 beq 0x0000000b , 0x00003571 + 00013575 0x00001df6 rtn + 00013576 0x00001dfc fetch 0x00000001 , 0x00004753 + 00013577 0x00001dfd rtn 0x00000034 + 00013578 0x00001dfe branch 0x00006978 + 00013579 0x00001e03 copy 0x00000011 , 0x0000003f + 00013580 0x00001e04 branch 0x00003510 , 0x00000034 + 00013581 0x00001e06 copy 0x00000007 , 0x0000003f + 00013582 0x00001e07 beq 0x00000000 , 0x00003513 + 00013583 0x00001e08 rtn + 00013584 0x00001e0a copy 0x00000007 , 0x0000003f + 00013585 0x00001e0b beq 0x00000000 , 0x0000351b + 00013586 0x00001e0c rtn + 00013587 0x00001e0f jam 0x00000001 , 0x0000479d + 00013588 0x00001e10 arg 0x000046f7 , 0x00000013 + 00013589 0x00001e11 call 0x00003582 + 00013590 0x00001e12 arg 0x000046f0 , 0x00000013 + 00013591 0x00001e13 call 0x00003584 + 00013592 0x00001e14 fetch 0x00000002 , 0x00004682 + 00013593 0x00001e15 bbit0 0x00000009 , 0x00003532 + 00013594 0x00001e16 branch 0x00003521 + 00013595 0x00001e19 jam 0x00000000 , 0x0000479d + 00013596 0x00001e1a branch 0x0000351d + 00013597 0x00001e1f fetch 0x00000001 , 0x0000479a + 00013598 0x00001e20 rtnne 0x00000001 + 00013599 0x00001e21 jam 0x00000005 , 0x00004799 + 00013600 0x00001e22 rtn + 00013601 0x00001e25 fetch 0x00000001 , 0x0000479a + 00013602 0x00001e26 pincrease 0x00000001 + 00013603 0x00001e27 store 0x00000001 , 0x0000479a + 00013604 0x00001e28 beq 0x00000001 , 0x00003527 + 00013605 0x00001e29 beq 0x00000002 , 0x0000352b + 00013606 0x00001e2a rtn + 00013607 0x00001e2c call 0x0000355c + 00013608 0x00001e2d jam 0x00000001 , 0x00004771 + 00013609 0x00001e2e arg 0x0000476c , 0x00000013 + 00013610 0x00001e2f branch 0x00003544 + 00013611 0x00001e31 jam 0x00000000 , 0x0000479a + 00013612 0x00001e32 jam 0x00000002 , 0x00004771 + 00013613 0x00001e33 arg 0x0000476c , 0x00000013 + 00013614 0x00001e34 call 0x00003544 + 00013615 0x00001e35 fetch 0x00000001 , 0x0000479e + 00013616 0x00001e36 beq 0x00000001 , 0x00003551 + 00013617 0x00001e37 rtn + 00013618 0x00001e3a fetch 0x00000002 , 0x00004797 + 00013619 0x00001e3b store 0x00000002 , 0x00004791 + 00013620 0x00001e3c call 0x0000355c + 00013621 0x00001e3d branch 0x0000358f + 00013622 0x00001e41 bpatch 0x000000cd , 0x00004019 + 00013623 0x00001e42 call 0x000036fc + 00013624 0x00001e43 ifetch 0x00000001 , 0x00000011 + 00013625 0x00001e44 beq 0x00000003 , 0x0000353c + 00013626 0x00001e45 beq 0x00000007 , 0x00003540 + 00013627 0x00001e46 rtn + 00013628 0x00001e49 fetch 0x00000001 , 0x0000479e + 00013629 0x00001e4a beq 0x00000000 , 0x00003551 + 00013630 0x00001e4b beq 0x00000001 , 0x0000355c + 00013631 0x00001e4c rtn + 00013632 0x00001e4f ifetch 0x00000001 , 0x00000012 + 00013633 0x00001e50 beq 0x00000001 , 0x00003564 + 00013634 0x00001e51 beq 0x00000000 , 0x00003569 + 00013635 0x00001e52 rtn + 00013636 0x00001e5a bpatch 0x000000ce , 0x00004019 + 00013637 0x00001e5b fetch 0x00000001 , 0x0000478b + 00013638 0x00001e5c isolate1 0x00000000 , 0x0000003f + 00013639 0x00001e5d nrtn 0x00000001 + 00013640 0x00001e5e add 0x00000013 , 0x00000006 , 0x00000006 + 00013641 0x00001e5f ifetch 0x00000002 , 0x00000006 + 00013642 0x00001e60 byteswap 0x0000003f , 0x0000003f + 00013643 0x00001e61 add 0x0000003f , 0x00000005 , 0x00000039 + 00013644 0x00001e62 add 0x00000013 , 0x00000003 , 0x00000006 + 00013645 0x00001e63 call 0x000036f0 + 00013646 0x00001e64 istore 0x00000001 , 0x00000006 + 00013647 0x00001e65 copy 0x00000013 , 0x00000011 + 00013648 0x00001e66 branch 0x00007e3d + 00013649 0x00001e6d fetch 0x00000001 , 0x00004759 + 00013650 0x00001e6e rtn 0x00000034 + 00013651 0x00001e6f jam 0x00000001 , 0x0000479e + 00013652 0x00001e70 arg 0x000046e9 , 0x00000013 + 00013653 0x00001e71 call 0x00003582 + 00013654 0x00001e72 arg 0x000046e2 , 0x00000013 + 00013655 0x00001e73 call 0x00003584 + 00013656 0x00001e74 jam 0x00000004 , 0x00004780 + 00013657 0x00001e75 jam 0x00000001 , 0x00004783 + 00013658 0x00001e76 arg 0x0000477b , 0x00000013 + 00013659 0x00001e77 branch 0x00003544 + 00013660 0x00001e79 fetch 0x00000001 , 0x0000479e + 00013661 0x00001e7a rtn 0x00000034 + 00013662 0x00001e7b jam 0x00000000 , 0x0000479e + 00013663 0x00001e7c call 0x00003586 + 00013664 0x00001e7d jam 0x00000004 , 0x00004780 + 00013665 0x00001e7e jam 0x00000000 , 0x00004783 + 00013666 0x00001e7f arg 0x0000477b , 0x00000013 + 00013667 0x00001e80 branch 0x00003544 + 00013668 0x00001e83 jam 0x00000001 , 0x0000479f + 00013669 0x00001e84 jam 0x00000007 , 0x00004780 + 00013670 0x00001e85 jam 0x00000001 , 0x00004783 + 00013671 0x00001e86 arg 0x0000477b , 0x00000013 + 00013672 0x00001e87 branch 0x00003544 + 00013673 0x00001e89 jam 0x00000000 , 0x0000479f + 00013674 0x00001e8a jam 0x00000007 , 0x00004780 + 00013675 0x00001e8b jam 0x00000000 , 0x00004783 + 00013676 0x00001e8c arg 0x0000477b , 0x00000013 + 00013677 0x00001e8d branch 0x00003544 + 00013678 0x00001e8f fetch 0x00000001 , 0x0000479f + 00013679 0x00001e90 rtn 0x00000034 + 00013680 0x00001e91 branch 0x00003551 + 00013681 0x00001e94 ifetch 0x00000002 , 0x00000011 + 00013682 0x00001e95 store 0x00000002 , 0x0000478b + 00013683 0x00001e96 isolate1 0x00000000 , 0x0000003f + 00013684 0x00001e97 nrtn 0x00000001 + 00013685 0x00001e98 fetch 0x00000001 , 0x000047a0 + 00013686 0x00001e99 rtn 0x00000034 + 00013687 0x00001e9a jam 0x00000000 , 0x000047a0 + 00013688 0x00001e9b fetch 0x00000008 , 0x000047b6 + 00013689 0x00001e9c store 0x00000008 , 0x00004496 + 00013690 0x00001e9d jam 0x00000002 , 0x00004790 + 00013691 0x00001e9e call 0x000035af + 00013692 0x00001e9f call 0x000035b9 + 00013693 0x00001ea0 jam 0x00000007 , 0x00004780 + 00013694 0x00001ea1 fetch 0x00000001 , 0x0000479f + 00013695 0x00001ea2 store 0x00000001 , 0x00004783 + 00013696 0x00001ea3 arg 0x0000477b , 0x00000013 + 00013697 0x00001ea4 branch 0x00003544 + 00013698 0x00001ea9 arg 0x00000001 , 0x00000011 + 00013699 0x00001eaa branch 0x00003585 + 00013700 0x00001eac arg 0x00000000 , 0x00000011 + 00013701 0x00001eae branch 0x0000358c + 00013702 0x00001eb1 arg 0x00000000 , 0x00000011 + 00013703 0x00001eb2 call 0x00007d19 + 00013704 0x00001eb3 arg 0x00000001 , 0x00000011 + 00013705 0x00001eb4 call 0x00007d19 + 00013706 0x00001eb5 fetch 0x00000001 , 0x000047a1 + 00013707 0x00001eb6 branch 0x000069d7 + 00013708 0x00001eb9 call 0x00007d04 + 00013709 0x00001eba arg 0x00000007 , 0x00000039 + 00013710 0x00001ebb branch 0x00007d26 + 00013711 0x00001ec0 arg 0x000046b8 , 0x00000013 + 00013712 0x00001ec1 arg 0x0000469a , 0x00000012 + 00013713 0x00001ec3 call 0x00003596 + 00013714 0x00001ec4 call 0x00003584 + 00013715 0x00001ec5 fetch 0x00000002 , 0x00004795 + 00013716 0x00001ec6 store 0x00000002 , 0x00004793 + 00013717 0x00001ec7 branch 0x000033fa + 00013718 0x00001eca ifetch 0x00000002 , 0x00000012 + 00013719 0x00001ecb store 0x00000002 , 0x00004154 + 00013720 0x00001ecc ifetch 0x00000002 , 0x00000006 + 00013721 0x00001ecd store 0x00000002 , 0x00004482 + 00013722 0x00001ece rtn + 00013723 0x00001ed1 arg 0x00000000 , 0x00000011 + 00013724 0x00001ed2 call 0x000069a6 + 00013725 0x00001ed3 fetch 0x00000006 , 0x000047a1 + 00013726 0x00001ed4 store 0x00000006 , 0x00000a9a + 00013727 0x00001ed5 call 0x000069ae + 00013728 0x00001ed6 fetch 0x00000001 , 0x000047a1 + 00013729 0x00001ed7 branch 0x000069d7 + 00013730 0x00001eda jam 0x00000001 , 0x0000479b + 00013731 0x00001edb rtn + 00013732 0x00001edd jam 0x00000000 , 0x0000479b + 00013733 0x00001ede rtn + 00013734 0x00001ee3 jam 0x00000000 , 0x0000479c + 00013735 0x00001ee4 fetch 0x00000001 , 0x000047a1 + 00013736 0x00001ee5 branch 0x000069d7 + 00013737 0x00001ee8 jam 0x00000001 , 0x0000479c + 00013738 0x00001ee9 fetch 0x00000006 , 0x000047a1 + 00013739 0x00001eea store 0x00000006 , 0x00000a9a + 00013740 0x00001eeb branch 0x000069ae + 00013741 0x00001ef0 jam 0x00000000 , 0x0000422d + 00013742 0x00001ef1 branch 0x000068a8 + 00013743 0x00001ef4 call 0x000068eb + 00013744 0x00001ef5 call 0x00006908 + 00013745 0x00001ef6 store 0x00000002 , 0x000047b0 + 00013746 0x00001ef7 arg 0x000047aa , 0x00000011 + 00013747 0x00001ef8 call 0x00006930 + 00013748 0x00001ef9 store 0x00000001 , 0x000047a9 + 00013749 0x00001efa beq 0x00000000 , 0x000035be + 00013750 0x00001efb sub 0x0000003f , 0x00000064 , 0x0000003e + 00013751 0x00001efc nbranch 0x000035bc , 0x00000002 + 00013752 0x00001efd store 0x00000001 , 0x00004783 + 00013753 0x00001eff jam 0x00000005 , 0x00004780 + 00013754 0x00001f00 arg 0x0000477b , 0x00000013 + 00013755 0x00001f01 branch 0x00003544 + 00013756 0x00001f03 jam 0x00000064 , 0x00004783 + 00013757 0x00001f04 branch 0x000035b9 + 00013758 0x00001f07 branch 0x0000341a + 00013759 0x00001f0c rtn 0x0000002b + 00013760 0x00001f0d hfetch 0x00000001 , 0x00008081 + 00013761 0x00001f0e and_into 0x000000f0 , 0x0000003f + 00013762 0x00001f0f hstore 0x00000001 , 0x00008081 + 00013763 0x00001f10 setarg 0x00003631 + 00013764 0x00001f11 store 0x00000002 , 0x000041eb + 00013765 0x00001f13 setarg 0x00003633 + 00013766 0x00001f14 store 0x00000002 , 0x000041ed + 00013767 0x00001f16 setarg 0x0000340a + 00013768 0x00001f17 store 0x00000002 , 0x000041f7 + 00013769 0x00001f19 setarg 0x00003635 + 00013770 0x00001f1a store 0x00000002 , 0x000041f3 + 00013771 0x00001f1c setarg 0x0000364b + 00013772 0x00001f1d store 0x00000002 , 0x000041f5 + 00013773 0x00001f1f setarg 0x000033d0 + 00013774 0x00001f20 store 0x00000002 , 0x000041e9 + 00013775 0x00001f22 setarg 0x000036f6 + 00013776 0x00001f23 store 0x00000002 , 0x000041f9 + 00013777 0x00001f25 setarg 0x0000367a + 00013778 0x00001f26 store 0x00000002 , 0x000041fd + 00013779 0x00001f28 call 0x00002c7a + 00013780 0x00001f29 setarg 0x00003722 + 00013781 0x00001f2a add 0x00000013 , 0x000000de , 0x00000005 + 00013782 0x00001f2b istore 0x00000002 , 0x00000005 + 00013783 0x00001f2d setarg 0x000035ed + 00013784 0x00001f2e store 0x00000002 , 0x0000475b + 00013785 0x00001f30 setarg 0x000035ef + 00013786 0x00001f31 store 0x00000002 , 0x0000475f + 00013787 0x00001f33 bpatch 0x000000cf , 0x00004019 + 00013788 0x00001f34 call 0x00003628 + 00013789 0x00001f35 call 0x00007e38 + 00013790 0x00001f36 jam 0x00000002 , 0x00004172 + 00013791 0x00001f37 jam 0x00000000 , 0x000049f6 + 00013792 0x00001f38 fetch 0x00000001 , 0x000047cb + 00013793 0x00001f39 store 0x00000001 , 0x0000469a + 00013794 0x00001f3a beq 0x00000000 , 0x000035ee + 00013795 0x00001f3b fetch 0x00000001 , 0x000047cc + 00013796 0x00001f3c store 0x00000001 , 0x00004686 + 00013797 0x00001f3d jam 0x00000000 , 0x0000436e + 00013798 0x00001f3f call 0x0000360f + 00013799 0x00001f40 call 0x00007cd3 + 00013800 0x00001f41 call 0x00007cdd + 00013801 0x00001f42 jam 0x00000001 , 0x000047f3 + 00013802 0x00001f43 fetch 0x00000002 , 0x00004682 + 00013803 0x00001f44 rtnbit1 0x0000000c + 00013804 0x00001f45 branch 0x0000340a + 00013805 0x00001f48 branch 0x0000360f + 00013806 0x00001f4b jam 0x00000002 , 0x000047f3 + 00013807 0x00001f4d jam 0x00000001 , 0x0000436e + 00013808 0x00001f4e call 0x0000360f + 00013809 0x00001f4f arg 0x00000000 , 0x00000011 + 00013810 0x00001f50 call 0x00007d1e + 00013811 0x00001f52 setarg 0x00000020 + 00013812 0x00001f53 call 0x000046f0 + 00013813 0x00001f55 arg 0x000043b7 , 0x00000005 + 00013814 0x00001f56 fetch 0x00000001 , 0x000044a0 + 00013815 0x00001f58 and 0x0000003f , 0x000000f0 , 0x00000002 + 00013816 0x00001f59 rshift4 0x00000002 , 0x00000002 + 00013817 0x00001f5a call 0x00003609 + 00013818 0x00001f5b istoret 0x00000001 , 0x00000005 + 00013819 0x00001f5c and 0x0000003f , 0x0000000f , 0x00000002 + 00013820 0x00001f5d call 0x00003609 + 00013821 0x00001f5e istoret 0x00000001 , 0x00000005 + 00013822 0x00001f5f call 0x000057a6 + 00013823 0x00001f60 fetcht 0x00000001 , 0x000043af + 00013824 0x00001f61 copy 0x00000002 , 0x00000039 + 00013825 0x00001f62 arg 0x00004372 , 0x00000005 + 00013826 0x00001f63 arg 0x000043b0 , 0x00000006 + 00013827 0x00001f64 call 0x00007f01 + 00013828 0x00001f66 fetcht 0x00000001 , 0x000043af + 00013829 0x00001f67 copy 0x00000002 , 0x00000039 + 00013830 0x00001f68 arg 0x00004392 , 0x00000005 + 00013831 0x00001f69 arg 0x000043b0 , 0x00000006 + 00013832 0x00001f6a branch 0x00007f01 + 00013833 0x00001f6c sub 0x00000002 , 0x00000009 , 0x0000003e + 00013834 0x00001f6d branch 0x0000360d , 0x00000002 + 00013835 0x00001f6e add 0x00000002 , 0x00000037 , 0x00000002 + 00013836 0x00001f6f rtn + 00013837 0x00001f71 add 0x00000002 , 0x00000030 , 0x00000002 + 00013838 0x00001f72 rtn + 00013839 0x00001f75 fetch 0x00000001 , 0x000047c0 + 00013840 0x00001f76 bne 0x000000ff , 0x00003621 + 00013841 0x00001f78 fetch 0x00000001 , 0x000047be + 00013842 0x00001f79 bne 0x000000ff , 0x00003624 + 00013843 0x00001f7b fetch 0x00000001 , 0x000047c9 + 00013844 0x00001f7c bne 0x000000ff , 0x00003626 + 00013845 0x00001f7e fetch 0x00000001 , 0x0000472c + 00013846 0x00001f7f copy 0x0000003f , 0x00000039 + 00013847 0x00001f80 setarg 0x0000472d + 00013848 0x00001f81 copy 0x0000003f , 0x00000011 + 00013849 0x00001f83 copy 0x00000011 , 0x00000006 + 00013850 0x00001f84 ifetch 0x00000001 , 0x00000006 + 00013851 0x00001f85 copy 0x00000006 , 0x00000011 + 00013852 0x00001f86 beq 0x000000ff , 0x0000361f + 00013853 0x00001f87 copy 0x0000003f , 0x00000002 + 00013854 0x00001f88 call 0x0000680e + 00013855 0x00001f8a loop 0x00003619 + 00013856 0x00001f8c rtn + 00013857 0x00001f8e fetch 0x00000008 , 0x000047c0 + 00013858 0x00001f8f store 0x00000008 , 0x0000472f + 00013859 0x00001f90 branch 0x00003611 + 00013860 0x00001f92 store 0x00000001 , 0x0000472d + 00013861 0x00001f93 branch 0x00003613 + 00013862 0x00001f95 store 0x00000001 , 0x0000472e + 00013863 0x00001f96 branch 0x00003615 + 00013864 0x00001f9a arg 0x00000000 , 0x00000011 + 00013865 0x00001f9b call 0x000069a6 + 00013866 0x00001f9c call 0x000037e4 + 00013867 0x00001f9d call 0x00002c7d + 00013868 0x00001f9e branch 0x0000362d + 00013869 0x00001fa1 jam 0x00000064 , 0x000047cf + 00013870 0x00001fa2 fetch 0x00000001 , 0x000047c9 + 00013871 0x00001fa3 store 0x00000001 , 0x00004744 + 00013872 0x00001fa4 branch 0x000068a8 + 00013873 0x00001fa7 call 0x00006835 + 00013874 0x00001fa8 branch 0x0000696c + 00013875 0x00001fab branch 0x0000696c + 00013876 0x00001fb0 branch 0x00006978 + 00013877 0x00001fb3 call 0x00003642 + 00013878 0x00001fb4 call 0x000037ee + 00013879 0x00001fb5 call 0x00003639 + 00013880 0x00001fb6 branch 0x00003634 + 00013881 0x00001fb9 fetch 0x00000002 , 0x00004682 + 00013882 0x00001fba rtnbit1 0x00000009 + 00013883 0x00001fbb fetch 0x00000001 , 0x000049f6 + 00013884 0x00001fbc beq 0x00000001 , 0x0000363e + 00013885 0x00001fbd rtn + 00013886 0x00001fbf fetch 0x00000001 , 0x000047ea + 00013887 0x00001fc0 rtneq 0x00000001 + 00013888 0x00001fc1 jam 0x00000001 , 0x000047ea + 00013889 0x00001fc2 branch 0x00003654 + 00013890 0x00001fc5 fetch 0x00000002 , 0x00004682 + 00013891 0x00001fc6 rtnbit0 0x00000009 + 00013892 0x00001fc7 call 0x00005892 + 00013893 0x00001fc8 nrtn 0x00000034 + 00013894 0x00001fc9 arg 0x00004718 , 0x00000011 + 00013895 0x00001fca call 0x00007e54 + 00013896 0x00001fcb nrtn 0x00000028 + 00013897 0x00001fcc arg 0x00004718 , 0x00000006 + 00013898 0x00001fcd branch 0x00004746 + 00013899 0x00001fd0 copy 0x00000013 , 0x0000003f + 00013900 0x00001fd1 beq 0x0000002d , 0x00003431 + 00013901 0x00001fd2 beq 0x00000010 , 0x0000341a + 00013902 0x00001fd3 beq 0x00000014 , 0x00003651 + 00013903 0x00001fd4 beq 0x00000015 , 0x00003660 + 00013904 0x00001fd5 rtn + 00013905 0x00001fd8 setarg 0x00000000 + 00013906 0x00001fd9 call 0x00003220 + 00013907 0x00001fda branch 0x00003656 + 00013908 0x00001fdc fetch 0x00000002 , 0x000047eb + 00013909 0x00001fdd store 0x00000002 , 0x000047ed + 00013910 0x00001fdf jam 0x00000014 , 0x000047ce + 00013911 0x00001fe0 jam 0x00000000 , 0x00004091 + 00013912 0x00001fe1 call 0x000033f8 + 00013913 0x00001fe2 call 0x00003416 + 00013914 0x00001fe3 fetch 0x00000001 , 0x000047bd + 00013915 0x00001fe4 beq 0x00000001 , 0x0000365e + 00013916 0x00001fe6 arg 0x00000000 , 0x00000011 + 00013917 0x00001fe7 branch 0x00007d14 + 00013918 0x00001fe9 arg 0x00000000 , 0x00000011 + 00013919 0x00001fea branch 0x00007d19 + 00013920 0x00001fed setarg 0x00000002 + 00013921 0x00001fee call 0x00003220 + 00013922 0x00001ff0 setarg 0x00000000 + 00013923 0x00001ff1 store 0x00000005 , 0x0000479c + 00013924 0x00001ff2 setarg 0x00000004 + 00013925 0x00001ff3 call 0x000069d7 + 00013926 0x00001ff4 setarg 0x00000005 + 00013927 0x00001ff5 call 0x000069d7 + 00013928 0x00001ff6 setarg 0x00000014 + 00013929 0x00001ff7 call 0x000069d7 + 00013930 0x00001ff8 setarg 0x00000015 + 00013931 0x00001ff9 call 0x000069d7 + 00013932 0x00001ffa setarg 0x00000016 + 00013933 0x00001ffb call 0x000069d7 + 00013934 0x00001ffc setarg 0x00000007 + 00013935 0x00001ffd call 0x000069d7 + 00013936 0x00001ffe call 0x00007e38 + 00013937 0x00001fff jam 0x0000000a , 0x0000475e + 00013938 0x00002000 jam 0x0000000a , 0x00004760 + 00013939 0x00002001 jam 0x0000000a , 0x00004762 + 00013940 0x00002003 jam 0x00000002 , 0x00004172 + 00013941 0x00002004 arg 0x00000000 , 0x00000011 + 00013942 0x00002005 call 0x00007d1e + 00013943 0x00002007 setarg 0x00000020 + 00013944 0x00002008 call 0x000046f0 + 00013945 0x00002009 branch 0x000033fa + 00013946 0x0000200d call 0x0000373b + 00013947 0x0000200e call 0x0000373e + 00013948 0x0000200f call 0x00003741 + 00013949 0x00002010 call 0x0000337b + 00013950 0x00002011 call 0x000036c8 + 00013951 0x00002012 call 0x000036a1 + 00013952 0x00002013 call 0x0000368a + 00013953 0x00002014 call 0x00003683 + 00013954 0x00002015 branch 0x0000368f + 00013955 0x00002018 arg 0x0000479a , 0x00000013 + 00013956 0x00002019 arg 0x00003686 , 0x00000012 + 00013957 0x0000201a branch 0x0000336d + 00013958 0x0000201c call 0x00003847 + 00013959 0x0000201d nrtn 0x00000001 + 00013960 0x0000201e jam 0x00000001 , 0x0000479b + 00013961 0x0000201f rtn + 00013962 0x00002022 arg 0x000047ed , 0x00000013 + 00013963 0x00002023 arg 0x0000368d , 0x00000012 + 00013964 0x00002024 branch 0x00003374 + 00013965 0x00002026 jam 0x00000002 , 0x000047ea + 00013966 0x00002027 branch 0x00003662 + 00013967 0x0000202a arg 0x000047f1 , 0x00000013 + 00013968 0x0000202b arg 0x00003692 , 0x00000012 + 00013969 0x0000202c branch 0x0000336d + 00013970 0x0000202e fetch 0x00000001 , 0x000047f2 + 00013971 0x0000202f branch 0x0000369e , 0x00000034 + 00013972 0x00002030 jam 0x00000002 , 0x000047f1 + 00013973 0x00002031 jam 0x00000000 , 0x000047f2 + 00013974 0x00002032 setarg 0x00000a02 + 00013975 0x00002033 store 0x00000002 , 0x00004752 + 00013976 0x00002034 fetch 0x00000001 , 0x000047b9 + 00013977 0x00002035 beq 0x00000003 , 0x0000369b + 00013978 0x00002037 branch 0x00003762 + 00013979 0x00002039 setarg 0x00000a02 + 00013980 0x0000203a store 0x00000002 , 0x00004754 + 00013981 0x0000203b branch 0x00003762 + 00013982 0x0000203d setarg 0x00000000 + 00013983 0x0000203e store 0x00000004 , 0x00004752 + 00013984 0x0000203f branch 0x00003762 + 00013985 0x00002042 fetch 0x00000001 , 0x000047c8 + 00013986 0x00002043 rtn 0x00000034 + 00013987 0x00002044 fetch 0x00000002 , 0x00004682 + 00013988 0x00002045 bbit0 0x00000009 , 0x000036c6 + 00013989 0x00002046 arg 0x000047ce , 0x00000013 + 00013990 0x00002047 arg 0x000036a8 , 0x00000012 + 00013991 0x00002048 branch 0x0000336d + 00013992 0x0000204a fetch 0x00000001 , 0x000047cd + 00013993 0x0000204b store 0x00000001 , 0x000047ce + 00013994 0x0000204c fetch 0x00000001 , 0x000047d1 + 00013995 0x0000204d nrtn 0x00000034 + 00013996 0x0000204f call 0x000068eb + 00013997 0x00002050 call 0x00006908 + 00013998 0x00002051 store 0x00000002 , 0x000047e8 + 00013999 0x00002052 arg 0x000047e2 , 0x00000011 + 00014000 0x00002053 call 0x00006930 + 00014001 0x00002054 fetcht 0x00000001 , 0x000047cf + 00014002 0x00002055 isub 0x00000002 , 0x0000003e + 00014003 0x00002056 branch 0x000036b6 , 0x00000002 + 00014004 0x00002057 store 0x00000001 , 0x000047cf + 00014005 0x00002058 copy 0x0000003f , 0x00000002 + 00014006 0x0000205a storet 0x00000001 , 0x000047d0 + 00014007 0x0000205b fetch 0x00000001 , 0x000047ca + 00014008 0x0000205c isub 0x00000002 , 0x0000003e + 00014009 0x0000205d call 0x000036c1 , 0x00000002 + 00014010 0x0000205e storet 0x00000001 , 0x000047db + 00014011 0x0000205f arg 0x00000006 , 0x00000039 + 00014012 0x00002060 arg 0x000047d6 , 0x00000006 + 00014013 0x00002061 call 0x000036f0 + 00014014 0x00002062 store 0x00000001 , 0x000047dc + 00014015 0x00002063 arg 0x000047d3 , 0x00000011 + 00014016 0x00002064 branch 0x00007e3d + 00014017 0x00002066 fetch 0x00000001 , 0x000047d2 + 00014018 0x00002067 nrtn 0x00000034 + 00014019 0x00002068 jam 0x00000001 , 0x000047d2 + 00014020 0x00002069 arg 0x00000001 , 0x00000011 + 00014021 0x0000206a branch 0x00007d1e + 00014022 0x0000206c arg 0x00000001 , 0x00000011 + 00014023 0x0000206d branch 0x00007d19 + 00014024 0x00002070 arg 0x000047a4 , 0x00000013 + 00014025 0x00002071 arg 0x000036cb , 0x00000012 + 00014026 0x00002072 branch 0x0000336d + 00014027 0x00002074 jam 0x00000005 , 0x000047a4 + 00014028 0x00002075 jam 0x00000000 , 0x000047a6 + 00014029 0x00002076 fetch 0x00000001 , 0x000047a5 + 00014030 0x00002077 beq 0x00000001 , 0x000036ee + 00014031 0x00002078 beq 0x00000000 , 0x000036ec + 00014032 0x0000207a arg 0x0000479c , 0x00000006 + 00014033 0x0000207b copy 0x00000006 , 0x00000011 + 00014034 0x0000207c arg 0x00000008 , 0x00000039 + 00014035 0x0000207e copy 0x00000011 , 0x00000006 + 00014036 0x0000207f ifetch 0x00000001 , 0x00000006 + 00014037 0x00002080 copy 0x00000006 , 0x00000011 + 00014038 0x00002081 beq 0x00000000 , 0x000036e3 + 00014039 0x00002082 beq 0x00000001 , 0x000036e6 + 00014040 0x00002083 beq 0x00000002 , 0x000036e9 + 00014041 0x00002085 fetch 0x00000001 , 0x000047a6 + 00014042 0x00002086 increase 0x00000001 , 0x0000003f + 00014043 0x00002087 store 0x00000001 , 0x000047a6 + 00014044 0x00002088 loop 0x000036d3 + 00014045 0x00002089 rtn + 00014046 0x0000208b fetch 0x00000001 , 0x000047a6 + 00014047 0x0000208c arg 0x000047c0 , 0x00000012 + 00014048 0x0000208d iadd 0x00000012 , 0x00000012 + 00014049 0x0000208e ifetcht 0x00000001 , 0x00000012 + 00014050 0x0000208f rtn + 00014051 0x00002091 call 0x000036de + 00014052 0x00002092 call 0x00006825 + 00014053 0x00002093 branch 0x000036d9 + 00014054 0x00002095 call 0x000036de + 00014055 0x00002096 call 0x00006829 + 00014056 0x00002097 branch 0x000036d9 + 00014057 0x00002099 fetch 0x00000001 , 0x000047a5 + 00014058 0x0000209a beq 0x00000001 , 0x000036e3 + 00014059 0x0000209b branch 0x000036e6 + 00014060 0x0000209d jam 0x00000001 , 0x000047a5 + 00014061 0x0000209e branch 0x000036d0 + 00014062 0x000020a0 jam 0x00000000 , 0x000047a5 + 00014063 0x000020a1 branch 0x000036d0 + 00014064 0x000020a6 arg 0x00000000 , 0x00000011 + 00014065 0x000020a8 ifetch 0x00000001 , 0x00000006 + 00014066 0x000020a9 iadd 0x00000011 , 0x00000011 + 00014067 0x000020aa loop 0x000036f1 + 00014068 0x000020ac and 0x00000011 , 0x000000ff , 0x0000003f + 00014069 0x000020ad rtn + 00014070 0x000020b0 fetch 0x00000001 , 0x00000477 + 00014071 0x000020b1 beq 0x00000012 , 0x000036f9 + 00014072 0x000020b2 rtn + 00014073 0x000020b4 fetch 0x00000002 , 0x00000478 + 00014074 0x000020b5 beq 0x00000014 , 0x00003710 + 00014075 0x000020b6 rtn + 00014076 0x000020c3 bpatch 0x000000d0 , 0x0000401a + 00014077 0x000020c4 ifetch 0x00000005 , 0x00000011 + 00014078 0x000020c5 store 0x00000005 , 0x00000b12 + 00014079 0x000020c6 fetch 0x00000002 , 0x00000b12 + 00014080 0x000020c7 arg 0x00006b5a , 0x00000002 + 00014081 0x000020c8 isub 0x00000002 , 0x0000003e + 00014082 0x000020c9 nrtn 0x00000005 + 00014083 0x000020ca fetch 0x00000002 , 0x00000b15 + 00014084 0x000020cb byteswap 0x0000003f , 0x0000003f + 00014085 0x000020cc store 0x00000002 , 0x00000b15 + 00014086 0x000020cd copy 0x0000003f , 0x00000039 + 00014087 0x000020ce increase 0x00000005 , 0x00000011 + 00014088 0x000020cf copy 0x00000011 , 0x00000006 + 00014089 0x000020d0 arg 0x00000b17 , 0x00000005 + 00014090 0x000020d1 call 0x00007f01 + 00014091 0x000020d2 ifetch 0x00000001 , 0x00000006 + 00014092 0x000020d3 store 0x00000001 , 0x00000b21 + 00014093 0x000020d4 arg 0x00000b14 , 0x00000011 + 00014094 0x000020d5 arg 0x00000b17 , 0x00000012 + 00014095 0x000020d6 rtn + 00014096 0x000020d9 setarg 0x00000000 + 00014097 0x000020da store 0x00000005 , 0x00004752 + 00014098 0x000020db store 0x00000005 , 0x00004757 + 00014099 0x000020dc call 0x000036fc + 00014100 0x000020dd copy 0x00000012 , 0x00000006 + 00014101 0x000020de arg 0x00004752 , 0x00000005 + 00014102 0x000020df arg 0x0000000a , 0x00000039 + 00014103 0x000020e0 call 0x00007f01 + 00014104 0x000020e2 bpatch 0x000000d1 , 0x0000401a + 00014105 0x000020e3 ifetch 0x00000001 , 0x00000011 + 00014106 0x000020e4 beq 0x00000002 , 0x0000374a + 00014107 0x000020e5 beq 0x00000003 , 0x0000375c + 00014108 0x000020e6 beq 0x00000004 , 0x00003762 + 00014109 0x000020e7 beq 0x00000005 , 0x00003762 + 00014110 0x000020e8 beq 0x00000006 , 0x000037b1 + 00014111 0x000020e9 beq 0x00000007 , 0x00003849 + 00014112 0x000020ea beq 0x00000008 , 0x0000384c + 00014113 0x000020eb rtn + 00014114 0x000020ee fetch 0x00000002 , 0x00004682 + 00014115 0x000020ef rtnbit1 0x00000009 + 00014116 0x000020f1 fetch 0x00000002 , 0x000047eb + 00014117 0x000020f2 store 0x00000002 , 0x000047ed + 00014118 0x000020f4 jam 0x00000001 , 0x000049f6 + 00014119 0x000020f6 setarg 0x0000010c + 00014120 0x000020f7 call 0x000032cd + 00014121 0x000020f8 call 0x00003710 + 00014122 0x000020fa fetch 0x00000001 , 0x00000b14 + 00014123 0x000020fb beq 0x00000004 , 0x0000372e + 00014124 0x000020fc beq 0x00000005 , 0x0000372e + 00014125 0x000020fd rtn + 00014126 0x000020ff fetch 0x00000001 , 0x00004752 + 00014127 0x00002100 ncall 0x00003735 , 0x00000034 + 00014128 0x00002101 fetch 0x00000001 , 0x00004754 + 00014129 0x00002102 ncall 0x00003737 , 0x00000034 + 00014130 0x00002103 fetch 0x00000001 , 0x00004756 + 00014131 0x00002104 ncall 0x00003739 , 0x00000034 + 00014132 0x00002105 rtn + 00014133 0x00002108 jam 0x00000005 , 0x000049f3 + 00014134 0x00002109 rtn + 00014135 0x0000210b jam 0x00000005 , 0x000049f4 + 00014136 0x0000210c rtn + 00014137 0x0000210e jam 0x00000005 , 0x000049f5 + 00014138 0x0000210f rtn + 00014139 0x00002112 arg 0x000049f3 , 0x00000013 + 00014140 0x00002113 arg 0x00003744 , 0x00000012 + 00014141 0x00002114 branch 0x0000336d + 00014142 0x00002116 arg 0x000049f4 , 0x00000013 + 00014143 0x00002117 arg 0x00003746 , 0x00000012 + 00014144 0x00002118 branch 0x0000336d + 00014145 0x0000211a arg 0x000049f5 , 0x00000013 + 00014146 0x0000211b arg 0x00003748 , 0x00000012 + 00014147 0x0000211c branch 0x0000336d + 00014148 0x0000211f jam 0x00000000 , 0x00004752 + 00014149 0x00002120 branch 0x00003762 + 00014150 0x00002122 jam 0x00000000 , 0x00004754 + 00014151 0x00002123 branch 0x00003762 + 00014152 0x00002125 jam 0x00000000 , 0x00004756 + 00014153 0x00002126 branch 0x00003762 + 00014154 0x0000212c call 0x0000374c + 00014155 0x0000212d branch 0x0000374f + 00014156 0x0000212f fetch 0x00000001 , 0x00004752 + 00014157 0x00002130 store 0x00000001 , 0x0000475f + 00014158 0x00002131 branch 0x00003773 + 00014159 0x00002133 fetch 0x00000001 , 0x0000475e + 00014160 0x00002134 call 0x00003754 + 00014161 0x00002135 fetch 0x00000001 , 0x00004753 + 00014162 0x00002136 store 0x00000001 , 0x0000475d + 00014163 0x00002137 branch 0x00003770 + 00014164 0x00002139 beq 0x00000002 , 0x00003758 + 00014165 0x0000213a beq 0x00000003 , 0x0000375a + 00014166 0x0000213b store 0x00000001 , 0x0000475e + 00014167 0x0000213c rtn + 00014168 0x0000213e jam 0x00000005 , 0x0000475e + 00014169 0x0000213f rtn + 00014170 0x00002141 jam 0x0000000a , 0x0000475e + 00014171 0x00002142 rtn + 00014172 0x00002144 fetch 0x00000001 , 0x00004752 + 00014173 0x00002145 call 0x00003754 + 00014174 0x00002146 fetch 0x00000001 , 0x0000475e + 00014175 0x00002147 call 0x0000379e + 00014176 0x00002148 call 0x000037a1 + 00014177 0x00002149 branch 0x000069c4 + 00014178 0x0000214c fetch 0x00000001 , 0x000047f0 + 00014179 0x0000214d nrtn 0x00000034 + 00014180 0x0000214e fetch 0x00000006 , 0x00004752 + 00014181 0x0000214f store 0x00000006 , 0x0000475d + 00014182 0x00002150 fetch 0x00000001 , 0x0000475e + 00014183 0x00002151 fetcht 0x00000001 , 0x00004760 + 00014184 0x00002152 iand 0x00000002 , 0x0000003f + 00014185 0x00002153 fetcht 0x00000001 , 0x00004762 + 00014186 0x00002154 iand 0x00000002 , 0x0000003f + 00014187 0x00002155 call 0x00003779 , 0x00000034 + 00014188 0x00002156 bpatch 0x000000d2 , 0x0000401a + 00014189 0x00002157 call 0x00003770 + 00014190 0x00002158 call 0x00003773 + 00014191 0x00002159 branch 0x00003776 + 00014192 0x0000215b arg 0x00004763 , 0x00000012 + 00014193 0x0000215c arg 0x0000475d , 0x00000006 + 00014194 0x0000215d branch 0x0000377b + 00014195 0x0000215f arg 0x0000476b , 0x00000012 + 00014196 0x00002160 arg 0x0000475f , 0x00000006 + 00014197 0x00002161 branch 0x0000377b + 00014198 0x00002163 arg 0x00004773 , 0x00000012 + 00014199 0x00002164 arg 0x00004761 , 0x00000006 + 00014200 0x00002165 branch 0x0000377b + 00014201 0x00002167 jam 0x00000000 , 0x000047d1 + 00014202 0x00002168 rtn + 00014203 0x0000216b ifetch 0x00000001 , 0x00000006 + 00014204 0x0000216c beq 0x00000000 , 0x00003787 + 00014205 0x0000216d beq 0x00000001 , 0x00003780 + 00014206 0x0000216e beq 0x00000002 , 0x00003782 + 00014207 0x0000216f rtn + 00014208 0x00002171 jam 0x00000000 , 0x0000477b + 00014209 0x00002172 branch 0x00003783 + 00014210 0x00002174 jam 0x00000001 , 0x0000477b + 00014211 0x00002175 ifetch 0x00000001 , 0x00000006 + 00014212 0x00002176 store 0x00000001 , 0x0000477d + 00014213 0x00002177 ifetch 0x00000008 , 0x00000012 + 00014214 0x00002178 branch 0x0000378c + 00014215 0x0000217b ifetch 0x00000001 , 0x00000012 + 00014216 0x0000217c call 0x000069d7 + 00014217 0x0000217d increase 0x00000001 , 0x00000012 + 00014218 0x0000217e ifetch 0x00000001 , 0x00000012 + 00014219 0x0000217f branch 0x000069d7 + 00014220 0x00002181 store 0x00000008 , 0x0000477e + 00014221 0x00002182 jam 0x00000001 , 0x000047d1 + 00014222 0x00002183 fetch 0x00000001 , 0x0000477b + 00014223 0x00002184 beq 0x00000000 , 0x0000379a + 00014224 0x00002186 fetch 0x00000001 , 0x0000477f + 00014225 0x00002187 store 0x00000001 , 0x00004780 + 00014226 0x00002188 fetch 0x00000001 , 0x0000477e + 00014227 0x0000218a call 0x000069d7 + 00014228 0x0000218b fetch 0x00000001 , 0x0000477d + 00014229 0x0000218c call 0x0000379e + 00014230 0x0000218d store 0x00000001 , 0x00004785 + 00014231 0x0000218e fetch 0x00000006 , 0x00004780 + 00014232 0x0000218f store 0x00000006 , 0x00000a9a + 00014233 0x00002190 branch 0x000069ae + 00014234 0x00002192 fetch 0x00000001 , 0x0000477e + 00014235 0x00002193 store 0x00000001 , 0x00004780 + 00014236 0x00002194 fetch 0x00000001 , 0x0000477f + 00014237 0x00002195 branch 0x00003793 + 00014238 0x00002198 mul32 0x0000003f , 0x00000005 , 0x0000003f + 00014239 0x00002199 add 0x0000003f , 0x00000032 , 0x0000003f + 00014240 0x0000219a rtn + 00014241 0x0000219c arg 0x00002ee0 , 0x00000002 + 00014242 0x0000219d imul32 0x00000002 , 0x0000003f + 00014243 0x0000219e div 0x0000003f , 0x00000064 + 00014244 0x0000219f call 0x00007f86 + 00014245 0x000021a0 quotient 0x00000002 + 00014246 0x000021a1 copy 0x00000002 , 0x00000011 + 00014247 0x000021a2 setarg 0x00002ee0 + 00014248 0x000021a3 isub 0x00000002 , 0x00000012 + 00014249 0x000021a4 rtn + 00014250 0x000021a8 hfetch 0x00000001 , 0x00008082 + 00014251 0x000021a9 set1 0x00000002 , 0x0000003f + 00014252 0x000021aa hstore 0x00000001 , 0x00008082 + 00014253 0x000021ab setarg 0x0000009e + 00014254 0x000021ac hstore 0x00000002 , 0x00008068 + 00014255 0x000021ad hstore 0x00000002 , 0x0000806a + 00014256 0x000021ae rtn + 00014257 0x000021b1 fetch 0x00000001 , 0x000047f0 + 00014258 0x000021b2 nrtn 0x00000034 + 00014259 0x000021b3 fetch 0x00000002 , 0x00004752 + 00014260 0x000021b4 store 0x00000002 , 0x00004787 + 00014261 0x000021b5 fetch 0x00000001 , 0x000047ea + 00014262 0x000021b6 bne 0x00000001 , 0x000037b9 + 00014263 0x000021b7 fetch 0x00000002 , 0x000044a0 + 00014264 0x000021b8 store 0x00000002 , 0x00004787 + 00014265 0x000021ba bpatch 0x000000d3 , 0x0000401a + 00014266 0x000021bb call 0x000037aa + 00014267 0x000021bc call 0x000037dc + 00014268 0x000021bd setarg 0x0000bb80 + 00014269 0x000021be call 0x00002a8f + 00014270 0x000021bf call 0x000037e0 + 00014271 0x000021c0 setarg 0x00001c20 + 00014272 0x000021c1 call 0x00002a8f + 00014273 0x000021c2 arg 0x00000010 , 0x00000039 + 00014274 0x000021c4 call 0x000037dc + 00014275 0x000021c5 fetch 0x00000002 , 0x00004787 + 00014276 0x000021c6 bbit1 0x00000000 , 0x000037c9 + 00014277 0x000021c7 setarg 0x00001c20 + 00014278 0x000021c8 call 0x00002a8f + 00014279 0x000021c9 call 0x000037e0 + 00014280 0x000021ca branch 0x000037cc + 00014281 0x000021cd setarg 0x00003840 + 00014282 0x000021ce call 0x00002a8f + 00014283 0x000021cf call 0x000037e0 + 00014284 0x000021d1 setarg 0x00001c20 + 00014285 0x000021d2 call 0x00002a8f + 00014286 0x000021d3 fetch 0x00000002 , 0x00004787 + 00014287 0x000021d4 rshift 0x0000003f , 0x0000003f + 00014288 0x000021d5 store 0x00000002 , 0x00004787 + 00014289 0x000021d6 loop 0x000037c2 + 00014290 0x000021d8 jam 0x00000002 , 0x000047f1 + 00014291 0x000021d9 jam 0x00000001 , 0x000047f2 + 00014292 0x000021da setarg 0x00000a01 + 00014293 0x000021db store 0x00000002 , 0x00004752 + 00014294 0x000021dc fetch 0x00000001 , 0x000047b9 + 00014295 0x000021dd beq 0x00000003 , 0x000037d9 + 00014296 0x000021df branch 0x00003762 + 00014297 0x000021e1 setarg 0x00000a01 + 00014298 0x000021e2 store 0x00000002 , 0x00004754 + 00014299 0x000021e3 branch 0x00003762 + 00014300 0x000021e6 hfetch 0x00000001 , 0x00008085 + 00014301 0x000021e7 or_into 0x00000040 , 0x0000003f + 00014302 0x000021e8 hstore 0x00000001 , 0x00008085 + 00014303 0x000021e9 rtn + 00014304 0x000021eb hfetch 0x00000001 , 0x00008085 + 00014305 0x000021ec and_into 0x000000bf , 0x0000003f + 00014306 0x000021ed hstore 0x00000001 , 0x00008085 + 00014307 0x000021ee rtn + 00014308 0x000021f1 fetch 0x00000001 , 0x000047bb + 00014309 0x000021f2 rtneq 0x00000000 + 00014310 0x000021f3 call 0x00002c65 + 00014311 0x000021f4 fetcht 0x00000001 , 0x000047bc + 00014312 0x000021f5 storet 0x00000001 , 0x00004786 + 00014313 0x000021f6 call 0x000067fb + 00014314 0x000021f7 call 0x00003847 + 00014315 0x000021f8 nrtn 0x00000001 + 00014316 0x000021f9 jam 0x00000001 , 0x0000479a + 00014317 0x000021fa rtn + 00014318 0x000021fd fetch 0x00000001 , 0x000047bb + 00014319 0x000021fe rtneq 0x00000000 + 00014320 0x000021ff fetch 0x00000001 , 0x0000479b + 00014321 0x00002200 nrtn 0x00000034 + 00014322 0x00002201 fetch 0x00000002 , 0x00004682 + 00014323 0x00002202 bbit1 0x00000009 , 0x000037f6 + 00014324 0x00002203 fetch 0x00000001 , 0x000047ea + 00014325 0x00002204 rtnne 0x00000001 + 00014326 0x00002206 bpatch 0x000000d4 , 0x0000401a + 00014327 0x00002207 call 0x00003847 + 00014328 0x00002208 nrtn 0x00000001 + 00014329 0x00002209 setarg 0x00008ca0 + 00014330 0x0000220a call 0x00002a8f + 00014331 0x0000220b call 0x00003847 + 00014332 0x0000220c nrtn 0x00000001 + 00014333 0x0000220d call 0x0000383f + 00014334 0x0000220f call 0x00003842 + 00014335 0x00002210 nrtn 0x00000002 + 00014336 0x00002211 call 0x00003847 + 00014337 0x00002212 branch 0x000037fe , 0x00000001 + 00014338 0x00002213 arg 0x00000000 , 0x00000011 + 00014339 0x00002214 arg 0x00000010 , 0x00000039 + 00014340 0x00002215 call 0x0000383f + 00014341 0x00002217 call 0x00003842 + 00014342 0x00002218 nrtn 0x00000002 + 00014343 0x00002219 call 0x00003847 + 00014344 0x0000221a nbranch 0x00003805 , 0x00000001 + 00014345 0x0000221b setarg 0x00002a30 + 00014346 0x0000221c call 0x00002a8f + 00014347 0x0000221d call 0x00003847 + 00014348 0x0000221e branch 0x00003812 , 0x00000001 + 00014349 0x00002220 setarg 0x00000000 + 00014350 0x00002221 rshift 0x00000011 , 0x00000011 + 00014351 0x00002222 ior 0x00000011 , 0x00000011 + 00014352 0x00002223 loop 0x00003805 + 00014353 0x00002224 branch 0x0000381b + 00014354 0x00002226 setarg 0x00008000 + 00014355 0x00002227 rshift 0x00000011 , 0x00000011 + 00014356 0x00002228 ior 0x00000011 , 0x00000011 + 00014357 0x00002229 call 0x0000383f + 00014358 0x0000222b call 0x00003842 + 00014359 0x0000222c nrtn 0x00000002 + 00014360 0x0000222d call 0x00003847 + 00014361 0x0000222e branch 0x00003816 , 0x00000001 + 00014362 0x0000222f loop 0x00003805 + 00014363 0x00002231 bpatch 0x000000d5 , 0x0000401a + 00014364 0x00002232 copy 0x00000011 , 0x0000003f + 00014365 0x00002233 store 0x00000002 , 0x00004789 + 00014366 0x00002234 store 0x00000002 , 0x00004797 + 00014367 0x00002235 fetch 0x00000001 , 0x000047ea + 00014368 0x00002236 beq 0x00000001 , 0x00003827 + 00014369 0x00002238 arg 0x00000007 , 0x00000039 + 00014370 0x00002239 arg 0x00004792 , 0x00000006 + 00014371 0x0000223a call 0x000036f0 + 00014372 0x0000223b store 0x00000001 , 0x00004799 + 00014373 0x0000223c arg 0x0000478f , 0x00000011 + 00014374 0x0000223d branch 0x00007e3d + 00014375 0x00002240 fetch 0x00000001 , 0x000047ef + 00014376 0x00002241 increase 0x00000001 , 0x0000003f + 00014377 0x00002242 store 0x00000001 , 0x000047ef + 00014378 0x00002243 div 0x0000003f , 0x00000002 + 00014379 0x00002244 call 0x00007f86 + 00014380 0x00002245 quotient 0x00000002 + 00014381 0x00002246 remainder 0x0000003f + 00014382 0x00002247 nbranch 0x00003838 , 0x00000034 + 00014383 0x00002249 fetch 0x00000001 , 0x000047bf + 00014384 0x0000224a isub 0x00000002 , 0x0000003e + 00014385 0x0000224b call 0x0000383d , 0x00000005 + 00014386 0x0000224c arg 0x0000479c , 0x0000003f + 00014387 0x0000224d increase 0xffffffff , 0x00000002 + 00014388 0x0000224e iadd 0x00000002 , 0x00000011 + 00014389 0x0000224f arg 0x00000000 , 0x0000003f + 00014390 0x00002250 istore 0x00000001 , 0x00000011 + 00014391 0x00002251 rtn + 00014392 0x00002253 arg 0x0000479c , 0x0000003f + 00014393 0x00002254 iadd 0x00000002 , 0x00000011 + 00014394 0x00002255 arg 0x00000002 , 0x0000003f + 00014395 0x00002256 istore 0x00000001 , 0x00000011 + 00014396 0x00002257 rtn + 00014397 0x00002259 jam 0x00000001 , 0x000047f0 + 00014398 0x0000225a rtn + 00014399 0x0000225c copy 0x00000022 , 0x0000003f + 00014400 0x0000225d store 0x00000004 , 0x0000478b + 00014401 0x0000225e rtn + 00014402 0x00002260 copy 0x00000022 , 0x0000003f + 00014403 0x00002261 fetcht 0x00000004 , 0x0000478b + 00014404 0x00002262 isub 0x00000002 , 0x0000003f + 00014405 0x00002263 sub 0x0000003f , 0x000000c8 , 0x0000003e + 00014406 0x00002264 rtn + 00014407 0x00002267 fetcht 0x00000001 , 0x00004786 + 00014408 0x00002268 branch 0x0000681d + 00014409 0x0000226b fetch 0x00000008 , 0x00004752 + 00014410 0x0000226c store 0x00000008 , 0x0000479c + 00014411 0x0000226d rtn + 00014412 0x00002270 fetch 0x00000001 , 0x000047b9 + 00014413 0x00002271 store 0x00000001 , 0x000047af + 00014414 0x00002272 fetch 0x00000001 , 0x000047ba + 00014415 0x00002273 store 0x00000001 , 0x000047b0 + 00014416 0x00002274 fetch 0x00000001 , 0x000047bb + 00014417 0x00002275 store 0x00000001 , 0x000047b1 + 00014418 0x00002276 arg 0x0000000d , 0x00000039 + 00014419 0x00002277 arg 0x000047aa , 0x00000006 + 00014420 0x00002278 call 0x000036f0 + 00014421 0x00002279 store 0x00000001 , 0x000047b7 + 00014422 0x0000227a arg 0x000047a7 , 0x00000011 + 00014423 0x0000227b branch 0x00007e3d + 00014424 0x00002282 call 0x000065c2 + 00014425 0x00002283 jam 0x0000007a , 0x000046f6 + 00014426 0x00002284 call 0x0000386d + 00014427 0x00002285 call 0x00003867 + 00014428 0x00002286 setarg 0x00003860 + 00014429 0x00002287 store 0x00000002 , 0x000041fd + 00014430 0x00002288 arg 0x00000000 , 0x00000011 + 00014431 0x00002289 branch 0x000069a6 + 00014432 0x0000228c fetch 0x00000002 , 0x000046a1 + 00014433 0x0000228d rtn 0x00000034 + 00014434 0x0000228e increase 0xffffffff , 0x0000003f + 00014435 0x0000228f store 0x00000002 , 0x000046a1 + 00014436 0x00002290 rtnne 0x00000000 + 00014437 0x00002291 jam 0x00000000 , 0x000046a0 + 00014438 0x00002292 rtn + 00014439 0x00002295 bpatch 0x000000d6 , 0x0000401a + 00014440 0x00002296 fetch 0x00000001 , 0x000046a4 + 00014441 0x00002297 sub 0x0000003f , 0x00000028 , 0x0000003e + 00014442 0x00002298 rtn 0x00000002 + 00014443 0x00002299 jam 0x00000000 , 0x000046a4 + 00014444 0x0000229a rtn + 00014445 0x0000229d arg 0x000046a4 , 0x00000011 + 00014446 0x0000229e arg 0x00000000 , 0x00000012 + 00014447 0x0000229f arg 0x00000051 , 0x00000002 + 00014448 0x000022a0 branch 0x000065df + 00014449 0x000022a4 disable 0x00000028 + 00014450 0x000022a5 fetch 0x00000001 , 0x000046a3 + 00014451 0x000022a6 copy 0x0000003f , 0x00000039 + 00014452 0x000022a8 arg 0x000046a5 , 0x00000011 + 00014453 0x000022a9 copy 0x00000013 , 0x00000012 + 00014454 0x000022ab bpatch 0x000000d7 , 0x0000401a + 00014455 0x000022ac call 0x0000387c + 00014456 0x000022ad branch 0x00007fe7 , 0x00000005 + 00014457 0x000022af increase 0x00000004 , 0x00000011 + 00014458 0x000022b0 loop 0x00003876 + 00014459 0x000022b1 rtn + 00014460 0x000022b5 bpatch 0x000000d8 , 0x0000401b + 00014461 0x000022b6 ifetch 0x00000003 , 0x00000011 + 00014462 0x000022b7 ifetcht 0x00000003 , 0x00000012 + 00014463 0x000022b8 isub 0x00000002 , 0x0000003e + 00014464 0x000022b9 rtn + 00014465 0x000022bc bpatch 0x000000d9 , 0x0000401b + 00014466 0x000022bd ifetch 0x00000003 , 0x00000011 + 00014467 0x000022be ifetcht 0x00000003 , 0x00000012 + 00014468 0x000022bf isub 0x00000002 , 0x0000003e + 00014469 0x000022c0 nrtn 0x00000005 + 00014470 0x000022c1 ifetch 0x00000001 , 0x00000006 + 00014471 0x000022c2 sub 0x0000003f , 0x00000000 , 0x0000003e + 00014472 0x000022c3 rtn 0x00000005 + 00014473 0x000022c4 add 0x00000011 , 0x00000003 , 0x00000006 + 00014474 0x000022c5 ifetcht 0x00000001 , 0x00000006 + 00014475 0x000022c6 isub 0x00000002 , 0x0000003e + 00014476 0x000022c7 rtn + 00014477 0x000022cb bpatch 0x000000da , 0x0000401b + 00014478 0x000022cc disable 0x00000028 + 00014479 0x000022cd fetch 0x00000001 , 0x000046a3 + 00014480 0x000022ce copy 0x0000003f , 0x00000039 + 00014481 0x000022d0 arg 0x000046a5 , 0x00000011 + 00014482 0x000022d1 copy 0x00000013 , 0x00000012 + 00014483 0x000022d3 call 0x00003881 + 00014484 0x000022d4 branch 0x00007fe7 , 0x00000005 + 00014485 0x000022d5 increase 0x00000004 , 0x00000011 + 00014486 0x000022d6 loop 0x00003893 + 00014487 0x000022d7 rtn + 00014488 0x000022db fetch 0x00000001 , 0x00000004 + 00014489 0x000022dc increase 0x00000001 , 0x0000003f + 00014490 0x000022dd store 0x00000001 , 0x00000004 + 00014491 0x000022de arg 0x000002e5 , 0x00000013 + 00014492 0x000022e1 ifetch 0x00000002 , 0x00000013 + 00014493 0x000022e2 arg 0x000055aa , 0x00000002 + 00014494 0x000022e3 isub 0x00000002 , 0x0000003e + 00014495 0x000022e4 nrtn 0x00000005 + 00014496 0x000022e5 copy 0x00000006 , 0x00000013 + 00014497 0x000022e6 ifetcht 0x00000003 , 0x00000013 + 00014498 0x000022e7 setarg 0x00ffffff + 00014499 0x000022e8 isub 0x00000002 , 0x0000003e + 00014500 0x000022e9 branch 0x000038a8 , 0x00000005 + 00014501 0x000022ea call 0x0000388d + 00014502 0x000022eb branch 0x000038a8 , 0x00000028 + 00014503 0x000022ec rtn + 00014504 0x000022ef bpatch 0x000000db , 0x0000401b + 00014505 0x000022f0 increase 0x00000004 , 0x00000013 + 00014506 0x000022f1 ifetch 0x00000001 , 0x00000013 + 00014507 0x000022f2 fetcht 0x00000001 , 0x000046f6 + 00014508 0x000022f3 isub 0x00000002 , 0x0000003e + 00014509 0x000022f4 rtn 0x00000005 + 00014510 0x000022f5 store 0x00000001 , 0x000046f6 + 00014511 0x000022f6 fetch 0x00000001 , 0x00000003 + 00014512 0x000022f7 increase 0x00000001 , 0x0000003f + 00014513 0x000022f8 store 0x00000001 , 0x00000003 + 00014514 0x000022fa increase 0x00000001 , 0x00000013 + 00014515 0x000022fb ifetch 0x00000001 , 0x00000013 + 00014516 0x000022fc store 0x00000001 , 0x000046f5 + 00014517 0x000022fd copy 0x0000003f , 0x00000039 + 00014518 0x000022fe rtn 0x00000034 + 00014519 0x00002300 ifetch 0x00000001 , 0x00000006 + 00014520 0x00002301 beq 0x00000000 , 0x000038c2 + 00014521 0x00002302 beq 0x00000001 , 0x000038cf + 00014522 0x00002303 beq 0x00000002 , 0x000038d4 + 00014523 0x00002304 beq 0x00000003 , 0x000038d9 + 00014524 0x00002305 beq 0x00000004 , 0x000038de + 00014525 0x00002306 beq 0x00000005 , 0x000038e3 + 00014526 0x00002307 beq 0x00000006 , 0x000038e8 + 00014527 0x00002308 beq 0x000000ff , 0x000038ea + 00014528 0x00002309 loop 0x000038b7 + 00014529 0x0000230a rtn + 00014530 0x0000230d copy 0x00000006 , 0x00000013 + 00014531 0x0000230e fetch 0x00000001 , 0x0000469a + 00014532 0x0000230f store 0x00000001 , 0x00000a9a + 00014533 0x00002310 arg 0x00000000 , 0x00000002 + 00014534 0x00002312 storet 0x00000001 , 0x00000a9b + 00014535 0x00002313 setarg 0x00002710 + 00014536 0x00002314 store 0x00000003 , 0x00000a9c + 00014537 0x00002315 ifetch 0x00000001 , 0x00000013 + 00014538 0x00002316 store 0x00000001 , 0x00000a9f + 00014539 0x00002317 call 0x000069ae + 00014540 0x00002318 and 0x00000013 , 0x00000001 , 0x00000006 + 00014541 0x00002319 loop 0x000038b7 + 00014542 0x0000231a rtn + 00014543 0x0000231c copy 0x00000013 , 0x00000006 + 00014544 0x0000231d fetch 0x00000001 , 0x0000469b + 00014545 0x0000231e store 0x00000001 , 0x00000a9a + 00014546 0x0000231f arg 0x00000001 , 0x00000002 + 00014547 0x00002320 branch 0x000038c6 + 00014548 0x00002322 copy 0x00000013 , 0x00000006 + 00014549 0x00002323 fetch 0x00000001 , 0x0000469c + 00014550 0x00002324 store 0x00000001 , 0x00000a9a + 00014551 0x00002325 arg 0x00000002 , 0x00000002 + 00014552 0x00002326 branch 0x000038c6 + 00014553 0x00002328 copy 0x00000013 , 0x00000006 + 00014554 0x00002329 fetch 0x00000001 , 0x0000469d + 00014555 0x0000232a store 0x00000001 , 0x00000a9a + 00014556 0x0000232b arg 0x00000003 , 0x00000002 + 00014557 0x0000232c branch 0x000038c6 + 00014558 0x0000232e copy 0x00000013 , 0x00000006 + 00014559 0x0000232f fetch 0x00000001 , 0x0000469e + 00014560 0x00002330 store 0x00000001 , 0x00000a9a + 00014561 0x00002331 arg 0x00000004 , 0x00000002 + 00014562 0x00002332 branch 0x000038c6 + 00014563 0x00002334 copy 0x00000013 , 0x00000006 + 00014564 0x00002335 fetch 0x00000001 , 0x0000469f + 00014565 0x00002336 store 0x00000001 , 0x00000a9a + 00014566 0x00002337 arg 0x00000005 , 0x00000002 + 00014567 0x00002338 branch 0x000038c6 + 00014568 0x0000233b ifetch 0x00000001 , 0x00000006 + 00014569 0x0000233c rtn + 00014570 0x0000233f copy 0x00000006 , 0x00000013 + 00014571 0x00002340 fetch 0x00000001 , 0x000046a0 + 00014572 0x00002341 bne 0x00000001 , 0x000038ee + 00014573 0x00002342 call 0x000038f0 + 00014574 0x00002344 and 0x00000013 , 0x00000004 , 0x00000006 + 00014575 0x00002345 rtn + 00014576 0x00002347 bpatch 0x000000dc , 0x0000401b + 00014577 0x00002348 call 0x00003871 + 00014578 0x00002349 branch 0x000038fe , 0x00000028 + 00014579 0x0000234a fetch 0x00000001 , 0x000046a4 + 00014580 0x0000234b copy 0x0000003f , 0x00000002 + 00014581 0x0000234c increase 0x00000001 , 0x0000003f + 00014582 0x0000234d store 0x00000001 , 0x000046a4 + 00014583 0x0000234e call 0x00003867 + 00014584 0x0000234f lshift2 0x00000002 , 0x00000002 + 00014585 0x00002350 setarg 0x000046a5 + 00014586 0x00002351 iadd 0x00000002 , 0x00000005 + 00014587 0x00002352 ifetch 0x00000004 , 0x00000013 + 00014588 0x00002353 istore 0x00000004 , 0x00000005 + 00014589 0x00002354 branch 0x00003903 + 00014590 0x00002356 add 0x00000013 , 0x00000003 , 0x00000006 + 00014591 0x00002357 ifetch 0x00000001 , 0x00000006 + 00014592 0x00002358 rtn 0x00000034 + 00014593 0x00002359 ifetch 0x00000004 , 0x00000013 + 00014594 0x0000235a istore 0x00000004 , 0x00000011 + 00014595 0x0000235c arg 0x000046a4 , 0x00000011 + 00014596 0x0000235d arg 0x00000000 , 0x00000012 + 00014597 0x0000235e arg 0x00000051 , 0x00000002 + 00014598 0x0000235f branch 0x00006606 + 00014599 0x00002367 fetcht 0x00000001 , 0x0000469a + 00014600 0x00002368 call 0x00006825 + 00014601 0x00002369 rtn + 00014602 0x0000236f fetcht 0x00000001 , 0x0000469a + 00014603 0x00002370 call 0x00006829 + 00014604 0x00002373 fetcht 0x00000001 , 0x0000469a + 00014605 0x00002374 call 0x00006825 + 00014606 0x00002377 call 0x0000391d + 00014607 0x00002379 fetch 0x00000001 , 0x000046a7 + 00014608 0x0000237a nrtn 0x00000034 + 00014609 0x0000237c call 0x00002c29 + 00014610 0x0000237d hfetch 0x00000004 , 0x00008138 + 00014611 0x0000237e set0 0x0000000f , 0x0000003f + 00014612 0x0000237f hstore 0x00000004 , 0x0000804c + 00014613 0x00002380 call 0x00002c21 + 00014614 0x00002381 arg 0xffffffff , 0x00000002 + 00014615 0x00002382 branch 0x00002b2a + 00014616 0x00002385 fetch 0x00000001 , 0x000046a7 + 00014617 0x00002386 branch 0x000056f9 , 0x00000034 + 00014618 0x00002387 increase 0xffffffff , 0x0000003f + 00014619 0x00002388 store 0x00000001 , 0x000046a7 + 00014620 0x00002389 branch 0x000056f9 + 00014621 0x0000238c mul32 0x0000003f , 0x00000014 , 0x0000003f + 00014622 0x0000238d arg 0x000046a8 , 0x00000006 + 00014623 0x0000238e iadd 0x00000006 , 0x00000006 + 00014624 0x0000238f ifetch 0x00000001 , 0x00000006 + 00014625 0x00002390 rtn 0x00000034 + 00014626 0x00002391 copy 0x0000003f , 0x00000011 + 00014627 0x00002392 copy 0x00000011 , 0x00000039 + 00014628 0x00002393 arg 0x00004372 , 0x00000005 + 00014629 0x00002394 call 0x00007f01 + 00014630 0x00002395 copy 0x00000011 , 0x0000003f + 00014631 0x00002396 increase 0x00000002 , 0x0000003f + 00014632 0x00002397 store 0x00000001 , 0x0000436f + 00014633 0x00002398 rtn + 00014634 0x000023a1 rtn 0x0000002b + 00014635 0x000023a2 call 0x000057a3 + 00014636 0x000023a3 call 0x000068a8 + 00014637 0x000023a4 setarg 0x00003982 + 00014638 0x000023a5 store 0x00000002 , 0x000041f3 + 00014639 0x000023a6 setarg 0x0000396e + 00014640 0x000023a7 store 0x00000002 , 0x000041f1 + 00014641 0x000023a8 setarg 0x00003986 + 00014642 0x000023a9 store 0x00000002 , 0x000041f5 + 00014643 0x000023aa setarg 0x0000396d + 00014644 0x000023ab store 0x00000002 , 0x000041ef + 00014645 0x000023ac setarg 0x00003969 + 00014646 0x000023ad store 0x00000002 , 0x000041e9 + 00014647 0x000023ae setarg 0x00003ab7 + 00014648 0x000023af store 0x00000002 , 0x000041fb + 00014649 0x000023b0 setarg 0x00003c32 + 00014650 0x000023b1 store 0x00000002 , 0x0000456f + 00014651 0x000023b2 setarg 0x00003cc2 + 00014652 0x000023b3 store 0x00000002 , 0x000041f9 + 00014653 0x000023b4 setarg 0x00003cd7 + 00014654 0x000023b5 store 0x00000002 , 0x000041fd + 00014655 0x000023b7 call 0x0000397f + 00014656 0x000023b8 bpatch 0x000000dd , 0x0000401b + 00014657 0x000023b9 call 0x00003945 + 00014658 0x000023ba call 0x00003964 + 00014659 0x000023bb call 0x00002c6f + 00014660 0x000023bc branch 0x00003c48 + 00014661 0x000023c0 fetch 0x00000004 , 0x000046aa + 00014662 0x000023c1 hstore 0x00000004 , 0x00008054 + 00014663 0x000023c3 fetch 0x00000004 , 0x000046ae + 00014664 0x000023c4 hstore 0x00000004 , 0x0000805a + 00014665 0x000023c6 hfetch 0x00000001 , 0x00008081 + 00014666 0x000023c7 or_into 0x00000004 , 0x0000003f + 00014667 0x000023c8 and_into 0x000000fc , 0x0000003f + 00014668 0x000023c9 hstore 0x00000001 , 0x00008081 + 00014669 0x000023ca hjam 0x00000000 , 0x00008062 + 00014670 0x000023cc fetch 0x00000002 , 0x000046aa + 00014671 0x000023cd hstore 0x00000002 , 0x00008058 + 00014672 0x000023ce fetch 0x00000002 , 0x000046ae + 00014673 0x000023cf hstore 0x00000002 , 0x0000805e + 00014674 0x000023d0 hstore 0x00000002 , 0x00008060 + 00014675 0x000023d2 hfetch 0x00000004 , 0x00008078 + 00014676 0x000023d3 set1 0x00000007 , 0x0000003f + 00014677 0x000023d4 hstore 0x00000004 , 0x00008078 + 00014678 0x000023d6 hfetch 0x00000002 , 0x00008050 + 00014679 0x000023d7 set0 0x0000000f , 0x0000003f + 00014680 0x000023d8 hstore 0x00000002 , 0x00008050 + 00014681 0x000023d9 call 0x000066ce + 00014682 0x000023da hjam 0x00000000 , 0x00008043 + 00014683 0x000023db hjam 0x00000081 , 0x00008062 + 00014684 0x000023dd fetch 0x00000001 , 0x000046bf + 00014685 0x000023de isolate1 0x00000000 , 0x0000003f + 00014686 0x000023df hfetcht 0x00000001 , 0x00008062 + 00014687 0x000023e0 setflag 0x00000001 , 0x00000004 , 0x00000002 + 00014688 0x000023e1 hstoret 0x00000001 , 0x00008062 + 00014689 0x000023e2 rtn + 00014690 0x000023e7 call 0x0000397f + 00014691 0x000023e8 branch 0x00003945 + 00014692 0x000023f0 fetcht 0x00000001 , 0x0000469e + 00014693 0x000023f1 call 0x0000680e + 00014694 0x000023f2 call 0x000039e6 + 00014695 0x000023f4 fetcht 0x00000001 , 0x0000469c + 00014696 0x000023f5 branch 0x000067fb + 00014697 0x000023f8 fetcht 0x00000001 , 0x0000469c + 00014698 0x000023f9 call 0x0000681d + 00014699 0x000023fa nbranch 0x000033d2 , 0x00000001 + 00014700 0x000023fb branch 0x000033d0 + 00014701 0x000023ff rtn + 00014702 0x00002402 call 0x00003970 + 00014703 0x00002403 branch 0x00003ce9 + 00014704 0x00002406 fetch 0x00000001 , 0x00004682 + 00014705 0x00002407 bbit0 0x00000004 , 0x0000397f + 00014706 0x00002408 bpatch 0x000000de , 0x0000401b + 00014707 0x00002409 setarg 0x00003eff + 00014708 0x0000240a fetcht 0x00000004 , 0x000046c5 + 00014709 0x0000240b iadd 0x00000002 , 0x00000002 + 00014710 0x0000240c copy 0x00000022 , 0x0000003f + 00014711 0x0000240d isub 0x00000002 , 0x0000003e + 00014712 0x0000240e nrtn 0x00000002 + 00014713 0x0000240f fetch 0x00000002 , 0x00004682 + 00014714 0x00002410 bbit1 0x00000005 , 0x0000397f + 00014715 0x00002411 fetch 0x00000001 , 0x000046bf + 00014716 0x00002412 rtnbit1 0x00000006 + 00014717 0x00002413 call 0x00003cec + 00014718 0x00002414 call 0x0000340e + 00014719 0x00002416 copy 0x00000022 , 0x0000003f + 00014720 0x00002417 store 0x00000004 , 0x000046c5 + 00014721 0x00002418 rtn + 00014722 0x0000241c call 0x00003ce9 + 00014723 0x0000241d call 0x0000526e + 00014724 0x0000241e nrtn 0x00000034 + 00014725 0x0000241f branch 0x000039eb + 00014726 0x00002423 copy 0x00000013 , 0x0000003f + 00014727 0x00002424 beq 0x00000001 , 0x000039d4 + 00014728 0x00002425 beq 0x00000002 , 0x000039a3 + 00014729 0x00002426 beq 0x00000004 , 0x000039d7 + 00014730 0x00002427 beq 0x00000005 , 0x000039c4 + 00014731 0x00002428 beq 0x00000008 , 0x000039aa + 00014732 0x00002429 beq 0x00000009 , 0x000039b1 + 00014733 0x0000242a beq 0x0000000a , 0x000039c9 + 00014734 0x0000242b beq 0x0000000b , 0x000039b6 + 00014735 0x0000242c beq 0x0000000c , 0x000039c2 + 00014736 0x0000242d beq 0x00000013 , 0x000039d7 + 00014737 0x0000242e beq 0x00000014 , 0x000039cf + 00014738 0x0000242f beq 0x00000015 , 0x000039c6 + 00014739 0x00002430 beq 0x00000021 , 0x000039ca + 00014740 0x00002431 beq 0x00000023 , 0x000039cb + 00014741 0x00002432 beq 0x00000024 , 0x000039ce + 00014742 0x00002433 beq 0x00000030 , 0x00003c8a + 00014743 0x00002434 beq 0x00000031 , 0x00003c8c + 00014744 0x00002435 beq 0x00000032 , 0x00003c9a + 00014745 0x00002436 beq 0x00000033 , 0x00003c98 + 00014746 0x00002437 beq 0x00000034 , 0x00003c84 + 00014747 0x00002438 beq 0x00000035 , 0x00003c73 + 00014748 0x00002439 beq 0x00000036 , 0x00003c82 + 00014749 0x0000243a beq 0x00000037 , 0x00003c8e + 00014750 0x0000243b beq 0x00000038 , 0x00003c90 + 00014751 0x0000243c beq 0x0000003b , 0x00003ca1 + 00014752 0x0000243d beq 0x0000003d , 0x00003c6a + 00014753 0x0000243e beq 0x00000041 , 0x000039d9 + 00014754 0x0000243f rtn + 00014755 0x00002443 call 0x0000397f + 00014756 0x00002444 fetch 0x00000001 , 0x00004665 + 00014757 0x00002445 ncall 0x00003c8e , 0x00000034 + 00014758 0x00002446 call 0x000039d7 + 00014759 0x00002447 fetch 0x00000002 , 0x00004682 + 00014760 0x00002448 rtnbit0 0x00000004 + 00014761 0x00002449 branch 0x000039b1 + 00014762 0x0000244c fetch 0x00000002 , 0x00004682 + 00014763 0x0000244d set1 0x00000004 , 0x0000003f + 00014764 0x0000244e store 0x00000002 , 0x00004682 + 00014765 0x0000244f fetch 0x00000001 , 0x000046a7 + 00014766 0x00002450 store 0x00000001 , 0x00004172 + 00014767 0x00002451 call 0x000039e6 + 00014768 0x00002452 branch 0x00003c1d + 00014769 0x00002457 fetch 0x00000002 , 0x00004682 + 00014770 0x00002458 rtnbit0 0x00000004 + 00014771 0x00002459 set0 0x00000004 , 0x0000003f + 00014772 0x0000245a store 0x00000002 , 0x00004682 + 00014773 0x0000245b branch 0x00003c21 + 00014774 0x00002461 call 0x0000397f + 00014775 0x00002464 fetch 0x00000002 , 0x00004042 + 00014776 0x00002465 rshift 0x0000003f , 0x0000003f + 00014777 0x00002466 fetcht 0x00000002 , 0x000041e3 + 00014778 0x00002467 isub 0x00000002 , 0x0000003e + 00014779 0x00002468 nbranch 0x000039bd , 0x00000005 + 00014780 0x00002469 branch 0x00003416 + 00014781 0x0000246b fetch 0x00000001 , 0x000046bf + 00014782 0x0000246c rtnbit1 0x00000005 + 00014783 0x0000246d hfetch 0x00000002 , 0x00008112 + 00014784 0x0000246e ncall 0x00003cf0 , 0x00000034 + 00014785 0x0000246f branch 0x0000340c + 00014786 0x00002472 call 0x00003cee + 00014787 0x00002473 branch 0x00003418 + 00014788 0x00002476 call 0x0000397f + 00014789 0x00002477 branch 0x000039dd + 00014790 0x0000247a call 0x00005816 + 00014791 0x0000247b call 0x000039d7 + 00014792 0x0000247c branch 0x00003c23 + 00014793 0x0000247f branch 0x000033dd + 00014794 0x00002483 branch 0x00003cee + 00014795 0x00002487 fetch 0x00000001 , 0x000046bf + 00014796 0x00002488 bbit0 0x00000005 , 0x0000340e + 00014797 0x00002489 branch 0x00003cf2 + 00014798 0x0000248d branch 0x00003cf2 + 00014799 0x00002491 call 0x000058ba + 00014800 0x00002492 call 0x000039dd + 00014801 0x00002493 fetch 0x00000001 , 0x000046a8 + 00014802 0x00002494 store 0x00000001 , 0x00004172 + 00014803 0x00002495 branch 0x00003c1f + 00014804 0x00002499 jam 0x00000000 , 0x00004661 + 00014805 0x0000249a call 0x00003cee + 00014806 0x0000249b branch 0x00003cf2 + 00014807 0x000024a0 call 0x00003a52 + 00014808 0x000024a1 branch 0x000039db + 00014809 0x000024a5 call 0x00005cc9 + 00014810 0x000024a6 branch 0x00005b02 + 00014811 0x000024aa fetcht 0x00000001 , 0x0000469e + 00014812 0x000024ab branch 0x00006829 + 00014813 0x000024ae call 0x000039df + 00014814 0x000024af branch 0x000039e6 + 00014815 0x000024b2 fetch 0x00000001 , 0x000046a1 + 00014816 0x000024b3 isolate1 0x00000000 , 0x0000003f + 00014817 0x000024b4 call 0x000033f0 , 0x00000001 + 00014818 0x000024b5 fetch 0x00000001 , 0x000046a1 + 00014819 0x000024b6 isolate1 0x00000001 , 0x0000003f + 00014820 0x000024b7 call 0x000033f8 , 0x00000001 + 00014821 0x000024b8 rtn + 00014822 0x000024ba fetcht 0x00000001 , 0x0000469e + 00014823 0x000024bb branch 0x00006825 + 00014824 0x000024be fetch 0x00000001 , 0x0000456b + 00014825 0x000024bf rtneq 0x00000000 + 00014826 0x000024c0 branch 0x00006c28 + 00014827 0x000024c3 hfetch 0x00000001 , 0x0000810c + 00014828 0x000024c4 bbit1 0x00000003 , 0x000039e8 + 00014829 0x000024c5 call 0x000066cb + 00014830 0x000024c6 ifetch 0x00000001 , 0x00000003 + 00014831 0x000024c7 bne 0x00000001 , 0x00003a01 + 00014832 0x000024c8 hfetch 0x00000002 , 0x00008112 + 00014833 0x000024c9 sub 0x0000003f , 0x00000002 , 0x0000003e + 00014834 0x000024ca rtn 0x00000002 + 00014835 0x000024cb ifetch 0x00000001 , 0x00000003 + 00014836 0x000024cc store 0x00000001 , 0x00000b03 + 00014837 0x000024cd ifetcht 0x00000001 , 0x00000003 + 00014838 0x000024ce copy 0x00000003 , 0x00000011 + 00014839 0x000024cf storet 0x00000001 , 0x00000b04 + 00014840 0x000024d0 add 0x00000002 , 0x00000003 , 0x00000002 + 00014841 0x000024d1 hfetch 0x00000002 , 0x00008112 + 00014842 0x000024d2 isub 0x00000002 , 0x00000002 + 00014843 0x000024d3 nrtn 0x00000002 + 00014844 0x000024d4 jam 0x00000001 , 0x00000b05 + 00014845 0x000024d5 call 0x00003a17 + 00014846 0x000024d6 fetch 0x00000001 , 0x00000b05 + 00014847 0x000024d7 rtneq 0x00000000 + 00014848 0x000024d8 branch 0x00003a12 + 00014849 0x000024db call 0x00007ec1 + 00014850 0x000024dc call 0x00003c79 + 00014851 0x000024dd branch 0x00003a04 + 00014852 0x000024e1 bpatch 0x000000df , 0x0000401b + 00014853 0x000024e2 hfetch 0x00000002 , 0x00008112 + 00014854 0x000024e3 rtn 0x00000034 + 00014855 0x000024e4 call 0x000066cb + 00014856 0x000024e5 ifetch 0x00000001 , 0x00000003 + 00014857 0x000024e6 sub 0x0000003f , 0x00000001 , 0x0000003e + 00014858 0x000024e7 ncall 0x00003a16 , 0x00000005 + 00014859 0x000024e8 nbranch 0x00003a04 , 0x00000005 + 00014860 0x000024e9 ifetch 0x00000001 , 0x00000003 + 00014861 0x000024ea rtneq 0x00000005 + 00014862 0x000024eb rtneq 0x00000029 + 00014863 0x000024ec increase 0xffffffff , 0x00000003 + 00014864 0x000024ed call 0x00003a16 + 00014865 0x000024ee branch 0x00003a04 + 00014866 0x000024f1 call 0x000066cb + 00014867 0x000024f2 increase 0x00000002 , 0x00000003 + 00014868 0x000024f3 ifetch 0x00000001 , 0x00000003 + 00014869 0x000024f4 iadd 0x00000003 , 0x00000003 + 00014870 0x000024f6 branch 0x000066c8 + 00014871 0x000024fa bpatch 0x000000e0 , 0x0000401c + 00014872 0x000024fb fetch 0x00000001 , 0x00000b03 + 00014873 0x000024fc beq 0x00000000 , 0x00003a3f + 00014874 0x000024fd beq 0x00000001 , 0x00003a44 + 00014875 0x000024fe beq 0x00000002 , 0x00003a49 + 00014876 0x000024ff beq 0x00000003 , 0x00003a5f + 00014877 0x00002500 beq 0x00000004 , 0x00003a6b + 00014878 0x00002501 beq 0x00000005 , 0x00003a75 + 00014879 0x00002502 beq 0x00000009 , 0x00003a9a + 00014880 0x00002503 beq 0x0000000b , 0x00003ad7 + 00014881 0x00002504 beq 0x0000000c , 0x00003ad8 + 00014882 0x00002505 beq 0x0000000d , 0x00003aec + 00014883 0x00002506 beq 0x0000000e , 0x00003af4 + 00014884 0x00002507 beq 0x0000000f , 0x00003afa + 00014885 0x00002508 beq 0x00000010 , 0x00003b06 + 00014886 0x00002509 beq 0x00000011 , 0x00003b0e + 00014887 0x0000250a beq 0x00000012 , 0x00003b12 + 00014888 0x0000250b beq 0x00000026 , 0x00003b16 + 00014889 0x0000250c beq 0x00000028 , 0x00003b1d + 00014890 0x0000250d beq 0x00000029 , 0x00003b2d + 00014891 0x0000250e beq 0x0000002a , 0x00003b36 + 00014892 0x0000250f beq 0x0000002b , 0x00003b69 + 00014893 0x00002510 beq 0x0000002c , 0x00003b6f + 00014894 0x00002511 beq 0x00000030 , 0x00003b76 + 00014895 0x00002512 beq 0x00000031 , 0x00003b7c + 00014896 0x00002513 beq 0x00000032 , 0x00003b90 + 00014897 0x00002514 beq 0x00000033 , 0x00003b98 + 00014898 0x00002515 beq 0x00000034 , 0x00003bbb + 00014899 0x00002516 beq 0x00000035 , 0x00003bc4 + 00014900 0x00002517 beq 0x00000036 , 0x00003bcd + 00014901 0x00002518 beq 0x00000037 , 0x00003bd7 + 00014902 0x00002519 beq 0x00000038 , 0x00003bda + 00014903 0x0000251a beq 0x00000040 , 0x00003be2 + 00014904 0x0000251b beq 0x00000042 , 0x00003bec + 00014905 0x0000251c beq 0x00000048 , 0x00003bf1 + 00014906 0x0000251d beq 0x00000049 , 0x00003bfc + 00014907 0x0000251e beq 0x00000051 , 0x00003c02 + 00014908 0x0000251f beq 0x00000061 , 0x00003c06 + 00014909 0x00002520 beq 0x000000ff , 0x00003c15 + 00014910 0x00002521 branch 0x00003c17 + 00014911 0x00002527 fetch 0x00000001 , 0x00000b04 + 00014912 0x00002528 bne 0x00000006 , 0x00003c17 + 00014913 0x00002529 ifetch 0x00000006 , 0x00000003 + 00014914 0x0000252a store 0x00000006 , 0x000040a0 + 00014915 0x0000252b branch 0x00003c1a + 00014916 0x0000252f fetch 0x00000001 , 0x00000b04 + 00014917 0x00002530 bne 0x00000006 , 0x00003c17 + 00014918 0x00002531 ifetch 0x00000006 , 0x00000003 + 00014919 0x00002532 store 0x00000006 , 0x000044a0 + 00014920 0x00002533 branch 0x00003c1a + 00014921 0x00002538 fetch 0x00000001 , 0x00000b04 + 00014922 0x00002539 bne 0x00000001 , 0x00003c17 + 00014923 0x0000253a copy 0x00000011 , 0x00000003 + 00014924 0x0000253b call 0x00003c1a + 00014925 0x0000253c ifetcht 0x00000001 , 0x00000003 + 00014926 0x0000253d storet 0x00000001 , 0x000046a9 + 00014927 0x0000253e fetch 0x00000002 , 0x00004682 + 00014928 0x0000253f rtnbit1 0x00000009 + 00014929 0x00002540 rtnbit1 0x00000000 + 00014930 0x00002542 fetch 0x00000001 , 0x000046a1 + 00014931 0x00002543 isolate1 0x00000000 , 0x0000003f + 00014932 0x00002544 nbranch 0x00003a58 , 0x00000001 + 00014933 0x00002545 fetcht 0x00000001 , 0x000046a9 + 00014934 0x00002546 and 0x00000002 , 0x00000003 , 0x0000003f + 00014935 0x00002547 store 0x00000001 , 0x00004093 + 00014936 0x00002549 fetch 0x00000001 , 0x000046a1 + 00014937 0x0000254a isolate1 0x00000001 , 0x0000003f + 00014938 0x0000254b nrtn 0x00000001 + 00014939 0x0000254c fetcht 0x00000001 , 0x000046a9 + 00014940 0x0000254d isolate1 0x00000002 , 0x00000002 + 00014941 0x0000254e branch 0x000033fa , 0x00000001 + 00014942 0x0000254f branch 0x000033f8 + 00014943 0x00002554 fetch 0x00000001 , 0x00000b04 + 00014944 0x00002555 sub 0x0000003f , 0x00000043 , 0x0000003e + 00014945 0x00002556 nbranch 0x00003c17 , 0x00000002 + 00014946 0x00002557 store 0x00000001 , 0x00004515 + 00014947 0x00002558 arg 0x00000008 , 0x00000039 + 00014948 0x00002559 call 0x00007ec6 + 00014949 0x0000255a fetch 0x00000001 , 0x00000b04 + 00014950 0x0000255b copy 0x0000003f , 0x00000039 + 00014951 0x0000255c copy 0x00000011 , 0x00000003 + 00014952 0x0000255d arg 0x00004516 , 0x00000005 + 00014953 0x0000255e call 0x000066ea + 00014954 0x0000255f branch 0x00003c1a + 00014955 0x00002564 fetch 0x00000001 , 0x00000b04 + 00014956 0x00002565 sub 0x0000003f , 0x0000001d , 0x0000003e + 00014957 0x00002566 nbranch 0x00003c17 , 0x00000002 + 00014958 0x00002567 store 0x00000001 , 0x000043af + 00014959 0x00002568 copy 0x0000003f , 0x00000039 + 00014960 0x00002569 copy 0x00000011 , 0x00000003 + 00014961 0x0000256a arg 0x000043b0 , 0x00000005 + 00014962 0x0000256b call 0x000066ea + 00014963 0x0000256c call 0x000057a3 + 00014964 0x0000256d branch 0x00003c1a + 00014965 0x00002572 fetch 0x00000001 , 0x00004682 + 00014966 0x00002573 bbit0 0x00000004 , 0x00003c17 + 00014967 0x00002574 call 0x000033ba + 00014968 0x00002575 branch 0x00003a86 , 0x00000001 + 00014969 0x00002576 jam 0x00000000 , 0x00000b05 + 00014970 0x00002578 call 0x0000397f + 00014971 0x00002579 fetch 0x00000001 , 0x00004568 + 00014972 0x0000257a rtn 0x00000034 + 00014973 0x0000257b fetch 0x00000002 , 0x00004573 + 00014974 0x0000257c bne 0x00000000 , 0x00003a84 + 00014975 0x0000257d fetch 0x00000001 , 0x00000b04 + 00014976 0x0000257e store 0x00000002 , 0x00004573 + 00014977 0x00002580 copy 0x00000011 , 0x00000003 + 00014978 0x00002583 copy 0x00000003 , 0x0000003f + 00014979 0x00002584 store 0x00000002 , 0x00004571 + 00014980 0x00002586 call 0x00003a88 + 00014981 0x00002587 branch 0x00006c4d + 00014982 0x0000258a jam 0x00000000 , 0x00000b05 + 00014983 0x0000258b branch 0x00003cd1 + 00014984 0x0000258e call 0x00003a8e + 00014985 0x0000258f fetch 0x00000002 , 0x00004573 + 00014986 0x00002590 fetcht 0x00000002 , 0x0000469f + 00014987 0x00002591 isub 0x00000002 , 0x0000003f + 00014988 0x00002592 store 0x00000002 , 0x00004573 + 00014989 0x00002593 rtn + 00014990 0x00002596 fetch 0x00000002 , 0x00004573 + 00014991 0x00002597 arg 0x0000006e , 0x00000002 + 00014992 0x00002598 call 0x00007fdd + 00014993 0x00002599 fetcht 0x00000002 , 0x0000456c + 00014994 0x0000259a call 0x00007fdd + 00014995 0x0000259b fetcht 0x00000002 , 0x0000455e + 00014996 0x0000259c call 0x00007fdd + 00014997 0x0000259d store 0x00000002 , 0x0000469f + 00014998 0x0000259e rtn + 00014999 0x000025a1 jam 0x00000001 , 0x00000b05 + 00015000 0x000025a2 jam 0x00000005 , 0x00000b03 + 00015001 0x000025a3 branch 0x00003c1a + 00015002 0x000025a8 fetch 0x00000002 , 0x00004682 + 00015003 0x000025a9 bbit0 0x00000009 , 0x00003c17 + 00015004 0x000025aa call 0x00003ad4 + 00015005 0x000025ab branch 0x00003c17 , 0x00000028 + 00015006 0x000025ac jam 0x00000000 , 0x00000b05 + 00015007 0x000025ad fetch 0x00000001 , 0x000046bf + 00015008 0x000025ae bbit1 0x00000004 , 0x00003ab4 + 00015009 0x000025af fetch 0x00000001 , 0x000046c0 + 00015010 0x000025b0 nrtn 0x00000034 + 00015011 0x000025b1 jam 0x00000001 , 0x00000b05 + 00015012 0x000025b2 ifetch 0x00000002 , 0x00000003 + 00015013 0x000025b3 store 0x00000002 , 0x000046c1 + 00015014 0x000025b4 copy 0x00000003 , 0x0000003f + 00015015 0x000025b5 store 0x00000002 , 0x000046c3 + 00015016 0x000025b6 fetch 0x00000001 , 0x00000b04 + 00015017 0x000025b7 pincrease 0xfffffffe + 00015018 0x000025b8 nbranch 0x00003c17 , 0x00000002 + 00015019 0x000025b9 branch 0x00003c17 , 0x00000005 + 00015020 0x000025ba store 0x00000001 , 0x000046c0 + 00015021 0x000025bb jam 0x00000000 , 0x00000b05 + 00015022 0x000025bc call 0x00005814 + 00015023 0x000025bd call 0x00003ab7 + 00015024 0x000025be call 0x00003ab7 + 00015025 0x000025bf call 0x00003ab7 + 00015026 0x000025c0 fetch 0x00000001 , 0x000046bf + 00015027 0x000025c1 rtnbit0 0x00000004 + 00015028 0x000025c3 jam 0x00000001 , 0x00000b05 + 00015029 0x000025c4 call 0x00003cf6 + 00015030 0x000025c5 branch 0x00003c1a + 00015031 0x000025c8 fetch 0x00000001 , 0x000046c0 + 00015032 0x000025c9 rtn 0x00000034 + 00015033 0x000025ca call 0x00005892 + 00015034 0x000025cb nrtn 0x00000034 + 00015035 0x000025cc call 0x00003acf + 00015036 0x000025cd bpatch 0x000000e1 , 0x0000401c + 00015037 0x000025ce add 0x00000002 , 0xfffffffd , 0x0000003f + 00015038 0x000025cf fetcht 0x00000001 , 0x000046c0 + 00015039 0x000025d0 call 0x00007fdd + 00015040 0x000025d1 copy 0x0000003f , 0x00000011 + 00015041 0x000025d2 copy 0x00000002 , 0x0000003f + 00015042 0x000025d3 isub 0x00000011 , 0x0000003f + 00015043 0x000025d4 store 0x00000001 , 0x000046c0 + 00015044 0x000025d5 fetcht 0x00000002 , 0x000046c1 + 00015045 0x000025d6 call 0x00005a64 + 00015046 0x000025d7 fetch 0x00000002 , 0x000046c3 + 00015047 0x000025d8 copy 0x0000003f , 0x00000003 + 00015048 0x000025d9 copy 0x00000011 , 0x00000039 + 00015049 0x000025da call 0x000066ea + 00015050 0x000025db copy 0x00000003 , 0x0000003f + 00015051 0x000025dc store 0x00000002 , 0x000046c3 + 00015052 0x000025dd fetch 0x00000001 , 0x000046c0 + 00015053 0x000025de nrtn 0x00000034 + 00015054 0x000025df branch 0x00003cf4 + 00015055 0x000025e4 arg 0x00000017 , 0x00000002 + 00015056 0x000025e5 fetch 0x00000001 , 0x000046bf + 00015057 0x000025e6 rtnbit1 0x00000001 + 00015058 0x000025e7 fetcht 0x00000002 , 0x000044a8 + 00015059 0x000025e8 rtn + 00015060 0x000025eb fetch 0x00000001 , 0x000046bf + 00015061 0x000025ec bbit1 0x00000002 , 0x00005a42 + 00015062 0x000025ed branch 0x00007fe9 + 00015063 0x000025f2 branch 0x00003c4c + 00015064 0x000025f7 copy 0x00000011 , 0x00000003 + 00015065 0x000025f8 ifetch 0x00000001 , 0x00000003 + 00015066 0x000025f9 beq 0x00000000 , 0x00003adf + 00015067 0x000025fa beq 0x00000001 , 0x00003ae2 + 00015068 0x000025fb beq 0x00000002 , 0x00003ae8 + 00015069 0x000025fc beq 0x00000003 , 0x00003aea + 00015070 0x000025fd branch 0x00003c17 + 00015071 0x000025ff call 0x0000612b + 00015072 0x00002600 jam 0x00000000 , 0x0000465a + 00015073 0x00002601 branch 0x00003c1a + 00015074 0x00002603 setarg 0x00040003 + 00015075 0x00002605 store 0x00000003 , 0x0000465b + 00015076 0x00002606 store 0x00000001 , 0x00004662 + 00015077 0x00002607 call 0x00006124 + 00015078 0x00002608 jam 0x00000001 , 0x0000465a + 00015079 0x00002609 branch 0x00003c1a + 00015080 0x0000260b setarg 0x00040002 + 00015081 0x0000260c branch 0x00003ae3 + 00015082 0x0000260f setarg 0x00040001 + 00015083 0x00002610 branch 0x00003ae3 + 00015084 0x00002614 fetch 0x00000001 , 0x00000b04 + 00015085 0x00002615 sub 0x0000003f , 0x00000010 , 0x0000003e + 00015086 0x00002616 nbranch 0x00003c17 , 0x00000002 + 00015087 0x00002617 store 0x00000001 , 0x00004689 + 00015088 0x00002618 copy 0x0000003f , 0x00000039 + 00015089 0x00002619 arg 0x0000468a , 0x00000005 + 00015090 0x0000261a call 0x000066fd + 00015091 0x0000261b branch 0x00003c1a + 00015092 0x00002620 copy 0x00000011 , 0x00000003 + 00015093 0x00002621 ifetch 0x00000001 , 0x00000003 + 00015094 0x00002622 hfetcht 0x00000001 , 0x00008062 + 00015095 0x00002623 nsetflag 0x00000034 , 0x00000004 , 0x00000002 + 00015096 0x00002624 hstoret 0x00000001 , 0x00008062 + 00015097 0x00002625 branch 0x00003c1a + 00015098 0x0000262a fetch 0x00000001 , 0x00000b04 + 00015099 0x0000262b copy 0x0000003f , 0x00000039 + 00015100 0x0000262c copy 0x00000011 , 0x00000003 + 00015101 0x0000262d call 0x00007f58 + 00015102 0x0000262e setarg 0x016e3600 + 00015103 0x0000262f idiv 0x00000002 + 00015104 0x00002630 call 0x00007f86 + 00015105 0x00002631 quotient 0x0000003f + 00015106 0x00002633 store 0x00000002 , 0x00004243 + 00015107 0x00002634 call 0x00003c1a + 00015108 0x00002635 call 0x00007f9e + 00015109 0x00002636 branch 0x000066ce + 00015110 0x0000263b arg 0x00000002 , 0x00000011 + 00015111 0x0000263c arg 0x0000469a , 0x00000012 + 00015112 0x0000263d arg 0x00000000 , 0x00000002 + 00015113 0x0000263e branch 0x00003c25 + 00015114 0x00002640 store 0x00000002 , 0x00000ac2 + 00015115 0x00002641 arg 0x00000ac2 , 0x00000012 + 00015116 0x00002642 arg 0x00000000 , 0x00000002 + 00015117 0x00002643 branch 0x00003c25 + 00015118 0x00002648 fetch 0x00000002 , 0x00004682 + 00015119 0x00002649 bbit0 0x00000000 , 0x00003c17 + 00015120 0x0000264b call 0x00003c1a + 00015121 0x0000264c branch 0x000033e9 + 00015122 0x00002651 fetch 0x00000002 , 0x00004682 + 00015123 0x00002652 bbit0 0x00000009 , 0x00003c17 + 00015124 0x00002654 call 0x00003c1a + 00015125 0x00002655 branch 0x00003402 + 00015126 0x0000265c fetch 0x00000001 , 0x00000b04 + 00015127 0x0000265d copy 0x0000003f , 0x00000039 + 00015128 0x0000265e copy 0x00000011 , 0x00000003 + 00015129 0x0000265f fetch 0x00000002 , 0x00004215 + 00015130 0x00002660 icopy 0x00000005 + 00015131 0x00002661 call 0x000066ea + 00015132 0x00002662 branch 0x00003c1a + 00015133 0x00002667 fetch 0x00000001 , 0x00004682 + 00015134 0x00002668 bbit0 0x00000000 , 0x00003c17 + 00015135 0x00002669 ifetch 0x00000001 , 0x00000003 + 00015136 0x0000266a fetcht 0x00000001 , 0x00004661 + 00015137 0x0000266b setflag 0x00000034 , 0x00000000 , 0x00000002 + 00015138 0x0000266c set1 0x00000007 , 0x00000002 + 00015139 0x0000266d storet 0x00000001 , 0x00004661 + 00015140 0x0000266f call 0x00003c1a + 00015141 0x00002671 fetch 0x00000001 , 0x00004661 + 00015142 0x00002672 bbit1 0x00000006 , 0x00003b2b + 00015143 0x00002673 rtn + 00015144 0x00002676 jam 0x00000000 , 0x00004661 + 00015145 0x00002677 jam 0x00000021 , 0x00000a99 + 00015146 0x00002678 branch 0x00007d8f + 00015147 0x0000267c bbit1 0x00000000 , 0x00005f95 + 00015148 0x0000267d branch 0x00003b28 + 00015149 0x00002682 fetch 0x00000001 , 0x00004682 + 00015150 0x00002683 rtnbit0 0x00000004 + 00015151 0x00002684 fetch 0x00000001 , 0x0000456b + 00015152 0x00002685 rtneq 0x00000000 + 00015153 0x00002686 ifetch 0x00000001 , 0x00000003 + 00015154 0x00002687 fetcht 0x00000001 , 0x00004569 + 00015155 0x00002688 iadd 0x00000002 , 0x00000002 + 00015156 0x00002689 storet 0x00000001 , 0x00004569 + 00015157 0x0000268a rtn + 00015158 0x0000268f arg 0x00000040 , 0x00000039 + 00015159 0x00002690 arg 0x0000436f , 0x00000005 + 00015160 0x00002691 call 0x00007ed4 + 00015161 0x00002692 setarg 0x00000000 + 00015162 0x00002693 store 0x00000001 , 0x00000ab2 + 00015163 0x00002694 copy 0x00000011 , 0x00000003 + 00015164 0x00002696 copy 0x00000003 , 0x0000003f + 00015165 0x00002697 store 0x00000002 , 0x00000ab6 + 00015166 0x00002698 call 0x00003b64 + 00015167 0x0000269a fetch 0x00000001 , 0x00000ab2 + 00015168 0x0000269b fetcht 0x00000001 , 0x00000aa2 + 00015169 0x0000269c increase 0x00000001 , 0x00000002 + 00015170 0x0000269d iadd 0x00000002 , 0x0000003f + 00015171 0x0000269e store 0x00000001 , 0x00000ab2 + 00015172 0x000026a0 sub 0x0000003f , 0x0000001f , 0x0000003e + 00015173 0x000026a1 nbranch 0x00003b50 , 0x00000002 + 00015174 0x000026a3 fetcht 0x00000001 , 0x0000436f + 00015175 0x000026a4 setarg 0x00004370 + 00015176 0x000026a5 iadd 0x00000002 , 0x0000003f + 00015177 0x000026a6 store 0x00000002 , 0x00000abb + 00015178 0x000026a7 fetcht 0x00000001 , 0x00000aa2 + 00015179 0x000026a8 increase 0x00000001 , 0x00000002 + 00015180 0x000026a9 fetch 0x00000001 , 0x0000436f + 00015181 0x000026aa iadd 0x00000002 , 0x0000003f + 00015182 0x000026ab store 0x00000001 , 0x0000436f + 00015183 0x000026ac branch 0x00003b59 + 00015184 0x000026ae fetcht 0x00000001 , 0x0000438f + 00015185 0x000026af setarg 0x00004390 + 00015186 0x000026b0 iadd 0x00000002 , 0x0000003f + 00015187 0x000026b1 store 0x00000002 , 0x00000abb + 00015188 0x000026b2 fetcht 0x00000001 , 0x00000aa2 + 00015189 0x000026b3 increase 0x00000001 , 0x00000002 + 00015190 0x000026b4 fetch 0x00000001 , 0x0000438f + 00015191 0x000026b5 iadd 0x00000002 , 0x0000003f + 00015192 0x000026b6 store 0x00000001 , 0x0000438f + 00015193 0x000026b8 fetch 0x00000002 , 0x00000abb + 00015194 0x000026b9 copy 0x0000003f , 0x00000005 + 00015195 0x000026ba fetch 0x00000002 , 0x00000ab6 + 00015196 0x000026bb copy 0x0000003f , 0x00000003 + 00015197 0x000026bd copy 0x00000002 , 0x00000039 + 00015198 0x000026be call 0x000066ea + 00015199 0x000026c0 fetch 0x00000001 , 0x00000b04 + 00015200 0x000026c1 fetcht 0x00000001 , 0x00000ab2 + 00015201 0x000026c2 isub 0x00000002 , 0x0000003e + 00015202 0x000026c3 nbranch 0x00003b3c , 0x00000005 + 00015203 0x000026c4 branch 0x00003c1a + 00015204 0x000026c8 ifetch 0x00000001 , 0x00000003 + 00015205 0x000026c9 store 0x00000001 , 0x00000aa2 + 00015206 0x000026ca ifetch 0x00000001 , 0x00000003 + 00015207 0x000026cb store 0x00000001 , 0x00000aae + 00015208 0x000026cc rtn + 00015209 0x000026d1 arg 0x00000000 , 0x00000002 + 00015210 0x000026d2 arg 0x00000002 , 0x00000011 + 00015211 0x000026d3 fetch 0x00000002 , 0x000046b4 + 00015212 0x000026d4 store 0x00000002 , 0x00000ac2 + 00015213 0x000026d5 arg 0x00000ac2 , 0x00000012 + 00015214 0x000026d6 branch 0x00003c25 + 00015215 0x000026db fetch 0x00000001 , 0x00000b04 + 00015216 0x000026dc bne 0x00000001 , 0x00003c17 + 00015217 0x000026dd ifetch 0x00000001 , 0x00000003 + 00015218 0x000026de store 0x00000001 , 0x000046b2 + 00015219 0x000026df setarg 0x00000000 + 00015220 0x000026e0 store 0x00000002 , 0x000046b4 + 00015221 0x000026e1 branch 0x00003c1a + 00015222 0x000026e6 ifetch 0x00000004 , 0x00000003 + 00015223 0x000026e7 store 0x00000004 , 0x0000468a + 00015224 0x000026e8 jam 0x00000004 , 0x00004689 + 00015225 0x000026e9 jam 0x00000000 , 0x00004663 + 00015226 0x000026ea call 0x00003c1a + 00015227 0x000026eb branch 0x00005f31 + 00015228 0x000026f0 fetch 0x00000001 , 0x00000b04 + 00015229 0x000026f1 bne 0x00000003 , 0x00003c17 + 00015230 0x000026f2 ifetch 0x00000001 , 0x00000003 + 00015231 0x000026f3 beq 0x00000000 , 0x00003b82 + 00015232 0x000026f4 beq 0x00000001 , 0x00003b8a + 00015233 0x000026f5 branch 0x00003c17 + 00015234 0x000026f8 ifetcht 0x00000001 , 0x00000003 + 00015235 0x000026f9 ifetch 0x00000001 , 0x00000003 + 00015236 0x000026fa beq 0x00000002 , 0x00003b88 + 00015237 0x000026fb nsetflag 0x00000034 , 0x00000007 , 0x00000002 + 00015238 0x000026fc call 0x000067fb + 00015239 0x000026fd branch 0x00003c1a + 00015240 0x00002700 call 0x00006806 + 00015241 0x00002701 branch 0x00003c1a + 00015242 0x00002704 ifetcht 0x00000001 , 0x00000003 + 00015243 0x00002705 call 0x00006812 + 00015244 0x00002706 ifetch 0x00000001 , 0x00000003 + 00015245 0x00002707 isolate1 0x00000000 , 0x0000003f + 00015246 0x00002708 call 0x0000682c + 00015247 0x00002709 branch 0x00003c1a + 00015248 0x0000270e fetch 0x00000001 , 0x00000b04 + 00015249 0x0000270f bne 0x00000001 , 0x00003c17 + 00015250 0x00002710 ifetcht 0x00000001 , 0x00000003 + 00015251 0x00002711 call 0x0000681d + 00015252 0x00002712 setarg 0x00000000 + 00015253 0x00002713 nsetflag 0x00000001 , 0x00000000 , 0x0000003f + 00015254 0x00002714 arg 0x00000001 , 0x00000011 + 00015255 0x00002715 branch 0x00003b0a + 00015256 0x0000271a copy 0x00000011 , 0x00000003 + 00015257 0x0000271b ifetch 0x00000001 , 0x00000003 + 00015258 0x0000271c copy 0x0000003f , 0x00000002 + 00015259 0x0000271d beq 0x00000081 , 0x00003ba3 + 00015260 0x0000271e beq 0x00000082 , 0x00003ba8 + 00015261 0x0000271f beq 0x00000083 , 0x00003bae + 00015262 0x00002720 store 0x00000001 , 0x000044c6 + 00015263 0x00002721 beq 0x00000000 , 0x00003bb3 + 00015264 0x00002722 beq 0x00000001 , 0x00003bb6 + 00015265 0x00002723 beq 0x00000002 , 0x00003bb8 + 00015266 0x00002724 branch 0x00003c17 + 00015267 0x00002727 fetch 0x00000001 , 0x000044be + 00015268 0x00002728 branch 0x00003c17 , 0x00000034 + 00015269 0x00002729 storet 0x00000001 , 0x000044c6 + 00015270 0x0000272a jam 0x0000000d , 0x00004456 + 00015271 0x0000272b branch 0x00003bb4 + 00015272 0x0000272d fetch 0x00000001 , 0x000044be + 00015273 0x0000272e branch 0x00003c17 , 0x00000034 + 00015274 0x0000272f storet 0x00000001 , 0x000044c6 + 00015275 0x00002730 jam 0x0000000d , 0x00004456 + 00015276 0x00002731 jam 0x00000001 , 0x00004454 + 00015277 0x00002732 branch 0x00003c1a + 00015278 0x00002734 fetch 0x00000001 , 0x000044be + 00015279 0x00002735 branch 0x00003c17 , 0x00000034 + 00015280 0x00002736 storet 0x00000001 , 0x000044c6 + 00015281 0x00002737 jam 0x0000000d , 0x00004456 + 00015282 0x00002738 branch 0x00003bb9 + 00015283 0x0000273a jam 0x00000000 , 0x00004456 + 00015284 0x0000273c jam 0x00000003 , 0x00004454 + 00015285 0x0000273d branch 0x00003c1a + 00015286 0x0000273f jam 0x00000005 , 0x00004456 + 00015287 0x00002740 branch 0x00003bb4 + 00015288 0x00002742 jam 0x00000005 , 0x00004456 + 00015289 0x00002744 jam 0x00000000 , 0x00004454 + 00015290 0x00002745 branch 0x00003c1a + 00015291 0x0000274a fetch 0x00000001 , 0x00000b04 + 00015292 0x0000274b sub 0x0000003f , 0x0000001f , 0x0000003e + 00015293 0x0000274c nbranch 0x00003c17 , 0x00000002 + 00015294 0x0000274d store 0x00000001 , 0x0000436f + 00015295 0x0000274e copy 0x0000003f , 0x00000039 + 00015296 0x0000274f copy 0x00000011 , 0x00000003 + 00015297 0x00002750 arg 0x00004370 , 0x00000005 + 00015298 0x00002751 call 0x000066ea + 00015299 0x00002752 branch 0x00003c1a + 00015300 0x00002757 fetch 0x00000001 , 0x00000b04 + 00015301 0x00002758 sub 0x0000003f , 0x0000001f , 0x0000003e + 00015302 0x00002759 nbranch 0x00003c17 , 0x00000002 + 00015303 0x0000275a store 0x00000001 , 0x0000438f + 00015304 0x0000275b copy 0x0000003f , 0x00000039 + 00015305 0x0000275c copy 0x00000011 , 0x00000003 + 00015306 0x0000275d arg 0x00004390 , 0x00000005 + 00015307 0x0000275e call 0x000066ea + 00015308 0x0000275f branch 0x00003c1a + 00015309 0x00002764 fetch 0x00000002 , 0x00004682 + 00015310 0x00002765 bbit0 0x00000009 , 0x00003c17 + 00015311 0x00002766 fetch 0x00000001 , 0x00000b04 + 00015312 0x00002767 bne 0x00000008 , 0x00003c17 + 00015313 0x00002768 copy 0x00000011 , 0x00000003 + 00015314 0x00002769 ifetch 0x00000008 , 0x00000003 + 00015315 0x0000276a store 0x00000008 , 0x00004496 + 00015316 0x0000276b jam 0x00000012 , 0x00000a99 + 00015317 0x0000276c call 0x00007d8f + 00015318 0x0000276d branch 0x00003c1a + 00015319 0x00002772 ifetch 0x00000002 , 0x00000003 + 00015320 0x00002773 store 0x00000002 , 0x00004482 + 00015321 0x00002774 branch 0x00003c1a + 00015322 0x00002779 fetch 0x00000001 , 0x000044c6 + 00015323 0x0000277a branch 0x00003c17 , 0x00000034 + 00015324 0x0000277b fetch 0x00000001 , 0x000044c4 + 00015325 0x0000277c bne 0x00000000 , 0x00003c17 + 00015326 0x0000277d fetch 0x00000001 , 0x000044c5 + 00015327 0x0000277e bne 0x00000000 , 0x00003c17 + 00015328 0x0000277f call 0x00007e25 + 00015329 0x00002780 branch 0x00003c1a + 00015330 0x00002785 fetch 0x00000001 , 0x00000b04 + 00015331 0x00002786 bne 0x00000005 , 0x00003c17 + 00015332 0x00002787 ifetch 0x00000001 , 0x00000003 + 00015333 0x00002788 store 0x00000001 , 0x000046a2 + 00015334 0x00002789 ifetch 0x00000004 , 0x00000003 + 00015335 0x0000278a store 0x00000004 , 0x000046a3 + 00015336 0x0000278b fetcht 0x00000001 , 0x000046a2 + 00015337 0x0000278c call 0x0000680e + 00015338 0x0000278d call 0x00003cbc + 00015339 0x0000278e branch 0x00003c1a + 00015340 0x00002793 fetch 0x00000001 , 0x00000b04 + 00015341 0x00002794 bne 0x00000001 , 0x00003c17 + 00015342 0x00002795 ifetch 0x00000001 , 0x00000003 + 00015343 0x00002796 store 0x00000001 , 0x000041de + 00015344 0x00002797 branch 0x00003c1a + 00015345 0x0000279c ifetch 0x00000001 , 0x00000003 + 00015346 0x0000279d beq 0x00000001 , 0x00003bfa + 00015347 0x0000279e fetch 0x00000001 , 0x000044c1 + 00015348 0x0000279f beq 0x00000003 , 0x00003bf8 + 00015349 0x000027a0 beq 0x00000006 , 0x00003bf8 + 00015350 0x000027a1 beq 0x00000007 , 0x00003bf8 + 00015351 0x000027a2 branch 0x00003c17 + 00015352 0x000027a4 jam 0x00000001 , 0x000044c2 + 00015353 0x000027a5 branch 0x00003c1a + 00015354 0x000027a8 call 0x00005b53 + 00015355 0x000027a9 branch 0x00003c1a + 00015356 0x000027ae fetch 0x00000001 , 0x00000b04 + 00015357 0x000027af bne 0x00000001 , 0x00003c17 + 00015358 0x000027b0 call 0x00003c1a + 00015359 0x000027b1 ifetch 0x00000001 , 0x00000003 + 00015360 0x000027b2 branch 0x000060cb , 0x00000034 + 00015361 0x000027b3 branch 0x000060c9 + 00015362 0x000027b8 call 0x00003c1a + 00015363 0x000027b9 call 0x00007f9e + 00015364 0x000027ba hjam 0x00000001 , 0x00008010 + 00015365 0x000027bb branch 0x00002a8e + 00015366 0x000027c0 fetch 0x00000001 , 0x00000b04 + 00015367 0x000027c1 beq 0x00000000 , 0x00003c17 + 00015368 0x000027c2 ifetch 0x00000001 , 0x00000003 + 00015369 0x000027c3 branch 0x00003c13 , 0x00000034 + 00015370 0x000027c4 fetch 0x00000001 , 0x00000b04 + 00015371 0x000027c5 bne 0x00000005 , 0x00003c17 + 00015372 0x000027c6 ifetch 0x00000004 , 0x00000003 + 00015373 0x000027c7 arg 0x000f4240 , 0x00000002 + 00015374 0x000027c8 isub 0x00000002 , 0x0000003e + 00015375 0x000027c9 branch 0x00003c17 , 0x00000002 + 00015376 0x000027ca store 0x00000004 , 0x000044c7 + 00015377 0x000027cb call 0x0000580c + 00015378 0x000027cc branch 0x00003c1a + 00015379 0x000027cf call 0x0000580e + 00015380 0x000027d0 branch 0x00003c1a + 00015381 0x000027d5 jam 0x00000000 , 0x00004091 + 00015382 0x000027d6 branch 0x00003c1a + 00015383 0x000027dc arg 0x00000001 , 0x00000002 + 00015384 0x000027dd arg 0x00000000 , 0x00000011 + 00015385 0x000027de branch 0x00003c25 + 00015386 0x000027e2 arg 0x00000000 , 0x00000002 + 00015387 0x000027e3 arg 0x00000000 , 0x00000011 + 00015388 0x000027e4 branch 0x00003c25 + 00015389 0x000027e9 jam 0x00000000 , 0x00000b03 + 00015390 0x000027ea branch 0x00003c49 + 00015391 0x000027ef jam 0x00000002 , 0x00000b03 + 00015392 0x000027f0 branch 0x00003c49 + 00015393 0x000027f5 jam 0x00000003 , 0x00000b03 + 00015394 0x000027f6 branch 0x00003c49 + 00015395 0x000027fb jam 0x00000005 , 0x00000b03 + 00015396 0x000027fc branch 0x00003c49 + 00015397 0x00002805 fetch 0x00000001 , 0x00000b03 + 00015398 0x00002806 copy 0x0000003f , 0x00000013 + 00015399 0x00002807 jam 0x00000006 , 0x00000b03 + 00015400 0x00002808 setarg 0x00000002 + 00015401 0x00002809 iadd 0x00000011 , 0x0000003f + 00015402 0x0000280a call 0x00003ca7 + 00015403 0x0000280b copy 0x00000013 , 0x0000003f + 00015404 0x0000280c istore 0x00000001 , 0x0000000a + 00015405 0x0000280d istoret 0x00000001 , 0x0000000a + 00015406 0x0000280e copy 0x00000011 , 0x00000039 + 00015407 0x0000280f copy 0x00000012 , 0x00000006 + 00015408 0x00002810 call 0x000066e4 + 00015409 0x00002811 branch 0x000066c5 + 00015410 0x00002817 call 0x0000397f + 00015411 0x00002818 jam 0x00000007 , 0x00000b03 + 00015412 0x00002819 fetch 0x00000001 , 0x000004ff + 00015413 0x0000281a rtn 0x00000034 + 00015414 0x0000281b call 0x00003ca7 + 00015415 0x0000281c fetch 0x00000001 , 0x000004ff + 00015416 0x0000281d copy 0x0000003f , 0x00000039 + 00015417 0x0000281e fetch 0x00000002 , 0x00000501 + 00015418 0x0000281f copy 0x0000003f , 0x00000006 + 00015419 0x00002820 call 0x000066d1 + 00015420 0x00002821 branch 0x000066c5 + 00015421 0x00002826 jam 0x00000008 , 0x00000b03 + 00015422 0x00002827 fetch 0x00000001 , 0x000046b6 + 00015423 0x00002828 icopy 0x00000039 + 00015424 0x00002829 increase 0x00000002 , 0x0000003f + 00015425 0x0000282a call 0x00003ca7 + 00015426 0x0000282b fetch 0x00000002 , 0x000046b9 + 00015427 0x0000282c istore 0x00000002 , 0x0000000a + 00015428 0x0000282d fetch 0x00000002 , 0x000046b7 + 00015429 0x0000282e icopy 0x00000006 + 00015430 0x0000282f call 0x000066d1 + 00015431 0x00002830 branch 0x000066c5 + 00015432 0x00002835 jam 0x00000009 , 0x00000b03 + 00015433 0x00002837 setarg 0x00000000 + 00015434 0x00002838 call 0x00003ca7 + 00015435 0x00002839 branch 0x000066c5 + 00015436 0x0000283e jam 0x0000000a , 0x00000b03 + 00015437 0x0000283f setarg 0x00000001 + 00015438 0x00002840 call 0x00003ca7 + 00015439 0x00002842 call 0x00003c5d + 00015440 0x00002844 fetch 0x00000002 , 0x00004682 + 00015441 0x00002845 arg 0x00000002 , 0x00000007 + 00015442 0x00002846 qisolate1 0x0000003f + 00015443 0x00002847 setflag 0x00000001 , 0x00000003 , 0x00000002 + 00015444 0x00002849 arg 0x00000009 , 0x00000007 + 00015445 0x0000284a qisolate1 0x0000003f + 00015446 0x0000284b setflag 0x00000001 , 0x00000005 , 0x00000002 + 00015447 0x0000284d fetch 0x00000001 , 0x00004682 + 00015448 0x0000284e arg 0x00000004 , 0x00000007 + 00015449 0x0000284f qisolate1 0x0000003f + 00015450 0x00002850 setflag 0x00000001 , 0x00000004 , 0x00000002 + 00015451 0x00002852 istoret 0x00000001 , 0x0000000a + 00015452 0x00002853 branch 0x000066c5 + 00015453 0x00002858 arg 0x00000000 , 0x00000002 + 00015454 0x00002859 fetch 0x00000001 , 0x00004093 + 00015455 0x0000285a arg 0x00000000 , 0x00000007 + 00015456 0x0000285b qisolate1 0x0000003f + 00015457 0x0000285c setflag 0x00000001 , 0x00000000 , 0x00000002 + 00015458 0x0000285d arg 0x00000001 , 0x00000007 + 00015459 0x0000285e qisolate1 0x0000003f + 00015460 0x0000285f setflag 0x00000001 , 0x00000001 , 0x00000002 + 00015461 0x00002861 fetch 0x00000001 , 0x0000436e + 00015462 0x00002862 arg 0x00000000 , 0x00000007 + 00015463 0x00002863 qisolate1 0x0000003f + 00015464 0x00002864 setflag 0x00000001 , 0x00000002 , 0x00000002 + 00015465 0x00002865 rtn + 00015466 0x0000286a jam 0x0000000d , 0x00000b03 + 00015467 0x0000286b fetch 0x00000001 , 0x00004217 + 00015468 0x0000286c mul32 0x0000003f , 0x00000022 , 0x0000003f + 00015469 0x0000286d icopy 0x00000039 + 00015470 0x0000286e call 0x00003ca7 + 00015471 0x0000286f fetch 0x00000002 , 0x00004215 + 00015472 0x00002870 icopy 0x00000006 + 00015473 0x00002871 call 0x000066d1 + 00015474 0x00002872 branch 0x000066c5 + 00015475 0x00002877 jam 0x0000000e , 0x00000b03 + 00015476 0x00002878 setarg 0x00000004 + 00015477 0x00002879 call 0x00003ca7 + 00015478 0x0000287a fetch 0x00000004 , 0x000009ba + 00015479 0x0000287b istore 0x00000004 , 0x0000000a + 00015480 0x0000287c branch 0x000066c5 + 00015481 0x00002881 jam 0x0000000f , 0x00000b03 + 00015482 0x00002882 hfetch 0x00000002 , 0x00008112 + 00015483 0x00002883 arg 0x000000ff , 0x00000002 + 00015484 0x00002884 call 0x00007fdd + 00015485 0x00002885 copy 0x0000003f , 0x00000039 + 00015486 0x00002886 call 0x00003ca7 + 00015487 0x00002887 call 0x000066cb + 00015488 0x00002888 call 0x00006703 + 00015489 0x00002889 branch 0x000066c5 + 00015490 0x0000288e jam 0x00000010 , 0x00000b03 + 00015491 0x0000288f branch 0x00003c49 + 00015492 0x00002894 jam 0x00000011 , 0x00000b03 + 00015493 0x00002895 setarg 0x00000004 + 00015494 0x00002896 call 0x00003ca7 + 00015495 0x00002897 fetch 0x00000004 , 0x000044c7 + 00015496 0x00002898 istore 0x00000004 , 0x0000000a + 00015497 0x00002899 branch 0x000066c5 + 00015498 0x0000289e arg 0x00000180 , 0x00000011 + 00015499 0x0000289f branch 0x00003c91 + 00015500 0x000028a2 arg 0x00000080 , 0x00000011 + 00015501 0x000028a3 branch 0x00003c91 + 00015502 0x000028a6 arg 0x00000101 , 0x00000011 + 00015503 0x000028a7 branch 0x00003c91 + 00015504 0x000028aa arg 0x00000001 , 0x00000011 + 00015505 0x000028ad jam 0x00000000 , 0x00004661 + 00015506 0x000028ae jam 0x00000014 , 0x00000b03 + 00015507 0x000028af setarg 0x00000002 + 00015508 0x000028b0 call 0x00003ca7 + 00015509 0x000028b1 copy 0x00000011 , 0x0000003f + 00015510 0x000028b2 istore 0x00000002 , 0x0000000a + 00015511 0x000028b3 branch 0x000066c5 + 00015512 0x000028b8 arg 0x00000000 , 0x00000013 + 00015513 0x000028b9 branch 0x00003c9b + 00015514 0x000028bc arg 0x00000001 , 0x00000013 + 00015515 0x000028bf jam 0x00000015 , 0x00000b03 + 00015516 0x000028c0 setarg 0x00000001 + 00015517 0x000028c1 call 0x00003ca7 + 00015518 0x000028c2 copy 0x00000013 , 0x0000003f + 00015519 0x000028c3 istore 0x00000001 , 0x0000000a + 00015520 0x000028c4 branch 0x000066c5 + 00015521 0x000028c9 jam 0x0000001d , 0x00000b03 + 00015522 0x000028ca setarg 0x00000004 + 00015523 0x000028cb call 0x00003ca7 + 00015524 0x000028cc fetch 0x00000004 , 0x000009ba + 00015525 0x000028cd istore 0x00000004 , 0x0000000a + 00015526 0x000028ce branch 0x000066c5 + 00015527 0x000028da jam 0x00000002 , 0x00000b02 + 00015528 0x000028db store 0x00000001 , 0x00000b04 + 00015529 0x000028dc storet 0x00000008 , 0x00000aa2 + 00015530 0x000028dd bpatch 0x000000e2 , 0x0000401c + 00015531 0x000028de call 0x00003cb1 + 00015532 0x000028df fetcht 0x00000008 , 0x00000aa2 + 00015533 0x000028e0 call 0x000066c2 + 00015534 0x000028e1 fetch 0x00000003 , 0x00000b02 + 00015535 0x000028e2 istore 0x00000003 , 0x0000000a + 00015536 0x000028e3 rtn + 00015537 0x000028e7 call 0x00003cba + 00015538 0x000028e8 rtn 0x00000001 + 00015539 0x000028ea call 0x00003cb8 + 00015540 0x000028eb fetch 0x00000004 , 0x000046a3 + 00015541 0x000028ec rshift2 0x0000003f , 0x0000003f + 00015542 0x000028ed rtn 0x00000034 + 00015543 0x000028ee branch 0x00003cbe + 00015544 0x000028f2 fetcht 0x00000001 , 0x000046a2 + 00015545 0x000028f3 branch 0x00006829 + 00015546 0x000028f6 fetcht 0x00000001 , 0x000046a2 + 00015547 0x000028f7 branch 0x0000681b + 00015548 0x000028fa fetcht 0x00000001 , 0x000046a2 + 00015549 0x000028fb branch 0x00006825 + 00015550 0x000028ff increase 0xffffffff , 0x0000003f + 00015551 0x00002900 nop 0x00000026 + 00015552 0x00002901 nbranch 0x00003cbe , 0x00000034 + 00015553 0x00002902 rtn + 00015554 0x0000290c call 0x00003ad4 + 00015555 0x0000290d rtn 0x00000028 + 00015556 0x0000290e copy 0x00000011 , 0x0000003f + 00015557 0x0000290f store 0x00000002 , 0x000046b7 + 00015558 0x00002910 copy 0x00000012 , 0x0000003f + 00015559 0x00002911 store 0x00000001 , 0x000046b6 + 00015560 0x00002912 fetch 0x00000002 , 0x00000478 + 00015561 0x00002913 fetcht 0x00000002 , 0x000046bb + 00015562 0x00002914 isub 0x00000002 , 0x0000003e + 00015563 0x00002915 branch 0x00003ccf , 0x00000005 + 00015564 0x00002916 fetcht 0x00000002 , 0x000046bd + 00015565 0x00002917 isub 0x00000002 , 0x0000003e + 00015566 0x00002918 nrtn 0x00000005 + 00015567 0x0000291a store 0x00000002 , 0x000046b9 + 00015568 0x0000291b branch 0x00003c3d + 00015569 0x00002921 fetch 0x00000001 , 0x000046bf + 00015570 0x00002922 rtnbit1 0x00000005 + 00015571 0x00002923 call 0x00003cf0 + 00015572 0x00002924 branch 0x0000340c + 00015573 0x00002928 jam 0x00000002 , 0x00004172 + 00015574 0x00002929 rtn + 00015575 0x0000292e branch 0x00003cd8 + 00015576 0x00002931 fetch 0x00000001 , 0x000046b2 + 00015577 0x00002932 rtn 0x00000034 + 00015578 0x00002933 fetch 0x00000001 , 0x000046b3 + 00015579 0x00002934 rtn 0x00000034 + 00015580 0x00002935 increase 0xffffffff , 0x0000003f + 00015581 0x00002936 store 0x00000001 , 0x000046b3 + 00015582 0x00002937 nrtn 0x00000034 + 00015583 0x00002938 jam 0x0000000a , 0x000046b3 + 00015584 0x00002939 call 0x000068eb + 00015585 0x0000293a call 0x00006908 + 00015586 0x0000293b div 0x0000003f , 0x00000064 + 00015587 0x0000293c call 0x00007f86 + 00015588 0x0000293d quotient 0x0000003f + 00015589 0x0000293e remainder 0x00000002 + 00015590 0x0000293f store 0x00000001 , 0x000046b4 + 00015591 0x00002940 storet 0x00000001 , 0x000046b5 + 00015592 0x00002941 rtn + 00015593 0x00002945 call 0x00007fb4 + 00015594 0x00002946 branch 0x000033d9 , 0x00000002 + 00015595 0x00002947 branch 0x000033db + 00015596 0x0000294c arg 0x00000006 , 0x00000007 + 00015597 0x0000294d branch 0x00003cfc + 00015598 0x00002950 arg 0x00000006 , 0x00000007 + 00015599 0x00002951 branch 0x00003cf8 + 00015600 0x00002954 arg 0x00000005 , 0x00000007 + 00015601 0x00002955 branch 0x00003cfc + 00015602 0x00002958 arg 0x00000005 , 0x00000007 + 00015603 0x00002959 branch 0x00003cf8 + 00015604 0x0000295c arg 0x00000004 , 0x00000007 + 00015605 0x0000295d branch 0x00003cfc + 00015606 0x00002960 arg 0x00000004 , 0x00000007 + 00015607 0x00002961 branch 0x00003cf8 + 00015608 0x00002964 fetch 0x00000001 , 0x000046bf + 00015609 0x00002965 qset0 0x0000003f + 00015610 0x00002966 store 0x00000001 , 0x000046bf + 00015611 0x00002967 rtn + 00015612 0x0000296a fetch 0x00000001 , 0x000046bf + 00015613 0x0000296b qset1 0x0000003f + 00015614 0x0000296c store 0x00000001 , 0x000046bf + 00015615 0x0000296d rtn + 00015616 0x00002978 call 0x00003d39 + 00015617 0x00002979 call 0x0000640f + 00015618 0x0000297a call 0x000040c6 + 00015619 0x0000297b call 0x00003d66 + 00015620 0x0000297c call 0x00006411 + 00015621 0x0000297d rtn 0x0000002b + 00015622 0x0000297e call 0x00003d16 + 00015623 0x0000297f call 0x00003d19 + 00015624 0x00002982 fetch 0x00000004 , 0x000046d3 + 00015625 0x00002983 rtnbit1 0x00000010 + 00015626 0x00002984 call 0x00003d4e + 00015627 0x00002985 rtnmark1 0x00000026 + 00015628 0x00002986 fetch 0x00000002 , 0x00004682 + 00015629 0x00002987 bbit1 0x0000000c , 0x000042b0 + 00015630 0x00002988 branch 0x000042a2 + 00015631 0x0000298c fetch 0x00000004 , 0x000046d3 + 00015632 0x0000298d rtnbit0 0x0000001b + 00015633 0x0000298e arg 0x00000014 , 0x00000039 + 00015634 0x00002990 setarg 0x00030d40 + 00015635 0x00002991 call 0x00002a8f + 00015636 0x00002992 loop 0x00007ec1 + 00015637 0x00002993 rtn + 00015638 0x00002997 fetch 0x00000004 , 0x000046d3 + 00015639 0x00002998 rtnbit0 0x00000010 + 00015640 0x00002999 branch 0x000048ea + 00015641 0x0000299d setarg 0x0000416d + 00015642 0x0000299e store 0x00000002 , 0x000041ef + 00015643 0x0000299f setarg 0x00003f77 + 00015644 0x000029a0 store 0x00000002 , 0x000041f1 + 00015645 0x000029a1 setarg 0x00003ebb + 00015646 0x000029a2 store 0x00000002 , 0x000041ed + 00015647 0x000029a3 setarg 0x0000417c + 00015648 0x000029a4 store 0x00000002 , 0x000041f5 + 00015649 0x000029a5 setarg 0x00003de3 + 00015650 0x000029a6 store 0x00000002 , 0x000041f3 + 00015651 0x000029a7 setarg 0x00003eb3 + 00015652 0x000029a8 store 0x00000002 , 0x000041eb + 00015653 0x000029a9 setarg 0x00003d5b + 00015654 0x000029aa store 0x00000002 , 0x000041f9 + 00015655 0x000029ac call 0x00002c7a + 00015656 0x000029ad setarg 0x00004401 + 00015657 0x000029ae add 0x00000013 , 0x000000d8 , 0x00000005 + 00015658 0x000029af istore 0x00000002 , 0x00000005 + 00015659 0x000029b0 setarg 0x00004406 + 00015660 0x000029b1 add 0x00000013 , 0x000000da , 0x00000005 + 00015661 0x000029b2 istore 0x00000002 , 0x00000005 + 00015662 0x000029b3 setarg 0x00003ebf + 00015663 0x000029b4 add 0x00000013 , 0x000000dc , 0x00000005 + 00015664 0x000029b5 istore 0x00000002 , 0x00000005 + 00015665 0x000029b7 setarg 0x000041f9 + 00015666 0x000029b8 store 0x00000002 , 0x000041fd + 00015667 0x000029b9 setarg 0x00003d36 + 00015668 0x000029ba store 0x00000002 , 0x00004201 + 00015669 0x000029bb rtn + 00015670 0x000029be fetch 0x00000004 , 0x000046d3 + 00015671 0x000029bf bbit0 0x00000012 , 0x000064d7 + 00015672 0x000029c0 branch 0x000064da + 00015673 0x000029c3 rtn 0x0000002b + 00015674 0x000029c4 call 0x00002c9d + 00015675 0x000029c5 call 0x00003e6e + 00015676 0x000029c6 call 0x00003e1e + 00015677 0x000029c7 call 0x00003e54 + 00015678 0x000029c8 call 0x00005810 + 00015679 0x000029c9 call 0x00005839 + 00015680 0x000029ca call 0x0000582c + 00015681 0x000029cb call 0x00005818 + 00015682 0x000029cc fetch 0x00000004 , 0x000046d3 + 00015683 0x000029cd bbit1 0x00000014 , 0x00003d46 + 00015684 0x000029ce bbit1 0x00000013 , 0x00004414 + 00015685 0x000029cf rtn + 00015686 0x000029d2 call 0x0000659c + 00015687 0x000029d3 fetch 0x00000004 , 0x000046d3 + 00015688 0x000029d4 isolate1 0x00000019 , 0x0000003f + 00015689 0x000029d5 ncall 0x000065c2 , 0x00000001 + 00015690 0x000029d6 call 0x0000443f + 00015691 0x000029d7 call 0x00003dc9 + 00015692 0x000029d8 call 0x000041aa + 00015693 0x000029d9 branch 0x000065df + 00015694 0x000029dc fetch 0x00000004 , 0x000046d3 + 00015695 0x000029dd bbit0 0x0000001e , 0x00003d53 + 00015696 0x000029de fetch 0x00000001 , 0x00000abd + 00015697 0x000029df isolate0 0x00000003 , 0x0000003f + 00015698 0x000029e0 nrtn 0x00000001 + 00015699 0x000029e2 fetch 0x00000001 , 0x0000471f + 00015700 0x000029e3 store 0x00000001 , 0x0000471e + 00015701 0x000029e4 fetch 0x00000001 , 0x000046f5 + 00015702 0x000029e5 rtnbit1 0x00000006 + 00015703 0x000029e7 fetch 0x00000004 , 0x000046d3 + 00015704 0x000029e8 rtnbit0 0x00000011 + 00015705 0x000029e9 bbit1 0x0000001d , 0x00002ee4 + 00015706 0x000029ea branch 0x00002f2c + 00015707 0x000029ec fetch 0x00000001 , 0x00000478 + 00015708 0x000029ed sub 0x0000003f , 0x0000001a , 0x0000003f + 00015709 0x000029ee nrtn 0x00000005 + 00015710 0x000029ef jam 0x00000012 , 0x00000a99 + 00015711 0x000029f0 call 0x00007d8f + 00015712 0x000029f1 arg 0x00000000 , 0x00000007 + 00015713 0x000029f2 branch 0x000041b9 + 00015714 0x000029f5 fetch 0x00000001 , 0x000046b6 + 00015715 0x000029f6 rtneq 0x00000001 + 00015716 0x000029f7 jam 0x00000001 , 0x000046b6 + 00015717 0x000029f8 rtn + 00015718 0x000029fa fetch 0x00000001 , 0x000046e1 + 00015719 0x000029fb and 0x0000003f , 0x0000000f , 0x0000003f + 00015720 0x000029fc store 0x00000001 , 0x0000477a + 00015721 0x000029fd branch 0x00003d80 + 00015722 0x00002a01 fetcht 0x00000001 , 0x000046e7 + 00015723 0x00002a02 call 0x0000681d + 00015724 0x00002a03 nbranch 0x00003d62 , 0x00000001 + 00015725 0x00002a05 fetch 0x00000001 , 0x000046b6 + 00015726 0x00002a06 rtneq 0x00000000 + 00015727 0x00002a07 jam 0x00000000 , 0x000046b6 + 00015728 0x00002a08 fetch 0x00000001 , 0x0000477a + 00015729 0x00002a09 increase 0x00000001 , 0x0000003f + 00015730 0x00002a0a and 0x0000003f , 0x00000003 , 0x0000003f + 00015731 0x00002a0b store 0x00000001 , 0x0000477a + 00015732 0x00002a0c call 0x00003d7e + 00015733 0x00002a0d fetch 0x00000004 , 0x000046d3 + 00015734 0x00002a0e bbit1 0x00000014 , 0x0000443b + 00015735 0x00002a0f bbit1 0x00000013 , 0x00003d79 + 00015736 0x00002a10 rtn + 00015737 0x00002a12 arg 0x0000001e , 0x00000002 + 00015738 0x00002a13 call 0x0000680e + 00015739 0x00002a14 arg 0x0000001f , 0x00000002 + 00015740 0x00002a15 call 0x0000680e + 00015741 0x00002a16 branch 0x00004435 + 00015742 0x00002a19 bpatch 0x000000e3 , 0x0000401c + 00015743 0x00002a1a call 0x0000424a + 00015744 0x00002a1b fetch 0x00000001 , 0x000046e0 + 00015745 0x00002a1c beq 0x00000005 , 0x00003daa + 00015746 0x00002a1d beq 0x00000004 , 0x00003d96 + 00015747 0x00002a1e fetch 0x00000001 , 0x0000477a + 00015748 0x00002a1f beq 0x00000000 , 0x00003d8a + 00015749 0x00002a20 beq 0x00000001 , 0x00003d88 + 00015750 0x00002a21 beq 0x00000002 , 0x00003d8c + 00015751 0x00002a22 beq 0x00000003 , 0x00003d8e + 00015752 0x00002a24 fetch 0x00000001 , 0x00004780 + 00015753 0x00002a25 branch 0x00003dbe + 00015754 0x00002a27 fetch 0x00000001 , 0x0000477f + 00015755 0x00002a28 branch 0x00003dbe + 00015756 0x00002a2a fetch 0x00000001 , 0x00004781 + 00015757 0x00002a2b branch 0x00003dbe + 00015758 0x00002a2d fetch 0x00000001 , 0x00004782 + 00015759 0x00002a2e branch 0x00003dbe + 00015760 0x00002a30 fetch 0x00000001 , 0x000046e0 + 00015761 0x00002a31 rtneq 0x00000006 + 00015762 0x00002a32 fetch 0x00000001 , 0x000046b5 + 00015763 0x00002a33 increase 0x00000001 , 0x0000003f + 00015764 0x00002a34 store 0x00000001 , 0x000046b5 + 00015765 0x00002a35 rtn + 00015766 0x00002a38 fetch 0x00000001 , 0x0000477a + 00015767 0x00002a39 beq 0x00000000 , 0x00003d9d + 00015768 0x00002a3a beq 0x00000001 , 0x00003d9b + 00015769 0x00002a3b beq 0x00000002 , 0x00003d9f + 00015770 0x00002a3c beq 0x00000003 , 0x00003da1 + 00015771 0x00002a3e fetch 0x00000001 , 0x00004784 + 00015772 0x00002a3f branch 0x00003da2 + 00015773 0x00002a41 fetch 0x00000001 , 0x00004783 + 00015774 0x00002a42 branch 0x00003da2 + 00015775 0x00002a44 fetch 0x00000001 , 0x00004785 + 00015776 0x00002a45 branch 0x00003da2 + 00015777 0x00002a47 fetch 0x00000001 , 0x00004786 + 00015778 0x00002a49 store 0x00000001 , 0x000046b5 + 00015779 0x00002a4a lshift8 0x0000003f , 0x0000003f + 00015780 0x00002a4b copy 0x0000003f , 0x00000011 + 00015781 0x00002a4c add 0x0000003f , 0x0000000d , 0x0000003f + 00015782 0x00002a4d call 0x00006413 + 00015783 0x00002a4e copy 0x00000011 , 0x0000003f + 00015784 0x00002a4f add 0x0000003f , 0x0000000e , 0x0000003f + 00015785 0x00002a50 branch 0x00006413 + 00015786 0x00002a53 fetch 0x00000001 , 0x0000477a + 00015787 0x00002a54 beq 0x00000000 , 0x00003db1 + 00015788 0x00002a55 beq 0x00000001 , 0x00003daf + 00015789 0x00002a56 beq 0x00000002 , 0x00003db3 + 00015790 0x00002a57 beq 0x00000003 , 0x00003db5 + 00015791 0x00002a59 fetch 0x00000001 , 0x00004788 + 00015792 0x00002a5a branch 0x00003db6 + 00015793 0x00002a5c fetch 0x00000001 , 0x00004787 + 00015794 0x00002a5d branch 0x00003db6 + 00015795 0x00002a5f fetch 0x00000001 , 0x00004789 + 00015796 0x00002a60 branch 0x00003db6 + 00015797 0x00002a62 fetch 0x00000001 , 0x0000478a + 00015798 0x00002a64 store 0x00000001 , 0x000046b5 + 00015799 0x00002a65 call 0x000040c0 + 00015800 0x00002a66 fetch 0x00000001 , 0x000046b5 + 00015801 0x00002a68 add 0x0000003f , 0x00000080 , 0x0000003f + 00015802 0x00002a69 lshift8 0x0000003f , 0x0000003f + 00015803 0x00002a6a add 0x0000003f , 0x00000005 , 0x0000003f + 00015804 0x00002a6b copy 0x0000003f , 0x00000011 + 00015805 0x00002a6c branch 0x0000415a + 00015806 0x00002a6f store 0x00000001 , 0x000046b5 + 00015807 0x00002a70 call 0x00003d90 + 00015808 0x00002a71 fetch 0x00000001 , 0x000046b5 + 00015809 0x00002a72 setarg 0x00000006 + 00015810 0x00002a73 call 0x00006414 + 00015811 0x00002a74 and 0x0000003f , 0x000000f8 , 0x00000002 + 00015812 0x00002a75 fetch 0x00000001 , 0x000046b5 + 00015813 0x00002a76 iadd 0x00000002 , 0x0000003f + 00015814 0x00002a77 lshift8 0x0000003f , 0x0000003f + 00015815 0x00002a78 add 0x0000003f , 0x00000006 , 0x0000003f + 00015816 0x00002a79 branch 0x00006413 + 00015817 0x00002a7d call 0x000033c4 + 00015818 0x00002a7e branch 0x00004316 , 0x00000005 + 00015819 0x00002a7f call 0x0000441c + 00015820 0x00002a80 call 0x000042e4 + 00015821 0x00002a81 branch 0x000033bd + 00015822 0x00002a85 fetch 0x00000002 , 0x00004707 + 00015823 0x00002a86 rtn 0x00000034 + 00015824 0x00002a87 fetch 0x00000004 , 0x000046d3 + 00015825 0x00002a88 rtnbit0 0x00000011 + 00015826 0x00002a89 rtnbit1 0x00000003 + 00015827 0x00002a8a rtnmark1 0x00000026 + 00015828 0x00002a8b call 0x00004083 + 00015829 0x00002a8c rtnne 0x00000007 + 00015830 0x00002a8d call 0x00004482 + 00015831 0x00002a8e arg 0x00000003 , 0x00000007 + 00015832 0x00002a8f call 0x000043ce + 00015833 0x00002a90 setarg 0x00000000 + 00015834 0x00002a91 store 0x00000002 , 0x000046ae + 00015835 0x00002a92 store 0x00000001 , 0x000046b4 + 00015836 0x00002a93 call 0x00003263 + 00015837 0x00002a95 fetch 0x00000002 , 0x00004682 + 00015838 0x00002a96 bbit1 0x00000007 , 0x00004392 + 00015839 0x00002a97 bbit1 0x00000009 , 0x00003402 + 00015840 0x00002a98 bbit1 0x00000000 , 0x000033e9 + 00015841 0x00002a99 call 0x000042ca + 00015842 0x00002a9a branch 0x00002ead + 00015843 0x00002a9e call 0x00003dce + 00015844 0x00002a9f call 0x00007e34 + 00015845 0x00002aa0 call 0x00003d6a + 00015846 0x00002aa1 call 0x00003de9 + 00015847 0x00002aa2 call 0x00003ee0 + 00015848 0x00002aa3 branch 0x00003df7 + 00015849 0x00002aa5 fetch 0x00000004 , 0x000046d3 + 00015850 0x00002aa6 rtnbit0 0x00000010 + 00015851 0x00002aa7 call 0x000048d3 + 00015852 0x00002aa8 branch 0x000048fd + 00015853 0x00002aab hfetch 0x00000001 , 0x00008a04 + 00015854 0x00002aac bbit0 0x00000007 , 0x00003df1 + 00015855 0x00002aad bbit1 0x00000007 , 0x00003df4 + 00015856 0x00002aae rtn + 00015857 0x00002ab0 fetch 0x00000001 , 0x000046ff + 00015858 0x00002ab1 rtnbit0 0x00000007 + 00015859 0x00002ab2 branch 0x0000659a + 00015860 0x00002ab4 fetch 0x00000001 , 0x000046ff + 00015861 0x00002ab5 rtnbit1 0x00000007 + 00015862 0x00002ab6 branch 0x00004381 + 00015863 0x00002ab9 call 0x00003ded + 00015864 0x00002aba hfetch 0x00000001 , 0x00008a04 + 00015865 0x00002abb store 0x00000001 , 0x000046ff + 00015866 0x00002abc rtnbit0 0x00000007 + 00015867 0x00002abd call 0x00003e07 + 00015868 0x00002abe fetch 0x00000004 , 0x000046f9 + 00015869 0x00002abf fetcht 0x00000001 , 0x000046fd + 00015870 0x00002ac0 iadd 0x00000002 , 0x00000002 + 00015871 0x00002ac1 copy 0x00000022 , 0x0000003f + 00015872 0x00002ac2 isub 0x00000002 , 0x0000003e + 00015873 0x00002ac3 nrtn 0x00000002 + 00015874 0x00002ac4 store 0x00000004 , 0x000046f9 + 00015875 0x00002ac5 call 0x00003f97 + 00015876 0x00002ac6 nrtn 0x00000028 + 00015877 0x00002ac7 jam 0x00000004 , 0x00000d38 + 00015878 0x00002ac8 branch 0x00003e0f + 00015879 0x00002acb fetcht 0x00000004 , 0x000046f9 + 00015880 0x00002acc copy 0x00000022 , 0x0000003f + 00015881 0x00002acd isub 0x00000002 , 0x0000003e + 00015882 0x00002ace ncall 0x00003e0c , 0x00000002 + 00015883 0x00002acf rtn + 00015884 0x00002ad1 setarg 0x00000000 + 00015885 0x00002ad2 store 0x00000004 , 0x000046f9 + 00015886 0x00002ad3 rtn + 00015887 0x00002ad8 fetch 0x00000001 , 0x00000d38 + 00015888 0x00002ad9 rtnbit0 0x00000002 + 00015889 0x00002ada branch 0x00003e12 + 00015890 0x00002adc hfetch 0x00000001 , 0x00008a04 + 00015891 0x00002add rtnbit0 0x00000007 + 00015892 0x00002ade jam 0x00000020 , 0x00000d52 + 00015893 0x00002adf setarg 0x00000001 + 00015894 0x00002ae0 store 0x00000001 , 0x00000d54 + 00015895 0x00002ae1 fetch 0x00000007 , 0x0000469a + 00015896 0x00002ae2 istore 0x00000007 , 0x00000005 + 00015897 0x00002ae3 rtn + 00015898 0x00002ae7 hfetch 0x00000002 , 0x00008050 + 00015899 0x00002ae8 set0 0x0000000b , 0x0000003f + 00015900 0x00002ae9 hstore 0x00000002 , 0x00008050 + 00015901 0x00002aea rtn + 00015902 0x00002aed setarg 0x00008c00 + 00015903 0x00002aee store 0x00000002 , 0x00004575 + 00015904 0x00002aef setarg 0x00008e7a + 00015905 0x00002af0 store 0x00000002 , 0x000044bc + 00015906 0x00002af1 setarg 0x00002402 + 00015907 0x00002af2 store 0x00000002 , 0x000040bd + 00015908 0x00002af3 setarg 0x00002580 + 00015909 0x00002af4 store 0x00000003 , 0x000040aa + 00015910 0x00002af5 jam 0x00000003 , 0x00004173 + 00015911 0x00002af6 jam 0x00000008 , 0x00004156 + 00015912 0x00002af7 jam 0x00000001 , 0x000046d9 + 00015913 0x00002af8 setarg 0x00000200 + 00015914 0x00002af9 store 0x00000002 , 0x00004154 + 00015915 0x00002afa jam 0x00000017 , 0x000044a6 + 00015916 0x00002afb jam 0x00000017 , 0x000044a8 + 00015917 0x00002afd setarg 0x00000a77 + 00015918 0x00002afe store 0x00000002 , 0x00004212 + 00015919 0x00002b0e setsect 0x00000000 , 0x00000306 + 00015920 0x00002b0f setsect 0x00000001 , 0x00004440 + 00015921 0x00002b10 setsect 0x00000002 , 0x00010000 + 00015922 0x00002b11 setsect 0x00000003 , 0x00004408 + 00015923 0x00002b12 store 0x00000009 , 0x00004577 + 00015924 0x00002b13 setsect 0x00000000 , 0x00001224 + 00015925 0x00002b14 setsect 0x00000001 , 0x00004000 + 00015926 0x00002b15 setsect 0x00000002 , 0x00000000 + 00015927 0x00002b16 istore 0x00000005 , 0x00000005 + 00015928 0x00002b18 setsect 0x00000000 , 0x0003ffff + 00015929 0x00002b19 setsect 0x00000001 , 0x0002fe23 + 00015930 0x00002b1a setsect 0x00000002 , 0x000199d9 + 00015931 0x00002b1b setsect 0x00000003 , 0x0000020d + 00015932 0x00002b1c store 0x00000008 , 0x00004098 + 00015933 0x00002b1e setarg 0x0000012c + 00015934 0x00002b1f store 0x00000002 , 0x00004707 + 00015935 0x00002b20 call 0x000057a3 + 00015936 0x00002b21 fetch 0x00000004 , 0x000046d3 + 00015937 0x00002b22 rtnbit0 0x0000001f + 00015938 0x00002b23 call 0x00003e44 + 00015939 0x00002b24 branch 0x00003e4c + 00015940 0x00002b27 fetcht 0x00000001 , 0x000046f7 + 00015941 0x00002b28 call 0x000067fb + 00015942 0x00002b29 fetcht 0x00000001 , 0x000046f7 + 00015943 0x00002b2a call 0x0000681d + 00015944 0x00002b2b jam 0x00000003 , 0x000046f6 + 00015945 0x00002b2c rtn 0x00000001 + 00015946 0x00002b2d jam 0x00000002 , 0x000046f6 + 00015947 0x00002b2e rtn + 00015948 0x00002b31 fetcht 0x00000001 , 0x000046f8 + 00015949 0x00002b32 call 0x000067fb + 00015950 0x00002b33 fetcht 0x00000001 , 0x000046f8 + 00015951 0x00002b34 call 0x0000681d + 00015952 0x00002b35 jam 0x00000000 , 0x0000422d + 00015953 0x00002b36 rtn 0x00000001 + 00015954 0x00002b37 jam 0x00000002 , 0x0000422d + 00015955 0x00002b38 rtn + 00015956 0x00002b3c fetch 0x00000001 , 0x0000422d + 00015957 0x00002b3d beq 0x00000000 , 0x00003e59 + 00015958 0x00002b3e beq 0x00000001 , 0x00003e62 + 00015959 0x00002b3f beq 0x00000002 , 0x00003e6b + 00015960 0x00002b40 branch 0x00003e59 + 00015961 0x00002b43 fetcht 0x00000002 , 0x00004221 + 00015962 0x00002b44 fetch 0x00000002 , 0x00004227 + 00015963 0x00002b45 isub 0x00000002 , 0x0000003f + 00015964 0x00002b46 mul32 0x0000003f , 0x00000014 , 0x0000003f + 00015965 0x00002b47 div 0x0000003f , 0x00000064 + 00015966 0x00002b48 call 0x00007f86 + 00015967 0x00002b49 quotient 0x0000003f + 00015968 0x00002b4a store 0x00000002 , 0x000046d0 + 00015969 0x00002b4b rtn + 00015970 0x00002b4d fetcht 0x00000002 , 0x0000421f + 00015971 0x00002b4e fetch 0x00000002 , 0x00004225 + 00015972 0x00002b4f isub 0x00000002 , 0x0000003f + 00015973 0x00002b50 mul32 0x0000003f , 0x000000e6 , 0x0000003f + 00015974 0x00002b51 div 0x0000003f , 0x00000190 + 00015975 0x00002b52 call 0x00007f86 + 00015976 0x00002b53 quotient 0x0000003f + 00015977 0x00002b54 store 0x00000002 , 0x000046d0 + 00015978 0x00002b55 rtn + 00015979 0x00002b57 fetch 0x00000002 , 0x00004223 + 00015980 0x00002b58 store 0x00000002 , 0x000046d0 + 00015981 0x00002b59 rtn + 00015982 0x00002b5b fetcht 0x00000001 , 0x0000423a + 00015983 0x00002b5c call 0x0000680e + 00015984 0x00002b5d call 0x000048fb + 00015985 0x00002b5e fetcht 0x00000001 , 0x000046e2 + 00015986 0x00002b5f call 0x000067fb + 00015987 0x00002b60 fetcht 0x00000001 , 0x000046e3 + 00015988 0x00002b61 call 0x000067fb + 00015989 0x00002b62 fetcht 0x00000001 , 0x000046e4 + 00015990 0x00002b63 call 0x000067fb + 00015991 0x00002b64 fetcht 0x00000001 , 0x000046f3 + 00015992 0x00002b65 call 0x000067fb + 00015993 0x00002b67 fetcht 0x00000001 , 0x000046dc + 00015994 0x00002b68 call 0x0000680e + 00015995 0x00002b6a fetcht 0x00000001 , 0x000046e8 + 00015996 0x00002b6b call 0x000067fb + 00015997 0x00002b6d fetcht 0x00000001 , 0x000046e9 + 00015998 0x00002b6e call 0x000067fb + 00015999 0x00002b70 fetcht 0x00000001 , 0x000046ea + 00016000 0x00002b71 call 0x000067fb + 00016001 0x00002b72 fetcht 0x00000001 , 0x000046eb + 00016002 0x00002b73 call 0x000067fb + 00016003 0x00002b75 fetcht 0x00000001 , 0x000046e5 + 00016004 0x00002b76 call 0x000067fb + 00016005 0x00002b77 fetcht 0x00000001 , 0x000046e6 + 00016006 0x00002b78 call 0x000067fb + 00016007 0x00002b7a fetcht 0x00000001 , 0x000046ef + 00016008 0x00002b7b call 0x0000680e + 00016009 0x00002b7d fetcht 0x00000001 , 0x000046f0 + 00016010 0x00002b7e call 0x0000680e + 00016011 0x00002b80 fetcht 0x00000001 , 0x000046f1 + 00016012 0x00002b81 call 0x0000680e + 00016013 0x00002b83 fetcht 0x00000001 , 0x000046f2 + 00016014 0x00002b84 call 0x0000680e + 00016015 0x00002b86 fetcht 0x00000001 , 0x000046f4 + 00016016 0x00002b87 call 0x0000680e + 00016017 0x00002b89 fetcht 0x00000001 , 0x000046ed + 00016018 0x00002b8a call 0x000067fb + 00016019 0x00002b8c fetcht 0x00000001 , 0x000046ec + 00016020 0x00002b8d call 0x000067fb + 00016021 0x00002b8f fetcht 0x00000001 , 0x000046e7 + 00016022 0x00002b90 branch 0x000067fb + 00016023 0x00002b93 fetcht 0x00000001 , 0x000046e8 + 00016024 0x00002b94 call 0x000067dd + 00016025 0x00002b95 fetcht 0x00000001 , 0x000046e9 + 00016026 0x00002b96 call 0x000067dd + 00016027 0x00002b97 fetcht 0x00000001 , 0x000046ea + 00016028 0x00002b98 call 0x000067dd + 00016029 0x00002b99 fetcht 0x00000001 , 0x000046eb + 00016030 0x00002b9a branch 0x000067dd + 00016031 0x00002b9d fetcht 0x00000001 , 0x000046e8 + 00016032 0x00002b9e call 0x00003ea7 + 00016033 0x00002b9f fetcht 0x00000001 , 0x000046e9 + 00016034 0x00002ba0 call 0x00003ea7 + 00016035 0x00002ba1 fetcht 0x00000001 , 0x000046ea + 00016036 0x00002ba2 call 0x00003ea7 + 00016037 0x00002ba3 fetcht 0x00000001 , 0x000046eb + 00016038 0x00002ba4 branch 0x00003ea7 + 00016039 0x00002ba7 sub 0x00000002 , 0x000000ff , 0x0000003e + 00016040 0x00002ba8 rtn 0x00000005 + 00016041 0x00002ba9 and 0x00000002 , 0x0000007f , 0x00000007 + 00016042 0x00002baa hfetch 0x00000004 , 0x0000811c + 00016043 0x00002bab qisolate1 0x0000003f + 00016044 0x00002bac hfetch 0x00000004 , 0x00008078 + 00016045 0x00002bad qsetflag 0x00000001 , 0x0000003f + 00016046 0x00002bae hstore 0x00000004 , 0x00008078 + 00016047 0x00002baf hfetch 0x00000004 , 0x0000807c + 00016048 0x00002bb0 nqsetflag 0x00000001 , 0x0000003f + 00016049 0x00002bb1 hstore 0x00000004 , 0x0000807c + 00016050 0x00002bb2 rtn + 00016051 0x00002bb5 enable 0x00000028 + 00016052 0x00002bb6 hfetch 0x00000004 , 0x00008138 + 00016053 0x00002bb7 setflag 0x00000028 , 0x0000001a , 0x0000003f + 00016054 0x00002bb8 hstore 0x00000004 , 0x0000804c + 00016055 0x00002bb9 call 0x00002c21 + 00016056 0x00002bba call 0x00004482 + 00016057 0x00002bbb call 0x00003e9f + 00016058 0x00002bbd branch 0x00003ebf + 00016059 0x00002bc2 call 0x00003ebf + 00016060 0x00002bc3 fetch 0x00000001 , 0x000000a0 + 00016061 0x00002bc4 nrtn 0x00000034 + 00016062 0x00002bc5 branch 0x000067ed + 00016063 0x00002bc8 call 0x00003ee0 + 00016064 0x00002bc9 arg 0x00000019 , 0x00000002 + 00016065 0x00002bca fetch 0x00000004 , 0x000046d3 + 00016066 0x00002bcb isolate1 0x00000012 , 0x0000003f + 00016067 0x00002bcc call 0x00003ede , 0x00000001 + 00016068 0x00002bcd call 0x0000680e + 00016069 0x00002bce call 0x000063ee + 00016070 0x00002bd2 fetcht 0x00000001 , 0x000046e2 + 00016071 0x00002bd3 call 0x000067dd + 00016072 0x00002bd4 fetcht 0x00000001 , 0x000046e3 + 00016073 0x00002bd5 call 0x000067dd + 00016074 0x00002bd6 fetcht 0x00000001 , 0x000046e4 + 00016075 0x00002bd7 call 0x000067dd + 00016076 0x00002bd9 fetcht 0x00000001 , 0x000046e5 + 00016077 0x00002bda call 0x000067dd + 00016078 0x00002bdb fetcht 0x00000001 , 0x000046e6 + 00016079 0x00002bdc call 0x000067dd + 00016080 0x00002bdd fetcht 0x00000001 , 0x000046e7 + 00016081 0x00002bde call 0x000067dd + 00016082 0x00002bdf fetcht 0x00000001 , 0x000046ed + 00016083 0x00002be0 call 0x000067dd + 00016084 0x00002be1 fetcht 0x00000001 , 0x000046e8 + 00016085 0x00002be2 call 0x000067dd + 00016086 0x00002be3 fetcht 0x00000001 , 0x000046e9 + 00016087 0x00002be4 call 0x000067dd + 00016088 0x00002be5 fetcht 0x00000001 , 0x000046ea + 00016089 0x00002be6 call 0x000067dd + 00016090 0x00002be7 fetcht 0x00000001 , 0x000046eb + 00016091 0x00002be8 call 0x000067dd + 00016092 0x00002be9 fetcht 0x00000001 , 0x000046f3 + 00016093 0x00002bea branch 0x000067e1 + 00016094 0x00002bef arg 0x0000001e , 0x00000002 + 00016095 0x00002bf0 rtn + 00016096 0x00002bf3 bpatch 0x000000e4 , 0x0000401c + 00016097 0x00002bf4 call 0x00003eee + 00016098 0x00002bf5 call 0x00003f36 + 00016099 0x00002bf6 fetch 0x00000001 , 0x000046b8 + 00016100 0x00002bf7 fetcht 0x00000001 , 0x000046b7 + 00016101 0x00002bf8 store 0x00000001 , 0x000046b7 + 00016102 0x00002bf9 isub 0x00000002 , 0x0000003e + 00016103 0x00002bfa nbranch 0x000033d4 , 0x00000005 + 00016104 0x00002bfb fetch 0x00000001 , 0x000046be + 00016105 0x00002bfc fetcht 0x00000001 , 0x000046bd + 00016106 0x00002bfd store 0x00000001 , 0x000046bd + 00016107 0x00002bfe isub 0x00000002 , 0x0000003e + 00016108 0x00002bff nbranch 0x000033d4 , 0x00000005 + 00016109 0x00002c00 rtn + 00016110 0x00002c02 fetch 0x00000001 , 0x000046ea + 00016111 0x00002c03 rtneq 0x000000ff + 00016112 0x00002c04 arg 0x00000000 , 0x00000011 + 00016113 0x00002c05 fetcht 0x00000001 , 0x000046ea + 00016114 0x00002c06 call 0x0000681d + 00016115 0x00002c07 setflag 0x00000001 , 0x00000000 , 0x00000011 + 00016116 0x00002c08 fetcht 0x00000001 , 0x000046eb + 00016117 0x00002c09 call 0x0000681d + 00016118 0x00002c0a setflag 0x00000001 , 0x00000001 , 0x00000011 + 00016119 0x00002c0b copy 0x00000011 , 0x0000003f + 00016120 0x00002c0c store 0x00000001 , 0x000046b8 + 00016121 0x00002c0d beq 0x00000001 , 0x00003efe + 00016122 0x00002c0e beq 0x00000002 , 0x00003f02 + 00016123 0x00002c0f fetch 0x00000001 , 0x000046b9 + 00016124 0x00002c10 bbit1 0x00000007 , 0x00003f0e + 00016125 0x00002c11 rtn + 00016126 0x00002c14 fetch 0x00000001 , 0x000046b7 + 00016127 0x00002c15 beq 0x00000000 , 0x00003f06 + 00016128 0x00002c16 beq 0x00000003 , 0x00003f08 + 00016129 0x00002c17 rtn + 00016130 0x00002c19 fetch 0x00000001 , 0x000046b7 + 00016131 0x00002c1a beq 0x00000000 , 0x00003f0a + 00016132 0x00002c1b beq 0x00000003 , 0x00003f0c + 00016133 0x00002c1c rtn + 00016134 0x00002c1e jam 0x00000082 , 0x000046b9 + 00016135 0x00002c1f rtn + 00016136 0x00002c21 jam 0x00000081 , 0x000046b9 + 00016137 0x00002c22 rtn + 00016138 0x00002c24 jam 0x00000080 , 0x000046b9 + 00016139 0x00002c25 rtn + 00016140 0x00002c27 jam 0x00000083 , 0x000046b9 + 00016141 0x00002c28 rtn + 00016142 0x00002c2a fetch 0x00000001 , 0x000046b9 + 00016143 0x00002c2b set0 0x00000007 , 0x0000003f + 00016144 0x00002c2c store 0x00000001 , 0x000046b9 + 00016145 0x00002c2d beq 0x00000000 , 0x00003f16 + 00016146 0x00002c2e beq 0x00000001 , 0x00003f19 + 00016147 0x00002c2f beq 0x00000002 , 0x00003f1c + 00016148 0x00002c30 beq 0x00000003 , 0x00003f1f + 00016149 0x00002c31 rtn + 00016150 0x00002c33 fetch 0x00000001 , 0x000046b8 + 00016151 0x00002c34 beq 0x00000003 , 0x00003f22 + 00016152 0x00002c35 rtn + 00016153 0x00002c37 fetch 0x00000001 , 0x000046b8 + 00016154 0x00002c38 beq 0x00000000 , 0x00003f22 + 00016155 0x00002c39 rtn + 00016156 0x00002c3b fetch 0x00000001 , 0x000046b8 + 00016157 0x00002c3c beq 0x00000003 , 0x00003f2c + 00016158 0x00002c3d rtn + 00016159 0x00002c3f fetch 0x00000001 , 0x000046b8 + 00016160 0x00002c40 beq 0x00000000 , 0x00003f2c + 00016161 0x00002c41 rtn + 00016162 0x00002c43 fetch 0x00000001 , 0x000046bc + 00016163 0x00002c44 increase 0x00000001 , 0x0000003f + 00016164 0x00002c45 store 0x00000001 , 0x000046bc + 00016165 0x00002c46 sub 0x0000003f , 0x00000001 , 0x0000003e + 00016166 0x00002c47 rtn 0x00000002 + 00016167 0x00002c48 jam 0x00000000 , 0x000046bc + 00016168 0x00002c49 fetch 0x00000001 , 0x000046ba + 00016169 0x00002c4a increase 0x00000001 , 0x0000003f + 00016170 0x00002c4b store 0x00000001 , 0x000046ba + 00016171 0x00002c4c rtn + 00016172 0x00002c4e fetch 0x00000001 , 0x000046bb + 00016173 0x00002c4f increase 0x00000001 , 0x0000003f + 00016174 0x00002c50 store 0x00000001 , 0x000046bb + 00016175 0x00002c51 sub 0x0000003f , 0x00000001 , 0x0000003e + 00016176 0x00002c52 rtn 0x00000002 + 00016177 0x00002c53 jam 0x00000000 , 0x000046bb + 00016178 0x00002c54 fetch 0x00000001 , 0x000046ba + 00016179 0x00002c55 increase 0xffffffff , 0x0000003f + 00016180 0x00002c56 store 0x00000001 , 0x000046ba + 00016181 0x00002c57 rtn + 00016182 0x00002c5b fetch 0x00000001 , 0x000046e8 + 00016183 0x00002c5c rtneq 0x000000ff + 00016184 0x00002c5d arg 0x00000000 , 0x00000011 + 00016185 0x00002c5e fetcht 0x00000001 , 0x000046e8 + 00016186 0x00002c5f call 0x0000681d + 00016187 0x00002c60 setflag 0x00000001 , 0x00000000 , 0x00000011 + 00016188 0x00002c61 fetcht 0x00000001 , 0x000046e9 + 00016189 0x00002c62 call 0x0000681d + 00016190 0x00002c63 setflag 0x00000001 , 0x00000001 , 0x00000011 + 00016191 0x00002c64 copy 0x00000011 , 0x0000003f + 00016192 0x00002c65 store 0x00000001 , 0x000046be + 00016193 0x00002c66 beq 0x00000001 , 0x00003f46 + 00016194 0x00002c67 beq 0x00000002 , 0x00003f4a + 00016195 0x00002c68 fetch 0x00000001 , 0x000046bf + 00016196 0x00002c69 bbit1 0x00000007 , 0x00003f56 + 00016197 0x00002c6a rtn + 00016198 0x00002c6d fetch 0x00000001 , 0x000046bd + 00016199 0x00002c6e beq 0x00000000 , 0x00003f4e + 00016200 0x00002c6f beq 0x00000003 , 0x00003f50 + 00016201 0x00002c70 rtn + 00016202 0x00002c72 fetch 0x00000001 , 0x000046bd + 00016203 0x00002c73 beq 0x00000000 , 0x00003f52 + 00016204 0x00002c74 beq 0x00000003 , 0x00003f54 + 00016205 0x00002c75 rtn + 00016206 0x00002c77 jam 0x00000082 , 0x000046bf + 00016207 0x00002c78 rtn + 00016208 0x00002c7a jam 0x00000081 , 0x000046bf + 00016209 0x00002c7b rtn + 00016210 0x00002c7d jam 0x00000080 , 0x000046bf + 00016211 0x00002c7e rtn + 00016212 0x00002c80 jam 0x00000083 , 0x000046bf + 00016213 0x00002c81 rtn + 00016214 0x00002c83 fetch 0x00000001 , 0x000046bf + 00016215 0x00002c84 set0 0x00000007 , 0x0000003f + 00016216 0x00002c85 store 0x00000001 , 0x000046bf + 00016217 0x00002c86 beq 0x00000000 , 0x00003f5e + 00016218 0x00002c87 beq 0x00000001 , 0x00003f61 + 00016219 0x00002c88 beq 0x00000002 , 0x00003f64 + 00016220 0x00002c89 beq 0x00000003 , 0x00003f67 + 00016221 0x00002c8a rtn + 00016222 0x00002c8c fetch 0x00000001 , 0x000046be + 00016223 0x00002c8d beq 0x00000003 , 0x00003f6a + 00016224 0x00002c8e rtn + 00016225 0x00002c90 fetch 0x00000001 , 0x000046be + 00016226 0x00002c91 beq 0x00000000 , 0x00003f6a + 00016227 0x00002c92 rtn + 00016228 0x00002c94 fetch 0x00000001 , 0x000046be + 00016229 0x00002c95 beq 0x00000003 , 0x00003f6f + 00016230 0x00002c96 rtn + 00016231 0x00002c98 fetch 0x00000001 , 0x000046be + 00016232 0x00002c99 beq 0x00000000 , 0x00003f6f + 00016233 0x00002c9a rtn + 00016234 0x00002c9c jam 0x00000000 , 0x000046c2 + 00016235 0x00002c9d fetch 0x00000001 , 0x000046c0 + 00016236 0x00002c9e increase 0x00000001 , 0x0000003f + 00016237 0x00002c9f store 0x00000001 , 0x000046c0 + 00016238 0x00002ca0 rtn + 00016239 0x00002ca2 jam 0x00000000 , 0x000046c1 + 00016240 0x00002ca3 fetch 0x00000001 , 0x000046c0 + 00016241 0x00002ca4 increase 0xffffffff , 0x0000003f + 00016242 0x00002ca5 store 0x00000001 , 0x000046c0 + 00016243 0x00002ca6 rtn + 00016244 0x00002caa setarg 0x00000002 + 00016245 0x00002cab store 0x00000001 , 0x00004680 + 00016246 0x00002cac rtn + 00016247 0x00002caf fetch 0x00000001 , 0x000041e2 + 00016248 0x00002cb0 rtn 0x00000034 + 00016249 0x00002cb1 call 0x00005271 + 00016250 0x00002cb2 nrtn 0x00000034 + 00016251 0x00002cb3 fetch 0x00000004 , 0x000046d3 + 00016252 0x00002cb4 bbit1 0x00000003 , 0x00003f8a + 00016253 0x00002cb5 bbit1 0x00000000 , 0x00003f8a + 00016254 0x00002cb6 bbit1 0x00000005 , 0x00003f8a + 00016255 0x00002cb7 call 0x00003f97 + 00016256 0x00002cb8 nrtn 0x00000028 + 00016257 0x00002cba arg 0x00000009 , 0x00000011 + 00016258 0x00002cbb call 0x00004d63 + 00016259 0x00002cbc fetch 0x00000002 , 0x0000424e + 00016260 0x00002cbd istore 0x00000002 , 0x00000005 + 00016261 0x00002cbe setarg 0x000002a1 + 00016262 0x00002cbf istore 0x00000002 , 0x00000005 + 00016263 0x00002cc0 fetch 0x00000007 , 0x0000469a + 00016264 0x00002cc1 istore 0x00000007 , 0x00000005 + 00016265 0x00002cc2 rtn + 00016266 0x00002cc6 setarg 0x00000000 + 00016267 0x00002cc7 store 0x00000007 , 0x0000469a + 00016268 0x00002cc8 branch 0x00003f81 + 00016269 0x00002ccc fetch 0x00000002 , 0x000046aa + 00016270 0x00002ccd store 0x00000002 , 0x000046b0 + 00016271 0x00002cce rtn + 00016272 0x00002cd2 bpatch 0x000000e5 , 0x0000401c + 00016273 0x00002cd3 arg 0x00000007 , 0x00000011 + 00016274 0x00002cd4 fetcht 0x00000002 , 0x0000446f + 00016275 0x00002cd5 call 0x00005a64 + 00016276 0x00002cd6 fetch 0x00000007 , 0x0000469a + 00016277 0x00002cd7 istore 0x00000007 , 0x00000005 + 00016278 0x00002cd8 rtn + 00016279 0x00002cdb bpatch 0x000000e6 , 0x0000401c + 00016280 0x00002cdc disable 0x00000028 + 00016281 0x00002cdd setarg 0x00000000 + 00016282 0x00002cde store 0x00000006 , 0x0000469b + 00016283 0x00002cdf call 0x00003fb5 + 00016284 0x00002ce0 call 0x00004079 + 00016285 0x00002ce1 call 0x0000407e + 00016286 0x00002ce2 call 0x00004099 + 00016287 0x00002ce3 nrtn 0x00000028 + 00016288 0x00002ce4 call 0x00003f8d + 00016289 0x00002ce5 arg 0x00000008 , 0x00000007 + 00016290 0x00002ce6 branch 0x000043ce + 00016291 0x00002ce9 fetch 0x00000002 , 0x0000469b + 00016292 0x00002cea sub 0x0000003f , 0x00000000 , 0x0000003f + 00016293 0x00002ceb store 0x00000002 , 0x0000469b + 00016294 0x00002cec branch 0x00007fe7 + 00016295 0x00002cee fetch 0x00000002 , 0x0000469d + 00016296 0x00002cef sub 0x0000003f , 0x00000000 , 0x0000003f + 00016297 0x00002cf0 store 0x00000002 , 0x0000469d + 00016298 0x00002cf1 branch 0x00007fe7 + 00016299 0x00002cf3 fetch 0x00000002 , 0x0000469d + 00016300 0x00002cf4 sub 0x0000003f , 0x00000000 , 0x0000003f + 00016301 0x00002cf5 store 0x00000002 , 0x0000469d + 00016302 0x00002cf6 fetch 0x00000002 , 0x0000469b + 00016303 0x00002cf7 sub 0x0000003f , 0x00000000 , 0x0000003f + 00016304 0x00002cf8 store 0x00000002 , 0x0000469b + 00016305 0x00002cf9 call 0x00004002 + 00016306 0x00002cfa branch 0x00007fe7 + 00016307 0x00002cfc call 0x00004002 + 00016308 0x00002cfd branch 0x00007fe7 + 00016309 0x00002cff fetch 0x00000001 , 0x00004239 + 00016310 0x00002d00 rtnne 0x00000000 + 00016311 0x00002d01 fetch 0x00000001 , 0x000046e0 + 00016312 0x00002d02 beq 0x00000000 , 0x00003fe2 + 00016313 0x00002d03 beq 0x00000001 , 0x00003fe2 + 00016314 0x00002d04 beq 0x00000002 , 0x00003fe2 + 00016315 0x00002d05 beq 0x00000003 , 0x00003fe2 + 00016316 0x00002d06 beq 0x00000004 , 0x00003fc4 + 00016317 0x00002d07 beq 0x00000005 , 0x00004010 + 00016318 0x00002d08 beq 0x00000006 , 0x00003fe2 + 00016319 0x00002d09 branch 0x00003fe2 + 00016320 0x00002d0c fetch 0x00000001 , 0x000046a7 + 00016321 0x00002d0d call 0x0000405d , 0x00000034 + 00016322 0x00002d0e jam 0x00000001 , 0x000046a7 + 00016323 0x00002d0f rtn + 00016324 0x00002d13 call 0x00003fc0 + 00016325 0x00002d14 fetcht 0x00000001 , 0x000046f3 + 00016326 0x00002d15 call 0x0000681d + 00016327 0x00002d16 nrtn 0x00000001 + 00016328 0x00002d17 setarg 0x00000000 + 00016329 0x00002d18 call 0x00006414 + 00016330 0x00002d19 bne 0x00000030 , 0x000040d1 + 00016331 0x00002d1a setarg 0x00000002 + 00016332 0x00002d1b call 0x00006414 + 00016333 0x00002d1c rtnbit0 0x00000007 + 00016334 0x00002d1d call 0x0000405d + 00016335 0x00002d1e call 0x00003fde + 00016336 0x00002d1f store 0x00000001 , 0x000046a1 + 00016337 0x00002d20 rshift4 0x0000003f , 0x0000003f + 00016338 0x00002d21 call 0x00004169 + 00016339 0x00002d22 store 0x00000001 , 0x0000469c + 00016340 0x00002d23 fetch 0x00000001 , 0x000046a1 + 00016341 0x00002d24 and 0x0000003f , 0x0000000f , 0x0000003f + 00016342 0x00002d25 call 0x00004169 + 00016343 0x00002d26 store 0x00000001 , 0x0000469e + 00016344 0x00002d27 fetch 0x00000001 , 0x000046f6 + 00016345 0x00002d28 beq 0x00000000 , 0x00003fa3 + 00016346 0x00002d29 beq 0x00000001 , 0x00003fab + 00016347 0x00002d2a beq 0x00000002 , 0x00003fa7 + 00016348 0x00002d2b beq 0x00000003 , 0x00003fb3 + 00016349 0x00002d2c rtn + 00016350 0x00002d2f setarg 0x00000012 + 00016351 0x00002d30 branch 0x00006414 + 00016352 0x00002d33 beq 0x00000031 , 0x00003fea + 00016353 0x00002d34 branch 0x000040d1 + 00016354 0x00002d37 call 0x00003fc0 + 00016355 0x00002d38 disable 0x00000028 + 00016356 0x00002d39 fetcht 0x00000001 , 0x000046f3 + 00016357 0x00002d3a call 0x0000681d + 00016358 0x00002d3b nrtn 0x00000001 + 00016359 0x00002d3c setarg 0x00000000 + 00016360 0x00002d3d call 0x00006414 + 00016361 0x00002d3e bne 0x00000030 , 0x00003fe0 + 00016362 0x00002d40 setarg 0x00000002 + 00016363 0x00002d41 call 0x00006414 + 00016364 0x00002d42 rtnbit0 0x00000007 + 00016365 0x00002d43 call 0x0000405d + 00016366 0x00002d44 fetch 0x00000001 , 0x0000469b + 00016367 0x00002d45 call 0x00004165 + 00016368 0x00002d46 store 0x00000002 , 0x0000469b + 00016369 0x00002d47 fetch 0x00000001 , 0x0000469d + 00016370 0x00002d48 call 0x00004165 + 00016371 0x00002d49 store 0x00000002 , 0x0000469d + 00016372 0x00002d4a fetch 0x00000001 , 0x000046f6 + 00016373 0x00002d4b beq 0x00000000 , 0x00003ffa + 00016374 0x00002d4c beq 0x00000001 , 0x00003ffc + 00016375 0x00002d4d beq 0x00000002 , 0x00003ffe + 00016376 0x00002d4e beq 0x00000003 , 0x00004000 + 00016377 0x00002d4f rtn + 00016378 0x00002d52 call 0x00003fa3 + 00016379 0x00002d53 branch 0x000040b3 + 00016380 0x00002d55 call 0x00003fab + 00016381 0x00002d56 branch 0x000040b3 + 00016382 0x00002d58 call 0x00003fa7 + 00016383 0x00002d59 branch 0x000040b3 + 00016384 0x00002d5b call 0x00003fb3 + 00016385 0x00002d5c branch 0x000040b3 + 00016386 0x00002d5f fetch 0x00000002 , 0x0000469d + 00016387 0x00002d60 fetcht 0x00000002 , 0x0000469b + 00016388 0x00002d61 store 0x00000002 , 0x0000469b + 00016389 0x00002d62 storet 0x00000002 , 0x0000469d + 00016390 0x00002d63 rtn + 00016391 0x00002d66 call 0x0000640f + 00016392 0x00002d67 nop 0x00000064 + 00016393 0x00002d68 copy 0x00000012 , 0x0000003f + 00016394 0x00002d69 call 0x00006414 + 00016395 0x00002d6a copy 0x0000003f , 0x00000012 + 00016396 0x00002d6b call 0x00006411 + 00016397 0x00002d6c nop 0x00000064 + 00016398 0x00002d6d copy 0x00000012 , 0x0000003f + 00016399 0x00002d6e rtn + 00016400 0x00002d70 disable 0x00000028 + 00016401 0x00002d71 fetcht 0x00000001 , 0x000046f3 + 00016402 0x00002d72 call 0x0000681d + 00016403 0x00002d73 nrtn 0x00000001 + 00016404 0x00002d74 arg 0x00000002 , 0x00000012 + 00016405 0x00002d75 call 0x00004007 + 00016406 0x00002d76 rtnbit0 0x00000007 + 00016407 0x00002d77 arg 0x00000000 , 0x00000012 + 00016408 0x00002d78 call 0x00004007 + 00016409 0x00002d79 store 0x00000001 , 0x000046dd + 00016410 0x00002d7a bne 0x0000003e , 0x00004145 + 00016411 0x00002d7b fetch 0x00000001 , 0x000046a7 + 00016412 0x00002d7c call 0x00004039 , 0x00000034 + 00016413 0x00002d7d jam 0x00000001 , 0x000046a7 + 00016414 0x00002d7e call 0x00004039 + 00016415 0x00002d7f fetch 0x00000001 , 0x000046a1 + 00016416 0x00002d80 rshift4 0x0000003f , 0x0000003f + 00016417 0x00002d81 call 0x00004169 + 00016418 0x00002d82 store 0x00000001 , 0x0000469c + 00016419 0x00002d83 fetch 0x00000001 , 0x000046a1 + 00016420 0x00002d84 and 0x0000003f , 0x0000000f , 0x0000003f + 00016421 0x00002d85 call 0x00004169 + 00016422 0x00002d86 store 0x00000001 , 0x0000469e + 00016423 0x00002d87 fetch 0x00000001 , 0x000046f6 + 00016424 0x00002d88 beq 0x00000000 , 0x00004031 + 00016425 0x00002d89 beq 0x00000001 , 0x00004035 + 00016426 0x00002d8a beq 0x00000002 , 0x00004033 + 00016427 0x00002d8b beq 0x00000003 , 0x00004037 + 00016428 0x00002d8c rtn + 00016429 0x00002d8f fetch 0x00000001 , 0x000046a4 + 00016430 0x00002d90 beq 0x00000000 , 0x00004051 + 00016431 0x00002d91 beq 0x00000001 , 0x00004045 + 00016432 0x00002d92 rtn + 00016433 0x00002d96 call 0x00003fa3 + 00016434 0x00002d97 branch 0x0000402d + 00016435 0x00002d9a call 0x00003fa7 + 00016436 0x00002d9b branch 0x0000402d + 00016437 0x00002d9e call 0x00003fab + 00016438 0x00002d9f branch 0x0000402d + 00016439 0x00002da2 call 0x00003fb3 + 00016440 0x00002da3 branch 0x0000402d + 00016441 0x00002da6 call 0x0000640f + 00016442 0x00002da7 call 0x0000405d + 00016443 0x00002da8 arg 0x00000005 , 0x0000003f + 00016444 0x00002da9 call 0x00006414 + 00016445 0x00002daa store 0x00000001 , 0x000046a1 + 00016446 0x00002dab arg 0x00000007 , 0x0000003f + 00016447 0x00002dac call 0x00006414 + 00016448 0x00002dad store 0x00000001 , 0x000046a2 + 00016449 0x00002dae arg 0x00000008 , 0x0000003f + 00016450 0x00002daf call 0x00006414 + 00016451 0x00002db0 store 0x00000001 , 0x000046a3 + 00016452 0x00002db1 branch 0x00006411 + 00016453 0x00002db5 fetch 0x00000001 , 0x000046a2 + 00016454 0x00002db6 rtnne 0x00000000 + 00016455 0x00002db7 fetch 0x00000001 , 0x000046a3 + 00016456 0x00002db8 sub 0x0000003f , 0x0000002d , 0x0000003e + 00016457 0x00002db9 rtn 0x00000002 + 00016458 0x00002dba jam 0x00000000 , 0x000046a4 + 00016459 0x00002dbb setarg 0x0000ba41 + 00016460 0x00002dbc call 0x00006405 + 00016461 0x00002dbd setarg 0x00000032 + 00016462 0x00002dbe call 0x00006405 + 00016463 0x00002dbf setarg 0x0000b541 + 00016464 0x00002dc0 branch 0x00006405 + 00016465 0x00002dc2 fetch 0x00000001 , 0x000046a2 + 00016466 0x00002dc3 rtnne 0x00000000 + 00016467 0x00002dc4 fetch 0x00000001 , 0x000046a3 + 00016468 0x00002dc5 sub 0x0000003f , 0x0000002d , 0x0000003e + 00016469 0x00002dc6 nrtn 0x00000002 + 00016470 0x00002dc7 jam 0x00000001 , 0x000046a4 + 00016471 0x00002dc8 setarg 0x0000ba41 + 00016472 0x00002dc9 call 0x00006405 + 00016473 0x00002dca setarg 0x00008032 + 00016474 0x00002dcb call 0x00006405 + 00016475 0x00002dcc setarg 0x0000b541 + 00016476 0x00002dcd branch 0x00006405 + 00016477 0x00002dd2 arg 0x00000003 , 0x0000003f + 00016478 0x00002dd3 call 0x00006414 + 00016479 0x00002dd4 store 0x00000002 , 0x0000469b + 00016480 0x00002dd5 arg 0x00000004 , 0x0000003f + 00016481 0x00002dd6 call 0x00006414 + 00016482 0x00002dd7 store 0x00000002 , 0x0000469d + 00016483 0x00002dd8 rtn + 00016484 0x00002ddb arg 0x0000001b , 0x00000002 + 00016485 0x00002ddc call 0x000067fb + 00016486 0x00002ddd arg 0x0000001b , 0x00000002 + 00016487 0x00002dde call 0x0000681d + 00016488 0x00002ddf rtn 0x00000001 + 00016489 0x00002de0 hfetch 0x00000001 , 0x00008109 + 00016490 0x00002de1 set1 0x00000004 , 0x0000003f + 00016491 0x00002de2 hstore 0x00000001 , 0x00008109 + 00016492 0x00002de3 rtn + 00016493 0x00002de6 fetcht 0x00000001 , 0x000046c0 + 00016494 0x00002de7 hfetch 0x00000001 , 0x00008109 + 00016495 0x00002de8 iadd 0x00000002 , 0x0000003f + 00016496 0x00002de9 rtn 0x00000034 + 00016497 0x00002dea store 0x00000001 , 0x0000469f + 00016498 0x00002deb jam 0x00000000 , 0x000046c0 + 00016499 0x00002dec branch 0x00007fe7 + 00016500 0x00002dee fetcht 0x00000001 , 0x000046c0 + 00016501 0x00002def hfetch 0x00000001 , 0x00008109 + 00016502 0x00002df0 iadd 0x00000002 , 0x0000003f + 00016503 0x00002df1 store 0x00000001 , 0x000046c0 + 00016504 0x00002df2 rtn + 00016505 0x00002df4 fetch 0x00000001 , 0x000046c0 + 00016506 0x00002df5 rtn 0x00000034 + 00016507 0x00002df6 store 0x00000001 , 0x0000469f + 00016508 0x00002df7 jam 0x00000000 , 0x000046c0 + 00016509 0x00002df8 branch 0x00007fe7 + 00016510 0x00002dfb fetch 0x00000001 , 0x000046ba + 00016511 0x00002dfc rtn 0x00000034 + 00016512 0x00002dfd store 0x00000001 , 0x000046a0 + 00016513 0x00002dfe jam 0x00000000 , 0x000046ba + 00016514 0x00002dff branch 0x00007fe7 + 00016515 0x00002e02 arg 0x00000000 , 0x00000011 + 00016516 0x00002e03 fetcht 0x00000001 , 0x000046e2 + 00016517 0x00002e04 call 0x0000681d + 00016518 0x00002e05 setflag 0x00000001 , 0x00000000 , 0x00000011 + 00016519 0x00002e06 fetcht 0x00000001 , 0x000046e3 + 00016520 0x00002e07 call 0x0000681d + 00016521 0x00002e08 setflag 0x00000001 , 0x00000001 , 0x00000011 + 00016522 0x00002e09 fetcht 0x00000001 , 0x000046e4 + 00016523 0x00002e0a call 0x0000681d + 00016524 0x00002e0b setflag 0x00000001 , 0x00000002 , 0x00000011 + 00016525 0x00002e0c call 0x00004090 + 00016526 0x00002e0d copy 0x00000011 , 0x0000003f + 00016527 0x00002e0e rtn + 00016528 0x00002e10 fetch 0x00000001 , 0x000046e5 + 00016529 0x00002e11 rtneq 0x000000ff + 00016530 0x00002e12 fetcht 0x00000001 , 0x000046e5 + 00016531 0x00002e13 call 0x0000681d + 00016532 0x00002e14 setflag 0x00000001 , 0x00000003 , 0x00000011 + 00016533 0x00002e15 fetcht 0x00000001 , 0x000046e6 + 00016534 0x00002e16 call 0x0000681d + 00016535 0x00002e17 setflag 0x00000001 , 0x00000004 , 0x00000011 + 00016536 0x00002e18 rtn + 00016537 0x00002e1b call 0x00004083 + 00016538 0x00002e1c call 0x000040a8 + 00016539 0x00002e1d call 0x000040a3 + 00016540 0x00002e1e copy 0x00000011 , 0x0000003f + 00016541 0x00002e1f fetcht 0x00000001 , 0x0000469a + 00016542 0x00002e20 store 0x00000001 , 0x0000469a + 00016543 0x00002e21 ixor 0x00000002 , 0x0000003f + 00016544 0x00002e22 sub 0x0000003f , 0x00000000 , 0x0000003e + 00016545 0x00002e23 rtn 0x00000005 + 00016546 0x00002e24 branch 0x00007fe7 + 00016547 0x00002e27 rtnmark0 0x00000026 + 00016548 0x00002e28 copy 0x00000011 , 0x0000003f + 00016549 0x00002e29 rtn 0x00000034 + 00016550 0x00002e2a store 0x00000001 , 0x0000469a + 00016551 0x00002e2b branch 0x00007fe7 + 00016552 0x00002e2f fetch 0x00000002 , 0x00004682 + 00016553 0x00002e30 bbit1 0x00000009 , 0x000040ad + 00016554 0x00002e31 fetch 0x00000002 , 0x00004682 + 00016555 0x00002e32 bbit1 0x00000000 , 0x000040b0 + 00016556 0x00002e33 rtn + 00016557 0x00002e35 copy 0x00000011 , 0x0000003f + 00016558 0x00002e36 nbranch 0x00005820 , 0x00000034 + 00016559 0x00002e37 branch 0x00005822 + 00016560 0x00002e39 copy 0x00000011 , 0x0000003f + 00016561 0x00002e3a nbranch 0x00002bc7 , 0x00000034 + 00016562 0x00002e3b branch 0x00002bc9 + 00016563 0x00002e3f bpatch 0x000000e7 , 0x0000401c + 00016564 0x00002e40 arg 0x0000001a , 0x00000002 + 00016565 0x00002e41 fetch 0x00000004 , 0x000046d3 + 00016566 0x00002e42 isolate1 0x00000012 , 0x0000003f + 00016567 0x00002e43 call 0x000040be , 0x00000001 + 00016568 0x00002e44 call 0x0000681d + 00016569 0x00002e45 rtn 0x00000001 + 00016570 0x00002e46 setarg 0x0000000a + 00016571 0x00002e47 call 0x00006414 + 00016572 0x00002e48 nop 0x000003e8 + 00016573 0x00002e49 branch 0x000040b3 + 00016574 0x00002e4b arg 0x0000001f , 0x00000002 + 00016575 0x00002e4c rtn + 00016576 0x00002e4f fetch 0x00000004 , 0x000046d3 + 00016577 0x00002e50 bbit1 0x00000012 , 0x000040c4 + 00016578 0x00002e52 arg 0x0000001a , 0x00000002 + 00016579 0x00002e53 branch 0x000067fe + 00016580 0x00002e55 arg 0x0000001f , 0x00000002 + 00016581 0x00002e56 branch 0x000067fe + 00016582 0x00002e5a call 0x00003d36 + 00016583 0x00002e5b rtn 0x0000002b + 00016584 0x00002e5c call 0x000040c0 + 00016585 0x00002e5d fetch 0x00000001 , 0x000046e0 + 00016586 0x00002e5e beq 0x00000005 , 0x000040d5 + 00016587 0x00002e60 call 0x000040d9 + 00016588 0x00002e61 beq 0x00000030 , 0x000040e0 + 00016589 0x00002e62 beq 0x00000031 , 0x000040ea + 00016590 0x00002e63 call 0x000040d1 + 00016591 0x00002e64 nop 0x000003e8 + 00016592 0x00002e65 branch 0x000040cb + 00016593 0x00002e67 bpatch 0x000000e8 , 0x0000401d + 00016594 0x00002e68 fetch 0x00000004 , 0x000046d3 + 00016595 0x00002e69 bbit1 0x00000012 , 0x000063e0 + 00016596 0x00002e6a branch 0x000063d1 + 00016597 0x00002e6d call 0x000040d9 + 00016598 0x00002e6e beq 0x0000003e , 0x0000414b + 00016599 0x00002e6f call 0x00004145 + 00016600 0x00002e70 branch 0x000040d5 + 00016601 0x00002e73 setarg 0x00000001 + 00016602 0x00002e74 call 0x00006414 + 00016603 0x00002e75 store 0x00000001 , 0x000046de + 00016604 0x00002e76 setarg 0x00000000 + 00016605 0x00002e77 call 0x00006414 + 00016606 0x00002e78 store 0x00000001 , 0x000046dd + 00016607 0x00002e79 rtn + 00016608 0x00002e7b fetch 0x00000001 , 0x000046de + 00016609 0x00002e7c beq 0x000000d1 , 0x00004139 + 00016610 0x00002e7d beq 0x000000d2 , 0x000040f8 + 00016611 0x00002e7e beq 0x00000002 , 0x000040ee + 00016612 0x00002e7f beq 0x00000054 , 0x000040e6 + 00016613 0x00002e80 rtn + 00016614 0x00002e82 jam 0x00000002 , 0x000046e0 + 00016615 0x00002e83 rtn + 00016616 0x00002e85 jam 0x00000006 , 0x000046e0 + 00016617 0x00002e86 rtn + 00016618 0x00002e88 fetch 0x00000001 , 0x000046de + 00016619 0x00002e89 beq 0x00000070 , 0x000040e8 + 00016620 0x00002e8a jam 0x00000001 , 0x000046e0 + 00016621 0x00002e8b rtn + 00016622 0x00002e8d jam 0x00000004 , 0x000046e0 + 00016623 0x00002e8e call 0x000040f6 + 00016624 0x00002e8f setarg 0x00003426 + 00016625 0x00002e90 call 0x00006413 + 00016626 0x00002e91 setarg 0x00000419 + 00016627 0x00002e92 call 0x00006413 + 00016628 0x00002e94 setarg 0x00000009 + 00016629 0x00002e95 branch 0x00006413 + 00016630 0x00002e97 setarg 0x00005a09 + 00016631 0x00002e98 branch 0x00006413 + 00016632 0x00002e9b jam 0x00000003 , 0x000046e0 + 00016633 0x00002e9c call 0x000040f6 + 00016634 0x00002e9d setarg 0x00000f0d + 00016635 0x00002e9e call 0x00006413 + 00016636 0x00002e9f setarg 0x0000e31d + 00016637 0x00002ea0 call 0x00006413 + 00016638 0x00002ea1 setarg 0x0000d27d + 00016639 0x00002ea2 call 0x00006413 + 00016640 0x00002ea3 call 0x00004102 + 00016641 0x00002ea4 branch 0x0000411a + 00016642 0x00002ea7 setarg 0x0000351b + 00016643 0x00002ea8 call 0x00006413 + 00016644 0x00002ea9 setarg 0x0000b428 + 00016645 0x00002eaa call 0x00006413 + 00016646 0x00002eab setarg 0x00004629 + 00016647 0x00002eac call 0x00006413 + 00016648 0x00002ead setarg 0x0000962a + 00016649 0x00002eae call 0x00006413 + 00016650 0x00002eaf setarg 0x00008c2b + 00016651 0x00002eb0 call 0x00006413 + 00016652 0x00002eb1 setarg 0x00006e2c + 00016653 0x00002eb2 call 0x00006413 + 00016654 0x00002eb3 setarg 0x0000642d + 00016655 0x00002eb4 call 0x00006413 + 00016656 0x00002eb5 setarg 0x00005f38 + 00016657 0x00002eb6 call 0x00006413 + 00016658 0x00002eb7 setarg 0x00000f39 + 00016659 0x00002eb8 call 0x00006413 + 00016660 0x00002eb9 setarg 0x0000323a + 00016661 0x00002eba call 0x00006413 + 00016662 0x00002ebb setarg 0x0000473b + 00016663 0x00002ebc call 0x00006413 + 00016664 0x00002ebd setarg 0x00001042 + 00016665 0x00002ebe branch 0x00006413 + 00016666 0x00002ec0 setarg 0x00002e54 + 00016667 0x00002ec1 call 0x00006413 + 00016668 0x00002ec2 setarg 0x0000f255 + 00016669 0x00002ec3 call 0x00006413 + 00016670 0x00002ec4 setarg 0x0000f461 + 00016671 0x00002ec5 call 0x00006413 + 00016672 0x00002ec6 setarg 0x00007063 + 00016673 0x00002ec7 call 0x00006413 + 00016674 0x00002ec8 setarg 0x00005275 + 00016675 0x00002ec9 call 0x00006413 + 00016676 0x00002eca setarg 0x00004176 + 00016677 0x00002ecb call 0x00006413 + 00016678 0x00002ecc setarg 0x0000ed77 + 00016679 0x00002ecd call 0x00006413 + 00016680 0x00002ece setarg 0x00002378 + 00016681 0x00002ecf call 0x00006413 + 00016682 0x00002ed0 setarg 0x00004679 + 00016683 0x00002ed1 call 0x00006413 + 00016684 0x00002ed2 setarg 0x0000e57a + 00016685 0x00002ed3 call 0x00006413 + 00016686 0x00002ed4 setarg 0x0000487c + 00016687 0x00002ed5 call 0x00006413 + 00016688 0x00002ed6 setarg 0x0000777e + 00016689 0x00002ed7 call 0x00006413 + 00016690 0x00002ed8 setarg 0x0000017f + 00016691 0x00002ed9 call 0x00006413 + 00016692 0x00002eda setarg 0x0000000b + 00016693 0x00002edb call 0x00006413 + 00016694 0x00002edc setarg 0x0000007f + 00016695 0x00002edd call 0x00006413 + 00016696 0x00002ede branch 0x000040f4 + 00016697 0x00002ee2 jam 0x00000000 , 0x000046e0 + 00016698 0x00002ee3 call 0x000040f6 + 00016699 0x00002ee4 setarg 0x0000100d + 00016700 0x00002ee5 call 0x00006413 + 00016701 0x00002ee6 setarg 0x0000ed1d + 00016702 0x00002ee7 call 0x00006413 + 00016703 0x00002ee8 setarg 0x0000807d + 00016704 0x00002ee9 call 0x00006413 + 00016705 0x00002eea call 0x00004102 + 00016706 0x00002eeb setarg 0x00000943 + 00016707 0x00002eec call 0x00006413 + 00016708 0x00002eed branch 0x0000411a + 00016709 0x00002ef1 fetcht 0x00000001 , 0x000046dc + 00016710 0x00002ef2 call 0x00006829 + 00016711 0x00002ef3 call 0x00007ec1 + 00016712 0x00002ef4 fetcht 0x00000001 , 0x000046dc + 00016713 0x00002ef5 call 0x00006825 + 00016714 0x00002ef6 branch 0x00007ec1 + 00016715 0x00002ef9 jam 0x00000005 , 0x000046e0 + 00016716 0x00002efa setarg 0x0000ba41 + 00016717 0x00002efb call 0x00006405 + 00016718 0x00002efc setarg 0x00000d11 + 00016719 0x00002efd call 0x00006405 + 00016720 0x00002efe setarg 0x0000041b + 00016721 0x00002eff call 0x00006405 + 00016722 0x00002f00 setarg 0x0000041c + 00016723 0x00002f01 call 0x00006405 + 00016724 0x00002f02 setarg 0x00000f1d + 00016725 0x00002f03 call 0x00006405 + 00016726 0x00002f04 setarg 0x00000032 + 00016727 0x00002f05 call 0x00006405 + 00016728 0x00002f06 setarg 0x0000b541 + 00016729 0x00002f07 branch 0x00006405 + 00016730 0x00002f0c setarg 0x0000ba41 + 00016731 0x00002f0d call 0x00006405 + 00016732 0x00002f0e nop 0x00000fa0 + 00016733 0x00002f0f setarg 0x0000ff7f + 00016734 0x00002f10 call 0x00006405 + 00016735 0x00002f11 copy 0x00000011 , 0x0000003f + 00016736 0x00002f12 call 0x00006405 + 00016737 0x00002f13 setarg 0x0000007f + 00016738 0x00002f14 call 0x00006405 + 00016739 0x00002f15 setarg 0x0000b541 + 00016740 0x00002f16 branch 0x00006405 + 00016741 0x00002f19 rtnbit0 0x00000007 + 00016742 0x00002f1a arg 0x0000ff00 , 0x00000002 + 00016743 0x00002f1b ior 0x00000002 , 0x0000003f + 00016744 0x00002f1c rtn + 00016745 0x00002f1f rtnbit0 0x00000003 + 00016746 0x00002f20 arg 0x000000f0 , 0x00000002 + 00016747 0x00002f21 ior 0x00000002 , 0x0000003f + 00016748 0x00002f22 rtn + 00016749 0x00002f26 call 0x00005892 + 00016750 0x00002f27 nrtn 0x00000034 + 00016751 0x00002f28 fetch 0x00000001 , 0x000046c5 + 00016752 0x00002f29 and 0x0000003f , 0x00000003 , 0x0000003f + 00016753 0x00002f2a rtnne 0x00000003 + 00016754 0x00002f2b fetch 0x00000004 , 0x000046d3 + 00016755 0x00002f2c bbit1 0x00000003 , 0x00004179 + 00016756 0x00002f2d bbit1 0x00000000 , 0x00004179 + 00016757 0x00002f2e bbit1 0x00000005 , 0x00004179 + 00016758 0x00002f2f call 0x00003f97 + 00016759 0x00002f30 nrtn 0x00000028 + 00016760 0x00002f31 branch 0x00003f90 + 00016761 0x00002f34 setarg 0x00000000 + 00016762 0x00002f35 store 0x00000007 , 0x0000469a + 00016763 0x00002f36 branch 0x00003f90 + 00016764 0x00002f39 copy 0x00000013 , 0x0000003f + 00016765 0x00002f3a beq 0x00000014 , 0x000041c3 + 00016766 0x00002f3b beq 0x00000001 , 0x000042ca + 00016767 0x00002f3c beq 0x00000015 , 0x000041d9 + 00016768 0x00002f3d beq 0x00000002 , 0x000041d9 + 00016769 0x00002f3e beq 0x00000005 , 0x000041d6 + 00016770 0x00002f3f beq 0x00000010 , 0x0000426c + 00016771 0x00002f40 beq 0x00000012 , 0x0000429b + 00016772 0x00002f41 beq 0x00000006 , 0x000041d5 + 00016773 0x00002f42 beq 0x00000004 , 0x000041cc + 00016774 0x00002f43 beq 0x00000013 , 0x000041cc + 00016775 0x00002f44 beq 0x0000000a , 0x000041ca + 00016776 0x00002f45 beq 0x0000002e , 0x000033cd + 00016777 0x00002f46 beq 0x00000031 , 0x000041b4 + 00016778 0x00002f47 beq 0x00000032 , 0x000041b6 + 00016779 0x00002f48 beq 0x0000003e , 0x00004191 + 00016780 0x00002f49 beq 0x00000027 , 0x0000438e + 00016781 0x00002f4a beq 0x00000039 , 0x0000419c + 00016782 0x00002f4b beq 0x0000003a , 0x00004192 + 00016783 0x00002f4c beq 0x0000003c , 0x0000419a + 00016784 0x00002f4d rtn + 00016785 0x00002f51 branch 0x00003410 + 00016786 0x00002f54 jam 0x00000001 , 0x0000478b + 00016787 0x00002f55 fetch 0x00000001 , 0x0000471e + 00016788 0x00002f56 nbranch 0x00004492 , 0x00000034 + 00016789 0x00002f57 fetch 0x00000001 , 0x00004720 + 00016790 0x00002f58 fetcht 0x00000001 , 0x00004703 + 00016791 0x00002f59 isub 0x00000002 , 0x0000003e + 00016792 0x00002f5a branch 0x0000340a , 0x00000005 + 00016793 0x00002f5b rtn + 00016794 0x00002f5d jam 0x00000001 , 0x0000478b + 00016795 0x00002f5e rtn + 00016796 0x00002f60 jam 0x00000001 , 0x0000478b + 00016797 0x00002f61 arg 0x00000003 , 0x00000007 + 00016798 0x00002f62 call 0x000043d2 + 00016799 0x00002f63 setarg 0x00000000 + 00016800 0x00002f64 store 0x00000002 , 0x00004707 + 00016801 0x00002f65 jam 0x00000000 , 0x000046a7 + 00016802 0x00002f67 fetch 0x00000001 , 0x000046e0 + 00016803 0x00002f68 sub 0x0000003f , 0x00000005 , 0x0000003e + 00016804 0x00002f69 call 0x00004039 , 0x00000005 + 00016805 0x00002f6a ncall 0x0000405d , 0x00000005 + 00016806 0x00002f6c fetch 0x00000001 , 0x00000004 , 0x000046d3 + 00016807 0x00002f6d bbit1 0x00000013 , 0x000041af + 00016808 0x00002f6e call 0x000041aa + 00016809 0x00002f6f branch 0x000065d1 + 00016810 0x00002f72 call 0x00002c7a + 00016811 0x00002f73 add 0x00000013 , 0x000000ae , 0x00000011 + 00016812 0x00002f74 arg 0x0000005b , 0x00000012 + 00016813 0x00002f75 arg 0x00000004 , 0x00000002 + 00016814 0x00002f76 rtn + 00016815 0x00002f79 call 0x00002c7a + 00016816 0x00002f7a add 0x00000013 , 0x000000ae , 0x00000012 + 00016817 0x00002f7b ifetch 0x00000001 , 0x00000012 + 00016818 0x00002f7c store 0x00000001 , 0x0000477b + 00016819 0x00002f7d branch 0x00004435 + 00016820 0x00002f81 arg 0x00000002 , 0x00000007 + 00016821 0x00002f82 branch 0x000041b9 + 00016822 0x00002f84 jam 0x00000002 , 0x000046c6 + 00016823 0x00002f85 arg 0x00000001 , 0x00000007 + 00016824 0x00002f86 branch 0x000041b9 + 00016825 0x00002f8a fetch 0x00000001 , 0x000046c5 + 00016826 0x00002f8b qset1 0x0000003f + 00016827 0x00002f8c store 0x00000001 , 0x000046c5 + 00016828 0x00002f8d rtn + 00016829 0x00002f90 fetch 0x00000001 , 0x000046c5 + 00016830 0x00002f91 qset0 0x0000003f + 00016831 0x00002f92 store 0x00000001 , 0x000046c5 + 00016832 0x00002f93 rtn + 00016833 0x00002f95 jam 0x00000000 , 0x000046c5 + 00016834 0x00002f96 rtn + 00016835 0x00002f99 fetch 0x00000002 , 0x0000420a + 00016836 0x00002f9a set0 0x00000000 , 0x0000003f + 00016837 0x00002f9b store 0x00000002 , 0x0000420a + 00016838 0x00002f9c setarg 0x00000000 + 00016839 0x00002f9d store 0x00000002 , 0x000046ae + 00016840 0x00002f9e call 0x00003f8d + 00016841 0x00002f9f branch 0x000042ca + 00016842 0x00002fa2 call 0x000063cb + 00016843 0x00002fa3 branch 0x000033dd + 00016844 0x00002fa6 fetch 0x00000001 , 0x0000471e + 00016845 0x00002fa7 nbranch 0x00004492 , 0x00000034 + 00016846 0x00002fa8 fetch 0x00000002 , 0x00004682 + 00016847 0x00002fa9 bbit1 0x0000000c , 0x000042b0 + 00016848 0x00002faa fetch 0x00000004 , 0x000046d3 + 00016849 0x00002fab bbit1 0x00000000 , 0x000041d7 + 00016850 0x00002fac bbit1 0x00000005 , 0x000042b0 + 00016851 0x00002fad bbit1 0x00000003 , 0x00002ead + 00016852 0x00002fae branch 0x000033a7 + 00016853 0x00002fb2 branch 0x00003f74 + 00016854 0x00002fb5 rtn + 00016855 0x00002fb8 call 0x000043c0 + 00016856 0x00002fb9 branch 0x0000659a + 00016857 0x00002fbc bpatch 0x000000e9 , 0x0000401d + 00016858 0x00002fbd call 0x000041e7 + 00016859 0x00002fbe fetch 0x00000004 , 0x000046d3 + 00016860 0x00002fbf bbit1 0x00000000 , 0x000041d7 + 00016861 0x00002fc0 bbit1 0x00000003 , 0x00002ead + 00016862 0x00002fc1 fetch 0x00000001 , 0x0000471e + 00016863 0x00002fc2 nbranch 0x00004492 , 0x00000034 + 00016864 0x00002fc3 fetch 0x00000002 , 0x00004208 + 00016865 0x00002fc4 bbit1 0x00000007 , 0x000041f5 + 00016866 0x00002fc5 bbit1 0x00000000 , 0x000033a9 + 00016867 0x00002fc6 bbit1 0x00000001 , 0x000041ef + 00016868 0x00002fc7 bbit1 0x00000002 , 0x000041f2 + 00016869 0x00002fc8 bbit1 0x00000003 , 0x000041f2 + 00016870 0x00002fc9 branch 0x000042b0 + 00016871 0x00002fcb setarg 0x00000000 + 00016872 0x00002fcc store 0x00000008 , 0x000046b7 + 00016873 0x00002fcd istore 0x00000004 , 0x00000005 + 00016874 0x00002fce jam 0x00000000 , 0x000046b4 + 00016875 0x00002fcf jam 0x00000000 , 0x000046a7 + 00016876 0x00002fd0 jam 0x00000000 , 0x000041e2 + 00016877 0x00002fd1 jam 0x00000000 , 0x00004429 + 00016878 0x00002fd2 rtn + 00016879 0x00002fd5 bbit1 0x00000005 , 0x000041f2 + 00016880 0x00002fd6 bbit1 0x00000003 , 0x000041f2 + 00016881 0x00002fd7 branch 0x000042b0 + 00016882 0x00002fd9 fetch 0x00000002 , 0x00004682 + 00016883 0x00002fda bbit1 0x0000000c , 0x000042b0 + 00016884 0x00002fdb branch 0x000033a7 + 00016885 0x00002fde call 0x000041c1 + 00016886 0x00002fdf fetch 0x00000002 , 0x00004208 + 00016887 0x00002fe0 bbit1 0x00000000 , 0x000033a9 + 00016888 0x00002fe1 branch 0x000033a7 + 00016889 0x00002fe4 call 0x000043d6 + 00016890 0x00002fe5 call 0x00004243 + 00016891 0x00002fe6 call 0x00004246 + 00016892 0x00002fe7 call 0x00004250 + 00016893 0x00002fe8 call 0x0000445d + 00016894 0x00002fea call 0x00004443 + 00016895 0x00002feb call 0x00004333 + 00016896 0x00002fec call 0x000043a5 + 00016897 0x00002fed call 0x000043eb + 00016898 0x00002fee call 0x00004209 + 00016899 0x00002fef call 0x00004231 + 00016900 0x00002ff0 call 0x00004234 + 00016901 0x00002ff1 call 0x00004237 + 00016902 0x00002ff2 call 0x0000423a + 00016903 0x00002ff3 call 0x0000423d + 00016904 0x00002ff4 branch 0x00004240 + 00016905 0x00002ff9 fetch 0x00000001 , 0x00004711 + 00016906 0x00002ffa rtn 0x00000034 + 00016907 0x00002ffb increase 0xffffffff , 0x0000003f + 00016908 0x00002ffc store 0x00000001 , 0x00004711 + 00016909 0x00002ffd nrtn 0x00000034 + 00016910 0x00002ffe branch 0x0000420f + 00016911 0x00003000 fetch 0x00000001 , 0x00004712 + 00016912 0x00003001 rtneq 0x00000000 + 00016913 0x00003002 beq 0x00000005 , 0x00004216 + 00016914 0x00003004 call 0x00004225 + 00016915 0x00003005 jam 0x00000005 , 0x00004712 + 00016916 0x00003006 jam 0x00000005 , 0x00004711 + 00016917 0x00003007 rtn + 00016918 0x00003009 call 0x0000422c + 00016919 0x0000300a jam 0x00000004 , 0x00004712 + 00016920 0x0000300b jam 0x00000005 , 0x00004711 + 00016921 0x0000300c rtn + 00016922 0x00003010 setarg 0x00008006 + 00016923 0x00003011 call 0x00006413 + 00016924 0x00003012 nop 0x000003e8 + 00016925 0x00003013 jam 0x00000000 , 0x00004711 + 00016926 0x00003014 jam 0x00000000 , 0x00004712 + 00016927 0x00003015 branch 0x000040e0 + 00016928 0x00003018 setarg 0x0000a006 + 00016929 0x00003019 call 0x00006413 + 00016930 0x0000301a setarg 0x0000a005 + 00016931 0x0000301b branch 0x00006413 + 00016932 0x0000301d jam 0x00000000 , 0x00004711 + 00016933 0x0000301f fetch 0x00000001 , 0x000046e0 + 00016934 0x00003020 beq 0x00000004 , 0x00004220 + 00016935 0x00003021 setarg 0x00000106 + 00016936 0x00003022 call 0x00006413 + 00016937 0x00003023 setarg 0x0000a105 + 00016938 0x00003024 branch 0x00006413 + 00016939 0x00003027 jam 0x00000000 , 0x00004711 + 00016940 0x00003029 setarg 0x00000906 + 00016941 0x0000302a branch 0x00006413 + 00016942 0x0000302c jam 0x00000005 , 0x00004711 + 00016943 0x0000302d jam 0x00000001 , 0x00004712 + 00016944 0x0000302e rtn + 00016945 0x00003031 arg 0x00004680 , 0x00000013 + 00016946 0x00003032 arg 0x0000429b , 0x00000012 + 00016947 0x00003033 branch 0x0000336d + 00016948 0x00003036 arg 0x000046ac , 0x00000013 + 00016949 0x00003037 arg 0x00004264 , 0x00000012 + 00016950 0x00003038 branch 0x00003374 + 00016951 0x0000303b arg 0x000046ae , 0x00000013 + 00016952 0x0000303c arg 0x00004266 , 0x00000012 + 00016953 0x0000303d branch 0x00003374 + 00016954 0x00003040 arg 0x000046b0 , 0x00000013 + 00016955 0x00003041 arg 0x0000426a , 0x00000012 + 00016956 0x00003042 branch 0x00003374 + 00016957 0x00003045 arg 0x000046c4 , 0x00000013 + 00016958 0x00003046 arg 0x00004478 , 0x00000012 + 00016959 0x00003047 branch 0x0000336d + 00016960 0x0000304c arg 0x000046c6 , 0x00000013 + 00016961 0x0000304d arg 0x0000425e , 0x00000012 + 00016962 0x0000304e branch 0x0000336d + 00016963 0x00003051 arg 0x00004704 , 0x00000013 + 00016964 0x00003052 arg 0x00004249 , 0x00000012 + 00016965 0x00003053 branch 0x0000336d + 00016966 0x00003056 arg 0x00004707 , 0x00000013 + 00016967 0x00003057 arg 0x00004249 , 0x00000012 + 00016968 0x00003058 branch 0x00003374 + 00016969 0x0000305b rtn + 00016970 0x0000305f fetch 0x00000004 , 0x000046d3 + 00016971 0x00003060 rtnbit0 0x00000017 + 00016972 0x00003061 jam 0x0000000a , 0x000046df + 00016973 0x00003062 fetch 0x00000001 , 0x000046f4 + 00016974 0x00003063 store 0x00000001 , 0x00004715 + 00016975 0x00003064 rtn + 00016976 0x00003068 arg 0x000046df , 0x00000013 + 00016977 0x00003069 arg 0x00004253 , 0x00000012 + 00016978 0x0000306a branch 0x0000336d + 00016979 0x0000306c fetch 0x00000001 , 0x000046f4 + 00016980 0x0000306d store 0x00000001 , 0x00004715 + 00016981 0x0000306e setarg 0x00000190 + 00016982 0x0000306f store 0x00000002 , 0x00004716 + 00016983 0x00003070 store 0x00000002 , 0x00004718 + 00016984 0x00003071 arg 0x00000000 , 0x00000011 + 00016985 0x00003072 fetcht 0x00000001 , 0x0000477a + 00016986 0x00003073 increase 0x00000001 , 0x00000002 + 00016987 0x00003074 storet 0x00000001 , 0x00004714 + 00016988 0x00003075 jam 0x00000001 , 0x00004713 + 00016989 0x00003076 rtn + 00016990 0x00003079 fetch 0x00000001 , 0x000046c5 + 00016991 0x0000307a rtnbit1 0x00000002 + 00016992 0x0000307b jam 0x00000012 , 0x00000a99 + 00016993 0x0000307c call 0x00007d8f + 00016994 0x0000307d arg 0x00000000 , 0x00000007 + 00016995 0x0000307e branch 0x000041b9 + 00016996 0x00003082 call 0x000042ca + 00016997 0x00003083 branch 0x0000340a + 00016998 0x00003086 call 0x000033f6 + 00016999 0x00003087 fetch 0x00000001 , 0x0000471e + 00017000 0x00003088 nbranch 0x00004492 , 0x00000034 + 00017001 0x00003089 branch 0x0000340a + 00017002 0x0000308c bmark1 0x00000026 , 0x00007e1d + 00017003 0x0000308d branch 0x00004386 + 00017004 0x00003092 bpatch 0x000000ea , 0x0000401d + 00017005 0x00003093 jam 0x00000000 , 0x000046b4 + 00017006 0x00003094 call 0x00004386 + 00017007 0x00003095 call 0x000041c1 + 00017008 0x00003096 branch 0x000042b0 + 00017009 0x0000309b fetch 0x00000006 , 0x000041d0 + 00017010 0x0000309c branch 0x000033eb , 0x00000034 + 00017011 0x0000309d call 0x0000427e + 00017012 0x0000309e jam 0x00000017 , 0x0000016d + 00017013 0x0000309f fetch 0x00000001 , 0x0000465a + 00017014 0x000030a0 nbranch 0x000033e1 , 0x00000034 + 00017015 0x000030a1 jam 0x00000004 , 0x0000016d + 00017016 0x000030a2 branch 0x000033e1 + 00017017 0x000030a5 fetch 0x00000002 , 0x000046a8 + 00017018 0x000030a6 store 0x00000002 , 0x000046ae + 00017019 0x000030a7 call 0x0000427e + 00017020 0x000030a8 call 0x00003418 + 00017021 0x000030a9 branch 0x00007df4 + 00017022 0x000030ac setarg 0x000000c8 + 00017023 0x000030ad store 0x00000002 , 0x00004716 + 00017024 0x000030ae store 0x00000002 , 0x00004718 + 00017025 0x000030af branch 0x00004285 + 00017026 0x000030b2 setarg 0x000003e8 + 00017027 0x000030b3 store 0x00000002 , 0x00004716 + 00017028 0x000030b4 store 0x00000002 , 0x00004718 + 00017029 0x000030b6 fetch 0x00000001 , 0x00004720 + 00017030 0x000030b7 beq 0x00000001 , 0x0000428a + 00017031 0x000030b8 beq 0x00000002 , 0x0000428c + 00017032 0x000030b9 beq 0x00000003 , 0x0000428e + 00017033 0x000030ba rtn + 00017034 0x000030bc fetch 0x00000001 , 0x000046f0 + 00017035 0x000030bd branch 0x0000428f + 00017036 0x000030bf fetch 0x00000001 , 0x000046f1 + 00017037 0x000030c0 branch 0x0000428f + 00017038 0x000030c2 fetch 0x00000001 , 0x000046f2 + 00017039 0x000030c4 store 0x00000001 , 0x00000aa2 + 00017040 0x000030c5 call 0x00004482 + 00017041 0x000030c6 fetch 0x00000001 , 0x00000aa2 + 00017042 0x000030c7 store 0x00000001 , 0x00004715 + 00017043 0x000030c8 arg 0x00000000 , 0x00000011 + 00017044 0x000030c9 jam 0x00000001 , 0x00004713 + 00017045 0x000030ca branch 0x00007d1e + 00017046 0x000030cd arg 0x00000000 , 0x00000011 + 00017047 0x000030ce branch 0x00007d19 + 00017048 0x000030d0 arg 0x00000000 , 0x00000011 + 00017049 0x000030d1 branch 0x00007d14 + 00017050 0x000030d4 branch 0x000041c1 + 00017051 0x000030d7 jam 0x00000001 , 0x000041e2 + 00017052 0x000030d8 call 0x00003416 + 00017053 0x000030d9 call 0x00003412 + 00017054 0x000030da setarg 0x00000000 + 00017055 0x000030db store 0x00000002 , 0x0000467e + 00017056 0x000030dc store 0x00000001 , 0x00004680 + 00017057 0x000030dd branch 0x0000340e + 00017058 0x000030e0 call 0x0000435f + 00017059 0x000030e1 fetch 0x00000001 , 0x00004720 + 00017060 0x000030e2 fetcht 0x00000001 , 0x00004703 + 00017061 0x000030e3 isub 0x00000002 , 0x0000003e + 00017062 0x000030e4 branch 0x000042ab , 0x00000005 + 00017063 0x000030e5 fetch 0x00000001 , 0x00004210 + 00017064 0x000030e6 beq 0x00000033 , 0x00004271 + 00017065 0x000030e7 beq 0x00000034 , 0x00004279 + 00017066 0x000030e8 branch 0x000042b0 + 00017067 0x000030ea call 0x00003d57 + 00017068 0x000030eb rtnmark1 0x00000026 + 00017069 0x000030ec fetch 0x00000001 , 0x0000471e + 00017070 0x000030ed nbranch 0x00004492 , 0x00000034 + 00017071 0x000030ee rtn + 00017072 0x000030f1 bpatch 0x000000eb , 0x0000401d + 00017073 0x000030f2 fetch 0x00000002 , 0x00004682 + 00017074 0x000030f3 bbit1 0x0000000b , 0x000042b7 + 00017075 0x000030f4 fetch 0x00000004 , 0x000046d3 + 00017076 0x000030f5 bbit0 0x00000018 , 0x000042b7 + 00017077 0x000030f6 random 0x0000003f + 00017078 0x000030f7 store 0x00000001 , 0x000044a1 + 00017079 0x000030f9 call 0x00003418 + 00017080 0x000030fa fetch 0x00000002 , 0x00004687 + 00017081 0x000030fb store 0x00000002 , 0x000046ac + 00017082 0x000030fc jam 0x00000006 , 0x0000016d + 00017083 0x000030fd setarg 0x00000000 + 00017084 0x000030fe store 0x00000002 , 0x000046b0 + 00017085 0x000030ff store 0x00000002 , 0x000046ae + 00017086 0x00003100 arg 0x00000007 , 0x00000007 + 00017087 0x00003101 call 0x000043ce + 00017088 0x00003102 call 0x000043ca + 00017089 0x00003103 fetch 0x00000001 , 0x00004092 + 00017090 0x00003104 isolate1 0x00000001 , 0x0000003f + 00017091 0x00003105 call 0x00007df4 , 0x00000001 + 00017092 0x00003106 fetch 0x00000001 , 0x00004092 + 00017093 0x00003107 isolate1 0x00000000 , 0x0000003f + 00017094 0x00003108 call 0x00007ddd , 0x00000001 + 00017095 0x00003109 fetch 0x00000004 , 0x000046d3 + 00017096 0x0000310a bbit1 0x0000001c , 0x0000422e + 00017097 0x0000310b branch 0x00004282 + 00017098 0x0000310e bpatch 0x000000ec , 0x0000401d + 00017099 0x0000310f fetch 0x00000001 , 0x00004092 + 00017100 0x00003110 isolate1 0x00000001 , 0x0000003f + 00017101 0x00003111 call 0x000042d4 , 0x00000001 + 00017102 0x00003112 fetch 0x00000001 , 0x00004092 + 00017103 0x00003113 isolate1 0x00000000 , 0x0000003f + 00017104 0x00003114 call 0x000042d7 , 0x00000001 + 00017105 0x00003115 fetch 0x00000004 , 0x000046d3 + 00017106 0x00003116 bbit1 0x0000001c , 0x0000421a + 00017107 0x00003117 branch 0x00004482 + 00017108 0x00003119 setarg 0x00000000 + 00017109 0x0000311a store 0x00000002 , 0x000046ae + 00017110 0x0000311b branch 0x00007dfa + 00017111 0x0000311d setarg 0x00000000 + 00017112 0x0000311e store 0x00000002 , 0x000046ac + 00017113 0x0000311f branch 0x00007de2 + 00017114 0x00003126 fetch 0x00000004 , 0x000046d3 + 00017115 0x00003127 rtnbit0 0x00000007 + 00017116 0x00003128 arg 0x00000007 , 0x00000007 + 00017117 0x00003129 call 0x000043d2 + 00017118 0x0000312a call 0x000042e8 + 00017119 0x0000312c call 0x000042fb + 00017120 0x0000312d fetch 0x00000004 , 0x000046d3 + 00017121 0x0000312e bbit1 0x00000013 , 0x00004435 + 00017122 0x0000312f bbit1 0x00000014 , 0x000042e4 + 00017123 0x00003130 rtn + 00017124 0x00003132 arg 0x00000058 , 0x00000002 + 00017125 0x00003133 arg 0x00004720 , 0x00000011 + 00017126 0x00003134 arg 0x00000000 , 0x00000012 + 00017127 0x00003135 branch 0x000065d1 + 00017128 0x00003138 fetch 0x00000001 , 0x00000185 + 00017129 0x00003139 beq 0x00000034 , 0x000042ec + 00017130 0x0000313a beq 0x00000033 , 0x000042ef + 00017131 0x0000313b rtn + 00017132 0x0000313d store 0x00000001 , 0x000046c7 + 00017133 0x0000313e fetch 0x00000006 , 0x0000044f + 00017134 0x0000313f branch 0x000042f1 + 00017135 0x00003141 store 0x00000001 , 0x000046c7 + 00017136 0x00003142 fetch 0x00000006 , 0x00000040 + 00017137 0x00003144 store 0x00000006 , 0x000046c8 + 00017138 0x00003145 fetch 0x00000007 , 0x000046c7 + 00017139 0x00003146 arg 0x00004721 , 0x00000006 + 00017140 0x00003147 arg 0x00000003 , 0x00000039 + 00017141 0x00003149 ifetcht 0x00000007 , 0x00000006 + 00017142 0x0000314a isub 0x00000002 , 0x0000003e + 00017143 0x0000314b branch 0x00004310 , 0x00000005 + 00017144 0x0000314c increase 0x00000016 , 0x00000006 + 00017145 0x0000314d loop 0x000042f5 + 00017146 0x0000314e rtn + 00017147 0x00003150 arg 0x00004721 , 0x00000011 + 00017148 0x00003151 fetch 0x00000001 , 0x00004720 + 00017149 0x00003152 increase 0xffffffff , 0x0000003f + 00017150 0x00003153 mul32 0x0000003f , 0x0000001d , 0x0000003f + 00017151 0x00003154 iadd 0x00000011 , 0x00000011 + 00017152 0x00003155 fetch 0x00000001 , 0x00000185 + 00017153 0x00003156 istore 0x00000001 , 0x00000011 + 00017154 0x00003157 beq 0x00000034 , 0x00004305 + 00017155 0x00003158 beq 0x00000033 , 0x0000430c + 00017156 0x00003159 rtn + 00017157 0x0000315c fetch 0x00000006 , 0x0000044f + 00017158 0x0000315d istore 0x00000006 , 0x00000005 + 00017159 0x0000315e arg 0x00004419 , 0x00000006 + 00017160 0x0000315f call 0x00007ebf + 00017161 0x00003160 fetch 0x00000006 , 0x000044a0 + 00017162 0x00003161 istore 0x00000006 , 0x00000005 + 00017163 0x00003162 rtn + 00017164 0x00003164 fetch 0x00000006 , 0x00000040 + 00017165 0x00003165 istore 0x00000006 , 0x00000005 + 00017166 0x00003166 arg 0x000041be , 0x00000006 + 00017167 0x00003167 branch 0x00007ebf + 00017168 0x0000316a increase 0xfffffffa , 0x00000006 + 00017169 0x0000316b copy 0x00000006 , 0x00000005 + 00017170 0x0000316c fetcht 0x00000006 , 0x000046c8 + 00017171 0x0000316d increase 0x00000003 , 0x00000002 + 00017172 0x0000316e istoret 0x00000006 , 0x00000005 + 00017173 0x0000316f rtn + 00017174 0x00003174 arg 0x00000058 , 0x00000002 + 00017175 0x00003175 arg 0x00004720 , 0x00000011 + 00017176 0x00003176 arg 0x00000000 , 0x00000012 + 00017177 0x00003177 call 0x000065df + 00017178 0x00003179 arg 0x00004721 , 0x00000011 + 00017179 0x0000317a fetch 0x00000001 , 0x00004720 + 00017180 0x0000317b fetcht 0x00000001 , 0x00004703 + 00017181 0x0000317c isub 0x00000002 , 0x0000003e + 00017182 0x0000317d rtn 0x00000005 + 00017183 0x0000317e increase 0xffffffff , 0x0000003f + 00017184 0x0000317f mul32 0x0000003f , 0x0000001d , 0x0000003f + 00017185 0x00003180 iadd 0x00000011 , 0x00000011 + 00017186 0x00003181 ifetch 0x00000001 , 0x00000011 + 00017187 0x00003182 store 0x00000001 , 0x00004210 + 00017188 0x00003183 beq 0x00000033 , 0x00004327 + 00017189 0x00003184 beq 0x00000034 , 0x0000432c + 00017190 0x00003185 rtn + 00017191 0x00003188 ifetch 0x00000006 , 0x00000006 + 00017192 0x0000318a store 0x00000006 , 0x000041d0 + 00017193 0x0000318b arg 0x000041be , 0x00000005 + 00017194 0x0000318c call 0x00007ebf + 00017195 0x0000318d branch 0x000067d7 + 00017196 0x00003190 ifetch 0x00000006 , 0x00000006 + 00017197 0x00003192 store 0x00000006 , 0x000041d0 + 00017198 0x00003193 arg 0x00004419 , 0x00000005 + 00017199 0x00003194 call 0x00007ebf + 00017200 0x00003195 ifetch 0x00000006 , 0x00000006 + 00017201 0x00003196 store 0x00000006 , 0x000044a0 + 00017202 0x00003197 rtn + 00017203 0x0000319b fetch 0x00000001 , 0x000046f5 + 00017204 0x0000319c bbit1 0x00000005 , 0x00004349 + 00017205 0x0000319d bbit1 0x00000006 , 0x00004359 + 00017206 0x0000319e branch 0x00004337 + 00017207 0x000031a1 call 0x00004083 + 00017208 0x000031a2 beq 0x00000006 , 0x0000433e + 00017209 0x000031a4 jam 0x0000001e , 0x000046d8 + 00017210 0x000031a5 fetch 0x00000001 , 0x000046d9 + 00017211 0x000031a6 rtneq 0x00000001 + 00017212 0x000031a7 jam 0x00000001 , 0x000046d9 + 00017213 0x000031a8 rtn + 00017214 0x000031ab call 0x00004343 + 00017215 0x000031ac fetch 0x00000001 , 0x000046d9 + 00017216 0x000031ad rtneq 0x00000000 + 00017217 0x000031ae jam 0x00000000 , 0x000046d9 + 00017218 0x000031af branch 0x000043c0 + 00017219 0x000031b2 fetch 0x00000001 , 0x000046d8 + 00017220 0x000031b3 rtn 0x00000034 + 00017221 0x000031b4 pincrease 0xffffffff + 00017222 0x000031b5 store 0x00000001 , 0x000046d8 + 00017223 0x000031b6 nrtn 0x00000034 + 00017224 0x000031b7 branch 0x00004370 + 00017225 0x000031ba fetch 0x00000001 , 0x000046ed + 00017226 0x000031bb rtneq 0x000000ff + 00017227 0x000031bc fetcht 0x00000001 , 0x000046ed + 00017228 0x000031bd call 0x0000681d + 00017229 0x000031be branch 0x00004354 , 0x00000001 + 00017230 0x000031c0 fetch 0x00000001 , 0x000046d9 + 00017231 0x000031c1 rtneq 0x00000001 + 00017232 0x000031c2 jam 0x00000001 , 0x000046d9 + 00017233 0x000031c3 fetch 0x00000004 , 0x000046d3 + 00017234 0x000031c4 rtnbit1 0x00000006 + 00017235 0x000031c5 branch 0x00004370 + 00017236 0x000031c8 fetch 0x00000001 , 0x000046d9 + 00017237 0x000031c9 rtneq 0x00000000 + 00017238 0x000031ca jam 0x00000000 , 0x000046d9 + 00017239 0x000031cb arg 0x00000006 , 0x00000007 + 00017240 0x000031cc branch 0x000043d2 + 00017241 0x000031d1 fetch 0x00000001 , 0x00000004 , 0x000046d3 + 00017242 0x000031d2 rtnbit0 0x00000006 + 00017243 0x000031d3 fetch 0x00000001 , 0x00004720 + 00017244 0x000031d4 beq 0x00000001 , 0x00004369 + 00017245 0x000031d5 beq 0x00000002 , 0x0000436c + 00017246 0x000031d6 rtn + 00017247 0x000031d8 fetch 0x00000001 , 0x00000004 , 0x000046d3 + 00017248 0x000031d9 rtnbit0 0x00000006 + 00017249 0x000031da fetcht 0x00000001 , 0x000046ed + 00017250 0x000031db call 0x0000681d + 00017251 0x000031dc branch 0x00004366 , 0x00000001 + 00017252 0x000031de jam 0x00000001 , 0x00004720 + 00017253 0x000031df rtn + 00017254 0x000031e1 fetch 0x00000001 , 0x00004703 + 00017255 0x000031e2 store 0x00000001 , 0x00004720 + 00017256 0x000031e3 rtn + 00017257 0x000031e5 fetcht 0x00000001 , 0x000046ed + 00017258 0x000031e6 nbranch 0x00004370 , 0x00000001 + 00017259 0x000031e7 rtn + 00017260 0x000031e9 fetcht 0x00000001 , 0x000046ed + 00017261 0x000031ea call 0x0000681d + 00017262 0x000031eb branch 0x00004354 , 0x00000001 + 00017263 0x000031ec rtn + 00017264 0x000031f2 fetcht 0x00000001 , 0x00004720 + 00017265 0x000031f3 increase 0x00000001 , 0x00000002 + 00017266 0x000031f4 fetch 0x00000001 , 0x000046d2 + 00017267 0x000031f5 isub 0x00000002 , 0x0000003e + 00017268 0x000031f6 ncall 0x000043cc , 0x00000002 + 00017269 0x000031f7 storet 0x00000001 , 0x00004720 + 00017270 0x000031f8 jam 0x00000000 , 0x000041bd + 00017271 0x000031f9 call 0x0000437a + 00017272 0x000031fa call 0x000043c0 + 00017273 0x000031fc branch 0x0000437e + 00017274 0x000031ff arg 0x00000001 , 0x00000002 + 00017275 0x00003200 arg 0x00004720 , 0x00000011 + 00017276 0x00003201 arg 0x00000000 , 0x00000012 + 00017277 0x00003202 branch 0x00006606 + 00017278 0x00003205 call 0x00004381 + 00017279 0x00003206 call 0x000043c2 + 00017280 0x00003207 branch 0x000041d7 + 00017281 0x00003209 fetch 0x00000002 , 0x00004682 + 00017282 0x0000320a bbit1 0x00000007 , 0x00004392 + 00017283 0x0000320b bbit1 0x00000009 , 0x00003402 + 00017284 0x0000320c bbit1 0x00000000 , 0x000033e9 + 00017285 0x0000320d branch 0x000042ca + 00017286 0x00003210 bpatch 0x000000ed , 0x0000401d + 00017287 0x00003211 setarg 0x00000000 + 00017288 0x00003212 store 0x00000002 , 0x000046b0 + 00017289 0x00003213 fetch 0x00000002 , 0x00004682 + 00017290 0x00003214 bbit1 0x00000009 , 0x00003402 + 00017291 0x00003215 fetch 0x00000002 , 0x00004682 + 00017292 0x00003216 bbit1 0x00000000 , 0x000033e9 + 00017293 0x00003217 rtn + 00017294 0x0000321a setarg 0x00000001 + 00017295 0x0000321b store 0x00000006 , 0x00000040 + 00017296 0x0000321c jam 0x00000033 , 0x00000185 + 00017297 0x0000321d branch 0x000042df + 00017298 0x00003221 call 0x000043c4 + 00017299 0x00003222 branch 0x00007e2f + 00017300 0x00003225 fetch 0x00000001 , 0x000046ec + 00017301 0x00003226 rtneq 0x000000ff + 00017302 0x00003227 fetcht 0x00000001 , 0x000046ec + 00017303 0x00003228 call 0x0000681d + 00017304 0x00003229 branch 0x0000439f , 0x00000001 + 00017305 0x0000322b fetch 0x00000001 , 0x00004685 + 00017306 0x0000322c store 0x00000001 , 0x000046da + 00017307 0x0000322d fetch 0x00000001 , 0x000046db + 00017308 0x0000322e rtneq 0x00000001 + 00017309 0x0000322f jam 0x00000001 , 0x000046db + 00017310 0x00003230 branch 0x000043ca + 00017311 0x00003232 call 0x000043b5 + 00017312 0x00003233 fetch 0x00000001 , 0x000046db + 00017313 0x00003234 rtneq 0x00000000 + 00017314 0x00003235 jam 0x00000000 , 0x000046db + 00017315 0x00003236 call 0x00007e2f + 00017316 0x00003237 branch 0x000043c8 + 00017317 0x0000323b fetch 0x00000001 , 0x000046f5 + 00017318 0x0000323c bbit1 0x00000004 , 0x00004394 + 00017319 0x0000323e call 0x00004083 + 00017320 0x0000323f beq 0x00000007 , 0x000043af + 00017321 0x00003241 fetch 0x00000001 , 0x00004685 + 00017322 0x00003242 store 0x00000001 , 0x000046da + 00017323 0x00003243 fetch 0x00000001 , 0x000046db + 00017324 0x00003244 rtneq 0x00000001 + 00017325 0x00003245 jam 0x00000001 , 0x000046db + 00017326 0x00003246 branch 0x000043ca + 00017327 0x0000324a call 0x000043b5 + 00017328 0x0000324b fetch 0x00000001 , 0x000046db + 00017329 0x0000324c rtneq 0x00000000 + 00017330 0x0000324d jam 0x00000000 , 0x000046db + 00017331 0x0000324e call 0x00007e2f + 00017332 0x0000324f branch 0x000043c8 + 00017333 0x00003252 arg 0x000046da , 0x00000013 + 00017334 0x00003253 arg 0x000043b8 , 0x00000012 + 00017335 0x00003254 branch 0x0000336d + 00017336 0x00003257 arg 0x00000006 , 0x00000007 + 00017337 0x00003258 call 0x000043ce + 00017338 0x00003259 call 0x00003357 + 00017339 0x0000325a branch 0x0000426c + 00017340 0x0000325e arg 0x00000001 , 0x00000007 + 00017341 0x0000325f branch 0x000043ce + 00017342 0x00003261 arg 0x00000001 , 0x00000007 + 00017343 0x00003262 branch 0x000043d2 + 00017344 0x00003264 arg 0x00000000 , 0x00000007 + 00017345 0x00003265 branch 0x000043ce + 00017346 0x00003267 arg 0x00000000 , 0x00000007 + 00017347 0x00003268 branch 0x000043d2 + 00017348 0x0000326a arg 0x00000002 , 0x00000007 + 00017349 0x0000326b branch 0x000043ce + 00017350 0x0000326d arg 0x00000002 , 0x00000007 + 00017351 0x0000326e branch 0x000043d2 + 00017352 0x00003270 arg 0x00000005 , 0x00000007 + 00017353 0x00003271 branch 0x000043ce + 00017354 0x00003273 arg 0x00000005 , 0x00000007 + 00017355 0x00003274 branch 0x000043d2 + 00017356 0x00003279 arg 0x00000001 , 0x00000002 + 00017357 0x0000327a rtn + 00017358 0x0000327d fetch 0x00000004 , 0x000046d3 + 00017359 0x0000327e qset1 0x0000003f + 00017360 0x0000327f store 0x00000004 , 0x000046d3 + 00017361 0x00003280 rtn + 00017362 0x00003283 fetch 0x00000004 , 0x000046d3 + 00017363 0x00003284 qset0 0x0000003f + 00017364 0x00003285 store 0x00000004 , 0x000046d3 + 00017365 0x00003286 rtn + 00017366 0x00003289 fetch 0x00000004 , 0x000046d3 + 00017367 0x0000328a rtnbit0 0x0000001a + 00017368 0x0000328b fetch 0x00000001 , 0x000046ce + 00017369 0x0000328c increase 0x00000001 , 0x0000003f + 00017370 0x0000328d store 0x00000001 , 0x000046ce + 00017371 0x0000328e sub 0x0000003f , 0x0000000a , 0x0000003e + 00017372 0x0000328f rtn 0x00000002 + 00017373 0x00003290 jam 0x00000000 , 0x000046ce + 00017374 0x00003291 call 0x000068eb + 00017375 0x00003292 call 0x00006908 + 00017376 0x00003293 store 0x00000002 , 0x0000470f + 00017377 0x00003294 arg 0x00004709 , 0x00000011 + 00017378 0x00003295 call 0x00006930 + 00017379 0x00003296 fetch 0x00000001 , 0x00004231 + 00017380 0x00003297 bbit1 0x00000001 , 0x000044a0 + 00017381 0x00003298 bbit0 0x00000000 , 0x000043e9 + 00017382 0x00003299 branch 0x000043e7 + 00017383 0x0000329b arg 0x00000004 , 0x00000007 + 00017384 0x0000329c branch 0x000043ce + 00017385 0x0000329e arg 0x00000004 , 0x00000007 + 00017386 0x0000329f branch 0x000043d2 + 00017387 0x000032a2 fetch 0x00000004 , 0x000046d3 + 00017388 0x000032a3 rtnbit0 0x00000004 + 00017389 0x000032a4 fetch 0x00000001 , 0x000046ef + 00017390 0x000032a5 store 0x00000001 , 0x00004715 + 00017391 0x000032a6 fetch 0x00000001 , 0x000046cf + 00017392 0x000032a7 pincrease 0x00000001 + 00017393 0x000032a8 store 0x00000001 , 0x000046cf + 00017394 0x000032a9 sub 0x0000003f , 0x00000014 , 0x0000003e + 00017395 0x000032aa ncall 0x000043f9 , 0x00000002 + 00017396 0x000032ab beq 0x00000002 , 0x000043fb + 00017397 0x000032ac beq 0x00000004 , 0x000043fe + 00017398 0x000032ad beq 0x00000006 , 0x000043fb + 00017399 0x000032ae beq 0x00000008 , 0x000043fe + 00017400 0x000032af rtn + 00017401 0x000032b1 jam 0x00000001 , 0x000046cf + 00017402 0x000032b2 branch 0x000043fe + 00017403 0x000032b4 arg 0x00000000 , 0x00000011 + 00017404 0x000032b5 jam 0x00000002 , 0x00004713 + 00017405 0x000032b6 branch 0x00007d14 + 00017406 0x000032b8 arg 0x00000000 , 0x00000011 + 00017407 0x000032b9 jam 0x00000002 , 0x00004713 + 00017408 0x000032ba branch 0x00007d19 + 00017409 0x000032bd call 0x00003f97 + 00017410 0x000032be nrtn 0x00000028 + 00017411 0x000032bf arg 0x00000007 , 0x00000011 + 00017412 0x000032c0 arg 0x0000469a , 0x00000012 + 00017413 0x000032c1 rtn + 00017414 0x000032c4 fetch 0x00000001 , 0x0000478b + 00017415 0x000032c5 rtn 0x00000034 + 00017416 0x000032c7 fetcht 0x00000001 , 0x000046e7 + 00017417 0x000032c8 call 0x0000681d + 00017418 0x000032c9 call 0x00004410 , 0x00000001 + 00017419 0x000032ca fetch 0x00000001 , 0x00004704 + 00017420 0x000032cb nrtn 0x00000034 + 00017421 0x000032cc call 0x00004083 + 00017422 0x000032cd nrtn 0x00000034 + 00017423 0x000032ce branch 0x00002d83 + 00017424 0x000032d1 fetch 0x00000001 , 0x000046e7 + 00017425 0x000032d2 rtneq 0x000000ff + 00017426 0x000032d3 jam 0x0000000a , 0x00004704 + 00017427 0x000032d4 rtn + 00017428 0x000032d8 call 0x00004423 + 00017429 0x000032d9 fetch 0x00000002 , 0x00004778 + 00017430 0x000032da arg 0x0000aa55 , 0x00000002 + 00017431 0x000032db isub 0x00000002 , 0x0000003e + 00017432 0x000032dc branch 0x0000442b , 0x00000005 + 00017433 0x000032dd storet 0x00000002 , 0x00004778 + 00017434 0x000032de call 0x0000441c + 00017435 0x000032df branch 0x00004435 + 00017436 0x000032e1 fetch 0x00000006 , 0x000044a0 + 00017437 0x000032e2 store 0x00000006 , 0x00004738 + 00017438 0x000032e3 add 0x0000003f , 0x00000100 , 0x0000003f + 00017439 0x000032e4 store 0x00000006 , 0x00004755 + 00017440 0x000032e5 add 0x0000003f , 0x00000100 , 0x0000003f + 00017441 0x000032e6 store 0x00000006 , 0x00004772 + 00017442 0x000032e7 rtn + 00017443 0x000032eb setarg 0x00004778 + 00017444 0x000032ec arg 0x00004720 , 0x00000002 + 00017445 0x000032ed isub 0x00000002 , 0x00000002 + 00017446 0x000032ee fetch 0x00000003 , 0x00004700 + 00017447 0x000032ef iadd 0x00000002 , 0x0000003f + 00017448 0x000032f0 arg 0x00000002 , 0x00000002 + 00017449 0x000032f1 arg 0x00004778 , 0x00000011 + 00017450 0x000032f2 branch 0x00006562 + 00017451 0x000032f6 setarg 0x0000477f + 00017452 0x000032f7 arg 0x00004720 , 0x00000002 + 00017453 0x000032f8 isub 0x00000002 , 0x00000002 + 00017454 0x000032f9 fetch 0x00000003 , 0x00004700 + 00017455 0x000032fa arg 0x00004720 , 0x00000011 + 00017456 0x000032fb call 0x00006562 + 00017457 0x000032fc call 0x0000431a + 00017458 0x000032fd fetch 0x00000004 , 0x0000477b + 00017459 0x000032fe call 0x00002c7a + 00017460 0x000032ff branch 0x0000322c + 00017461 0x00003302 setarg 0x0000477f + 00017462 0x00003303 arg 0x00004720 , 0x00000002 + 00017463 0x00003304 isub 0x00000002 , 0x00000002 + 00017464 0x00003305 arg 0x00004720 , 0x00000011 + 00017465 0x00003306 fetch 0x00000003 , 0x00004700 + 00017466 0x00003307 branch 0x00006514 + 00017467 0x0000330a arg 0x00000001 , 0x00000002 + 00017468 0x0000330b arg 0x0000477a , 0x00000011 + 00017469 0x0000330c arg 0x0000005a , 0x00000012 + 00017470 0x0000330d branch 0x000065d1 + 00017471 0x00003310 arg 0x00000001 , 0x00000002 + 00017472 0x00003311 arg 0x0000477a , 0x00000011 + 00017473 0x00003312 arg 0x0000005a , 0x00000012 + 00017474 0x00003313 branch 0x000065df + 00017475 0x00003316 rtnmark1 0x00000026 + 00017476 0x00003317 fetch 0x00000004 , 0x000046d3 + 00017477 0x00003318 rtnbit0 0x00000016 + 00017478 0x00003319 fetch 0x00000001 , 0x00004705 + 00017479 0x0000331a pincrease 0x00000001 + 00017480 0x0000331b and 0x0000003f , 0x00000007 , 0x0000003f + 00017481 0x0000331c store 0x00000001 , 0x00004705 + 00017482 0x0000331d rtnne 0x00000007 + 00017483 0x0000331e fetch 0x00000002 , 0x00004682 + 00017484 0x0000331f bbit1 0x00000000 , 0x0000444f + 00017485 0x00003320 bbit1 0x00000009 , 0x0000444f + 00017486 0x00003321 rtn + 00017487 0x00003327 bpatch 0x000000ee , 0x0000401d + 00017488 0x00003328 fetch 0x00000001 , 0x00004706 + 00017489 0x00003329 nrtn 0x00000034 + 00017490 0x0000332a fetch 0x00000004 , 0x000046d3 + 00017491 0x0000332b rtnbit0 0x00000008 + 00017492 0x0000332c fetch 0x00000001 , 0x000046a5 + 00017493 0x0000332d call 0x000063fb + 00017494 0x0000332e store 0x00000001 , 0x000046a6 + 00017495 0x0000332f sub 0x0000003f , 0x00000010 , 0x0000003e + 00017496 0x00003330 branch 0x0000445b , 0x00000002 + 00017497 0x00003331 jam 0x00000000 , 0x00004706 + 00017498 0x00003332 rtn + 00017499 0x00003335 jam 0x0000001e , 0x00004706 + 00017500 0x00003336 rtn + 00017501 0x00003338 arg 0x00004706 , 0x00000013 + 00017502 0x00003339 arg 0x00004460 , 0x00000012 + 00017503 0x0000333a branch 0x0000336d + 00017504 0x0000333d fetch 0x00000001 , 0x000046a5 + 00017505 0x0000333e call 0x00006414 + 00017506 0x0000333f sub 0x0000003f , 0x00000010 , 0x0000003e + 00017507 0x00003340 nrtn 0x00000002 + 00017508 0x00003341 fetch 0x00000004 , 0x000046d3 + 00017509 0x00003342 rtnbit0 0x00000008 + 00017510 0x00003343 arg 0x00000008 , 0x00000007 + 00017511 0x00003344 call 0x000043d2 + 00017512 0x00003345 jam 0x00000000 , 0x00004172 + 00017513 0x00003346 jam 0x0000001e , 0x000046c4 + 00017514 0x00003347 call 0x00004482 + 00017515 0x00003348 fetch 0x00000004 , 0x000046d3 + 00017516 0x00003349 bbit1 0x00000015 , 0x00004471 + 00017517 0x0000334b fetch 0x00000001 , 0x00004720 + 00017518 0x0000334c beq 0x00000001 , 0x00004489 + 00017519 0x0000334d beq 0x00000002 , 0x00004476 + 00017520 0x0000334e rtn + 00017521 0x00003350 fetch 0x00000001 , 0x00004720 + 00017522 0x00003351 beq 0x00000001 , 0x00004489 + 00017523 0x00003352 beq 0x00000002 , 0x0000448c + 00017524 0x00003353 beq 0x00000003 , 0x0000448f + 00017525 0x00003354 rtn + 00017526 0x00003357 fetch 0x00000001 , 0x000046f0 + 00017527 0x00003358 branch 0x0000428f + 00017528 0x0000335d jam 0x00000020 , 0x00004172 + 00017529 0x0000335e branch 0x00004482 + 00017530 0x00003363 fetch 0x00000001 , 0x000046f0 + 00017531 0x00003364 rtneq 0x000000ff + 00017532 0x00003365 store 0x00000001 , 0x00004715 + 00017533 0x00003366 branch 0x00004296 + 00017534 0x00003369 fetch 0x00000001 , 0x000046f1 + 00017535 0x0000336a rtneq 0x000000ff + 00017536 0x0000336b store 0x00000001 , 0x00004715 + 00017537 0x0000336c branch 0x00004296 + 00017538 0x0000336f call 0x00004296 + 00017539 0x00003370 call 0x0000447a + 00017540 0x00003371 call 0x0000447e + 00017541 0x00003373 fetch 0x00000001 , 0x000046f2 + 00017542 0x00003374 rtneq 0x000000ff + 00017543 0x00003375 store 0x00000001 , 0x00004715 + 00017544 0x00003376 branch 0x00004296 + 00017545 0x00003379 fetch 0x00000001 , 0x000046f0 + 00017546 0x0000337a store 0x00000001 , 0x00004715 + 00017547 0x0000337b branch 0x00004298 + 00017548 0x0000337d fetch 0x00000001 , 0x000046f1 + 00017549 0x0000337e store 0x00000001 , 0x00004715 + 00017550 0x0000337f branch 0x00004298 + 00017551 0x00003381 fetch 0x00000001 , 0x000046f2 + 00017552 0x00003382 store 0x00000001 , 0x00004715 + 00017553 0x00003383 branch 0x00004298 + 00017554 0x00003388 bpatch 0x000000ef , 0x0000401d + 00017555 0x00003389 fetch 0x00000001 , 0x0000471e + 00017556 0x0000338a increase 0xffffffff , 0x0000003f + 00017557 0x0000338b store 0x00000001 , 0x0000471e + 00017558 0x0000338c fetcht 0x00000001 , 0x00004720 + 00017559 0x0000338d increase 0x00000001 , 0x00000002 + 00017560 0x0000338e fetch 0x00000001 , 0x000046d2 + 00017561 0x0000338f isub 0x00000002 , 0x0000003e + 00017562 0x00003390 ncall 0x000043cc , 0x00000002 + 00017563 0x00003391 storet 0x00000001 , 0x00004720 + 00017564 0x00003392 jam 0x00000000 , 0x000041bd + 00017565 0x00003393 call 0x0000437a + 00017566 0x00003394 call 0x000042fb + 00017567 0x00003395 branch 0x000042a2 + 00017568 0x00003398 call 0x00004482 + 00017569 0x00003399 setarg 0x00000000 + 00017570 0x0000339a store 0x00000008 , 0x000000a1 + 00017571 0x0000339b branch 0x00002b1f + 00017572 0x000033a7 rtn 0x0000002b + 00017573 0x000033a8 hfetch 0x00000001 , 0x00008081 + 00017574 0x000033a9 and_into 0x000000f0 , 0x0000003f + 00017575 0x000033aa hstore 0x00000001 , 0x00008081 + 00017576 0x000033ab call 0x00006948 + 00017577 0x000033ac setarg 0x000044e6 + 00017578 0x000033ad store 0x00000002 , 0x000041eb + 00017579 0x000033af setarg 0x000044e9 + 00017580 0x000033b0 store 0x00000002 , 0x000041ed + 00017581 0x000033b2 setarg 0x000044ef + 00017582 0x000033b3 store 0x00000002 , 0x000041f3 + 00017583 0x000033b5 setarg 0x000044f2 + 00017584 0x000033b6 store 0x00000002 , 0x000041f5 + 00017585 0x000033b8 setarg 0x000033d0 + 00017586 0x000033b9 store 0x00000002 , 0x000041e9 + 00017587 0x000033bb call 0x00002c7a + 00017588 0x000033bc setarg 0x000045c2 + 00017589 0x000033bd add 0x00000013 , 0x000000d8 , 0x00000005 + 00017590 0x000033be istore 0x00000002 , 0x00000005 + 00017591 0x000033c0 setarg 0x000044ea + 00017592 0x000033c1 add 0x00000013 , 0x000000da , 0x00000005 + 00017593 0x000033c2 istore 0x00000002 , 0x00000005 + 00017594 0x000033c4 setarg 0x000044e9 + 00017595 0x000033c5 add 0x00000013 , 0x000000dc , 0x00000005 + 00017596 0x000033c6 istore 0x00000002 , 0x00000005 + 00017597 0x000033c8 setarg 0x0000450e + 00017598 0x000033c9 store 0x00000002 , 0x000041fd + 00017599 0x000033cb setarg 0x000044da + 00017600 0x000033cc store 0x00000002 , 0x0000475b + 00017601 0x000033ce setarg 0x000044d6 + 00017602 0x000033cf store 0x00000002 , 0x0000475f + 00017603 0x000033d1 setarg 0x00004560 + 00017604 0x000033d2 store 0x00000002 , 0x0000470f + 00017605 0x000033d4 bpatch 0x000000f0 , 0x0000401e + 00017606 0x000033d5 call 0x000044e2 + 00017607 0x000033d6 call 0x00007e38 + 00017608 0x000033d7 jam 0x00000002 , 0x00004172 + 00017609 0x000033d8 fetch 0x00000001 , 0x0000472b + 00017610 0x000033d9 store 0x00000001 , 0x0000469a + 00017611 0x000033da beq 0x00000000 , 0x000044d5 + 00017612 0x000033db fetch 0x00000001 , 0x0000472c + 00017613 0x000033dc store 0x00000001 , 0x00004686 + 00017614 0x000033de call 0x000044db + 00017615 0x000033df call 0x00007cd3 + 00017616 0x000033e0 call 0x00007cdd + 00017617 0x000033e1 jam 0x00000001 , 0x00004757 + 00017618 0x000033e2 fetch 0x00000002 , 0x00004682 + 00017619 0x000033e3 rtnbit1 0x0000000c + 00017620 0x000033e4 branch 0x0000340a + 00017621 0x000033e9 jam 0x00000002 , 0x00004757 + 00017622 0x000033eb call 0x000044db + 00017623 0x000033ed arg 0x00000000 , 0x00000011 + 00017624 0x000033ee call 0x00007d1e + 00017625 0x000033f0 branch 0x00002ee4 + 00017626 0x000033f3 branch 0x000044db + 00017627 0x000033f6 bpatch 0x000000f1 , 0x0000401e + 00017628 0x000033f7 fetch 0x00000001 , 0x00004729 + 00017629 0x000033f8 bne 0x000000ff , 0x000044e0 + 00017630 0x000033fa fetcht 0x00000001 , 0x00004706 + 00017631 0x000033fb branch 0x0000680e + 00017632 0x000033fd store 0x00000001 , 0x00004706 + 00017633 0x000033fe branch 0x000044de + 00017634 0x00003402 call 0x00002c9d + 00017635 0x00003403 fetch 0x00000002 , 0x00004753 + 00017636 0x00003404 store 0x00000002 , 0x00004755 + 00017637 0x00003405 branch 0x00004515 + 00017638 0x0000340d call 0x00006835 + 00017639 0x0000340e call 0x000044e9 + 00017640 0x0000340f branch 0x0000340a + 00017641 0x00003412 branch 0x0000696c + 00017642 0x00003415 fetch 0x00000001 , 0x00004765 + 00017643 0x00003416 rtn 0x00000034 + 00017644 0x00003418 branch 0x00002d83 + 00017645 0x0000341b rtn + 00017646 0x0000341e branch 0x00006978 + 00017647 0x00003421 call 0x00004544 + 00017648 0x00003422 call 0x00004503 + 00017649 0x00003423 branch 0x000044ee + 00017650 0x00003426 copy 0x00000013 , 0x0000003f + 00017651 0x00003427 beq 0x0000002d , 0x00003431 + 00017652 0x00003428 beq 0x00000010 , 0x0000341a + 00017653 0x00003429 beq 0x00000039 , 0x000044fb + 00017654 0x0000342a beq 0x0000003c , 0x000044ff + 00017655 0x0000342b beq 0x0000003a , 0x000044f9 + 00017656 0x0000342c rtn + 00017657 0x0000342f jam 0x00000001 , 0x00004765 + 00017658 0x00003430 rtn + 00017659 0x00003433 jam 0x00000001 , 0x00004765 + 00017660 0x00003434 jam 0x00000001 , 0x00004763 + 00017661 0x00003435 jam 0x00000001 , 0x00004764 + 00017662 0x00003436 rtn + 00017663 0x00003439 jam 0x00000001 , 0x00004765 + 00017664 0x0000343a jam 0x00000001 , 0x00004763 + 00017665 0x0000343b jam 0x00000001 , 0x00004764 + 00017666 0x0000343c rtn + 00017667 0x0000343f fetch 0x00000001 , 0x00004763 + 00017668 0x00003440 rtneq 0x00000000 + 00017669 0x00003441 fetch 0x00000001 , 0x00004762 + 00017670 0x00003442 rtneq 0x00000001 + 00017671 0x00003443 jam 0x00000001 , 0x00004762 + 00017672 0x00003445 arg 0x00000000 , 0x00000011 + 00017673 0x00003446 branch 0x00007d19 + 00017674 0x00003448 arg 0x00000000 , 0x00000011 + 00017675 0x00003449 call 0x00007d19 + 00017676 0x0000344a call 0x000044db + 00017677 0x0000344b branch 0x0000340a + 00017678 0x0000344e call 0x0000337b + 00017679 0x0000344f branch 0x00004510 + 00017680 0x00003452 fetch 0x00000001 , 0x0000472d + 00017681 0x00003453 rtn 0x00000034 + 00017682 0x00003454 arg 0x00004755 , 0x00000013 + 00017683 0x00003455 arg 0x0000450a , 0x00000012 + 00017684 0x00003456 branch 0x00003374 + 00017685 0x0000345a call 0x0000451a + 00017686 0x0000345b storet 0x00000002 , 0x0000471a + 00017687 0x0000345c call 0x0000451f + 00017688 0x0000345d storet 0x00000002 , 0x0000471c + 00017689 0x0000345e rtn + 00017690 0x00003461 fetch 0x00000002 , 0x0000471a + 00017691 0x00003462 store 0x00000002 , 0x0000471e + 00017692 0x00003463 call 0x00004540 + 00017693 0x00003464 call 0x00004525 + 00017694 0x00003465 store 0x00000001 , 0x00004724 + 00017695 0x00003467 fetch 0x00000002 , 0x0000471c + 00017696 0x00003468 store 0x00000002 , 0x0000471e + 00017697 0x00003469 call 0x00004542 + 00017698 0x0000346a call 0x00004525 + 00017699 0x0000346b store 0x00000001 , 0x00004725 + 00017700 0x0000346c rtn + 00017701 0x0000346e fetch 0x00000002 , 0x00004720 + 00017702 0x0000346f copy 0x0000003f , 0x00000011 + 00017703 0x00003470 fetch 0x00000002 , 0x0000471e + 00017704 0x00003471 call 0x0000452e + 00017705 0x00003472 fetch 0x00000001 , 0x00004719 + 00017706 0x00003473 nbranch 0x00004537 , 0x00000034 + 00017707 0x00003474 nrtn 0x00000002 + 00017708 0x00003475 fetcht 0x00000002 , 0x0000471e + 00017709 0x00003476 rtn + 00017710 0x00003478 isub 0x00000002 , 0x0000003f + 00017711 0x00003479 branch 0x00004534 , 0x00000002 + 00017712 0x0000347a sub 0x0000003f , 0x00000000 , 0x0000003f + 00017713 0x0000347b jam 0x00000001 , 0x00004718 + 00017714 0x0000347c isub 0x00000011 , 0x0000003e + 00017715 0x0000347d rtn + 00017716 0x0000347f jam 0x00000000 , 0x00004718 + 00017717 0x00003480 isub 0x00000011 , 0x0000003e + 00017718 0x00003481 rtn + 00017719 0x00003483 nbranch 0x0000453e , 0x00000002 + 00017720 0x00003484 fetch 0x00000001 , 0x00004718 + 00017721 0x00003485 nbranch 0x0000453c , 0x00000034 + 00017722 0x00003487 setarg 0x00000001 + 00017723 0x00003488 rtn + 00017724 0x0000348a setarg 0x00000002 + 00017725 0x0000348b rtn + 00017726 0x0000348d setarg 0x00000000 + 00017727 0x0000348e rtn + 00017728 0x00003490 jam 0x00000033 , 0x0000422e + 00017729 0x00003491 branch 0x000068eb + 00017730 0x00003493 jam 0x00000034 , 0x0000422e + 00017731 0x00003494 branch 0x000068eb + 00017732 0x00003498 fetch 0x00000001 , 0x0000472a + 00017733 0x00003499 rtnne 0x00000001 + 00017734 0x0000349b bpatch 0x000000f2 , 0x0000401e + 00017735 0x0000349c jam 0x00000001 , 0x00004719 + 00017736 0x0000349d call 0x0000451a + 00017737 0x0000349e fetch 0x00000002 , 0x00004724 + 00017738 0x0000349f fetcht 0x00000002 , 0x00004722 + 00017739 0x000034a0 isub 0x00000002 , 0x0000003e + 00017740 0x000034a1 rtn 0x00000005 + 00017741 0x000034a2 store 0x00000002 , 0x00004722 + 00017742 0x000034a3 call 0x00004550 + 00017743 0x000034a4 branch 0x00004554 + 00017744 0x000034a7 fetch 0x00000001 , 0x00004724 + 00017745 0x000034a8 branch 0x0000455a , 0x00000034 + 00017746 0x000034a9 increase 0xffffffff , 0x0000003f + 00017747 0x000034aa branch 0x00004557 + 00017748 0x000034ac fetch 0x00000001 , 0x00004725 + 00017749 0x000034ad branch 0x0000455d , 0x00000034 + 00017750 0x000034ae increase 0x00000001 , 0x0000003f + 00017751 0x000034b0 copy 0x0000003f , 0x00000007 + 00017752 0x000034b1 arg 0x00000001 , 0x00000011 + 00017753 0x000034b2 branch 0x00004560 + 00017754 0x000034b5 arg 0x00000000 , 0x00000007 + 00017755 0x000034b6 arg 0x00000000 , 0x00000011 + 00017756 0x000034b7 branch 0x00004560 + 00017757 0x000034b9 arg 0x00000002 , 0x00000007 + 00017758 0x000034ba arg 0x00000000 , 0x00000011 + 00017759 0x000034bb branch 0x00004560 + 00017760 0x000034be copy 0x00000011 , 0x0000003f + 00017761 0x000034bf store 0x00000001 , 0x00004761 + 00017762 0x000034c0 fetch 0x00000001 , 0x00004763 + 00017763 0x000034c1 beq 0x00000000 , 0x00002ee4 + 00017764 0x000034c2 fetch 0x00000002 , 0x00004753 + 00017765 0x000034c3 store 0x00000002 , 0x00004755 + 00017766 0x000034c4 fetch 0x00000001 , 0x00004761 + 00017767 0x000034c5 branch 0x00004580 , 0x00000034 + 00017768 0x000034c7 bpatch 0x000000f3 , 0x0000401e + 00017769 0x000034c8 arg 0x00000000 , 0x00000011 + 00017770 0x000034c9 call 0x00007d14 + 00017771 0x000034cb copy 0x00000007 , 0x0000003f + 00017772 0x000034cc beq 0x00000004 , 0x000045a3 + 00017773 0x000034cd beq 0x00000005 , 0x000045a5 + 00017774 0x000034ce beq 0x00000006 , 0x000045a7 + 00017775 0x000034d2 call 0x0000458b + 00017776 0x000034d3 beq 0x00000000 , 0x00004574 + 00017777 0x000034d4 beq 0x00000002 , 0x0000457a + 00017778 0x000034d5 beq 0x00000003 , 0x00004574 + 00017779 0x000034d6 rtn + 00017780 0x000034d9 copy 0x00000007 , 0x0000003f + 00017781 0x000034da beq 0x00000000 , 0x0000458f + 00017782 0x000034db beq 0x00000001 , 0x00004591 + 00017783 0x000034dc beq 0x00000002 , 0x00004593 + 00017784 0x000034dd beq 0x00000003 , 0x00004595 + 00017785 0x000034de rtn + 00017786 0x000034e1 copy 0x00000007 , 0x0000003f + 00017787 0x000034e2 beq 0x00000000 , 0x00004597 + 00017788 0x000034e3 beq 0x00000001 , 0x0000459a + 00017789 0x000034e4 beq 0x00000002 , 0x0000459d + 00017790 0x000034e5 beq 0x00000003 , 0x000045a0 + 00017791 0x000034e6 rtn + 00017792 0x000034e9 bpatch 0x000000f4 , 0x0000401e + 00017793 0x000034ea arg 0x00000000 , 0x00000011 + 00017794 0x000034eb call 0x00007d19 + 00017795 0x000034ed copy 0x00000007 , 0x0000003f + 00017796 0x000034ee beq 0x00000004 , 0x000045bc + 00017797 0x000034ef beq 0x00000005 , 0x000045bc + 00017798 0x000034f3 call 0x0000458b + 00017799 0x000034f4 beq 0x00000000 , 0x000045a9 + 00017800 0x000034f5 beq 0x00000002 , 0x000045af + 00017801 0x000034f6 beq 0x00000003 , 0x000045a9 + 00017802 0x000034f7 rtn + 00017803 0x000034fa fetch 0x00000001 , 0x00004728 + 00017804 0x000034fb fetcht 0x00000001 , 0x00004727 + 00017805 0x000034fc ior 0x00000002 , 0x0000003f + 00017806 0x000034fd rtn + 00017807 0x00003501 jam 0x00000001 , 0x00004734 + 00017808 0x00003502 branch 0x000045be + 00017809 0x00003504 jam 0x00000002 , 0x00004734 + 00017810 0x00003505 branch 0x000045be + 00017811 0x00003507 jam 0x00000001 , 0x00004736 + 00017812 0x00003508 branch 0x000045be + 00017813 0x0000350a jam 0x00000002 , 0x00004736 + 00017814 0x0000350b branch 0x000045be + 00017815 0x0000350f jam 0x00000001 , 0x00004734 + 00017816 0x00003510 jam 0x00000001 , 0x00004736 + 00017817 0x00003511 branch 0x000045be + 00017818 0x00003513 jam 0x00000002 , 0x00004734 + 00017819 0x00003514 jam 0x00000002 , 0x00004736 + 00017820 0x00003515 branch 0x000045be + 00017821 0x00003517 jam 0x00000002 , 0x00004734 + 00017822 0x00003518 jam 0x00000001 , 0x00004736 + 00017823 0x00003519 branch 0x000045be + 00017824 0x0000351b jam 0x00000001 , 0x00004734 + 00017825 0x0000351c jam 0x00000002 , 0x00004736 + 00017826 0x0000351d branch 0x000045be + 00017827 0x00003521 jam 0x00000001 , 0x00004738 + 00017828 0x00003522 branch 0x000045be + 00017829 0x00003524 jam 0x00000002 , 0x00004738 + 00017830 0x00003525 branch 0x000045be + 00017831 0x00003528 jam 0x00000001 , 0x00004741 + 00017832 0x00003529 branch 0x000045c0 + 00017833 0x0000352c copy 0x00000007 , 0x0000003f + 00017834 0x0000352d beq 0x00000000 , 0x000045b5 + 00017835 0x0000352e beq 0x00000001 , 0x000045b5 + 00017836 0x0000352f beq 0x00000002 , 0x000045b7 + 00017837 0x00003530 beq 0x00000003 , 0x000045b7 + 00017838 0x00003531 rtn + 00017839 0x00003534 copy 0x00000007 , 0x0000003f + 00017840 0x00003535 beq 0x00000000 , 0x000045b9 + 00017841 0x00003536 beq 0x00000001 , 0x000045b9 + 00017842 0x00003537 beq 0x00000002 , 0x000045b9 + 00017843 0x00003538 beq 0x00000003 , 0x000045b9 + 00017844 0x00003539 rtn + 00017845 0x0000353d jam 0x00000000 , 0x00004734 + 00017846 0x0000353e branch 0x000045be + 00017847 0x00003541 jam 0x00000000 , 0x00004736 + 00017848 0x00003542 branch 0x000045be + 00017849 0x00003548 jam 0x00000000 , 0x00004734 + 00017850 0x00003549 jam 0x00000000 , 0x00004736 + 00017851 0x0000354a branch 0x000045be + 00017852 0x0000354e jam 0x00000000 , 0x00004738 + 00017853 0x0000354f branch 0x000045be + 00017854 0x00003552 arg 0x0000472e , 0x00000011 + 00017855 0x00003553 branch 0x00007e3d + 00017856 0x00003555 arg 0x0000473b , 0x00000011 + 00017857 0x00003556 branch 0x00007e3d + 00017858 0x00003559 fetch 0x00000001 , 0x00004764 + 00017859 0x0000355a beq 0x00000001 , 0x000045cc + 00017860 0x0000355b arg 0x00004744 , 0x00000011 + 00017861 0x0000355c call 0x00007e54 + 00017862 0x0000355d nbranch 0x000045d1 , 0x00000028 + 00017863 0x0000355f arg 0x00004744 , 0x00000006 + 00017864 0x00003560 ifetch 0x00000001 , 0x00000006 + 00017865 0x00003561 copy 0x0000003f , 0x00000011 + 00017866 0x00003562 arg 0x00004745 , 0x00000012 + 00017867 0x00003565 rtn + 00017868 0x00003568 jam 0x00000000 , 0x00004764 + 00017869 0x00003569 enable 0x00000028 + 00017870 0x0000356a arg 0x00000001 , 0x00000011 + 00017871 0x0000356b arg 0x00004766 , 0x00000012 + 00017872 0x0000356c rtn + 00017873 0x0000356f fetch 0x00000001 , 0x00004747 + 00017874 0x00003570 beq 0x00000004 , 0x000045d5 + 00017875 0x00003571 beq 0x00000005 , 0x000045d5 + 00017876 0x00003572 rtn + 00017877 0x00003574 fetch 0x00000001 , 0x0000474a + 00017878 0x00003575 nbranch 0x000045dc , 0x00000034 + 00017879 0x00003576 fetch 0x00000001 , 0x0000474c + 00017880 0x00003577 nbranch 0x000045dc , 0x00000034 + 00017881 0x00003578 fetch 0x00000001 , 0x0000474e + 00017882 0x00003579 nbranch 0x000045dc , 0x00000034 + 00017883 0x0000357a rtn + 00017884 0x0000357c enable 0x00000028 + 00017885 0x0000357d branch 0x000045c7 + 00017886 0x00003586 rtn 0x0000002b + 00017887 0x00003587 hfetch 0x00000001 , 0x00008081 + 00017888 0x00003588 and_into 0x000000fc , 0x0000003f + 00017889 0x00003589 hstore 0x00000001 , 0x00008081 + 00017890 0x0000358a setarg 0x000046b4 + 00017891 0x0000358b store 0x00000002 , 0x000041eb + 00017892 0x0000358d setarg 0x000046b3 + 00017893 0x0000358e store 0x00000002 , 0x000041ed + 00017894 0x00003590 setarg 0x0000340a + 00017895 0x00003591 store 0x00000002 , 0x000041f7 + 00017896 0x00003593 setarg 0x000046b1 + 00017897 0x00003594 store 0x00000002 , 0x000041f3 + 00017898 0x00003596 setarg 0x00004612 + 00017899 0x00003597 store 0x00000002 , 0x000041f5 + 00017900 0x00003599 setarg 0x0000460c + 00017901 0x0000359a store 0x00000002 , 0x000041e9 + 00017902 0x0000359c setarg 0x0000476a + 00017903 0x0000359d store 0x00000002 , 0x000041f9 + 00017904 0x0000359f setarg 0x00004686 + 00017905 0x000035a0 store 0x00000002 , 0x000041fd + 00017906 0x000035a2 setarg 0x00004729 + 00017907 0x000035a3 store 0x00000002 , 0x000046e7 + 00017908 0x000035a5 setarg 0x00004806 + 00017909 0x000035a6 store 0x00000002 , 0x000046e2 + 00017910 0x000035a7 setarg 0x00004807 + 00017911 0x000035a8 store 0x00000002 , 0x000046e4 + 00017912 0x000035aa call 0x000057a3 + 00017913 0x000035ab call 0x000047da + 00017914 0x000035ac call 0x00004788 + 00017915 0x000035ad call 0x0000476d + 00017916 0x000035ae call 0x00006948 + 00017917 0x000035af call 0x0000477a + 00017918 0x000035b0 call 0x00007e38 + 00017919 0x000035b1 call 0x00007d08 + 00017920 0x000035b2 call 0x00004793 + 00017921 0x000035b3 call 0x000047c7 + 00017922 0x000035b5 bpatch 0x000000f5 , 0x0000401e + 00017923 0x000035b6 call 0x0000464f + 00017924 0x000035b7 fetch 0x00000001 , 0x000046dd + 00017925 0x000035b8 beq 0x00000000 , 0x00004609 + 00017926 0x000035b9 fetch 0x00000001 , 0x000046de + 00017927 0x000035ba store 0x00000001 , 0x00004686 + 00017928 0x000035bb branch 0x0000480e + 00017929 0x000035bf jam 0x000000ff , 0x00004686 + 00017930 0x000035c0 jam 0x00000001 , 0x000046df + 00017931 0x000035c1 branch 0x000046d9 + 00017932 0x000035c6 fetch 0x00000001 , 0x000046df + 00017933 0x000035c7 beq 0x00000002 , 0x000033d0 + 00017934 0x000035c8 call 0x0000527e + 00017935 0x000035c9 fetch 0x00000001 , 0x00004256 + 00017936 0x000035ca nbranch 0x000033d0 , 0x00000034 + 00017937 0x000035cb branch 0x000033d2 + 00017938 0x000035d0 copy 0x00000013 , 0x0000003f + 00017939 0x000035d2 beq 0x00000001 , 0x00004626 + 00017940 0x000035d3 beq 0x00000002 , 0x00004629 + 00017941 0x000035d4 beq 0x00000004 , 0x00004631 + 00017942 0x000035d5 beq 0x00000005 , 0x00004633 + 00017943 0x000035d6 beq 0x00000006 , 0x00004635 + 00017944 0x000035d7 beq 0x00000007 , 0x00004638 + 00017945 0x000035d8 beq 0x00000012 , 0x0000463c + 00017946 0x000035d9 beq 0x00000013 , 0x00004644 + 00017947 0x000035da beq 0x00000027 , 0x00004645 + 00017948 0x000035db beq 0x0000002e , 0x00004648 + 00017949 0x000035dc beq 0x0000003d , 0x00004649 + 00017950 0x000035de beq 0x00000014 , 0x00004658 + 00017951 0x000035df beq 0x00000015 , 0x0000465c + 00017952 0x000035e0 beq 0x0000003f , 0x0000465f + 00017953 0x000035e1 beq 0x00000040 , 0x00004665 + 00017954 0x000035e3 beq 0x00000010 , 0x0000466b + 00017955 0x000035e4 beq 0x0000002c , 0x0000466c + 00017956 0x000035e5 beq 0x0000002d , 0x00004677 + 00017957 0x000035e6 rtn + 00017958 0x000035ec jam 0x00000000 , 0x000046ad + 00017959 0x000035ed jam 0x00000000 , 0x000046ac + 00017960 0x000035ee rtn + 00017961 0x000035f2 call 0x0000462b + 00017962 0x000035f3 branch 0x00004631 + 00017963 0x000035f6 jam 0x00000000 , 0x000041e2 + 00017964 0x000035f7 jam 0x00000000 , 0x00004680 + 00017965 0x000035f8 jam 0x00000000 , 0x00004205 + 00017966 0x000035f9 jam 0x00000000 , 0x000046ac + 00017967 0x000035fa jam 0x00000000 , 0x000046ad + 00017968 0x000035fb branch 0x00007e38 + 00017969 0x000035ff call 0x000033a9 + 00017970 0x00003600 branch 0x000046c2 + 00017971 0x00003604 call 0x000046b6 + 00017972 0x00003605 branch 0x00003408 + 00017973 0x00003609 setarg 0x00000002 + 00017974 0x0000360a store 0x00000001 , 0x00004680 + 00017975 0x0000360b rtn + 00017976 0x0000360f jam 0x00000000 , 0x000046ac + 00017977 0x00003610 setarg 0x00000001 + 00017978 0x00003611 store 0x00000001 , 0x000046ad + 00017979 0x00003612 rtn + 00017980 0x00003616 fetch 0x00000001 , 0x000041e2 + 00017981 0x00003617 rtneq 0x00000001 + 00017982 0x00003618 jam 0x00000001 , 0x000041e2 + 00017983 0x00003619 call 0x00003416 + 00017984 0x0000361a call 0x00003414 + 00017985 0x0000361b call 0x000046b6 + 00017986 0x0000361c call 0x00003408 + 00017987 0x0000361d branch 0x0000340e + 00017988 0x00003621 branch 0x00004631 + 00017989 0x00003625 setarg 0x00000005 + 00017990 0x00003626 store 0x00000001 , 0x000046ac + 00017991 0x00003627 rtn + 00017992 0x0000362b branch 0x000033cd + 00017993 0x00003630 arg 0x00000000 , 0x00000012 + 00017994 0x00003631 fetch 0x00000001 , 0x00004217 + 00017995 0x00003632 mul32 0x0000003f , 0x00000022 , 0x00000002 + 00017996 0x00003633 fetch 0x00000002 , 0x00004215 + 00017997 0x00003634 copy 0x0000003f , 0x00000011 + 00017998 0x00003635 branch 0x00006606 + 00017999 0x00003638 arg 0x00000000 , 0x00000012 + 00018000 0x00003639 fetch 0x00000001 , 0x0000469a + 00018001 0x0000363a rtnbit0 0x00000001 + 00018002 0x0000363b fetch 0x00000001 , 0x00004217 + 00018003 0x0000363c rtn 0x00000034 + 00018004 0x0000363d mul32 0x0000003f , 0x00000022 , 0x00000002 + 00018005 0x0000363e fetch 0x00000002 , 0x00004215 + 00018006 0x0000363f copy 0x0000003f , 0x00000011 + 00018007 0x00003640 branch 0x000065df + 00018008 0x00003645 call 0x000046b6 + 00018009 0x00003646 setarg 0x00000000 + 00018010 0x00003647 store 0x00000002 , 0x000046b7 + 00018011 0x00003648 branch 0x00003408 + 00018012 0x0000364c call 0x00007e38 + 00018013 0x0000364d jam 0x00000000 , 0x000046b0 + 00018014 0x0000364e branch 0x000046d9 + 00018015 0x00003652 call 0x00007e38 + 00018016 0x00003653 jam 0x00000001 , 0x000046b0 + 00018017 0x00003654 fetch 0x00000008 , 0x000046c1 + 00018018 0x00003655 store 0x00000008 , 0x00004496 + 00018019 0x00003656 call 0x00003416 + 00018020 0x00003657 branch 0x00005abf + 00018021 0x0000365b fetch 0x00000002 , 0x00004509 + 00018022 0x0000365c rtneq 0x00000000 + 00018023 0x0000365d fetch 0x00000008 , 0x000046c9 + 00018024 0x0000365e rtn 0x00000034 + 00018025 0x0000365f store 0x00000008 , 0x00004496 + 00018026 0x00003660 branch 0x00005abf + 00018027 0x00003665 branch 0x0000481f + 00018028 0x00003668 fetch 0x00000001 , 0x000046dd + 00018029 0x00003669 rtneq 0x00000000 + 00018030 0x0000366a fetch 0x00000001 , 0x000046df + 00018031 0x0000366b rtnne 0x00000001 + 00018032 0x0000366c call 0x00004672 + 00018033 0x0000366d branch 0x00003406 + 00018034 0x00003670 jam 0x00000001 , 0x000048df + 00018035 0x00003671 arg 0x0000000b , 0x00000039 + 00018036 0x00003672 arg 0x000048e0 , 0x00000005 + 00018037 0x00003673 arg 0x000048c9 , 0x00000006 + 00018038 0x00003674 branch 0x00007f01 + 00018039 0x00003677 fetch 0x00000001 , 0x000046dd + 00018040 0x00003678 rtneq 0x00000000 + 00018041 0x00003679 fetch 0x00000001 , 0x000046df + 00018042 0x0000367a beq 0x00000001 , 0x0000467c + 00018043 0x0000367b branch 0x0000481b + 00018044 0x0000367e fetch 0x00000001 , 0x000048df + 00018045 0x0000367f rtnne 0x00000001 + 00018046 0x00003680 jam 0x00000000 , 0x000048df + 00018047 0x00003681 fetch 0x00000002 , 0x00004682 + 00018048 0x00003682 bbit1 0x00000000 , 0x00003408 + 00018049 0x00003683 bbit1 0x00000009 , 0x00003408 + 00018050 0x00003684 arg 0x0000000b , 0x00000039 + 00018051 0x00003685 arg 0x000048e0 , 0x00000006 + 00018052 0x00003686 arg 0x000048c9 , 0x00000005 + 00018053 0x00003687 branch 0x00007f01 + 00018054 0x0000368e call 0x0000468c + 00018055 0x00003691 call 0x00004693 + 00018056 0x00003694 call 0x0000469e + 00018057 0x00003695 call 0x000046a6 + 00018058 0x00003696 call 0x000046a9 + 00018059 0x00003699 branch 0x000046ac + 00018060 0x0000369e arg 0x000046db , 0x00000013 + 00018061 0x0000369f arg 0x0000468f , 0x00000012 + 00018062 0x000036a0 branch 0x00003374 + 00018063 0x000036a2 jam 0x00000002 , 0x000046df + 00018064 0x000036a3 call 0x00003408 + 00018065 0x000036a4 call 0x000046f4 + 00018066 0x000036a5 branch 0x0000480b + 00018067 0x000036a9 arg 0x000048ec , 0x00000013 + 00018068 0x000036aa arg 0x00004696 , 0x00000012 + 00018069 0x000036ab branch 0x0000336d + 00018070 0x000036ae fetch 0x00000002 , 0x00004682 + 00018071 0x000036af bbit1 0x00000009 , 0x0000480b + 00018072 0x000036b0 bbit1 0x00000000 , 0x0000480b + 00018073 0x000036b1 fetch 0x00000001 , 0x000048c9 + 00018074 0x000036b2 beq 0x00000001 , 0x0000480b + 00018075 0x000036b3 beq 0x00000004 , 0x0000480b + 00018076 0x000036b4 beq 0x00000005 , 0x0000480b + 00018077 0x000036b5 branch 0x0000340a + 00018078 0x000036ba arg 0x000046ac , 0x00000013 + 00018079 0x000036bb arg 0x000046a1 , 0x00000012 + 00018080 0x000036bc branch 0x0000336d + 00018081 0x000036bf fetch 0x00000001 , 0x0000027f + 00018082 0x000036c0 set1 0x00000000 , 0x0000003f + 00018083 0x000036c1 set1 0x00000007 , 0x0000003f + 00018084 0x000036c2 store 0x00000001 , 0x0000027f + 00018085 0x000036c3 rtn + 00018086 0x000036c6 arg 0x00004680 , 0x00000013 + 00018087 0x000036c7 arg 0x0000463c , 0x00000012 + 00018088 0x000036c8 branch 0x0000336d + 00018089 0x000036cb arg 0x000046ad , 0x00000013 + 00018090 0x000036cc arg 0x000033e9 , 0x00000012 + 00018091 0x000036cd branch 0x0000336d + 00018092 0x000036d3 fetch 0x00000001 , 0x000046df + 00018093 0x000036d4 rtnne 0x00000001 + 00018094 0x000036d5 arg 0x000046b7 , 0x00000013 + 00018095 0x000036d6 arg 0x000046c2 , 0x00000012 + 00018096 0x000036d7 branch 0x00003374 + 00018097 0x000036db call 0x0000473a + 00018098 0x000036dc branch 0x00006978 + 00018099 0x000036e0 branch 0x0000696c + 00018100 0x000036e3 call 0x00006835 + 00018101 0x000036e4 branch 0x000046b3 + 00018102 0x000036eb fetch 0x00000001 , 0x0000469a + 00018103 0x000036ec bbit1 0x00000001 , 0x000046be + 00018104 0x000036ed bbit1 0x00000000 , 0x000046ba + 00018105 0x000036ee rtn + 00018106 0x000036f1 fetch 0x00000002 , 0x000046d7 + 00018107 0x000036f2 store 0x00000002 , 0x000046d9 + 00018108 0x000036f3 store 0x00000002 , 0x000046db + 00018109 0x000036f4 branch 0x000033f8 + 00018110 0x000036f7 fetch 0x00000002 , 0x000046d3 + 00018111 0x000036f8 store 0x00000002 , 0x000046d9 + 00018112 0x000036f9 store 0x00000002 , 0x000046db + 00018113 0x000036fa branch 0x000033f0 + 00018114 0x000036fd fetch 0x00000001 , 0x000046df + 00018115 0x000036fe rtnne 0x00000001 + 00018116 0x000036ff fetch 0x00000001 , 0x0000469a + 00018117 0x00003700 bbit1 0x00000001 , 0x000046c8 + 00018118 0x00003701 bbit1 0x00000000 , 0x000046cc + 00018119 0x00003702 rtn + 00018120 0x00003705 fetch 0x00000002 , 0x000046d1 , + 00018121 0x00003706 store 0x00000002 , 0x000046d9 + 00018122 0x00003707 store 0x00000002 , 0x000046db + 00018123 0x00003708 branch 0x000033eb + 00018124 0x0000370b fetch 0x00000002 , 0x00004682 + 00018125 0x0000370c rtnbit1 0x00000009 + 00018126 0x0000370d fetch 0x00000002 , 0x000046d5 + 00018127 0x0000370e store 0x00000002 , 0x000046d9 + 00018128 0x0000370f store 0x00000002 , 0x000046db + 00018129 0x00003710 fetch 0x00000002 , 0x000046b3 + 00018130 0x00003711 call 0x000046f0 + 00018131 0x00003712 call 0x00003404 + 00018132 0x00003713 fetch 0x00000004 , 0x000046bd + 00018133 0x00003714 store 0x00000004 , 0x000048cc + 00018134 0x00003715 fetch 0x00000002 , 0x00004682 + 00018135 0x00003716 rtnbit1 0x0000000b + 00018136 0x00003717 branch 0x000033fa + 00018137 0x0000371b fetch 0x00000001 , 0x000046df + 00018138 0x0000371c rtnne 0x00000001 + 00018139 0x0000371d fetch 0x00000001 , 0x0000469a + 00018140 0x0000371e bbit1 0x00000001 , 0x000046df + 00018141 0x0000371f bbit1 0x00000000 , 0x000046e4 + 00018142 0x00003720 rtn + 00018143 0x00003723 call 0x000046f8 + 00018144 0x00003724 branch 0x000046c2 , 0x00000034 + 00018145 0x00003725 call 0x00003406 + 00018146 0x00003726 call 0x000033f0 + 00018147 0x00003727 branch 0x000033e1 + 00018148 0x0000372a fetch 0x00000002 , 0x000046b7 + 00018149 0x0000372b fetcht 0x00000002 , 0x000046b5 + 00018150 0x0000372c storet 0x00000002 , 0x000046b7 + 00018151 0x0000372d nrtn 0x00000034 + 00018152 0x0000372e fetch 0x00000002 , 0x000046b1 + 00018153 0x0000372f call 0x000046f0 + 00018154 0x00003730 call 0x00003404 + 00018155 0x00003731 fetch 0x00000004 , 0x000046b9 + 00018156 0x00003732 store 0x00000004 , 0x000048cc + 00018157 0x00003733 fetch 0x00000002 , 0x00004682 + 00018158 0x00003734 rtnbit1 0x0000000b + 00018159 0x00003735 branch 0x000033fa + 00018160 0x00003739 store 0x00000002 , 0x00004154 + 00018161 0x0000373a increase 0xfffffffc , 0x0000003f + 00018162 0x0000373b store 0x00000002 , 0x00004482 + 00018163 0x0000373c rtn + 00018164 0x00003740 fetch 0x00000002 , 0x00004682 + 00018165 0x00003741 bbit1 0x00000009 , 0x00003402 + 00018166 0x00003742 bbit1 0x00000000 , 0x000033e9 + 00018167 0x00003743 branch 0x000046b6 + 00018168 0x00003748 fetch 0x00000001 , 0x00004217 + 00018169 0x00003749 copy 0x0000003f , 0x00000039 + 00018170 0x0000374a fetch 0x00000002 , 0x00004215 + 00018171 0x0000374b copy 0x0000003f , 0x00000011 + 00018172 0x0000374d ifetch 0x00000002 , 0x00000011 + 00018173 0x0000374e beq 0x00000000 , 0x00004701 + 00018174 0x0000374f increase 0x00000022 , 0x00000011 + 00018175 0x00003750 loop 0x000046fc + 00018176 0x00003751 branch 0x00007ff1 + 00018177 0x00003754 ifetch 0x00000006 , 0x00000006 + 00018178 0x00003755 store 0x00000006 , 0x000041d0 + 00018179 0x00003756 increase 0x0000000a , 0x00000006 + 00018180 0x00003757 arg 0x000041be , 0x00000005 + 00018181 0x00003758 call 0x00007ebf + 00018182 0x00003759 call 0x000067d7 + 00018183 0x0000375a branch 0x00007fef + 00018184 0x00003761 call 0x00007fe9 + 00018185 0x00003762 fetch 0x00000002 , 0x00004682 + 00018186 0x00003763 bbit1 0x00000000 , 0x0000470d + 00018187 0x00003764 bbit1 0x00000009 , 0x00004710 + 00018188 0x00003765 rtn + 00018189 0x00003768 fetch 0x00000001 , 0x00004253 + 00018190 0x00003769 rtnne 0x0000003f + 00018191 0x0000376a branch 0x00007fe7 + 00018192 0x0000376d fetch 0x00000001 , 0x000046b0 + 00018193 0x0000376e rtn 0x00000034 + 00018194 0x0000376f branch 0x00007fe7 + 00018195 0x00003775 call 0x00007fe9 + 00018196 0x00003776 fetch 0x00000002 , 0x00004682 + 00018197 0x00003777 rtnbit1 0x00000000 + 00018198 0x00003778 rtnbit1 0x00000009 + 00018199 0x00003779 branch 0x00007fe7 + 00018200 0x0000377e fetch 0x00000001 , 0x0000469a + 00018201 0x0000377f bbit1 0x00000001 , 0x0000471c + 00018202 0x00003780 bbit1 0x00000000 , 0x0000471f + 00018203 0x00003781 rtn + 00018204 0x00003784 fetch 0x00000001 , 0x00004093 + 00018205 0x00003785 rtnne 0x00000003 + 00018206 0x00003786 branch 0x000046d9 + 00018207 0x00003789 branch 0x000046d9 + 00018208 0x0000378d disable 0x0000002c + 00018209 0x0000378e fetch 0x00000002 , 0x000046d9 + 00018210 0x0000378f store 0x00000002 , 0x000046db + 00018211 0x00003791 call 0x00004713 + 00018212 0x00003792 branch 0x00004718 , 0x00000028 + 00018213 0x00003794 call 0x00004708 + 00018214 0x00003795 nrtn 0x00000028 + 00018215 0x00003796 enable 0x0000002c + 00018216 0x00003797 rtn + 00018217 0x0000379c call 0x00004720 + 00018218 0x0000379d nrtn 0x0000002c + 00018219 0x0000379e deposit 0x00000011 + 00018220 0x0000379f branch 0x00004730 , 0x00000034 + 00018221 0x000037a1 call 0x00003406 + 00018222 0x000037a2 arg 0x000046f1 , 0x00000013 + 00018223 0x000037a3 branch 0x00004732 + 00018224 0x000037a6 call 0x00003408 + 00018225 0x000037a7 arg 0x00004719 , 0x00000013 + 00018226 0x000037aa arg 0x00000005 , 0x0000003f + 00018227 0x000037ab imul32 0x00000007 , 0x0000003f + 00018228 0x000037ac iadd 0x00000013 , 0x00000013 + 00018229 0x000037b0 ifetch 0x00000001 , 0x00000013 + 00018230 0x000037b1 rtn 0x00000034 + 00018231 0x000037b2 call 0x00004762 + 00018232 0x000037b3 increase 0x00000001 , 0x00000013 + 00018233 0x000037b4 branch 0x00004735 + 00018234 0x000037b8 fetch 0x00000002 , 0x00004682 + 00018235 0x000037b9 bbit1 0x00000009 , 0x0000473e + 00018236 0x000037ba bbit1 0x00000000 , 0x0000474e + 00018237 0x000037bb rtn + 00018238 0x000037be call 0x00005892 + 00018239 0x000037bf nrtn 0x00000034 + 00018240 0x000037c0 call 0x00004765 + 00018241 0x000037c1 nrtn 0x00000028 + 00018242 0x000037c2 pincrease 0xffffffff + 00018243 0x000037c3 mul32 0x0000003f , 0x00000005 , 0x0000003f + 00018244 0x000037c4 arg 0x00004741 , 0x00000002 + 00018245 0x000037c5 iadd 0x00000002 , 0x00000006 + 00018246 0x000037c7 ifetch 0x00000001 , 0x00000006 + 00018247 0x000037c8 copy 0x0000003f , 0x00000011 + 00018248 0x000037c9 ifetcht 0x00000002 , 0x00000006 + 00018249 0x000037ca call 0x00007ea5 + 00018250 0x000037cb call 0x00005a64 + 00018251 0x000037cc copy 0x00000011 , 0x00000039 + 00018252 0x000037cd call 0x00007e9f + 00018253 0x000037ce branch 0x00007f01 + 00018254 0x000037d2 call 0x00005271 + 00018255 0x000037d3 nrtn 0x00000034 + 00018256 0x000037d4 call 0x00004765 + 00018257 0x000037d5 nrtn 0x00000028 + 00018258 0x000037d6 pincrease 0xffffffff + 00018259 0x000037d7 mul32 0x0000003f , 0x00000005 , 0x0000003f + 00018260 0x000037d8 arg 0x000047a0 , 0x00000002 + 00018261 0x000037d9 iadd 0x00000002 , 0x00000006 + 00018262 0x000037da ifetch 0x00000005 , 0x00000006 + 00018263 0x000037db store 0x00000005 , 0x0000479b + 00018264 0x000037dd fetch 0x00000001 , 0x0000479b + 00018265 0x000037de copy 0x0000003f , 0x00000011 + 00018266 0x000037df call 0x00004d63 + 00018267 0x000037e0 fetch 0x00000002 , 0x0000424e + 00018268 0x000037e1 istore 0x00000002 , 0x00000005 + 00018269 0x000037e2 setarg 0x000000a1 + 00018270 0x000037e3 istore 0x00000001 , 0x00000005 + 00018271 0x000037e4 fetch 0x00000004 , 0x0000479c + 00018272 0x000037e5 istore 0x00000009 , 0x00000005 + 00018273 0x000037e6 rtn + 00018274 0x000037eb store 0x00000001 , 0x00000a9a + 00018275 0x000037ec arg 0x00000a9a , 0x00000011 + 00018276 0x000037ed branch 0x00007e3d + 00018277 0x000037f0 arg 0x00000a9a , 0x00000011 + 00018278 0x000037f1 call 0x00007e54 + 00018279 0x000037f2 nrtn 0x00000028 + 00018280 0x000037f3 fetch 0x00000001 , 0x00000a9a + 00018281 0x000037f4 rtn + 00018282 0x000037f8 fetch 0x00000002 , 0x00000478 + 00018283 0x000037f9 beq 0x00000018 , 0x0000465f + 00018284 0x000037fa rtn + 00018285 0x000037fd setarg 0x00000002 + 00018286 0x000037fe store 0x00000001 , 0x000048eb + 00018287 0x00003800 setarg 0x00200008 + 00018288 0x00003801 store 0x00000004 , 0x000046c1 + 00018289 0x00003802 setarg 0x012c0005 + 00018290 0x00003803 istore 0x00000004 , 0x00000005 + 00018291 0x00003806 jam 0x00000017 , 0x000044a6 + 00018292 0x00003809 setarg 0x0000001b + 00018293 0x0000380a store 0x00000002 , 0x000044fa + 00018294 0x0000380b call 0x00005810 + 00018295 0x0000380c call 0x0000582c + 00018296 0x0000380d call 0x00005839 + 00018297 0x0000380e branch 0x00005818 + 00018298 0x00003813 arg 0x00000028 , 0x00000039 + 00018299 0x00003814 arg 0x00004741 , 0x00000005 + 00018300 0x00003815 arg 0x0000949f , 0x00000006 + 00018301 0x00003816 call 0x00007ef4 + 00018302 0x00003817 arg 0x00000028 , 0x00000039 + 00018303 0x00003818 arg 0x000047a0 , 0x00000005 + 00018304 0x00003819 arg 0x000094c7 , 0x00000006 + 00018305 0x0000381a branch 0x00007ef4 + 00018306 0x0000381e arg 0x0000017e , 0x00000039 + 00018307 0x0000381f arg 0x0000913a , 0x00000006 + 00018308 0x00003820 branch 0x00007ef4 + 00018309 0x00003824 arg 0x000001e7 , 0x00000039 + 00018310 0x00003825 arg 0x000092b8 , 0x00000006 + 00018311 0x00003826 branch 0x00007ef4 + 00018312 0x0000382b call 0x000047ae + 00018313 0x0000382c nrtn 0x00000028 + 00018314 0x0000382d fetch 0x00000001 , 0x0000469f + 00018315 0x0000382e call 0x00004790 + 00018316 0x0000382f fetch 0x00000001 , 0x000046a0 + 00018317 0x00003830 call 0x00004790 + 00018318 0x00003831 fetch 0x00000001 , 0x000046a1 + 00018319 0x00003832 branch 0x00004790 + 00018320 0x00003835 rtn 0x00000034 + 00018321 0x00003836 or 0x0000003f , 0x00000080 , 0x00000002 + 00018322 0x00003837 branch 0x000067f9 + 00018323 0x0000383b call 0x000047ae + 00018324 0x0000383c nrtn 0x00000028 + 00018325 0x0000383d call 0x00004797 + 00018326 0x0000383e branch 0x000047b4 + 00018327 0x00003841 arg 0x00000000 , 0x00000011 + 00018328 0x00003842 fetch 0x00000001 , 0x0000469f + 00018329 0x00003843 call 0x000047a9 + 00018330 0x00003844 nsetflag 0x00000034 , 0x00000000 , 0x00000011 + 00018331 0x00003845 fetch 0x00000001 , 0x000046a0 + 00018332 0x00003846 call 0x000047a9 + 00018333 0x00003847 nsetflag 0x00000034 , 0x00000001 , 0x00000011 + 00018334 0x00003848 fetch 0x00000001 , 0x000046a1 + 00018335 0x00003849 call 0x000047a9 + 00018336 0x0000384a nsetflag 0x00000034 , 0x00000002 , 0x00000011 + 00018337 0x0000384b copy 0x00000011 , 0x0000003f + 00018338 0x0000384c store 0x00000001 , 0x000046a9 + 00018339 0x0000384d fetch 0x00000001 , 0x0000469e + 00018340 0x0000384e imul32 0x00000011 , 0x0000003f + 00018341 0x0000384f fetcht 0x00000002 , 0x0000469c + 00018342 0x00003850 iadd 0x00000002 , 0x0000003f + 00018343 0x00003851 store 0x00000002 , 0x000046aa + 00018344 0x00003852 rtn + 00018345 0x00003855 rtn 0x00000034 + 00018346 0x00003856 or 0x0000003f , 0x00000080 , 0x00000002 + 00018347 0x00003857 call 0x0000681d + 00018348 0x00003858 nbranch 0x00007ff1 , 0x00000001 + 00018349 0x00003859 branch 0x00007fef + 00018350 0x0000385d call 0x00007fe9 + 00018351 0x0000385e fetch 0x00000001 , 0x000046a8 + 00018352 0x0000385f nrtn 0x00000034 + 00018353 0x00003860 fetch 0x00000001 , 0x0000469b + 00018354 0x00003861 rtn 0x00000034 + 00018355 0x00003862 branch 0x00007fe7 + 00018356 0x00003866 call 0x0000666a + 00018357 0x00003867 fetch 0x00000002 , 0x000046aa + 00018358 0x00003868 arg 0x00000ac2 , 0x00000011 + 00018359 0x00003869 fetcht 0x00000001 , 0x0000469e + 00018360 0x0000386a call 0x000066b3 + 00018361 0x0000386b call 0x0000666d + 00018362 0x0000386d fetch 0x00000001 , 0x00000ac2 + 00018363 0x0000386e copy 0x0000003f , 0x00000039 + 00018364 0x0000386f store 0x00000001 , 0x000043af + 00018365 0x00003870 call 0x00007ef4 + 00018366 0x00003871 fetch 0x00000001 , 0x00000ac2 + 00018367 0x00003872 copy 0x0000003f , 0x00000039 + 00018368 0x00003873 store 0x00000001 , 0x00004515 + 00018369 0x00003874 call 0x00007ef4 + 00018370 0x00003875 ifetch 0x00000001 , 0x00000006 + 00018371 0x00003876 store 0x00000001 , 0x000046e6 + 00018372 0x00003877 ifetch 0x00000001 , 0x00000006 + 00018373 0x00003878 store 0x00000001 , 0x000046dd + 00018374 0x00003879 rtn + 00018375 0x0000387d fetch 0x00000001 , 0x0000469a + 00018376 0x0000387e rtnbit0 0x00000001 + 00018377 0x0000387f arg 0x00000003 , 0x00000002 + 00018378 0x00003880 fetch 0x00000002 , 0x000046a4 + 00018379 0x00003881 copy 0x0000003f , 0x00000012 + 00018380 0x00003882 arg 0x000046a6 , 0x00000011 + 00018381 0x00003883 call 0x000065df + 00018382 0x00003884 fetcht 0x00000002 , 0x000046a6 + 00018383 0x00003885 setarg 0x00001b3a + 00018384 0x00003886 isub 0x00000002 , 0x0000003e + 00018385 0x00003887 nrtn 0x00000005 + 00018386 0x00003888 fetch 0x00000001 , 0x000046a8 + 00018387 0x00003889 rtn 0x00000034 + 00018388 0x0000388a copy 0x0000003f , 0x00000002 + 00018389 0x0000388b fetch 0x00000002 , 0x000046a4 + 00018390 0x0000388c add 0x0000003f , 0x00000003 , 0x00000012 + 00018391 0x0000388d arg 0x00000ac2 , 0x00000011 + 00018392 0x0000388e call 0x000065df + 00018393 0x0000388f branch 0x000047e8 + 00018394 0x00003892 fetch 0x00000002 , 0x000046a2 + 00018395 0x00003893 rtn 0x00000034 + 00018396 0x00003894 call 0x0000666a + 00018397 0x00003895 arg 0x00000001 , 0x00000002 + 00018398 0x00003896 arg 0x000046a8 , 0x00000011 + 00018399 0x00003897 call 0x000066b3 + 00018400 0x00003899 fetch 0x00000001 , 0x000046a8 + 00018401 0x0000389a rtn 0x00000034 + 00018402 0x0000389c fetch 0x00000002 , 0x000046a2 + 00018403 0x0000389d pincrease 0x00000001 + 00018404 0x0000389e arg 0x00000ac2 , 0x00000011 + 00018405 0x0000389f fetcht 0x00000001 , 0x000046a8 + 00018406 0x000038a0 call 0x000066b3 + 00018407 0x000038a1 call 0x0000666d + 00018408 0x000038a3 call 0x000047ba + 00018409 0x000038a5 ifetch 0x00000002 , 0x00000006 + 00018410 0x000038a6 rtn 0x00000034 + 00018411 0x000038a7 copy 0x0000003f , 0x00000005 + 00018412 0x000038a8 ifetcht 0x00000001 , 0x00000006 + 00018413 0x000038a9 copy 0x00000002 , 0x00000039 + 00018414 0x000038aa call 0x00007f01 + 00018415 0x000038ab branch 0x000047e9 + 00018416 0x000038b0 fetch 0x00000001 , 0x0000469a + 00018417 0x000038b1 rtnbit0 0x00000001 + 00018418 0x000038b2 fetch 0x00000002 , 0x000046ae + 00018419 0x000038b3 copy 0x0000003f , 0x00000012 + 00018420 0x000038b4 arg 0x00000004 , 0x00000002 + 00018421 0x000038b5 arg 0x00000ac2 , 0x00000011 + 00018422 0x000038b6 call 0x000065df + 00018423 0x000038b7 fetch 0x00000001 , 0x00000ac2 + 00018424 0x000038b8 bne 0x00000001 , 0x000047f9 + 00018425 0x000038ba setarg 0x00000001 + 00018426 0x000038bb store 0x00000001 , 0x00000ac2 + 00018427 0x000038bc force 0x00000003 , 0x00000039 + 00018428 0x000038bd call 0x0000630d + 00018429 0x000038be fetch 0x00000002 , 0x000046ae + 00018430 0x000038bf copy 0x0000003f , 0x00000012 + 00018431 0x000038c0 arg 0x00000004 , 0x00000002 + 00018432 0x000038c1 arg 0x00000ac2 , 0x00000011 + 00018433 0x000038c2 call 0x00006606 + 00018434 0x000038c4 fetch 0x00000003 , 0x00000ac3 + 00018435 0x000038c5 store 0x00000003 , 0x000040a0 + 00018436 0x000038c6 store 0x00000003 , 0x000044a0 + 00018437 0x000038c7 rtn + 00018438 0x000038cb branch 0x000046d9 + 00018439 0x000038cf arg 0x00000000 , 0x00000011 + 00018440 0x000038d0 arg 0x000048d4 , 0x00000013 + 00018441 0x000038d1 call 0x00007d24 + 00018442 0x000038d2 call 0x000046f4 + 00018443 0x000038d4 fetch 0x00000001 , 0x000048eb + 00018444 0x000038d5 store 0x00000001 , 0x000048ec + 00018445 0x000038d6 rtn + 00018446 0x000038db setarg 0x00000000 + 00018447 0x000038dc call 0x00004816 + 00018448 0x000038dd jam 0x00000001 , 0x00004679 + 00018449 0x000038de call 0x00007cd3 + 00018450 0x000038df call 0x00007cdd + 00018451 0x000038e0 fetch 0x00000002 , 0x00004682 + 00018452 0x000038e1 rtnbit1 0x0000000c + 00018453 0x000038e2 branch 0x0000340a + 00018454 0x000038e5 fetcht 0x00000002 , 0x0000423f + 00018455 0x000038e6 istore 0x00000001 , 0x00000002 + 00018456 0x000038e7 ifetch 0x00000001 , 0x00000005 + 00018457 0x000038e8 store 0x00000001 , 0x00004685 + 00018458 0x000038e9 rtn + 00018459 0x000038ed fetch 0x00000002 , 0x0000423f + 00018460 0x000038ee ifetch 0x00000001 , 0x0000003f + 00018461 0x000038ef rtnne 0x00000000 + 00018462 0x000038f0 branch 0x0000340a + 00018463 0x000038f4 fetcht 0x00000002 , 0x0000423f + 00018464 0x000038f5 ifetch 0x00000001 , 0x00000002 + 00018465 0x000038f6 beq 0x00000001 , 0x0000482a + 00018466 0x000038f8 setarg 0x00000001 + 00018467 0x000038f9 fetcht 0x00000002 , 0x0000423f + 00018468 0x000038fa istore 0x00000001 , 0x00000002 + 00018469 0x000038fb add 0x00000002 , 0x00000002 , 0x00000006 + 00018470 0x000038fc ifetch 0x00000001 , 0x00000006 + 00018471 0x000038fd istore 0x00000001 , 0x00004685 + 00018472 0x000038fe ifetch 0x00000002 , 0x00000006 + 00018473 0x000038ff branch 0x00007f9c + 00018474 0x00003902 setarg 0x00000002 + 00018475 0x00003903 call 0x00004816 + 00018476 0x00003904 add 0x00000002 , 0x00000005 , 0x00000006 + 00018477 0x00003905 ifetch 0x00000002 , 0x00000006 + 00018478 0x00003906 branch 0x0000340a , 0x00000034 + 00018479 0x00003907 branch 0x00007f9c + 00018480 0x0000390e store 0x00000006 , 0x00000101 + 00018481 0x0000390f fetch 0x00000001 , 0x00000101 + 00018482 0x00003910 store 0x00000001 , 0x0000010c + 00018483 0x00003911 ifetch 0x00000001 , 0x00000006 + 00018484 0x00003912 store 0x00000001 , 0x0000010b + 00018485 0x00003913 ifetch 0x00000001 , 0x00000006 + 00018486 0x00003914 store 0x00000001 , 0x0000010a + 00018487 0x00003915 ifetch 0x00000001 , 0x00000006 + 00018488 0x00003916 store 0x00000001 , 0x00000109 + 00018489 0x00003917 ifetch 0x00000001 , 0x00000006 + 00018490 0x00003918 store 0x00000001 , 0x00000108 + 00018491 0x00003919 ifetch 0x00000001 , 0x00000006 + 00018492 0x0000391a store 0x00000001 , 0x00000107 + 00018493 0x0000391b fetch 0x00000006 , 0x00000107 + 00018494 0x0000391c rtn + 00018495 0x0000391f call 0x000068a2 + 00018496 0x00003920 fetch 0x00000001 , 0x00004223 + 00018497 0x00003921 store 0x00000001 , 0x000044a0 + 00018498 0x00003922 fetch 0x00000001 , 0x00004225 + 00018499 0x00003923 istore 0x00000001 , 0x00000005 + 00018500 0x00003924 fetch 0x00000001 , 0x00004227 + 00018501 0x00003925 istore 0x00000001 , 0x00000005 + 00018502 0x00003926 fetch 0x00000003 , 0x000044a0 + 00018503 0x00003927 store 0x00000003 , 0x000040a0 + 00018504 0x00003928 rtn + 00018505 0x00003935 fetch 0x00000002 , 0x00004203 + 00018506 0x00003936 iadd 0x00000012 , 0x0000003f + 00018507 0x00003937 byteswap 0x0000003f , 0x0000003f + 00018508 0x00003938 store 0x00000002 , 0x000001f7 + 00018509 0x00003939 copy 0x00000002 , 0x00000012 + 00018510 0x0000393b call 0x0000489b + 00018511 0x0000393c setarg 0x000000a0 + 00018512 0x0000393d call 0x0000488d + 00018513 0x0000393e fetch 0x00000001 , 0x000001f7 + 00018514 0x0000393f call 0x0000488d + 00018515 0x00003940 bmark1 0x00000028 , 0x00004856 + 00018516 0x00003941 fetch 0x00000001 , 0x000001f8 + 00018517 0x00003942 call 0x0000488d + 00018518 0x00003944 call 0x000048a1 + 00018519 0x00003946 call 0x0000489b + 00018520 0x00003947 setarg 0x000000a1 + 00018521 0x00003948 call 0x0000488d + 00018522 0x0000394b call 0x0000487f + 00018523 0x0000394c istore 0x00000001 , 0x00000011 + 00018524 0x0000394d increase 0x00000001 , 0x00000011 + 00018525 0x0000394e increase 0xffffffff , 0x00000012 + 00018526 0x0000394f nbranch 0x0000485a , 0x00000005 + 00018527 0x00003950 branch 0x000048a1 + 00018528 0x0000395c byteswap 0x00000012 , 0x0000003f + 00018529 0x0000395d store 0x00000002 , 0x000001f7 + 00018530 0x0000395e copy 0x00000002 , 0x00000012 + 00018531 0x00003960 call 0x0000489b + 00018532 0x00003961 setarg 0x000000a0 + 00018533 0x00003962 call 0x0000488d + 00018534 0x00003964 fetch 0x00000001 , 0x000001f7 + 00018535 0x00003965 call 0x0000488d + 00018536 0x00003966 bmark1 0x00000028 , 0x0000486b + 00018537 0x00003967 fetch 0x00000001 , 0x000001f8 + 00018538 0x00003968 call 0x0000488d + 00018539 0x0000396a ifetch 0x00000001 , 0x00000011 + 00018540 0x0000396b call 0x0000488d + 00018541 0x0000396c increase 0x00000001 , 0x00000011 + 00018542 0x0000396d increase 0xffffffff , 0x00000012 + 00018543 0x0000396e nbranch 0x0000486b , 0x00000005 + 00018544 0x0000396f branch 0x000048a1 + 00018545 0x00003974 arg 0x0000000a , 0x00000039 + 00018546 0x00003975 call 0x000048be + 00018547 0x00003976 call 0x000048a6 + 00018548 0x00003977 call 0x000048d2 + 00018549 0x00003979 call 0x000048c7 + 00018550 0x0000397a branch 0x000048a9 , 0x00000034 + 00018551 0x0000397b loop 0x00004875 + 00018552 0x0000397c branch 0x000048a9 + 00018553 0x00003981 call 0x000048a9 + 00018554 0x00003982 call 0x000048af + 00018555 0x00003983 call 0x000048d2 + 00018556 0x00003984 call 0x000048a6 + 00018557 0x00003985 call 0x000048d2 + 00018558 0x00003986 branch 0x000048a9 + 00018559 0x0000398c arg 0x00000008 , 0x00000039 + 00018560 0x0000398d arg 0x00000000 , 0x00000013 + 00018561 0x0000398e call 0x000048be + 00018562 0x00003990 call 0x000048a6 + 00018563 0x00003991 call 0x000048d2 + 00018564 0x00003992 lshift 0x00000013 , 0x00000013 + 00018565 0x00003993 call 0x000048c7 + 00018566 0x00003994 iadd 0x00000013 , 0x00000013 + 00018567 0x00003995 call 0x000048d2 + 00018568 0x00003996 call 0x000048a9 + 00018569 0x00003997 loop 0x00004882 + 00018570 0x00003998 call 0x00004879 + 00018571 0x00003999 copy 0x00000013 , 0x0000003f + 00018572 0x0000399a rtn + 00018573 0x0000399f arg 0x00000008 , 0x00000039 + 00018574 0x000039a0 copy 0x0000003f , 0x00000013 + 00018575 0x000039a1 call 0x000048a9 + 00018576 0x000039a3 isolate1 0x00000007 , 0x00000013 + 00018577 0x000039a4 call 0x000048ac , 0x00000001 + 00018578 0x000039a5 ncall 0x000048af , 0x00000001 + 00018579 0x000039a6 lshift 0x00000013 , 0x00000013 + 00018580 0x000039a7 call 0x000048d2 + 00018581 0x000039a8 call 0x000048a6 + 00018582 0x000039a9 call 0x000048d2 + 00018583 0x000039aa call 0x000048a9 + 00018584 0x000039ab call 0x000048d2 + 00018585 0x000039ac loop 0x00004890 + 00018586 0x000039ad branch 0x00004871 + 00018587 0x000039b2 call 0x000048ac + 00018588 0x000039b3 call 0x000048a6 + 00018589 0x000039b4 call 0x000048d2 + 00018590 0x000039b5 call 0x000048af + 00018591 0x000039b6 call 0x000048d2 + 00018592 0x000039b7 branch 0x000048a9 + 00018593 0x000039bc call 0x000048af + 00018594 0x000039bd call 0x000048a6 + 00018595 0x000039be call 0x000048d2 + 00018596 0x000039bf call 0x000048ac + 00018597 0x000039c0 branch 0x000048d2 + 00018598 0x000039c5 enable 0x00000028 + 00018599 0x000039c6 fetch 0x00000001 , 0x00004ffe + 00018600 0x000039c7 branch 0x000048b2 + 00018601 0x000039cb disable 0x00000028 + 00018602 0x000039cc fetch 0x00000001 , 0x00004ffe + 00018603 0x000039cd branch 0x000048b2 + 00018604 0x000039d1 enable 0x00000028 + 00018605 0x000039d2 fetch 0x00000001 , 0x00004fff + 00018606 0x000039d3 branch 0x000048b2 + 00018607 0x000039d7 disable 0x00000028 + 00018608 0x000039d8 fetch 0x00000001 , 0x00004fff + 00018609 0x000039d9 branch 0x000048b2 + 00018610 0x000039df and 0x0000003f , 0x00000007 , 0x00000007 + 00018611 0x000039e0 rshift3 0x0000003f , 0x0000003f + 00018612 0x000039e1 arg 0x00008070 , 0x00000002 + 00018613 0x000039e2 iadd 0x00000002 , 0x00000002 + 00018614 0x000039e3 ifetch 0x00000001 , 0x00000002 + 00018615 0x000039e4 qset1 0x0000003f + 00018616 0x000039e5 istore 0x00000001 , 0x00000002 + 00018617 0x000039e6 increase 0x00000004 , 0x00000002 + 00018618 0x000039e7 ifetch 0x00000001 , 0x00000002 + 00018619 0x000039e8 qsetflag 0x00000028 , 0x0000003f + 00018620 0x000039e9 istore 0x00000001 , 0x00000002 + 00018621 0x000039ea rtn + 00018622 0x000039ee fetch 0x00000001 , 0x00004fff + 00018623 0x000039ef and 0x0000003f , 0x00000007 , 0x00000007 + 00018624 0x000039f0 rshift3 0x0000003f , 0x0000003f + 00018625 0x000039f1 arg 0x00008070 , 0x00000002 + 00018626 0x000039f2 iadd 0x00000002 , 0x00000002 + 00018627 0x000039f3 ifetch 0x00000001 , 0x00000002 + 00018628 0x000039f4 qset0 0x0000003f + 00018629 0x000039f5 istore 0x00000001 , 0x00000002 + 00018630 0x000039f6 rtn + 00018631 0x000039fc nop 0x00000004 + 00018632 0x000039fd fetch 0x00000001 , 0x00004fff + 00018633 0x000039fe and 0x0000003f , 0x00000007 , 0x00000007 + 00018634 0x000039ff rshift3 0x0000003f , 0x0000003f + 00018635 0x00003a00 arg 0x0000811c , 0x00000002 + 00018636 0x00003a01 iadd 0x00000002 , 0x00000002 + 00018637 0x00003a02 setarg 0x00000000 + 00018638 0x00003a03 ifetcht 0x00000001 , 0x00000002 + 00018639 0x00003a04 qisolate1 0x00000002 + 00018640 0x00003a05 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00018641 0x00003a06 rtn + 00018642 0x00003a0b rtn + 00018643 0x00003a12 bpatch 0x000000f6 , 0x0000401e + 00018644 0x00003a13 hfetch 0x00000001 , 0x00008a26 + 00018645 0x00003a14 isolate1 0x00000007 , 0x0000003f + 00018646 0x00003a15 call 0x000048ea , 0x00000001 + 00018647 0x00003a16 call 0x0000492e + 00018648 0x00003a17 hfetch 0x00000001 , 0x00008a26 + 00018649 0x00003a18 store 0x00000001 , 0x00000b22 + 00018650 0x00003a19 hfetch 0x00000001 , 0x00008a27 + 00018651 0x00003a1a store 0x00000001 , 0x00000b23 + 00018652 0x00003a1b hstore 0x00000001 , 0x00008a27 + 00018653 0x00003a1c pinvert + 00018654 0x00003a1d fetcht 0x00000001 , 0x00000d37 + 00018655 0x00003a1e iand 0x00000002 , 0x0000003f + 00018656 0x00003a1f store 0x00000001 , 0x00000d37 + 00018657 0x00003a20 hjam 0x000000e0 , 0x00008a26 + 00018658 0x00003a21 fetch 0x00000001 , 0x00000b23 + 00018659 0x00003a22 compare 0x00000001 , 0x0000003f , 0x00000001 + 00018660 0x00003a23 call 0x00004941 , 0x00000001 + 00018661 0x00003a24 fetch 0x00000001 , 0x00000b22 + 00018662 0x00003a25 compare 0x00000001 , 0x0000003f , 0x00000001 + 00018663 0x00003a26 call 0x0000494a , 0x00000001 + 00018664 0x00003a27 call 0x00004b61 + 00018665 0x00003a28 branch 0x00004903 + 00018666 0x00003a2b bpatch 0x000000f7 , 0x0000401e + 00018667 0x00003a2c call 0x00004919 + 00018668 0x00003a2d hjam 0x00000000 , 0x00008a00 + 00018669 0x00003a2e nop 0x00002710 + 00018670 0x00003a2f hjam 0x000000c0 , 0x00008a10 + 00018671 0x00003a30 hfetch 0x00000002 , 0x00008050 + 00018672 0x00003a31 set0 0x0000000a , 0x0000003f + 00018673 0x00003a32 hstore 0x00000002 , 0x00008050 + 00018674 0x00003a33 hjam 0x0000003c , 0x00008a00 + 00018675 0x00003a34 hjam 0x000000ff , 0x00008a26 + 00018676 0x00003a35 hjam 0x000000ff , 0x00008a27 + 00018677 0x00003a36 hjam 0x00000000 , 0x00008a04 + 00018678 0x00003a37 jam 0x00000002 , 0x00000c6b + 00018679 0x00003a38 setarg 0x00000d9d + 00018680 0x00003a39 arg 0x00000c6e , 0x00000005 + 00018681 0x00003a3a isub 0x00000005 , 0x00000039 + 00018682 0x00003a3b branch 0x00007ed4 + 00018683 0x00003a3e fetcht 0x00000001 , 0x00000c6c + 00018684 0x00003a3f branch 0x000067fb + 00018685 0x00003a41 fetch 0x00000001 , 0x00000d45 + 00018686 0x00003a42 rtn 0x00000034 + 00018687 0x00003a43 fetcht 0x00000001 , 0x00000c6c + 00018688 0x00003a44 call 0x0000681d + 00018689 0x00003a45 branch 0x000048ea , 0x00000001 + 00018690 0x00003a46 rtn + 00018691 0x00003a4a arg 0x00000000 , 0x00000007 + 00018692 0x00003a4b call 0x00007f16 + 00018693 0x00003a4c nrtn 0x00000034 + 00018694 0x00003a4d fetch 0x00000001 , 0x00000d46 + 00018695 0x00003a4e nrtn 0x00000034 + 00018696 0x00003a4f fetch 0x00000001 , 0x00000d45 + 00018697 0x00003a50 ncall 0x00004bb7 , 0x00000034 + 00018698 0x00003a51 rtn + 00018699 0x00003a54 arg 0x00000b68 , 0x00000005 + 00018700 0x00003a55 setsect 0x00000000 , 0x00011212 + 00018701 0x00003a56 setsect 0x00000001 , 0x00008000 + 00018702 0x00003a57 setsect 0x00000002 , 0x00000000 + 00018703 0x00003a58 setsect 0x00000003 , 0x00010000 + 00018704 0x00003a59 istore 0x00000009 , 0x00000005 + 00018705 0x00003a5a setsect 0x00000000 , 0x00022412 + 00018706 0x00003a5b setsect 0x00000001 , 0x00008604 + 00018707 0x00003a5c setsect 0x00000002 , 0x00001000 + 00018708 0x00003a5d setsect 0x00000003 , 0x00000008 + 00018709 0x00003a5e istore 0x00000009 , 0x00000005 + 00018710 0x00003a5f setsect 0x00000000 , 0x00000001 + 00018711 0x00003a60 istore 0x00000001 , 0x00000005 + 00018712 0x00003a61 rtn + 00018713 0x00003a64 jam 0x00000002 , 0x00000c6b + 00018714 0x00003a65 setarg 0x00000000 + 00018715 0x00003a66 store 0x00000001 , 0x00000b67 + 00018716 0x00003a67 store 0x00000002 , 0x00000c65 + 00018717 0x00003a68 pincrease 0x00000001 + 00018718 0x00003a69 store 0x00000002 , 0x00000c67 + 00018719 0x00003a6a pincrease 0x00000001 + 00018720 0x00003a6b store 0x00000002 , 0x00000c69 + 00018721 0x00003a6c setarg 0x00008ffa + 00018722 0x00003a6d store 0x00000002 , 0x00000b7c + 00018723 0x00003a6e setarg 0x0000903a + 00018724 0x00003a6f store 0x00000002 , 0x00000b7e + 00018725 0x00003a70 arg 0x00000b80 , 0x00000005 + 00018726 0x00003a71 arg 0x000090fe , 0x00000006 + 00018727 0x00003a72 call 0x00007eb3 + 00018728 0x00003a73 fetch 0x00000001 , 0x00000c6d + 00018729 0x00003a74 ncall 0x0000492b , 0x00000034 + 00018730 0x00003a75 branch 0x0000490b + 00018731 0x00003a78 store 0x00000001 , 0x00000ba2 + 00018732 0x00003a79 store 0x00000001 , 0x00000bbb + 00018733 0x00003a7a rtn + 00018734 0x00003a7c hfetch 0x00000001 , 0x00008a26 + 00018735 0x00003a7d bbit1 0x00000006 , 0x00004931 + 00018736 0x00003a7e rtn + 00018737 0x00003a81 call 0x00004936 + 00018738 0x00003a82 call 0x00007f15 + 00018739 0x00003a83 setarg 0x00000280 + 00018740 0x00003a84 arg 0x00000000 , 0x00000007 + 00018741 0x00003a85 branch 0x00007f08 + 00018742 0x00003a88 fetch 0x00000001 , 0x00000d36 + 00018743 0x00003a89 bne 0x00000002 , 0x0000493b + 00018744 0x00003a8a jam 0x00000000 , 0x00000d46 + 00018745 0x00003a8b jam 0x00000000 , 0x00000d47 + 00018746 0x00003a8c rtn + 00018747 0x00003a8e fetch 0x00000001 , 0x00000d53 + 00018748 0x00003a8f rtn 0x00000034 + 00018749 0x00003a90 jam 0x00000000 , 0x00000d53 + 00018750 0x00003a91 jam 0x00000002 , 0x00000d36 + 00018751 0x00003a92 jam 0x00000001 , 0x00000d45 + 00018752 0x00003a93 rtn + 00018753 0x00003a96 hjam 0x00000001 , 0x00008a27 + 00018754 0x00003a97 branch 0x00004b37 + 00018755 0x00003a9a fetch 0x00000001 , 0x00000b22 + 00018756 0x00003a9b bbit1 0x00000004 , 0x00004955 + 00018757 0x00003a9c rtn + 00018758 0x00003a9f hfetch 0x00000001 , 0x00008a18 + 00018759 0x00003aa0 istore 0x00000001 , 0x00000005 + 00018760 0x00003aa1 loop 0x00004946 + 00018761 0x00003aa2 rtn + 00018762 0x00003aa5 bpatch 0x000000f8 , 0x0000401f + 00018763 0x00003aa6 hjam 0x00000011 , 0x00008a26 + 00018764 0x00003aa7 hfetch 0x00000001 , 0x00008a20 + 00018765 0x00003aa8 store 0x00000001 , 0x00000b24 + 00018766 0x00003aa9 copy 0x0000003f , 0x00000039 + 00018767 0x00003aaa branch 0x00004943 , 0x00000034 + 00018768 0x00003aab arg 0x00000c6e , 0x00000005 + 00018769 0x00003aac call 0x00004946 + 00018770 0x00003aad fetch 0x00000001 , 0x00000b24 + 00018771 0x00003aae sub 0x0000003f , 0x00000007 , 0x0000003e + 00018772 0x00003aaf rtn 0x00000002 + 00018773 0x00003ab1 fetch 0x00000001 , 0x00000c6e + 00018774 0x00003ab2 and_into 0x00000080 , 0x0000003f + 00018775 0x00003ab3 beq 0x00000080 , 0x0000495a + 00018776 0x00003ab4 beq 0x00000000 , 0x00004962 + 00018777 0x00003ab5 branch 0x00002a8c + 00018778 0x00003ab8 fetch 0x00000001 , 0x00000c6e + 00018779 0x00003ab9 rshift4 0x0000003f , 0x0000003f + 00018780 0x00003aba rshift 0x0000003f , 0x0000003f + 00018781 0x00003abb and_into 0x00000003 , 0x0000003f + 00018782 0x00003abc beq 0x00000000 , 0x0000496a + 00018783 0x00003abd beq 0x00000001 , 0x00004970 + 00018784 0x00003abe beq 0x00000002 , 0x00004975 + 00018785 0x00003abf branch 0x00002a8c + 00018786 0x00003ac2 fetch 0x00000001 , 0x00000c6e + 00018787 0x00003ac3 rshift4 0x0000003f , 0x0000003f + 00018788 0x00003ac4 rshift 0x0000003f , 0x0000003f + 00018789 0x00003ac5 and_into 0x00000003 , 0x0000003f + 00018790 0x00003ac6 beq 0x00000000 , 0x00004976 + 00018791 0x00003ac7 beq 0x00000001 , 0x0000497e + 00018792 0x00003ac8 beq 0x00000002 , 0x00004983 + 00018793 0x00003ac9 branch 0x00002a8c + 00018794 0x00003acc fetch 0x00000001 , 0x00000c6f + 00018795 0x00003acd beq 0x00000008 , 0x0000498a + 00018796 0x00003ace beq 0x00000006 , 0x000049a0 + 00018797 0x00003acf beq 0x0000000a , 0x000049ea + 00018798 0x00003ad0 beq 0x00000000 , 0x000049fc + 00018799 0x00003ad1 branch 0x00004984 + 00018800 0x00003ad4 fetch 0x00000001 , 0x00000c6f + 00018801 0x00003ad5 beq 0x00000002 , 0x00004a2f + 00018802 0x00003ad6 beq 0x00000001 , 0x00004a33 + 00018803 0x00003ad7 beq 0x00000003 , 0x00004a45 + 00018804 0x00003ad8 branch 0x00004984 + 00018805 0x00003adb branch 0x00004984 + 00018806 0x00003ade fetch 0x00000001 , 0x00000c6f + 00018807 0x00003adf beq 0x00000001 , 0x00004a4f + 00018808 0x00003ae0 beq 0x00000003 , 0x00004a79 + 00018809 0x00003ae1 beq 0x00000005 , 0x00004aa3 + 00018810 0x00003ae2 beq 0x00000009 , 0x00004abc + 00018811 0x00003ae3 beq 0x0000000b , 0x00004ad7 + 00018812 0x00003ae4 beq 0x00000007 , 0x00004984 + 00018813 0x00003ae5 branch 0x00004984 + 00018814 0x00003ae8 fetch 0x00000001 , 0x00000c6f + 00018815 0x00003ae9 beq 0x0000000a , 0x00004ae8 + 00018816 0x00003aea beq 0x00000009 , 0x00004af9 + 00018817 0x00003aeb beq 0x0000000b , 0x00004b11 + 00018818 0x00003aec branch 0x00004984 + 00018819 0x00003aef branch 0x00004984 + 00018820 0x00003af2 hfetch 0x00000001 , 0x00008a11 + 00018821 0x00003af3 set1 0x00000000 , 0x0000003f + 00018822 0x00003af4 hstore 0x00000001 , 0x00008a11 + 00018823 0x00003af5 branch 0x00004988 + 00018824 0x00003af8 hjam 0x00000040 , 0x00008a12 + 00018825 0x00003af9 rtn + 00018826 0x00003afc fetch 0x00000001 , 0x00000c6e + 00018827 0x00003afd bne 0x00000080 , 0x00004984 + 00018828 0x00003afe fetch 0x00000001 , 0x00000c72 + 00018829 0x00003aff bne 0x00000000 , 0x00004984 + 00018830 0x00003b00 fetch 0x00000001 , 0x00000c73 + 00018831 0x00003b01 bne 0x00000000 , 0x00004984 + 00018832 0x00003b02 fetch 0x00000001 , 0x00000c74 + 00018833 0x00003b03 bne 0x00000001 , 0x00004984 + 00018834 0x00003b04 fetch 0x00000001 , 0x00000c75 + 00018835 0x00003b05 bne 0x00000000 , 0x00004984 + 00018836 0x00003b06 fetch 0x00000001 , 0x00000c70 + 00018837 0x00003b07 bne 0x00000000 , 0x00004984 + 00018838 0x00003b08 fetch 0x00000001 , 0x00000c71 + 00018839 0x00003b09 bne 0x00000000 , 0x00004984 + 00018840 0x00003b0a fetch 0x00000001 , 0x00000c6b + 00018841 0x00003b0b beq 0x00000004 , 0x0000499c + 00018842 0x00003b0c beq 0x00000003 , 0x0000499e + 00018843 0x00003b0d branch 0x00004984 + 00018844 0x00003b10 arg 0x00000001 , 0x00000012 + 00018845 0x00003b11 branch 0x00004a14 + 00018846 0x00003b14 arg 0x00000001 , 0x00000012 + 00018847 0x00003b15 branch 0x00004a12 + 00018848 0x00003b18 bpatch 0x000000f9 , 0x0000401f + 00018849 0x00003b19 set0 0x00000023 , 0x00000000 + 00018850 0x00003b1a fetch 0x00000001 , 0x00000c71 + 00018851 0x00003b1b beq 0x00000001 , 0x000049b6 + 00018852 0x00003b1c beq 0x00000002 , 0x000049cf + 00018853 0x00003b1d beq 0x00000003 , 0x000049d2 + 00018854 0x00003b1e beq 0x00000021 , 0x000049a9 + 00018855 0x00003b1f beq 0x00000022 , 0x000049e0 + 00018856 0x00003b20 branch 0x00004984 + 00018857 0x00003b23 jam 0x00000000 , 0x00000d4b + 00018858 0x00003b24 fetch 0x00000001 , 0x00000c72 + 00018859 0x00003b25 beq 0x00000000 , 0x000049ae + 00018860 0x00003b26 beq 0x00000001 , 0x000049b2 + 00018861 0x00003b27 branch 0x00004984 + 00018862 0x00003b2a arg 0x00000b93 , 0x00000011 + 00018863 0x00003b2b ifetch 0x00000001 , 0x00000011 + 00018864 0x00003b2c iforce 0x00000012 + 00018865 0x00003b2d branch 0x00004b21 + 00018866 0x00003b30 arg 0x00000bac , 0x00000011 + 00018867 0x00003b31 ifetch 0x00000001 , 0x00000011 + 00018868 0x00003b32 iforce 0x00000012 + 00018869 0x00003b33 branch 0x00004b21 + 00018870 0x00003b39 fetch 0x00000001 , 0x00000d48 + 00018871 0x00003b3a ncall 0x000049c7 , 0x00000034 + 00018872 0x00003b3b setarg 0x00000b68 + 00018873 0x00003b3c fetcht 0x00000001 , 0x00000b68 + 00018874 0x00003b3e store 0x00000002 , 0x00000d3f + 00018875 0x00003b3f storet 0x00000001 , 0x00000d41 + 00018876 0x00003b40 fetch 0x00000001 , 0x00000c74 + 00018877 0x00003b41 isub 0x00000002 , 0x0000003e + 00018878 0x00003b42 nbranch 0x000049c5 , 0x00000002 + 00018879 0x00003b44 fetch 0x00000001 , 0x00000d41 + 00018880 0x00003b46 iforce 0x00000012 + 00018881 0x00003b47 fetch 0x00000002 , 0x00000d3f + 00018882 0x00003b48 add 0x0000003f , 0x00000001 , 0x0000003f + 00018883 0x00003b49 iforce 0x00000011 + 00018884 0x00003b4a branch 0x00004b21 + 00018885 0x00003b4c fetch 0x00000001 , 0x00000c74 + 00018886 0x00003b4d branch 0x000049c0 + 00018887 0x00003b50 hfetch 0x00000001 , 0x00008a04 + 00018888 0x00003b51 ncall 0x000049cb , 0x00000034 + 00018889 0x00003b52 jam 0x00000000 , 0x00000d48 + 00018890 0x00003b53 rtn + 00018891 0x00003b55 hfetch 0x00000001 , 0x00008a04 + 00018892 0x00003b56 set1 0x00000007 , 0x0000003f + 00018893 0x00003b57 hstore 0x00000001 , 0x00008a04 + 00018894 0x00003b58 rtn + 00018895 0x00003b5b setarg 0x00000b80 + 00018896 0x00003b5c fetcht 0x00000001 , 0x00000b80 + 00018897 0x00003b5d branch 0x000049ba + 00018898 0x00003b60 fetch 0x00000001 , 0x00000c70 + 00018899 0x00003b61 sub 0x0000003f , 0x00000003 , 0x0000003e + 00018900 0x00003b62 nbranch 0x00004984 , 0x00000002 + 00018901 0x00003b63 fetch 0x00000001 , 0x00000c70 + 00018902 0x00003b64 arg 0x00000be4 , 0x00000011 + 00018903 0x00003b65 beq 0x00000000 , 0x00004b1e + 00018904 0x00003b66 set1 0x00000023 , 0x00000000 + 00018905 0x00003b67 arg 0x00000be9 , 0x00000011 + 00018906 0x00003b68 beq 0x00000001 , 0x00004b1e + 00018907 0x00003b69 arg 0x00000c07 , 0x00000011 + 00018908 0x00003b6a beq 0x00000002 , 0x00004b1e + 00018909 0x00003b6b arg 0x00000c47 , 0x00000011 + 00018910 0x00003b6c beq 0x00000003 , 0x00004b1e + 00018911 0x00003b6d rtn + 00018912 0x00003b70 fetch 0x00000002 , 0x00000c72 + 00018913 0x00003b71 beq 0x00000001 , 0x000049e5 + 00018914 0x00003b72 fetch 0x00000002 , 0x00000b7c + 00018915 0x00003b73 copy 0x0000003f , 0x00000011 + 00018916 0x00003b75 branch 0x00004b1e + 00018917 0x00003b77 jam 0x00000001 , 0x00000d45 + 00018918 0x00003b78 jam 0x00000001 , 0x00000d36 + 00018919 0x00003b79 fetch 0x00000002 , 0x00000b7e + 00018920 0x00003b7a copy 0x0000003f , 0x00000011 + 00018921 0x00003b7c branch 0x00004b1e + 00018922 0x00003b80 fetch 0x00000001 , 0x00000c6b + 00018923 0x00003b81 bne 0x00000004 , 0x00004984 + 00018924 0x00003b82 fetch 0x00000001 , 0x00000c6e + 00018925 0x00003b83 bne 0x00000081 , 0x00004984 + 00018926 0x00003b84 fetch 0x00000001 , 0x00000c70 + 00018927 0x00003b85 bne 0x00000000 , 0x00004984 + 00018928 0x00003b86 fetch 0x00000001 , 0x00000c71 + 00018929 0x00003b87 bne 0x00000000 , 0x00004984 + 00018930 0x00003b88 fetch 0x00000001 , 0x00000c74 + 00018931 0x00003b89 bne 0x00000001 , 0x00004984 + 00018932 0x00003b8a fetch 0x00000001 , 0x00000c75 + 00018933 0x00003b8b bne 0x00000000 , 0x00004984 + 00018934 0x00003b8c fetch 0x00000001 , 0x00000c72 + 00018935 0x00003b8d bne 0x00000000 , 0x00004984 + 00018936 0x00003b8e fetch 0x00000001 , 0x00000c73 + 00018937 0x00003b8f bne 0x00000000 , 0x00004984 + 00018938 0x00003b90 arg 0x00000001 , 0x00000012 + 00018939 0x00003b91 branch 0x00004a12 + 00018940 0x00003b95 fetch 0x00000001 , 0x00000c6b + 00018941 0x00003b96 beq 0x00000002 , 0x00004984 + 00018942 0x00003b97 fetch 0x00000001 , 0x00000c70 + 00018943 0x00003b98 bne 0x00000000 , 0x00004984 + 00018944 0x00003b99 fetch 0x00000001 , 0x00000c71 + 00018945 0x00003b9a bne 0x00000000 , 0x00004984 + 00018946 0x00003b9b fetch 0x00000001 , 0x00000c74 + 00018947 0x00003b9c bne 0x00000002 , 0x00004984 + 00018948 0x00003b9d fetch 0x00000001 , 0x00000c75 + 00018949 0x00003b9e bne 0x00000000 , 0x00004984 + 00018950 0x00003b9f fetch 0x00000001 , 0x00000c73 + 00018951 0x00003ba0 bne 0x00000000 , 0x00004984 + 00018952 0x00003ba1 fetch 0x00000001 , 0x00000c6e + 00018953 0x00003ba2 beq 0x00000080 , 0x00004a0d + 00018954 0x00003ba3 beq 0x00000081 , 0x00004a18 + 00018955 0x00003ba4 beq 0x00000082 , 0x00004a1c + 00018956 0x00003ba5 branch 0x00004984 + 00018957 0x00003ba8 fetch 0x00000001 , 0x00000c72 + 00018958 0x00003ba9 bne 0x00000000 , 0x00004984 + 00018959 0x00003baa arg 0x00000002 , 0x00000012 + 00018960 0x00003bab fetch 0x00000001 , 0x00000d39 + 00018961 0x00003bac beq 0x00000001 , 0x00004a16 + 00018962 0x00003baf arg 0x00000c65 , 0x00000011 + 00018963 0x00003bb0 branch 0x00004b21 + 00018964 0x00003bb2 arg 0x00000c67 , 0x00000011 + 00018965 0x00003bb3 branch 0x00004b21 + 00018966 0x00003bb5 arg 0x00000c69 , 0x00000011 + 00018967 0x00003bb6 branch 0x00004b21 + 00018968 0x00003bb9 fetch 0x00000001 , 0x00000c6b + 00018969 0x00003bba bne 0x00000004 , 0x00004984 + 00018970 0x00003bbb arg 0x00000002 , 0x00000012 + 00018971 0x00003bbc branch 0x00004a12 + 00018972 0x00003bbf fetch 0x00000001 , 0x00000c6b + 00018973 0x00003bc0 bne 0x00000004 , 0x00004984 + 00018974 0x00003bc1 fetch 0x00000001 , 0x00000c72 + 00018975 0x00003bc2 beq 0x00000081 , 0x00004a29 + 00018976 0x00003bc3 beq 0x00000082 , 0x00004a2b + 00018977 0x00003bc4 beq 0x00000083 , 0x00004a2d + 00018978 0x00003bc5 and_into 0x0000007f , 0x0000003f + 00018979 0x00003bc6 beq 0x00000000 , 0x00004a25 + 00018980 0x00003bc7 branch 0x00004984 + 00018981 0x00003bca fetch 0x00000001 , 0x00000d3b + 00018982 0x00003bcc arg 0x00000002 , 0x00000012 + 00018983 0x00003bcd beq 0x00000001 , 0x00004a14 + 00018984 0x00003bce branch 0x00004a12 + 00018985 0x00003bd0 fetch 0x00000001 , 0x00000d3c + 00018986 0x00003bd1 branch 0x00004a26 + 00018987 0x00003bd3 fetch 0x00000001 , 0x00000d3d + 00018988 0x00003bd4 branch 0x00004a26 + 00018989 0x00003bd6 fetch 0x00000001 , 0x00000d3e + 00018990 0x00003bd7 branch 0x00004a26 + 00018991 0x00003bda jam 0x00000001 , 0x00000d4c + 00018992 0x00003bdb arg 0x00000d4d , 0x00000011 + 00018993 0x00003bdc arg 0x00000001 , 0x00000012 + 00018994 0x00003bdd branch 0x00004b21 + 00018995 0x00003be0 fetch 0x00000002 , 0x00000c70 + 00018996 0x00003be1 arg 0x000001ba , 0x00000002 + 00018997 0x00003be2 isub 0x00000002 , 0x0000003e + 00018998 0x00003be3 nbranch 0x00004984 , 0x00000005 + 00018999 0x00003be4 set0 0x00000023 , 0x00000000 + 00019000 0x00003be6 fetch 0x00000001 , 0x00000d42 + 00019001 0x00003be7 nbranch 0x00004a42 , 0x00000034 + 00019002 0x00003be8 jam 0x00000000 , 0x00000cf6 + 00019003 0x00003bea fetch 0x00000001 , 0x00000c74 + 00019004 0x00003beb iforce 0x00000012 + 00019005 0x00003bec arg 0x00000cf6 , 0x00000011 + 00019006 0x00003bed call 0x00004b21 + 00019007 0x00003bef arg 0x00000cf6 , 0x00000005 + 00019008 0x00003bf0 arg 0x00000008 , 0x00000039 + 00019009 0x00003bf1 branch 0x00007ec6 + 00019010 0x00003bf3 jam 0x00000000 , 0x00000d42 + 00019011 0x00003bf4 jam 0x00000001 , 0x00000cf6 + 00019012 0x00003bf5 branch 0x00004a3b + 00019013 0x00003bf8 fetch 0x00000001 , 0x00000c74 + 00019014 0x00003bf9 bne 0x00000001 , 0x00004984 + 00019015 0x00003bfa jam 0x00000001 , 0x00000d4b + 00019016 0x00003bfb arg 0x00000001 , 0x00000012 + 00019017 0x00003bfc fetch 0x00000001 , 0x00000d49 + 00019018 0x00003bfd beq 0x00000000 , 0x00004a4d + 00019019 0x00003bfe beq 0x00000001 , 0x00004a4e + 00019020 0x00003bff branch 0x00004a12 + 00019021 0x00003c01 branch 0x00004a14 + 00019022 0x00003c03 branch 0x00004a12 + 00019023 0x00003c09 fetch 0x00000001 , 0x00000c6b + 00019024 0x00003c0a bne 0x00000004 , 0x00004984 + 00019025 0x00003c0b fetch 0x00000001 , 0x00000c74 + 00019026 0x00003c0c bne 0x00000000 , 0x00004984 + 00019027 0x00003c0d fetch 0x00000001 , 0x00000c75 + 00019028 0x00003c0e bne 0x00000000 , 0x00004984 + 00019029 0x00003c0f fetch 0x00000001 , 0x00000c71 + 00019030 0x00003c10 bne 0x00000000 , 0x00004984 + 00019031 0x00003c11 fetch 0x00000001 , 0x00000c73 + 00019032 0x00003c12 bne 0x00000000 , 0x00004984 + 00019033 0x00003c13 fetch 0x00000001 , 0x00000c6e + 00019034 0x00003c14 beq 0x00000000 , 0x00004a5e + 00019035 0x00003c15 beq 0x00000001 , 0x00004a66 + 00019036 0x00003c16 beq 0x00000002 , 0x00004a67 + 00019037 0x00003c17 branch 0x00004984 + 00019038 0x00003c1a fetch 0x00000001 , 0x00000c70 + 00019039 0x00003c1b bne 0x00000001 , 0x00004984 + 00019040 0x00003c1c hfetch 0x00000001 , 0x00008a00 + 00019041 0x00003c1d set0 0x00000007 , 0x0000003f + 00019042 0x00003c1e hstore 0x00000001 , 0x00008a00 + 00019043 0x00003c1f jam 0x00000000 , 0x00000d39 + 00019044 0x00003c20 jam 0x00000001 , 0x00000d3a + 00019045 0x00003c21 branch 0x00004988 + 00019046 0x00003c24 branch 0x00004984 + 00019047 0x00003c27 fetch 0x00000001 , 0x00000c70 + 00019048 0x00003c28 bne 0x00000000 , 0x00004984 + 00019049 0x00003c29 fetch 0x00000001 , 0x00000c72 + 00019050 0x00003c2a beq 0x00000081 , 0x00004a72 + 00019051 0x00003c2b beq 0x00000082 , 0x00004a75 + 00019052 0x00003c2c beq 0x00000083 , 0x00004a77 + 00019053 0x00003c2d and_into 0x0000007f , 0x0000003f + 00019054 0x00003c2e beq 0x00000000 , 0x00004a70 + 00019055 0x00003c2f branch 0x00004984 + 00019056 0x00003c32 jam 0x00000000 , 0x00000d3b + 00019057 0x00003c33 branch 0x00004988 + 00019058 0x00003c35 jam 0x00000000 , 0x00000d3c + 00019059 0x00003c37 jam 0x00000001 , 0x00000d53 + 00019060 0x00003c38 branch 0x00004988 + 00019061 0x00003c3a jam 0x00000000 , 0x00000d3d + 00019062 0x00003c3b branch 0x00004a73 + 00019063 0x00003c3d jam 0x00000000 , 0x00000d3e + 00019064 0x00003c3e branch 0x00004a73 + 00019065 0x00003c42 fetch 0x00000001 , 0x00000c74 + 00019066 0x00003c43 bne 0x00000000 , 0x00004984 + 00019067 0x00003c44 fetch 0x00000001 , 0x00000c75 + 00019068 0x00003c45 bne 0x00000000 , 0x00004984 + 00019069 0x00003c46 fetch 0x00000001 , 0x00000c6e + 00019070 0x00003c47 beq 0x00000000 , 0x00004a82 + 00019071 0x00003c48 beq 0x00000001 , 0x00004a8f + 00019072 0x00003c49 beq 0x00000002 , 0x00004a90 + 00019073 0x00003c4a branch 0x00004984 + 00019074 0x00003c4d fetch 0x00000001 , 0x00000c70 + 00019075 0x00003c4e bne 0x00000001 , 0x00004984 + 00019076 0x00003c4f hfetch 0x00000001 , 0x00008a00 + 00019077 0x00003c50 set1 0x00000007 , 0x0000003f + 00019078 0x00003c51 hstore 0x00000001 , 0x00008a00 + 00019079 0x00003c52 jam 0x00000001 , 0x00000d39 + 00019080 0x00003c53 jam 0x00000003 , 0x00000d36 + 00019081 0x00003c54 jam 0x00000000 , 0x00000d43 + 00019082 0x00003c55 call 0x00004988 + 00019083 0x00003c57 call 0x00007f15 + 00019084 0x00003c58 setarg 0x00001388 + 00019085 0x00003c59 arg 0x0000000f , 0x00000007 + 00019086 0x00003c5a branch 0x00007f08 + 00019087 0x00003c5d branch 0x00004984 + 00019088 0x00003c60 fetch 0x00000001 , 0x00000c70 + 00019089 0x00003c61 bne 0x00000000 , 0x00004984 + 00019090 0x00003c62 fetch 0x00000001 , 0x00000c71 + 00019091 0x00003c63 bne 0x00000000 , 0x00004984 + 00019092 0x00003c64 fetch 0x00000001 , 0x00000c72 + 00019093 0x00003c65 beq 0x00000081 , 0x00004a9d + 00019094 0x00003c66 beq 0x00000082 , 0x00004a9f + 00019095 0x00003c67 beq 0x00000083 , 0x00004aa1 + 00019096 0x00003c68 and_into 0x0000007f , 0x0000003f + 00019097 0x00003c69 beq 0x00000000 , 0x00004a9b + 00019098 0x00003c6a branch 0x00004984 + 00019099 0x00003c6d jam 0x00000001 , 0x00000d3b + 00019100 0x00003c6e branch 0x00004988 + 00019101 0x00003c70 jam 0x00000001 , 0x00000d3c + 00019102 0x00003c71 branch 0x00004988 + 00019103 0x00003c73 jam 0x00000001 , 0x00000d3d + 00019104 0x00003c74 branch 0x00004988 + 00019105 0x00003c76 jam 0x00000001 , 0x00000d3e + 00019106 0x00003c77 branch 0x00004988 + 00019107 0x00003c7b fetch 0x00000001 , 0x00000c6e + 00019108 0x00003c7c bne 0x00000000 , 0x00004984 + 00019109 0x00003c7d fetch 0x00000001 , 0x00000c72 + 00019110 0x00003c7e bne 0x00000000 , 0x00004984 + 00019111 0x00003c7f fetch 0x00000001 , 0x00000c73 + 00019112 0x00003c80 bne 0x00000000 , 0x00004984 + 00019113 0x00003c81 fetch 0x00000001 , 0x00000c74 + 00019114 0x00003c82 bne 0x00000000 , 0x00004984 + 00019115 0x00003c83 fetch 0x00000001 , 0x00000c75 + 00019116 0x00003c84 bne 0x00000000 , 0x00004984 + 00019117 0x00003c85 fetch 0x00000001 , 0x00000c71 + 00019118 0x00003c86 bne 0x00000000 , 0x00004984 + 00019119 0x00003c87 fetch 0x00000001 , 0x00000c70 + 00019120 0x00003c88 and_into 0x00000080 , 0x0000003f + 00019121 0x00003c89 bne 0x00000000 , 0x00004984 + 00019122 0x00003c8a fetch 0x00000001 , 0x00000c70 + 00019123 0x00003c8b bne 0x00000000 , 0x00004aba + 00019124 0x00003c8d jam 0x00000002 , 0x00000c6b + 00019125 0x00003c8f fetch 0x00000001 , 0x00000c70 + 00019126 0x00003c90 hstore 0x00000001 , 0x00008a04 + 00019127 0x00003c91 call 0x00004988 + 00019128 0x00003c92 jam 0x00000001 , 0x00000d48 + 00019129 0x00003c93 rtn + 00019130 0x00003c95 jam 0x00000003 , 0x00000c6b + 00019131 0x00003c96 branch 0x00004ab5 + 00019132 0x00003c9a fetch 0x00000001 , 0x00000c6b + 00019133 0x00003c9b beq 0x00000002 , 0x00004984 + 00019134 0x00003c9c fetch 0x00000001 , 0x00000c6e + 00019135 0x00003c9d bne 0x00000000 , 0x00004984 + 00019136 0x00003c9e fetch 0x00000001 , 0x00000c72 + 00019137 0x00003c9f bne 0x00000000 , 0x00004984 + 00019138 0x00003ca0 fetch 0x00000001 , 0x00000c73 + 00019139 0x00003ca1 bne 0x00000000 , 0x00004984 + 00019140 0x00003ca2 fetch 0x00000001 , 0x00000c74 + 00019141 0x00003ca3 bne 0x00000000 , 0x00004984 + 00019142 0x00003ca4 fetch 0x00000001 , 0x00000c75 + 00019143 0x00003ca5 bne 0x00000000 , 0x00004984 + 00019144 0x00003ca6 fetch 0x00000001 , 0x00000c71 + 00019145 0x00003ca7 bne 0x00000000 , 0x00004984 + 00019146 0x00003ca8 fetch 0x00000001 , 0x00000c70 + 00019147 0x00003ca9 sub 0x0000003f , 0x00000001 , 0x0000003e + 00019148 0x00003caa nbranch 0x00004984 , 0x00000002 + 00019149 0x00003cab fetch 0x00000001 , 0x00000c6b + 00019150 0x00003cac beq 0x00000003 , 0x00004ad1 + 00019151 0x00003cad beq 0x00000004 , 0x00004ad1 + 00019152 0x00003cae branch 0x00004984 + 00019153 0x00003cb2 fetch 0x00000001 , 0x00000c70 + 00019154 0x00003cb3 beq 0x00000000 , 0x00004ad5 + 00019155 0x00003cb4 jam 0x00000004 , 0x00000c6b + 00019156 0x00003cb5 branch 0x00004988 + 00019157 0x00003cb7 jam 0x00000003 , 0x00000c6b + 00019158 0x00003cb8 branch 0x00004988 + 00019159 0x00003cbc fetch 0x00000001 , 0x00000c6b + 00019160 0x00003cbd bne 0x00000004 , 0x00004984 + 00019161 0x00003cbe fetch 0x00000001 , 0x00000c6e + 00019162 0x00003cbf bne 0x00000001 , 0x00004984 + 00019163 0x00003cc0 fetch 0x00000001 , 0x00000c70 + 00019164 0x00003cc1 bne 0x00000000 , 0x00004984 + 00019165 0x00003cc2 fetch 0x00000001 , 0x00000c71 + 00019166 0x00003cc3 bne 0x00000000 , 0x00004984 + 00019167 0x00003cc4 fetch 0x00000001 , 0x00000c74 + 00019168 0x00003cc5 bne 0x00000000 , 0x00004984 + 00019169 0x00003cc6 fetch 0x00000001 , 0x00000c75 + 00019170 0x00003cc7 bne 0x00000000 , 0x00004984 + 00019171 0x00003cc8 fetch 0x00000001 , 0x00000c72 + 00019172 0x00003cc9 bne 0x00000000 , 0x00004984 + 00019173 0x00003cca fetch 0x00000001 , 0x00000c73 + 00019174 0x00003ccb bne 0x00000000 , 0x00004984 + 00019175 0x00003ccc branch 0x00004988 + 00019176 0x00003cd0 jam 0x00000001 , 0x00000d4c + 00019177 0x00003cd1 fetch 0x00000001 , 0x00000c71 + 00019178 0x00003cd2 store 0x00000001 , 0x00000d4d + 00019179 0x00003cd3 fetch 0x00000001 , 0x00000c72 + 00019180 0x00003cd4 sub 0x0000003f , 0x00000001 , 0x0000003e + 00019181 0x00003cd5 call 0x00004af5 , 0x00000005 + 00019182 0x00003cd6 fetch 0x00000001 , 0x00000d36 + 00019183 0x00003cd7 bne 0x00000004 , 0x00004988 + 00019184 0x00003cd8 jam 0x00000002 , 0x00000d36 + 00019185 0x00003cd9 call 0x00004988 + 00019186 0x00003cda nop 0x00007530 + 00019187 0x00003cdb nop 0x00007530 + 00019188 0x00003cdc rtn + 00019189 0x00003cde jam 0x00000001 , 0x00000d45 + 00019190 0x00003cdf jam 0x00000000 , 0x00000d3a + 00019191 0x00003ce0 jam 0x00000004 , 0x00000d36 + 00019192 0x00003ce1 rtn + 00019193 0x00003ce5 jam 0x00000001 , 0x00000d50 + 00019194 0x00003ce6 call 0x00004b03 + 00019195 0x00003ce7 fetch 0x00000002 , 0x00000c70 + 00019196 0x00003ce8 store 0x00000002 , 0x00000d4e + 00019197 0x00003ce9 fetch 0x00000001 , 0x00000c74 + 00019198 0x00003cea iforce 0x00000039 + 00019199 0x00003ceb arg 0x00000c76 , 0x00000006 + 00019200 0x00003cec arg 0x00000cb6 , 0x00000005 + 00019201 0x00003ced call 0x00007f01 + 00019202 0x00003cee branch 0x00004988 + 00019203 0x00003cf1 fetch 0x00000002 , 0x00000c70 + 00019204 0x00003cf2 arg 0x00000200 , 0x00000002 + 00019205 0x00003cf3 isub 0x00000002 , 0x0000003e + 00019206 0x00003cf4 nrtn 0x00000005 + 00019207 0x00003cf5 fetch 0x00000002 , 0x00000c72 + 00019208 0x00003cf6 arg 0x00000000 , 0x00000002 + 00019209 0x00003cf7 isub 0x00000002 , 0x0000003e + 00019210 0x00003cf8 nrtn 0x00000005 + 00019211 0x00003cf9 fetch 0x00000002 , 0x00000c74 + 00019212 0x00003cfa arg 0x00000001 , 0x00000002 + 00019213 0x00003cfb isub 0x00000002 , 0x0000003e + 00019214 0x00003cfc nrtn 0x00000005 + 00019215 0x00003cfd jam 0x00000001 , 0x00000d43 + 00019216 0x00003cfe rtn + 00019217 0x00003d02 fetch 0x00000001 , 0x00000c74 + 00019218 0x00003d03 bne 0x00000000 , 0x00004984 + 00019219 0x00003d04 fetch 0x00000001 , 0x00000c70 + 00019220 0x00003d05 beq 0x00000000 , 0x00004b17 + 00019221 0x00003d06 beq 0x00000001 , 0x00004b1a + 00019222 0x00003d07 branch 0x00004984 + 00019223 0x00003d09 jam 0x00000000 , 0x00000d4a + 00019224 0x00003d0a jam 0x00000001 , 0x00000d49 + 00019225 0x00003d0b branch 0x00004988 + 00019226 0x00003d0d jam 0x00000001 , 0x00000d44 + 00019227 0x00003d0e jam 0x00000001 , 0x00000d4a + 00019228 0x00003d0f jam 0x00000000 , 0x00000d49 + 00019229 0x00003d10 branch 0x00004988 + 00019230 0x00003d14 ifetch 0x00000001 , 0x00000011 + 00019231 0x00003d15 iforce 0x00000012 + 00019232 0x00003d16 increase 0x00000001 , 0x00000011 + 00019233 0x00003d19 bpatch 0x000000fa , 0x0000401f + 00019234 0x00003d1a bmark0 0x00000023 , 0x00004b2c + 00019235 0x00003d1b add 0x00000012 , 0x00000001 , 0x0000003f + 00019236 0x00003d1c lshift 0x0000003f , 0x0000003f + 00019237 0x00003d1d hstore 0x00000001 , 0x00008a18 + 00019238 0x00003d1e hjam 0x00000003 , 0x00008a18 + 00019239 0x00003d1f fetch 0x00000001 , 0x00000c74 + 00019240 0x00003d20 increase 0xfffffffe , 0x0000003f + 00019241 0x00003d21 rshift 0x0000003f , 0x0000003f + 00019242 0x00003d22 store 0x00000001 , 0x00000c74 + 00019243 0x00003d23 beq 0x00000000 , 0x00004b35 + 00019244 0x00003d25 fetch 0x00000002 , 0x00000c74 + 00019245 0x00003d26 isub 0x00000012 , 0x0000003e + 00019246 0x00003d27 branch 0x00004b30 , 0x00000002 + 00019247 0x00003d28 copy 0x0000003f , 0x00000012 + 00019248 0x00003d2a deposit 0x00000011 + 00019249 0x00003d2b store 0x00000002 , 0x00000b65 + 00019250 0x00003d2c deposit 0x00000012 + 00019251 0x00003d2d store 0x00000001 , 0x00000b67 + 00019252 0x00003d2e branch 0x00004b37 + 00019253 0x00003d31 arg 0x00000000 , 0x00000007 + 00019254 0x00003d32 branch 0x00004b57 + 00019255 0x00003d36 bpatch 0x000000fb , 0x0000401f + 00019256 0x00003d37 fetch 0x00000001 , 0x00000b67 + 00019257 0x00003d38 rtn 0x00000034 + 00019258 0x00003d39 copy 0x0000003f , 0x00000039 + 00019259 0x00003d3a sub 0x0000003f , 0x00000040 , 0x0000003e + 00019260 0x00003d3b branch 0x00004b3e , 0x00000002 + 00019261 0x00003d3c arg 0x00000040 , 0x00000039 + 00019262 0x00003d3e fetch 0x00000001 , 0x00000b67 + 00019263 0x00003d3f isub 0x00000039 , 0x0000003f + 00019264 0x00003d40 store 0x00000001 , 0x00000b67 + 00019265 0x00003d41 fetch 0x00000002 , 0x00000b65 + 00019266 0x00003d42 copy 0x0000003f , 0x00000006 + 00019267 0x00003d44 ifetch 0x00000001 , 0x00000006 + 00019268 0x00003d45 hstore 0x00000001 , 0x00008a18 + 00019269 0x00003d46 bmark0 0x00000023 , 0x00004b47 + 00019270 0x00003d47 hjam 0x00000000 , 0x00008a18 + 00019271 0x00003d49 loop 0x00004b43 + 00019272 0x00003d4a copy 0x00000006 , 0x0000003f + 00019273 0x00003d4b store 0x00000002 , 0x00000b65 + 00019274 0x00003d4c arg 0x00000000 , 0x00000007 + 00019275 0x00003d4d call 0x00004b57 + 00019276 0x00003d4e fetch 0x00000001 , 0x00000b67 + 00019277 0x00003d4f nrtn 0x00000034 + 00019278 0x00003d50 fetch 0x00000001 , 0x00000d36 + 00019279 0x00003d51 rtnne 0x00000001 + 00019280 0x00003d52 jam 0x00000002 , 0x00000d36 + 00019281 0x00003d53 rtn + 00019282 0x00003d57 arg 0x00008a19 , 0x00000011 + 00019283 0x00003d58 arg 0x00000001 , 0x00000007 + 00019284 0x00003d5a ifetch 0x00000001 , 0x00000006 + 00019285 0x00003d5b istore 0x00000001 , 0x00000011 + 00019286 0x00003d5c loop 0x00004b54 + 00019287 0x00003d5e setarg 0x00000000 + 00019288 0x00003d5f qset1 0x0000003f + 00019289 0x00003d60 hstore 0x00000001 , 0x00008a10 + 00019290 0x00003d61 fetcht 0x00000001 , 0x00000d37 + 00019291 0x00003d62 ior 0x00000002 , 0x0000003f + 00019292 0x00003d63 store 0x00000001 , 0x00000d37 + 00019293 0x00003d64 rtn + 00019294 0x00003d67 arg 0x00000002 , 0x00000007 + 00019295 0x00003d68 arg 0x00008a1a , 0x00000011 + 00019296 0x00003d69 branch 0x00004b54 + 00019297 0x00003d6c bpatch 0x000000fc , 0x0000401f + 00019298 0x00003d6d fetch 0x00000001 , 0x00000d38 + 00019299 0x00003d6e rtn 0x00000034 + 00019300 0x00003d6f fetch 0x00000001 , 0x00000d37 + 00019301 0x00003d70 nbranch 0x00004bac , 0x00000034 + 00019302 0x00003d71 fetch 0x00000001 , 0x00000d45 + 00019303 0x00003d72 branch 0x00004b86 , 0x00000034 + 00019304 0x00003d73 fetch 0x00000001 , 0x00000d36 + 00019305 0x00003d74 beq 0x00000003 , 0x00004bbf + 00019306 0x00003d75 bne 0x00000002 , 0x00004b86 + 00019307 0x00003d76 fetch 0x00000001 , 0x00000d3a + 00019308 0x00003d77 nbranch 0x00004b86 , 0x00000034 + 00019309 0x00003d78 call 0x00004b6f + 00019310 0x00003d79 branch 0x00004b7a + 00019311 0x00003d7c fetch 0x00000001 , 0x00000d38 + 00019312 0x00003d7d rtnbit0 0x00000001 + 00019313 0x00003d7e fetch 0x00000001 , 0x00000d37 + 00019314 0x00003d7f rtnbit1 0x00000001 + 00019315 0x00003d80 fetch 0x00000001 , 0x00000d38 + 00019316 0x00003d81 set0 0x00000001 , 0x0000003f + 00019317 0x00003d82 store 0x00000001 , 0x00000d38 + 00019318 0x00003d83 fetch 0x00000001 , 0x00000d51 + 00019319 0x00003d84 rtn 0x00000034 + 00019320 0x00003d85 beq 0x00000010 , 0x00004ba8 + 00019321 0x00003d86 branch 0x00002a8c + 00019322 0x00003d89 fetch 0x00000001 , 0x00000d38 + 00019323 0x00003d8a rtnbit0 0x00000002 + 00019324 0x00003d8b fetch 0x00000001 , 0x00000d37 + 00019325 0x00003d8c rtnbit1 0x00000002 + 00019326 0x00003d8d fetch 0x00000001 , 0x00000d38 + 00019327 0x00003d8e set0 0x00000002 , 0x0000003f + 00019328 0x00003d8f store 0x00000001 , 0x00000d38 + 00019329 0x00003d90 fetch 0x00000001 , 0x00000d52 + 00019330 0x00003d91 rtn 0x00000034 + 00019331 0x00003d92 beq 0x00000020 , 0x00004b89 + 00019332 0x00003d93 beq 0x00000021 , 0x00004ba4 + 00019333 0x00003d94 branch 0x00002a8c + 00019334 0x00003d98 arg 0x00000d54 , 0x00000005 + 00019335 0x00003d99 arg 0x00000006 , 0x00000039 + 00019336 0x00003d9a branch 0x00007ec6 + 00019337 0x00003d9d fetch 0x00000001 , 0x00000d4c + 00019338 0x00003d9e fetcht 0x00000001 , 0x00000d4b + 00019339 0x00003d9f iand 0x00000002 , 0x0000003f + 00019340 0x00003da0 branch 0x00004ba0 , 0x00000034 + 00019341 0x00003da1 fetcht 0x00000001 , 0x00000d4a + 00019342 0x00003da2 iadd 0x00000002 , 0x0000003f + 00019343 0x00003da3 beq 0x00000001 , 0x00004b91 + 00019344 0x00003da4 branch 0x00004ba0 + 00019345 0x00003da7 jam 0x00000000 , 0x00000d52 + 00019346 0x00003da9 fetch 0x00000001 , 0x00000d55 + 00019347 0x00003daa beq 0x00000002 , 0x00004ba1 + 00019348 0x00003dab beq 0x00000003 , 0x00004ba1 + 00019349 0x00003dac fetch 0x00000001 , 0x00000d55 + 00019350 0x00003dad store 0x00000001 , 0x00000d54 + 00019351 0x00003dae fetch 0x00000001 , 0x00000d56 + 00019352 0x00003daf istore 0x00000001 , 0x00000005 + 00019353 0x00003db0 fetch 0x00000001 , 0x00000d58 + 00019354 0x00003db1 istore 0x00000001 , 0x00000005 + 00019355 0x00003db2 fetch 0x00000001 , 0x00000d5a + 00019356 0x00003db3 istore 0x00000001 , 0x00000005 + 00019357 0x00003db4 arg 0x00000004 , 0x00000039 + 00019358 0x00003db5 arg 0x00000d54 , 0x00000006 + 00019359 0x00003db6 branch 0x00004b5e + 00019360 0x00003db9 jam 0x00000000 , 0x00000d52 + 00019361 0x00003dbb arg 0x00000008 , 0x00000039 + 00019362 0x00003dbc arg 0x00000d54 , 0x00000006 + 00019363 0x00003dbd branch 0x00004b5e + 00019364 0x00003dc0 jam 0x00000000 , 0x00000d52 + 00019365 0x00003dc1 arg 0x00000003 , 0x00000039 + 00019366 0x00003dc2 arg 0x00000d74 , 0x00000006 + 00019367 0x00003dc3 branch 0x00004b5e + 00019368 0x00003dc6 jam 0x00000000 , 0x00000d51 + 00019369 0x00003dc7 arg 0x00000008 , 0x00000039 + 00019370 0x00003dc8 arg 0x00000d64 , 0x00000006 + 00019371 0x00003dc9 branch 0x00004b52 + 00019372 0x00003dcc fetch 0x00000001 , 0x00000d36 + 00019373 0x00003dcd beq 0x00000003 , 0x00004bb0 + 00019374 0x00003dce beq 0x00000002 , 0x00004bb2 + 00019375 0x00003dcf rtn + 00019376 0x00003dd1 jam 0x00000000 , 0x00000d37 + 00019377 0x00003dd2 rtn + 00019378 0x00003dd4 hfetch 0x00000001 , 0x00008a00 + 00019379 0x00003dd5 set1 0x00000007 , 0x0000003f + 00019380 0x00003dd6 hstore 0x00000001 , 0x00008a00 + 00019381 0x00003dd7 jam 0x00000001 , 0x00000d47 + 00019382 0x00003dd8 rtn + 00019383 0x00003ddb fetch 0x00000001 , 0x00000d36 + 00019384 0x00003ddc rtneq 0x00000003 + 00019385 0x00003ddd beq 0x00000002 , 0x00004bbb + 00019386 0x00003dde rtn + 00019387 0x00003de0 fetch 0x00000001 , 0x00000d47 + 00019388 0x00003de1 rtn 0x00000034 + 00019389 0x00003de2 jam 0x00000001 , 0x00000d46 + 00019390 0x00003de3 branch 0x00004bc2 + 00019391 0x00003de6 arg 0x0000000f , 0x00000007 + 00019392 0x00003de7 call 0x00007f16 + 00019393 0x00003de8 nrtn 0x00000034 + 00019394 0x00003dea hfetch 0x00000001 , 0x00008a00 + 00019395 0x00003deb rtnbit0 0x00000007 + 00019396 0x00003dec hjam 0x000000fc , 0x00008a00 + 00019397 0x00003ded nop 0x00007530 + 00019398 0x00003dee hjam 0x0000003c , 0x00008a00 + 00019399 0x00003def rtn + 00019400 0x00003df7 bpatch 0x000000fd , 0x0000401f + 00019401 0x00003df8 fetch 0x00000001 , 0x000041ce + 00019402 0x00003df9 nrtn 0x00000034 + 00019403 0x00003dfb call 0x00004bce + 00019404 0x00003dfc ncall 0x00004be6 , 0x00000028 + 00019405 0x00003dfd rtn + 00019406 0x00003e00 bpatch 0x000000fe , 0x0000401f + 00019407 0x00003e01 copy 0x00000003 , 0x00000011 + 00019408 0x00003e02 arg 0x00000004 , 0x00000002 + 00019409 0x00003e03 ifetch 0x00000001 , 0x00000003 + 00019410 0x00003e04 beq 0x00000001 , 0x00004bd8 + 00019411 0x00003e05 increase 0x00000001 , 0x00000002 + 00019412 0x00003e06 beq 0x00000002 , 0x00004bd8 + 00019413 0x00003e07 copy 0x00000003 , 0x0000003f + 00019414 0x00003e08 hstore 0x00000002 , 0x00008058 + 00019415 0x00003e09 rtn + 00019416 0x00003e0b hfetch 0x00000002 , 0x00008112 + 00019417 0x00003e0c isub 0x00000002 , 0x0000003e + 00019418 0x00003e0d nbranch 0x00004bd8 , 0x00000002 + 00019419 0x00003e0f disable 0x00000028 + 00019420 0x00003e10 copy 0x00000011 , 0x00000003 + 00019421 0x00003e11 call 0x00004bee + 00019422 0x00003e12 iadd 0x00000002 , 0x00000002 + 00019423 0x00003e14 hfetch 0x00000002 , 0x00008112 + 00019424 0x00003e15 isub 0x00000002 , 0x0000003e + 00019425 0x00003e16 nbranch 0x00004bdf , 0x00000002 + 00019426 0x00003e17 copy 0x00000011 , 0x00000003 + 00019427 0x00003e18 ifetch 0x00000001 , 0x00000003 + 00019428 0x00003e19 beq 0x00000001 , 0x00004c3f + 00019429 0x00003e1a branch 0x00002a8c + 00019430 0x00003e1d bpatch 0x000000ff , 0x0000401f + 00019431 0x00003e1e hfetch 0x00000002 , 0x00008058 + 00019432 0x00003e1f iforce 0x00000003 + 00019433 0x00003e20 call 0x00004bee + 00019434 0x00003e21 iadd 0x00000003 , 0x00000003 + 00019435 0x00003e22 deposit 0x00000003 + 00019436 0x00003e23 hstore 0x00000002 , 0x00008058 + 00019437 0x00003e24 rtn + 00019438 0x00003e2a ifetch 0x00000001 , 0x00000003 + 00019439 0x00003e2b increase 0x00000002 , 0x00000003 + 00019440 0x00003e2c beq 0x00000002 , 0x00004bf3 + 00019441 0x00003e2d ifetch 0x00000001 , 0x00000003 + 00019442 0x00003e2e rtn + 00019443 0x00003e30 ifetch 0x00000002 , 0x00000003 + 00019444 0x00003e31 rtn + 00019445 0x00003e34 hfetch 0x00000002 , 0x0000805e + 00019446 0x00003e35 increase 0xfffffffb , 0x0000000a + 00019447 0x00003e36 iadd 0x0000000a , 0x0000000a + 00019448 0x00003e37 rtn + 00019449 0x00003e3a arg 0x00000004 , 0x00000002 + 00019450 0x00003e3b branch 0x00004bfc + 00019451 0x00003e3d arg 0x00000002 , 0x00000002 + 00019452 0x00003e3f bpatchx 0x00000000 , 0x00004020 + 00019453 0x00003e40 increase 0x00000001 , 0x00000039 + 00019454 0x00003e41 hfetch 0x00000002 , 0x0000805e + 00019455 0x00003e42 copy 0x0000003f , 0x0000000a + 00019456 0x00003e43 copy 0x00000039 , 0x0000003f + 00019457 0x00003e44 istoret 0x00000001 , 0x0000000a + 00019458 0x00003e45 increase 0xffffffff , 0x0000003f + 00019459 0x00003e46 iadd 0x0000000a , 0x0000000a + 00019460 0x00003e47 copy 0x0000000a , 0x0000003f + 00019461 0x00003e48 store 0x00000002 , 0x00000258 + 00019462 0x00003e49 copy 0x00000002 , 0x0000003f + 00019463 0x00003e4a rtneq 0x00000002 + 00019464 0x00003e4b fetch 0x00000002 , 0x00000258 + 00019465 0x00003e4c hstore 0x00000002 , 0x0000805e + 00019466 0x00003e4d branch 0x00004c0b + 00019467 0x00003e51 setarg 0x00000000 + 00019468 0x00003e52 store 0x00000002 , 0x00000258 + 00019469 0x00003e53 rtn + 00019470 0x00003e5b rtn 0x0000002b + 00019471 0x00003e5c setarg 0x00004d28 + 00019472 0x00003e5d store 0x00000002 , 0x000041f3 + 00019473 0x00003e5f setarg 0x000001a0 + 00019474 0x00003e60 store 0x00000002 , 0x00004243 + 00019475 0x00003e62 setarg 0x00001800 + 00019476 0x00003e63 hstore 0x00000002 , 0x00008054 + 00019477 0x00003e64 setarg 0x00001bff + 00019478 0x00003e65 hstore 0x00000002 , 0x00008056 + 00019479 0x00003e66 setarg 0x00001c00 + 00019480 0x00003e67 hstore 0x00000002 , 0x0000805a + 00019481 0x00003e68 call 0x00004c28 + 00019482 0x00003e6a hjam 0x00000000 , 0x00008062 + 00019483 0x00003e6b setarg 0x00001c00 + 00019484 0x00003e6c hstore 0x00000002 , 0x0000805e + 00019485 0x00003e6d hstore 0x00000002 , 0x00008060 + 00019486 0x00003e6e setarg 0x00001800 + 00019487 0x00003e6f hstore 0x00000002 , 0x00008058 + 00019488 0x00003e70 store 0x00000002 , 0x00000244 + 00019489 0x00003e72 hfetch 0x00000002 , 0x00008050 + 00019490 0x00003e73 set0 0x0000000f , 0x0000003f + 00019491 0x00003e74 hstore 0x00000002 , 0x00008050 + 00019492 0x00003e75 call 0x000066ce + 00019493 0x00003e76 hjam 0x00000001 , 0x00008043 + 00019494 0x00003e77 hjam 0x00000081 , 0x00008062 + 00019495 0x00003e78 rtn + 00019496 0x00003e7b setarg 0x00001fff + 00019497 0x00003e7c hstore 0x00000002 , 0x0000805c + 00019498 0x00003e7d hfetch 0x00000001 , 0x00008081 + 00019499 0x00003e7e or_into 0x00000007 , 0x0000003f + 00019500 0x00003e7f hstore 0x00000001 , 0x00008081 + 00019501 0x00003e80 rtn + 00019502 0x00003e84 bpatchx 0x00000001 , 0x00004020 + 00019503 0x00003e85 hfetch 0x00000001 , 0x0000810c + 00019504 0x00003e86 iforce 0x00000012 + 00019505 0x00003e87 bbit0 0x00000003 , 0x00004c37 + 00019506 0x00003e88 hfetch 0x00000002 , 0x00008112 + 00019507 0x00003e89 iforce 0x00000013 + 00019508 0x00003e8a arg 0x0000044f , 0x00000002 + 00019509 0x00003e8b isub 0x00000002 , 0x0000003e + 00019510 0x00003e8c nrtn 0x00000005 + 00019511 0x00003e8e hfetch 0x00000002 , 0x00008058 + 00019512 0x00003e8f iforce 0x00000003 + 00019513 0x00003e90 branch 0x00004bc8 + 00019514 0x00003e93 hfetcht 0x00000001 , 0x0000810c + 00019515 0x00003e94 isolate1 0x00000006 , 0x00000002 + 00019516 0x00003e95 branch 0x00004c3a , 0x00000001 + 00019517 0x00003e96 hstore 0x00000001 , 0x00008015 + 00019518 0x00003e97 rtn + 00019519 0x00003e9a bpatchx 0x00000002 , 0x00004020 + 00019520 0x00003e9b fetch 0x00000001 , 0x000041ce + 00019521 0x00003e9c branch 0x00004c44 , 0x00000034 + 00019522 0x00003e9d enable 0x00000028 + 00019523 0x00003e9e rtn + 00019524 0x00003ea0 ifetch 0x00000002 , 0x00000003 + 00019525 0x00003ea1 iforce 0x00000030 + 00019526 0x00003ea2 iforce 0x00000007 + 00019527 0x00003ea3 ifetch 0x00000001 , 0x00000003 + 00019528 0x00003ea4 iforce 0x00000002 + 00019529 0x00003ea5 rshift2 0x00000030 , 0x0000003f + 00019530 0x00003ea6 rshift8 0x0000003f , 0x0000003f + 00019531 0x00003ea7 beq 0x0000003f , 0x00004c4d + 00019532 0x00003ea8 rtn + 00019533 0x00003eac bpatchx 0x00000003 , 0x00004020 + 00019534 0x00003ead deposit 0x00000007 + 00019535 0x00003eae beq 0x00000000 , 0x00004cdc + 00019536 0x00003eaf beq 0x00000001 , 0x00004c66 + 00019537 0x00003eb0 beq 0x00000002 , 0x00004c6b + 00019538 0x00003eb1 beq 0x00000003 , 0x00004c7a + 00019539 0x00003eb2 beq 0x00000004 , 0x00004cb3 + 00019540 0x00003eb3 beq 0x00000005 , 0x00004cdc + 00019541 0x00003eb4 beq 0x00000006 , 0x00004cc6 + 00019542 0x00003eb5 beq 0x00000007 , 0x00004c5c + 00019543 0x00003eb7 beq 0x00000010 , 0x00004cc9 + 00019544 0x00003eb8 beq 0x00000011 , 0x00004cd1 + 00019545 0x00003eb9 beq 0x00000012 , 0x00004ca5 + 00019546 0x00003eba beq 0x00000013 , 0x00004c85 + 00019547 0x00003ebb branch 0x00004cdc + 00019548 0x00003ebe call 0x00004cdc + 00019549 0x00003ebf call 0x00007f9e + 00019550 0x00003ec0 call 0x0000688c + 00019551 0x00003ec2 call 0x000033d2 + 00019552 0x00003ec3 call 0x000033d9 + 00019553 0x00003ec4 branch 0x0000688f + 00019554 0x00003ec7 jam 0x00000000 , 0x00004245 + 00019555 0x00003ec8 call 0x000033d0 + 00019556 0x00003ec9 call 0x00004c13 + 00019557 0x00003eca branch 0x000033db + 00019558 0x00003ecd call 0x00004cf2 + 00019559 0x00003ece hfetch 0x00000002 , 0x00008000 + 00019560 0x00003ecf istore 0x00000002 , 0x0000000a + 00019561 0x00003ed0 force 0x00000006 , 0x00000039 + 00019562 0x00003ed1 branch 0x00004cdd + 00019563 0x00003ed4 ifetch 0x00000002 , 0x00000003 + 00019564 0x00003ed5 store 0x00000002 , 0x00004243 + 00019565 0x00003ed6 hstore 0x00000002 , 0x00008052 + 00019566 0x00003ed7 rtn + 00019567 0x00003edc ifetch 0x00000001 , 0x00000003 + 00019568 0x00003edd copy 0x0000003f , 0x00000002 + 00019569 0x00003ede hstore 0x00000001 , 0x00008024 + 00019570 0x00003edf ifetch 0x00000001 , 0x00000003 + 00019571 0x00003ee0 iadd 0x00000002 , 0x00000002 + 00019572 0x00003ee1 set1 0x00000007 , 0x0000003f + 00019573 0x00003ee2 hstore 0x00000001 , 0x00008023 + 00019574 0x00003ee3 ifetch 0x00000001 , 0x00000003 + 00019575 0x00003ee4 iadd 0x00000002 , 0x00000002 + 00019576 0x00003ee5 copy 0x0000003f , 0x00000039 + 00019577 0x00003ee6 rtn + 00019578 0x00003ee9 bmark1 0x0000002b , 0x00004cc4 + 00019579 0x00003eea call 0x00004c6f + 00019580 0x00003eec ifetch 0x00000001 , 0x00000003 + 00019581 0x00003eed hstore 0x00000001 , 0x00008025 + 00019582 0x00003eee iadd 0x00000002 , 0x00000002 + 00019583 0x00003eef loop 0x00004c7c + 00019584 0x00003ef1 and 0x00000002 , 0x000000ff , 0x00000002 + 00019585 0x00003ef2 ifetch 0x00000001 , 0x00000003 + 00019586 0x00003ef3 isub 0x00000002 , 0x0000003e + 00019587 0x00003ef4 nbranch 0x00004cc4 , 0x00000005 + 00019588 0x00003ef5 branch 0x00004cdc + 00019589 0x00003ef9 bmark0 0x0000002b , 0x00004cc4 + 00019590 0x00003efa call 0x00004c6f + 00019591 0x00003efb store 0x00000008 , 0x00000a9a + 00019592 0x00003efd call 0x00007422 + 00019593 0x00003efe arg 0x00000010 , 0x00000039 + 00019594 0x00003eff arg 0x00000ac2 , 0x00000005 + 00019595 0x00003f00 call 0x00004ca0 + 00019596 0x00003f01 storet 0x00000008 , 0x00000aa2 + 00019597 0x00003f02 arg 0x00000ad2 , 0x00000005 + 00019598 0x00003f03 call 0x00007497 + 00019599 0x00003f04 arg 0x00000ad2 , 0x00000011 + 00019600 0x00003f05 arg 0x00000ac2 , 0x00000012 + 00019601 0x00003f06 arg 0x00000ae2 , 0x00000005 + 00019602 0x00003f07 call 0x00007352 + 00019603 0x00003f08 arg 0x00000010 , 0x00000039 + 00019604 0x00003f09 arg 0x00000ae2 , 0x00000006 + 00019605 0x00003f0a call 0x00004c9c + 00019606 0x00003f0b fetcht 0x00000008 , 0x00000aa2 + 00019607 0x00003f0c fetch 0x00000008 , 0x00000a9a + 00019608 0x00003f0d increase 0xfffffff0 , 0x0000003f + 00019609 0x00003f0e store 0x00000008 , 0x00000a9a + 00019610 0x00003f0f nbranch 0x00004c88 , 0x00000034 + 00019611 0x00003f10 branch 0x00004c80 + 00019612 0x00003f13 ifetch 0x00000001 , 0x00000006 + 00019613 0x00003f14 hstore 0x00000001 , 0x00008025 + 00019614 0x00003f15 loop 0x00004c9c + 00019615 0x00003f16 rtn + 00019616 0x00003f19 ifetch 0x00000001 , 0x00000003 + 00019617 0x00003f1a istore 0x00000001 , 0x00000005 + 00019618 0x00003f1b iadd 0x00000002 , 0x00000002 + 00019619 0x00003f1c loop 0x00004ca0 + 00019620 0x00003f1d rtn + 00019621 0x00003f20 bmark0 0x0000002b , 0x00004cc4 + 00019622 0x00003f21 arg 0x00000000 , 0x00000002 + 00019623 0x00003f22 arg 0x00000010 , 0x00000039 + 00019624 0x00003f23 arg 0x00000ac2 , 0x00000005 + 00019625 0x00003f24 call 0x00004ca0 + 00019626 0x00003f25 hfetch 0x00000001 , 0x00008085 + 00019627 0x00003f26 and_into 0x000000fd , 0x0000003f + 00019628 0x00003f27 hstore 0x00000001 , 0x00008085 + 00019629 0x00003f28 arg 0x00000ac2 , 0x00000006 + 00019630 0x00003f29 arg 0x00000010 , 0x00000039 + 00019631 0x00003f2a call 0x00007478 + 00019632 0x00003f2b call 0x00007428 + 00019633 0x00003f2c call 0x00007491 + 00019634 0x00003f2d branch 0x00004c80 + 00019635 0x00003f31 arg 0x00000020 , 0x00000039 + 00019636 0x00003f32 arg 0x00004000 , 0x00000005 + 00019637 0x00003f33 arg 0x00000000 , 0x00000002 + 00019638 0x00003f35 ifetch 0x00000001 , 0x00000003 + 00019639 0x00003f36 istore 0x00000001 , 0x00000005 + 00019640 0x00003f37 iadd 0x00000002 , 0x00000002 + 00019641 0x00003f38 loop 0x00004cb6 + 00019642 0x00003f39 and 0x00000002 , 0x000000ff , 0x00000002 + 00019643 0x00003f3a ifetch 0x00000001 , 0x00000003 + 00019644 0x00003f3b isub 0x00000002 , 0x0000003e + 00019645 0x00003f3c nbranch 0x00004cc4 , 0x00000005 + 00019646 0x00003f3d hjam 0x00000000 , 0x00008023 + 00019647 0x00003f3e call 0x00004cdc + 00019648 0x00003f3f call 0x00004be6 + 00019649 0x00003f40 call 0x000064a3 + 00019650 0x00003f41 call 0x00007f9e + 00019651 0x00003f42 branch 0x00002001 + 00019652 0x00003f45 hjam 0x00000000 , 0x00008023 + 00019653 0x00003f46 branch 0x00002000 + 00019654 0x00003f49 ifetch 0x00000006 , 0x00000003 + 00019655 0x00003f4a store 0x00000006 , 0x000040a0 + 00019656 0x00003f4b branch 0x00004cdc + 00019657 0x00003f4f ifetch 0x00000001 , 0x00000003 + 00019658 0x00003f50 store 0x00000001 , 0x0000025a + 00019659 0x00003f51 copy 0x0000003f , 0x00000039 + 00019660 0x00003f52 ifetch 0x00000002 , 0x00000003 + 00019661 0x00003f53 store 0x00000002 , 0x0000025b + 00019662 0x00003f54 copy 0x0000003f , 0x00000005 + 00019663 0x00003f55 call 0x000066fd + 00019664 0x00003f56 branch 0x00004cdc + 00019665 0x00003f5a ifetch 0x00000001 , 0x00000003 + 00019666 0x00003f5b store 0x00000001 , 0x0000025a + 00019667 0x00003f5c copy 0x0000003f , 0x00000039 + 00019668 0x00003f5d ifetch 0x00000002 , 0x00000003 + 00019669 0x00003f5e store 0x00000002 , 0x0000025b + 00019670 0x00003f5f arg 0x00001000 , 0x00000005 + 00019671 0x00003f60 call 0x000066fd + 00019672 0x00003f61 fetcht 0x00000001 , 0x0000025a + 00019673 0x00003f62 arg 0x00001000 , 0x00000011 + 00019674 0x00003f63 fetch 0x00000002 , 0x0000025b + 00019675 0x00003f64 branch 0x00006608 + 00019676 0x00003f6a force 0x00000004 , 0x00000039 + 00019677 0x00003f6c call 0x00004cf4 + 00019678 0x00003f6d force 0x00000001 , 0x0000003f + 00019679 0x00003f6e istore 0x00000001 , 0x0000000a + 00019680 0x00003f6f deposit 0x00000030 + 00019681 0x00003f70 istore 0x00000003 , 0x0000000a + 00019682 0x00003f71 force 0x0000000e , 0x00000007 + 00019683 0x00003f73 bpatchx 0x00000004 , 0x00004020 + 00019684 0x00003f74 call 0x00004cf6 + 00019685 0x00003f75 deposit 0x00000007 + 00019686 0x00003f76 istore 0x00000001 , 0x0000000a + 00019687 0x00003f77 deposit 0x00000039 + 00019688 0x00003f78 istore 0x00000001 , 0x0000000a + 00019689 0x00003f7a force 0x00000005 , 0x00000007 + 00019690 0x00003f7b increase 0x00000002 , 0x00000039 + 00019691 0x00003f7d branch 0x00004bf9 + 00019692 0x00003f80 force 0x000000ff , 0x00000007 + 00019693 0x00003f81 call 0x00004cf4 + 00019694 0x00003f82 setarg 0x00000001 + 00019695 0x00003f83 istore 0x00000001 , 0x0000000a + 00019696 0x00003f84 force 0x00000001 , 0x00000039 + 00019697 0x00003f85 branch 0x00004ce3 + 00019698 0x00003f88 force 0x0000000c , 0x0000000a + 00019699 0x00003f89 branch 0x00004cf7 + 00019700 0x00003f8c force 0x00000008 , 0x0000000a + 00019701 0x00003f8d branch 0x00004cf7 + 00019702 0x00003f90 force 0x00000006 , 0x0000000a + 00019703 0x00003f92 branch 0x00004bf5 + 00019704 0x00003f97 pulse 0x0000000f + 00019705 0x00003f98 enable 0x00000009 + 00019706 0x00003f9a ifetch 0x00000001 , 0x0000000a + 00019707 0x00003f9b inject 0x00000000 , 0x00000008 + 00019708 0x00003f9c loop 0x00004cfa + 00019709 0x00003f9d enable 0x00000008 + 00019710 0x00003f9e inject 0x00000000 , 0x00000010 + 00019711 0x00003f9f disable 0x00000008 + 00019712 0x00003fa0 disable 0x00000009 + 00019713 0x00003fa1 disable 0x0000000f + 00019714 0x00003fa2 byteswap 0x0000003f , 0x0000003f + 00019715 0x00003fa3 rtn + 00019716 0x00003fa8 jam 0x00000000 , 0x000041ce + 00019717 0x00003fa9 rtn + 00019718 0x00003fab fetch 0x00000006 , 0x000041d0 + 00019719 0x00003fac fetcht 0x00000006 , 0x00000040 + 00019720 0x00003fad isub 0x00000002 , 0x0000003e + 00019721 0x00003fae rtn + 00019722 0x00003fb4 fetch 0x00000001 , 0x0000004b + 00019723 0x00003fb5 bbit1 0x00000002 , 0x00004d0f + 00019724 0x00003fb6 call 0x000062ef + 00019725 0x00003fb7 jam 0x00000008 , 0x0000007c + 00019726 0x00003fb8 branch 0x00004d04 + 00019727 0x00003fba set0 0x00000002 , 0x0000003f + 00019728 0x00003fbb store 0x00000001 , 0x0000004b + 00019729 0x00003fbc call 0x00006001 + 00019730 0x00003fbd setarg 0x00000000 + 00019731 0x00003fbe setflag 0x00000029 , 0x00000001 , 0x0000003f + 00019732 0x00003fbf store 0x00000001 , 0x0000007f + 00019733 0x00003fc0 branch 0x00004d04 + 00019734 0x00003fc1 rtn + 00019735 0x00003fc3 jam 0x00000017 , 0x0000007c + 00019736 0x00003fc4 arg 0x000004d9 , 0x00000005 + 00019737 0x00003fc5 setarg 0x00000000 + 00019738 0x00003fc6 isolate1 0x0000001b , 0x00000028 + 00019739 0x00003fc7 setflag 0x00000001 , 0x00000001 , 0x0000003f + 00019740 0x00003fc8 istore 0x00000001 , 0x00000005 + 00019741 0x00003fc9 setarg 0x00000000 + 00019742 0x00003fca istore 0x00000002 , 0x00000005 + 00019743 0x00003fcb fetch 0x00000002 , 0x000041e3 + 00019744 0x00003fcc istore 0x00000002 , 0x00000005 + 00019745 0x00003fcd fetch 0x00000001 , 0x000041e5 + 00019746 0x00003fce istore 0x00000002 , 0x00000005 + 00019747 0x00003fcf fetch 0x00000001 , 0x000041e7 + 00019748 0x00003fd0 istore 0x00000002 , 0x00000005 + 00019749 0x00003fd1 branch 0x00004d04 + 00019750 0x00003fd4 jam 0x00000018 , 0x0000007c + 00019751 0x00003fd5 branch 0x00004d04 + 00019752 0x00003fd8 call 0x00006899 + 00019753 0x00003fd9 rtn 0x00000001 + 00019754 0x00003fda arg 0x00000007 , 0x00000002 + 00019755 0x00003fdb call 0x0000681d + 00019756 0x00003fdc nbranch 0x00004d2f , 0x00000001 + 00019757 0x00003fdd jam 0x00000001 , 0x00004245 + 00019758 0x00003fde rtn + 00019759 0x00003fe0 fetch 0x00000001 , 0x00004245 + 00019760 0x00003fe1 rtnne 0x00000001 + 00019761 0x00003fe2 call 0x00004c62 + 00019762 0x00003fe3 branch 0x00004cec + 00019763 0x00003ff2 bpatchx 0x00000005 , 0x00004020 + 00019764 0x00003ff3 fetch 0x00000002 , 0x00000264 + 00019765 0x00003ff4 copy 0x0000003f , 0x00000006 + 00019766 0x00003ff5 ifetch 0x00000001 , 0x00000006 + 00019767 0x00003ff6 and 0x0000003f , 0x0000000f , 0x00000002 + 00019768 0x00003ff7 rshift4 0x0000003f , 0x0000003f + 00019769 0x00003ff8 beq 0x00000009 , 0x00004d53 + 00019770 0x00003ff9 beq 0x00000007 , 0x00004d53 + 00019771 0x00003ffa beq 0x0000000a , 0x00004d5f + 00019772 0x00003ffb beq 0x00000005 , 0x00004d4b + 00019773 0x00003ffc beq 0x00000001 , 0x00004d3f + 00019774 0x00003ffd rtn + 00019775 0x00004000 copy 0x00000002 , 0x0000003f + 00019776 0x00004001 beq 0x00000005 , 0x00004d43 + 00019777 0x00004002 beq 0x00000003 , 0x00004d4a + 00019778 0x00004003 rtn + 00019779 0x00004006 jam 0x00000027 , 0x00000a99 + 00019780 0x00004007 call 0x00007d86 + 00019781 0x00004008 fetch 0x00000001 , 0x00004092 + 00019782 0x00004009 rtnbit0 0x00000006 + 00019783 0x0000400a copy 0x00000002 , 0x0000003f + 00019784 0x0000400b beq 0x00000005 , 0x0000438e + 00019785 0x0000400c rtn + 00019786 0x0000400e rtn + 00019787 0x00004011 call 0x00004d5f + 00019788 0x00004012 arg 0x00000001 , 0x00000011 + 00019789 0x00004013 call 0x00004d63 + 00019790 0x00004014 fetch 0x00000002 , 0x0000424c + 00019791 0x00004015 istore 0x00000002 , 0x00000005 + 00019792 0x00004016 setarg 0x00000000 + 00019793 0x00004017 istore 0x00000001 , 0x00000005 + 00019794 0x00004018 rtn + 00019795 0x0000401b arg 0x00000001 , 0x00000011 + 00019796 0x0000401c call 0x00004d63 + 00019797 0x0000401d fetch 0x00000002 , 0x0000424c + 00019798 0x0000401e istore 0x00000002 , 0x00000005 + 00019799 0x0000401f setarg 0x00000000 + 00019800 0x00004020 istore 0x00000001 , 0x00000005 + 00019801 0x00004021 jam 0x00000001 , 0x00000a8e + 00019802 0x00004022 fetch 0x00000001 , 0x00004252 + 00019803 0x00004023 set1 0x00000006 + 00019804 0x00004024 store 0x00000001 , 0x00004252 + 00019805 0x00004025 jam 0x00000012 , 0x00000a99 + 00019806 0x00004026 branch 0x00007d86 + 00019807 0x00004029 ifetch 0x00000001 , 0x00000006 + 00019808 0x0000402a beq 0x00000001 , 0x00004d62 + 00019809 0x0000402b rtn + 00019810 0x0000402e rtn + 00019811 0x00004032 call 0x00005240 + 00019812 0x00004033 copy 0x00000011 , 0x00000002 + 00019813 0x00004034 storet 0x00000001 , 0x00000a8e + 00019814 0x00004035 copy 0x0000003f , 0x00000005 + 00019815 0x00004036 copy 0x00000011 , 0x0000003f + 00019816 0x00004037 istore 0x00000002 , 0x00000005 + 00019817 0x00004038 rtn + 00019818 0x0000404a branch 0x00004d6f , 0x0000002b + 00019819 0x0000404c setarg 0x00004365 + 00019820 0x0000404d arg 0x00004246 , 0x00000005 + 00019821 0x0000404e isub 0x00000005 , 0x00000039 + 00019822 0x0000404f call 0x00007ed4 + 00019823 0x00004051 bpatchx 0x00000006 , 0x00004020 + 00019824 0x00004052 setarg 0x00000551 + 00019825 0x00004053 arg 0x00000511 , 0x00000005 + 00019826 0x00004054 isub 0x00000005 , 0x00000039 + 00019827 0x00004055 call 0x00007ed4 + 00019828 0x00004056 setarg 0x000002c9 + 00019829 0x00004057 arg 0x0000025d , 0x00000005 + 00019830 0x00004058 isub 0x00000005 , 0x00000039 + 00019831 0x00004059 call 0x00007ed4 + 00019832 0x0000405a branch 0x00005318 + 00019833 0x0000405d bpatchx 0x00000007 , 0x00004020 + 00019834 0x0000405e copy 0x00000006 , 0x00000002 + 00019835 0x00004061 copy 0x00000002 , 0x00000006 + 00019836 0x00004062 ifetch 0x00000002 , 0x00000006 + 00019837 0x00004063 store 0x00000002 , 0x00000266 + 00019838 0x00004064 ifetch 0x00000002 , 0x00000006 + 00019839 0x00004065 store 0x00000002 , 0x00000268 + 00019840 0x00004066 deposit 0x00000006 + 00019841 0x00004067 store 0x00000002 , 0x00000264 + 00019842 0x00004068 fetch 0x00000001 , 0x00004681 + 00019843 0x00004069 beq 0x00000000 , 0x00004d85 + 00019844 0x0000406a branch 0x000050ef + 00019845 0x0000406d fetch 0x00000002 , 0x00000266 + 00019846 0x0000406e branch 0x00004dfc , 0x00000034 + 00019847 0x0000406f bpatchx 0x00000008 , 0x00004021 + 00019848 0x00004070 fetch 0x00000001 , 0x00000268 + 00019849 0x00004071 beq 0x00000001 , 0x00004d9d + 00019850 0x00004073 beq 0x00000050 , 0x00004de0 + 00019851 0x00004074 beq 0x00000051 , 0x00004df5 + 00019852 0x00004075 beq 0x00000052 , 0x00004df3 + 00019853 0x00004076 beq 0x00000053 , 0x00004df3 + 00019854 0x00004077 branch 0x00004dfc + 00019855 0x0000407c bpatchx 0x00000009 , 0x00004021 + 00019856 0x0000407d call 0x0000527e + 00019857 0x0000407e fetch 0x00000001 , 0x00004256 + 00019858 0x0000407f beq 0x00000000 , 0x00004d9b + 00019859 0x00004080 beq 0x00000001 , 0x00004d9b + 00019860 0x00004081 beq 0x00000002 , 0x00004d9b + 00019861 0x00004082 beq 0x00000003 , 0x00004d9b + 00019862 0x00004083 beq 0x00000081 , 0x00004d9b + 00019863 0x00004084 beq 0x000000c0 , 0x00004d9b + 00019864 0x00004085 beq 0x00000080 , 0x00004d9b + 00019865 0x00004086 beq 0x00000040 , 0x00004d9b + 00019866 0x00004087 rtn + 00019867 0x0000408a setarg 0x00000000 + 00019868 0x0000408b rtn + 00019869 0x0000408f call 0x00004d8f + 00019870 0x00004090 nrtn 0x00000034 + 00019871 0x00004092 call 0x000052b8 + 00019872 0x00004093 call 0x00004e01 + 00019873 0x00004094 fetcht 0x00000002 , 0x0000026f + 00019874 0x00004095 branch 0x00004dfb , 0x00000034 + 00019875 0x00004096 call 0x000052c1 + 00019876 0x00004097 fetch 0x00000002 , 0x0000026f + 00019877 0x00004098 istore 0x00000002 , 0x00000005 + 00019878 0x00004099 force 0x00000001 , 0x0000003f + 00019879 0x0000409a istore 0x00000002 , 0x00000005 + 00019880 0x0000409b branch 0x00004dfc + 00019881 0x0000409e fetch 0x00000001 , 0x00004364 + 00019882 0x0000409f rtn 0x00000034 + 00019883 0x000040a0 copy 0x0000003f , 0x00000011 + 00019884 0x000040a1 bpatchx 0x0000000a , 0x00004021 + 00019885 0x000040a2 fetch 0x00000004 , 0x000002d5 + 00019886 0x000040a3 arg 0x00000100 , 0x00000002 + 00019887 0x000040a4 iadd 0x00000002 , 0x00000002 + 00019888 0x000040a5 copy 0x00000022 , 0x0000003f + 00019889 0x000040a6 isub 0x00000002 , 0x0000003e + 00019890 0x000040a7 nrtn 0x00000002 + 00019891 0x000040a8 jam 0x00000000 , 0x00004364 + 00019892 0x000040a9 copy 0x00000011 , 0x0000003f + 00019893 0x000040aa beq 0x00000050 , 0x00004db7 + 00019894 0x000040ab branch 0x00002a8c + 00019895 0x000040ad arg 0x00000000 , 0x00000008 + 00019896 0x000040ae call 0x000052b8 + 00019897 0x000040af call 0x00004e7a + 00019898 0x000040b0 call 0x000052c3 + 00019899 0x000040b1 call 0x00007ea8 + 00019900 0x000040b2 call 0x00004ead + 00019901 0x000040b3 call 0x000052c1 + 00019902 0x000040b5 setarg 0x0000000c + 00019903 0x000040b6 istore 0x00000002 , 0x00000005 + 00019904 0x000040b7 force 0x00000001 , 0x0000003f + 00019905 0x000040b8 istore 0x00000002 , 0x00000005 + 00019906 0x000040b9 branch 0x00004dfc + 00019907 0x000040be bpatchx 0x0000000b , 0x00004021 + 00019908 0x000040bf fetch 0x00000002 , 0x00000275 + 00019909 0x000040c0 increase 0x00000004 , 0x0000003f + 00019910 0x000040c1 rshift4 0x0000003f , 0x0000003f + 00019911 0x000040c2 rshift3 0x0000003f , 0x0000003f + 00019912 0x000040c3 add 0x0000003f , 0x00000001 , 0x00000002 + 00019913 0x000040c4 arg 0x00004260 , 0x00000006 + 00019914 0x000040c5 ifetch 0x00000003 , 0x00000006 + 00019915 0x000040c6 rtn 0x00000034 + 00019916 0x000040c7 store 0x00000003 , 0x00000ac2 + 00019917 0x000040c8 fetch 0x00000001 , 0x00000ac2 + 00019918 0x000040c9 copy 0x0000003f , 0x00000011 + 00019919 0x000040ca call 0x00004dd3 + 00019920 0x000040cb copy 0x00000012 , 0x0000003f + 00019921 0x000040cc store 0x00000001 , 0x00004260 + 00019922 0x000040cd rtn + 00019923 0x000040d0 arg 0x00000000 , 0x00000007 + 00019924 0x000040d1 arg 0x00000000 , 0x00000012 + 00019925 0x000040d4 sub 0x00000007 , 0x00000007 , 0x0000003e + 00019926 0x000040d5 nrtn 0x00000002 + 00019927 0x000040d6 qisolate1 0x00000011 + 00019928 0x000040d7 branch 0x00004dda , 0x00000001 + 00019929 0x000040d8 branch 0x00004dde + 00019930 0x000040db copy 0x00000002 , 0x0000003f + 00019931 0x000040dc branch 0x00004dde , 0x00000034 + 00019932 0x000040dd qset1 0x00000012 + 00019933 0x000040de increase 0xffffffff , 0x00000002 + 00019934 0x000040e1 increase 0x00000001 , 0x00000007 + 00019935 0x000040e2 branch 0x00004dd5 + 00019936 0x000040e5 call 0x00005274 + 00019937 0x000040e6 nrtn 0x00000034 + 00019938 0x000040e7 call 0x00004d8f + 00019939 0x000040e8 nrtn 0x00000034 + 00019940 0x000040e9 call 0x000052c5 + 00019941 0x000040ea call 0x00006e11 + 00019942 0x000040eb call 0x00004dc3 + 00019943 0x000040ec branch 0x00004dec + 00019944 0x000040f0 call 0x00005274 + 00019945 0x000040f1 nrtn 0x00000034 + 00019946 0x000040f2 call 0x000052c5 + 00019947 0x000040f3 call 0x00006e11 + 00019948 0x000040f5 call 0x000052ce + 00019949 0x000040f6 fetch 0x00000002 , 0x00000275 + 00019950 0x000040f7 branch 0x00004dfb , 0x00000034 + 00019951 0x000040f8 istore 0x00000002 , 0x00000005 + 00019952 0x000040f9 fetch 0x00000002 , 0x00004248 + 00019953 0x000040fa istore 0x00000002 , 0x00000005 + 00019954 0x000040fb branch 0x00004dfc + 00019955 0x000040fe call 0x00004d33 + 00019956 0x000040ff branch 0x00004dfc + 00019957 0x00004102 bpatchx 0x0000000c , 0x00004021 + 00019958 0x00004103 jam 0x00000000 , 0x00000284 + 00019959 0x00004104 call 0x00006a8a + 00019960 0x00004105 fetch 0x00000001 , 0x00000284 + 00019961 0x00004106 rtneq 0x00000001 + 00019962 0x00004107 branch 0x00004dfc + 00019963 0x00004109 call 0x00005264 + 00019964 0x0000410c setarg 0x00000000 + 00019965 0x0000410d store 0x00000002 , 0x00000266 + 00019966 0x0000410e store 0x00000002 , 0x00000268 + 00019967 0x0000410f jam 0x00000001 , 0x0000026a + 00019968 0x00004110 rtn + 00019969 0x00004113 bpatchx 0x0000000d , 0x00004021 + 00019970 0x00004114 call 0x000052c3 + 00019971 0x00004115 force 0x00000000 , 0x00000012 + 00019972 0x00004116 fetch 0x00000002 , 0x00000266 + 00019973 0x00004117 copy 0x0000003f , 0x00000013 + 00019974 0x00004118 fetch 0x00000002 , 0x00000264 + 00019975 0x00004119 iforce 0x00000006 + 00019976 0x0000411b call 0x00004e10 + 00019977 0x0000411c deposit 0x00000013 + 00019978 0x0000411d increase 0xfffffffc , 0x00000013 + 00019979 0x0000411e increase 0xfffffffc , 0x0000003f + 00019980 0x0000411f nbranch 0x00004e08 , 0x00000034 + 00019981 0x00004120 copy 0x00000012 , 0x0000003f + 00019982 0x00004121 store 0x00000002 , 0x0000026f + 00019983 0x00004122 rtn + 00019984 0x00004125 bpatchx 0x0000000e , 0x00004021 + 00019985 0x00004126 ifetch 0x00000001 , 0x00000006 + 00019986 0x00004127 beq 0x00000001 , 0x00004e49 + 00019987 0x00004128 beq 0x00000002 , 0x00004e51 + 00019988 0x00004129 beq 0x00000003 , 0x00004ed5 + 00019989 0x0000412a beq 0x00000004 , 0x00004f05 + 00019990 0x0000412b beq 0x00000005 , 0x00004fa2 + 00019991 0x0000412c beq 0x00000006 , 0x00004fcb + 00019992 0x0000412d beq 0x00000007 , 0x0000501b + 00019993 0x0000412e beq 0x00000008 , 0x00005050 + 00019994 0x0000412f beq 0x00000009 , 0x00005060 + 00019995 0x00004130 beq 0x0000000a , 0x00004e1f + 00019996 0x00004131 beq 0x0000000b , 0x00005061 + 00019997 0x00004132 call 0x00005062 + 00019998 0x00004134 rtn + 00019999 0x00004137 ifetch 0x00000001 , 0x00000006 + 00020000 0x00004138 copy 0x0000003f , 0x00000007 + 00020001 0x00004139 ifetch 0x00000002 , 0x00000006 + 00020002 0x0000413a copy 0x0000003f , 0x00000011 + 00020003 0x0000413b copy 0x00000013 , 0x0000003f + 00020004 0x0000413c isub 0x00000011 , 0x00000013 + 00020005 0x0000413d setarg 0x0000000b + 00020006 0x0000413e istore 0x00000001 , 0x00000005 + 00020007 0x0000413f copy 0x00000007 , 0x0000003f + 00020008 0x00004140 istore 0x00000001 , 0x00000005 + 00020009 0x00004141 ifetch 0x00000002 , 0x00000006 + 00020010 0x00004143 beq 0x00000002 , 0x00004e2d + 00020011 0x00004144 beq 0x00000003 , 0x00004e33 + 00020012 0x00004145 rtn + 00020013 0x00004147 setarg 0x00020008 + 00020014 0x00004148 istore 0x00000006 , 0x00000005 + 00020015 0x00004149 setarg 0x00000280 + 00020016 0x0000414a istore 0x00000004 , 0x00000005 + 00020017 0x0000414b force 0x0000000c , 0x0000003f + 00020018 0x0000414c branch 0x00004e38 + 00020019 0x0000414e setarg 0x0003000c + 00020020 0x0000414f istore 0x00000006 , 0x00000005 + 00020021 0x00004150 setarg 0x00000006 + 00020022 0x00004151 istore 0x00000008 , 0x00000005 + 00020023 0x00004152 force 0x00000010 , 0x0000003f + 00020024 0x00004154 iadd 0x00000012 , 0x00000012 + 00020025 0x00004155 branch 0x00004e1e + 00020026 0x00004158 ifetch 0x00000001 , 0x00000006 + 00020027 0x00004159 copy 0x0000003f , 0x00000007 + 00020028 0x0000415a ifetch 0x00000002 , 0x00000006 + 00020029 0x0000415b copy 0x0000003f , 0x00000011 + 00020030 0x0000415c ifetch 0x00000002 , 0x00000006 + 00020031 0x0000415d store 0x00000002 , 0x00000aa2 + 00020032 0x0000415e copy 0x00000013 , 0x0000003f + 00020033 0x0000415f isub 0x00000011 , 0x00000013 + 00020034 0x00004160 call 0x000052c3 + 00020035 0x00004161 setarg 0x0000000b + 00020036 0x00004162 istore 0x00000001 , 0x00000005 + 00020037 0x00004163 copy 0x00000007 , 0x0000003f + 00020038 0x00004164 istore 0x00000001 , 0x00000005 + 00020039 0x00004165 fetch 0x00000002 , 0x00000aa2 + 00020040 0x00004166 branch 0x00004e2a + 00020041 0x0000416b ifetch 0x00000001 , 0x00000006 + 00020042 0x0000416c copy 0x0000003f , 0x00000007 + 00020043 0x0000416d ifetch 0x00000002 , 0x00000006 + 00020044 0x0000416e copy 0x0000003f , 0x00000011 + 00020045 0x0000416f iadd 0x00000006 , 0x00000006 + 00020046 0x00004170 copy 0x00000013 , 0x0000003f + 00020047 0x00004171 isub 0x00000011 , 0x00000013 + 00020048 0x00004173 branch 0x00004e1e + 00020049 0x00004176 call 0x00007ea8 + 00020050 0x00004179 call 0x00007ead + 00020051 0x0000417a arg 0x00000000 , 0x00000008 + 00020052 0x0000417b ifetch 0x00000001 , 0x00000006 + 00020053 0x0000417c copy 0x0000003f , 0x00000007 + 00020054 0x0000417d ifetch 0x00000002 , 0x00000006 + 00020055 0x0000417e copy 0x0000003f , 0x00000011 + 00020056 0x0000417f ifetch 0x00000002 , 0x00000006 + 00020057 0x00004180 copy 0x0000003f , 0x00000002 + 00020058 0x00004181 ifetch 0x00000002 , 0x00000006 + 00020059 0x00004182 copy 0x0000003f , 0x0000000b + 00020060 0x00004183 bpatchx 0x0000000f , 0x00004021 + 00020061 0x00004184 copy 0x00000002 , 0x0000003f + 00020062 0x00004185 beq 0x00000001 , 0x00004e64 + 00020063 0x00004186 beq 0x00000003 , 0x00004e86 + 00020064 0x00004187 beq 0x00000011 , 0x00004e92 + 00020065 0x00004188 beq 0x00000013 , 0x00004e9d + 00020066 0x00004189 call 0x00005062 + 00020067 0x0000418a branch 0x00004ed4 + 00020068 0x0000418d call 0x00007ea8 + 00020069 0x0000418e arg 0x00000050 , 0x00000002 + 00020070 0x0000418f fetch 0x00000002 , 0x00004248 + 00020071 0x00004190 nbranch 0x00004ece , 0x00000034 + 00020072 0x00004191 copy 0x0000000b , 0x0000003f + 00020073 0x00004192 store 0x00000002 , 0x00004248 + 00020074 0x00004193 copy 0x00000022 , 0x0000003f + 00020075 0x00004194 store 0x00000004 , 0x000002d5 + 00020076 0x00004195 call 0x00004e6e + 00020077 0x00004196 branch 0x00004ea9 + 00020078 0x00004199 storet 0x00000002 , 0x000002d3 + 00020079 0x0000419a deposit 0x0000000b + 00020080 0x0000419b store 0x00000002 , 0x000002c9 + 00020081 0x0000419c deposit 0x00000011 + 00020082 0x0000419d store 0x00000002 , 0x000002cb + 00020083 0x0000419e deposit 0x00000012 + 00020084 0x0000419f store 0x00000002 , 0x000002cd + 00020085 0x000041a0 deposit 0x00000013 + 00020086 0x000041a1 store 0x00000002 , 0x000002cf + 00020087 0x000041a2 deposit 0x00000007 + 00020088 0x000041a3 store 0x00000002 , 0x000002d1 + 00020089 0x000041a4 rtn + 00020090 0x000041a7 fetcht 0x00000002 , 0x000002d3 + 00020091 0x000041a8 fetch 0x00000002 , 0x000002c9 + 00020092 0x000041a9 copy 0x0000003f , 0x0000000b + 00020093 0x000041aa fetch 0x00000002 , 0x000002cb + 00020094 0x000041ab copy 0x0000003f , 0x00000011 + 00020095 0x000041ac fetch 0x00000002 , 0x000002cd + 00020096 0x000041ad copy 0x0000003f , 0x00000012 + 00020097 0x000041ae fetch 0x00000002 , 0x000002cf + 00020098 0x000041af copy 0x0000003f , 0x00000013 + 00020099 0x000041b0 fetch 0x00000002 , 0x000002d1 + 00020100 0x000041b1 copy 0x0000003f , 0x00000007 + 00020101 0x000041b2 rtn + 00020102 0x000041b5 call 0x00007ea8 + 00020103 0x000041b6 setarg 0x00000051 + 00020104 0x000041b7 arg 0x00000051 , 0x00000002 + 00020105 0x000041b8 fetch 0x00000002 , 0x0000424a + 00020106 0x000041b9 nbranch 0x00004ece , 0x00000034 + 00020107 0x000041ba copy 0x0000000b , 0x0000003f + 00020108 0x000041bb store 0x00000002 , 0x0000424a + 00020109 0x000041bc fetch 0x00000001 , 0x00004251 + 00020110 0x000041bd set1 0x00000000 , 0x0000003f + 00020111 0x000041be set1 0x00000001 , 0x0000003f + 00020112 0x000041bf store 0x00000001 , 0x00004251 + 00020113 0x000041c0 branch 0x00004eb1 + 00020114 0x000041c2 call 0x00007ea8 + 00020115 0x000041c3 arg 0x00000052 , 0x00000002 + 00020116 0x000041c4 fetch 0x00000002 , 0x0000424c + 00020117 0x000041c5 nbranch 0x00004ece , 0x00000034 + 00020118 0x000041c6 copy 0x0000000b , 0x0000003f + 00020119 0x000041c7 store 0x00000002 , 0x0000424c + 00020120 0x000041c8 fetch 0x00000001 , 0x00004252 + 00020121 0x000041c9 set1 0x00000000 , 0x0000003f + 00020122 0x000041ca set1 0x00000001 , 0x0000003f + 00020123 0x000041cb store 0x00000001 , 0x00004252 + 00020124 0x000041cc branch 0x00004eb1 + 00020125 0x000041ce call 0x00007ea8 + 00020126 0x000041cf deposit 0x0000001a + 00020127 0x000041d0 arg 0x00000053 , 0x00000002 + 00020128 0x000041d1 fetch 0x00000002 , 0x0000424e + 00020129 0x000041d2 nbranch 0x00004ece , 0x00000034 + 00020130 0x000041d3 copy 0x0000000b , 0x0000003f + 00020131 0x000041d4 store 0x00000002 , 0x0000424e + 00020132 0x000041d5 fetch 0x00000001 , 0x00004253 + 00020133 0x000041d6 set1 0x00000000 , 0x0000003f + 00020134 0x000041d7 set1 0x00000001 , 0x0000003f + 00020135 0x000041d8 store 0x00000001 , 0x00004253 + 00020136 0x000041d9 branch 0x00004eb1 + 00020137 0x000041dc setarg 0x00000001 + 00020138 0x000041dd store 0x00000002 , 0x0000027d + 00020139 0x000041de jam 0x00000050 , 0x00004364 + 00020140 0x000041df branch 0x00004eb3 + 00020141 0x000041e1 fetch 0x00000001 , 0x00004250 + 00020142 0x000041e2 set1 0x00000000 , 0x0000003f + 00020143 0x000041e3 set1 0x00000001 , 0x0000003f + 00020144 0x000041e4 store 0x00000001 , 0x00004250 + 00020145 0x000041e6 setarg 0x00000000 + 00020146 0x000041e7 store 0x00000002 , 0x0000027d + 00020147 0x000041e9 bpatchx 0x00000010 , 0x00004022 + 00020148 0x000041ea call 0x00007ead + 00020149 0x000041eb setarg 0x00000003 + 00020150 0x000041ec istore 0x00000001 , 0x00000005 + 00020151 0x000041ed copy 0x00000007 , 0x0000003f + 00020152 0x000041ee istore 0x00000001 , 0x00000005 + 00020153 0x000041ef setarg 0x00000008 + 00020154 0x000041f0 istore 0x00000002 , 0x00000005 + 00020155 0x000041f1 copy 0x00000002 , 0x0000003f + 00020156 0x000041f2 istore 0x00000002 , 0x00000005 + 00020157 0x000041f3 copy 0x0000000b , 0x0000003f + 00020158 0x000041f4 istore 0x00000002 , 0x00000005 + 00020159 0x000041f5 fetch 0x00000002 , 0x0000027d + 00020160 0x000041f6 beq 0x00000001 , 0x00004ec9 + 00020161 0x000041f7 isolate0 0x00000000 , 0x00000008 + 00020162 0x000041f8 branch 0x00004ec4 , 0x00000001 + 00020163 0x000041f9 setarg 0x00000004 + 00020164 0x000041fb istore 0x00000002 , 0x00000005 + 00020165 0x000041fc force 0x00000000 , 0x0000003f + 00020166 0x000041fd istore 0x00000002 , 0x00000005 + 00020167 0x000041fe setarg 0x0000000c + 00020168 0x000041ff branch 0x00004ed0 + 00020169 0x00004201 istore 0x00000002 , 0x00000005 + 00020170 0x00004202 force 0x00000002 , 0x0000003f + 00020171 0x00004203 istore 0x00000002 , 0x00000005 + 00020172 0x00004204 setarg 0x0000000c + 00020173 0x00004205 branch 0x00004ed0 + 00020174 0x00004208 set1 0x00000000 , 0x00000008 + 00020175 0x00004209 branch 0x00004eb1 + 00020176 0x0000420b iadd 0x00000012 , 0x00000012 + 00020177 0x0000420c copy 0x00000013 , 0x0000003f + 00020178 0x0000420d isub 0x00000011 , 0x00000013 + 00020179 0x0000420e branch 0x00004ed4 + 00020180 0x00004210 branch 0x00004e1e + 00020181 0x00004213 ifetch 0x00000001 , 0x00000006 + 00020182 0x00004214 copy 0x0000003f , 0x00000007 + 00020183 0x00004215 ifetch 0x00000002 , 0x00000006 + 00020184 0x00004216 copy 0x0000003f , 0x00000011 + 00020185 0x00004217 copy 0x00000013 , 0x0000003f + 00020186 0x00004218 isub 0x00000011 , 0x00000013 + 00020187 0x00004219 ifetch 0x00000002 , 0x00000006 + 00020188 0x0000421a copy 0x0000003f , 0x0000000b + 00020189 0x0000421b ifetch 0x00000002 , 0x00000006 + 00020190 0x0000421c copy 0x0000003f , 0x00000002 + 00020191 0x0000421d bpatchx 0x00000011 , 0x00004022 + 00020192 0x0000421e setarg 0x00000050 + 00020193 0x0000421f isub 0x00000002 , 0x0000003e + 00020194 0x00004220 branch 0x00004eed , 0x00000005 + 00020195 0x00004221 setarg 0x00000051 + 00020196 0x00004222 isub 0x00000002 , 0x0000003e + 00020197 0x00004223 branch 0x00004ef3 , 0x00000005 + 00020198 0x00004224 setarg 0x00000052 + 00020199 0x00004225 isub 0x00000002 , 0x0000003e + 00020200 0x00004226 branch 0x00004eff , 0x00000005 + 00020201 0x00004227 setarg 0x00000053 + 00020202 0x00004228 isub 0x00000002 , 0x0000003e + 00020203 0x00004229 branch 0x00004ef9 , 0x00000005 + 00020204 0x0000422a rtn + 00020205 0x0000422d copy 0x0000000b , 0x0000003f + 00020206 0x0000422e store 0x00000002 , 0x00004248 + 00020207 0x0000422f fetch 0x00000001 , 0x00004250 + 00020208 0x00004230 set1 0x00000001 , 0x0000003f + 00020209 0x00004231 store 0x00000001 , 0x00004250 + 00020210 0x00004232 branch 0x00004e1e + 00020211 0x00004234 copy 0x0000000b , 0x0000003f + 00020212 0x00004235 store 0x00000002 , 0x0000424a + 00020213 0x00004236 fetch 0x00000001 , 0x00004251 + 00020214 0x00004237 set1 0x00000001 , 0x0000003f + 00020215 0x00004238 store 0x00000001 , 0x00004251 + 00020216 0x00004239 rtn + 00020217 0x0000423b copy 0x0000000b , 0x0000003f + 00020218 0x0000423c store 0x00000002 , 0x0000424c + 00020219 0x0000423d fetch 0x00000001 , 0x00004253 + 00020220 0x0000423e set1 0x00000001 , 0x0000003f + 00020221 0x0000423f store 0x00000001 , 0x00004253 + 00020222 0x00004240 rtn + 00020223 0x00004242 copy 0x0000000b , 0x0000003f + 00020224 0x00004243 store 0x00000002 , 0x0000424e + 00020225 0x00004244 fetch 0x00000001 , 0x00004252 + 00020226 0x00004245 set1 0x00000001 , 0x0000003f + 00020227 0x00004246 store 0x00000001 , 0x00004252 + 00020228 0x00004247 rtn + 00020229 0x0000424a ifetch 0x00000001 , 0x00000006 + 00020230 0x0000424b copy 0x0000003f , 0x00000007 + 00020231 0x0000424c ifetch 0x00000002 , 0x00000006 + 00020232 0x0000424d copy 0x0000003f , 0x00000011 + 00020233 0x0000424e copy 0x00000013 , 0x0000003f + 00020234 0x0000424f isub 0x00000011 , 0x00000013 + 00020235 0x00004250 ifetch 0x00000002 , 0x00000006 + 00020236 0x00004251 copy 0x0000003f , 0x00000002 + 00020237 0x00004252 copy 0x00000002 , 0x00000011 + 00020238 0x00004253 bpatchx 0x00000012 , 0x00004022 + 00020239 0x00004254 setarg 0x00000050 + 00020240 0x00004255 isub 0x00000002 , 0x0000003e + 00020241 0x00004256 branch 0x00004f1c , 0x00000005 + 00020242 0x00004257 setarg 0x00000051 + 00020243 0x00004258 isub 0x00000002 , 0x0000003e + 00020244 0x00004259 branch 0x00004f3a , 0x00000005 + 00020245 0x0000425a setarg 0x00000052 + 00020246 0x0000425b isub 0x00000002 , 0x0000003e + 00020247 0x0000425c branch 0x00004f26 , 0x00000005 + 00020248 0x0000425d setarg 0x00000053 + 00020249 0x0000425e isub 0x00000002 , 0x0000003e + 00020250 0x0000425f branch 0x00004f30 , 0x00000005 + 00020251 0x00004260 branch 0x00005062 + 00020252 0x00004263 copy 0x00000005 , 0x0000000b + 00020253 0x00004264 fetch 0x00000001 , 0x00004250 + 00020254 0x00004265 set1 0x00000004 , 0x0000003f + 00020255 0x00004266 set1 0x00000003 , 0x0000003f + 00020256 0x00004268 store 0x00000001 , 0x00004250 + 00020257 0x00004269 copy 0x0000000b , 0x00000005 + 00020258 0x0000426a arg 0x00000050 , 0x0000000b + 00020259 0x0000426b fetch 0x00000002 , 0x00004248 + 00020260 0x0000426c copy 0x0000003f , 0x00000002 + 00020261 0x0000426d branch 0x00004f43 + 00020262 0x0000426f copy 0x00000005 , 0x0000000b + 00020263 0x00004270 fetch 0x00000001 , 0x00004252 + 00020264 0x00004271 set1 0x00000004 , 0x0000003f + 00020265 0x00004272 set1 0x00000003 , 0x0000003f + 00020266 0x00004274 store 0x00000001 , 0x00004252 + 00020267 0x00004275 copy 0x0000000b , 0x00000005 + 00020268 0x00004276 arg 0x00000052 , 0x0000000b + 00020269 0x00004277 fetch 0x00000002 , 0x0000424c + 00020270 0x00004278 copy 0x0000003f , 0x00000002 + 00020271 0x00004279 branch 0x00004f43 + 00020272 0x0000427b copy 0x00000005 , 0x0000000b + 00020273 0x0000427c fetch 0x00000001 , 0x00004253 + 00020274 0x0000427d set1 0x00000004 , 0x0000003f + 00020275 0x0000427e set1 0x00000003 , 0x0000003f + 00020276 0x00004280 store 0x00000001 , 0x00004253 + 00020277 0x00004281 copy 0x0000000b , 0x00000005 + 00020278 0x00004282 arg 0x00000053 , 0x0000000b + 00020279 0x00004283 fetch 0x00000002 , 0x0000424e + 00020280 0x00004284 copy 0x0000003f , 0x00000002 + 00020281 0x00004285 branch 0x00004f43 + 00020282 0x00004287 copy 0x00000005 , 0x0000000b + 00020283 0x00004288 fetch 0x00000001 , 0x00004251 + 00020284 0x00004289 set1 0x00000004 , 0x0000003f + 00020285 0x0000428a set1 0x00000003 , 0x0000003f + 00020286 0x0000428c store 0x00000001 , 0x00004251 + 00020287 0x0000428e copy 0x0000000b , 0x00000005 + 00020288 0x0000428f arg 0x00000051 , 0x0000000b + 00020289 0x00004290 fetch 0x00000002 , 0x0000424a + 00020290 0x00004291 copy 0x0000003f , 0x00000002 + 00020291 0x00004293 bpatchx 0x00000013 , 0x00004022 + 00020292 0x00004294 setarg 0x00000005 + 00020293 0x00004295 istore 0x00000001 , 0x00000005 + 00020294 0x00004296 copy 0x00000007 , 0x0000003f + 00020295 0x00004297 istore 0x00000001 , 0x00000005 + 00020296 0x00004298 setarg 0x00000006 + 00020297 0x00004299 istore 0x00000002 , 0x00000005 + 00020298 0x0000429a copy 0x00000002 , 0x0000003f + 00020299 0x0000429b istore 0x00000002 , 0x00000005 + 00020300 0x0000429c force 0x00000000 , 0x0000003f + 00020301 0x0000429d istore 0x00000002 , 0x00000005 + 00020302 0x0000429e force 0x00000000 , 0x0000003f + 00020303 0x0000429f istore 0x00000002 , 0x00000005 + 00020304 0x000042a0 force 0x0000000a , 0x0000003f + 00020305 0x000042a1 iadd 0x00000012 , 0x00000012 + 00020306 0x000042a3 storet 0x00000002 , 0x00000282 + 00020307 0x000042a4 copy 0x00000007 , 0x0000003f + 00020308 0x000042a5 store 0x00000001 , 0x00000281 + 00020309 0x000042a6 force 0x00000050 , 0x0000003f + 00020310 0x000042a7 icompare 0x000000ff , 0x0000000b + 00020311 0x000042a8 branch 0x00004f59 , 0x00000001 + 00020312 0x000042a9 increase 0x00000001 , 0x0000003f + 00020313 0x000042ac rtn + 00020314 0x000042ae disable 0x00000028 + 00020315 0x000042af rtnbit1 0x00000002 , 0x0000003f + 00020316 0x000042b0 rtnbit0 0x00000000 , 0x0000003f + 00020317 0x000042b1 rtnbit0 0x00000001 , 0x0000003f + 00020318 0x000042b2 set1 0x00000002 , 0x0000003f + 00020319 0x000042b3 copy 0x00000006 , 0x00000005 + 00020320 0x000042b4 increase 0xffffffff , 0x00000005 + 00020321 0x000042b5 istore 0x00000001 , 0x00000005 + 00020322 0x000042b6 enable 0x00000028 + 00020323 0x000042b7 rtn + 00020324 0x000042ba fetch 0x00000001 , 0x00004250 + 00020325 0x000042bb call 0x00004f5a + 00020326 0x000042bc nbranch 0x00004f6b , 0x00000028 + 00020327 0x000042bd jam 0x00000050 , 0x00000280 + 00020328 0x000042be fetch 0x00000002 , 0x00004248 + 00020329 0x000042bf store 0x00000002 , 0x00000282 + 00020330 0x000042c0 branch 0x00004f7f + 00020331 0x000042c2 fetch 0x00000001 , 0x00004251 + 00020332 0x000042c3 call 0x00004f5a + 00020333 0x000042c4 nbranch 0x00004f72 , 0x00000028 + 00020334 0x000042c5 jam 0x00000051 , 0x00000280 + 00020335 0x000042c6 fetch 0x00000002 , 0x0000424a + 00020336 0x000042c7 store 0x00000002 , 0x00000282 + 00020337 0x000042c8 branch 0x00004f7f + 00020338 0x000042ca fetch 0x00000001 , 0x00004252 + 00020339 0x000042cb call 0x00004f5a + 00020340 0x000042cc nbranch 0x00004f79 , 0x00000028 + 00020341 0x000042cd jam 0x00000052 , 0x00000280 + 00020342 0x000042ce fetch 0x00000002 , 0x0000424c + 00020343 0x000042cf store 0x00000002 , 0x00000282 + 00020344 0x000042d0 branch 0x00004f7f + 00020345 0x000042d2 fetch 0x00000001 , 0x00004253 + 00020346 0x000042d3 call 0x00004f5a + 00020347 0x000042d4 nrtn 0x00000028 + 00020348 0x000042d5 jam 0x00000053 , 0x00000280 + 00020349 0x000042d6 fetch 0x00000002 , 0x0000424e + 00020350 0x000042d7 store 0x00000002 , 0x00000282 + 00020351 0x000042db bpatchx 0x00000014 , 0x00004022 + 00020352 0x000042dc call 0x0000523a + 00020353 0x000042dd call 0x000052b8 + 00020354 0x000042de force 0x00000000 , 0x00000012 + 00020355 0x000042df call 0x000052c3 + 00020356 0x000042e0 force 0x00000004 , 0x0000003f + 00020357 0x000042e1 istore 0x00000001 , 0x00000005 + 00020358 0x000042e2 fetch 0x00000001 , 0x00004255 + 00020359 0x000042e3 istore 0x00000001 , 0x00000005 + 00020360 0x000042e4 setarg 0x00000008 + 00020361 0x000042e5 istore 0x00000002 , 0x00000005 + 00020362 0x000042e6 fetch 0x00000002 , 0x00000282 + 00020363 0x000042e7 istore 0x00000002 , 0x00000005 + 00020364 0x000042e8 setarg 0x00000000 + 00020365 0x000042e9 istore 0x00000002 , 0x00000005 + 00020366 0x000042ea force 0x00000001 , 0x0000003f + 00020367 0x000042eb istore 0x00000001 , 0x00000005 + 00020368 0x000042ec force 0x00000002 , 0x0000003f + 00020369 0x000042ed istore 0x00000001 , 0x00000005 + 00020370 0x000042ee fetch 0x00000001 , 0x00000280 + 00020371 0x000042ef beq 0x00000051 , 0x00004f97 + 00020372 0x000042f0 setarg 0x00000030 + 00020373 0x000042f1 istore 0x00000002 , 0x00000005 + 00020374 0x000042f2 branch 0x00004f99 + 00020375 0x000042f4 setarg 0x000003e3 + 00020376 0x000042f5 istore 0x00000002 , 0x00000005 + 00020377 0x000042f7 arg 0x0000000c , 0x00000002 + 00020378 0x000042f8 storet 0x00000002 , 0x0000026f + 00020379 0x000042f9 call 0x000052c1 + 00020380 0x000042fa fetch 0x00000002 , 0x0000026f + 00020381 0x000042fb istore 0x00000002 , 0x00000005 + 00020382 0x000042fc force 0x00000001 , 0x0000003f + 00020383 0x000042fd istore 0x00000002 , 0x00000005 + 00020384 0x000042fe jam 0x00000000 , 0x00000280 + 00020385 0x00004300 branch 0x00004e1e + 00020386 0x00004303 increase 0x00000001 , 0x00000006 + 00020387 0x00004304 ifetch 0x00000002 , 0x00000006 + 00020388 0x00004305 copy 0x0000003f , 0x00000011 + 00020389 0x00004306 copy 0x00000013 , 0x0000003f + 00020390 0x00004307 isub 0x00000011 , 0x00000013 + 00020391 0x00004308 ifetch 0x00000002 , 0x00000006 + 00020392 0x00004309 copy 0x0000003f , 0x00000011 + 00020393 0x0000430a bpatchx 0x00000015 , 0x00004022 + 00020394 0x0000430b setarg 0x00000050 + 00020395 0x0000430c isub 0x00000011 , 0x0000003e + 00020396 0x0000430d branch 0x00004fba , 0x00000005 + 00020397 0x0000430e setarg 0x00000051 + 00020398 0x0000430f isub 0x00000011 , 0x0000003e + 00020399 0x00004310 branch 0x00004fbe , 0x00000005 + 00020400 0x00004311 setarg 0x00000052 + 00020401 0x00004312 isub 0x00000011 , 0x0000003e + 00020402 0x00004313 branch 0x00004fc2 , 0x00000005 + 00020403 0x00004314 setarg 0x00000053 + 00020404 0x00004315 isub 0x00000011 , 0x0000003e + 00020405 0x00004316 branch 0x00004fc6 , 0x00000005 + 00020406 0x00004317 increase 0x00000002 , 0x00000006 + 00020407 0x00004318 ifetch 0x00000002 , 0x00000006 + 00020408 0x00004319 iforce 0x0000003e + 00020409 0x0000431a branch 0x00004e1e + 00020410 0x0000431c fetch 0x00000001 , 0x00004250 + 00020411 0x0000431d set1 0x00000005 , 0x0000003f + 00020412 0x0000431e store 0x00000001 , 0x00004250 + 00020413 0x0000431f branch 0x00004e1e + 00020414 0x00004321 fetch 0x00000001 , 0x00004251 + 00020415 0x00004322 set1 0x00000005 , 0x0000003f + 00020416 0x00004323 store 0x00000001 , 0x00004251 + 00020417 0x00004324 branch 0x00004e1e + 00020418 0x00004326 fetch 0x00000001 , 0x00004252 + 00020419 0x00004327 set1 0x00000005 , 0x0000003f + 00020420 0x00004328 store 0x00000001 , 0x00004252 + 00020421 0x00004329 branch 0x00004e1e + 00020422 0x0000432b fetch 0x00000001 , 0x00004253 + 00020423 0x0000432c set1 0x00000005 , 0x0000003f + 00020424 0x0000432d store 0x00000001 , 0x00004253 + 00020425 0x0000432e jam 0x00000006 , 0x00000a99 + 00020426 0x0000432f branch 0x00007d86 + 00020427 0x00004334 ifetch 0x00000001 , 0x00000006 + 00020428 0x00004335 copy 0x0000003f , 0x00000007 + 00020429 0x00004336 ifetch 0x00000002 , 0x00000006 + 00020430 0x00004337 copy 0x0000003f , 0x00000011 + 00020431 0x00004338 copy 0x00000013 , 0x0000003f + 00020432 0x00004339 isub 0x00000011 , 0x00000013 + 00020433 0x0000433a ifetch 0x00000002 , 0x00000006 + 00020434 0x0000433b copy 0x0000003f , 0x00000011 + 00020435 0x0000433c ifetch 0x00000002 , 0x00000006 + 00020436 0x0000433d copy 0x0000003f , 0x0000000b + 00020437 0x0000433e copy 0x00000011 , 0x00000002 + 00020438 0x0000433f call 0x00007ea8 + 00020439 0x00004340 bpatchx 0x00000016 , 0x00004022 + 00020440 0x00004341 setarg 0x00000050 + 00020441 0x00004342 isub 0x00000002 , 0x0000003e + 00020442 0x00004343 branch 0x00004ff2 , 0x00000005 + 00020443 0x00004344 setarg 0x00000051 + 00020444 0x00004345 isub 0x00000002 , 0x0000003e + 00020445 0x00004346 branch 0x00005002 , 0x00000005 + 00020446 0x00004347 setarg 0x00000052 + 00020447 0x00004348 isub 0x00000002 , 0x0000003e + 00020448 0x00004349 branch 0x00004fe6 , 0x00000005 + 00020449 0x0000434a setarg 0x00000053 + 00020450 0x0000434b isub 0x00000002 , 0x0000003e + 00020451 0x0000434c branch 0x00004fec , 0x00000005 + 00020452 0x0000434d call 0x00005062 + 00020453 0x0000434e branch 0x00005017 + 00020454 0x00004350 copy 0x0000000b , 0x00000002 + 00020455 0x00004351 fetch 0x00000002 , 0x0000424c + 00020456 0x00004352 isub 0x00000002 , 0x0000003e + 00020457 0x00004353 branch 0x00004ff8 , 0x00000005 + 00020458 0x00004354 call 0x00005062 + 00020459 0x00004355 branch 0x00005017 + 00020460 0x00004357 copy 0x0000000b , 0x00000002 + 00020461 0x00004358 fetch 0x00000002 , 0x0000424e + 00020462 0x00004359 isub 0x00000002 , 0x0000003e + 00020463 0x0000435a branch 0x00004ffa , 0x00000005 + 00020464 0x0000435b call 0x00005062 + 00020465 0x0000435c branch 0x00005017 + 00020466 0x0000435f copy 0x0000000b , 0x00000002 + 00020467 0x00004360 fetch 0x00000002 , 0x00004248 + 00020468 0x00004361 isub 0x00000002 , 0x0000003e + 00020469 0x00004362 branch 0x00004ffe , 0x00000005 + 00020470 0x00004363 call 0x00005062 + 00020471 0x00004364 branch 0x00005017 + 00020472 0x00004366 call 0x00005079 + 00020473 0x00004367 branch 0x0000500a + 00020474 0x00004369 call 0x0000507f + 00020475 0x0000436a fetch 0x00000002 , 0x0000424c + 00020476 0x0000436b branch 0x0000500a , 0x00000034 + 00020477 0x00004373 branch 0x0000500a + 00020478 0x00004376 call 0x00005074 + 00020479 0x00004377 fetch 0x00000001 , 0x00000288 + 00020480 0x00004378 nbranch 0x0000500a , 0x00000034 + 00020481 0x0000437b branch 0x0000500a + 00020482 0x0000437d copy 0x0000000b , 0x00000002 + 00020483 0x0000437e fetch 0x00000002 , 0x0000424a + 00020484 0x0000437f isub 0x00000002 , 0x0000003e + 00020485 0x00004380 branch 0x00005008 , 0x00000005 + 00020486 0x00004381 call 0x00005062 + 00020487 0x00004382 branch 0x00005017 + 00020488 0x00004384 call 0x0000506f + 00020489 0x00004385 branch 0x0000500a + 00020490 0x00004387 call 0x00007ead + 00020491 0x00004388 setarg 0x00000007 + 00020492 0x00004389 istore 0x00000001 , 0x00000005 + 00020493 0x0000438a copy 0x00000007 , 0x0000003f + 00020494 0x0000438b istore 0x00000001 , 0x00000005 + 00020495 0x0000438c setarg 0x00000004 + 00020496 0x0000438d istore 0x00000002 , 0x00000005 + 00020497 0x0000438e copy 0x00000011 , 0x0000003f + 00020498 0x0000438f istore 0x00000002 , 0x00000005 + 00020499 0x00004390 copy 0x0000000b , 0x0000003f + 00020500 0x00004391 istore 0x00000002 , 0x00000005 + 00020501 0x00004392 force 0x00000008 , 0x0000003f + 00020502 0x00004393 branch 0x00005019 + 00020503 0x00004395 call 0x00007ead + 00020504 0x00004396 branch 0x00005019 + 00020505 0x00004398 iadd 0x00000012 , 0x00000012 + 00020506 0x00004399 branch 0x00004e1e + 00020507 0x0000439b ifetch 0x00000001 , 0x00000006 + 00020508 0x0000439c copy 0x0000003f , 0x00000007 + 00020509 0x0000439d ifetch 0x00000002 , 0x00000006 + 00020510 0x0000439e copy 0x0000003f , 0x00000011 + 00020511 0x0000439f copy 0x00000013 , 0x0000003f + 00020512 0x000043a0 isub 0x00000011 , 0x00000013 + 00020513 0x000043a1 ifetch 0x00000002 , 0x00000006 + 00020514 0x000043a2 copy 0x0000003f , 0x0000000b + 00020515 0x000043a3 ifetch 0x00000002 , 0x00000006 + 00020516 0x000043a4 copy 0x0000003f , 0x00000002 + 00020517 0x000043a5 call 0x00007ea8 + 00020518 0x000043a6 bpatchx 0x00000017 , 0x00004022 + 00020519 0x000043a7 setarg 0x00000050 + 00020520 0x000043a8 isub 0x00000002 , 0x0000003e + 00020521 0x000043a9 branch 0x00005035 , 0x00000005 + 00020522 0x000043aa setarg 0x00000051 + 00020523 0x000043ab isub 0x00000002 , 0x0000003e + 00020524 0x000043ac branch 0x0000503b , 0x00000005 + 00020525 0x000043ad setarg 0x00000052 + 00020526 0x000043ae isub 0x00000002 , 0x0000003e + 00020527 0x000043af branch 0x00005041 , 0x00000005 + 00020528 0x000043b0 setarg 0x00000053 + 00020529 0x000043b1 isub 0x00000002 , 0x0000003e + 00020530 0x000043b2 branch 0x00005047 , 0x00000005 + 00020531 0x000043b3 call 0x00005062 + 00020532 0x000043b4 branch 0x0000504f + 00020533 0x000043b6 copy 0x00000002 , 0x00000011 + 00020534 0x000043b7 copy 0x0000000b , 0x00000002 + 00020535 0x000043b8 fetch 0x00000002 , 0x00004248 + 00020536 0x000043b9 isub 0x00000002 , 0x0000003e + 00020537 0x000043ba call 0x00005074 , 0x00000005 + 00020538 0x000043bb branch 0x0000504d + 00020539 0x000043bd copy 0x00000002 , 0x00000011 + 00020540 0x000043be copy 0x0000000b , 0x00000002 + 00020541 0x000043bf fetch 0x00000002 , 0x0000424a + 00020542 0x000043c0 isub 0x00000002 , 0x0000003e + 00020543 0x000043c1 call 0x0000506f , 0x00000005 + 00020544 0x000043c2 branch 0x0000504d + 00020545 0x000043c4 copy 0x00000002 , 0x00000011 + 00020546 0x000043c5 copy 0x0000000b , 0x00000002 + 00020547 0x000043c6 fetch 0x00000002 , 0x0000424c + 00020548 0x000043c7 isub 0x00000002 , 0x0000003e + 00020549 0x000043c8 call 0x00005079 , 0x00000005 + 00020550 0x000043c9 branch 0x0000504d + 00020551 0x000043cb copy 0x00000002 , 0x00000011 + 00020552 0x000043cc copy 0x0000000b , 0x00000002 + 00020553 0x000043cd fetch 0x00000002 , 0x0000424e + 00020554 0x000043ce isub 0x00000002 , 0x0000003e + 00020555 0x000043cf call 0x0000507f , 0x00000005 + 00020556 0x000043d0 branch 0x0000504d + 00020557 0x000043d2 call 0x00007ead + 00020558 0x000043d3 branch 0x00004e1e + 00020559 0x000043d5 branch 0x00004e1e + 00020560 0x000043d9 ifetch 0x00000001 , 0x00000006 + 00020561 0x000043da copy 0x0000003f , 0x00000007 + 00020562 0x000043db ifetch 0x00000002 , 0x00000006 + 00020563 0x000043dc copy 0x0000003f , 0x00000011 + 00020564 0x000043dd iadd 0x00000006 , 0x00000006 + 00020565 0x000043de setarg 0x00000009 + 00020566 0x000043df istore 0x00000001 , 0x00000005 + 00020567 0x000043e0 copy 0x00000007 , 0x0000003f + 00020568 0x000043e1 istore 0x00000001 , 0x00000005 + 00020569 0x000043e2 force 0x00000000 , 0x0000003f + 00020570 0x000043e3 istore 0x00000002 , 0x00000005 + 00020571 0x000043e4 force 0x00000004 , 0x0000003f + 00020572 0x000043e5 iadd 0x00000012 , 0x00000012 + 00020573 0x000043e6 copy 0x00000013 , 0x0000003f + 00020574 0x000043e7 isub 0x00000011 , 0x00000013 + 00020575 0x000043e8 branch 0x00004e1e + 00020576 0x000043ea branch 0x00004e1e + 00020577 0x000043ed branch 0x00004e1e + 00020578 0x000043ef force 0x00000000 , 0x00000012 + 00020579 0x000043f0 call 0x000052c3 + 00020580 0x000043f1 setarg 0x00000001 + 00020581 0x000043f2 istore 0x00000001 , 0x00000005 + 00020582 0x000043f3 copy 0x00000007 , 0x0000003f + 00020583 0x000043f4 istore 0x00000001 , 0x00000005 + 00020584 0x000043f5 setarg 0x00000002 + 00020585 0x000043f6 istore 0x00000002 , 0x00000005 + 00020586 0x000043f7 setarg 0x00000000 + 00020587 0x000043f8 istore 0x00000002 , 0x00000005 + 00020588 0x000043f9 increase 0x00000006 , 0x00000012 + 00020589 0x000043fa arg 0x00000004 , 0x00000013 + 00020590 0x000043fb branch 0x00004e1e + 00020591 0x00004400 setarg 0x00000000 + 00020592 0x00004401 store 0x00000002 , 0x0000027b + 00020593 0x00004402 store 0x00000002 , 0x0000424a + 00020594 0x00004403 jam 0x00000000 , 0x00004251 + 00020595 0x00004404 rtn + 00020596 0x00004406 setarg 0x00000000 + 00020597 0x00004407 store 0x00000002 , 0x00000275 + 00020598 0x00004408 store 0x00000002 , 0x00004248 + 00020599 0x00004409 jam 0x00000000 , 0x00004250 + 00020600 0x0000440a rtn + 00020601 0x0000440c setarg 0x00000000 + 00020602 0x0000440d store 0x00000002 , 0x0000424c + 00020603 0x0000440e jam 0x00000000 , 0x00004252 + 00020604 0x0000440f fetch 0x00000001 , 0x00004253 + 00020605 0x00004410 beq 0x00000000 , 0x00005085 + 00020606 0x00004411 rtn + 00020607 0x00004414 setarg 0x00000000 + 00020608 0x00004415 store 0x00000002 , 0x0000424e + 00020609 0x00004416 jam 0x00000000 , 0x00004253 + 00020610 0x00004417 fetch 0x00000001 , 0x00004252 + 00020611 0x00004418 beq 0x00000000 , 0x00005085 + 00020612 0x00004419 rtn + 00020613 0x0000441c jam 0x00000007 , 0x00000a99 + 00020614 0x0000441d branch 0x00007d86 + 00020615 0x00004420 fetch 0x00000001 , 0x0000027f + 00020616 0x00004421 set0 0x00000000 , 0x0000003f + 00020617 0x00004422 store 0x00000001 , 0x0000027f + 00020618 0x00004423 fetch 0x00000002 , 0x0000424e + 00020619 0x00004424 rtn 0x00000034 + 00020620 0x00004425 call 0x000052b8 + 00020621 0x00004426 fetch 0x00000002 , 0x0000424e + 00020622 0x00004427 copy 0x0000003f , 0x00000011 + 00020623 0x00004428 force 0x00000053 , 0x00000012 + 00020624 0x00004429 branch 0x0000509a + 00020625 0x0000442b fetch 0x00000001 , 0x0000027f + 00020626 0x0000442c set0 0x00000007 , 0x0000003f + 00020627 0x0000442d store 0x00000001 , 0x0000027f + 00020628 0x0000442e fetch 0x00000002 , 0x0000424c + 00020629 0x0000442f rtn 0x00000034 + 00020630 0x00004430 call 0x000052b8 + 00020631 0x00004431 fetch 0x00000002 , 0x0000424c + 00020632 0x00004432 copy 0x0000003f , 0x00000011 + 00020633 0x00004433 force 0x00000052 , 0x00000012 + 00020634 0x00004435 call 0x0000523a + 00020635 0x00004436 call 0x000052c3 + 00020636 0x00004437 force 0x00000006 , 0x0000003f + 00020637 0x00004438 istore 0x00000001 , 0x00000005 + 00020638 0x00004439 fetch 0x00000001 , 0x00004255 + 00020639 0x0000443a istore 0x00000001 , 0x00000005 + 00020640 0x0000443b setarg 0x00000004 + 00020641 0x0000443c istore 0x00000002 , 0x00000005 + 00020642 0x0000443d copy 0x00000011 , 0x0000003f + 00020643 0x0000443e istore 0x00000002 , 0x00000005 + 00020644 0x0000443f copy 0x00000012 , 0x0000003f + 00020645 0x00004440 istore 0x00000002 , 0x00000005 + 00020646 0x00004441 force 0x00000008 , 0x00000002 + 00020647 0x00004442 branch 0x000050de + 00020648 0x00004445 bpatchx 0x00000018 , 0x00004023 + 00020649 0x00004446 call 0x0000523a + 00020650 0x00004447 call 0x000052c3 + 00020651 0x00004448 setarg 0x00000002 + 00020652 0x00004449 istore 0x00000001 , 0x00000005 + 00020653 0x0000444a fetch 0x00000001 , 0x00004255 + 00020654 0x0000444b istore 0x00000001 , 0x00000005 + 00020655 0x0000444c setarg 0x00000004 + 00020656 0x0000444d istore 0x00000002 , 0x00000005 + 00020657 0x0000444e copy 0x00000002 , 0x0000003f + 00020658 0x0000444f istore 0x00000002 , 0x00000005 + 00020659 0x00004450 copy 0x0000000b , 0x0000003f + 00020660 0x00004451 istore 0x00000002 , 0x00000005 + 00020661 0x00004452 arg 0x00000008 , 0x00000002 + 00020662 0x00004453 branch 0x000050de + 00020663 0x00004455 bpatchx 0x00000019 , 0x00004023 + 00020664 0x00004456 call 0x0000523a + 00020665 0x00004457 call 0x000052c3 + 00020666 0x00004458 setarg 0x00000004 + 00020667 0x00004459 istore 0x00000001 , 0x00000005 + 00020668 0x0000445a fetch 0x00000001 , 0x00004255 + 00020669 0x0000445b istore 0x00000001 , 0x00000005 + 00020670 0x0000445c setarg 0x00000008 + 00020671 0x0000445d istore 0x00000002 , 0x00000005 + 00020672 0x0000445f copy 0x00000002 , 0x0000003f + 00020673 0x00004461 istore 0x00000002 , 0x00000005 + 00020674 0x00004462 setarg 0x00000000 + 00020675 0x00004463 istore 0x00000002 , 0x00000005 + 00020676 0x00004464 setarg 0x00000001 + 00020677 0x00004465 istore 0x00000001 , 0x00000005 + 00020678 0x00004466 setarg 0x00000002 + 00020679 0x00004467 istore 0x00000001 , 0x00000005 + 00020680 0x00004468 setarg 0x000003e3 + 00020681 0x00004469 istore 0x00000002 , 0x00000005 + 00020682 0x0000446a arg 0x0000000c , 0x00000002 + 00020683 0x0000446b branch 0x000050de + 00020684 0x0000446d bpatchx 0x0000001a , 0x00004023 + 00020685 0x0000446e call 0x0000523a + 00020686 0x0000446f call 0x000052c3 + 00020687 0x00004470 setarg 0x00000006 + 00020688 0x00004471 istore 0x00000001 , 0x00000005 + 00020689 0x00004472 fetch 0x00000001 , 0x00004255 + 00020690 0x00004473 increase 0x00000001 , 0x0000003f + 00020691 0x00004474 copy 0x00000005 , 0x00000011 + 00020692 0x00004475 store 0x00000001 , 0x00004255 + 00020693 0x00004476 copy 0x00000011 , 0x00000005 + 00020694 0x00004477 istore 0x00000001 , 0x00000005 + 00020695 0x00004478 setarg 0x00000004 + 00020696 0x00004479 istore 0x00000002 , 0x00000005 + 00020697 0x0000447a copy 0x00000002 , 0x0000003f + 00020698 0x0000447b istore 0x00000002 , 0x00000005 + 00020699 0x0000447c copy 0x0000000b , 0x0000003f + 00020700 0x0000447d istore 0x00000002 , 0x00000005 + 00020701 0x0000447e arg 0x00000008 , 0x00000002 + 00020702 0x00004482 storet 0x00000002 , 0x0000026f + 00020703 0x00004483 copy 0x00000002 , 0x0000003f + 00020704 0x00004484 branch 0x00005264 , 0x00000034 + 00020705 0x00004485 call 0x000052c1 + 00020706 0x00004486 fetch 0x00000002 , 0x0000026f + 00020707 0x00004487 istore 0x00000002 , 0x00000005 + 00020708 0x00004488 force 0x00000001 , 0x0000003f + 00020709 0x00004489 istore 0x00000002 , 0x00000005 + 00020710 0x0000448a rtn + 00020711 0x0000448d fetch 0x00000002 , 0x00000275 + 00020712 0x0000448e branch 0x00002a8c , 0x00000034 + 00020713 0x0000448f call 0x000052ce + 00020714 0x00004490 fetch 0x00000002 , 0x00000275 + 00020715 0x00004491 istore 0x00000002 , 0x00000005 + 00020716 0x00004492 fetch 0x00000002 , 0x00004248 + 00020717 0x00004493 istore 0x00000002 , 0x00000005 + 00020718 0x00004494 rtn + 00020719 0x00004496 fetch 0x00000002 , 0x00000266 + 00020720 0x00004497 branch 0x00004dfc , 0x00000034 + 00020721 0x00004498 bpatchx 0x0000001b , 0x00004023 + 00020722 0x00004499 fetch 0x00000001 , 0x00000268 + 00020723 0x0000449a beq 0x00000001 , 0x000050f9 + 00020724 0x0000449b beq 0x00000050 , 0x00004de8 + 00020725 0x0000449c beq 0x00000051 , 0x00004df5 + 00020726 0x0000449d beq 0x00000052 , 0x00004df3 + 00020727 0x0000449e beq 0x00000053 , 0x00004df3 + 00020728 0x0000449f branch 0x00004dfc + 00020729 0x000044a2 bpatchx 0x0000001c , 0x00004023 + 00020730 0x000044a3 call 0x000052b8 + 00020731 0x000044a4 force 0x00000000 , 0x00000012 + 00020732 0x000044a5 call 0x000052c3 + 00020733 0x000044a6 copy 0x0000003f , 0x00000005 + 00020734 0x000044a7 fetch 0x00000002 , 0x00000266 + 00020735 0x000044a8 copy 0x0000003f , 0x00000013 + 00020736 0x000044a9 fetch 0x00000002 , 0x00000264 + 00020737 0x000044aa iforce 0x00000006 + 00020738 0x000044ac call 0x00005108 + 00020739 0x000044ad increase 0xfffffffc , 0x00000013 + 00020740 0x000044ae nbranch 0x00005102 , 0x00000005 + 00020741 0x000044af copy 0x00000012 , 0x00000002 + 00020742 0x000044b0 call 0x000050de + 00020743 0x000044b1 branch 0x00004dfc + 00020744 0x000044b4 ifetch 0x00000001 , 0x00000006 + 00020745 0x000044b5 beq 0x00000002 , 0x00005113 + 00020746 0x000044b6 beq 0x00000001 , 0x00005116 + 00020747 0x000044b7 beq 0x00000003 , 0x00005120 + 00020748 0x000044b8 beq 0x00000005 , 0x0000515c + 00020749 0x000044b9 beq 0x00000004 , 0x0000518e + 00020750 0x000044ba beq 0x00000007 , 0x00005213 + 00020751 0x000044bb beq 0x00000006 , 0x000051e1 + 00020752 0x000044bc beq 0x00000008 , 0x00005050 + 00020753 0x000044bd beq 0x0000000a , 0x00004e3a + 00020754 0x000044be branch 0x0000522e + 00020755 0x000044c1 call 0x00007ea8 + 00020756 0x000044c3 call 0x00007ead + 00020757 0x000044c4 branch 0x00004e51 + 00020758 0x000044c6 ifetch 0x00000001 , 0x00000006 + 00020759 0x000044c7 copy 0x0000003f , 0x00000007 + 00020760 0x000044c8 ifetch 0x00000002 , 0x00000006 + 00020761 0x000044c9 copy 0x0000003f , 0x00000011 + 00020762 0x000044ca copy 0x00000013 , 0x0000003f + 00020763 0x000044cb isub 0x00000011 , 0x00000013 + 00020764 0x000044cd ifetch 0x00000001 , 0x00000006 + 00020765 0x000044ce increase 0xffffffff , 0x00000011 + 00020766 0x000044cf nbranch 0x0000511c , 0x00000005 + 00020767 0x000044d0 rtn + 00020768 0x000044d2 ifetch 0x00000001 , 0x00000006 + 00020769 0x000044d3 copy 0x0000003f , 0x00000007 + 00020770 0x000044d4 ifetch 0x00000002 , 0x00000006 + 00020771 0x000044d5 copy 0x0000003f , 0x00000011 + 00020772 0x000044d6 ifetch 0x00000002 , 0x00000006 + 00020773 0x000044d7 copy 0x0000003f , 0x0000000b + 00020774 0x000044d8 ifetch 0x00000002 , 0x00000006 + 00020775 0x000044d9 copy 0x0000003f , 0x00000002 + 00020776 0x000044da ifetch 0x00000002 , 0x00000006 + 00020777 0x000044db sub 0x0000003f , 0x00000000 , 0x0000003e + 00020778 0x000044dc branch 0x00005132 , 0x00000005 + 00020779 0x000044dd beq 0x00000002 , 0x0000512e + 00020780 0x000044de beq 0x00000004 , 0x0000512e + 00020781 0x000044df branch 0x00005130 + 00020782 0x000044e1 jam 0x00000016 , 0x00000a99 + 00020783 0x000044e2 call 0x00007d86 + 00020784 0x000044e4 ifetch 0x00000002 , 0x00000006 + 00020785 0x000044e5 branch 0x00005159 + 00020786 0x000044e7 call 0x00007ea8 + 00020787 0x000044eb bpatchx 0x0000001d , 0x00004023 + 00020788 0x000044ec setarg 0x00000050 + 00020789 0x000044ed isub 0x00000002 , 0x0000003e + 00020790 0x000044ee branch 0x00005141 , 0x00000005 + 00020791 0x000044ef setarg 0x00000051 + 00020792 0x000044f0 isub 0x00000002 , 0x0000003e + 00020793 0x000044f1 branch 0x00005147 , 0x00000005 + 00020794 0x000044f2 setarg 0x00000053 + 00020795 0x000044f3 isub 0x00000002 , 0x0000003e + 00020796 0x000044f4 branch 0x00005153 , 0x00000005 + 00020797 0x000044f5 setarg 0x00000052 + 00020798 0x000044f6 isub 0x00000002 , 0x0000003e + 00020799 0x000044f7 branch 0x0000514d , 0x00000005 + 00020800 0x000044f8 branch 0x00005159 + 00020801 0x000044fa copy 0x0000000b , 0x0000003f + 00020802 0x000044fb store 0x00000002 , 0x00004248 + 00020803 0x000044fc fetch 0x00000001 , 0x00004250 + 00020804 0x000044fd set1 0x00000001 + 00020805 0x000044fe store 0x00000001 , 0x00004250 + 00020806 0x000044ff branch 0x00005158 + 00020807 0x00004501 copy 0x0000000b , 0x0000003f + 00020808 0x00004502 store 0x00000002 , 0x0000424a + 00020809 0x00004503 fetch 0x00000001 , 0x00004251 + 00020810 0x00004504 set1 0x00000001 + 00020811 0x00004505 store 0x00000001 , 0x00004251 + 00020812 0x00004506 branch 0x00005158 + 00020813 0x00004508 copy 0x0000000b , 0x0000003f + 00020814 0x00004509 store 0x00000002 , 0x0000424c + 00020815 0x0000450a fetch 0x00000001 , 0x00004252 + 00020816 0x0000450b set1 0x00000001 + 00020817 0x0000450c store 0x00000001 , 0x00004252 + 00020818 0x0000450d branch 0x00005158 + 00020819 0x0000450f copy 0x0000000b , 0x0000003f + 00020820 0x00004510 store 0x00000002 , 0x0000424e + 00020821 0x00004511 fetch 0x00000001 , 0x00004253 + 00020822 0x00004512 set1 0x00000001 + 00020823 0x00004513 store 0x00000001 , 0x00004253 + 00020824 0x00004517 call 0x00007ead + 00020825 0x00004519 copy 0x00000013 , 0x0000003f + 00020826 0x0000451a isub 0x00000011 , 0x00000013 + 00020827 0x0000451b rtn + 00020828 0x0000451e ifetch 0x00000001 , 0x00000006 + 00020829 0x0000451f copy 0x0000003f , 0x00000007 + 00020830 0x00004520 ifetch 0x00000002 , 0x00000006 + 00020831 0x00004521 copy 0x0000003f , 0x00000011 + 00020832 0x00004522 copy 0x00000013 , 0x0000003f + 00020833 0x00004523 isub 0x00000011 , 0x00000013 + 00020834 0x00004524 ifetch 0x00000002 , 0x00000006 + 00020835 0x00004525 copy 0x0000003f , 0x0000000b + 00020836 0x00004526 ifetch 0x00000002 , 0x00000006 + 00020837 0x00004527 ifetch 0x00000002 , 0x00000006 + 00020838 0x00004528 nbranch 0x00005188 , 0x00000034 + 00020839 0x00004529 call 0x00007ea8 + 00020840 0x0000452d copy 0x0000000b , 0x00000002 + 00020841 0x0000452e bpatchx 0x0000001e , 0x00004023 + 00020842 0x0000452f setarg 0x00000050 + 00020843 0x00004530 isub 0x00000002 , 0x0000003e + 00020844 0x00004531 branch 0x00005176 , 0x00000005 + 00020845 0x00004532 setarg 0x00000051 + 00020846 0x00004533 isub 0x00000002 , 0x0000003e + 00020847 0x00004534 branch 0x0000517a , 0x00000005 + 00020848 0x00004535 setarg 0x00000052 + 00020849 0x00004536 isub 0x00000002 , 0x0000003e + 00020850 0x00004537 branch 0x0000517e , 0x00000005 + 00020851 0x00004538 setarg 0x00000053 + 00020852 0x00004539 isub 0x00000002 , 0x0000003e + 00020853 0x0000453a branch 0x00005182 , 0x00000005 + 00020854 0x0000453c fetch 0x00000001 , 0x00004250 + 00020855 0x0000453d set1 0x00000005 + 00020856 0x0000453e store 0x00000001 , 0x00004250 + 00020857 0x0000453f rtn + 00020858 0x00004541 fetch 0x00000001 , 0x00004251 + 00020859 0x00004542 set1 0x00000005 + 00020860 0x00004543 store 0x00000001 , 0x00004251 + 00020861 0x00004544 rtn + 00020862 0x00004546 fetch 0x00000001 , 0x00004252 + 00020863 0x00004547 set1 0x00000005 + 00020864 0x00004548 store 0x00000001 , 0x00004252 + 00020865 0x00004549 rtn + 00020866 0x0000454b fetch 0x00000001 , 0x00004253 + 00020867 0x0000454c set1 0x00000005 + 00020868 0x0000454d store 0x00000001 , 0x00004253 + 00020869 0x0000454e jam 0x00000006 , 0x00000a99 + 00020870 0x0000454f branch 0x00007d86 + 00020871 0x00004553 call 0x00007ead + 00020872 0x00004555 increase 0xfffffffa , 0x00000011 + 00020873 0x00004557 branch 0x0000518d , 0x00000005 + 00020874 0x00004558 increase 0x00000001 , 0x00000006 + 00020875 0x00004559 increase 0xffffffff , 0x00000011 + 00020876 0x0000455a branch 0x00005189 + 00020877 0x0000455c rtn + 00020878 0x0000455e ifetch 0x00000001 , 0x00000006 + 00020879 0x0000455f copy 0x0000003f , 0x00000007 + 00020880 0x00004560 ifetch 0x00000002 , 0x00000006 + 00020881 0x00004561 copy 0x0000003f , 0x00000011 + 00020882 0x00004562 copy 0x00000013 , 0x0000003f + 00020883 0x00004563 isub 0x00000011 , 0x00000013 + 00020884 0x00004564 ifetch 0x00000002 , 0x00000006 + 00020885 0x00004565 increase 0x00000002 , 0x00000006 + 00020886 0x00004566 copy 0x0000003f , 0x00000002 + 00020887 0x00004567 setarg 0x00000005 + 00020888 0x00004568 istore 0x00000001 , 0x00000005 + 00020889 0x00004569 copy 0x00000007 , 0x0000003f + 00020890 0x0000456a istore 0x00000001 , 0x00000005 + 00020891 0x0000456b increase 0x00000002 , 0x00000011 + 00020892 0x0000456c copy 0x00000011 , 0x0000003f + 00020893 0x0000456d istore 0x00000002 , 0x00000005 + 00020894 0x0000456e call 0x00007ea8 + 00020895 0x0000456f bpatchx 0x0000001f , 0x00004023 + 00020896 0x00004570 setarg 0x00000050 + 00020897 0x00004571 isub 0x00000002 , 0x0000003e + 00020898 0x00004572 branch 0x000051ad , 0x00000005 + 00020899 0x00004573 setarg 0x00000051 + 00020900 0x00004574 isub 0x00000002 , 0x0000003e + 00020901 0x00004575 branch 0x000051be , 0x00000005 + 00020902 0x00004576 setarg 0x00000052 + 00020903 0x00004577 isub 0x00000002 , 0x0000003e + 00020904 0x00004578 branch 0x000051c4 , 0x00000005 + 00020905 0x00004579 setarg 0x00000053 + 00020906 0x0000457a isub 0x00000002 , 0x0000003e + 00020907 0x0000457b branch 0x000051ca , 0x00000005 + 00020908 0x0000457c branch 0x000051cf + 00020909 0x0000457e fetch 0x00000001 , 0x00004250 + 00020910 0x0000457f set1 0x00000004 , 0x0000003f + 00020911 0x00004580 set1 0x00000003 , 0x0000003f + 00020912 0x00004581 store 0x00000001 , 0x00004250 + 00020913 0x00004582 bbit1 0x00000002 , 0x000051bb + 00020914 0x00004583 fetcht 0x00000001 , 0x0000027f + 00020915 0x00004584 set1 0x00000006 , 0x00000002 + 00020916 0x00004585 storet 0x00000001 , 0x0000027f + 00020917 0x00004586 copy 0x00000007 , 0x0000003f + 00020918 0x00004587 increase 0x00000001 , 0x0000003f + 00020919 0x00004588 store 0x00000001 , 0x00000281 + 00020920 0x00004589 fetch 0x00000001 , 0x00004250 + 00020921 0x0000458a set1 0x00000002 , 0x0000003f + 00020922 0x0000458b store 0x00000001 , 0x00004250 + 00020923 0x0000458d fetch 0x00000002 , 0x00004248 + 00020924 0x0000458e store 0x00000002 , 0x00000282 + 00020925 0x0000458f branch 0x000051cf + 00020926 0x00004591 fetch 0x00000001 , 0x00004251 + 00020927 0x00004592 set1 0x00000004 , 0x0000003f + 00020928 0x00004593 set1 0x00000003 , 0x0000003f + 00020929 0x00004594 store 0x00000001 , 0x00004251 + 00020930 0x00004595 fetch 0x00000002 , 0x0000424a + 00020931 0x00004596 branch 0x000051cf + 00020932 0x00004598 fetch 0x00000001 , 0x00004252 + 00020933 0x00004599 set1 0x00000004 , 0x0000003f + 00020934 0x0000459a set1 0x00000003 , 0x0000003f + 00020935 0x0000459b store 0x00000001 , 0x00004252 + 00020936 0x0000459c fetch 0x00000002 , 0x0000424c + 00020937 0x0000459d branch 0x000051cf + 00020938 0x0000459f fetch 0x00000001 , 0x00004253 + 00020939 0x000045a0 set1 0x00000004 , 0x0000003f + 00020940 0x000045a1 set1 0x00000003 , 0x0000003f + 00020941 0x000045a2 store 0x00000001 , 0x00004253 + 00020942 0x000045a3 fetch 0x00000002 , 0x0000424e + 00020943 0x000045a7 copy 0x0000003f , 0x0000000b + 00020944 0x000045a8 call 0x00007ead + 00020945 0x000045aa copy 0x0000000b , 0x0000003f + 00020946 0x000045ac istore 0x00000002 , 0x00000005 + 00020947 0x000045ad force 0x00000000 , 0x0000003f + 00020948 0x000045ae istore 0x00000002 , 0x00000005 + 00020949 0x000045af force 0x00000000 , 0x0000003f + 00020950 0x000045b0 istore 0x00000002 , 0x00000005 + 00020951 0x000045b1 force 0x0000000a , 0x0000003f + 00020952 0x000045b2 iadd 0x00000012 , 0x00000012 + 00020953 0x000045b3 increase 0xfffffffa , 0x00000011 + 00020954 0x000045b5 branch 0x000051e0 , 0x00000005 + 00020955 0x000045b6 ifetch 0x00000001 , 0x00000006 + 00020956 0x000045b7 istore 0x00000001 , 0x00000005 + 00020957 0x000045b8 increase 0x00000001 , 0x00000012 + 00020958 0x000045b9 increase 0xffffffff , 0x00000011 + 00020959 0x000045ba branch 0x000051da + 00020960 0x000045bc rtn + 00020961 0x000045be ifetch 0x00000001 , 0x00000006 + 00020962 0x000045bf copy 0x0000003f , 0x00000007 + 00020963 0x000045c0 ifetch 0x00000002 , 0x00000006 + 00020964 0x000045c1 copy 0x0000003f , 0x00000011 + 00020965 0x000045c2 copy 0x00000013 , 0x0000003f + 00020966 0x000045c3 isub 0x00000011 , 0x00000013 + 00020967 0x000045c5 ifetch 0x00000002 , 0x00000006 + 00020968 0x000045c6 copy 0x0000003f , 0x00000011 + 00020969 0x000045c7 ifetch 0x00000002 , 0x00000006 + 00020970 0x000045c8 copy 0x0000003f , 0x0000000b + 00020971 0x000045c9 call 0x00007ea8 + 00020972 0x000045ca bpatchx 0x00000020 , 0x00004024 + 00020973 0x000045cb setarg 0x00000050 + 00020974 0x000045cc copy 0x00000011 , 0x00000002 + 00020975 0x000045cd isub 0x00000002 , 0x0000003e + 00020976 0x000045ce branch 0x000051fa , 0x00000005 + 00020977 0x000045cf setarg 0x00000052 + 00020978 0x000045d0 copy 0x00000011 , 0x00000002 + 00020979 0x000045d1 isub 0x00000002 , 0x0000003e + 00020980 0x000045d2 branch 0x000051ff , 0x00000005 + 00020981 0x000045d3 setarg 0x00000053 + 00020982 0x000045d4 copy 0x00000011 , 0x00000002 + 00020983 0x000045d5 isub 0x00000002 , 0x0000003e + 00020984 0x000045d6 branch 0x00005201 , 0x00000005 + 00020985 0x000045d7 branch 0x00005203 + 00020986 0x000045d9 setarg 0x00000000 + 00020987 0x000045da store 0x00000002 , 0x00000275 + 00020988 0x000045db store 0x00000002 , 0x00004248 + 00020989 0x000045dc store 0x00000001 , 0x00004250 + 00020990 0x000045dd branch 0x00005205 + 00020991 0x000045df call 0x00005079 + 00020992 0x000045e0 branch 0x00005205 + 00020993 0x000045e2 call 0x0000507f + 00020994 0x000045e8 branch 0x00005205 + 00020995 0x000045ea setarg 0x00000000 + 00020996 0x000045eb store 0x00000002 , 0x0000027b + 00020997 0x000045ed call 0x00007ead + 00020998 0x000045ee setarg 0x00000007 + 00020999 0x000045ef istore 0x00000001 , 0x00000005 + 00021000 0x000045f0 copy 0x00000007 , 0x0000003f + 00021001 0x000045f1 istore 0x00000001 , 0x00000005 + 00021002 0x000045f2 setarg 0x00000004 + 00021003 0x000045f3 istore 0x00000002 , 0x00000005 + 00021004 0x000045f4 copy 0x00000011 , 0x0000003f + 00021005 0x000045f5 istore 0x00000002 , 0x00000005 + 00021006 0x000045f6 copy 0x0000000b , 0x0000003f + 00021007 0x000045f7 istore 0x00000002 , 0x00000005 + 00021008 0x000045f8 force 0x00000008 , 0x0000003f + 00021009 0x000045f9 iadd 0x00000012 , 0x00000012 + 00021010 0x000045fa rtn + 00021011 0x000045fd ifetch 0x00000001 , 0x00000006 + 00021012 0x000045fe copy 0x0000003f , 0x00000007 + 00021013 0x000045ff ifetch 0x00000002 , 0x00000006 + 00021014 0x00004600 copy 0x0000003f , 0x00000011 + 00021015 0x00004601 ifetch 0x00000002 , 0x00000006 + 00021016 0x00004602 copy 0x0000003f , 0x0000000b + 00021017 0x00004603 ifetch 0x00000002 , 0x00000006 + 00021018 0x00004604 copy 0x0000003f , 0x00000002 + 00021019 0x00004605 call 0x00007ea8 + 00021020 0x00004606 bpatchx 0x00000021 , 0x00004024 + 00021021 0x00004607 fetch 0x00000001 , 0x00004255 + 00021022 0x00004608 icompare 0x000000ff , 0x00000007 + 00021023 0x00004609 nbranch 0x0000522a , 0x00000001 + 00021024 0x0000460a setarg 0x00000050 + 00021025 0x0000460b isub 0x00000002 , 0x0000003e + 00021026 0x0000460c branch 0x00005227 , 0x00000005 + 00021027 0x0000460d setarg 0x00000051 + 00021028 0x0000460e isub 0x00000002 , 0x0000003e + 00021029 0x0000460f branch 0x0000522a , 0x00000005 + 00021030 0x00004610 branch 0x0000522a + 00021031 0x00004612 jam 0x00000000 , 0x00004248 + 00021032 0x00004613 jam 0x00000000 , 0x00004250 + 00021033 0x00004614 branch 0x0000522a + 00021034 0x00004619 call 0x00007ead + 00021035 0x0000461a copy 0x00000013 , 0x0000003f + 00021036 0x0000461b isub 0x00000011 , 0x00000013 + 00021037 0x0000461c rtn + 00021038 0x0000461f setarg 0x00000001 + 00021039 0x00004620 istore 0x00000001 , 0x00000005 + 00021040 0x00004621 ifetch 0x00000001 , 0x00000006 + 00021041 0x00004622 istore 0x00000001 , 0x00000005 + 00021042 0x00004623 setarg 0x00000002 + 00021043 0x00004624 istore 0x00000002 , 0x00000005 + 00021044 0x00004625 setarg 0x00000000 + 00021045 0x00004626 istore 0x00000002 , 0x00000005 + 00021046 0x00004627 setarg 0x00000006 + 00021047 0x00004628 iadd 0x00000012 , 0x00000012 + 00021048 0x00004629 force 0x00000004 , 0x00000013 + 00021049 0x0000462a rtn + 00021050 0x0000462e fetch 0x00000001 , 0x00004255 + 00021051 0x0000462f increase 0x00000001 , 0x0000003f + 00021052 0x00004630 bne 0x00000000 , 0x0000523e + 00021053 0x00004631 increase 0x00000001 , 0x0000003f + 00021054 0x00004633 store 0x00000001 , 0x00004255 + 00021055 0x00004634 rtn + 00021056 0x0000463f bpatchx 0x00000022 , 0x00004024 + 00021057 0x00004640 arg 0x00000000 , 0x00000012 + 00021058 0x00004641 call 0x0000526e + 00021059 0x00004642 nbranch 0x00002a8c , 0x00000034 + 00021060 0x00004643 call 0x0000527e + 00021061 0x00004644 arg 0x00001800 , 0x00000012 + 00021062 0x00004645 arg 0x00000000 , 0x00000007 + 00021063 0x00004647 fetcht 0x00000001 , 0x00004256 + 00021064 0x00004648 qisolate1 0x00000002 + 00021065 0x00004649 branch 0x0000524f , 0x00000001 + 00021066 0x0000464a call 0x000052a0 + 00021067 0x0000464b sub 0x0000000b , 0x00000000 , 0x0000003e + 00021068 0x0000464c branch 0x0000524f , 0x00000002 + 00021069 0x0000464d call 0x00005288 + 00021070 0x0000464e branch 0x00005255 + 00021071 0x00004650 increase 0x00000080 , 0x00000012 + 00021072 0x00004651 increase 0x00000001 , 0x00000007 + 00021073 0x00004652 setarg 0x00000008 + 00021074 0x00004653 isub 0x00000007 , 0x0000003e + 00021075 0x00004654 branch 0x00005247 , 0x00000002 + 00021076 0x00004655 arg 0x00000000 , 0x00000012 + 00021077 0x00004657 copy 0x00000012 , 0x0000003f + 00021078 0x00004658 branch 0x00002a8c , 0x00000034 + 00021079 0x00004659 rtn + 00021080 0x00004662 bpatchx 0x00000023 , 0x00004024 + 00021081 0x00004663 call 0x00005277 + 00021082 0x00004664 increase 0x00000001 , 0x00000006 + 00021083 0x00004665 ifetch 0x00000002 , 0x00000006 + 00021084 0x00004666 rtn + 00021085 0x0000466d bpatchx 0x00000024 , 0x00004024 + 00021086 0x0000466e call 0x00005277 + 00021087 0x0000466f copy 0x00000006 , 0x00000005 + 00021088 0x00004670 copy 0x00000006 , 0x00000002 + 00021089 0x00004671 setarg 0x00000000 + 00021090 0x00004672 istore 0x00000003 , 0x00000005 + 00021091 0x00004673 rtn + 00021092 0x00004679 bpatchx 0x00000025 , 0x00004024 + 00021093 0x0000467a call 0x00005274 + 00021094 0x0000467b branch 0x00002a8c , 0x00000034 + 00021095 0x0000467c fetch 0x00000003 , 0x0000425d + 00021096 0x0000467d store 0x00000003 , 0x00004260 + 00021097 0x0000467e fetch 0x00000003 , 0x0000425a + 00021098 0x0000467f store 0x00000003 , 0x0000425d + 00021099 0x00004680 fetch 0x00000003 , 0x00004257 + 00021100 0x00004681 store 0x00000003 , 0x0000425a + 00021101 0x00004682 rtn + 00021102 0x00004689 bpatchx 0x00000026 , 0x00004024 + 00021103 0x0000468a fetch 0x00000003 , 0x00004257 + 00021104 0x0000468b rtn + 00021105 0x00004692 bpatchx 0x00000027 , 0x00004024 + 00021106 0x00004693 fetch 0x00000003 , 0x0000425a + 00021107 0x00004694 rtn + 00021108 0x0000469b bpatchx 0x00000028 , 0x00004025 + 00021109 0x0000469c fetch 0x00000003 , 0x00004260 + 00021110 0x0000469d rtn + 00021111 0x000046a3 call 0x00005274 + 00021112 0x000046a4 branch 0x00002a8c , 0x00000034 + 00021113 0x000046a5 arg 0x00004257 , 0x00000006 + 00021114 0x000046a7 ifetch 0x00000003 , 0x00000006 + 00021115 0x000046a8 branch 0x0000527a , 0x00000034 + 00021116 0x000046a9 increase 0xfffffffd , 0x00000006 + 00021117 0x000046aa rtn + 00021118 0x000046b2 bpatchx 0x00000029 , 0x00004025 + 00021119 0x000046b3 arg 0x00000004 , 0x00000039 + 00021120 0x000046b4 arg 0x00004257 , 0x00000006 + 00021121 0x000046b5 arg 0x00000000 , 0x00000002 + 00021122 0x000046b7 ifetch 0x00000003 , 0x00000006 + 00021123 0x000046b8 and 0x0000003f , 0x000000ff , 0x0000003f + 00021124 0x000046b9 ior 0x00000002 , 0x00000002 + 00021125 0x000046ba loop 0x00005282 + 00021126 0x000046bb storet 0x00000001 , 0x00004256 + 00021127 0x000046bc rtn + 00021128 0x000046c5 bpatchx 0x0000002a , 0x00004025 + 00021129 0x000046c6 call 0x0000526e + 00021130 0x000046c7 nbranch 0x00002a8c , 0x00000034 + 00021131 0x000046c8 call 0x00005274 + 00021132 0x000046c9 branch 0x00005295 , 0x00000034 + 00021133 0x000046ca fetch 0x00000003 , 0x0000425a + 00021134 0x000046cb store 0x00000003 , 0x00004257 + 00021135 0x000046cc ifetch 0x00000003 , 0x00000006 + 00021136 0x000046cd istore 0x00000003 , 0x00000005 + 00021137 0x000046ce ifetch 0x00000003 , 0x00000006 + 00021138 0x000046cf istore 0x00000003 , 0x00000005 + 00021139 0x000046d0 setarg 0x00000000 + 00021140 0x000046d1 istore 0x00000003 , 0x00000005 + 00021141 0x000046d3 arg 0x00000000 , 0x00000002 + 00021142 0x000046d4 copy 0x0000000b , 0x0000003f + 00021143 0x000046d5 iadd 0x00000007 , 0x0000003f + 00021144 0x000046d7 qset1 0x00000002 + 00021145 0x000046d8 increase 0x00000001 , 0x00000007 + 00021146 0x000046d9 isub 0x00000007 , 0x0000003e + 00021147 0x000046da nbranch 0x00005298 , 0x00000005 + 00021148 0x000046dc lshift8 0x00000012 , 0x0000003f + 00021149 0x000046dd ior 0x00000002 , 0x0000003f + 00021150 0x000046de store 0x00000003 , 0x00004260 + 00021151 0x000046df rtn + 00021152 0x000046ea bpatchx 0x0000002b , 0x00004025 + 00021153 0x000046eb call 0x0000527e + 00021154 0x000046ec copy 0x00000007 , 0x00000013 + 00021155 0x000046ed arg 0x00000000 , 0x00000002 + 00021156 0x000046ee arg 0x00000000 , 0x0000000b + 00021157 0x000046f1 copy 0x00000007 , 0x0000003f + 00021158 0x000046f2 beq 0x00000008 , 0x000052b0 + 00021159 0x000046f3 fetch 0x00000001 , 0x00004256 + 00021160 0x000046f4 qisolate1 0x0000003f + 00021161 0x000046f5 branch 0x000052b0 , 0x00000001 + 00021162 0x000046f6 increase 0x00000080 , 0x00000002 + 00021163 0x000046f7 increase 0x00000001 , 0x00000007 + 00021164 0x000046f8 copy 0x00000011 , 0x0000003f + 00021165 0x000046f9 isub 0x00000002 , 0x0000003e + 00021166 0x000046fa branch 0x000052b0 , 0x00000005 + 00021167 0x000046fb branch 0x000052a5 , 0x00000002 + 00021168 0x000046fd copy 0x00000002 , 0x0000003f + 00021169 0x000046fe isub 0x00000011 , 0x0000003e + 00021170 0x000046ff nbranch 0x000052b6 , 0x00000002 + 00021171 0x00004700 copy 0x00000007 , 0x0000003f + 00021172 0x00004701 copy 0x00000013 , 0x00000002 + 00021173 0x00004702 isub 0x00000002 , 0x0000000b + 00021174 0x00004704 copy 0x00000013 , 0x00000007 + 00021175 0x00004705 rtn + 00021176 0x00004709 bpatchx 0x0000002c , 0x00004025 + 00021177 0x0000470a arg 0x0000007f , 0x00000011 + 00021178 0x0000470b call 0x00005240 + 00021179 0x0000470c store 0x00000002 , 0x0000026b + 00021180 0x0000470d increase 0x00000004 , 0x0000003f + 00021181 0x0000470e store 0x00000002 , 0x0000026d + 00021182 0x0000470f setarg 0x00000000 + 00021183 0x00004710 store 0x00000002 , 0x0000026f + 00021184 0x00004711 rtn + 00021185 0x00004714 fetch 0x00000002 , 0x0000026b + 00021186 0x00004715 branch 0x000052e2 + 00021187 0x00004718 fetch 0x00000002 , 0x0000026d + 00021188 0x00004719 branch 0x000052e2 + 00021189 0x0000471d bpatchx 0x0000002d , 0x00004025 + 00021190 0x0000471e arg 0x000000fa , 0x00000011 + 00021191 0x0000471f call 0x00005240 + 00021192 0x00004720 store 0x00000002 , 0x00000271 + 00021193 0x00004721 increase 0x00000004 , 0x0000003f + 00021194 0x00004722 store 0x00000002 , 0x00000273 + 00021195 0x00004723 setarg 0x00000000 + 00021196 0x00004724 store 0x00000002 , 0x00000275 + 00021197 0x00004725 rtn + 00021198 0x00004728 fetch 0x00000002 , 0x00000271 + 00021199 0x00004729 branch 0x000052e2 + 00021200 0x0000472c fetch 0x00000002 , 0x00000273 + 00021201 0x0000472d branch 0x000052e2 + 00021202 0x00004731 bpatchx 0x0000002e , 0x00004025 + 00021203 0x00004732 call 0x00007e7c + 00021204 0x00004733 jam 0x00000001 , 0x00000284 + 00021205 0x00004734 call 0x0000526e + 00021206 0x00004735 nrtn 0x00000034 + 00021207 0x00004736 arg 0x0000007f , 0x00000011 + 00021208 0x00004737 call 0x00005240 + 00021209 0x00004738 store 0x00000002 , 0x00000277 + 00021210 0x00004739 increase 0x00000004 , 0x0000003f + 00021211 0x0000473a store 0x00000002 , 0x00000279 + 00021212 0x0000473b setarg 0x00000000 + 00021213 0x0000473c store 0x00000002 , 0x0000027b + 00021214 0x0000473d jam 0x00000000 , 0x00000284 + 00021215 0x0000473e branch 0x00007e8c + 00021216 0x00004741 fetch 0x00000002 , 0x00000277 + 00021217 0x00004742 branch 0x000052e2 + 00021218 0x00004745 branch 0x00002a8c , 0x00000034 + 00021219 0x00004746 copy 0x0000003f , 0x00000005 + 00021220 0x00004747 rtn + 00021221 0x0000474b bpatchx 0x0000002f , 0x00004025 + 00021222 0x0000474c arg 0x00000000 , 0x00000012 + 00021223 0x0000474d arg 0x00004257 , 0x00000011 + 00021224 0x0000474e increase 0xfffffffe , 0x00000011 + 00021225 0x00004750 increase 0x00000002 , 0x00000011 + 00021226 0x00004751 setarg 0x00004263 + 00021227 0x00004752 isub 0x00000011 , 0x0000003e + 00021228 0x00004753 branch 0x000052f5 , 0x00000005 + 00021229 0x00004754 ifetch 0x00000001 , 0x00000011 + 00021230 0x00004755 increase 0x00000001 , 0x00000011 + 00021231 0x00004756 branch 0x000052e9 , 0x00000034 + 00021232 0x00004757 ifetcht 0x00000002 , 0x00000011 + 00021233 0x00004758 ifetch 0x00000002 , 0x00000002 + 00021234 0x00004759 iadd 0x00000012 , 0x00000012 + 00021235 0x0000475a increase 0x00000004 , 0x00000012 + 00021236 0x0000475b branch 0x000052e9 + 00021237 0x0000475d copy 0x00000012 , 0x0000003f + 00021238 0x0000475e rtn + 00021239 0x00004762 arg 0x0000000c , 0x00000007 + 00021240 0x00004763 branch 0x00002c32 + 00021241 0x00004766 arg 0x0000000c , 0x00000007 + 00021242 0x00004767 branch 0x00002c36 + 00021243 0x0000476a bpatchx 0x00000030 , 0x00004026 + 00021244 0x0000476b call 0x0000527e + 00021245 0x0000476c fetch 0x00000001 , 0x00004256 + 00021246 0x0000476d rtn 0x00000034 + 00021247 0x0000476e call 0x000052e5 + 00021248 0x0000476f arg 0x00000100 , 0x00000002 + 00021249 0x00004770 isub 0x00000002 , 0x0000003e + 00021250 0x00004771 branch 0x000052f7 , 0x00000002 + 00021251 0x00004772 call 0x000052f9 + 00021252 0x00004773 arg 0x00004263 , 0x00000005 + 00021253 0x00004774 arg 0x00004257 , 0x00000011 + 00021254 0x00004776 setarg 0x00004263 + 00021255 0x00004777 isub 0x00000011 , 0x0000003e + 00021256 0x00004778 rtn 0x00000005 + 00021257 0x00004779 ifetch 0x00000001 , 0x00000011 + 00021258 0x0000477a increase 0x00000001 , 0x00000011 + 00021259 0x0000477b nbranch 0x0000530f , 0x00000034 + 00021260 0x0000477c istore 0x00000002 , 0x00000005 + 00021261 0x0000477d increase 0x00000002 , 0x00000011 + 00021262 0x0000477e branch 0x00005306 + 00021263 0x00004780 ifetch 0x00000002 , 0x00000011 + 00021264 0x00004781 increase 0x00000002 , 0x00000011 + 00021265 0x00004782 copy 0x0000003f , 0x00000006 + 00021266 0x00004783 ifetch 0x00000002 , 0x00000006 + 00021267 0x00004784 istore 0x00000002 , 0x00000005 + 00021268 0x00004785 copy 0x0000003f , 0x00000039 + 00021269 0x00004786 increase 0x00000002 , 0x00000039 + 00021270 0x00004787 call 0x00007f01 + 00021271 0x00004788 branch 0x00005306 + 00021272 0x0000478b bpatchx 0x00000031 , 0x00004026 + 00021273 0x0000478c call 0x0000527e + 00021274 0x0000478d fetch 0x00000001 , 0x00004256 + 00021275 0x0000478e rtn 0x00000034 + 00021276 0x0000478f arg 0x00004258 , 0x00000011 + 00021277 0x00004790 increase 0xfffffffd , 0x00000011 + 00021278 0x00004791 arg 0x00004263 , 0x00000006 + 00021279 0x00004793 increase 0x00000003 , 0x00000011 + 00021280 0x00004794 setarg 0x00004264 + 00021281 0x00004795 isub 0x00000011 , 0x0000003e + 00021282 0x00004796 rtn 0x00000005 + 00021283 0x00004797 ifetch 0x00000002 , 0x00000006 + 00021284 0x00004798 branch 0x0000531f , 0x00000034 + 00021285 0x00004799 increase 0x00000004 , 0x0000003f + 00021286 0x0000479a copy 0x0000003f , 0x00000039 + 00021287 0x0000479b copy 0x00000006 , 0x00000012 + 00021288 0x0000479c ifetch 0x00000002 , 0x00000011 + 00021289 0x0000479d copy 0x0000003f , 0x00000005 + 00021290 0x0000479e copy 0x00000012 , 0x00000006 + 00021291 0x0000479f increase 0xfffffffe , 0x00000006 + 00021292 0x000047a0 call 0x00007f01 + 00021293 0x000047a1 branch 0x0000531f + 00021294 0x000047ac bpatchx 0x00000032 , 0x00004026 + 00021295 0x000047ad disable 0x0000002b + 00021296 0x000047ae jam 0x00000001 , 0x00000455 + 00021297 0x000047af jam 0x00000003 , 0x0000043f + 00021298 0x000047b0 jam 0x00000001 , 0x00000456 + 00021299 0x000047b1 setarg 0xffffffff + 00021300 0x000047b2 store 0x00000002 , 0x00000459 + 00021301 0x000047b3 force 0x00000000 , 0x0000003f + 00021302 0x000047b4 store 0x00000001 , 0x00000457 + 00021303 0x000047b5 store 0x00000001 , 0x00000462 + 00021304 0x000047b6 store 0x00000003 , 0x00004169 + 00021305 0x000047b7 store 0x00000003 , 0x0000416c + 00021306 0x000047b8 store 0x00000005 , 0x00004403 + 00021307 0x000047b9 set1 0x00000027 , 0x0000003f + 00021308 0x000047ba store 0x00000005 , 0x00004408 + 00021309 0x000047bb jam 0x00000001 , 0x000043dc + 00021310 0x000047bc jam 0x00000000 , 0x000043dd + 00021311 0x000047bd branch 0x000056ed + 00021312 0x000047c0 bpatchx 0x00000033 , 0x00004026 + 00021313 0x000047c1 enable 0x00000029 + 00021314 0x000047c2 jam 0x00000003 , 0x00000440 + 00021315 0x000047c3 jam 0x00000001 , 0x00000478 + 00021316 0x000047c4 jam 0x00000001 , 0x0000445a + 00021317 0x000047c5 setarg 0x0000ffff + 00021318 0x000047c6 store 0x00000002 , 0x0000445c + 00021319 0x000047c7 force 0x00000000 , 0x0000003f + 00021320 0x000047c8 store 0x00000005 , 0x00004408 + 00021321 0x000047c9 set1 0x00000027 , 0x0000003f + 00021322 0x000047ca store 0x00000005 , 0x00004403 + 00021323 0x000047cb branch 0x0000532e + 00021324 0x000047cf bpatchx 0x00000034 , 0x00004026 + 00021325 0x000047d0 disable 0x00000029 + 00021326 0x000047d1 setarg 0x00000017 + 00021327 0x000047d2 store 0x00000002 , 0x000044a8 + 00021328 0x000047d3 jam 0x00000001 , 0x00000440 + 00021329 0x000047d4 jam 0x00000000 , 0x0000436e + 00021330 0x000047d5 jam 0x00000000 , 0x000000a0 + 00021331 0x000047d6 jam 0x00000000 , 0x000044c4 + 00021332 0x000047d7 jam 0x00000000 , 0x000044c5 + 00021333 0x000047d8 fetch 0x00000002 , 0x0000046d + 00021334 0x000047d9 store 0x00000002 , 0x000044ba + 00021335 0x000047da fetch 0x00000002 , 0x00000441 + 00021336 0x000047db mul32 0x0000003f , 0x00000005 , 0x0000003f + 00021337 0x000047dc rshift4 0x0000003f , 0x0000003f + 00021338 0x000047dd store 0x00000002 , 0x0000046d + 00021339 0x000047de branch 0x0000532e + 00021340 0x000047e5 call 0x000053c4 + 00021341 0x000047e6 call 0x000055e8 + 00021342 0x000047e7 call 0x000056f0 + 00021343 0x000047e8 branch 0x000053ce + 00021344 0x000047eb bpatchx 0x00000035 , 0x00004026 + 00021345 0x000047ec call 0x000053c4 + 00021346 0x000047ed call 0x000032f4 + 00021347 0x000047ee fetch 0x00000001 , 0x00000440 + 00021348 0x000047ef beq 0x00000003 , 0x00005366 + 00021349 0x000047f0 branch 0x0000537a + 00021350 0x000047f7 bpatchx 0x00000036 , 0x00004026 + 00021351 0x000047f8 enable 0x00000029 + 00021352 0x000047f9 call 0x000056e4 + 00021353 0x000047fa branch 0x00005377 , 0x00000002 + 00021354 0x000047fb call 0x00002c6c + 00021355 0x000047fc call 0x00005413 + 00021356 0x000047fd call 0x0000561e + 00021357 0x000047fe disable 0x0000002d + 00021358 0x000047ff call 0x000054bf + 00021359 0x00004800 nrtn 0x0000002d + 00021360 0x00004801 bpatchx 0x00000037 , 0x00004026 + 00021361 0x00004802 fetch 0x00000001 , 0x00000005 + 00021362 0x00004803 increase 0x00000001 , 0x0000003f + 00021363 0x00004804 store 0x00000001 , 0x00000005 + 00021364 0x00004805 call 0x000055aa + 00021365 0x00004806 disable 0x00000029 + 00021366 0x00004807 rtn + 00021367 0x0000480a call 0x000053a9 + 00021368 0x0000480b disable 0x00000029 + 00021369 0x0000480c rtn + 00021370 0x00004812 bpatchx 0x00000038 , 0x00004027 + 00021371 0x00004813 jam 0x00000000 , 0x0000450f + 00021372 0x00004814 call 0x00007aaf + 00021373 0x00004815 call 0x00005c18 + 00021374 0x00004816 disable 0x0000002e + 00021375 0x00004817 call 0x000056e4 + 00021376 0x00004818 branch 0x000053a9 , 0x00000002 + 00021377 0x00004819 call 0x00002c6c + 00021378 0x0000481a call 0x00005413 + 00021379 0x0000481b call 0x00005489 + 00021380 0x0000481c nbranch 0x0000539b , 0x00000018 + 00021381 0x0000481d call 0x000053b7 + 00021382 0x0000481e branch 0x00005388 , 0x0000002d + 00021383 0x0000481f branch 0x00005395 + 00021384 0x00004823 bpatchx 0x00000039 , 0x00004027 + 00021385 0x00004824 fetch 0x00000001 , 0x0000450f + 00021386 0x00004825 pincrease 0x00000001 + 00021387 0x00004826 store 0x00000001 , 0x0000450f + 00021388 0x00004827 beq 0x0000000c , 0x00005395 + 00021389 0x00004828 call 0x000055aa + 00021390 0x00004829 call 0x0000561e + 00021391 0x0000482a call 0x000054c7 + 00021392 0x0000482b call 0x0000567e + 00021393 0x0000482c fetch 0x00000002 , 0x000041fb + 00021394 0x0000482d call 0x00007f9c + 00021395 0x0000482e call 0x000053a0 + 00021396 0x0000482f branch 0x000053a4 , 0x00000028 + 00021397 0x00004831 bpatchx 0x0000003a , 0x00004027 + 00021398 0x00004832 call 0x00005be4 + 00021399 0x00004833 call 0x00005bdb + 00021400 0x00004834 call 0x00007d9c + 00021401 0x00004835 fetch 0x00000001 , 0x00000462 + 00021402 0x00004836 bbit1 0x00000003 , 0x000053a9 + 00021403 0x00004838 bpatchx 0x0000003b , 0x00004027 + 00021404 0x00004839 call 0x000057f4 + 00021405 0x0000483a call 0x0000559d + 00021406 0x0000483b call 0x00005575 + 00021407 0x0000483c branch 0x00002841 + 00021408 0x00004840 disable 0x00000028 + 00021409 0x00004841 bmark1 0x0000002a , 0x00007fe7 + 00021410 0x00004842 bmark1 0x00000029 , 0x00007fe7 + 00021411 0x00004843 rtn + 00021412 0x00004847 bpatchx 0x0000003c , 0x00004027 + 00021413 0x00004848 enable 0x0000002e + 00021414 0x00004849 call 0x000054c1 + 00021415 0x0000484a branch 0x00005388 , 0x0000002d + 00021416 0x0000484b branch 0x00005395 + 00021417 0x00004851 bpatchx 0x0000003d , 0x00004027 + 00021418 0x00004852 call 0x000053af + 00021419 0x00004853 call 0x000033b4 + 00021420 0x00004854 call 0x00007a77 + 00021421 0x00004855 jam 0x00000015 , 0x00000a99 + 00021422 0x00004856 branch 0x00007d86 + 00021423 0x00004859 setarg 0x00000000 + 00021424 0x0000485a store 0x00000009 , 0x000044ff + 00021425 0x0000485b jam 0x00000000 , 0x00000455 + 00021426 0x0000485c jam 0x00000000 , 0x00000440 + 00021427 0x0000485d jam 0x00000000 , 0x0000043f + 00021428 0x0000485e jam 0x00000000 , 0x000044c5 + 00021429 0x0000485f jam 0x00000000 , 0x000044c4 + 00021430 0x00004860 rtn + 00021431 0x00004863 bpatchx 0x0000003e , 0x00004027 + 00021432 0x00004864 fetch 0x00000001 , 0x00000005 + 00021433 0x00004865 increase 0x00000001 , 0x0000003f + 00021434 0x00004866 store 0x00000001 , 0x00000005 + 00021435 0x00004867 fetch 0x00000001 , 0x0000043f + 00021436 0x00004868 rtnbit1 0x00000003 + 00021437 0x00004869 set1 0x00000003 + 00021438 0x0000486a store 0x00000001 , 0x0000043f + 00021439 0x0000486b fetch 0x00000002 , 0x000044ba + 00021440 0x0000486c store 0x00000002 , 0x0000046d + 00021441 0x0000486d setarg 0x00000000 + 00021442 0x0000486e store 0x00000004 , 0x000044e5 + 00021443 0x0000486f rtn + 00021444 0x00004873 bpatchx 0x0000003f , 0x00004027 + 00021445 0x00004874 hjam 0x00000036 , 0x0000090f + 00021446 0x00004875 hjam 0x0000005f , 0x0000090b + 00021447 0x00004876 enable 0x00000036 + 00021448 0x00004877 hjam 0x00000007 , 0x00008914 + 00021449 0x00004878 call 0x00002c6c + 00021450 0x00004879 fetch 0x00000001 , 0x000041e0 + 00021451 0x0000487a rtn 0x00000034 + 00021452 0x0000487b hjam 0x000000b8 , 0x0000090a + 00021453 0x0000487c rtn + 00021454 0x0000487f bpatchx 0x00000040 , 0x00004028 + 00021455 0x00004880 hjam 0x0000002e , 0x0000090f + 00021456 0x00004881 hjam 0x000000ff , 0x0000090b + 00021457 0x00004882 disable 0x00000036 + 00021458 0x00004883 hjam 0x00000003 , 0x00008914 + 00021459 0x00004884 arg 0x00000000 , 0x0000001b + 00021460 0x00004885 rtn + 00021461 0x00004888 disable 0x00000009 + 00021462 0x00004889 disable 0x00000007 + 00021463 0x0000488a fetch 0x00000003 , 0x00000467 + 00021464 0x0000488b iforce 0x0000000f + 00021465 0x0000488c fetch 0x00000001 , 0x00000016 + 00021466 0x0000488d reverse 0x0000003f , 0x00000002 + 00021467 0x0000488e set1 0x00000001 , 0x00000002 + 00021468 0x0000488f rshift 0x00000002 , 0x0000000e + 00021469 0x00004890 rtn + 00021470 0x00004894 call 0x000053e6 + 00021471 0x00004895 call 0x0000291f + 00021472 0x00004896 setarg 0x00000500 + 00021473 0x00004897 call 0x00002a8f + 00021474 0x00004898 branch 0x00002924 + 00021475 0x0000489b branch 0x00002939 , 0x0000002d + 00021476 0x0000489d call 0x000053e6 + 00021477 0x0000489e branch 0x00002933 + 00021478 0x000048a0 bpatchx 0x00000041 , 0x00004028 + 00021479 0x000048a1 call 0x00002918 + 00021480 0x000048a2 fetch 0x00000001 , 0x0000048c + 00021481 0x000048a3 nbranch 0x000053f9 , 0x00000034 + 00021482 0x000048a4 fetch 0x00000001 , 0x00000016 + 00021483 0x000048a5 sub 0x0000003f , 0x00000024 , 0x0000003e + 00021484 0x000048a6 branch 0x000053f3 , 0x00000002 + 00021485 0x000048a7 force 0x00000000 , 0x00000002 + 00021486 0x000048a8 rtneq 0x00000025 + 00021487 0x000048a9 force 0x00000018 , 0x00000002 + 00021488 0x000048aa rtneq 0x00000026 + 00021489 0x000048ab force 0x0000004e , 0x00000002 + 00021490 0x000048ac rtn + 00021491 0x000048af sub 0x0000003f , 0x0000000a , 0x0000003e + 00021492 0x000048b0 branch 0x000053f6 , 0x00000002 + 00021493 0x000048b1 increase 0x00000001 , 0x0000003f + 00021494 0x000048b4 lshift 0x0000003f , 0x0000003f + 00021495 0x000048b5 add 0x0000003f , 0x00000002 , 0x00000002 + 00021496 0x000048b6 rtn + 00021497 0x000048b9 fetch 0x00000001 , 0x00000016 + 00021498 0x000048ba lshift 0x0000003f , 0x00000002 + 00021499 0x000048bb rtn + 00021500 0x000048be arg 0x000001f4 , 0x00000002 + 00021501 0x000048bf rtn 0x00000034 + 00021502 0x000048c0 arg 0x000000fa , 0x00000002 + 00021503 0x000048c1 rtneq 0x00000001 + 00021504 0x000048c2 arg 0x00000096 , 0x00000002 + 00021505 0x000048c3 rtneq 0x00000002 + 00021506 0x000048c4 arg 0x00000064 , 0x00000002 + 00021507 0x000048c5 rtneq 0x00000003 + 00021508 0x000048c6 arg 0x0000004b , 0x00000002 + 00021509 0x000048c7 rtneq 0x00000004 + 00021510 0x000048c8 arg 0x00000032 , 0x00000002 + 00021511 0x000048c9 rtneq 0x00000005 + 00021512 0x000048ca arg 0x00000028 , 0x00000002 + 00021513 0x000048cb rtneq 0x00000006 + 00021514 0x000048cc arg 0x00000014 , 0x00000002 + 00021515 0x000048cd rtn + 00021516 0x000048d2 setarg 0x008e89be + 00021517 0x000048d3 lshift8 0x0000003f , 0x0000003f + 00021518 0x000048d4 or_into 0x000000d6 , 0x0000003f + 00021519 0x000048d5 iforce 0x00000009 + 00021520 0x000048d6 setarg 0x00555555 + 00021521 0x000048d7 store 0x00000003 , 0x00000467 + 00021522 0x000048d8 rtn + 00021523 0x000048db bpatchx 0x00000042 , 0x00004028 + 00021524 0x000048dc enable 0x00000010 + 00021525 0x000048dd fetch 0x00000004 , 0x00000463 + 00021526 0x000048de iforce 0x00000009 + 00021527 0x000048df call 0x00005466 + 00021528 0x000048e0 setarg 0x00000200 + 00021529 0x000048e1 branch 0x0000541c , 0x00000029 + 00021530 0x000048e2 fetch 0x00000002 , 0x0000044d + 00021531 0x000048e3 rshift 0x0000003f , 0x0000003f + 00021532 0x000048e5 arg 0x00000500 , 0x00000002 + 00021533 0x000048e6 iadd 0x00000002 , 0x0000003f + 00021534 0x000048e7 call 0x00002a24 + 00021535 0x000048e8 deposit 0x0000001a + 00021536 0x000048e9 store 0x00000006 , 0x00000491 + 00021537 0x000048ea rtn + 00021538 0x000048ed bpatchx 0x00000043 , 0x00004028 + 00021539 0x000048ee fetch 0x00000001 , 0x00000016 + 00021540 0x000048ef beq 0x00000025 , 0x00005428 + 00021541 0x000048f0 beq 0x00000026 , 0x0000542e + 00021542 0x000048f1 beq 0x00000027 , 0x00005434 + 00021543 0x000048f2 branch 0x00005434 + 00021544 0x000048f5 fetcht 0x00000001 , 0x0000448d + 00021545 0x000048f6 isolate1 0x00000001 , 0x00000002 + 00021546 0x000048f7 branch 0x0000543f , 0x00000001 + 00021547 0x000048f8 isolate1 0x00000002 , 0x00000002 + 00021548 0x000048f9 branch 0x00005444 , 0x00000001 + 00021549 0x000048fa branch 0x0000543a + 00021550 0x000048fe fetcht 0x00000001 , 0x0000448d + 00021551 0x000048ff isolate1 0x00000002 , 0x00000002 + 00021552 0x00004900 branch 0x00005444 , 0x00000001 + 00021553 0x00004901 isolate1 0x00000000 , 0x00000002 + 00021554 0x00004902 branch 0x0000543a , 0x00000001 + 00021555 0x00004903 branch 0x0000543f + 00021556 0x00004907 fetcht 0x00000001 , 0x0000448d + 00021557 0x00004908 isolate1 0x00000000 , 0x00000002 + 00021558 0x00004909 branch 0x0000543a , 0x00000001 + 00021559 0x0000490a isolate1 0x00000001 , 0x00000002 + 00021560 0x0000490b branch 0x0000543f , 0x00000001 + 00021561 0x0000490c branch 0x00005444 + 00021562 0x00004911 jam 0x00000025 , 0x00000016 + 00021563 0x00004912 fetch 0x00000001 , 0x00000ac2 + 00021564 0x00004913 set1 0x00000000 , 0x0000003f + 00021565 0x00004914 store 0x00000001 , 0x00000ac2 + 00021566 0x00004915 rtn + 00021567 0x00004918 jam 0x00000026 , 0x00000016 + 00021568 0x00004919 fetch 0x00000001 , 0x00000ac2 + 00021569 0x0000491a set1 0x00000001 , 0x0000003f + 00021570 0x0000491b store 0x00000001 , 0x00000ac2 + 00021571 0x0000491c rtn + 00021572 0x0000491f jam 0x00000027 , 0x00000016 + 00021573 0x00004920 fetch 0x00000001 , 0x00000ac2 + 00021574 0x00004921 set1 0x00000002 , 0x0000003f + 00021575 0x00004922 store 0x00000001 , 0x00000ac2 + 00021576 0x00004923 rtn + 00021577 0x00004928 bpatchx 0x00000044 , 0x00004028 + 00021578 0x00004929 add 0x00000011 , 0x00000001 , 0x00000006 + 00021579 0x0000492a ifetch 0x00000001 , 0x00000006 + 00021580 0x0000492b rtnbit0 0x00000000 + 00021581 0x0000492c add 0x00000011 , 0x0000001a , 0x00000005 + 00021582 0x0000492d ifetch 0x00000002 , 0x00000005 + 00021583 0x0000492e increase 0x00000001 , 0x0000003f + 00021584 0x0000492f istore 0x00000002 , 0x00000005 + 00021585 0x00004930 add 0x00000011 , 0x00000019 , 0x00000006 + 00021586 0x00004931 ifetch 0x00000001 , 0x00000006 + 00021587 0x00004932 add 0x00000011 , 0x00000018 , 0x00000005 + 00021588 0x00004933 ifetcht 0x00000001 , 0x00000005 + 00021589 0x00004934 iadd 0x00000002 , 0x0000003f + 00021590 0x00004935 sub 0x0000003f , 0x00000024 , 0x0000003e + 00021591 0x00004936 branch 0x00005459 , 0x00000002 + 00021592 0x00004937 increase 0xffffffdb , 0x0000003f + 00021593 0x00004939 istore 0x00000001 , 0x00000005 + 00021594 0x0000493a rtn + 00021595 0x0000493e bpatchx 0x00000045 , 0x00004028 + 00021596 0x0000493f fetch 0x00000005 , 0x0000046f + 00021597 0x00004940 force 0x00000000 , 0x00000002 + 00021598 0x00004941 force 0x00000025 , 0x00000039 + 00021599 0x00004943 bbit0 0x00000000 , 0x00005461 + 00021600 0x00004944 increase 0x00000001 , 0x00000002 + 00021601 0x00004946 rshift 0x0000003f , 0x0000003f + 00021602 0x00004947 loop 0x0000545f + 00021603 0x00004948 add 0x00000002 , 0xffffffff , 0x0000003f + 00021604 0x00004949 store 0x00000001 , 0x00000461 + 00021605 0x0000494a rtn + 00021606 0x0000494d bpatchx 0x00000046 , 0x00004028 + 00021607 0x0000494e fetch 0x00000001 , 0x00000457 + 00021608 0x0000494f iforce 0x00000007 + 00021609 0x00004950 fetcht 0x00000005 , 0x0000046f + 00021610 0x00004951 qisolate1 0x00000002 + 00021611 0x00004952 branch 0x0000547c , 0x00000001 + 00021612 0x00004954 bpatchx 0x00000047 , 0x00004028 + 00021613 0x00004955 fetch 0x00000001 , 0x00000461 + 00021614 0x00004956 isub 0x00000007 , 0x0000003f + 00021615 0x00004957 branch 0x00005472 , 0x00000002 + 00021616 0x00004958 sub 0x0000003f , 0xffffffff , 0x00000007 + 00021617 0x00004959 branch 0x0000546c + 00021618 0x0000495b copy 0x00000007 , 0x00000039 + 00021619 0x0000495c force 0x00000000 , 0x00000007 + 00021620 0x0000495e qisolate1 0x00000002 + 00021621 0x0000495f branch 0x00005477 , 0x00000001 + 00021622 0x00004960 increase 0x00000001 , 0x00000039 + 00021623 0x00004962 deposit 0x00000039 + 00021624 0x00004963 branch 0x0000547c , 0x00000034 + 00021625 0x00004964 increase 0x00000001 , 0x00000007 + 00021626 0x00004965 increase 0xffffffff , 0x00000039 + 00021627 0x00004966 branch 0x00005474 + 00021628 0x00004968 deposit 0x00000007 + 00021629 0x00004969 store 0x00000001 , 0x00000016 + 00021630 0x0000496a rtn + 00021631 0x0000496e branch 0x00005482 , 0x00000029 + 00021632 0x0000496f until 0x0000003e , 0x00000003 + 00021633 0x00004970 rtn + 00021634 0x00004973 arg 0x00000ea0 , 0x0000000b + 00021635 0x00004974 until 0x00000023 , 0x00000026 + 00021636 0x00004975 rtn + 00021637 0x00004978 disable 0x00000010 + 00021638 0x00004979 fetch 0x00000002 , 0x0000436c + 00021639 0x0000497a copy 0x0000003f , 0x0000000b + 00021640 0x0000497b branch 0x0000548e + 00021641 0x0000497f bpatchx 0x00000048 , 0x00004029 + 00021642 0x00004980 enable 0x00000010 + 00021643 0x00004981 fetch 0x00000002 , 0x0000044d + 00021644 0x00004982 fetcht 0x00000004 , 0x000044e5 + 00021645 0x00004983 iadd 0x00000002 , 0x0000000b + 00021646 0x00004985 call 0x000053de + 00021647 0x00004987 bpatchx 0x00000049 , 0x00004029 + 00021648 0x00004988 call 0x000053d5 + 00021649 0x00004989 disable 0x0000002d + 00021650 0x0000498a enable 0x0000000d + 00021651 0x0000498b enable 0x00000021 + 00021652 0x0000498c disable 0x00000020 + 00021653 0x0000498d copy 0x0000000b , 0x0000001b + 00021654 0x0000498e correlate 0x0000003e , 0x00000003 + 00021655 0x0000498f branch 0x0000549a , 0x0000002e + 00021656 0x00004990 copy 0x0000001a , 0x00000002 + 00021657 0x00004991 storet 0x00000006 , 0x0000009a + 00021658 0x00004993 nbranch 0x0000264d , 0x00000018 + 00021659 0x00004994 branch 0x000054a1 , 0x0000002e + 00021660 0x00004995 arg 0x000001e0 , 0x00000029 + 00021661 0x00004996 copy 0x00000021 , 0x00000028 + 00021662 0x00004997 fetch 0x00000001 , 0x0000043f + 00021663 0x00004998 bbit0 0x00000003 , 0x000054a1 + 00021664 0x00004999 call 0x00002b05 , 0x0000002b + 00021665 0x0000499b bpatchx 0x0000004a , 0x00004029 + 00021666 0x0000499c call 0x000029bb + 00021667 0x0000499d enable 0x00000007 + 00021668 0x0000499e enable 0x00000009 + 00021669 0x0000499f parse 0x00000003 , 0x00000000 , 0x00000008 + 00021670 0x000049a0 rshift3 0x0000000c , 0x0000003f + 00021671 0x000049a1 store 0x00000001 , 0x000002d9 + 00021672 0x000049a2 parse 0x00000003 , 0x00000000 , 0x00000008 + 00021673 0x000049a3 rshift3 0x0000000c , 0x0000003f + 00021674 0x000049a4 istore 0x00000001 , 0x00000005 + 00021675 0x000049a5 and 0x0000003f , 0x0000003f , 0x00000039 + 00021676 0x000049a6 branch 0x000054b1 , 0x00000005 + 00021677 0x000049a9 parse 0x00000003 , 0x00000000 , 0x00000008 + 00021678 0x000049aa rshift3 0x0000000c , 0x0000003f + 00021679 0x000049ab istore 0x00000001 , 0x00000005 + 00021680 0x000049ac loop 0x000054ad + 00021681 0x000049af bpatchx 0x0000004b , 0x00004029 + 00021682 0x000049b0 parse 0x00000003 , 0x00000000 , 0x00000018 + 00021683 0x000049b1 enable 0x00000010 + 00021684 0x000049b2 arg 0x00000664 , 0x0000001b + 00021685 0x000049b3 rshift32 0x0000003f , 0x0000003f + 00021686 0x000049b4 rshift16 0x0000003f , 0x0000003f + 00021687 0x000049b5 istore 0x00000003 , 0x00000005 + 00021688 0x000049b6 branch 0x0000264d , 0x00000006 + 00021689 0x000049b7 enable 0x0000002d + 00021690 0x000049b8 fetch 0x00000001 , 0x00000017 + 00021691 0x000049b9 add 0x0000003f , 0x00000000 , 0x00000011 + 00021692 0x000049ba call 0x00002981 + 00021693 0x000049bb disable 0x0000000d + 00021694 0x000049bc branch 0x00002918 + 00021695 0x000049bf bpatchx 0x0000004c , 0x00004029 + 00021696 0x000049c0 call 0x000054c9 + 00021697 0x000049c2 fetcht 0x00000001 , 0x00000017 + 00021698 0x000049c3 call 0x0000291f + 00021699 0x000049c4 call 0x00002924 + 00021700 0x000049c5 enable 0x00000010 + 00021701 0x000049c6 arg 0x0000157c , 0x0000000b + 00021702 0x000049c7 branch 0x0000548f + 00021703 0x000049ca call 0x000054c9 + 00021704 0x000049cb branch 0x0000264d + 00021705 0x000049ce bpatchx 0x0000004d , 0x00004029 + 00021706 0x000049cf call 0x000053d5 + 00021707 0x000049d0 call 0x000053e3 + 00021708 0x000049d1 branch 0x000054cd + 00021709 0x000049d4 set1 0x00000000 , 0x00000015 + 00021710 0x000049d5 enable 0x0000001d + 00021711 0x000049d6 enable 0x00000020 + 00021712 0x000049d7 disable 0x00000021 + 00021713 0x000049d8 call 0x0000547f + 00021714 0x000049d9 rshift16 0x00000009 , 0x0000003f + 00021715 0x000049da rshift8 0x0000003f , 0x0000003f + 00021716 0x000049db rshift4 0x0000003f , 0x0000003f + 00021717 0x000049dc inject 0x00000003 , 0x00000028 + 00021718 0x000049dd enable 0x00000007 + 00021719 0x000049de enable 0x00000009 + 00021720 0x000049df bpatchx 0x0000004e , 0x00004029 + 00021721 0x000049e0 fetch 0x00000001 , 0x000043dc + 00021722 0x000049e1 inject 0x00000003 , 0x00000008 + 00021723 0x000049e2 ifetch 0x00000001 , 0x00000006 + 00021724 0x000049e3 and 0x0000003f , 0x0000003f , 0x00000039 + 00021725 0x000049e4 inject 0x00000003 , 0x00000008 + 00021726 0x000049e5 branch 0x000054e2 , 0x00000005 + 00021727 0x000049e7 ifetch 0x00000001 , 0x00000006 + 00021728 0x000049e8 inject 0x00000003 , 0x00000008 + 00021729 0x000049e9 loop 0x000054df + 00021730 0x000049ec enable 0x00000008 + 00021731 0x000049ed inject 0x00000003 , 0x00000018 + 00021732 0x000049ee disable 0x00000008 + 00021733 0x000049ef until 0x0000003e , 0x00000027 + 00021734 0x000049f0 nop 0x00000064 + 00021735 0x000049f1 disable 0x0000001d + 00021736 0x000049f2 rtn + 00021737 0x000049f5 bpatchx 0x0000004f , 0x00004029 + 00021738 0x000049f6 fetch 0x00000001 , 0x00004484 + 00021739 0x000049f7 beq 0x00000001 , 0x000054f9 + 00021740 0x000049f8 fetch 0x00000001 , 0x00004485 + 00021741 0x000049f9 lshift4 0x0000003f , 0x0000003f + 00021742 0x000049fa lshift2 0x0000003f , 0x0000003f + 00021743 0x000049fb store 0x00000001 , 0x000043dc + 00021744 0x000049fc fetcht 0x00000001 , 0x0000436f + 00021745 0x000049fd add 0x00000002 , 0x00000006 , 0x0000003f + 00021746 0x000049fe store 0x00000001 , 0x000043dd + 00021747 0x000049ff fetch 0x00000006 , 0x000044a0 + 00021748 0x00004a00 store 0x00000006 , 0x000043de + 00021749 0x00004a01 copy 0x00000002 , 0x00000039 + 00021750 0x00004a02 arg 0x00004370 , 0x00000006 + 00021751 0x00004a03 call 0x00007ef4 + 00021752 0x00004a04 branch 0x00005504 + 00021753 0x00004a06 fetch 0x00000001 , 0x00004486 + 00021754 0x00004a07 lshift4 0x0000003f , 0x0000003f + 00021755 0x00004a08 lshift2 0x0000003f , 0x0000003f + 00021756 0x00004a09 increase 0x00000001 , 0x0000003f + 00021757 0x00004a0a store 0x00000001 , 0x000043dc + 00021758 0x00004a0b setarg 0x0000000c + 00021759 0x00004a0c store 0x00000001 , 0x000043dd + 00021760 0x00004a0d fetch 0x00000006 , 0x000044a0 + 00021761 0x00004a0e store 0x00000006 , 0x000043de + 00021762 0x00004a0f fetch 0x00000006 , 0x000041d0 + 00021763 0x00004a10 istore 0x00000006 , 0x00000005 + 00021764 0x00004a12 bpatchx 0x00000050 , 0x0000402a + 00021765 0x00004a13 fetch 0x00000001 , 0x00000000 + 00021766 0x00004a14 increase 0x00000001 , 0x0000003f + 00021767 0x00004a15 store 0x00000001 , 0x00000000 + 00021768 0x00004a16 arg 0x00000708 , 0x0000001b + 00021769 0x00004a17 disable 0x0000002d + 00021770 0x00004a18 branch 0x000054bf + 00021771 0x00004a1b bpatchx 0x00000051 , 0x0000402a + 00021772 0x00004a1c fetch 0x00000001 , 0x0000449e + 00021773 0x00004a1d rtnne 0x00000001 + 00021774 0x00004a1e fetch 0x00000001 , 0x00000000 + 00021775 0x00004a1f increase 0x00000001 , 0x0000003f + 00021776 0x00004a20 store 0x00000001 , 0x00000000 + 00021777 0x00004a21 arg 0x00000c03 , 0x00000002 + 00021778 0x00004a22 fetch 0x00000001 , 0x0000449f + 00021779 0x00004a23 nsetflag 0x00000034 , 0x00000006 , 0x00000002 + 00021780 0x00004a24 copy 0x00000011 , 0x0000003f + 00021781 0x00004a25 nsetflag 0x00000034 , 0x00000007 , 0x00000002 + 00021782 0x00004a26 storet 0x00000002 , 0x000043dc + 00021783 0x00004a27 fetch 0x00000006 , 0x000044a0 + 00021784 0x00004a28 istore 0x00000006 , 0x00000005 + 00021785 0x00004a29 fetch 0x00000006 , 0x0000044f + 00021786 0x00004a2a istore 0x00000006 , 0x00000005 + 00021787 0x00004a2b branch 0x000054bf + 00021788 0x00004a2f bpatchx 0x00000052 , 0x0000402a + 00021789 0x00004a30 arg 0x00000004 , 0x00000002 + 00021790 0x00004a31 fetch 0x00000001 , 0x00004485 + 00021791 0x00004a32 nsetflag 0x00000034 , 0x00000006 , 0x00000002 + 00021792 0x00004a33 storet 0x00000001 , 0x000043dc + 00021793 0x00004a34 fetcht 0x00000001 , 0x0000438f + 00021794 0x00004a35 add 0x00000002 , 0x00000006 , 0x0000003f + 00021795 0x00004a36 store 0x00000001 , 0x000043dd + 00021796 0x00004a37 fetch 0x00000006 , 0x000044a0 + 00021797 0x00004a38 store 0x00000006 , 0x000043de + 00021798 0x00004a39 arg 0x00004390 , 0x00000006 + 00021799 0x00004a3a copy 0x00000002 , 0x00000039 + 00021800 0x00004a3b call 0x00007ef4 + 00021801 0x00004a3c call 0x000054c7 + 00021802 0x00004a3d branch 0x00005706 + 00021803 0x00004a40 bpatchx 0x00000053 , 0x0000402a + 00021804 0x00004a41 force 0xffffffff , 0x0000003f + 00021805 0x00004a42 setsect 0x00000002 , 0x00000001 + 00021806 0x00004a43 store 0x00000005 , 0x0000046f + 00021807 0x00004a44 call 0x0000545b + 00021808 0x00004a45 force 0x00000004 , 0x00000039 + 00021809 0x00004a46 arg 0x00000463 , 0x00000005 + 00021810 0x00004a47 call 0x0000630d + 00021811 0x00004a48 fetch 0x00000002 , 0x0000449c + 00021812 0x00004a49 store 0x00000002 , 0x0000046d + 00021813 0x00004a4b random 0x0000003f + 00021814 0x00004a4c and_into 0x0000000f , 0x0000003f + 00021815 0x00004a4d sub 0x0000003f , 0x00000004 , 0x0000003e + 00021816 0x00004a4e branch 0x00005535 , 0x00000002 + 00021817 0x00004a4f store 0x00000001 , 0x00000458 + 00021818 0x00004a50 store 0x00000001 , 0x000006e6 + 00021819 0x00004a51 bpatchx 0x00000054 , 0x0000402a + 00021820 0x00004a52 fetcht 0x00000002 , 0x00004367 + 00021821 0x00004a53 storet 0x00000002 , 0x00000441 + 00021822 0x00004a54 copy 0x00000002 , 0x00000013 + 00021823 0x00004a55 add 0x00000022 , 0x00000007 , 0x0000003f + 00021824 0x00004a56 idiv 0x00000013 + 00021825 0x00004a57 call 0x00007f86 + 00021826 0x00004a58 remainder 0x00000011 + 00021827 0x00004a59 isub 0x00000011 , 0x0000003f + 00021828 0x00004a5a iadd 0x00000013 , 0x0000003f + 00021829 0x00004a5b fetcht 0x00000002 , 0x00004365 + 00021830 0x00004a5c iadd 0x00000002 , 0x0000003f + 00021831 0x00004a5d store 0x00000004 , 0x00000443 + 00021832 0x00004a5e isub 0x00000022 , 0x00000011 + 00021833 0x00004a5f increase 0xfffffffa , 0x00000011 + 00021834 0x00004a60 arg 0x00002205 , 0x00000012 + 00021835 0x00004a61 fetch 0x00000001 , 0x00004495 + 00021836 0x00004a62 nsetflag 0x00000034 , 0x00000006 , 0x00000012 + 00021837 0x00004a63 fetch 0x00000001 , 0x0000448e + 00021838 0x00004a64 nsetflag 0x00000034 , 0x00000007 , 0x00000012 + 00021839 0x00004a65 copy 0x00000012 , 0x0000003f + 00021840 0x00004a66 store 0x00000002 , 0x000043dc + 00021841 0x00004a67 fetch 0x00000006 , 0x000044a0 + 00021842 0x00004a68 istore 0x00000006 , 0x00000005 + 00021843 0x00004a69 fetch 0x00000006 , 0x0000044f + 00021844 0x00004a6a istore 0x00000006 , 0x00000005 + 00021845 0x00004a6b fetch 0x00000004 , 0x00000463 + 00021846 0x00004a6c istore 0x00000004 , 0x00000005 + 00021847 0x00004a6d random 0x0000003f + 00021848 0x00004a6e istore 0x00000002 , 0x00000005 + 00021849 0x00004a6f random 0x0000003f + 00021850 0x00004a70 istore 0x00000001 , 0x00000005 + 00021851 0x00004a71 force 0x00000002 , 0x0000003f + 00021852 0x00004a72 istore 0x00000001 , 0x00000005 + 00021853 0x00004a73 rshift2 0x00000011 , 0x0000003f + 00021854 0x00004a74 istore 0x00000002 , 0x00000005 + 00021855 0x00004a75 rshift2 0x00000013 , 0x0000003f + 00021856 0x00004a76 istore 0x00000002 , 0x00000005 + 00021857 0x00004a77 bpatchx 0x00000055 , 0x0000402a + 00021858 0x00004a78 setarg 0x00000000 + 00021859 0x00004a79 istore 0x00000002 , 0x00000005 + 00021860 0x00004a7a fetch 0x00000002 , 0x0000449c + 00021861 0x00004a7b istore 0x00000002 , 0x00000005 + 00021862 0x00004a7c fetch 0x00000005 , 0x0000046f + 00021863 0x00004a7d istore 0x00000005 , 0x00000005 + 00021864 0x00004a7e fetch 0x00000001 , 0x00000458 + 00021865 0x00004a7f arg 0x000000a0 , 0x00000002 + 00021866 0x00004a80 ior 0x00000002 , 0x0000003f + 00021867 0x00004a81 istore 0x00000001 , 0x00000005 + 00021868 0x00004a82 call 0x000054c7 + 00021869 0x00004a83 setarg 0x000043dc + 00021870 0x00004a84 add 0x0000003f , 0x00000012 , 0x00000006 + 00021871 0x00004a85 ifetch 0x00000003 , 0x00000006 + 00021872 0x00004a86 store 0x00000003 , 0x00000467 + 00021873 0x00004a87 rtn + 00021874 0x00004a8a bpatchx 0x00000056 , 0x0000402a + 00021875 0x00004a8b disable 0x00000029 + 00021876 0x00004a8c branch 0x0000540c + 00021877 0x00004a91 fetch 0x00000001 , 0x0000043f + 00021878 0x00004a92 rtnbit0 0x00000005 + 00021879 0x00004a93 fetch 0x00000002 , 0x00000459 + 00021880 0x00004a94 fetcht 0x00000002 , 0x0000045f + 00021881 0x00004a95 isub 0x00000002 , 0x0000003f + 00021882 0x00004a96 nrtn 0x00000002 + 00021883 0x00004a97 store 0x00000002 , 0x00000a9a + 00021884 0x00004a98 bpatchx 0x00000057 , 0x0000402a + 00021885 0x00004a99 fetch 0x00000001 , 0x0000043f + 00021886 0x00004a9a set0 0x00000005 , 0x0000003f + 00021887 0x00004a9b set0 0x00000003 , 0x0000003f + 00021888 0x00004a9c store 0x00000001 , 0x0000043f + 00021889 0x00004a9d fetch 0x00000004 , 0x00000443 + 00021890 0x00004a9e fetcht 0x00000002 , 0x00000441 + 00021891 0x00004a9f storet 0x00000002 , 0x00000aa2 + 00021892 0x00004aa0 isub 0x00000002 , 0x00000011 + 00021893 0x00004aa1 bpatchx 0x00000058 , 0x0000402b + 00021894 0x00004aa2 fetch 0x00000001 , 0x000043d3 + 00021895 0x00004aa3 store 0x00000001 , 0x0000046a + 00021896 0x00004aa4 ifetcht 0x00000002 , 0x00000006 + 00021897 0x00004aa5 ifetch 0x00000002 , 0x00000006 + 00021898 0x00004aa6 lshift2 0x0000003f , 0x0000003f + 00021899 0x00004aa7 store 0x00000002 , 0x00000441 + 00021900 0x00004aa8 lshift2 0x00000002 , 0x00000002 + 00021901 0x00004aa9 iadd 0x00000002 , 0x0000003f + 00021902 0x00004aaa ifetcht 0x00000004 , 0x00000006 + 00021903 0x00004aab storet 0x00000004 , 0x0000046b + 00021904 0x00004aac iadd 0x00000011 , 0x0000003f + 00021905 0x00004aad copy 0x0000003f , 0x00000014 + 00021906 0x00004aae fetch 0x00000002 , 0x00000441 + 00021907 0x00004aaf fetcht 0x00000002 , 0x00000aa2 + 00021908 0x00004ab0 isub 0x00000002 , 0x0000003f + 00021909 0x00004ab1 fetcht 0x00000002 , 0x00000a9a + 00021910 0x00004ab2 imul32 0x00000002 , 0x0000003f + 00021911 0x00004ab3 iadd 0x00000014 , 0x0000003f + 00021912 0x00004ab4 store 0x00000004 , 0x00000443 + 00021913 0x00004ab5 call 0x00005713 + 00021914 0x00004ab6 fetch 0x00000002 , 0x0000046d + 00021915 0x00004ab7 store 0x00000002 , 0x000044ba + 00021916 0x00004ab8 rtn + 00021917 0x00004abc bpatchx 0x00000059 , 0x0000402b + 00021918 0x00004abd fetch 0x00000001 , 0x0000043f + 00021919 0x00004abe rtnbit0 0x00000006 + 00021920 0x00004abf fetch 0x00000002 , 0x00000459 + 00021921 0x00004ac0 fetcht 0x00000002 , 0x0000045f + 00021922 0x00004ac1 isub 0x00000002 , 0x0000003f + 00021923 0x00004ac2 nrtn 0x00000002 + 00021924 0x00004ac3 fetch 0x00000001 , 0x0000043f + 00021925 0x00004ac4 set0 0x00000006 , 0x0000003f + 00021926 0x00004ac5 store 0x00000001 , 0x0000043f + 00021927 0x00004ac6 fetch 0x00000005 , 0x000043ce + 00021928 0x00004ac7 store 0x00000005 , 0x0000046f + 00021929 0x00004ac8 branch 0x0000545b + 00021930 0x00004acc bpatchx 0x0000005a , 0x0000402b + 00021931 0x00004acd call 0x000056ed + 00021932 0x00004ace call 0x000055c0 + 00021933 0x00004acf fetch 0x00000001 , 0x000002d9 + 00021934 0x00004ad0 isolate1 0x00000004 , 0x0000003f + 00021935 0x00004ad1 setflag 0x00000001 , 0x0000002a , 0x00000000 + 00021936 0x00004ad2 rshift 0x0000003f , 0x0000003f + 00021937 0x00004ad3 ixor 0x00000002 , 0x0000003f + 00021938 0x00004ad4 isolate1 0x00000002 , 0x0000003f + 00021939 0x00004ad5 setflag 0x00000001 , 0x0000000f , 0x00000000 + 00021940 0x00004ad6 rtnmark1 0x0000000f + 00021941 0x00004ad7 fetch 0x00000001 , 0x000002da + 00021942 0x00004ad8 branch 0x000055bc , 0x00000034 + 00021943 0x00004ad9 fetch 0x00000001 , 0x0000043f + 00021944 0x00004ada bbit0 0x00000004 , 0x000055bc + 00021945 0x00004adb call 0x0000748d + 00021946 0x00004adc call 0x000073fb + 00021947 0x00004add nrtn 0x00000034 + 00021948 0x00004adf fetcht 0x00000001 , 0x00000456 + 00021949 0x00004ae0 setflip 0x00000002 , 0x00000002 + 00021950 0x00004ae1 storet 0x00000001 , 0x00000456 + 00021951 0x00004ae2 rtn + 00021952 0x00004ae6 bpatchx 0x0000005b , 0x0000402b + 00021953 0x00004ae7 fetcht 0x00000001 , 0x00000456 + 00021954 0x00004ae8 isolate0 0x00000005 , 0x00000002 + 00021955 0x00004ae9 rtn 0x00000001 + 00021956 0x00004aea fetch 0x00000001 , 0x000002d9 + 00021957 0x00004aeb lshift 0x0000003f , 0x0000003f + 00021958 0x00004aec ixor 0x00000002 , 0x0000003f + 00021959 0x00004aed rtnbit0 0x00000003 + 00021960 0x00004aee set0 0x00000005 , 0x00000002 + 00021961 0x00004aef setflip 0x00000003 , 0x00000002 + 00021962 0x00004af0 storet 0x00000001 , 0x00000456 + 00021963 0x00004af1 compare 0x00000003 , 0x00000002 , 0x00000003 + 00021964 0x00004af2 nrtn 0x00000001 + 00021965 0x00004af3 fetch 0x00000001 , 0x000043de + 00021966 0x00004af4 beq 0x00000005 , 0x000055d2 + 00021967 0x00004af5 fetch 0x00000001 , 0x000044c5 + 00021968 0x00004af6 beq 0x00000002 , 0x000055d6 + 00021969 0x00004af7 rtn + 00021970 0x00004afb fetch 0x00000001 , 0x0000043f + 00021971 0x00004afc set1 0x00000004 , 0x0000003f + 00021972 0x00004afd store 0x00000001 , 0x0000043f + 00021973 0x00004afe rtn + 00021974 0x00004b01 bpatchx 0x0000005c , 0x0000402b + 00021975 0x00004b02 jam 0x00000000 , 0x000044c5 + 00021976 0x00004b03 arg 0x00000000 , 0x0000003f + 00021977 0x00004b04 store 0x00000004 , 0x0000440d + 00021978 0x00004b05 store 0x00000005 , 0x00004403 + 00021979 0x00004b06 set1 0x00000027 , 0x0000003f + 00021980 0x00004b07 store 0x00000005 , 0x00004408 + 00021981 0x00004b08 fetch 0x00000001 , 0x0000043f + 00021982 0x00004b09 set0 0x00000004 , 0x0000003f + 00021983 0x00004b0a store 0x00000001 , 0x0000043f + 00021984 0x00004b0b rtn + 00021985 0x00004b0f bpatchx 0x0000005d , 0x0000402b + 00021986 0x00004b10 call 0x00005422 + 00021987 0x00004b11 call 0x00005485 + 00021988 0x00004b12 fetch 0x00000001 , 0x00000001 + 00021989 0x00004b13 increase 0x00000001 , 0x0000003f + 00021990 0x00004b14 store 0x00000001 , 0x00000001 + 00021991 0x00004b15 rtn + 00021992 0x00004b19 bpatchx 0x0000005e , 0x0000402b + 00021993 0x00004b1a fetch 0x00000001 , 0x00004369 + 00021994 0x00004b1b rtnne 0x00000001 + 00021995 0x00004b1c arg 0x00000002 , 0x00000007 + 00021996 0x00004b1d call 0x00007f16 + 00021997 0x00004b1e nrtn 0x00000034 + 00021998 0x00004b1f fetch 0x00000002 , 0x0000436a + 00021999 0x00004b20 fetcht 0x00000002 , 0x0000436c + 00022000 0x00004b21 isub 0x00000002 , 0x0000003f + 00022001 0x00004b22 arg 0x00000002 , 0x00000007 + 00022002 0x00004b23 call 0x00007f08 + 00022003 0x00004b24 disable 0x00000029 + 00022004 0x00004b25 call 0x00005572 + 00022005 0x00004b26 call 0x000055e1 + 00022006 0x00004b27 nrtn 0x0000002d + 00022007 0x00004b28 bpatchx 0x0000005f , 0x0000402b + 00022008 0x00004b29 fetch 0x00000006 , 0x000002db + 00022009 0x00004b2a store 0x00000006 , 0x0000044f + 00022010 0x00004b2d fetch 0x00000001 , 0x00000002 + 00022011 0x00004b2e increase 0x00000001 , 0x0000003f + 00022012 0x00004b2f store 0x00000001 , 0x00000002 + 00022013 0x00004b30 call 0x00005608 + 00022014 0x00004b31 rtn 0x00000029 + 00022015 0x00004b32 call 0x0000550b + 00022016 0x00004b33 nrtn 0x0000002d + 00022017 0x00004b34 bpatchx 0x00000060 , 0x0000402c + 00022018 0x00004b35 fetch 0x00000001 , 0x00000004 + 00022019 0x00004b36 increase 0x00000001 , 0x0000003f + 00022020 0x00004b37 store 0x00000001 , 0x00000004 + 00022021 0x00004b38 fetch 0x00000009 , 0x000002e1 + 00022022 0x00004b39 store 0x00000009 , 0x00000101 + 00022023 0x00004b3a rtn + 00022024 0x00004b3d bpatchx 0x00000061 , 0x0000402c + 00022025 0x00004b3e fetch 0x00000001 , 0x0000049b + 00022026 0x00004b3f rtnne 0x0000001b + 00022027 0x00004b40 fetch 0x00000006 , 0x0000044f + 00022028 0x00004b41 fetcht 0x00000006 , 0x0000448f + 00022029 0x00004b42 isub 0x00000002 , 0x0000003e + 00022030 0x00004b43 nrtn 0x00000005 + 00022031 0x00004b44 call 0x0000223b + 00022032 0x00004b45 nrtn 0x00000005 + 00022033 0x00004b46 call 0x0000552b + 00022034 0x00004b47 call 0x00005340 + 00022035 0x00004b48 bpatchx 0x00000062 , 0x0000402c + 00022036 0x00004b49 jam 0x00000000 , 0x000041ce + 00022037 0x00004b4a jam 0x00000000 , 0x00000476 + 00022038 0x00004b4b jam 0x00000000 , 0x00004369 + 00022039 0x00004b4c jam 0x00000000 , 0x0000049b + 00022040 0x00004b4d branch 0x00002223 + 00022041 0x00004b50 arg 0x00000001 , 0x00000011 + 00022042 0x00004b51 fetch 0x00000001 , 0x000002d9 + 00022043 0x00004b52 rtnbit1 0x00000006 + 00022044 0x00004b53 arg 0x00000000 , 0x00000011 + 00022045 0x00004b54 rtn + 00022046 0x00004b59 bpatchx 0x00000063 , 0x0000402c + 00022047 0x00004b5a fetch 0x00000001 , 0x00000456 + 00022048 0x00004b5b rtnbit1 0x00000005 + 00022049 0x00004b5c call 0x00005642 + 00022050 0x00004b5d call 0x00005873 + 00022051 0x00004b5e branch 0x00005664 , 0x00000034 + 00022052 0x00004b5f ifetch 0x00000001 , 0x00000006 + 00022053 0x00004b60 ifetcht 0x00000001 , 0x00000006 + 00022054 0x00004b61 copy 0x00000002 , 0x00000011 + 00022055 0x00004b62 isub 0x00000011 , 0x0000003f + 00022056 0x00004b63 arg 0x0000001b , 0x00000002 + 00022057 0x00004b64 call 0x00007fdd + 00022058 0x00004b65 copy 0x0000003f , 0x00000002 + 00022059 0x00004b66 ifetch 0x00000001 , 0x00000006 + 00022060 0x00004b67 copy 0x0000003f , 0x00000001 + 00022061 0x00004b68 copy 0x00000011 , 0x0000003f + 00022062 0x00004b69 iadd 0x00000006 , 0x00000006 + 00022063 0x00004b6a arg 0x000043de , 0x00000005 + 00022064 0x00004b6b copy 0x00000002 , 0x00000039 + 00022065 0x00004b6c call 0x00007f01 + 00022066 0x00004b6d call 0x00005654 + 00022067 0x00004b6e call 0x00005666 + 00022068 0x00004b70 call 0x00005873 + 00022069 0x00004b71 ifetch 0x00000001 , 0x00000006 + 00022070 0x00004b72 copy 0x0000003f , 0x00000011 + 00022071 0x00004b73 copy 0x00000006 , 0x00000013 + 00022072 0x00004b74 ifetcht 0x00000001 , 0x00000006 + 00022073 0x00004b75 copy 0x00000002 , 0x00000012 + 00022074 0x00004b76 isub 0x00000012 , 0x0000003f + 00022075 0x00004b77 arg 0x0000001b , 0x00000002 + 00022076 0x00004b78 call 0x00007fdd + 00022077 0x00004b79 iadd 0x00000012 , 0x0000003f + 00022078 0x00004b7a istore 0x00000001 , 0x00000013 + 00022079 0x00004b7b isub 0x00000011 , 0x0000003e + 00022080 0x00004b7c nrtn 0x00000005 + 00022081 0x00004b7d branch 0x00005896 + 00022082 0x00004b81 call 0x00005649 + 00022083 0x00004b82 rtnmark1 0x00000029 + 00022084 0x00004b83 fetch 0x00000001 , 0x000044e9 + 00022085 0x00004b84 bbit0 0x00000002 , 0x00005652 + 00022086 0x00004b85 call 0x00005876 + 00022087 0x00004b86 branch 0x00005652 , 0x00000034 + 00022088 0x00004b87 branch 0x00005650 + 00022089 0x00004b8b call 0x00005873 + 00022090 0x00004b8c branch 0x00005652 , 0x00000034 + 00022091 0x00004b8d ifetch 0x00000001 , 0x00000006 + 00022092 0x00004b8e ifetcht 0x00000001 , 0x00000006 + 00022093 0x00004b8f isub 0x00000002 , 0x0000003f + 00022094 0x00004b90 sub 0x0000003f , 0x0000001b , 0x0000003e + 00022095 0x00004b91 branch 0x00005652 , 0x00000002 + 00022096 0x00004b93 set1 0x00000029 , 0x00000000 + 00022097 0x00004b94 rtn + 00022098 0x00004b97 set0 0x00000029 , 0x00000000 + 00022099 0x00004b98 rtn + 00022100 0x00004b9b copy 0x00000011 , 0x0000003f + 00022101 0x00004b9c rtn 0x00000034 + 00022102 0x00004b9d arg 0x00000001 , 0x00000001 + 00022103 0x00004b9e rtn + 00022104 0x00004ba2 bpatchx 0x00000064 , 0x0000402c + 00022105 0x00004ba3 increase 0x00000001 , 0x00000002 + 00022106 0x00004ba4 call 0x0000576a + 00022107 0x00004ba5 increase 0xfffffffe , 0x00000006 + 00022108 0x00004ba6 ifetch 0x00000002 , 0x00000006 + 00022109 0x00004ba7 arg 0x00002902 , 0x00000002 + 00022110 0x00004ba8 isub 0x00000002 , 0x0000003e + 00022111 0x00004ba9 nrtn 0x00000005 + 00022112 0x00004baa increase 0x00000001 , 0x00000006 + 00022113 0x00004bab copy 0x00000006 , 0x00000011 + 00022114 0x00004bac ifetch 0x00000001 , 0x00000006 + 00022115 0x00004bad rtn + 00022116 0x00004bb1 force 0x00000000 , 0x00000002 + 00022117 0x00004bb2 force 0x00000001 , 0x00000001 + 00022118 0x00004bb5 bpatchx 0x00000065 , 0x0000402c + 00022119 0x00004bb6 storet 0x00000001 , 0x000043dd + 00022120 0x00004bb7 fetcht 0x00000001 , 0x00000456 + 00022121 0x00004bb8 set1 0x00000005 , 0x00000002 + 00022122 0x00004bb9 and 0x00000002 , 0x000000fc , 0x0000003f + 00022123 0x00004bba ior 0x00000001 , 0x0000003f + 00022124 0x00004bbb store 0x00000001 , 0x00000456 + 00022125 0x00004bbc and_into 0x0000001f , 0x0000003f + 00022126 0x00004bbd isolate1 0x00000029 , 0x00000000 + 00022127 0x00004bbe setflag 0x00000001 , 0x00000004 , 0x0000003f + 00022128 0x00004bbf store 0x00000001 , 0x000043dc + 00022129 0x00004bc1 fetch 0x00000001 , 0x000043dc + 00022130 0x00004bc2 compare 0x00000001 , 0x00000001 , 0x00000003 + 00022131 0x00004bc3 nbranch 0x00005676 , 0x00000001 + 00022132 0x00004bc4 fetch 0x00000001 , 0x000043dd + 00022133 0x00004bc5 rtn 0x00000034 + 00022134 0x00004bc7 fetch 0x00000001 , 0x0000043f + 00022135 0x00004bc8 rtnbit0 0x00000004 + 00022136 0x00004bc9 call 0x0000748d + 00022137 0x00004bca branch 0x000073e3 + 00022138 0x00004bce arg 0x00000000 , 0x00000007 + 00022139 0x00004bcf branch 0x00002c32 + 00022140 0x00004bd2 arg 0x00000000 , 0x00000007 + 00022141 0x00004bd3 branch 0x00002c36 + 00022142 0x00004bd7 bpatchx 0x00000066 , 0x0000402c + 00022143 0x00004bd8 rtnmark1 0x0000000f + 00022144 0x00004bd9 call 0x00005890 + 00022145 0x00004bda nrtn 0x00000034 + 00022146 0x00004bdb fetch 0x00000001 , 0x000002d9 + 00022147 0x00004bdc and 0x0000003f , 0x00000003 , 0x0000003f + 00022148 0x00004bdd store 0x00000001 , 0x0000450c + 00022149 0x00004bde ifetch 0x00000001 , 0x00000006 + 00022150 0x00004bdf and 0x0000003f , 0x0000001f , 0x0000003f + 00022151 0x00004be0 store 0x00000001 , 0x0000450b + 00022152 0x00004be1 rtn 0x00000034 + 00022153 0x00004be2 copy 0x00000006 , 0x0000003f + 00022154 0x00004be3 store 0x00000002 , 0x0000450d + 00022155 0x00004be4 fetch 0x00000001 , 0x0000450c + 00022156 0x00004be5 beq 0x00000003 , 0x00005c64 + 00022157 0x00004be7 call 0x0000569a + 00022158 0x00004be8 nbranch 0x0000567a , 0x00000028 + 00022159 0x00004be9 call 0x0000567c + 00022160 0x00004bea fetch 0x00000002 , 0x0000450d + 00022161 0x00004beb copy 0x0000003f , 0x00000006 + 00022162 0x00004bec ifetch 0x00000002 , 0x00000006 + 00022163 0x00004bed store 0x00000002 , 0x000044fc + 00022164 0x00004bee bpatchx 0x00000067 , 0x0000402c + 00022165 0x00004bef ifetch 0x00000002 , 0x00000006 + 00022166 0x00004bf0 beq 0x00000004 , 0x000058ab + 00022167 0x00004bf1 beq 0x00000006 , 0x00005af4 + 00022168 0x00004bf2 beq 0x00000005 , 0x00005ab6 + 00022169 0x00004bf3 rtn + 00022170 0x00004bf7 fetch 0x00000001 , 0x0000450c + 00022171 0x00004bf8 beq 0x00000002 , 0x000056a9 + 00022172 0x00004bf9 beq 0x00000001 , 0x000056c1 + 00022173 0x00004bfa rtn + 00022174 0x00004c00 call 0x00007fe7 + 00022175 0x00004c01 arg 0x00000004 , 0x00000002 + 00022176 0x00004c02 isub 0x0000003f , 0x0000003e + 00022177 0x00004c03 rtn 0x00000005 + 00022178 0x00004c04 arg 0x00000005 , 0x00000002 + 00022179 0x00004c05 isub 0x0000003f , 0x0000003e + 00022180 0x00004c06 rtn 0x00000005 + 00022181 0x00004c07 arg 0x00000006 , 0x00000002 + 00022182 0x00004c08 isub 0x0000003f , 0x0000003e + 00022183 0x00004c09 rtn 0x00000005 + 00022184 0x00004c0a branch 0x00007fe9 + 00022185 0x00004c0e fetch 0x00000002 , 0x0000450d + 00022186 0x00004c0f copy 0x0000003f , 0x00000006 + 00022187 0x00004c10 ifetch 0x00000002 , 0x00000006 + 00022188 0x00004c11 store 0x00000002 , 0x000044fc + 00022189 0x00004c12 ifetch 0x00000002 , 0x00000006 + 00022190 0x00004c13 call 0x0000569e + 00022191 0x00004c14 nrtn 0x00000028 + 00022192 0x00004c15 fetcht 0x00000001 , 0x0000450b + 00022193 0x00004c16 storet 0x00000001 , 0x000044fe + 00022194 0x00004c17 fetch 0x00000002 , 0x000044fc + 00022195 0x00004c18 increase 0x00000004 , 0x0000003f + 00022196 0x00004c19 isub 0x00000002 , 0x0000003e + 00022197 0x00004c1a branch 0x00007fe7 , 0x00000005 + 00022198 0x00004c1b fetch 0x00000001 , 0x0000450b + 00022199 0x00004c1c copy 0x0000003f , 0x00000039 + 00022200 0x00004c1d arg 0x00000311 , 0x00000005 + 00022201 0x00004c1e fetch 0x00000002 , 0x0000450d + 00022202 0x00004c1f copy 0x0000003f , 0x00000006 + 00022203 0x00004c20 call 0x00007f01 + 00022204 0x00004c21 branch 0x00007fe9 + 00022205 0x00004c27 call 0x00007fe7 + 00022206 0x00004c28 fetch 0x00000001 , 0x000044fe + 00022207 0x00004c29 nrtn 0x00000034 + 00022208 0x00004c2a branch 0x00007fe9 + 00022209 0x00004c2d call 0x000056bd + 00022210 0x00004c2e nrtn 0x00000028 + 00022211 0x00004c2f fetch 0x00000001 , 0x000044fe + 00022212 0x00004c30 arg 0x00000311 , 0x00000005 + 00022213 0x00004c31 iadd 0x00000005 , 0x00000011 + 00022214 0x00004c32 fetcht 0x00000001 , 0x0000450b + 00022215 0x00004c33 iadd 0x00000002 , 0x0000003f + 00022216 0x00004c34 store 0x00000001 , 0x000044fe + 00022217 0x00004c35 fetch 0x00000001 , 0x0000450b + 00022218 0x00004c36 copy 0x0000003f , 0x00000039 + 00022219 0x00004c37 copy 0x00000011 , 0x00000005 + 00022220 0x00004c38 fetch 0x00000002 , 0x0000450d + 00022221 0x00004c39 copy 0x0000003f , 0x00000006 + 00022222 0x00004c3a call 0x00007ef4 + 00022223 0x00004c3b setarg 0x00000311 + 00022224 0x00004c3c store 0x00000002 , 0x0000450d + 00022225 0x00004c3d fetch 0x00000002 , 0x000044fc + 00022226 0x00004c3e increase 0x00000004 , 0x0000003f + 00022227 0x00004c3f fetcht 0x00000001 , 0x000044fe + 00022228 0x00004c40 isub 0x00000002 , 0x0000003e + 00022229 0x00004c41 branch 0x00007fe7 , 0x00000005 + 00022230 0x00004c42 branch 0x00007fe9 + 00022231 0x00004c49 call 0x00007ea5 + 00022232 0x00004c4a arg 0x0000445e , 0x00000005 + 00022233 0x00004c4c fetch 0x00000002 , 0x000044fc + 00022234 0x00004c4d increase 0xfffffffb , 0x0000003f + 00022235 0x00004c4f istore 0x00000001 , 0x00000005 + 00022236 0x00004c50 copy 0x0000003f , 0x00000039 + 00022237 0x00004c51 call 0x00007e9f + 00022238 0x00004c52 branch 0x00007ef4 + 00022239 0x00004c55 call 0x00007ea5 + 00022240 0x00004c56 arg 0x00004471 , 0x00000005 + 00022241 0x00004c57 branch 0x000056d9 + 00022242 0x00004c5c fetch 0x00000002 , 0x000041f9 + 00022243 0x00004c5d branch 0x00007f9c + 00022244 0x00004c60 fetcht 0x00000004 , 0x0000045b + 00022245 0x00004c61 call 0x00002a7b + 00022246 0x00004c62 isub 0x00000002 , 0x0000000b + 00022247 0x00004c63 deposit 0x0000000b + 00022248 0x00004c64 fetcht 0x00000002 , 0x0000046d + 00022249 0x00004c65 lshift4 0x00000002 , 0x00000002 + 00022250 0x00004c66 lshift 0x00000002 , 0x00000002 + 00022251 0x00004c67 isub 0x00000002 , 0x0000003f + 00022252 0x00004c68 rtn + 00022253 0x00004c6b call 0x00002a7b + 00022254 0x00004c6c store 0x00000004 , 0x0000045b + 00022255 0x00004c6d rtn + 00022256 0x00004c71 jam 0x00000024 , 0x00000016 + 00022257 0x00004c72 jam 0x00000000 , 0x00000ac2 + 00022258 0x00004c74 bpatchx 0x00000068 , 0x0000402d + 00022259 0x00004c75 fetch 0x00000001 , 0x0000436e + 00022260 0x00004c76 rtn 0x00000034 + 00022261 0x00004c77 arg 0x00000000 , 0x00000007 + 00022262 0x00004c78 call 0x00007f16 + 00022263 0x00004c79 nrtn 0x00000034 + 00022264 0x00004c7a bpatchx 0x00000069 , 0x0000402d + 00022265 0x00004c7c disable 0x00000029 + 00022266 0x00004c7d enable 0x00000010 + 00022267 0x00004c7e call 0x00005572 + 00022268 0x00004c7f call 0x00005422 + 00022269 0x00004c80 call 0x000054e9 + 00022270 0x00004c81 nbranch 0x00005706 , 0x0000002d + 00022271 0x00004c82 fetch 0x00000001 , 0x00000003 + 00022272 0x00004c83 increase 0x00000001 , 0x0000003f + 00022273 0x00004c84 store 0x00000001 , 0x00000003 + 00022274 0x00004c85 fetch 0x00000001 , 0x000002d9 + 00022275 0x00004c86 and 0x0000003f , 0x0000000f , 0x0000003f + 00022276 0x00004c87 beq 0x00000003 , 0x0000551c + 00022277 0x00004c88 beq 0x00000005 , 0x00005728 + 00022278 0x00004c8a bpatchx 0x0000006a , 0x0000402d + 00022279 0x00004c8b random 0x0000003f + 00022280 0x00004c8c arg 0x000001ff , 0x00000002 + 00022281 0x00004c8d iand 0x00000002 , 0x0000003f + 00022282 0x00004c8e add 0x0000003f , 0x000000fa , 0x0000003f + 00022283 0x00004c8f call 0x00003cbe + 00022284 0x00004c90 fetch 0x00000001 , 0x00000ac2 + 00022285 0x00004c91 fetcht 0x00000001 , 0x0000448d + 00022286 0x00004c92 isub 0x00000002 , 0x0000003e + 00022287 0x00004c93 nbranch 0x000056f2 , 0x00000005 + 00022288 0x00004c94 arg 0x00000000 , 0x00000007 + 00022289 0x00004c95 fetch 0x00000002 , 0x00004482 + 00022290 0x00004c96 branch 0x00007f08 + 00022291 0x00004c9a bpatchx 0x0000006b , 0x0000402d + 00022292 0x00004c9b fetch 0x00000001 , 0x00000476 + 00022293 0x00004c9c call 0x000053fc + 00022294 0x00004c9d fetch 0x00000002 , 0x00000441 + 00022295 0x00004c9e imul32 0x00000002 , 0x0000003f + 00022296 0x00004c9f arg 0x00000177 , 0x00000002 + 00022297 0x00004ca0 imul32 0x00000002 , 0x0000003f + 00022298 0x00004ca1 arg 0x000186a0 , 0x00000002 + 00022299 0x00004ca2 idiv 0x00000002 + 00022300 0x00004ca3 fetch 0x00000001 , 0x0000046a + 00022301 0x00004ca4 arg 0x00004e20 , 0x00000002 + 00022302 0x00004ca5 imul32 0x00000002 , 0x0000003f + 00022303 0x00004ca6 iadd 0x00000002 , 0x0000003f + 00022304 0x00004ca7 store 0x00000004 , 0x000044e5 + 00022305 0x00004ca8 bpatchx 0x0000006c , 0x0000402d + 00022306 0x00004ca9 fetch 0x00000002 , 0x000040c1 + 00022307 0x00004caa call 0x00007f86 + 00022308 0x00004cab quotient 0x00000002 + 00022309 0x00004cac iadd 0x00000002 , 0x0000003f + 00022310 0x00004cad store 0x00000002 , 0x0000044d + 00022311 0x00004cae rtn + 00022312 0x00004cb1 bpatchx 0x0000006d , 0x0000402d + 00022313 0x00004cb2 fetch 0x00000006 , 0x000002e1 + 00022314 0x00004cb3 fetcht 0x00000006 , 0x000044a0 + 00022315 0x00004cb4 isub 0x00000002 , 0x0000003e + 00022316 0x00004cb5 nrtn 0x00000005 + 00022317 0x00004cb6 call 0x00005619 + 00022318 0x00004cb7 copy 0x00000011 , 0x0000003f + 00022319 0x00004cb8 store 0x00000001 , 0x0000448e + 00022320 0x00004cb9 fetch 0x00000007 , 0x000002ee + 00022321 0x00004cba store 0x00000007 , 0x00000101 + 00022322 0x00004cbb ifetch 0x00000008 , 0x00000006 + 00022323 0x00004cbc istore 0x00000008 , 0x00000005 + 00022324 0x00004cbd fetch 0x00000006 , 0x000002db + 00022325 0x00004cbe store 0x00000006 , 0x0000044f + 00022326 0x00004cbf increase 0x00000006 , 0x00000006 + 00022327 0x00004cc0 ifetch 0x00000008 , 0x00000006 + 00022328 0x00004cc1 store 0x00000008 , 0x00000463 + 00022329 0x00004cc2 ifetcht 0x00000002 , 0x00000006 + 00022330 0x00004cc3 bpatchx 0x0000006e , 0x0000402d + 00022331 0x00004cc5 lshift2 0x00000002 , 0x00000002 + 00022332 0x00004cc6 ifetch 0x00000002 , 0x00000006 + 00022333 0x00004cc7 lshift2 0x0000003f , 0x0000003f + 00022334 0x00004cc8 store 0x00000002 , 0x00000441 + 00022335 0x00004cc9 store 0x00000004 , 0x00000443 + 00022336 0x00004cca isub 0x00000002 , 0x0000003f + 00022337 0x00004ccb add 0x0000003f , 0xfffffffe , 0x00000028 + 00022338 0x00004ccc ifetch 0x00000009 , 0x00000006 + 00022339 0x00004ccd store 0x00000009 , 0x0000046b + 00022340 0x00004cce bpatchx 0x0000006f , 0x0000402d + 00022341 0x00004ccf ifetch 0x00000001 , 0x00000006 + 00022342 0x00004cd0 rshift4 0x0000003f , 0x00000002 + 00022343 0x00004cd1 rshift 0x00000002 , 0x00000002 + 00022344 0x00004cd2 storet 0x00000001 , 0x00000476 + 00022345 0x00004cd3 and_into 0x0000001f , 0x0000003f + 00022346 0x00004cd4 store 0x00000001 , 0x00000458 + 00022347 0x00004cd5 call 0x00005713 + 00022348 0x00004cd6 call 0x0000545b + 00022349 0x00004cd7 call 0x0000534c + 00022350 0x00004cd8 call 0x0000223b + 00022351 0x00004cd9 nrtn 0x00000005 + 00022352 0x00004cda bpatchx 0x00000070 , 0x0000402e + 00022353 0x00004cdb call 0x00002841 + 00022354 0x00004cdc call 0x00005ad3 + 00022355 0x00004cdd jam 0x00000014 , 0x00000a99 + 00022356 0x00004cde call 0x00007d86 + 00022357 0x00004ce0 branch 0x00002223 + 00022358 0x00004ce4 bpatchx 0x00000071 , 0x0000402e + 00022359 0x00004ce5 fetch 0x00000002 , 0x0000445a + 00022360 0x00004ce6 iforce 0x00000012 + 00022361 0x00004ce7 fetch 0x00000002 , 0x0000445c + 00022362 0x00004ce8 iforce 0x00000013 + 00022363 0x00004ce9 fetch 0x00000002 , 0x000044bc + 00022364 0x00004cea iforce 0x00000006 + 00022365 0x00004ceb enable 0x00000028 + 00022366 0x00004cec rtn + 00022367 0x00004cf0 ifetch 0x00000002 , 0x00000006 + 00022368 0x00004cf1 rtn 0x00000034 + 00022369 0x00004cf2 isub 0x00000012 , 0x0000003e + 00022370 0x00004cf3 nrtn 0x00000002 + 00022371 0x00004cf4 isub 0x00000013 , 0x0000003e + 00022372 0x00004cf5 rtn 0x00000005 + 00022373 0x00004cf6 branch 0x00005768 , 0x00000002 + 00022374 0x00004cf7 force 0x00000001 , 0x0000003e + 00022375 0x00004cf8 rtn + 00022376 0x00004cfa force 0x00000000 , 0x0000003f + 00022377 0x00004cfb rtn + 00022378 0x00004d00 call 0x0000576d + 00022379 0x00004d01 branch 0x00005779 , 0x00000005 + 00022380 0x00004d02 rtn + 00022381 0x00004d05 bpatchx 0x00000072 , 0x0000402e + 00022382 0x00004d06 fetch 0x00000002 , 0x000044bc + 00022383 0x00004d07 iforce 0x00000006 + 00022384 0x00004d09 ifetch 0x00000002 , 0x00000006 + 00022385 0x00004d0a rtn 0x00000034 + 00022386 0x00004d0b isub 0x00000002 , 0x0000003e + 00022387 0x00004d0c rtn 0x00000005 + 00022388 0x00004d0d ifetch 0x00000001 , 0x00000006 + 00022389 0x00004d0e iadd 0x00000006 , 0x00000006 + 00022390 0x00004d0f ifetch 0x00000001 , 0x00000006 + 00022391 0x00004d10 iadd 0x00000006 , 0x00000006 + 00022392 0x00004d11 branch 0x00005770 + 00022393 0x00004d13 ifetch 0x00000001 , 0x00000006 + 00022394 0x00004d14 iadd 0x00000006 , 0x00000006 + 00022395 0x00004d15 rtn + 00022396 0x00004d1a bpatchx 0x00000073 , 0x0000402e + 00022397 0x00004d1b fetch 0x00000002 , 0x000044bc + 00022398 0x00004d1c iforce 0x00000006 + 00022399 0x00004d1e ifetch 0x00000002 , 0x00000006 + 00022400 0x00004d1f rtn 0x00000034 + 00022401 0x00004d20 ifetch 0x00000001 , 0x00000006 + 00022402 0x00004d21 iadd 0x00000006 , 0x00000006 + 00022403 0x00004d22 increase 0xfffffffe , 0x00000006 + 00022404 0x00004d23 ifetch 0x00000002 , 0x00000006 + 00022405 0x00004d24 isub 0x00000002 , 0x0000003e + 00022406 0x00004d25 rtn 0x00000005 + 00022407 0x00004d26 ifetch 0x00000001 , 0x00000006 + 00022408 0x00004d27 iadd 0x00000006 , 0x00000006 + 00022409 0x00004d28 branch 0x0000577f + 00022410 0x00004d2d fetch 0x00000002 , 0x0000049c + 00022411 0x00004d2e branch 0x0000578e + 00022412 0x00004d31 bpatchx 0x00000074 , 0x0000402e + 00022413 0x00004d32 fetch 0x00000002 , 0x000044bc + 00022414 0x00004d34 iforce 0x00000006 + 00022415 0x00004d35 copy 0x00000002 , 0x00000011 + 00022416 0x00004d37 ifetch 0x00000002 , 0x00000006 + 00022417 0x00004d38 branch 0x00005799 , 0x00000034 + 00022418 0x00004d39 isub 0x00000011 , 0x0000003e + 00022419 0x00004d3a branch 0x0000579a , 0x00000005 + 00022420 0x00004d3b ifetch 0x00000001 , 0x00000006 + 00022421 0x00004d3c iadd 0x00000006 , 0x00000006 + 00022422 0x00004d3d ifetch 0x00000001 , 0x00000006 + 00022423 0x00004d3e iadd 0x00000006 , 0x00000006 + 00022424 0x00004d3f branch 0x00005790 + 00022425 0x00004d41 branch 0x00007fef + 00022426 0x00004d44 ifetch 0x00000001 , 0x00000006 + 00022427 0x00004d45 store 0x00000001 , 0x000004a2 + 00022428 0x00004d46 copy 0x0000003f , 0x00000039 + 00022429 0x00004d47 arg 0x000004a3 , 0x00000005 + 00022430 0x00004d48 call 0x00007ef4 + 00022431 0x00004d49 ifetch 0x00000001 , 0x00000006 + 00022432 0x00004d4a store 0x00000001 , 0x000004b3 + 00022433 0x00004d4b call 0x00007ea5 + 00022434 0x00004d4c branch 0x00007ff1 + 00022435 0x00004d50 bpatchx 0x00000075 , 0x0000402e + 00022436 0x00004d51 call 0x000057a6 + 00022437 0x00004d52 branch 0x000057b8 + 00022438 0x00004d55 arg 0x00002a00 , 0x00000002 + 00022439 0x00004d56 call 0x0000577c + 00022440 0x00004d57 rtn 0x00000034 + 00022441 0x00004d58 ifetch 0x00000001 , 0x00000006 + 00022442 0x00004d59 copy 0x00000006 , 0x00000005 + 00022443 0x00004d5a fetcht 0x00000001 , 0x000043af + 00022444 0x00004d5b copy 0x00000002 , 0x00000039 + 00022445 0x00004d5c isub 0x00000002 , 0x0000003e + 00022446 0x00004d5d nbranch 0x000057b5 , 0x00000002 + 00022447 0x00004d5e isub 0x00000002 , 0x00000002 + 00022448 0x00004d5f arg 0x000043b0 , 0x00000006 + 00022449 0x00004d60 call 0x00007f01 + 00022450 0x00004d61 copy 0x00000002 , 0x00000039 + 00022451 0x00004d62 ncall 0x000057f0 , 0x00000005 + 00022452 0x00004d63 rtn + 00022453 0x00004d65 copy 0x0000003f , 0x00000039 + 00022454 0x00004d66 arg 0x000043b0 , 0x00000006 + 00022455 0x00004d67 branch 0x00007ef4 + 00022456 0x00004d6b arg 0x0000438f , 0x00000013 + 00022457 0x00004d6c arg 0x00004370 , 0x00000011 + 00022458 0x00004d6d call 0x000057c5 + 00022459 0x00004d6e setarg 0x00000000 + 00022460 0x00004d6f setflag 0x00000028 , 0x00000000 , 0x0000003f + 00022461 0x00004d70 store 0x00000001 , 0x00000a9a + 00022462 0x00004d71 arg 0x000043af , 0x00000013 + 00022463 0x00004d72 arg 0x00004390 , 0x00000011 + 00022464 0x00004d73 call 0x000057c5 + 00022465 0x00004d74 rtn 0x00000028 + 00022466 0x00004d75 fetch 0x00000001 , 0x00000a9a + 00022467 0x00004d76 branch 0x00002a8c , 0x00000034 + 00022468 0x00004d77 rtn + 00022469 0x00004d7b bpatchx 0x00000076 , 0x0000402e + 00022470 0x00004d7c call 0x00007fe7 + 00022471 0x00004d7d call 0x00007eda + 00022472 0x00004d7e arg 0x00000000 , 0x00000012 + 00022473 0x00004d7f arg 0x00000ac3 , 0x00000005 + 00022474 0x00004d80 call 0x000057df + 00022475 0x00004d81 fetch 0x00000001 , 0x000043af + 00022476 0x00004d82 add 0x0000003f , 0x00000001 , 0x00000002 + 00022477 0x00004d83 iadd 0x00000012 , 0x00000011 + 00022478 0x00004d84 increase 0x00000002 , 0x00000011 + 00022479 0x00004d85 sub 0x00000011 , 0x0000001f , 0x0000003e + 00022480 0x00004d86 nbranch 0x000057dd , 0x00000002 + 00022481 0x00004d87 istoret 0x00000001 , 0x00000005 + 00022482 0x00004d88 arg 0x00000009 , 0x00000002 + 00022483 0x00004d89 istoret 0x00000001 , 0x00000005 + 00022484 0x00004d8a iforce 0x00000039 + 00022485 0x00004d8b call 0x00007ef4 + 00022486 0x00004d8c copy 0x00000011 , 0x00000012 + 00022487 0x00004d8e deposit 0x00000012 + 00022488 0x00004d8f store 0x00000001 , 0x00000ac2 + 00022489 0x00004d90 arg 0x00000ac2 , 0x00000006 + 00022490 0x00004d91 setarg 0xffffffe0 + 00022491 0x00004d92 iadd 0x00000013 , 0x00000005 + 00022492 0x00004d93 branch 0x00007ebd + 00022493 0x00004d96 call 0x00007fe9 + 00022494 0x00004d97 branch 0x000057d7 + 00022495 0x00004d9a ifetch 0x00000001 , 0x00000011 + 00022496 0x00004d9b rtn 0x00000034 + 00022497 0x00004d9c pincrease 0x00000001 + 00022498 0x00004d9d ifetcht 0x00000001 , 0x00000006 + 00022499 0x00004d9e sub 0x00000002 , 0x00000009 , 0x0000003e + 00022500 0x00004d9f branch 0x000057ee , 0x00000005 + 00022501 0x00004da0 iadd 0x00000012 , 0x00000012 + 00022502 0x00004da1 copy 0x00000011 , 0x00000006 + 00022503 0x00004da2 iforce 0x00000039 + 00022504 0x00004da3 call 0x00007ef4 + 00022505 0x00004da4 copy 0x00000006 , 0x00000011 + 00022506 0x00004da6 deposit 0x00000011 + 00022507 0x00004da7 isub 0x00000013 , 0x0000003e + 00022508 0x00004da8 rtn 0x00000002 + 00022509 0x00004da9 branch 0x000057df + 00022510 0x00004dac iadd 0x00000011 , 0x00000011 + 00022511 0x00004dad branch 0x000057ea + 00022512 0x00004db1 setarg 0x00000020 + 00022513 0x00004db2 istore 0x00000001 , 0x00000005 + 00022514 0x00004db3 loop 0x000057f0 + 00022515 0x00004db4 rtn + 00022516 0x00004db8 bpatchx 0x00000077 , 0x0000402e + 00022517 0x00004db9 disable 0x0000002b + 00022518 0x00004dba branch 0x000057f8 , 0x0000002e + 00022519 0x00004dbb nbranch 0x00005806 , 0x0000002d + 00022520 0x00004dbd call 0x00002bcb + 00022521 0x00004dbe fetch 0x00000002 , 0x000040c1 + 00022522 0x00004dbf store 0x00000002 , 0x0000044d + 00022523 0x00004dc1 nbranch 0x00002bde , 0x0000002d + 00022524 0x00004dc2 bmark1 0x0000000f , 0x00002bde + 00022525 0x00004dc4 fetch 0x00000001 , 0x0000450b + 00022526 0x00004dc5 nbranch 0x00002bde , 0x00000034 + 00022527 0x00004dc6 fetch 0x00000001 , 0x000043dd + 00022528 0x00004dc7 nbranch 0x00002bde , 0x00000034 + 00022529 0x00004dc9 fetch 0x00000001 , 0x000044e9 + 00022530 0x00004dca bbit1 0x00000005 , 0x00002bde + 00022531 0x00004dcc fetch 0x00000001 , 0x0000043f + 00022532 0x00004dcd bbit1 0x00000005 , 0x00002bde + 00022533 0x00004dce branch 0x00002bc0 + 00022534 0x00004dd1 fetcht 0x00000002 , 0x000040c1 + 00022535 0x00004dd2 rshift 0x00000002 , 0x00000002 + 00022536 0x00004dd3 fetch 0x00000002 , 0x0000044d + 00022537 0x00004dd4 iadd 0x00000002 , 0x0000003f + 00022538 0x00004dd5 store 0x00000002 , 0x0000044d + 00022539 0x00004dd6 branch 0x00002bd6 + 00022540 0x00004dda arg 0x00000000 , 0x00000007 + 00022541 0x00004ddb branch 0x00005824 + 00022542 0x00004dde arg 0x00000000 , 0x00000007 + 00022543 0x00004ddf branch 0x00005828 + 00022544 0x00004de2 arg 0x00000001 , 0x00000007 + 00022545 0x00004de3 branch 0x00005824 + 00022546 0x00004de6 arg 0x00000001 , 0x00000007 + 00022547 0x00004de7 branch 0x00005828 + 00022548 0x00004dea arg 0x00000002 , 0x00000007 + 00022549 0x00004deb branch 0x00005824 + 00022550 0x00004dee arg 0x00000002 , 0x00000007 + 00022551 0x00004def branch 0x00005828 + 00022552 0x00004df2 arg 0x00000003 , 0x00000007 + 00022553 0x00004df3 branch 0x00005824 + 00022554 0x00004df6 arg 0x00000003 , 0x00000007 + 00022555 0x00004df7 branch 0x00005828 + 00022556 0x00004dfa arg 0x00000004 , 0x00000007 + 00022557 0x00004dfb branch 0x00005824 + 00022558 0x00004dfe arg 0x00000004 , 0x00000007 + 00022559 0x00004dff branch 0x00005828 + 00022560 0x00004e02 arg 0x00000005 , 0x00000007 + 00022561 0x00004e03 branch 0x00005824 + 00022562 0x00004e06 arg 0x00000005 , 0x00000007 + 00022563 0x00004e07 branch 0x00005828 + 00022564 0x00004e0b fetch 0x00000001 , 0x000044e9 + 00022565 0x00004e0c qset1 0x0000003f + 00022566 0x00004e0d store 0x00000001 , 0x000044e9 + 00022567 0x00004e0e rtn + 00022568 0x00004e11 fetch 0x00000001 , 0x000044e9 + 00022569 0x00004e12 qset0 0x0000003f + 00022570 0x00004e13 store 0x00000001 , 0x000044e9 + 00022571 0x00004e14 rtn + 00022572 0x00004e17 setarg 0x00112233 + 00022573 0x00004e18 store 0x00000003 , 0x000044ea + 00022574 0x00004e19 setarg 0x00445566 + 00022575 0x00004e1a istore 0x00000003 , 0x00000005 + 00022576 0x00004e1b setarg 0x00778899 + 00022577 0x00004e1c istore 0x00000003 , 0x00000005 + 00022578 0x00004e1d setarg 0x00001122 + 00022579 0x00004e1e istore 0x00000003 , 0x00000005 + 00022580 0x00004e1f setarg 0x00334455 + 00022581 0x00004e20 istore 0x00000003 , 0x00000005 + 00022582 0x00004e21 setarg 0x00000066 + 00022583 0x00004e22 istore 0x00000001 , 0x00000005 + 00022584 0x00004e23 rtn + 00022585 0x00004e27 setarg 0x01000302 + 00022586 0x00004e28 store 0x00000004 , 0x00004453 + 00022587 0x00004e29 setarg 0x00010010 + 00022588 0x00004e2a store 0x00000003 , 0x00004457 + 00022589 0x00004e2b jam 0x00000001 , 0x000044c6 + 00022590 0x00004e2c rtn + 00022591 0x00004e31 arg 0x00000000 , 0x00000011 + 00022592 0x00004e32 arg 0x00000001 , 0x00000001 + 00022593 0x00004e33 branch 0x00005850 + 00022594 0x00004e38 arg 0x00000003 , 0x00000001 + 00022595 0x00004e39 call 0x00005850 + 00022596 0x00004e3a copy 0x00000012 , 0x0000003f + 00022597 0x00004e3b istore 0x00000001 , 0x00000005 + 00022598 0x00004e3c rtn + 00022599 0x00004e41 force 0x00000002 , 0x00000001 + 00022600 0x00004e42 increase 0x00000004 , 0x00000011 + 00022601 0x00004e43 call 0x00005850 + 00022602 0x00004e44 increase 0xfffffffc , 0x00000011 + 00022603 0x00004e45 copy 0x00000011 , 0x0000003f + 00022604 0x00004e46 istore 0x00000002 , 0x00000005 + 00022605 0x00004e47 copy 0x00000012 , 0x0000003f + 00022606 0x00004e48 istore 0x00000002 , 0x00000005 + 00022607 0x00004e49 rtn + 00022608 0x00004e4e sub 0x00000011 , 0x000000f0 , 0x0000003e + 00022609 0x00004e4f nbranch 0x00002a8c , 0x00000002 + 00022610 0x00004e50 fetch 0x00000001 , 0x000044ff + 00022611 0x00004e51 arg 0x00000001 , 0x00000002 + 00022612 0x00004e52 arg 0x00000004 , 0x00000039 + 00022613 0x00004e54 iand 0x00000002 , 0x0000003e + 00022614 0x00004e55 branch 0x0000585a , 0x00000005 + 00022615 0x00004e56 lshift 0x00000002 , 0x00000002 + 00022616 0x00004e57 loop 0x00005855 + 00022617 0x00004e58 branch 0x00002a8c + 00022618 0x00004e5a ixor 0x00000002 , 0x0000003f + 00022619 0x00004e5b store 0x00000001 , 0x000044ff + 00022620 0x00004e5c sub 0x00000039 , 0x00000004 , 0x0000003f + 00022621 0x00004e5d lshift4 0x0000003f , 0x0000003f + 00022622 0x00004e5e lshift4 0x0000003f , 0x0000003f + 00022623 0x00004e5f arg 0x00001800 , 0x00000002 + 00022624 0x00004e60 iadd 0x00000002 , 0x00000002 + 00022625 0x00004e62 arg 0x00000000 , 0x00000039 + 00022626 0x00004e63 arg 0x00004500 , 0x00000006 + 00022627 0x00004e65 ifetch 0x00000002 , 0x00000006 + 00022628 0x00004e66 branch 0x00005869 , 0x00000034 + 00022629 0x00004e67 copy 0x00000039 , 0x0000003f + 00022630 0x00004e68 increase 0x00000001 , 0x00000039 + 00022631 0x00004e69 bne 0x00000004 , 0x00005863 + 00022632 0x00004e6a branch 0x00002a8c + 00022633 0x00004e6e increase 0xfffffffe , 0x00000006 + 00022634 0x00004e6f istoret 0x00000002 , 0x00000006 + 00022635 0x00004e70 copy 0x00000002 , 0x00000005 + 00022636 0x00004e71 copy 0x00000011 , 0x0000003f + 00022637 0x00004e72 istore 0x00000001 , 0x00000005 + 00022638 0x00004e73 setarg 0x00000000 + 00022639 0x00004e74 istore 0x00000001 , 0x00000005 + 00022640 0x00004e75 copy 0x00000001 , 0x0000003f + 00022641 0x00004e76 istore 0x00000001 , 0x00000005 + 00022642 0x00004e77 rtn + 00022643 0x00004e7c fetch 0x00000002 , 0x00004500 + 00022644 0x00004e7d copy 0x0000003f , 0x00000006 + 00022645 0x00004e7e rtn + 00022646 0x00004e81 fetch 0x00000002 , 0x00004502 + 00022647 0x00004e82 copy 0x0000003f , 0x00000006 + 00022648 0x00004e83 rtn + 00022649 0x00004e86 call 0x0000587c + 00022650 0x00004e87 copy 0x0000003f , 0x00000006 + 00022651 0x00004e88 rtn + 00022652 0x00004e8a fetch 0x00000002 , 0x00004506 + 00022653 0x00004e8b nrtn 0x00000034 + 00022654 0x00004e8c fetch 0x00000002 , 0x00004504 + 00022655 0x00004e8d nrtn 0x00000034 + 00022656 0x00004e8e fetch 0x00000002 , 0x00004502 + 00022657 0x00004e8f nrtn 0x00000034 + 00022658 0x00004e90 fetch 0x00000002 , 0x00004500 + 00022659 0x00004e91 rtn + 00022660 0x00004e94 call 0x00005873 + 00022661 0x00004e95 increase 0x00000003 , 0x00000006 + 00022662 0x00004e96 rtn + 00022663 0x00004e99 call 0x00005873 + 00022664 0x00004e9a increase 0x00000007 , 0x00000006 + 00022665 0x00004e9b rtn + 00022666 0x00004e9e call 0x00005879 + 00022667 0x00004e9f increase 0x00000007 , 0x00000006 + 00022668 0x00004ea0 rtn + 00022669 0x00004ea3 call 0x00005879 + 00022670 0x00004ea4 increase 0x00000003 , 0x00000006 + 00022671 0x00004ea5 rtn + 00022672 0x00004eaa fetch 0x00000002 , 0x00004506 + 00022673 0x00004eab rtn + 00022674 0x00004eaf fetch 0x00000002 , 0x00004504 + 00022675 0x00004eb0 rtn + 00022676 0x00004eb4 fetch 0x00000002 , 0x00004500 + 00022677 0x00004eb5 rtn + 00022678 0x00004eb9 fetch 0x00000002 , 0x00004500 + 00022679 0x00004eba arg 0x00001800 , 0x00000002 + 00022680 0x00004ebb isub 0x00000002 , 0x0000003f + 00022681 0x00004ebc rshift4 0x0000003f , 0x0000003f + 00022682 0x00004ebd rshift4 0x0000003f , 0x00000007 + 00022683 0x00004ebe fetch 0x00000001 , 0x000044ff + 00022684 0x00004ebf qset0 0x0000003f + 00022685 0x00004ec0 store 0x00000001 , 0x000044ff + 00022686 0x00004ec1 arg 0x00000000 , 0x00000039 + 00022687 0x00004ec3 lshift 0x00000039 , 0x0000003f + 00022688 0x00004ec4 arg 0x00004502 , 0x00000002 + 00022689 0x00004ec5 iadd 0x00000002 , 0x00000002 + 00022690 0x00004ec6 ifetch 0x00000002 , 0x00000002 + 00022691 0x00004ec7 increase 0xfffffffe , 0x00000002 + 00022692 0x00004ec8 istore 0x00000002 , 0x00000002 + 00022693 0x00004ec9 copy 0x00000039 , 0x0000003f + 00022694 0x00004eca increase 0x00000001 , 0x00000039 + 00022695 0x00004ecb bne 0x00000003 , 0x0000589f + 00022696 0x00004ecc setarg 0x00000000 + 00022697 0x00004ecd istore 0x00000002 , 0x00000002 + 00022698 0x00004ece rtn + 00022699 0x00004ed5 ifetch 0x00000003 , 0x00000006 + 00022700 0x00004ed6 store 0x00000003 , 0x00000477 + 00022701 0x00004ed7 beq 0x00000002 , 0x000058c1 + 00022702 0x00004ed8 beq 0x00000003 , 0x000058c9 + 00022703 0x00004ed9 beq 0x00000004 , 0x000058cc + 00022704 0x00004eda beq 0x00000006 , 0x000058f2 + 00022705 0x00004edb beq 0x00000008 , 0x0000593f + 00022706 0x00004edc beq 0x0000000a , 0x000059bc + 00022707 0x00004edd beq 0x0000000c , 0x000059e4 + 00022708 0x00004ede beq 0x00000010 , 0x000059fa + 00022709 0x00004edf beq 0x00000012 , 0x00005a2f + 00022710 0x00004ee0 beq 0x00000016 , 0x00005a48 + 00022711 0x00004ee1 beq 0x00000018 , 0x00005a5b + 00022712 0x00004ee2 beq 0x00000052 , 0x00005a60 + 00022713 0x00004ee3 rtn + 00022714 0x00004ee7 force 0x00000003 , 0x00000011 + 00022715 0x00004ee8 call 0x00005a82 + 00022716 0x00004ee9 setarg 0x00000002 + 00022717 0x00004eea istore 0x00000001 , 0x00000005 + 00022718 0x00004eeb fetch 0x00000002 , 0x000044a6 + 00022719 0x00004eec istore 0x00000002 , 0x00000005 + 00022720 0x00004eed rtn + 00022721 0x00004ef1 call 0x000058c9 + 00022722 0x00004ef3 force 0x00000003 , 0x00000011 + 00022723 0x00004ef4 call 0x00005a82 + 00022724 0x00004ef5 setarg 0x00000003 + 00022725 0x00004ef6 istore 0x00000001 , 0x00000005 + 00022726 0x00004ef7 fetch 0x00000002 , 0x000044a6 + 00022727 0x00004ef8 istore 0x00000002 , 0x00000005 + 00022728 0x00004ef9 rtn + 00022729 0x00004efc rshift8 0x0000003f , 0x0000003f + 00022730 0x00004efd store 0x00000002 , 0x000044a8 + 00022731 0x00004efe rtn + 00022732 0x00004f01 call 0x00005ab1 + 00022733 0x00004f02 call 0x00007fe7 + 00022734 0x00004f03 branch 0x000058cf + 00022735 0x00004f06 arg 0x00000003 , 0x0000000b + 00022736 0x00004f07 call 0x00005756 + 00022737 0x00004f09 call 0x0000575f + 00022738 0x00004f0a branch 0x000058f0 , 0x00000034 + 00022739 0x00004f0b nbranch 0x000058ed , 0x00000002 + 00022740 0x00004f0c increase 0xfffffffe , 0x00000006 + 00022741 0x00004f0d call 0x00007ea5 + 00022742 0x00004f0e call 0x00007e9c + 00022743 0x00004f0f nbranch 0x000058e1 , 0x00000028 + 00022744 0x00004f10 call 0x00007e85 + 00022745 0x00004f11 call 0x00007fe9 + 00022746 0x00004f12 force 0x00000014 , 0x00000011 + 00022747 0x00004f13 call 0x00005a82 + 00022748 0x00004f14 call 0x00007e95 + 00022749 0x00004f15 setarg 0x00000005 + 00022750 0x00004f16 istore 0x00000001 , 0x00000005 + 00022751 0x00004f17 setarg 0x00000001 + 00022752 0x00004f18 istore 0x00000001 , 0x00000005 + 00022753 0x00004f1a call 0x00007e9f + 00022754 0x00004f1b ifetch 0x00000002 , 0x00000006 + 00022755 0x00004f1c istore 0x00000002 , 0x00000005 + 00022756 0x00004f1d ifetch 0x00000001 , 0x00000006 + 00022757 0x00004f1e copy 0x0000003f , 0x00000039 + 00022758 0x00004f1f call 0x00007f01 + 00022759 0x00004f20 call 0x00007ea2 + 00022760 0x00004f21 increase 0xffffffff , 0x0000000b + 00022761 0x00004f22 branch 0x000058f0 , 0x00000005 + 00022762 0x00004f24 ifetch 0x00000001 , 0x00000006 + 00022763 0x00004f25 iadd 0x00000006 , 0x00000006 + 00022764 0x00004f26 branch 0x000058d1 + 00022765 0x00004f28 ifetch 0x00000001 , 0x00000006 + 00022766 0x00004f29 iadd 0x00000006 , 0x00000006 + 00022767 0x00004f2a branch 0x000058ea + 00022768 0x00004f2c branch 0x00005a76 , 0x00000028 + 00022769 0x00004f2d branch 0x00005aa5 + 00022770 0x00004f31 call 0x00005ab1 + 00022771 0x00004f32 ifetch 0x00000002 , 0x00000006 + 00022772 0x00004f33 store 0x00000002 , 0x00004472 + 00022773 0x00004f34 call 0x00007ea5 + 00022774 0x00004f35 arg 0x0000445e , 0x00000005 + 00022775 0x00004f36 fetch 0x00000002 , 0x000044fc + 00022776 0x00004f37 increase 0xfffffff9 , 0x0000003f + 00022777 0x00004f38 call 0x000056db + 00022778 0x00004f39 branch 0x00005905 + 00022779 0x00004f3d disable 0x00000028 + 00022780 0x00004f3e fetcht 0x00000002 , 0x0000445a + 00022781 0x00004f3f fetch 0x00000002 , 0x0000445c + 00022782 0x00004f40 isub 0x00000002 , 0x0000003e + 00022783 0x00004f41 nbranch 0x00005902 , 0x00000002 + 00022784 0x00004f42 deposit 0x00000002 + 00022785 0x00004f43 rtnne 0x00000000 + 00022786 0x00004f45 enable 0x00000028 + 00022787 0x00004f46 jam 0x00000001 , 0x0000047a + 00022788 0x00004f47 branch 0x00005a77 + 00022789 0x00004f4b call 0x000058fb + 00022790 0x00004f4c rtn 0x00000028 + 00022791 0x00004f4d fetcht 0x00000002 , 0x00004472 + 00022792 0x00004f4e setarg 0x00002800 + 00022793 0x00004f4f isub 0x00000002 , 0x0000003e + 00022794 0x00004f50 branch 0x0000590c , 0x00000005 + 00022795 0x00004f51 branch 0x00005a76 + 00022796 0x00004f55 jam 0x00000000 , 0x000004b4 + 00022797 0x00004f56 fetcht 0x00000002 , 0x0000445a + 00022798 0x00004f57 storet 0x00000002 , 0x00000aa2 + 00022799 0x00004f58 call 0x0000578c + 00022800 0x00004f59 nbranch 0x00005a76 , 0x00000034 + 00022801 0x00004f5b fetcht 0x00000002 , 0x00000aa2 + 00022802 0x00004f5c call 0x0000578c + 00022803 0x00004f5d nbranch 0x00005925 , 0x00000034 + 00022804 0x00004f5e copy 0x00000006 , 0x00000011 + 00022805 0x00004f5f fetch 0x00000001 , 0x000004b3 + 00022806 0x00004f60 copy 0x0000003f , 0x00000039 + 00022807 0x00004f61 fetcht 0x00000001 , 0x0000445e + 00022808 0x00004f62 isub 0x00000002 , 0x0000003e + 00022809 0x00004f63 nbranch 0x00005921 , 0x00000005 + 00022810 0x00004f64 arg 0x0000445f , 0x00000012 + 00022811 0x00004f65 call 0x00007f88 + 00022812 0x00004f67 branch 0x00005928 , 0x00000005 + 00022813 0x00004f69 fetch 0x00000002 , 0x000004a3 + 00022814 0x00004f6a fetcht 0x00000002 , 0x00004472 + 00022815 0x00004f6b isub 0x00000002 , 0x0000003e + 00022816 0x00004f6c branch 0x00005930 , 0x00000005 + 00022817 0x00004f6e fetch 0x00000002 , 0x00000aa2 + 00022818 0x00004f6f increase 0x00000001 , 0x0000003f + 00022819 0x00004f70 store 0x00000002 , 0x00000aa2 + 00022820 0x00004f71 branch 0x00005911 + 00022821 0x00004f74 fetch 0x00000001 , 0x000004b4 + 00022822 0x00004f75 beq 0x00000001 , 0x00005930 + 00022823 0x00004f76 branch 0x00005a76 + 00022824 0x00004f7a fetch 0x00000002 , 0x000004a3 + 00022825 0x00004f7b fetcht 0x00000002 , 0x00004472 + 00022826 0x00004f7c isub 0x00000002 , 0x0000003e + 00022827 0x00004f7d nbranch 0x00005921 , 0x00000005 + 00022828 0x00004f7e jam 0x00000001 , 0x000004b4 + 00022829 0x00004f80 fetcht 0x00000002 , 0x00000aa2 + 00022830 0x00004f81 storet 0x00000002 , 0x0000049e + 00022831 0x00004f82 branch 0x00005921 + 00022832 0x00004f85 fetch 0x00000001 , 0x000004b4 + 00022833 0x00004f86 beq 0x00000000 , 0x00005921 + 00022834 0x00004f87 jam 0x00000002 , 0x000004b4 + 00022835 0x00004f88 fetcht 0x00000002 , 0x00000aa2 + 00022836 0x00004f89 increase 0xffffffff , 0x00000002 + 00022837 0x00004f8a storet 0x00000002 , 0x000004a0 + 00022838 0x00004f8d arg 0x00000005 , 0x00000011 + 00022839 0x00004f8e call 0x00005a82 + 00022840 0x00004f8f setarg 0x00000007 + 00022841 0x00004f90 istore 0x00000001 , 0x00000005 + 00022842 0x00004f91 fetch 0x00000002 , 0x0000049e + 00022843 0x00004f92 istore 0x00000002 , 0x00000005 + 00022844 0x00004f93 fetch 0x00000002 , 0x000004a0 + 00022845 0x00004f94 istore 0x00000002 , 0x00000005 + 00022846 0x00004f95 rtn + 00022847 0x00004f9a call 0x00005ab1 + 00022848 0x00004f9b call 0x000056df + 00022849 0x00004f9c branch 0x00005942 + 00022850 0x00004f9f fetcht 0x00000002 , 0x0000445a + 00022851 0x00004fa0 storet 0x00000002 , 0x00000aa2 + 00022852 0x00004fa1 call 0x00005756 + 00022853 0x00004fa2 call 0x0000576d + 00022854 0x00004fa3 increase 0xfffffffe , 0x00000006 + 00022855 0x00004fa4 copy 0x00000006 , 0x0000003f + 00022856 0x00004fa5 store 0x00000002 , 0x0000049c + 00022857 0x00004fa7 fetcht 0x00000002 , 0x00004472 + 00022858 0x00004fa8 setarg 0x00002a00 + 00022859 0x00004fa9 isub 0x00000002 , 0x0000003e + 00022860 0x00004faa branch 0x000059a8 , 0x00000005 + 00022861 0x00004fab setarg 0x00002803 + 00022862 0x00004fac isub 0x00000002 , 0x0000003e + 00022863 0x00004fad nbranch 0x00005990 , 0x00000005 + 00022864 0x00004fae arg 0x00000002 , 0x0000000b + 00022865 0x00004fb0 call 0x00005a88 + 00022866 0x00004fb1 nbranch 0x0000596d , 0x00000002 + 00022867 0x00004fb2 fetcht 0x00000002 , 0x00000aa2 + 00022868 0x00004fb3 call 0x0000578a + 00022869 0x00004fb4 beq 0x00000001 , 0x0000596d + 00022870 0x00004fb5 call 0x00005a94 + 00022871 0x00004fb6 nbranch 0x0000596b , 0x00000005 + 00022872 0x00004fb7 nbranch 0x0000596f , 0x00000028 + 00022873 0x00004fb8 disable 0x00000028 + 00022874 0x00004fb9 arg 0x00000014 , 0x00000011 + 00022875 0x00004fba call 0x00005a82 + 00022876 0x00004fbb setarg 0x00000009 + 00022877 0x00004fbc istore 0x00000001 , 0x00000005 + 00022878 0x00004fbd copy 0x00000005 , 0x00000030 + 00022879 0x00004fbe increase 0x00000001 , 0x00000005 + 00022880 0x00004fc0 call 0x0000597d + 00022881 0x00004fc1 call 0x00005a84 + 00022882 0x00004fc2 call 0x0000578a + 00022883 0x00004fc3 call 0x00005984 + 00022884 0x00004fc4 fetch 0x00000001 , 0x000004a2 + 00022885 0x00004fc5 increase 0x00000005 , 0x0000003f + 00022886 0x00004fc6 istore 0x00000001 , 0x00000030 + 00022887 0x00004fc7 fetch 0x00000001 , 0x000004a2 + 00022888 0x00004fc8 beq 0x00000010 , 0x0000596d + 00022889 0x00004fc9 increase 0xffffffff , 0x0000000b + 00022890 0x00004fca branch 0x0000596d , 0x00000005 + 00022891 0x00004fcc call 0x00005a84 + 00022892 0x00004fcd branch 0x00005951 + 00022893 0x00004fcf branch 0x00005a76 , 0x00000028 + 00022894 0x00004fd0 branch 0x00005aa5 + 00022895 0x00004fd3 call 0x00005a97 + 00022896 0x00004fd4 call 0x00005a84 + 00022897 0x00004fd5 call 0x0000578a + 00022898 0x00004fd6 fetch 0x00000001 , 0x000004a2 + 00022899 0x00004fd7 beq 0x00000010 , 0x0000596d + 00022900 0x00004fd9 call 0x00007e9c + 00022901 0x00004fda fetch 0x00000002 , 0x00000aa2 + 00022902 0x00004fdb increase 0xffffffff , 0x0000003f + 00022903 0x00004fdc istore 0x00000002 , 0x00000005 + 00022904 0x00004fdd call 0x00005aa1 + 00022905 0x00004fde call 0x00005984 + 00022906 0x00004fdf increase 0xffffffff , 0x0000000b + 00022907 0x00004fe0 branch 0x0000596d , 0x00000005 + 00022908 0x00004fe1 branch 0x0000596b + 00022909 0x00004fe5 fetch 0x00000002 , 0x00000aa2 + 00022910 0x00004fe6 istore 0x00000002 , 0x00000005 + 00022911 0x00004fe8 fetch 0x00000001 , 0x000004b3 + 00022912 0x00004fe9 copy 0x0000003f , 0x00000039 + 00022913 0x00004fea call 0x00007e9f + 00022914 0x00004feb call 0x00007ef4 + 00022915 0x00004fec branch 0x00007ea2 + 00022916 0x00004fee call 0x00007e9c + 00022917 0x00004fef fetch 0x00000002 , 0x00000aa2 + 00022918 0x00004ff0 istore 0x00000002 , 0x00000005 + 00022919 0x00004ff1 call 0x00007ea2 + 00022920 0x00004ff2 fetch 0x00000001 , 0x000004a2 + 00022921 0x00004ff3 copy 0x0000003f , 0x00000039 + 00022922 0x00004ff4 call 0x00007e9c + 00022923 0x00004ff5 call 0x00007e9f + 00022924 0x00004ff6 isub 0x00000039 , 0x00000006 + 00022925 0x00004ff7 increase 0xffffffff , 0x00000006 + 00022926 0x00004ff8 call 0x00007ef4 + 00022927 0x00004ff9 branch 0x00007ea2 + 00022928 0x00004ffe fetcht 0x00000002 , 0x0000445a + 00022929 0x00004fff storet 0x00000002 , 0x00000aa2 + 00022930 0x00005001 call 0x00005a88 + 00022931 0x00005002 nbranch 0x00005a76 , 0x00000002 + 00022932 0x00005003 call 0x0000578a + 00022933 0x00005004 beq 0x00000001 , 0x00005a76 + 00022934 0x00005005 call 0x00005a94 + 00022935 0x00005006 nbranch 0x000059a6 , 0x00000005 + 00022936 0x00005009 arg 0x00000014 , 0x00000011 + 00022937 0x0000500a call 0x00005a82 + 00022938 0x0000500b setarg 0x00000009 + 00022939 0x0000500c istore 0x00000001 , 0x00000005 + 00022940 0x0000500d fetch 0x00000001 , 0x000004b3 + 00022941 0x0000500e copy 0x0000003f , 0x00000039 + 00022942 0x0000500f increase 0x00000002 , 0x0000003f + 00022943 0x00005010 istore 0x00000001 , 0x00000005 + 00022944 0x00005011 fetch 0x00000002 , 0x00000aa2 + 00022945 0x00005012 istore 0x00000002 , 0x00000005 + 00022946 0x00005013 call 0x00007e9f + 00022947 0x00005014 call 0x00007ef4 + 00022948 0x00005015 call 0x00007ea2 + 00022949 0x00005016 branch 0x00005aa5 + 00022950 0x00005019 call 0x00005a84 + 00022951 0x0000501a branch 0x00005992 + 00022952 0x0000501e arg 0x00002a00 , 0x00000002 + 00022953 0x0000501f call 0x0000577c + 00022954 0x00005020 rtn 0x00000034 + 00022955 0x00005021 increase 0xfffffffb , 0x00000006 + 00022956 0x00005022 ifetch 0x00000002 , 0x00000006 + 00022957 0x00005023 store 0x00000002 , 0x00000aa2 + 00022958 0x00005024 arg 0x00000014 , 0x00000011 + 00022959 0x00005025 call 0x00005a82 + 00022960 0x00005026 setarg 0x00000009 + 00022961 0x00005027 istore 0x00000001 , 0x00000005 + 00022962 0x00005028 fetch 0x00000001 , 0x000043af + 00022963 0x00005029 copy 0x0000003f , 0x00000039 + 00022964 0x0000502a increase 0x00000002 , 0x0000003f + 00022965 0x0000502b istore 0x00000001 , 0x00000005 + 00022966 0x0000502c fetch 0x00000002 , 0x00000aa2 + 00022967 0x0000502d istore 0x00000002 , 0x00000005 + 00022968 0x0000502e arg 0x000043b0 , 0x00000006 + 00022969 0x0000502f call 0x00007ef4 + 00022970 0x00005030 call 0x00007ea2 + 00022971 0x00005031 branch 0x00005aa5 + 00022972 0x00005036 fetcht 0x00000002 , 0x00000478 + 00022973 0x00005037 fetch 0x00000001 , 0x000044e9 + 00022974 0x00005038 bbit1 0x00000003 , 0x000059dd + 00022975 0x0000503b call 0x0000576a + 00022976 0x0000503c branch 0x00005a76 , 0x00000034 + 00022977 0x0000503d increase 0xfffffffe , 0x00000006 + 00022978 0x0000503e ifetch 0x00000002 , 0x00000006 + 00022979 0x0000503f arg 0x00002a00 , 0x00000002 + 00022980 0x00005040 isub 0x00000002 , 0x0000003e + 00022981 0x00005041 branch 0x000059d3 , 0x00000005 + 00022982 0x00005042 ifetch 0x00000001 , 0x00000006 + 00022983 0x00005043 sub 0x0000003f , 0x00000016 , 0x0000003e + 00022984 0x00005044 branch 0x000059ca , 0x00000002 + 00022985 0x00005045 force 0x00000016 , 0x0000003f + 00022986 0x00005047 copy 0x0000003f , 0x00000013 + 00022987 0x00005048 call 0x00007ea5 + 00022988 0x00005049 add 0x00000013 , 0x00000001 , 0x00000011 + 00022989 0x0000504a call 0x00005a82 + 00022990 0x0000504b setarg 0x0000000b + 00022991 0x0000504c istore 0x00000001 , 0x00000005 + 00022992 0x0000504d copy 0x00000013 , 0x00000039 + 00022993 0x0000504e call 0x00007e9f + 00022994 0x0000504f branch 0x00007f01 + 00022995 0x00005052 call 0x00007ea5 + 00022996 0x00005053 fetch 0x00000001 , 0x000043af + 00022997 0x00005054 add 0x0000003f , 0x00000001 , 0x00000011 + 00022998 0x00005055 call 0x00005a82 + 00022999 0x00005056 setarg 0x0000000b + 00023000 0x00005057 istore 0x00000001 , 0x00000005 + 00023001 0x00005058 fetch 0x00000001 , 0x000043af + 00023002 0x00005059 copy 0x0000003f , 0x00000039 + 00023003 0x0000505a arg 0x000043b0 , 0x00000006 + 00023004 0x0000505b branch 0x00007f01 + 00023005 0x0000505f fetch 0x00000002 , 0x000044fa + 00023006 0x00005060 isub 0x00000002 , 0x0000003e + 00023007 0x00005061 nbranch 0x000059bf , 0x00000005 + 00023008 0x00005063 call 0x00005a42 + 00023009 0x00005064 nbranch 0x000059bf , 0x00000028 + 00023010 0x00005065 jam 0x00000005 , 0x0000047a + 00023011 0x00005066 branch 0x00005a77 + 00023012 0x0000506a ifetch 0x00000002 , 0x00000006 + 00023013 0x0000506b store 0x00000002 , 0x0000445e + 00023014 0x0000506d arg 0x00000014 , 0x00000011 + 00023015 0x0000506e call 0x00005a82 + 00023016 0x0000506f setarg 0x0000000d + 00023017 0x00005070 istore 0x00000001 , 0x00000005 + 00023018 0x00005071 fetch 0x00000002 , 0x0000445e + 00023019 0x00005072 iforce 0x00000011 + 00023020 0x00005073 fetcht 0x00000002 , 0x00000478 + 00023021 0x00005074 call 0x0000576a + 00023022 0x00005075 branch 0x00005a76 , 0x00000034 + 00023023 0x00005076 ifetch 0x00000001 , 0x00000006 + 00023024 0x00005077 isub 0x00000011 , 0x00000039 + 00023025 0x00005078 nbranch 0x00005a76 , 0x00000002 + 00023026 0x00005079 sub 0x00000039 , 0x00000016 , 0x0000003e + 00023027 0x0000507a branch 0x000059f5 , 0x00000002 + 00023028 0x0000507b force 0x00000016 , 0x00000039 + 00023029 0x0000507d deposit 0x00000011 + 00023030 0x0000507e iadd 0x00000006 , 0x00000006 + 00023031 0x0000507f call 0x00007ef4 + 00023032 0x00005080 call 0x00007ea2 + 00023033 0x00005081 branch 0x00005aa5 + 00023034 0x00005085 call 0x00005ab1 + 00023035 0x00005086 call 0x000056d7 + 00023036 0x00005087 branch 0x000059fd + 00023037 0x0000508d arg 0x00000002 , 0x0000000b + 00023038 0x0000508e fetcht 0x00000002 , 0x0000445a + 00023039 0x00005092 storet 0x00000002 , 0x00000aa2 + 00023040 0x00005093 call 0x00005756 + 00023041 0x00005094 call 0x0000576d + 00023042 0x00005095 increase 0xfffffffe , 0x00000006 + 00023043 0x00005096 copy 0x00000006 , 0x0000003f + 00023044 0x00005097 store 0x00000002 , 0x0000049c + 00023045 0x00005099 call 0x00005a88 + 00023046 0x0000509a nbranch 0x00005a25 , 0x00000002 + 00023047 0x0000509b fetcht 0x00000002 , 0x00000aa2 + 00023048 0x0000509c call 0x0000578a + 00023049 0x0000509d beq 0x00000001 , 0x00005a28 + 00023050 0x0000509f call 0x00005a8c + 00023051 0x000050a0 nbranch 0x00005a23 , 0x00000005 + 00023052 0x000050a1 copy 0x0000000b , 0x0000003f + 00023053 0x000050a2 beq 0x00000000 , 0x00005a28 + 00023054 0x000050a3 nbranch 0x00005a19 , 0x00000028 + 00023055 0x000050a4 disable 0x00000028 + 00023056 0x000050a6 arg 0x00000014 , 0x00000011 + 00023057 0x000050a7 call 0x00005a82 + 00023058 0x000050a8 setarg 0x00000011 + 00023059 0x000050a9 istore 0x00000001 , 0x00000005 + 00023060 0x000050aa fetch 0x00000001 , 0x000004b3 + 00023061 0x000050ab increase 0x00000004 , 0x0000003f + 00023062 0x000050ac istore 0x00000001 , 0x00000005 + 00023063 0x000050ad call 0x00007ea2 + 00023064 0x000050ae branch 0x00005a1f + 00023065 0x000050b0 fetch 0x00000001 , 0x000004b3 + 00023066 0x000050b1 beq 0x00000010 , 0x00005a28 + 00023067 0x000050b2 fetch 0x00000002 , 0x00000aa2 + 00023068 0x000050b3 increase 0xffffffff , 0x0000003f + 00023069 0x000050b4 store 0x00000002 , 0x000004a0 + 00023070 0x000050b5 call 0x00005a9c + 00023071 0x000050b7 fetch 0x00000002 , 0x00000aa2 + 00023072 0x000050b8 store 0x00000002 , 0x0000049e + 00023073 0x000050b9 call 0x00005a97 + 00023074 0x000050ba increase 0xffffffff , 0x0000000b + 00023075 0x000050bd call 0x00005a84 + 00023076 0x000050be branch 0x00005a05 + 00023077 0x000050c1 fetch 0x00000002 , 0x00000aa2 + 00023078 0x000050c2 store 0x00000002 , 0x000004a0 + 00023079 0x000050c3 branch 0x00005a2c + 00023080 0x000050c5 fetch 0x00000002 , 0x00000aa2 + 00023081 0x000050c6 increase 0xffffffff , 0x0000003f + 00023082 0x000050c7 store 0x00000002 , 0x000004a0 + 00023083 0x000050c8 branch 0x00005a2c + 00023084 0x000050ca branch 0x00005a76 , 0x00000028 + 00023085 0x000050cb call 0x00005a9c + 00023086 0x000050cc branch 0x00005aa5 + 00023087 0x000050d2 copy 0x00000006 , 0x00000011 + 00023088 0x000050d3 fetch 0x00000002 , 0x000044fc + 00023089 0x000050d4 add 0x0000003f , 0xfffffffd , 0x00000012 + 00023090 0x000050d5 call 0x000056e2 + 00023091 0x000050d7 fetch 0x00000001 , 0x000044e9 + 00023092 0x000050d8 bbit0 0x00000004 , 0x00005a3d + 00023093 0x000050da fetcht 0x00000002 , 0x00000478 + 00023094 0x000050db fetch 0x00000002 , 0x000044fa + 00023095 0x000050dc isub 0x00000002 , 0x0000003e + 00023096 0x000050dd nbranch 0x00005a3d , 0x00000005 + 00023097 0x000050de call 0x00005a42 + 00023098 0x000050df nbranch 0x00005a3d , 0x00000028 + 00023099 0x000050e0 jam 0x00000005 , 0x0000047a + 00023100 0x000050e1 branch 0x00005a77 + 00023101 0x000050e4 force 0x00000001 , 0x00000011 + 00023102 0x000050e5 call 0x00005a82 + 00023103 0x000050e6 setarg 0x00000013 + 00023104 0x000050e7 istore 0x00000001 , 0x00000005 + 00023105 0x000050e8 rtn + 00023106 0x000050eb call 0x00007fe9 + 00023107 0x000050ec fetch 0x00000001 , 0x000044c6 + 00023108 0x000050ed rtneq 0x00000000 + 00023109 0x000050ee fetch 0x00000001 , 0x00004040 + 00023110 0x000050ef rtnbit1 0x00000004 + 00023111 0x000050f0 branch 0x00007fe7 + 00023112 0x000050f4 add 0x00000006 , 0x00000002 , 0x00000011 + 00023113 0x000050f5 fetch 0x00000002 , 0x000044fc + 00023114 0x000050f6 add 0x0000003f , 0xfffffffb , 0x00000012 + 00023115 0x000050f7 call 0x000056e2 + 00023116 0x000050f8 branch 0x00005a4d + 00023117 0x000050fc fetch 0x00000002 , 0x000044fc + 00023118 0x000050fd copy 0x0000003f , 0x00000011 + 00023119 0x000050fe call 0x00005a82 + 00023120 0x000050ff setarg 0x00000017 + 00023121 0x00005100 istore 0x00000001 , 0x00000005 + 00023122 0x00005101 fetch 0x00000002 , 0x00000478 + 00023123 0x00005102 istore 0x00000002 , 0x00000005 + 00023124 0x00005103 fetch 0x00000002 , 0x000044fc + 00023125 0x00005104 add 0x0000003f , 0xfffffffb , 0x00000039 + 00023126 0x00005105 fetch 0x00000002 , 0x0000450d + 00023127 0x00005106 add 0x0000003f , 0x00000007 , 0x00000006 + 00023128 0x00005107 ifetch 0x00000002 , 0x00000006 + 00023129 0x00005108 istore 0x00000002 , 0x00000005 + 00023130 0x00005109 branch 0x00007ef4 + 00023131 0x00005110 force 0x00000001 , 0x00000011 + 00023132 0x00005111 call 0x00005a82 + 00023133 0x00005112 setarg 0x00000019 + 00023134 0x00005113 istore 0x00000001 , 0x00000005 + 00023135 0x00005114 rtn + 00023136 0x00005119 copy 0x00000006 , 0x00000011 + 00023137 0x0000511a fetch 0x00000002 , 0x000044fc + 00023138 0x0000511b add 0x0000003f , 0xfffffffd , 0x00000012 + 00023139 0x0000511c branch 0x000056e2 + 00023140 0x00005122 copy 0x00000002 , 0x00000013 + 00023141 0x00005123 increase 0x00000003 , 0x00000011 + 00023142 0x00005124 call 0x00005a82 + 00023143 0x00005125 increase 0xfffffffd , 0x00000011 + 00023144 0x00005126 setarg 0x0000001b + 00023145 0x00005127 istore 0x00000001 , 0x00000005 + 00023146 0x00005128 copy 0x00000013 , 0x00000002 + 00023147 0x00005129 istoret 0x00000002 , 0x00000005 + 00023148 0x0000512a rtn + 00023149 0x0000512e copy 0x00000002 , 0x00000013 + 00023150 0x0000512f increase 0x00000003 , 0x00000011 + 00023151 0x00005130 call 0x00005a82 + 00023152 0x00005131 increase 0xfffffffd , 0x00000011 + 00023153 0x00005132 setarg 0x0000001d + 00023154 0x00005133 istore 0x00000001 , 0x00000005 + 00023155 0x00005134 copy 0x00000013 , 0x00000002 + 00023156 0x00005135 istoret 0x00000002 , 0x00000005 + 00023157 0x00005136 rtn + 00023158 0x0000513c jam 0x0000000a , 0x0000047a + 00023159 0x0000513e force 0x00000005 , 0x00000011 + 00023160 0x0000513f call 0x00005a82 + 00023161 0x00005140 setarg 0x00000001 + 00023162 0x00005141 istore 0x00000001 , 0x00000005 + 00023163 0x00005142 fetch 0x00000001 , 0x00000477 + 00023164 0x00005143 istore 0x00000001 , 0x00000005 + 00023165 0x00005144 fetch 0x00000002 , 0x00000478 + 00023166 0x00005145 istore 0x00000002 , 0x00000005 + 00023167 0x00005146 fetch 0x00000001 , 0x0000047a + 00023168 0x00005147 istore 0x00000001 , 0x00000005 + 00023169 0x00005148 rtn + 00023170 0x0000514c force 0x00000004 , 0x00000012 + 00023171 0x0000514d branch 0x00005847 + 00023172 0x00005151 fetcht 0x00000002 , 0x00000aa2 + 00023173 0x00005152 increase 0x00000001 , 0x00000002 + 00023174 0x00005153 storet 0x00000002 , 0x00000aa2 + 00023175 0x00005154 rtn + 00023176 0x00005157 fetcht 0x00000002 , 0x00000aa2 + 00023177 0x00005158 fetch 0x00000002 , 0x0000445c + 00023178 0x00005159 isub 0x00000002 , 0x0000003e + 00023179 0x0000515a rtn + 00023180 0x0000515e fetcht 0x00000001 , 0x0000445e + 00023181 0x0000515f arg 0x0000445f , 0x00000011 + 00023182 0x00005161 fetch 0x00000001 , 0x000004a2 + 00023183 0x00005162 copy 0x0000003f , 0x00000039 + 00023184 0x00005163 isub 0x00000002 , 0x0000003e + 00023185 0x00005164 nrtn 0x00000005 + 00023186 0x00005165 arg 0x000004a3 , 0x00000012 + 00023187 0x00005166 branch 0x00007f88 + 00023188 0x00005169 fetcht 0x00000001 , 0x00004471 + 00023189 0x0000516a arg 0x00004472 , 0x00000011 + 00023190 0x0000516b branch 0x00005a8e + 00023191 0x0000516f fetch 0x00000001 , 0x000004b3 + 00023192 0x00005170 store 0x00000001 , 0x00000101 + 00023193 0x00005171 copy 0x0000003f , 0x00000039 + 00023194 0x00005172 call 0x00007e9f + 00023195 0x00005173 branch 0x00007ef4 + 00023196 0x00005177 call 0x00007e9c + 00023197 0x00005178 fetch 0x00000002 , 0x0000049e + 00023198 0x00005179 istore 0x00000002 , 0x00000005 + 00023199 0x0000517a fetch 0x00000002 , 0x000004a0 + 00023200 0x0000517b istore 0x00000002 , 0x00000005 + 00023201 0x0000517d fetch 0x00000001 , 0x00000101 + 00023202 0x0000517e copy 0x0000003f , 0x00000039 + 00023203 0x0000517f call 0x00007ef4 + 00023204 0x00005180 branch 0x00007ea2 + 00023205 0x00005185 call 0x00007e9c + 00023206 0x00005186 call 0x0000588a + 00023207 0x00005187 copy 0x00000005 , 0x0000003f + 00023208 0x00005188 isub 0x00000006 , 0x00000011 + 00023209 0x00005189 call 0x0000588d + 00023210 0x0000518a copy 0x00000011 , 0x0000003f + 00023211 0x0000518b istore 0x00000002 , 0x00000006 + 00023212 0x0000518c increase 0x00000004 , 0x00000011 + 00023213 0x0000518d call 0x00005879 + 00023214 0x0000518e copy 0x00000011 , 0x0000003f + 00023215 0x0000518f istore 0x00000001 , 0x00000006 + 00023216 0x00005190 rtn + 00023217 0x00005194 rshift8 0x0000003f , 0x0000003f + 00023218 0x00005195 store 0x00000002 , 0x0000445a + 00023219 0x00005196 ifetch 0x00000002 , 0x00000006 + 00023220 0x00005197 store 0x00000002 , 0x0000445c + 00023221 0x00005198 rtn + 00023222 0x0000519e ifetch 0x00000001 , 0x00000006 + 00023223 0x0000519f ifetcht 0x00000001 , 0x00000006 + 00023224 0x000051a0 ifetcht 0x00000002 , 0x00000006 + 00023225 0x000051a1 beq 0x00000013 , 0x00005abb + 00023226 0x000051a2 rtn + 00023227 0x000051a4 ifetch 0x00000002 , 0x00000006 + 00023228 0x000051a5 store 0x00000002 , 0x00004509 + 00023229 0x000051a6 jam 0x00000040 , 0x00000a99 + 00023230 0x000051a7 branch 0x00007d86 + 00023231 0x000051ae arg 0x0000000c , 0x00000011 + 00023232 0x000051af arg 0x00000012 , 0x00000013 + 00023233 0x000051b0 call 0x00005ac7 + 00023234 0x000051b1 setarg 0x00000008 + 00023235 0x000051b2 istore 0x00000002 , 0x00000005 + 00023236 0x000051b3 fetch 0x00000008 , 0x00004496 + 00023237 0x000051b4 istore 0x00000008 , 0x00000005 + 00023238 0x000051b5 rtn + 00023239 0x000051ba call 0x00005acf + 00023240 0x000051bb arg 0x00000005 , 0x00000012 + 00023241 0x000051bc call 0x00005847 + 00023242 0x000051bd copy 0x00000013 , 0x0000003f + 00023243 0x000051be istore 0x00000001 , 0x00000005 + 00023244 0x000051bf fetch 0x00000001 , 0x00004508 + 00023245 0x000051c0 istore 0x00000001 , 0x00000005 + 00023246 0x000051c1 rtn + 00023247 0x000051c5 fetch 0x00000001 , 0x00004508 + 00023248 0x000051c7 pincrease 0x00000001 + 00023249 0x000051c8 store 0x00000001 , 0x00004508 + 00023250 0x000051c9 rtnne 0x00000000 + 00023251 0x000051cc jam 0x00000001 , 0x00004508 + 00023252 0x000051cd rtn + 00023253 0x000051d3 fetch 0x00000001 , 0x000044c6 + 00023254 0x000051d4 beq 0x00000000 , 0x00005ae4 + 00023255 0x000051d5 beq 0x00000001 , 0x00005ae7 + 00023256 0x000051d6 beq 0x00000002 , 0x00005ae9 + 00023257 0x000051d7 beq 0x00000081 , 0x00005add + 00023258 0x000051d8 beq 0x00000082 , 0x00005adf + 00023259 0x000051d9 beq 0x00000083 , 0x00005ae2 + 00023260 0x000051da rtn + 00023261 0x000051dd jam 0x0000000d , 0x00004456 + 00023262 0x000051de branch 0x00005ae5 + 00023263 0x000051e0 jam 0x0000000d , 0x00004456 + 00023264 0x000051e1 jam 0x00000001 , 0x00004454 + 00023265 0x000051e2 rtn + 00023266 0x000051e4 jam 0x0000000d , 0x00004456 + 00023267 0x000051e5 branch 0x00005aea + 00023268 0x000051e7 jam 0x00000000 , 0x00004456 + 00023269 0x000051e9 jam 0x00000003 , 0x00004454 + 00023270 0x000051ea rtn + 00023271 0x000051ec jam 0x00000005 , 0x00004456 + 00023272 0x000051ed branch 0x00005ae5 + 00023273 0x000051ef jam 0x00000005 , 0x00004456 + 00023274 0x000051f1 jam 0x00000000 , 0x00004454 + 00023275 0x000051f2 rtn + 00023276 0x000051f6 fetch 0x00000001 , 0x00004456 + 00023277 0x000051f7 set1 0x00000003 , 0x0000003f + 00023278 0x000051f8 store 0x00000001 , 0x00004456 + 00023279 0x000051f9 rtn + 00023280 0x000051fb fetch 0x00000001 , 0x00004456 + 00023281 0x000051fc set0 0x00000003 , 0x0000003f + 00023282 0x000051fd store 0x00000001 , 0x00004456 + 00023283 0x000051fe rtn + 00023284 0x00005201 ifetch 0x00000001 , 0x00000006 + 00023285 0x00005202 beq 0x00000001 , 0x00005b09 + 00023286 0x00005204 beq 0x00000003 , 0x00005b30 + 00023287 0x00005205 beq 0x00000004 , 0x00005b4d + 00023288 0x00005206 beq 0x00000005 , 0x00005b5a + 00023289 0x00005207 beq 0x00000006 , 0x00005b80 + 00023290 0x00005208 beq 0x00000007 , 0x00005bc4 + 00023291 0x00005209 beq 0x00000008 , 0x00005baf + 00023292 0x0000520a beq 0x00000009 , 0x00005bc0 + 00023293 0x0000520b beq 0x0000000a , 0x00005bc4 + 00023294 0x0000520c beq 0x0000000b , 0x00005bc4 + 00023295 0x0000520d beq 0x0000000c , 0x00005bc5 + 00023296 0x0000520e beq 0x0000000d , 0x00005bca + 00023297 0x0000520f rtn + 00023298 0x00005214 force 0x00000002 , 0x00000011 + 00023299 0x00005215 call 0x00005c62 + 00023300 0x00005216 setarg 0x0000000b + 00023301 0x00005217 istore 0x00000001 , 0x00000005 + 00023302 0x00005218 fetch 0x00000001 , 0x00004456 + 00023303 0x00005219 istore 0x00000001 , 0x00000005 + 00023304 0x0000521a rtn + 00023305 0x0000521d store 0x00000001 , 0x0000444c + 00023306 0x0000521e ifetch 0x00000006 , 0x00000006 + 00023307 0x0000521f istore 0x00000006 , 0x00000005 + 00023308 0x00005220 fetch 0x00000001 , 0x000044c6 + 00023309 0x00005221 beq 0x00000000 , 0x00005b5f + 00023310 0x00005222 call 0x00005b2b + 00023311 0x00005223 call 0x00005b26 + 00023312 0x00005224 jam 0x00000003 , 0x000044c4 + 00023313 0x00005225 fetch 0x00000001 , 0x0000444d + 00023314 0x00005226 beq 0x00000000 , 0x00005b18 + 00023315 0x00005227 beq 0x00000001 , 0x00005b18 + 00023316 0x00005228 beq 0x00000003 , 0x00005b18 + 00023317 0x00005229 fetch 0x00000001 , 0x000044c6 + 00023318 0x0000522a beq 0x00000002 , 0x00005b1b + 00023319 0x0000522b rtneq 0x00000083 + 00023320 0x0000522d arg 0x00000000 , 0x0000003f + 00023321 0x0000522e store 0x00000004 , 0x000044c7 + 00023322 0x0000522f rtn + 00023323 0x00005232 fetch 0x00000001 , 0x000044e9 + 00023324 0x00005233 bbit1 0x00000000 , 0x00005b24 + 00023325 0x00005235 arg 0x000044c7 , 0x00000011 + 00023326 0x00005236 copy 0x00000011 , 0x00000005 + 00023327 0x00005237 arg 0x00000003 , 0x00000039 + 00023328 0x00005238 call 0x0000630d + 00023329 0x00005239 fetch 0x00000002 , 0x000044c9 + 00023330 0x0000523a and_into 0x00000007 , 0x0000003f + 00023331 0x0000523b store 0x00000002 , 0x000044c9 + 00023332 0x0000523d jam 0x00000034 , 0x00000a99 + 00023333 0x0000523e branch 0x00007d86 + 00023334 0x00005241 fetch 0x00000001 , 0x0000444f + 00023335 0x00005242 rtnbit1 0x00000003 + 00023336 0x00005243 fetch 0x00000001 , 0x000044c6 + 00023337 0x00005244 rtnbit0 0x00000007 + 00023338 0x00005245 branch 0x00003402 + 00023339 0x00005248 force 0x00000007 , 0x00000011 + 00023340 0x00005249 call 0x00005c62 + 00023341 0x0000524a fetch 0x00000007 , 0x00004453 + 00023342 0x0000524b istore 0x00000007 , 0x00000005 + 00023343 0x0000524c rtn + 00023344 0x00005250 copy 0x00000006 , 0x00000011 + 00023345 0x00005251 fetch 0x00000001 , 0x000044c6 + 00023346 0x00005252 beq 0x00000083 , 0x00005b37 + 00023347 0x00005253 copy 0x00000011 , 0x00000006 + 00023348 0x00005254 arg 0x0000442a , 0x00000005 + 00023349 0x00005255 call 0x00007ebf + 00023350 0x00005256 branch 0x00005b3d + 00023351 0x00005258 copy 0x00000011 , 0x00000006 + 00023352 0x00005259 arg 0x0000442a , 0x00000005 + 00023353 0x0000525a call 0x00007ebf + 00023354 0x0000525b jam 0x00000002 , 0x000044bf + 00023355 0x0000525c jam 0x00000008 , 0x000044c1 + 00023356 0x0000525d rtn + 00023357 0x00005261 fetch 0x00000001 , 0x000044c6 + 00023358 0x00005262 bbit1 0x00000007 , 0x00005b45 + 00023359 0x00005263 call 0x0000739c + 00023360 0x00005264 force 0x00000011 , 0x00000011 + 00023361 0x00005265 call 0x00005c62 + 00023362 0x00005266 setarg 0x00000003 + 00023363 0x00005267 istore 0x00000001 , 0x00000005 + 00023364 0x00005268 branch 0x00007497 + 00023365 0x0000526c arg 0x0000443a , 0x00000005 + 00023366 0x0000526d call 0x0000630c + 00023367 0x0000526e call 0x000071c5 + 00023368 0x0000526f force 0x00000011 , 0x00000011 + 00023369 0x00005270 call 0x00005c62 + 00023370 0x00005271 setarg 0x00000003 + 00023371 0x00005272 istore 0x00000001 , 0x00000005 + 00023372 0x00005273 branch 0x00007201 + 00023373 0x00005278 copy 0x00000006 , 0x00000011 + 00023374 0x00005279 fetch 0x00000001 , 0x000044c6 + 00023375 0x0000527a bbit1 0x00000007 , 0x00005b61 + 00023376 0x0000527b copy 0x00000011 , 0x00000006 + 00023377 0x0000527c call 0x00007394 + 00023378 0x0000527d branch 0x00005b75 , 0x00000005 + 00023379 0x0000527f jam 0x00000004 , 0x0000047b + 00023380 0x00005281 force 0x00000002 , 0x00000011 + 00023381 0x00005282 call 0x00005c62 + 00023382 0x00005283 setarg 0x00000005 + 00023383 0x00005284 istore 0x00000001 , 0x00000005 + 00023384 0x00005285 fetch 0x00000001 , 0x0000047b + 00023385 0x00005286 istore 0x00000001 , 0x00000005 + 00023386 0x00005288 force 0x0000000a , 0x00000007 + 00023387 0x00005289 call 0x00007f07 + 00023388 0x0000528a jam 0x00000000 , 0x000044c4 + 00023389 0x0000528b jam 0x00000030 , 0x00000a99 + 00023390 0x0000528c branch 0x00007d86 + 00023391 0x0000528f jam 0x00000005 , 0x0000047b + 00023392 0x00005290 branch 0x00005b54 + 00023393 0x00005294 arg 0x0000042f , 0x00000005 + 00023394 0x00005295 copy 0x00000011 , 0x00000006 + 00023395 0x00005296 call 0x00007ebf + 00023396 0x00005297 fetch 0x00000001 , 0x000044c6 + 00023397 0x00005298 beq 0x00000083 , 0x00005b6c + 00023398 0x00005299 call 0x0000714f + 00023399 0x0000529c call 0x00005b7a + 00023400 0x0000529d fetch 0x00000001 , 0x000044c6 + 00023401 0x0000529e rtnne 0x00000082 + 00023402 0x0000529f jam 0x0000003b , 0x00000a99 + 00023403 0x000052a0 branch 0x00007d86 + 00023404 0x000052a3 call 0x000071ba + 00023405 0x000052a4 arg 0x00000af2 , 0x00000005 + 00023406 0x000052a5 call 0x00007201 + 00023407 0x000052a6 arg 0x00000af2 , 0x00000011 + 00023408 0x000052a7 arg 0x0000442a , 0x00000012 + 00023409 0x000052a8 arg 0x00000010 , 0x00000039 + 00023410 0x000052a9 call 0x00007f88 + 00023411 0x000052aa nbranch 0x00005b53 , 0x00000005 + 00023412 0x000052ab branch 0x00005b7a + 00023413 0x000052ae call 0x00007390 + 00023414 0x000052af jam 0x00000031 , 0x00000a99 + 00023415 0x000052b0 call 0x00007d86 + 00023416 0x000052b1 jam 0x00000001 , 0x00004429 + 00023417 0x000052b2 jam 0x00000005 , 0x000044c4 + 00023418 0x000052b5 force 0x00000011 , 0x00000011 + 00023419 0x000052b6 call 0x00005c62 + 00023420 0x000052b7 setarg 0x00000004 + 00023421 0x000052b8 istore 0x00000001 , 0x00000005 + 00023422 0x000052b9 arg 0x0000443a , 0x00000006 + 00023423 0x000052ba branch 0x00007ebf + 00023424 0x000052bd arg 0x0000041f , 0x00000005 + 00023425 0x000052be branch 0x00007ebf + 00023426 0x000052c1 force 0x00000011 , 0x00000011 + 00023427 0x000052c2 call 0x00005c62 + 00023428 0x000052c3 setarg 0x00000006 + 00023429 0x000052c4 istore 0x00000001 , 0x00000005 + 00023430 0x000052c5 fetch 0x00000001 , 0x000044e9 + 00023431 0x000052c6 bbit1 0x00000001 , 0x00005b8a + 00023432 0x000052c7 arg 0x00004419 , 0x00000006 + 00023433 0x000052c8 branch 0x00007ebf + 00023434 0x000052cb arg 0x000044ea , 0x00000006 + 00023435 0x000052cc branch 0x00007ebf + 00023436 0x000052d0 arg 0x000044cb , 0x00000005 + 00023437 0x000052d1 force 0x0000000a , 0x00000039 + 00023438 0x000052d2 call 0x0000630d + 00023439 0x000052d3 force 0x0000000b , 0x00000011 + 00023440 0x000052d4 call 0x00005c62 + 00023441 0x000052d5 setarg 0x00000007 + 00023442 0x000052d6 istore 0x00000001 , 0x00000005 + 00023443 0x000052d7 fetch 0x00000002 , 0x000044cb + 00023444 0x000052d8 istore 0x00000002 , 0x00000005 + 00023445 0x000052d9 fetch 0x00000008 , 0x000044cd + 00023446 0x000052da istore 0x00000008 , 0x00000005 + 00023447 0x000052db rtn + 00023448 0x000052de force 0x00000011 , 0x00000011 + 00023449 0x000052df call 0x00005c62 + 00023450 0x000052e0 setarg 0x00000008 + 00023451 0x000052e1 istore 0x00000001 , 0x00000005 + 00023452 0x000052e2 setarg 0x00000000 + 00023453 0x000052e3 istore 0x00000008 , 0x00000005 + 00023454 0x000052e4 istore 0x00000008 , 0x00000005 + 00023455 0x000052e5 rtn + 00023456 0x000052e9 force 0x00000008 , 0x00000011 + 00023457 0x000052ea call 0x00005c62 + 00023458 0x000052eb setarg 0x00000009 + 00023459 0x000052ec istore 0x00000001 , 0x00000005 + 00023460 0x000052ed fetch 0x00000001 , 0x00004495 + 00023461 0x000052ee istore 0x00000001 , 0x00000005 + 00023462 0x000052ef fetch 0x00000006 , 0x000044a0 + 00023463 0x000052f0 istore 0x00000006 , 0x00000005 + 00023464 0x000052f1 rtn + 00023465 0x000052f5 jam 0x00000008 , 0x0000047b + 00023466 0x000052f6 branch 0x00005b54 + 00023467 0x000052f9 fetch 0x00000001 , 0x00004458 + 00023468 0x000052fa fetcht 0x00000001 , 0x00004458 + 00023469 0x000052fb iand 0x00000002 , 0x0000003f + 00023470 0x000052fc rtn + 00023471 0x000052ff arg 0x000044d5 , 0x00000005 + 00023472 0x00005300 call 0x00007ebf + 00023473 0x00005301 call 0x00005bab + 00023474 0x00005302 isolate0 0x00000001 , 0x0000003f + 00023475 0x00005303 branch 0x00005ba9 , 0x00000001 + 00023476 0x00005304 fetch 0x00000001 , 0x00004092 + 00023477 0x00005305 rtnne 0x0000000a + 00023478 0x00005306 call 0x00005bb9 + 00023479 0x00005307 nrtn 0x00000028 + 00023480 0x00005308 branch 0x00003410 + 00023481 0x0000530c call 0x00007fe9 + 00023482 0x0000530d fetch 0x00000001 , 0x0000448e + 00023483 0x0000530e rtneq 0x00000000 + 00023484 0x0000530f fetch 0x00000001 , 0x00000454 + 00023485 0x00005310 compare 0x000000c0 , 0x0000003f , 0x000000c0 + 00023486 0x00005311 rtn 0x00000001 + 00023487 0x00005312 branch 0x00007fe7 + 00023488 0x00005315 call 0x00005bab + 00023489 0x00005316 isolate0 0x00000001 , 0x0000003f + 00023490 0x00005317 branch 0x00005ba9 , 0x00000001 + 00023491 0x00005318 rtn + 00023492 0x0000531d rtn + 00023493 0x00005320 arg 0x000009be , 0x00000005 + 00023494 0x00005321 call 0x00007eb3 + 00023495 0x00005322 jam 0x00000002 , 0x000044bf + 00023496 0x00005323 jam 0x00000001 , 0x000044c1 + 00023497 0x00005324 rtn + 00023498 0x00005327 arg 0x00000a6e , 0x00000005 + 00023499 0x00005328 call 0x00007ebf + 00023500 0x00005329 jam 0x00000006 , 0x000044c1 + 00023501 0x0000532a jam 0x00000002 , 0x000044bf + 00023502 0x0000532b rtn + 00023503 0x0000532e force 0x00000041 , 0x00000011 + 00023504 0x0000532f call 0x00005c62 + 00023505 0x00005330 setarg 0x0000000c + 00023506 0x00005331 istore 0x00000001 , 0x00000005 + 00023507 0x00005332 arg 0x000045d2 , 0x00000006 + 00023508 0x00005333 branch 0x00007eb3 + 00023509 0x00005336 call 0x00007166 + 00023510 0x00005337 force 0x00000011 , 0x00000011 + 00023511 0x00005338 call 0x00005c62 + 00023512 0x00005339 setarg 0x0000000d + 00023513 0x0000533a istore 0x00000001 , 0x00000005 + 00023514 0x0000533b branch 0x00007201 + 00023515 0x0000533f fetch 0x00000001 , 0x000044c4 + 00023516 0x00005340 rtneq 0x000000ff + 00023517 0x00005341 arg 0x00000003 , 0x00000002 + 00023518 0x00005342 isub 0x00000002 , 0x0000003e + 00023519 0x00005343 nrtn 0x00000002 + 00023520 0x00005344 arg 0x0000000a , 0x00000007 + 00023521 0x00005345 call 0x00007f16 + 00023522 0x00005346 nrtn 0x00000034 + 00023523 0x00005347 branch 0x00005ba9 + 00023524 0x0000534a bpatchx 0x00000078 , 0x0000402f + 00023525 0x0000534b fetch 0x00000001 , 0x000044c4 + 00023526 0x0000534c beq 0x00000000 , 0x00005bef + 00023527 0x0000534d beq 0x00000001 , 0x00005bf5 + 00023528 0x0000534e beq 0x00000002 , 0x00005bef + 00023529 0x0000534f beq 0x00000003 , 0x00005bf7 + 00023530 0x00005350 beq 0x00000005 , 0x00005bfb + 00023531 0x00005351 beq 0x00000007 , 0x00005c07 + 00023532 0x00005352 beq 0x00000008 , 0x00005c09 + 00023533 0x00005353 beq 0x00000009 , 0x00005c10 + 00023534 0x00005354 rtn + 00023535 0x00005358 fetch 0x00000001 , 0x000044c5 + 00023536 0x00005359 rtnne 0x00000004 + 00023537 0x0000535a jam 0x000000ff , 0x000044c5 + 00023538 0x0000535b jam 0x000000ff , 0x000044c4 + 00023539 0x0000535c jam 0x0000003f , 0x00000a99 + 00023540 0x0000535d branch 0x00007d86 + 00023541 0x00005361 jam 0x00000002 , 0x000044c4 + 00023542 0x00005362 branch 0x00005b02 + 00023543 0x00005365 jam 0x00000004 , 0x000044c4 + 00023544 0x00005366 setarg 0x00017700 + 00023545 0x00005367 arg 0x0000000a , 0x00000007 + 00023546 0x00005368 branch 0x00007f08 + 00023547 0x0000536b fetch 0x00000001 , 0x000044c5 + 00023548 0x0000536c beq 0x00000004 , 0x00005bfe + 00023549 0x0000536d rtn + 00023550 0x00005370 jam 0x00000007 , 0x000044c4 + 00023551 0x00005371 jam 0x00000029 , 0x00000a99 + 00023552 0x00005372 call 0x00007d86 + 00023553 0x00005373 call 0x00005b82 + 00023554 0x00005374 fetch 0x00000001 , 0x00004092 + 00023555 0x00005375 rtnne 0x0000000a + 00023556 0x00005376 call 0x00005bb9 + 00023557 0x00005377 rtn 0x00000028 + 00023558 0x00005378 branch 0x00003410 + 00023559 0x0000537c jam 0x00000008 , 0x000044c4 + 00023560 0x0000537d branch 0x00005b8c + 00023561 0x00005380 fetch 0x00000001 , 0x00004452 + 00023562 0x00005381 fetcht 0x00000001 , 0x00004459 + 00023563 0x00005382 iand 0x00000002 , 0x0000003f + 00023564 0x00005383 isolate0 0x00000001 , 0x0000003f + 00023565 0x00005384 branch 0x00005c12 , 0x00000001 + 00023566 0x00005385 jam 0x00000009 , 0x000044c4 + 00023567 0x00005386 branch 0x00005b98 + 00023568 0x00005389 call 0x00005ba0 + 00023569 0x0000538a branch 0x00005c12 + 00023570 0x0000538e force 0x0000000a , 0x00000007 + 00023571 0x0000538f call 0x00007f07 + 00023572 0x00005390 jam 0x000000ff , 0x000044c5 + 00023573 0x00005391 jam 0x000000ff , 0x000044c4 + 00023574 0x00005392 jam 0x0000003e , 0x00000a99 + 00023575 0x00005393 branch 0x00007d86 + 00023576 0x00005398 bpatchx 0x00000079 , 0x0000402f + 00023577 0x00005399 fetch 0x00000001 , 0x000044c6 + 00023578 0x0000539a rtnbit0 0x00000007 + 00023579 0x0000539b fetch 0x00000001 , 0x000044bf + 00023580 0x0000539c rtnne 0x00000002 + 00023581 0x0000539d jam 0x00000000 , 0x000044bf + 00023582 0x0000539e fetch 0x00000001 , 0x000044c1 + 00023583 0x0000539f beq 0x00000001 , 0x00005c58 + 00023584 0x000053a0 beq 0x00000002 , 0x00005c5f + 00023585 0x000053a1 beq 0x00000003 , 0x00005c52 + 00023586 0x000053a2 beq 0x00000006 , 0x00005c39 + 00023587 0x000053a3 beq 0x00000007 , 0x00005c30 + 00023588 0x000053a4 beq 0x00000008 , 0x00005c26 + 00023589 0x000053a5 rtn + 00023590 0x000053a9 fetch 0x00000001 , 0x00004663 + 00023591 0x000053aa copy 0x0000003f , 0x00000007 + 00023592 0x000053ab increase 0x00000001 , 0x0000003f + 00023593 0x000053ac store 0x00000001 , 0x00004663 + 00023594 0x000053ad fetch 0x00000004 , 0x000044c7 + 00023595 0x000053ae qisolate1 0x0000003f + 00023596 0x000053af setarg 0x00000080 + 00023597 0x000053b0 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00023598 0x000053b1 store 0x00000001 , 0x00004664 + 00023599 0x000053b2 branch 0x00005c55 + 00023600 0x000053b5 fetch 0x00000001 , 0x000044c2 + 00023601 0x000053b6 jam 0x00000000 , 0x000044c2 + 00023602 0x000053b7 beq 0x00000001 , 0x00005c35 + 00023603 0x000053b8 jam 0x00000002 , 0x000044bf + 00023604 0x000053b9 rtn + 00023605 0x000053bc jam 0x00000031 , 0x00000a99 + 00023606 0x000053bd call 0x00007d86 + 00023607 0x000053be jam 0x00000005 , 0x000044c4 + 00023608 0x000053bf branch 0x00005bd5 + 00023609 0x000053c2 fetch 0x00000001 , 0x000009b9 + 00023610 0x000053c3 beq 0x00000003 , 0x00005c3d + 00023611 0x000053c4 jam 0x00000002 , 0x000044bf + 00023612 0x000053c5 rtn + 00023613 0x000053c8 call 0x0000718d + 00023614 0x000053cc fetch 0x00000001 , 0x000044c6 + 00023615 0x000053cd beq 0x00000083 , 0x00005c41 + 00023616 0x000053ce call 0x00005b18 + 00023617 0x000053d0 call 0x0000717a + 00023618 0x000053d1 arg 0x00000af2 , 0x00000011 + 00023619 0x000053d2 arg 0x00000a6e , 0x00000012 + 00023620 0x000053d3 arg 0x00000010 , 0x00000039 + 00023621 0x000053d4 call 0x00007f88 + 00023622 0x000053d5 branch 0x00005c49 , 0x00000005 + 00023623 0x000053d7 jam 0x0000000b , 0x0000047b + 00023624 0x000053d8 branch 0x00005b54 + 00023625 0x000053dc call 0x00007595 + 00023626 0x000053dd nbranch 0x00005c47 , 0x00000005 + 00023627 0x000053de jam 0x00000001 , 0x00004429 + 00023628 0x000053df fetch 0x00000001 , 0x000044c6 + 00023629 0x000053e0 beq 0x00000081 , 0x00005c35 + 00023630 0x000053e1 beq 0x00000083 , 0x00005c35 + 00023631 0x000053e2 jam 0x00000002 , 0x000044bf + 00023632 0x000053e3 jam 0x00000007 , 0x000044c1 + 00023633 0x000053e4 rtn + 00023634 0x000053e7 fetch 0x00000001 , 0x000044c6 + 00023635 0x000053e8 beq 0x00000083 , 0x00005c56 + 00023636 0x000053e9 jam 0x00000000 , 0x00004664 + 00023637 0x000053eb branch 0x00005b3d + 00023638 0x000053f1 jam 0x00000000 , 0x00004663 + 00023639 0x000053f2 branch 0x00005b1b + 00023640 0x000053f6 jam 0x00000002 , 0x000044bf + 00023641 0x000053f7 fetch 0x00000001 , 0x000044c3 + 00023642 0x000053f8 beq 0x00000003 , 0x00005c5c + 00023643 0x000053fa rtn + 00023644 0x000053fd jam 0x00000002 , 0x000044c1 + 00023645 0x000053fe jam 0x00000000 , 0x000009b9 + 00023646 0x000053ff branch 0x00007a99 + 00023647 0x00005402 jam 0x00000002 , 0x000044bf + 00023648 0x00005403 jam 0x00000003 , 0x000044c1 + 00023649 0x00005404 branch 0x00005bcf + 00023650 0x00005409 force 0x00000006 , 0x00000012 + 00023651 0x0000540a branch 0x00005847 + 00023652 0x0000540f fetch 0x00000001 , 0x000002db + 00023653 0x00005410 beq 0x00000000 , 0x00005c7b + 00023654 0x00005411 beq 0x00000001 , 0x00005c83 + 00023655 0x00005412 beq 0x00000002 , 0x00005c8e + 00023656 0x00005413 beq 0x00000003 , 0x00005caa + 00023657 0x00005414 beq 0x00000004 , 0x00005ce1 + 00023658 0x00005415 beq 0x00000005 , 0x00005ce6 + 00023659 0x00005416 beq 0x00000006 , 0x00005cea + 00023660 0x00005417 beq 0x00000007 , 0x00005cf5 + 00023661 0x00005418 beq 0x00000008 , 0x00005c99 + 00023662 0x00005419 beq 0x00000009 , 0x00005cf5 + 00023663 0x0000541a beq 0x0000000a , 0x00005cef + 00023664 0x0000541b beq 0x0000000b , 0x00005cf5 + 00023665 0x0000541c beq 0x0000000c , 0x00005c9f + 00023666 0x0000541d beq 0x0000000d , 0x00005cf5 + 00023667 0x0000541e beq 0x00000012 , 0x00005ca6 + 00023668 0x0000541f beq 0x00000013 , 0x00005cf5 + 00023669 0x00005420 arg 0x00000002 , 0x00000011 + 00023670 0x00005421 arg 0x00000007 , 0x00000012 + 00023671 0x00005422 call 0x00005842 + 00023672 0x00005423 fetch 0x00000001 , 0x000002db + 00023673 0x00005424 istore 0x00000001 , 0x00000005 + 00023674 0x00005425 rtn + 00023675 0x00005429 ifetch 0x00000009 , 0x00000006 + 00023676 0x0000542a store 0x00000009 , 0x000043d3 + 00023677 0x0000542b ifetch 0x00000002 , 0x00000006 + 00023678 0x0000542c store 0x00000002 , 0x0000045f + 00023679 0x0000542d fetch 0x00000001 , 0x0000043f + 00023680 0x0000542e set1 0x00000005 , 0x0000003f + 00023681 0x0000542f store 0x00000001 , 0x0000043f + 00023682 0x00005430 rtn + 00023683 0x00005433 ifetch 0x00000005 , 0x00000006 + 00023684 0x00005434 store 0x00000005 , 0x000043ce + 00023685 0x00005435 ifetch 0x00000002 , 0x00000006 + 00023686 0x00005436 store 0x00000002 , 0x0000045f + 00023687 0x00005437 fetcht 0x00000002 , 0x00000459 + 00023688 0x00005438 isub 0x00000002 , 0x0000003e + 00023689 0x00005439 nbranch 0x00005c8e , 0x00000002 + 00023690 0x0000543a fetch 0x00000001 , 0x0000043f + 00023691 0x0000543b set1 0x00000006 , 0x0000003f + 00023692 0x0000543c store 0x00000001 , 0x0000043f + 00023693 0x0000543d rtn + 00023694 0x00005441 setarg 0x00000014 + 00023695 0x00005442 store 0x00000002 , 0x0000046d + 00023696 0x00005443 store 0x00000002 , 0x000044ba + 00023697 0x00005444 rtn + 00023698 0x00005447 arg 0x00000013 , 0x00000013 + 00023699 0x0000544b arg 0x00000002 , 0x00000011 + 00023700 0x0000544c arg 0x00000002 , 0x00000012 + 00023701 0x0000544d call 0x00005842 + 00023702 0x0000544e copy 0x00000013 , 0x0000003f + 00023703 0x0000544f istore 0x00000001 , 0x00000005 + 00023704 0x00005450 rtn + 00023705 0x00005455 arg 0x00000009 , 0x00000011 + 00023706 0x00005456 arg 0x00000009 , 0x00000012 + 00023707 0x00005457 call 0x00005842 + 00023708 0x00005458 setarg 0x00000001 + 00023709 0x00005459 istore 0x00000008 , 0x00000005 + 00023710 0x0000545a rtn + 00023711 0x0000545e rtn 0x00000029 + 00023712 0x00005460 arg 0x00000006 , 0x00000011 + 00023713 0x00005461 arg 0x0000000c , 0x00000012 + 00023714 0x00005462 call 0x00005842 + 00023715 0x00005463 fetch 0x00000005 , 0x00004510 + 00023716 0x00005464 istore 0x00000005 , 0x00000005 + 00023717 0x00005465 rtn + 00023718 0x00005469 arg 0x00000013 , 0x00000012 + 00023719 0x0000546a branch 0x00005ca8 + 00023720 0x0000546e arg 0x00000001 , 0x00000011 + 00023721 0x0000546f branch 0x00005842 + 00023722 0x00005473 ifetch 0x00000008 , 0x00000006 + 00023723 0x00005474 store 0x00000008 , 0x000044cd + 00023724 0x00005475 ifetch 0x00000002 , 0x00000006 + 00023725 0x00005476 store 0x00000002 , 0x000044cb + 00023726 0x00005477 ifetch 0x00000008 , 0x00000006 + 00023727 0x00005478 store 0x00000008 , 0x000044aa + 00023728 0x00005479 ifetch 0x00000004 , 0x00000006 + 00023729 0x0000547a store 0x00000004 , 0x00004411 + 00023730 0x0000547b call 0x00005ccf + 00023731 0x0000547c bpatchx 0x0000007a , 0x0000402f + 00023732 0x0000547d fetch 0x00000001 , 0x000044c4 + 00023733 0x0000547e beq 0x00000005 , 0x00005cbc + 00023734 0x0000547f fetch 0x00000001 , 0x000044e9 + 00023735 0x00005480 bbit1 0x00000001 , 0x00005cbf + 00023736 0x00005481 fetch 0x00000001 , 0x00004217 + 00023737 0x00005482 ncall 0x000067be , 0x00000034 + 00023738 0x00005483 fetch 0x00000001 , 0x00004429 + 00023739 0x00005484 beq 0x00000000 , 0x00005cc4 + 00023740 0x00005486 jam 0x00000001 , 0x000044c5 + 00023741 0x00005487 call 0x00005cdd + 00023742 0x00005488 branch 0x000073a2 + 00023743 0x0000548b jam 0x00000001 , 0x00004429 + 00023744 0x0000548c arg 0x000044ea , 0x00000006 + 00023745 0x0000548d arg 0x00004419 , 0x00000005 + 00023746 0x0000548e call 0x00007ebf + 00023747 0x0000548f branch 0x00005cbc + 00023748 0x00005493 bpatchx 0x0000007b , 0x0000402f + 00023749 0x00005494 jam 0x00000000 , 0x000044c5 + 00023750 0x00005495 jam 0x00000000 , 0x000044c4 + 00023751 0x00005496 jam 0x00000041 , 0x00000a99 + 00023752 0x00005497 branch 0x00007d86 + 00023753 0x0000549a arg 0x00000002 , 0x00000011 + 00023754 0x0000549b arg 0x0000000d , 0x00000012 + 00023755 0x0000549c call 0x00005842 + 00023756 0x0000549d setarg 0x00000006 + 00023757 0x0000549e istore 0x00000001 , 0x00000005 + 00023758 0x0000549f rtn + 00023759 0x000054a2 arg 0x000044b2 , 0x00000005 + 00023760 0x000054a3 force 0x00000008 , 0x00000039 + 00023761 0x000054a4 call 0x0000630d + 00023762 0x000054a5 arg 0x00004415 , 0x00000005 + 00023763 0x000054a6 force 0x00000004 , 0x00000039 + 00023764 0x000054a7 call 0x0000630d + 00023765 0x000054a8 arg 0x0000000d , 0x00000011 + 00023766 0x000054a9 arg 0x00000004 , 0x00000012 + 00023767 0x000054aa call 0x00005842 + 00023768 0x000054ab fetch 0x00000008 , 0x000044b2 + 00023769 0x000054ac istore 0x00000008 , 0x00000005 + 00023770 0x000054ad fetch 0x00000004 , 0x00004415 + 00023771 0x000054ae istore 0x00000004 , 0x00000005 + 00023772 0x000054af rtn + 00023773 0x000054b2 arg 0x00000005 , 0x00000012 + 00023774 0x000054b3 branch 0x00005ca8 + 00023775 0x000054b6 arg 0x00000006 , 0x00000012 + 00023776 0x000054b7 branch 0x00005ca8 + 00023777 0x000054bb ifetch 0x00000008 , 0x00000006 + 00023778 0x000054bc store 0x00000008 , 0x000044b2 + 00023779 0x000054bd ifetch 0x00000004 , 0x00000006 + 00023780 0x000054be store 0x00000004 , 0x00004415 + 00023781 0x000054bf branch 0x000073a2 + 00023782 0x000054c2 fetch 0x00000001 , 0x0000043f + 00023783 0x000054c3 set1 0x00000004 , 0x0000003f + 00023784 0x000054c4 store 0x00000001 , 0x0000043f + 00023785 0x000054c5 rtn + 00023786 0x000054c8 rtn 0x00000029 + 00023787 0x000054c9 jam 0x00000032 , 0x00000a99 + 00023788 0x000054ca call 0x00007d86 + 00023789 0x000054cb jam 0x00000004 , 0x000044c5 + 00023790 0x000054cc branch 0x00005cdf + 00023791 0x000054cf jam 0x00000002 , 0x000044c5 + 00023792 0x000054d0 call 0x00005cf3 + 00023793 0x000054d1 jam 0x00000033 , 0x00000a99 + 00023794 0x000054d2 branch 0x00007d86 + 00023795 0x000054d5 arg 0x0000000b , 0x00000012 + 00023796 0x000054d6 branch 0x00005ca8 + 00023797 0x000054de rtn + 00023798 0x000054e6 rtn 0x0000002b + 00023799 0x000054e8 bpatchx 0x0000007c , 0x0000402f + 00023800 0x000054e9 setarg 0x00000000 + 00023801 0x000054ea store 0x00000001 , 0x00000048 + 00023802 0x000054eb store 0x00000001 , 0x00000055 + 00023803 0x000054ec store 0x00000001 , 0x00000078 + 00023804 0x000054ed store 0x00000001 , 0x0000007c + 00023805 0x000054ee store 0x00000001 , 0x00004158 + 00023806 0x000054ef store 0x00000001 , 0x000004d7 + 00023807 0x000054f0 store 0x00000001 , 0x0000016d + 00023808 0x000054f1 store 0x00000001 , 0x000009b5 + 00023809 0x000054f2 jam 0x00000000 , 0x0000455b + 00023810 0x000054f3 jam 0x00000000 , 0x00000229 + 00023811 0x000054f4 jam 0x00000000 , 0x000004d8 + 00023812 0x000054f6 jam 0x00000000 , 0x000009b5 + 00023813 0x000054f7 jam 0x00000000 , 0x000009b4 + 00023814 0x000054f8 jam 0x00000000 , 0x000004d1 + 00023815 0x000054fb rtn + 00023816 0x000054fe bpatchx 0x0000007d , 0x0000402f + 00023817 0x000054ff call 0x000062ff , 0x00000029 + 00023818 0x00005500 ncall 0x00006303 , 0x00000029 + 00023819 0x00005501 call 0x000062bc + 00023820 0x00005502 nrtn 0x00000034 + 00023821 0x00005503 fetch 0x00000001 , 0x0000004c + 00023822 0x00005504 rtnbit0 0x00000006 + 00023823 0x00005505 set0 0x00000006 , 0x0000003f + 00023824 0x00005506 set0 0x00000001 , 0x00000000 + 00023825 0x00005507 store 0x00000001 , 0x0000004c + 00023826 0x00005508 fetch 0x00000001 , 0x00000551 + 00023827 0x00005509 fetcht 0x00000001 , 0x0000004c + 00023828 0x0000550a isolate1 0x00000000 , 0x0000003f + 00023829 0x0000550b setflag 0x00000001 , 0x00000001 , 0x00000002 + 00023830 0x0000550c storet 0x00000001 , 0x0000004c + 00023831 0x0000550d and_into 0x00000002 , 0x00000002 + 00023832 0x0000550e storet 0x00000001 , 0x0000007f + 00023833 0x0000550f fetcht 0x00000001 , 0x0000004c + 00023834 0x00005510 rshift 0x0000003f , 0x0000003f + 00023835 0x00005511 store 0x00000001 , 0x0000007d + 00023836 0x00005512 bpatchx 0x0000007e , 0x0000402f + 00023837 0x00005513 fetch 0x00000001 , 0x0000007d + 00023838 0x00005514 beq 0x0000007f , 0x00005d66 + 00023839 0x00005515 beq 0x00000003 , 0x00005db1 + 00023840 0x00005516 beq 0x00000004 , 0x00005dc2 + 00023841 0x00005517 beq 0x0000003c , 0x00005d59 + 00023842 0x00005518 beq 0x00000005 , 0x00005d55 + 00023843 0x00005519 beq 0x0000000f , 0x00005fa8 + 00023844 0x0000551a beq 0x00000010 , 0x00005e24 + 00023845 0x0000551b beq 0x00000023 , 0x00005e42 + 00023846 0x0000551c beq 0x00000039 , 0x00005fc1 + 00023847 0x0000551d beq 0x00000038 , 0x00005fbc + 00023848 0x0000551e beq 0x00000031 , 0x00005e27 + 00023849 0x0000551f beq 0x00000037 , 0x00005eb0 + 00023850 0x00005520 beq 0x00000027 , 0x00005eac + 00023851 0x00005521 beq 0x00000033 , 0x00005ea9 + 00023852 0x00005522 beq 0x00000025 , 0x00005eae + 00023853 0x00005523 beq 0x00000026 , 0x00005e3e + 00023854 0x00005524 beq 0x00000007 , 0x00005e36 + 00023855 0x00005525 beq 0x0000002d , 0x00005e2d + 00023856 0x00005526 beq 0x0000002e , 0x00005e2e + 00023857 0x00005527 beq 0x00000001 , 0x00005ea5 + 00023858 0x00005528 beq 0x00000002 , 0x00005e90 + 00023859 0x00005529 beq 0x00000028 , 0x00005fb3 + 00023860 0x0000552a beq 0x00000009 , 0x00005e86 + 00023861 0x0000552b beq 0x0000000b , 0x00005e5f + 00023862 0x0000552c beq 0x00000008 , 0x00005e43 + 00023863 0x0000552d beq 0x0000000c , 0x00005e6a + 00023864 0x0000552e beq 0x0000001f , 0x00005e3a + 00023865 0x0000552f beq 0x00000020 , 0x00005e3c + 00023866 0x00005530 beq 0x00000021 , 0x00005eca + 00023867 0x00005531 beq 0x00000022 , 0x00005eca + 00023868 0x00005532 beq 0x00000035 , 0x00005ecb + 00023869 0x00005533 beq 0x00000036 , 0x00005ecc + 00023870 0x00005534 beq 0x00000024 , 0x00005eca + 00023871 0x00005535 beq 0x00000034 , 0x00005ecd + 00023872 0x00005536 beq 0x00000017 , 0x00005ed6 + 00023873 0x00005537 beq 0x00000011 , 0x00005ef2 + 00023874 0x00005538 beq 0x00000012 , 0x00005ef6 + 00023875 0x00005539 beq 0x00000013 , 0x00005ef8 + 00023876 0x0000553a beq 0x0000000d , 0x00005f0a + 00023877 0x0000553b beq 0x0000000e , 0x00005f0a + 00023878 0x0000553c beq 0x0000002f , 0x00005eaa + 00023879 0x0000553d beq 0x00000030 , 0x00005f0a + 00023880 0x0000553e beq 0x0000000a , 0x00005f0a + 00023881 0x0000553f beq 0x00000018 , 0x00005f0b + 00023882 0x00005540 beq 0x00000032 , 0x00005f0a + 00023883 0x00005541 beq 0x0000003d , 0x00005f10 + 00023884 0x00005542 beq 0x0000003e , 0x00005f51 + 00023885 0x00005543 beq 0x0000003f , 0x00005f4b + 00023886 0x00005544 beq 0x00000040 , 0x00005f78 + 00023887 0x00005545 beq 0x00000041 , 0x00005f8a + 00023888 0x00005546 beq 0x00000006 , 0x00005fa7 + 00023889 0x00005547 beq 0x0000003a , 0x00005d57 + 00023890 0x0000554b jam 0x00000019 , 0x0000007e + 00023891 0x0000554d jam 0x00000004 , 0x0000007c + 00023892 0x0000554e rtn + 00023893 0x00005551 jam 0x00000006 , 0x0000007c + 00023894 0x00005552 rtn + 00023895 0x00005555 jam 0x0000003b , 0x0000007c + 00023896 0x00005556 rtn + 00023897 0x00005559 fetch 0x00000004 , 0x00000552 + 00023898 0x0000555a lshift 0x0000003f , 0x0000003f + 00023899 0x0000555b store 0x00000004 , 0x000040d2 + 00023900 0x0000555c fetch 0x00000001 , 0x00000556 + 00023901 0x0000555d store 0x00000001 , 0x000040d9 + 00023902 0x0000555e fetch 0x00000005 , 0x00000557 + 00023903 0x0000555f store 0x00000005 , 0x000040e7 + 00023904 0x00005560 fetch 0x00000005 , 0x0000055c + 00023905 0x00005561 istore 0x00000005 , 0x00000005 + 00023906 0x00005562 fetch 0x00000001 , 0x00000031 + 00023907 0x00005563 set1 0x00000003 , 0x0000003f + 00023908 0x00005564 store 0x00000001 , 0x00000031 + 00023909 0x00005565 rtn + 00023910 0x00005567 bpatchx 0x0000007f , 0x0000402f + 00023911 0x00005568 fetch 0x00000001 , 0x00000552 + 00023912 0x00005569 set1 0x00000007 , 0x0000003f + 00023913 0x0000556a store 0x00000001 , 0x0000007d + 00023914 0x0000556b beq 0x00000081 , 0x00005d88 + 00023915 0x0000556c beq 0x00000082 , 0x00005d8d + 00023916 0x0000556d beq 0x00000095 , 0x00005eb1 + 00023917 0x0000556e beq 0x00000096 , 0x00005eca + 00023918 0x0000556f beq 0x0000008b , 0x00005ebf + 00023919 0x00005570 beq 0x00000083 , 0x00005da5 + 00023920 0x00005571 beq 0x00000084 , 0x00005da7 + 00023921 0x00005572 beq 0x00000090 , 0x00005d7a + 00023922 0x00005573 beq 0x00000097 , 0x00005d9e + 00023923 0x00005574 beq 0x00000098 , 0x00005da3 + 00023924 0x00005575 beq 0x00000099 , 0x00005d7d + 00023925 0x00005576 beq 0x0000009a , 0x00005d80 + 00023926 0x00005577 rtneq 0x00000084 + 00023927 0x0000557b jam 0x00000082 , 0x0000007c + 00023928 0x0000557c jam 0x00000019 , 0x0000007e + 00023929 0x0000557e rtn + 00023930 0x00005580 jam 0x00000082 , 0x0000007c + 00023931 0x00005581 jam 0x0000002e , 0x0000007e + 00023932 0x00005582 rtn + 00023933 0x00005585 call 0x00005d82 + 00023934 0x00005586 jam 0x0000009a , 0x0000007c + 00023935 0x00005587 rtn + 00023936 0x0000558a call 0x00005d82 + 00023937 0x0000558b branch 0x00005d86 + 00023938 0x0000558e arg 0x0000465e , 0x00000005 + 00023939 0x0000558f fetch 0x00000003 , 0x00000553 + 00023940 0x00005590 istore 0x00000003 , 0x00000005 + 00023941 0x00005591 rtn + 00023942 0x00005594 branch 0x000076d8 , 0x00000001 + 00023943 0x00005595 rtn + 00023944 0x00005597 fetch 0x00000001 , 0x00000554 + 00023945 0x00005598 set1 0x00000007 , 0x0000003f + 00023946 0x00005599 store 0x00000001 , 0x000004c9 + 00023947 0x0000559a beq 0x0000008b , 0x00005d92 + 00023948 0x0000559b rtn + 00023949 0x0000559f fetch 0x00000001 , 0x00000554 + 00023950 0x000055a0 set1 0x00000007 , 0x0000003f + 00023951 0x000055a1 store 0x00000001 , 0x000004c9 + 00023952 0x000055a2 beq 0x0000008b , 0x00005d96 + 00023953 0x000055a3 rtn + 00023954 0x000055a6 fetch 0x00000001 , 0x0000415a + 00023955 0x000055a7 fetcht 0x00000001 , 0x0000004c + 00023956 0x000055a8 nsetflag 0x00000034 , 0x00000005 , 0x00000002 + 00023957 0x000055a9 storet 0x00000001 , 0x0000004c + 00023958 0x000055ab fetch 0x00000001 , 0x00000030 + 00023959 0x000055ac rtnbit0 0x00000005 + 00023960 0x000055ad set0 0x00000005 , 0x0000003f + 00023961 0x000055ae store 0x00000001 , 0x00000030 + 00023962 0x000055af fetch 0x00000001 , 0x000004d7 + 00023963 0x000055b0 nrtn 0x00000034 + 00023964 0x000055b1 jam 0x00000031 , 0x0000007c + 00023965 0x000055b2 rtn + 00023966 0x000055b5 nbranch 0x00005da1 , 0x00000029 + 00023967 0x000055b6 jam 0x00000012 , 0x0000007c + 00023968 0x000055b7 branch 0x000062eb + 00023969 0x000055ba jam 0x00000097 , 0x0000007c + 00023970 0x000055bb rtn + 00023971 0x000055c0 call 0x000062eb + 00023972 0x000055c1 branch 0x00005ffe + 00023973 0x000055c4 jam 0x00000084 , 0x0000007c + 00023974 0x000055c5 rtn + 00023975 0x000055c8 fetcht 0x00000001 , 0x00000555 + 00023976 0x000055c9 and 0x00000002 , 0x00000001 , 0x00000002 + 00023977 0x000055ca storet 0x00000001 , 0x000004d0 + 00023978 0x000055cb fetch 0x00000001 , 0x000041ce + 00023979 0x000055cc bne 0x00000051 , 0x00005dad + 00023980 0x000055cd jam 0x00000000 , 0x000041ce + 00023981 0x000055cf fetch 0x00000001 , 0x00000055 + 00023982 0x000055d0 rtnne 0x00000015 + 00023983 0x000055d1 jam 0x00000004 , 0x00000055 + 00023984 0x000055d2 branch 0x0000631b + 00023985 0x000055d5 bpatchx 0x00000080 , 0x00004030 + 00023986 0x000055d6 fetch 0x00000001 , 0x00000552 + 00023987 0x000055d7 store 0x00000001 , 0x000004c9 + 00023988 0x000055d8 beq 0x00000033 , 0x00005dd8 + 00023989 0x000055d9 beq 0x00000008 , 0x00005de7 + 00023990 0x000055da beq 0x0000000f , 0x00005dee + 00023991 0x000055db beq 0x00000010 , 0x00005df4 + 00023992 0x000055dc beq 0x00000011 , 0x00005df5 + 00023993 0x000055dd beq 0x00000012 , 0x00005dfd + 00023994 0x000055de beq 0x00000018 , 0x00005e13 + 00023995 0x000055df beq 0x00000017 , 0x00005e16 + 00023996 0x000055e0 beq 0x00000013 , 0x00005dcf + 00023997 0x000055e2 beq 0x0000003d , 0x00005f1e + 00023998 0x000055e3 beq 0x0000003e , 0x00005f6a + 00023999 0x000055e4 beq 0x00000040 , 0x00005f20 + 00024000 0x000055e5 beq 0x00000041 , 0x00005f3d + 00024001 0x000055e6 rtn + 00024002 0x000055e9 bpatchx 0x00000081 , 0x00004030 + 00024003 0x000055ea fetch 0x00000001 , 0x00000552 + 00024004 0x000055eb store 0x00000001 , 0x000004c9 + 00024005 0x000055ec beq 0x00000001 , 0x00005e0a + 00024006 0x000055ed beq 0x00000033 , 0x00005de2 + 00024007 0x000055ee beq 0x0000000b , 0x00005dfe + 00024008 0x000055ef beq 0x00000008 , 0x00005e01 + 00024009 0x000055f0 beq 0x00000013 , 0x00005dd2 + 00024010 0x000055f2 beq 0x00000040 , 0x00005e0b + 00024011 0x000055f3 beq 0x00000041 , 0x00005e0e + 00024012 0x000055f4 beq 0x00000018 , 0x00005e11 + 00024013 0x000055f5 beq 0x00000017 , 0x00005e22 + 00024014 0x000055f6 rtn + 00024015 0x000055f9 jam 0x00000020 , 0x00000a99 + 00024016 0x000055fa call 0x00007d86 + 00024017 0x000055fb branch 0x000021dc + 00024018 0x000055fd jam 0x00000019 , 0x00000a99 + 00024019 0x000055fe call 0x00007d86 + 00024020 0x000055ff jam 0x00000002 , 0x0000455b + 00024021 0x00005600 setarg 0x00000050 + 00024022 0x00005601 arg 0x00000006 , 0x00000007 + 00024023 0x00005602 branch 0x00007f08 + 00024024 0x00005608 fetch 0x00000001 , 0x000004d1 + 00024025 0x00005609 set1 0x00000000 , 0x0000003f + 00024026 0x0000560a store 0x00000001 , 0x000004d1 + 00024027 0x0000560b jam 0x00000001 , 0x00000a99 + 00024028 0x0000560c call 0x00007d86 + 00024029 0x0000560d jam 0x0000008b , 0x0000007c + 00024030 0x00005611 fetch 0x00000001 , 0x00000055 + 00024031 0x00005612 bne 0x00000005 , 0x00005d07 + 00024032 0x00005615 jam 0x00000006 , 0x00000055 + 00024033 0x00005616 rtn + 00024034 0x0000561f jam 0x0000000b , 0x000004ca + 00024035 0x00005620 jam 0x00000007 , 0x0000007c + 00024036 0x00005622 jam 0x00000000 , 0x00000055 + 00024037 0x00005624 branch 0x00005d07 , 0x00000001 + 00024038 0x00005625 rtn + 00024039 0x00005628 fetch 0x00000001 , 0x000041bd + 00024040 0x00005629 nrtn 0x00000034 + 00024041 0x0000562a call 0x0000244f + 00024042 0x0000562b call 0x00005ffc + 00024043 0x0000562c rtn 0x00000029 + 00024044 0x0000562d set1 0x00000021 , 0x00000000 + 00024045 0x0000562e rtn + 00024046 0x00005631 nrtn 0x00000029 + 00024047 0x00005632 jam 0x00000010 , 0x0000007c + 00024048 0x00005633 fetch 0x00000001 , 0x0000004c + 00024049 0x00005634 rtnbit0 0x00000002 + 00024050 0x00005635 jam 0x00000012 , 0x0000007c + 00024051 0x00005636 rtn + 00024052 0x00005639 branch 0x00005ffe + 00024053 0x0000563c call 0x00006059 + 00024054 0x0000563d fetch 0x00000001 , 0x00000030 + 00024055 0x0000563e rtnbit1 0x00000004 + 00024056 0x0000563f jam 0x00000031 , 0x0000007c + 00024057 0x00005640 fetch 0x00000001 , 0x00000055 + 00024058 0x00005641 rtnne 0x0000000a + 00024059 0x00005642 jam 0x0000000b , 0x00000055 + 00024060 0x00005643 rtn + 00024061 0x0000564d rtn + 00024062 0x00005651 jam 0x00000007 , 0x0000007c + 00024063 0x00005652 jam 0x00000013 , 0x000004ca + 00024064 0x00005653 rtn + 00024065 0x00005656 fetch 0x00000001 , 0x00000553 + 00024066 0x00005657 beq 0x00000006 , 0x00005e07 + 00024067 0x00005658 rtnne 0x00000018 + 00024068 0x00005659 jam 0x00000018 , 0x000004ca + 00024069 0x0000565a jam 0x00000007 , 0x0000007c + 00024070 0x0000565b rtn + 00024071 0x0000565d jam 0x00000006 , 0x000004ca + 00024072 0x0000565e jam 0x00000007 , 0x0000007c + 00024073 0x0000565f rtn + 00024074 0x00005662 rtn + 00024075 0x00005665 jam 0x00000000 , 0x000009ae + 00024076 0x00005666 jam 0x00000007 , 0x0000007c + 00024077 0x00005667 branch 0x00005d07 + 00024078 0x0000566a jam 0x00000000 , 0x000009ae + 00024079 0x0000566b jam 0x00000007 , 0x0000007c + 00024080 0x0000566c branch 0x00005d07 + 00024081 0x0000566e jam 0x00000024 , 0x00000a99 + 00024082 0x0000566f branch 0x00007d86 + 00024083 0x00005672 jam 0x00000023 , 0x00000a99 + 00024084 0x00005673 call 0x00007d86 + 00024085 0x00005674 branch 0x000026e9 + 00024086 0x00005677 jam 0x00000022 , 0x00000a99 + 00024087 0x00005678 call 0x00007d86 + 00024088 0x00005679 setarg 0x00000000 + 00024089 0x0000567a store 0x00000002 , 0x00000075 + 00024090 0x0000567b fetch 0x00000002 , 0x000041e3 + 00024091 0x0000567c lshift 0x0000003f , 0x0000003f + 00024092 0x0000567d store 0x00000002 , 0x00000032 + 00024093 0x0000567e fetch 0x00000001 , 0x000041e5 + 00024094 0x0000567f store 0x00000001 , 0x00000073 + 00024095 0x00005680 fetch 0x00000001 , 0x000041e7 + 00024096 0x00005681 store 0x00000001 , 0x00000074 + 00024097 0x00005682 branch 0x000026c6 + 00024098 0x00005685 jam 0x00000021 , 0x00000a99 + 00024099 0x00005686 branch 0x00007d86 + 00024100 0x00005689 fetcht 0x00000001 , 0x00000552 + 00024101 0x0000568a storet 0x00000001 , 0x00000054 + 00024102 0x0000568b branch 0x00005e38 + 00024103 0x0000568e fetch 0x00000001 , 0x000004d1 + 00024104 0x0000568f set1 0x00000002 , 0x0000003f + 00024105 0x00005690 store 0x00000001 , 0x000004d1 + 00024106 0x00005691 rtnbit1 0x00000003 + 00024107 0x00005692 jam 0x00000031 , 0x0000007c + 00024108 0x00005693 branch 0x00005d07 + 00024109 0x00005698 rtn + 00024110 0x0000569b fetch 0x00000001 , 0x000040d0 + 00024111 0x0000569c fetcht 0x00000001 , 0x00000552 + 00024112 0x0000569d isub 0x00000002 , 0x0000003e + 00024113 0x0000569f branch 0x00005e38 , 0x00000002 + 00024114 0x000056a0 jam 0x00000004 , 0x0000007c + 00024115 0x000056a1 jam 0x0000001f , 0x0000007e + 00024116 0x000056a2 jam 0x0000002e , 0x0000007d + 00024117 0x000056a3 rtn + 00024118 0x000056a6 call 0x00006157 + 00024119 0x000056a7 branch 0x00005e38 + 00024120 0x000056aa jam 0x00000003 , 0x0000007c + 00024121 0x000056ab rtn + 00024122 0x000056ae jam 0x00000021 , 0x0000007c + 00024123 0x000056af rtn + 00024124 0x000056b2 jam 0x00000022 , 0x0000007c + 00024125 0x000056b3 rtn + 00024126 0x000056b6 fetch 0x00000001 , 0x00000055 + 00024127 0x000056b7 rtneq 0x00000013 + 00024128 0x000056b9 jam 0x00000002 , 0x00000055 + 00024129 0x000056bb rtn + 00024130 0x000056bf rtn + 00024131 0x000056c2 call 0x00005ff9 + 00024132 0x000056c3 jam 0x00000001 , 0x000004d4 + 00024133 0x000056c4 jam 0x0000000a , 0x00000a99 + 00024134 0x000056c5 call 0x00007d86 + 00024135 0x000056c7 call 0x000062f3 + 00024136 0x000056c8 nbranch 0x00006001 , 0x00000001 + 00024137 0x000056ca nbranch 0x00005e4e , 0x00000029 + 00024138 0x000056cb jam 0x00000004 , 0x0000007c + 00024139 0x000056cc jam 0x00000008 , 0x0000007d + 00024140 0x000056cd jam 0x00000023 , 0x0000007e + 00024141 0x000056ce rtn + 00024142 0x000056d0 fetch 0x00000001 , 0x0000004b + 00024143 0x000056d1 set1 0x00000002 , 0x0000003f + 00024144 0x000056d2 store 0x00000001 , 0x0000004b + 00024145 0x000056d3 rtn + 00024146 0x000056d7 fetcht 0x00000001 , 0x0000004c + 00024147 0x000056d8 nsetflag 0x00000034 , 0x00000001 , 0x00000002 + 00024148 0x000056d9 storet 0x00000001 , 0x0000004c + 00024149 0x000056da rtn + 00024150 0x000056de fetch 0x00000001 , 0x0000007f + 00024151 0x000056df rshift 0x0000003f , 0x0000003f + 00024152 0x000056e0 and_into 0x00000001 , 0x0000003f + 00024153 0x000056e1 rtn + 00024154 0x000056e4 fetch 0x00000001 , 0x00004217 + 00024155 0x000056e5 rtn 0x00000034 + 00024156 0x000056e6 fetch 0x00000001 , 0x000009b5 + 00024157 0x000056e7 call 0x000067b2 , 0x00000034 + 00024158 0x000056e8 rtn + 00024159 0x000056eb call 0x00005e5a + 00024160 0x000056ec call 0x00005e56 + 00024161 0x000056ed store 0x00000001 , 0x000004d5 + 00024162 0x000056ee call 0x00005ff9 + 00024163 0x000056ef jam 0x0000000c , 0x0000007c + 00024164 0x000056f0 fetch 0x00000001 , 0x000041bd + 00024165 0x000056f1 nrtn 0x00000034 + 00024166 0x000056f2 fetch 0x00000001 , 0x00000030 + 00024167 0x000056f3 rtnbit1 0x00000006 + 00024168 0x000056f4 jam 0x00000006 , 0x0000007e + 00024169 0x000056f5 branch 0x00005d53 + 00024170 0x000056f8 arg 0x00000040 , 0x00000011 + 00024171 0x000056f9 call 0x00007288 + 00024172 0x000056fa fetch 0x00000004 , 0x00000552 + 00024173 0x000056fb fetcht 0x00000004 , 0x00000592 + 00024174 0x000056fc isub 0x00000002 , 0x0000003e + 00024175 0x000056fd branch 0x00005e73 , 0x00000005 + 00024176 0x000056fe jam 0x00000007 , 0x0000007c + 00024177 0x000056ff jam 0x00000005 , 0x000004ca + 00024178 0x00005700 rtn + 00024179 0x00005702 call 0x00005e77 + 00024180 0x00005703 fetch 0x00000001 , 0x0000465a + 00024181 0x00005704 branch 0x00005f3e , 0x00000034 + 00024182 0x00005705 rtn + 00024183 0x00005709 call 0x00007386 + 00024184 0x0000570a call 0x000021b2 + 00024185 0x0000570b fetch 0x00000001 , 0x0000004b + 00024186 0x0000570c isolate1 0x00000001 , 0x0000003f + 00024187 0x0000570d set0 0x00000001 , 0x0000003f + 00024188 0x0000570e store 0x00000001 , 0x0000004b + 00024189 0x0000570f fetch 0x00000001 , 0x00000055 + 00024190 0x00005710 beq 0x00000019 , 0x00005e81 + 00024191 0x00005711 beq 0x00000018 , 0x00005e81 + 00024192 0x00005712 rtn + 00024193 0x00005714 fetch 0x00000001 , 0x000009b5 + 00024194 0x00005715 rtnne 0x00000000 + 00024195 0x00005716 fetch 0x00000001 , 0x0000004c + 00024196 0x00005717 rtnbit1 0x00000002 + 00024197 0x00005718 branch 0x000063b1 + 00024198 0x0000571b arg 0x00000552 , 0x00000011 + 00024199 0x0000571c arg 0x00000582 , 0x00000012 + 00024200 0x0000571d arg 0x00000562 , 0x00000005 + 00024201 0x0000571e call 0x00007352 + 00024202 0x0000571f arg 0x00000040 , 0x00000011 + 00024203 0x00005720 call 0x00006311 + 00024204 0x00005721 jam 0x0000000b , 0x0000007c + 00024205 0x00005722 fetch 0x00000001 , 0x00000030 + 00024206 0x00005723 bbit0 0x00000006 , 0x00005ffc + 00024207 0x00005724 rtn + 00024208 0x00005727 fetch 0x00000002 , 0x0000015f + 00024209 0x00005728 add 0x0000003f , 0xfffffffd , 0x00000039 + 00024210 0x00005729 fetcht 0x00000001 , 0x00000552 + 00024211 0x0000572a setarg 0x00000101 + 00024212 0x0000572b iadd 0x00000002 , 0x00000005 + 00024213 0x0000572c arg 0x00000554 , 0x00000006 + 00024214 0x0000572d call 0x00007f01 + 00024215 0x0000572e fetcht 0x00000001 , 0x00000053 + 00024216 0x0000572f fetch 0x00000001 , 0x00000553 + 00024217 0x00005730 isub 0x00000002 , 0x0000003f + 00024218 0x00005731 sub 0x0000003f , 0x0000000e , 0x0000003e + 00024219 0x00005732 branch 0x00005ea0 , 0x00000002 + 00024220 0x00005733 add 0x00000002 , 0x0000000e , 0x0000003f + 00024221 0x00005734 store 0x00000001 , 0x00000053 + 00024222 0x00005735 jam 0x00000001 , 0x0000007c + 00024223 0x00005736 rtn + 00024224 0x00005738 fetch 0x00000001 , 0x0000004c + 00024225 0x00005739 set1 0x00000003 , 0x0000003f + 00024226 0x0000573a store 0x00000001 , 0x0000004c + 00024227 0x0000573b bbit1 0x00000004 , 0x00006006 + 00024228 0x0000573c rtn + 00024229 0x0000573e fetch 0x00000001 , 0x00000552 + 00024230 0x0000573f store 0x00000001 , 0x0000007d + 00024231 0x00005740 jam 0x00000002 , 0x0000007c + 00024232 0x00005741 rtn + 00024233 0x00005744 branch 0x00005e38 + 00024234 0x00005747 jam 0x00000030 , 0x0000007c + 00024235 0x00005748 rtn + 00024236 0x0000574b jam 0x00000028 , 0x0000007c + 00024237 0x0000574c rtn + 00024238 0x0000574f jam 0x00000026 , 0x0000007c + 00024239 0x00005750 rtn + 00024240 0x00005755 rtn + 00024241 0x0000575a fetch 0x00000002 , 0x00000032 + 00024242 0x0000575b iforce 0x00000002 + 00024243 0x0000575c fetch 0x00000001 , 0x00000553 + 00024244 0x0000575d store 0x00000001 , 0x00000095 + 00024245 0x0000575e imul32 0x00000002 , 0x00000002 + 00024246 0x0000575f fetch 0x00000002 , 0x00000554 + 00024247 0x00005760 lshift 0x0000003f , 0x0000003f + 00024248 0x00005761 store 0x00000002 , 0x00000096 + 00024249 0x00005762 fetch 0x00000004 , 0x00000556 + 00024250 0x00005763 lshift 0x0000003f , 0x0000003f + 00024251 0x00005764 store 0x00000004 , 0x00000091 + 00024252 0x00005766 deposit 0x00000002 + 00024253 0x00005767 store 0x00000002 , 0x00000098 + 00024254 0x00005768 rtn + 00024255 0x0000576a fetcht 0x00000001 , 0x0000415a + 00024256 0x0000576b fetch 0x00000001 , 0x00000553 + 00024257 0x0000576c ixor 0x00000002 , 0x0000003e + 00024258 0x0000576d nbranch 0x00005d77 , 0x00000005 + 00024259 0x0000576e isolate1 0x00000000 , 0x0000003f + 00024260 0x0000576f fetch 0x00000001 , 0x0000004c + 00024261 0x00005770 setflag 0x00000001 , 0x00000005 , 0x0000003f + 00024262 0x00005771 store 0x00000001 , 0x0000004c + 00024263 0x00005772 jam 0x00000081 , 0x0000007c + 00024264 0x00005773 jam 0x0000008b , 0x0000007d + 00024265 0x00005774 rtn + 00024266 0x0000577b rtn + 00024267 0x0000577e branch 0x00005e38 + 00024268 0x00005782 branch 0x00005e38 + 00024269 0x00005787 fetch 0x00000002 , 0x00000552 + 00024270 0x00005788 store 0x00000002 , 0x00000171 + 00024271 0x00005789 rtn + 00024272 0x0000578c fetch 0x00000002 , 0x00000555 + 00024273 0x0000578d fetcht 0x00000001 , 0x00004172 + 00024274 0x0000578e imul32 0x00000002 , 0x0000003f + 00024275 0x0000578f arg 0x00000640 , 0x00000002 + 00024276 0x00005790 isub 0x00000002 , 0x0000003e + 00024277 0x00005792 rtn + 00024278 0x00005795 fetch 0x00000002 , 0x00000557 + 00024279 0x00005796 branch 0x00005ef0 , 0x00000034 + 00024280 0x00005797 call 0x00005ed0 + 00024281 0x00005798 branch 0x00005ef0 , 0x00000002 + 00024282 0x00005799 fetch 0x00000001 , 0x00004092 + 00024283 0x0000579a sub 0x0000003f , 0x0000000a , 0x0000003e + 00024284 0x0000579b call 0x00003cd5 , 0x00000005 + 00024285 0x0000579c fetch 0x00000001 , 0x00000030 + 00024286 0x0000579d bbit1 0x00000001 , 0x00005ef0 + 00024287 0x0000579e fetch 0x00000002 , 0x00000553 + 00024288 0x0000579f lshift 0x0000003f , 0x0000003f + 00024289 0x000057a0 store 0x00000002 , 0x00000075 + 00024290 0x000057a1 fetch 0x00000002 , 0x00000555 + 00024291 0x000057a2 lshift 0x0000003f , 0x0000003f + 00024292 0x000057a3 store 0x00000002 , 0x00000032 + 00024293 0x000057a4 fetch 0x00000002 , 0x00000557 + 00024294 0x000057a5 store 0x00000001 , 0x00000073 + 00024295 0x000057a6 iforce 0x00000002 + 00024296 0x000057a7 fetch 0x00000002 , 0x00000559 + 00024297 0x000057a8 store 0x00000001 , 0x00000074 + 00024298 0x000057a9 isub 0x00000002 , 0x0000003e + 00024299 0x000057aa nbranch 0x00005eed , 0x00000002 + 00024300 0x000057ab store 0x00000001 , 0x00000073 + 00024301 0x000057ae jam 0x00000003 , 0x0000007c + 00024302 0x000057af jam 0x00000017 , 0x0000007d + 00024303 0x000057b0 rtn + 00024304 0x000057b3 jam 0x00000024 , 0x0000007e + 00024305 0x000057b4 branch 0x00005d53 + 00024306 0x000057b7 call 0x00005e38 + 00024307 0x000057b8 call 0x00005ff9 + 00024308 0x000057b9 call 0x0000728b + 00024309 0x000057ba branch 0x000026b8 + 00024310 0x000057bd call 0x00005e38 + 00024311 0x000057be branch 0x000026c0 + 00024312 0x000057c2 fetch 0x00000004 , 0x00000552 + 00024313 0x000057c3 lshift 0x0000003f , 0x0000003f + 00024314 0x000057c5 branch 0x00005f04 , 0x00000029 + 00024315 0x000057c6 fetcht 0x00000001 , 0x000041bd + 00024316 0x000057c7 nbranch 0x00005f01 , 0x00000034 + 00024317 0x000057c9 jam 0x00000004 , 0x0000007c + 00024318 0x000057ca jam 0x00000013 , 0x0000007d + 00024319 0x000057cb jam 0x00000024 , 0x0000007e + 00024320 0x000057cc rtn + 00024321 0x000057ce jam 0x00000034 , 0x0000007c + 00024322 0x000057cf jam 0x00000000 , 0x00000055 + 00024323 0x000057d0 branch 0x000021d9 + 00024324 0x000057d3 call 0x000021d9 + 00024325 0x000057d4 set1 0x00000022 , 0x00000000 + 00024326 0x000057d5 fetch 0x00000001 , 0x0000016d + 00024327 0x000057d6 set0 0x00000002 , 0x0000003f + 00024328 0x000057d7 store 0x00000001 , 0x0000016d + 00024329 0x000057d8 branch 0x00005e38 + 00024330 0x000057e1 rtn + 00024331 0x000057e5 jam 0x00000003 , 0x0000007c + 00024332 0x000057e6 jam 0x00000018 , 0x0000007d + 00024333 0x000057e7 jam 0x0000002e , 0x00000a99 + 00024334 0x000057e8 call 0x00007d86 + 00024335 0x000057e9 branch 0x000026e9 + 00024336 0x000057ec fetch 0x00000001 , 0x00000552 + 00024337 0x000057ed bne 0x00000001 , 0x00005f1c + 00024338 0x000057ee fetch 0x00000001 , 0x00000553 + 00024339 0x000057ef bne 0x00000001 , 0x00005f1c + 00024340 0x000057f0 fetch 0x00000001 , 0x00000554 + 00024341 0x000057f1 bne 0x00000030 , 0x00005f1c + 00024342 0x000057f2 call 0x000062fc + 00024343 0x000057f3 branch 0x00005f19 , 0x00000001 + 00024344 0x000057f4 jam 0x00000001 , 0x000009ae + 00024345 0x000057f6 jam 0x00000003 , 0x0000007c + 00024346 0x000057f7 jam 0x0000003d , 0x0000007d + 00024347 0x000057f8 branch 0x00005d07 + 00024348 0x000057fb jam 0x00000024 , 0x0000007e + 00024349 0x000057fc branch 0x00005d53 + 00024350 0x00005801 jam 0x0000003e , 0x0000007c + 00024351 0x00005803 rtn + 00024352 0x00005805 fetch 0x00000001 , 0x00004662 + 00024353 0x00005806 beq 0x00000001 , 0x00005f27 + 00024354 0x00005807 beq 0x00000002 , 0x00005f2b + 00024355 0x00005809 call 0x000062fc + 00024356 0x0000580a rtn 0x00000001 + 00024357 0x0000580b jam 0x00000008 , 0x000009ae + 00024358 0x0000580c rtn + 00024359 0x0000580f call 0x00007962 + 00024360 0x00005810 jam 0x00000035 , 0x00000a99 + 00024361 0x00005811 call 0x00007d86 + 00024362 0x00005812 branch 0x00005f23 + 00024363 0x00005816 call 0x000062fc + 00024364 0x00005817 rtn 0x00000001 + 00024365 0x00005818 fetch 0x00000001 , 0x00004663 + 00024366 0x00005819 beq 0x00000013 , 0x00005f3b + 00024367 0x0000581a increase 0x00000001 , 0x0000003f + 00024368 0x0000581b store 0x00000001 , 0x00004663 + 00024369 0x0000581f jam 0x00000001 , 0x000009b0 + 00024370 0x00005820 jam 0x00000004 , 0x000009ae + 00024371 0x00005821 fetch 0x00000001 , 0x00004663 + 00024372 0x00005822 copy 0x0000003f , 0x00000007 + 00024373 0x00005823 fetch 0x00000006 , 0x0000468a + 00024374 0x00005824 qisolate1 0x0000003f + 00024375 0x00005825 setarg 0x00000080 + 00024376 0x00005826 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00024377 0x00005827 store 0x00000001 , 0x00004664 + 00024378 0x00005828 rtn + 00024379 0x0000582b jam 0x00000008 , 0x000009ae + 00024380 0x0000582c rtn + 00024381 0x0000582f call 0x00005f43 + 00024382 0x00005831 fetch 0x00000001 , 0x00004665 + 00024383 0x00005832 rtn 0x00000034 + 00024384 0x00005833 jam 0x00000000 , 0x00004665 + 00024385 0x00005834 jam 0x00000038 , 0x00000a99 + 00024386 0x00005835 branch 0x00007d86 + 00024387 0x0000583a call 0x000062fc + 00024388 0x0000583b ncall 0x00007965 , 0x00000001 + 00024389 0x0000583c call 0x00007975 , 0x00000001 + 00024390 0x0000583d call 0x000062fc + 00024391 0x0000583e rtn 0x00000001 + 00024392 0x0000583f jam 0x0000000c , 0x000009ae + 00024393 0x00005840 jam 0x00000001 , 0x000009b0 + 00024394 0x00005841 rtn + 00024395 0x00005844 arg 0x00000a6e , 0x00000005 + 00024396 0x00005845 arg 0x00000552 , 0x00000006 + 00024397 0x00005846 call 0x00007ebf + 00024398 0x00005847 fetch 0x00000001 , 0x00004662 + 00024399 0x00005848 rtneq 0x00000002 + 00024400 0x00005849 branch 0x000076d8 + 00024401 0x0000584c fetch 0x00000001 , 0x000009af + 00024402 0x0000584d beq 0x00000007 , 0x00005f55 + 00024403 0x0000584e fetch 0x00000001 , 0x000009ae + 00024404 0x0000584f bne 0x00000001 , 0x00005f68 + 00024405 0x00005851 fetch 0x00000001 , 0x000009b7 + 00024406 0x00005852 sub 0x0000003f , 0x00000020 , 0x00000005 + 00024407 0x00005853 nbranch 0x00005f68 , 0x00000002 + 00024408 0x00005854 arg 0x000009c6 , 0x00000005 + 00024409 0x00005855 iadd 0x00000005 , 0x00000005 + 00024410 0x00005856 fetch 0x00000008 , 0x00000552 + 00024411 0x00005857 istore 0x00000008 , 0x00000005 + 00024412 0x00005858 fetch 0x00000008 , 0x0000055a + 00024413 0x00005859 istore 0x00000008 , 0x00000005 + 00024414 0x0000585a fetch 0x00000001 , 0x000009b7 + 00024415 0x0000585b increase 0x00000010 , 0x0000003f + 00024416 0x0000585c store 0x00000001 , 0x000009b7 + 00024417 0x0000585d bne 0x00000030 , 0x00005e38 + 00024418 0x0000585f call 0x000062fc + 00024419 0x00005860 branch 0x00005e38 , 0x00000001 + 00024420 0x00005861 jam 0x00000001 , 0x000009b8 + 00024421 0x00005862 jam 0x00000002 , 0x000009ae + 00024422 0x00005863 jam 0x00000001 , 0x000009b0 + 00024423 0x00005864 branch 0x00005e38 + 00024424 0x00005866 jam 0x00000024 , 0x0000007e + 00024425 0x00005867 branch 0x00005d53 + 00024426 0x00005869 fetch 0x00000001 , 0x000009b6 + 00024427 0x0000586a beq 0x00000030 , 0x00005f6e + 00024428 0x0000586b jam 0x0000003e , 0x0000007c + 00024429 0x0000586c branch 0x00005d07 + 00024430 0x0000586f call 0x000062fc + 00024431 0x00005870 branch 0x00005f77 , 0x00000001 + 00024432 0x00005871 fetch 0x00000001 , 0x00004662 + 00024433 0x00005872 beq 0x00000002 , 0x00005f75 + 00024434 0x00005873 jam 0x00000001 , 0x000009b0 + 00024435 0x00005874 jam 0x00000004 , 0x000009ae + 00024436 0x00005875 branch 0x00005d07 + 00024437 0x00005878 jam 0x00000036 , 0x00000a99 + 00024438 0x00005879 branch 0x00007d86 + 00024439 0x0000587e branch 0x00005d07 + 00024440 0x00005881 fetch 0x00000001 , 0x000009af + 00024441 0x00005882 beq 0x00000007 , 0x00005f7c + 00024442 0x00005883 fetch 0x00000001 , 0x000009ae + 00024443 0x00005884 bne 0x00000006 , 0x00005f88 + 00024444 0x00005886 arg 0x00000a2e , 0x00000005 + 00024445 0x00005887 fetch 0x00000008 , 0x00000552 + 00024446 0x00005888 istore 0x00000008 , 0x00000005 + 00024447 0x00005889 fetch 0x00000008 , 0x0000055a + 00024448 0x0000588a istore 0x00000008 , 0x00000005 + 00024449 0x0000588b call 0x000062fc + 00024450 0x0000588c branch 0x00005f86 , 0x00000001 + 00024451 0x0000588d jam 0x00000007 , 0x000009ae + 00024452 0x0000588e jam 0x00000001 , 0x000009b0 + 00024453 0x0000588f branch 0x00005e38 + 00024454 0x00005891 jam 0x00000004 , 0x000009af + 00024455 0x00005892 branch 0x000076d8 + 00024456 0x00005896 jam 0x00000024 , 0x0000007e + 00024457 0x00005897 branch 0x00005d53 + 00024458 0x0000589a fetch 0x00000001 , 0x000009af + 00024459 0x0000589b beq 0x0000000b , 0x00005f8e + 00024460 0x0000589c fetch 0x00000001 , 0x000009ae + 00024461 0x0000589d bne 0x00000008 , 0x00005f9d + 00024462 0x0000589f arg 0x00000a5e , 0x00000005 + 00024463 0x000058a0 arg 0x00000552 , 0x00000006 + 00024464 0x000058a1 call 0x00007ebf + 00024465 0x000058a2 call 0x000062fc + 00024466 0x000058a3 branch 0x00005f9a , 0x00000001 + 00024467 0x000058a4 fetch 0x00000001 , 0x00004662 + 00024468 0x000058a5 beq 0x00000001 , 0x00005f9f + 00024469 0x000058a7 jam 0x00000000 , 0x00004661 + 00024470 0x000058a8 jam 0x00000009 , 0x000009ae + 00024471 0x000058a9 jam 0x00000001 , 0x000009b0 + 00024472 0x000058aa jam 0x00000041 , 0x0000007d + 00024473 0x000058ab branch 0x00005d07 + 00024474 0x000058ae jam 0x00000009 , 0x000009af + 00024475 0x000058af jam 0x00000001 , 0x000009b1 + 00024476 0x000058b0 branch 0x00005d07 + 00024477 0x000058b2 jam 0x00000024 , 0x0000007e + 00024478 0x000058b3 branch 0x00005d53 + 00024479 0x000058b6 fetch 0x00000001 , 0x00004661 + 00024480 0x000058b7 bbit1 0x00000007 , 0x00005fa4 + 00024481 0x000058b8 set1 0x00000006 , 0x0000003f + 00024482 0x000058b9 store 0x00000001 , 0x00004661 + 00024483 0x000058ba rtn + 00024484 0x000058bd bbit1 0x00000000 , 0x00005f95 + 00024485 0x000058be jam 0x00000000 , 0x00004661 + 00024486 0x000058bf branch 0x00005f9d + 00024487 0x000058c3 branch 0x00005d07 + 00024488 0x000058c6 fetch 0x00000001 , 0x0000016d + 00024489 0x000058c7 set0 0x00000001 + 00024490 0x000058c8 store 0x00000001 , 0x0000016d + 00024491 0x000058c9 call 0x00005e38 + 00024492 0x000058ca nrtn 0x00000029 + 00024493 0x000058cb fetch 0x00000001 , 0x00000552 + 00024494 0x000058cc fetcht 0x00000001 , 0x0000004b + 00024495 0x000058cd setflag 0x00000034 , 0x00000004 , 0x00000002 + 00024496 0x000058ce nsetflag 0x00000034 , 0x00000005 , 0x00000002 + 00024497 0x000058cf storet 0x00000001 , 0x0000004b + 00024498 0x000058d0 rtn + 00024499 0x000058d3 fetcht 0x00000008 , 0x00000552 + 00024500 0x000058d5 fetch 0x00000001 , 0x00000055 + 00024501 0x000058d6 rtnne 0x00000003 + 00024502 0x000058d8 fetch 0x00000001 , 0x0000016d + 00024503 0x000058d9 bbit0 0x00000004 , 0x00005fba + 00024504 0x000058db jam 0x00000014 , 0x00000055 + 00024505 0x000058dc rtn + 00024506 0x000058de jam 0x00000004 , 0x00000055 + 00024507 0x000058df rtn + 00024508 0x000058e1 fetch 0x00000001 , 0x0000017f + 00024509 0x000058e2 store 0x00000001 , 0x0000015b + 00024510 0x000058e3 jam 0x00000003 , 0x0000007c + 00024511 0x000058e4 jam 0x00000038 , 0x0000007d + 00024512 0x000058e5 rtn + 00024513 0x000058e9 jam 0x00000003 , 0x0000007c + 00024514 0x000058ea jam 0x00000039 , 0x0000007d + 00024515 0x000058eb force 0x00000009 , 0x00000039 + 00024516 0x000058ec arg 0x00000552 , 0x00000006 + 00024517 0x000058ed arg 0x00000152 , 0x00000005 + 00024518 0x000058ef ifetch 0x00000001 , 0x00000006 + 00024519 0x000058f0 xor_into 0x00000055 , 0x0000003f + 00024520 0x000058f1 istore 0x00000001 , 0x00000005 + 00024521 0x000058f2 loop 0x00005fc6 + 00024522 0x000058f3 fetch 0x00000001 , 0x00000152 + 00024523 0x000058f4 fetcht 0x00000001 , 0x00000151 + 00024524 0x000058f5 set0 0x00000007 , 0x00000002 + 00024525 0x000058f6 set0 0x00000004 , 0x00000002 + 00024526 0x000058f7 beq 0x000000ff , 0x00005fda + 00024527 0x000058f8 beq 0x00000000 , 0x00005ff3 + 00024528 0x000058f9 beq 0x00000005 , 0x00005fe7 + 00024529 0x000058fa beq 0x00000007 , 0x00005fe6 + 00024530 0x000058fb beq 0x00000006 , 0x00005fe7 + 00024531 0x000058fc beq 0x00000008 , 0x00005fe6 + 00024532 0x000058fd beq 0x00000001 , 0x00005fdf + 00024533 0x000058fe beq 0x00000002 , 0x00005fdf + 00024534 0x000058ff beq 0x00000003 , 0x00005fdf + 00024535 0x00005900 beq 0x00000009 , 0x00005fdf + 00024536 0x00005901 beq 0x00000004 , 0x00005fdf + 00024537 0x00005902 rtn + 00024538 0x00005905 fetch 0x00000001 , 0x00000151 + 00024539 0x00005906 set1 0x00000003 , 0x0000003f + 00024540 0x00005907 set1 0x00000002 , 0x0000003f + 00024541 0x00005908 store 0x00000001 , 0x00000151 + 00024542 0x00005909 rtn + 00024543 0x0000590b set1 0x00000004 , 0x00000002 + 00024544 0x0000590c jam 0x00000005 , 0x00000180 + 00024545 0x0000590d fetch 0x00000002 , 0x00000159 + 00024546 0x0000590e iforce 0x00000039 + 00024547 0x0000590f store 0x00000002 , 0x0000015f + 00024548 0x00005910 arg 0x00000551 , 0x00000005 + 00024549 0x00005911 call 0x00007f73 + 00024550 0x00005913 set1 0x00000007 , 0x00000002 + 00024551 0x00005915 set1 0x00000002 , 0x00000002 + 00024552 0x00005916 force 0x00000000 , 0x0000003f + 00024553 0x00005917 store 0x00000001 , 0x0000000b + 00024554 0x00005918 store 0x00000002 , 0x000000fa + 00024555 0x00005919 store 0x00000002 , 0x000000fc + 00024556 0x0000591a store 0x00000002 , 0x000000f8 + 00024557 0x0000591b store 0x00000002 , 0x000000f6 + 00024558 0x0000591c fetch 0x00000001 , 0x00000153 + 00024559 0x0000591d compare 0x00000000 , 0x0000003f , 0x000000ff + 00024560 0x0000591e setflag 0x00000001 , 0x00000006 , 0x00000002 + 00024561 0x0000591f storet 0x00000001 , 0x00000151 + 00024562 0x00005920 rtn + 00024563 0x00005923 set0 0x00000011 , 0x00000000 + 00024564 0x00005924 jam 0x00000000 , 0x00000151 + 00024565 0x00005925 fetch 0x00000001 , 0x0000017f + 00024566 0x00005926 set0 0x00000006 , 0x0000003f + 00024567 0x00005927 store 0x00000001 , 0x0000017f + 00024568 0x00005928 rtn + 00024569 0x0000592f arg 0x00000552 , 0x00000006 + 00024570 0x00005930 arg 0x00000562 , 0x00000005 + 00024571 0x00005931 branch 0x00007ebf + 00024572 0x00005934 jam 0x00000009 , 0x0000007c + 00024573 0x00005935 rtn + 00024574 0x00005938 nrtn 0x00000029 + 00024575 0x00005939 jam 0x00000011 , 0x0000007c + 00024576 0x0000593a rtn + 00024577 0x0000593d arg 0x000040a0 , 0x00000011 + 00024578 0x0000593e call 0x00007255 + 00024579 0x0000593f jam 0x00000003 , 0x0000007c + 00024580 0x00005940 jam 0x00000008 , 0x0000007d + 00024581 0x00005941 rtn + 00024582 0x00005944 jam 0x0000000a , 0x00000072 + 00024583 0x00005945 jam 0x00000007 , 0x0000007c + 00024584 0x00005946 jam 0x00000016 , 0x000004ca + 00024585 0x00005947 rtn + 00024586 0x0000594e bpatchx 0x00000082 , 0x00004030 + 00024587 0x0000594f disable 0x00000028 + 00024588 0x00005950 call 0x000062c1 + 00024589 0x00005951 fetch 0x00000001 , 0x00000048 + 00024590 0x00005952 rtn 0x00000034 + 00024591 0x00005957 bbit1 0x00000007 , 0x0000603f + 00024592 0x00005959 beq 0x00000001 , 0x0000616f + 00024593 0x0000595a beq 0x00000002 , 0x000060e4 + 00024594 0x0000595b beq 0x00000003 , 0x0000604a + 00024595 0x0000595c beq 0x00000004 , 0x00006060 + 00024596 0x0000595d beq 0x00000027 , 0x000061db + 00024597 0x0000595e beq 0x00000028 , 0x00006108 + 00024598 0x0000595f beq 0x00000030 , 0x000060f4 + 00024599 0x00005960 beq 0x00000025 , 0x000061d6 + 00024600 0x00005961 beq 0x00000026 , 0x00006103 + 00024601 0x00005962 beq 0x00000031 , 0x000061c3 + 00024602 0x00005963 beq 0x00000037 , 0x0000616a + 00024603 0x00005964 beq 0x00000033 , 0x0000615c + 00024604 0x00005965 beq 0x00000008 , 0x00006259 + 00024605 0x00005966 beq 0x00000009 , 0x0000624f + 00024606 0x00005967 beq 0x0000000b , 0x00006264 + 00024607 0x00005968 beq 0x0000000c , 0x0000626d + 00024608 0x00005969 beq 0x0000000f , 0x00006162 + 00024609 0x0000596a beq 0x00000010 , 0x00006292 + 00024610 0x0000596b beq 0x00000011 , 0x00006288 + 00024611 0x0000596c beq 0x00000007 , 0x00006152 + 00024612 0x0000596d beq 0x0000002a , 0x0000617e + 00024613 0x0000596e beq 0x0000000a , 0x0000617f + 00024614 0x00005970 beq 0x0000001f , 0x000061bc + 00024615 0x00005971 beq 0x00000006 , 0x000060f9 + 00024616 0x00005972 beq 0x00000021 , 0x0000615f + 00024617 0x00005973 beq 0x0000002d , 0x000061b2 + 00024618 0x00005974 beq 0x0000002e , 0x000061b7 + 00024619 0x00005975 beq 0x00000022 , 0x0000615f + 00024620 0x00005976 beq 0x00000034 , 0x00006180 + 00024621 0x00005977 beq 0x00000013 , 0x00006195 + 00024622 0x00005978 beq 0x00000017 , 0x000061a4 + 00024623 0x00005979 beq 0x00000012 , 0x0000628f + 00024624 0x0000597a beq 0x0000002f , 0x000061aa + 00024625 0x0000597b beq 0x00000018 , 0x000061af + 00024626 0x0000597c beq 0x0000003d , 0x000061ff + 00024627 0x0000597d beq 0x0000003e , 0x0000620b + 00024628 0x0000597e beq 0x0000003f , 0x0000621d + 00024629 0x0000597f beq 0x00000040 , 0x00006227 + 00024630 0x00005980 beq 0x00000041 , 0x0000623c + 00024631 0x00005981 beq 0x00000023 , 0x0000624b + 00024632 0x00005982 beq 0x0000003b , 0x00006246 + 00024633 0x00005984 beq 0x00000005 , 0x0000624c + 00024634 0x00005985 beq 0x00000029 , 0x0000624d + 00024635 0x00005986 beq 0x00000038 , 0x0000624e + 00024636 0x00005987 beq 0x00000039 , 0x00006175 + 00024637 0x00005989 branch 0x00002a8c + 00024638 0x0000598a rtn + 00024639 0x0000598c beq 0x00000081 , 0x0000606d + 00024640 0x0000598d beq 0x00000084 , 0x00006099 + 00024641 0x0000598e beq 0x00000082 , 0x00006076 + 00024642 0x0000598f beq 0x00000083 , 0x0000610d + 00024643 0x00005990 beq 0x0000008b , 0x00006118 + 00024644 0x00005991 beq 0x00000097 , 0x0000614e + 00024645 0x00005992 beq 0x00000099 , 0x000060d5 + 00024646 0x00005993 beq 0x0000009a , 0x000060a4 + 00024647 0x00005994 beq 0x00000095 , 0x000060da + 00024648 0x00005995 beq 0x00000096 , 0x000060db + 00024649 0x00005996 branch 0x00002a8c + 00024650 0x0000599d force 0x00000002 , 0x0000003f + 00024651 0x0000599e call 0x00006298 + 00024652 0x0000599f fetch 0x00000001 , 0x00000049 + 00024653 0x000059a0 istore 0x00000001 , 0x00000005 + 00024654 0x000059a1 call 0x000062a7 + 00024655 0x000059a2 bpatchx 0x00000083 , 0x00004030 + 00024656 0x000059a3 fetch 0x00000001 , 0x00000049 + 00024657 0x000059a4 beq 0x00000008 , 0x00006080 + 00024658 0x000059a5 beq 0x0000000f , 0x00006084 + 00024659 0x000059a6 beq 0x00000010 , 0x0000608f + 00024660 0x000059a7 beq 0x00000017 , 0x0000605f + 00024661 0x000059a8 beq 0x00000033 , 0x00006092 + 00024662 0x000059a9 beq 0x00000041 , 0x00006098 + 00024663 0x000059aa beq 0x00000011 , 0x00006059 + 00024664 0x000059ab rtn + 00024665 0x000059ae fetch 0x00000001 , 0x00000055 + 00024666 0x000059af rtn 0x00000034 + 00024667 0x000059b0 jam 0x0000001b , 0x00000055 + 00024668 0x000059b1 setarg 0x0000000c + 00024669 0x000059b2 arg 0x00000007 , 0x00000007 + 00024670 0x000059b3 branch 0x00007f08 + 00024671 0x000059b6 branch 0x000026c6 + 00024672 0x000059b8 force 0x00000003 , 0x0000003f + 00024673 0x000059b9 call 0x00006298 + 00024674 0x000059ba fetch 0x00000001 , 0x00000049 + 00024675 0x000059bb beq 0x0000000b , 0x00006068 + 00024676 0x000059bc istore 0x00000001 , 0x00000005 + 00024677 0x000059bd fetch 0x00000001 , 0x0000004a + 00024678 0x000059be istore 0x00000001 , 0x00000005 + 00024679 0x000059bf branch 0x000062a7 + 00024680 0x000059c2 istore 0x00000001 , 0x00000005 + 00024681 0x000059c3 fetch 0x00000001 , 0x0000004a + 00024682 0x000059c4 istore 0x00000001 , 0x00000005 + 00024683 0x000059c5 arg 0x000004d5 , 0x00000002 + 00024684 0x000059c6 branch 0x000062e2 + 00024685 0x000059c9 force 0x00000004 , 0x00000007 + 00024686 0x000059ca call 0x000062a0 + 00024687 0x000059cb setarg 0x0000007f + 00024688 0x000059cc istore 0x00000001 , 0x00000005 + 00024689 0x000059cd fetch 0x00000001 , 0x00000049 + 00024690 0x000059ce set0 0x00000007 , 0x0000003f + 00024691 0x000059cf istore 0x00000001 , 0x00000005 + 00024692 0x000059d0 fetch 0x00000001 , 0x00000049 + 00024693 0x000059d1 branch 0x000062a7 + 00024694 0x000059d4 force 0x00000005 , 0x00000007 + 00024695 0x000059d5 call 0x000062a0 + 00024696 0x000059d6 setarg 0x0000007f + 00024697 0x000059d7 istore 0x00000001 , 0x00000005 + 00024698 0x000059d8 fetch 0x00000001 , 0x00000049 + 00024699 0x000059d9 set0 0x00000007 , 0x0000003f + 00024700 0x000059da istore 0x00000001 , 0x00000005 + 00024701 0x000059db fetch 0x00000001 , 0x0000004a + 00024702 0x000059dc istore 0x00000001 , 0x00000005 + 00024703 0x000059dd branch 0x000062a7 + 00024704 0x000059e1 call 0x0000244f + 00024705 0x000059e2 call 0x000062f3 + 00024706 0x000059e3 rtn 0x00000001 + 00024707 0x000059e4 branch 0x00005ffc + 00024708 0x000059e7 fetch 0x00000001 , 0x0000004b + 00024709 0x000059e8 bbit1 0x00000005 , 0x0000608b + 00024710 0x000059e9 rtnbit0 0x00000004 + 00024711 0x000059ea jam 0x00000012 , 0x0000007c + 00024712 0x000059eb set0 0x00000004 , 0x0000003f + 00024713 0x000059ec call 0x000062eb + 00024714 0x000059ed branch 0x0000608d + 00024715 0x000059ef jam 0x00000010 , 0x0000007c + 00024716 0x000059f0 set0 0x00000005 , 0x0000003f + 00024717 0x000059f2 store 0x00000001 , 0x0000004b + 00024718 0x000059f3 rtn + 00024719 0x000059f6 call 0x000062fc + 00024720 0x000059f7 branch 0x00005ffe , 0x00000001 + 00024721 0x000059f8 rtn + 00024722 0x000059fb jam 0x0000008b , 0x0000007c + 00024723 0x000059fd fetch 0x00000001 , 0x000004d1 + 00024724 0x000059fe set1 0x00000000 , 0x0000003f + 00024725 0x000059ff store 0x00000001 , 0x000004d1 + 00024726 0x00005a00 jam 0x00000001 , 0x00000a99 + 00024727 0x00005a01 branch 0x00007d86 + 00024728 0x00005a05 rtn + 00024729 0x00005a0a force 0x0000000c , 0x00000007 + 00024730 0x00005a0b call 0x000062a0 + 00024731 0x00005a0c setarg 0x00000001 + 00024732 0x00005a0d istore 0x00000001 , 0x00000005 + 00024733 0x00005a0e fetch 0x00000002 , 0x000004ce + 00024734 0x00005a0f istore 0x00000002 , 0x00000005 + 00024735 0x00005a10 setarg 0x00000000 + 00024736 0x00005a11 istore 0x00000003 , 0x00000005 + 00024737 0x00005a12 setarg 0x00000000 + 00024738 0x00005a13 istore 0x00000004 , 0x00000005 + 00024739 0x00005a14 branch 0x000062b0 + 00024740 0x00005a16 force 0x00000005 , 0x00000007 + 00024741 0x00005a17 call 0x000062a0 + 00024742 0x00005a18 fetch 0x00000003 , 0x0000465b + 00024743 0x00005a19 istore 0x00000003 , 0x00000005 + 00024744 0x00005a1a call 0x000062b0 + 00024745 0x00005a1b jam 0x00000001 , 0x00004665 + 00024746 0x00005a1c fetch 0x00000001 , 0x0000465b + 00024747 0x00005a1d beq 0x00000001 , 0x000060b5 + 00024748 0x00005a1e beq 0x00000002 , 0x000060af + 00024749 0x00005a1f beq 0x00000003 , 0x000060bb + 00024750 0x00005a20 rtn + 00024751 0x00005a23 fetch 0x00000001 , 0x0000465e + 00024752 0x00005a24 beq 0x00000000 , 0x000060c7 + 00024753 0x00005a25 beq 0x00000001 , 0x000060c7 + 00024754 0x00005a26 beq 0x00000002 , 0x000060c7 + 00024755 0x00005a27 beq 0x00000003 , 0x000060c1 + 00024756 0x00005a28 rtn + 00024757 0x00005a2c fetch 0x00000001 , 0x0000465e + 00024758 0x00005a2d beq 0x00000000 , 0x000060c1 + 00024759 0x00005a2e beq 0x00000001 , 0x000060c5 + 00024760 0x00005a2f beq 0x00000002 , 0x000060c7 + 00024761 0x00005a30 beq 0x00000003 , 0x000060c1 + 00024762 0x00005a31 rtn + 00024763 0x00005a35 fetch 0x00000001 , 0x0000465e + 00024764 0x00005a36 beq 0x00000000 , 0x000060c1 + 00024765 0x00005a37 beq 0x00000001 , 0x000060c1 + 00024766 0x00005a38 beq 0x00000002 , 0x000060c1 + 00024767 0x00005a39 beq 0x00000003 , 0x000060c1 + 00024768 0x00005a3a rtn + 00024769 0x00005a44 jam 0x00000003 , 0x00004662 + 00024770 0x00005a45 fetch 0x00000001 , 0x0000455c + 00024771 0x00005a46 bbit1 0x00000000 , 0x000033e9 + 00024772 0x00005a47 rtn + 00024773 0x00005a4b jam 0x00000001 , 0x00004662 + 00024774 0x00005a4c rtn + 00024775 0x00005a53 jam 0x00000002 , 0x00004662 + 00024776 0x00005a54 rtn + 00024777 0x00005a58 arg 0x00000000 , 0x00000007 + 00024778 0x00005a59 branch 0x000060cd + 00024779 0x00005a5c arg 0x00000000 , 0x00000007 + 00024780 0x00005a5d branch 0x000060d1 + 00024781 0x00005a60 fetch 0x00000001 , 0x0000455c + 00024782 0x00005a61 qset1 0x0000003f + 00024783 0x00005a62 store 0x00000001 , 0x0000455c + 00024784 0x00005a63 rtn + 00024785 0x00005a66 fetch 0x00000001 , 0x0000455c + 00024786 0x00005a67 qset0 0x0000003f + 00024787 0x00005a68 store 0x00000001 , 0x0000455c + 00024788 0x00005a69 rtn + 00024789 0x00005a6d force 0x00000005 , 0x00000007 + 00024790 0x00005a6e call 0x000062a0 + 00024791 0x00005a6f fetch 0x00000003 , 0x0000465b + 00024792 0x00005a70 istore 0x00000003 , 0x00000005 + 00024793 0x00005a71 branch 0x000062b2 + 00024794 0x00005a76 rtn + 00024795 0x00005a78 force 0x00000009 , 0x00000007 + 00024796 0x00005a79 call 0x000062a0 + 00024797 0x00005a7a fetch 0x00000001 , 0x00000095 + 00024798 0x00005a7b istore 0x00000001 , 0x00000005 + 00024799 0x00005a7c fetch 0x00000002 , 0x00000096 + 00024800 0x00005a7d istore 0x00000002 , 0x00000005 + 00024801 0x00005a7e fetch 0x00000004 , 0x00000091 + 00024802 0x00005a7f istore 0x00000004 , 0x00000005 + 00024803 0x00005a80 branch 0x000062b0 + 00024804 0x00005a83 force 0x00000011 , 0x0000003f + 00024805 0x00005a84 call 0x00006298 + 00024806 0x00005a85 fetch 0x00000001 , 0x00000049 + 00024807 0x00005a86 copy 0x0000003f , 0x00000002 + 00024808 0x00005a87 beq 0x00000000 , 0x000060ec + 00024809 0x00005a88 beq 0x0000000e , 0x000060ec + 00024810 0x00005a89 beq 0x0000001c , 0x000060ec + 00024811 0x00005a8a rtn + 00024812 0x00005a8c istore 0x00000001 , 0x00000005 + 00024813 0x00005a8d fetch 0x00000001 , 0x00004515 + 00024814 0x00005a8e istore 0x00000001 , 0x00000005 + 00024815 0x00005a8f arg 0x0000000e , 0x00000039 + 00024816 0x00005a90 setarg 0x00004516 + 00024817 0x00005a91 iadd 0x00000002 , 0x00000006 + 00024818 0x00005a92 call 0x00007f01 + 00024819 0x00005a93 branch 0x000062b0 + 00024820 0x00005a97 force 0x00000003 , 0x0000003f + 00024821 0x00005a98 call 0x00006298 + 00024822 0x00005a99 setarg 0x00000114 + 00024823 0x00005a9a istore 0x00000002 , 0x00000005 + 00024824 0x00005a9b branch 0x000062b0 + 00024825 0x00005a9f force 0x00000003 , 0x0000003f + 00024826 0x00005aa0 call 0x00006298 + 00024827 0x00005aa1 fetch 0x00000004 , 0x00000165 + 00024828 0x00005aa2 isub 0x00000022 , 0x0000003f + 00024829 0x00005aa3 branch 0x000060ff , 0x00000029 + 00024830 0x00005aa4 sub 0x0000003f , 0x00000000 , 0x0000003f + 00024831 0x00005aa7 rshift2 0x0000003f , 0x0000003f + 00024832 0x00005aa8 set0 0x0000000f , 0x0000003f + 00024833 0x00005aa9 istore 0x00000002 , 0x00000005 + 00024834 0x00005aaa branch 0x000062b0 + 00024835 0x00005aad force 0x00000006 , 0x0000003f + 00024836 0x00005aae call 0x00006298 + 00024837 0x00005aaf fetch 0x00000005 , 0x00004510 + 00024838 0x00005ab0 istore 0x00000005 , 0x00000005 + 00024839 0x00005ab1 branch 0x000062b0 + 00024840 0x00005ab4 force 0x00000009 , 0x0000003f + 00024841 0x00005ab5 call 0x00006298 + 00024842 0x00005ab6 fetch 0x00000008 , 0x00004098 + 00024843 0x00005ab7 istore 0x00000008 , 0x00000005 + 00024844 0x00005ab8 branch 0x000062b0 + 00024845 0x00005ac0 force 0x0000000c , 0x00000007 + 00024846 0x00005ac1 call 0x000062a0 + 00024847 0x00005ac2 setarg 0x00000001 + 00024848 0x00005ac3 istore 0x00000001 , 0x00000005 + 00024849 0x00005ac4 fetch 0x00000002 , 0x000004ce + 00024850 0x00005ac5 istore 0x00000002 , 0x00000005 + 00024851 0x00005ac6 setarg 0x00000000 + 00024852 0x00005ac7 istore 0x00000003 , 0x00000005 + 00024853 0x00005ac8 setarg 0x00000000 + 00024854 0x00005ac9 istore 0x00000004 , 0x00000005 + 00024855 0x00005aca branch 0x000062b2 + 00024856 0x00005acd force 0x00000003 , 0x00000007 + 00024857 0x00005ace call 0x000062a0 + 00024858 0x00005acf fetch 0x00000001 , 0x0000415a + 00024859 0x00005ad0 istore 0x00000001 , 0x00000005 + 00024860 0x00005ad1 disable 0x00000028 + 00024861 0x00005ad2 call 0x000062b2 + 00024862 0x00005ad3 nrtn 0x00000028 + 00024863 0x00005ad4 nrtn 0x00000029 + 00024864 0x00005ad5 fetch 0x00000001 , 0x000040d8 + 00024865 0x00005ad6 rtnbit0 0x00000000 + 00024866 0x00005ad7 call 0x00006132 + 00024867 0x00005ad8 branch 0x0000613c + 00024868 0x00005adc bpatchx 0x00000084 , 0x00004030 + 00024869 0x00005add fetch 0x00000001 , 0x0000409e + 00024870 0x00005ade set1 0x00000003 , 0x0000003f + 00024871 0x00005adf store 0x00000001 , 0x0000409e + 00024872 0x00005ae0 setarg 0x00000101 + 00024873 0x00005ae1 store 0x00000002 , 0x000004ce + 00024874 0x00005ae2 rtn + 00024875 0x00005ae5 bpatchx 0x00000085 , 0x00004030 + 00024876 0x00005ae6 fetch 0x00000001 , 0x0000409e + 00024877 0x00005ae7 set0 0x00000003 , 0x0000003f + 00024878 0x00005ae8 store 0x00000001 , 0x0000409e + 00024879 0x00005ae9 setarg 0x00000000 + 00024880 0x00005aea store 0x00000002 , 0x000004ce + 00024881 0x00005aeb rtn + 00024882 0x00005aee jam 0x00000003 , 0x000040d8 + 00024883 0x00005aef setarg 0x00000000 + 00024884 0x00005af0 store 0x00000004 , 0x00004142 + 00024885 0x00005af1 arg 0x000040da , 0x00000005 + 00024886 0x00005af2 call 0x00006140 + 00024887 0x00005af3 arg 0x000040e7 , 0x00000005 + 00024888 0x00005af4 call 0x00006140 + 00024889 0x00005af5 arg 0x00004146 , 0x00000005 + 00024890 0x00005af6 call 0x00006140 + 00024891 0x00005af7 branch 0x00006147 + 00024892 0x00005af9 arg 0x000040e7 , 0x00000005 + 00024893 0x00005afa call 0x00006140 + 00024894 0x00005afb call 0x00006147 + 00024895 0x00005afc branch 0x0000614a + 00024896 0x00005b00 setarg 0x00ffffff + 00024897 0x00005b01 istore 0x00000003 , 0x00000005 + 00024898 0x00005b02 istore 0x00000003 , 0x00000005 + 00024899 0x00005b03 istore 0x00000003 , 0x00000005 + 00024900 0x00005b04 setarg 0x0000007f + 00024901 0x00005b05 istore 0x00000001 , 0x00000005 + 00024902 0x00005b06 rtn + 00024903 0x00005b08 setarg 0x00000000 + 00024904 0x00005b09 store 0x00000002 , 0x000040d6 + 00024905 0x00005b0a rtn + 00024906 0x00005b0c fetch 0x00000001 , 0x000040d8 + 00024907 0x00005b0d set1 0x00000002 , 0x0000003f + 00024908 0x00005b0e store 0x00000001 , 0x000040d8 + 00024909 0x00005b0f rtn + 00024910 0x00005b13 force 0x00000002 , 0x00000007 + 00024911 0x00005b14 call 0x000062a0 + 00024912 0x00005b15 nbranch 0x000062b0 , 0x00000029 + 00024913 0x00005b17 branch 0x000062b2 + 00024914 0x00005b1c force 0x00000002 , 0x0000003f + 00024915 0x00005b1d call 0x00006298 + 00024916 0x00005b1e fetch 0x00000001 , 0x000004ca + 00024917 0x00005b1f istore 0x00000001 , 0x00000005 + 00024918 0x00005b20 call 0x000062b2 + 00024919 0x00005b22 fetch 0x00000001 , 0x0000004b + 00024920 0x00005b23 set1 0x00000003 , 0x0000003f + 00024921 0x00005b24 store 0x00000001 , 0x0000004b + 00024922 0x00005b25 jam 0x00000032 , 0x00000072 + 00024923 0x00005b26 rtn + 00024924 0x00005b2a force 0x00000001 , 0x0000003f + 00024925 0x00005b2b call 0x00006298 + 00024926 0x00005b2c branch 0x000062b2 + 00024927 0x00005b2e force 0x00000001 , 0x0000003f + 00024928 0x00005b2f call 0x00006298 + 00024929 0x00005b30 branch 0x000062b0 + 00024930 0x00005b34 force 0x00000002 , 0x0000003f + 00024931 0x00005b35 call 0x00006298 + 00024932 0x00005b36 fetch 0x00000001 , 0x0000004c + 00024933 0x00005b37 isolate0 0x00000002 , 0x0000003f + 00024934 0x00005b38 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00024935 0x00005b39 and_into 0x00000001 , 0x0000003f + 00024936 0x00005b3a istore 0x00000001 , 0x00000005 + 00024937 0x00005b3b branch 0x000062b2 + 00024938 0x00005b3f force 0x00000003 , 0x0000003f + 00024939 0x00005b40 call 0x00006298 + 00024940 0x00005b41 fetch 0x00000002 , 0x00000051 + 00024941 0x00005b42 istore 0x00000002 , 0x00000005 + 00024942 0x00005b43 branch 0x000062b2 + 00024943 0x00005b46 jam 0x000000fa , 0x00000072 + 00024944 0x00005b47 force 0x00000002 , 0x0000003f + 00024945 0x00005b48 call 0x00006298 + 00024946 0x00005b49 fetch 0x00000001 , 0x00000053 + 00024947 0x00005b4a istore 0x00000001 , 0x00000005 + 00024948 0x00005b4b branch 0x000062b2 + 00024949 0x00005b4e force 0x0000000a , 0x0000003f + 00024950 0x00005b4f call 0x00006298 + 00024951 0x00005b50 arg 0x00000152 , 0x00000006 + 00024952 0x00005b51 force 0x00000009 , 0x00000039 + 00024953 0x00005b53 ifetch 0x00000001 , 0x00000006 + 00024954 0x00005b54 xor_into 0x00000055 , 0x0000003f + 00024955 0x00005b55 istore 0x00000001 , 0x00000005 + 00024956 0x00005b56 loop 0x00006179 + 00024957 0x00005b57 branch 0x000062b2 + 00024958 0x00005b5a branch 0x000062b2 + 00024959 0x00005b5c branch 0x000062b2 + 00024960 0x00005b5f rtn 0x00000029 + 00024961 0x00005b60 call 0x0000282d + 00024962 0x00005b61 force 0x00000009 , 0x0000003f + 00024963 0x00005b62 call 0x00006298 + 00024964 0x00005b63 fetch 0x00000002 , 0x00000171 + 00024965 0x00005b64 istore 0x00000002 , 0x00000005 + 00024966 0x00005b65 fetch 0x00000003 , 0x000040a0 + 00024967 0x00005b66 istore 0x00000003 , 0x00000005 + 00024968 0x00005b67 fetch 0x00000001 , 0x000040a3 + 00024969 0x00005b68 istore 0x00000001 , 0x00000005 + 00024970 0x00005b69 fetch 0x00000002 , 0x000040a4 + 00024971 0x00005b6a istore 0x00000002 , 0x00000005 + 00024972 0x00005b6b bmark0 0x00000003 , 0x00006191 + 00024973 0x00005b6c set0 0x00000003 , 0x00000000 + 00024974 0x00005b6d call 0x000062b2 + 00024975 0x00005b6e jam 0x00000013 , 0x0000007c + 00024976 0x00005b6f rtn + 00024977 0x00005b71 call 0x000062b0 + 00024978 0x00005b72 jam 0x00000003 , 0x0000007c + 00024979 0x00005b73 jam 0x00000013 , 0x0000007d + 00024980 0x00005b74 rtn + 00024981 0x00005b77 arg 0x00000200 , 0x00000002 + 00024982 0x00005b78 branch 0x00006199 , 0x00000029 + 00024983 0x00005b79 deposit 0x00000028 + 00024984 0x00005b7a branch 0x0000619a + 00024985 0x00005b7c deposit 0x00000022 + 00024986 0x00005b7e deposit 0x00000021 + 00024987 0x00005b7f iadd 0x00000002 , 0x0000003f + 00024988 0x00005b80 and_into 0x000001fc , 0x0000003f + 00024989 0x00005b81 store 0x00000004 , 0x00000034 + 00024990 0x00005b82 force 0x00000005 , 0x0000003f + 00024991 0x00005b83 call 0x00006298 + 00024992 0x00005b84 fetch 0x00000004 , 0x00000034 + 00024993 0x00005b85 rshift 0x0000003f , 0x0000003f + 00024994 0x00005b86 istore 0x00000004 , 0x00000005 + 00024995 0x00005b87 branch 0x000062b2 + 00024996 0x00005b8a force 0x0000000a , 0x0000003f + 00024997 0x00005b8b call 0x00006298 + 00024998 0x00005b8c arg 0x000004d9 , 0x00000006 + 00024999 0x00005b8d ifetch 0x00000009 , 0x00000006 + 00025000 0x00005b8e istore 0x00000009 , 0x00000005 + 00025001 0x00005b8f branch 0x000062b2 + 00025002 0x00005b94 force 0x00000003 , 0x0000003f + 00025003 0x00005b95 call 0x00006298 + 00025004 0x00005b96 setarg 0x00000114 + 00025005 0x00005b97 istore 0x00000002 , 0x00000005 + 00025006 0x00005b98 branch 0x000062b2 + 00025007 0x00005b9c force 0x00000001 , 0x0000003f + 00025008 0x00005b9d call 0x00006298 + 00025009 0x00005ba6 branch 0x000062b2 + 00025010 0x00005baa force 0x00000002 , 0x0000003f + 00025011 0x00005bab call 0x00006298 + 00025012 0x00005bac fetch 0x00000001 , 0x000040d0 + 00025013 0x00005bad istore 0x00000001 , 0x00000005 + 00025014 0x00005bae branch 0x000062b2 + 00025015 0x00005bb2 force 0x00000002 , 0x0000003f + 00025016 0x00005bb3 call 0x00006298 + 00025017 0x00005bb4 setarg 0x00000005 + 00025018 0x00005bb5 istore 0x00000001 , 0x00000005 + 00025019 0x00005bb6 branch 0x000062b2 + 00025020 0x00005bba force 0x00000002 , 0x0000003f + 00025021 0x00005bbb call 0x00006298 + 00025022 0x00005bbc setarg 0x00000000 + 00025023 0x00005bbd istore 0x00000001 , 0x00000005 + 00025024 0x00005bbe branch 0x000062b2 + 00025025 0x00005bc2 jam 0x0000002e , 0x0000007c + 00025026 0x00005bc3 rtn + 00025027 0x00005bc5 fetch 0x00000001 , 0x00004092 + 00025028 0x00005bc6 sub 0x0000003f , 0x0000000a , 0x0000003e + 00025029 0x00005bc7 call 0x000061c1 , 0x00000005 + 00025030 0x00005bc8 fetch 0x00000001 , 0x00000030 + 00025031 0x00005bc9 set1 0x00000004 , 0x0000003f + 00025032 0x00005bca store 0x00000001 , 0x00000030 + 00025033 0x00005bcb copy 0x00000022 , 0x0000003f + 00025034 0x00005bcc store 0x00000004 , 0x000004e9 + 00025035 0x00005bcd fetch 0x00000001 , 0x000004d1 + 00025036 0x00005bce bbit1 0x00000003 , 0x000061d4 + 00025037 0x00005bcf set1 0x00000003 , 0x0000003f + 00025038 0x00005bd0 store 0x00000001 , 0x000004d1 + 00025039 0x00005bd1 jam 0x00000005 , 0x00000a99 + 00025040 0x00005bd2 call 0x00007d86 + 00025041 0x00005bd3 force 0x00000001 , 0x0000003f + 00025042 0x00005bd4 call 0x00006298 + 00025043 0x00005bd5 branch 0x000062b2 + 00025044 0x00005bd7 jam 0x00000000 , 0x00000048 + 00025045 0x00005bd8 rtn + 00025046 0x00005bdb force 0x00000006 , 0x0000003f + 00025047 0x00005bdc call 0x00006298 + 00025048 0x00005bdd fetch 0x00000005 , 0x00004510 + 00025049 0x00005bde istore 0x00000005 , 0x00000005 + 00025050 0x00005bdf branch 0x000062b2 + 00025051 0x00005be2 force 0x00000009 , 0x0000003f + 00025052 0x00005be3 call 0x00006298 + 00025053 0x00005be4 fetch 0x00000008 , 0x00004098 + 00025054 0x00005be5 istore 0x00000008 , 0x00000005 + 00025055 0x00005be6 branch 0x000062b2 + 00025056 0x00005be9 jam 0x00000001 , 0x000009b1 + 00025057 0x00005bea fetch 0x00000001 , 0x000045b1 + 00025058 0x00005beb rtnne 0x00000001 + 00025059 0x00005bec jam 0x00000013 , 0x000009af + 00025060 0x00005bed rtn + 00025061 0x00005bf0 call 0x000062ef + 00025062 0x00005bf1 jam 0x00000099 , 0x0000007c + 00025063 0x00005bf2 jam 0x00000003 , 0x000009af + 00025064 0x00005bf3 rtn + 00025065 0x00005bf7 call 0x000062ef + 00025066 0x00005bf8 jam 0x0000003d , 0x0000007c + 00025067 0x00005bf9 jam 0x00000007 , 0x000009af + 00025068 0x00005bfa rtn + 00025069 0x00005bfd arg 0x00000a4e , 0x00000011 + 00025070 0x00005bfe arg 0x00000a6e , 0x00000012 + 00025071 0x00005bff arg 0x00000010 , 0x00000039 + 00025072 0x00005c00 call 0x00007f88 + 00025073 0x00005c01 branch 0x000061f7 , 0x00000005 + 00025074 0x00005c02 jam 0x00000000 , 0x000009af + 00025075 0x00005c03 call 0x000076da + 00025076 0x00005c04 jam 0x00000024 , 0x0000007e + 00025077 0x00005c05 jam 0x00000040 , 0x0000007d + 00025078 0x00005c06 branch 0x00005d53 + 00025079 0x00005c08 jam 0x0000000a , 0x000009af + 00025080 0x00005c09 call 0x000076d8 + 00025081 0x00005c0a jam 0x00000040 , 0x0000007d + 00025082 0x00005c0b branch 0x00005e38 + 00025083 0x00005c10 jam 0x00000040 , 0x0000007c + 00025084 0x00005c11 rtn + 00025085 0x00005c18 jam 0x0000003d , 0x0000007c + 00025086 0x00005c1a rtn + 00025087 0x00005c21 jam 0x00000000 , 0x000009b6 + 00025088 0x00005c22 force 0x00000004 , 0x0000003f + 00025089 0x00005c23 call 0x00006298 + 00025090 0x00005c24 force 0x00000001 , 0x0000003f + 00025091 0x00005c25 istore 0x00000001 , 0x00000005 + 00025092 0x00005c26 force 0x00000001 , 0x0000003f + 00025093 0x00005c27 istore 0x00000001 , 0x00000005 + 00025094 0x00005c28 force 0x00000030 , 0x0000003f + 00025095 0x00005c29 istore 0x00000001 , 0x00000005 + 00025096 0x00005c2a call 0x000062fc + 00025097 0x00005c2b branch 0x000062b2 , 0x00000001 + 00025098 0x00005c2c branch 0x000062b0 + 00025099 0x00005c30 force 0x00000011 , 0x0000003f + 00025100 0x00005c31 call 0x00006298 + 00025101 0x00005c32 fetch 0x00000001 , 0x000009b6 + 00025102 0x00005c33 arg 0x0000462a , 0x00000006 + 00025103 0x00005c34 iadd 0x00000006 , 0x00000006 + 00025104 0x00005c35 ifetch 0x00000008 , 0x00000006 + 00025105 0x00005c36 istore 0x00000008 , 0x00000005 + 00025106 0x00005c37 ifetch 0x00000008 , 0x00000006 + 00025107 0x00005c38 istore 0x00000008 , 0x00000005 + 00025108 0x00005c39 fetch 0x00000001 , 0x000009b6 + 00025109 0x00005c3a increase 0x00000010 , 0x0000003f + 00025110 0x00005c3b store 0x00000001 , 0x000009b6 + 00025111 0x00005c3c call 0x000062fc + 00025112 0x00005c3d branch 0x000062b2 , 0x00000001 + 00025113 0x00005c3e branch 0x000062b0 + 00025114 0x00005c42 jam 0x00000006 , 0x000009ae + 00025115 0x00005c43 jam 0x0000003f , 0x0000007c + 00025116 0x00005c44 rtn + 00025117 0x00005c48 force 0x00000011 , 0x0000003f + 00025118 0x00005c49 call 0x00006298 + 00025119 0x00005c4a arg 0x00000a4e , 0x00000006 + 00025120 0x00005c4b ifetch 0x00000008 , 0x00000006 + 00025121 0x00005c4c istore 0x00000008 , 0x00000005 + 00025122 0x00005c4d ifetch 0x00000008 , 0x00000006 + 00025123 0x00005c4e istore 0x00000008 , 0x00000005 + 00025124 0x00005c4f branch 0x000062b0 + 00025125 0x00005c52 jam 0x00000040 , 0x0000007c + 00025126 0x00005c53 rtn + 00025127 0x00005c57 call 0x000062fc + 00025128 0x00005c58 call 0x00007612 , 0x00000001 + 00025129 0x00005c59 force 0x00000011 , 0x0000003f + 00025130 0x00005c5a call 0x00006298 + 00025131 0x00005c5b arg 0x00000a1e , 0x00000006 + 00025132 0x00005c5c ifetch 0x00000008 , 0x00000006 + 00025133 0x00005c5d istore 0x00000008 , 0x00000005 + 00025134 0x00005c5e ifetch 0x00000008 , 0x00000006 + 00025135 0x00005c5f istore 0x00000008 , 0x00000005 + 00025136 0x00005c60 call 0x000062fc + 00025137 0x00005c61 nbranch 0x000062b0 , 0x00000001 + 00025138 0x00005c62 branch 0x000062b2 , 0x00000001 + 00025139 0x00005c66 jam 0x0000000f , 0x000009af + 00025140 0x00005c68 call 0x000062ef + 00025141 0x00005c69 jam 0x0000000b , 0x0000007c + 00025142 0x00005c6a call 0x00006307 + 00025143 0x00005c6b branch 0x0000764e , 0x00000001 + 00025144 0x00005c6c branch 0x00007658 + 00025145 0x00005c6e call 0x000062eb + 00025146 0x00005c70 jam 0x00000041 , 0x0000007c + 00025147 0x00005c71 rtn + 00025148 0x00005c74 force 0x00000011 , 0x0000003f + 00025149 0x00005c75 call 0x00006298 + 00025150 0x00005c76 arg 0x00000a4e , 0x00000006 + 00025151 0x00005c77 ifetch 0x00000008 , 0x00000006 + 00025152 0x00005c78 istore 0x00000008 , 0x00000005 + 00025153 0x00005c79 ifetch 0x00000008 , 0x00000006 + 00025154 0x00005c7a istore 0x00000008 , 0x00000005 + 00025155 0x00005c7b call 0x000062fc + 00025156 0x00005c7c nbranch 0x000062b0 , 0x00000001 + 00025157 0x00005c7d branch 0x000062b2 , 0x00000001 + 00025158 0x00005c80 force 0x00000003 , 0x0000003f + 00025159 0x00005c81 call 0x00006298 + 00025160 0x00005c82 setarg 0x0000fffe + 00025161 0x00005c83 istore 0x00000002 , 0x00000005 + 00025162 0x00005c84 branch 0x000062b0 + 00025163 0x00005c87 branch 0x000062b2 + 00025164 0x00005c89 branch 0x000062b2 + 00025165 0x00005c8b branch 0x000062b2 + 00025166 0x00005c8d branch 0x000062b2 + 00025167 0x00005c93 call 0x0000630b + 00025168 0x00005c94 arg 0x000040a0 , 0x00000011 + 00025169 0x00005c95 call 0x00006311 + 00025170 0x00005c96 force 0x00000011 , 0x0000003f + 00025171 0x00005c97 call 0x00006298 + 00025172 0x00005c98 arg 0x00000582 , 0x00000011 + 00025173 0x00005c99 arg 0x00000562 , 0x00000012 + 00025174 0x00005c9a call 0x00007352 + 00025175 0x00005c9b nbranch 0x000062a7 , 0x00000029 + 00025176 0x00005c9c branch 0x000062ad + 00025177 0x00005c9f call 0x0000630b + 00025178 0x00005ca0 arg 0x00000040 , 0x00000011 + 00025179 0x00005ca1 call 0x00007255 + 00025180 0x00005ca3 force 0x00000011 , 0x0000003f + 00025181 0x00005ca4 call 0x00006298 + 00025182 0x00005ca5 arg 0x00000562 , 0x00000006 + 00025183 0x00005ca6 call 0x00007ebf + 00025184 0x00005ca7 fetch 0x00000001 , 0x00000055 + 00025185 0x00005ca8 beq 0x00000019 , 0x000062b2 + 00025186 0x00005ca9 beq 0x00000018 , 0x000062b2 + 00025187 0x00005caa branch 0x000062ad + 00025188 0x00005cad fetch 0x00000001 , 0x000009b5 + 00025189 0x00005cae branch 0x0000626a , 0x00000034 + 00025190 0x00005caf call 0x000062fc + 00025191 0x00005cb0 call 0x000062ef , 0x00000001 + 00025192 0x00005cb1 ncall 0x000062eb , 0x00000001 + 00025193 0x00005cb2 branch 0x0000626b + 00025194 0x00005cb4 call 0x000062ef + 00025195 0x00005cb6 call 0x0000630b + 00025196 0x00005cb7 branch 0x0000625c + 00025197 0x00005cba arg 0x000040a0 , 0x00000011 + 00025198 0x00005cbb call 0x00007288 + 00025199 0x00005cbc force 0x00000005 , 0x0000003f + 00025200 0x00005cbd call 0x00006298 + 00025201 0x00005cbe fetch 0x00000004 , 0x00000592 + 00025202 0x00005cbf istore 0x00000004 , 0x00000005 + 00025203 0x00005cc0 arg 0x000004d5 , 0x00000002 + 00025204 0x00005cc1 call 0x000062e2 + 00025205 0x00005cc2 call 0x00007386 + 00025206 0x00005cc3 call 0x000062fc + 00025207 0x00005cc4 branch 0x0000627c , 0x00000001 + 00025208 0x00005cc5 jam 0x00000001 , 0x000004d8 + 00025209 0x00005cc6 fetch 0x00000001 , 0x000009b5 + 00025210 0x00005cc7 rtn 0x00000034 + 00025211 0x00005cc8 jam 0x0000000b , 0x0000007c + 00025212 0x00005cca fetch 0x00000001 , 0x000041bd + 00025213 0x00005ccb rtn 0x00000034 + 00025214 0x00005ccd call 0x000062fc + 00025215 0x00005cce nbranch 0x00006284 , 0x00000001 + 00025216 0x00005ccf fetch 0x00000001 , 0x000004d7 + 00025217 0x00005cd0 rtn 0x00000034 + 00025218 0x00005cd1 jam 0x0000000f , 0x0000007c + 00025219 0x00005cd2 rtn + 00025220 0x00005cd4 rtnmark0 0x00000021 + 00025221 0x00005cd5 set0 0x00000021 , 0x00000000 + 00025222 0x00005cd6 jam 0x0000000f , 0x0000007c + 00025223 0x00005cd7 rtn + 00025224 0x00005cdc call 0x0000630b + 00025225 0x00005cdd call 0x0000728b + 00025226 0x00005cde force 0x00000011 , 0x0000003f + 00025227 0x00005cdf call 0x00006298 + 00025228 0x00005ce0 arg 0x00000562 , 0x00000006 + 00025229 0x00005ce1 call 0x00007ebf + 00025230 0x00005ce2 branch 0x000062ad + 00025231 0x00005ce5 force 0x00000001 , 0x0000003f + 00025232 0x00005ce6 call 0x00006298 + 00025233 0x00005ce7 branch 0x000062ad + 00025234 0x00005cea force 0x00000002 , 0x0000003f + 00025235 0x00005ceb call 0x00006298 + 00025236 0x00005cec force 0x00000010 , 0x0000003f + 00025237 0x00005ced istore 0x00000001 , 0x00000005 + 00025238 0x00005cee store 0x00000001 , 0x00000054 + 00025239 0x00005cef branch 0x000062ad + 00025240 0x00005cf3 lshift3 0x0000003f , 0x0000003f + 00025241 0x00005cf4 or_into 0x00000007 , 0x0000003f + 00025242 0x00005cf5 store 0x00000001 , 0x000004b6 + 00025243 0x00005cf6 arg 0x00000011 , 0x00000039 + 00025244 0x00005cf7 arg 0x000004b8 , 0x00000005 + 00025245 0x00005cf8 call 0x00007ed4 + 00025246 0x00005cf9 arg 0x000004b8 , 0x00000005 + 00025247 0x00005cfa rtn + 00025248 0x00005cfd and 0x0000003f , 0x0000007f , 0x00000011 + 00025249 0x00005cfe jam 0x0000007f , 0x00000048 + 00025250 0x00005cff deposit 0x00000007 + 00025251 0x00005d00 call 0x00006298 + 00025252 0x00005d01 deposit 0x00000011 + 00025253 0x00005d02 istore 0x00000001 , 0x00000005 + 00025254 0x00005d03 rtn + 00025255 0x00005d06 fetch 0x00000001 , 0x00000048 + 00025256 0x00005d07 lshift 0x0000003f , 0x0000003f + 00025257 0x00005d08 fetcht 0x00000001 , 0x0000004c + 00025258 0x00005d09 isolate1 0x00000001 , 0x00000002 + 00025259 0x00005d0a setflag 0x00000001 , 0x00000000 , 0x0000003f + 00025260 0x00005d0b branch 0x000062b7 + 00025261 0x00005d0f fetcht 0x00000001 , 0x0000004c + 00025262 0x00005d10 and_into 0x00000001 , 0x00000002 + 00025263 0x00005d11 branch 0x000062b3 + 00025264 0x00005d14 force 0x00000000 , 0x00000002 + 00025265 0x00005d15 branch 0x000062b3 + 00025266 0x00005d18 force 0x00000001 , 0x00000002 + 00025267 0x00005d1a fetch 0x00000001 , 0x00000048 + 00025268 0x00005d1b lshift 0x0000003f , 0x0000003f + 00025269 0x00005d1c setflag 0x00000029 , 0x00000000 , 0x0000003f + 00025270 0x00005d1d ixor 0x00000002 , 0x0000003f + 00025271 0x00005d1f store 0x00000001 , 0x000004b7 + 00025272 0x00005d20 jam 0x00000000 , 0x00000048 + 00025273 0x00005d21 call 0x000062c7 + 00025274 0x00005d22 enable 0x00000028 + 00025275 0x00005d23 rtn + 00025276 0x00005d27 fetch 0x00000001 , 0x0000007c + 00025277 0x00005d28 rtn 0x00000034 + 00025278 0x00005d29 call 0x000062c1 + 00025279 0x00005d2a fetch 0x00000001 , 0x0000007c + 00025280 0x00005d2b rtn + 00025281 0x00005d2e bpatchx 0x00000086 , 0x00004030 + 00025282 0x00005d2f fetch 0x00000001 , 0x00000048 + 00025283 0x00005d30 branch 0x000062c7 , 0x00000034 + 00025284 0x00005d31 fetch 0x00000001 , 0x00000078 + 00025285 0x00005d32 nrtn 0x00000034 + 00025286 0x00005d33 branch 0x000062d1 + 00025287 0x00005d35 fetch 0x00000001 , 0x00000078 + 00025288 0x00005d36 branch 0x000062d7 , 0x00000034 + 00025289 0x00005d37 fetch 0x00000003 , 0x00000078 + 00025290 0x00005d38 store 0x00000003 , 0x00000048 + 00025291 0x00005d39 fetcht 0x00000001 , 0x0000007b + 00025292 0x00005d3a fetch 0x00000001 , 0x0000004c + 00025293 0x00005d3b set0 0x00000001 , 0x0000003f + 00025294 0x00005d3c ior 0x00000002 , 0x0000003f + 00025295 0x00005d3d store 0x00000001 , 0x0000004c + 00025296 0x00005d3e jam 0x00000000 , 0x00000078 + 00025297 0x00005d40 fetch 0x00000001 , 0x0000007c + 00025298 0x00005d41 rtn 0x00000034 + 00025299 0x00005d42 fetch 0x00000004 , 0x0000007c + 00025300 0x00005d43 store 0x00000004 , 0x00000078 + 00025301 0x00005d44 jam 0x00000000 , 0x0000007c + 00025302 0x00005d45 rtn + 00025303 0x00005d47 fetch 0x00000001 , 0x0000007c + 00025304 0x00005d48 rtn 0x00000034 + 00025305 0x00005d49 fetch 0x00000003 , 0x0000007c + 00025306 0x00005d4a store 0x00000003 , 0x00000048 + 00025307 0x00005d4b fetcht 0x00000001 , 0x0000007f + 00025308 0x00005d4c fetch 0x00000001 , 0x0000004c + 00025309 0x00005d4d set0 0x00000001 , 0x0000003f + 00025310 0x00005d4e ior 0x00000002 , 0x0000003f + 00025311 0x00005d4f store 0x00000001 , 0x0000004c + 00025312 0x00005d50 jam 0x00000000 , 0x0000007c + 00025313 0x00005d51 rtn + 00025314 0x00005d55 bpatchx 0x00000087 , 0x00004030 + 00025315 0x00005d56 fetch 0x00000001 , 0x0000004c + 00025316 0x00005d57 copy 0x0000003f , 0x00000013 + 00025317 0x00005d58 ifetch 0x00000001 , 0x00000002 + 00025318 0x00005d59 call 0x00005e52 + 00025319 0x00005d5a call 0x000062a7 + 00025320 0x00005d5b copy 0x00000013 , 0x0000003f + 00025321 0x00005d5c store 0x00000001 , 0x0000004c + 00025322 0x00005d5d rtn + 00025323 0x00005d60 fetcht 0x00000001 , 0x0000004c + 00025324 0x00005d61 set0 0x00000000 , 0x00000002 + 00025325 0x00005d62 storet 0x00000001 , 0x0000004c + 00025326 0x00005d63 rtn + 00025327 0x00005d66 fetcht 0x00000001 , 0x0000004c + 00025328 0x00005d67 set1 0x00000000 , 0x00000002 + 00025329 0x00005d68 storet 0x00000001 , 0x0000004c + 00025330 0x00005d69 rtn + 00025331 0x00005d6d nsetflag 0x00000029 , 0x00000001 , 0x0000003f + 00025332 0x00005d6e fetcht 0x00000001 , 0x0000004c + 00025333 0x00005d6f ixor 0x00000002 , 0x0000003f + 00025334 0x00005d70 isolate1 0x00000001 , 0x0000003f + 00025335 0x00005d71 rtn + 00025336 0x00005d75 fetch 0x00000001 , 0x0000004c + 00025337 0x00005d76 setflag 0x00000029 , 0x00000001 , 0x0000003f + 00025338 0x00005d77 store 0x00000001 , 0x0000004c + 00025339 0x00005d78 rtn + 00025340 0x00005d7c fetch 0x00000001 , 0x000009b4 + 00025341 0x00005d7d compare 0x00000001 , 0x0000003f , 0x0000007f + 00025342 0x00005d7e rtn + 00025343 0x00005d80 fetch 0x00000001 , 0x000009b4 + 00025344 0x00005d81 set1 0x00000007 , 0x0000003f + 00025345 0x00005d82 store 0x00000001 , 0x000009b4 + 00025346 0x00005d83 rtn + 00025347 0x00005d85 fetch 0x00000001 , 0x000009b4 + 00025348 0x00005d86 set0 0x00000007 , 0x0000003f + 00025349 0x00005d87 store 0x00000001 , 0x000009b4 + 00025350 0x00005d88 rtn + 00025351 0x00005d8a fetch 0x00000001 , 0x000009b4 + 00025352 0x00005d8b isolate1 0x00000007 , 0x0000003f + 00025353 0x00005d8c store 0x00000001 , 0x000009b4 + 00025354 0x00005d8d rtn + 00025355 0x00005d91 arg 0x00000562 , 0x00000005 + 00025356 0x00005d93 force 0x00000010 , 0x00000039 + 00025357 0x00005d96 random 0x0000003f + 00025358 0x00005d97 istore 0x00000001 , 0x00000005 + 00025359 0x00005d98 loop 0x0000630d + 00025360 0x00005d99 rtn + 00025361 0x00005d9c call 0x00007259 + 00025362 0x00005d9d arg 0x000041be , 0x00000011 + 00025363 0x00005d9e arg 0x00000592 , 0x00000012 + 00025364 0x00005d9f ifetch 0x00000008 , 0x00000011 + 00025365 0x00005da0 fetcht 0x00000001 , 0x00000030 + 00025366 0x00005da1 nsetflag 0x00000034 , 0x00000006 , 0x00000002 + 00025367 0x00005da2 storet 0x00000001 , 0x00000030 + 00025368 0x00005da3 copy 0x00000011 , 0x00000005 + 00025369 0x00005da4 call 0x00007352 + 00025370 0x00005da5 branch 0x000021c4 + 00025371 0x00005dad bpatchx 0x00000088 , 0x00004031 + 00025372 0x00005daf call 0x000062bc + 00025373 0x00005db0 nrtn 0x00000034 + 00025374 0x00005db2 fetch 0x00000001 , 0x00000055 + 00025375 0x00005db3 rtn 0x00000034 + 00025376 0x00005db7 beq 0x00000004 , 0x0000636f + 00025377 0x00005db8 beq 0x00000005 , 0x00006374 + 00025378 0x00005db9 beq 0x00000002 , 0x00006366 + 00025379 0x00005dba beq 0x00000003 , 0x0000637c + 00025380 0x00005dbb beq 0x0000000e , 0x00006369 + 00025381 0x00005dbc beq 0x00000006 , 0x00006398 + 00025382 0x00005dbd beq 0x00000007 , 0x000063b0 + 00025383 0x00005dbe beq 0x00000009 , 0x000063b1 + 00025384 0x00005dbf beq 0x0000000a , 0x000063ba + 00025385 0x00005dc0 beq 0x0000000b , 0x000063be + 00025386 0x00005dc1 beq 0x0000000c , 0x00006386 + 00025387 0x00005dc2 beq 0x0000000d , 0x00006389 + 00025388 0x00005dc3 beq 0x0000000f , 0x0000638f + 00025389 0x00005dc4 beq 0x00000012 , 0x00006359 + 00025390 0x00005dc5 beq 0x00000013 , 0x0000637c + 00025391 0x00005dc6 beq 0x00000010 , 0x0000635c + 00025392 0x00005dc7 beq 0x00000014 , 0x00006356 + 00025393 0x00005dc8 beq 0x00000015 , 0x0000637c + 00025394 0x00005dc9 beq 0x00000016 , 0x00006350 + 00025395 0x00005dca beq 0x00000018 , 0x00006355 + 00025396 0x00005dcb beq 0x00000017 , 0x00006349 + 00025397 0x00005dcc beq 0x00000019 , 0x0000634f + 00025398 0x00005dcd beq 0x0000001a , 0x0000633a + 00025399 0x00005dce beq 0x0000001b , 0x00006344 + 00025400 0x00005dcf jam 0x00000000 , 0x00000055 + 00025401 0x00005dd1 rtn + 00025402 0x00005dd3 fetch 0x00000001 , 0x000004d1 + 00025403 0x00005dd4 rtnbit0 0x00000002 + 00025404 0x00005dd5 rtnbit0 0x00000003 + 00025405 0x00005dd6 jam 0x00000000 , 0x00000055 + 00025406 0x00005dd7 call 0x00006340 + 00025407 0x00005dd8 branch 0x00006cef + 00025408 0x00005ddb fetch 0x00000001 , 0x0000016d + 00025409 0x00005ddc rtnbit0 0x00000001 + 00025410 0x00005ddd jam 0x0000000a , 0x00000055 + 00025411 0x00005dde rtn + 00025412 0x00005de1 arg 0x00000007 , 0x00000007 + 00025413 0x00005de2 call 0x00007f16 + 00025414 0x00005de3 nrtn 0x00000034 + 00025415 0x00005de4 jam 0x0000001a , 0x00000055 + 00025416 0x00005de5 rtn + 00025417 0x00005de8 fetch 0x00000001 , 0x0000016d + 00025418 0x00005de9 set0 0x00000000 , 0x0000003f + 00025419 0x00005dea store 0x00000001 , 0x0000016d + 00025420 0x00005deb jam 0x00000019 , 0x00000055 + 00025421 0x00005dec jam 0x0000000b , 0x0000007c + 00025422 0x00005ded rtn + 00025423 0x00005def rtn + 00025424 0x00005df1 fetch 0x00000001 , 0x000004d4 + 00025425 0x00005df2 rtnne 0x00000002 + 00025426 0x00005df3 call 0x000063c0 + 00025427 0x00005df4 jam 0x00000018 , 0x00000055 + 00025428 0x00005df5 rtn + 00025429 0x00005df8 rtn + 00025430 0x00005dfa jam 0x00000015 , 0x00000055 + 00025431 0x00005dfb jam 0x00000083 , 0x0000007c + 00025432 0x00005dfc rtn + 00025433 0x00005dfe jam 0x00000013 , 0x00000055 + 00025434 0x00005dff jam 0x00000025 , 0x0000007c + 00025435 0x00005e00 rtn + 00025436 0x00005e03 fetch 0x00000001 , 0x0000455b + 00025437 0x00005e04 rtneq 0x00000000 + 00025438 0x00005e05 beq 0x00000001 , 0x00006364 + 00025439 0x00005e06 arg 0x00000006 , 0x00000007 + 00025440 0x00005e07 call 0x00007f16 + 00025441 0x00005e08 nrtn 0x00000034 + 00025442 0x00005e09 jam 0x00000000 , 0x0000455b + 00025443 0x00005e0a branch 0x0000637d + 00025444 0x00005e0c rtn 0x00000029 + 00025445 0x00005e0d branch 0x00006398 + 00025446 0x00005e10 jam 0x00000003 , 0x00000055 + 00025447 0x00005e11 jam 0x00000027 , 0x0000007c + 00025448 0x00005e12 rtn + 00025449 0x00005e14 jam 0x00000013 , 0x0000007c + 00025450 0x00005e15 set1 0x00000003 , 0x00000000 + 00025451 0x00005e16 jam 0x00000005 , 0x00000055 + 00025452 0x00005e17 setarg 0x000001ff + 00025453 0x00005e18 store 0x00000002 , 0x000004d2 + 00025454 0x00005e19 rtn + 00025455 0x00005e1b jam 0x00000005 , 0x00000055 + 00025456 0x00005e1c jam 0x000000ff , 0x000004d2 + 00025457 0x00005e1d set0 0x00000022 , 0x00000000 + 00025458 0x00005e1e jam 0x00000033 , 0x0000007c + 00025459 0x00005e1f branch 0x00005d04 + 00025460 0x00005e21 rtnmark1 0x00000022 + 00025461 0x00005e22 fetch 0x00000002 , 0x000004d2 + 00025462 0x00005e23 sub 0x0000003f , 0x00000001 , 0x0000003f + 00025463 0x00005e24 branch 0x0000637a , 0x00000005 + 00025464 0x00005e25 store 0x00000002 , 0x000004d2 + 00025465 0x00005e26 rtn + 00025466 0x00005e28 jam 0x0000000e , 0x00000055 + 00025467 0x00005e29 rtn + 00025468 0x00005e2c rtn + 00025469 0x00005e2f fetch 0x00000001 , 0x000004d1 + 00025470 0x00005e30 rtnbit0 0x00000003 + 00025471 0x00005e31 rtnbit0 0x00000002 + 00025472 0x00005e32 fetch 0x00000001 , 0x0000016d + 00025473 0x00005e33 set0 0x00000002 , 0x0000003f + 00025474 0x00005e34 store 0x00000001 , 0x0000016d + 00025475 0x00005e35 jam 0x00000013 , 0x0000007c + 00025476 0x00005e36 jam 0x00000010 , 0x00000055 + 00025477 0x00005e37 rtn + 00025478 0x00005e3a jam 0x0000000d , 0x00000055 + 00025479 0x00005e3b jam 0x00000031 , 0x0000007c + 00025480 0x00005e3c rtn + 00025481 0x00005e3f fetch 0x00000001 , 0x000004d1 + 00025482 0x00005e40 rtnbit0 0x00000002 + 00025483 0x00005e41 jam 0x00000000 , 0x00000055 + 00025484 0x00005e43 rtn + 00025485 0x00005e45 jam 0x00000006 , 0x00000055 + 00025486 0x00005e46 rtn + 00025487 0x00005e49 fetch 0x00000001 , 0x000004d2 + 00025488 0x00005e4a increase 0xffffffff , 0x0000003f + 00025489 0x00005e4b branch 0x00006394 , 0x00000034 + 00025490 0x00005e4c store 0x00000001 , 0x000004d2 + 00025491 0x00005e4d rtn + 00025492 0x00005e4f jam 0x00000007 , 0x0000007c + 00025493 0x00005e50 jam 0x00000016 , 0x000004ca + 00025494 0x00005e51 jam 0x00000000 , 0x00000055 + 00025495 0x00005e52 rtn + 00025496 0x00005e55 fetch 0x00000001 , 0x0000016d + 00025497 0x00005e56 bbit1 0x00000002 , 0x0000637d + 00025498 0x00005e57 bbit1 0x00000000 , 0x0000639d + 00025499 0x00005e59 jam 0x0000001a , 0x00000055 + 00025500 0x00005e5a rtn + 00025501 0x00005e5c fetch 0x00000001 , 0x000041bd + 00025502 0x00005e5d branch 0x000063a9 , 0x00000034 + 00025503 0x00005e5e fetch 0x00000001 , 0x000004d1 + 00025504 0x00005e5f rtnbit0 0x00000003 + 00025505 0x00005e60 rtnbit0 0x00000002 + 00025506 0x00005e61 fetch 0x00000004 , 0x000004e9 + 00025507 0x00005e62 arg 0x00000064 , 0x00000002 + 00025508 0x00005e63 iadd 0x00000002 , 0x00000002 + 00025509 0x00005e64 copy 0x00000022 , 0x0000003f + 00025510 0x00005e65 isub 0x00000002 , 0x0000003e + 00025511 0x00005e66 nrtn 0x00000002 + 00025512 0x00005e67 branch 0x00006349 + 00025513 0x00005e6c jam 0x00000016 , 0x00000055 + 00025514 0x00005e6d jam 0x00000004 , 0x00004689 + 00025515 0x00005e6e setarg 0x00003030 + 00025516 0x00005e6f store 0x00000002 , 0x0000468a + 00025517 0x00005e70 istore 0x00000002 , 0x00000005 + 00025518 0x00005e71 jam 0x00000002 , 0x000004d4 + 00025519 0x00005e72 branch 0x00006350 + 00025520 0x00005e75 rtn + 00025521 0x00005e77 fetch 0x00000001 , 0x0000016d + 00025522 0x00005e78 bbit1 0x00000001 , 0x000063b5 + 00025523 0x00005e79 jam 0x0000001a , 0x00000055 + 00025524 0x00005e7a rtn + 00025525 0x00005e7d fetch 0x00000001 , 0x0000016d + 00025526 0x00005e7e set0 0x00000001 , 0x0000003f + 00025527 0x00005e7f store 0x00000001 , 0x0000016d + 00025528 0x00005e80 jam 0x0000000f , 0x0000007c + 00025529 0x00005e81 rtn + 00025530 0x00005e84 fetch 0x00000001 , 0x000004d8 + 00025531 0x00005e85 rtn 0x00000034 + 00025532 0x00005e86 jam 0x00000000 , 0x00000055 + 00025533 0x00005e87 branch 0x000063b5 + 00025534 0x00005e8a jam 0x0000000c , 0x00000055 + 00025535 0x00005e8b rtn + 00025536 0x00005e8e fetch 0x00000001 , 0x0000004b + 00025537 0x00005e8f bbit1 0x00000002 , 0x000063c5 + 00025538 0x00005e90 call 0x000062ef + 00025539 0x00005e91 jam 0x00000008 , 0x0000007c + 00025540 0x00005e92 branch 0x00004d04 + 00025541 0x00005e94 fetch 0x00000001 , 0x0000004b + 00025542 0x00005e95 set0 0x00000002 , 0x0000003f + 00025543 0x00005e96 store 0x00000001 , 0x0000004b + 00025544 0x00005e97 call 0x00006001 + 00025545 0x00005e98 call 0x000062f8 + 00025546 0x00005e99 branch 0x00004d04 + 00025547 0x00005e9c setarg 0x00000004 + 00025548 0x00005e9d store 0x00000001 , 0x00004689 + 00025549 0x00005e9e setarg 0x00003030 + 00025550 0x00005e9f istore 0x00000002 , 0x00000005 + 00025551 0x00005ea0 istore 0x00000002 , 0x00000005 + 00025552 0x00005ea1 rtn + 00025553 0x00005ea8 bpatchx 0x0000008c , 0x00004031 + 00025554 0x00005ea9 hfetch 0x00000001 , 0x00008073 + 00025555 0x00005eaa arg 0x00000006 , 0x00000002 + 00025556 0x00005eab ior 0x00000002 , 0x0000003f + 00025557 0x00005eac hstore 0x00000001 , 0x00008073 + 00025558 0x00005ead hfetch 0x00000001 , 0x00008077 + 00025559 0x00005eae ior 0x00000002 , 0x0000003f + 00025560 0x00005eaf hstore 0x00000001 , 0x00008077 + 00025561 0x00005eb0 call 0x000063ee + 00025562 0x00005eb1 hfetch 0x00000001 , 0x00008077 + 00025563 0x00005eb2 set0 0x00000001 , 0x0000003f + 00025564 0x00005eb3 set0 0x00000002 , 0x0000003f + 00025565 0x00005eb4 hstore 0x00000001 , 0x00008077 + 00025566 0x00005eb5 nop 0x0000001e + 00025567 0x00005eb6 branch 0x000063f2 + 00025568 0x00005eb9 hfetch 0x00000001 , 0x00008073 + 00025569 0x00005eba arg 0x000000c0 , 0x00000002 + 00025570 0x00005ebb ior 0x00000002 , 0x0000003f + 00025571 0x00005ebc hstore 0x00000001 , 0x00008073 + 00025572 0x00005ebd hfetch 0x00000001 , 0x00008077 + 00025573 0x00005ebe ior 0x00000002 , 0x0000003f + 00025574 0x00005ebf hstore 0x00000001 , 0x00008077 + 00025575 0x00005ec0 call 0x000063ee + 00025576 0x00005ec1 hfetch 0x00000001 , 0x00008077 + 00025577 0x00005ec2 set0 0x00000006 , 0x0000003f + 00025578 0x00005ec3 set0 0x00000007 , 0x0000003f + 00025579 0x00005ec4 hstore 0x00000001 , 0x00008077 + 00025580 0x00005ec5 nop 0x0000001e + 00025581 0x00005ec6 branch 0x000063f6 + 00025582 0x00005ec9 hfetch 0x00000001 , 0x00008081 + 00025583 0x00005eca and 0x0000003f , 0x000000fc , 0x0000003f + 00025584 0x00005ecb hstore 0x00000001 , 0x00008081 + 00025585 0x00005ecc rtn + 00025586 0x00005ece hfetch 0x00000001 , 0x00008081 + 00025587 0x00005ecf or 0x0000003f , 0x00000001 , 0x0000003f + 00025588 0x00005ed0 hstore 0x00000001 , 0x00008081 + 00025589 0x00005ed1 rtn + 00025590 0x00005ed3 hfetch 0x00000001 , 0x00008081 + 00025591 0x00005ed4 or 0x0000003f , 0x00000003 , 0x0000003f + 00025592 0x00005ed5 set0 0x00000004 , 0x0000003f + 00025593 0x00005ed6 hstore 0x00000001 , 0x00008081 + 00025594 0x00005ed7 rtn + 00025595 0x00005edc copy 0x0000003f , 0x00000012 + 00025596 0x00005edd call 0x0000640f + 00025597 0x00005ede nop 0x00000064 + 00025598 0x00005edf copy 0x00000012 , 0x0000003f + 00025599 0x00005ee0 call 0x00006414 + 00025600 0x00005ee1 copy 0x0000003f , 0x00000012 + 00025601 0x00005ee2 call 0x00006411 + 00025602 0x00005ee3 nop 0x00000064 + 00025603 0x00005ee4 copy 0x00000012 , 0x0000003f + 00025604 0x00005ee5 rtn + 00025605 0x00005ee8 copy 0x0000003f , 0x00000012 + 00025606 0x00005ee9 call 0x0000640f + 00025607 0x00005eea nop 0x00000064 + 00025608 0x00005eeb copy 0x00000012 , 0x0000003f + 00025609 0x00005eec call 0x00006413 + 00025610 0x00005eed call 0x00006411 + 00025611 0x00005eee nop 0x00000064 + 00025612 0x00005eef rtn + 00025613 0x00005ef3 fetcht 0x00000001 , 0x00004214 + 00025614 0x00005ef4 branch 0x0000680e + 00025615 0x00005ef8 fetcht 0x00000001 , 0x00004214 + 00025616 0x00005ef9 branch 0x00006829 + 00025617 0x00005efd fetcht 0x00000001 , 0x00004214 + 00025618 0x00005efe branch 0x00006825 + 00025619 0x00005f02 branch 0x000064ec + 00025620 0x00005f05 branch 0x000064f3 + 00025621 0x00005f0d nbranch 0x00006419 , 0x00000028 + 00025622 0x00005f0e hfetch 0x00000001 , 0x00008085 + 00025623 0x00005f0f or_into 0x00000002 , 0x0000003f + 00025624 0x00005f10 hstore 0x00000001 , 0x00008085 + 00025625 0x00005f12 copy 0x00000002 , 0x0000003e + 00025626 0x00005f13 branch 0x0000641c , 0x00000005 + 00025627 0x00005f14 copy 0x00000013 , 0x0000003d + 00025628 0x00005f16 isolate0 0x00000000 , 0x0000003e + 00025629 0x00005f17 branch 0x000064b9 + 00025630 0x00005f1b force 0x00000004 , 0x00000002 + 00025631 0x00005f1d arg 0x000001fe , 0x00000011 + 00025632 0x00005f1e hfetch 0x00000001 , 0x00008085 + 00025633 0x00005f1f and_into 0x000000fd , 0x0000003f + 00025634 0x00005f20 hstore 0x00000001 , 0x00008085 + 00025635 0x00005f21 call 0x00006419 + 00025636 0x00005f22 arg 0x000055aa , 0x00000011 + 00025637 0x00005f23 fetch 0x00000002 , 0x000001fe + 00025638 0x00005f24 ifetcht 0x00000002 , 0x00000006 + 00025639 0x00005f25 isub 0x00000011 , 0x0000003e + 00025640 0x00005f26 rtn + 00025641 0x00005f29 arg 0x00000002 , 0x00000002 + 00025642 0x00005f2a arg 0x00000204 , 0x00000011 + 00025643 0x00005f2b call 0x00006419 + 00025644 0x00005f2c fetch 0x00000002 , 0x00000204 + 00025645 0x00005f2d store 0x00000002 , 0x000001f7 + 00025646 0x00005f2e call 0x00006430 , 0x00000028 + 00025647 0x00005f2f rtn + 00025648 0x00005f32 arg 0x00000010 , 0x00000002 + 00025649 0x00005f33 arg 0x00000206 , 0x00000011 + 00025650 0x00005f34 hfetch 0x00000001 , 0x00008085 + 00025651 0x00005f35 and_into 0x000000fd , 0x0000003f + 00025652 0x00005f36 hstore 0x00000001 , 0x00008085 + 00025653 0x00005f37 call 0x00006419 + 00025654 0x00005f38 arg 0x00000206 , 0x00000006 + 00025655 0x00005f39 arg 0x00000010 , 0x00000039 + 00025656 0x00005f3a call 0x00007478 + 00025657 0x00005f3b call 0x00007428 + 00025658 0x00005f3c call 0x00007491 + 00025659 0x00005f3d branch 0x00007422 + 00025660 0x00005f40 disable 0x0000002d + 00025661 0x00005f41 call 0x0000641e + 00025662 0x00005f42 nrtn 0x00000005 + 00025663 0x00005f43 enable 0x0000002d + 00025664 0x00005f44 hjam 0x00000080 , 0x00008023 + 00025665 0x00005f45 hjam 0x00000000 , 0x00008022 + 00025666 0x00005f46 hjam 0x00000000 , 0x00008024 + 00025667 0x00005f47 arg 0x00008025 , 0x00000011 + 00025668 0x00005f48 call 0x00006415 + 00025669 0x00005f49 hjam 0x00000000 , 0x00008023 + 00025670 0x00005f4b arg 0x00000006 , 0x00000002 + 00025671 0x00005f4c call 0x0000641f + 00025672 0x00005f4d nrtn 0x00000005 + 00025673 0x00005f4e ifetch 0x00000002 , 0x00000006 + 00025674 0x00005f4f iforce 0x00000011 + 00025675 0x00005f50 call 0x00006419 + 00025676 0x00005f51 branch 0x00006446 + 00025677 0x00005f56 call 0x00007f99 + 00025678 0x00005f57 setarg 0x00001000 + 00025679 0x00005f58 store 0x00000002 , 0x000001f7 + 00025680 0x00005f59 arg 0x000065e5 , 0x00000013 + 00025681 0x00005f5a arg 0x00000002 , 0x00000039 + 00025682 0x00005f5c call 0x0000641e + 00025683 0x00005f5d nrtn 0x00000005 + 00025684 0x00005f5e fetch 0x00000002 , 0x000001f7 + 00025685 0x00005f5f byteswap 0x0000003f , 0x0000003f + 00025686 0x00005f60 iadd 0x00000002 , 0x0000003f + 00025687 0x00005f61 byteswap 0x0000003f , 0x0000003f + 00025688 0x00005f62 store 0x00000002 , 0x000001f7 + 00025689 0x00005f63 loop 0x00006452 + 00025690 0x00005f64 branch 0x00006446 + 00025691 0x00005f67 call 0x00007f99 + 00025692 0x00005f68 disable 0x00000028 + 00025693 0x00005f69 call 0x0000666a + 00025694 0x00005f6a setarg 0x00000000 + 00025695 0x00005f6b arg 0x000001f3 , 0x00000011 + 00025696 0x00005f6c arg 0x00000002 , 0x00000002 + 00025697 0x00005f6d call 0x000066b3 + 00025698 0x00005f6e fetch 0x00000002 , 0x000001f3 + 00025699 0x00005f6f bbit0 0x00000007 , 0x0000646e + 00025700 0x00005f70 hjam 0x00000025 , 0x00008050 + 00025701 0x00005f71 setarg 0x000007f0 + 00025702 0x00005f72 arg 0x00000206 , 0x00000011 + 00025703 0x00005f73 arg 0x00000010 , 0x00000002 + 00025704 0x00005f74 call 0x000066b3 + 00025705 0x00005f75 hjam 0x00000008 , 0x00008006 + 00025706 0x00005f76 set1 0x0000002b , 0x00000000 + 00025707 0x00005f77 arg 0x00000206 , 0x00000006 + 00025708 0x00005f78 call 0x00007484 + 00025709 0x00005f79 enable 0x00000028 + 00025710 0x00005f7b jam 0x00000000 , 0x000041da + 00025711 0x00005f7d call 0x000064b0 + 00025712 0x00005f7e fetch 0x00000002 , 0x000001f3 + 00025713 0x00005f7f byteswap 0x0000003f , 0x0000003f + 00025714 0x00005f80 arg 0x000007ff , 0x00000002 + 00025715 0x00005f81 iand 0x00000002 , 0x0000003f + 00025716 0x00005f82 branch 0x0000647b , 0x00000005 + 00025717 0x00005f83 call 0x0000666f + 00025718 0x00005f84 arg 0x000066b8 , 0x00000013 + 00025719 0x00005f85 call 0x00006430 , 0x00000028 + 00025720 0x00005f86 call 0x0000643c + 00025721 0x00005f87 fetch 0x00000001 , 0x000001f2 + 00025722 0x00005f88 bbit0 0x00000000 , 0x0000646f + 00025723 0x00005f8b call 0x0000666d + 00025724 0x00005f8c jam 0x00000000 , 0x000041da + 00025725 0x00005f8e call 0x000064b0 + 00025726 0x00005f8f call 0x000065c2 + 00025727 0x00005f90 fetch 0x00000001 , 0x000001f3 + 00025728 0x00005f91 bbit1 0x00000006 , 0x0000648e + 00025729 0x00005f92 call 0x000064aa + 00025730 0x00005f93 nbranch 0x00006486 , 0x0000002d + 00025731 0x00005f94 fetch 0x00000001 , 0x000001f2 + 00025732 0x00005f95 bbit0 0x00000000 , 0x0000647d + 00025733 0x00005f96 branch 0x0000649b + 00025734 0x00005f98 call 0x000065bf + 00025735 0x00005f99 fetch 0x00000001 , 0x000001f3 + 00025736 0x00005f9a bbit1 0x00000006 , 0x0000648e + 00025737 0x00005f9b call 0x000064aa + 00025738 0x00005f9c nbranch 0x0000648e , 0x0000002d + 00025739 0x00005f9d fetch 0x00000001 , 0x000001f2 + 00025740 0x00005f9e bbit0 0x00000000 , 0x0000647d + 00025741 0x00005f9f branch 0x0000649b + 00025742 0x00005fa2 jam 0x00000000 , 0x000041da + 00025743 0x00005fa4 call 0x000064b0 + 00025744 0x00005fa5 fetch 0x00000001 , 0x000001f3 + 00025745 0x00005fa6 bbit1 0x00000005 , 0x0000649b + 00025746 0x00005fa7 setarg 0x00000000 + 00025747 0x00005fa8 store 0x00000003 , 0x000001f6 + 00025748 0x00005fa9 call 0x00006502 + 00025749 0x00005faa arg 0x00006578 , 0x00000013 + 00025750 0x00005fab call 0x00006429 + 00025751 0x00005fac call 0x0000643c + 00025752 0x00005fad nbranch 0x0000649b , 0x0000002d + 00025753 0x00005fae fetch 0x00000001 , 0x000001f2 + 00025754 0x00005faf bbit0 0x00000000 , 0x0000648f + 00025755 0x00005fb2 bmark1 0x0000002b , 0x0000649d + 00025756 0x00005fb3 call 0x000064a3 + 00025757 0x00005fb5 fetch 0x00000001 , 0x000001f3 + 00025758 0x00005fb6 bbit0 0x00000004 , 0x000064a3 + 00025759 0x00005fb7 hjam 0x00000021 , 0x00008050 + 00025760 0x00005fb8 call 0x00004c0e + 00025761 0x00005fba call 0x00004c2e + 00025762 0x00005fbb branch 0x000064a1 + 00025763 0x00005fbe setarg 0x00000000 + 00025764 0x00005fbf store 0x00000008 , 0x00000206 + 00025765 0x00005fc0 store 0x00000008 , 0x0000020e + 00025766 0x00005fc1 force 0x00000004 , 0x00000038 + 00025767 0x00005fc2 call 0x00007492 + 00025768 0x00005fc3 hjam 0x00000021 , 0x00008050 + 00025769 0x00005fc4 rtn + 00025770 0x00005fc8 setarg 0x00000000 + 00025771 0x00005fc9 store 0x00000002 , 0x000001f7 + 00025772 0x00005fca arg 0x000065e5 , 0x00000013 + 00025773 0x00005fcb call 0x000065a3 + 00025774 0x00005fcc call 0x00006429 + 00025775 0x00005fcd branch 0x0000643c + 00025776 0x00005fd1 fetch 0x00000001 , 0x000041da + 00025777 0x00005fd2 increase 0x00000001 , 0x0000003f + 00025778 0x00005fd3 sub 0x0000003f , 0x00000003 , 0x0000003e + 00025779 0x00005fd4 nbranch 0x000064b6 , 0x00000002 + 00025780 0x00005fd5 store 0x00000001 , 0x000041da + 00025781 0x00005fd6 rtn + 00025782 0x00005fd9 call 0x000064a3 + 00025783 0x00005fda call 0x00007fa1 + 00025784 0x00005fdb rtn + 00025785 0x00005fe0 fetch 0x00000001 , 0x000001f2 + 00025786 0x00005fe1 lshift 0x0000003f , 0x0000003f + 00025787 0x00005fe2 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00025788 0x00005fe3 isolate0 0x0000000f , 0x00000011 + 00025789 0x00005fe4 rtn 0x00000001 + 00025790 0x00005fe5 store 0x00000001 , 0x000001f2 + 00025791 0x00005fe6 rtn + 00025792 0x00005fea hfetch 0x00000001 , 0x00008085 + 00025793 0x00005feb rtnbit0 0x00000001 + 00025794 0x00005fec branch 0x000064c6 + 00025795 0x00005fee hfetch 0x00000001 , 0x0000812c + 00025796 0x00005fef qisolate1 0x0000003f + 00025797 0x00005ff0 rtn 0x00000001 + 00025798 0x00005ff2 hfetch 0x00000001 , 0x00008108 + 00025799 0x00005ff3 bbit0 0x00000001 , 0x000064c3 + 00025800 0x00005ff4 call 0x00007422 + 00025801 0x00005ff5 branch 0x000064c3 + 00025802 0x00005ffa fetch 0x00000002 , 0x00004199 + 00025803 0x00005ffb rtn 0x00000034 + 00025804 0x00005ffc hjam 0x00000080 , 0x00008023 + 00025805 0x00005ffd hjam 0x00000000 , 0x00008022 + 00025806 0x00005ffe hjam 0x00000000 , 0x00008024 + 00025807 0x00005fff fetcht 0x00000002 , 0x0000419b + 00025808 0x00006000 lshift2 0x00000002 , 0x00000039 + 00025809 0x00006001 iforce 0x00000006 + 00025810 0x00006003 ifetch 0x00000001 , 0x00000006 + 00025811 0x00006004 hstore 0x00000001 , 0x00008025 + 00025812 0x00006005 loop 0x000064d2 + 00025813 0x00006006 hjam 0x00000000 , 0x00008023 + 00025814 0x00006007 rtn + 00025815 0x0000600d bpatchx 0x0000008d , 0x00004031 + 00025816 0x0000600e call 0x000064dd + 00025817 0x0000600f branch 0x000063f2 + 00025818 0x00006012 call 0x000064dd + 00025819 0x00006013 call 0x000063ee + 00025820 0x00006014 branch 0x000063f6 + 00025821 0x00006017 fetch 0x00000001 , 0x00004212 + 00025822 0x00006018 hstore 0x00000001 , 0x00008086 + 00025823 0x00006019 fetch 0x00000001 , 0x00004213 + 00025824 0x0000601a hstore 0x00000001 , 0x00008087 + 00025825 0x0000601b setarg 0x000001f5 + 00025826 0x0000601c hstore 0x00000002 , 0x0000808a + 00025827 0x0000601d setarg 0x000001fa + 00025828 0x0000601e hstore 0x00000002 , 0x0000808c + 00025829 0x0000601f branch 0x000063ee + 00025830 0x00006022 hfetch 0x00000001 , 0x00008086 + 00025831 0x00006023 set1 0x00000007 , 0x0000003f + 00025832 0x00006024 hstore 0x00000001 , 0x00008086 + 00025833 0x00006025 set0 0x00000007 , 0x0000003f + 00025834 0x00006026 hstore 0x00000001 , 0x00008086 + 00025835 0x00006027 rtn + 00025836 0x0000602c set1 0x00000007 , 0x0000003f + 00025837 0x0000602d store 0x00000002 , 0x000001f5 + 00025838 0x0000602e bpatchx 0x0000008e , 0x00004031 + 00025839 0x0000602f hjam 0x00000002 , 0x00008088 + 00025840 0x00006030 hjam 0x00000000 , 0x0000808e + 00025841 0x00006031 hjam 0x00000002 , 0x00008006 + 00025842 0x00006032 branch 0x000064fc + 00025843 0x00006036 force 0x00000001 , 0x00000002 + 00025844 0x0000603a store 0x00000001 , 0x000001f5 + 00025845 0x0000603b bpatchx 0x0000008f , 0x00004031 + 00025846 0x0000603c hjam 0x00000001 , 0x00008088 + 00025847 0x0000603d hstoret 0x00000002 , 0x0000808e + 00025848 0x0000603e hjam 0x00000002 , 0x00008006 + 00025849 0x0000603f call 0x000064fc + 00025850 0x00006040 fetch 0x00000001 , 0x000001fa + 00025851 0x00006041 rtn + 00025852 0x00006044 fetch 0x00000002 , 0x000040d6 + 00025853 0x00006045 increase 0x00000001 , 0x0000003f + 00025854 0x00006046 store 0x00000002 , 0x000040d6 + 00025855 0x00006047 hfetch 0x00000001 , 0x0000812c + 00025856 0x00006048 bbit0 0x00000003 , 0x000064fc + 00025857 0x00006049 rtn + 00025858 0x0000604c hjam 0x00000040 , 0x00008086 + 00025859 0x0000604d hjam 0x00000000 , 0x00008087 + 00025860 0x0000604e hfetch 0x00000001 , 0x00008081 + 00025861 0x0000604f set0 0x00000000 , 0x0000003f + 00025862 0x00006050 set1 0x00000001 , 0x0000003f + 00025863 0x00006051 hstore 0x00000001 , 0x00008081 + 00025864 0x00006052 setarg 0x00000000 + 00025865 0x00006053 store 0x00000004 , 0x000001f5 + 00025866 0x00006054 rtn + 00025867 0x00006058 setarg 0x00000000 + 00025868 0x00006059 hstore 0x00000002 , 0x0000808e + 00025869 0x0000605a setarg 0x00000001 + 00025870 0x0000605b hstore 0x00000002 , 0x00008088 + 00025871 0x0000605c setarg 0x000001f5 + 00025872 0x0000605d hstore 0x00000002 , 0x0000808a + 00025873 0x0000605e jam 0x00000006 , 0x000001f5 + 00025874 0x0000605f hjam 0x00000002 , 0x00008006 + 00025875 0x00006060 branch 0x000064fc + 00025876 0x00006070 disable 0x00000028 + 00025877 0x00006071 copy 0x0000003f , 0x00000012 + 00025878 0x00006072 fetch 0x00000001 , 0x00004239 + 00025879 0x00006073 rtnne 0x00000000 + 00025880 0x00006074 enable 0x00000028 + 00025881 0x00006075 copy 0x00000012 , 0x0000003f + 00025882 0x00006076 branch 0x00006522 + 00025883 0x0000607a fetch 0x00000001 , 0x00004239 + 00025884 0x0000607b beq 0x00000001 , 0x00006522 + 00025885 0x0000607c beq 0x00000002 , 0x00006528 + 00025886 0x0000607d beq 0x00000003 , 0x00006530 + 00025887 0x0000607e beq 0x00000004 , 0x00006537 + 00025888 0x0000607f beq 0x00000005 , 0x0000653d + 00025889 0x00006080 rtn + 00025890 0x00006083 store 0x00000003 , 0x00004232 + 00025891 0x00006084 copy 0x00000011 , 0x0000003f + 00025892 0x00006085 store 0x00000002 , 0x00004235 + 00025893 0x00006086 storet 0x00000002 , 0x00004237 + 00025894 0x00006087 jam 0x00000002 , 0x00004239 + 00025895 0x00006088 branch 0x00006502 + 00025896 0x0000608a call 0x00006502 + 00025897 0x0000608b jam 0x00000003 , 0x00004239 + 00025898 0x0000608c call 0x0000650b + 00025899 0x0000608d arg 0x000001f5 , 0x00000011 + 00025900 0x0000608e fetch 0x00000003 , 0x00004232 + 00025901 0x0000608f hjam 0x00000004 , 0x00008088 + 00025902 0x00006090 arg 0x00000020 , 0x00000002 + 00025903 0x00006091 branch 0x00006556 + 00025904 0x00006094 call 0x00006502 + 00025905 0x00006095 call 0x0000650b + 00025906 0x00006096 setarg 0x00000005 + 00025907 0x00006097 call 0x000064f3 + 00025908 0x00006098 rtnbit1 0x00000000 + 00025909 0x00006099 jam 0x00000004 , 0x00004239 + 00025910 0x0000609a rtn + 00025911 0x0000609c call 0x00006502 + 00025912 0x0000609d jam 0x00000005 , 0x00004239 + 00025913 0x0000609e call 0x0000650b + 00025914 0x0000609f call 0x0000654a + 00025915 0x000060a0 call 0x00006552 + 00025916 0x000060a1 branch 0x00006545 + 00025917 0x000060a3 call 0x00006502 + 00025918 0x000060a4 call 0x0000650b + 00025919 0x000060a5 setarg 0x00000005 + 00025920 0x000060a6 call 0x000064f3 + 00025921 0x000060a7 rtnbit1 0x00000000 + 00025922 0x000060a8 jam 0x00000000 , 0x00004239 + 00025923 0x000060a9 fetch 0x00000002 , 0x00004201 + 00025924 0x000060aa branch 0x00007f9c + 00025925 0x000060ac fetch 0x00000004 , 0x00000aa2 + 00025926 0x000060ad fetcht 0x00000002 , 0x00004235 + 00025927 0x000060ae increase 0xfffffffc , 0x00000002 + 00025928 0x000060af istore 0x00000004 , 0x00000002 + 00025929 0x000060b0 rtn + 00025930 0x000060b2 fetcht 0x00000002 , 0x00004235 + 00025931 0x000060b3 copy 0x00000002 , 0x00000011 + 00025932 0x000060b4 increase 0xfffffffc , 0x00000002 + 00025933 0x000060b5 ifetch 0x00000004 , 0x00000002 + 00025934 0x000060b6 store 0x00000004 , 0x00000aa2 + 00025935 0x000060b7 fetcht 0x00000002 , 0x00004237 + 00025936 0x000060b8 fetch 0x00000003 , 0x00004232 + 00025937 0x000060b9 rtn + 00025938 0x000060be increase 0x00000004 , 0x00000002 + 00025939 0x000060bf hstoret 0x00000002 , 0x00008088 + 00025940 0x000060c0 arg 0x00000002 , 0x00000002 + 00025941 0x000060c1 increase 0xfffffffc , 0x00000011 + 00025942 0x000060c4 istoret 0x00000001 , 0x00000011 + 00025943 0x000060c5 rshift16 0x0000003f , 0x00000002 + 00025944 0x000060c6 istoret 0x00000001 , 0x00000005 + 00025945 0x000060c7 rshift8 0x0000003f , 0x00000002 + 00025946 0x000060c8 istoret 0x00000001 , 0x00000005 + 00025947 0x000060c9 istore 0x00000001 , 0x00000005 + 00025948 0x000060ca deposit 0x00000011 + 00025949 0x000060cb hstore 0x00000002 , 0x0000808a + 00025950 0x000060cc setarg 0x00000000 + 00025951 0x000060cd hstore 0x00000002 , 0x0000808e + 00025952 0x000060ce hjam 0x00000002 , 0x00008006 + 00025953 0x000060cf branch 0x000064fc + 00025954 0x000060d4 hstoret 0x00000002 , 0x0000808e + 00025955 0x000060d5 rshift16 0x0000003f , 0x00000002 + 00025956 0x000060d6 storet 0x00000001 , 0x000001f6 + 00025957 0x000060d7 rshift8 0x0000003f , 0x00000002 + 00025958 0x000060d8 storet 0x00000001 , 0x000001f7 + 00025959 0x000060d9 store 0x00000001 , 0x000001f8 + 00025960 0x000060da setarg 0x00000004 + 00025961 0x000060db hstore 0x00000002 , 0x00008088 + 00025962 0x000060dc jam 0x00000003 , 0x000001f5 + 00025963 0x000060dd setarg 0x000001f5 + 00025964 0x000060de hstore 0x00000002 , 0x0000808a + 00025965 0x000060df deposit 0x00000011 + 00025966 0x000060e0 hstore 0x00000002 , 0x0000808c + 00025967 0x000060e1 hfetch 0x00000001 , 0x00008086 + 00025968 0x000060e2 isolate0 0x0000000f , 0x00000011 + 00025969 0x000060e3 setflag 0x00000001 , 0x00000006 , 0x0000003f + 00025970 0x000060e4 hstore 0x00000001 , 0x00008086 + 00025971 0x000060e5 hjam 0x00000002 , 0x00008006 + 00025972 0x000060e7 hfetch 0x00000001 , 0x0000812c + 00025973 0x000060e8 bbit1 0x00000007 , 0x00006574 + 00025974 0x000060e9 arg 0x00000003 , 0x00000007 + 00025975 0x000060ea branch 0x000064fc + 00025976 0x000060ef hstoret 0x00000002 , 0x0000808e + 00025977 0x000060f0 setarg 0x00000004 + 00025978 0x000060f1 hstore 0x00000002 , 0x00008088 + 00025979 0x000060f2 jam 0x00000003 , 0x000001f5 + 00025980 0x000060f3 setarg 0x000001f5 + 00025981 0x000060f4 hstore 0x00000002 , 0x0000808a + 00025982 0x000060f5 deposit 0x00000011 + 00025983 0x000060f6 hstore 0x00000002 , 0x0000808c + 00025984 0x000060f7 hfetch 0x00000001 , 0x00008086 + 00025985 0x000060f8 isolate0 0x0000000f , 0x00000011 + 00025986 0x000060f9 setflag 0x00000001 , 0x00000006 , 0x0000003f + 00025987 0x000060fa hstore 0x00000001 , 0x00008086 + 00025988 0x000060fb hjam 0x00000002 , 0x00008006 + 00025989 0x000060fd hfetch 0x00000001 , 0x0000812c + 00025990 0x000060fe bbit1 0x00000007 , 0x00006585 + 00025991 0x000060ff arg 0x00000003 , 0x00000007 + 00025992 0x00006100 call 0x000064c0 + 00025993 0x00006101 call 0x000064fc + 00025994 0x00006102 isolate1 0x00000002 , 0x0000003f + 00025995 0x00006103 call 0x000064b9 + 00025996 0x00006104 fetch 0x00000001 , 0x000001f6 + 00025997 0x00006105 lshift16 0x0000003f , 0x00000012 + 00025998 0x00006106 fetch 0x00000001 , 0x000001f7 + 00025999 0x00006107 lshift8 0x0000003f , 0x0000003f + 00026000 0x00006108 ior 0x00000012 , 0x00000012 + 00026001 0x00006109 fetch 0x00000001 , 0x000001f8 + 00026002 0x0000610a ior 0x00000012 , 0x0000003f + 00026003 0x0000610b iadd 0x00000002 , 0x0000003f + 00026004 0x0000610c store 0x00000001 , 0x000001f8 + 00026005 0x0000610d rshift8 0x0000003f , 0x0000003f + 00026006 0x0000610e store 0x00000001 , 0x000001f7 + 00026007 0x0000610f rshift8 0x0000003f , 0x0000003f + 00026008 0x00006110 store 0x00000001 , 0x000001f6 + 00026009 0x00006111 rtn + 00026010 0x00006117 hjam 0x00000001 , 0x00008010 + 00026011 0x00006118 rtn + 00026012 0x0000611f hjam 0x0000000c , 0x00008091 + 00026013 0x00006120 hjam 0x0000000d , 0x00008092 + 00026014 0x00006121 hjam 0x0000000d , 0x00008093 + 00026015 0x00006122 hjam 0x0000000d , 0x00008094 + 00026016 0x00006123 hjam 0x0000000d , 0x00008095 + 00026017 0x00006124 hjam 0x0000000c , 0x00008096 + 00026018 0x00006125 branch 0x000065a9 + 00026019 0x00006129 hjam 0x00000005 , 0x00008091 + 00026020 0x0000612a hjam 0x00000007 , 0x00008092 + 00026021 0x0000612b hjam 0x00000007 , 0x00008093 + 00026022 0x0000612c hjam 0x00000007 , 0x00008094 + 00026023 0x0000612d hjam 0x00000007 , 0x00008095 + 00026024 0x0000612e hjam 0x00000005 , 0x00008096 + 00026025 0x00006130 hfetch 0x00000001 , 0x0000807b + 00026026 0x00006131 or_into 0x000000c0 , 0x0000003f + 00026027 0x00006132 hstore 0x00000001 , 0x0000807b + 00026028 0x00006133 hfetch 0x00000001 , 0x00008081 + 00026029 0x00006134 or_into 0x00000010 , 0x0000003f + 00026030 0x00006135 hstore 0x00000001 , 0x00008081 + 00026031 0x00006136 rtn + 00026032 0x0000613b hfetch 0x00000001 , 0x0000812c + 00026033 0x0000613c bbit0 0x00000005 , 0x000065b0 + 00026034 0x0000613d rtn + 00026035 0x00006146 hstore 0x00000002 , 0x00008098 + 00026036 0x00006147 deposit 0x00000011 + 00026037 0x00006148 hstore 0x00000002 , 0x0000809a + 00026038 0x00006149 deposit 0x00000012 + 00026039 0x0000614a hstore 0x00000002 , 0x0000809c + 00026040 0x0000614b deposit 0x00000002 + 00026041 0x0000614c hstore 0x00000002 , 0x0000809e + 00026042 0x0000614d arg 0x00000001 , 0x00000002 + 00026043 0x0000614e nsetflag 0x00000034 , 0x00000001 , 0x00000002 + 00026044 0x0000614f hstore 0x00000001 , 0x00008090 + 00026045 0x00006150 hjam 0x00000004 , 0x00008006 + 00026046 0x00006151 branch 0x000065b0 + 00026047 0x00006155 set1 0x00000028 , 0x00000000 + 00026048 0x00006156 jam 0x00000008 , 0x00004211 + 00026049 0x00006157 rtn + 00026050 0x0000615a set0 0x00000028 , 0x00000000 + 00026051 0x0000615b jam 0x00000020 , 0x00004211 + 00026052 0x0000615c rtn + 00026053 0x00006160 fetch 0x00000001 , 0x00004203 + 00026054 0x00006161 iadd 0x00000012 , 0x0000003f + 00026055 0x00006162 store 0x00000001 , 0x000001f7 + 00026056 0x00006163 branch 0x000065cc + 00026057 0x00006166 fetch 0x00000002 , 0x000001f7 + 00026058 0x00006167 byteswap 0x0000003f , 0x0000003f + 00026059 0x00006168 store 0x00000001 , 0x000001f7 + 00026060 0x0000616e setarg 0x00000003 + 00026061 0x0000616f hstore 0x00000002 , 0x00008098 + 00026062 0x00006170 jam 0x000000a0 , 0x000001f6 + 00026063 0x00006171 jam 0x000000a1 , 0x000001f8 + 00026064 0x00006172 branch 0x000065eb + 00026065 0x00006179 storet 0x00000002 , 0x00000aa2 + 00026066 0x0000617a call 0x000065d6 + 00026067 0x0000617b fetcht 0x00000002 , 0x00000aa2 + 00026068 0x0000617c call 0x00006606 + 00026069 0x0000617d branch 0x000065dd + 00026070 0x00006180 fetch 0x00000001 , 0x0000423a + 00026071 0x00006181 rtneq 0x000000ff + 00026072 0x00006182 bbit0 0x00000006 , 0x000065db + 00026073 0x00006183 setarg 0x000249f0 + 00026074 0x00006184 call 0x00002a8f + 00026075 0x00006186 fetcht 0x00000001 , 0x0000423a + 00026076 0x00006187 branch 0x00006829 + 00026077 0x0000618a fetcht 0x00000001 , 0x0000423a + 00026078 0x0000618b branch 0x00006825 + 00026079 0x00006191 bpatchx 0x00000090 , 0x00004032 + 00026080 0x00006192 bmark1 0x00000028 , 0x000065c5 + 00026081 0x00006193 fetch 0x00000002 , 0x00004203 + 00026082 0x00006194 iadd 0x00000012 , 0x0000003f + 00026083 0x00006195 byteswap 0x0000003f , 0x0000003f + 00026084 0x00006196 store 0x00000002 , 0x000001f7 + 00026085 0x0000619a bpatchx 0x00000091 , 0x00004032 + 00026086 0x0000619b bmark1 0x00000028 , 0x000065c9 + 00026087 0x0000619c setarg 0x00000004 + 00026088 0x0000619d hstore 0x00000002 , 0x00008098 + 00026089 0x0000619e jam 0x000000a0 , 0x000001f6 + 00026090 0x0000619f jam 0x000000a1 , 0x000001f9 + 00026091 0x000061a1 setarg 0x000001f6 + 00026092 0x000061a2 hstore 0x00000002 , 0x0000809a + 00026093 0x000061a3 hstoret 0x00000002 , 0x0000809e + 00026094 0x000061a4 deposit 0x00000011 + 00026095 0x000061a5 hstore 0x00000002 , 0x0000809c + 00026096 0x000061a6 setarg 0x00000002 + 00026097 0x000061a7 isolate0 0x0000000f , 0x00000011 + 00026098 0x000061a8 setflag 0x00000001 , 0x00000000 , 0x0000003f + 00026099 0x000061a9 hstore 0x00000001 , 0x00008090 + 00026100 0x000061aa hjam 0x00000004 , 0x00008006 + 00026101 0x000061ab arg 0x00000005 , 0x00000007 + 00026102 0x000061ac call 0x000064c0 + 00026103 0x000061ad call 0x000065b0 + 00026104 0x000061ae isolate1 0x00000004 , 0x0000003f + 00026105 0x000061af call 0x000064b9 + 00026106 0x000061b0 bmark1 0x00000028 , 0x00006601 + 00026107 0x000061b1 fetch 0x00000002 , 0x000001f7 + 00026108 0x000061b2 byteswap 0x0000003f , 0x0000003f + 00026109 0x000061b3 iadd 0x00000002 , 0x0000003f + 00026110 0x000061b4 byteswap 0x0000003f , 0x0000003f + 00026111 0x000061b5 store 0x00000002 , 0x000001f7 + 00026112 0x000061b6 rtn + 00026113 0x000061b9 fetch 0x00000001 , 0x000001f7 + 00026114 0x000061ba iadd 0x00000002 , 0x0000003f + 00026115 0x000061bb byteswap 0x0000003f , 0x0000003f + 00026116 0x000061bc store 0x00000002 , 0x000001f7 + 00026117 0x000061bd rtn + 00026118 0x000061c4 fetch 0x00000002 , 0x00004203 + 00026119 0x000061c5 iadd 0x00000012 , 0x0000003f + 00026120 0x000061c9 store 0x00000002 , 0x00000a9a + 00026121 0x000061ca bpatchx 0x00000092 , 0x00004032 + 00026122 0x000061cb storet 0x00000002 , 0x00000aa2 + 00026123 0x000061cc copy 0x00000011 , 0x0000003f + 00026124 0x000061cd store 0x00000002 , 0x00000ab9 + 00026125 0x000061cf call 0x0000661d + 00026126 0x000061d1 fetcht 0x00000002 , 0x00000ab2 + 00026127 0x000061d2 fetch 0x00000002 , 0x00000ab9 + 00026128 0x000061d3 copy 0x0000003f , 0x00000011 + 00026129 0x000061d4 fetch 0x00000002 , 0x00000a9a + 00026130 0x000061d6 call 0x0000663d + 00026131 0x000061d8 fetch 0x00000002 , 0x00000ab2 + 00026132 0x000061d9 fetcht 0x00000002 , 0x00000ab9 + 00026133 0x000061da iadd 0x00000002 , 0x00000002 + 00026134 0x000061db storet 0x00000002 , 0x00000ab9 + 00026135 0x000061dc fetcht 0x00000002 , 0x00000a9a + 00026136 0x000061dd iadd 0x00000002 , 0x00000002 + 00026137 0x000061de storet 0x00000002 , 0x00000a9a + 00026138 0x000061df fetch 0x00000002 , 0x00000aa2 + 00026139 0x000061e0 nbranch 0x0000660d , 0x00000034 + 00026140 0x000061e1 rtn + 00026141 0x000061ea bpatchx 0x00000093 , 0x00004032 + 00026142 0x000061eb fetch 0x00000001 , 0x00004211 + 00026143 0x000061ec increase 0xffffffff , 0x0000003f + 00026144 0x000061ed fetcht 0x00000002 , 0x00000a9a + 00026145 0x000061ee ior 0x00000002 , 0x0000003f + 00026146 0x000061ef increase 0x00000001 , 0x0000003f + 00026147 0x000061f0 store 0x00000003 , 0x00000ab6 + 00026148 0x000061f2 fetch 0x00000002 , 0x00000aa2 + 00026149 0x000061f3 iadd 0x00000002 , 0x0000003f + 00026150 0x000061f5 fetcht 0x00000003 , 0x00000ab6 + 00026151 0x000061f6 isub 0x00000002 , 0x0000003f + 00026152 0x000061f7 nbranch 0x0000662f , 0x00000002 + 00026153 0x000061f8 store 0x00000002 , 0x00000aa2 + 00026154 0x000061f9 fetch 0x00000003 , 0x00000ab6 + 00026155 0x000061fa fetcht 0x00000002 , 0x00000a9a + 00026156 0x000061fb isub 0x00000002 , 0x0000003f + 00026157 0x000061fc store 0x00000002 , 0x00000ab2 + 00026158 0x000061fd rtn + 00026159 0x000061ff fetch 0x00000002 , 0x00000aa2 + 00026160 0x00006200 store 0x00000002 , 0x00000ab2 + 00026161 0x00006201 setarg 0x00000000 + 00026162 0x00006202 store 0x00000002 , 0x00000aa2 + 00026163 0x00006203 rtn + 00026164 0x00006206 increase 0x00000002 , 0x00000002 + 00026165 0x00006207 hstoret 0x00000002 , 0x00008098 + 00026166 0x00006208 increase 0xfffffffe , 0x00000011 + 00026167 0x00006209 ifetcht 0x00000003 , 0x00000011 + 00026168 0x0000620a copy 0x00000002 , 0x00000012 + 00026169 0x0000620b arg 0x000000a0 , 0x00000002 + 00026170 0x0000620c istoret 0x00000001 , 0x00000011 + 00026171 0x0000620e istore 0x00000001 , 0x00000005 + 00026172 0x0000620f branch 0x0000664a + 00026173 0x00006213 copy 0x0000003f , 0x00000012 + 00026174 0x00006214 bpatchx 0x00000094 , 0x00004032 + 00026175 0x00006215 bmark1 0x00000028 , 0x00006634 + 00026176 0x00006216 copy 0x00000012 , 0x0000003f + 00026177 0x00006217 increase 0x00000003 , 0x00000002 + 00026178 0x00006218 hstoret 0x00000002 , 0x00008098 + 00026179 0x00006219 increase 0xfffffffd , 0x00000011 + 00026180 0x0000621a ifetcht 0x00000003 , 0x00000011 + 00026181 0x0000621b copy 0x00000002 , 0x00000012 + 00026182 0x0000621c arg 0x000000a0 , 0x00000002 + 00026183 0x0000621d istoret 0x00000001 , 0x00000011 + 00026184 0x0000621e byteswap 0x0000003f , 0x0000003f + 00026185 0x0000621f istore 0x00000002 , 0x00000005 + 00026186 0x00006221 deposit 0x00000011 + 00026187 0x00006222 hstore 0x00000002 , 0x0000809a + 00026188 0x00006223 setarg 0x00000000 + 00026189 0x00006224 hstore 0x00000002 , 0x0000809e + 00026190 0x00006225 hjam 0x00000001 , 0x00008090 + 00026191 0x00006226 hjam 0x00000004 , 0x00008006 + 00026192 0x00006227 call 0x000065b0 + 00026193 0x00006228 copy 0x00000012 , 0x0000003f + 00026194 0x00006229 istore 0x00000003 , 0x00000011 + 00026195 0x0000622c bpatchx 0x00000095 , 0x00004032 + 00026196 0x0000622d jam 0x00000000 , 0x000001f9 + 00026197 0x0000622f setarg 0x00000001 + 00026198 0x00006230 hstore 0x00000002 , 0x00008098 + 00026199 0x00006231 jam 0x000000a0 , 0x000001f6 + 00026200 0x00006232 setarg 0x000001f6 + 00026201 0x00006233 hstore 0x00000002 , 0x0000809a + 00026202 0x00006234 setarg 0x00000000 + 00026203 0x00006235 hstore 0x00000002 , 0x0000809e + 00026204 0x00006236 hstore 0x00000002 , 0x0000809c + 00026205 0x00006237 setarg 0x00000003 + 00026206 0x00006238 hstore 0x00000001 , 0x00008090 + 00026207 0x00006239 hjam 0x00000004 , 0x00008006 + 00026208 0x0000623a call 0x000065b0 + 00026209 0x0000623b hfetch 0x00000001 , 0x0000812c + 00026210 0x0000623c rtnbit0 0x00000006 + 00026211 0x0000623d nop 0x000005dc + 00026212 0x0000623e fetch 0x00000001 , 0x000001f9 + 00026213 0x0000623f increase 0x00000001 , 0x0000003f + 00026214 0x00006240 store 0x00000001 , 0x000001f9 + 00026215 0x00006241 sub 0x0000003f , 0x00000028 , 0x0000003e + 00026216 0x00006242 nrtn 0x00000002 + 00026217 0x00006243 branch 0x00006655 + 00026218 0x00006248 hjam 0x00000070 , 0x00008973 + 00026219 0x00006249 nop 0x00000bb8 + 00026220 0x0000624a rtn + 00026221 0x0000624d hjam 0x00000030 , 0x00008973 + 00026222 0x0000624e rtn + 00026223 0x00006251 lshift3 0x0000003f , 0x0000003f + 00026224 0x00006252 hstore 0x00000002 , 0x00008045 + 00026225 0x00006253 hjam 0x00000000 , 0x0000804b + 00026226 0x00006254 rtn + 00026227 0x00006258 call 0x0000666f + 00026228 0x00006259 call 0x000066a0 + 00026229 0x0000625b ifetcht 0x00000001 , 0x00000011 + 00026230 0x0000625c increase 0x00000001 , 0x00000011 + 00026231 0x0000625d force 0x00000000 , 0x00000007 + 00026232 0x0000625f qisolate0 0x00000002 + 00026233 0x00006260 branch 0x00006697 , 0x00000001 + 00026234 0x00006261 hfetch 0x00000001 , 0x00008046 + 00026235 0x00006262 set1 0x00000006 , 0x0000003f + 00026236 0x00006263 set1 0x00000007 , 0x0000003f + 00026237 0x00006264 hstore 0x00000001 , 0x00008046 + 00026238 0x00006265 hjam 0x00000002 , 0x00008047 + 00026239 0x00006266 hjam 0x00000082 , 0x00008047 + 00026240 0x00006267 set0 0x00000007 , 0x0000003f + 00026241 0x00006268 hstore 0x00000001 , 0x00008046 + 00026242 0x00006269 hjam 0x0000008a , 0x00008047 + 00026243 0x0000626a nop 0x0000000b + 00026244 0x0000626b hjam 0x000000ca , 0x00008047 + 00026245 0x0000626c nop 0x00000021 + 00026246 0x0000626d hjam 0x0000004a , 0x00008047 + 00026247 0x0000626e nop 0x0000002c + 00026248 0x0000626f hjam 0x000000ca , 0x00008047 + 00026249 0x00006270 nop 0x00000016 + 00026250 0x00006271 hjam 0x0000008a , 0x00008047 + 00026251 0x00006272 nop 0x00000021 + 00026252 0x00006273 hjam 0x00000082 , 0x00008047 + 00026253 0x00006274 nop 0x00000001 + 00026254 0x00006275 hjam 0x00000092 , 0x00008047 + 00026255 0x00006276 nop 0x0000000a + 00026256 0x00006277 hjam 0x000000b2 , 0x00008047 + 00026257 0x00006278 hfetch 0x00000001 , 0x00008007 + 00026258 0x00006279 hjam 0x00000092 , 0x00008047 + 00026259 0x0000627a nop 0x00000001 + 00026260 0x0000627b hjam 0x00000082 , 0x00008047 + 00026261 0x0000627c qisolate0 0x0000003f + 00026262 0x0000627d branch 0x00006678 , 0x00000001 + 00026263 0x0000627f hfetch 0x00000002 , 0x00008045 + 00026264 0x00006280 increase 0x00000001 , 0x0000003f + 00026265 0x00006281 hstore 0x00000002 , 0x00008045 + 00026266 0x00006282 increase 0x00000001 , 0x00000007 + 00026267 0x00006283 compare 0x00000008 , 0x00000007 , 0x0000000f + 00026268 0x00006284 nbranch 0x00006678 , 0x00000001 + 00026269 0x00006285 loop 0x00006675 + 00026270 0x00006286 hjam 0x00000083 , 0x00008047 + 00026271 0x00006287 rtn + 00026272 0x0000628a hjam 0x00000082 , 0x00008047 + 00026273 0x0000628b nop 0x0000000c + 00026274 0x0000628c hjam 0x00000080 , 0x00008047 + 00026275 0x0000628d hjam 0x00000082 , 0x00008047 + 00026276 0x0000628e nop 0x00000096 + 00026277 0x0000628f rtn + 00026278 0x00006293 call 0x000066a0 + 00026279 0x00006294 hjam 0x000000a2 , 0x00008047 + 00026280 0x00006295 deposit 0x00000011 + 00026281 0x00006296 hstore 0x00000002 , 0x00008048 + 00026282 0x00006297 set1 0x0000000b , 0x00000002 + 00026283 0x00006298 isolate0 0x0000000f , 0x0000003f + 00026284 0x00006299 setflag 0x00000001 , 0x0000000f , 0x00000002 + 00026285 0x0000629a hstoret 0x00000002 , 0x0000804a + 00026286 0x0000629b hjam 0x00000001 , 0x00008006 + 00026287 0x0000629c rtn + 00026288 0x0000629f hfetch 0x00000001 , 0x0000812c + 00026289 0x000062a0 bbit0 0x00000001 , 0x000066b0 + 00026290 0x000062a1 rtn + 00026291 0x000062a5 call 0x0000666f + 00026292 0x000062a6 call 0x000066a6 + 00026293 0x000062a7 call 0x000066b0 + 00026294 0x000062a8 hjam 0x00000083 , 0x00008047 + 00026295 0x000062a9 rtn + 00026296 0x000062af hfetch 0x00000002 , 0x00008124 + 00026297 0x000062b0 hstore 0x00000002 , 0x00008045 + 00026298 0x000062b1 call 0x000066a6 + 00026299 0x000062b2 arg 0x00000001 , 0x00000007 + 00026300 0x000062b3 call 0x000064c0 + 00026301 0x000062b4 call 0x000066b0 + 00026302 0x000062b5 isolate1 0x00000000 , 0x0000003f + 00026303 0x000062b6 call 0x000064b9 + 00026304 0x000062b7 hjam 0x00000083 , 0x00008047 + 00026305 0x000062b8 rtn + 00026306 0x000062bc hfetch 0x00000002 , 0x0000805e + 00026307 0x000062bd iforce 0x0000000a + 00026308 0x000062be rtn + 00026309 0x000062c1 deposit 0x0000000a + 00026310 0x000062c2 hstore 0x00000002 , 0x0000805e + 00026311 0x000062c3 rtn + 00026312 0x000062c6 deposit 0x00000003 + 00026313 0x000062c7 hstore 0x00000002 , 0x00008058 + 00026314 0x000062c8 rtn + 00026315 0x000062cb hfetch 0x00000002 , 0x00008058 + 00026316 0x000062cc copy 0x0000003f , 0x00000003 + 00026317 0x000062cd rtn + 00026318 0x000062d0 fetch 0x00000002 , 0x00004243 + 00026319 0x000062d1 hstore 0x00000002 , 0x00008052 + 00026320 0x000062d2 rtn + 00026321 0x000062d5 deposit 0x00000039 + 00026322 0x000062d6 rtn 0x00000034 + 00026323 0x000062d8 increase 0xfffffff8 , 0x00000039 + 00026324 0x000062d9 call 0x000066de , 0x00000002 + 00026325 0x000062da rtn 0x00000005 + 00026326 0x000062db branch 0x000066d3 , 0x00000002 + 00026327 0x000062dc increase 0x00000008 , 0x00000039 + 00026328 0x000062de increase 0xfffffffc , 0x00000039 + 00026329 0x000062df call 0x000066e1 , 0x00000002 + 00026330 0x000062e0 rtn 0x00000005 + 00026331 0x000062e1 branch 0x000066d8 , 0x00000002 + 00026332 0x000062e2 increase 0x00000004 , 0x00000039 + 00026333 0x000062e3 branch 0x000066e4 + 00026334 0x000062e6 ifetch 0x00000008 , 0x00000006 + 00026335 0x000062e7 istore 0x00000008 , 0x0000000a + 00026336 0x000062e8 rtn + 00026337 0x000062eb ifetch 0x00000004 , 0x00000006 + 00026338 0x000062ec istore 0x00000004 , 0x0000000a + 00026339 0x000062ed rtn + 00026340 0x000062f0 deposit 0x00000039 + 00026341 0x000062f1 rtn 0x00000034 + 00026342 0x000062f3 ifetch 0x00000001 , 0x00000006 + 00026343 0x000062f4 istore 0x00000001 , 0x0000000a + 00026344 0x000062f5 loop 0x000066e6 + 00026345 0x000062f6 rtn + 00026346 0x000062f9 deposit 0x00000039 + 00026347 0x000062fa rtn 0x00000034 + 00026348 0x000062fc increase 0xfffffff8 , 0x00000039 + 00026349 0x000062fd call 0x000066f7 , 0x00000002 + 00026350 0x000062fe rtn 0x00000005 + 00026351 0x000062ff branch 0x000066ec , 0x00000002 + 00026352 0x00006300 increase 0x00000008 , 0x00000039 + 00026353 0x00006302 increase 0xfffffffc , 0x00000039 + 00026354 0x00006303 call 0x000066fa , 0x00000002 + 00026355 0x00006304 rtn 0x00000005 + 00026356 0x00006305 branch 0x000066f1 , 0x00000002 + 00026357 0x00006306 increase 0x00000004 , 0x00000039 + 00026358 0x00006307 branch 0x000066fd + 00026359 0x0000630a ifetch 0x00000008 , 0x00000003 + 00026360 0x0000630b istore 0x00000008 , 0x00000005 + 00026361 0x0000630c rtn + 00026362 0x0000630f ifetch 0x00000004 , 0x00000003 + 00026363 0x00006310 istore 0x00000004 , 0x00000005 + 00026364 0x00006311 rtn + 00026365 0x00006315 deposit 0x00000039 + 00026366 0x00006316 rtn 0x00000034 + 00026367 0x00006318 ifetch 0x00000001 , 0x00000003 + 00026368 0x00006319 istore 0x00000001 , 0x00000005 + 00026369 0x0000631a loop 0x000066ff + 00026370 0x0000631b rtn + 00026371 0x0000631f deposit 0x00000039 + 00026372 0x00006320 rtn 0x00000034 + 00026373 0x00006322 ifetch 0x00000001 , 0x00000003 + 00026374 0x00006323 istore 0x00000001 , 0x0000000a + 00026375 0x00006324 loop 0x00006705 + 00026376 0x00006325 rtn + 00026377 0x0000632b jam 0x0000003d , 0x00000a99 + 00026378 0x0000632c branch 0x00007d86 + 00026379 0x00006330 bpatchx 0x00000096 , 0x00004032 + 00026380 0x00006331 fetch 0x00000001 , 0x00004217 + 00026381 0x00006332 rtn 0x00000034 + 00026382 0x00006333 call 0x000067a3 + 00026383 0x00006334 call 0x000067a9 , 0x00000005 + 00026384 0x00006335 call 0x0000673e + 00026385 0x00006337 fetch 0x00000001 , 0x00004217 + 00026386 0x00006338 icopy 0x00000013 + 00026387 0x00006339 fetcht 0x00000002 , 0x00004215 + 00026388 0x0000633a storet 0x00000002 , 0x0000018c + 00026389 0x0000633c copy 0x00000013 , 0x0000003f + 00026390 0x0000633d branch 0x00006709 , 0x00000034 + 00026391 0x0000633e increase 0xffffffff , 0x00000013 + 00026392 0x0000633f copy 0x00000002 , 0x00000011 + 00026393 0x00006340 ifetch 0x00000001 , 0x00000011 + 00026394 0x00006341 fetcht 0x00000001 , 0x00000184 + 00026395 0x00006342 isub 0x00000002 , 0x0000003e + 00026396 0x00006343 call 0x00006725 , 0x00000005 + 00026397 0x00006344 branch 0x00006721 , 0x00000002 + 00026398 0x00006345 ifetch 0x00000001 , 0x00000011 + 00026399 0x00006346 increase 0x00000001 , 0x0000003f + 00026400 0x00006347 istore 0x00000001 , 0x00000011 + 00026401 0x00006349 fetcht 0x00000002 , 0x0000018c + 00026402 0x0000634a increase 0x00000022 , 0x00000002 + 00026403 0x0000634b storet 0x00000002 , 0x0000018c + 00026404 0x0000634c branch 0x00006715 + 00026405 0x0000634f setarg 0x00000000 + 00026406 0x00006350 istore 0x00000001 , 0x00000011 + 00026407 0x00006351 fetch 0x00000001 , 0x00000185 + 00026408 0x00006352 istore 0x00000001 , 0x00000005 + 00026409 0x00006353 bne 0x00000033 , 0x00006733 + 00026410 0x00006354 arg 0x000041be , 0x00000012 + 00026411 0x00006356 ifetch 0x00000006 , 0x00000006 + 00026412 0x00006357 istore 0x00000008 , 0x00000005 + 00026413 0x00006358 setarg 0x00000000 + 00026414 0x00006359 istore 0x00000008 , 0x00000005 + 00026415 0x0000635a copy 0x00000012 , 0x00000006 + 00026416 0x0000635c call 0x00007ebf + 00026417 0x0000635d force 0x00000001 , 0x0000003e + 00026418 0x0000635e rtn + 00026419 0x00006361 beq 0x00000036 , 0x00006737 + 00026420 0x00006362 beq 0x00000037 , 0x0000673b + 00026421 0x00006363 arg 0x00004419 , 0x00000012 + 00026422 0x00006364 branch 0x0000672b + 00026423 0x00006367 arg 0x000044d5 , 0x00000006 + 00026424 0x00006368 call 0x00007ebf + 00026425 0x0000636a arg 0x00004419 , 0x00000006 + 00026426 0x0000636b branch 0x00006730 + 00026427 0x0000636e arg 0x000044cd , 0x00000006 + 00026428 0x0000636f call 0x00007ebf + 00026429 0x00006370 branch 0x00006739 + 00026430 0x00006374 call 0x00007fe9 + 00026431 0x00006375 fetch 0x00000001 , 0x00004217 + 00026432 0x00006376 rtn 0x00000034 + 00026433 0x00006377 fetch 0x00000002 , 0x00004682 + 00026434 0x00006378 bbit1 0x00000000 , 0x00006754 + 00026435 0x0000637a bpatchx 0x00000097 , 0x00004032 + 00026436 0x0000637b fetch 0x00000001 , 0x0000448e + 00026437 0x0000637c beq 0x00000000 , 0x0000674d + 00026438 0x0000637d fetch 0x00000001 , 0x00000454 + 00026439 0x0000637e compare 0x000000c0 , 0x0000003f , 0x000000c0 + 00026440 0x0000637f branch 0x0000674d , 0x00000001 + 00026441 0x00006380 compare 0x00000040 , 0x0000003f , 0x000000c0 + 00026442 0x00006381 branch 0x00006752 , 0x00000001 + 00026443 0x00006382 compare 0x00000000 , 0x0000003f , 0x000000c0 + 00026444 0x00006383 branch 0x00006750 , 0x00000001 + 00026445 0x00006385 jam 0x00000035 , 0x00000185 + 00026446 0x00006386 fetch 0x00000006 , 0x0000044f + 00026447 0x00006387 branch 0x00006757 + 00026448 0x0000638a jam 0x00000037 , 0x00000185 + 00026449 0x0000638b branch 0x00006757 + 00026450 0x0000638f jam 0x00000036 , 0x00000185 + 00026451 0x00006390 branch 0x00006757 + 00026452 0x00006394 bpatchx 0x00000098 , 0x00004033 + 00026453 0x00006395 jam 0x00000033 , 0x00000185 + 00026454 0x00006396 fetch 0x00000006 , 0x00000040 + 00026455 0x00006398 store 0x00000006 , 0x00000186 + 00026456 0x00006399 fetch 0x00000002 , 0x00004215 + 00026457 0x0000639a ifetcht 0x00000001 , 0x0000003f + 00026458 0x0000639b pincrease 0x00000001 + 00026459 0x0000639c store 0x00000002 , 0x0000018c + 00026460 0x0000639d storet 0x00000001 , 0x00000184 + 00026461 0x0000639e fetch 0x00000001 , 0x00004217 + 00026462 0x0000639f icopy 0x00000013 + 00026463 0x000063a1 fetch 0x00000002 , 0x0000018c + 00026464 0x000063a2 copy 0x0000003f , 0x00000011 + 00026465 0x000063a3 call 0x0000676f + 00026466 0x000063a4 rtn 0x00000028 + 00026467 0x000063a5 fetcht 0x00000002 , 0x0000018c + 00026468 0x000063a6 increase 0x00000022 , 0x00000002 + 00026469 0x000063a7 storet 0x00000002 , 0x0000018c + 00026470 0x000063a8 increase 0xffffffff , 0x00000002 + 00026471 0x000063a9 ifetch 0x00000001 , 0x00000002 + 00026472 0x000063aa store 0x00000001 , 0x00000184 + 00026473 0x000063ab increase 0xffffffff , 0x00000013 + 00026474 0x000063ac nbranch 0x0000675f , 0x00000005 + 00026475 0x000063ad fetch 0x00000001 , 0x00004217 + 00026476 0x000063ae pincrease 0xffffffff + 00026477 0x000063af store 0x00000001 , 0x00000184 + 00026478 0x000063b0 rtn + 00026479 0x000063b2 fetch 0x00000001 , 0x00000185 + 00026480 0x000063b3 bne 0x00000033 , 0x00006776 + 00026481 0x000063b5 arg 0x00000185 , 0x00000012 + 00026482 0x000063b6 arg 0x00000007 , 0x00000039 + 00026483 0x000063b7 call 0x00007f88 + 00026484 0x000063b8 branch 0x00007fe7 , 0x00000005 + 00026485 0x000063b9 rtn + 00026486 0x000063bc beq 0x00000036 , 0x00006779 + 00026487 0x000063bd beq 0x00000037 , 0x00006794 + 00026488 0x000063be branch 0x00006771 + 00026489 0x000063c1 ifetcht 0x00000001 , 0x00000011 + 00026490 0x000063c2 isub 0x00000002 , 0x0000003e + 00026491 0x000063c3 nrtn 0x00000005 + 00026492 0x000063c4 arg 0x00000ac2 , 0x00000005 + 00026493 0x000063c5 arg 0x00000010 , 0x00000039 + 00026494 0x000063c6 call 0x00007ed4 + 00026495 0x000063c7 fetch 0x00000003 , 0x00000452 + 00026496 0x000063c8 store 0x00000003 , 0x00000ac2 + 00026497 0x000063c9 call 0x0000678b + 00026498 0x000063ca fetch 0x00000002 , 0x00000adf + 00026499 0x000063cb byteswap 0x0000003f , 0x0000003f + 00026500 0x000063cc lshift8 0x0000003f , 0x00000002 + 00026501 0x000063cd ifetch 0x00000001 , 0x00000006 + 00026502 0x000063ce iadd 0x00000002 , 0x0000003f + 00026503 0x000063cf fetcht 0x00000003 , 0x0000044f + 00026504 0x000063d0 isub 0x00000002 , 0x0000003e + 00026505 0x000063d1 branch 0x00007fe7 , 0x00000005 + 00026506 0x000063d2 rtn + 00026507 0x000063d6 arg 0x00000ac2 , 0x00000006 + 00026508 0x000063d7 call 0x00007486 + 00026509 0x000063d9 ifetch 0x00000001 , 0x00000011 + 00026510 0x000063da call 0x00007487 + 00026511 0x000063db force 0x00000038 , 0x00000036 + 00026512 0x000063dc force 0x00000000 , 0x00000036 + 00026513 0x000063dd call 0x0000741d + 00026514 0x000063de arg 0x00000ad2 , 0x00000005 + 00026515 0x000063df branch 0x00007497 + 00026516 0x000063e2 ifetcht 0x00000001 , 0x00000011 + 00026517 0x000063e3 isub 0x00000002 , 0x0000003e + 00026518 0x000063e4 nrtn 0x00000005 + 00026519 0x000063e5 copy 0x00000006 , 0x00000011 + 00026520 0x000063e6 add 0x00000006 , 0x00000008 , 0x00000013 + 00026521 0x000063e7 arg 0x000044cd , 0x00000012 + 00026522 0x000063e8 arg 0x00000008 , 0x00000039 + 00026523 0x000063e9 call 0x00007f88 + 00026524 0x000063ea branch 0x00007fe7 , 0x00000005 + 00026525 0x000063eb copy 0x00000013 , 0x00000011 + 00026526 0x000063ec arg 0x000044d5 , 0x00000012 + 00026527 0x000063ed arg 0x00000008 , 0x00000039 + 00026528 0x000063ee call 0x00007f88 + 00026529 0x000063ef branch 0x00007fe7 , 0x00000005 + 00026530 0x000063f0 rtn + 00026531 0x000063f3 fetch 0x00000002 , 0x00004215 + 00026532 0x000063f4 ifetcht 0x00000001 , 0x0000003f + 00026533 0x000063f5 pincrease 0x00000022 + 00026534 0x000063f6 ifetch 0x00000001 , 0x0000003f + 00026535 0x000063f7 isub 0x00000002 , 0x0000003e + 00026536 0x000063f8 rtn + 00026537 0x000063fb fetch 0x00000001 , 0x00004217 + 00026538 0x000063fc icopy 0x00000039 + 00026539 0x000063fd fetcht 0x00000002 , 0x00004215 + 00026540 0x000063fe setarg 0x00000000 + 00026541 0x00006400 istore 0x00000001 , 0x00000002 + 00026542 0x00006401 increase 0x00000022 , 0x00000002 + 00026543 0x00006402 pincrease 0x00000001 + 00026544 0x00006403 loop 0x000067ad + 00026545 0x00006404 rtn + 00026546 0x00006407 bpatchx 0x00000099 , 0x00004033 + 00026547 0x00006408 call 0x0000673e + 00026548 0x00006409 fetch 0x00000001 , 0x00000030 + 00026549 0x0000640a setflag 0x00000028 , 0x00000006 , 0x0000003f + 00026550 0x0000640b store 0x00000001 , 0x00000030 + 00026551 0x0000640c nbranch 0x000067bc , 0x00000028 + 00026552 0x0000640d add 0x00000011 , 0x0000000a , 0x00000006 + 00026553 0x0000640f arg 0x000041be , 0x00000005 + 00026554 0x00006410 call 0x00007ebf + 00026555 0x00006411 branch 0x000067d7 + 00026556 0x00006413 jam 0x00000000 , 0x000041bd + 00026557 0x00006414 rtn + 00026558 0x00006417 fetch 0x00000009 , 0x000044cb + 00026559 0x00006418 branch 0x000067ca , 0x00000034 + 00026560 0x00006419 call 0x0000673e + 00026561 0x0000641a nbranch 0x000067ca , 0x00000028 + 00026562 0x0000641b fetch 0x00000002 , 0x0000018c + 00026563 0x0000641c add 0x0000003f , 0x00000001 , 0x00000006 + 00026564 0x0000641d arg 0x000044d5 , 0x00000005 + 00026565 0x0000641e call 0x00007ebf + 00026566 0x0000641f arg 0x00004419 , 0x00000005 + 00026567 0x00006420 call 0x00007ebf + 00026568 0x00006421 jam 0x00000001 , 0x00004429 + 00026569 0x00006422 rtn + 00026570 0x00006425 jam 0x00000000 , 0x00004429 + 00026571 0x00006426 rtn + 00026572 0x0000642a fetch 0x00000006 , 0x0000044f + 00026573 0x0000642b store 0x00000006 , 0x00000186 + 00026574 0x0000642c jam 0x00000034 , 0x00000185 + 00026575 0x0000642d branch 0x000067d3 + 00026576 0x0000642f fetch 0x00000006 , 0x00000040 + 00026577 0x00006430 store 0x00000006 , 0x00000186 + 00026578 0x00006431 jam 0x00000033 , 0x00000185 + 00026579 0x00006433 fetch 0x00000001 , 0x00004092 + 00026580 0x00006434 beq 0x0000000a , 0x0000670b + 00026581 0x00006435 bbit1 0x00000006 , 0x000042da + 00026582 0x00006436 rtn + 00026583 0x0000643a fetch 0x00000008 , 0x000041be + 00026584 0x0000643b fetcht 0x00000008 , 0x000041c6 + 00026585 0x0000643c ior 0x00000002 , 0x0000003f + 00026586 0x0000643d rtn 0x00000034 + 00026587 0x0000643e jam 0x00000001 , 0x000041bd + 00026588 0x0000643f rtn + 00026589 0x00006447 bpatchx 0x0000009a , 0x00004033 + 00026590 0x00006448 set1 0x00000007 , 0x00000002 + 00026591 0x00006449 call 0x0000681d + 00026592 0x0000644a nsetflag 0x00000001 , 0x00000007 , 0x00000002 + 00026593 0x00006450 bpatchx 0x0000009b , 0x00004033 + 00026594 0x00006451 sub 0x00000002 , 0x000000ff , 0x0000003e + 00026595 0x00006452 rtn 0x00000005 + 00026596 0x00006453 isolate0 0x00000007 , 0x00000002 + 00026597 0x00006454 and 0x00000002 , 0x0000001f , 0x00000007 + 00026598 0x00006455 fetch 0x00000004 , 0x000000a1 + 00026599 0x00006456 qsetflag 0x00000001 , 0x0000003f + 00026600 0x00006457 store 0x00000004 , 0x000000a1 + 00026601 0x00006458 fetch 0x00000004 , 0x000000a5 + 00026602 0x00006459 nqsetflag 0x00000001 , 0x0000003f + 00026603 0x0000645a store 0x00000004 , 0x000000a5 + 00026604 0x0000645b rtn + 00026605 0x0000645f bpatchx 0x0000009c , 0x00004033 + 00026606 0x00006460 sub 0x00000002 , 0x000000ff , 0x0000003e + 00026607 0x00006461 rtn 0x00000005 + 00026608 0x00006462 isolate0 0x00000007 , 0x00000002 + 00026609 0x00006463 and 0x00000002 , 0x0000001f , 0x00000007 + 00026610 0x00006464 fetch 0x00000004 , 0x000000a1 + 00026611 0x00006465 qset0 0x0000003f + 00026612 0x00006466 store 0x00000004 , 0x000000a1 + 00026613 0x00006467 fetch 0x00000004 , 0x000000a5 + 00026614 0x00006468 qset0 0x0000003f + 00026615 0x00006469 store 0x00000004 , 0x000000a5 + 00026616 0x0000646a rtn + 00026617 0x0000646e call 0x000067ed + 00026618 0x0000646f branch 0x000067fe + 00026619 0x00006473 sub 0x00000002 , 0x000000ff , 0x0000003e + 00026620 0x00006474 rtn 0x00000005 + 00026621 0x00006475 ncall 0x000067e1 , 0x0000002b + 00026622 0x00006478 arg 0x0000807c , 0x00000005 + 00026623 0x00006479 call 0x00006830 + 00026624 0x0000647a setflip 0x00000007 , 0x00000002 + 00026625 0x0000647b arg 0x00008078 , 0x00000005 + 00026626 0x0000647c call 0x00006830 + 00026627 0x0000647d set0 0x00000007 , 0x00000002 + 00026628 0x0000647e arg 0x00008070 , 0x00000005 + 00026629 0x0000647f branch 0x00006830 + 00026630 0x00006483 arg 0x0000807c , 0x00000005 + 00026631 0x00006484 call 0x00006830 + 00026632 0x00006485 set0 0x00000007 , 0x00000002 + 00026633 0x00006486 arg 0x00008078 , 0x00000005 + 00026634 0x00006487 call 0x00006830 + 00026635 0x00006488 set0 0x00000007 , 0x00000002 + 00026636 0x00006489 arg 0x00008070 , 0x00000005 + 00026637 0x0000648a branch 0x00006830 + 00026638 0x0000648f sub 0x00000002 , 0x000000ff , 0x0000003e + 00026639 0x00006490 rtn 0x00000005 + 00026640 0x00006491 setflip 0x00000007 , 0x00000002 + 00026641 0x00006492 call 0x0000682f + 00026642 0x00006494 set1 0x00000007 , 0x00000002 + 00026643 0x00006495 arg 0x00008070 , 0x00000005 + 00026644 0x00006496 branch 0x00006830 + 00026645 0x00006499 and 0x00000002 , 0x00000007 , 0x00000007 + 00026646 0x0000649a rshift3 0x00000002 , 0x0000003f + 00026647 0x0000649b and_into 0x00000003 , 0x0000003f + 00026648 0x0000649c iadd 0x00000005 , 0x00000005 + 00026649 0x0000649d ifetch 0x00000001 , 0x00000005 + 00026650 0x0000649e rtn + 00026651 0x000064a1 arg 0x00008074 , 0x00000005 + 00026652 0x000064a2 branch 0x0000681e + 00026653 0x000064a7 arg 0x0000811c , 0x00000005 + 00026654 0x000064a9 call 0x00006815 + 00026655 0x000064aa isolate1 0x00000007 , 0x00000002 + 00026656 0x000064ab branch 0x00006823 , 0x00000001 + 00026657 0x000064ac qisolate0 0x0000003f + 00026658 0x000064ad rtn + 00026659 0x000064af qisolate1 0x0000003f + 00026660 0x000064b0 rtn + 00026661 0x000064b3 sub 0x00000002 , 0x000000ff , 0x0000003e + 00026662 0x000064b4 rtn 0x00000005 + 00026663 0x000064b5 isolate1 0x00000007 , 0x0000003e + 00026664 0x000064b6 branch 0x0000682c + 00026665 0x000064b9 sub 0x00000002 , 0x000000ff , 0x0000003e + 00026666 0x000064ba rtn 0x00000005 + 00026667 0x000064bb isolate0 0x00000007 , 0x0000003e + 00026668 0x000064bf setarg 0x00000000 + 00026669 0x000064c0 nsetflag 0x00000001 , 0x00000007 , 0x0000003f + 00026670 0x000064c1 ixor 0x00000002 , 0x00000002 + 00026671 0x000064c5 arg 0x00008074 , 0x00000005 + 00026672 0x000064c9 call 0x00006815 + 00026673 0x000064ca isolate1 0x00000007 , 0x00000002 + 00026674 0x000064cb qsetflag 0x00000001 , 0x0000003f + 00026675 0x000064cc istore 0x00000001 , 0x00000005 + 00026676 0x000064cd rtn + 00026677 0x000064d0 arg 0xffffffff , 0x00000011 + 00026678 0x000064d1 hfetch 0x00000001 , 0x00008081 + 00026679 0x000064d2 compare 0x00000002 , 0x0000003f , 0x00000003 + 00026680 0x000064d3 call 0x00006878 , 0x00000001 + 00026681 0x000064d5 compare 0x00000001 , 0x0000003f , 0x00000003 + 00026682 0x000064d6 call 0x0000687a , 0x00000001 + 00026683 0x000064d8 compare 0x00000003 , 0x0000003f , 0x00000003 + 00026684 0x000064d9 call 0x0000687a , 0x00000001 + 00026685 0x000064db isolate1 0x00000002 , 0x0000003f + 00026686 0x000064dc call 0x00006874 , 0x00000001 + 00026687 0x000064de isolate1 0x00000003 , 0x0000003f + 00026688 0x000064df call 0x00006876 , 0x00000001 + 00026689 0x000064e1 isolate1 0x00000004 , 0x0000003f + 00026690 0x000064e2 call 0x0000687c , 0x00000001 + 00026691 0x000064e4 isolate1 0x00000006 , 0x0000003f + 00026692 0x000064e5 nsetflag 0x00000001 , 0x00000004 , 0x00000011 + 00026693 0x000064e7 isolate1 0x00000007 , 0x0000003f + 00026694 0x000064e8 nsetflag 0x00000001 , 0x00000005 , 0x00000011 + 00026695 0x000064ea hfetch 0x00000001 , 0x00008082 + 00026696 0x000064eb isolate1 0x00000000 , 0x0000003f + 00026697 0x000064ec nsetflag 0x00000001 , 0x0000001b , 0x00000011 + 00026698 0x000064ed isolate1 0x00000001 , 0x0000003f + 00026699 0x000064ee nsetflag 0x00000001 , 0x0000001c , 0x00000011 + 00026700 0x000064ef isolate1 0x00000002 , 0x0000003f + 00026701 0x000064f0 nsetflag 0x00000001 , 0x00000003 , 0x00000011 + 00026702 0x000064f1 isolate1 0x00000003 , 0x0000003f + 00026703 0x000064f2 nsetflag 0x00000001 , 0x00000008 , 0x00000011 + 00026704 0x000064f3 isolate1 0x00000004 , 0x0000003f + 00026705 0x000064f4 nsetflag 0x00000001 , 0x00000014 , 0x00000011 + 00026706 0x000064f5 isolate1 0x00000005 , 0x0000003f + 00026707 0x000064f6 nsetflag 0x00000001 , 0x00000015 , 0x00000011 + 00026708 0x000064f7 isolate1 0x00000006 , 0x0000003f + 00026709 0x000064f8 nsetflag 0x00000001 , 0x00000016 , 0x00000011 + 00026710 0x000064f9 isolate1 0x00000007 , 0x0000003f + 00026711 0x000064fa nsetflag 0x00000001 , 0x00000017 , 0x00000011 + 00026712 0x000064fc hfetch 0x00000001 , 0x00008080 + 00026713 0x000064fd isolate1 0x00000000 , 0x0000003f + 00026714 0x000064fe nsetflag 0x00000001 , 0x00000005 , 0x00000011 + 00026715 0x000064ff isolate1 0x00000001 , 0x0000003f + 00026716 0x00006500 nsetflag 0x00000001 , 0x00000006 , 0x00000011 + 00026717 0x00006501 isolate1 0x00000002 , 0x0000003f + 00026718 0x00006502 nsetflag 0x00000001 , 0x00000007 , 0x00000011 + 00026719 0x00006503 isolate1 0x00000003 , 0x0000003f + 00026720 0x00006504 nsetflag 0x00000001 , 0x00000012 , 0x00000011 + 00026721 0x00006505 isolate1 0x00000004 , 0x0000003f + 00026722 0x00006506 nsetflag 0x00000001 , 0x00000013 , 0x00000011 + 00026723 0x00006507 isolate1 0x00000005 , 0x0000003f + 00026724 0x00006508 nsetflag 0x00000001 , 0x00000014 , 0x00000011 + 00026725 0x00006509 isolate1 0x00000006 , 0x0000003f + 00026726 0x0000650a nsetflag 0x00000001 , 0x00000015 , 0x00000011 + 00026727 0x0000650b isolate1 0x00000007 , 0x0000003f + 00026728 0x0000650c nsetflag 0x00000001 , 0x00000016 , 0x00000011 + 00026729 0x0000650e hfetch 0x00000001 , 0x00008062 + 00026730 0x0000650f isolate1 0x00000004 , 0x0000003f + 00026731 0x00006510 call 0x0000687e , 0x00000001 + 00026732 0x00006511 bpatchx 0x0000009d , 0x00004033 + 00026733 0x00006513 hfetch 0x00000004 , 0x00008078 + 00026734 0x00006514 hfetcht 0x00000004 , 0x0000807c + 00026735 0x00006515 ior 0x00000002 , 0x0000003f + 00026736 0x00006516 invert 0x0000003f , 0x0000003f + 00026737 0x00006517 iand 0x00000011 , 0x0000003f + 00026738 0x00006519 hstore 0x00000004 , 0x00008070 + 00026739 0x0000651a rtn + 00026740 0x0000651e arg 0x00000006 , 0x00000007 + 00026741 0x0000651f branch 0x00006884 + 00026742 0x00006521 arg 0x00000009 , 0x00000007 + 00026743 0x00006522 branch 0x00006882 + 00026744 0x00006524 arg 0x00000017 , 0x00000007 + 00026745 0x00006525 branch 0x00006882 + 00026746 0x00006527 arg 0x00000019 , 0x00000007 + 00026747 0x00006528 branch 0x00006884 + 00026748 0x0000652a arg 0x0000001e , 0x00000007 + 00026749 0x0000652b branch 0x00006884 + 00026750 0x0000652d arg 0x00000002 , 0x00000007 + 00026751 0x0000652e branch 0x00006884 + 00026752 0x00006530 arg 0x00000001 , 0x00000039 + 00026753 0x00006531 branch 0x00006885 + 00026754 0x00006533 arg 0x00000004 , 0x00000039 + 00026755 0x00006534 branch 0x00006885 + 00026756 0x00006536 arg 0x00000002 , 0x00000039 + 00026757 0x00006538 qset0 0x00000011 + 00026758 0x00006539 increase 0x00000001 , 0x00000007 + 00026759 0x0000653a loop 0x00006885 + 00026760 0x0000653b rtn + 00026761 0x00006544 call 0x00006895 + 00026762 0x00006545 arg 0x00000006 , 0x00000002 + 00026763 0x00006546 branch 0x0000680e + 00026764 0x00006549 call 0x00006889 + 00026765 0x0000654a arg 0x00000006 , 0x00000002 + 00026766 0x0000654b branch 0x00006825 + 00026767 0x00006550 call 0x00006895 + 00026768 0x00006551 hfetch 0x00000001 , 0x00008078 + 00026769 0x00006552 set1 0x00000007 , 0x0000003f + 00026770 0x00006553 hstore 0x00000001 , 0x00008078 + 00026771 0x00006554 arg 0x00000007 , 0x00000002 + 00026772 0x00006555 branch 0x000067fb + 00026773 0x00006558 hfetch 0x00000001 , 0x00008081 + 00026774 0x00006559 and_into 0x000000fb , 0x0000003f + 00026775 0x0000655a hstore 0x00000001 , 0x00008081 + 00026776 0x0000655b rtn + 00026777 0x0000655e hfetch 0x00000001 , 0x00008081 + 00026778 0x0000655f isolate1 0x00000002 , 0x0000003f + 00026779 0x00006560 rtn + 00026780 0x00006563 call 0x0000666a + 00026781 0x00006564 setarg 0x000007e0 + 00026782 0x00006565 arg 0x00004150 , 0x00000011 + 00026783 0x00006566 arg 0x00000002 , 0x00000002 + 00026784 0x00006567 call 0x000066b3 + 00026785 0x00006568 branch 0x0000666d + 00026786 0x0000656c call 0x0000666a + 00026787 0x0000656d setarg 0x000007e2 + 00026788 0x0000656e arg 0x0000421d , 0x00000011 + 00026789 0x0000656f arg 0x0000000e , 0x00000002 + 00026790 0x00006570 call 0x000066b3 + 00026791 0x00006571 branch 0x0000666d + 00026792 0x00006576 bpatchx 0x0000009e , 0x00004033 + 00026793 0x00006578 call 0x000068a2 + 00026794 0x0000657a fetch 0x00000001 , 0x0000422d + 00026795 0x0000657b beq 0x00000000 , 0x000068af + 00026796 0x0000657c beq 0x00000001 , 0x000068c3 + 00026797 0x0000657d beq 0x00000002 , 0x000068d7 + 00026798 0x0000657e rtn + 00026799 0x00006581 fetcht 0x00000002 , 0x00004229 + 00026800 0x00006582 setarg 0x0000aa55 + 00026801 0x00006583 isub 0x00000002 , 0x0000003e + 00026802 0x00006584 branch 0x000068b8 , 0x00000005 + 00026803 0x00006585 setarg 0x00004dfa + 00026804 0x00006586 store 0x00000002 , 0x00004227 + 00026805 0x00006587 setarg 0x00004894 + 00026806 0x00006588 store 0x00000002 , 0x00004221 + 00026807 0x00006589 branch 0x000068c0 + 00026808 0x0000658c fetch 0x00000002 , 0x00004227 + 00026809 0x0000658d nbranch 0x000068bc , 0x00000034 + 00026810 0x0000658e setarg 0x00004dfa + 00026811 0x0000658f store 0x00000002 , 0x00004227 + 00026812 0x00006591 fetch 0x00000002 , 0x00004221 + 00026813 0x00006592 nbranch 0x000068c0 , 0x00000034 + 00026814 0x00006593 setarg 0x00004894 + 00026815 0x00006594 store 0x00000002 , 0x00004221 + 00026816 0x00006596 setarg 0x00000064 + 00026817 0x00006597 store 0x00000002 , 0x0000422b + 00026818 0x00006598 rtn + 00026819 0x0000659b fetcht 0x00000002 , 0x00004229 + 00026820 0x0000659c setarg 0x0000aa55 + 00026821 0x0000659d isub 0x00000002 , 0x0000003e + 00026822 0x0000659e branch 0x000068cc , 0x00000005 + 00026823 0x0000659f setarg 0x00005932 + 00026824 0x000065a0 store 0x00000002 , 0x00004225 + 00026825 0x000065a1 setarg 0x00004323 + 00026826 0x000065a2 store 0x00000002 , 0x0000421f + 00026827 0x000065a3 branch 0x000068d4 + 00026828 0x000065a6 fetch 0x00000002 , 0x00004225 + 00026829 0x000065a7 nbranch 0x000068d0 , 0x00000034 + 00026830 0x000065a8 setarg 0x00005932 + 00026831 0x000065a9 store 0x00000002 , 0x00004225 + 00026832 0x000065ab fetch 0x00000002 , 0x0000421f + 00026833 0x000065ac nbranch 0x000068d4 , 0x00000034 + 00026834 0x000065ad setarg 0x00004323 + 00026835 0x000065ae store 0x00000002 , 0x0000421f + 00026836 0x000065b0 setarg 0x00000190 + 00026837 0x000065b1 store 0x00000002 , 0x0000422b + 00026838 0x000065b2 rtn + 00026839 0x000065b5 fetcht 0x00000002 , 0x00004229 + 00026840 0x000065b6 setarg 0x0000aa55 + 00026841 0x000065b7 isub 0x00000002 , 0x0000003e + 00026842 0x000065b8 branch 0x000068e0 , 0x00000005 + 00026843 0x000065b9 setarg 0x00006946 + 00026844 0x000065ba store 0x00000002 , 0x00004223 + 00026845 0x000065bb setarg 0x00005377 + 00026846 0x000065bc store 0x00000002 , 0x0000421d + 00026847 0x000065bd branch 0x000068e8 + 00026848 0x000065c0 fetch 0x00000002 , 0x00004223 + 00026849 0x000065c1 nbranch 0x000068e4 , 0x00000034 + 00026850 0x000065c2 setarg 0x00006946 + 00026851 0x000065c3 store 0x00000002 , 0x00004223 + 00026852 0x000065c5 fetch 0x00000002 , 0x0000421d + 00026853 0x000065c6 nbranch 0x000068e8 , 0x00000034 + 00026854 0x000065c7 setarg 0x00005377 + 00026855 0x000065c8 store 0x00000002 , 0x0000421d + 00026856 0x000065ca setarg 0x00000032 + 00026857 0x000065cb store 0x00000002 , 0x0000422b + 00026858 0x000065cc rtn + 00026859 0x000065d0 fetch 0x00000001 , 0x0000422d + 00026860 0x000065d1 beq 0x00000000 , 0x000068f0 + 00026861 0x000065d2 beq 0x00000001 , 0x000068f2 + 00026862 0x000065d3 beq 0x00000002 , 0x000068f4 + 00026863 0x000065d4 rtn + 00026864 0x000065d6 hjam 0x000000bf , 0x00008971 + 00026865 0x000065d7 branch 0x000068f8 + 00026866 0x000065d9 hjam 0x000000af , 0x00008971 + 00026867 0x000065da branch 0x000068f8 + 00026868 0x000065dc hjam 0x0000008f , 0x00008971 + 00026869 0x000065dd fetch 0x00000001 , 0x0000422e + 00026870 0x000065de hstore 0x00000001 , 0x00008973 + 00026871 0x000065df branch 0x000068f8 + 00026872 0x000065e1 bpatchx 0x0000009f , 0x00004033 + 00026873 0x000065e2 hfetch 0x00000001 , 0x00008053 + 00026874 0x000065e3 set1 0x00000007 , 0x0000003f + 00026875 0x000065e4 hstore 0x00000001 , 0x00008053 + 00026876 0x000065e5 hfetch 0x00000001 , 0x00008973 + 00026877 0x000065e6 or_into 0x00000030 , 0x0000003f + 00026878 0x000065e7 hstore 0x00000001 , 0x00008973 + 00026879 0x000065e8 hjam 0x0000007c , 0x00008906 + 00026880 0x000065e9 hjam 0x000000aa , 0x00008972 + 00026881 0x000065ea nop 0x00001388 + 00026882 0x000065eb hfetcht 0x00000002 , 0x00008150 + 00026883 0x000065ec hfetch 0x00000001 , 0x00008053 + 00026884 0x000065ed set0 0x00000007 , 0x0000003f + 00026885 0x000065ee hstore 0x00000001 , 0x00008053 + 00026886 0x000065ef storet 0x00000002 , 0x0000422f + 00026887 0x000065f0 rtn + 00026888 0x000065f3 bpatchx 0x000000a0 , 0x00004034 + 00026889 0x000065f4 fetch 0x00000001 , 0x0000422d + 00026890 0x000065f5 beq 0x00000000 , 0x0000690e + 00026891 0x000065f6 beq 0x00000001 , 0x00006912 + 00026892 0x000065f7 beq 0x00000002 , 0x00006916 + 00026893 0x000065f8 rtn + 00026894 0x000065fb fetch 0x00000002 , 0x00004227 + 00026895 0x000065fc fetcht 0x00000002 , 0x00004221 + 00026896 0x000065fd arg 0x000000c8 , 0x00000013 + 00026897 0x000065fe branch 0x0000691a + 00026898 0x00006601 fetch 0x00000002 , 0x00004225 + 00026899 0x00006602 fetcht 0x00000002 , 0x0000421f + 00026900 0x00006603 arg 0x00000064 , 0x00000013 + 00026901 0x00006604 branch 0x0000691a + 00026902 0x00006607 fetch 0x00000002 , 0x00004223 + 00026903 0x00006608 fetcht 0x00000002 , 0x0000421d + 00026904 0x00006609 arg 0x00000032 , 0x00000013 + 00026905 0x0000660a branch 0x0000691a + 00026906 0x0000660d isub 0x00000002 , 0x00000011 + 00026907 0x0000660e fetch 0x00000002 , 0x0000422f + 00026908 0x0000660f isub 0x00000002 , 0x0000003f + 00026909 0x00006610 nbranch 0x00006927 , 0x00000002 + 00026910 0x00006611 fetcht 0x00000002 , 0x0000422b + 00026911 0x00006612 imul32 0x00000002 , 0x00000012 + 00026912 0x00006613 copy 0x00000013 , 0x0000003f + 00026913 0x00006614 imul32 0x00000011 , 0x0000003f + 00026914 0x00006615 iadd 0x00000012 , 0x0000003f + 00026915 0x00006617 idiv 0x00000011 + 00026916 0x00006618 call 0x00007f86 + 00026917 0x00006619 quotient 0x0000003f + 00026918 0x0000661a rtn + 00026919 0x0000661d copy 0x00000002 , 0x0000003f + 00026920 0x0000661e fetcht 0x00000002 , 0x0000422f + 00026921 0x0000661f isub 0x00000002 , 0x0000003f + 00026922 0x00006620 fetcht 0x00000002 , 0x0000422b + 00026923 0x00006621 imul32 0x00000002 , 0x00000012 + 00026924 0x00006622 copy 0x00000013 , 0x0000003f + 00026925 0x00006623 imul32 0x00000011 , 0x0000003f + 00026926 0x00006624 isub 0x00000012 , 0x0000003f + 00026927 0x00006625 branch 0x00006923 + 00026928 0x00006631 ifetch 0x00000008 , 0x00000011 + 00026929 0x00006632 store 0x00000008 , 0x00000a9a + 00026930 0x00006633 fetch 0x00000002 , 0x00000a9a + 00026931 0x00006634 fetcht 0x00000002 , 0x00000a9c + 00026932 0x00006635 isub 0x00000002 , 0x00000011 + 00026933 0x00006636 fetch 0x00000002 , 0x00000aa0 + 00026934 0x00006637 isub 0x00000002 , 0x00000012 + 00026935 0x00006638 fetcht 0x00000002 , 0x00000a9e + 00026936 0x00006639 isub 0x00000002 , 0x0000003e + 00026937 0x0000663a ncall 0x00006940 , 0x00000002 + 00026938 0x0000663b mul32 0x00000012 , 0x00000064 , 0x0000003f + 00026939 0x0000663c idiv 0x00000011 + 00026940 0x0000663d call 0x00007f86 + 00026941 0x0000663e quotient 0x0000003f + 00026942 0x0000663f call 0x00006944 , 0x00000034 + 00026943 0x00006640 rtn + 00026944 0x00006642 fetch 0x00000001 , 0x00004231 + 00026945 0x00006643 set1 0x00000000 , 0x0000003f + 00026946 0x00006644 store 0x00000001 , 0x00004231 + 00026947 0x00006645 rtn + 00026948 0x00006647 fetcht 0x00000001 , 0x00004231 + 00026949 0x00006648 set1 0x00000001 , 0x00000002 + 00026950 0x00006649 storet 0x00000001 , 0x00004231 + 00026951 0x0000664a rtn + 00026952 0x00006650 fetch 0x00000002 , 0x0000423d + 00026953 0x00006651 ifetch 0x00000001 , 0x0000003f + 00026954 0x00006653 rtn 0x00000034 + 00026955 0x00006654 copy 0x0000003f , 0x00000039 + 00026956 0x00006656 fetch 0x00000002 , 0x0000423d + 00026957 0x00006657 increase 0x00000003 , 0x0000003f + 00026958 0x00006658 copy 0x0000003f , 0x00000011 + 00026959 0x0000665a ifetcht 0x00000001 , 0x00000011 + 00026960 0x0000665b call 0x000067fb + 00026961 0x0000665c increase 0x00000001 , 0x00000011 + 00026962 0x0000665d loop 0x0000694f + 00026963 0x0000665f rtn + 00026964 0x00006662 fetch 0x00000002 , 0x0000423d + 00026965 0x00006663 increase 0x00000003 , 0x0000003f + 00026966 0x00006664 copy 0x0000003f , 0x00000011 + 00026967 0x00006666 force 0x00000000 , 0x00000012 + 00026968 0x00006667 jam 0x00000000 , 0x00000b12 + 00026969 0x00006669 ifetcht 0x00000001 , 0x00000011 + 00026970 0x0000666a call 0x0000681d + 00026971 0x0000666b bpatchx 0x000000a1 , 0x00004034 + 00026972 0x0000666c fetch 0x00000002 , 0x00000b12 + 00026973 0x0000666d copy 0x00000012 , 0x00000007 + 00026974 0x0000666e qsetflag 0x00000001 , 0x0000003f + 00026975 0x0000666f store 0x00000002 , 0x00000b12 + 00026976 0x00006670 increase 0x00000001 , 0x00000011 + 00026977 0x00006671 increase 0x00000001 , 0x00000012 + 00026978 0x00006672 fetch 0x00000002 , 0x0000423d + 00026979 0x00006673 ifetch 0x00000001 , 0x0000003f + 00026980 0x00006675 ixor 0x00000012 , 0x0000003e + 00026981 0x00006676 nbranch 0x00006959 , 0x00000005 + 00026982 0x00006677 fetch 0x00000002 , 0x00000b12 + 00026983 0x00006678 fetcht 0x00000002 , 0x00000b14 + 00026984 0x00006679 ixor 0x00000002 , 0x0000003e + 00026985 0x0000667a rtn 0x00000005 + 00026986 0x0000667b enable 0x00000028 + 00026987 0x0000667c rtn + 00026988 0x0000667f fetch 0x00000002 , 0x0000423d + 00026989 0x00006680 ifetch 0x00000001 , 0x0000003f + 00026990 0x00006682 rtn 0x00000034 + 00026991 0x00006683 copy 0x0000003f , 0x00000039 + 00026992 0x00006684 fetch 0x00000002 , 0x0000423d + 00026993 0x00006685 increase 0x00000003 , 0x0000003f + 00026994 0x00006686 copy 0x0000003f , 0x00000011 + 00026995 0x00006688 ifetcht 0x00000001 , 0x00000011 + 00026996 0x00006689 call 0x000067dd + 00026997 0x0000668a increase 0x00000001 , 0x00000011 + 00026998 0x0000668b loop 0x00006973 + 00026999 0x0000668d rtn + 00027000 0x00006690 arg 0x00000009 , 0x00000007 + 00027001 0x00006691 call 0x00007f16 + 00027002 0x00006692 nrtn 0x00000034 + 00027003 0x00006693 setarg 0x00000020 + 00027004 0x00006694 arg 0x00000009 , 0x00000007 + 00027005 0x00006695 call 0x00007f08 + 00027006 0x00006696 disable 0x00000028 + 00027007 0x00006697 call 0x0000696c + 00027008 0x00006698 bpatchx 0x000000a2 , 0x00004034 + 00027009 0x00006699 fetch 0x00000002 , 0x0000423d + 00027010 0x0000669a ifetch 0x00000001 , 0x0000003f + 00027011 0x0000669c rtn 0x00000034 + 00027012 0x0000669d call 0x00006954 + 00027013 0x0000669e nbranch 0x00007d02 , 0x00000028 + 00027014 0x0000669f call 0x00007d00 + 00027015 0x000066a0 disable 0x00000028 + 00027016 0x000066a1 fetch 0x00000002 , 0x00000b12 + 00027017 0x000066a2 store 0x00000002 , 0x00000b19 + 00027018 0x000066a3 jam 0x00000000 , 0x00000b1b + 00027019 0x000066a4 force 0x00000000 , 0x00000007 + 00027020 0x000066a6 fetch 0x00000002 , 0x00000b14 + 00027021 0x000066a7 rshift 0x0000003f , 0x00000002 + 00027022 0x000066a8 storet 0x00000002 , 0x00000b14 + 00027023 0x000066a9 and 0x0000003f , 0x00000001 , 0x0000003f + 00027024 0x000066aa fetcht 0x00000002 , 0x00000b19 + 00027025 0x000066ab and 0x00000002 , 0x00000001 , 0x00000011 + 00027026 0x000066ac rshift 0x00000002 , 0x00000002 + 00027027 0x000066ad storet 0x00000002 , 0x00000b19 + 00027028 0x000066ae ixor 0x00000011 , 0x0000003e + 00027029 0x000066af ncall 0x000069a1 , 0x00000005 + 00027030 0x000066b0 fetch 0x00000002 , 0x0000423d + 00027031 0x000066b1 ifetch 0x00000001 , 0x0000003f + 00027032 0x000066b3 fetcht 0x00000001 , 0x00000b1b + 00027033 0x000066b4 increase 0x00000001 , 0x00000002 + 00027034 0x000066b5 storet 0x00000001 , 0x00000b1b + 00027035 0x000066b6 copy 0x00000002 , 0x00000007 + 00027036 0x000066b7 ixor 0x00000007 , 0x0000003e + 00027037 0x000066b8 nbranch 0x0000698c , 0x00000005 + 00027038 0x000066b9 fetch 0x00000002 , 0x00000b12 + 00027039 0x000066ba store 0x00000002 , 0x00000b14 + 00027040 0x000066bb rtn + 00027041 0x000066bd bpatchx 0x000000a3 , 0x00004034 + 00027042 0x000066be fetch 0x00000002 , 0x0000423d + 00027043 0x000066bf increase 0x00000001 , 0x0000003f + 00027044 0x000066c0 ifetch 0x00000002 , 0x0000003f + 00027045 0x000066c1 branch 0x00007f9c + 00027046 0x000066cd hfetch 0x00000001 , 0x00008042 + 00027047 0x000066ce ior 0x00000011 , 0x0000003f + 00027048 0x000066cf hstore 0x00000001 , 0x00008042 + 00027049 0x000066d0 hfetch 0x00000002 , 0x00008050 + 00027050 0x000066d1 set0 0x0000000d , 0x0000003f + 00027051 0x000066d2 hstore 0x00000002 , 0x00008050 + 00027052 0x000066d3 nop 0x00000064 + 00027053 0x000066d4 rtn + 00027054 0x000066e0 fetcht 0x00000003 , 0x00000a9c + 00027055 0x000066e1 setarg 0x00b71b00 + 00027056 0x000066e2 idiv 0x00000002 + 00027057 0x000066e3 call 0x00007f86 + 00027058 0x000066e4 quotient 0x00000002 + 00027059 0x000066e5 fetch 0x00000001 , 0x00000a9f + 00027060 0x000066e6 imul32 0x00000002 , 0x0000003f + 00027061 0x000066e7 div 0x0000003f , 0x00000064 + 00027062 0x000066e8 call 0x00007f86 + 00027063 0x000066e9 quotient 0x00000011 + 00027064 0x000066ea copy 0x00000002 , 0x0000003f + 00027065 0x000066eb isub 0x00000011 , 0x00000012 + 00027066 0x000066ec fetch 0x00000001 , 0x00000a9b + 00027067 0x000066ed call 0x000069be + 00027068 0x000066ee fetch 0x00000001 , 0x00000a9a + 00027069 0x000066ef branch 0x000069d5 + 00027070 0x000066f3 beq 0x00000000 , 0x000069c4 + 00027071 0x000066f4 beq 0x00000001 , 0x000069c6 + 00027072 0x000066f5 beq 0x00000002 , 0x000069c8 + 00027073 0x000066f6 beq 0x00000003 , 0x000069ca + 00027074 0x000066f7 beq 0x00000004 , 0x000069cc + 00027075 0x000066f8 beq 0x00000005 , 0x000069ce + 00027076 0x000066fa arg 0x000080a0 , 0x00000005 + 00027077 0x000066fb branch 0x000069d0 + 00027078 0x000066fd arg 0x000080a4 , 0x00000005 + 00027079 0x000066fe branch 0x000069d0 + 00027080 0x00006700 arg 0x000080a8 , 0x00000005 + 00027081 0x00006701 branch 0x000069d0 + 00027082 0x00006703 arg 0x00008064 , 0x00000005 + 00027083 0x00006704 branch 0x000069d0 + 00027084 0x00006706 arg 0x00008068 , 0x00000005 + 00027085 0x00006707 branch 0x000069d0 + 00027086 0x00006709 arg 0x0000806c , 0x00000005 + 00027087 0x0000670a branch 0x000069d0 + 00027088 0x0000670c copy 0x00000011 , 0x0000003f + 00027089 0x0000670d istore 0x00000002 , 0x00000005 + 00027090 0x0000670e copy 0x00000012 , 0x0000003f + 00027091 0x0000670f istore 0x00000002 , 0x00000005 + 00027092 0x00006710 rtn + 00027093 0x00006715 enable 0x00000028 + 00027094 0x00006716 branch 0x000069d8 + 00027095 0x00006718 disable 0x00000028 + 00027096 0x0000671a beq 0x00000004 , 0x000069e3 + 00027097 0x0000671b beq 0x00000005 , 0x000069e5 + 00027098 0x0000671c beq 0x0000001b , 0x000069e7 + 00027099 0x0000671d beq 0x0000001c , 0x000069e9 + 00027100 0x0000671e beq 0x00000003 , 0x000069eb + 00027101 0x0000671f beq 0x00000008 , 0x000069ed + 00027102 0x00006720 beq 0x00000014 , 0x000069ef + 00027103 0x00006721 beq 0x00000015 , 0x000069f1 + 00027104 0x00006722 beq 0x00000016 , 0x000069f3 + 00027105 0x00006723 beq 0x00000017 , 0x000069f5 + 00027106 0x00006724 rtn + 00027107 0x00006728 arg 0x00000006 , 0x00000007 + 00027108 0x00006729 branch 0x000069ff + 00027109 0x0000672b arg 0x00000007 , 0x00000007 + 00027110 0x0000672c branch 0x000069ff + 00027111 0x0000672e arg 0x00000008 , 0x00000007 + 00027112 0x0000672f branch 0x000069ff + 00027113 0x00006731 arg 0x00000009 , 0x00000007 + 00027114 0x00006732 branch 0x000069ff + 00027115 0x00006734 arg 0x0000000a , 0x00000007 + 00027116 0x00006735 branch 0x000069ff + 00027117 0x00006737 arg 0x0000000b , 0x00000007 + 00027118 0x00006738 branch 0x000069ff + 00027119 0x0000673a arg 0x0000000c , 0x00000007 + 00027120 0x0000673b branch 0x00006a01 + 00027121 0x0000673d arg 0x0000000d , 0x00000007 + 00027122 0x0000673e branch 0x00006a01 + 00027123 0x00006740 arg 0x0000000e , 0x00000007 + 00027124 0x00006741 branch 0x00006a01 + 00027125 0x00006743 arg 0x0000000f , 0x00000007 + 00027126 0x00006744 branch 0x00006a01 + 00027127 0x00006747 hfetch 0x00000002 , 0x00008081 + 00027128 0x00006748 qsetflag 0x00000028 , 0x0000003f + 00027129 0x00006749 hstore 0x00000002 , 0x00008081 + 00027130 0x0000674a copy 0x00000011 , 0x00000007 + 00027131 0x0000674b hfetch 0x00000001 , 0x00008085 + 00027132 0x0000674c qsetflag 0x00000028 , 0x0000003f + 00027133 0x0000674d hstore 0x00000001 , 0x00008085 + 00027134 0x0000674e rtn + 00027135 0x00006751 add 0x00000007 , 0xfffffffc , 0x00000011 + 00027136 0x00006752 branch 0x000069f7 + 00027137 0x00006755 add 0x00000007 , 0xfffffff6 , 0x00000011 + 00027138 0x00006756 branch 0x000069f7 + 00027139 0x0000675c rtn 0x0000002b + 00027140 0x0000675d jam 0x00000000 , 0x00004567 + 00027141 0x0000675e jam 0x00000003 , 0x000004ed + 00027142 0x0000675f jam 0x00000003 , 0x000004ee + 00027143 0x00006760 jam 0x00000011 , 0x000004f2 + 00027144 0x00006761 jam 0x00000013 , 0x000004f3 + 00027145 0x00006762 setarg 0x00000000 + 00027146 0x00006763 store 0x00000003 , 0x000004ef + 00027147 0x00006764 store 0x00000001 , 0x00004254 + 00027148 0x00006765 jam 0x00000000 , 0x00004681 + 00027149 0x00006768 bpatchx 0x000000a4 , 0x00004034 + 00027150 0x00006769 setarg 0x00000000 + 00027151 0x0000676a store 0x00000001 , 0x00004254 + 00027152 0x0000676b store 0x00000001 , 0x00004564 + 00027153 0x0000676c store 0x00000001 , 0x0000455d + 00027154 0x0000676d fetch 0x00000001 , 0x0000456b + 00027155 0x0000676e beq 0x00000001 , 0x00006a16 + 00027156 0x0000676f jam 0x00000050 , 0x00004569 + 00027157 0x00006770 rtn + 00027158 0x00006773 jam 0x00000000 , 0x00004569 + 00027159 0x00006774 rtn + 00027160 0x00006777 or_into 0x00000002 , 0x00000002 + 00027161 0x00006778 rtn + 00027162 0x00006785 copy 0x00000002 , 0x0000003f + 00027163 0x00006786 reverse 0x0000003f , 0x0000003f + 00027164 0x00006787 store 0x00000001 , 0x00004562 + 00027165 0x00006788 force 0x0000003f , 0x0000003f + 00027166 0x00006789 reverse 0x0000003f , 0x0000003f + 00027167 0x0000678a store 0x00000001 , 0x00004561 + 00027168 0x0000678b force 0x00000001 , 0x0000003f + 00027169 0x0000678c reverse 0x0000003f , 0x0000003f + 00027170 0x0000678d store 0x00000001 , 0x00004560 + 00027171 0x0000678e call 0x00006a50 + 00027172 0x0000678f copy 0x00000002 , 0x0000003f + 00027173 0x00006790 rtn + 00027174 0x00006792 reverse 0x0000003f , 0x0000003f + 00027175 0x00006793 store 0x00000001 , 0x00004562 + 00027176 0x00006794 force 0x00000073 , 0x0000003f + 00027177 0x00006795 reverse 0x0000003f , 0x0000003f + 00027178 0x00006796 store 0x00000001 , 0x00004561 + 00027179 0x00006797 force 0x00000001 , 0x0000003f + 00027180 0x00006798 reverse 0x0000003f , 0x0000003f + 00027181 0x00006799 store 0x00000001 , 0x00004560 + 00027182 0x0000679a branch 0x00006a50 + 00027183 0x0000679d fetch 0x00000001 , 0x00004563 + 00027184 0x0000679e branch 0x00006a33 , 0x00000034 + 00027185 0x0000679f setarg 0x00000070 + 00027186 0x000067a0 rtn + 00027187 0x000067a2 setarg 0x000000aa + 00027188 0x000067a3 rtn + 00027189 0x000067a6 reverse 0x0000003f , 0x0000003f + 00027190 0x000067a7 store 0x00000001 , 0x00004562 + 00027191 0x000067a8 force 0x000000ef , 0x0000003f + 00027192 0x000067a9 call 0x00006a44 + 00027193 0x000067aa fetcht 0x00000002 , 0x000004f7 + 00027194 0x000067ab copy 0x00000002 , 0x00000005 + 00027195 0x000067ac istore 0x00000001 , 0x00000005 + 00027196 0x000067ad copy 0x00000005 , 0x00000002 + 00027197 0x000067ae storet 0x00000002 , 0x000004f7 + 00027198 0x000067af force 0x000000ff , 0x0000003f + 00027199 0x000067b0 call 0x00006a44 + 00027200 0x000067b1 fetcht 0x00000002 , 0x000004f7 + 00027201 0x000067b2 copy 0x00000002 , 0x00000005 + 00027202 0x000067b3 istore 0x00000001 , 0x00000005 + 00027203 0x000067b4 rtn + 00027204 0x000067be reverse 0x0000003f , 0x0000003f + 00027205 0x000067bf store 0x00000001 , 0x00004561 + 00027206 0x000067c0 fetch 0x00000002 , 0x00004561 + 00027207 0x000067c1 lshift8 0x0000003f , 0x0000003f + 00027208 0x000067c2 store 0x00000003 , 0x000004f4 + 00027209 0x000067c3 arg 0x00000107 , 0x00000011 + 00027210 0x000067c4 arg 0x0000000f , 0x00000012 + 00027211 0x000067c5 call 0x00006a5d + 00027212 0x000067c6 xor_into 0x000000d7 , 0x0000003f + 00027213 0x000067c7 invert 0x0000003f , 0x0000003f + 00027214 0x000067c8 reverse 0x0000003f , 0x0000003f + 00027215 0x000067c9 rtn + 00027216 0x000067d4 fetch 0x00000003 , 0x00004560 + 00027217 0x000067d5 store 0x00000003 , 0x000004f4 + 00027218 0x000067d6 arg 0x00000107 , 0x00000011 + 00027219 0x000067d7 arg 0x0000000f , 0x00000012 + 00027220 0x000067d8 call 0x00006a5d + 00027221 0x000067d9 lshift8 0x0000003f , 0x0000003f + 00027222 0x000067da arg 0x00000007 , 0x00000012 + 00027223 0x000067db call 0x00006a5d + 00027224 0x000067dc xor_into 0x0000002b , 0x0000003f + 00027225 0x000067dd invert 0x0000003f , 0x0000003f + 00027226 0x000067de reverse 0x0000003f , 0x0000003f + 00027227 0x000067df copy 0x0000003f , 0x00000002 + 00027228 0x000067e0 rtn + 00027229 0x000067e3 arg 0x00000000 , 0x00000013 + 00027230 0x000067e4 copy 0x00000012 , 0x00000039 + 00027231 0x000067e5 call 0x00007e71 + 00027232 0x000067e6 icopy 0x00000002 + 00027233 0x000067ec copy 0x00000002 , 0x0000003f + 00027234 0x000067ed lshift 0x00000013 , 0x00000013 + 00027235 0x000067ee bbit0 0x00000008 , 0x00006a66 + 00027236 0x000067ef ixor 0x00000011 , 0x00000002 + 00027237 0x000067f0 increase 0x00000001 , 0x00000013 + 00027238 0x000067f2 lshift 0x00000002 , 0x00000002 + 00027239 0x000067f3 fetch 0x00000003 , 0x000004f4 + 00027240 0x000067f4 increase 0xffffffff , 0x00000012 + 00027241 0x000067f5 compare 0x000000ff , 0x00000012 , 0x000000ff + 00027242 0x000067f6 branch 0x00006a70 , 0x00000001 + 00027243 0x000067f7 copy 0x00000012 , 0x00000039 + 00027244 0x000067f8 call 0x00007e71 + 00027245 0x000067f9 isolate1 0x00000000 , 0x0000003f + 00027246 0x000067fa setflag 0x00000001 , 0x00000000 , 0x00000002 + 00027247 0x000067fb branch 0x00006a61 + 00027248 0x000067fe rshift 0x00000002 , 0x0000003f + 00027249 0x000067ff rtn + 00027250 0x00006802 fetcht 0x00000001 , 0x0000455d + 00027251 0x00006805 lshift2 0x00000002 , 0x00000002 + 00027252 0x00006806 set1 0x00000000 , 0x00000002 + 00027253 0x00006807 fetch 0x00000001 , 0x00004563 + 00027254 0x00006808 ncall 0x00006a18 , 0x00000034 + 00027255 0x00006809 storet 0x00000001 , 0x0000050d + 00027256 0x0000680a rtn + 00027257 0x0000680e lshift 0x00000002 , 0x00000002 + 00027258 0x0000680f fetch 0x00000001 , 0x00004563 + 00027259 0x00006810 setflag 0x00000034 , 0x00000000 , 0x00000002 + 00027260 0x00006812 rtn + 00027261 0x00006814 fetcht 0x00000001 , 0x000004fc + 00027262 0x00006815 jam 0x000000d7 , 0x000004fe + 00027263 0x00006816 call 0x00006bb6 + 00027264 0x00006817 fetch 0x00000001 , 0x00004251 + 00027265 0x00006818 set1 0x00000006 , 0x0000003f + 00027266 0x00006819 set1 0x00000007 , 0x0000003f + 00027267 0x0000681a store 0x00000001 , 0x00004251 + 00027268 0x0000681b jam 0x00000000 , 0x00004563 + 00027269 0x0000681c branch 0x00006b97 + 00027270 0x0000681e fetch 0x00000001 , 0x00004251 + 00027271 0x0000681f set1 0x00000007 , 0x0000003f + 00027272 0x00006820 store 0x00000001 , 0x00004251 + 00027273 0x00006821 branch 0x00006b97 + 00027274 0x00006825 bpatchx 0x000000a5 , 0x00004034 + 00027275 0x00006826 fetch 0x00000001 , 0x00004681 + 00027276 0x00006827 beq 0x00000000 , 0x00006a8e + 00027277 0x00006828 branch 0x00006b4c + 00027278 0x0000682b fetch 0x00000002 , 0x00000264 + 00027279 0x0000682c copy 0x0000003f , 0x00000006 + 00027280 0x0000682d call 0x00006ab8 + 00027281 0x0000682e fetch 0x00000001 , 0x000004fc + 00027282 0x0000682f beq 0x00000000 , 0x00006a94 + 00027283 0x00006830 branch 0x00006b18 + 00027284 0x00006832 bpatchx 0x000000a6 , 0x00004034 + 00027285 0x00006833 fetch 0x00000001 , 0x000004fd + 00027286 0x00006834 beq 0x0000003f , 0x00006a7d + 00027287 0x00006835 beq 0x00000073 , 0x00006a86 + 00027288 0x00006836 beq 0x000000ef , 0x00006a9b + 00027289 0x00006837 beq 0x00000053 , 0x00006b44 + 00027290 0x00006838 rtn + 00027291 0x0000683c fetch 0x00000002 , 0x00000501 + 00027292 0x0000683d copy 0x0000003f , 0x00000006 + 00027293 0x0000683e call 0x00006ac3 + 00027294 0x0000683f fetch 0x00000001 , 0x00000503 + 00027295 0x00006840 beq 0x00000041 , 0x00006aa5 + 00027296 0x00006841 beq 0x00000040 , 0x00006aad + 00027297 0x00006842 beq 0x00000071 , 0x00006ae6 + 00027298 0x00006843 beq 0x00000070 , 0x00006af2 + 00027299 0x00006844 beq 0x00000049 , 0x00006afd + 00027300 0x00006845 branch 0x00006b97 + 00027301 0x00006848 call 0x00006aaf + 00027302 0x0000684a branch 0x00006aa7 + 00027303 0x0000684d fetch 0x00000001 , 0x00004254 + 00027304 0x0000684e set1 0x00000000 , 0x0000003f + 00027305 0x0000684f set1 0x00000001 , 0x0000003f + 00027306 0x00006850 store 0x00000001 , 0x00004254 + 00027307 0x00006851 call 0x00006be0 + 00027308 0x00006852 branch 0x00006b97 + 00027309 0x00006855 call 0x00006aaf + 00027310 0x00006856 branch 0x00006b97 + 00027311 0x00006859 call 0x00006acb + 00027312 0x0000685a branch 0x00006ad7 + 00027313 0x0000685d call 0x00006acb + 00027314 0x0000685e ifetch 0x00000001 , 0x00000006 + 00027315 0x0000685f rshift3 0x0000003f , 0x0000003f + 00027316 0x00006860 store 0x00000001 , 0x0000456a + 00027317 0x00006861 ifetch 0x00000001 , 0x00000006 + 00027318 0x00006862 store 0x00000001 , 0x00000508 + 00027319 0x00006863 rtn + 00027320 0x00006867 ifetch 0x00000001 , 0x00000006 + 00027321 0x00006868 store 0x00000001 , 0x000004fb + 00027322 0x00006869 rshift3 0x0000003f , 0x0000003f + 00027323 0x0000686a store 0x00000001 , 0x000004fc + 00027324 0x0000686b ifetch 0x00000001 , 0x00000006 + 00027325 0x0000686c store 0x00000001 , 0x000004fd + 00027326 0x0000686e call 0x00006ace + 00027327 0x0000686f storet 0x00000002 , 0x000004ff + 00027328 0x00006870 copy 0x00000006 , 0x0000003f + 00027329 0x00006871 store 0x00000002 , 0x00000501 + 00027330 0x00006872 rtn + 00027331 0x00006875 ifetch 0x00000001 , 0x00000006 + 00027332 0x00006876 rshift 0x0000003f , 0x0000003f + 00027333 0x00006877 store 0x00000001 , 0x00000503 + 00027334 0x00006878 call 0x00006ace + 00027335 0x00006879 storet 0x00000002 , 0x00000504 + 00027336 0x0000687a copy 0x00000006 , 0x0000003f + 00027337 0x0000687b store 0x00000002 , 0x00000506 + 00027338 0x0000687c rtn + 00027339 0x00006880 fetch 0x00000002 , 0x00000506 + 00027340 0x00006881 copy 0x0000003f , 0x00000006 + 00027341 0x00006882 rtn + 00027342 0x00006885 ifetch 0x00000001 , 0x00000006 + 00027343 0x00006886 copy 0x0000003f , 0x00000002 + 00027344 0x00006887 rshift 0x00000002 , 0x00000002 + 00027345 0x00006888 rtnbit1 0x00000000 + 00027346 0x00006889 ifetch 0x00000001 , 0x00000006 + 00027347 0x0000688a lshift3 0x0000003f , 0x0000003f + 00027348 0x0000688b lshift4 0x0000003f , 0x0000003f + 00027349 0x0000688c iadd 0x00000002 , 0x00000002 + 00027350 0x0000688d rtn + 00027351 0x00006890 ifetch 0x00000001 , 0x00000006 + 00027352 0x00006891 store 0x00000001 , 0x0000455d + 00027353 0x00006892 ifetch 0x00000001 , 0x00000006 + 00027354 0x00006893 store 0x00000001 , 0x00000509 + 00027355 0x00006894 ifetch 0x00000001 , 0x00000006 + 00027356 0x00006895 store 0x00000001 , 0x0000050a + 00027357 0x00006896 ifetch 0x00000001 , 0x00000006 + 00027358 0x00006897 store 0x00000001 , 0x0000050b + 00027359 0x00006898 ifetch 0x00000002 , 0x00000006 + 00027360 0x00006899 store 0x00000002 , 0x0000455e + 00027361 0x0000689a ifetch 0x00000001 , 0x00000006 + 00027362 0x0000689b store 0x00000001 , 0x0000050c + 00027363 0x0000689c ifetch 0x00000001 , 0x00000006 + 00027364 0x0000689d store 0x00000001 , 0x00004568 + 00027365 0x0000689e rtn + 00027366 0x000068a2 call 0x00006ab1 + 00027367 0x000068a4 branch 0x00006ae8 + 00027368 0x000068a7 fetch 0x00000001 , 0x00004254 + 00027369 0x000068a8 set1 0x00000005 , 0x0000003f + 00027370 0x000068a9 set1 0x00000006 , 0x0000003f + 00027371 0x000068aa store 0x00000001 , 0x00004254 + 00027372 0x000068ab fetcht 0x00000001 , 0x0000455d + 00027373 0x000068ac lshift2 0x00000002 , 0x00000002 + 00027374 0x000068ad or_into 0x00000003 , 0x00000002 + 00027375 0x000068ae call 0x00006c11 + 00027376 0x000068af jam 0x00000003 , 0x00004567 + 00027377 0x000068b0 branch 0x00006b97 + 00027378 0x000068b3 jam 0x00000008 , 0x00000a99 + 00027379 0x000068b4 call 0x00007d86 + 00027380 0x000068b5 call 0x00006ab1 + 00027381 0x000068b6 fetch 0x00000001 , 0x0000456a + 00027382 0x000068b7 sub 0x0000003f , 0x00000001 , 0x0000003e + 00027383 0x000068b8 branch 0x00006af9 , 0x00000005 + 00027384 0x000068b9 branch 0x00002a8c + 00027385 0x000068bb fetch 0x00000001 , 0x00004254 + 00027386 0x000068bc set1 0x00000007 , 0x0000003f + 00027387 0x000068bd store 0x00000001 , 0x00004254 + 00027388 0x000068be branch 0x00006b97 + 00027389 0x000068c1 call 0x00006acb + 00027390 0x000068c2 ifetch 0x00000001 , 0x00000006 + 00027391 0x000068c3 store 0x00000001 , 0x00000ac2 + 00027392 0x000068c4 call 0x000052d2 + 00027393 0x000068c5 call 0x000052e0 + 00027394 0x000068c6 setarg 0x0000000e + 00027395 0x000068c7 istore 0x00000002 , 0x00000005 + 00027396 0x000068c8 fetch 0x00000002 , 0x0000424a + 00027397 0x000068c9 istore 0x00000002 , 0x00000005 + 00027398 0x000068ca fetch 0x00000001 , 0x00004563 + 00027399 0x000068cc lshift 0x0000003f , 0x0000003f + 00027400 0x000068cd set1 0x00000000 , 0x0000003f + 00027401 0x000068ce istore 0x00000001 , 0x00000005 + 00027402 0x000068cf bpatchx 0x000000a7 , 0x00004034 + 00027403 0x000068d0 setarg 0x000015ef + 00027404 0x000068d1 istore 0x00000002 , 0x00000005 + 00027405 0x000068d2 setarg 0x00001191 + 00027406 0x000068d3 istore 0x00000002 , 0x00000005 + 00027407 0x000068d6 fetch 0x00000001 , 0x00000ac2 + 00027408 0x000068d7 istore 0x00000001 , 0x00000005 + 00027409 0x000068d8 setarg 0x00000007 + 00027410 0x000068d9 istore 0x00000005 , 0x00000005 + 00027411 0x000068dc setarg 0x00000001 + 00027412 0x000068dd istore 0x00000002 , 0x00000005 + 00027413 0x000068e0 call 0x00006a2f + 00027414 0x000068e1 istore 0x00000001 , 0x00000005 + 00027415 0x000068e2 rtn + 00027416 0x000068e7 branch 0x00006b19 + 00027417 0x000068ea bpatchx 0x000000a8 , 0x00004035 + 00027418 0x000068eb fetch 0x00000001 , 0x000004fd + 00027419 0x000068ec beq 0x00000073 , 0x00006b21 + 00027420 0x000068ed beq 0x0000003f , 0x00006b25 + 00027421 0x000068ee beq 0x000000ef , 0x00006b3f + 00027422 0x000068ef beq 0x000000ff , 0x00006b37 + 00027423 0x000068f0 beq 0x00000053 , 0x00006b46 + 00027424 0x000068f1 rtn + 00027425 0x000068f3 fetch 0x00000001 , 0x00004254 + 00027426 0x000068f4 set1 0x00000003 , 0x0000003f + 00027427 0x000068f5 store 0x00000001 , 0x00004254 + 00027428 0x000068f6 branch 0x00006b97 + 00027429 0x000068f8 fetch 0x00000001 , 0x00004254 + 00027430 0x000068f9 set1 0x00000003 , 0x0000003f + 00027431 0x000068fa set1 0x00000002 , 0x0000003f + 00027432 0x000068fb store 0x00000001 , 0x00004254 + 00027433 0x000068fc fetch 0x00000001 , 0x000004fb + 00027434 0x000068fd call 0x00006a26 + 00027435 0x000068fe store 0x00000001 , 0x000004fe + 00027436 0x000068ff call 0x00006bb6 + 00027437 0x00006900 fetch 0x00000001 , 0x000004fb + 00027438 0x00006901 rshift2 0x0000003f , 0x0000003f + 00027439 0x00006902 store 0x00000001 , 0x0000455d + 00027440 0x00006903 lshift2 0x0000003f , 0x0000003f + 00027441 0x00006904 set0 0x00000001 , 0x0000003f + 00027442 0x00006905 set1 0x00000000 , 0x0000003f + 00027443 0x00006906 arg 0x00004565 , 0x00000002 + 00027444 0x00006907 storet 0x00000002 , 0x000004f7 + 00027445 0x00006908 call 0x00006a35 + 00027446 0x00006909 branch 0x00006b97 + 00027447 0x0000690c fetch 0x00000002 , 0x00000501 + 00027448 0x0000690d copy 0x0000003f , 0x00000006 + 00027449 0x0000690e increase 0x00000001 , 0x0000003f + 00027450 0x0000690f store 0x00000002 , 0x00000501 + 00027451 0x00006910 ifetch 0x00000001 , 0x00000006 + 00027452 0x00006911 fetcht 0x00000001 , 0x00004568 + 00027453 0x00006912 iadd 0x00000002 , 0x0000003f + 00027454 0x00006913 store 0x00000001 , 0x00004568 + 00027455 0x00006915 call 0x00006c42 + 00027456 0x00006917 call 0x00006a72 + 00027457 0x00006918 call 0x00006c28 + 00027458 0x00006919 call 0x00006c4b + 00027459 0x0000691a branch 0x00006b97 + 00027460 0x0000691d jam 0x00000009 , 0x00000a99 + 00027461 0x0000691e call 0x00007d86 + 00027462 0x00006920 call 0x00006a0d + 00027463 0x00006921 fetch 0x00000001 , 0x000004fb + 00027464 0x00006922 call 0x00006a26 + 00027465 0x00006923 store 0x00000001 , 0x000004fe + 00027466 0x00006924 call 0x00006bb6 + 00027467 0x00006925 branch 0x00006b97 + 00027468 0x0000692b fetch 0x00000002 , 0x00000264 + 00027469 0x0000692c copy 0x0000003f , 0x00000006 + 00027470 0x0000692d call 0x00006ab8 + 00027471 0x0000692e fetch 0x00000001 , 0x000004fc + 00027472 0x0000692f beq 0x00000000 , 0x00006b52 + 00027473 0x00006930 branch 0x00006b86 + 00027474 0x00006933 bpatchx 0x000000a9 , 0x00004035 + 00027475 0x00006934 fetch 0x00000001 , 0x000004fd + 00027476 0x00006935 beq 0x0000003f , 0x00006a7d + 00027477 0x00006936 beq 0x00000073 , 0x00006a86 + 00027478 0x00006937 beq 0x000000ef , 0x00006b58 + 00027479 0x00006938 branch 0x00006b97 + 00027480 0x0000693a fetch 0x00000002 , 0x00000501 + 00027481 0x0000693b copy 0x0000003f , 0x00000006 + 00027482 0x0000693c call 0x00006ac3 + 00027483 0x0000693d fetch 0x00000001 , 0x00000503 + 00027484 0x0000693e beq 0x00000041 , 0x00006b61 + 00027485 0x0000693f beq 0x00000040 , 0x00006b61 + 00027486 0x00006940 beq 0x00000071 , 0x00006b6c + 00027487 0x00006941 beq 0x00000070 , 0x00006b7c + 00027488 0x00006942 branch 0x00006b97 + 00027489 0x00006945 call 0x00006aaf + 00027490 0x00006946 fetch 0x00000001 , 0x0000455d + 00027491 0x00006947 rshift 0x0000003f , 0x0000003f + 00027492 0x00006948 fetcht 0x00000001 , 0x00004564 + 00027493 0x00006949 isub 0x00000002 , 0x0000003e + 00027494 0x0000694a branch 0x00006b68 , 0x00000005 + 00027495 0x0000694b branch 0x00002a8c + 00027496 0x0000694d fetch 0x00000001 , 0x00004254 + 00027497 0x0000694e set1 0x00000001 , 0x0000003f + 00027498 0x0000694f store 0x00000001 , 0x00004254 + 00027499 0x00006950 branch 0x00006b97 + 00027500 0x00006953 call 0x00006ab1 + 00027501 0x00006954 fetch 0x00000001 , 0x0000456a + 00027502 0x00006955 fetcht 0x00000001 , 0x00004564 + 00027503 0x00006956 isub 0x00000002 , 0x0000003e + 00027504 0x00006957 branch 0x00006b73 , 0x00000005 + 00027505 0x00006958 branch 0x00002a8c + 00027506 0x00006959 branch 0x00006b97 + 00027507 0x0000695b fetch 0x00000001 , 0x00004254 + 00027508 0x0000695c set1 0x00000005 , 0x0000003f + 00027509 0x0000695d set1 0x00000006 , 0x0000003f + 00027510 0x0000695e store 0x00000001 , 0x00004254 + 00027511 0x0000695f fetcht 0x00000001 , 0x0000455d + 00027512 0x00006960 lshift2 0x00000002 , 0x00000002 + 00027513 0x00006961 or_into 0x00000003 , 0x00000002 + 00027514 0x00006962 call 0x00006c11 + 00027515 0x00006963 branch 0x00006b97 + 00027516 0x00006966 call 0x00006ab1 + 00027517 0x00006967 fetch 0x00000001 , 0x0000456a + 00027518 0x00006968 fetcht 0x00000001 , 0x00004564 + 00027519 0x00006969 isub 0x00000002 , 0x0000003e + 00027520 0x0000696a branch 0x00006b82 , 0x00000005 + 00027521 0x0000696b branch 0x00002a8c + 00027522 0x0000696d fetch 0x00000001 , 0x00004254 + 00027523 0x0000696e set1 0x00000007 , 0x0000003f + 00027524 0x0000696f store 0x00000001 , 0x00004254 + 00027525 0x00006970 branch 0x00006b97 + 00027526 0x00006973 fetch 0x00000001 , 0x000004fc + 00027527 0x00006974 fetcht 0x00000001 , 0x00004564 + 00027528 0x00006975 isub 0x00000002 , 0x0000003e + 00027529 0x00006976 branch 0x00006b8c , 0x00000005 + 00027530 0x00006977 branch 0x00002a8c + 00027531 0x00006978 branch 0x00006b97 + 00027532 0x0000697b fetch 0x00000001 , 0x000004fd + 00027533 0x0000697c beq 0x00000073 , 0x00006b91 + 00027534 0x0000697d beq 0x000000ef , 0x00006b3f + 00027535 0x0000697e beq 0x000000ff , 0x00006b37 + 00027536 0x0000697f beq 0x00000053 , 0x00006b96 + 00027537 0x00006981 fetch 0x00000001 , 0x00004254 + 00027538 0x00006982 set1 0x00000003 , 0x0000003f + 00027539 0x00006983 store 0x00000001 , 0x00004254 + 00027540 0x00006984 branch 0x00006b97 + 00027541 0x00006986 branch 0x00006b95 + 00027542 0x00006988 branch 0x00006b46 + 00027543 0x0000698a rtn + 00027544 0x0000698d fetch 0x00000001 , 0x00004567 + 00027545 0x0000698e rtn 0x00000034 + 00027546 0x0000698f beq 0x00000003 , 0x00006b9c + 00027547 0x00006990 branch 0x00002a8c + 00027548 0x00006993 jam 0x00000000 , 0x00004567 + 00027549 0x00006994 call 0x000052d2 + 00027550 0x00006995 arg 0x00000001 , 0x00000002 + 00027551 0x00006996 fetcht 0x00000001 , 0x0000455d + 00027552 0x00006997 lshift2 0x00000002 , 0x00000002 + 00027553 0x00006999 or_into 0x00000003 , 0x00000002 + 00027554 0x0000699a arg 0x000000aa , 0x00000011 + 00027555 0x0000699b call 0x00006bfc + 00027556 0x0000699c call 0x000052e0 + 00027557 0x0000699d copy 0x00000005 , 0x00000006 + 00027558 0x0000699e ifetch 0x00000002 , 0x00000006 + 00027559 0x0000699f branch 0x00002a8c , 0x00000034 + 00027560 0x000069a0 rtn + 00027561 0x000069a3 call 0x000052e0 + 00027562 0x000069a4 setarg 0x00000004 + 00027563 0x000069a5 istore 0x00000002 , 0x00000005 + 00027564 0x000069a6 fetch 0x00000002 , 0x0000424a + 00027565 0x000069a7 istore 0x00000002 , 0x00000005 + 00027566 0x000069a8 fetch 0x00000001 , 0x000004fb + 00027567 0x000069a9 istore 0x00000001 , 0x00000005 + 00027568 0x000069aa bpatchx 0x000000aa , 0x00004035 + 00027569 0x000069ab setarg 0x0000013f + 00027570 0x000069ac istore 0x00000002 , 0x00000005 + 00027571 0x000069ad fetch 0x00000001 , 0x000004fe + 00027572 0x000069ae istore 0x00000001 , 0x00000005 + 00027573 0x000069af rtn + 00027574 0x000069b1 call 0x000052d2 + 00027575 0x000069b2 call 0x000052e0 + 00027576 0x000069b3 setarg 0x00000004 + 00027577 0x000069b4 istore 0x00000002 , 0x00000005 + 00027578 0x000069b5 fetch 0x00000002 , 0x0000424a + 00027579 0x000069b6 istore 0x00000002 , 0x00000005 + 00027580 0x000069b7 fetch 0x00000001 , 0x000004fb + 00027581 0x000069b8 istore 0x00000001 , 0x00000005 + 00027582 0x000069b9 bpatchx 0x000000ab , 0x00004035 + 00027583 0x000069ba setarg 0x00000173 + 00027584 0x000069bb istore 0x00000002 , 0x00000005 + 00027585 0x000069bc fetch 0x00000001 , 0x000004fe + 00027586 0x000069bd istore 0x00000001 , 0x00000005 + 00027587 0x000069be rtn + 00027588 0x000069c0 call 0x000052e0 + 00027589 0x000069c1 setarg 0x0000000e + 00027590 0x000069c2 istore 0x00000002 , 0x00000005 + 00027591 0x000069c3 fetch 0x00000002 , 0x0000424a + 00027592 0x000069c4 istore 0x00000002 , 0x00000005 + 00027593 0x000069c5 fetch 0x00000001 , 0x00004563 + 00027594 0x000069c6 lshift 0x0000003f , 0x0000003f + 00027595 0x000069c7 set1 0x00000000 , 0x0000003f + 00027596 0x000069c8 istore 0x00000001 , 0x00000005 + 00027597 0x000069c9 bpatchx 0x000000ac , 0x00004035 + 00027598 0x000069ca setarg 0x000015ef + 00027599 0x000069cb istore 0x00000002 , 0x00000005 + 00027600 0x000069cc setarg 0x00001183 + 00027601 0x000069cd istore 0x00000002 , 0x00000005 + 00027602 0x000069ce copy 0x00000002 , 0x0000003f + 00027603 0x000069cf istore 0x00000001 , 0x00000005 + 00027604 0x000069d0 setarg 0x000000f0 + 00027605 0x000069d1 istore 0x00000003 , 0x00000005 + 00027606 0x000069d2 setarg 0x0000007f + 00027607 0x000069d3 istore 0x00000002 , 0x00000005 + 00027608 0x000069d4 setarg 0x00000000 + 00027609 0x000069d5 istore 0x00000001 , 0x00000005 + 00027610 0x000069d6 setarg 0x00000001 + 00027611 0x000069d7 istore 0x00000001 , 0x00000005 + 00027612 0x000069d8 call 0x00006a2f + 00027613 0x000069d9 istore 0x00000001 , 0x00000005 + 00027614 0x000069da jam 0x00000010 , 0x00004569 + 00027615 0x000069db rtn + 00027616 0x000069dd call 0x000052d2 + 00027617 0x000069de call 0x000052e0 + 00027618 0x000069df setarg 0x0000000e + 00027619 0x000069e0 istore 0x00000002 , 0x00000005 + 00027620 0x000069e1 fetch 0x00000002 , 0x0000424a + 00027621 0x000069e2 istore 0x00000002 , 0x00000005 + 00027622 0x000069e3 fetch 0x00000001 , 0x00004563 + 00027623 0x000069e4 lshift 0x0000003f , 0x0000003f + 00027624 0x000069e5 set1 0x00000000 , 0x0000003f + 00027625 0x000069e6 istore 0x00000001 , 0x00000005 + 00027626 0x000069e7 bpatchx 0x000000ad , 0x00004035 + 00027627 0x000069e8 setarg 0x000015ef + 00027628 0x000069e9 istore 0x00000002 , 0x00000005 + 00027629 0x000069ea setarg 0x00001181 + 00027630 0x000069eb istore 0x00000002 , 0x00000005 + 00027631 0x000069ec fetch 0x00000001 , 0x0000455d + 00027632 0x000069ed istore 0x00000001 , 0x00000005 + 00027633 0x000069ee setarg 0x000000e0 + 00027634 0x000069ef istore 0x00000003 , 0x00000005 + 00027635 0x000069f0 fetch 0x00000002 , 0x0000456c + 00027636 0x000069f1 istore 0x00000002 , 0x00000005 + 00027637 0x000069f2 setarg 0x00000000 + 00027638 0x000069f3 istore 0x00000001 , 0x00000005 + 00027639 0x000069f4 fetch 0x00000001 , 0x0000456e + 00027640 0x000069f5 istore 0x00000001 , 0x00000005 + 00027641 0x000069f6 call 0x00006a2f + 00027642 0x000069f7 istore 0x00000001 , 0x00000005 + 00027643 0x000069f8 rtn + 00027644 0x000069fa call 0x000052e0 + 00027645 0x000069fb setarg 0x00000008 + 00027646 0x000069fc istore 0x00000002 , 0x00000005 + 00027647 0x000069fd fetch 0x00000002 , 0x0000424a + 00027648 0x000069fe istore 0x00000002 , 0x00000005 + 00027649 0x000069ff fetch 0x00000001 , 0x00004563 + 00027650 0x00006a00 lshift 0x0000003f , 0x0000003f + 00027651 0x00006a01 set1 0x00000000 , 0x0000003f + 00027652 0x00006a02 istore 0x00000001 , 0x00000005 + 00027653 0x00006a03 bpatchx 0x000000ae , 0x00004035 + 00027654 0x00006a04 setarg 0x000009ef + 00027655 0x00006a05 istore 0x00000002 , 0x00000005 + 00027656 0x00006a06 setarg 0x000005e3 + 00027657 0x00006a07 istore 0x00000002 , 0x00000005 + 00027658 0x00006a08 copy 0x00000002 , 0x0000003f + 00027659 0x00006a09 istore 0x00000001 , 0x00000005 + 00027660 0x00006a0a setarg 0x0000008d + 00027661 0x00006a0b istore 0x00000001 , 0x00000005 + 00027662 0x00006a0c call 0x00006a2f + 00027663 0x00006a0d istore 0x00000001 , 0x00000005 + 00027664 0x00006a0e rtn + 00027665 0x00006a11 call 0x000052d2 + 00027666 0x00006a12 call 0x000052e0 + 00027667 0x00006a13 setarg 0x00000008 + 00027668 0x00006a14 istore 0x00000002 , 0x00000005 + 00027669 0x00006a15 fetch 0x00000002 , 0x0000424a + 00027670 0x00006a16 istore 0x00000002 , 0x00000005 + 00027671 0x00006a17 copy 0x00000002 , 0x0000000b + 00027672 0x00006a18 fetch 0x00000001 , 0x00004563 + 00027673 0x00006a19 lshift 0x0000003f , 0x0000003f + 00027674 0x00006a1a set1 0x00000000 , 0x0000003f + 00027675 0x00006a1b istore 0x00000001 , 0x00000005 + 00027676 0x00006a1c bpatchx 0x000000af , 0x00004035 + 00027677 0x00006a1d setarg 0x000009ef + 00027678 0x00006a1e istore 0x00000002 , 0x00000005 + 00027679 0x00006a1f setarg 0x000005e1 + 00027680 0x00006a20 istore 0x00000002 , 0x00000005 + 00027681 0x00006a21 copy 0x0000000b , 0x0000003f + 00027682 0x00006a22 istore 0x00000001 , 0x00000005 + 00027683 0x00006a23 setarg 0x0000008d + 00027684 0x00006a24 istore 0x00000001 , 0x00000005 + 00027685 0x00006a25 call 0x00006a2f + 00027686 0x00006a26 istore 0x00000001 , 0x00000005 + 00027687 0x00006a27 rtn + 00027688 0x00006a2a bpatchx 0x000000b0 , 0x00004036 + 00027689 0x00006a2b fetch 0x00000001 , 0x00004569 + 00027690 0x00006a2c rtn 0x00000034 + 00027691 0x00006a2d hfetch 0x00000002 , 0x00008112 + 00027692 0x00006a2e nrtn 0x00000034 + 00027693 0x00006a2f copy 0x00000011 , 0x0000003f + 00027694 0x00006a30 store 0x00000001 , 0x00000a9b + 00027695 0x00006a31 storet 0x00000001 , 0x00000a9a + 00027696 0x00006a32 call 0x0000526e + 00027697 0x00006a33 nrtn 0x00000034 + 00027698 0x00006a34 call 0x000052d2 + 00027699 0x00006a35 call 0x000052e0 + 00027700 0x00006a36 setarg 0x00000005 + 00027701 0x00006a37 istore 0x00000002 , 0x00000005 + 00027702 0x00006a38 fetch 0x00000002 , 0x0000424a + 00027703 0x00006a39 istore 0x00000002 , 0x00000005 + 00027704 0x00006a3a fetch 0x00000001 , 0x0000050d + 00027705 0x00006a3b istore 0x00000001 , 0x00000005 + 00027706 0x00006a3c setarg 0x000001ff + 00027707 0x00006a3d istore 0x00000002 , 0x00000005 + 00027708 0x00006a3e fetch 0x00000001 , 0x00004569 + 00027709 0x00006a3f istore 0x00000001 , 0x00000005 + 00027710 0x00006a40 fetch 0x00000001 , 0x00004566 + 00027711 0x00006a41 istore 0x00000001 , 0x00000005 + 00027712 0x00006a42 jam 0x00000000 , 0x00004569 + 00027713 0x00006a43 rtn + 00027714 0x00006a46 bpatchx 0x000000b1 , 0x00004036 + 00027715 0x00006a47 fetch 0x00000001 , 0x0000456b + 00027716 0x00006a48 rtneq 0x00000001 + 00027717 0x00006a49 fetch 0x00000002 , 0x000004ff + 00027718 0x00006a4a rtn 0x00000034 + 00027719 0x00006a4b fetch 0x00000001 , 0x00004569 + 00027720 0x00006a4c increase 0x00000001 , 0x0000003f + 00027721 0x00006a4d store 0x00000001 , 0x00004569 + 00027722 0x00006a4e rtn + 00027723 0x00006a51 fetch 0x00000002 , 0x0000456f + 00027724 0x00006a52 branch 0x00007f9c + 00027725 0x00006a55 bpatchx 0x000000b2 , 0x00004036 + 00027726 0x00006a57 fetch 0x00000001 , 0x00004568 + 00027727 0x00006a58 rtn 0x00000034 + 00027728 0x00006a59 increase 0xffffffff , 0x0000003f + 00027729 0x00006a5a store 0x00000001 , 0x00004568 + 00027730 0x00006a5b fetch 0x00000002 , 0x0000455e + 00027731 0x00006a5c fetcht 0x00000002 , 0x0000469f + 00027732 0x00006a5d isub 0x00000002 , 0x0000003e + 00027733 0x00006a5e branch 0x00006c57 , 0x00000002 + 00027734 0x00006a5f store 0x00000002 , 0x0000469f + 00027735 0x00006a61 fetch 0x00000001 , 0x00004569 + 00027736 0x00006a62 branch 0x00006c5f , 0x00000034 + 00027737 0x00006a63 jam 0x00000001 , 0x00000510 + 00027738 0x00006a64 fetch 0x00000001 , 0x00004566 + 00027739 0x00006a65 store 0x00000001 , 0x0000050f + 00027740 0x00006a66 setarg 0x000000ff + 00027741 0x00006a67 store 0x00000001 , 0x0000050e + 00027742 0x00006a68 branch 0x00006c64 + 00027743 0x00006a6a jam 0x00000000 , 0x00000510 + 00027744 0x00006a6b fetch 0x00000001 , 0x00004565 + 00027745 0x00006a6c store 0x00000001 , 0x0000050f + 00027746 0x00006a6d setarg 0x000000ef + 00027747 0x00006a6e store 0x00000001 , 0x0000050e + 00027748 0x00006a70 bpatchx 0x000000b3 , 0x00004036 + 00027749 0x00006a71 fetch 0x00000002 , 0x0000469f + 00027750 0x00006a72 sub 0x0000003f , 0x0000007f , 0x0000003e + 00027751 0x00006a73 branch 0x00006c6b , 0x00000002 + 00027752 0x00006a74 fetch 0x00000001 , 0x00000510 + 00027753 0x00006a75 increase 0x00000001 , 0x0000003f + 00027754 0x00006a76 store 0x00000001 , 0x00000510 + 00027755 0x00006a78 call 0x00006a72 + 00027756 0x00006a79 fetch 0x00000002 , 0x0000469f + 00027757 0x00006a7a increase 0x00000008 , 0x0000003f + 00027758 0x00006a7b fetcht 0x00000001 , 0x00000510 + 00027759 0x00006a7c iadd 0x00000002 , 0x00000011 + 00027760 0x00006a7e call 0x00005240 + 00027761 0x00006a7f store 0x00000002 , 0x00000277 + 00027762 0x00006a80 increase 0x00000004 , 0x0000003f + 00027763 0x00006a81 store 0x00000002 , 0x00000279 + 00027764 0x00006a82 copy 0x0000003f , 0x00000005 + 00027765 0x00006a83 fetch 0x00000001 , 0x0000050d + 00027766 0x00006a84 istore 0x00000001 , 0x00000005 + 00027767 0x00006a85 fetch 0x00000001 , 0x0000050e + 00027768 0x00006a86 istore 0x00000001 , 0x00000005 + 00027769 0x00006a87 call 0x00006c95 + 00027770 0x00006a88 call 0x00006ca6 + 00027771 0x00006a89 bpatchx 0x000000b4 , 0x00004036 + 00027772 0x00006a8a fetch 0x00000002 , 0x00004571 + 00027773 0x00006a8b copy 0x0000003f , 0x00000003 + 00027774 0x00006a8c fetch 0x00000002 , 0x0000469f + 00027775 0x00006a8d copy 0x0000003f , 0x00000039 + 00027776 0x00006a8e call 0x000066ea + 00027777 0x00006a8f copy 0x00000005 , 0x00000002 + 00027778 0x00006a90 copy 0x00000003 , 0x0000003f + 00027779 0x00006a91 store 0x00000002 , 0x00004571 + 00027780 0x00006a92 copy 0x00000002 , 0x00000005 + 00027781 0x00006a93 fetch 0x00000001 , 0x0000050f + 00027782 0x00006a94 istore 0x00000001 , 0x00000005 + 00027783 0x00006a95 fetch 0x00000002 , 0x00000277 + 00027784 0x00006a96 copy 0x0000003f , 0x00000005 + 00027785 0x00006a97 fetch 0x00000002 , 0x0000469f + 00027786 0x00006a98 fetcht 0x00000001 , 0x00000510 + 00027787 0x00006a99 iadd 0x00000002 , 0x0000003f + 00027788 0x00006a9a increase 0x00000004 , 0x0000003f + 00027789 0x00006a9b istore 0x00000002 , 0x00000005 + 00027790 0x00006a9c fetch 0x00000002 , 0x0000424a + 00027791 0x00006a9d istore 0x00000002 , 0x00000005 + 00027792 0x00006a9e jam 0x00000000 , 0x00004569 + 00027793 0x00006a9f fetch 0x00000002 , 0x00004573 + 00027794 0x00006aa0 beq 0x00000000 , 0x00003a97 + 00027795 0x00006aa1 jam 0x00000000 , 0x00000b05 + 00027796 0x00006aa2 rtn + 00027797 0x00006aa5 bpatchx 0x000000b5 , 0x00004036 + 00027798 0x00006aa6 fetch 0x00000002 , 0x0000469f + 00027799 0x00006aa7 sub 0x0000003f , 0x0000007f , 0x0000003e + 00027800 0x00006aa8 nbranch 0x00006c9d , 0x00000002 + 00027801 0x00006aa9 lshift 0x0000003f , 0x0000003f + 00027802 0x00006aaa set1 0x00000000 , 0x0000003f + 00027803 0x00006aab istore 0x00000001 , 0x00000005 + 00027804 0x00006aac rtn + 00027805 0x00006aae fetch 0x00000002 , 0x0000469f + 00027806 0x00006aaf rshift3 0x0000003f , 0x0000003f + 00027807 0x00006ab0 rshift4 0x0000003f , 0x00000002 + 00027808 0x00006ab1 and_into 0x0000007f , 0x0000003f + 00027809 0x00006ab2 lshift 0x0000003f , 0x0000003f + 00027810 0x00006ab3 set0 0x00000000 , 0x0000003f + 00027811 0x00006ab4 istore 0x00000001 , 0x00000005 + 00027812 0x00006ab5 istoret 0x00000001 , 0x00000005 + 00027813 0x00006ab6 rtn + 00027814 0x00006ab8 fetch 0x00000001 , 0x00004569 + 00027815 0x00006ab9 rtn 0x00000034 + 00027816 0x00006aba istore 0x00000001 , 0x00000005 + 00027817 0x00006abb rtn + 00027818 0x00006ac1 bpatchx 0x000000b6 , 0x00004036 + 00027819 0x00006ac2 call 0x00007d9c + 00027820 0x00006ac3 call 0x000032f6 + 00027821 0x00006ac4 call 0x0000631b + 00027822 0x00006ac6 bpatchx 0x000000b7 , 0x00004036 + 00027823 0x00006ac7 call 0x000076dc + 00027824 0x00006ac8 call 0x000076b5 + 00027825 0x00006ac9 call 0x000076c6 + 00027826 0x00006acc call 0x0000526e + 00027827 0x00006acd nrtn 0x00000034 + 00027828 0x00006acf call 0x00004da9 + 00027829 0x00006ad0 call 0x0000526e + 00027830 0x00006ad1 nrtn 0x00000034 + 00027831 0x00006ad2 bpatchx 0x000000b8 , 0x00004037 + 00027832 0x00006ad4 call 0x00006cf5 + 00027833 0x00006ad5 call 0x00004f64 + 00027834 0x00006ad6 call 0x00006b98 + 00027835 0x00006ad8 call 0x00006cbe + 00027836 0x00006ad9 bpatchx 0x000000b9 , 0x00004037 + 00027837 0x00006adc branch 0x000032f2 + 00027838 0x00006adf fetch 0x00000001 , 0x0000027f + 00027839 0x00006ae0 bbit1 0x00000000 , 0x00005087 + 00027840 0x00006ae1 bbit1 0x00000007 , 0x00005091 + 00027841 0x00006ae2 rtn + 00027842 0x00006ae5 bpatchx 0x000000ba , 0x00004037 + 00027843 0x00006ae6 call 0x00005274 + 00027844 0x00006ae7 rtn 0x00000034 + 00027845 0x00006ae8 fetch 0x00000001 , 0x0000004b + 00027846 0x00006ae9 rtnbit1 0x00000006 + 00027847 0x00006aea call 0x00005258 + 00027848 0x00006aeb store 0x00000002 , 0x0000016f + 00027849 0x00006aec copy 0x0000003f , 0x00000006 + 00027850 0x00006aed ifetch 0x00000002 , 0x00000006 + 00027851 0x00006aee increase 0x00000004 , 0x0000003f + 00027852 0x00006aef store 0x00000002 , 0x000041dc + 00027853 0x00006af0 jam 0x00000006 , 0x000041db + 00027854 0x00006af1 bpatchx 0x000000bb , 0x00004037 + 00027855 0x00006af2 fetch 0x00000002 , 0x00004246 + 00027856 0x00006af3 branch 0x00006cdd , 0x00000034 + 00027857 0x00006af4 fetch 0x00000001 , 0x0000004b + 00027858 0x00006af5 rtnbit0 0x00000007 + 00027859 0x00006af6 set0 0x00000007 , 0x0000003f + 00027860 0x00006af7 store 0x00000001 , 0x0000004b + 00027861 0x00006af8 jam 0x00000005 , 0x000041db + 00027862 0x00006af9 fetcht 0x00000002 , 0x00004246 + 00027863 0x00006afa fetch 0x00000002 , 0x0000016f + 00027864 0x00006afb iadd 0x00000002 , 0x0000003f + 00027865 0x00006afc store 0x00000002 , 0x0000016f + 00027866 0x00006afd fetch 0x00000002 , 0x000041dc + 00027867 0x00006afe isub 0x00000002 , 0x0000003f + 00027868 0x00006aff store 0x00000002 , 0x000041dc + 00027869 0x00006b01 bpatchx 0x000000bc , 0x00004037 + 00027870 0x00006b02 fetch 0x00000002 , 0x000041dc + 00027871 0x00006b03 branch 0x00002a8c , 0x00000034 + 00027872 0x00006b04 arg 0x00000104 , 0x00000002 + 00027873 0x00006b05 isub 0x00000002 , 0x0000003f + 00027874 0x00006b06 nbranch 0x00006ce9 , 0x00000002 + 00027875 0x00006b07 bpatchx 0x000000bd , 0x00004037 + 00027876 0x00006b08 storet 0x00000002 , 0x000041dc + 00027877 0x00006b09 fetch 0x00000002 , 0x00004246 + 00027878 0x00006b0a iadd 0x00000002 , 0x0000003f + 00027879 0x00006b0b store 0x00000002 , 0x00004246 + 00027880 0x00006b0c branch 0x00006ceb + 00027881 0x00006b0e setarg 0x00000000 + 00027882 0x00006b0f store 0x00000002 , 0x00004246 + 00027883 0x00006b11 fetch 0x00000001 , 0x0000004b + 00027884 0x00006b12 set1 0x00000006 , 0x0000003f + 00027885 0x00006b13 store 0x00000001 , 0x0000004b + 00027886 0x00006b14 rtn + 00027887 0x00006b17 fetch 0x00000001 , 0x00004684 + 00027888 0x00006b18 bbit1 0x00000000 , 0x00006cf3 + 00027889 0x00006b19 jam 0x00000001 , 0x00000287 + 00027890 0x00006b1a rtn + 00027891 0x00006b1c jam 0x0000000f , 0x00000287 + 00027892 0x00006b1d rtn + 00027893 0x00006b20 fetch 0x00000001 , 0x00004681 + 00027894 0x00006b21 nbranch 0x00006cfb , 0x00000034 + 00027895 0x00006b23 fetch 0x00000001 , 0x00000286 + 00027896 0x00006b25 rtn 0x00000034 + 00027897 0x00006b27 jam 0x00000000 , 0x00000286 + 00027898 0x00006b29 rtn + 00027899 0x00006b2d bpatchx 0x000000be , 0x00004037 + 00027900 0x00006b2e fetch 0x00000001 , 0x00000287 + 00027901 0x00006b2f rtn 0x00000034 + 00027902 0x00006b30 beq 0x00000001 , 0x00006d1b + 00027903 0x00006b31 beq 0x00000002 , 0x00006d74 + 00027904 0x00006b32 beq 0x00000003 , 0x00006d21 + 00027905 0x00006b33 beq 0x00000004 , 0x00006d78 + 00027906 0x00006b34 beq 0x0000003b , 0x00006d2b + 00027907 0x00006b35 beq 0x0000003c , 0x00006d7b + 00027908 0x00006b36 beq 0x0000000d , 0x00006d30 + 00027909 0x00006b37 beq 0x0000000e , 0x00006d80 + 00027910 0x00006b38 beq 0x0000000f , 0x00006d33 + 00027911 0x00006b39 beq 0x00000010 , 0x00006d86 + 00027912 0x00006b3a beq 0x00000011 , 0x00006d39 + 00027913 0x00006b3b beq 0x00000012 , 0x00006d8a + 00027914 0x00006b3c beq 0x00000013 , 0x00006d3f + 00027915 0x00006b3d beq 0x00000014 , 0x00006d8e + 00027916 0x00006b3e beq 0x00000015 , 0x00006d45 + 00027917 0x00006b3f beq 0x00000016 , 0x00006d92 + 00027918 0x00006b40 beq 0x00000017 , 0x00006d4b + 00027919 0x00006b41 beq 0x00000018 , 0x00006d97 + 00027920 0x00006b42 beq 0x00000019 , 0x00006d51 + 00027921 0x00006b43 beq 0x0000001a , 0x00006d9b + 00027922 0x00006b44 beq 0x0000001b , 0x00006d57 + 00027923 0x00006b45 beq 0x0000001c , 0x00006d9f + 00027924 0x00006b46 beq 0x0000001d , 0x00006d5d + 00027925 0x00006b47 beq 0x0000001e , 0x00006da4 + 00027926 0x00006b48 beq 0x0000001f , 0x00006d63 + 00027927 0x00006b49 beq 0x00000020 , 0x00006da8 + 00027928 0x00006b4a beq 0x00000021 , 0x00006d6e + 00027929 0x00006b4b beq 0x00000022 , 0x00006dac + 00027930 0x00006b4d rtn + 00027931 0x00006b4f call 0x00006db7 + 00027932 0x00006b50 jam 0x00000002 , 0x00000287 + 00027933 0x00006b51 fetch 0x00000001 , 0x00004250 + 00027934 0x00006b52 set1 0x00000000 , 0x0000003f + 00027935 0x00006b53 store 0x00000001 , 0x00004250 + 00027936 0x00006b54 rtn + 00027937 0x00006b56 jam 0x00000004 , 0x00000287 + 00027938 0x00006b57 fetch 0x00000001 , 0x00004250 + 00027939 0x00006b58 rtnbit1 0x00000002 + 00027940 0x00006b59 jam 0x00000003 , 0x00000287 + 00027941 0x00006b5a call 0x00006dbe + 00027942 0x00006b5b jam 0x00000004 , 0x00000287 + 00027943 0x00006b5c fetch 0x00000001 , 0x00004250 + 00027944 0x00006b5d set1 0x00000002 , 0x0000003f + 00027945 0x00006b5e store 0x00000001 , 0x00004250 + 00027946 0x00006b5f rtn + 00027947 0x00006b61 call 0x00005274 + 00027948 0x00006b62 nrtn 0x00000034 + 00027949 0x00006b63 call 0x00006dcd + 00027950 0x00006b64 jam 0x0000003c , 0x00000287 + 00027951 0x00006b65 rtn + 00027952 0x00006b67 call 0x00006dc3 + 00027953 0x00006b68 jam 0x0000000e , 0x00000287 + 00027954 0x00006b69 rtn + 00027955 0x00006b6b call 0x00006ddd + 00027956 0x00006b6c jam 0x00000010 , 0x00000287 + 00027957 0x00006b6d fetch 0x00000001 , 0x00004252 + 00027958 0x00006b6e set1 0x00000000 , 0x0000003f + 00027959 0x00006b6f store 0x00000001 , 0x00004252 + 00027960 0x00006b70 rtn + 00027961 0x00006b72 call 0x00006de4 + 00027962 0x00006b73 jam 0x00000012 , 0x00000287 + 00027963 0x00006b74 fetch 0x00000001 , 0x00004252 + 00027964 0x00006b75 set1 0x00000002 , 0x0000003f + 00027965 0x00006b76 store 0x00000001 , 0x00004252 + 00027966 0x00006b77 rtn + 00027967 0x00006b79 call 0x00006de9 + 00027968 0x00006b7a jam 0x00000014 , 0x00000287 + 00027969 0x00006b7b fetch 0x00000001 , 0x00004253 + 00027970 0x00006b7c set1 0x00000000 , 0x0000003f + 00027971 0x00006b7d store 0x00000001 , 0x00004253 + 00027972 0x00006b7e rtn + 00027973 0x00006b80 call 0x00006df0 + 00027974 0x00006b81 jam 0x00000016 , 0x00000287 + 00027975 0x00006b82 fetch 0x00000001 , 0x00004253 + 00027976 0x00006b83 set1 0x00000002 , 0x0000003f + 00027977 0x00006b84 store 0x00000001 , 0x00004253 + 00027978 0x00006b85 rtn + 00027979 0x00006b87 call 0x00006dd1 + 00027980 0x00006b88 jam 0x00000018 , 0x00000287 + 00027981 0x00006b89 fetch 0x00000001 , 0x00004251 + 00027982 0x00006b8a set1 0x00000000 , 0x0000003f + 00027983 0x00006b8b store 0x00000001 , 0x00004251 + 00027984 0x00006b8c rtn + 00027985 0x00006b8e call 0x00006dd8 + 00027986 0x00006b8f jam 0x0000001a , 0x00000287 + 00027987 0x00006b90 fetch 0x00000001 , 0x00004251 + 00027988 0x00006b91 set1 0x00000002 , 0x0000003f + 00027989 0x00006b92 store 0x00000001 , 0x00004251 + 00027990 0x00006b93 rtn + 00027991 0x00006b95 call 0x00006df5 + 00027992 0x00006b96 jam 0x0000001c , 0x00000287 + 00027993 0x00006b97 fetch 0x00000001 , 0x00004251 + 00027994 0x00006b98 set1 0x00000006 , 0x0000003f + 00027995 0x00006b99 store 0x00000001 , 0x00004251 + 00027996 0x00006b9a rtn + 00027997 0x00006b9c call 0x00006dfc + 00027998 0x00006b9d fetch 0x00000001 , 0x00004254 + 00027999 0x00006b9e set1 0x00000000 + 00028000 0x00006b9f store 0x00000001 , 0x00004254 + 00028001 0x00006ba0 jam 0x0000001e , 0x00000287 + 00028002 0x00006ba1 rtn + 00028003 0x00006ba3 call 0x00006e02 + 00028004 0x00006ba4 fetch 0x00000001 , 0x00004254 + 00028005 0x00006ba5 set1 0x00000002 + 00028006 0x00006ba6 store 0x00000001 , 0x00004254 + 00028007 0x00006ba7 jam 0x00000020 , 0x00000287 + 00028008 0x00006ba8 fetch 0x00000001 , 0x00004564 + 00028009 0x00006ba9 lshift3 0x0000003f , 0x0000003f + 00028010 0x00006baa or_into 0x00000003 , 0x0000003f + 00028011 0x00006bab arg 0x00004565 , 0x00000002 + 00028012 0x00006bac storet 0x00000002 , 0x000004f7 + 00028013 0x00006bad branch 0x00006a35 + 00028014 0x00006baf call 0x00006e0c + 00028015 0x00006bb0 fetch 0x00000001 , 0x00004254 + 00028016 0x00006bb1 set1 0x00000004 + 00028017 0x00006bb2 store 0x00000001 , 0x00004254 + 00028018 0x00006bb3 jam 0x00000022 , 0x00000287 + 00028019 0x00006bb4 rtn + 00028020 0x00006bb7 fetch 0x00000001 , 0x00004250 + 00028021 0x00006bb8 rtnbit0 0x00000001 + 00028022 0x00006bb9 jam 0x00000003 , 0x00000287 + 00028023 0x00006bba branch 0x00006cfb + 00028024 0x00006bbc fetch 0x00000001 , 0x00004250 + 00028025 0x00006bbd rtnne 0x0000003f + 00028026 0x00006bbe jam 0x0000003b , 0x00000287 + 00028027 0x00006bc0 fetch 0x00000001 , 0x00000285 + 00028028 0x00006bc1 rtnne 0x00000017 + 00028029 0x00006bc2 jam 0x00000000 , 0x00000285 + 00028030 0x00006bc3 jam 0x0000000d , 0x00000287 + 00028031 0x00006bc4 branch 0x00006cfb + 00028032 0x00006bc6 fetch 0x00000001 , 0x00004250 + 00028033 0x00006bc7 nrtn 0x00000034 + 00028034 0x00006bc8 fetch 0x00000001 , 0x00004684 + 00028035 0x00006bc9 bbit1 0x00000000 , 0x00006daf + 00028036 0x00006bca bbit1 0x00000006 , 0x00006db1 + 00028037 0x00006bcb branch 0x00006db5 + 00028038 0x00006bcd fetch 0x00000001 , 0x00004252 + 00028039 0x00006bce rtnbit0 0x00000001 + 00028040 0x00006bcf jam 0x00000011 , 0x00000287 + 00028041 0x00006bd0 branch 0x00006cfb + 00028042 0x00006bd2 fetch 0x00000001 , 0x00004252 + 00028043 0x00006bd3 rtnne 0x0000003f + 00028044 0x00006bd4 jam 0x00000013 , 0x00000287 + 00028045 0x00006bd5 branch 0x00006cfb + 00028046 0x00006bd7 fetch 0x00000001 , 0x00004253 + 00028047 0x00006bd8 rtnbit0 0x00000001 + 00028048 0x00006bd9 jam 0x00000015 , 0x00000287 + 00028049 0x00006bda branch 0x00006cfb + 00028050 0x00006bdc fetch 0x00000001 , 0x00004253 + 00028051 0x00006bdd rtnne 0x0000003f + 00028052 0x00006bde fetch 0x00000001 , 0x00004684 + 00028053 0x00006bdf bbit1 0x00000006 , 0x00006db1 + 00028054 0x00006be0 branch 0x00006db5 + 00028055 0x00006be2 fetch 0x00000001 , 0x00004251 + 00028056 0x00006be3 rtnbit0 0x00000001 + 00028057 0x00006be4 jam 0x00000019 , 0x00000287 + 00028058 0x00006be5 branch 0x00006cfb + 00028059 0x00006be7 fetch 0x00000001 , 0x00004251 + 00028060 0x00006be8 rtnne 0x0000003f + 00028061 0x00006be9 jam 0x0000001b , 0x00000287 + 00028062 0x00006bea branch 0x00006cfb + 00028063 0x00006bec fetch 0x00000001 , 0x00004251 + 00028064 0x00006bed rtnne 0x000000ff + 00028065 0x00006bee fetch 0x00000001 , 0x00004684 + 00028066 0x00006bef bbit1 0x00000006 , 0x00006db3 + 00028067 0x00006bf0 branch 0x00006db5 + 00028068 0x00006bf2 fetch 0x00000001 , 0x00004254 + 00028069 0x00006bf3 rtnbit0 0x00000001 + 00028070 0x00006bf4 jam 0x0000001f , 0x00000287 + 00028071 0x00006bf5 branch 0x00006cfb + 00028072 0x00006bf7 fetch 0x00000001 , 0x00004254 + 00028073 0x00006bf8 rtnbit0 0x00000003 + 00028074 0x00006bf9 jam 0x00000021 , 0x00000287 + 00028075 0x00006bfa branch 0x00006cfb + 00028076 0x00006bfc fetch 0x00000001 , 0x00004254 + 00028077 0x00006bfd rtnne 0x000000ff + 00028078 0x00006bfe branch 0x00006db5 + 00028079 0x00006c01 jam 0x0000000f , 0x00000287 + 00028080 0x00006c02 branch 0x00006cfb + 00028081 0x00006c05 jam 0x00000017 , 0x00000287 + 00028082 0x00006c06 branch 0x00006cfb + 00028083 0x00006c08 jam 0x0000001d , 0x00000287 + 00028084 0x00006c09 branch 0x00006cfb + 00028085 0x00006c0e jam 0x00000000 , 0x00000287 + 00028086 0x00006c0f rtn + 00028087 0x00006c11 bpatchx 0x000000bf , 0x00004037 + 00028088 0x00006c12 call 0x000052b8 + 00028089 0x00006c13 setarg 0x00000001 + 00028090 0x00006c14 copy 0x0000003f , 0x00000002 + 00028091 0x00006c15 setarg 0x00000050 + 00028092 0x00006c16 copy 0x0000003f , 0x0000000b + 00028093 0x00006c17 branch 0x000050a8 + 00028094 0x00006c1a bpatchx 0x000000c0 , 0x00004038 + 00028095 0x00006c1b call 0x000052b8 + 00028096 0x00006c1c fetch 0x00000002 , 0x00004248 + 00028097 0x00006c1d copy 0x0000003f , 0x00000002 + 00028098 0x00006c1e branch 0x000050b7 + 00028099 0x00006c21 bpatchx 0x000000c1 , 0x00004038 + 00028100 0x00006c22 call 0x000052b8 + 00028101 0x00006c23 fetch 0x00000002 , 0x00004248 + 00028102 0x00006c24 copy 0x0000003f , 0x00000002 + 00028103 0x00006c25 arg 0x00000050 , 0x0000000b + 00028104 0x00006c26 call 0x000050cc + 00028105 0x00006c27 fetch 0x00000001 , 0x00004250 + 00028106 0x00006c28 set0 0x00000005 , 0x0000003f + 00028107 0x00006c29 store 0x00000001 , 0x00004250 + 00028108 0x00006c2a rtn + 00028109 0x00006c2d bpatchx 0x000000c2 , 0x00004038 + 00028110 0x00006c2e call 0x000052c5 + 00028111 0x00006c2f call 0x00007138 + 00028112 0x00006c30 branch 0x000050e7 + 00028113 0x00006c33 bpatchx 0x000000c3 , 0x00004038 + 00028114 0x00006c34 call 0x000052b8 + 00028115 0x00006c35 setarg 0x00000003 + 00028116 0x00006c36 copy 0x0000003f , 0x00000002 + 00028117 0x00006c37 setarg 0x00000051 + 00028118 0x00006c38 copy 0x0000003f , 0x0000000b + 00028119 0x00006c39 branch 0x000050a8 + 00028120 0x00006c3c bpatchx 0x000000c4 , 0x00004038 + 00028121 0x00006c3d call 0x000052b8 + 00028122 0x00006c3e fetch 0x00000002 , 0x0000424a + 00028123 0x00006c3f copy 0x0000003f , 0x00000002 + 00028124 0x00006c40 branch 0x000050b7 + 00028125 0x00006c43 bpatchx 0x000000c5 , 0x00004038 + 00028126 0x00006c44 call 0x000052b8 + 00028127 0x00006c45 setarg 0x00000011 + 00028128 0x00006c46 copy 0x0000003f , 0x00000002 + 00028129 0x00006c47 setarg 0x00000052 + 00028130 0x00006c48 copy 0x0000003f , 0x0000000b + 00028131 0x00006c49 branch 0x000050a8 + 00028132 0x00006c4c bpatchx 0x000000c6 , 0x00004038 + 00028133 0x00006c4d call 0x000052b8 + 00028134 0x00006c4e fetch 0x00000002 , 0x0000424c + 00028135 0x00006c4f copy 0x0000003f , 0x00000002 + 00028136 0x00006c50 branch 0x000050b7 + 00028137 0x00006c53 bpatchx 0x000000c7 , 0x00004038 + 00028138 0x00006c54 call 0x000052b8 + 00028139 0x00006c55 setarg 0x00000013 + 00028140 0x00006c56 copy 0x0000003f , 0x00000002 + 00028141 0x00006c57 setarg 0x00000053 + 00028142 0x00006c58 copy 0x0000003f , 0x0000000b + 00028143 0x00006c59 branch 0x000050a8 + 00028144 0x00006c5c bpatchx 0x000000c8 , 0x00004039 + 00028145 0x00006c5d call 0x000052b8 + 00028146 0x00006c5e fetch 0x00000002 , 0x0000424e + 00028147 0x00006c5f copy 0x0000003f , 0x00000002 + 00028148 0x00006c60 branch 0x000050b7 + 00028149 0x00006c63 bpatchx 0x000000c9 , 0x00004039 + 00028150 0x00006c64 call 0x000052d2 + 00028151 0x00006c66 jam 0x00000003 , 0x000004fb + 00028152 0x00006c67 jam 0x0000001c , 0x000004fe + 00028153 0x00006c68 call 0x00006ba9 + 00028154 0x00006c69 jam 0x00000001 , 0x00004563 + 00028155 0x00006c6a rtn + 00028156 0x00006c6d bpatchx 0x000000ca , 0x00004039 + 00028157 0x00006c6e call 0x000052d2 + 00028158 0x00006c6f fetcht 0x00000001 , 0x00004564 + 00028159 0x00006c70 call 0x00006a79 + 00028160 0x00006c71 storet 0x00000001 , 0x0000455d + 00028161 0x00006c72 branch 0x00006bc4 + 00028162 0x00006c75 bpatchx 0x000000cb , 0x00004039 + 00028163 0x00006c76 call 0x000052d2 + 00028164 0x00006c77 fetcht 0x00000001 , 0x0000455d + 00028165 0x00006c78 call 0x00006a73 + 00028166 0x00006c79 call 0x00006a1a + 00028167 0x00006c7a store 0x00000001 , 0x000004fe + 00028168 0x00006c7b fetcht 0x00000001 , 0x0000455d + 00028169 0x00006c7c call 0x00006a73 + 00028170 0x00006c7d storet 0x00000001 , 0x000004fb + 00028171 0x00006c7e branch 0x00006ba9 + 00028172 0x00006c81 bpatchx 0x000000cc , 0x00004039 + 00028173 0x00006c82 call 0x000052d2 + 00028174 0x00006c83 fetcht 0x00000001 , 0x0000455d + 00028175 0x00006c84 call 0x00006a73 + 00028176 0x00006c85 branch 0x00006bfc + 00028177 0x00006c93 bpatchx 0x000000cd , 0x00004039 + 00028178 0x00006c94 fetch 0x00000002 , 0x00000264 + 00028179 0x00006c95 iforce 0x00000006 + 00028180 0x00006c98 ifetch 0x00000001 , 0x00000006 + 00028181 0x00006c99 copy 0x0000003f , 0x00000012 + 00028182 0x00006c9a store 0x00000001 , 0x0000051b + 00028183 0x00006c9b ifetch 0x00000002 , 0x00000006 + 00028184 0x00006c9c store 0x00000002 , 0x0000051c + 00028185 0x00006c9d ifetch 0x00000001 , 0x00000006 + 00028186 0x00006c9e lshift8 0x0000003f , 0x0000000b + 00028187 0x00006c9f ifetch 0x00000001 , 0x00000006 + 00028188 0x00006ca0 iadd 0x0000000b , 0x0000000b + 00028189 0x00006ca1 bpatchx 0x000000ce , 0x00004039 + 00028190 0x00006ca2 copy 0x00000006 , 0x00000002 + 00028191 0x00006ca3 arg 0x00000004 , 0x00000039 + 00028192 0x00006ca4 arg 0x0000052a , 0x00000005 + 00028193 0x00006ca5 call 0x00007ec6 + 00028194 0x00006ca6 copy 0x00000002 , 0x00000006 + 00028195 0x00006ca7 deposit 0x00000012 + 00028196 0x00006ca8 beq 0x00000001 , 0x00006fba + 00028197 0x00006ca9 beq 0x00000002 , 0x00006e2c + 00028198 0x00006caa beq 0x00000003 , 0x00006fba + 00028199 0x00006cab beq 0x00000004 , 0x00006e54 + 00028200 0x00006cac beq 0x00000005 , 0x00006fba + 00028201 0x00006cad beq 0x00000006 , 0x00006f02 + 00028202 0x00006cae beq 0x00000007 , 0x00006fba + 00028203 0x00006caf branch 0x00006fc1 + 00028204 0x00006cbb bpatchx 0x000000cf , 0x00004039 + 00028205 0x00006cbc call 0x00006fd0 + 00028206 0x00006cbd compare 0x00000001 , 0x00000002 , 0x000000ff + 00028207 0x00006cbe branch 0x00007040 , 0x00000001 + 00028208 0x00006cbf compare 0x000000ff , 0x00000002 , 0x000000ff + 00028209 0x00006cc0 branch 0x00006fc4 , 0x00000001 + 00028210 0x00006cc2 ifetch 0x00000002 , 0x00000006 + 00028211 0x00006cc3 store 0x00000002 , 0x00000522 + 00028212 0x00006cc4 increase 0xfffffffe , 0x0000000b + 00028213 0x00006cc6 increase 0xffffffff , 0x0000000b + 00028214 0x00006cc7 nbranch 0x00006fbe , 0x00000005 + 00028215 0x00006cc8 arg 0x00000511 , 0x0000000b + 00028216 0x00006cc9 ifetch 0x00000002 , 0x0000000b + 00028217 0x00006cca rtn 0x00000034 + 00028218 0x00006ccb call 0x00007082 + 00028219 0x00006ccc call 0x000052d0 + 00028220 0x00006ccd force 0x00000003 , 0x0000003f + 00028221 0x00006cce istore 0x00000001 , 0x00000005 + 00028222 0x00006ccf fetch 0x00000002 , 0x0000051c + 00028223 0x00006cd0 istore 0x00000002 , 0x00000005 + 00028224 0x00006cd1 lshift2 0x00000007 , 0x0000003f + 00028225 0x00006cd2 add 0x0000003f , 0x00000005 , 0x0000003f + 00028226 0x00006cd3 add 0x0000003f , 0x00000005 , 0x00000013 + 00028227 0x00006cd4 byteswap 0x0000003f , 0x0000003f + 00028228 0x00006cd5 istore 0x00000002 , 0x00000005 + 00028229 0x00006cd6 deposit 0x00000007 + 00028230 0x00006cd7 byteswap 0x0000003f , 0x0000003f + 00028231 0x00006cd8 istore 0x00000002 , 0x00000005 + 00028232 0x00006cd9 istore 0x00000002 , 0x00000005 + 00028233 0x00006cda arg 0x0000052a , 0x00000006 + 00028234 0x00006cdb copy 0x00000007 , 0x00000039 + 00028235 0x00006cdc branch 0x00006e4f , 0x00000005 + 00028236 0x00006cde ifetch 0x00000004 , 0x00000006 + 00028237 0x00006cdf istore 0x00000004 , 0x00000005 + 00028238 0x00006ce0 loop 0x00006e4c + 00028239 0x00006ce2 force 0x00000000 , 0x0000003f + 00028240 0x00006ce3 istore 0x00000001 , 0x00000005 + 00028241 0x00006ce4 deposit 0x00000013 + 00028242 0x00006ce5 store 0x00000002 , 0x00000275 + 00028243 0x00006ce7 rtn + 00028244 0x00006cf3 bpatchx 0x000000d0 , 0x0000403a + 00028245 0x00006cf4 ifetch 0x00000004 , 0x00000006 + 00028246 0x00006cf5 store 0x00000004 , 0x00000524 + 00028247 0x00006cf6 increase 0xfffffffc , 0x0000000b + 00028248 0x00006cf7 call 0x00006f2e + 00028249 0x00006cf8 store 0x00000002 , 0x00000520 + 00028250 0x00006cf9 increase 0xfffffffe , 0x0000000b + 00028251 0x00006cfa call 0x00007028 + 00028252 0x00006cfb branch 0x00006fc4 , 0x00000005 + 00028253 0x00006cfc compare 0x00000005 , 0x00000011 , 0x000000ff + 00028254 0x00006cfe branch 0x00006e62 , 0x00000001 + 00028255 0x00006d00 arg 0x0000052a , 0x00000005 + 00028256 0x00006d01 force 0x00000000 , 0x00000007 + 00028257 0x00006d02 branch 0x00006e71 + 00028258 0x00006d04 ifetch 0x00000001 , 0x00000006 + 00028259 0x00006d05 bne 0x0000000a , 0x00006fc4 + 00028260 0x00006d06 ifetch 0x00000002 , 0x00000006 + 00028261 0x00006d07 nbranch 0x00006e6f , 0x00000034 + 00028262 0x00006d08 ifetch 0x00000001 , 0x00000006 + 00028263 0x00006d09 bne 0x000000ff , 0x00006e6d + 00028264 0x00006d0a ifetch 0x00000001 , 0x00000006 + 00028265 0x00006d0b bne 0x000000ff , 0x00006e6b + 00028266 0x00006d0c branch 0x00006eb8 + 00028267 0x00006d0e increase 0xfffffffb , 0x00000006 + 00028268 0x00006d0f branch 0x00006e5f + 00028269 0x00006d11 increase 0xfffffffc , 0x00000006 + 00028270 0x00006d12 branch 0x00006e5f + 00028271 0x00006d14 increase 0xfffffffd , 0x00000006 + 00028272 0x00006d15 branch 0x00006e5f + 00028273 0x00006d17 ifetch 0x00000001 , 0x00000006 + 00028274 0x00006d18 beq 0x00000009 , 0x00006e86 + 00028275 0x00006d19 beq 0x0000000a , 0x00006e74 + 00028276 0x00006d1b ifetch 0x00000002 , 0x00000006 + 00028277 0x00006d1c istore 0x00000002 , 0x00000005 + 00028278 0x00006d1d increase 0x00000001 , 0x00000007 + 00028279 0x00006d1e byteswap 0x0000003f , 0x00000012 + 00028280 0x00006d1f ifetch 0x00000002 , 0x00000006 + 00028281 0x00006d20 byteswap 0x0000003f , 0x0000003f + 00028282 0x00006d22 increase 0x00000001 , 0x00000012 + 00028283 0x00006d23 isub 0x00000012 , 0x0000003e + 00028284 0x00006d24 nbranch 0x00006e83 , 0x00000002 + 00028285 0x00006d25 copy 0x0000003f , 0x00000013 + 00028286 0x00006d26 byteswap 0x00000012 , 0x0000003f + 00028287 0x00006d27 istore 0x00000002 , 0x00000005 + 00028288 0x00006d28 increase 0x00000001 , 0x00000007 + 00028289 0x00006d29 copy 0x00000013 , 0x0000003f + 00028290 0x00006d2a branch 0x00006e7a + 00028291 0x00006d2c increase 0xfffffffb , 0x0000000b + 00028292 0x00006d2d increase 0xfffffffb , 0x00000011 + 00028293 0x00006d2e branch 0x00006e8b + 00028294 0x00006d30 ifetch 0x00000002 , 0x00000006 + 00028295 0x00006d31 istore 0x00000002 , 0x00000005 + 00028296 0x00006d32 increase 0x00000001 , 0x00000007 + 00028297 0x00006d33 increase 0xfffffffd , 0x0000000b + 00028298 0x00006d34 increase 0xfffffffd , 0x00000011 + 00028299 0x00006d36 nbranch 0x00006fc4 , 0x00000002 + 00028300 0x00006d37 nbranch 0x00006e71 , 0x00000005 + 00028301 0x00006d38 increase 0xffffffff , 0x0000000b + 00028302 0x00006d39 nbranch 0x00006fc4 , 0x00000005 + 00028303 0x00006d3b call 0x000052d0 + 00028304 0x00006d3c increase 0x0000000a , 0x00000005 + 00028305 0x00006d3d arg 0x0000052a , 0x00000011 + 00028306 0x00006d3f copy 0x00000007 , 0x0000003f + 00028307 0x00006d40 branch 0x00006ea5 , 0x00000034 + 00028308 0x00006d41 ifetch 0x00000002 , 0x00000011 + 00028309 0x00006d42 branch 0x00006ea5 , 0x00000034 + 00028310 0x00006d43 iforce 0x00000012 + 00028311 0x00006d44 fetch 0x00000004 , 0x00000524 + 00028312 0x00006d45 iforce 0x00000002 + 00028313 0x00006d46 call 0x000070e7 + 00028314 0x00006d47 copy 0x00000006 , 0x0000003f + 00028315 0x00006d48 branch 0x00006ea2 , 0x00000034 + 00028316 0x00006d49 increase 0xfffffffd , 0x00000006 + 00028317 0x00006d4a ifetch 0x00000003 , 0x00000006 + 00028318 0x00006d4b istore 0x00000003 , 0x00000005 + 00028319 0x00006d4c call 0x0000705b + 00028320 0x00006d4d iforce 0x00000039 + 00028321 0x00006d4e call 0x00007f01 + 00028322 0x00006d50 increase 0x00000002 , 0x00000011 + 00028323 0x00006d51 increase 0xffffffff , 0x00000007 + 00028324 0x00006d52 branch 0x00006e92 + 00028325 0x00006d55 arg 0x00000005 , 0x00000011 + 00028326 0x00006d56 call 0x00006f84 + 00028327 0x00006d57 fetch 0x00000002 , 0x00000275 + 00028328 0x00006d58 beq 0x0000000b , 0x00007043 + 00028329 0x00006d59 branch 0x00006f9a + 00028330 0x00006d5d ifetch 0x00000001 , 0x00000006 + 00028331 0x00006d5e beq 0x00000000 , 0x00006eae + 00028332 0x00006d5f beq 0x00000001 , 0x00006eb0 + 00028333 0x00006d60 beq 0x00000002 , 0x00006eb3 + 00028334 0x00006d62 increase 0xffffffff , 0x0000000b + 00028335 0x00006d63 branch 0x00006eb6 + 00028336 0x00006d65 ifetch 0x00000001 , 0x00000006 + 00028337 0x00006d66 increase 0xfffffffe , 0x0000000b + 00028338 0x00006d67 branch 0x00006eb6 + 00028339 0x00006d69 ifetch 0x00000002 , 0x00000006 + 00028340 0x00006d6a byteswap 0x0000003f , 0x0000003f + 00028341 0x00006d6b increase 0xfffffffd , 0x0000000b + 00028342 0x00006d6d store 0x00000002 , 0x00000519 + 00028343 0x00006d6e rtn + 00028344 0x00006d71 increase 0xfffffffb , 0x0000000b + 00028345 0x00006d72 call 0x00006eaa + 00028346 0x00006d73 nbranch 0x00006fbe , 0x00000005 + 00028347 0x00006d74 fetcht 0x00000004 , 0x00000524 + 00028348 0x00006d75 call 0x000070b1 + 00028349 0x00006d76 nbranch 0x00006fbb , 0x00000005 + 00028350 0x00006d77 copy 0x00000006 , 0x00000011 + 00028351 0x00006d78 call 0x000052d0 + 00028352 0x00006d79 copy 0x00000011 , 0x00000006 + 00028353 0x00006d7a increase 0x00000003 , 0x00000005 + 00028354 0x00006d7b copy 0x00000006 , 0x0000000b + 00028355 0x00006d7c call 0x00007062 + 00028356 0x00006d7d copy 0x0000003f , 0x00000011 + 00028357 0x00006d7f fetch 0x00000002 , 0x00000519 + 00028358 0x00006d80 copy 0x0000003f , 0x00000012 + 00028359 0x00006d81 copy 0x00000011 , 0x0000003f + 00028360 0x00006d82 isub 0x00000012 , 0x00000012 + 00028361 0x00006d83 fetch 0x00000002 , 0x00000520 + 00028362 0x00006d84 isub 0x00000012 , 0x0000003e + 00028363 0x00006d85 nbranch 0x00006ee7 , 0x00000002 + 00028364 0x00006d87 disable 0x00000028 + 00028365 0x00006d88 fetch 0x00000002 , 0x00000519 + 00028366 0x00006d89 branch 0x00006eda , 0x00000034 + 00028367 0x00006d8a iadd 0x0000000b , 0x00000006 + 00028368 0x00006d8b increase 0x00000003 , 0x00000012 + 00028369 0x00006d8c copy 0x00000012 , 0x00000039 + 00028370 0x00006d8d copy 0x00000039 , 0x0000003f + 00028371 0x00006d8e increase 0x00000003 , 0x0000003f + 00028372 0x00006d8f byteswap 0x0000003f , 0x0000003f + 00028373 0x00006d90 istore 0x00000002 , 0x00000005 + 00028374 0x00006d91 copy 0x00000039 , 0x0000003f + 00028375 0x00006d92 byteswap 0x0000003f , 0x0000003f + 00028376 0x00006d93 istore 0x00000002 , 0x00000005 + 00028377 0x00006d94 branch 0x00006ef5 + 00028378 0x00006d96 add 0x00000011 , 0x00000006 , 0x00000039 + 00028379 0x00006d97 branch 0x00006ede , 0x00000028 + 00028380 0x00006d98 byteswap 0x00000039 , 0x0000003f + 00028381 0x00006d99 branch 0x00006ee1 + 00028382 0x00006d9b copy 0x00000039 , 0x0000003f + 00028383 0x00006d9c increase 0x00000002 , 0x0000003f + 00028384 0x00006d9d byteswap 0x0000003f , 0x0000003f + 00028385 0x00006d9f istore 0x00000002 , 0x00000005 + 00028386 0x00006da0 increase 0xfffffffd , 0x00000039 + 00028387 0x00006da1 byteswap 0x00000039 , 0x0000003f + 00028388 0x00006da2 istore 0x00000002 , 0x00000005 + 00028389 0x00006da3 copy 0x0000000b , 0x00000006 + 00028390 0x00006da4 branch 0x00006ef5 + 00028391 0x00006da6 enable 0x00000028 + 00028392 0x00006da8 fetch 0x00000002 , 0x00000520 + 00028393 0x00006da9 copy 0x0000003f , 0x00000011 + 00028394 0x00006daa copy 0x00000011 , 0x00000039 + 00028395 0x00006dab fetch 0x00000002 , 0x00000519 + 00028396 0x00006dac branch 0x00006eda , 0x00000034 + 00028397 0x00006dad iadd 0x0000000b , 0x00000006 + 00028398 0x00006dae copy 0x00000011 , 0x0000003f + 00028399 0x00006daf increase 0x00000005 , 0x0000003f + 00028400 0x00006db0 byteswap 0x0000003f , 0x0000003f + 00028401 0x00006db1 istore 0x00000002 , 0x00000005 + 00028402 0x00006db2 copy 0x00000011 , 0x0000003f + 00028403 0x00006db3 byteswap 0x0000003f , 0x0000003f + 00028404 0x00006db4 istore 0x00000002 , 0x00000005 + 00028405 0x00006db6 call 0x00007f01 + 00028406 0x00006db7 nbranch 0x00006efe , 0x00000028 + 00028407 0x00006db8 force 0x00000002 , 0x0000003f + 00028408 0x00006db9 istore 0x00000001 , 0x00000005 + 00028409 0x00006dba copy 0x00000006 , 0x0000003f + 00028410 0x00006dbb isub 0x0000000b , 0x0000003f + 00028411 0x00006dbc byteswap 0x0000003f , 0x0000003f + 00028412 0x00006dbd istore 0x00000002 , 0x00000005 + 00028413 0x00006dbe branch 0x00006f00 + 00028414 0x00006dc0 force 0x00000000 , 0x0000003f + 00028415 0x00006dc1 istore 0x00000001 , 0x00000005 + 00028416 0x00006dc3 arg 0x00000005 , 0x00000011 + 00028417 0x00006dc4 branch 0x00006fb0 + 00028418 0x00006dd0 bpatchx 0x000000d1 , 0x0000403a + 00028419 0x00006dd1 call 0x00006fd0 + 00028420 0x00006dd2 compare 0x000000ff , 0x00000002 , 0x000000ff + 00028421 0x00006dd3 branch 0x00006fc4 , 0x00000001 + 00028422 0x00006dd4 call 0x00006f2e + 00028423 0x00006dd5 store 0x00000002 , 0x00000520 + 00028424 0x00006dd6 increase 0xfffffffe , 0x0000000b + 00028425 0x00006dd7 call 0x00007028 + 00028426 0x00006dd8 arg 0x0000052a , 0x00000005 + 00028427 0x00006dd9 force 0x00000000 , 0x00000007 + 00028428 0x00006ddb ifetch 0x00000001 , 0x00000006 + 00028429 0x00006ddc beq 0x0000000a , 0x00006f36 + 00028430 0x00006ddd ifetch 0x00000002 , 0x00000006 + 00028431 0x00006dde istore 0x00000002 , 0x00000005 + 00028432 0x00006ddf increase 0x00000001 , 0x00000007 + 00028433 0x00006de0 increase 0xfffffffd , 0x0000000b + 00028434 0x00006de1 increase 0xfffffffd , 0x00000011 + 00028435 0x00006de2 nbranch 0x00006fc4 , 0x00000002 + 00028436 0x00006de3 nbranch 0x00006f0c , 0x00000005 + 00028437 0x00006de4 increase 0xffffffff , 0x0000000b + 00028438 0x00006de5 nbranch 0x00006fc4 , 0x00000005 + 00028439 0x00006de6 call 0x000052d0 + 00028440 0x00006de7 increase 0x0000000d , 0x00000005 + 00028441 0x00006de8 fetch 0x00000002 , 0x00000511 + 00028442 0x00006de9 iforce 0x00000013 + 00028443 0x00006dea arg 0x0000052a , 0x00000011 + 00028444 0x00006dec ifetch 0x00000002 , 0x00000011 + 00028445 0x00006ded branch 0x00006f29 , 0x00000034 + 00028446 0x00006dee iforce 0x00000012 + 00028447 0x00006def call 0x000070c6 + 00028448 0x00006df0 branch 0x00006f27 , 0x00000034 + 00028449 0x00006df1 increase 0xfffffffd , 0x00000006 + 00028450 0x00006df2 ifetch 0x00000003 , 0x00000006 + 00028451 0x00006df3 istore 0x00000003 , 0x00000005 + 00028452 0x00006df4 call 0x0000705b + 00028453 0x00006df5 iforce 0x00000039 + 00028454 0x00006df6 call 0x00007f01 + 00028455 0x00006df8 increase 0x00000002 , 0x00000011 + 00028456 0x00006df9 branch 0x00006f1c + 00028457 0x00006dfc call 0x00006f83 + 00028458 0x00006dfd fetch 0x00000002 , 0x00000275 + 00028459 0x00006dfe beq 0x0000000e , 0x00007046 + 00028460 0x00006dff call 0x00006f9a + 00028461 0x00006e00 branch 0x00006f9a + 00028462 0x00006e04 ifetch 0x00000002 , 0x00000006 + 00028463 0x00006e05 byteswap 0x0000003f , 0x0000003f + 00028464 0x00006e06 increase 0xfffffffd , 0x0000003f + 00028465 0x00006e07 arg 0x000000c8 , 0x00000002 + 00028466 0x00006e08 isub 0x00000002 , 0x0000003e + 00028467 0x00006e09 nrtn 0x00000002 + 00028468 0x00006e0a setarg 0x000000c8 + 00028469 0x00006e0b rtn + 00028470 0x00006e0f increase 0x00000004 , 0x00000006 + 00028471 0x00006e10 increase 0xfffffffb , 0x0000000b + 00028472 0x00006e11 increase 0xfffffffb , 0x00000011 + 00028473 0x00006e12 nbranch 0x00006fc4 , 0x00000005 + 00028474 0x00006e13 call 0x00006eaa + 00028475 0x00006e14 nbranch 0x00006fbe , 0x00000005 + 00028476 0x00006e15 arg 0x00000511 , 0x0000000b + 00028477 0x00006e16 call 0x00007082 + 00028478 0x00006e17 deposit 0x00000007 + 00028479 0x00006e18 branch 0x00007046 , 0x00000034 + 00028480 0x00006e19 store 0x00000001 , 0x0000054e + 00028481 0x00006e1b copy 0x00000012 , 0x0000003f + 00028482 0x00006e1c store 0x00000002 , 0x0000054c + 00028483 0x00006e1d arg 0x00000000 , 0x00000007 + 00028484 0x00006e1e arg 0x00000000 , 0x00000011 + 00028485 0x00006e1f call 0x000052d0 + 00028486 0x00006e20 increase 0x0000000a , 0x00000005 + 00028487 0x00006e22 call 0x00006f6c + 00028488 0x00006e23 nbranch 0x00002a8c , 0x00000028 + 00028489 0x00006e24 copy 0x00000006 , 0x0000000b + 00028490 0x00006e25 copy 0x0000003f , 0x00000013 + 00028491 0x00006e26 iadd 0x00000011 , 0x00000011 + 00028492 0x00006e29 fetch 0x00000002 , 0x00000519 + 00028493 0x00006e2a copy 0x0000003f , 0x00000012 + 00028494 0x00006e2b branch 0x00006f75 , 0x00000034 + 00028495 0x00006e2d copy 0x00000011 , 0x0000003f + 00028496 0x00006e2e isub 0x00000012 , 0x00000012 + 00028497 0x00006e2f branch 0x00006f67 , 0x00000005 + 00028498 0x00006e30 nbranch 0x00006f67 , 0x00000002 + 00028499 0x00006e31 fetch 0x00000002 , 0x00000520 + 00028500 0x00006e32 isub 0x00000012 , 0x0000003e + 00028501 0x00006e33 branch 0x00006f5e , 0x00000005 + 00028502 0x00006e34 nbranch 0x00006f5e , 0x00000002 + 00028503 0x00006e38 copy 0x00000012 , 0x00000039 + 00028504 0x00006e39 call 0x00006f61 + 00028505 0x00006e3a fetch 0x00000001 , 0x0000054e + 00028506 0x00006e3b increase 0x00000001 , 0x00000007 + 00028507 0x00006e3c isub 0x00000007 , 0x0000003e + 00028508 0x00006e3d branch 0x00006f83 , 0x00000005 + 00028509 0x00006e3e branch 0x00006fa0 + 00028510 0x00006e41 copy 0x0000003f , 0x00000039 + 00028511 0x00006e42 call 0x00006f61 + 00028512 0x00006e43 branch 0x00006fa0 + 00028513 0x00006e46 increase 0xfffffffd , 0x00000005 + 00028514 0x00006e47 copy 0x00000039 , 0x00000002 + 00028515 0x00006e48 copy 0x00000013 , 0x0000003f + 00028516 0x00006e49 isub 0x00000012 , 0x0000003f + 00028517 0x00006e4a iadd 0x0000000b , 0x00000006 + 00028518 0x00006e4b branch 0x00007f01 + 00028519 0x00006e4e fetch 0x00000001 , 0x0000054e + 00028520 0x00006e4f increase 0x00000001 , 0x00000007 + 00028521 0x00006e50 isub 0x00000007 , 0x0000003e + 00028522 0x00006e51 rtn 0x00000005 + 00028523 0x00006e52 branch 0x00006f47 + 00028524 0x00006e55 call 0x00007fe9 + 00028525 0x00006e56 arg 0x0000052a , 0x00000006 + 00028526 0x00006e57 lshift2 0x00000007 , 0x0000003f + 00028527 0x00006e58 iadd 0x00000006 , 0x00000006 + 00028528 0x00006e59 ifetcht 0x00000004 , 0x00000006 + 00028529 0x00006e5a call 0x000070b1 + 00028530 0x00006e5b nrtn 0x00000005 + 00028531 0x00006e5c call 0x0000705b + 00028532 0x00006e5d branch 0x00007fe7 + 00028533 0x00006e60 fetch 0x00000002 , 0x00000520 + 00028534 0x00006e61 isub 0x00000011 , 0x0000003e + 00028535 0x00006e62 nbranch 0x00006f8f , 0x00000002 + 00028536 0x00006e63 copy 0x00000011 , 0x00000039 + 00028537 0x00006e64 copy 0x00000039 , 0x00000002 + 00028538 0x00006e65 copy 0x0000000b , 0x00000006 + 00028539 0x00006e66 call 0x00007f01 + 00028540 0x00006e67 fetch 0x00000002 , 0x0000054c + 00028541 0x00006e68 isub 0x00000011 , 0x0000003e + 00028542 0x00006e69 branch 0x00006f81 , 0x00000005 + 00028543 0x00006e6b call 0x00006fa0 + 00028544 0x00006e6c branch 0x00006f94 + 00028545 0x00006e6f call 0x00006f83 + 00028546 0x00006e70 branch 0x00006f94 + 00028547 0x00006e73 arg 0x00000007 , 0x00000011 + 00028548 0x00006e75 force 0x00000000 , 0x0000003f + 00028549 0x00006e76 istore 0x00000001 , 0x00000005 + 00028550 0x00006e77 call 0x00006fb0 + 00028551 0x00006e78 fetcht 0x00000002 , 0x00000275 + 00028552 0x00006e79 increase 0xfffffffb , 0x00000002 + 00028553 0x00006e7a byteswap 0x00000002 , 0x0000003f + 00028554 0x00006e7b istore 0x00000002 , 0x00000005 + 00028555 0x00006e7c increase 0xfffffffd , 0x00000002 + 00028556 0x00006e7d byteswap 0x00000002 , 0x0000003f + 00028557 0x00006e7e istore 0x00000002 , 0x00000005 + 00028558 0x00006e7f rtn + 00028559 0x00006e82 copy 0x0000003f , 0x00000039 + 00028560 0x00006e83 copy 0x00000039 , 0x00000002 + 00028561 0x00006e84 copy 0x0000000b , 0x00000006 + 00028562 0x00006e85 call 0x00007f01 + 00028563 0x00006e86 call 0x00006fa0 + 00028564 0x00006e88 setarg 0x00000036 + 00028565 0x00006e89 istore 0x00000001 , 0x00000005 + 00028566 0x00006e8a fetch 0x00000002 , 0x0000054c + 00028567 0x00006e8b byteswap 0x0000003f , 0x0000003f + 00028568 0x00006e8c istore 0x00000002 , 0x00000005 + 00028569 0x00006e8d rtn + 00028570 0x00006e90 setarg 0x00000036 + 00028571 0x00006e91 istore 0x00000001 , 0x00000005 + 00028572 0x00006e92 increase 0xfffffffd , 0x00000002 + 00028573 0x00006e93 byteswap 0x00000002 , 0x0000003f + 00028574 0x00006e94 istore 0x00000002 , 0x00000005 + 00028575 0x00006e95 rtn + 00028576 0x00006e98 arg 0x00000007 , 0x00000011 + 00028577 0x00006e99 setarg 0x00000002 + 00028578 0x00006e9a istore 0x00000001 , 0x00000005 + 00028579 0x00006e9b fetch 0x00000002 , 0x00000519 + 00028580 0x00006e9c iadd 0x00000002 , 0x00000002 + 00028581 0x00006e9d byteswap 0x00000002 , 0x0000003f + 00028582 0x00006e9e istore 0x00000002 , 0x00000005 + 00028583 0x00006e9f call 0x00006fb0 + 00028584 0x00006ea0 fetcht 0x00000002 , 0x00000275 + 00028585 0x00006ea1 increase 0xfffffffb , 0x00000002 + 00028586 0x00006ea2 byteswap 0x00000002 , 0x0000003f + 00028587 0x00006ea3 istore 0x00000002 , 0x00000005 + 00028588 0x00006ea4 increase 0xfffffffb , 0x00000002 + 00028589 0x00006ea5 byteswap 0x00000002 , 0x0000003f + 00028590 0x00006ea6 istore 0x00000002 , 0x00000005 + 00028591 0x00006ea7 rtn + 00028592 0x00006eaa fetch 0x00000002 , 0x00000273 + 00028593 0x00006eab isub 0x00000005 , 0x0000003f + 00028594 0x00006eac sub 0x0000003f , 0x00000000 , 0x0000003f + 00028595 0x00006ead store 0x00000002 , 0x00000275 + 00028596 0x00006eae call 0x000052d0 + 00028597 0x00006eaf copy 0x00000011 , 0x0000003f + 00028598 0x00006eb0 istore 0x00000001 , 0x00000005 + 00028599 0x00006eb1 fetch 0x00000002 , 0x0000051c + 00028600 0x00006eb2 istore 0x00000002 , 0x00000005 + 00028601 0x00006eb3 rtn + 00028602 0x00006ec4 rtn + 00028603 0x00006ee6 setarg 0x00000200 + 00028604 0x00006ee7 store 0x00000002 , 0x0000054a + 00028605 0x00006ee8 branch 0x00006fc6 + 00028606 0x00006eea setarg 0x00000400 + 00028607 0x00006eeb store 0x00000002 , 0x0000054a + 00028608 0x00006eec branch 0x00006fc6 + 00028609 0x00006eee setarg 0x00000600 + 00028610 0x00006eef store 0x00000002 , 0x0000054a + 00028611 0x00006ef0 branch 0x00006fc6 + 00028612 0x00006ef2 setarg 0x00000300 + 00028613 0x00006ef3 store 0x00000002 , 0x0000054a + 00028614 0x00006ef5 call 0x000052d0 + 00028615 0x00006ef6 istore 0x00000001 , 0x00000005 + 00028616 0x00006ef7 fetch 0x00000002 , 0x0000051c + 00028617 0x00006ef8 istore 0x00000002 , 0x00000005 + 00028618 0x00006ef9 setarg 0x00000200 + 00028619 0x00006efa istore 0x00000002 , 0x00000005 + 00028620 0x00006efb fetch 0x00000002 , 0x0000054a + 00028621 0x00006efc istore 0x00000002 , 0x00000005 + 00028622 0x00006efd jam 0x00000007 , 0x00000275 + 00028623 0x00006efe rtn + 00028624 0x00006f04 arg 0x00000000 , 0x00000012 + 00028625 0x00006f05 force 0x00000000 , 0x00000002 + 00028626 0x00006f06 arg 0x00000511 , 0x00000005 + 00028627 0x00006f07 call 0x00007028 + 00028628 0x00006f08 branch 0x00007026 , 0x00000005 + 00028629 0x00006f0a increase 0x00000001 , 0x00000012 + 00028630 0x00006f0b ifetch 0x00000001 , 0x00000006 + 00028631 0x00006f0c increase 0xffffffff , 0x00000011 + 00028632 0x00006f0d increase 0xffffffff , 0x0000000b + 00028633 0x00006f0e compare 0x00000018 , 0x0000003f , 0x000000f8 + 00028634 0x00006f0f nbranch 0x00007026 , 0x00000001 + 00028635 0x00006f10 compare 0x00000004 , 0x0000003f , 0x00000007 + 00028636 0x00006f11 nbranch 0x00006ff3 , 0x00000001 + 00028637 0x00006f12 force 0x00000001 , 0x00000002 + 00028638 0x00006f14 ifetch 0x00000001 , 0x00000006 + 00028639 0x00006f15 increase 0xffffffff , 0x00000011 + 00028640 0x00006f16 increase 0xffffffff , 0x0000000b + 00028641 0x00006f17 bne 0x00000000 , 0x00006fe7 + 00028642 0x00006f18 ifetch 0x00000001 , 0x00000006 + 00028643 0x00006f19 increase 0xffffffff , 0x00000011 + 00028644 0x00006f1a increase 0xffffffff , 0x0000000b + 00028645 0x00006f1b beq 0x00000000 , 0x00006ff8 + 00028646 0x00006f1c branch 0x00006fea + 00028647 0x00006f1e increase 0x00000001 , 0x00000006 + 00028648 0x00006f1f increase 0xffffffff , 0x00000011 + 00028649 0x00006f20 increase 0xffffffff , 0x0000000b + 00028650 0x00006f22 increase 0x00000002 , 0x00000006 + 00028651 0x00006f23 increase 0xfffffffe , 0x00000011 + 00028652 0x00006f24 increase 0xfffffffe , 0x0000000b + 00028653 0x00006f25 compare 0x00000000 , 0x00000002 , 0x000000ff + 00028654 0x00006f26 branch 0x00007020 , 0x00000001 + 00028655 0x00006f27 increase 0x0000000c , 0x00000006 + 00028656 0x00006f28 increase 0xfffffff4 , 0x00000011 + 00028657 0x00006f29 increase 0xfffffff4 , 0x0000000b + 00028658 0x00006f2a branch 0x00007020 + 00028659 0x00006f2c compare 0x00000002 , 0x0000003f , 0x00000007 + 00028660 0x00006f2d nbranch 0x00006ff6 , 0x00000001 + 00028661 0x00006f2e branch 0x00006fde + 00028662 0x00006f30 compare 0x00000001 , 0x0000003f , 0x00000007 + 00028663 0x00006f31 nbranch 0x00007026 , 0x00000001 + 00028664 0x00006f33 increase 0xfffffffe , 0x00000011 + 00028665 0x00006f34 increase 0xfffffffe , 0x0000000b + 00028666 0x00006f35 ifetch 0x00000002 , 0x00000006 + 00028667 0x00006f36 sub 0x00000012 , 0x00000004 , 0x0000003e + 00028668 0x00006f37 branch 0x00006ffe , 0x00000005 + 00028669 0x00006f38 istore 0x00000002 , 0x00000005 + 00028670 0x00006f3a compare 0x00000000 , 0x00000002 , 0x000000ff + 00028671 0x00006f3b branch 0x00007020 , 0x00000001 + 00028672 0x00006f3c copy 0x00000006 , 0x00000002 + 00028673 0x00006f3d ifetch 0x00000001 , 0x00000006 + 00028674 0x00006f3e bne 0x00000000 , 0x00007019 + 00028675 0x00006f3f ifetch 0x00000001 , 0x00000006 + 00028676 0x00006f40 bne 0x00000000 , 0x00007019 + 00028677 0x00006f41 ifetch 0x00000001 , 0x00000006 + 00028678 0x00006f42 bne 0x00000010 , 0x00007019 + 00028679 0x00006f43 ifetch 0x00000001 , 0x00000006 + 00028680 0x00006f44 bne 0x00000000 , 0x00007019 + 00028681 0x00006f45 ifetch 0x00000001 , 0x00000006 + 00028682 0x00006f46 bne 0x00000080 , 0x00007019 + 00028683 0x00006f47 ifetch 0x00000001 , 0x00000006 + 00028684 0x00006f48 bne 0x00000000 , 0x00007019 + 00028685 0x00006f49 ifetch 0x00000001 , 0x00000006 + 00028686 0x00006f4a bne 0x00000000 , 0x00007019 + 00028687 0x00006f4b ifetch 0x00000001 , 0x00000006 + 00028688 0x00006f4c bne 0x00000080 , 0x00007019 + 00028689 0x00006f4d ifetch 0x00000001 , 0x00000006 + 00028690 0x00006f4e bne 0x0000005f , 0x00007019 + 00028691 0x00006f4f ifetch 0x00000001 , 0x00000006 + 00028692 0x00006f50 bne 0x0000009b , 0x00007019 + 00028693 0x00006f51 ifetch 0x00000001 , 0x00000006 + 00028694 0x00006f52 bne 0x00000034 , 0x00007019 + 00028695 0x00006f53 ifetch 0x00000001 , 0x00000006 + 00028696 0x00006f54 beq 0x000000fb , 0x0000701e + 00028697 0x00006f56 copy 0x00000002 , 0x00000006 + 00028698 0x00006f58 increase 0x0000000c , 0x00000006 + 00028699 0x00006f59 force 0x00000000 , 0x00000007 + 00028700 0x00006f5a force 0x00000000 , 0x00000002 + 00028701 0x00006f5b branch 0x0000701e + 00028702 0x00006f5e increase 0xfffffff4 , 0x0000000b + 00028703 0x00006f5f increase 0xfffffff4 , 0x00000011 + 00028704 0x00006f61 force 0x00000000 , 0x00000002 + 00028705 0x00006f62 compare 0x00000000 , 0x00000011 , 0x000000ff + 00028706 0x00006f63 nbranch 0x00006fd5 , 0x00000001 + 00028707 0x00006f64 force 0x00000000 , 0x0000003f + 00028708 0x00006f65 istore 0x00000002 , 0x00000005 + 00028709 0x00006f66 rtn + 00028710 0x00006f68 arg 0x000000ff , 0x00000002 + 00028711 0x00006f69 rtn + 00028712 0x00006f74 bpatchx 0x000000d4 , 0x0000403a + 00028713 0x00006f75 ifetch 0x00000001 , 0x00000006 + 00028714 0x00006f76 increase 0xffffffff , 0x0000000b + 00028715 0x00006f77 compare 0x00000030 , 0x0000003f , 0x000000f8 + 00028716 0x00006f78 nbranch 0x0000703e , 0x00000001 + 00028717 0x00006f79 compare 0x00000007 , 0x0000003f , 0x00000007 + 00028718 0x00006f7a branch 0x00007037 , 0x00000001 + 00028719 0x00006f7b compare 0x00000006 , 0x0000003f , 0x00000007 + 00028720 0x00006f7c branch 0x00007039 , 0x00000001 + 00028721 0x00006f7d compare 0x00000005 , 0x0000003f , 0x00000007 + 00028722 0x00006f7e nbranch 0x0000703e , 0x00000001 + 00028723 0x00006f80 ifetch 0x00000001 , 0x00000006 + 00028724 0x00006f81 copy 0x0000003f , 0x00000011 + 00028725 0x00006f82 increase 0xffffffff , 0x0000000b + 00028726 0x00006f83 branch 0x0000703c + 00028727 0x00006f85 increase 0x00000002 , 0x00000006 + 00028728 0x00006f86 increase 0xfffffffe , 0x0000000b + 00028729 0x00006f88 ifetch 0x00000002 , 0x00000006 + 00028730 0x00006f89 byteswap 0x0000003f , 0x00000011 + 00028731 0x00006f8a increase 0xfffffffe , 0x0000000b + 00028732 0x00006f8c force 0x00000001 , 0x0000003f + 00028733 0x00006f8d rtn + 00028734 0x00006f8f force 0x00000000 , 0x0000003f + 00028735 0x00006f90 rtn + 00028736 0x00006f9b setarg 0x00000003 + 00028737 0x00006f9c store 0x00000001 , 0x0000051b + 00028738 0x00006f9d branch 0x00007048 + 00028739 0x00006f9f setarg 0x00000005 + 00028740 0x00006fa0 store 0x00000001 , 0x0000051b + 00028741 0x00006fa1 branch 0x00007048 + 00028742 0x00006fa3 setarg 0x00000007 + 00028743 0x00006fa4 store 0x00000001 , 0x0000051b + 00028744 0x00006fa6 call 0x000052d0 + 00028745 0x00006fa9 fetch 0x00000001 , 0x0000051b + 00028746 0x00006faa copy 0x0000003f , 0x00000012 + 00028747 0x00006fab istore 0x00000001 , 0x00000005 + 00028748 0x00006fac fetch 0x00000002 , 0x0000051c + 00028749 0x00006fad istore 0x00000002 , 0x00000005 + 00028750 0x00006fae setarg 0x00000500 + 00028751 0x00006faf istore 0x00000002 , 0x00000005 + 00028752 0x00006fb0 compare 0x00000005 , 0x00000012 , 0x000000ff + 00028753 0x00006fb1 branch 0x00007057 , 0x00000001 + 00028754 0x00006fb2 compare 0x00000007 , 0x00000012 , 0x000000ff + 00028755 0x00006fb3 branch 0x00007057 , 0x00000001 + 00028756 0x00006fb4 setarg 0x00000000 + 00028757 0x00006fb5 istore 0x00000005 , 0x00000005 + 00028758 0x00006fb6 branch 0x00007059 + 00028759 0x00006fb9 setarg 0x00350200 + 00028760 0x00006fba istore 0x00000005 , 0x00000005 + 00028761 0x00006fbc jam 0x0000000a , 0x00000275 + 00028762 0x00006fbd rtn + 00028763 0x00006fc1 call 0x00007ea2 + 00028764 0x00006fc2 call 0x00007ea5 + 00028765 0x00006fc3 call 0x00007062 + 00028766 0x00006fc4 call 0x00007e9c + 00028767 0x00006fc5 call 0x00007e9f + 00028768 0x00006fc6 copy 0x00000002 , 0x0000003f + 00028769 0x00006fc7 rtn + 00028770 0x00006fcb ifetch 0x00000001 , 0x00000006 + 00028771 0x00006fcc and 0x0000003f , 0x00000007 , 0x00000039 + 00028772 0x00006fcd rshift3 0x0000003f , 0x0000003f + 00028773 0x00006fce bne 0x00000000 , 0x0000706c + 00028774 0x00006fd0 force 0x00000001 , 0x0000003f + 00028775 0x00006fd1 force 0x00000001 , 0x00000002 + 00028776 0x00006fd2 rtn + 00028777 0x00006fd5 call 0x00007e76 + 00028778 0x00006fd6 add 0x0000003f , 0x00000001 , 0x00000002 + 00028779 0x00006fd7 rtn + 00028780 0x00006fd9 deposit 0x00000039 + 00028781 0x00006fda sub 0x0000003f , 0x00000004 , 0x0000003e + 00028782 0x00006fdb branch 0x00007069 , 0x00000002 + 00028783 0x00006fdc beq 0x00000005 , 0x00007073 + 00028784 0x00006fdd beq 0x00000006 , 0x00007076 + 00028785 0x00006fde beq 0x00000007 , 0x0000707a + 00028786 0x00006fdf rtn + 00028787 0x00006fe2 ifetch 0x00000001 , 0x00000006 + 00028788 0x00006fe3 add 0x0000003f , 0x00000002 , 0x00000002 + 00028789 0x00006fe4 rtn + 00028790 0x00006fe6 ifetch 0x00000002 , 0x00000006 + 00028791 0x00006fe7 byteswap 0x0000003f , 0x0000003f + 00028792 0x00006fe8 add 0x0000003f , 0x00000003 , 0x00000002 + 00028793 0x00006fe9 rtn + 00028794 0x00006feb ifetch 0x00000002 , 0x00000006 + 00028795 0x00006fec byteswap 0x0000003f , 0x0000003f + 00028796 0x00006fed ifetcht 0x00000002 , 0x00000006 + 00028797 0x00006fee byteswap 0x00000002 , 0x00000002 + 00028798 0x00006fef lshift16 0x00000002 , 0x00000002 + 00028799 0x00006ff0 iadd 0x00000002 , 0x0000003f + 00028800 0x00006ff1 add 0x0000003f , 0x00000005 , 0x00000002 + 00028801 0x00006ff2 rtn + 00028802 0x00006ff9 bpatchx 0x000000d5 , 0x0000403a + 00028803 0x00006ffa force 0x00000000 , 0x00000007 + 00028804 0x00006ffb arg 0x00000000 , 0x00000012 + 00028805 0x00006ffc arg 0x0000052a , 0x00000005 + 00028806 0x00006ffe ifetch 0x00000002 , 0x0000000b + 00028807 0x00006fff rtn 0x00000034 + 00028808 0x00007000 call 0x0000708d + 00028809 0x00007001 copy 0x00000007 , 0x0000003f + 00028810 0x00007002 rtneq 0x00000007 + 00028811 0x00007003 increase 0x00000002 , 0x0000000b + 00028812 0x00007004 branch 0x00007086 + 00028813 0x00007008 iforce 0x00000013 + 00028814 0x0000700a fetch 0x00000002 , 0x00004575 + 00028815 0x0000700b iforce 0x00000006 + 00028816 0x0000700d copy 0x00000007 , 0x0000003f + 00028817 0x0000700e rtneq 0x00000007 + 00028818 0x0000700f disable 0x00000028 + 00028819 0x00007010 ifetch 0x00000001 , 0x00000006 + 00028820 0x00007011 rtn 0x00000034 + 00028821 0x00007012 iforce 0x00000039 + 00028822 0x00007014 ifetch 0x00000002 , 0x00000006 + 00028823 0x00007015 isub 0x00000013 , 0x0000003e + 00028824 0x00007016 nbranch 0x0000709a , 0x00000005 + 00028825 0x00007017 enable 0x00000028 + 00028826 0x00007019 loop 0x00007096 + 00028827 0x0000701a ifetcht 0x00000004 , 0x00000006 + 00028828 0x0000701b copy 0x00000006 , 0x00000011 + 00028829 0x0000701c nbranch 0x000070ad , 0x00000028 + 00028830 0x0000701d arg 0x0000052a , 0x00000006 + 00028831 0x0000701e arg 0x00000007 , 0x00000039 + 00028832 0x00007020 ifetch 0x00000004 , 0x00000006 + 00028833 0x00007021 branch 0x000070a6 , 0x00000034 + 00028834 0x00007022 isub 0x00000002 , 0x0000003e + 00028835 0x00007023 branch 0x000070ad , 0x00000005 + 00028836 0x00007024 loop 0x000070a0 + 00028837 0x00007025 rtn + 00028838 0x00007027 istoret 0x00000004 , 0x00000005 + 00028839 0x00007028 increase 0x00000001 , 0x00000007 + 00028840 0x00007029 copy 0x00000011 , 0x00000006 + 00028841 0x0000702a call 0x0000705b + 00028842 0x0000702b iadd 0x00000012 , 0x00000012 + 00028843 0x0000702c iadd 0x00000006 , 0x00000006 + 00028844 0x0000702d branch 0x00007090 + 00028845 0x0000702f copy 0x00000011 , 0x00000006 + 00028846 0x00007030 call 0x00007062 + 00028847 0x00007031 iadd 0x00000006 , 0x00000006 + 00028848 0x00007032 branch 0x00007090 + 00028849 0x00007039 bpatchx 0x000000d6 , 0x0000403a + 00028850 0x0000703a fetch 0x00000002 , 0x00004575 + 00028851 0x0000703b iforce 0x00000006 + 00028852 0x0000703d ifetch 0x00000001 , 0x00000006 + 00028853 0x0000703e branch 0x00007fe3 , 0x00000034 + 00028854 0x0000703f lshift 0x0000003f , 0x0000003f + 00028855 0x00007040 iadd 0x00000006 , 0x00000006 + 00028856 0x00007041 ifetch 0x00000004 , 0x00000006 + 00028857 0x00007042 isub 0x00000002 , 0x0000003e + 00028858 0x00007043 rtn 0x00000005 + 00028859 0x00007044 deposit 0x00000005 + 00028860 0x00007045 store 0x00000002 , 0x00000abb + 00028861 0x00007046 storet 0x00000008 , 0x00000aa2 + 00028862 0x00007047 call 0x00007062 + 00028863 0x00007048 iadd 0x00000006 , 0x00000006 + 00028864 0x00007049 copy 0x00000006 , 0x0000003f + 00028865 0x0000704a fetcht 0x00000002 , 0x00000abb + 00028866 0x0000704b copy 0x00000002 , 0x00000005 + 00028867 0x0000704c fetcht 0x00000008 , 0x00000aa2 + 00028868 0x0000704d copy 0x0000003f , 0x00000006 + 00028869 0x0000704e branch 0x000070b4 + 00028870 0x00007055 bpatchx 0x000000d7 , 0x0000403a + 00028871 0x00007056 fetch 0x00000002 , 0x00004575 + 00028872 0x00007057 iforce 0x00000006 + 00028873 0x00007059 ifetch 0x00000001 , 0x00000006 + 00028874 0x0000705a branch 0x000070e4 , 0x00000034 + 00028875 0x0000705b iforce 0x00000039 + 00028876 0x0000705d ifetch 0x00000002 , 0x00000006 + 00028877 0x0000705e isub 0x00000013 , 0x0000003e + 00028878 0x0000705f branch 0x000070d4 , 0x00000005 + 00028879 0x00007060 loop 0x000070cc + 00028880 0x00007061 increase 0x00000004 , 0x00000006 + 00028881 0x00007062 call 0x00007062 + 00028882 0x00007063 iadd 0x00000006 , 0x00000006 + 00028883 0x00007064 branch 0x000070c9 + 00028884 0x00007066 increase 0xffffffff , 0x00000039 + 00028885 0x00007067 lshift 0x00000039 , 0x0000003f + 00028886 0x00007068 iadd 0x00000006 , 0x00000006 + 00028887 0x00007069 increase 0x00000004 , 0x00000006 + 00028888 0x0000706a call 0x00007062 + 00028889 0x0000706b iadd 0x00000006 , 0x0000000b + 00028890 0x0000706d increase 0x00000001 , 0x00000006 + 00028891 0x0000706e ifetch 0x00000002 , 0x00000006 + 00028892 0x0000706f isub 0x00000012 , 0x0000003e + 00028893 0x00007073 branch 0x00007fef , 0x00000005 + 00028894 0x00007074 call 0x0000705b + 00028895 0x00007075 iadd 0x00000006 , 0x00000006 + 00028896 0x00007076 deposit 0x0000000b + 00028897 0x00007077 isub 0x00000006 , 0x0000003e + 00028898 0x00007078 branch 0x000070e4 , 0x00000005 + 00028899 0x00007079 branch 0x000070da + 00028900 0x0000707b force 0x00000000 , 0x00000006 + 00028901 0x0000707c force 0x00000000 , 0x0000003f + 00028902 0x0000707d rtn + 00028903 0x00007084 bpatchx 0x000000d8 , 0x0000403b + 00028904 0x00007085 fetch 0x00000002 , 0x00004575 + 00028905 0x00007086 iforce 0x00000006 + 00028906 0x00007088 ifetch 0x00000001 , 0x00000006 + 00028907 0x00007089 branch 0x00007100 , 0x00000034 + 00028908 0x0000708a lshift 0x0000003f , 0x0000003f + 00028909 0x0000708b iadd 0x00000006 , 0x00000006 + 00028910 0x0000708c ifetch 0x00000004 , 0x00000006 + 00028911 0x0000708d isub 0x00000002 , 0x0000003e + 00028912 0x0000708e branch 0x000070f4 , 0x00000005 + 00028913 0x0000708f call 0x00007062 + 00028914 0x00007090 iadd 0x00000006 , 0x00000006 + 00028915 0x00007091 branch 0x000070ea + 00028916 0x00007093 call 0x00007062 + 00028917 0x00007094 iadd 0x00000006 , 0x0000000b + 00028918 0x00007096 increase 0x00000001 , 0x00000006 + 00028919 0x00007097 ifetch 0x00000002 , 0x00000006 + 00028920 0x00007098 isub 0x00000012 , 0x0000003e + 00028921 0x00007099 rtn 0x00000005 + 00028922 0x0000709a call 0x0000705b + 00028923 0x0000709b iadd 0x00000006 , 0x00000006 + 00028924 0x0000709c deposit 0x0000000b + 00028925 0x0000709d isub 0x00000006 , 0x0000003e + 00028926 0x0000709e branch 0x00007100 , 0x00000005 + 00028927 0x0000709f branch 0x000070f6 + 00028928 0x000070a1 force 0x00000000 , 0x00000006 + 00028929 0x000070a2 rtn + 00028930 0x000070a7 arg 0x00000400 , 0x00000012 + 00028931 0x000070a8 call 0x000070f4 + 00028932 0x000070a9 arg 0x00000300 , 0x00000012 + 00028933 0x000070aa call 0x0000710d + 00028934 0x000070ab nrtn 0x00000028 + 00028935 0x000070ac sub 0x00000011 , 0x00000003 , 0x0000003e + 00028936 0x000070ad branch 0x00007fe9 , 0x00000002 + 00028937 0x000070ae ifetch 0x00000001 , 0x00000006 + 00028938 0x000070af bne 0x00000008 , 0x00007fe9 + 00028939 0x000070b0 ifetch 0x00000001 , 0x00000006 + 00028940 0x000070b1 rtn + 00028941 0x000070b7 bpatchx 0x000000d9 , 0x0000403b + 00028942 0x000070b8 call 0x00007062 + 00028943 0x000070b9 copy 0x0000003f , 0x00000011 + 00028944 0x000070bb ifetch 0x00000001 , 0x00000006 + 00028945 0x000070bc and 0x0000003f , 0x00000007 , 0x00000039 + 00028946 0x000070bd rshift3 0x0000003f , 0x0000003f + 00028947 0x000070be sub 0x0000003f , 0x00000003 , 0x0000003e + 00028948 0x000070bf branch 0x00007129 , 0x00000005 + 00028949 0x000070c0 copy 0x00000039 , 0x0000003f + 00028950 0x000070c1 beq 0x00000005 , 0x00007120 + 00028951 0x000070c2 beq 0x00000006 , 0x00007123 + 00028952 0x000070c3 beq 0x00000007 , 0x00007126 + 00028953 0x000070c4 increase 0xffffffff , 0x00000006 + 00028954 0x000070c5 call 0x00007062 + 00028955 0x000070c6 iadd 0x00000006 , 0x00000006 + 00028956 0x000070c7 copy 0x00000011 , 0x0000003f + 00028957 0x000070c8 isub 0x00000002 , 0x00000011 + 00028958 0x000070c9 branch 0x00007fe9 , 0x00000005 + 00028959 0x000070ca branch 0x00007110 + 00028960 0x000070cd increase 0xfffffffe , 0x00000011 + 00028961 0x000070ce increase 0x00000001 , 0x00000006 + 00028962 0x000070cf branch 0x00007110 + 00028963 0x000070d1 increase 0xfffffffd , 0x00000011 + 00028964 0x000070d2 increase 0x00000002 , 0x00000006 + 00028965 0x000070d3 branch 0x00007110 + 00028966 0x000070d5 increase 0xfffffffb , 0x00000011 + 00028967 0x000070d6 increase 0x00000004 , 0x00000006 + 00028968 0x000070d7 branch 0x00007110 + 00028969 0x000070da increase 0xffffffff , 0x00000011 + 00028970 0x000070db copy 0x00000039 , 0x0000003f + 00028971 0x000070dc beq 0x00000001 , 0x00007132 + 00028972 0x000070dd beq 0x00000002 , 0x00007130 + 00028973 0x000070de beq 0x00000004 , 0x0000712f + 00028974 0x000070df branch 0x00007fe9 + 00028975 0x000070e1 increase 0xfffffff4 , 0x00000011 + 00028976 0x000070e3 ifetch 0x00000002 , 0x00000006 + 00028977 0x000070e4 increase 0xfffffffe , 0x00000011 + 00028978 0x000070e6 ifetch 0x00000002 , 0x00000006 + 00028979 0x000070e7 isub 0x00000012 , 0x0000003e + 00028980 0x000070e8 branch 0x00007fe7 , 0x00000005 + 00028981 0x000070e9 increase 0xfffffffe , 0x00000011 + 00028982 0x000070ea branch 0x00007fe9 , 0x00000005 + 00028983 0x000070eb branch 0x00007110 + 00028984 0x00007127 call 0x000052d0 + 00028985 0x00007128 copy 0x0000003f , 0x00000005 + 00028986 0x00007129 setarg 0x00000006 + 00028987 0x0000712a istore 0x00000001 , 0x00000005 + 00028988 0x0000712b setarg 0x0000006e + 00028989 0x0000712c istore 0x00000002 , 0x00000005 + 00028990 0x0000712d setarg 0x00000f00 + 00028991 0x0000712e istore 0x00000002 , 0x00000005 + 00028992 0x0000712f setarg 0x001a0535 + 00028993 0x00007130 istore 0x00000003 , 0x00000005 + 00028994 0x00007131 setarg 0x00000111 + 00028995 0x00007132 lshift16 0x0000003f , 0x0000003f + 00028996 0x00007133 istore 0x00000004 , 0x00000005 + 00028997 0x00007134 setarg 0x00002600 + 00028998 0x00007135 istore 0x00000002 , 0x00000005 + 00028999 0x00007136 setarg 0x00000335 + 00029000 0x00007137 istore 0x00000002 , 0x00000005 + 00029001 0x00007138 setarg 0x00000009 + 00029002 0x00007139 istore 0x00000002 , 0x00000005 + 00029003 0x0000713a setarg 0x00000004 + 00029004 0x0000713b istore 0x00000002 , 0x00000005 + 00029005 0x0000713c jam 0x00000014 , 0x00000275 + 00029006 0x0000713d rtn + 00029007 0x00007142 bpatchx 0x000000da , 0x0000403b + 00029008 0x00007143 jam 0x00000050 , 0x000005e5 + 00029009 0x00007144 arg 0x000005e6 , 0x00000005 + 00029010 0x00007145 arg 0x0000443a , 0x00000006 + 00029011 0x00007146 call 0x00007ebf + 00029012 0x00007147 arg 0x000045d2 , 0x00000006 + 00029013 0x00007148 call 0x00007ebd + 00029014 0x00007149 arg 0x000009be , 0x00000006 + 00029015 0x0000714a call 0x00007ebd + 00029016 0x0000714b call 0x0000720a + 00029017 0x0000714c arg 0x0000042f , 0x00000006 + 00029018 0x0000714d call 0x00007205 + 00029019 0x0000714e call 0x000071d0 + 00029020 0x00007150 arg 0x00000af2 , 0x00000005 + 00029021 0x00007151 call 0x00007201 + 00029022 0x00007152 setarg 0x000f4240 + 00029023 0x00007153 copy 0x0000003f , 0x00000011 + 00029024 0x00007154 fetch 0x00000004 , 0x00000af2 + 00029025 0x00007155 idiv 0x00000011 + 00029026 0x00007156 call 0x00007f86 + 00029027 0x00007157 remainder 0x0000003f + 00029028 0x00007158 store 0x00000004 , 0x000009ba + 00029029 0x0000715a rtn + 00029030 0x0000715d jam 0x00000041 , 0x000005e5 + 00029031 0x0000715e arg 0x000005e6 , 0x00000005 + 00029032 0x0000715f call 0x000071b5 + 00029033 0x00007160 call 0x000071b0 + 00029034 0x00007161 fetch 0x00000003 , 0x00004454 + 00029035 0x00007162 istore 0x00000003 , 0x00000005 + 00029036 0x00007165 call 0x00007176 + 00029037 0x00007167 arg 0x0000042f , 0x00000006 + 00029038 0x00007168 call 0x00007ebf + 00029039 0x00007169 arg 0x0000443a , 0x00000006 + 00029040 0x0000716a call 0x00007ebf + 00029041 0x0000716b call 0x0000720a + 00029042 0x0000716c arg 0x00000b12 , 0x00000006 + 00029043 0x0000716d arg 0x00000ac2 , 0x00000005 + 00029044 0x0000716e call 0x00007ebf + 00029045 0x00007170 branch 0x000071d0 + 00029046 0x00007175 fetch 0x00000004 , 0x000044c7 + 00029047 0x00007176 istore 0x00000004 , 0x00000005 + 00029048 0x00007177 call 0x00007ecd + 00029049 0x00007178 branch 0x00007eca + 00029050 0x0000717b bpatchx 0x000000db , 0x0000403b + 00029051 0x0000717c jam 0x00000041 , 0x000005e5 + 00029052 0x0000717d arg 0x000005e6 , 0x00000005 + 00029053 0x0000717e call 0x000071b0 + 00029054 0x0000717f call 0x000071b5 + 00029055 0x00007180 fetch 0x00000003 , 0x0000444d + 00029056 0x00007181 istore 0x00000003 , 0x00000005 + 00029057 0x00007184 call 0x00007176 + 00029058 0x00007185 arg 0x0000443a , 0x00000006 + 00029059 0x00007186 call 0x00007ebf + 00029060 0x00007187 arg 0x0000042f , 0x00000006 + 00029061 0x00007188 call 0x00007ebf + 00029062 0x00007189 call 0x0000720a + 00029063 0x0000718a arg 0x00000b12 , 0x00000006 + 00029064 0x0000718b arg 0x00000ac2 , 0x00000005 + 00029065 0x0000718c call 0x00007ebf + 00029066 0x0000718e call 0x000071d0 + 00029067 0x0000718f arg 0x00000af2 , 0x00000005 + 00029068 0x00007190 branch 0x00007201 + 00029069 0x00007193 jam 0x00000020 , 0x000005e5 + 00029070 0x00007194 arg 0x000009fe , 0x00000006 + 00029071 0x00007195 arg 0x000005e6 , 0x00000005 + 00029072 0x00007196 call 0x00007ebd + 00029073 0x00007197 call 0x0000720a + 00029074 0x00007198 arg 0x0000099e , 0x00000006 + 00029075 0x00007199 call 0x00007205 + 00029076 0x0000719a call 0x000071d0 + 00029077 0x0000719b arg 0x00000ac2 , 0x00000005 + 00029078 0x0000719c call 0x00007497 + 00029079 0x0000719d arg 0x00000001 , 0x00000002 + 00029080 0x0000719e call 0x0000719f + 00029081 0x0000719f arg 0x00004419 , 0x00000005 + 00029082 0x000071a0 call 0x00007201 + 00029083 0x000071a1 arg 0x00000000 , 0x00000002 + 00029084 0x000071a2 call 0x0000719f + 00029085 0x000071a3 arg 0x00000b12 , 0x00000005 + 00029086 0x000071a5 branch 0x00007497 + 00029087 0x000071a9 bpatchx 0x000000dc , 0x0000403b + 00029088 0x000071aa jam 0x00000035 , 0x000005e5 + 00029089 0x000071ab setarg 0x00000100 + 00029090 0x000071ac store 0x00000002 , 0x000005e6 + 00029091 0x000071ad call 0x000071b0 + 00029092 0x000071ae call 0x000071b5 + 00029093 0x000071af arg 0x0000443a , 0x00000006 + 00029094 0x000071b0 call 0x00007ebf + 00029095 0x000071b1 arg 0x0000042f , 0x00000006 + 00029096 0x000071b2 call 0x00007ebf + 00029097 0x000071b4 setarg 0x00006c65 + 00029098 0x000071b5 istore 0x00000002 , 0x00000005 + 00029099 0x000071b6 setarg 0x00006274 + 00029100 0x000071b7 istore 0x00000002 , 0x00000005 + 00029101 0x000071b8 istoret 0x00000001 , 0x00000005 + 00029102 0x000071b9 call 0x0000720a + 00029103 0x000071ba branch 0x000071d0 + 00029104 0x000071bd fetch 0x00000006 , 0x000044a0 + 00029105 0x000071be istore 0x00000006 , 0x00000005 + 00029106 0x000071bf fetch 0x00000001 , 0x00004495 + 00029107 0x000071c0 istore 0x00000001 , 0x00000005 + 00029108 0x000071c1 rtn + 00029109 0x000071c4 fetch 0x00000006 , 0x0000044f + 00029110 0x000071c5 istore 0x00000006 , 0x00000005 + 00029111 0x000071ca fetch 0x00000001 , 0x0000448e + 00029112 0x000071cb istore 0x00000001 , 0x00000005 + 00029113 0x000071cc rtn + 00029114 0x000071cf jam 0x00000041 , 0x000005e5 + 00029115 0x000071d0 fetch 0x00000001 , 0x00004664 + 00029116 0x000071d1 store 0x00000001 , 0x000005e6 + 00029117 0x000071d2 arg 0x000045d2 , 0x00000006 + 00029118 0x000071d3 call 0x00007ebd + 00029119 0x000071d4 arg 0x000009be , 0x00000006 + 00029120 0x000071d5 call 0x00007ebd + 00029121 0x000071d6 call 0x0000720a + 00029122 0x000071d7 arg 0x0000042f , 0x00000006 + 00029123 0x000071d8 call 0x00007205 + 00029124 0x000071d9 branch 0x000071d0 + 00029125 0x000071dd jam 0x00000041 , 0x000005e5 + 00029126 0x000071de fetch 0x00000001 , 0x00004664 + 00029127 0x000071df store 0x00000001 , 0x000005e6 + 00029128 0x000071e0 arg 0x000009be , 0x00000006 + 00029129 0x000071e1 call 0x00007ebd + 00029130 0x000071e2 arg 0x000045d2 , 0x00000006 + 00029131 0x000071e3 call 0x00007ebd + 00029132 0x000071e4 call 0x0000720a + 00029133 0x000071e5 arg 0x0000443a , 0x00000006 + 00029134 0x000071e6 call 0x00007205 + 00029135 0x000071e7 branch 0x000071d0 + 00029136 0x000071ea bpatchx 0x000000dd , 0x0000403b + 00029137 0x000071eb call 0x0000721f + 00029138 0x000071ef fetch 0x00000001 , 0x000005e5 + 00029139 0x000071f0 copy 0x0000003f , 0x00000002 + 00029140 0x000071f2 increase 0x0000000f , 0x0000003f + 00029141 0x000071f3 rshift4 0x0000003f , 0x0000003f + 00029142 0x000071f4 copy 0x0000003f , 0x00000012 + 00029143 0x000071f5 branch 0x000071e2 , 0x00000034 + 00029144 0x000071f6 and 0x00000002 , 0x0000000f , 0x0000003f + 00029145 0x000071f7 nbranch 0x000071e5 , 0x00000034 + 00029146 0x000071f9 arg 0x00000ad2 , 0x00000013 + 00029147 0x000071fa arg 0x000005e6 , 0x0000003f + 00029148 0x000071fb increase 0xfffffff0 , 0x0000003f + 00029149 0x000071fe iadd 0x00000002 , 0x00000011 + 00029150 0x000071ff arg 0x00000b02 , 0x00000005 + 00029151 0x00007200 arg 0x00000004 , 0x00000039 + 00029152 0x00007201 call 0x00007edd + 00029153 0x00007205 branch 0x000071f0 + 00029154 0x00007208 arg 0x00000001 , 0x00000012 + 00029155 0x00007209 arg 0x00000000 , 0x00000011 + 00029156 0x0000720b branch 0x000071e6 + 00029157 0x00007210 and 0x00000002 , 0x0000000f , 0x00000011 + 00029158 0x00007212 arg 0x000005e6 , 0x0000003f + 00029159 0x00007213 iadd 0x00000002 , 0x0000003f + 00029160 0x00007214 isub 0x00000011 , 0x00000006 + 00029161 0x00007216 arg 0x00000af2 , 0x00000005 + 00029162 0x00007217 call 0x00007245 + 00029163 0x00007219 arg 0x00000ae2 , 0x00000013 + 00029164 0x0000721a arg 0x00000af2 , 0x00000011 + 00029165 0x0000721b arg 0x00000b02 , 0x00000005 + 00029166 0x0000721c arg 0x00000004 , 0x00000039 + 00029167 0x0000721d call 0x00007edd + 00029168 0x00007229 call 0x00007491 + 00029169 0x0000722a call 0x00007428 + 00029170 0x0000722d arg 0x000005e6 , 0x00000006 + 00029171 0x00007230 increase 0xffffffff , 0x00000012 + 00029172 0x00007231 deposit 0x00000012 + 00029173 0x00007232 branch 0x000071f9 , 0x00000034 + 00029174 0x00007233 call 0x00007486 + 00029175 0x00007234 call 0x00007422 + 00029176 0x00007235 branch 0x000071f3 + 00029177 0x00007238 arg 0x00000af2 , 0x00000005 + 00029178 0x00007239 call 0x00007497 + 00029179 0x0000723a arg 0x00000b02 , 0x00000006 + 00029180 0x0000723b call 0x00007486 + 00029181 0x0000723c call 0x00007428 + 00029182 0x0000723d arg 0x00000af2 , 0x00000006 + 00029183 0x0000723e call 0x00007486 + 00029184 0x0000723f branch 0x00007422 + 00029185 0x00007245 copy 0x00000005 , 0x00000011 + 00029186 0x00007246 call 0x00007497 + 00029187 0x00007248 arg 0x00000010 , 0x00000039 + 00029188 0x00007249 branch 0x00007ee5 + 00029189 0x0000724c arg 0x00000ac2 , 0x00000005 + 00029190 0x0000724d call 0x00007ebf + 00029191 0x0000724f arg 0x00000010 , 0x00000039 + 00029192 0x00007250 arg 0x00000ac2 , 0x00000011 + 00029193 0x00007251 branch 0x00007ee5 + 00029194 0x00007254 fetch 0x00000001 , 0x000005e5 + 00029195 0x00007255 copy 0x0000003f , 0x00000039 + 00029196 0x00007256 arg 0x000005e6 , 0x00000011 + 00029197 0x00007257 branch 0x00007ee5 + 00029198 0x0000725a ifetch 0x00000001 , 0x00000011 + 00029199 0x0000725b lshift 0x0000003f , 0x0000003f + 00029200 0x0000725c isolate1 0x00000000 , 0x00000013 + 00029201 0x0000725d setflag 0x00000001 , 0x00000000 , 0x0000003f + 00029202 0x0000725e isolate1 0x00000008 , 0x0000003f + 00029203 0x0000725f setflag 0x00000001 , 0x00000000 , 0x00000013 + 00029204 0x00007260 istore 0x00000001 , 0x00000011 + 00029205 0x00007261 increase 0xffffffff , 0x00000011 + 00029206 0x00007262 loop 0x0000720e + 00029207 0x00007263 rtn + 00029208 0x00007266 arg 0x00000ad2 , 0x00000011 + 00029209 0x00007268 increase 0x0000000f , 0x00000011 + 00029210 0x00007269 force 0x00000010 , 0x00000039 + 00029211 0x0000726a force 0x00000000 , 0x00000013 + 00029212 0x0000726b branch 0x0000720e + 00029213 0x0000726e arg 0x00000ae2 , 0x00000011 + 00029214 0x0000726f branch 0x00007219 + 00029215 0x00007273 arg 0x00000ac2 , 0x00000006 + 00029216 0x00007274 call 0x00007484 + 00029217 0x00007277 force 0x00000008 , 0x00000038 + 00029218 0x00007278 call 0x00007492 + 00029219 0x00007279 call 0x00007491 + 00029220 0x0000727a call 0x0000741f + 00029221 0x0000727f arg 0x00000ad2 , 0x00000005 + 00029222 0x00007280 call 0x00007497 + 00029223 0x00007282 bpatchx 0x000000de , 0x0000403b + 00029224 0x00007283 fetch 0x00000001 , 0x00000ad2 + 00029225 0x00007284 isolate1 0x00000007 , 0x0000003f + 00029226 0x00007285 nbranch 0x00007230 , 0x00000001 + 00029227 0x00007286 call 0x00007218 + 00029228 0x00007289 arg 0x00000ad2 , 0x00000013 + 00029229 0x0000728b arg 0x00000ad2 , 0x00000005 + 00029230 0x0000728e call 0x0000723a + 00029231 0x0000728f branch 0x00007231 + 00029232 0x00007291 call 0x00007218 + 00029233 0x00007294 arg 0x00000ad2 , 0x00000006 + 00029234 0x00007295 arg 0x00000ae2 , 0x00000005 + 00029235 0x00007296 call 0x00007ebf + 00029236 0x00007297 fetch 0x00000001 , 0x00000ae2 + 00029237 0x00007298 isolate1 0x00000007 , 0x0000003f + 00029238 0x00007299 nbranch 0x0000721d , 0x00000001 + 00029239 0x0000729a call 0x0000721d + 00029240 0x0000729c arg 0x00000ae2 , 0x00000013 + 00029241 0x0000729e arg 0x00000ae2 , 0x00000005 + 00029242 0x000072a5 arg 0x00000003 , 0x00000039 + 00029243 0x000072a7 arg 0x00000000 , 0x00000002 + 00029244 0x000072a8 call 0x00007241 + 00029245 0x000072a9 increase 0x00000004 , 0x00000013 + 00029246 0x000072aa loop 0x0000723b + 00029247 0x000072ab arg 0x00008700 , 0x00000002 + 00029248 0x000072ac lshift16 0x00000002 , 0x00000002 + 00029249 0x000072ae ifetch 0x00000004 , 0x00000013 + 00029250 0x000072af ixor 0x00000002 , 0x0000003f + 00029251 0x000072b0 istore 0x00000004 , 0x00000005 + 00029252 0x000072b1 rtn + 00029253 0x000072b8 bpatchx 0x000000df , 0x0000403b + 00029254 0x000072b9 arg 0x00000010 , 0x00000039 + 00029255 0x000072ba arg 0x00000000 , 0x0000003f + 00029256 0x000072bc isub 0x00000011 , 0x0000003e + 00029257 0x000072bd branch 0x00007250 , 0x00000005 + 00029258 0x000072be branch 0x00007253 , 0x00000002 + 00029259 0x000072bf ifetcht 0x00000001 , 0x00000006 + 00029260 0x000072c0 istoret 0x00000001 , 0x00000005 + 00029261 0x000072c2 increase 0x00000001 , 0x0000003f + 00029262 0x000072c3 loop 0x00007248 + 00029263 0x000072c4 rtn + 00029264 0x000072c6 arg 0x00000080 , 0x00000002 + 00029265 0x000072c8 istoret 0x00000001 , 0x00000005 + 00029266 0x000072c9 branch 0x0000724d + 00029267 0x000072cc arg 0x00000000 , 0x00000002 + 00029268 0x000072cd branch 0x00007251 + 00029269 0x000072d1 call 0x00007268 + 00029270 0x000072d2 arg 0x00000592 , 0x00000006 + 00029271 0x000072d3 arg 0x00000582 , 0x00000005 + 00029272 0x000072d4 branch 0x00007ebf + 00029273 0x000072d8 disable 0x00000028 + 00029274 0x000072d9 call 0x0000735f + 00029275 0x000072da arg 0x00000562 , 0x00000006 + 00029276 0x000072db arg 0x000005a2 , 0x00000005 + 00029277 0x000072dc force 0x0000000f , 0x00000039 + 00029278 0x000072dd call 0x00007f01 + 00029279 0x000072de ifetch 0x00000001 , 0x00000006 + 00029280 0x000072df xor_into 0x00000006 , 0x0000003f + 00029281 0x000072e0 istore 0x00000001 , 0x00000005 + 00029282 0x000072e1 setarg 0x000005b2 + 00029283 0x000072e2 store 0x00000002 , 0x000005d6 + 00029284 0x000072e3 setarg 0x000005a2 + 00029285 0x000072e4 store 0x00000002 , 0x000005d4 + 00029286 0x000072e5 set1 0x00000012 , 0x00000000 + 00029287 0x000072e6 branch 0x000072a8 + 00029288 0x000072eb fetcht 0x00000001 , 0x00004689 + 00029289 0x000072ec force 0x00000010 , 0x00000012 + 00029290 0x000072ed add 0x00000002 , 0x00000006 , 0x00000013 + 00029291 0x000072ee sub 0x00000013 , 0x00000010 , 0x0000003e + 00029292 0x000072ef branch 0x0000726e , 0x00000002 + 00029293 0x000072f0 force 0x00000010 , 0x00000013 + 00029294 0x000072f2 arg 0x000005a2 , 0x00000005 + 00029295 0x000072f4 arg 0x0000468a , 0x00000006 + 00029296 0x000072f5 copy 0x00000002 , 0x00000039 + 00029297 0x000072f6 disable 0x00000028 + 00029298 0x000072f8 ifetch 0x00000001 , 0x00000006 + 00029299 0x000072f9 istore 0x00000001 , 0x00000005 + 00029300 0x000072fa increase 0xffffffff , 0x00000012 + 00029301 0x000072fb branch 0x0000727c , 0x00000005 + 00029302 0x000072fc loop 0x00007272 + 00029303 0x000072fd branch 0x0000726f , 0x00000028 + 00029304 0x000072fe enable 0x00000028 + 00029305 0x000072ff force 0x00000006 , 0x00000039 + 00029306 0x00007300 copy 0x00000011 , 0x00000006 + 00029307 0x00007301 branch 0x00007272 + 00029308 0x00007303 arg 0x00000562 , 0x00000006 + 00029309 0x00007304 arg 0x000005b2 , 0x00000005 + 00029310 0x00007305 call 0x00007ebf + 00029311 0x00007306 fetch 0x00000001 , 0x000005c1 + 00029312 0x00007307 ixor 0x00000013 , 0x0000003f + 00029313 0x00007308 store 0x00000001 , 0x000005c1 + 00029314 0x00007309 setarg 0x000005b2 + 00029315 0x0000730a store 0x00000002 , 0x000005d6 + 00029316 0x0000730b setarg 0x000005a2 + 00029317 0x0000730c store 0x00000002 , 0x000005d4 + 00029318 0x0000730d set1 0x00000012 , 0x00000000 + 00029319 0x0000730e branch 0x000072a8 + 00029320 0x00007314 disable 0x00000028 + 00029321 0x00007315 call 0x0000735f + 00029322 0x00007316 branch 0x00007292 + 00029323 0x00007319 arg 0x00000056 , 0x00000011 + 00029324 0x0000731a enable 0x00000028 + 00029325 0x0000731b call 0x0000735f + 00029326 0x0000731c call 0x00007292 + 00029327 0x0000731d arg 0x00000592 , 0x00000006 + 00029328 0x0000731e arg 0x00000062 , 0x00000005 + 00029329 0x0000731f branch 0x00007ebf + 00029330 0x00007323 setarg 0x00000562 + 00029331 0x00007324 store 0x00000002 , 0x000005d6 + 00029332 0x00007325 setarg 0x000041be + 00029333 0x00007326 store 0x00000002 , 0x000005d4 + 00029334 0x00007327 set0 0x00000012 , 0x00000000 + 00029335 0x00007328 call 0x000072a8 + 00029336 0x00007329 arg 0x00000592 , 0x00000011 + 00029337 0x0000732a arg 0x00000562 , 0x00000012 + 00029338 0x0000732b arg 0x000005a2 , 0x00000005 + 00029339 0x0000732c call 0x00007352 + 00029340 0x0000732d arg 0x000005a2 , 0x00000011 + 00029341 0x0000732e arg 0x000005b2 , 0x00000012 + 00029342 0x0000732f copy 0x00000012 , 0x00000005 + 00029343 0x00007330 enable 0x00000028 + 00029344 0x00007331 call 0x00007350 + 00029345 0x00007332 call 0x0000736a + 00029346 0x00007333 setarg 0x000005b2 + 00029347 0x00007334 store 0x00000002 , 0x000005d6 + 00029348 0x00007335 setarg 0x000005a2 + 00029349 0x00007336 store 0x00000002 , 0x000005d4 + 00029350 0x00007337 set1 0x00000012 , 0x00000000 + 00029351 0x00007338 branch 0x000072a8 + 00029352 0x0000733d jam 0x00000000 , 0x000005d8 + 00029353 0x0000733e fetch 0x00000002 , 0x000005d4 + 00029354 0x0000733f iforce 0x00000006 + 00029355 0x00007340 arg 0x000005c2 , 0x00000005 + 00029356 0x00007341 call 0x00007ebf + 00029357 0x00007342 fetch 0x00000002 , 0x000005d6 + 00029358 0x00007343 iforce 0x00000006 + 00029359 0x00007344 arg 0x00000592 , 0x00000005 + 00029360 0x00007345 call 0x00007ebf + 00029361 0x00007348 call 0x000072cf + 00029362 0x00007349 disable 0x00000028 + 00029363 0x0000734a bmark0 0x00000012 , 0x000072b9 + 00029364 0x0000734b fetch 0x00000001 , 0x000005d8 + 00029365 0x0000734c bne 0x00000004 , 0x000072b9 + 00029366 0x0000734d fetch 0x00000002 , 0x000005d6 + 00029367 0x0000734e iforce 0x00000012 + 00029368 0x0000734f call 0x00007301 + 00029369 0x00007351 call 0x00007300 + 00029370 0x00007352 call 0x00007313 + 00029371 0x00007353 fetch 0x00000001 , 0x000005d8 + 00029372 0x00007354 increase 0x00000001 , 0x0000003f + 00029373 0x00007355 store 0x00000001 , 0x000005d8 + 00029374 0x00007357 call 0x000072cf + 00029375 0x00007358 enable 0x00000028 + 00029376 0x00007359 call 0x00007300 + 00029377 0x0000735a call 0x00007322 + 00029378 0x0000735b call 0x00007331 + 00029379 0x0000735c call 0x00007322 + 00029380 0x0000735d call 0x00007331 + 00029381 0x0000735e call 0x00007322 + 00029382 0x0000735f call 0x00007331 + 00029383 0x00007360 call 0x00007322 + 00029384 0x00007361 fetch 0x00000001 , 0x000005d8 + 00029385 0x00007362 increase 0x00000001 , 0x0000003f + 00029386 0x00007363 store 0x00000001 , 0x000005d8 + 00029387 0x00007364 bne 0x00000010 , 0x000072b1 + 00029388 0x00007365 call 0x000072cf + 00029389 0x00007366 disable 0x00000028 + 00029390 0x00007367 branch 0x00007300 + 00029391 0x0000736c fetch 0x00000001 , 0x000005d8 + 00029392 0x0000736d arg 0x000005c2 , 0x00000006 + 00029393 0x0000736e branch 0x000072f6 , 0x00000034 + 00029394 0x0000736f iforce 0x00000012 + 00029395 0x00007370 force 0x00000011 , 0x00000039 + 00029396 0x00007371 copy 0x00000006 , 0x00000005 + 00029397 0x00007373 ifetch 0x00000001 , 0x00000006 + 00029398 0x00007374 lshift3 0x0000003f , 0x00000002 + 00029399 0x00007375 rshift2 0x0000003f , 0x0000003f + 00029400 0x00007376 rshift3 0x0000003f , 0x0000003f + 00029401 0x00007377 ior 0x00000002 , 0x0000003f + 00029402 0x00007378 istore 0x00000001 , 0x00000005 + 00029403 0x00007379 loop 0x000072d5 + 00029404 0x0000737a setarg 0x000005c2 + 00029405 0x0000737b iadd 0x00000012 , 0x00000006 + 00029406 0x0000737c force 0x00000010 , 0x00000039 + 00029407 0x0000737d arg 0x00000572 , 0x00000005 + 00029408 0x0000737f ifetch 0x00000001 , 0x00000006 + 00029409 0x00007380 istore 0x00000001 , 0x00000005 + 00029410 0x00007381 compare 0x000005d3 , 0x00000006 , 0x000000ff + 00029411 0x00007382 nbranch 0x000072e5 , 0x00000001 + 00029412 0x00007383 increase 0xffffffef , 0x00000006 + 00029413 0x00007385 loop 0x000072e0 + 00029414 0x00007386 force 0x00000000 , 0x00000011 + 00029415 0x00007387 add 0x00000012 , 0xffffffff , 0x00000013 + 00029416 0x00007388 lshift2 0x00000013 , 0x00000013 + 00029417 0x00007389 lshift2 0x00000013 , 0x00000013 + 00029418 0x0000738a call 0x000074b9 + 00029419 0x0000738b setarg 0x00008400 + 00029420 0x0000738c iadd 0x00000013 , 0x00000013 + 00029421 0x0000738d arg 0x00000572 , 0x00000005 + 00029422 0x0000738e force 0x00000010 , 0x00000039 + 00029423 0x00007390 ifetcht 0x00000001 , 0x00000013 + 00029424 0x00007391 ifetch 0x00000001 , 0x00000005 + 00029425 0x00007392 iadd 0x00000002 , 0x0000003f + 00029426 0x00007393 istore 0x00000001 , 0x00000005 + 00029427 0x00007394 increase 0x00000001 , 0x00000013 + 00029428 0x00007395 loop 0x000072ef + 00029429 0x00007396 branch 0x000074bd + 00029430 0x00007399 force 0x00000010 , 0x00000039 + 00029431 0x0000739a force 0x00000000 , 0x00000002 + 00029432 0x0000739c ifetch 0x00000001 , 0x00000006 + 00029433 0x0000739d ixor 0x00000002 , 0x00000002 + 00029434 0x0000739e loop 0x000072f8 + 00029435 0x0000739f deposit 0x00000002 + 00029436 0x000073a0 istore 0x00000001 , 0x00000006 + 00029437 0x000073a1 arg 0x000005c2 , 0x00000006 + 00029438 0x000073a2 arg 0x00000572 , 0x00000005 + 00029439 0x000073a3 branch 0x00007ebf + 00029440 0x000073a6 arg 0x00000572 , 0x00000012 + 00029441 0x000073a8 force 0x00000010 , 0x00000039 + 00029442 0x000073a9 arg 0x00000592 , 0x00000011 + 00029443 0x000073aa copy 0x00000011 , 0x00000005 + 00029444 0x000073ac ifetcht 0x00000001 , 0x00000011 + 00029445 0x000073ad ifetch 0x00000001 , 0x00000012 + 00029446 0x000073ae ixor 0x00000002 , 0x00000030 + 00029447 0x000073af and 0x00000039 , 0x00000003 , 0x00000013 + 00029448 0x000073b0 nbranch 0x0000730a , 0x00000028 + 00029449 0x000073b1 xor_into 0x00000003 , 0x00000013 + 00029450 0x000073b3 sub 0x00000013 , 0x00000001 , 0x00000013 + 00029451 0x000073b4 branch 0x0000730d , 0x00000002 + 00029452 0x000073b5 iadd 0x00000002 , 0x00000030 + 00029453 0x000073b7 deposit 0x00000030 + 00029454 0x000073b8 istore 0x00000001 , 0x00000005 + 00029455 0x000073b9 increase 0x00000001 , 0x00000011 + 00029456 0x000073ba increase 0x00000001 , 0x00000012 + 00029457 0x000073bb loop 0x00007304 + 00029458 0x000073bc rtn + 00029459 0x000073bf call 0x000074b9 + 00029460 0x000073c0 force 0x00000010 , 0x00000039 + 00029461 0x000073c1 arg 0x00000592 , 0x00000011 + 00029462 0x000073c3 ifetch 0x00000001 , 0x00000011 + 00029463 0x000073c4 arg 0x00008500 , 0x00000006 + 00029464 0x000073c5 and 0x00000039 , 0x00000003 , 0x00000013 + 00029465 0x000073c6 sub 0x00000013 , 0x00000001 , 0x0000003e + 00029466 0x000073c7 branch 0x0000731c , 0x00000002 + 00029467 0x000073c8 arg 0x00008600 , 0x00000006 + 00029468 0x000073ca iadd 0x00000006 , 0x00000006 + 00029469 0x000073cb ifetch 0x00000001 , 0x00000006 + 00029470 0x000073cc istore 0x00000001 , 0x00000011 + 00029471 0x000073cd increase 0x00000001 , 0x00000011 + 00029472 0x000073ce loop 0x00007316 + 00029473 0x000073cf branch 0x000074bd + 00029474 0x000073d2 force 0x00000008 , 0x00000039 + 00029475 0x000073d3 arg 0x00000592 , 0x00000006 + 00029476 0x000073d4 copy 0x00000006 , 0x00000005 + 00029477 0x000073d6 ifetch 0x00000001 , 0x00000006 + 00029478 0x000073d7 iforce 0x00000011 + 00029479 0x000073d8 ifetch 0x00000001 , 0x00000006 + 00029480 0x000073d9 iforce 0x00000012 + 00029481 0x000073da lshift 0x00000011 , 0x0000003f + 00029482 0x000073db iadd 0x00000012 , 0x0000003f + 00029483 0x000073dc istore 0x00000001 , 0x00000005 + 00029484 0x000073dd deposit 0x00000011 + 00029485 0x000073de iadd 0x00000012 , 0x0000003f + 00029486 0x000073df istore 0x00000001 , 0x00000005 + 00029487 0x000073e0 loop 0x00007325 + 00029488 0x000073e1 rtn + 00029489 0x000073e5 setarg 0x008ae42c + 00029490 0x000073e6 iforce 0x00000002 + 00029491 0x000073e7 force 0x00000007 , 0x00000039 + 00029492 0x000073e8 call 0x00007340 + 00029493 0x000073e9 setarg 0x000d751b + 00029494 0x000073ea iforce 0x00000002 + 00029495 0x000073eb force 0x00000005 , 0x00000039 + 00029496 0x000073ec call 0x00007340 + 00029497 0x000073ed fetch 0x00000001 , 0x000005a1 + 00029498 0x000073ee iforce 0x00000011 + 00029499 0x000073ef fetch 0x00000001 , 0x00000595 + 00029500 0x000073f0 store 0x00000001 , 0x000005a1 + 00029501 0x000073f1 deposit 0x00000011 + 00029502 0x000073f2 store 0x00000001 , 0x00000595 + 00029503 0x000073f3 rtn + 00029504 0x000073f6 and 0x00000002 , 0x0000000f , 0x00000012 + 00029505 0x000073f8 and 0x00000002 , 0x0000000f , 0x0000003f + 00029506 0x000073f9 arg 0x00000592 , 0x00000005 + 00029507 0x000073fa iadd 0x00000005 , 0x00000005 + 00029508 0x000073fb ifetch 0x00000001 , 0x00000005 + 00029509 0x000073fc iforce 0x00000013 + 00029510 0x000073fd deposit 0x00000011 + 00029511 0x000073fe istore 0x00000001 , 0x00000005 + 00029512 0x000073ff copy 0x00000013 , 0x00000011 + 00029513 0x00007400 rshift4 0x00000002 , 0x00000002 + 00029514 0x00007401 loop 0x00007341 + 00029515 0x00007402 setarg 0x00000592 + 00029516 0x00007403 iadd 0x00000012 , 0x00000005 + 00029517 0x00007404 deposit 0x00000011 + 00029518 0x00007405 istore 0x00000001 , 0x00000005 + 00029519 0x00007406 rtn + 00029520 0x00007409 enable 0x00000028 + 00029521 0x0000740a branch 0x00007353 + 00029522 0x0000740d disable 0x00000028 + 00029523 0x0000740f force 0x00000010 , 0x00000039 + 00029524 0x00007411 ifetcht 0x00000001 , 0x00000011 + 00029525 0x00007412 ifetch 0x00000001 , 0x00000012 + 00029526 0x00007413 branch 0x00007359 , 0x00000028 + 00029527 0x00007414 ixor 0x00000002 , 0x0000003f + 00029528 0x00007415 branch 0x0000735a + 00029529 0x00007417 iadd 0x00000002 , 0x0000003f + 00029530 0x00007419 istore 0x00000001 , 0x00000005 + 00029531 0x0000741a increase 0x00000001 , 0x00000011 + 00029532 0x0000741b increase 0x00000001 , 0x00000012 + 00029533 0x0000741c loop 0x00007354 + 00029534 0x0000741d rtn + 00029535 0x00007421 arg 0x000005b2 , 0x00000005 + 00029536 0x00007422 ifetch 0x00000006 , 0x00000011 + 00029537 0x00007423 istore 0x00000006 , 0x00000005 + 00029538 0x00007424 branch 0x00007365 , 0x00000028 + 00029539 0x00007425 ifetch 0x00000006 , 0x00000011 + 00029540 0x00007426 branch 0x00007366 + 00029541 0x00007428 ifetch 0x00000006 , 0x00000006 + 00029542 0x0000742a istore 0x00000006 , 0x00000005 + 00029543 0x0000742b ifetch 0x00000004 , 0x00000011 + 00029544 0x0000742c istore 0x00000004 , 0x00000005 + 00029545 0x0000742d rtn + 00029546 0x00007430 arg 0x000041be , 0x00000006 + 00029547 0x00007431 arg 0x000005a2 , 0x00000005 + 00029548 0x00007432 arg 0x00000000 , 0x00000002 + 00029549 0x00007433 setarg 0x008395a7 + 00029550 0x00007434 call 0x0000738b + 00029551 0x00007435 setarg 0x00b3c1df + 00029552 0x00007436 call 0x0000738b + 00029553 0x00007437 setarg 0x0000e5e9 + 00029554 0x00007438 call 0x0000738c + 00029555 0x00007439 copy 0x00000002 , 0x00000014 + 00029556 0x0000743a disable 0x00000028 + 00029557 0x0000743b call 0x00007379 + 00029558 0x0000743c copy 0x00000014 , 0x00000002 + 00029559 0x0000743d enable 0x00000028 + 00029560 0x0000743e branch 0x00007379 + 00029561 0x00007441 force 0x00000008 , 0x00000039 + 00029562 0x00007443 ifetch 0x00000001 , 0x00000006 + 00029563 0x00007444 compare 0x00000001 , 0x00000039 , 0x00000001 + 00029564 0x00007445 branch 0x00007380 , 0x00000028 + 00029565 0x00007446 branch 0x00007381 , 0x00000001 + 00029566 0x00007448 iadd 0x00000002 , 0x0000003f + 00029567 0x00007449 branch 0x00007382 + 00029568 0x0000744b branch 0x0000737e , 0x00000001 + 00029569 0x0000744d ixor 0x00000002 , 0x0000003f + 00029570 0x0000744f istore 0x00000001 , 0x00000005 + 00029571 0x00007450 rshift8 0x00000002 , 0x00000002 + 00029572 0x00007451 loop 0x0000737a + 00029573 0x00007452 rtn + 00029574 0x00007455 fetch 0x00000006 , 0x00000596 + 00029575 0x00007456 store 0x00000006 , 0x00000056 + 00029576 0x00007457 ifetch 0x00000006 , 0x00000006 + 00029577 0x00007458 istore 0x00000006 , 0x00000005 + 00029578 0x00007459 rtn + 00029579 0x0000745c lshift8 0x00000002 , 0x00000002 + 00029580 0x0000745e lshift16 0x00000002 , 0x00000002 + 00029581 0x0000745f ior 0x00000002 , 0x00000002 + 00029582 0x00007460 rtn + 00029583 0x00007465 branch 0x0000738f + 00029584 0x0000746a bpatchx 0x000000e0 , 0x0000403c + 00029585 0x0000746b call 0x0000742b + 00029586 0x0000746c arg 0x00004419 , 0x00000005 + 00029587 0x0000746d branch 0x00007497 + 00029588 0x00007471 arg 0x0000443a , 0x00000005 + 00029589 0x00007472 branch 0x00007397 , 0x00000029 + 00029590 0x00007473 arg 0x0000042f , 0x00000005 + 00029591 0x00007475 copy 0x00000006 , 0x00000011 + 00029592 0x00007476 call 0x00007ebf + 00029593 0x00007477 call 0x00007440 + 00029594 0x00007478 arg 0x0000442a , 0x00000006 + 00029595 0x00007479 branch 0x000074b0 + 00029596 0x0000747c arg 0x0000042f , 0x00000011 + 00029597 0x0000747d branch 0x0000739f , 0x00000029 + 00029598 0x0000747e arg 0x0000443a , 0x00000011 + 00029599 0x00007480 copy 0x00000011 , 0x00000005 + 00029600 0x00007481 call 0x0000630c + 00029601 0x00007482 branch 0x00007440 + 00029602 0x00007485 arg 0x000044aa , 0x00000006 + 00029603 0x00007486 call 0x00007486 + 00029604 0x00007487 arg 0x00004419 , 0x00000006 + 00029605 0x00007488 call 0x00007487 + 00029606 0x00007489 force 0x00000038 , 0x00000036 + 00029607 0x0000748a force 0x00000000 , 0x00000036 + 00029608 0x0000748b call 0x0000741d + 00029609 0x0000748c arg 0x0000047c , 0x00000005 + 00029610 0x0000748d branch 0x00007497 + 00029611 0x00007491 force 0x00000049 , 0x0000003f + 00029612 0x00007492 branch 0x000073ae + 00029613 0x00007494 force 0x00000001 , 0x0000003f + 00029614 0x00007496 force 0x00000000 , 0x00000038 + 00029615 0x00007497 lshift8 0x00000002 , 0x0000002f + 00029616 0x00007498 ior 0x0000002f , 0x0000002f + 00029617 0x00007499 increase 0x00000001 , 0x00000038 + 00029618 0x0000749a rshift8 0x00000002 , 0x0000002f + 00029619 0x0000749b rshift16 0x0000002f , 0x0000002f + 00029620 0x0000749c fetch 0x00000002 , 0x00004411 + 00029621 0x0000749d lshift16 , 0x0000003f , 0x0000003f + 00029622 0x0000749e ior 0x0000002f , 0x0000002f + 00029623 0x0000749f increase 0x00000001 , 0x00000038 + 00029624 0x000074a0 ifetch 0x00000004 , 0x00000006 + 00029625 0x000074a1 iforce 0x0000002f + 00029626 0x000074a2 increase 0x00000001 , 0x00000038 + 00029627 0x000074a3 ifetch 0x00000002 , 0x00000006 + 00029628 0x000074a4 byteswap 0x00000011 , 0x0000002f + 00029629 0x000074a5 lshift16 0x0000002f , 0x0000002f + 00029630 0x000074a6 ior 0x0000002f , 0x0000002f + 00029631 0x000074a7 increase 0x00000001 , 0x00000038 + 00029632 0x000074a8 rtn + 00029633 0x000074ad add 0x00000013 , 0x00000001 , 0x00000006 + 00029634 0x000074ae ifetch 0x00000001 , 0x00000006 + 00029635 0x000074af iforce 0x00000011 + 00029636 0x000074b0 call 0x000073ab + 00029637 0x000074b1 call 0x0000741f + 00029638 0x000074b3 force 0x00000000 , 0x00000038 + 00029639 0x000074b4 ifetch 0x00000001 , 0x00000013 + 00029640 0x000074b5 and_into 0x00000003 , 0x0000003f + 00029641 0x000074b6 lshift16 0x0000003f , 0x0000002f + 00029642 0x000074b7 set1 0x00000008 , 0x0000002f + 00029643 0x000074b8 call 0x0000748f + 00029644 0x000074b9 call 0x00007422 + 00029645 0x000074bb copy 0x00000011 , 0x00000039 + 00029646 0x000074bc add 0x00000013 , 0x00000002 , 0x00000006 + 00029647 0x000074bd call 0x0000746e + 00029648 0x000074bf call 0x00007478 + 00029649 0x000074c0 call 0x00007422 + 00029650 0x000074c1 deposit 0x00000039 + 00029651 0x000074c2 branch 0x000073d5 , 0x00000034 + 00029652 0x000074c3 branch 0x000073d0 + 00029653 0x000074c5 force 0x0000000c , 0x00000038 + 00029654 0x000074c6 deposit 0x0000002f + 00029655 0x000074c7 store 0x00000004 , 0x00000417 + 00029656 0x000074c8 rtn + 00029657 0x000074cb increase 0x00000001 , 0x00000011 + 00029658 0x000074cc call 0x000073ad + 00029659 0x000074cd copy 0x00000013 , 0x00000006 + 00029660 0x000074ce call 0x00007482 + 00029661 0x000074cf call 0x00007425 + 00029662 0x000074d0 call 0x0000749e + 00029663 0x000074d1 increase 0x00000010 , 0x00000013 + 00029664 0x000074d2 increase 0xfffffff0 , 0x00000012 + 00029665 0x000074d3 branch 0x000073d9 , 0x00000002 + 00029666 0x000074d4 rtn + 00029667 0x000074d7 bpatchx 0x000000e1 , 0x0000403c + 00029668 0x000074d8 arg 0x000043dc , 0x00000013 + 00029669 0x000074d9 fetcht 0x00000005 , 0x00004403 + 00029670 0x000074da call 0x000073c1 + 00029671 0x000074db force 0x00000008 , 0x00000038 + 00029672 0x000074dc iforce 0x0000002f + 00029673 0x000074dd force 0x00000000 , 0x00000011 + 00029674 0x000074de call 0x000073ad + 00029675 0x000074df call 0x00007425 + 00029676 0x000074e0 arg 0x000043de , 0x00000013 + 00029677 0x000074e1 fetch 0x00000001 , 0x000043dd + 00029678 0x000074e2 add 0x0000003f , 0xffffffff , 0x00000012 + 00029679 0x000074e3 iadd 0x00000013 , 0x00000005 + 00029680 0x000074e4 force 0x0000000c , 0x00000038 + 00029681 0x000074e5 deposit 0x0000002f + 00029682 0x000074e6 istore 0x00000004 , 0x00000005 + 00029683 0x000074e7 call 0x000073d9 + 00029684 0x000074e8 fetch 0x00000001 , 0x000043dd + 00029685 0x000074e9 increase 0x00000004 , 0x0000003f + 00029686 0x000074ea store 0x00000001 , 0x000043dd + 00029687 0x000074eb fetcht 0x00000005 , 0x00004403 + 00029688 0x000074ec increase 0x00000001 , 0x00000002 + 00029689 0x000074ed storet 0x00000005 , 0x00004403 + 00029690 0x000074ee rtn + 00029691 0x000074f1 bpatchx 0x000000e2 , 0x0000403c + 00029692 0x000074f2 fetch 0x00000001 , 0x000002da + 00029693 0x000074f3 sub 0x0000003f , 0x00000014 , 0x0000003e + 00029694 0x000074f4 branch 0x000073ff , 0x00000002 + 00029695 0x000074f6 arg 0x000002db , 0x00000013 + 00029696 0x000074f7 add 0x0000003f , 0xffffffff , 0x00000012 + 00029697 0x000074f8 increase 0xfffffffc , 0x0000003f + 00029698 0x000074f9 store 0x00000001 , 0x000002da + 00029699 0x000074fa iadd 0x00000013 , 0x00000006 + 00029700 0x000074fb ifetch 0x00000004 , 0x00000006 + 00029701 0x000074fc force 0x00000008 , 0x00000038 + 00029702 0x000074fd iforce 0x0000002f + 00029703 0x000074fe force 0x00000000 , 0x00000011 + 00029704 0x000074ff fetcht 0x00000005 , 0x00004408 + 00029705 0x00007500 call 0x000073ad + 00029706 0x00007501 call 0x00007425 + 00029707 0x00007502 force 0x0000000c , 0x00000038 + 00029708 0x00007503 deposit 0x0000002f + 00029709 0x00007504 store 0x00000004 , 0x0000041b + 00029710 0x00007505 call 0x000073d9 + 00029711 0x00007506 arg 0x000002d9 , 0x00000013 + 00029712 0x00007507 call 0x000073c1 + 00029713 0x00007508 fetcht 0x00000004 , 0x0000041b + 00029714 0x00007509 isub 0x00000002 , 0x0000003f + 00029715 0x0000750a nrtn 0x00000034 + 00029716 0x0000750b fetch 0x00000004 , 0x0000440d + 00029717 0x0000750c isub 0x00000002 , 0x0000003f + 00029718 0x0000750d rtn 0x00000034 + 00029719 0x0000750e storet 0x00000004 , 0x0000440d + 00029720 0x0000750f fetch 0x00000005 , 0x00004408 + 00029721 0x00007510 increase 0x00000001 , 0x0000003f + 00029722 0x00007511 store 0x00000005 , 0x00004408 + 00029723 0x00007512 force 0x00000000 , 0x0000003f + 00029724 0x00007513 rtn + 00029725 0x00007516 nbranch 0x0000741d , 0x00000037 + 00029726 0x00007517 rtn + 00029727 0x0000751a force 0x00000030 , 0x00000036 + 00029728 0x0000751b force 0x00000000 , 0x00000036 + 00029729 0x0000751c branch 0x0000741d + 00029730 0x0000751f force 0x00000032 , 0x00000036 + 00029731 0x00007520 force 0x00000002 , 0x00000036 + 00029732 0x00007521 branch 0x0000741d + 00029733 0x00007524 force 0x00000034 , 0x00000036 + 00029734 0x00007525 force 0x00000004 , 0x00000036 + 00029735 0x00007526 branch 0x0000741d + 00029736 0x0000752a force 0x00000001 , 0x00000036 + 00029737 0x0000752b force 0x00000000 , 0x00000036 + 00029738 0x0000752c rtn + 00029739 0x0000752e force 0x00000000 , 0x00000038 + 00029740 0x0000752f fetch 0x00000004 , 0x0000042f + 00029741 0x00007530 iforce 0x0000002f + 00029742 0x00007531 increase 0x00000001 , 0x00000038 + 00029743 0x00007532 ifetch 0x00000004 , 0x00000006 + 00029744 0x00007533 iforce 0x0000002f + 00029745 0x00007534 increase 0x00000001 , 0x00000038 + 00029746 0x00007535 fetch 0x00000004 , 0x0000443a + 00029747 0x00007536 iforce 0x0000002f + 00029748 0x00007537 increase 0x00000001 , 0x00000038 + 00029749 0x00007538 ifetch 0x00000004 , 0x00000006 + 00029750 0x00007539 iforce 0x0000002f + 00029751 0x0000753a increase 0x00000001 , 0x00000038 + 00029752 0x0000753b call 0x00007492 + 00029753 0x0000753c increase 0xfffffffc , 0x00000038 + 00029754 0x0000753d fetch 0x00000004 , 0x000044c7 + 00029755 0x0000753e copy 0x0000003f , 0x0000002f + 00029756 0x0000753f increase 0x00000004 , 0x00000038 + 00029757 0x00007540 force 0x00000038 , 0x00000036 + 00029758 0x00007541 force 0x00000008 , 0x00000036 + 00029759 0x00007542 branch 0x0000741d + 00029760 0x00007546 bpatchx 0x000000e3 , 0x0000403c + 00029761 0x00007547 fetch 0x00000006 , 0x000044a0 + 00029762 0x00007548 fetcht 0x00000006 , 0x0000044f + 00029763 0x00007549 branch 0x00007446 , 0x00000029 + 00029764 0x0000754a fetch 0x00000006 , 0x0000044f + 00029765 0x0000754b fetcht 0x00000006 , 0x000044a0 + 00029766 0x0000754d force 0x00000008 , 0x00000038 + 00029767 0x0000754e copy 0x00000002 , 0x0000002f + 00029768 0x0000754f increase 0x00000001 , 0x00000038 + 00029769 0x00007550 rshift32 0x00000002 , 0x0000002f + 00029770 0x00007551 lshift16 0x0000003f , 0x0000003f + 00029771 0x00007552 ior 0x0000002f , 0x0000002f + 00029772 0x00007553 increase 0x00000001 , 0x00000038 + 00029773 0x00007554 rshift32 0x0000003f , 0x0000002f + 00029774 0x00007555 increase 0x00000001 , 0x00000038 + 00029775 0x00007556 force 0x00000000 , 0x0000002f + 00029776 0x00007557 force 0x00000000 , 0x0000003f + 00029777 0x00007558 fetch 0x00000001 , 0x0000448e + 00029778 0x00007559 fetcht 0x00000001 , 0x00004485 + 00029779 0x0000755a nbranch 0x00007456 , 0x00000029 + 00029780 0x0000755c fetch 0x00000001 , 0x00004495 + 00029781 0x0000755d fetcht 0x00000001 , 0x0000448e + 00029782 0x0000755f store 0x00000001 , 0x0000444a + 00029783 0x00007560 storet 0x00000001 , 0x0000444b + 00029784 0x00007561 force 0x00000000 , 0x00000038 + 00029785 0x00007562 arg 0x0000444a , 0x00000012 + 00029786 0x00007563 force 0x00000004 , 0x00000039 + 00029787 0x00007565 ifetch 0x00000004 , 0x00000011 + 00029788 0x00007566 ifetcht 0x00000004 , 0x00000012 + 00029789 0x00007567 ixor 0x00000002 , 0x0000002f + 00029790 0x00007568 increase 0x00000001 , 0x00000038 + 00029791 0x00007569 increase 0x00000004 , 0x00000011 + 00029792 0x0000756a increase 0x00000004 , 0x00000012 + 00029793 0x0000756b loop 0x0000745b + 00029794 0x0000756c call 0x00007492 + 00029795 0x0000756d increase 0xfffffffc , 0x00000038 + 00029796 0x0000756e fetch 0x00000004 , 0x000044c7 + 00029797 0x0000756f copy 0x0000003f , 0x0000002f + 00029798 0x00007570 increase 0x00000004 , 0x00000038 + 00029799 0x00007571 force 0x00000038 , 0x00000036 + 00029800 0x00007572 force 0x0000000c , 0x00000036 + 00029801 0x00007573 call 0x0000741d + 00029802 0x00007575 call 0x00007491 + 00029803 0x00007576 force 0x0000003a , 0x00000036 + 00029804 0x00007577 force 0x00000008 , 0x00000036 + 00029805 0x00007578 branch 0x0000741d + 00029806 0x0000757b compare 0x00000000 , 0x00000039 , 0x00000003 + 00029807 0x0000757c rtn 0x00000001 + 00029808 0x0000757d deposit 0x00000006 + 00029809 0x0000757e iadd 0x00000039 , 0x00000005 + 00029810 0x0000757f force 0x00000000 , 0x0000003f + 00029811 0x00007581 istore 0x00000001 , 0x00000005 + 00029812 0x00007582 increase 0x00000001 , 0x00000039 + 00029813 0x00007583 compare 0x00000000 , 0x00000039 , 0x00000003 + 00029814 0x00007584 rtn 0x00000001 + 00029815 0x00007585 branch 0x00007473 + 00029816 0x00007588 force 0x00000000 , 0x00000038 + 00029817 0x0000758a deposit 0x00000039 + 00029818 0x0000758b branch 0x0000747d , 0x00000034 + 00029819 0x0000758c ifetch 0x00000004 , 0x00000006 + 00029820 0x0000758d increase 0xfffffffc , 0x00000039 + 00029821 0x0000758f iforce 0x0000002f + 00029822 0x00007590 increase 0x00000001 , 0x00000038 + 00029823 0x00007591 compare 0x00000004 , 0x00000038 , 0x0000000f + 00029824 0x00007592 rtn 0x00000001 + 00029825 0x00007593 branch 0x00007479 + 00029826 0x00007596 force 0x00000008 , 0x00000038 + 00029827 0x00007597 branch 0x00007487 + 00029828 0x00007599 force 0x00000004 , 0x00000038 + 00029829 0x0000759a branch 0x00007487 + 00029830 0x0000759c force 0x00000000 , 0x00000038 + 00029831 0x0000759e force 0x00000004 , 0x00000039 + 00029832 0x000075a0 ifetch 0x00000004 , 0x00000006 + 00029833 0x000075a1 iforce 0x0000002f + 00029834 0x000075a2 increase 0x00000001 , 0x00000038 + 00029835 0x000075a3 loop 0x00007488 + 00029836 0x000075a4 rtn + 00029837 0x000075a7 arg 0x0000047c , 0x00000006 + 00029838 0x000075a8 branch 0x00007484 + 00029839 0x000075ab force 0x00000004 , 0x00000039 + 00029840 0x000075ac branch 0x00007494 + 00029841 0x000075af force 0x00000000 , 0x00000038 + 00029842 0x000075b1 force 0x00000004 , 0x00000039 + 00029843 0x000075b3 force 0x00000000 , 0x0000002f + 00029844 0x000075b5 increase 0x00000001 , 0x00000038 + 00029845 0x000075b6 loop 0x00007493 + 00029846 0x000075b7 rtn + 00029847 0x000075ba force 0x0000000c , 0x00000038 + 00029848 0x000075bb force 0x00000004 , 0x00000039 + 00029849 0x000075bd deposit 0x0000002f + 00029850 0x000075be istore 0x00000004 , 0x00000005 + 00029851 0x000075bf increase 0x00000001 , 0x00000038 + 00029852 0x000075c0 loop 0x00007499 + 00029853 0x000075c1 rtn + 00029854 0x000075c4 force 0x0000000c , 0x00000038 + 00029855 0x000075c5 copy 0x00000013 , 0x00000005 + 00029856 0x000075c6 add 0x00000012 , 0x00000001 , 0x00000039 + 00029857 0x000075c7 sub 0x00000039 , 0x0000000f , 0x0000003e + 00029858 0x000075c8 branch 0x000074a4 , 0x00000002 + 00029859 0x000075c9 force 0x00000010 , 0x00000039 + 00029860 0x000075cb deposit 0x0000002f + 00029861 0x000075cc sub 0x00000039 , 0x00000003 , 0x0000003e + 00029862 0x000075cd branch 0x000074ac , 0x00000002 + 00029863 0x000075ce istore 0x00000004 , 0x00000005 + 00029864 0x000075cf increase 0xfffffffc , 0x00000039 + 00029865 0x000075d0 rtn 0x00000005 + 00029866 0x000075d1 increase 0x00000001 , 0x00000038 + 00029867 0x000075d2 branch 0x000074a4 + 00029868 0x000075d4 istore 0x00000001 , 0x00000005 + 00029869 0x000075d5 rshift8 0x0000003f , 0x0000003f + 00029870 0x000075d6 loop 0x000074ac + 00029871 0x000075d7 rtn + 00029872 0x000075db force 0x0000000c , 0x00000038 + 00029873 0x000075dc force 0x00000004 , 0x00000039 + 00029874 0x000075de ifetch 0x00000004 , 0x00000006 + 00029875 0x000075df isub 0x0000002f , 0x0000003e + 00029876 0x000075e0 nrtn 0x00000005 + 00029877 0x000075e1 increase 0x00000001 , 0x00000038 + 00029878 0x000075e2 loop 0x000074b2 + 00029879 0x000075e3 force 0x00000000 , 0x0000003e + 00029880 0x000075e4 rtn + 00029881 0x000075e7 hfetch 0x00000001 , 0x00008050 + 00029882 0x000075e8 set0 0x00000000 , 0x0000003f + 00029883 0x000075e9 hstore 0x00000001 , 0x00008050 + 00029884 0x000075ea rtn + 00029885 0x000075ed hfetch 0x00000001 , 0x00008050 + 00029886 0x000075ee set1 0x00000000 , 0x0000003f + 00029887 0x000075ef hstore 0x00000001 , 0x00008050 + 00029888 0x000075f0 rtn + 00029889 0x000075f3 arg 0x00000886 , 0x00000005 + 00029890 0x000075f4 setsect 0x00000000 , 0x0003ffff + 00029891 0x000075f5 setsect 0x00000001 , 0x0003ffff + 00029892 0x000075f6 setsect 0x00000002 , 0x0003ffff + 00029893 0x000075f7 setsect 0x00000003 , 0x0003fbff + 00029894 0x000075f8 istore 0x00000009 , 0x00000005 + 00029895 0x000075f9 setsect 0x00000000 , 0x0003ffff + 00029896 0x000075fa setsect 0x00000001 , 0x0003ffff + 00029897 0x000075fb setsect 0x00000002 , 0x0003ffff + 00029898 0x000075fc setsect 0x00000003 , 0x0003ffff + 00029899 0x000075fd istore 0x00000009 , 0x00000005 + 00029900 0x000075fe setsect 0x00000000 , 0x0003ffff + 00029901 0x000075ff setsect 0x00000001 , 0x0003ffff + 00029902 0x00007600 setsect 0x00000002 , 0x0003cfff + 00029903 0x00007601 setsect 0x00000003 , 0x0003ffff + 00029904 0x00007602 istore 0x00000009 , 0x00000005 + 00029905 0x00007603 setsect 0x00000000 , 0x0003ffff + 00029906 0x00007604 setsect 0x00000001 , 0x0003ffff + 00029907 0x00007605 setsect 0x00000002 , 0x0003ffef + 00029908 0x00007606 setsect 0x00000003 , 0x0003ffff + 00029909 0x00007607 istore 0x00000009 , 0x00000005 + 00029910 0x00007608 setsect 0x00000000 , 0x0003ffff + 00029911 0x00007609 setsect 0x00000001 , 0x0003ffff + 00029912 0x0000760a setsect 0x00000002 , 0x0003ffff + 00029913 0x0000760b setsect 0x00000003 , 0x0003ffff + 00029914 0x0000760c istore 0x00000009 , 0x00000005 + 00029915 0x0000760d setsect 0x00000000 , 0x0003ffff + 00029916 0x0000760e setsect 0x00000001 , 0x00026c7f + 00029917 0x0000760f setsect 0x00000002 , 0x0000146b + 00029918 0x00007610 setsect 0x00000003 , 0x00037bb3 + 00029919 0x00007611 istore 0x00000009 , 0x00000005 + 00029920 0x00007612 setsect 0x00000000 , 0x0001feb8 + 00029921 0x00007613 setsect 0x00000001 , 0x00010c12 + 00029922 0x00007614 setsect 0x00000002 , 0x0002b722 + 00029923 0x00007615 setsect 0x00000003 , 0x00029fa6 + 00029924 0x00007616 istore 0x00000009 , 0x00000005 + 00029925 0x00007617 setsect 0x00000000 , 0x0000e70f + 00029926 0x00007618 setsect 0x00000001 , 0x00016720 + 00029927 0x00007619 setsect 0x00000002 , 0x0000519e + 00029928 0x0000761a setsect 0x00000003 , 0x00019084 + 00029929 0x0000761b istore 0x00000009 , 0x00000005 + 00029930 0x0000761c setsect 0x00000000 , 0x00031012 + 00029931 0x0000761d setsect 0x00000001 , 0x000360bf + 00029932 0x0000761e setsect 0x00000002 , 0x0003f0af + 00029933 0x0000761f setsect 0x00000003 , 0x000003d3 + 00029934 0x00007620 istore 0x00000009 , 0x00000005 + 00029935 0x00007621 setsect 0x00000000 , 0x0003a188 + 00029936 0x00007622 setsect 0x00000001 , 0x00003ad0 + 00029937 0x00007623 setsect 0x00000002 , 0x0003cbf2 + 00029938 0x00007624 setsect 0x00000003 , 0x000243d9 + 00029939 0x00007625 istore 0x00000009 , 0x00000005 + 00029940 0x00007626 setsect 0x00000000 , 0x0002b030 + 00029941 0x00007627 setsect 0x00000001 , 0x00036a03 + 00029942 0x00007628 setsect 0x00000002 , 0x00011188 + 00029943 0x00007629 setsect 0x00000003 , 0x0001e520 + 00029944 0x0000762a istore 0x00000009 , 0x00000005 + 00029945 0x0000762b setsect 0x00000000 , 0x0003a11e + 00029946 0x0000762c setsect 0x00000001 , 0x0000fe5d + 00029947 0x0000762d setsect 0x00000002 , 0x0000dd57 + 00029948 0x0000762e setsect 0x00000003 , 0x0001ac93 + 00029949 0x0000762f istore 0x00000009 , 0x00000005 + 00029950 0x00007630 setsect 0x00000000 , 0x000011ed + 00029951 0x00007631 setsect 0x00000001 , 0x000218c4 + 00029952 0x00007632 setsect 0x00000002 , 0x00008da7 + 00029953 0x00007633 setsect 0x00000003 , 0x000257ff + 00029954 0x00007634 istore 0x00000009 , 0x00000005 + 00029955 0x00007635 setsect 0x00000000 , 0x0003192b + 00029956 0x00007636 setsect 0x00000001 , 0x00034641 + 00029957 0x00007637 setsect 0x00000002 , 0x0001be0c + 00029958 0x00007638 setsect 0x00000003 , 0x000366ad + 00029959 0x00007639 istore 0x00000009 , 0x00000005 + 00029960 0x0000763a setsect 0x00000000 , 0x00001f83 + 00029961 0x0000763b setsect 0x00000001 , 0x00015a23 + 00029962 0x0000763c setsect 0x00000002 , 0x0003f9b0 + 00029963 0x0000763d setsect 0x00000003 , 0x00003949 + 00029964 0x0000763e istore 0x00000009 , 0x00000005 + 00029965 0x0000763f setsect 0x00000000 , 0x00013a51 + 00029966 0x00007640 setsect 0x00000001 , 0x000153fd + 00029967 0x00007641 setsect 0x00000002 , 0x0003372a + 00029968 0x00007642 setsect 0x00000003 , 0x0000f1bb + 00029969 0x00007643 istore 0x00000009 , 0x00000005 + 00029970 0x00007644 setsect 0x00000000 , 0x0003ae85 + 00029971 0x00007645 setsect 0x00000001 , 0x0001eed9 + 00029972 0x00007646 setsect 0x00000002 , 0x00009e66 + 00029973 0x00007647 setsect 0x00000003 , 0x000001a8 + 00029974 0x00007648 istore 0x00000008 , 0x00000005 + 00029975 0x00007649 rtn + 00029976 0x0000764e arg 0x0000091e , 0x00000005 + 00029977 0x0000764f setsect 0x00000000 , 0x0003ffff + 00029978 0x00007650 setsect 0x00000001 , 0x0003ffff + 00029979 0x00007651 setsect 0x00000002 , 0x0003ffff + 00029980 0x00007652 setsect 0x00000003 , 0x0003ffff + 00029981 0x00007653 istore 0x00000009 , 0x00000005 + 00029982 0x00007654 setsect 0x00000000 , 0x0003ffff + 00029983 0x00007655 setsect 0x00000001 , 0x0000003f + 00029984 0x00007656 setsect 0x00000002 , 0x00000000 + 00029985 0x00007657 setsect 0x00000003 , 0x00000000 + 00029986 0x00007658 istore 0x00000009 , 0x00000005 + 00029987 0x00007659 setsect 0x00000000 , 0x00000000 + 00029988 0x0000765a setsect 0x00000001 , 0x00000000 + 00029989 0x0000765b setsect 0x00000002 , 0x00001000 + 00029990 0x0000765c setsect 0x00000003 , 0x00000000 + 00029991 0x0000765d istore 0x00000009 , 0x00000005 + 00029992 0x0000765e setsect 0x00000000 , 0x0003ff00 + 00029993 0x0000765f setsect 0x00000001 , 0x0003ffff + 00029994 0x00007660 setsect 0x00000002 , 0x0003ffcf + 00029995 0x00007661 setsect 0x00000003 , 0x0003ffff + 00029996 0x00007662 istore 0x00000009 , 0x00000005 + 00029997 0x00007663 setsect 0x00000000 , 0x0003ffff + 00029998 0x00007664 setsect 0x00000001 , 0x0003ffff + 00029999 0x00007665 setsect 0x00000002 , 0x0003ffff + 00030000 0x00007666 setsect 0x00000003 , 0x000003ff + 00030001 0x00007667 istore 0x00000009 , 0x00000005 + 00030002 0x00007668 setsect 0x00000000 , 0x00000000 + 00030003 0x00007669 setsect 0x00000001 , 0x00000000 + 00030004 0x0000766a setsect 0x00000002 , 0x00000000 + 00030005 0x0000766b setsect 0x00000003 , 0x00000000 + 00030006 0x0000766c istore 0x00000009 , 0x00000005 + 00030007 0x0000766d setsect 0x00000000 , 0x00010000 + 00030008 0x0000766e setsect 0x00000001 , 0x00000000 + 00030009 0x0000766f setsect 0x00000002 , 0x0003f000 + 00030010 0x00007670 setsect 0x00000003 , 0x0003ffff + 00030011 0x00007671 istore 0x00000009 , 0x00000005 + 00030012 0x00007672 setsect 0x00000000 , 0x000296ff + 00030013 0x00007673 setsect 0x00000001 , 0x00022630 + 00030014 0x00007674 setsect 0x00000002 , 0x0003945d + 00030015 0x00007675 setsect 0x00000003 , 0x0003d284 + 00030016 0x00007676 istore 0x00000009 , 0x00000005 + 00030017 0x00007677 setsect 0x00000000 , 0x000333a0 + 00030018 0x00007678 setsect 0x00000001 , 0x00004b7a + 00030019 0x00007679 setsect 0x00000002 , 0x000037d8 + 00030020 0x0000767a setsect 0x00000003 , 0x0003c9dc + 00030021 0x0000767b istore 0x00000009 , 0x00000005 + 00030022 0x0000767c setsect 0x00000000 , 0x0003a440 + 00030023 0x0000767d setsect 0x00000001 , 0x0001b958 + 00030024 0x0000767e setsect 0x00000002 , 0x00038bce + 00030025 0x0000767f setsect 0x00000003 , 0x0001091f + 00030026 0x00007680 istore 0x00000009 , 0x00000005 + 00030027 0x00007681 setsect 0x00000000 , 0x0002e12c + 00030028 0x00007682 setsect 0x00000001 , 0x0001f47c + 00030029 0x00007683 setsect 0x00000002 , 0x000356b1 + 00030030 0x00007684 setsect 0x00000003 , 0x0002fd47 + 00030031 0x00007685 istore 0x00000009 , 0x00000005 + 00030032 0x00007686 setsect 0x00000000 , 0x00006837 + 00030033 0x00007687 setsect 0x00000001 , 0x0002ed90 + 00030034 0x00007688 setsect 0x00000002 , 0x0001ecec + 00030035 0x00007689 setsect 0x00000003 , 0x0001acc5 + 00030036 0x0000768a istore 0x00000009 , 0x00000005 + 00030037 0x0000768b setsect 0x00000000 , 0x00023357 + 00030038 0x0000768c setsect 0x00000001 , 0x00018af3 + 00030039 0x0000768d setsect 0x00000002 , 0x0000f9e1 + 00030040 0x0000768e setsect 0x00000003 , 0x000129f0 + 00030041 0x0000768f istore 0x00000009 , 0x00000005 + 00030042 0x00007690 setsect 0x00000000 , 0x0002e7eb + 00030043 0x00007691 setsect 0x00000001 , 0x0003e6e3 + 00030044 0x00007692 setsect 0x00000002 , 0x0003e1a7 + 00030045 0x00007693 setsect 0x00000003 , 0x00010b8b + 00030046 0x00007694 istore 0x00000009 , 0x00000005 + 00030047 0x00007695 setsect 0x00000000 , 0x00024fe3 + 00030048 0x00007696 setsect 0x00000001 , 0x000020ef + 00030049 0x00007697 setsect 0x00000002 , 0x0001b5a6 + 00030050 0x00007698 setsect 0x00000003 , 0x0000dc2f + 00030051 0x00007699 istore 0x00000009 , 0x00000005 + 00030052 0x0000769a setsect 0x00000000 , 0x00013860 + 00030053 0x0000769b setsect 0x00000001 , 0x0002bd69 + 00030054 0x0000769c setsect 0x00000002 , 0x0000391a + 00030055 0x0000769d setsect 0x00000003 , 0x0001b222 + 00030056 0x0000769e istore 0x00000009 , 0x00000005 + 00030057 0x0000769f rtn + 00030058 0x000076a3 fetch 0x00000001 , 0x0000465a + 00030059 0x000076a4 nbranch 0x0000757d , 0x00000034 + 00030060 0x000076a5 branch 0x00007a77 + 00030061 0x000076a8 bpatchx 0x000000e4 , 0x0000403c + 00030062 0x000076a9 fetch 0x00000001 , 0x0000465a + 00030063 0x000076aa rtn 0x00000034 + 00030064 0x000076ab fetch 0x00000001 , 0x000045b1 + 00030065 0x000076ac rtnne 0x00000001 + 00030066 0x000076ad fetch 0x00000001 , 0x000044be + 00030067 0x000076ae rtn 0x00000034 + 00030068 0x000076af fetch 0x00000001 , 0x000044c3 + 00030069 0x000076b0 rtneq 0x00000003 + 00030070 0x000076b1 fetch 0x00000002 , 0x00004682 + 00030071 0x000076b2 bbit1 0x00000000 , 0x0000757b + 00030072 0x000076b3 fetch 0x00000001 , 0x000044c0 + 00030073 0x000076b4 beq 0x00000000 , 0x00007a77 + 00030074 0x000076b5 rtn + 00030075 0x000076b7 jam 0x00000000 , 0x000044c0 + 00030076 0x000076b8 rtn + 00030077 0x000076bc bpatchx 0x000000e5 , 0x0000403c + 00030078 0x000076bd fetch 0x00000001 , 0x0000465a + 00030079 0x000076be branch 0x0000612b , 0x00000034 + 00030080 0x000076bf call 0x00006124 + 00030081 0x000076c0 call 0x00007583 + 00030082 0x000076c1 branch 0x0000766d + 00030083 0x000076c4 setarg 0x00000000 + 00030084 0x000076c5 store 0x00000008 , 0x000009ae + 00030085 0x000076c6 store 0x00000004 , 0x000009b6 + 00030086 0x000076c7 store 0x00000007 , 0x0000465e + 00030087 0x000076c8 rtn + 00030088 0x000076cb jam 0x00000001 , 0x000009b0 + 00030089 0x000076cc branch 0x0000758d + 00030090 0x000076ce fetch 0x00000001 , 0x000045b1 + 00030091 0x000076cf beq 0x00000001 , 0x0000768a + 00030092 0x000076d0 branch 0x00002a8c + 00030093 0x000076d2 fetch 0x00000001 , 0x000045b1 + 00030094 0x000076d3 beq 0x00000001 , 0x00007590 + 00030095 0x000076d4 branch 0x0000766d + 00030096 0x000076d7 call 0x0000768a + 00030097 0x000076d8 fetch 0x00000001 , 0x000009af + 00030098 0x000076d9 nrtn 0x00000034 + 00030099 0x000076da jam 0x00000003 , 0x000009ae + 00030100 0x000076db rtn + 00030101 0x000076df call 0x000075b0 + 00030102 0x000076e0 arg 0x000009de , 0x00000011 + 00030103 0x000076e1 arg 0x00000866 , 0x00000005 + 00030104 0x000076e2 call 0x00007c79 + 00030105 0x000076e3 arg 0x000009be , 0x00000011 + 00030106 0x000076e4 arg 0x00000826 , 0x00000005 + 00030107 0x000076e5 call 0x00007c79 + 00030108 0x000076e6 arg 0x00000826 , 0x00000011 + 00030109 0x000076e7 arg 0x000009be , 0x00000012 + 00030110 0x000076e8 arg 0x00000826 , 0x00000005 + 00030111 0x000076e9 call 0x00007be1 + 00030112 0x000076ea arg 0x0000093e , 0x00000011 + 00030113 0x000076eb arg 0x000009be , 0x00000012 + 00030114 0x000076ec arg 0x00000846 , 0x00000005 + 00030115 0x000076ed call 0x00007be1 + 00030116 0x000076ee arg 0x00000846 , 0x00000011 + 00030117 0x000076ef arg 0x00000826 , 0x00000012 + 00030118 0x000076f0 arg 0x00000826 , 0x00000005 + 00030119 0x000076f1 call 0x00007c7d + 00030120 0x000076f2 arg 0x00000806 , 0x00000011 + 00030121 0x000076f3 arg 0x00000826 , 0x00000012 + 00030122 0x000076f4 arg 0x00000806 , 0x00000005 + 00030123 0x000076f5 call 0x00007c7d + 00030124 0x000076f6 arg 0x00000020 , 0x00000039 + 00030125 0x000076f7 arg 0x00000866 , 0x00000011 + 00030126 0x000076f8 arg 0x00000806 , 0x00000012 + 00030127 0x000076f9 branch 0x00007f88 + 00030128 0x000076fc arg 0x0000097e , 0x00000011 + 00030129 0x000076fd arg 0x00000806 , 0x00000005 + 00030130 0x000076fe call 0x00007c79 + 00030131 0x000076ff arg 0x0000095e , 0x00000011 + 00030132 0x00007700 arg 0x00000826 , 0x00000005 + 00030133 0x00007701 call 0x00007c79 + 00030134 0x00007702 arg 0x00000826 , 0x00000011 + 00030135 0x00007703 arg 0x0000095e , 0x00000012 + 00030136 0x00007704 arg 0x00000826 , 0x00000005 + 00030137 0x00007705 call 0x00007be1 + 00030138 0x00007706 arg 0x0000093e , 0x00000011 + 00030139 0x00007707 arg 0x0000095e , 0x00000012 + 00030140 0x00007708 arg 0x00000846 , 0x00000005 + 00030141 0x00007709 call 0x00007be1 + 00030142 0x0000770a arg 0x00000846 , 0x00000011 + 00030143 0x0000770b arg 0x00000826 , 0x00000012 + 00030144 0x0000770c arg 0x00000826 , 0x00000005 + 00030145 0x0000770d call 0x00007c7d + 00030146 0x0000770e arg 0x00000806 , 0x00000011 + 00030147 0x0000770f arg 0x00000826 , 0x00000012 + 00030148 0x00007710 arg 0x00000806 , 0x00000005 + 00030149 0x00007711 branch 0x00007c96 + 00030150 0x00007714 call 0x000075e1 + 00030151 0x00007715 arg 0x000009e6 , 0x00000011 + 00030152 0x00007716 arg 0x00000866 , 0x00000005 + 00030153 0x00007717 call 0x000077a8 + 00030154 0x00007718 arg 0x000009c6 , 0x00000011 + 00030155 0x00007719 arg 0x00000826 , 0x00000005 + 00030156 0x0000771a call 0x000077a8 + 00030157 0x0000771b arg 0x00000826 , 0x00000011 + 00030158 0x0000771c arg 0x000009c6 , 0x00000012 + 00030159 0x0000771d arg 0x00000826 , 0x00000005 + 00030160 0x0000771e call 0x00007786 + 00030161 0x0000771f arg 0x0000089e , 0x00000011 + 00030162 0x00007720 arg 0x000009c6 , 0x00000012 + 00030163 0x00007721 arg 0x00000846 , 0x00000005 + 00030164 0x00007722 call 0x00007786 + 00030165 0x00007723 arg 0x00000846 , 0x00000011 + 00030166 0x00007724 arg 0x00000826 , 0x00000012 + 00030167 0x00007725 arg 0x00000826 , 0x00000005 + 00030168 0x00007726 call 0x00007755 + 00030169 0x00007727 arg 0x00000806 , 0x00000011 + 00030170 0x00007728 arg 0x00000826 , 0x00000012 + 00030171 0x00007729 arg 0x00000806 , 0x00000005 + 00030172 0x0000772a call 0x00007755 + 00030173 0x0000772b arg 0x00000018 , 0x00000039 + 00030174 0x0000772c arg 0x00000866 , 0x00000011 + 00030175 0x0000772d arg 0x00000806 , 0x00000012 + 00030176 0x0000772e branch 0x00007f88 + 00030177 0x00007731 arg 0x000008e6 , 0x00000011 + 00030178 0x00007732 arg 0x00000806 , 0x00000005 + 00030179 0x00007733 call 0x000077a8 + 00030180 0x00007734 arg 0x000008ce , 0x00000011 + 00030181 0x00007735 arg 0x00000826 , 0x00000005 + 00030182 0x00007736 call 0x000077a8 + 00030183 0x00007737 arg 0x00000826 , 0x00000011 + 00030184 0x00007738 arg 0x000008ce , 0x00000012 + 00030185 0x00007739 arg 0x00000826 , 0x00000005 + 00030186 0x0000773a call 0x00007786 + 00030187 0x0000773b arg 0x0000089e , 0x00000011 + 00030188 0x0000773c arg 0x000008ce , 0x00000012 + 00030189 0x0000773d arg 0x00000846 , 0x00000005 + 00030190 0x0000773e call 0x00007786 + 00030191 0x0000773f arg 0x00000846 , 0x00000011 + 00030192 0x00007740 arg 0x00000826 , 0x00000012 + 00030193 0x00007741 arg 0x00000826 , 0x00000005 + 00030194 0x00007742 call 0x00007755 + 00030195 0x00007743 arg 0x00000806 , 0x00000011 + 00030196 0x00007744 arg 0x00000826 , 0x00000012 + 00030197 0x00007745 arg 0x00000806 , 0x00000005 + 00030198 0x00007746 branch 0x00007758 + 00030199 0x0000774a fetch 0x00000001 , 0x000009b2 + 00030200 0x0000774b bne 0x00000000 , 0x00007615 + 00030201 0x0000774c call 0x00007612 + 00030202 0x0000774d arg 0x00000a7e , 0x00000005 + 00030203 0x0000774e setarg 0x00000a2e + 00030204 0x0000774f istore 0x00000002 , 0x00000005 + 00030205 0x00007750 setarg 0x00004642 + 00030206 0x00007751 istore 0x00000002 , 0x00000005 + 00030207 0x00007752 setarg 0x000009de + 00030208 0x00007753 istore 0x00000002 , 0x00000005 + 00030209 0x00007754 branch 0x00007609 + 00030210 0x00007756 arg 0x00000a7e , 0x00000005 + 00030211 0x00007757 setarg 0x00000a3e + 00030212 0x00007758 istore 0x00000002 , 0x00000005 + 00030213 0x00007759 setarg 0x000009de + 00030214 0x0000775a istore 0x00000002 , 0x00000005 + 00030215 0x0000775b setarg 0x00004642 + 00030216 0x0000775c istore 0x00000002 , 0x00000005 + 00030217 0x0000775e call 0x000079a0 + 00030218 0x0000775f fetch 0x00000001 , 0x000009af + 00030219 0x00007760 beq 0x00000004 , 0x0000760f + 00030220 0x00007761 jam 0x00000001 , 0x000009b0 + 00030221 0x00007762 jam 0x00000005 , 0x000009ae + 00030222 0x00007763 rtn + 00030223 0x00007765 jam 0x00000014 , 0x000009af + 00030224 0x00007766 call 0x0000758a + 00030225 0x00007767 branch 0x000076d8 + 00030226 0x0000776a arg 0x00000a1e , 0x00000005 + 00030227 0x0000776b force 0x00000008 , 0x00000007 + 00030228 0x0000776c branch 0x000076a2 + 00030229 0x0000776f jam 0x00000001 , 0x000009b0 + 00030230 0x00007770 rtn + 00030231 0x00007774 bpatchx 0x000000e6 , 0x0000403c + 00030232 0x00007775 arg 0x00000727 , 0x00000005 + 00030233 0x00007776 fetch 0x00000006 , 0x000040a0 + 00030234 0x00007777 istore 0x00000006 , 0x00000005 + 00030235 0x00007778 fetch 0x00000006 , 0x00000040 + 00030236 0x00007779 istore 0x00000006 , 0x00000005 + 00030237 0x0000777a fetch 0x00000003 , 0x0000465e + 00030238 0x0000777b istore 0x00000003 , 0x00000005 + 00030239 0x0000777d call 0x00007a0d + 00030240 0x0000777f arg 0x00000a4e , 0x00000011 + 00030241 0x00007780 arg 0x00000a5e , 0x00000012 + 00030242 0x00007781 force 0x00000004 , 0x00000007 + 00030243 0x00007782 call 0x000076a7 + 00030244 0x00007783 nbranch 0x00007631 , 0x00000001 + 00030245 0x00007785 call 0x00007628 + 00030246 0x00007786 jam 0x00000041 , 0x0000007d + 00030247 0x00007787 branch 0x000062f8 + 00030248 0x0000778a fetch 0x00000001 , 0x000009af + 00030249 0x0000778b beq 0x00000009 , 0x0000762e + 00030250 0x0000778c jam 0x0000000a , 0x000009ae + 00030251 0x0000778d jam 0x00000001 , 0x000009b0 + 00030252 0x0000778e jam 0x00000003 , 0x0000007c + 00030253 0x0000778f rtn + 00030254 0x00007791 jam 0x00000003 , 0x0000007c + 00030255 0x00007792 jam 0x00000015 , 0x000009af + 00030256 0x00007793 branch 0x000076d8 + 00030257 0x00007797 fetch 0x00000001 , 0x000009af + 00030258 0x00007798 beq 0x00000009 , 0x00007637 + 00030259 0x00007799 jam 0x00000000 , 0x000009ae + 00030260 0x0000779a jam 0x00000004 , 0x0000007c + 00030261 0x0000779c jam 0x00000005 , 0x0000007e + 00030262 0x0000779d rtn + 00030263 0x0000779f jam 0x00000004 , 0x0000007c + 00030264 0x000077a0 jam 0x00000000 , 0x000009af + 00030265 0x000077a1 rtn + 00030266 0x000077a4 fetch 0x00000001 , 0x000009b3 + 00030267 0x000077a5 beq 0x00000001 , 0x0000763e + 00030268 0x000077a6 jam 0x0000000a , 0x000009af + 00030269 0x000077a7 branch 0x000076d8 + 00030270 0x000077a9 arg 0x00000727 , 0x00000005 + 00030271 0x000077aa fetch 0x00000006 , 0x00000040 + 00030272 0x000077ab istore 0x00000006 , 0x00000005 + 00030273 0x000077ac fetch 0x00000006 , 0x000040a0 + 00030274 0x000077ad istore 0x00000006 , 0x00000005 + 00030275 0x000077ae fetch 0x00000003 , 0x0000465b + 00030276 0x000077af istore 0x00000003 , 0x00000005 + 00030277 0x000077b1 call 0x00007a24 + 00030278 0x000077b2 fetch 0x00000001 , 0x000009af + 00030279 0x000077b3 beq 0x0000000a , 0x0000764b + 00030280 0x000077b4 jam 0x0000000b , 0x000009ae + 00030281 0x000077b5 jam 0x00000001 , 0x000009b0 + 00030282 0x000077b6 rtn + 00030283 0x000077b8 jam 0x0000000b , 0x000009af + 00030284 0x000077b9 jam 0x00000001 , 0x000009b1 + 00030285 0x000077ba rtn + 00030286 0x000077bd arg 0x00000a7e , 0x00000005 + 00030287 0x000077be fetch 0x00000006 , 0x00000040 + 00030288 0x000077bf istore 0x00000006 , 0x00000005 + 00030289 0x000077c0 fetch 0x00000006 , 0x000040a0 + 00030290 0x000077c1 istore 0x00000006 , 0x00000005 + 00030291 0x000077c2 setarg 0x00000a2e + 00030292 0x000077c3 istore 0x00000002 , 0x00000005 + 00030293 0x000077c4 setarg 0x00000a3e + 00030294 0x000077c5 istore 0x00000002 , 0x00000005 + 00030295 0x000077c6 branch 0x00007662 + 00030296 0x000077c8 jam 0x0000000f , 0x000009ae + 00030297 0x000077c9 arg 0x00000a7e , 0x00000005 + 00030298 0x000077ca fetch 0x00000006 , 0x000040a0 + 00030299 0x000077cb istore 0x00000006 , 0x00000005 + 00030300 0x000077cc fetch 0x00000006 , 0x00000040 + 00030301 0x000077cd istore 0x00000006 , 0x00000005 + 00030302 0x000077ce setarg 0x00000a3e + 00030303 0x000077cf istore 0x00000002 , 0x00000005 + 00030304 0x000077d0 setarg 0x00000a2e + 00030305 0x000077d1 istore 0x00000002 , 0x00000005 + 00030306 0x000077d4 arg 0x00000727 , 0x00000005 + 00030307 0x000077d5 fetch 0x00000006 , 0x00000a7e + 00030308 0x000077d6 istore 0x00000006 , 0x00000005 + 00030309 0x000077d7 fetch 0x00000006 , 0x00000a84 + 00030310 0x000077d8 istore 0x00000006 , 0x00000005 + 00030311 0x000077da call 0x000079d7 + 00030312 0x000077dd jam 0x00000001 , 0x000041bd + 00030313 0x000077de arg 0x000041be , 0x00000005 + 00030314 0x000077df arg 0x00000a4e , 0x00000006 + 00030315 0x000077e0 call 0x00007ebf + 00030316 0x000077e1 branch 0x000021c4 + 00030317 0x000077e5 bpatchx 0x000000e7 , 0x0000403c + 00030318 0x000077e6 fetch 0x00000001 , 0x000045b1 + 00030319 0x000077e7 rtnne 0x00000000 + 00030320 0x000077e8 fetch 0x00000001 , 0x000009b2 + 00030321 0x000077e9 rtnne 0x00000000 + 00030322 0x000077ea arg 0x00004612 , 0x00000005 + 00030323 0x000077eb force 0x0000000b , 0x00000007 + 00030324 0x000077ec call 0x000076a2 + 00030325 0x000077ed random 0x0000003f + 00030326 0x000077ee rshift 0x0000003f , 0x0000003f + 00030327 0x000077ef istore 0x00000002 , 0x00000005 + 00030328 0x000077f1 arg 0x000006be , 0x00000005 + 00030329 0x000077f2 arg 0x00004612 , 0x00000006 + 00030330 0x000077f3 call 0x00007ebe + 00030331 0x000077f5 arg 0x000005e6 , 0x00000005 + 00030332 0x000077f6 arg 0x000008ce , 0x00000006 + 00030333 0x000077f7 call 0x00007ebc + 00030334 0x000077f9 arg 0x00000616 , 0x00000005 + 00030335 0x000077fa call 0x00007ec5 + 00030336 0x000077fb jam 0x00000001 , 0x00000616 + 00030337 0x000077fd call 0x00007a5d + 00030338 0x000077fe jam 0x00000001 , 0x000009b2 + 00030339 0x000077ff rtn + 00030340 0x00007802 arg 0x0000462a , 0x00000005 + 00030341 0x00007803 arg 0x0000062e , 0x00000006 + 00030342 0x00007804 call 0x00007ebc + 00030343 0x00007805 jam 0x00000001 , 0x000045b1 + 00030344 0x00007806 jam 0x00000000 , 0x000009b2 + 00030345 0x00007807 rtn + 00030346 0x0000780a bpatchx 0x000000e8 , 0x0000403d + 00030347 0x0000780b fetch 0x00000001 , 0x000009b9 + 00030348 0x0000780c rtnne 0x00000000 + 00030349 0x0000780d fetch 0x00000001 , 0x000009b2 + 00030350 0x0000780e rtnne 0x00000000 + 00030351 0x00007810 arg 0x000006be , 0x00000005 + 00030352 0x00007811 arg 0x00004612 , 0x00000006 + 00030353 0x00007812 call 0x00007ebe + 00030354 0x00007814 arg 0x000005e6 , 0x00000005 + 00030355 0x00007815 arg 0x000009c6 , 0x00000006 + 00030356 0x00007816 call 0x00007ebc + 00030357 0x00007818 arg 0x00000616 , 0x00000005 + 00030358 0x00007819 call 0x00007ec5 + 00030359 0x0000781a jam 0x00000001 , 0x00000616 + 00030360 0x0000781c call 0x00007a5d + 00030361 0x0000781d jam 0x00000002 , 0x000009b2 + 00030362 0x0000781e rtn + 00030363 0x00007821 jam 0x00000001 , 0x000009b3 + 00030364 0x00007822 arg 0x00000a06 , 0x00000005 + 00030365 0x00007823 arg 0x0000062e , 0x00000006 + 00030366 0x00007824 call 0x00007ebe + 00030367 0x00007825 jam 0x00000001 , 0x000009b9 + 00030368 0x00007826 jam 0x00000000 , 0x000009b2 + 00030369 0x00007827 rtn + 00030370 0x0000782a increase 0xffffffff , 0x00000007 + 00030371 0x0000782b nrtn 0x00000002 + 00030372 0x0000782c random 0x0000003f + 00030373 0x0000782d istore 0x00000002 , 0x00000005 + 00030374 0x0000782e branch 0x000076a2 + 00030375 0x00007830 increase 0xffffffff , 0x00000007 + 00030376 0x00007831 nbranch 0x000076b3 , 0x00000002 + 00030377 0x00007832 ifetch 0x00000004 , 0x00000011 + 00030378 0x00007833 copy 0x0000003f , 0x00000002 + 00030379 0x00007834 ifetch 0x00000004 , 0x00000012 + 00030380 0x00007835 iflip 0x00000002 , 0x0000003f + 00030381 0x00007836 nbranch 0x000076b1 , 0x00000005 + 00030382 0x00007837 increase 0x00000004 , 0x00000011 + 00030383 0x00007838 increase 0x00000004 , 0x00000012 + 00030384 0x00007839 branch 0x000076a7 + 00030385 0x0000783b disable 0x00000001 + 00030386 0x0000783c rtn + 00030387 0x0000783e enable 0x00000001 + 00030388 0x0000783f rtn + 00030389 0x00007847 bpatchx 0x000000e9 , 0x0000403d + 00030390 0x00007848 fetch 0x00000001 , 0x000009b0 + 00030391 0x00007849 rtn 0x00000034 + 00030392 0x0000784a call 0x000062bc + 00030393 0x0000784b nrtn 0x00000034 + 00030394 0x0000784c jam 0x00000000 , 0x000009b0 + 00030395 0x0000784d fetch 0x00000001 , 0x000009ae + 00030396 0x0000784e beq 0x00000003 , 0x000061fd + 00030397 0x0000784f beq 0x00000005 , 0x0000621a + 00030398 0x00007850 beq 0x00000007 , 0x00006225 + 00030399 0x00007851 beq 0x0000000b , 0x0000623a + 00030400 0x00007852 beq 0x00000002 , 0x00007588 + 00030401 0x00007853 beq 0x00000004 , 0x000075f7 + 00030402 0x00007854 beq 0x00000009 , 0x00007617 + 00030403 0x00007855 beq 0x0000000a , 0x0000763a + 00030404 0x00007856 beq 0x0000000c , 0x00007658 + 00030405 0x00007858 rtn + 00030406 0x0000785b bpatchx 0x000000ea , 0x0000403d + 00030407 0x0000785c fetch 0x00000001 , 0x000009b1 + 00030408 0x0000785d rtn 0x00000034 + 00030409 0x0000785e call 0x000062bc + 00030410 0x0000785f nrtn 0x00000034 + 00030411 0x00007860 jam 0x00000000 , 0x000009b1 + 00030412 0x00007861 fetch 0x00000001 , 0x000009af + 00030413 0x00007862 beq 0x00000012 , 0x000061e0 + 00030414 0x00007863 beq 0x00000013 , 0x000061e5 + 00030415 0x00007864 beq 0x00000003 , 0x000061e9 + 00030416 0x00007865 beq 0x00000004 , 0x00007602 + 00030417 0x00007866 beq 0x00000014 , 0x000061ed + 00030418 0x00007867 beq 0x00000007 , 0x000061fb + 00030419 0x00007868 beq 0x0000000a , 0x0000763a + 00030420 0x00007869 beq 0x0000000b , 0x00006239 + 00030421 0x0000786a beq 0x00000009 , 0x00007617 + 00030422 0x0000786b beq 0x00000015 , 0x00006233 + 00030423 0x0000786c rtn + 00030424 0x0000786f jam 0x00000001 , 0x000009b1 + 00030425 0x00007870 rtn + 00030426 0x00007873 jam 0x00000000 , 0x000009b1 + 00030427 0x00007874 rtn + 00030428 0x00007876 bpatchx 0x000000eb , 0x0000403d + 00030429 0x00007877 fetch 0x00000001 , 0x0000465a + 00030430 0x00007878 rtn 0x00000034 + 00030431 0x00007879 fetch 0x00000001 , 0x000009b2 + 00030432 0x0000787a rtn 0x00000034 + 00030433 0x0000787b increase 0x00000080 , 0x0000003f + 00030434 0x0000787c store 0x00000001 , 0x000009b2 + 00030435 0x0000787d rtnbit1 0x00000007 + 00030436 0x0000787e fetch 0x00000001 , 0x000005e3 + 00030437 0x0000787f branch 0x000076e7 , 0x00000034 + 00030438 0x00007880 branch 0x00007a68 + 00030439 0x00007883 call 0x000078d3 + 00030440 0x00007884 fetch 0x00000001 , 0x000009b2 + 00030441 0x00007885 beq 0x00000001 , 0x00007684 + 00030442 0x00007886 beq 0x00000002 , 0x0000769b + 00030443 0x00007887 rtn + 00030444 0x0000788b and 0x0000003f , 0x00000007 , 0x00000007 + 00030445 0x0000788c rshift3 0x0000003f , 0x0000003f + 00030446 0x0000788d iadd 0x00000006 , 0x00000006 + 00030447 0x0000788e ifetch 0x00000001 , 0x00000006 + 00030448 0x0000788f qisolate0 0x0000003f + 00030449 0x00007890 rtn + 00030450 0x00007894 call 0x00007ebe + 00030451 0x00007895 call 0x00007ebe + 00030452 0x00007896 branch 0x00007ebe + 00030453 0x0000789a ifetch 0x00000008 , 0x00000006 + 00030454 0x0000789b nrtn 0x00000034 + 00030455 0x0000789c ifetch 0x00000008 , 0x00000006 + 00030456 0x0000789d nrtn 0x00000034 + 00030457 0x0000789e ifetch 0x00000008 , 0x00000006 + 00030458 0x0000789f rtn + 00030459 0x000078a5 ifetch 0x00000004 , 0x00000011 + 00030460 0x000078a6 iforce 0x00000002 + 00030461 0x000078a7 ifetch 0x00000004 , 0x00000012 + 00030462 0x000078a8 isub 0x00000002 , 0x0000003e + 00030463 0x000078a9 nrtn 0x00000005 + 00030464 0x000078aa increase 0x00000004 , 0x00000011 + 00030465 0x000078ab increase 0x00000004 , 0x00000012 + 00030466 0x000078ac loop 0x000076fb + 00030467 0x000078ad rtn + 00030468 0x000078b1 force 0x00000006 , 0x00000039 + 00030469 0x000078b2 increase 0x00000014 , 0x00000011 + 00030470 0x000078b3 increase 0x00000014 , 0x00000012 + 00030471 0x000078b5 ifetch 0x00000004 , 0x00000012 + 00030472 0x000078b6 iforce 0x00000002 + 00030473 0x000078b7 ifetch 0x00000004 , 0x00000011 + 00030474 0x000078b8 isub 0x00000002 , 0x0000003f + 00030475 0x000078b9 nrtn 0x00000002 + 00030476 0x000078ba nrtn 0x00000034 + 00030477 0x000078bb increase 0xfffffffc , 0x00000011 + 00030478 0x000078bc increase 0xfffffffc , 0x00000012 + 00030479 0x000078bd loop 0x00007707 + 00030480 0x000078be rtn + 00030481 0x000078c1 force 0x00000006 , 0x00000039 + 00030482 0x000078c2 force 0x00000000 , 0x00000013 + 00030483 0x000078c4 ifetch 0x00000004 , 0x00000011 + 00030484 0x000078c5 iforce 0x00000002 + 00030485 0x000078c6 ifetch 0x00000004 , 0x00000012 + 00030486 0x000078c7 iadd 0x00000002 , 0x0000003f + 00030487 0x000078c8 iadd 0x00000013 , 0x0000003f + 00030488 0x000078c9 istore 0x00000004 , 0x00000005 + 00030489 0x000078ca isolate1 0x00000020 , 0x0000003f + 00030490 0x000078cb setflag 0x00000001 , 0x00000000 , 0x00000013 + 00030491 0x000078cc increase 0x00000004 , 0x00000011 + 00030492 0x000078cd increase 0x00000004 , 0x00000012 + 00030493 0x000078ce loop 0x00007713 + 00030494 0x000078cf rtn + 00030495 0x000078d2 force 0x00000006 , 0x00000039 + 00030496 0x000078d3 force 0x00000000 , 0x00000013 + 00030497 0x000078d5 ifetch 0x00000004 , 0x00000012 + 00030498 0x000078d6 iforce 0x00000002 + 00030499 0x000078d7 ifetch 0x00000004 , 0x00000011 + 00030500 0x000078d8 isub 0x00000002 , 0x0000003f + 00030501 0x000078d9 isub 0x00000013 , 0x0000003f + 00030502 0x000078da istore 0x00000004 , 0x00000005 + 00030503 0x000078db isolate1 0x00000020 , 0x0000003f + 00030504 0x000078dc setflag 0x00000001 , 0x00000000 , 0x00000013 + 00030505 0x000078dd increase 0x00000004 , 0x00000011 + 00030506 0x000078de increase 0x00000004 , 0x00000012 + 00030507 0x000078df loop 0x00007721 + 00030508 0x000078e0 rtn + 00030509 0x000078e3 force 0x00000006 , 0x00000039 + 00030510 0x000078e4 increase 0x00000014 , 0x00000011 + 00030511 0x000078e6 force 0x00000000 , 0x00000013 + 00030512 0x000078e8 ifetch 0x00000004 , 0x00000011 + 00030513 0x000078e9 isolate1 0x00000000 , 0x0000003f + 00030514 0x000078ea setflag 0x00000001 , 0x00000001 , 0x00000013 + 00030515 0x000078eb rshift 0x0000003f , 0x0000003f + 00030516 0x000078ec isolate1 0x00000000 , 0x00000013 + 00030517 0x000078ed setflag 0x00000001 , 0x0000001f , 0x0000003f + 00030518 0x000078ee istore 0x00000004 , 0x00000011 + 00030519 0x000078ef increase 0xfffffffc , 0x00000011 + 00030520 0x000078f0 rshift 0x00000013 , 0x00000013 + 00030521 0x000078f1 loop 0x00007730 + 00030522 0x000078f2 rtn + 00030523 0x000078f5 force 0x00000006 , 0x00000039 + 00030524 0x000078f6 force 0x00000000 , 0x00000013 + 00030525 0x000078f8 ifetch 0x00000004 , 0x00000011 + 00030526 0x000078f9 isolate1 0x0000001f , 0x0000003f + 00030527 0x000078fa setflag 0x00000001 , 0x00000001 , 0x00000013 + 00030528 0x000078fb lshift 0x0000003f , 0x0000003f + 00030529 0x000078fc isolate1 0x00000000 , 0x00000013 + 00030530 0x000078fd setflag 0x00000001 , 0x00000000 , 0x0000003f + 00030531 0x000078fe istore 0x00000004 , 0x00000011 + 00030532 0x000078ff increase 0x00000004 , 0x00000011 + 00030533 0x00007900 rshift 0x00000013 , 0x00000013 + 00030534 0x00007901 loop 0x0000773d + 00030535 0x00007902 rtn + 00030536 0x00007905 call 0x0000773b + 00030537 0x00007907 isolate1 0x00000000 , 0x00000013 + 00030538 0x00007908 branch 0x00007751 , 0x00000001 + 00030539 0x00007909 arg 0x00000886 , 0x00000012 + 00030540 0x0000790a copy 0x00000011 , 0x00000013 + 00030541 0x0000790b increase 0xffffffe8 , 0x00000011 + 00030542 0x0000790c call 0x00007704 + 00030543 0x0000790d nrtn 0x00000002 + 00030544 0x0000790e copy 0x00000013 , 0x00000011 + 00030545 0x00007910 increase 0xffffffe8 , 0x00000011 + 00030546 0x00007911 arg 0x00000886 , 0x00000012 + 00030547 0x00007912 copy 0x00000011 , 0x00000005 + 00030548 0x00007913 branch 0x0000771f + 00030549 0x00007917 call 0x00007711 + 00030550 0x00007918 copy 0x00000005 , 0x00000011 + 00030551 0x00007919 branch 0x00007749 + 00030552 0x0000791c call 0x0000771f + 00030553 0x0000791d isolate0 0x00000000 , 0x00000013 + 00030554 0x0000791e rtn 0x00000001 + 00030555 0x0000791f arg 0x00000886 , 0x00000012 + 00030556 0x00007920 add 0x00000005 , 0xffffffe8 , 0x00000011 + 00030557 0x00007921 copy 0x00000011 , 0x00000005 + 00030558 0x00007922 branch 0x00007711 + 00030559 0x00007926 copy 0x00000005 , 0x0000000b + 00030560 0x00007927 copy 0x00000011 , 0x00000030 + 00030561 0x00007928 arg 0x00000716 , 0x00000012 + 00030562 0x00007929 copy 0x00000012 , 0x00000005 + 00030563 0x0000792a add 0x00000011 , 0x00000018 , 0x00000006 + 00030564 0x0000792b ifetch 0x00000008 , 0x00000006 + 00030565 0x0000792c istore 0x00000008 , 0x00000005 + 00030566 0x0000792d istore 0x00000008 , 0x00000005 + 00030567 0x0000792e force 0x00000000 , 0x0000003f + 00030568 0x0000792f istore 0x00000008 , 0x00000005 + 00030569 0x00007930 copy 0x0000000b , 0x00000005 + 00030570 0x00007931 call 0x00007755 + 00030571 0x00007932 arg 0x00000716 , 0x00000012 + 00030572 0x00007933 copy 0x00000012 , 0x00000005 + 00030573 0x00007934 force 0x00000000 , 0x0000003f + 00030574 0x00007935 istore 0x00000008 , 0x00000005 + 00030575 0x00007936 add 0x00000030 , 0x00000020 , 0x00000006 + 00030576 0x00007937 ifetch 0x00000008 , 0x00000006 + 00030577 0x00007938 istore 0x00000008 , 0x00000005 + 00030578 0x00007939 istore 0x00000008 , 0x00000005 + 00030579 0x0000793a copy 0x0000000b , 0x00000011 + 00030580 0x0000793b copy 0x00000011 , 0x00000005 + 00030581 0x0000793c call 0x00007755 + 00030582 0x0000793d arg 0x00000716 , 0x00000012 + 00030583 0x0000793e copy 0x00000012 , 0x00000005 + 00030584 0x0000793f add 0x00000030 , 0x00000028 , 0x00000006 + 00030585 0x00007940 ifetch 0x00000008 , 0x00000006 + 00030586 0x00007941 istore 0x00000008 , 0x00000005 + 00030587 0x00007942 istore 0x00000008 , 0x00000005 + 00030588 0x00007943 istore 0x00000008 , 0x00000005 + 00030589 0x00007944 copy 0x0000000b , 0x00000011 + 00030590 0x00007945 copy 0x00000011 , 0x00000005 + 00030591 0x00007946 branch 0x00007755 + 00030592 0x0000794a force 0x00000006 , 0x00000039 + 00030593 0x0000794c ifetch 0x00000004 , 0x00000006 + 00030594 0x0000794d iforce 0x0000002f + 00030595 0x0000794e increase 0x00000001 , 0x00000038 + 00030596 0x0000794f loop 0x00007781 + 00030597 0x00007950 rtn + 00030598 0x00007955 copy 0x00000005 , 0x0000000b + 00030599 0x00007956 arg 0x000006e6 , 0x00000005 + 00030600 0x00007957 call 0x00007ec5 + 00030601 0x00007958 arg 0x000006e6 , 0x00000005 + 00030602 0x00007959 copy 0x00000011 , 0x00000006 + 00030603 0x0000795a force 0x00000000 , 0x00000038 + 00030604 0x0000795b call 0x00007780 + 00030605 0x0000795c copy 0x00000012 , 0x00000006 + 00030606 0x0000795d call 0x00007780 + 00030607 0x0000795e force 0x00000000 , 0x00000012 + 00030608 0x00007960 force 0x00000000 , 0x00000002 + 00030609 0x00007961 force 0x00000006 , 0x00000013 + 00030610 0x00007963 ifetch 0x00000004 , 0x00000005 + 00030611 0x00007964 iforce 0x00000011 + 00030612 0x00007965 copy 0x00000012 , 0x00000038 + 00030613 0x00007966 deposit 0x0000002f + 00030614 0x00007967 copy 0x00000013 , 0x00000038 + 00030615 0x00007968 imul32 0x0000002f , 0x0000003f + 00030616 0x00007969 iadd 0x00000011 , 0x0000003f + 00030617 0x0000796a iadd 0x00000002 , 0x0000003f + 00030618 0x0000796b istore 0x00000004 , 0x00000005 + 00030619 0x0000796c rshift32 0x0000003f , 0x00000002 + 00030620 0x0000796d increase 0x00000001 , 0x00000013 + 00030621 0x0000796e compare 0x0000000c , 0x00000013 , 0x000000ff + 00030622 0x0000796f nbranch 0x00007792 , 0x00000001 + 00030623 0x00007970 deposit 0x00000002 + 00030624 0x00007971 istore 0x00000004 , 0x00000005 + 00030625 0x00007972 increase 0xffffffe8 , 0x00000005 + 00030626 0x00007973 increase 0x00000001 , 0x00000012 + 00030627 0x00007974 compare 0x00000006 , 0x00000012 , 0x000000ff + 00030628 0x00007975 nbranch 0x00007790 , 0x00000001 + 00030629 0x00007976 arg 0x000006e6 , 0x00000011 + 00030630 0x00007977 copy 0x0000000b , 0x00000005 + 00030631 0x00007978 branch 0x0000775f + 00030632 0x0000797c copy 0x00000011 , 0x00000012 + 00030633 0x0000797d branch 0x00007786 + 00030634 0x00007980 copy 0x00000011 , 0x00000030 + 00030635 0x00007982 copy 0x00000030 , 0x00000011 + 00030636 0x00007983 ifetch 0x00000001 , 0x00000011 + 00030637 0x00007984 isolate1 0x00000000 , 0x0000003f + 00030638 0x00007985 rtn 0x00000001 + 00030639 0x00007986 call 0x0000772d + 00030640 0x00007987 ifetch 0x00000001 , 0x00000012 + 00030641 0x00007988 isolate0 0x00000000 , 0x0000003f + 00030642 0x00007989 branch 0x000077ba , 0x00000001 + 00030643 0x0000798a arg 0x00000886 , 0x00000011 + 00030644 0x0000798b copy 0x00000012 , 0x00000005 + 00030645 0x0000798c call 0x00007711 + 00030646 0x0000798d ifetch 0x00000001 , 0x00000012 + 00030647 0x0000798e iadd 0x00000013 , 0x0000003f + 00030648 0x0000798f istore 0x00000001 , 0x00000012 + 00030649 0x00007990 increase 0xffffffe8 , 0x00000012 + 00030650 0x00007992 add 0x00000012 , 0x00000018 , 0x00000011 + 00030651 0x00007993 force 0x00000007 , 0x00000039 + 00030652 0x00007994 call 0x0000772f + 00030653 0x00007995 branch 0x000077ab + 00030654 0x00007999 copy 0x00000005 , 0x0000000b + 00030655 0x0000799a arg 0x00000746 , 0x00000005 + 00030656 0x0000799b call 0x00007ec5 + 00030657 0x0000799c force 0x00000000 , 0x0000003f + 00030658 0x0000799d store 0x00000004 , 0x000006fe + 00030659 0x0000799e store 0x00000004 , 0x0000075e + 00030660 0x0000799f jam 0x00000001 , 0x00000746 + 00030661 0x000079a0 arg 0x000006e6 , 0x00000005 + 00030662 0x000079a1 call 0x00007ec5 + 00030663 0x000079a2 arg 0x00000886 , 0x00000006 + 00030664 0x000079a3 arg 0x00000716 , 0x00000005 + 00030665 0x000079a4 call 0x00007ebe + 00030666 0x000079a5 copy 0x00000011 , 0x00000006 + 00030667 0x000079a6 arg 0x0000072e , 0x00000005 + 00030668 0x000079a7 call 0x00007ebe + 00030669 0x000079a9 arg 0x0000072e , 0x00000006 + 00030670 0x000079aa call 0x000076f5 + 00030671 0x000079ab branch 0x000077f6 , 0x00000034 + 00030672 0x000079ac arg 0x0000072e , 0x00000011 + 00030673 0x000079ad arg 0x00000746 , 0x00000012 + 00030674 0x000079ae call 0x000077aa + 00030675 0x000079b0 arg 0x00000716 , 0x00000011 + 00030676 0x000079b1 arg 0x000006e6 , 0x00000012 + 00030677 0x000079b2 call 0x000077aa + 00030678 0x000079b3 arg 0x0000072e , 0x00000011 + 00030679 0x000079b4 arg 0x00000716 , 0x00000012 + 00030680 0x000079b5 call 0x00007704 + 00030681 0x000079b6 branch 0x000077e8 , 0x00000002 + 00030682 0x000079b7 arg 0x00000716 , 0x00000011 + 00030683 0x000079b8 arg 0x0000072e , 0x00000012 + 00030684 0x000079b9 copy 0x00000011 , 0x00000005 + 00030685 0x000079ba call 0x0000771f + 00030686 0x000079bb arg 0x00000746 , 0x00000011 + 00030687 0x000079bc arg 0x000006e6 , 0x00000012 + 00030688 0x000079bd copy 0x00000012 , 0x00000005 + 00030689 0x000079be call 0x00007711 + 00030690 0x000079bf ifetch 0x00000001 , 0x00000011 + 00030691 0x000079c0 iadd 0x00000013 , 0x00000013 + 00030692 0x000079c1 ifetch 0x00000001 , 0x00000012 + 00030693 0x000079c2 iadd 0x00000013 , 0x0000003f + 00030694 0x000079c3 istore 0x00000001 , 0x00000012 + 00030695 0x000079c4 branch 0x000077cd + 00030696 0x000079c6 arg 0x0000072e , 0x00000011 + 00030697 0x000079c7 arg 0x00000716 , 0x00000012 + 00030698 0x000079c8 copy 0x00000011 , 0x00000005 + 00030699 0x000079c9 call 0x0000771f + 00030700 0x000079ca arg 0x000006e6 , 0x00000011 + 00030701 0x000079cb arg 0x00000746 , 0x00000012 + 00030702 0x000079cc copy 0x00000012 , 0x00000005 + 00030703 0x000079cd call 0x00007711 + 00030704 0x000079ce ifetch 0x00000001 , 0x00000011 + 00030705 0x000079cf iadd 0x00000013 , 0x00000013 + 00030706 0x000079d0 ifetch 0x00000001 , 0x00000012 + 00030707 0x000079d1 iadd 0x00000013 , 0x0000003f + 00030708 0x000079d2 istore 0x00000001 , 0x00000012 + 00030709 0x000079d3 branch 0x000077cd + 00030710 0x000079d5 arg 0x00000746 , 0x00000005 + 00030711 0x000079d6 call 0x00007ec5 + 00030712 0x000079d7 fetch 0x00000001 , 0x000006fe + 00030713 0x000079d8 store 0x00000001 , 0x00000746 + 00030714 0x000079d9 store 0x00000001 , 0x0000074e + 00030715 0x000079da arg 0x00000746 , 0x00000011 + 00030716 0x000079db arg 0x000006e6 , 0x00000012 + 00030717 0x000079dc copy 0x00000012 , 0x00000005 + 00030718 0x000079dd call 0x00007755 + 00030719 0x000079de arg 0x00000886 , 0x00000011 + 00030720 0x000079df arg 0x000006e6 , 0x00000012 + 00030721 0x000079e0 copy 0x0000000b , 0x00000005 + 00030722 0x000079e1 branch 0x00007758 + 00030723 0x000079e7 arg 0x000006a6 , 0x00000011 + 00030724 0x000079e8 arg 0x0000075e , 0x00000005 + 00030725 0x000079e9 call 0x000077a8 + 00030726 0x000079ea arg 0x0000075e , 0x00000011 + 00030727 0x000079eb arg 0x00000776 , 0x00000005 + 00030728 0x000079ec call 0x000077a8 + 00030729 0x000079ed arg 0x0000089e , 0x00000011 + 00030730 0x000079ee arg 0x00000776 , 0x00000012 + 00030731 0x000079ef arg 0x00000776 , 0x00000005 + 00030732 0x000079f0 call 0x00007786 + 00030733 0x000079f1 arg 0x00000676 , 0x00000011 + 00030734 0x000079f2 arg 0x0000075e , 0x00000005 + 00030735 0x000079f3 call 0x000077a8 + 00030736 0x000079f4 arg 0x0000075e , 0x00000006 + 00030737 0x000079f5 arg 0x0000072e , 0x00000005 + 00030738 0x000079f6 call 0x00007ebe + 00030739 0x000079f7 arg 0x0000072e , 0x00000011 + 00030740 0x000079f8 call 0x00007748 + 00030741 0x000079f9 arg 0x0000075e , 0x00000011 + 00030742 0x000079fa arg 0x0000072e , 0x00000012 + 00030743 0x000079fb arg 0x0000075e , 0x00000005 + 00030744 0x000079fc call 0x00007755 + 00030745 0x000079fd arg 0x0000075e , 0x00000011 + 00030746 0x000079fe arg 0x00000776 , 0x00000012 + 00030747 0x000079ff arg 0x0000075e , 0x00000005 + 00030748 0x00007a00 call 0x00007755 + 00030749 0x00007a01 arg 0x00000676 , 0x00000006 + 00030750 0x00007a02 arg 0x0000072e , 0x00000005 + 00030751 0x00007a03 call 0x00007ebe + 00030752 0x00007a04 arg 0x0000068e , 0x00000011 + 00030753 0x00007a05 arg 0x00000776 , 0x00000005 + 00030754 0x00007a06 call 0x000077a8 + 00030755 0x00007a07 arg 0x0000072e , 0x00000011 + 00030756 0x00007a08 call 0x00007748 + 00030757 0x00007a09 arg 0x0000072e , 0x00000011 + 00030758 0x00007a0a call 0x00007748 + 00030759 0x00007a0b arg 0x0000072e , 0x00000011 + 00030760 0x00007a0c arg 0x00000776 , 0x00000012 + 00030761 0x00007a0d arg 0x0000072e , 0x00000005 + 00030762 0x00007a0e call 0x00007786 + 00030763 0x00007a0f arg 0x00000776 , 0x00000011 + 00030764 0x00007a10 arg 0x00000746 , 0x00000005 + 00030765 0x00007a11 call 0x000077a8 + 00030766 0x00007a12 arg 0x00000746 , 0x00000011 + 00030767 0x00007a13 call 0x00007748 + 00030768 0x00007a14 arg 0x00000746 , 0x00000011 + 00030769 0x00007a15 call 0x00007748 + 00030770 0x00007a16 arg 0x00000746 , 0x00000011 + 00030771 0x00007a17 call 0x00007748 + 00030772 0x00007a18 arg 0x0000068e , 0x00000006 + 00030773 0x00007a19 arg 0x00000776 , 0x00000005 + 00030774 0x00007a1a call 0x00007ebe + 00030775 0x00007a1b arg 0x00000776 , 0x00000011 + 00030776 0x00007a1c call 0x00007748 + 00030777 0x00007a1d arg 0x00000776 , 0x00000011 + 00030778 0x00007a1e arg 0x000006a6 , 0x00000012 + 00030779 0x00007a1f arg 0x000006a6 , 0x00000005 + 00030780 0x00007a20 call 0x00007786 + 00030781 0x00007a21 arg 0x0000075e , 0x00000011 + 00030782 0x00007a22 arg 0x00000776 , 0x00000005 + 00030783 0x00007a23 call 0x000077a8 + 00030784 0x00007a24 arg 0x00000776 , 0x00000011 + 00030785 0x00007a25 arg 0x0000072e , 0x00000012 + 00030786 0x00007a26 arg 0x00000776 , 0x00000005 + 00030787 0x00007a27 call 0x00007758 + 00030788 0x00007a28 arg 0x00000776 , 0x00000011 + 00030789 0x00007a29 arg 0x0000072e , 0x00000012 + 00030790 0x00007a2a arg 0x00000676 , 0x00000005 + 00030791 0x00007a2b call 0x00007758 + 00030792 0x00007a2c arg 0x0000072e , 0x00000011 + 00030793 0x00007a2d arg 0x00000676 , 0x00000012 + 00030794 0x00007a2e arg 0x00000776 , 0x00000005 + 00030795 0x00007a2f call 0x00007758 + 00030796 0x00007a30 arg 0x00000776 , 0x00000011 + 00030797 0x00007a31 arg 0x0000075e , 0x00000012 + 00030798 0x00007a32 arg 0x00000776 , 0x00000005 + 00030799 0x00007a33 call 0x00007786 + 00030800 0x00007a34 arg 0x00000776 , 0x00000011 + 00030801 0x00007a35 arg 0x00000746 , 0x00000012 + 00030802 0x00007a36 arg 0x0000068e , 0x00000005 + 00030803 0x00007a37 branch 0x00007758 + 00030804 0x00007a3c arg 0x00000616 , 0x00000011 + 00030805 0x00007a3d arg 0x0000078e , 0x00000005 + 00030806 0x00007a3e call 0x000077a8 + 00030807 0x00007a3f arg 0x00000676 , 0x00000011 + 00030808 0x00007a40 arg 0x0000078e , 0x00000012 + 00030809 0x00007a41 arg 0x00000746 , 0x00000005 + 00030810 0x00007a42 call 0x00007786 + 00030811 0x00007a43 arg 0x00000616 , 0x00000011 + 00030812 0x00007a44 arg 0x0000078e , 0x00000012 + 00030813 0x00007a45 arg 0x0000078e , 0x00000005 + 00030814 0x00007a46 call 0x00007786 + 00030815 0x00007a47 arg 0x0000068e , 0x00000011 + 00030816 0x00007a48 arg 0x0000078e , 0x00000012 + 00030817 0x00007a49 arg 0x0000072e , 0x00000005 + 00030818 0x00007a4a call 0x00007786 + 00030819 0x00007a4b arg 0x000006a6 , 0x00000011 + 00030820 0x00007a4c arg 0x0000078e , 0x00000005 + 00030821 0x00007a4d call 0x000077a8 + 00030822 0x00007a4e arg 0x000005e6 , 0x00000011 + 00030823 0x00007a4f arg 0x0000078e , 0x00000012 + 00030824 0x00007a50 arg 0x0000075e , 0x00000005 + 00030825 0x00007a51 call 0x00007786 + 00030826 0x00007a52 arg 0x000006a6 , 0x00000011 + 00030827 0x00007a53 arg 0x0000078e , 0x00000012 + 00030828 0x00007a54 arg 0x0000078e , 0x00000005 + 00030829 0x00007a55 call 0x00007786 + 00030830 0x00007a56 arg 0x000005fe , 0x00000011 + 00030831 0x00007a57 arg 0x0000078e , 0x00000012 + 00030832 0x00007a58 arg 0x00000776 , 0x00000005 + 00030833 0x00007a59 call 0x00007786 + 00030834 0x00007a5a arg 0x00000746 , 0x00000011 + 00030835 0x00007a5b arg 0x0000075e , 0x00000012 + 00030836 0x00007a5c arg 0x0000078e , 0x00000005 + 00030837 0x00007a5d call 0x00007758 + 00030838 0x00007a5e arg 0x00000746 , 0x00000011 + 00030839 0x00007a5f arg 0x0000075e , 0x00000012 + 00030840 0x00007a60 arg 0x00000746 , 0x00000005 + 00030841 0x00007a61 call 0x00007755 + 00030842 0x00007a62 arg 0x0000072e , 0x00000011 + 00030843 0x00007a63 arg 0x00000776 , 0x00000012 + 00030844 0x00007a64 arg 0x0000075e , 0x00000005 + 00030845 0x00007a65 call 0x00007758 + 00030846 0x00007a66 arg 0x0000072e , 0x00000011 + 00030847 0x00007a67 arg 0x00000776 , 0x00000012 + 00030848 0x00007a68 arg 0x0000072e , 0x00000005 + 00030849 0x00007a69 call 0x00007755 + 00030850 0x00007a6a arg 0x0000072e , 0x00000011 + 00030851 0x00007a6b arg 0x0000078e , 0x00000012 + 00030852 0x00007a6c arg 0x0000072e , 0x00000005 + 00030853 0x00007a6d call 0x00007786 + 00030854 0x00007a6e arg 0x000006a6 , 0x00000011 + 00030855 0x00007a6f arg 0x00000616 , 0x00000012 + 00030856 0x00007a70 arg 0x00000776 , 0x00000005 + 00030857 0x00007a71 call 0x00007786 + 00030858 0x00007a72 arg 0x00000776 , 0x00000011 + 00030859 0x00007a73 arg 0x0000078e , 0x00000012 + 00030860 0x00007a74 arg 0x000006a6 , 0x00000005 + 00030861 0x00007a75 call 0x00007786 + 00030862 0x00007a76 arg 0x0000078e , 0x00000011 + 00030863 0x00007a77 arg 0x0000078e , 0x00000005 + 00030864 0x00007a78 call 0x000077a8 + 00030865 0x00007a79 arg 0x0000078e , 0x00000011 + 00030866 0x00007a7a arg 0x00000746 , 0x00000012 + 00030867 0x00007a7b arg 0x00000776 , 0x00000005 + 00030868 0x00007a7c call 0x00007786 + 00030869 0x00007a7d arg 0x0000078e , 0x00000011 + 00030870 0x00007a7e arg 0x0000072e , 0x00000012 + 00030871 0x00007a7f arg 0x0000072e , 0x00000005 + 00030872 0x00007a80 call 0x00007786 + 00030873 0x00007a81 arg 0x0000075e , 0x00000011 + 00030874 0x00007a82 arg 0x00000676 , 0x00000005 + 00030875 0x00007a83 call 0x000077a8 + 00030876 0x00007a84 arg 0x00000676 , 0x00000011 + 00030877 0x00007a85 arg 0x00000776 , 0x00000012 + 00030878 0x00007a86 arg 0x00000676 , 0x00000005 + 00030879 0x00007a87 call 0x00007758 + 00030880 0x00007a88 arg 0x00000676 , 0x00000006 + 00030881 0x00007a89 arg 0x0000078e , 0x00000005 + 00030882 0x00007a8a call 0x00007ebe + 00030883 0x00007a8b arg 0x0000078e , 0x00000011 + 00030884 0x00007a8c call 0x00007748 + 00030885 0x00007a8d arg 0x00000776 , 0x00000011 + 00030886 0x00007a8e arg 0x0000078e , 0x00000012 + 00030887 0x00007a8f arg 0x00000776 , 0x00000005 + 00030888 0x00007a90 call 0x00007758 + 00030889 0x00007a91 arg 0x00000776 , 0x00000011 + 00030890 0x00007a92 arg 0x0000075e , 0x00000012 + 00030891 0x00007a93 arg 0x0000075e , 0x00000005 + 00030892 0x00007a94 call 0x00007786 + 00030893 0x00007a95 arg 0x0000075e , 0x00000011 + 00030894 0x00007a96 arg 0x0000072e , 0x00000012 + 00030895 0x00007a97 arg 0x0000068e , 0x00000005 + 00030896 0x00007a98 call 0x00007758 + 00030897 0x00007a99 arg 0x0000068e , 0x00000011 + 00030898 0x00007a9a arg 0x00000886 , 0x00000012 + 00030899 0x00007a9b arg 0x0000068e , 0x00000005 + 00030900 0x00007a9c force 0x00000000 , 0x00000013 + 00030901 0x00007a9d fetch 0x00000001 , 0x0000068e + 00030902 0x00007a9e isolate1 0x00000000 , 0x0000003f + 00030903 0x00007a9f call 0x00007711 , 0x00000001 + 00030904 0x00007aa0 copy 0x00000013 , 0x00000030 + 00030905 0x00007aa1 arg 0x0000068e , 0x00000011 + 00030906 0x00007aa2 call 0x0000772d + 00030907 0x00007aa3 fetch 0x00000001 , 0x000006a5 + 00030908 0x00007aa4 isolate1 0x00000000 , 0x00000030 + 00030909 0x00007aa5 setflag 0x00000001 , 0x00000007 , 0x0000003f + 00030910 0x00007aa6 store 0x00000001 , 0x000006a5 + 00030911 0x00007aa7 rtn + 00030912 0x00007aac fetch 0x00000001 , 0x000005e3 + 00030913 0x00007aad increase 0xffffffff , 0x0000003f + 00030914 0x00007aae nrtn 0x00000002 + 00030915 0x00007aaf store 0x00000001 , 0x000005e3 + 00030916 0x00007ab0 fetch 0x00000001 , 0x000005e2 + 00030917 0x00007ab1 call 0x00007803 , 0x00000034 + 00030918 0x00007ab2 fetch 0x00000001 , 0x000005e3 + 00030919 0x00007ab3 arg 0x000006be , 0x00000006 + 00030920 0x00007ab4 call 0x000076ec + 00030921 0x00007ab5 branch 0x000078c0 , 0x00000001 + 00030922 0x00007ab6 fetch 0x00000001 , 0x000005e2 + 00030923 0x00007ab7 nbranch 0x000078ce , 0x00000034 + 00030924 0x00007ab8 call 0x00007854 + 00030925 0x00007ab9 branch 0x000078c0 + 00030926 0x00007abb jam 0x00000000 , 0x000005e2 + 00030927 0x00007abc arg 0x000005e6 , 0x00000006 + 00030928 0x00007abd arg 0x00000676 , 0x00000005 + 00030929 0x00007abe call 0x000076f2 + 00030930 0x00007abf branch 0x000078c0 + 00030931 0x00007ac3 arg 0x000006a6 , 0x00000011 + 00030932 0x00007ac4 arg 0x00000776 , 0x00000005 + 00030933 0x00007ac5 call 0x000077be + 00030934 0x00007ac6 arg 0x00000776 , 0x00000011 + 00030935 0x00007ac7 arg 0x0000072e , 0x00000005 + 00030936 0x00007ac8 call 0x000077a8 + 00030937 0x00007ac9 arg 0x00000676 , 0x00000011 + 00030938 0x00007aca arg 0x0000072e , 0x00000012 + 00030939 0x00007acb arg 0x0000062e , 0x00000005 + 00030940 0x00007acc call 0x00007786 + 00030941 0x00007acd arg 0x00000776 , 0x00000011 + 00030942 0x00007ace arg 0x0000072e , 0x00000012 + 00030943 0x00007acf arg 0x0000075e , 0x00000005 + 00030944 0x00007ad0 call 0x00007786 + 00030945 0x00007ad1 arg 0x0000068e , 0x00000011 + 00030946 0x00007ad2 arg 0x0000075e , 0x00000012 + 00030947 0x00007ad3 arg 0x00000646 , 0x00000005 + 00030948 0x00007ad4 branch 0x00007786 + 00030949 0x00007ad9 ifetch 0x00000004 , 0x00000006 + 00030950 0x00007ada force 0x00000004 , 0x00000011 + 00030951 0x00007adb increase 0x00000003 , 0x00000005 + 00030952 0x00007add istore 0x00000001 , 0x00000005 + 00030953 0x00007ade rshift8 0x0000003f , 0x0000003f + 00030954 0x00007adf increase 0xfffffffe , 0x00000005 + 00030955 0x00007ae0 increase 0xffffffff , 0x00000011 + 00030956 0x00007ae1 nbranch 0x000078e8 , 0x00000005 + 00030957 0x00007ae2 increase 0x00000005 , 0x00000005 + 00030958 0x00007ae3 loop 0x000078e5 + 00030959 0x00007ae4 rtn + 00030960 0x00007ae8 lshift2 0x00000007 , 0x0000003f + 00030961 0x00007ae9 iadd 0x0000000b , 0x00000006 + 00030962 0x00007aea ifetch 0x00000004 , 0x00000006 + 00030963 0x00007aeb rtn + 00030964 0x00007aee force 0x00000010 , 0x00000030 + 00030965 0x00007aef arg 0x000005e6 , 0x0000000b + 00030966 0x00007af1 add 0x00000030 , 0xfffffff9 , 0x00000007 + 00030967 0x00007af2 call 0x000078f0 + 00030968 0x00007af3 iforce 0x00000002 + 00030969 0x00007af4 add 0x00000030 , 0xfffffff0 , 0x00000007 + 00030970 0x00007af5 call 0x000078f0 + 00030971 0x00007af6 iadd 0x00000002 , 0x00000002 + 00030972 0x00007af7 add 0x00000030 , 0xfffffffe , 0x00000007 + 00030973 0x00007af8 call 0x000078f0 + 00030974 0x00007af9 shasx 0x0000003f , 0x00000001 , 0x0000003f + 00030975 0x00007afa iadd 0x00000002 , 0x00000002 + 00030976 0x00007afb add 0x00000030 , 0xfffffff1 , 0x00000007 + 00030977 0x00007afc call 0x000078f0 + 00030978 0x00007afd shasx 0x0000003f , 0x00000000 , 0x0000003f + 00030979 0x00007afe iadd 0x00000002 , 0x00000002 + 00030980 0x00007aff lshift2 0x00000030 , 0x0000003f + 00030981 0x00007b00 iadd 0x0000000b , 0x00000005 + 00030982 0x00007b01 istoret 0x00000004 , 0x00000005 + 00030983 0x00007b02 increase 0x00000001 , 0x00000030 + 00030984 0x00007b03 compare 0x00000040 , 0x00000030 , 0x000000ff + 00030985 0x00007b04 nbranch 0x000078f6 , 0x00000001 + 00030986 0x00007b05 rtn + 00030987 0x00007b09 arg 0x000008fe , 0x00000006 + 00030988 0x00007b0a force 0x00000007 , 0x00000038 + 00030989 0x00007b0c ifetch 0x00000004 , 0x00000006 + 00030990 0x00007b0d iforce 0x0000002f + 00030991 0x00007b0e increase 0xffffffff , 0x00000038 + 00030992 0x00007b0f branch 0x0000790d , 0x00000002 + 00030993 0x00007b10 rtn + 00030994 0x00007b13 bpatchx 0x000000ec , 0x0000403d + 00030995 0x00007b14 call 0x000078f4 + 00030996 0x00007b15 arg 0x000006e6 , 0x00000005 + 00030997 0x00007b16 force 0x00000000 , 0x00000038 + 00030998 0x00007b18 deposit 0x0000002f + 00030999 0x00007b19 istore 0x00000004 , 0x00000005 + 00031000 0x00007b1a increase 0x00000001 , 0x00000038 + 00031001 0x00007b1b compare 0x00000008 , 0x00000038 , 0x000000ff + 00031002 0x00007b1c nbranch 0x00007916 , 0x00000001 + 00031003 0x00007b1d call 0x000074b9 + 00031004 0x00007b1e arg 0x00008700 , 0x0000000b + 00031005 0x00007b1f arg 0x000005e6 , 0x00000030 + 00031006 0x00007b20 force 0x00000040 , 0x00000039 + 00031007 0x00007b22 ifetcht 0x00000004 , 0x00000030 + 00031008 0x00007b23 ifetch 0x00000004 , 0x0000000b + 00031009 0x00007b24 increase 0x00000004 , 0x0000000b + 00031010 0x00007b25 increase 0x00000004 , 0x00000030 + 00031011 0x00007b26 iadd 0x00000002 , 0x0000003f + 00031012 0x00007b27 force 0x00000007 , 0x00000038 + 00031013 0x00007b28 iadd 0x0000002f , 0x00000002 + 00031014 0x00007b29 force 0x00000004 , 0x00000038 + 00031015 0x00007b2a shasx 0x0000002f , 0x00000003 , 0x0000003f + 00031016 0x00007b2b iadd 0x00000002 , 0x00000002 + 00031017 0x00007b2c force 0x00000005 , 0x00000038 + 00031018 0x00007b2d deposit 0x0000002f + 00031019 0x00007b2e force 0x00000006 , 0x00000038 + 00031020 0x00007b2f ixor 0x0000002f , 0x0000003f + 00031021 0x00007b30 force 0x00000004 , 0x00000038 + 00031022 0x00007b31 iand 0x0000002f , 0x0000003f + 00031023 0x00007b32 force 0x00000006 , 0x00000038 + 00031024 0x00007b33 ixor 0x0000002f , 0x0000003f + 00031025 0x00007b34 iadd 0x00000002 , 0x00000002 + 00031026 0x00007b35 force 0x00000007 , 0x00000038 + 00031027 0x00007b36 copy 0x00000002 , 0x0000002f + 00031028 0x00007b37 force 0x00000003 , 0x00000038 + 00031029 0x00007b38 deposit 0x0000002f + 00031030 0x00007b39 iadd 0x00000002 , 0x0000002f + 00031031 0x00007b3a force 0x00000000 , 0x00000038 + 00031032 0x00007b3b deposit 0x0000002f + 00031033 0x00007b3c force 0x00000001 , 0x00000038 + 00031034 0x00007b3d iand 0x0000002f , 0x00000002 + 00031035 0x00007b3e ior 0x0000002f , 0x0000003f + 00031036 0x00007b3f force 0x00000002 , 0x00000038 + 00031037 0x00007b40 iand 0x0000002f , 0x0000003f + 00031038 0x00007b41 ior 0x00000002 , 0x00000002 + 00031039 0x00007b42 force 0x00000000 , 0x00000038 + 00031040 0x00007b43 shasx 0x0000002f , 0x00000002 , 0x0000003f + 00031041 0x00007b44 iadd 0x00000002 , 0x0000003f + 00031042 0x00007b45 force 0x00000007 , 0x00000038 + 00031043 0x00007b46 iadd 0x0000002f , 0x0000002f + 00031044 0x00007b47 regexrot + 00031045 0x00007b48 loop 0x0000791f + 00031046 0x00007b49 arg 0x000006e6 , 0x00000006 + 00031047 0x00007b4a force 0x00000000 , 0x00000038 + 00031048 0x00007b4c ifetch 0x00000004 , 0x00000006 + 00031049 0x00007b4d iadd 0x0000002f , 0x0000002f + 00031050 0x00007b4e increase 0x00000001 , 0x00000038 + 00031051 0x00007b4f compare 0x00000008 , 0x00000038 , 0x000000ff + 00031052 0x00007b50 nbranch 0x00007948 , 0x00000001 + 00031053 0x00007b51 branch 0x000074bd + 00031054 0x00007b55 arg 0x00000a3e , 0x00000005 + 00031055 0x00007b56 force 0x00000007 , 0x00000038 + 00031056 0x00007b58 deposit 0x0000002f + 00031057 0x00007b59 istore 0x00000004 , 0x00000005 + 00031058 0x00007b5a increase 0xffffffff , 0x00000038 + 00031059 0x00007b5b branch 0x00007950 , 0x00000002 + 00031060 0x00007b5c rtn + 00031061 0x00007b60 arg 0x000005e6 , 0x00000005 + 00031062 0x00007b61 increase 0xfffffffc , 0x00000006 + 00031063 0x00007b62 sub 0x00000039 , 0x00000010 , 0x00000011 + 00031064 0x00007b64 ifetch 0x00000004 , 0x00000006 + 00031065 0x00007b65 ixor 0x00000002 , 0x0000003f + 00031066 0x00007b66 istore 0x00000004 , 0x00000005 + 00031067 0x00007b67 increase 0xfffffff8 , 0x00000006 + 00031068 0x00007b68 loop 0x00007958 + 00031069 0x00007b69 copy 0x00000011 , 0x00000039 + 00031070 0x00007b6a deposit 0x00000002 + 00031071 0x00007b6c istore 0x00000004 , 0x00000005 + 00031072 0x00007b6d loop 0x0000795f + 00031073 0x00007b6e rtn + 00031074 0x00007b71 call 0x00007967 + 00031075 0x00007b72 call 0x0000794e + 00031076 0x00007b73 branch 0x0000798d + 00031077 0x00007b76 call 0x00007967 + 00031078 0x00007b77 branch 0x0000798d + 00031079 0x00007b7a arg 0x000009de , 0x00000006 + 00031080 0x00007b7b arg 0x000005e6 , 0x00000005 + 00031081 0x00007b7c force 0x00000006 , 0x00000039 + 00031082 0x00007b7d call 0x00007a71 + 00031083 0x00007b7e arg 0x00004642 , 0x00000006 + 00031084 0x00007b7f force 0x00000006 , 0x00000039 + 00031085 0x00007b80 call 0x00007a71 + 00031086 0x00007b81 arg 0x00000a3e , 0x00000006 + 00031087 0x00007b82 call 0x00007a70 + 00031088 0x00007b83 call 0x0000790b + 00031089 0x00007b84 call 0x00007912 + 00031090 0x00007b85 arg 0x00000a2e , 0x00000006 + 00031091 0x00007b86 arg 0x000005e6 , 0x00000005 + 00031092 0x00007b87 branch 0x00007984 + 00031093 0x00007b8a arg 0x00004642 , 0x00000006 + 00031094 0x00007b8b arg 0x000005e6 , 0x00000005 + 00031095 0x00007b8c force 0x00000006 , 0x00000039 + 00031096 0x00007b8d call 0x00007a71 + 00031097 0x00007b8e arg 0x000009de , 0x00000006 + 00031098 0x00007b8f force 0x00000006 , 0x00000039 + 00031099 0x00007b90 call 0x00007a71 + 00031100 0x00007b91 arg 0x00000a2e , 0x00000006 + 00031101 0x00007b92 call 0x00007a70 + 00031102 0x00007b93 call 0x0000790b + 00031103 0x00007b94 call 0x00007912 + 00031104 0x00007b95 arg 0x00000a3e , 0x00000006 + 00031105 0x00007b96 arg 0x000005e6 , 0x00000005 + 00031106 0x00007b97 call 0x00007984 + 00031107 0x00007b98 branch 0x0000798d + 00031108 0x00007b9b call 0x00007a70 + 00031109 0x00007b9c setarg 0x00800000 + 00031110 0x00007b9d lshift8 0x0000003f , 0x0000003f + 00031111 0x00007b9e istore 0x00000004 , 0x00000005 + 00031112 0x00007b9f force 0x00000005 , 0x00000039 + 00031113 0x00007ba0 call 0x00007ec6 + 00031114 0x00007ba1 setarg 0x00000280 + 00031115 0x00007ba2 istore 0x00000004 , 0x00000005 + 00031116 0x00007ba3 branch 0x00007912 + 00031117 0x00007ba5 fetch 0x00000004 , 0x00000a3e + 00031118 0x00007ba7 arg 0x000003e8 , 0x00000011 + 00031119 0x00007ba8 idiv 0x00000011 + 00031120 0x00007ba9 call 0x00007f86 + 00031121 0x00007baa remainder 0x0000003f + 00031122 0x00007bab store 0x00000004 , 0x000009ba + 00031123 0x00007bac quotient 0x0000003f + 00031124 0x00007bad arg 0x000003e8 , 0x00000011 + 00031125 0x00007bae idiv 0x00000011 + 00031126 0x00007baf call 0x00007f86 + 00031127 0x00007bb0 remainder 0x0000003f + 00031128 0x00007bb1 arg 0x000003e8 , 0x00000011 + 00031129 0x00007bb2 imul32 0x00000011 , 0x0000003f + 00031130 0x00007bb3 fetcht 0x00000004 , 0x000009ba + 00031131 0x00007bb4 iadd 0x00000002 , 0x0000003f + 00031132 0x00007bb5 store 0x00000004 , 0x000009ba + 00031133 0x00007bb6 rtn + 00031134 0x00007bb9 jam 0x00000000 , 0x00004664 + 00031135 0x00007bba branch 0x000079a2 + 00031136 0x00007bbd fetch 0x00000001 , 0x00004662 + 00031137 0x00007bbe bne 0x00000002 , 0x0000799e + 00031138 0x00007bc0 bpatchx 0x000000ed , 0x0000403d + 00031139 0x00007bc1 setarg 0x00363636 + 00031140 0x00007bc2 lshift8 0x0000003f , 0x00000002 + 00031141 0x00007bc3 or_into 0x00000036 , 0x00000002 + 00031142 0x00007bc4 fetch 0x00000002 , 0x00000a7e + 00031143 0x00007bc5 copy 0x0000003f , 0x00000006 + 00031144 0x00007bc6 force 0x00000004 , 0x00000039 + 00031145 0x00007bc7 call 0x00007955 + 00031146 0x00007bc8 call 0x0000790b + 00031147 0x00007bc9 call 0x00007912 + 00031148 0x00007bca fetch 0x00000002 , 0x00000a80 + 00031149 0x00007bcb copy 0x0000003f , 0x00000006 + 00031150 0x00007bcc arg 0x000005e6 , 0x00000005 + 00031151 0x00007bcd force 0x00000006 , 0x00000039 + 00031152 0x00007bce call 0x00007a71 + 00031153 0x00007bcf fetch 0x00000002 , 0x00000a82 + 00031154 0x00007bd0 copy 0x0000003f , 0x00000006 + 00031155 0x00007bd1 force 0x00000006 , 0x00000039 + 00031156 0x00007bd2 call 0x00007a71 + 00031157 0x00007bd3 setarg 0x00800000 + 00031158 0x00007bd4 istore 0x00000003 , 0x00000005 + 00031159 0x00007bd6 fetch 0x00000001 , 0x00004664 + 00031160 0x00007bd8 istore 0x00000001 , 0x00000005 + 00031161 0x00007bd9 force 0x00000000 , 0x0000003f + 00031162 0x00007bda istore 0x00000008 , 0x00000005 + 00031163 0x00007bdb setarg 0x00000388 + 00031164 0x00007bdc istore 0x00000004 , 0x00000005 + 00031165 0x00007bdd call 0x00007912 + 00031166 0x00007bde call 0x0000794e + 00031167 0x00007bdf arg 0x00000a3e , 0x00000006 + 00031168 0x00007be0 arg 0x00000706 , 0x00000005 + 00031169 0x00007be1 call 0x00007ebd + 00031170 0x00007be3 setarg 0x005c5c5c + 00031171 0x00007be4 lshift8 0x0000003f , 0x00000002 + 00031172 0x00007be5 or_into 0x0000005c , 0x00000002 + 00031173 0x00007be6 fetch 0x00000002 , 0x00000a7e + 00031174 0x00007be7 copy 0x0000003f , 0x00000006 + 00031175 0x00007be8 force 0x00000004 , 0x00000039 + 00031176 0x00007be9 call 0x00007955 + 00031177 0x00007bea call 0x0000790b + 00031178 0x00007beb call 0x00007912 + 00031179 0x00007bec arg 0x00000726 , 0x00000006 + 00031180 0x00007bed arg 0x000005e6 , 0x00000005 + 00031181 0x00007bee force 0x00000008 , 0x00000039 + 00031182 0x00007bef call 0x00007a71 + 00031183 0x00007bf0 setarg 0x00800000 + 00031184 0x00007bf1 lshift8 0x0000003f , 0x0000003f + 00031185 0x00007bf2 istore 0x00000004 , 0x00000005 + 00031186 0x00007bf3 call 0x00007ec5 + 00031187 0x00007bf4 setarg 0x00000300 + 00031188 0x00007bf5 istore 0x00000004 , 0x00000005 + 00031189 0x00007bf6 call 0x00007912 + 00031190 0x00007bf7 branch 0x0000794e + 00031191 0x00007bfb setarg 0x00363636 + 00031192 0x00007bfc lshift8 0x0000003f , 0x00000002 + 00031193 0x00007bfd or_into 0x00000036 , 0x00000002 + 00031194 0x00007bfe arg 0x00000a1e , 0x00000006 + 00031195 0x00007bff force 0x00000006 , 0x00000039 + 00031196 0x00007c00 call 0x00007955 + 00031197 0x00007c01 call 0x0000790b + 00031198 0x00007c02 call 0x00007912 + 00031199 0x00007c03 fetch 0x00000002 , 0x00000a8a + 00031200 0x00007c04 copy 0x0000003f , 0x00000006 + 00031201 0x00007c05 arg 0x000005e6 , 0x00000005 + 00031202 0x00007c06 call 0x00007a70 + 00031203 0x00007c07 fetch 0x00000002 , 0x00000a8c + 00031204 0x00007c08 copy 0x0000003f , 0x00000006 + 00031205 0x00007c09 call 0x00007a70 + 00031206 0x00007c0b setarg 0x0062746c + 00031207 0x00007c0c lshift8 0x0000003f , 0x0000003f + 00031208 0x00007c0d or_into 0x0000006b , 0x0000003f + 00031209 0x00007c0e istore 0x00000004 , 0x00000005 + 00031210 0x00007c0f arg 0x00000733 , 0x00000006 + 00031211 0x00007c10 force 0x00000003 , 0x00000039 + 00031212 0x00007c11 call 0x00007a71 + 00031213 0x00007c13 setarg 0x00800000 + 00031214 0x00007c14 lshift8 0x0000003f , 0x0000003f + 00031215 0x00007c15 istore 0x00000004 , 0x00000005 + 00031216 0x00007c16 force 0x00000000 , 0x0000003f + 00031217 0x00007c17 istore 0x00000008 , 0x00000005 + 00031218 0x00007c18 setarg 0x00000380 + 00031219 0x00007c19 istore 0x00000004 , 0x00000005 + 00031220 0x00007c1a call 0x00007912 + 00031221 0x00007c1c call 0x0000794e + 00031222 0x00007c1d arg 0x00000a3e , 0x00000006 + 00031223 0x00007c1e arg 0x00000706 , 0x00000005 + 00031224 0x00007c1f call 0x00007ebd + 00031225 0x00007c21 setarg 0x005c5c5c + 00031226 0x00007c22 lshift8 0x0000003f , 0x00000002 + 00031227 0x00007c23 or_into 0x0000005c , 0x00000002 + 00031228 0x00007c24 arg 0x00000a1e , 0x00000006 + 00031229 0x00007c25 force 0x00000006 , 0x00000039 + 00031230 0x00007c26 call 0x00007955 + 00031231 0x00007c27 call 0x0000790b + 00031232 0x00007c28 call 0x00007912 + 00031233 0x00007c29 arg 0x00000726 , 0x00000006 + 00031234 0x00007c2a arg 0x000005e6 , 0x00000005 + 00031235 0x00007c2b force 0x00000008 , 0x00000039 + 00031236 0x00007c2c call 0x00007a71 + 00031237 0x00007c2d setarg 0x00800000 + 00031238 0x00007c2e lshift8 0x0000003f , 0x0000003f + 00031239 0x00007c2f istore 0x00000004 , 0x00000005 + 00031240 0x00007c30 call 0x00007ec5 + 00031241 0x00007c31 setarg 0x00000300 + 00031242 0x00007c32 istore 0x00000004 , 0x00000005 + 00031243 0x00007c33 call 0x00007912 + 00031244 0x00007c34 branch 0x0000794e + 00031245 0x00007c38 fetch 0x00000001 , 0x00004662 + 00031246 0x00007c39 bne 0x00000002 , 0x00007a1e + 00031247 0x00007c3b bpatchx 0x000000ee , 0x0000403d + 00031248 0x00007c3c setarg 0x00363636 + 00031249 0x00007c3d lshift8 0x0000003f , 0x00000002 + 00031250 0x00007c3e or_into 0x00000036 , 0x00000002 + 00031251 0x00007c3f arg 0x00000a1e , 0x00000006 + 00031252 0x00007c40 force 0x00000006 , 0x00000039 + 00031253 0x00007c41 call 0x00007955 + 00031254 0x00007c42 call 0x0000790b + 00031255 0x00007c43 call 0x00007912 + 00031256 0x00007c44 arg 0x00000a3e , 0x00000006 + 00031257 0x00007c45 arg 0x000005e6 , 0x00000005 + 00031258 0x00007c46 call 0x00007a70 + 00031259 0x00007c47 arg 0x00000a2e , 0x00000006 + 00031260 0x00007c48 call 0x00007a70 + 00031261 0x00007c49 branch 0x00007a33 + 00031262 0x00007c4c setarg 0x00000000 + 00031263 0x00007c4d store 0x00000004 , 0x0000468a + 00031264 0x00007c4e branch 0x00007a0f + 00031265 0x00007c51 setarg 0x00000000 + 00031266 0x00007c52 store 0x00000004 , 0x0000468a + 00031267 0x00007c53 branch 0x00007a26 + 00031268 0x00007c57 fetch 0x00000001 , 0x00004662 + 00031269 0x00007c58 bne 0x00000002 , 0x00007a21 + 00031270 0x00007c5a setarg 0x00363636 + 00031271 0x00007c5b lshift8 0x0000003f , 0x00000002 + 00031272 0x00007c5c or_into 0x00000036 , 0x00000002 + 00031273 0x00007c5d arg 0x00000a1e , 0x00000006 + 00031274 0x00007c5e force 0x00000006 , 0x00000039 + 00031275 0x00007c5f call 0x00007955 + 00031276 0x00007c60 call 0x0000790b + 00031277 0x00007c61 call 0x00007912 + 00031278 0x00007c63 arg 0x00000a2e , 0x00000006 + 00031279 0x00007c64 arg 0x000005e6 , 0x00000005 + 00031280 0x00007c65 call 0x00007a70 + 00031281 0x00007c66 arg 0x00000a3e , 0x00000006 + 00031282 0x00007c67 call 0x00007a70 + 00031283 0x00007c69 setarg 0x00000000 + 00031284 0x00007c6a istore 0x00000008 , 0x00000005 + 00031285 0x00007c6b istore 0x00000004 , 0x00000005 + 00031286 0x00007c6c fetch 0x00000004 , 0x0000468a + 00031287 0x00007c6d istore 0x00000004 , 0x00000005 + 00031288 0x00007c6f copy 0x00000005 , 0x00000002 + 00031289 0x00007c70 jam 0x00000080 , 0x00000726 + 00031290 0x00007c71 copy 0x00000002 , 0x00000005 + 00031291 0x00007c72 arg 0x00000736 , 0x00000006 + 00031292 0x00007c73 call 0x00007a70 + 00031293 0x00007c75 call 0x00007912 + 00031294 0x00007c77 arg 0x000005e6 , 0x00000005 + 00031295 0x00007c78 force 0x00000007 , 0x00000039 + 00031296 0x00007c79 call 0x00007ec6 + 00031297 0x00007c7a istore 0x00000004 , 0x00000005 + 00031298 0x00007c7b setarg 0x000003f8 + 00031299 0x00007c7c istore 0x00000004 , 0x00000005 + 00031300 0x00007c7d call 0x00007912 + 00031301 0x00007c7e call 0x0000794e + 00031302 0x00007c80 arg 0x00000a3e , 0x00000006 + 00031303 0x00007c81 arg 0x00000706 , 0x00000005 + 00031304 0x00007c82 call 0x00007ebd + 00031305 0x00007c84 setarg 0x005c5c5c + 00031306 0x00007c85 lshift8 0x0000003f , 0x00000002 + 00031307 0x00007c86 or_into 0x0000005c , 0x00000002 + 00031308 0x00007c87 arg 0x00000a1e , 0x00000006 + 00031309 0x00007c88 force 0x00000006 , 0x00000039 + 00031310 0x00007c89 call 0x00007955 + 00031311 0x00007c8a call 0x0000790b + 00031312 0x00007c8b call 0x00007912 + 00031313 0x00007c8c arg 0x00000726 , 0x00000006 + 00031314 0x00007c8d arg 0x000005e6 , 0x00000005 + 00031315 0x00007c8e force 0x00000008 , 0x00000039 + 00031316 0x00007c8f call 0x00007a71 + 00031317 0x00007c90 setarg 0x00800000 + 00031318 0x00007c91 lshift8 0x0000003f , 0x0000003f + 00031319 0x00007c92 istore 0x00000004 , 0x00000005 + 00031320 0x00007c93 call 0x00007ec5 + 00031321 0x00007c94 setarg 0x00000300 + 00031322 0x00007c95 istore 0x00000004 , 0x00000005 + 00031323 0x00007c96 call 0x00007912 + 00031324 0x00007c97 branch 0x0000794e + 00031325 0x00007c9f jam 0x000000c0 , 0x000005e3 + 00031326 0x00007ca1 fetch 0x00000001 , 0x000005e3 + 00031327 0x00007ca2 rtn 0x00000034 + 00031328 0x00007ca3 increase 0xffffffff , 0x0000003f + 00031329 0x00007ca4 store 0x00000001 , 0x000005e3 + 00031330 0x00007ca5 arg 0x000006be , 0x00000006 + 00031331 0x00007ca6 call 0x000076ec + 00031332 0x00007ca7 branch 0x00007a5e , 0x00000001 + 00031333 0x00007ca8 arg 0x000005e6 , 0x00000006 + 00031334 0x00007ca9 arg 0x00000676 , 0x00000005 + 00031335 0x00007caa branch 0x000076f2 + 00031336 0x00007cad call 0x00007803 + 00031337 0x00007cae fetch 0x00000001 , 0x000005e3 + 00031338 0x00007caf increase 0xffffffff , 0x0000003f + 00031339 0x00007cb0 store 0x00000001 , 0x000005e3 + 00031340 0x00007cb1 arg 0x000006be , 0x00000006 + 00031341 0x00007cb2 call 0x000076ec + 00031342 0x00007cb3 rtn 0x00000001 + 00031343 0x00007cb4 branch 0x00007854 + 00031344 0x00007cb7 force 0x00000004 , 0x00000039 + 00031345 0x00007cb9 increase 0xfffffffc , 0x00000006 + 00031346 0x00007cbb ifetch 0x00000004 , 0x00000006 + 00031347 0x00007cbc istore 0x00000004 , 0x00000005 + 00031348 0x00007cbd increase 0xfffffff8 , 0x00000006 + 00031349 0x00007cbe loop 0x00007a72 + 00031350 0x00007cbf rtn + 00031351 0x00007cc5 bpatchx 0x000000ef , 0x0000403d + 00031352 0x00007cc6 fetch 0x00000001 , 0x000044be + 00031353 0x00007cc7 branch 0x00005af0 , 0x00000034 + 00031354 0x00007cc8 call 0x00005aec + 00031355 0x00007cc9 call 0x00007583 + 00031356 0x00007ccb branch 0x00007a7d + 00031357 0x00007cd1 fetch 0x00000001 , 0x000044c3 + 00031358 0x00007cd2 rtnne 0x00000000 + 00031359 0x00007cd3 fetch 0x00000001 , 0x000044c0 + 00031360 0x00007cd4 rtnne 0x00000000 + 00031361 0x00007cd6 arg 0x000045b2 , 0x00000005 + 00031362 0x00007cd7 force 0x0000000f , 0x00000007 + 00031363 0x00007cd8 call 0x000076a2 + 00031364 0x00007cd9 random 0x0000003f + 00031365 0x00007cda rshift 0x0000003f , 0x0000003f + 00031366 0x00007cdb istore 0x00000002 , 0x00000005 + 00031367 0x00007cdd arg 0x00000766 , 0x00000005 + 00031368 0x00007cde arg 0x000045b2 , 0x00000006 + 00031369 0x00007cdf call 0x00007ebd + 00031370 0x00007ce1 arg 0x00000646 , 0x00000005 + 00031371 0x00007ce2 arg 0x0000095e , 0x00000006 + 00031372 0x00007ce3 call 0x00007eb3 + 00031373 0x00007ce5 arg 0x00000686 , 0x00000005 + 00031374 0x00007ce6 call 0x00007ed0 + 00031375 0x00007ce7 jam 0x00000001 , 0x00000686 + 00031376 0x00007ce9 call 0x00007ac7 + 00031377 0x00007cea jam 0x00000003 , 0x000044c0 + 00031378 0x00007ceb rtn + 00031379 0x00007cee arg 0x000045d2 , 0x00000005 + 00031380 0x00007cef arg 0x000006a6 , 0x00000006 + 00031381 0x00007cf0 call 0x00007eb3 + 00031382 0x00007cf1 jam 0x00000003 , 0x000044c3 + 00031383 0x00007cf2 jam 0x00000000 , 0x000044c0 + 00031384 0x00007cf3 rtn + 00031385 0x00007cf8 fetch 0x00000001 , 0x000009b9 + 00031386 0x00007cf9 rtnne 0x00000000 + 00031387 0x00007cfa fetch 0x00000001 , 0x000044c0 + 00031388 0x00007cfb rtnne 0x00000000 + 00031389 0x00007cfd arg 0x00000766 , 0x00000005 + 00031390 0x00007cfe arg 0x000045b2 , 0x00000006 + 00031391 0x00007cff call 0x00007ebd + 00031392 0x00007d01 arg 0x00000646 , 0x00000005 + 00031393 0x00007d02 arg 0x000009be , 0x00000006 + 00031394 0x00007d03 call 0x00007eb3 + 00031395 0x00007d05 arg 0x00000686 , 0x00000005 + 00031396 0x00007d06 call 0x00007ed0 + 00031397 0x00007d07 jam 0x00000001 , 0x00000686 + 00031398 0x00007d09 call 0x00007ac7 + 00031399 0x00007d0a jam 0x00000004 , 0x000044c0 + 00031400 0x00007d0b rtn + 00031401 0x00007d10 arg 0x000009fe , 0x00000005 + 00031402 0x00007d11 arg 0x000006a6 , 0x00000006 + 00031403 0x00007d12 call 0x00007ebd + 00031404 0x00007d13 jam 0x00000003 , 0x000009b9 + 00031405 0x00007d14 jam 0x00000000 , 0x000044c0 + 00031406 0x00007d15 rtn + 00031407 0x00007d1a fetch 0x00000001 , 0x000044be + 00031408 0x00007d1b rtn 0x00000034 + 00031409 0x00007d1c fetch 0x00000001 , 0x000044c0 + 00031410 0x00007d1d rtn 0x00000034 + 00031411 0x00007d1e increase 0x00000080 , 0x0000003f + 00031412 0x00007d1f store 0x00000001 , 0x000044c0 + 00031413 0x00007d20 rtnbit1 0x00000007 + 00031414 0x00007d21 fetch 0x00000002 , 0x000005e3 + 00031415 0x00007d22 branch 0x00007ab9 , 0x00000034 + 00031416 0x00007d23 branch 0x00007abf + 00031417 0x00007d26 bpatchx 0x000000f0 , 0x0000403e + 00031418 0x00007d27 call 0x00007ad4 + 00031419 0x00007d28 fetch 0x00000001 , 0x000044c0 + 00031420 0x00007d29 beq 0x00000003 , 0x00007a93 + 00031421 0x00007d2a beq 0x00000004 , 0x00007aa9 + 00031422 0x00007d2b rtn + 00031423 0x00007d2f call 0x00007ae6 + 00031424 0x00007d30 fetch 0x00000002 , 0x000005e3 + 00031425 0x00007d31 increase 0xffffffff , 0x0000003f + 00031426 0x00007d32 store 0x00000002 , 0x000005e3 + 00031427 0x00007d33 arg 0x00000766 , 0x00000006 + 00031428 0x00007d34 call 0x000076ec + 00031429 0x00007d35 rtn 0x00000001 + 00031430 0x00007d36 branch 0x00007b37 + 00031431 0x00007d39 bpatchx 0x000000f1 , 0x0000403e + 00031432 0x00007d3a setarg 0x00000100 , 0x0000003f + 00031433 0x00007d3b store 0x00000002 , 0x000005e3 + 00031434 0x00007d3d fetch 0x00000002 , 0x000005e3 + 00031435 0x00007d3e rtn 0x00000034 + 00031436 0x00007d3f increase 0xffffffff , 0x0000003f + 00031437 0x00007d40 store 0x00000002 , 0x000005e3 + 00031438 0x00007d41 arg 0x00000766 , 0x00000006 + 00031439 0x00007d42 call 0x000076ec + 00031440 0x00007d43 branch 0x00007aca , 0x00000001 + 00031441 0x00007d44 arg 0x00000646 , 0x00000006 + 00031442 0x00007d45 arg 0x00000706 , 0x00000005 + 00031443 0x00007d46 branch 0x00007eb2 + 00031444 0x00007d4a arg 0x00000746 , 0x00000011 + 00031445 0x00007d4b arg 0x00000846 , 0x00000005 + 00031446 0x00007d4c call 0x00007ba3 + 00031447 0x00007d4d arg 0x00000846 , 0x00000011 + 00031448 0x00007d4e arg 0x000007e6 , 0x00000005 + 00031449 0x00007d4f call 0x00007c79 + 00031450 0x00007d50 arg 0x00000706 , 0x00000011 + 00031451 0x00007d51 arg 0x000007e6 , 0x00000012 + 00031452 0x00007d52 arg 0x000006a6 , 0x00000005 + 00031453 0x00007d53 call 0x00007be1 + 00031454 0x00007d54 arg 0x00000846 , 0x00000011 + 00031455 0x00007d55 arg 0x000007e6 , 0x00000012 + 00031456 0x00007d56 arg 0x00000826 , 0x00000005 + 00031457 0x00007d57 call 0x00007be1 + 00031458 0x00007d58 arg 0x00000726 , 0x00000011 + 00031459 0x00007d59 arg 0x00000826 , 0x00000012 + 00031460 0x00007d5a arg 0x000006c6 , 0x00000005 + 00031461 0x00007d5b branch 0x00007be1 + 00031462 0x00007d5e arg 0x00000746 , 0x00000011 + 00031463 0x00007d5f arg 0x00000826 , 0x00000005 + 00031464 0x00007d60 call 0x00007c79 + 00031465 0x00007d61 arg 0x00000826 , 0x00000011 + 00031466 0x00007d62 arg 0x00000846 , 0x00000005 + 00031467 0x00007d63 call 0x00007c79 + 00031468 0x00007d65 arg 0x0000093e , 0x00000011 + 00031469 0x00007d66 arg 0x00000846 , 0x00000012 + 00031470 0x00007d67 arg 0x00000846 , 0x00000005 + 00031471 0x00007d68 call 0x00007be1 + 00031472 0x00007d69 arg 0x00000706 , 0x00000011 + 00031473 0x00007d6a arg 0x00000826 , 0x00000005 + 00031474 0x00007d6b call 0x00007c79 + 00031475 0x00007d6d arg 0x00000826 , 0x00000006 + 00031476 0x00007d6e arg 0x000007e6 , 0x00000005 + 00031477 0x00007d6f call 0x00007ebd + 00031478 0x00007d70 arg 0x000007e6 , 0x00000011 + 00031479 0x00007d71 call 0x00007c80 + 00031480 0x00007d72 arg 0x00000826 , 0x00000011 + 00031481 0x00007d73 arg 0x000007e6 , 0x00000012 + 00031482 0x00007d74 arg 0x00000826 , 0x00000005 + 00031483 0x00007d75 call 0x00007c7d + 00031484 0x00007d77 arg 0x00000826 , 0x00000011 + 00031485 0x00007d78 arg 0x00000846 , 0x00000012 + 00031486 0x00007d79 arg 0x00000826 , 0x00000005 + 00031487 0x00007d7a call 0x00007c7d + 00031488 0x00007d7c arg 0x00000706 , 0x00000006 + 00031489 0x00007d7d arg 0x000007e6 , 0x00000005 + 00031490 0x00007d7e call 0x00007ebd + 00031491 0x00007d7f arg 0x00000726 , 0x00000011 + 00031492 0x00007d80 arg 0x00000846 , 0x00000005 + 00031493 0x00007d81 call 0x00007c79 + 00031494 0x00007d82 arg 0x000007e6 , 0x00000011 + 00031495 0x00007d83 call 0x00007c80 + 00031496 0x00007d84 arg 0x000007e6 , 0x00000011 + 00031497 0x00007d85 call 0x00007c80 + 00031498 0x00007d86 arg 0x000007e6 , 0x00000011 + 00031499 0x00007d87 arg 0x00000846 , 0x00000012 + 00031500 0x00007d88 arg 0x000007e6 , 0x00000005 + 00031501 0x00007d89 call 0x00007be1 + 00031502 0x00007d8a arg 0x00000846 , 0x00000011 + 00031503 0x00007d8b arg 0x00000806 , 0x00000005 + 00031504 0x00007d8c call 0x00007c79 + 00031505 0x00007d8d arg 0x00000806 , 0x00000011 + 00031506 0x00007d8e call 0x00007c80 + 00031507 0x00007d8f arg 0x00000806 , 0x00000011 + 00031508 0x00007d90 call 0x00007c80 + 00031509 0x00007d91 arg 0x00000806 , 0x00000011 + 00031510 0x00007d92 call 0x00007c80 + 00031511 0x00007d93 arg 0x00000726 , 0x00000006 + 00031512 0x00007d94 arg 0x00000846 , 0x00000005 + 00031513 0x00007d95 call 0x00007ebd + 00031514 0x00007d96 arg 0x00000846 , 0x00000011 + 00031515 0x00007d97 call 0x00007c80 + 00031516 0x00007d98 arg 0x00000846 , 0x00000011 + 00031517 0x00007d99 arg 0x00000746 , 0x00000012 + 00031518 0x00007d9a arg 0x00000746 , 0x00000005 + 00031519 0x00007d9b call 0x00007be1 + 00031520 0x00007d9e arg 0x00000826 , 0x00000011 + 00031521 0x00007d9f arg 0x00000846 , 0x00000005 + 00031522 0x00007da0 call 0x00007c79 + 00031523 0x00007da2 arg 0x00000846 , 0x00000011 + 00031524 0x00007da3 arg 0x000007e6 , 0x00000012 + 00031525 0x00007da4 arg 0x00000846 , 0x00000005 + 00031526 0x00007da5 call 0x00007c96 + 00031527 0x00007da6 arg 0x00000846 , 0x00000011 + 00031528 0x00007da7 arg 0x000007e6 , 0x00000012 + 00031529 0x00007da8 arg 0x00000706 , 0x00000005 + 00031530 0x00007da9 call 0x00007c96 + 00031531 0x00007daa arg 0x000007e6 , 0x00000011 + 00031532 0x00007dab arg 0x00000706 , 0x00000012 + 00031533 0x00007dac arg 0x00000846 , 0x00000005 + 00031534 0x00007dad call 0x00007c96 + 00031535 0x00007dae arg 0x00000846 , 0x00000011 + 00031536 0x00007daf arg 0x00000826 , 0x00000012 + 00031537 0x00007db0 arg 0x00000846 , 0x00000005 + 00031538 0x00007db1 call 0x00007be1 + 00031539 0x00007db2 arg 0x00000846 , 0x00000011 + 00031540 0x00007db3 arg 0x00000806 , 0x00000012 + 00031541 0x00007db4 arg 0x00000726 , 0x00000005 + 00031542 0x00007db5 branch 0x00007c96 + 00031543 0x00007db9 arg 0x00000686 , 0x00000011 + 00031544 0x00007dba arg 0x00000866 , 0x00000005 + 00031545 0x00007dbb call 0x00007c79 + 00031546 0x00007dbc arg 0x00000706 , 0x00000011 + 00031547 0x00007dbd arg 0x00000866 , 0x00000012 + 00031548 0x00007dbe arg 0x00000806 , 0x00000005 + 00031549 0x00007dbf call 0x00007be1 + 00031550 0x00007dc2 arg 0x00000686 , 0x00000011 + 00031551 0x00007dc3 arg 0x00000866 , 0x00000012 + 00031552 0x00007dc4 arg 0x00000866 , 0x00000005 + 00031553 0x00007dc5 call 0x00007be1 + 00031554 0x00007dc6 arg 0x00000726 , 0x00000011 + 00031555 0x00007dc7 arg 0x00000866 , 0x00000012 + 00031556 0x00007dc8 arg 0x000007e6 , 0x00000005 + 00031557 0x00007dc9 call 0x00007be1 + 00031558 0x00007dcc arg 0x00000746 , 0x00000011 + 00031559 0x00007dcd arg 0x00000866 , 0x00000005 + 00031560 0x00007dce call 0x00007c79 + 00031561 0x00007dcf arg 0x00000646 , 0x00000011 + 00031562 0x00007dd0 arg 0x00000866 , 0x00000012 + 00031563 0x00007dd1 arg 0x00000826 , 0x00000005 + 00031564 0x00007dd2 call 0x00007be1 + 00031565 0x00007dd4 arg 0x00000746 , 0x00000011 + 00031566 0x00007dd5 arg 0x00000866 , 0x00000012 + 00031567 0x00007dd6 arg 0x00000866 , 0x00000005 + 00031568 0x00007dd7 call 0x00007be1 + 00031569 0x00007dd8 arg 0x00000666 , 0x00000011 + 00031570 0x00007dd9 arg 0x00000866 , 0x00000012 + 00031571 0x00007dda arg 0x00000846 , 0x00000005 + 00031572 0x00007ddb call 0x00007be1 + 00031573 0x00007de0 arg 0x00000806 , 0x00000012 + 00031574 0x00007de1 arg 0x00000826 , 0x00000011 + 00031575 0x00007de2 arg 0x00000866 , 0x00000005 + 00031576 0x00007de3 call 0x00007c96 + 00031577 0x00007de4 arg 0x00000806 , 0x00000011 + 00031578 0x00007de5 arg 0x00000826 , 0x00000012 + 00031579 0x00007de6 arg 0x00000806 , 0x00000005 + 00031580 0x00007de7 call 0x00007c7d + 00031581 0x00007dea arg 0x000007e6 , 0x00000012 + 00031582 0x00007deb arg 0x00000846 , 0x00000011 + 00031583 0x00007dec arg 0x00000826 , 0x00000005 + 00031584 0x00007ded call 0x00007c96 + 00031585 0x00007dee arg 0x000007e6 , 0x00000011 + 00031586 0x00007def arg 0x00000846 , 0x00000012 + 00031587 0x00007df0 arg 0x000007e6 , 0x00000005 + 00031588 0x00007df1 call 0x00007c7d + 00031589 0x00007df2 arg 0x000007e6 , 0x00000011 + 00031590 0x00007df3 arg 0x00000866 , 0x00000012 + 00031591 0x00007df4 arg 0x000007e6 , 0x00000005 + 00031592 0x00007df5 call 0x00007be1 + 00031593 0x00007df6 arg 0x00000746 , 0x00000011 + 00031594 0x00007df7 arg 0x00000686 , 0x00000012 + 00031595 0x00007df8 arg 0x00000846 , 0x00000005 + 00031596 0x00007df9 call 0x00007be1 + 00031597 0x00007dfa arg 0x00000846 , 0x00000011 + 00031598 0x00007dfb arg 0x00000866 , 0x00000012 + 00031599 0x00007dfc arg 0x00000746 , 0x00000005 + 00031600 0x00007dfd call 0x00007be1 + 00031601 0x00007dff arg 0x00000866 , 0x00000011 + 00031602 0x00007e00 arg 0x00000866 , 0x00000005 + 00031603 0x00007e01 call 0x00007c79 + 00031604 0x00007e02 arg 0x00000866 , 0x00000011 + 00031605 0x00007e03 arg 0x00000806 , 0x00000012 + 00031606 0x00007e04 arg 0x00000846 , 0x00000005 + 00031607 0x00007e05 call 0x00007be1 + 00031608 0x00007e06 arg 0x00000866 , 0x00000011 + 00031609 0x00007e07 arg 0x000007e6 , 0x00000012 + 00031610 0x00007e08 arg 0x000007e6 , 0x00000005 + 00031611 0x00007e09 call 0x00007be1 + 00031612 0x00007e0a arg 0x00000826 , 0x00000011 + 00031613 0x00007e0b arg 0x00000706 , 0x00000005 + 00031614 0x00007e0c call 0x00007c79 + 00031615 0x00007e0d arg 0x00000706 , 0x00000011 + 00031616 0x00007e0e arg 0x00000846 , 0x00000012 + 00031617 0x00007e0f arg 0x00000706 , 0x00000005 + 00031618 0x00007e10 call 0x00007c96 + 00031619 0x00007e11 arg 0x00000706 , 0x00000006 + 00031620 0x00007e12 arg 0x00000866 , 0x00000005 + 00031621 0x00007e13 call 0x00007ebd + 00031622 0x00007e14 arg 0x00000866 , 0x00000011 + 00031623 0x00007e15 call 0x00007c80 + 00031624 0x00007e16 arg 0x00000846 , 0x00000011 + 00031625 0x00007e17 arg 0x00000866 , 0x00000012 + 00031626 0x00007e18 arg 0x00000846 , 0x00000005 + 00031627 0x00007e19 call 0x00007c96 + 00031628 0x00007e1a arg 0x00000846 , 0x00000011 + 00031629 0x00007e1b arg 0x00000826 , 0x00000012 + 00031630 0x00007e1c arg 0x00000826 , 0x00000005 + 00031631 0x00007e1d call 0x00007be1 + 00031632 0x00007e1e arg 0x00000826 , 0x00000011 + 00031633 0x00007e1f arg 0x000007e6 , 0x00000012 + 00031634 0x00007e20 arg 0x00000726 , 0x00000005 + 00031635 0x00007e21 call 0x00007c96 + 00031636 0x00007e22 arg 0x00000726 , 0x00000011 + 00031637 0x00007e23 arg 0x0000091e , 0x00000012 + 00031638 0x00007e24 arg 0x00000726 , 0x00000005 + 00031639 0x00007e25 force 0x00000000 , 0x00000013 + 00031640 0x00007e26 fetch 0x00000001 , 0x00000726 + 00031641 0x00007e27 isolate1 0x00000000 , 0x0000003f + 00031642 0x00007e28 call 0x00007c7b , 0x00000001 + 00031643 0x00007e29 copy 0x00000013 , 0x00000030 + 00031644 0x00007e2a arg 0x00000726 , 0x00000011 + 00031645 0x00007e2b call 0x00007cab + 00031646 0x00007e2c fetch 0x00000001 , 0x00000745 + 00031647 0x00007e2d isolate1 0x00000000 , 0x00000030 + 00031648 0x00007e2e setflag 0x00000001 , 0x00000007 , 0x0000003f + 00031649 0x00007e2f store 0x00000001 , 0x00000745 + 00031650 0x00007e30 rtn + 00031651 0x00007e33 copy 0x00000005 , 0x0000000b + 00031652 0x00007e34 arg 0x00000806 , 0x00000005 + 00031653 0x00007e35 call 0x00007ed0 + 00031654 0x00007e36 force 0x00000000 , 0x0000003f + 00031655 0x00007e38 store 0x00000004 , 0x00000826 + 00031656 0x00007e39 jam 0x00000001 , 0x00000806 + 00031657 0x00007e3a arg 0x00000786 , 0x00000005 + 00031658 0x00007e3b call 0x00007ed2 + 00031659 0x00007e3c arg 0x0000091e , 0x00000006 + 00031660 0x00007e3d arg 0x000007c6 , 0x00000005 + 00031661 0x00007e3e call 0x00007ebd + 00031662 0x00007e3f copy 0x00000011 , 0x00000006 + 00031663 0x00007e40 arg 0x000007e6 , 0x00000005 + 00031664 0x00007e41 call 0x00007ebd + 00031665 0x00007e48 arg 0x000007e6 , 0x00000006 + 00031666 0x00007e49 call 0x00007cb5 + 00031667 0x00007e4a branch 0x00007bda , 0x00000034 + 00031668 0x00007e4f arg 0x000007e6 , 0x00000011 + 00031669 0x00007e50 arg 0x00000806 , 0x00000012 + 00031670 0x00007e51 call 0x00007cb8 + 00031671 0x00007e52 arg 0x000007c6 , 0x00000011 + 00031672 0x00007e53 arg 0x00000786 , 0x00000012 + 00031673 0x00007e54 call 0x00007cb8 + 00031674 0x00007e56 arg 0x000007e6 , 0x00000011 + 00031675 0x00007e57 arg 0x000007c6 , 0x00000012 + 00031676 0x00007e58 call 0x00007cb1 + 00031677 0x00007e59 branch 0x00007bcc , 0x00000002 + 00031678 0x00007e5a arg 0x000007c6 , 0x00000011 + 00031679 0x00007e5b arg 0x000007e6 , 0x00000012 + 00031680 0x00007e5c copy 0x00000011 , 0x00000005 + 00031681 0x00007e5d call 0x00007ca9 + 00031682 0x00007e5e arg 0x00000806 , 0x00000011 + 00031683 0x00007e5f arg 0x00000786 , 0x00000012 + 00031684 0x00007e60 copy 0x00000012 , 0x00000005 + 00031685 0x00007e61 call 0x00007c7b + 00031686 0x00007e62 ifetch 0x00000001 , 0x00000011 + 00031687 0x00007e63 iadd 0x00000013 , 0x00000013 + 00031688 0x00007e64 ifetch 0x00000001 , 0x00000012 + 00031689 0x00007e65 iadd 0x00000013 , 0x0000003f + 00031690 0x00007e66 istore 0x00000001 , 0x00000012 + 00031691 0x00007e67 branch 0x00007bb1 + 00031692 0x00007e69 arg 0x000007e6 , 0x00000011 + 00031693 0x00007e6a arg 0x000007c6 , 0x00000012 + 00031694 0x00007e6b copy 0x00000011 , 0x00000005 + 00031695 0x00007e6c call 0x00007ca9 + 00031696 0x00007e6d arg 0x00000786 , 0x00000011 + 00031697 0x00007e6e arg 0x00000806 , 0x00000012 + 00031698 0x00007e6f copy 0x00000012 , 0x00000005 + 00031699 0x00007e70 call 0x00007c7b + 00031700 0x00007e71 ifetch 0x00000001 , 0x00000011 + 00031701 0x00007e72 iadd 0x00000013 , 0x00000013 + 00031702 0x00007e73 ifetch 0x00000001 , 0x00000012 + 00031703 0x00007e74 iadd 0x00000013 , 0x0000003f + 00031704 0x00007e75 istore 0x00000001 , 0x00000012 + 00031705 0x00007e76 branch 0x00007bb1 + 00031706 0x00007e79 arg 0x00000786 , 0x00000011 + 00031707 0x00007e7a copy 0x0000000b , 0x00000005 + 00031708 0x00007e7b call 0x00007c0a + 00031709 0x00007e7d arg 0x0000091e , 0x00000011 + 00031710 0x00007e7e copy 0x0000000b , 0x00000012 + 00031711 0x00007e7f copy 0x0000000b , 0x00000005 + 00031712 0x00007e80 branch 0x00007c96 + 00031713 0x00007e84 copy 0x00000005 , 0x0000000b + 00031714 0x00007e86 force 0x00000000 , 0x00000038 + 00031715 0x00007e88 arg 0x00000786 , 0x00000005 + 00031716 0x00007e89 call 0x00007ed2 + 00031717 0x00007e8a arg 0x00000ad2 , 0x00000005 + 00031718 0x00007e8b call 0x00007ed2 + 00031719 0x00007e8f copy 0x00000011 , 0x00000006 + 00031720 0x00007e91 jam 0x00000000 , 0x00000ad2 + 00031721 0x00007e92 setarg 0x00000000 + 00031722 0x00007e93 call 0x00007c73 + 00031723 0x00007e94 copy 0x00000012 , 0x00000006 + 00031724 0x00007e95 call 0x00007c77 + 00031725 0x00007e98 force 0x00000000 , 0x00000007 + 00031726 0x00007e99 arg 0x00000786 , 0x00000005 + 00031727 0x00007e9d arg 0x00000ad2 , 0x00000002 + 00031728 0x00007e9e copy 0x00000007 , 0x00000012 + 00031729 0x00007e9f lshift2 0x00000012 , 0x0000003f + 00031730 0x00007ea1 iadd 0x00000002 , 0x00000012 + 00031731 0x00007ea2 force 0x00000000 , 0x00000002 + 00031732 0x00007ea3 force 0x00000000 , 0x00000013 + 00031733 0x00007ea9 ifetch 0x00000004 , 0x00000005 + 00031734 0x00007eaa iforce 0x00000011 + 00031735 0x00007ead ifetch 0x00000004 , 0x00000012 + 00031736 0x00007eae copy 0x00000013 , 0x00000038 + 00031737 0x00007eaf imul32 0x0000002f , 0x0000003f + 00031738 0x00007eb0 iadd 0x00000011 , 0x0000003f + 00031739 0x00007eb1 iadd 0x00000002 , 0x0000003f + 00031740 0x00007eb2 istore 0x00000004 , 0x00000005 + 00031741 0x00007eb3 rshift32 0x0000003f , 0x00000002 + 00031742 0x00007eb4 increase 0x00000001 , 0x00000013 + 00031743 0x00007eb5 compare 0x00000008 , 0x00000013 , 0x000000ff + 00031744 0x00007eb6 nbranch 0x00007bf5 , 0x00000001 + 00031745 0x00007eb8 deposit 0x00000002 + 00031746 0x00007eb9 istore 0x00000004 , 0x00000005 + 00031747 0x00007eba increase 0xffffffe0 , 0x00000005 + 00031748 0x00007ebd increase 0x00000001 , 0x00000007 + 00031749 0x00007ebe compare 0x00000008 , 0x00000007 , 0x000000ff + 00031750 0x00007ebf nbranch 0x00007bef , 0x00000001 + 00031751 0x00007ec0 arg 0x00000786 , 0x00000011 + 00031752 0x00007ec1 copy 0x0000000b , 0x00000005 + 00031753 0x00007ec2 branch 0x00007c0a + 00031754 0x00007ec5 bpatchx 0x000000f2 , 0x0000403e + 00031755 0x00007ec6 copy 0x00000005 , 0x0000000b + 00031756 0x00007ec7 copy 0x00000011 , 0x00000030 + 00031757 0x00007ec8 arg 0x000007c6 , 0x00000012 + 00031758 0x00007ec9 copy 0x00000012 , 0x00000005 + 00031759 0x00007eca call 0x00007ecd + 00031760 0x00007ecb istore 0x00000008 , 0x00000005 + 00031761 0x00007ecc add 0x00000011 , 0x0000002c , 0x00000006 + 00031762 0x00007ecd call 0x00007eb9 + 00031763 0x00007ece call 0x00007eb5 + 00031764 0x00007ecf copy 0x00000012 , 0x00000011 + 00031765 0x00007ed0 call 0x00007c80 + 00031766 0x00007ed1 arg 0x000007c6 , 0x00000012 + 00031767 0x00007ed2 copy 0x00000030 , 0x00000011 + 00031768 0x00007ed3 copy 0x0000000b , 0x00000005 + 00031769 0x00007ed4 call 0x00007c7d + 00031770 0x00007ed6 arg 0x000007c6 , 0x00000012 + 00031771 0x00007ed7 copy 0x00000012 , 0x00000005 + 00031772 0x00007ed8 call 0x00007ecd + 00031773 0x00007ed9 istore 0x00000008 , 0x00000005 + 00031774 0x00007eda add 0x00000030 , 0x00000030 , 0x00000006 + 00031775 0x00007edb call 0x00007ebf + 00031776 0x00007edc call 0x00007ecd + 00031777 0x00007edd copy 0x00000012 , 0x00000011 + 00031778 0x00007ede call 0x00007c80 + 00031779 0x00007ee2 arg 0x000007c6 , 0x00000012 + 00031780 0x00007ee3 copy 0x0000000b , 0x00000011 + 00031781 0x00007ee4 copy 0x00000011 , 0x00000005 + 00031782 0x00007ee5 call 0x00007c7d + 00031783 0x00007ee9 arg 0x000007c6 , 0x00000012 + 00031784 0x00007eea copy 0x00000012 , 0x00000005 + 00031785 0x00007eeb add 0x00000030 , 0x00000020 , 0x00000006 + 00031786 0x00007eec call 0x00007eb5 + 00031787 0x00007eed call 0x00007ecd + 00031788 0x00007eee istore 0x00000008 , 0x00000005 + 00031789 0x00007eef add 0x00000030 , 0x00000038 , 0x00000006 + 00031790 0x00007ef0 call 0x00007eb9 + 00031791 0x00007ef1 copy 0x0000000b , 0x00000011 + 00031792 0x00007ef2 copy 0x00000011 , 0x00000005 + 00031793 0x00007ef3 call 0x00007c7d + 00031794 0x00007ef7 arg 0x000007c6 , 0x00000012 + 00031795 0x00007ef8 copy 0x00000012 , 0x00000005 + 00031796 0x00007ef9 add 0x00000030 , 0x00000024 , 0x00000006 + 00031797 0x00007efa call 0x00007eb5 + 00031798 0x00007efb add 0x00000030 , 0x00000034 , 0x00000006 + 00031799 0x00007efc call 0x00007eb5 + 00031800 0x00007efd add 0x00000030 , 0x00000034 , 0x00000006 + 00031801 0x00007efe call 0x00007eb6 + 00031802 0x00007eff add 0x00000030 , 0x00000020 , 0x00000006 + 00031803 0x00007f00 call 0x00007eb6 + 00031804 0x00007f01 copy 0x0000000b , 0x00000011 + 00031805 0x00007f02 copy 0x00000011 , 0x00000005 + 00031806 0x00007f03 call 0x00007c7d + 00031807 0x00007f06 arg 0x000007c6 , 0x00000012 + 00031808 0x00007f07 copy 0x00000012 , 0x00000005 + 00031809 0x00007f08 add 0x00000030 , 0x0000002c , 0x00000006 + 00031810 0x00007f09 call 0x00007eb5 + 00031811 0x00007f0a call 0x00007ecd + 00031812 0x00007f0b istore 0x00000008 , 0x00000005 + 00031813 0x00007f0c add 0x00000030 , 0x00000020 , 0x00000006 + 00031814 0x00007f0d call 0x00007eb6 + 00031815 0x00007f0e add 0x00000030 , 0x00000028 , 0x00000006 + 00031816 0x00007f0f call 0x00007eb6 + 00031817 0x00007f10 copy 0x0000000b , 0x00000011 + 00031818 0x00007f11 copy 0x00000011 , 0x00000005 + 00031819 0x00007f12 call 0x00007c96 + 00031820 0x00007f15 arg 0x000007c6 , 0x00000012 + 00031821 0x00007f16 copy 0x00000012 , 0x00000005 + 00031822 0x00007f17 add 0x00000030 , 0x00000030 , 0x00000006 + 00031823 0x00007f18 call 0x00007eb9 + 00031824 0x00007f19 call 0x00007eb9 + 00031825 0x00007f1a force 0x00000000 , 0x0000003f + 00031826 0x00007f1b istore 0x00000008 , 0x00000005 + 00031827 0x00007f1c add 0x00000030 , 0x00000024 , 0x00000006 + 00031828 0x00007f1d call 0x00007eb6 + 00031829 0x00007f1e add 0x00000030 , 0x0000002c , 0x00000006 + 00031830 0x00007f1f call 0x00007eb6 + 00031831 0x00007f20 copy 0x0000000b , 0x00000011 + 00031832 0x00007f21 copy 0x00000011 , 0x00000005 + 00031833 0x00007f22 call 0x00007c96 + 00031834 0x00007f25 arg 0x000007c6 , 0x00000012 + 00031835 0x00007f26 copy 0x00000012 , 0x00000005 + 00031836 0x00007f27 add 0x00000030 , 0x00000034 , 0x00000006 + 00031837 0x00007f28 call 0x00007eb5 + 00031838 0x00007f29 add 0x00000030 , 0x00000020 , 0x00000006 + 00031839 0x00007f2a call 0x00007eb5 + 00031840 0x00007f2b call 0x00007ecd + 00031841 0x00007f2c add 0x00000030 , 0x00000030 , 0x00000006 + 00031842 0x00007f2d call 0x00007eb6 + 00031843 0x00007f2e copy 0x0000000b , 0x00000011 + 00031844 0x00007f2f copy 0x00000011 , 0x00000005 + 00031845 0x00007f30 call 0x00007c96 + 00031846 0x00007f33 arg 0x000007c6 , 0x00000012 + 00031847 0x00007f34 copy 0x00000012 , 0x00000005 + 00031848 0x00007f35 add 0x00000030 , 0x00000038 , 0x00000006 + 00031849 0x00007f36 call 0x00007eb9 + 00031850 0x00007f37 call 0x00007ecd + 00031851 0x00007f38 add 0x00000030 , 0x00000024 , 0x00000006 + 00031852 0x00007f39 call 0x00007eb5 + 00031853 0x00007f3a call 0x00007ecd + 00031854 0x00007f3b add 0x00000030 , 0x00000034 , 0x00000006 + 00031855 0x00007f3c call 0x00007eb6 + 00031856 0x00007f3d copy 0x0000000b , 0x00000011 + 00031857 0x00007f3e copy 0x00000011 , 0x00000005 + 00031858 0x00007f3f branch 0x00007c96 + 00031859 0x00007f43 force 0x00000020 , 0x00000039 + 00031860 0x00007f44 arg 0x00000ad2 , 0x00000005 + 00031861 0x00007f45 iadd 0x00000005 , 0x00000005 + 00031862 0x00007f46 branch 0x00007f01 + 00031863 0x00007f49 force 0x00000008 , 0x00000039 + 00031864 0x00007f4a branch 0x00007781 + 00031865 0x00007f4d copy 0x00000011 , 0x00000012 + 00031866 0x00007f4e branch 0x00007be1 + 00031867 0x00007f51 force 0x00000008 , 0x00000039 + 00031868 0x00007f52 branch 0x00007712 + 00031869 0x00007f55 call 0x00007c7b + 00031870 0x00007f56 copy 0x00000005 , 0x00000011 + 00031871 0x00007f57 branch 0x00007c81 + 00031872 0x00007f5a call 0x00007cae + 00031873 0x00007f5c isolate1 0x00000000 , 0x00000013 + 00031874 0x00007f5d branch 0x00007c8a , 0x00000001 + 00031875 0x00007f5e arg 0x0000091e , 0x00000012 + 00031876 0x00007f5f copy 0x00000011 , 0x00000013 + 00031877 0x00007f60 increase 0xffffffe0 , 0x00000011 + 00031878 0x00007f61 call 0x00007cb1 + 00031879 0x00007f62 nrtn 0x00000002 + 00031880 0x00007f63 copy 0x00000013 , 0x00000011 + 00031881 0x00007f64 branch 0x00007c92 + 00031882 0x00007f67 call 0x00007c92 + 00031883 0x00007f69 copy 0x00000011 , 0x00000013 + 00031884 0x00007f6a increase 0xffffffe0 , 0x00000011 + 00031885 0x00007f6b arg 0x0000091e , 0x00000012 + 00031886 0x00007f6c call 0x00007cb1 + 00031887 0x00007f6d nrtn 0x00000002 + 00031888 0x00007f6e copy 0x00000013 , 0x00000011 + 00031889 0x00007f6f branch 0x00007c92 + 00031890 0x00007f73 increase 0xffffffe0 , 0x00000011 + 00031891 0x00007f74 arg 0x0000091e , 0x00000012 + 00031892 0x00007f75 copy 0x00000011 , 0x00000005 + 00031893 0x00007f76 branch 0x00007ca9 + 00031894 0x00007f7c call 0x00007ca9 + 00031895 0x00007f7e branch 0x00007ca0 , 0x00000001 + 00031896 0x00007f81 add 0x00000005 , 0xffffffe0 , 0x00000011 + 00031897 0x00007f82 arg 0x0000091e , 0x00000012 + 00031898 0x00007f83 call 0x00007cb1 + 00031899 0x00007f84 nrtn 0x00000002 + 00031900 0x00007f85 arg 0x0000091e , 0x00000012 + 00031901 0x00007f86 add 0x00000005 , 0xffffffe0 , 0x00000011 + 00031902 0x00007f88 copy 0x00000011 , 0x00000005 + 00031903 0x00007f89 branch 0x00007ca9 + 00031904 0x00007f8b add 0x00000005 , 0xffffffe0 , 0x00000011 + 00031905 0x00007f8c arg 0x0000091e , 0x00000012 + 00031906 0x00007f8d copy 0x00000011 , 0x00000005 + 00031907 0x00007f8e call 0x00007c7b + 00031908 0x00007f90 rtn 0x00000001 + 00031909 0x00007f91 add 0x00000005 , 0xffffffe0 , 0x00000011 + 00031910 0x00007f92 arg 0x0000091e , 0x00000012 + 00031911 0x00007f93 copy 0x00000011 , 0x00000005 + 00031912 0x00007f94 branch 0x00007c7b + 00031913 0x00007f99 force 0x00000008 , 0x00000039 + 00031914 0x00007f9a branch 0x00007720 + 00031915 0x00007f9d force 0x00000008 , 0x00000039 + 00031916 0x00007f9e increase 0x0000001c , 0x00000011 + 00031917 0x00007f9f branch 0x0000772f + 00031918 0x00007fa2 force 0x00000008 , 0x00000039 + 00031919 0x00007fa3 force 0x00000000 , 0x00000013 + 00031920 0x00007fa4 branch 0x0000773d + 00031921 0x00007fa7 force 0x00000008 , 0x00000039 + 00031922 0x00007fa8 increase 0x0000001c , 0x00000011 + 00031923 0x00007fa9 increase 0x0000001c , 0x00000012 + 00031924 0x00007faa branch 0x00007707 + 00031925 0x00007fae ifetch 0x00000008 , 0x00000006 + 00031926 0x00007faf nrtn 0x00000034 + 00031927 0x00007fb0 branch 0x000076f5 + 00031928 0x00007fb6 copy 0x00000011 , 0x00000030 + 00031929 0x00007fb8 copy 0x00000030 , 0x00000011 + 00031930 0x00007fb9 ifetch 0x00000001 , 0x00000011 + 00031931 0x00007fba isolate1 0x00000000 , 0x0000003f + 00031932 0x00007fbb rtn 0x00000001 + 00031933 0x00007fbc call 0x00007cab + 00031934 0x00007fbd ifetch 0x00000001 , 0x00000012 + 00031935 0x00007fbe isolate0 0x00000000 , 0x0000003f + 00031936 0x00007fbf branch 0x00007cc8 , 0x00000001 + 00031937 0x00007fc0 arg 0x0000091e , 0x00000011 + 00031938 0x00007fc1 copy 0x00000012 , 0x00000005 + 00031939 0x00007fc2 call 0x00007c7b + 00031940 0x00007fc3 ifetch 0x00000001 , 0x00000012 + 00031941 0x00007fc4 iadd 0x00000013 , 0x0000003f + 00031942 0x00007fc5 istore 0x00000001 , 0x00000012 + 00031943 0x00007fc6 increase 0xffffffe0 , 0x00000012 + 00031944 0x00007fc8 add 0x00000012 , 0x00000020 , 0x00000011 + 00031945 0x00007fc9 force 0x00000009 , 0x00000039 + 00031946 0x00007fca call 0x0000772f + 00031947 0x00007fcb branch 0x00007cb9 + 00031948 0x00007fd0 call 0x00002c65 + 00031949 0x00007fd1 rtn 0x0000002b + 00031950 0x00007fd2 call 0x00007cd3 + 00031951 0x00007fd3 call 0x00007d75 + 00031952 0x00007fd4 branch 0x00007d08 + 00031953 0x00007fd7 call 0x00007d29 + 00031954 0x00007fd9 branch 0x00007d64 + 00031955 0x00007fdc fetch 0x00000001 , 0x00004686 + 00031956 0x00007fdd rtneq 0x000000ff + 00031957 0x00007fde iforce 0x00000002 + 00031958 0x00007fdf call 0x0000680e + 00031959 0x00007fe0 fetcht 0x00000001 , 0x00004686 + 00031960 0x00007fe1 call 0x00006825 + 00031961 0x00007fe2 nop 0x00000064 + 00031962 0x00007fe3 fetcht 0x00000001 , 0x00004686 + 00031963 0x00007fe4 call 0x000067fb + 00031964 0x00007fe5 branch 0x00007cdd + 00031965 0x00007fea bpatchx 0x000000f3 , 0x0000403e + 00031966 0x00007feb fetch 0x00000001 , 0x00004686 + 00031967 0x00007fec rtneq 0x000000ff + 00031968 0x00007fed copy 0x0000003f , 0x00000002 + 00031969 0x00007fee call 0x0000681d + 00031970 0x00007fef nbranch 0x00007cef , 0x00000001 + 00031971 0x00007ff2 call 0x00007cf9 + 00031972 0x00007ff3 fetch 0x00000002 , 0x00004682 + 00031973 0x00007ff4 set1 0x0000000c + 00031974 0x00007ff5 store 0x00000002 , 0x00004682 + 00031975 0x00007ff6 fetch 0x00000001 , 0x00004679 + 00031976 0x00007ff7 rtneq 0x00000000 + 00031977 0x00007ff8 jam 0x00000000 , 0x00004679 + 00031978 0x00007ffa fetch 0x00000001 , 0x00004685 + 00031979 0x00007ffb store 0x00000001 , 0x00004678 + 00031980 0x00007ffc call 0x00007d00 + 00031981 0x00007ffd jam 0x0000002c , 0x00000a99 + 00031982 0x00007ffe branch 0x00007d86 + 00031983 0x00008000 fetch 0x00000002 , 0x00004682 + 00031984 0x00008001 set0 0x0000000c + 00031985 0x00008002 store 0x00000002 , 0x00004682 + 00031986 0x00008003 fetch 0x00000001 , 0x00004679 + 00031987 0x00008004 rtneq 0x00000001 + 00031988 0x00008005 jam 0x00000001 , 0x00004679 + 00031989 0x00008007 jam 0x00000000 , 0x00004678 + 00031990 0x00008008 call 0x00007d02 + 00031991 0x00008009 jam 0x0000002d , 0x00000a99 + 00031992 0x0000800a branch 0x00007d86 + 00031993 0x0000800d fetch 0x00000001 , 0x00004678 + 00031994 0x0000800e rtn 0x00000034 + 00031995 0x0000800f increase 0xffffffff , 0x0000003f + 00031996 0x00008010 store 0x00000001 , 0x00004678 + 00031997 0x00008011 nrtn 0x00000034 + 00031998 0x00008013 jam 0x00000010 , 0x00000a99 + 00031999 0x00008014 branch 0x00007d86 + 00032000 0x00008017 arg 0x00000007 , 0x00000007 + 00032001 0x00008018 branch 0x00002c32 + 00032002 0x0000801b arg 0x00000007 , 0x00000007 + 00032003 0x0000801c branch 0x00002c36 + 00032004 0x00008033 fetch 0x00000002 , 0x0000421b + 00032005 0x00008034 mul32 0x00000011 , 0x0000000b , 0x00000012 + 00032006 0x00008035 iadd 0x00000012 , 0x00000012 + 00032007 0x00008036 rtn + 00032008 0x0000803a fetch 0x00000001 , 0x0000421a + 00032009 0x0000803b rtn 0x00000034 + 00032010 0x0000803c copy 0x0000003f , 0x00000039 + 00032011 0x0000803d fetch 0x00000002 , 0x0000421b + 00032012 0x0000803e copy 0x0000003f , 0x00000012 + 00032013 0x00008040 add 0x00000012 , 0x00000002 , 0x00000013 + 00032014 0x00008041 ifetcht 0x00000001 , 0x00000013 + 00032015 0x00008042 call 0x0000680e + 00032016 0x00008043 call 0x00007d32 + 00032017 0x00008044 increase 0x0000000b , 0x00000012 + 00032018 0x00008045 loop 0x00007d0d + 00032019 0x00008046 rtn + 00032020 0x0000804b call 0x00007d04 + 00032021 0x0000804c setarg 0x00000002 + 00032022 0x0000804d istore 0x00000001 , 0x00000012 + 00032023 0x0000804e call 0x00007d5e + 00032024 0x0000804f branch 0x00007d35 + 00032025 0x00008055 call 0x00007d04 + 00032026 0x00008056 setarg 0x00000003 + 00032027 0x00008057 istore 0x00000001 , 0x00000012 + 00032028 0x00008058 call 0x00007d5e + 00032029 0x00008059 branch 0x00007d32 + 00032030 0x0000805e call 0x00007d04 + 00032031 0x0000805f setarg 0x00000001 + 00032032 0x00008060 istore 0x00000001 , 0x00000012 + 00032033 0x00008061 setarg 0x000000ff + 00032034 0x00008062 istore 0x00000001 , 0x00000005 + 00032035 0x00008063 branch 0x00007d32 + 00032036 0x00008069 call 0x00007d04 + 00032037 0x0000806a arg 0x0000000b , 0x00000039 + 00032038 0x0000806b copy 0x00000013 , 0x00000006 + 00032039 0x0000806c copy 0x00000012 , 0x00000005 + 00032040 0x0000806d branch 0x00007ef4 + 00032041 0x00008072 fetch 0x00000001 , 0x0000421a + 00032042 0x00008073 rtn 0x00000034 + 00032043 0x00008074 arg 0x00000000 , 0x00000011 + 00032044 0x00008076 call 0x00007d38 + 00032045 0x00008077 increase 0x00000001 , 0x00000011 + 00032046 0x00008078 fetch 0x00000001 , 0x0000421a + 00032047 0x00008079 isub 0x00000011 , 0x0000003e + 00032048 0x0000807a rtn 0x00000005 + 00032049 0x0000807b branch 0x00007d2c + 00032050 0x0000807f add 0x00000012 , 0x00000002 , 0x00000013 + 00032051 0x00008080 ifetcht 0x00000001 , 0x00000013 + 00032052 0x00008081 branch 0x00006825 + 00032053 0x00008085 add 0x00000012 , 0x00000002 , 0x00000013 + 00032054 0x00008086 ifetcht 0x00000001 , 0x00000013 + 00032055 0x00008087 branch 0x00006829 + 00032056 0x0000808c add 0x00000011 , 0x0000000b , 0x00000007 + 00032057 0x0000808d call 0x00007f16 + 00032058 0x0000808e nrtn 0x00000034 + 00032059 0x00008090 call 0x00007d04 + 00032060 0x00008092 ifetch 0x00000001 , 0x00000012 + 00032061 0x00008094 beq 0x00000002 , 0x00007d35 + 00032062 0x00008095 beq 0x00000003 , 0x00007d32 + 00032063 0x00008096 beq 0x00000000 , 0x00007d32 + 00032064 0x00008097 beq 0x00000005 , 0x00007d4c + 00032065 0x00008099 call 0x00007d35 + 00032066 0x0000809a add 0x00000012 , 0x00000007 , 0x00000013 + 00032067 0x0000809b call 0x00007e7c + 00032068 0x0000809c ifetch 0x00000002 , 0x00000013 + 00032069 0x0000809d call 0x00007f9c + 00032070 0x0000809e call 0x00007e8c + 00032071 0x0000809f setarg 0x00000005 + 00032072 0x000080a0 istore 0x00000001 , 0x00000012 + 00032073 0x000080a1 add 0x00000012 , 0x00000003 , 0x00000013 + 00032074 0x000080a2 ifetch 0x00000002 , 0x00000013 + 00032075 0x000080a3 branch 0x00007d5c + 00032076 0x000080a7 call 0x00007d32 + 00032077 0x000080a8 add 0x00000012 , 0x00000009 , 0x00000013 + 00032078 0x000080a9 call 0x00007e7c + 00032079 0x000080aa ifetch 0x00000002 , 0x00000013 + 00032080 0x000080ab call 0x00007f9c + 00032081 0x000080ac call 0x00007e8c + 00032082 0x000080ae add 0x00000012 , 0x00000001 , 0x00000013 + 00032083 0x000080af ifetch 0x00000001 , 0x00000013 + 00032084 0x000080b0 beq 0x000000ff , 0x00007d58 + 00032085 0x000080b1 increase 0xffffffff , 0x0000003f + 00032086 0x000080b2 istore 0x00000001 , 0x00000013 + 00032087 0x000080b3 branch 0x00007d19 , 0x00000034 + 00032088 0x000080b5 setarg 0x00000004 + 00032089 0x000080b6 istore 0x00000001 , 0x00000012 + 00032090 0x000080b7 add 0x00000012 , 0x00000005 , 0x00000013 + 00032091 0x000080b8 ifetch 0x00000002 , 0x00000013 + 00032092 0x000080ba add 0x00000011 , 0x0000000b , 0x00000007 + 00032093 0x000080bb branch 0x00007f08 + 00032094 0x000080be setarg 0x00000000 + 00032095 0x000080bf branch 0x00007d5c + 00032096 0x000080c6 setarg 0x00001000 + 00032097 0x000080c7 lshift16 0x0000003f , 0x0000003f + 00032098 0x000080c8 iadd 0x00000012 , 0x00000012 + 00032099 0x000080c9 rtn + 00032100 0x000080cc bpatchx 0x000000f4 , 0x0000403e + 00032101 0x000080cd arg 0x00000000 , 0x00000011 + 00032102 0x000080ce fetcht 0x00000004 , 0x0000467a + 00032103 0x000080cf copy 0x00000022 , 0x00000012 + 00032104 0x000080d0 copy 0x00000012 , 0x0000003f + 00032105 0x000080d1 isub 0x00000002 , 0x0000003e + 00032106 0x000080d2 ncall 0x00007d60 , 0x00000002 + 00032107 0x000080d5 copy 0x00000012 , 0x0000003f + 00032108 0x000080d6 increase 0x000000a0 , 0x00000002 + 00032109 0x000080d7 increase 0x000000a0 , 0x00000002 + 00032110 0x000080d8 isub 0x00000002 , 0x0000003e + 00032111 0x000080d9 nbranch 0x00007d78 , 0x00000002 + 00032112 0x000080da increase 0x00000001 , 0x00000011 + 00032113 0x000080db and 0x00000011 , 0x0000000f , 0x0000003f + 00032114 0x000080dc nbranch 0x00007d6b , 0x00000034 + 00032115 0x000080dd arg 0x00000000 , 0x00000011 + 00032116 0x000080de call 0x00007d7f + 00032117 0x000080e0 copy 0x00000022 , 0x0000003f + 00032118 0x000080e1 store 0x00000004 , 0x0000467a + 00032119 0x000080e2 rtn + 00032120 0x000080e4 bpatchx 0x000000f5 , 0x0000403e + 00032121 0x000080e5 copy 0x00000011 , 0x0000003f + 00032122 0x000080e6 rtn 0x00000034 + 00032123 0x000080e7 increase 0xffffff60 , 0x00000002 + 00032124 0x000080e8 increase 0xffffff60 , 0x00000002 + 00032125 0x000080e9 set0 0x0000001c , 0x00000002 + 00032126 0x000080ea storet 0x00000004 , 0x0000467a + 00032127 0x000080ec branch 0x0000335f + 00032128 0x000080f4 jam 0x00000001 , 0x00004666 + 00032129 0x000080f6 fetch 0x00000001 , 0x00004667 + 00032130 0x000080f7 nbranch 0x00007d81 , 0x00000034 + 00032131 0x000080f8 rtn + 00032132 0x000080fb jam 0x00000000 , 0x00004666 + 00032133 0x000080fc rtn + 00032134 0x00008101 bpatchx 0x000000f6 , 0x0000403e + 00032135 0x00008102 call 0x00007d80 + 00032136 0x00008103 copy 0x00000011 , 0x0000003f + 00032137 0x00008104 store 0x00000004 , 0x00000a91 + 00032138 0x00008105 arg 0x00004668 , 0x00000011 + 00032139 0x00008106 call 0x00007fb8 + 00032140 0x00008107 fetch 0x00000004 , 0x00000a91 + 00032141 0x00008108 copy 0x0000003f , 0x00000011 + 00032142 0x00008109 branch 0x00007d84 + 00032143 0x0000810c bpatchx 0x000000f7 , 0x0000403e + 00032144 0x0000810d call 0x00007d80 + 00032145 0x0000810e copy 0x00000011 , 0x0000003f + 00032146 0x0000810f store 0x00000004 , 0x00000a91 + 00032147 0x00008110 arg 0x00004670 , 0x00000011 + 00032148 0x00008111 call 0x00007fb8 + 00032149 0x00008112 fetch 0x00000004 , 0x00000a91 + 00032150 0x00008113 copy 0x0000003f , 0x00000011 + 00032151 0x00008114 branch 0x00007d84 + 00032152 0x00008117 setarg 0x00000000 + 00032153 0x00008118 store 0x00000008 , 0x00004670 + 00032154 0x00008119 store 0x00000008 , 0x00004668 + 00032155 0x0000811a rtn + 00032156 0x0000811d bpatchx 0x000000f8 , 0x0000403f + 00032157 0x0000811e fetch 0x00000001 , 0x000041ce + 00032158 0x0000811f nrtn 0x00000034 + 00032159 0x00008120 arg 0x00004670 , 0x00000011 + 00032160 0x00008121 call 0x00007fd0 + 00032161 0x00008122 rtn 0x00000034 + 00032162 0x00008123 jam 0x00000000 , 0x00000a90 + 00032163 0x00008124 call 0x00007da7 + 00032164 0x00008125 fetch 0x00000001 , 0x00000a90 + 00032165 0x00008126 branch 0x00007d9c , 0x00000034 + 00032166 0x00008127 rtn + 00032167 0x0000812a call 0x00007d80 + 00032168 0x0000812b arg 0x00004670 , 0x00000011 + 00032169 0x0000812c call 0x00007fc4 + 00032170 0x0000812d copy 0x0000003f , 0x00000002 + 00032171 0x0000812e call 0x00007d84 + 00032172 0x0000812f bpatchx 0x000000f9 , 0x0000403f + 00032173 0x00008130 copy 0x00000002 , 0x0000003f + 00032174 0x00008131 rtn 0x00000034 + 00032175 0x00008132 beq 0x00000001 , 0x00007ddd + 00032176 0x00008133 beq 0x00000002 , 0x00007de2 + 00032177 0x00008134 beq 0x00000003 , 0x00007de8 + 00032178 0x00008135 beq 0x00000007 , 0x00007ded + 00032179 0x00008136 beq 0x00000008 , 0x00007dee + 00032180 0x00008137 beq 0x00000009 , 0x00007def + 00032181 0x00008138 beq 0x0000000b , 0x00007df2 + 00032182 0x00008139 beq 0x0000000c , 0x00007df3 + 00032183 0x0000813a beq 0x0000000d , 0x00007df4 + 00032184 0x0000813b beq 0x0000000e , 0x00007dfa + 00032185 0x0000813c beq 0x0000000f , 0x00007dff + 00032186 0x0000813d beq 0x00000010 , 0x00007e05 + 00032187 0x0000813e beq 0x00000013 , 0x00007e0f + 00032188 0x0000813f beq 0x00000014 , 0x00007e11 + 00032189 0x00008140 beq 0x00000015 , 0x00007e13 + 00032190 0x00008141 beq 0x00000016 , 0x00007e15 + 00032191 0x00008142 beq 0x00000017 , 0x00007e18 + 00032192 0x00008143 beq 0x00000018 , 0x00007e1a + 00032193 0x00008144 beq 0x00000019 , 0x00007e1d + 00032194 0x00008145 beq 0x0000001b , 0x00007e25 + 00032195 0x00008146 beq 0x0000001e , 0x00007e2f + 00032196 0x00008148 store 0x00000001 , 0x00000a99 + 00032197 0x00008149 bpatchx 0x000000fa , 0x0000403f + 00032198 0x0000814a call 0x000062bc + 00032199 0x0000814b nbranch 0x00007ddb , 0x00000034 + 00032200 0x0000814d fetch 0x00000001 , 0x00000a99 + 00032201 0x0000814e bmark0 0x00000009 , 0x00007dd6 + 00032202 0x0000814f beq 0x00000004 , 0x00007dea + 00032203 0x00008150 beq 0x00000005 , 0x00004d17 + 00032204 0x00008151 beq 0x00000006 , 0x00004d26 + 00032205 0x00008152 beq 0x0000000a , 0x00007df0 + 00032206 0x00008153 beq 0x00000011 , 0x00007e0a + 00032207 0x00008154 beq 0x00000012 , 0x00007e0e + 00032208 0x00008155 beq 0x0000001d , 0x00007e26 + 00032209 0x00008156 beq 0x0000001f , 0x000067cc + 00032210 0x00008157 beq 0x00000020 , 0x000067d0 + 00032211 0x00008158 beq 0x00000021 , 0x00007e31 + 00032212 0x00008159 beq 0x00000025 , 0x0000670b + 00032213 0x0000815a rtn + 00032214 0x0000815d store 0x00000001 , 0x00000a99 + 00032215 0x0000815e call 0x00002252 + 00032216 0x0000815f branch 0x00007ddb , 0x00000005 + 00032217 0x00008160 call 0x0000225a + 00032218 0x00008161 nrtn 0x00000005 + 00032219 0x00008163 jam 0x00000001 , 0x00000a90 + 00032220 0x00008164 branch 0x00007d8f + 00032221 0x0000816a fetch 0x00000002 , 0x00004682 + 00032222 0x0000816b set1 0x00000006 + 00032223 0x0000816c store 0x00000002 , 0x00004682 + 00032224 0x0000816d jam 0x00000003 , 0x00004093 + 00032225 0x0000816e rtn + 00032226 0x00008173 jam 0x00000000 , 0x00004680 + 00032227 0x00008174 jam 0x00000000 , 0x00004093 + 00032228 0x00008175 fetch 0x00000002 , 0x00004682 + 00032229 0x00008176 set0 0x00000006 + 00032230 0x00008177 store 0x00000002 , 0x00004682 + 00032231 0x00008178 rtn + 00032232 0x0000817d jam 0x00000005 , 0x000041ce + 00032233 0x0000817e rtn + 00032234 0x00008183 jam 0x00000007 , 0x0000007c + 00032235 0x00008184 jam 0x00000013 , 0x000004ca + 00032236 0x00008185 rtn + 00032237 0x0000818a rtn + 00032238 0x0000818f rtn + 00032239 0x00008194 rtn + 00032240 0x00008199 jam 0x00000002 , 0x000004d4 + 00032241 0x0000819a branch 0x00004d0a + 00032242 0x0000819f rtn + 00032243 0x000081a4 rtn + 00032244 0x000081a9 jam 0x00000001 , 0x0000436e + 00032245 0x000081aa jam 0x00000000 , 0x00004484 + 00032246 0x000081ab fetch 0x00000002 , 0x00004682 + 00032247 0x000081ac set1 0x0000000b , 0x0000003f + 00032248 0x000081ad store 0x00000002 , 0x00004682 + 00032249 0x000081ae rtn + 00032250 0x000081b3 fetch 0x00000002 , 0x00004682 + 00032251 0x000081b4 set0 0x0000000b , 0x0000003f + 00032252 0x000081b5 store 0x00000002 , 0x00004682 + 00032253 0x000081b6 jam 0x00000000 , 0x0000436e + 00032254 0x000081b7 rtn + 00032255 0x000081bc jam 0x00000001 , 0x0000436e + 00032256 0x000081bd jam 0x00000001 , 0x00004484 + 00032257 0x000081be fetch 0x00000002 , 0x00004682 + 00032258 0x000081bf set1 0x0000000b , 0x0000003f + 00032259 0x000081c0 store 0x00000002 , 0x00004682 + 00032260 0x000081c1 rtn + 00032261 0x000081c6 fetch 0x00000002 , 0x00004682 + 00032262 0x000081c7 set0 0x0000000b , 0x0000003f + 00032263 0x000081c8 store 0x00000002 , 0x00004682 + 00032264 0x000081c9 jam 0x00000000 , 0x0000436e + 00032265 0x000081ca rtn + 00032266 0x000081cf setarg 0x00000014 + 00032267 0x000081d0 store 0x00000002 , 0x0000046d + 00032268 0x000081d1 store 0x00000002 , 0x000044ba + 00032269 0x000081d2 branch 0x00005c92 + 00032270 0x000081d7 branch 0x00005abf + 00032271 0x000081dc arg 0x00000000 , 0x00000011 + 00032272 0x000081dd branch 0x00007d19 + 00032273 0x000081e2 arg 0x00000000 , 0x00000011 + 00032274 0x000081e3 branch 0x00007d14 + 00032275 0x000081e8 arg 0x00000000 , 0x00000011 + 00032276 0x000081e9 branch 0x00007d1e + 00032277 0x000081ee jam 0x00000001 , 0x00004369 + 00032278 0x000081ef jam 0x0000001b , 0x000041ce + 00032279 0x000081f2 rtn + 00032280 0x000081f7 jam 0x00000001 , 0x00004369 + 00032281 0x000081f8 rtn + 00032282 0x000081fd jam 0x00000000 , 0x00004369 + 00032283 0x000081fe jam 0x00000000 , 0x000041ce + 00032284 0x000081ff rtn + 00032285 0x00008204 fetch 0x00000002 , 0x000041eb + 00032286 0x00008205 call 0x00007f9c + 00032287 0x00008206 fetch 0x00000001 , 0x00004686 + 00032288 0x00008207 beq 0x000000ff , 0x00007e23 + 00032289 0x00008208 copy 0x0000003f , 0x00000002 + 00032290 0x00008209 call 0x000067fb + 00032291 0x0000820b call 0x00007d98 + 00032292 0x0000820c branch 0x00002b1f + 00032293 0x00008211 branch 0x00005b02 + 00032294 0x00008216 jam 0x00000034 , 0x0000007c + 00032295 0x00008217 set1 0x00000003 , 0x00000000 + 00032296 0x00008218 nrtn 0x00000029 + 00032297 0x00008219 jam 0x00000000 , 0x0000455b + 00032298 0x0000821a jam 0x00000013 , 0x0000007c + 00032299 0x0000821b fetch 0x00000001 , 0x0000016d + 00032300 0x0000821c set0 0x00000002 , 0x0000003f + 00032301 0x0000821d store 0x00000001 , 0x0000016d + 00032302 0x0000821e rtn + 00032303 0x00008223 force 0x00000003 , 0x00000007 + 00032304 0x00008224 branch 0x00007f07 + 00032305 0x00008229 call 0x000062f8 + 00032306 0x0000822a jam 0x00000041 , 0x0000007d + 00032307 0x0000822b branch 0x00005f9d + 00032308 0x0000822f fetch 0x00000001 , 0x00004682 + 00032309 0x00008230 rtnbit0 0x0000000c + 00032310 0x00008231 rtnbit0 0x00000007 + 00032311 0x00008232 branch 0x00007e2f + 00032312 0x00008238 fetch 0x00000002 , 0x00004218 + 00032313 0x00008239 add 0x0000003f , 0x00000002 , 0x00000005 + 00032314 0x0000823a setarg 0x00000000 + 00032315 0x0000823b istore 0x00000003 , 0x00000005 + 00032316 0x0000823c rtn + 00032317 0x00008241 call 0x00007fe9 + 00032318 0x00008242 call 0x00007e69 + 00032319 0x00008243 rtn 0x00000034 + 00032320 0x00008244 fetch 0x00000002 , 0x00004218 + 00032321 0x00008245 add 0x0000003f , 0x00000002 , 0x00000012 + 00032322 0x00008246 ifetcht 0x00000001 , 0x00000012 + 00032323 0x00008247 increase 0x00000001 , 0x00000002 + 00032324 0x00008248 istoret 0x00000001 , 0x00000012 + 00032325 0x0000824a ifetcht 0x00000001 , 0x0000003f + 00032326 0x0000824b copy 0x00000002 , 0x00000039 + 00032327 0x0000824c add 0x0000003f , 0x00000004 , 0x00000012 + 00032328 0x0000824d ifetch 0x00000001 , 0x00000012 + 00032329 0x0000824e imul32 0x00000002 , 0x0000003f + 00032330 0x0000824f iadd 0x00000006 , 0x00000005 + 00032331 0x00008250 copy 0x00000011 , 0x00000006 + 00032332 0x00008252 call 0x00007f01 + 00032333 0x00008253 call 0x00007e6d + 00032334 0x00008254 pincrease 0xffffffff + 00032335 0x00008255 ifetcht 0x00000001 , 0x00000012 + 00032336 0x00008256 increase 0x00000001 , 0x00000002 + 00032337 0x00008257 iand 0x00000002 , 0x00000002 + 00032338 0x00008258 istoret 0x00000001 , 0x00000012 + 00032339 0x00008259 branch 0x00007fe7 + 00032340 0x0000825f call 0x00007fe9 + 00032341 0x00008260 call 0x00007e65 + 00032342 0x00008261 rtn 0x00000034 + 00032343 0x00008262 fetch 0x00000002 , 0x00004218 + 00032344 0x00008263 add 0x0000003f , 0x00000002 , 0x00000012 + 00032345 0x00008264 ifetcht 0x00000001 , 0x00000012 + 00032346 0x00008265 increase 0xffffffff , 0x00000002 + 00032347 0x00008266 istoret 0x00000001 , 0x00000012 + 00032348 0x00008267 ifetcht 0x00000001 , 0x0000003f + 00032349 0x00008268 copy 0x00000002 , 0x00000039 + 00032350 0x00008269 add 0x0000003f , 0x00000003 , 0x00000012 + 00032351 0x0000826a ifetch 0x00000001 , 0x00000012 + 00032352 0x0000826b imul32 0x00000002 , 0x0000003f + 00032353 0x0000826c iadd 0x00000006 , 0x00000006 + 00032354 0x0000826d increase 0x00000001 , 0x00000006 + 00032355 0x0000826e copy 0x00000011 , 0x00000005 + 00032356 0x0000826f branch 0x00007e4c + 00032357 0x00008274 fetch 0x00000002 , 0x00004218 + 00032358 0x00008275 add 0x0000003f , 0x00000002 , 0x00000006 + 00032359 0x00008276 ifetch 0x00000001 , 0x00000006 + 00032360 0x00008277 rtn + 00032361 0x0000827b call 0x00007e6d + 00032362 0x0000827c ifetcht 0x00000001 , 0x00000006 + 00032363 0x0000827d isub 0x00000002 , 0x0000003f + 00032364 0x0000827e rtn + 00032365 0x00008282 fetch 0x00000002 , 0x00004218 + 00032366 0x00008283 add 0x0000003f , 0x00000001 , 0x00000006 + 00032367 0x00008284 ifetch 0x00000001 , 0x00000006 + 00032368 0x00008285 rtn + 00032369 0x0000828e sub 0x00000039 , 0x00000000 , 0x0000003e + 00032370 0x0000828f rtn 0x00000005 + 00032371 0x00008291 rshift 0x0000003f , 0x0000003f + 00032372 0x00008292 loop 0x00007e73 + 00032373 0x00008293 rtn + 00032374 0x00008297 force 0x00000001 , 0x0000003f + 00032375 0x00008298 sub 0x00000039 , 0x00000000 , 0x0000003e + 00032376 0x00008299 rtn 0x00000005 + 00032377 0x0000829b lshift 0x0000003f , 0x0000003f + 00032378 0x0000829c loop 0x00007e79 + 00032379 0x0000829d rtn + 00032380 0x0000829f deposit 0x00000005 + 00032381 0x000082a0 store 0x00000002 , 0x00000abb + 00032382 0x000082a1 storet 0x00000008 , 0x00000aa2 + 00032383 0x000082a2 deposit 0x0000000b + 00032384 0x000082a3 store 0x00000004 , 0x00000aaa + 00032385 0x000082a4 call 0x00007e85 + 00032386 0x000082a5 deposit 0x00000006 + 00032387 0x000082a6 store 0x00000002 , 0x00000ab9 + 00032388 0x000082a7 rtn + 00032389 0x000082aa deposit 0x00000011 + 00032390 0x000082ab store 0x00000004 , 0x00000aae + 00032391 0x000082ac deposit 0x00000012 + 00032392 0x000082ad store 0x00000004 , 0x00000ab2 + 00032393 0x000082ae deposit 0x00000013 + 00032394 0x000082af store 0x00000003 , 0x00000ab6 + 00032395 0x000082b0 rtn + 00032396 0x000082b3 fetcht 0x00000008 , 0x00000aa2 + 00032397 0x000082b4 fetch 0x00000004 , 0x00000aaa + 00032398 0x000082b5 iforce 0x0000000b + 00032399 0x000082b6 call 0x00007e95 + 00032400 0x000082b7 fetch 0x00000002 , 0x00000abb + 00032401 0x000082b8 iforce 0x00000005 + 00032402 0x000082b9 fetch 0x00000002 , 0x00000ab9 + 00032403 0x000082ba iforce 0x00000006 + 00032404 0x000082bb rtn + 00032405 0x000082be fetch 0x00000004 , 0x00000aae + 00032406 0x000082bf iforce 0x00000011 + 00032407 0x000082c0 fetch 0x00000004 , 0x00000ab2 + 00032408 0x000082c1 iforce 0x00000012 + 00032409 0x000082c2 fetch 0x00000003 , 0x00000ab6 + 00032410 0x000082c3 iforce 0x00000013 + 00032411 0x000082c4 rtn + 00032412 0x000082c7 fetch 0x00000002 , 0x00000abb + 00032413 0x000082c8 copy 0x0000003f , 0x00000005 + 00032414 0x000082c9 rtn + 00032415 0x000082cb fetch 0x00000002 , 0x00000ab9 + 00032416 0x000082cc copy 0x0000003f , 0x00000006 + 00032417 0x000082cd rtn + 00032418 0x000082cf copy 0x00000005 , 0x0000003f + 00032419 0x000082d0 store 0x00000002 , 0x00000abb + 00032420 0x000082d1 rtn + 00032421 0x000082d3 copy 0x00000006 , 0x0000003f + 00032422 0x000082d4 store 0x00000002 , 0x00000ab9 + 00032423 0x000082d5 rtn + 00032424 0x000082da copy 0x00000005 , 0x0000003f + 00032425 0x000082db store 0x00000002 , 0x00000a97 + 00032426 0x000082dc copy 0x00000006 , 0x0000003f + 00032427 0x000082dd store 0x00000002 , 0x00000a95 + 00032428 0x000082de rtn + 00032429 0x000082e0 fetch 0x00000002 , 0x00000a97 + 00032430 0x000082e1 copy 0x0000003f , 0x00000005 + 00032431 0x000082e2 fetch 0x00000002 , 0x00000a95 + 00032432 0x000082e3 copy 0x0000003f , 0x00000006 + 00032433 0x000082e4 rtn + 00032434 0x000082e7 call 0x00007ebd + 00032435 0x000082e9 call 0x00007ebd + 00032436 0x000082ea branch 0x00007ebd + 00032437 0x000082ec call 0x00007eb9 + 00032438 0x000082ee ifetch 0x00000004 , 0x00000006 + 00032439 0x000082ef istore 0x00000004 , 0x00000005 + 00032440 0x000082f0 rtn + 00032441 0x000082f2 ifetch 0x00000008 , 0x00000006 + 00032442 0x000082f3 istore 0x00000008 , 0x00000005 + 00032443 0x000082f4 rtn + 00032444 0x000082f7 call 0x00007ebf + 00032445 0x000082f9 call 0x00007eb9 + 00032446 0x000082fb call 0x00007eb9 + 00032447 0x000082fd call 0x00007eb9 + 00032448 0x000082fe branch 0x00007eb9 + 00032449 0x00008303 arg 0x0000000a , 0x00000039 + 00032450 0x00008305 nop 0x00002ee0 + 00032451 0x00008306 loop 0x00007ec2 + 00032452 0x00008307 rtn + 00032453 0x0000830a force 0x00000003 , 0x00000039 + 00032454 0x0000830c force 0x00000000 , 0x0000003f + 00032455 0x0000830e istore 0x00000008 , 0x00000005 + 00032456 0x0000830f loop 0x00007ec7 + 00032457 0x00008310 rtn + 00032458 0x00008313 force 0x00000000 , 0x0000003f + 00032459 0x00008314 istore 0x00000008 , 0x00000005 + 00032460 0x00008315 rtn + 00032461 0x00008317 force 0x00000000 , 0x0000003f + 00032462 0x00008318 istore 0x00000004 , 0x00000005 + 00032463 0x00008319 rtn + 00032464 0x0000831c force 0x00000004 , 0x00000039 + 00032465 0x0000831d branch 0x00007ec6 + 00032466 0x0000831f force 0x00000008 , 0x00000039 + 00032467 0x00008320 branch 0x00007ec6 + 00032468 0x00008323 deposit 0x00000039 + 00032469 0x00008324 rtn 0x00000034 + 00032470 0x00008325 setarg 0x00000000 + 00032471 0x00008327 istore 0x00000001 , 0x00000005 + 00032472 0x00008328 loop 0x00007ed7 + 00032473 0x00008329 rtn + 00032474 0x0000832d arg 0x00000020 , 0x00000039 + 00032475 0x0000832e arg 0x00000ac2 , 0x00000005 + 00032476 0x0000832f branch 0x00007ed4 + 00032477 0x00008332 ifetch 0x00000004 , 0x00000013 + 00032478 0x00008333 ifetcht 0x00000004 , 0x00000011 + 00032479 0x00008334 ixor 0x00000002 , 0x0000003f + 00032480 0x00008335 istore 0x00000004 , 0x00000005 + 00032481 0x00008336 increase 0x00000004 , 0x00000011 + 00032482 0x00008337 increase 0x00000004 , 0x00000013 + 00032483 0x00008338 loop 0x00007edd + 00032484 0x00008339 rtn + 00032485 0x0000833e bpatchx 0x000000fb , 0x0000403f + 00032486 0x0000833f copy 0x00000039 , 0x0000003f + 00032487 0x00008340 sub 0x0000003f , 0x00000001 , 0x0000003e + 00032488 0x00008341 rtn 0x00000002 + 00032489 0x00008342 iadd 0x00000011 , 0x00000012 + 00032490 0x00008343 increase 0xffffffff , 0x00000012 + 00032491 0x00008344 rshift 0x00000039 , 0x00000039 + 00032492 0x00008346 ifetcht 0x00000001 , 0x00000011 + 00032493 0x00008347 ifetch 0x00000001 , 0x00000012 + 00032494 0x00008348 istore 0x00000001 , 0x00000011 + 00032495 0x00008349 istoret 0x00000001 , 0x00000012 + 00032496 0x0000834a increase 0xffffffff , 0x00000012 + 00032497 0x0000834b increase 0x00000001 , 0x00000011 + 00032498 0x0000834c loop 0x00007eec + 00032499 0x0000834d rtn + 00032500 0x00008351 deposit 0x00000039 + 00032501 0x00008352 rtn 0x00000034 + 00032502 0x00008354 increase 0xfffffff8 , 0x00000039 + 00032503 0x00008355 call 0x00007eb9 , 0x00000002 + 00032504 0x00008356 rtn 0x00000005 + 00032505 0x00008357 branch 0x00007ef6 , 0x00000002 + 00032506 0x00008358 increase 0x00000008 , 0x00000039 + 00032507 0x0000835a increase 0xfffffffc , 0x00000039 + 00032508 0x0000835b call 0x00007eb6 , 0x00000002 + 00032509 0x0000835c rtn 0x00000005 + 00032510 0x0000835d branch 0x00007efb , 0x00000002 + 00032511 0x0000835e increase 0x00000004 , 0x00000039 + 00032512 0x0000835f branch 0x00007f01 + 00032513 0x00008362 deposit 0x00000039 + 00032514 0x00008363 rtn 0x00000034 + 00032515 0x00008365 ifetch 0x00000001 , 0x00000006 + 00032516 0x00008366 istore 0x00000001 , 0x00000005 + 00032517 0x00008367 loop 0x00007f03 + 00032518 0x00008368 rtn + 00032519 0x0000836b setarg 0x00000000 + 00032520 0x0000836d rshift 0x00000022 , 0x00000002 + 00032521 0x0000836e storet 0x00000004 , 0x00004094 + 00032522 0x0000836f arg 0x0000419d , 0x00000005 + 00032523 0x00008370 iforce 0x00000002 + 00032524 0x00008371 lshift 0x00000007 , 0x0000003f + 00032525 0x00008372 iadd 0x00000005 , 0x00000005 + 00032526 0x00008373 istoret 0x00000002 , 0x00000005 + 00032527 0x00008374 bpatchx 0x000000fc , 0x0000403f + 00032528 0x00008375 rtn + 00032529 0x00008378 arg 0x00000800 , 0x0000000b + 00032530 0x00008379 lshift16 0x0000000b , 0x0000000b + 00032531 0x0000837a iadd 0x0000000b , 0x0000003f + 00032532 0x0000837b rtn + 00032533 0x0000837f arg 0x00000000 , 0x00000007 + 00032534 0x00008381 bpatchx 0x000000fd , 0x0000403f + 00032535 0x00008382 fetcht 0x00000004 , 0x00004094 + 00032536 0x00008383 rshift 0x00000022 , 0x0000003f + 00032537 0x00008384 store 0x00000004 , 0x00004094 + 00032538 0x00008385 isub 0x00000002 , 0x0000003e + 00032539 0x00008386 ncall 0x00007f11 , 0x00000002 + 00032540 0x00008387 isub 0x00000002 , 0x0000000b + 00032541 0x00008388 copy 0x0000000b , 0x00000002 + 00032542 0x00008389 arg 0x0000419d , 0x00000006 + 00032543 0x0000838a copy 0x00000006 , 0x00000005 + 00032544 0x0000838b arg 0x00000010 , 0x00000039 + 00032545 0x0000838d ifetch 0x00000002 , 0x00000006 + 00032546 0x0000838e isub 0x00000002 , 0x0000003f + 00032547 0x0000838f branch 0x00007f25 , 0x00000002 + 00032548 0x00008390 force 0x00000000 , 0x0000003f + 00032549 0x00008392 istore 0x00000002 , 0x00000005 + 00032550 0x00008393 loop 0x00007f21 + 00032551 0x00008394 arg 0x0000419d , 0x00000006 + 00032552 0x00008395 lshift 0x00000007 , 0x0000003f + 00032553 0x00008396 iadd 0x00000006 , 0x00000006 + 00032554 0x00008397 ifetch 0x00000002 , 0x00000006 + 00032555 0x00008398 rtn + 00032556 0x0000839e iadd 0x00000002 , 0x00000002 + 00032557 0x0000839f copy 0x00000002 , 0x00000039 + 00032558 0x000083a0 setarg 0x00000ea6 + 00032559 0x000083a1 isub 0x00000039 , 0x0000003f + 00032560 0x000083a2 rtn 0x00000002 + 00032561 0x000083a3 sub 0x0000003f , 0x00000000 , 0x0000003f + 00032562 0x000083a4 rshift16 0x00000002 , 0x00000002 + 00032563 0x000083a5 increase 0x00000001 , 0x00000002 + 00032564 0x000083a6 lshift16 0x00000002 , 0x00000002 + 00032565 0x000083a7 ior 0x00000002 , 0x00000002 + 00032566 0x000083a8 rtn + 00032567 0x000083ab call 0x00007f39 + 00032568 0x000083ac branch 0x00007f43 + 00032569 0x000083b0 disable 0x00000028 + 00032570 0x000083b1 isub 0x00000002 , 0x0000003f + 00032571 0x000083b2 branch 0x00007f3e , 0x00000002 + 00032572 0x000083b3 enable 0x00000028 + 00032573 0x000083b4 sub 0x0000003f , 0x00000000 , 0x0000003f + 00032574 0x000083b6 rtnbit0 0x0000000f + 00032575 0x000083b7 arg 0xffff0ea6 , 0x00000002 + 00032576 0x000083b8 iadd 0x00000002 , 0x0000003f + 00032577 0x000083b9 set0 0x00000040 , 0x0000003f + 00032578 0x000083ba rtn + 00032579 0x000083bd iforce 0x00000006 + 00032580 0x000083be rshift16 0x0000003f , 0x0000003f + 00032581 0x000083bf arg 0x00000ea6 , 0x00000002 + 00032582 0x000083c0 imul32 0x00000002 , 0x0000003f + 00032583 0x000083c1 iadd 0x00000006 , 0x0000003f + 00032584 0x000083c2 rtn + 00032585 0x000083c6 lshift8 0x0000003f , 0x0000003f + 00032586 0x000083c7 lshift4 0x0000003f , 0x0000003f + 00032587 0x000083c8 fetcht 0x00000003 , 0x0000416f + 00032588 0x000083c9 idiv 0x00000002 + 00032589 0x000083ca call 0x00007f86 + 00032590 0x000083cb quotient 0x00000002 + 00032591 0x000083cc rtn + 00032592 0x000083d0 arg 0x00000ea6 , 0x00000002 + 00032593 0x000083d1 idiv 0x00000002 + 00032594 0x000083d2 call 0x00007f86 + 00032595 0x000083d3 quotient 0x0000003f + 00032596 0x000083d4 lshift16 0x0000003f , 0x0000003f + 00032597 0x000083d5 remainder 0x00000002 + 00032598 0x000083d6 ior 0x00000002 , 0x00000002 + 00032599 0x000083d7 rtn + 00032600 0x000083df arg 0x00000000 , 0x00000002 + 00032601 0x000083e1 copy 0x00000002 , 0x00000013 + 00032602 0x000083e2 ifetch 0x00000001 , 0x00000003 + 00032603 0x000083e3 call 0x00007f64 + 00032604 0x000083e4 copy 0x00000013 , 0x00000002 + 00032605 0x000083e5 call 0x00007f95 + 00032606 0x000083e6 arg 0x0000000a , 0x00000012 + 00032607 0x000083e7 imul32 0x00000012 , 0x0000003f + 00032608 0x000083e8 iadd 0x00000002 , 0x0000003f + 00032609 0x000083e9 copy 0x0000003f , 0x00000002 + 00032610 0x000083ea loop 0x00007f59 + 00032611 0x000083eb rtn + 00032612 0x000083f0 arg 0x0000003a , 0x00000002 + 00032613 0x000083f1 isub 0x00000002 , 0x0000003e + 00032614 0x000083f2 nbranch 0x00007f6d , 0x00000002 + 00032615 0x000083f3 arg 0x00000061 , 0x00000002 + 00032616 0x000083f4 isub 0x00000002 , 0x0000003e + 00032617 0x000083f5 branch 0x00007f70 , 0x00000002 + 00032618 0x000083f6 arg 0x00000037 , 0x00000002 + 00032619 0x000083f7 isub 0x00000002 , 0x0000003f + 00032620 0x000083f8 rtn + 00032621 0x000083fa arg 0x00000030 , 0x00000002 + 00032622 0x000083fb isub 0x00000002 , 0x0000003f + 00032623 0x000083fc rtn + 00032624 0x000083fe arg 0x00000057 , 0x00000002 + 00032625 0x000083ff isub 0x00000002 , 0x0000003f + 00032626 0x00008400 rtn + 00032627 0x00008403 copy 0x00000002 , 0x00000030 + 00032628 0x00008404 setarg 0x000001ff + 00032629 0x00008405 force 0x00000000 , 0x00000012 + 00032630 0x00008407 rshift3 0x0000003f , 0x00000011 + 00032631 0x00008408 rshift 0x00000011 , 0x00000011 + 00032632 0x00008409 ixor 0x00000011 , 0x00000011 + 00032633 0x0000840a isolate1 0x00000000 , 0x00000011 + 00032634 0x0000840b setflag 0x00000001 , 0x00000009 , 0x0000003f + 00032635 0x0000840c rshift 0x00000002 , 0x00000002 + 00032636 0x0000840d isolate1 0x00000000 , 0x0000003f + 00032637 0x0000840e setflag 0x00000001 , 0x00000007 , 0x00000002 + 00032638 0x0000840f rshift 0x0000003f , 0x0000003f + 00032639 0x00008410 increase 0x00000001 , 0x00000012 + 00032640 0x00008411 compare 0x00000000 , 0x00000012 , 0x00000007 + 00032641 0x00008412 nbranch 0x00007f76 , 0x00000001 + 00032642 0x00008413 istoret 0x00000001 , 0x00000005 + 00032643 0x00008414 loop 0x00007f76 + 00032644 0x00008415 copy 0x00000030 , 0x00000002 + 00032645 0x00008416 rtn + 00032646 0x0000841a rtn 0x00000035 + 00032647 0x0000841b branch 0x00007f86 + 00032648 0x00008427 ifetch 0x00000001 , 0x00000011 + 00032649 0x00008428 ifetcht 0x00000001 , 0x00000012 + 00032650 0x00008429 isub 0x00000002 , 0x0000003e + 00032651 0x0000842a nrtn 0x00000005 + 00032652 0x0000842b increase 0x00000001 , 0x00000011 + 00032653 0x0000842c increase 0x00000001 , 0x00000012 + 00032654 0x0000842d loop 0x00007f88 + 00032655 0x0000842e force 0x00000000 , 0x0000003e + 00032656 0x0000842f rtn + 00032657 0x00008433 isub 0x00000002 , 0x0000003e + 00032658 0x00008434 nrtn 0x00000002 + 00032659 0x00008435 deposit 0x00000002 + 00032660 0x00008436 rtn + 00032661 0x00008439 iadd 0x00000002 , 0x0000003f + 00032662 0x0000843a isub 0x00000002 , 0x00000002 + 00032663 0x0000843b isub 0x00000002 , 0x0000003f + 00032664 0x0000843c rtn + 00032665 0x0000843f arg 0x00000200 , 0x00000039 + 00032666 0x00008440 arg 0x00004000 , 0x00000005 + 00032667 0x00008441 branch 0x00007ec6 + 00032668 0x00008445 rtn 0x00000034 + 00032669 0x00008446 copy 0x0000003f , 0x0000003d + 00032670 0x0000844a hfetch 0x00000002 , 0x0000810e + 00032671 0x0000844b nbranch 0x00007f9e , 0x00000034 + 00032672 0x0000844c rtn + 00032673 0x0000844f hjam 0x00000001 , 0x00008203 + 00032674 0x00008450 rtn + 00032675 0x00008453 hstore 0x00000002 , 0x00008205 + 00032676 0x00008454 hfetch 0x00000001 , 0x00008203 + 00032677 0x00008455 set1 0x00000004 , 0x0000003f + 00032678 0x00008456 hstore 0x00000001 , 0x00008203 + 00032679 0x00008457 rtn + 00032680 0x00008459 hstore 0x00000002 , 0x00008207 + 00032681 0x0000845a hfetch 0x00000001 , 0x00008203 + 00032682 0x0000845b set1 0x00000006 , 0x0000003f + 00032683 0x0000845c hstore 0x00000001 , 0x00008203 + 00032684 0x0000845d rtn + 00032685 0x00008460 hstore 0x00000002 , 0x00008205 + 00032686 0x00008461 hjam 0x00000030 , 0x00008203 + 00032687 0x00008462 rtn + 00032688 0x00008467 hfetch 0x00000001 , 0x00008043 + 00032689 0x00008468 set0 0x00000004 , 0x0000003f + 00032690 0x00008469 hstore 0x00000001 , 0x00008043 + 00032691 0x0000846a rtn + 00032692 0x0000846d hfetch 0x00000002 , 0x0000810e + 00032693 0x0000846e arg 0x00000200 , 0x00000002 + 00032694 0x00008470 isub 0x00000002 , 0x0000003e + 00032695 0x00008471 rtn + 00032696 0x00008478 bpatchx 0x000000fe , 0x0000403f + 00032697 0x00008479 ifetcht 0x00000008 , 0x00000011 + 00032698 0x0000847a and 0x00000002 , 0x000000ff , 0x0000003f + 00032699 0x0000847b nbranch 0x00007fbe , 0x00000034 + 00032700 0x0000847c rshift8 0x00000002 , 0x0000003f + 00032701 0x0000847d istore 0x00000008 , 0x00000011 + 00032702 0x0000847f increase 0x00000007 , 0x00000011 + 00032703 0x00008480 ifetch 0x00000001 , 0x00000011 + 00032704 0x00008481 nbranch 0x00002a8c , 0x00000034 + 00032705 0x00008482 fetch 0x00000001 , 0x00000a99 + 00032706 0x00008483 istore 0x00000001 , 0x00000011 + 00032707 0x00008484 rtn + 00032708 0x0000848a bpatchx 0x000000ff , 0x0000403f + 00032709 0x0000848b arg 0x00000008 , 0x00000039 + 00032710 0x0000848c ifetch 0x00000008 , 0x00000011 + 00032711 0x0000848d rtn 0x00000034 + 00032712 0x0000848f ifetch 0x00000001 , 0x00000011 + 00032713 0x00008490 nbranch 0x00007fcd , 0x00000034 + 00032714 0x00008491 increase 0x00000001 , 0x00000011 + 00032715 0x00008492 loop 0x00007fc8 + 00032716 0x00008493 branch 0x00002a8c + 00032717 0x00008495 arg 0x00000000 , 0x00000002 + 00032718 0x00008496 istoret 0x00000001 , 0x00000011 + 00032719 0x00008497 rtn + 00032720 0x0000849d ifetch 0x00000008 , 0x00000011 + 00032721 0x0000849e rtn + 00032722 0x000084a4 ifetch 0x00000001 , 0x00000011 + 00032723 0x000084a5 rtn + 00032724 0x000084a9 ifetch 0x00000002 , 0x00000011 + 00032725 0x000084aa rtn + 00032726 0x000084af arg 0x00000000 , 0x00000002 + 00032727 0x000084b1 fetch 0x00000001 , 0x00000006 + 00032728 0x000084b2 loop 0x00007fd7 , 0x00000034 + 00032729 0x000084b3 increase 0x00000001 , 0x00000002 + 00032730 0x000084b4 loop 0x00007fd7 + 00032731 0x000084b5 copy 0x00000002 , 0x0000003f + 00032732 0x000084b6 rtn + 00032733 0x000084b9 isub 0x00000002 , 0x0000003e + 00032734 0x000084ba nrtn 0x00000002 + 00032735 0x000084bb copy 0x00000002 , 0x0000003f + 00032736 0x000084bc rtn + 00032737 0x000084c0 force 0xffffffff , 0x0000003e + 00032738 0x000084c1 rtn + 00032739 0x000084c4 force 0x00000001 , 0x0000003e + 00032740 0x000084c5 rtn + 00032741 0x000084c7 force 0x00000000 , 0x0000003e + 00032742 0x000084c8 rtn + 00032743 0x000084cb enable 0x00000028 + 00032744 0x000084cc rtn + 00032745 0x000084cf disable 0x00000028 + 00032746 0x000084d0 rtn + 00032747 0x000084d3 enable 0x0000002c + 00032748 0x000084d4 rtn + 00032749 0x000084d7 disable 0x0000002c + 00032750 0x000084d8 rtn + 00032751 0x000084db setarg 0x00000001 + 00032752 0x000084dc rtn + 00032753 0x000084df setarg 0x00000000 + 00032754 0x000084e0 rtn + 00032755 0x000084e4 copy 0x00000039 , 0x0000003f + 00032756 0x000084e5 rtn 0x00000034 + 00032757 0x000084e6 copy 0x00000006 , 0x0000003f + 00032758 0x000084e7 iadd 0x00000039 , 0x0000003f + 00032759 0x000084e8 increase 0xffffffff , 0x0000003f + 00032760 0x000084e9 copy 0x0000003f , 0x00000006 + 00032761 0x000084eb ifetch 0x00000001 , 0x00000006 + 00032762 0x000084ec increase 0xfffffffe , 0x00000006 + 00032763 0x000084ed istore 0x00000001 , 0x00000005 + 00032764 0x000084ee loop 0x00007ff9 + 00032765 0x000084ef rtn Index: 1066_OTP_FLASH/output/bt_program23.list =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_program23.list (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_program23.list (working copy) @@ -0,0 +1,28598 @@ + include "bt_format " + org 0x0000 +0x0000 000044 call initialize_radio_cont + 1 +0x0001 000045 setarg 0x0 +0x0002 000046 store 3 ,mem_addr_hi +0x0003 000047 call spid_b_init_flash +0x0004 000048 call spid_unlock_flash +0x0005 000049 arg 0xab ,temp +0x0006 000050 call spid_write_flash_common +0x0007 000051 arg spid_load_flash ,regc +0x0008 000052 call read_first_block +0x0009 000053 branch load_storage +: 000055 spid_b_init_flash: +0x000a 000056 hjam 0x40 ,core_spid_ctrl +0x000b 000057 hjam 0x0 ,core_spid_delay +0x000c 000058 hfetch 1 ,core_gpio_sel1 +0x000d 000059 set0 0 ,pdata +0x000e 000060 set0 1 ,pdata +0x000f 000061 set1 3 ,pdata +0x0010 000062 hstore 1 ,core_gpio_sel1 +0x0011 000063 setarg 0 +0x0012 000064 store 4 ,mem_spid_tbuf +0x0013 000065 rtn + org 0x2000 +: 000075 start: +0x2000 000076 call lpmstate +: 000078 soft_reset: +0x2001 000079 bpatch patch00_0 ,mem_patch00 +0x2002 000080 clear_stack +0x2003 000081 call spi_ncs_gpio_init +0x2004 000082 call initialize_radio +0x2005 000083 call iicd_init_12m +0x2006 000084 call init_param +0x2007 000085 call l2cap_init +0x2008 000086 bpatch patch00_1 ,mem_patch00 +0x2009 000087 call rfcomm_init +0x200a 000088 call init_lmp +0x200b 000089 call ui_init +0x200c 000090 call app_init +0x200d 000091 ncall load_chip_option ,wake +0x200e 000092 bpatch patch00_2 ,mem_patch00 +0x200f 000093 call app_lpm_init ,wake +0x2010 000094 call publickey_init +0x2011 000095 call lpm_recover_clk ,wake +: 000096 main_loop: +0x2012 000097 bpatch patch00_3 ,mem_patch00 +0x2013 000098 call sp_calc_sequence +0x2014 000099 call sp_calc_sequence_256 +0x2015 000100 call sp_calc_sequence_256_check +0x2016 000101 call le_dispatch +0x2017 000102 bpatch patch00_4 ,mem_patch00 +0x2018 000103 call idle_dispatch +0x2019 000104 call app_process_idle +0x201a 000105 call inquiry_dispatch +0x201b 000106 call inquiry_scan_dispatch +0x201c 000107 call page_scan_dispatch +0x201d 000108 call connection_dispatch +0x201e 000109 call lpm_dispatch +0x201f 000110 call g24_dispatch +0x2020 000111 branch main_loop +: 000113 connection_dispatch: +0x2021 000114 call connection_incontext +0x2022 000115 rtnmark0 mark_context +0x2023 000116 set0 mark_context ,mark +0x2024 000117 call context_save +0x2025 000118 branch le_disable +: 000120 connection_incontext: +0x2026 000121 bpatch patch00_5 ,mem_patch00 +0x2027 000122 call context_search_insniff +0x2028 000123 nbranch connection_nosniff ,zero +0x2029 000124 call context_load +0x202a 000125 add rega ,coffset_mode ,contr +0x202b 000126 ifetch 1 ,contr +0x202c 000127 bbit1 mode_le ,le_conn_dispatch +0x202d 000128 bbit1 mode_master ,master_dispatch +0x202e 000129 branch slave_dispatch +: 000130 connection_nosniff: +0x202f 000131 call context_get_next +0x2030 000132 copy loopcnt ,null +0x2031 000133 rtn zero +0x2032 000134 call context_load +0x2033 000135 fetch 1 ,mem_state +0x2034 000136 bbit1 state_inpage ,master_page +0x2035 000137 fetch 1 ,mem_mode +0x2036 000138 bbit1 mode_master ,master_dispatch +0x2037 000139 branch slave_dispatch +: 000147 idle_dispatch: +0x2038 000148 fetch 1 ,mem_hci_cmd +0x2039 000149 rtn blank +0x203a 000150 beq hci_cmd_inquiry ,idle_inquiry +0x203b 000151 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +0x203c 000152 beq hci_cmd_remote_name_req ,idle_remote_name_req +0x203d 000153 beq hci_cmd_create_conn ,idle_create_conn +0x203e 000154 beq hci_cmd_le_create_conn ,idle_le_create_conn +0x203f 000155 call context_search_conn_handle +0x2040 000156 rtn zero +0x2041 000157 call context_search_plap +0x2042 000158 rtn zero +: 000159 idle_exit: +0x2043 000160 jam 0 ,mem_hci_cmd +0x2044 000161 rtn +: 000163 idle_le_create_conn: +0x2045 000164 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +0x2046 000165 jam 0 ,mem_hci_cmd +0x2047 000166 rtn +: 000168 idle_inquiry: +0x2048 000169 set1 mark_inquiry_on ,mark +0x2049 000170 set0 mark_inquiry_trainb ,mark +0x204a 000171 jam param_ninquiry ,mem_ninqy_index +0x204b 000172 jam 31 ,mem_nfreq_index_inq +0x204c 000173 branch idle_exit +: 000175 idle_inquiry_cancel: +0x204d 000176 set0 mark_inquiry_on ,mark +0x204e 000177 force 0 ,stop_watch +0x204f 000178 branch idle_exit +: 000180 idle_remote_name_req: +0x2050 000181 call context_search_plap +0x2051 000182 rtn zero +0x2052 000183 force lmp_name_req ,temp +0x2053 000184 jam 5 ,mem_nameres_cnt +0x2054 000185 branch idle_start_page +: 000187 idle_create_conn: +0x2055 000188 bpatch patch00_6 ,mem_patch00 +: 000189 idle_create_conn_device: +0x2056 000190 fetch 6 ,mem_hci_plap +0x2057 000191 branch idle_exit ,blank +0x2058 000192 jam reconnect_hid ,memui_reconnect_mode +0x2059 000194 jam conn_sm_wait_features_res ,mem_conn_sm +0x205a 000195 branch idle_create_conn_cont +: 000197 idle_create_conn_cont: +0x205b 000198 force lmp_version_req ,temp +: 000199 idle_start_page: +0x205c 000200 bpatch patch00_7 ,mem_patch00 +0x205d 000201 fetch 1 ,mem_page_mode +0x205e 000202 branch idle_page_mode_r0 ,blank +0x205f 000203 lshift3 pdata ,pdata +0x2060 000204 lshift4 pdata ,pdata +0x2061 000205 increase -1 ,pdata +: 000206 idle_page_mode_r0: +0x2062 000207 store 1 ,mem_npage +0x2063 000208 store 1 ,mem_npage_index +0x2064 000209 jam 31 ,mem_nfreq_index_page +0x2065 000210 set0 mark_page_trainb ,mark +0x2066 000211 call context_new +0x2067 000212 nbranch idle_page_fail ,zero +0x2068 000213 call get_free_amaddr +0x2069 000214 store 1 ,mem_amaddr +0x206a 000215 storet 1 ,mem_lmo_opcode2 +0x206b 000216 fetch 6 ,mem_hci_plap +0x206c 000217 store 6 ,mem_plap +0x206d 000218 bpatch patch01_0 ,mem_patch01 +0x206e 000219 call timer_reinit +0x206f 000220 force 0 ,pdata +0x2070 000221 compare lmp_name_req ,temp ,0xff +0x2071 000222 nsetflag true ,state_init_seq ,pdata +0x2072 000223 set1 state_inpage ,pdata +0x2073 000224 store 1 ,mem_state +0x2074 000225 jam bt_evt_reconn_started ,mem_fifo_temp +0x2075 000226 call ui_ipc_send_event +0x2076 000227 force 0 ,pdata +0x2077 000228 setflag true ,smap_name_req ,pdata +0x2078 000229 store 1 ,mem_state_map +0x2079 000230 setarg 0 +0x207a 000231 set1 mode_master ,pdata +0x207b 000232 store 1 ,mem_mode +0x207c 000233 enable master +0x207d 000234 call context_save +0x207e 000235 disable master +0x207f 000236 force page_length_timer ,queue +0x2080 000237 fetch 2 ,mem_page_to +0x2081 000238 call timer_init +0x2082 000239 branch idle_exit +: 000240 idle_page_fail: +0x2083 000241 bpatch patch01_1 ,mem_patch01 +0x2084 000242 fetch 6 ,mem_hci_plap +0x2085 000243 store 6 ,mem_plap +0x2086 000244 compare lmp_name_req ,temp ,0xff +0x2087 000245 branch idle_name_fail ,true +0x2088 000246 branch idle_exit +: 000247 idle_name_fail: +0x2089 000248 arg mem_tmp_buffer ,contw +0x208a 000249 arg 8 ,loopcnt +0x208b 000250 call memset0 +0x208c 000251 jam bt_evt_reconn_failed ,mem_fifo_temp +0x208d 000252 call ui_ipc_send_event +0x208e 000253 branch idle_exit +: 000260 inquiry_dispatch: +0x208f 000261 rtnmark0 mark_inquiry_on +0x2090 000262 force inquiry_length_timer ,queue +0x2091 000263 call timer_check +0x2092 000264 nsetflag blank ,mark_inquiry_on ,mark +0x2093 000265 nbranch inquiry_start ,blank +0x2094 000266 rtn +: 000270 inquiry_start: +0x2095 000271 bpatch patch01_2 ,mem_patch01 +0x2096 000272 fetcht 2 ,mem_inq_window +0x2097 000273 force 4 ,queue +0x2098 000274 call sniff_check_window +0x2099 000275 rtn user +0x209a 000276 call afh_clear +0x209b 000277 force 0 ,freq_mode +: 000278 inquiry_restart: +0x209c 000279 rtn timeout +0x209d 000280 set0 mark_fhs_already_good ,mark +0x209e 000281 set0 mark_fhs_eir ,mark +: 000282 inquiry_rx_restart: +0x209f 000283 add clkn_bt ,1 ,bt_clk +0x20a0 000284 isolate1 mark_inquiry_trainb ,mark +0x20a1 000285 setflag true ,2 ,freq_mode +0x20a2 000286 compare 0x00 ,bt_clk ,0x02 +0x20a3 000287 nbranch inquiry_receive ,true +: 000289 inquiry_transmit: +0x20a4 000290 bpatch patch01_3 ,mem_patch01 +0x20a5 000291 fetch 1 ,mem_inquiry_transmit +0x20a6 000292 increase 1 ,pdata +0x20a7 000293 store 1 ,mem_inquiry_transmit +0x20a8 000294 call fetch_giac +0x20a9 000295 call tx_radio_freq +0x20aa 000296 call fetch_diac +0x20ab 000297 call start_transmitter +0x20ac 000298 call start_tx_native +0x20ad 000299 call send_access_word +0x20ae 000300 call end_of_packet +0x20af 000301 call inquiry_check_train +0x20b0 000302 branch inquiry_restart +: 000304 inquiry_check_train: +0x20b1 000305 bpatch patch01_4 ,mem_patch01 +0x20b2 000306 fetch 1 ,mem_nfreq_index_inq +0x20b3 000307 increase -1 ,pdata +0x20b4 000308 store 1 ,mem_nfreq_index_inq +0x20b5 000309 rtn positive +0x20b6 000310 jam 31 ,mem_nfreq_index_inq +0x20b7 000311 fetch 1 ,mem_ninqy_index +0x20b8 000312 increase -1 ,pdata +0x20b9 000313 store 1 ,mem_ninqy_index +0x20ba 000314 rtn positive +0x20bb 000315 setflip mark_inquiry_trainb ,mark +0x20bc 000316 jam param_ninquiry ,mem_ninqy_index +0x20bd 000317 rtn +: 000319 inquiry_receive: +0x20be 000320 bpatch patch01_5 ,mem_patch01 +0x20bf 000321 call fetch_giac +0x20c0 000322 call rx_radio_freq +0x20c1 000323 call fetch_diac +0x20c2 000324 call start_rx_native +0x20c3 000325 call start_receiver +0x20c4 000326 call wait_access_clkn_rt +0x20c5 000327 branch inquiry_sync ,sync +0x20c6 000328 call inquiry_check_train +0x20c7 000329 branch inquiry_rx_restart +: 000330 inquiry_sync: +0x20c8 000331 bpatch patch01_6 ,mem_patch01 +0x20c9 000332 call save_rssi +0x20ca 000333 call scan_mode_whiten +0x20cb 000334 call receive_packet_whitened +0x20cc 000335 set0 mark_rxbuf_inuse ,mark +0x20cd 000336 rtnmark0 mark_fhs_already_good +: 000337 inquiry_receive_rtn: +0x20ce 000338 bpatch patch01_7 ,mem_patch01 +: 000339 inquiry_receive_eir_rtn: +0x20cf 000340 fetch 1 ,mem_inquiry_rcv +0x20d0 000341 increase 1 ,pdata +0x20d1 000342 store 1 ,mem_inquiry_rcv +0x20d2 000343 rtn +: 000351 master_page: +0x20d3 000352 bpatch patch02_0 ,mem_patch02 +0x20d4 000353 enable master +0x20d5 000354 enable clknt +0x20d6 000355 fetch 2 ,mem_page_interval +0x20d7 000356 branch master_page_no_interval ,blank +0x20d8 000357 force page_interval_timer ,queue +0x20d9 000358 call timer_check +0x20da 000359 nrtn blank +: 000360 master_page_no_interval: +0x20db 000361 bpatch patch02_1 ,mem_patch02 +0x20dc 000362 fetcht 2 ,mem_page_window +0x20dd 000363 force 40 ,queue +0x20de 000364 call sniff_check_window +0x20df 000365 branch page_exit ,user +0x20e0 000366 force page_length_timer ,queue +0x20e1 000367 call timer_check +0x20e2 000368 nbranch page_start ,blank +0x20e3 000369 fetch 1 ,mem_state_map +0x20e4 000370 bbit1 smap_name_req ,master_npage_timeout +0x20e5 000371 branch master_page_timeout +: 000372 master_npage_timeout: +0x20e6 000373 arg mem_tmp_buffer ,contw +0x20e7 000374 arg 8 ,loopcnt +0x20e8 000375 call memset0 +: 000376 master_page_timeout: +0x20e9 000377 bpatch patch02_2 ,mem_patch02 +0x20ea 000378 jam 0 ,mem_state +0x20eb 000379 call init_lmp_work +0x20ec 000380 jam 0 ,memui_reconnect_mode +0x20ed 000381 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +0x20ee 000382 call ui_ipc_send_event +0x20ef 000383 branch page_exit +: 000385 page_start: +0x20f0 000386 bpatch patch02_3 ,mem_patch02 +0x20f1 000387 force 0 ,timeup +0x20f2 000388 until clkn_rt ,meet +0x20f3 000389 fetch 1 ,mem_page_clk +0x20f4 000390 increase -1 ,pdata +0x20f5 000391 ixor clkn_bt ,pdata +0x20f6 000392 compare 0 ,pdata ,3 +0x20f7 000393 nbranch page_start ,true +0x20f8 000394 deposit am_addr +0x20f9 000395 store 1 ,mem_fhs_am_addr +0x20fa 000396 force 0 ,n_tx_slot +0x20fb 000397 force 0 ,freq_mode +: 000399 page_restart: +0x20fc 000400 bpatch patch02_4 ,mem_patch02 +0x20fd 000401 branch page_exit ,timeout +0x20fe 000402 call fetch_page_bt_adr +0x20ff 000403 arg param_rf_setup ,timeup +0x2100 000404 until clkn_rt ,meet +: 000405 page_rx_restart: +0x2101 000406 bpatch patch02_5 ,mem_patch02 +0x2102 000407 fetch 4 ,mem_page_clk +0x2103 000408 iforce bt_clk +0x2104 000409 increase 1 ,pdata +0x2105 000410 store 4 ,mem_page_clk +0x2106 000411 isolate1 mark_page_trainb ,mark +0x2107 000412 setflag true ,2 ,freq_mode +0x2108 000413 compare 0x00 ,bt_clk ,0x02 +0x2109 000414 nbranch page_receive ,true +0x210a 000415 fetch 1 ,mem_page_transmit +0x210b 000416 increase 1 ,pdata +0x210c 000417 store 1 ,mem_page_transmit +0x210d 000418 call tx_radio_freq +0x210e 000419 call start_transmitter +0x210f 000420 call start_tx_native +0x2110 000421 call send_access_word +0x2111 000422 call end_of_packet +0x2112 000423 call page_check_train +0x2113 000424 branch page_restart +: 000425 page_exit: +0x2114 000426 bpatch patch02_6 ,mem_patch02 +0x2115 000427 disable master +0x2116 000428 fetch 2 ,mem_page_interval +0x2117 000429 rtn blank +0x2118 000430 force page_interval_timer ,queue +0x2119 000431 branch timer_init +: 000433 page_check_train: +0x211a 000434 bpatch patch02_7 ,mem_patch02 +0x211b 000435 fetch 1 ,mem_nfreq_index_page +0x211c 000436 increase -1 ,pdata +0x211d 000437 store 1 ,mem_nfreq_index_page +0x211e 000438 rtn positive +0x211f 000439 jam 31 ,mem_nfreq_index_page +0x2120 000440 fetch 1 ,mem_npage_index +0x2121 000441 increase -1 ,pdata +0x2122 000442 store 1 ,mem_npage_index +0x2123 000443 rtn positive +0x2124 000444 setflip mark_page_trainb ,mark +0x2125 000445 fetch 1 ,mem_npage +0x2126 000446 store 1 ,mem_npage_index +0x2127 000447 rtn +: 000449 page_receive: +0x2128 000450 bpatch patch03_0 ,mem_patch03 +0x2129 000451 call rx_radio_freq +0x212a 000452 call start_rx_native +0x212b 000453 call start_receiver +0x212c 000454 call wait_access_clkn_rt +0x212d 000455 branch page_sync ,sync +0x212e 000456 call page_check_train +0x212f 000457 branch page_rx_restart +: 000458 page_sync: +0x2130 000459 call end_of_packet +0x2131 000460 fetch 1 ,mem_page_rcv +0x2132 000461 increase 1 ,pdata +0x2133 000462 store 1 ,mem_page_rcv +0x2134 000463 force 0 ,stop_watch +0x2135 000464 fetch 4 ,mem_page_clk +: 000465 page_send_fhs: +0x2136 000466 bpatch patch03_1 ,mem_patch03 +0x2137 000467 call rf_setup_time_master_slot +0x2138 000468 call fetch_page_bt_adr +0x2139 000469 increase 1 ,n_tx_slot +: 000470 page_send_fhs_continue: +0x213a 000471 and_into 0x1fd ,bt_clk +0x213b 000472 and_into 0x1fc ,freq_mode +0x213c 000473 call tx_radio_freq +0x213d 000474 call start_transmitter +0x213e 000475 call start_tx_native +0x213f 000476 call send_access_word +0x2140 000477 deposit clkn_bt +0x2141 000478 store 4 ,mem_clkn_bt +0x2142 000479 force 0 ,am_addr +0x2143 000480 force type_fhs ,type +0x2144 000481 call scan_mode_whiten +0x2145 000482 call transmit_packet_whitened +: 000483 page_wait_fhs_reply: +0x2146 000484 bpatch patch03_2 ,mem_patch03 +0x2147 000485 call rf_setup_time_slave_slot +0x2148 000486 or_into 0x02 ,bt_clk +0x2149 000487 and_into 0x1fc ,freq_mode +0x214a 000488 call rx_radio_freq +0x214b 000489 call start_rx_native +0x214c 000490 call start_receiver +0x214d 000491 call wait_access_clkn_rt +0x214e 000492 call end_of_packet ,sync +0x214f 000493 branch page_wait_fhs_reply_ok ,sync +0x2150 000494 fetch 1 ,mem_fhs_wait_counter +0x2151 000495 branch page_restart ,blank +0x2152 000496 increase -1 ,pdata +0x2153 000497 store 1 ,mem_fhs_wait_counter +0x2154 000498 branch page_send_fhs +: 000500 page_wait_fhs_reply_ok: +0x2155 000501 bpatch patch03_3 ,mem_patch03 +0x2156 000502 fetch 1 ,mem_page_rcv_fhs +0x2157 000503 increase 1 ,pdata +0x2158 000504 store 1 ,mem_page_rcv_fhs +0x2159 000505 call prepare_newconn +: 000506 master_newconn_loop: +0x215a 000507 call master_newconn_once +0x215b 000508 branch newconn_poll_responded ,sync +0x215c 000509 call new_conn_timeout +0x215d 000510 nbranch master_newconn_loop ,blank +0x215e 000511 branch page_restart +: 000513 newconn_poll_responded: +0x215f 000514 bpatch patch03_4 ,mem_patch03 +0x2160 000515 fetch 1 ,mem_state +0x2161 000516 set0 state_inpage ,pdata +0x2162 000517 store 1 ,mem_state +0x2163 000518 call newconn_init +0x2164 000519 disable master +0x2165 000520 rtn +: 000523 master_dispatch: +0x2166 000524 bpatch patch03_5 ,mem_patch03 +0x2167 000525 enable master +0x2168 000526 enable clknt +0x2169 000527 call role_switch_master +0x216a 000528 rtn user +0x216b 000529 call check_bt_disabled +0x216c 000530 call rf_setup_time_master_slot +0x216d 000531 add clkn_bt ,1 ,bt_clk +0x216e 000532 call fetch_self_bt_adr +0x216f 000533 force 0x03 ,freq_mode +0x2170 000534 call scheduler_tx_l2cap_pkt +0x2171 000535 call prepare_tx +0x2172 000536 call tx_radio_freq +0x2173 000537 call start_transmitter +0x2174 000538 call start_tx_native +0x2175 000539 call send_access_word +0x2176 000540 call transmit_packet +: 000541 master_loop: +0x2177 000542 bpatch patch03_6 ,mem_patch03 +0x2178 000543 call parse_lmp +0x2179 000544 call master_conn_recv_packet +0x217a 000545 nbranch master_notmatch ,match +0x217b 000546 call supervision_flush +0x217c 000547 call parse_l2cap +0x217d 000548 fetch 1 ,mem_master_rcvcnt +0x217e 000549 increase 1 ,pdata +0x217f 000550 store 1 ,mem_master_rcvcnt +: 000551 master_notmatch: +0x2180 000552 bpatch patch03_7 ,mem_patch03 +0x2181 000553 call scheduler_process +0x2182 000554 call check_master_disconnect +0x2183 000555 nrtn master +0x2184 000556 call check_attempt +0x2185 000557 nbranch master_attempt ,blank +: 000558 master_exit: +0x2186 000559 disable master +0x2187 000560 rtn +: 000562 master_attempt: +0x2188 000563 call prepare_tx +0x2189 000564 call master_conn_send_packet +0x218a 000565 branch master_loop +: 000568 check_master_disconnect: +0x218b 000569 branch check_master_match ,match +0x218c 000570 call supervision_update +0x218d 000571 branch master_disconnect ,positive +: 000572 check_master_match: +0x218e 000573 call check_disconnect_timeout +0x218f 000574 nbranch master_disconnect ,user +0x2190 000575 fetch 1 ,mem_state_map +0x2191 000576 rtnbit0 smap_name_req +0x2192 000577 rtnbit1 smap_name_res +0x2193 000578 fetch 1 ,mem_op +0x2194 000579 rtnbit1 op_disconn +0x2195 000580 call conn_timer_expired +0x2196 000581 nrtn blank +0x2197 000582 fetch 1 ,mem_nameres_cnt +0x2198 000583 increase -1 ,pdata +0x2199 000584 store 1 ,mem_nameres_cnt +0x219a 000585 nrtn blank +0x219b 000586 branch lmp_disconnect +: 000588 master_disconnect: +0x219c 000589 bpatch patch04_0 ,mem_patch04 +0x219d 000590 call quit_connection +0x219e 000591 disable master +0x219f 000592 fetch 1 ,mem_state_map +0x21a0 000593 bbit1 smap_name_req ,master_name_disconnect +0x21a1 000594 rtn +: 000596 master_name_disconnect: +0x21a2 000597 fetch 1 ,mem_state_map +0x21a3 000598 rtnbit1 smap_name_res +: 000599 master_name_error: +0x21a4 000600 arg mem_tmp_buffer ,contw +0x21a5 000601 arg 8 ,loopcnt +0x21a6 000602 branch memset0 +: 000604 check_disconnect_timeout: +0x21a7 000605 bpatch patch04_1 ,mem_patch04 +0x21a8 000606 enable user +0x21a9 000607 fetch 1 ,mem_op +0x21aa 000608 rtnbit0 op_disconn +0x21ab 000609 call conn_timer_expired +0x21ac 000610 nrtn blank +0x21ad 000611 branch disable_user +: 000613 conn_timer_expired: +0x21ae 000614 fetch 1 ,mem_conn_timer +0x21af 000615 increase -1 ,pdata +0x21b0 000616 store 1 ,mem_conn_timer +0x21b1 000617 rtn +: 000619 linkkey_ready: +0x21b2 000620 bpatch patch04_2 ,mem_patch04 +0x21b3 000621 fetch 1 ,mem_state +0x21b4 000622 bbit1 state_linkkey ,linkkey_set +0x21b5 000623 fetch 1 ,mem_pairing_auth +0x21b6 000624 branch linkkey_set ,blank +0x21b7 000625 jam defalt_pairing_auth ,mem_pairing_auth +0x21b8 000626 jam bt_evt_linkkey_generate ,mem_fifo_temp +0x21b9 000627 call ui_ipc_send_event +0x21ba 000628 branch linkkey_set +: 000629 linkkey_set: +0x21bb 000630 bpatch patch04_3 ,mem_patch04 +0x21bc 000631 call context_traverse_linkkey +0x21bd 000632 fetch 1 ,mem_state +0x21be 000633 set1 state_linkkey ,pdata +0x21bf 000634 store 1 ,mem_state +0x21c0 000635 jam 1 ,mem_link_key_exists +0x21c1 000636 fetch 1 ,mem_conn_sm +0x21c2 000637 bne conn_sm_pairing ,linkkey_set_continue +: 000638 linkkey_set_continue: +0x21c3 000639 rtn +: 000641 generate_linkkey_continue: +0x21c4 000642 jam pairing_auth ,mem_pairing_auth +: 000643 clear_linkstate: +0x21c5 000644 fetch 1 ,mem_state +0x21c6 000645 set0 state_linkkey ,pdata +0x21c7 000646 store 1 ,mem_state +0x21c8 000647 rtn +: 000651 role_switch_check: +0x21c9 000652 bpatch patch04_4 ,mem_patch04 +0x21ca 000653 disable user +0x21cb 000654 fetch 2 ,mem_tsniff +0x21cc 000655 arg 0xffff ,temp +0x21cd 000656 isub temp ,null +0x21ce 000657 nrtn zero +0x21cf 000658 fetch 4 ,mem_sniff_anchor +0x21d0 000659 branch role_switch_clkn ,clknt +0x21d1 000660 isub clke_bt ,pdata +0x21d2 000661 branch role_switch_clke +: 000662 role_switch_clkn: +0x21d3 000663 isub clkn_bt ,pdata +: 000664 role_switch_clke: +0x21d4 000665 sub pdata ,4 ,null +0x21d5 000666 nrtn positive +0x21d6 000667 force 0 ,pdata +0x21d7 000668 store 2 ,mem_tsniff +0x21d8 000669 branch enable_user +: 000673 role_switch_prepare: +0x21d9 000674 copy pdata ,temp +0x21da 000675 bpatch patch04_5 ,mem_patch04 +0x21db 000676 storet 4 ,mem_sniff_anchor +: 000677 role_switch_prepare0: +0x21dc 000678 jam switch_flag_accept ,mem_switch_flag +0x21dd 000679 setarg 0xffff +0x21de 000680 store 2 ,mem_tsniff +0x21df 000681 jam 1 ,mem_sniff_attempt +0x21e0 000682 rtn +: 000685 role_switch_master: +0x21e1 000686 bpatch patch04_6 ,mem_patch04 +0x21e2 000687 call role_switch_check +0x21e3 000688 nrtn user +0x21e4 000689 disable user +0x21e5 000690 jam param_newconnto ,mem_newconnto_counter +0x21e6 000691 set0 mark_fhs_already_good ,mark +: 000692 roles_waitfhs_loop: +0x21e7 000693 call rf_setup_time_master_slot +0x21e8 000694 call master_recv_packet +0x21e9 000695 bmark1 mark_fhs_already_good ,roles_replyto_fhs +0x21ea 000696 call new_conn_timeout +0x21eb 000697 nbranch roles_waitfhs_loop ,blank +: 000698 role_switch_fail_master: +0x21ec 000699 bpatch patch04_7 ,mem_patch04 +0x21ed 000700 disable user +0x21ee 000701 deposit clkn_bt +0x21ef 000702 store 4 ,mem_next_btclk +0x21f0 000703 enable clknt +0x21f1 000704 enable master +0x21f2 000705 jam bt_evt_switch_fail_master ,mem_fifo_temp +0x21f3 000706 branch ui_ipc_send_event +: 000708 roles_replyto_fhs: +0x21f4 000709 bpatch patch05_0 ,mem_patch05 +0x21f5 000710 call rf_setup_time_slave_slot +0x21f6 000711 arg type_id ,type +0x21f7 000712 call master_send_packet +0x21f8 000713 disable clknt +0x21f9 000714 disable master +0x21fa 000715 call apply_switch_clke +0x21fb 000716 call prepare_newconn +: 000717 roles_newconns_loop: +0x21fc 000718 bpatch patch05_1 ,mem_patch05 +0x21fd 000719 call slave_newconn_once +0x21fe 000720 branch roles_newconns_responded ,match +0x21ff 000721 call new_conn_timeout +0x2200 000722 nbranch roles_newconns_loop ,blank +0x2201 000723 branch role_switch_fail_master +: 000724 roles_newconns_responded: +0x2202 000725 fetch 1 ,mem_mode +0x2203 000726 set0 mode_master ,pdata +0x2204 000727 store 1 ,mem_mode +0x2205 000728 call supervision_flush +0x2206 000729 call calc_clke_offset +0x2207 000730 enable user +0x2208 000731 jam bt_evt_switch_success_master ,mem_fifo_temp +0x2209 000732 branch ui_ipc_send_event +: 000737 context_load: +0x220a 000738 bpatch patch05_2 ,mem_patch05 +0x220b 000739 set1 mark_context ,mark +0x220c 000740 deposit rega +0x220d 000741 store 2 ,mem_context_ptr +0x220e 000742 force context_size ,loopcnt +0x220f 000743 arg mem_le_state ,contw +0x2210 000744 add rega ,coffset_mode ,contr +0x2211 000745 ifetch 1 ,contr +0x2212 000746 copy rega ,contr +0x2213 000747 bbit1 mode_le ,memcpy +0x2214 000748 arg mem_state ,contw +0x2215 000749 call memcpy +0x2216 000750 disable attempt +0x2217 000751 fetch 1 ,mem_amaddr +0x2218 000752 iforce am_addr +0x2219 000753 jam 1 ,mem_current_sniff_attempt +0x221a 000754 branch context_load_master ,master +0x221b 000755 jam 1 ,mem_current_sniff_attempt +: 000756 context_load_master: +0x221c 000757 fetch 1 ,mem_state +0x221d 000758 rtnbit0 state_insniff +0x221e 000759 fetch 1 ,mem_sniff_attempt +0x221f 000760 store 1 ,mem_current_sniff_attempt +0x2220 000761 fetch 1 ,mem_sniff_timeout +0x2221 000762 store 1 ,mem_current_sniff_timeout +0x2222 000763 rtn +: 000765 context_save: +0x2223 000766 bpatch patch05_3 ,mem_patch05 +0x2224 000767 fetch 2 ,mem_context_ptr +0x2225 000768 iforce contw +0x2226 000769 force context_size ,loopcnt +0x2227 000770 arg mem_le_state ,contr +0x2228 000771 branch memcpy ,le +0x2229 000772 arg mem_state ,contr +0x222a 000773 branch memcpy +: 000777 context_get_next: +0x222b 000778 arg context_num ,loopcnt +0x222c 000779 fetcht 1 ,mem_current_context +: 000780 context_get_next_loop: +0x222d 000781 increase 1 ,temp +0x222e 000782 compare context_num ,temp ,0xff +0x222f 000783 nbranch context_get_next_cont ,true +0x2230 000784 arg 0 ,temp +: 000785 context_get_next_cont: +0x2231 000786 storet 1 ,mem_current_context +0x2232 000787 mul32 temp ,context_size ,pdata +0x2233 000788 arg mem_context ,rega +0x2234 000789 iadd rega ,rega +0x2235 000790 ifetch 1 ,rega +0x2236 000791 bbit1 state_insniff ,context_get_next_sniff +0x2237 000792 rtnbit1 state_inconn +0x2238 000793 rtnbit1 state_inpage +: 000794 context_get_next_sniff: +0x2239 000795 loop context_get_next_loop +0x223a 000796 rtn +: 000798 context_new: +0x223b 000799 bpatch patch05_4 ,mem_patch05 +0x223c 000800 arg context_search_empty ,regc +0x223d 000801 call context_search +0x223e 000802 nrtn zero +0x223f 000803 deposit rega +0x2240 000804 store 2 ,mem_context_ptr +0x2241 000805 force 0 ,null +0x2242 000806 rtn +: 000810 context_check_all_wack: +0x2243 000811 call check_esco_amaddr +0x2244 000812 branch context_check_esco_wack ,true +0x2245 000813 fetch 2 ,mem_context_ptr +0x2246 000814 add pdata ,coffset_arq ,contw +0x2247 000815 fetch 1 ,mem_arq +0x2248 000816 istore 1 ,contw +0x2249 000817 arg context_check_a_wack ,regc +0x224a 000818 branch context_search +: 000820 context_check_esco_wack: +0x224b 000821 fetch 1 ,mem_arq +0x224c 000822 isolate1 wack ,pdata +0x224d 000823 branch context_esco_wack ,true +0x224e 000824 force 1 ,null +0x224f 000825 rtn +: 000826 context_esco_wack: +0x2250 000827 force 0 ,null +0x2251 000828 rtn +: 000831 context_check_idle: +0x2252 000832 arg context_check_inconn ,regc +0x2253 000833 branch context_search +: 000835 context_traverse_linkkey: +0x2254 000836 fetcht 2 ,mem_context_ptr +0x2255 000837 arg context_traverse_clearkey ,regc +0x2256 000838 branch context_search +: 000842 context_search_conn_handle: +0x2257 000843 fetcht 1 ,mem_hci_conn_handle +: 000844 context_search_conn_handle2: +0x2258 000845 arg context_search_handle ,regc +0x2259 000846 branch context_search +: 000848 context_search_plap: +0x225a 000849 bpatch patch05_5 ,mem_patch05 +0x225b 000850 fetcht 6 ,mem_hci_plap +: 000851 context_search_plap2: +0x225c 000852 arg context_search_lap ,regc +0x225d 000853 branch context_search +: 000855 context_search_insniff: +0x225e 000856 arg context_search_sniff ,regc +0x225f 000857 branch context_search +: 000859 context_search_sniff_window: +0x2260 000860 arg context_search_window ,regc +: 000861 context_search: +0x2261 000862 bpatch patch05_6 ,mem_patch05 +0x2262 000863 arg mem_context ,rega +0x2263 000864 arg context_num ,loopcnt +: 000865 context_search_loop: +0x2264 000866 ifetch 1 ,rega +0x2265 000867 copy regc ,pc +: 000868 context_search_next: +0x2266 000869 increase context_size ,rega +0x2267 000870 loop context_search_loop +0x2268 000871 force 1 ,null +0x2269 000872 rtn +: 000874 context_search_empty: +0x226a 000875 bbit1 state_inconn ,context_search_next +0x226b 000876 bbit1 state_inpage ,context_search_next +0x226c 000877 force 0 ,null +0x226d 000878 rtn +: 000880 context_search_lap: +0x226e 000881 bbit1 state_inpage ,context_search_lap_cont +0x226f 000882 bbit0 state_inconn ,context_search_next +: 000883 context_search_lap_cont: +0x2270 000884 add rega ,coffset_plap ,contr +0x2271 000885 ifetch 6 ,contr +0x2272 000886 isub temp ,null +0x2273 000887 rtn zero +0x2274 000888 branch context_search_next +: 000890 context_search_handle: +0x2275 000891 bbit0 state_inconn ,context_search_next +0x2276 000892 add rega ,coffset_conn_handle ,contr +0x2277 000893 ifetch 1 ,contr +0x2278 000894 isub temp ,null +0x2279 000895 rtn zero +0x227a 000896 branch context_search_next +: 000898 context_search_sniff: +0x227b 000899 bbit0 state_insniff ,context_search_next +: 000900 context_search_sniff_loop: +0x227c 000901 call context_get_anchor +0x227d 000902 call sign_pdata_temp +0x227e 000903 isub temp ,pdata +0x227f 000904 increase 1 ,pdata +0x2280 000905 branch context_search_sniff_miss ,positive +0x2281 000906 copy contr ,regb +0x2282 000907 store 9 ,mem_temp +0x2283 000908 fetch 1 ,mem_le_sc_calc +0x2284 000909 nbranch context_search_sniff_sc ,blank +0x2285 000910 fetch 9 ,mem_temp +0x2286 000911 copy regb ,contr +0x2287 000912 increase 5 ,pdata +0x2288 000913 branch context_search_meet1 +: 000914 context_search_sniff_sc: +0x2289 000915 fetch 9 ,mem_temp +0x228a 000916 copy regb ,contr +0x228b 000917 increase 20 ,pdata +: 000918 context_search_meet1: +0x228c 000919 nbranch context_search_next ,positive +: 000920 context_search_meet: +0x228d 000921 copy temp ,bt_clk +0x228e 000922 call context_next_anchor +0x228f 000923 force 0 ,null +0x2290 000924 rtn +: 000927 context_search_sniff_miss: +0x2291 000928 iforce regb +0x2292 000929 add rega ,coffset_tsniff ,contr +0x2293 000930 ifetch 2 ,contr +0x2294 000931 branch context_search_meet ,blank +0x2295 000932 call context_next_anchor +0x2296 000933 branch context_search_sniff_loop +: 000935 sign_pdata_temp: +0x2297 000936 rshift16 pdata ,timeup +0x2298 000937 rshift8 timeup ,timeup +0x2299 000938 branch sign_pdata_temp_p0 ,zero +0x229a 000939 compare 0xf ,timeup ,0xf +0x229b 000940 nrtn true +0x229c 000941 rshift16 temp ,timeup +0x229d 000942 rshift8 timeup ,timeup +0x229e 000943 nrtn zero +0x229f 000944 set1 28 ,temp +0x22a0 000945 rtn +: 000946 sign_pdata_temp_p0: +0x22a1 000947 rshift16 temp ,timeup +0x22a2 000948 rshift8 timeup ,timeup +0x22a3 000949 compare 0xf ,timeup ,0xf +0x22a4 000950 nrtn true +0x22a5 000951 set1 28 ,pdata +0x22a6 000952 rtn +: 000954 context_check_inconn: +0x22a7 000955 bbit0 state_inconn ,context_search_next +0x22a8 000956 force 0 ,null +0x22a9 000957 rtn +: 000959 context_check_a_wack: +0x22aa 000960 bbit0 state_inconn ,context_search_next +0x22ab 000961 add rega ,coffset_mode ,contr +0x22ac 000962 ifetch 1 ,contr +0x22ad 000963 bbit1 mode_le ,context_search_next +0x22ae 000964 add rega ,coffset_arq ,contr +0x22af 000965 ifetch 1 ,contr +0x22b0 000966 bbit0 wack ,context_search_next +0x22b1 000967 force 0 ,null +0x22b2 000968 rtn +: 000970 context_get_anchor: +0x22b3 000971 add rega ,coffset_mode ,contr +0x22b4 000972 ifetcht 1 ,contr +0x22b5 000973 deposit clkn_bt +0x22b6 000974 isolate1 mode_master ,temp +0x22b7 000975 add rega ,coffset_sniff_anchor ,contr +0x22b8 000976 ifetcht 4 ,contr +0x22b9 000977 rtn true +0x22ba 000978 add rega ,coffset_clk_offset ,contr +0x22bb 000979 ifetch 6 ,contr +0x22bc 000980 call calc_clke2 +0x22bd 000981 deposit clke_bt +0x22be 000982 rtn +: 000984 context_next_anchor: +0x22bf 000985 add rega ,coffset_tsniff ,contr +0x22c0 000986 add rega ,coffset_sniff_anchor ,contw +0x22c1 000987 ifetch 2 ,contr +0x22c2 000988 iadd temp ,timeup +0x22c3 000989 deposit timeup +0x22c4 000990 istore 4 ,contw +0x22c5 000991 branch le_context_nexthop +: 000994 context_search_window: +0x22c6 000995 bbit0 state_insniff ,context_search_next +0x22c7 000996 call context_get_anchor +0x22c8 000997 iadd stop_watch ,pdata +0x22c9 000998 iadd stop_watch ,pdata +0x22ca 000999 iadd queue ,pdata +0x22cb 001000 isub temp ,null +0x22cc 001001 nbranch context_search_next ,positive +0x22cd 001002 force 0 ,null +0x22ce 001003 rtn +: 001005 context_traverse_clearkey: +0x22cf 001006 bbit0 state_inconn ,context_search_next +0x22d0 001007 deposit temp +0x22d1 001008 isub rega ,null +0x22d2 001009 branch context_search_next ,null +0x22d3 001010 add rega ,coffset_mode ,contr +0x22d4 001011 ifetch 1 ,contr +0x22d5 001012 bbit1 mode_le ,context_search_next +0x22d6 001013 ifetch 1 ,rega +0x22d7 001014 set0 state_linkkey ,pdata +0x22d8 001015 istore 1 ,rega +0x22d9 001016 branch context_search_next +: 001019 master_conn_send_packet: +0x22da 001020 bpatch patch05_7 ,mem_patch05 +0x22db 001021 call rf_setup_time_master_slot +: 001022 master_send_packet: +0x22dc 001023 add clkn_bt ,1 ,bt_clk +0x22dd 001024 call fetch_self_bt_adr +0x22de 001025 force 0x03 ,freq_mode +0x22df 001026 call tx_radio_freq +0x22e0 001027 call start_transmitter +0x22e1 001028 call start_tx_native +0x22e2 001029 call send_access_word +0x22e3 001030 branch transmit_packet +: 001032 master_conn_recv_packet: +0x22e4 001033 bpatch patch06_0 ,mem_patch06 +0x22e5 001034 call rf_setup_time_slave_slot +: 001035 master_recv_packet: +0x22e6 001036 add clkn_bt ,1 ,bt_clk +0x22e7 001037 call fetch_self_bt_adr +0x22e8 001038 force 0x03 ,freq_mode +0x22e9 001039 call rx_radio_freq +0x22ea 001040 call init_rx_packet_flags +0x22eb 001041 call prep_crypt +0x22ec 001042 call start_rx_native +0x22ed 001043 call start_receiver +: 001044 master_rx_conn_finish_packet: +0x22ee 001045 call wait_access_clkn_rt +0x22ef 001046 nrtn sync +0x22f0 001047 call save_rssi +0x22f1 001048 branch receive_packet +: 001052 master_newconn_once: +0x22f2 001053 bpatch patch06_1 ,mem_patch06 +0x22f3 001054 fetch 1 ,mem_fhs_am_addr +0x22f4 001055 iforce am_addr +0x22f5 001056 force type_poll ,type +0x22f6 001057 call master_conn_send_packet +0x22f7 001058 branch master_conn_recv_packet +: 001069 inquiry_scan_dispatch: +0x22f8 001070 fetch 1 ,mem_scan_mode +0x22f9 001071 rtnbit0 inq_scan_mode +0x22fa 001072 force iscan_interval_timer ,queue +0x22fb 001073 call timer_check +0x22fc 001074 nrtn blank +0x22fd 001075 fetcht 2 ,mem_iscan_window +0x22fe 001076 force 4 ,queue +0x22ff 001077 call sniff_check_window +0x2300 001078 rtn user +0x2301 001079 call inquiry_scan_start +0x2302 001080 force iscan_interval_timer ,queue +0x2303 001081 fetch 2 ,mem_iscan_interval +0x2304 001082 nbranch timer_init ,sync +0x2305 001083 random pdata +0x2306 001084 iand mask3ff ,pdata +0x2307 001085 branch timer_init +: 001088 inquiry_scan_start: +0x2308 001089 bpatch patch06_2 ,mem_patch06 +0x2309 001090 jam 0 ,mem_fhs_am_addr +0x230a 001091 disable clknt +0x230b 001092 disable attempt +0x230c 001093 call afh_clear +0x230d 001094 and clkn_bt ,0x1fc ,bt_clk +0x230e 001095 force 0x01 ,freq_mode +0x230f 001096 call fetch_giac +0x2310 001097 call rx_radio_freq +0x2311 001098 setflip mark_inquiry_state ,mark +0x2312 001099 fetch 1 ,mem_inquiryscan_waitcnt +0x2313 001100 increase 1 ,pdata +0x2314 001101 store 1 ,mem_inquiryscan_waitcnt +0x2315 001102 call fetch_diac +0x2316 001103 call start_receiver +0x2317 001104 call wait_access_forever +0x2318 001105 nrtn sync +0x2319 001106 bpatch patch06_3 ,mem_patch06 +0x231a 001107 force 0 ,stop_watch +0x231b 001108 call shutdown_radio +0x231c 001109 fetch 1 ,mem_inquiryscan_rcvcnt +0x231d 001110 increase 1 ,pdata +0x231e 001111 store 1 ,mem_inquiryscan_rcvcnt +0x231f 001112 call fetch_giac +0x2320 001113 call rf_setup_time_slave_slot +0x2321 001114 or_into 0x002 ,bt_clk +0x2322 001115 force 0x01 ,freq_mode +0x2323 001116 call tx_radio_freq +0x2324 001117 call fetch_diac +0x2325 001118 call start_transmitter +0x2326 001119 call start_tx_external +0x2327 001120 deposit clkn_bt +0x2328 001121 store 4 ,mem_clkn_bt +0x2329 001122 call send_access_word +0x232a 001123 force type_fhs ,type +0x232b 001124 force 0 ,am_addr +0x232c 001125 call scan_mode_whiten +0x232d 001126 call transmit_packet_whitened +0x232e 001127 call send_eir +0x232f 001128 and_into 0x1fd ,bt_clk +0x2330 001129 increase 1 ,n_tx_slot +0x2331 001130 rtn +: 001132 send_eir: +0x2332 001133 bpatch patch06_4 ,mem_patch06 +0x2333 001134 fetch 1 ,mem_eir_enable +0x2334 001135 rtn blank +0x2335 001136 arg mem_eir ,contw +0x2336 001137 fetch 1 ,mem_local_name_length +0x2337 001138 copy pdata ,loopcnt +0x2338 001139 increase 1 ,pdata +0x2339 001140 istore 1 ,contw +0x233a 001141 copy contw ,temp +0x233b 001142 increase 1 ,pdata +0x233c 001143 store 2 ,mem_tx_len +0x233d 001144 copy temp ,contw +0x233e 001145 setarg 0x09 +0x233f 001146 istore 1 ,contw +0x2340 001147 arg mem_local_name ,contr +0x2341 001148 call memcpy +0x2342 001150 arg mem_all_uuid_128bits ,regc +0x2343 001151 arg 4 ,loopcnt +0x2344 001152 call get_all_uuid +0x2345 001153 arg mem_all_uuid_16bits ,regc +0x2346 001154 arg 1 ,loopcnt +0x2347 001155 call get_all_uuid +0x2348 001157 force type_dm3 ,type +0x2349 001158 jam 2 ,mem_tx_lch +0x234a 001159 setarg mem_eir +0x234b 001160 store 2 ,mem_txptr +0x234c 001161 call rf_setup_time_slave_slot +0x234d 001162 call tx_radio_freq +0x234e 001163 call start_transmitter +0x234f 001164 call start_tx_external +0x2350 001165 call send_access_word +0x2351 001166 call scan_mode_whiten +0x2352 001167 call transmit_packet_whitened +0x2353 001168 rtn +: 001171 get_all_uuid: +0x2354 001172 copy contw ,temp +0x2355 001173 copy regc ,contr +0x2356 001174 ifetch 1 ,contr +0x2357 001175 rtn blank +: 001176 lshift_loop: +0x2358 001177 lshift pdata ,pdata +0x2359 001178 loop lshift_loop +0x235a 001179 copy pdata ,rega +0x235b 001180 increase 2 ,pdata +0x235c 001181 copy pdata ,queue +0x235d 001182 fetch 2 ,mem_tx_len +0x235e 001183 iadd queue ,pdata +0x235f 001184 store 2 ,mem_tx_len +0x2360 001185 copy temp ,contw +0x2361 001186 copy rega ,pdata +0x2362 001187 increase 1 ,pdata +0x2363 001188 istore 1 ,contw +0x2364 001189 copy regc ,contr +0x2365 001190 ifetch 1 ,contr +0x2366 001191 ifetch 1 ,contr +0x2367 001192 istore 1 ,contw +0x2368 001193 copy rega ,loopcnt +0x2369 001194 branch memcpy +: 001200 page_scan_dispatch: +0x236a 001201 fetch 1 ,mem_scan_mode +0x236b 001202 rtnbit0 page_scan_mode +0x236c 001203 force pscan_interval_timer ,queue +0x236d 001204 call timer_check +0x236e 001205 nrtn blank +0x236f 001206 fetcht 2 ,mem_pscan_window +0x2370 001207 force 40 ,queue +0x2371 001208 call sniff_check_window +0x2372 001209 rtn user +0x2373 001210 force 0 ,am_addr +0x2374 001211 jam param_pagerespto ,mem_fhs_wait_counter +0x2375 001212 set0 mark_fhs_already_good ,mark +0x2376 001213 call page_scan_start +0x2377 001214 force pscan_interval_timer ,queue +0x2378 001215 fetch 2 ,mem_pscan_interval +0x2379 001216 branch timer_init +: 001219 page_scan_start: +0x237a 001220 bpatch patch06_5 ,mem_patch06 +0x237b 001221 disable clknt +0x237c 001222 call afh_clear +0x237d 001223 fetch 1 ,mem_pagescan_waitcnt +0x237e 001224 increase 1 ,pdata +0x237f 001225 store 1 ,mem_pagescan_waitcnt +0x2380 001226 force 0 ,n_tx_slot +0x2381 001227 call fetch_self_bt_adr +0x2382 001228 add clkn_bt ,1 ,bt_clk +0x2383 001229 force 0x02 ,freq_mode +0x2384 001230 bpatch patch06_6 ,mem_patch06 +0x2385 001231 call rx_radio_freq +0x2386 001232 call start_receiver +0x2387 001233 call wait_access_forever +0x2388 001234 nrtn sync +0x2389 001235 call shutdown_radio +0x238a 001236 fetch 1 ,mem_pagescan_rcvcnt +0x238b 001237 increase 1 ,pdata +0x238c 001238 store 1 ,mem_pagescan_rcvcnt +0x238d 001239 force 0 ,stop_watch +0x238e 001240 call rf_setup_time_slave_slot +0x238f 001241 or_into 0x002 ,bt_clk +0x2390 001242 force 0x01 ,freq_mode +0x2391 001243 call tx_radio_freq +0x2392 001244 call start_transmitter +0x2393 001245 call start_tx_external +0x2394 001246 call send_access_word +0x2395 001247 call end_of_packet +0x2396 001248 force 0 ,am_addr +0x2397 001249 arg param_rf_setup ,timeup +0x2398 001250 until clke_rt ,meet +0x2399 001251 or_into 0x03 ,clke_bt +0x239a 001252 and_into 0x1fd ,bt_clk +: 001253 page_scan_wait_fhs_restart: +0x239b 001254 bpatch patch06_7 ,mem_patch06 +0x239c 001255 increase 1 ,n_tx_slot +0x239d 001256 call rx_radio_freq +0x239e 001257 call start_receiver +0x239f 001258 call wait_access_mhalfbnd +0x23a0 001259 nbranch page_scan_wait_fhs_again ,sync +0x23a1 001260 call scan_mode_whiten +0x23a2 001261 call receive_packet_whitened +0x23a3 001262 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs +: 001263 page_scan_wait_fhs_again: +0x23a4 001264 bpatch patch07_0 ,mem_patch07 +0x23a5 001265 fetch 1 ,mem_fhs_wait_counter +0x23a6 001266 rtn blank +0x23a7 001267 increase -1 ,pdata +0x23a8 001268 store 1 ,mem_fhs_wait_counter +0x23a9 001269 call rf_setup_time_master_slot +0x23aa 001270 branch page_scan_wait_fhs_restart +: 001273 page_scan_reply_to_fhs: +0x23ab 001274 bpatch patch07_1 ,mem_patch07 +0x23ac 001275 set0 1 ,clke_bt +0x23ad 001276 set1 0 ,clke_bt +0x23ae 001277 fetch 1 ,mem_pagescan_rcvfhscnt +0x23af 001278 increase 1 ,pdata +0x23b0 001279 store 1 ,mem_pagescan_rcvfhscnt +0x23b1 001280 call rf_setup_time_slave_slot +0x23b2 001281 or_into 0x02 ,bt_clk +0x23b3 001282 call tx_radio_freq +0x23b4 001283 call start_transmitter +0x23b5 001284 call start_tx_external +0x23b6 001285 call send_access_word +0x23b7 001286 call end_of_packet +: 001287 slave_apply_clke_bt: +0x23b8 001288 compare 0x03 ,clke_bt ,0x03 +0x23b9 001289 branch slave_apply_clke_bt_now ,true +0x23ba 001290 until null ,mhalfbnd +0x23bb 001291 branch slave_apply_clke_bt +: 001292 slave_apply_clke_bt_now: +0x23bc 001293 fetch 4 ,mem_clke_bt +0x23bd 001294 or_into 0x03 ,pdata +0x23be 001295 icopy clke_bt +: 001297 start_slave_connection: +0x23bf 001298 bpatch patch07_2 ,mem_patch07 +0x23c0 001299 fetch 6 ,extm_lap +0x23c1 001300 store 6 ,mem_plap +0x23c2 001301 call prepare_newconn +: 001302 slave_newconn_loop: +0x23c3 001303 call slave_newconn_once +0x23c4 001304 branch sconn_successful ,match +0x23c5 001305 call new_conn_timeout +0x23c6 001306 nbranch slave_newconn_loop ,blank +0x23c7 001307 rtn +: 001310 sconn_successful: +0x23c8 001311 bpatch patch07_3 ,mem_patch07 +0x23c9 001312 call newconn_init +0x23ca 001313 call context_new +0x23cb 001314 nrtn zero +0x23cc 001315 jam 0 ,mem_mode +0x23cd 001316 call calc_clke_offset +0x23ce 001317 branch context_save +: 001322 slave_dispatch: +0x23cf 001323 bpatch patch07_4 ,mem_patch07 +0x23d0 001324 call calc_clke +0x23d1 001325 call role_switch_slave +0x23d2 001326 rtn user +: 001327 slave_loop: +0x23d3 001328 bpatch patch07_5 ,mem_patch07 +0x23d4 001329 call check_bt_disabled +0x23d5 001330 call scheduler_process +0x23d6 001331 call slave_conn_recv_packet +0x23d7 001332 nbranch slave_notmatch ,match +0x23d8 001333 call supervision_flush +0x23d9 001334 call scheduler_tx_l2cap_pkt +0x23da 001335 call prepare_tx +0x23db 001336 call slave_conn_send_packet +0x23dc 001337 call parse_l2cap +0x23dd 001338 call parse_lmp +0x23de 001339 fetch 1 ,mem_slave_rcvcnt +0x23df 001340 increase 1 ,pdata +0x23e0 001341 store 1 ,mem_slave_rcvcnt +0x23e1 001342 call calc_clke_offset +: 001343 slave_notmatch: +0x23e2 001344 bpatch patch07_6 ,mem_patch07 +0x23e3 001345 call lpm_set_mult +0x23e4 001346 call supervision_update +0x23e5 001347 branch slave_disconnect ,positive +0x23e6 001348 call check_disconnect_timeout +0x23e7 001349 nbranch slave_disconnect ,user +0x23e8 001350 call check_attempt +0x23e9 001351 nbranch slave_loop ,blank +0x23ea 001352 rtn +: 001354 slave_disconnect: +0x23eb 001355 bpatch patch07_7 ,mem_patch07 +0x23ec 001356 jam 0 ,mem_tester_emulate +0x23ed 001357 jam 0 ,mem_debug_config +0x23ee 001358 call quit_connection +0x23ef 001359 set0 mark_testmode ,mark +0x23f0 001360 call test_enable_white +0x23f1 001361 fetch 1 ,mem_state +0x23f2 001362 rtn +: 001365 role_switch_slave: +0x23f3 001366 bpatch patch08_0 ,mem_patch08 +0x23f4 001367 call role_switch_check +0x23f5 001368 nrtn user +0x23f6 001369 copy am_addr ,temp +0x23f7 001370 call get_free_amaddr +0x23f8 001371 store 1 ,mem_fhs_am_addr +0x23f9 001372 copy temp ,am_addr +0x23fa 001373 jam param_newconnto ,mem_newconnto_counter +: 001374 roles_sendfhs_loop: +0x23fb 001375 bpatch patch08_1 ,mem_patch08 +0x23fc 001376 call rf_setup_time_master_slot +0x23fd 001377 force type_fhs ,type +0x23fe 001378 call slave_send_access +0x23ff 001379 deposit clkn_bt +0x2400 001380 store 4 ,mem_clkn_bt +0x2401 001381 call transmit_packet +0x2402 001382 call rf_setup_time_slave_slot +0x2403 001383 enable user3 +0x2404 001384 call slave_receive_access +0x2405 001385 branch roles_got_fhs_reply ,sync +0x2406 001386 call shutdown_radio +0x2407 001387 call new_conn_timeout +0x2408 001388 nbranch roles_sendfhs_loop ,blank +0x2409 001389 rtnmark0 mark_accept_switch +0x240a 001390 jam lmp_slot_offset ,mem_lmo_opcode2 +0x240b 001391 set1 mark_switch_initiated ,mark +0x240c 001392 rtn +: 001393 roles_got_fhs_reply: +0x240d 001394 enable clknt +0x240e 001395 call prepare_newconn +0x240f 001396 call afh_clear +: 001397 roles_newconn_loop: +0x2410 001398 bpatch patch08_2 ,mem_patch08 +0x2411 001399 call master_newconn_once +0x2412 001400 branch roles_newconn_responded ,sync +0x2413 001401 call new_conn_timeout +0x2414 001402 nbranch roles_newconn_loop ,blank +0x2415 001403 disable clknt +0x2416 001404 deposit clke_bt +0x2417 001405 store 4 ,mem_next_btclk +0x2418 001406 rtn +: 001407 roles_newconn_responded: +0x2419 001408 enable master +0x241a 001409 bmark0 mark_accept_switch ,roles_newconn_nolmp +0x241b 001410 set0 mark_accept_switch ,mark +0x241c 001411 jam lmp_accepted ,mem_lmo_opcode2 +0x241d 001412 jam lmp_host_connection_req ,mem_lmi_opcode2 +0x241e 001413 call tid_set_reply +: 001414 roles_newconn_nolmp: +0x241f 001415 deposit am_addr +0x2420 001416 store 1 ,mem_amaddr +0x2421 001417 force 0 ,pdata +0x2422 001418 store 6 ,mem_clk_offset +0x2423 001419 fetch 1 ,mem_mode +0x2424 001420 set1 mode_master ,pdata +0x2425 001421 store 1 ,mem_mode +0x2426 001422 call supervision_flush +0x2427 001423 disable master +0x2428 001424 enable user +0x2429 001425 rtn +: 001429 init_rx_packet_flags: +0x242a 001430 bpatch patch08_3 ,mem_patch08 +0x242b 001431 disable match +0x242c 001432 set0 mark_loopback ,mark +0x242d 001433 set0 mark_am_addr_broadcast ,mark +0x242e 001434 set0 mark_longpacket ,mark +0x242f 001435 set0 mark_old_packet ,mark +0x2430 001436 fetch 1 ,mem_arq +0x2431 001437 set0 arqnx ,pdata +0x2432 001438 set1 flowx ,pdata +0x2433 001439 store 1 ,mem_arq +0x2434 001440 rtn +: 001442 prepare_newconn: +0x2435 001443 bpatch patch08_4 ,mem_patch08 +0x2436 001444 jam param_newconnto ,mem_newconnto_counter +0x2437 001445 jam param_newconn_arq ,mem_arq +0x2438 001446 fetch 2 ,mem_rx_window_init +0x2439 001447 store 2 ,mem_rx_window +0x243a 001448 deposit clkn_bt +0x243b 001449 store 4 ,mem_next_btclk +0x243c 001450 rtn clknt +0x243d 001451 deposit clke_bt +0x243e 001452 store 4 ,mem_next_btclk +0x243f 001453 rtn +: 001455 newconn_init: +0x2440 001456 bpatch patch08_5 ,mem_patch08 +0x2441 001457 call init_lmp_reinit +0x2442 001458 call new_conn_handle +0x2443 001459 store 1 ,mem_conn_handle +0x2444 001460 setarg 0 +0x2445 001461 store 2 ,mem_l2cap_rxbuff1_len +0x2446 001462 setarg param_supervision_to +0x2447 001463 store 2 ,mem_supervision_to +0x2448 001464 fetch 1 ,mem_state +0x2449 001465 set1 state_inconn ,pdata +0x244a 001466 store 1 ,mem_state +0x244b 001467 jam 0 ,mem_op +0x244c 001468 jam 0 ,mem_state_map +0x244d 001469 jam 0 ,mem_lpm_current_mult +0x244e 001470 branch supervision_flush +: 001473 clear_linkkey: +0x244f 001474 bpatch patch08_6 ,mem_patch08 +0x2450 001475 force 0 ,pdata +0x2451 001476 store 8 ,mem_link_key +0x2452 001477 istore 8 ,contw +0x2453 001478 call clear_linkstate +0x2454 001479 branch context_traverse_linkkey +: 001481 new_conn_timeout: +0x2455 001482 fetch 1 ,mem_newconnto_counter +0x2456 001483 increase -1 ,pdata +0x2457 001484 store 1 ,mem_newconnto_counter +0x2458 001485 rtn +: 001487 new_conn_handle: +0x2459 001488 fetch 1 ,mem_handle_num +0x245a 001489 increase 1 ,pdata +0x245b 001490 store 1 ,mem_handle_num +0x245c 001491 rtn +: 001494 quit_connection: +0x245d 001495 bpatch patch08_7 ,mem_patch08 +0x245e 001496 fetch 1 ,mem_hci_cmd +0x245f 001497 beq hci_cmd_remote_name_req ,quit_connection_name +0x2460 001498 fetch 1 ,mem_lmp_to_send +0x2461 001499 bne lmp_name_req ,quit_connection_cont +: 001500 quit_connection_name: +0x2462 001501 call cmd_check_plap +0x2463 001502 nbranch quit_connection_cont ,zero +0x2464 001503 call master_name_error +0x2465 001504 jam 0 ,mem_hci_cmd +: 001505 quit_connection_cont: +0x2466 001506 bpatch patch09_0 ,mem_patch09 +0x2467 001507 call app_disconn_reason_collect_bt +0x2468 001508 call sniff_exit +0x2469 001509 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x246a 001510 call ui_ipc_send_event +0x246b 001511 call init_lmp_work +0x246c 001512 call l2cap_init_work +0x246d 001513 call sp_initialize +0x246e 001514 fetch 1 ,mem_state +0x246f 001515 set0 state_inconn +0x2470 001516 store 1 ,mem_state +0x2471 001517 jam 0 ,memui_reconnect_mode +0x2472 001519 fetch 1 ,mem_state_map +0x2473 001520 compare 0x0 ,pdata ,0xc0 +0x2474 001521 branch quit_connection_not_clear_mark ,true +0x2475 001522 set0 mark_rxbuf_inuse ,mark +: 001523 quit_connection_not_clear_mark: +0x2476 001524 fetch 1 ,mem_arq +0x2477 001525 bbit0 wack ,quit_connection_not_clear_tx +: 001526 quit_connection_not_clear_tx: +0x2478 001527 fetch 1 ,mem_op +0x2479 001528 rtnbit0 op_txl2cap +0x247a 001529 set0 mark_tx_l2cap ,mark +0x247b 001530 rtn +: 001532 slave_newconn_once: +0x247c 001533 bpatch patch09_1 ,mem_patch09 +0x247d 001534 fetch 1 ,extm_newconn_am_addr +0x247e 001535 rtn blank +0x247f 001536 icopy am_addr +0x2480 001537 call slave_conn_recv_packet +0x2481 001538 nrtn match +0x2482 001539 force type_null ,type +0x2483 001540 call slave_conn_send_packet +0x2484 001541 deposit am_addr +0x2485 001542 store 1 ,mem_amaddr +0x2486 001543 force 0 ,pdata +0x2487 001544 store 1 ,extm_newconn_am_addr +0x2488 001545 rtn +: 001551 prepare_tx: +0x2489 001552 bpatch patch09_2 ,mem_patch09 +0x248a 001553 fetch 1 ,mem_state +0x248b 001554 bbit0 state_insco ,prepare_tx_not_sco +0x248c 001555 force type_hv3 ,type +0x248d 001556 bmark0 mark_esco ,prepare_tx_not_esco +0x248e 001557 call check_esco_amaddr +0x248f 001558 nbranch prepare_tx_not_sco ,true +0x2490 001559 branch prepare_tx_not_sco ,attempt +0x2491 001560 call set_wait_ack +0x2492 001561 setarg 2 +0x2493 001562 store 2 ,mem_retransmission_cnt +0x2494 001563 rtn +: 001564 prepare_tx_not_esco: +0x2495 001565 nrtn attempt +: 001566 prepare_tx_not_sco: +0x2496 001567 bpatch patch09_3 ,mem_patch09 +0x2497 001568 call context_check_all_wack +0x2498 001569 nbranch prepare_tx_no_retransmit ,zero +0x2499 001570 fetch 1 ,mem_arq +0x249a 001571 bbit0 wack ,prepare_tx_pollnull +: 001572 prepare_tx_retransmit: +0x249b 001573 bmark1 mark_loopback ,prepare_tx_loopback +0x249c 001574 fetch 1 ,mem_debug_config +0x249d 001575 bbit1 debug_tx_pattern ,prepare_tx_txpat +0x249e 001576 fetch 2 ,mem_retransmission_cnt +0x249f 001577 increase -1 ,pdata +0x24a0 001578 store 2 ,mem_retransmission_cnt +0x24a1 001579 branch prepare_tx_nomore_retransmit ,blank +0x24a2 001580 fetch 1 ,mem_last_type +0x24a3 001581 iforce type +0x24a4 001582 rtn +: 001584 prepare_tx_nomore_retransmit: +0x24a5 001585 bpatch patch09_4 ,mem_patch09 +0x24a6 001586 call clear_got_tx +: 001587 prepare_tx_no_retransmit: +0x24a7 001588 call check_esco_amaddr +0x24a8 001589 branch prepare_tx_pollnull ,true +0x24a9 001590 call send_lmp +0x24aa 001591 branch prepare_tx_sendlmp ,user +0x24ab 001592 fetch 1 ,mem_op +0x24ac 001593 bbit1 op_txl2cap ,prepare_tx_sendl2cap +0x24ad 001594 bmark1 mark_loopback ,prepare_tx_loopback +0x24ae 001595 fetch 1 ,mem_debug_config +0x24af 001596 bbit1 debug_tx_pattern ,prepare_tx_txpat +: 001597 prepare_tx_pollnull: +0x24b0 001598 force type_poll ,type +0x24b1 001599 rtn master +0x24b2 001600 force type_null ,type +0x24b3 001601 rtn +: 001602 prepare_tx_loopback: +0x24b4 001603 bpatch patch09_5 ,mem_patch09 +0x24b5 001604 fetch 1 ,mem_rx_type +0x24b6 001605 iforce type +0x24b7 001606 rtnne 1 +0x24b8 001607 force type_null ,type +0x24b9 001608 rtn +: 001609 prepare_tx_txpat: +0x24ba 001610 fetch 1 ,test_mode_packet_type +0x24bb 001611 and pdata ,0xf ,type +0x24bc 001612 set1 mark_loopback ,mark +0x24bd 001613 rtn +: 001614 prepare_tx_sendlmp: +0x24be 001615 force type_lmp ,type +0x24bf 001616 branch set_wait_ack +: 001617 prepare_tx_sendl2cap: +0x24c0 001618 call tx_l2cap_type +: 001620 set_wait_ack: +0x24c1 001621 bpatch patch09_6 ,mem_patch09 +0x24c2 001622 fetcht 1 ,mem_arq +0x24c3 001623 set1 wack ,temp +0x24c4 001624 storet 1 ,mem_arq +0x24c5 001625 deposit type +0x24c6 001626 store 1 ,mem_last_type +0x24c7 001627 setarg 0xffff +0x24c8 001628 store 2 ,mem_retransmission_cnt +0x24c9 001629 rtn +: 001631 tx_l2cap_type: +0x24ca 001632 bpatch patch09_7 ,mem_patch09 +0x24cb 001633 fetch 1 ,mem_state_map +0x24cc 001634 isolate1 smap_edr ,pdata +0x24cd 001635 fetch 2 ,mem_tx_len +0x24ce 001636 branch tx_l2cap_type_edr ,true +0x24cf 001637 force type_dm1 ,type +0x24d0 001638 sub pdata ,17 ,null +0x24d1 001639 rtn positive +0x24d2 001640 force type_dh1 ,type +0x24d3 001641 sub pdata ,27 ,null +0x24d4 001642 rtn positive +0x24d5 001643 force type_dm3 ,type +0x24d6 001644 sub pdata ,121 ,null +0x24d7 001645 rtn positive +0x24d8 001646 force type_dh3 ,type +0x24d9 001647 sub pdata ,183 ,null +0x24da 001648 rtn positive +0x24db 001649 force type_dm5 ,type +0x24dc 001650 sub pdata ,224 ,null +0x24dd 001651 rtn positive +0x24de 001652 force type_dh5 ,type +0x24df 001653 rtn +: 001654 tx_l2cap_type_edr: +0x24e0 001655 force type_dm1 ,type +0x24e1 001656 sub pdata ,17 ,null +0x24e2 001657 rtn positive +0x24e3 001658 force type_dh1 ,type +0x24e4 001659 sub pdata ,54 ,null +0x24e5 001660 rtn positive +0x24e6 001661 force type_dm3 ,type +0x24e7 001662 arg 367 ,temp +0x24e8 001663 isub temp ,null +0x24e9 001664 nrtn positive +0x24ea 001665 force type_dm5 ,type +0x24eb 001666 arg 679 ,temp +0x24ec 001667 isub temp ,null +0x24ed 001668 nrtn positive +0x24ee 001669 force type_dh5 ,type +0x24ef 001670 rtn +: 001679 slave_receive_master_slot: +0x24f0 001680 fetch 1 ,mem_state +0x24f1 001681 bbit0 state_insniff ,slave_receive_notsniff +0x24f2 001682 fetch 2 ,mem_tsniff +0x24f3 001683 branch slave_receive_notsniff ,blank +0x24f4 001684 nbranch slave_receive_sniff ,attempt +: 001685 slave_receive_notsniff: +0x24f5 001686 call rf_setup_time_master_slot +: 001687 slave_receive_access: +0x24f6 001688 add clke_bt ,1 ,bt_clk +: 001689 slave_receive_sniff: +0x24f7 001690 enable swfine +0x24f8 001691 fetch 2 ,mem_rx_window +0x24f9 001692 rshift pdata ,pdata +0x24fa 001693 arg param_pll_setup ,temp +0x24fb 001694 iadd temp ,pdata +0x24fc 001695 call ahead_window +0x24fd 001696 call fetch_extm_bt_adr +0x24fe 001697 force 0x03 ,freq_mode +0x24ff 001698 call rx_radio_freq +0x2500 001699 call init_rx_packet_flags +0x2501 001700 call prep_crypt +0x2502 001701 bpatch patch0a_0 ,mem_patch0a +0x2503 001702 fetch 2 ,mem_rx_window +0x2504 001703 rshift pdata ,pdata +0x2505 001704 call ahead_window +0x2506 001705 call start_receiver +0x2507 001706 enable decode_fec0 +0x2508 001707 fetch 2 ,mem_rx_window +0x2509 001708 arg param_clke_cal ,temp +0x250a 001709 iadd temp ,stop_watch +0x250b 001710 correlate null ,timeout +0x250c 001711 copy clke ,temp +0x250d 001712 storet 6 ,mem_sync_clke +0x250e 001713 disable decode_fec0 +0x250f 001714 nrtn sync +0x2510 001715 arg param_clke_cal ,clke_rt +0x2511 001716 copy bt_clk ,clke_bt +0x2512 001717 branch lpm_adjust_clk ,wake +0x2513 001718 rtn +: 001721 slave_conn_recv_packet: +0x2514 001722 bpatch patch0a_1 ,mem_patch0a +0x2515 001723 call slave_receive_master_slot +0x2516 001724 nbranch shutdown_radio ,sync +0x2517 001725 call save_rssi +0x2518 001726 bmark0 mark_testmode ,receive_packet +0x2519 001727 fetch 2 ,mem_tst_pktcnt_sync +0x251a 001728 increase 1 ,pdata +0x251b 001729 store 2 ,mem_tst_pktcnt_sync +: 001730 receive_packet: +0x251c 001731 rshift bt_clk ,temp +0x251d 001732 or temp ,0x40 ,white_init +: 001733 receive_packet_whitened: +0x251e 001734 bpatch patch0a_2 ,mem_patch0a +0x251f 001735 enable enable_white +0x2520 001736 enable enable_hec +0x2521 001737 enable decode_fec1 +0x2522 001738 parse demod ,bucket ,3 +0x2523 001739 rshift8 pwindow ,pdata +0x2524 001740 store 1 ,mem_temp_am_addr +0x2525 001741 parse demod ,bucket ,4 +0x2526 001742 inject bucket ,7 +0x2527 001743 copy pwindow ,pdata +0x2528 001744 store 1 ,mem_rx_type +0x2529 001745 parse demod ,bucket ,3 +0x252a 001746 rshift8 pwindow ,pdata +0x252b 001747 store 1 ,mem_temp_arq +0x252c 001748 fetch 1 ,mem_rx_type +0x252d 001749 sub pdata ,3 ,null +0x252e 001750 branch receive_packet_noedr ,positive +0x252f 001751 beq 7 ,receive_packet_noedr +0x2530 001752 fetch 1 ,mem_state_map +0x2531 001753 isolate1 smap_edr ,pdata +0x2532 001754 setflag true ,psk ,radio_ctrl +: 001755 receive_packet_noedr: +0x2533 001756 bpatch patch0a_3 ,mem_patch0a +0x2534 001757 parse demod ,bucket ,8 +0x2535 001758 disable decode_fec1 +0x2536 001759 disable enable_hec +0x2537 001760 branch error_header ,crc_failed +0x2538 001761 bmark0 mark_testmode ,receive_packet_amchk +0x2539 001762 fetch 2 ,mem_tst_pktcnt_hec +0x253a 001763 increase 1 ,pdata +0x253b 001764 store 2 ,mem_tst_pktcnt_hec +: 001765 receive_packet_amchk: +0x253c 001766 bpatch patch0a_4 ,mem_patch0a +0x253d 001767 fetch 1 ,mem_temp_am_addr +0x253e 001768 compare 0 ,pdata ,0x07 +0x253f 001769 setflag true ,mark_am_addr_broadcast ,mark +0x2540 001770 branch am_addr_ok ,true +0x2541 001771 icompare 0x07 ,am_addr +0x2542 001772 branch am_addr_match ,true +0x2543 001773 bmark0 mark_esco ,end_of_packet +0x2544 001774 fetcht 1 ,mem_saved_amaddr +0x2545 001775 icompare 0x7 ,temp +0x2546 001776 nbranch end_of_packet ,true +0x2547 001777 fetch 1 ,mem_arq +0x2548 001778 set0 arqnx ,pdata +0x2549 001779 set1 flowx ,pdata +0x254a 001780 store 1 ,mem_arq +: 001781 am_addr_match: +0x254b 001782 enable match +: 001783 am_addr_ok: +0x254c 001784 bpatch patch0a_5 ,mem_patch0a +0x254d 001785 fetch 1 ,mem_rx_type +0x254e 001786 icopy type +0x254f 001787 bmark1 mark_am_addr_broadcast ,arqn_bypass +0x2550 001788 fetcht 1 ,mem_temp_arq +0x2551 001789 fetch 1 ,mem_arq +0x2552 001790 set0 flow ,pdata +0x2553 001791 isolate1 flow ,temp +0x2554 001792 setflag true ,flow ,pdata +0x2555 001793 isolate1 arqn ,temp +0x2556 001794 setflag true ,arqn ,pdata +0x2557 001795 store 1 ,mem_arq +0x2558 001796 isolate0 arqn ,temp +0x2559 001797 branch arqn_bypass ,true +0x255a 001798 call clear_got_tx +: 001799 arqn_bypass: +0x255b 001800 bpatch patch0a_6 ,mem_patch0a +0x255c 001801 arg 0 ,temp +0x255d 001802 call reserve_slot +0x255e 001803 and type ,0xf ,pdata +0x255f 001804 beq type_poll ,process_poll +0x2560 001805 beq type_null ,end_of_packet +0x2561 001806 beq type_fhs ,process_fhs +0x2562 001807 fetcht 1 ,mem_temp_arq +0x2563 001808 fetch 1 ,mem_arq +0x2564 001809 icompare 0x04 ,temp +0x2565 001810 nbranch rx_type_dispatch ,true +0x2566 001811 bmark0 mark_am_addr_broadcast ,failed_seqn +0x2567 001812 bbit0 bcast1 ,rx_type_dispatch +: 001813 failed_seqn: +0x2568 001814 set1 mark_old_packet ,mark +: 001815 rx_type_dispatch: +0x2569 001816 bpatch patch0a_7 ,mem_patch0a +0x256a 001817 deposit type +0x256b 001818 beq type_dm1 ,process_dm1 +0x256c 001819 beq type_dh1 ,process_dh1 +0x256d 001820 beq type_hv3 ,process_hev +0x256e 001821 beq type_3dh1 ,process_3dh1 +0x256f 001822 arg 4 ,temp +0x2570 001823 call reserve_slot +0x2571 001824 beq type_dm3 ,process_dm3 +0x2572 001825 beq type_dh3 ,process_dh3 +0x2573 001826 arg 8 ,temp +0x2574 001827 call reserve_slot +0x2575 001828 beq type_dm5 ,process_dm5 +0x2576 001829 beq type_dh5 ,process_dh5 +0x2577 001830 rtn +: 001833 process_hev: +0x2578 001834 bpatch patch0b_0 ,mem_patch0b +0x2579 001835 enable decode_fec0 +0x257a 001836 enable enable_crc +0x257b 001837 enable encrypt +0x257c 001838 arg mem_sco_ibuf ,contw +0x257d 001839 force 30 ,loopcnt +: 001840 process_hev_loop: +0x257e 001841 parse demod ,bucket ,8 +0x257f 001842 rshift3 pwindow ,pdata +0x2580 001843 istore 1 ,contw +0x2581 001844 loop process_hev_loop +0x2582 001845 bmark0 mark_esco ,end_of_packet +0x2583 001846 parse demod ,bucket ,16 +0x2584 001847 nsetflag crc_failed ,mark_esco_rxok ,mark +0x2585 001848 branch error_payload ,crc_failed +0x2586 001849 branch ack_payload +: 001852 process_poll: +0x2587 001853 branch end_of_packet +: 001855 process_dm3: +: 001856 process_dm5: +0x2588 001857 set1 mark_longpacket ,mark +: 001858 process_dm1: +0x2589 001859 enable decode_fec2 +0x258a 001860 branch process_dmh +: 001862 process_dh3: +: 001863 process_dh5: +0x258b 001864 set1 mark_longpacket ,mark +: 001865 process_3dh1: +0x258c 001866 set1 psk3m ,radio_ctrl +: 001867 process_dh1: +0x258d 001868 enable decode_fec0 +: 001869 process_dmh: +0x258e 001870 bpatch patch0b_1 ,mem_patch0b +0x258f 001871 bmark1 mark_rxbuf_inuse ,end_of_packet +0x2590 001872 isolate0 psk ,radio_ctrl +0x2591 001873 branch process_dmh_noedr ,true +0x2592 001874 disable enable_white +0x2593 001875 enable decode_fec0 +0x2594 001876 disable decode_fec2 +0x2595 001877 add clkn_bt ,2 ,timeup +0x2596 001878 correlate clkn_bt ,meet +0x2597 001879 nbranch error_payload ,sync +0x2598 001880 set1 mark_longpacket ,mark +0x2599 001881 enable enable_white +: 001882 process_dmh_noedr: +0x259a 001883 bpatch patch0b_2 ,mem_patch0b +0x259b 001884 enable encrypt +0x259c 001885 enable enable_crc +0x259d 001886 parse demod ,bucket ,3 +0x259e 001887 rshift8 pwindow ,pdata +0x259f 001888 store 1 ,mem_lch_code +0x25a0 001889 parse demod ,bucket ,5 +0x25a1 001890 bmark1 mark_longpacket ,process_dmh_long +0x25a2 001891 rshift3 pwindow ,loopcnt +0x25a3 001892 rshift3 loopcnt ,loopcnt +0x25a4 001893 branch process_dmh_common +: 001894 process_dmh_long: +0x25a5 001895 parse demod ,bucket ,5 +0x25a6 001896 rshift pwindow ,loopcnt +0x25a7 001897 parse demod ,bucket ,3 +: 001898 process_dmh_common: +0x25a8 001899 bpatch patch0b_3 ,mem_patch0b +0x25a9 001900 deposit loopcnt +0x25aa 001901 store 2 ,mem_len +0x25ab 001902 branch process_dmh_data_end ,blank +0x25ac 001903 isub mask3ff ,null +0x25ad 001904 branch error_payload ,positive +0x25ae 001905 bpatch patch0b_4 ,mem_patch0b +0x25af 001906 set0 mark_fhs_eir ,mark +0x25b0 001907 fetch 1 ,mem_lch_code +0x25b1 001908 and_into 0x03 ,pdata +0x25b2 001909 arg mem_rxbuf ,contw +0x25b3 001910 beq llid_lmp ,process_lmp +0x25b4 001911 bmark1 mark_testmode ,process_dmh_data +0x25b5 001913 fetch 1 ,mem_lch_code +0x25b6 001914 and_into 0x03 ,pdata +0x25b7 001915 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +0x25b8 001916 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +0x25b9 001917 branch error_payload +: 001919 process_lmp: +0x25ba 001920 fetch 2 ,mem_len +0x25bb 001921 sub pdata ,0x70 ,null +0x25bc 001922 nbranch error_payload ,positive +0x25bd 001923 bmark1 mark_old_packet ,ack_payload +0x25be 001924 branch process_dmh_data +: 001927 process_dmh_data_l2cap_start_pkt: +0x25bf 001928 bpatch patch0b_5 ,mem_patch0b +0x25c0 001929 bmark1 mark_old_packet ,ack_payload +0x25c1 001930 fetch 2 ,mem_len +0x25c2 001931 arg 0x2e0 ,temp +0x25c3 001932 isub temp ,null +0x25c4 001933 branch error_payload ,positive +0x25c5 001934 fetch 1 ,mem_l2cap_rxbuff_inuse +0x25c6 001935 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +0x25c7 001936 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +0x25c8 001937 branch end_of_packet +: 001938 process_dmh_data_into_buff1: +0x25c9 001939 jam 1 ,mem_l2cap_rxbuff_new +0x25ca 001940 fetch 2 ,mem_l2cap_rxbuff1_len +0x25cb 001941 bne 0 ,end_of_packet +0x25cc 001942 arg mem_l2cap_rxbuff1 ,contw +0x25cd 001943 branch process_dmh_data +: 001944 process_dmh_data_into_buff2: +0x25ce 001945 jam 2 ,mem_l2cap_rxbuff_new +0x25cf 001946 fetch 2 ,mem_l2cap_rxbuff2_len +0x25d0 001947 bne 0 ,end_of_packet +0x25d1 001948 arg mem_l2cap_rxbuff2 ,contw +0x25d2 001949 branch process_dmh_data +: 001951 process_dmh_data_l2cap_continue_pkt: +0x25d3 001952 bpatch patch0b_6 ,mem_patch0b +0x25d4 001953 bmark1 mark_old_packet ,ack_payload +0x25d5 001954 fetch 2 ,mem_len +0x25d6 001955 arg 0x2e0 ,temp +0x25d7 001956 isub temp ,null +0x25d8 001957 branch error_payload ,positive +0x25d9 001958 fetch 1 ,mem_l2cap_rxbuff_new +0x25da 001959 beq 1 ,process_dmh_data_l2cap_continue_pkt1 +0x25db 001960 beq 2 ,process_dmh_data_l2cap_continue_pkt2 +0x25dc 001961 branch end_of_packet +: 001962 process_dmh_data_l2cap_continue_pkt1: +0x25dd 001963 arg mem_l2cap_rxbuff1 ,contw +0x25de 001964 fetch 2 ,mem_l2cap_rxbuff1_len +0x25df 001965 iadd contw ,contw +0x25e0 001966 branch process_dmh_data +: 001967 process_dmh_data_l2cap_continue_pkt2: +0x25e1 001968 arg mem_l2cap_rxbuff2 ,contw +0x25e2 001969 fetch 2 ,mem_l2cap_rxbuff2_len +0x25e3 001970 iadd contw ,contw +: 001971 process_dmh_data: +0x25e4 001972 parse demod ,bucket ,8 +0x25e5 001973 rshift3 pwindow ,pdata +0x25e6 001974 istore 1 ,contw +0x25e7 001975 loop process_dmh_data +: 001976 process_dmh_data_end: +0x25e8 001977 bpatch patch0b_7 ,mem_patch0b +0x25e9 001978 parse demod ,bucket ,16 +0x25ea 001979 branch error_payload_crc ,crc_failed +0x25eb 001980 fetch 1 ,mem_l2cap_flow_ctrl_flag +0x25ec 001981 beq l2cap_flow_ctrl_enable ,end_of_packet +0x25ed 001982 bmark1 mark_testmode ,process_dmh_cont +0x25ee 001983 bmark1 mark_old_packet ,redundant_payload +0x25ef 001984 fetch 1 ,mem_lch_code +0x25f0 001985 compare 3 ,pdata ,3 +0x25f1 001986 branch process_dmh_cont ,true +0x25f2 001987 fetch 2 ,mem_len +0x25f3 001988 branch process_dmh_cont ,blank +0x25f4 001989 bpatch patch0c_0 ,mem_patch0c +0x25f5 001990 fetch 1 ,mem_l2cap_rxbuff_new +0x25f6 001991 beq 1 ,process_l2cap_pass_crc_buff1 +0x25f7 001992 beq 2 ,process_l2cap_pass_crc_buff2 +0x25f8 001993 branch assert +: 001994 process_l2cap_pass_crc_buff1: +0x25f9 001995 fetch 2 ,mem_l2cap_rxbuff1_len +0x25fa 001996 fetcht 2 ,mem_len +0x25fb 001997 iadd temp ,pdata +0x25fc 001998 store 2 ,mem_l2cap_rxbuff1_len +0x25fd 001999 beq 0 ,assert +0x25fe 002000 fetcht 2 ,mem_l2cap_rxbuff1 +0x25ff 002001 increase 4 ,temp +0x2600 002002 isub temp ,null +0x2601 002003 call l2cap_buff1_inuse ,zero +0x2602 002004 branch process_dmh_cont +: 002005 process_l2cap_pass_crc_buff2: +0x2603 002006 fetch 2 ,mem_l2cap_rxbuff2_len +0x2604 002007 fetcht 2 ,mem_len +0x2605 002008 iadd temp ,pdata +0x2606 002009 store 2 ,mem_l2cap_rxbuff2_len +0x2607 002010 beq 0 ,assert +0x2608 002011 fetcht 2 ,mem_l2cap_rxbuff2 +0x2609 002012 add temp ,4 ,temp +0x260a 002013 isub temp ,null +0x260b 002014 call l2cap_buff2_inuse ,zero +0x260c 002015 branch process_dmh_cont +: 002016 process_dmh_cont: +0x260d 002017 bpatch patch0c_1 ,mem_patch0c +0x260e 002018 fetcht 1 ,mem_state_map +0x260f 002019 fetch 1 ,mem_lch_code +0x2610 002020 compare 3 ,pdata ,0x03 +0x2611 002021 setflag true ,smap_rxlmp ,temp +0x2612 002022 nsetflag true ,smap_rxl2cap ,temp +0x2613 002023 storet 1 ,mem_state_map +0x2614 002024 nbranch process_dmh_cont_rxbuf_not_use ,true +0x2615 002025 set1 mark_rxbuf_inuse ,mark +: 002026 process_dmh_cont_rxbuf_not_use: +0x2616 002027 bmark0 mark_testmode ,ack_payload +0x2617 002028 isolate1 smap_rxlmp ,temp +0x2618 002029 branch ack_payload ,true +0x2619 002030 fetch 2 ,mem_tst_pktcnt_crc +0x261a 002031 increase 1 ,pdata +0x261b 002032 store 2 ,mem_tst_pktcnt_crc +0x261c 002033 set1 mark_loopback ,mark +0x261d 002034 set0 smap_rxl2cap ,temp +0x261e 002035 set0 mark_rxbuf_inuse ,mark +0x261f 002036 storet 1 ,mem_state_map +: 002037 ack_payload: +0x2620 002038 bpatch patch0c_2 ,mem_patch0c +0x2621 002039 fetcht 1 ,mem_temp_arq +0x2622 002040 fetch 1 ,mem_arq +0x2623 002041 set1 arqnx ,pdata +0x2624 002042 isolate1 seqn ,temp +0x2625 002043 setflag true ,seqn ,pdata +0x2626 002044 isolate1 mark_am_addr_broadcast ,mark +0x2627 002045 setflag true ,bcast1 ,pdata +0x2628 002046 store 1 ,mem_arq +0x2629 002047 fetch 2 ,mem_len +0x262a 002048 nbranch end_of_packet ,blank +0x262b 002049 fetch 1 ,mem_state_map +0x262c 002050 set0 smap_rxl2cap ,pdata +0x262d 002051 store 1 ,mem_state_map +0x262e 002052 fetch 1 ,mem_lch_code +0x262f 002053 compare 0x01 ,pdata ,0x07 +0x2630 002055 branch end_of_packet +: 002057 error_header: +0x2631 002058 bpatch patch0c_3 ,mem_patch0c +0x2632 002059 disable match +0x2633 002060 fetch 2 ,mem_rx_hec_err +0x2634 002061 increase 1 ,pdata +0x2635 002062 store 2 ,mem_rx_hec_err +0x2636 002063 branch end_of_packet +: 002064 error_payload_crc: +0x2637 002065 fetch 2 ,mem_rx_crc_err +0x2638 002066 increase 1 ,pdata +0x2639 002067 store 2 ,mem_rx_crc_err +0x263a 002068 call discard_pkt +0x263b 002069 bmark0 mark_testmode ,error_payload +0x263c 002070 set1 mark_loopback ,mark +: 002071 error_payload: +0x263d 002072 branch end_of_packet +: 002074 discard_pkt: +0x263e 002075 bpatch patch0c_4 ,mem_patch0c +0x263f 002076 fetch 1 ,mem_lch_code +0x2640 002077 compare 3 ,pdata ,0x03 +0x2641 002078 nbranch discard_pkt_l2cap ,true +: 002079 discard_pkt_lmp: +0x2642 002080 fetcht 1 ,mem_state_map +0x2643 002081 set0 smap_rxlmp ,temp +0x2644 002082 storet 1 ,mem_state_map +0x2645 002083 rtn +: 002084 discard_pkt_l2cap: +0x2646 002087 fetcht 1 ,mem_state_map +0x2647 002088 set0 smap_rxl2cap ,temp +0x2648 002089 storet 1 ,mem_state_map +0x2649 002090 branch h4_send_acl_trigger_clear +: 002092 redundant_payload: +0x264a 002093 fetch 1 ,mem_arq +0x264b 002094 set1 arqnx ,pdata +0x264c 002095 store 1 ,mem_arq +: 002096 end_of_packet: +0x264d 002097 bpatch patch0c_5 ,mem_patch0c +0x264e 002098 disable encode_fec0 +0x264f 002099 disable encode_fec2 +0x2650 002100 disable decode_fec0 +0x2651 002101 disable decode_fec2 +0x2652 002102 disable enable_crc +0x2653 002103 disable encrypt +0x2654 002104 disable enable_white +0x2655 002105 branch shutdown_radio ,is_rx +0x2656 002106 until null ,tx_clear +0x2657 002107 nop 100 +0x2658 002108 branch shutdown_radio +: 002110 process_fhs: +0x2659 002111 bpatch patch0c_6 ,mem_patch0c +0x265a 002112 enable enable_crc +0x265b 002113 enable decode_fec2 +0x265c 002114 parse demod ,bucket ,72 +0x265d 002115 isolate1 58 ,pdata +0x265e 002116 setflag true ,mark_fhs_eir ,mark +0x265f 002117 copy bt_adr ,temp +0x2660 002118 ialigned bt_adr +0x2661 002119 ialigned fhs0 +0x2662 002120 pulse recalc +0x2663 002121 setsect 2 ,0xfffff +0x2664 002122 setsect 3 ,0x0ffff +0x2665 002123 nop 32 +0x2666 002124 iverify fhs_parity +0x2667 002125 deposit lap +0x2668 002126 store 3 ,extm_lap +0x2669 002127 deposit uap +0x266a 002128 store 1 ,extm_uap +0x266b 002129 copy temp ,bt_adr +0x266c 002130 branch fhs_parity_ok ,true +0x266d 002131 branch error_payload +: 002132 fhs_parity_ok: +0x266e 002133 bpatch patch0c_7 ,mem_patch0c +0x266f 002134 parse demod ,bucket ,72 +0x2670 002135 ialigned fhs1 +0x2671 002136 ialigned am_addr +0x2672 002137 ialigned nap +0x2673 002138 ialigned regb +0x2674 002139 force 0 ,pdata +0x2675 002140 parse demod ,bucket ,16 +0x2676 002141 branch error_payload ,crc_failed +0x2677 002142 setarg 0x0ffffffc +0x2678 002143 iand regb ,pdata +0x2679 002144 store 4 ,mem_clke_bt +0x267a 002145 deposit fhs_class +0x267b 002146 store 3 ,extm_class +0x267c 002147 deposit fhs_misc +0x267d 002148 store 1 ,extm_fhs_misc +0x267e 002149 deposit am_addr +0x267f 002150 store 1 ,extm_newconn_am_addr +0x2680 002151 deposit nap +0x2681 002152 store 2 ,extm_nap +0x2682 002153 deposit bt_clk +0x2683 002154 inject rxf ,32 +0x2684 002155 compare type_fhs ,type ,0x0f +0x2685 002156 setflag true ,mark_fhs_already_good ,mark +0x2686 002157 branch end_of_packet +: 002159 clear_got_tx: +0x2687 002160 bpatch patch0d_0 ,mem_patch0d +0x2688 002161 fetch 1 ,mem_arq +0x2689 002162 rtnbit0 wack +0x268a 002163 set0 wack ,pdata +0x268b 002164 setflip seqnx ,pdata +0x268c 002165 store 1 ,mem_arq +0x268d 002166 fetch 1 ,mem_last_type +0x268e 002167 beq type_lmp ,clear_got_txlmp +0x268f 002168 rtneq type_hv3 +0x2690 002169 fetch 1 ,mem_op +0x2691 002170 rtnbit0 op_txl2cap ,pdata +0x2692 002171 set0 op_txl2cap ,pdata +0x2693 002172 set1 op_pkt_comp ,pdata +0x2694 002173 store 1 ,mem_op +0x2695 002174 set0 mark_tx_l2cap ,mark +0x2696 002175 fetch 2 ,mem_l2cap_tx_multi_offset +0x2697 002176 nrtn blank +0x2698 002177 fetch 1 ,mem_op +0x2699 002178 set0 op_pkt_comp ,pdata +0x269a 002179 store 1 ,mem_op +0x269b 002180 branch l2cap_malloc_free +: 002182 clear_got_txlmp: +0x269c 002183 bpatch patch0d_1 ,mem_patch0d +0x269d 002184 fetch 1 ,mem_lmo_header_opcode +0x269e 002185 rshift pdata ,pdata +0x269f 002186 beq lmp_start_encryption_req ,start_encryption +0x26a0 002187 beq lmp_stop_encryption_req ,stop_encryption +0x26a1 002188 beq lmp_unsniff_req ,sniff_exit +0x26a2 002189 beq lmp_escape ,clear_lmp_escape +0x26a3 002190 rtnne lmp_accepted +0x26a4 002191 fetch 1 ,mem_lmo_payload +0x26a5 002192 beq lmp_sco_link_req ,sco_link_req_by_slave +0x26a6 002193 beq lmp_start_encryption_req ,clear_send_setup_complete +0x26a7 002194 rtn +: 002196 clear_lmp_escape: +0x26a8 002197 fetch 1 ,mem_lmo_payload +0x26a9 002198 set1 7 ,pdata +0x26aa 002199 rtn +: 002200 clear_send_setup_complete: +0x26ab 002201 rtn master +0x26ac 002202 fetch 1 ,mem_state +0x26ad 002203 rtnbit1 state_conn_comp +0x26ae 002204 jam lmp_setup_complete ,mem_lmo_opcode2 +0x26af 002205 rtn +: 002208 sco_link_req_by_slave: +0x26b0 002209 rtn master +0x26b1 002210 fetch 1 ,mem_mode +0x26b2 002211 isolate1 send_sco_when_slave ,pdata +0x26b3 002212 branch clean_mem_mode ,true +0x26b4 002214 rtn +: 002215 clean_mem_mode: +0x26b5 002216 set0 send_sco_when_slave ,pdata +0x26b6 002217 store 1 ,mem_mode +0x26b7 002218 rtn +: 002220 start_encryption: +0x26b8 002221 bpatch patch0d_2 ,mem_patch0d +0x26b9 002222 fetch 1 ,mem_state_map +0x26ba 002223 set1 smap_encryption ,pdata +0x26bb 002224 store 1 ,mem_state_map +0x26bc 002225 hjam 1 ,core_encrypt +0x26bd 002226 fetch 1 ,mem_state +0x26be 002227 isolate1 state_conn_comp ,pdata +0x26bf 002228 rtn +: 002230 stop_encryption: +0x26c0 002231 bpatch patch0d_3 ,mem_patch0d +0x26c1 002232 fetch 1 ,mem_state_map +0x26c2 002233 set0 smap_encryption ,pdata +0x26c3 002234 store 1 ,mem_state_map +0x26c4 002235 hjam 0 ,core_encrypt +0x26c5 002236 rtn +: 002239 sniff_init: +0x26c6 002240 bpatch patch0d_4 ,mem_patch0d +0x26c7 002241 copy clkn_bt ,pdata +0x26c8 002242 store 4 ,mem_lpm_delay_after_sniff +0x26c9 002243 add clkn_bt ,3 ,rega +0x26ca 002244 branch sniff_init_master ,master +0x26cb 002245 add clke_bt ,3 ,rega +: 002246 sniff_init_master: +0x26cc 002247 fetcht 2 ,mem_tsniff +0x26cd 002248 deposit rega +0x26ce 002249 set0 27 ,pdata +0x26cf 002250 idiv temp +0x26d0 002251 fetch 2 ,mem_dsniff +0x26d1 002252 call wait_div_end +0x26d2 002253 remainder regc +0x26d3 002254 isub regc ,pdata +0x26d4 002255 branch sniff_init_nowrap ,positive +0x26d5 002256 iadd temp ,pdata +: 002257 sniff_init_nowrap: +0x26d6 002258 iadd rega ,pdata +0x26d7 002259 store 4 ,mem_sniff_anchor +0x26d8 002260 jam switch_flag_init ,mem_switch_flag +0x26d9 002261 fetch 1 ,mem_state +0x26da 002262 set1 state_insniff ,pdata +0x26db 002263 store 1 ,mem_state +0x26dc 002264 fetch 1 ,mem_sniff_attempt +0x26dd 002265 store 1 ,mem_current_sniff_attempt +0x26de 002266 setarg 0 +0x26df 002267 store 3 ,mem_sniff_rcv +0x26e0 002268 store 3 ,mem_sniff_lost +0x26e1 002269 store 1 ,mem_sniff_unint_lost +0x26e2 002270 jam bt_evt_enter_sniff ,mem_fifo_temp +0x26e3 002271 call ui_ipc_send_event +0x26e4 002272 fetch 2 ,mem_rx_window_sniff +0x26e5 002273 store 2 ,mem_rx_window +0x26e6 002274 nrtn master +0x26e7 002275 add am_addr ,-1 ,queue +0x26e8 002276 rtn +: 002278 sniff_exit: +0x26e9 002279 bpatch patch0d_5 ,mem_patch0d +0x26ea 002280 fetch 1 ,mem_state +0x26eb 002281 rtnbit0 state_insniff +0x26ec 002282 set0 state_insniff ,pdata +0x26ed 002283 store 1 ,mem_state +0x26ee 002284 fetch 2 ,mem_rx_window_init +0x26ef 002285 store 2 ,mem_rx_window +0x26f0 002286 disable wake +0x26f1 002287 jam bt_evt_exit_sniff ,mem_fifo_temp +0x26f2 002288 branch ui_ipc_send_event +: 002291 check_attempt: +0x26f3 002292 bpatch patch0d_6 ,mem_patch0d +0x26f4 002293 enable attempt +0x26f5 002294 fetch 1 ,mem_state +0x26f6 002295 bbit1 state_insniff ,check_attempt_sniff +0x26f7 002296 rtnmark1 mark_testmode +0x26f8 002297 fetch 1 ,mem_arq +0x26f9 002298 rtnbit1 wack +0x26fa 002299 fetch 1 ,mem_lmp_to_send +0x26fb 002300 nrtn blank +0x26fc 002301 fetch 1 ,mem_op +0x26fd 002302 rtnbit1 op_txl2cap +: 002303 check_attempt_nomore: +0x26fe 002304 force 0 ,pdata +0x26ff 002305 rtn +: 002307 check_attempt_sniff: +0x2700 002308 bbit0 state_insco ,check_attempt_not_sco +0x2701 002309 fetch 1 ,mem_current_sniff_attempt +0x2702 002310 beq 2 ,check_attempt_sniff_restore_sco +0x2703 002311 fetch 1 ,mem_arq +0x2704 002312 bbit1 wack ,check_attempt_notimeout +0x2705 002313 bmark0 mark_esco_rxok ,check_attempt_notimeout +: 002314 check_attempt_sniff_restore_sco: +0x2706 002315 nbranch check_attempt_notimeout ,master +0x2707 002316 fetch 1 ,mem_lmp_to_send +0x2708 002317 nbranch check_attempt_notimeout ,blank +: 002318 check_attempt_sco_master: +0x2709 002319 fetch 1 ,mem_sco_poll +0x270a 002320 increase -1 ,pdata +0x270b 002321 store 1 ,mem_sco_poll +0x270c 002322 nbranch check_attempt_nomore ,blank +0x270d 002323 jam param_sco_poll ,mem_sco_poll +0x270e 002324 branch check_attempt_notimeout +: 002331 check_attempt_not_sco: +0x270f 002332 fetch 1 ,mem_current_sniff_attempt +0x2710 002333 bne 1 ,check_attempt_notimeout +0x2711 002334 fetch 1 ,mem_current_sniff_timeout +0x2712 002335 branch check_attempt_notimeout ,blank +0x2713 002336 increase -1 ,pdata +0x2714 002337 store 1 ,mem_current_sniff_timeout +0x2715 002338 fetch 1 ,mem_arq +0x2716 002339 rtnbit1 wack +0x2717 002340 nrtn match +: 002341 check_attempt_notimeout: +0x2718 002342 fetch 1 ,mem_current_sniff_attempt +0x2719 002343 increase -1 ,pdata +0x271a 002344 store 1 ,mem_current_sniff_attempt +0x271b 002345 rtn +: 002356 sniff_check_window: +0x271c 002357 bpatch patch0d_7 ,mem_patch0d +0x271d 002358 disable swfine +0x271e 002359 copy temp ,stop_watch +0x271f 002360 call context_search_sniff_window +0x2720 002361 disable user +0x2721 002362 nrtn zero +0x2722 002363 force 0 ,stop_watch +0x2723 002364 enable user +0x2724 002365 rtn +: 002368 check_esco_amaddr: +0x2725 002369 fetch 1 ,mem_esco_addr +0x2726 002370 icompare 0xff ,am_addr +0x2727 002371 rtn +: 002374 parse_l2cap: +0x2728 002375 bpatch patch0e_0 ,mem_patch0e +0x2729 002376 set0 mark_rxbuf_inuse ,mark +: 002377 parse_l2cap_cont: +0x272a 002378 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x272b 002379 fetch 1 ,mem_l2cap_rxbuff_inuse +0x272c 002380 rtn blank +0x272d 002381 isolate1 l2cap_inuse_buff1 ,pdata +0x272e 002382 arg mem_l2cap_rxbuff1 ,contr +0x272f 002383 call process_rx_l2cap_pkt ,true +0x2730 002384 bpatch patch0e_1 ,mem_patch0e +0x2731 002385 fetch 1 ,mem_l2cap_rx_done +0x2732 002386 beq l2cap_rx_done ,parse_l2cap_release_buff1 +0x2733 002388 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x2734 002389 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2735 002390 rtnbit0 l2cap_inuse_buff2 +0x2736 002391 arg mem_l2cap_rxbuff2 ,contr +0x2737 002392 call process_rx_l2cap_pkt +0x2738 002393 fetch 1 ,mem_l2cap_rx_done +0x2739 002394 beq l2cap_rx_done ,parse_l2cap_release_buff2 +0x273a 002395 rtn +: 002397 parse_l2cap_release_buff1: +0x273b 002398 fetch 1 ,mem_l2cap_rxbuff_inuse +0x273c 002399 set0 l2cap_inuse_buff1 ,pdata +0x273d 002400 store 1 ,mem_l2cap_rxbuff_inuse +0x273e 002401 setarg 0 +0x273f 002402 store 2 ,mem_l2cap_rxbuff1_len +0x2740 002403 rtn +: 002404 parse_l2cap_release_buff2: +0x2741 002405 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2742 002406 set0 l2cap_inuse_buff2 ,pdata +0x2743 002407 store 1 ,mem_l2cap_rxbuff_inuse +0x2744 002408 setarg 0 +0x2745 002409 store 2 ,mem_l2cap_rxbuff2_len +0x2746 002410 rtn +: 002412 l2cap_buff1_inuse: +0x2747 002413 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2748 002414 set1 l2cap_inuse_buff1 ,pdata +0x2749 002415 store 1 ,mem_l2cap_rxbuff_inuse +0x274a 002416 rtn +: 002418 l2cap_buff2_inuse: +0x274b 002419 fetch 1 ,mem_l2cap_rxbuff_inuse +0x274c 002420 set1 l2cap_inuse_buff2 ,pdata +0x274d 002421 store 1 ,mem_l2cap_rxbuff_inuse +0x274e 002422 rtn +: 002428 slave_send_access: +0x274f 002429 bpatch patch0e_2 ,mem_patch0e +0x2750 002430 add clke_bt ,1 ,bt_clk +0x2751 002431 call fetch_extm_bt_adr +0x2752 002432 force 0x03 ,freq_mode +0x2753 002433 call tx_radio_freq +0x2754 002434 call start_transmitter +0x2755 002435 call start_tx_external +0x2756 002436 branch send_access_word +: 002439 slave_conn_send_packet: +0x2757 002440 bpatch patch0e_3 ,mem_patch0e +0x2758 002441 call rf_setup_time_slave_slot +0x2759 002442 deposit clke_bt +0x275a 002443 fetcht 4 ,mem_next_btclk +0x275b 002444 isub temp ,pdata +0x275c 002445 rtnne 1 +0x275d 002446 compare type_null ,type ,0x1f +0x275e 002447 nbranch slave_conn_send_access ,true +0x275f 002448 fetch 1 ,mem_rx_type +0x2760 002449 rtn blank +: 002450 slave_conn_send_access: +0x2761 002451 call slave_send_access +: 002452 transmit_packet: +0x2762 002453 compare type_id ,type ,0x1f +0x2763 002454 branch end_of_packet ,true +0x2764 002455 rshift bt_clk ,temp +0x2765 002456 or temp ,0x40 ,white_init +: 002457 transmit_packet_whitened: +0x2766 002458 bpatch patch0e_4 ,mem_patch0e +0x2767 002459 enable enable_white +0x2768 002460 enable enable_hec +0x2769 002461 enable encode_fec1 +0x276a 002462 set0 mark_longpacket ,mark +0x276b 002463 deposit am_addr +0x276c 002464 inject mod ,3 +0x276d 002465 deposit type +0x276e 002466 inject mod ,4 +0x276f 002467 fetch 1 ,mem_arq +0x2770 002468 inject bucket ,4 +0x2771 002469 inject mod ,3 +0x2772 002470 enable enable_parity +0x2773 002471 inject mod ,8 +0x2774 002472 disable encode_fec1 +0x2775 002473 disable enable_parity +0x2776 002474 disable enable_hec +0x2777 002475 set0 psk3m ,radio_ctrl +0x2778 002476 arg 0 ,temp +0x2779 002477 call reserve_slot +0x277a 002478 bpatch patch0e_5 ,mem_patch0e +0x277b 002479 and type ,0x1f ,pdata +0x277c 002480 beq type_lmp ,transmit_lmp +0x277d 002481 beq type_null ,end_of_packet +0x277e 002482 beq type_poll ,end_of_packet +0x277f 002483 beq type_fhs ,transmit_fhs +0x2780 002484 beq type_dm1 ,transmit_dm1 +0x2781 002485 beq type_dh1 ,transmit_dh1 +0x2782 002486 beq type_hv3 ,transmit_hev +0x2783 002487 beq type_3dh1 ,transmit_3dh1 +0x2784 002488 arg 4 ,temp +0x2785 002489 call reserve_slot +0x2786 002490 beq type_dm3 ,transmit_dm3 +0x2787 002491 beq type_dh3 ,transmit_dh3 +0x2788 002492 arg 8 ,temp +0x2789 002493 call reserve_slot +0x278a 002494 beq type_dh5 ,transmit_dh5 +0x278b 002495 branch transmit_dm5 +: 002498 transmit_hev: +0x278c 002499 bpatch patch0e_6 ,mem_patch0e +0x278d 002500 enable encode_fec0 +0x278e 002501 enable enable_crc +0x278f 002502 enable encrypt +0x2790 002503 force 30 ,loopcnt +0x2791 002504 arg mem_sco_obuf ,contr +: 002505 transmit_ev_loop: +0x2792 002506 ifetch 1 ,contr +0x2793 002507 inject mod ,8 +0x2794 002508 loop transmit_ev_loop +0x2795 002509 bmark1 mark_esco ,transmit_end +0x2796 002510 branch end_of_packet +: 002512 transmit_fhs: +0x2797 002513 bpatch patch0e_7 ,mem_patch0e +0x2798 002514 fetch 1 ,mem_fhs_am_addr +0x2799 002515 icopy am_addr +0x279a 002516 fetch 1 ,mem_fhs_misc +0x279b 002517 icopy fhs_misc +0x279c 002518 fetch 3 ,mem_class +0x279d 002519 icopy fhs_class +0x279e 002520 fetch 2 ,mem_nap +0x279f 002521 icopy nap +0x27a0 002522 enable enable_crc +0x27a1 002523 enable encode_fec2 +0x27a2 002524 copy bt_adr ,rega +0x27a3 002525 call fetch_self_bt_adr +0x27a4 002526 pulse recalc +0x27a5 002527 nop 32 +0x27a6 002528 copy bt_clk ,timeup +0x27a7 002529 fetch 4 ,mem_clkn_bt +0x27a8 002530 icopy bt_clk +0x27a9 002531 preload fhs0 +0x27aa 002532 set1 58 ,pdata +0x27ab 002533 inject mod ,72 +0x27ac 002534 preload fhs1 +0x27ad 002535 inject mod ,72 +0x27ae 002536 copy timeup ,bt_clk +0x27af 002537 copy rega ,bt_adr +0x27b0 002538 enable enable_parity +0x27b1 002539 inject mod ,16 +0x27b2 002540 disable enable_parity +0x27b3 002541 branch end_of_packet +: 002543 transmit_lmp: +0x27b4 002544 bpatch patch0f_0 ,mem_patch0f +0x27b5 002545 enable encrypt +0x27b6 002546 enable enable_crc +0x27b7 002547 enable encode_fec2 +0x27b8 002548 fetch 1 ,mem_lmo_header_length +0x27b9 002549 and pdata ,0x1f8 ,temp +0x27ba 002550 arg mem_lmo_header_length ,contr +0x27bb 002551 increase 8 ,temp +: 002552 transmit_lmp_loop: +0x27bc 002553 add temp ,-72 ,regc +0x27bd 002554 nbranch transmit_lmp_finish ,positive +0x27be 002555 ifetch 9 ,contr +0x27bf 002556 inject mod ,72 +0x27c0 002557 copy regc ,temp +0x27c1 002558 branch transmit_lmp_loop +: 002559 transmit_lmp_finish: +0x27c2 002560 ifetch 9 ,contr +0x27c3 002561 iinject mod ,temp +0x27c4 002562 branch transmit_end +: 002564 transmit_dm1: +0x27c5 002565 enable encode_fec2 +0x27c6 002566 branch transmit_dmh +: 002567 transmit_dm3: +: 002568 transmit_dm5: +0x27c7 002569 enable encode_fec2 +0x27c8 002570 set1 mark_longpacket ,mark +0x27c9 002571 branch transmit_dmh +: 002573 transmit_3dh1: +0x27ca 002574 set1 psk3m ,radio_ctrl +: 002575 transmit_dh1: +0x27cb 002576 enable encode_fec0 +0x27cc 002577 branch transmit_dmh +: 002579 transmit_dh3: +: 002580 transmit_dh5: +0x27cd 002581 set1 psk3m ,radio_ctrl +0x27ce 002582 enable encode_fec0 +0x27cf 002583 set1 mark_longpacket ,mark +: 002585 transmit_dmh: +0x27d0 002586 bpatch patch0f_1 ,mem_patch0f +0x27d1 002587 fetch 1 ,mem_state_map +0x27d2 002588 bbit0 smap_edr ,transmit_noedr +0x27d3 002589 sub type ,3 ,null +0x27d4 002590 branch transmit_noedr ,positive +0x27d5 002591 disable encrypt +0x27d6 002592 disable encode_fec2 +0x27d7 002593 enable encode_fec0 +0x27d8 002594 disable enable_white +0x27d9 002595 set1 psk ,radio_ctrl +0x27da 002596 isolate1 psk3m ,radio_ctrl +0x27db 002597 branch transmit_edr3m ,true +0x27dc 002598 setarg 0xabeee +0x27dd 002599 inject mod ,20 +0x27de 002600 branch transmit_edr_sync_end +: 002601 transmit_edr3m: +0x27df 002602 setarg 0x5faeba +0x27e0 002603 inject mod ,24 +0x27e1 002604 setarg 0x12 +0x27e2 002605 inject mod ,6 +: 002606 transmit_edr_sync_end: +0x27e3 002607 enable enable_white +0x27e4 002608 set1 mark_longpacket ,mark +: 002609 transmit_noedr: +0x27e5 002610 enable encrypt +0x27e6 002611 enable enable_crc +0x27e7 002612 bmark1 mark_loopback ,transmit_loopback +0x27e8 002613 fetch 1 ,mem_tx_lch +0x27e9 002614 inject mod ,3 +0x27ea 002615 fetch 2 ,mem_tx_len +0x27eb 002616 iforce loopcnt +0x27ec 002617 bmark1 mark_longpacket ,transmit_long +0x27ed 002618 inject mod ,5 +0x27ee 002619 branch transmit_stuff +: 002620 transmit_long: +0x27ef 002621 inject mod ,13 +: 002622 transmit_stuff: +0x27f0 002623 deposit loopcnt +0x27f1 002624 branch transmit_end ,blank +0x27f2 002625 fetch 2 ,mem_txptr +0x27f3 002626 iforce contr +: 002627 transmit_stuff_loop: +0x27f4 002628 ifetch 1 ,contr +0x27f5 002629 inject mod ,8 +0x27f6 002630 loop transmit_stuff_loop +: 002633 transmit_end: +0x27f7 002634 enable enable_parity +0x27f8 002635 inject mod ,16 +0x27f9 002636 disable enable_parity +0x27fa 002637 call set_wait_ack +0x27fb 002638 fetch 1 ,mem_state_map +0x27fc 002639 bbit0 smap_edr ,end_of_packet +0x27fd 002640 force 0 ,pdata +0x27fe 002641 inject mod ,6 +0x27ff 002642 branch end_of_packet +: 002645 transmit_loopback: +0x2800 002646 bpatch patch0f_2 ,mem_patch0f +0x2801 002647 bmark1 mark_longpacket ,transmit_loopback_long +: 002648 transmit_loopback_short: +0x2802 002649 fetch 1 ,mem_lch_code +0x2803 002650 inject mod ,3 +0x2804 002651 fetch 1 ,mem_len +0x2805 002652 iforce regc +0x2806 002653 inject mod ,5 +0x2807 002654 branch transmit_loopback_cont +: 002655 transmit_loopback_long: +0x2808 002656 fetch 1 ,mem_lch_code +0x2809 002657 inject mod ,3 +0x280a 002658 fetch 2 ,mem_len +0x280b 002659 iforce regc +0x280c 002660 inject mod ,13 +: 002661 transmit_loopback_cont: +0x280d 002662 arg mem_rxbuf ,contr +: 002663 transmit_loopback_loop: +0x280e 002664 copy regc ,null +0x280f 002665 branch transmit_loopback_end ,zero +0x2810 002666 ifetch 1 ,contr +0x2811 002667 inject mod ,8 +0x2812 002668 increase -1 ,regc +0x2813 002669 branch transmit_loopback_loop +: 002670 transmit_loopback_end: +0x2814 002671 fetch 2 ,mem_tst_pktcnt_dmh +0x2815 002672 increase 1 ,pdata +0x2816 002673 store 2 ,mem_tst_pktcnt_dmh +0x2817 002674 branch transmit_end +: 002677 apply_switch_clke: +0x2818 002678 fetch 4 ,mem_clke_bt +0x2819 002679 add pdata ,7 ,rega +0x281a 002680 fetch 2 ,mem_slot_offset +0x281b 002681 nbranch apply_switch_nozero ,blank +0x281c 002682 increase -3 ,rega +0x281d 002683 branch apply_switch_wait_loop +: 002684 apply_switch_nozero: +0x281e 002685 mul32 pdata ,12 ,pdata +0x281f 002686 hfetcht 2 ,core_halfslot +0x2820 002687 increase 1 ,temp +: 002688 apply_switch_loop: +0x2821 002689 isub temp ,pdata +0x2822 002690 nbranch apply_switch_bt ,positive +0x2823 002691 increase -1 ,rega +0x2824 002692 branch apply_switch_loop +: 002693 apply_switch_bt: +0x2825 002694 sub pdata ,0 ,pdata +: 002695 apply_switch_wait_loop: +0x2826 002696 until null ,oneslot +0x2827 002697 compare 0 ,clkn_bt ,3 +0x2828 002698 nbranch apply_switch_wait_loop ,true +0x2829 002699 iforce clke_rt +0x282a 002700 copy rega ,clke_bt +0x282b 002701 iforce clke_rt +0x282c 002702 rtn +: 002705 calc_slot_offset: +0x282d 002706 bpatch patch0f_3 ,mem_patch0f +0x282e 002707 until null ,halfslot +0x282f 002708 deposit clke +0x2830 002709 iforce contr +0x2831 002710 rshift16 ,pdata ,pdata +0x2832 002711 isub clkn_bt ,loopcnt +0x2833 002712 and_into 3 ,loopcnt +0x2834 002713 nbranch calc_bt_portion ,zero +0x2835 002714 force 0 ,pdata +0x2836 002715 branch calc_skip_bt +: 002716 calc_bt_portion: +0x2837 002717 arg 3750 ,temp +0x2838 002718 force 0 ,pdata +: 002719 calc_slot_offset_loop: +0x2839 002720 iadd temp ,pdata +0x283a 002721 loop calc_slot_offset_loop +: 002722 calc_skip_bt: +0x283b 002723 iadd contr ,pdata +0x283c 002724 div pdata ,12 +0x283d 002725 call wait_div_end +0x283e 002726 quotient pdata +0x283f 002727 store 2 ,mem_slot_offset +0x2840 002728 rtn +: 002730 calc_clke_offset: +0x2841 002731 bpatch patch0f_4 ,mem_patch0f +0x2842 002732 deposit clke +0x2843 002733 copy clkn ,temp +0x2844 002734 isub temp ,null +0x2845 002735 nsetflag positive ,44 ,pdata +0x2846 002736 isub temp ,temp +0x2847 002737 setarg 3750 +0x2848 002738 isolate0 15 ,temp +0x2849 002739 branch calc_clke_pos ,true +0x284a 002740 setarg -61786 +0x284b 002741 iadd temp ,temp +: 002742 calc_clke_pos: +0x284c 002743 storet 6 ,mem_le_clk_offset +0x284d 002744 rtn le +0x284e 002745 storet 6 ,mem_clk_offset +0x284f 002746 rtn +: 002748 calc_clke: +0x2850 002749 disable clknt +0x2851 002750 fetch 6 ,mem_le_clk_offset +0x2852 002751 branch calc_clke2 ,le +0x2853 002752 fetch 6 ,mem_clk_offset +: 002753 calc_clke2: +0x2854 002754 iadd clkn ,alarm +0x2855 002755 increase 10 ,alarm +0x2856 002756 setarg 3750 +0x2857 002757 isub alarm ,pdata +0x2858 002758 isolate0 15 ,pdata +0x2859 002759 branch calc_clke_pos_adj ,true +0x285a 002760 setarg 0xf15a +0x285b 002761 iadd alarm ,alarm +: 002762 calc_clke_pos2: +0x285c 002763 copy alarm ,clke +0x285d 002764 rtn +: 002765 calc_clke_pos_adj: +0x285e 002766 force 0 ,null +0x285f 002767 branch calc_clke_pos2 +: 002774 calc_radio_freq: +0x2860 002775 bpatch patch0f_5 ,mem_patch0f +0x2861 002776 call set_sync_on +0x2862 002777 copy bt_clk ,pdata +0x2863 002778 and_into 0x180 ,pdata +0x2864 002779 compare 3 ,freq_mode ,0x07 +0x2865 002780 nbranch freq_not_connection ,true +0x2866 002781 rshift3 pdata ,pdata +0x2867 002782 iadd freq_index ,pdata +0x2868 002783 branch do_hop_mod_now +: 002784 freq_not_connection: +0x2869 002785 copy freq_index ,pdata +: 002786 do_hop_mod_now: +0x286a 002787 div pdata ,79 +0x286b 002788 pulse recalc +0x286c 002789 call wait_div_end +0x286d 002790 remainder rega +0x286e 002791 add rega ,-40 ,temp +0x286f 002792 branch odd_half ,positive +0x2870 002793 lshift rega ,temp +0x2871 002794 branch freq_result +: 002795 odd_half: +0x2872 002796 lshift temp ,temp +0x2873 002797 increase 1 ,temp +: 002798 freq_result: +0x2874 002799 bpatch patch0f_6 ,mem_patch0f +0x2875 002800 fetch 1 ,mem_mode +0x2876 002801 bbit0 afh_change ,afh_process_con +: 002802 afh_process_0: +0x2877 002803 fetch 4 ,mem_afh_instant +0x2878 002804 isub bt_clk ,null +0x2879 002805 branch afh_process_con ,positive +0x287a 002806 call afh_clear +0x287b 002807 fetch 1 ,mem_afh_new_mod +0x287c 002808 rtn blank +0x287d 002809 fetch 1 ,mem_mode +0x287e 002810 set1 afh_enable ,pdata +0x287f 002811 store 1 ,mem_mode +0x2880 002812 fetch 5 ,mem_afh_map_new +0x2881 002813 store 5 ,mem_afh_map_lo +0x2882 002814 ifetch 5 ,contr +0x2883 002815 store 5 ,mem_afh_map_hi +0x2884 002816 call afh_process_freq_map +: 002817 afh_process_con: +0x2885 002818 fetch 1 ,mem_mode +0x2886 002819 rtnbit0 afh_enable +0x2887 002820 isolate1 1 ,bt_clk +0x2888 002821 branch afh_same_channel ,true +0x2889 002822 rshift3 temp ,rega +0x288a 002823 and temp ,7 ,queue +0x288b 002824 setarg mem_afh_map_lo +0x288c 002825 iadd rega ,rega +0x288d 002826 ifetch 1 ,rega +0x288e 002827 qisolate0 pdata +0x288f 002828 branch afh_process_1 ,true +0x2890 002829 deposit temp +0x2891 002830 branch afh_process_end +: 002831 afh_process_1: +0x2892 002832 fetch 1 ,mem_afh_used +0x2893 002833 iforce regb +0x2894 002834 deposit bt_clk +0x2895 002835 and_into 0x180 ,pdata +0x2896 002836 rshift3 pdata ,pdata +0x2897 002837 iadd freq_index ,pdata +0x2898 002838 idiv regb +0x2899 002839 setarg mem_afh_map +0x289a 002840 call wait_div_end +0x289b 002841 remainder rega +0x289c 002842 iadd rega ,contr +0x289d 002843 ifetch 1 ,contr +: 002844 afh_process_end: +0x289e 002845 store 1 ,mem_afh_index +0x289f 002846 iforce temp +0x28a0 002847 rtn +: 002849 afh_same_channel: +0x28a1 002850 fetch 1 ,mem_afh_index +0x28a2 002851 iforce temp +0x28a3 002852 rtn +: 002854 afh_clear: +0x28a4 002855 fetch 1 ,mem_mode +0x28a5 002856 set0 afh_enable ,pdata +0x28a6 002857 set0 afh_change ,pdata +0x28a7 002858 store 1 ,mem_mode +0x28a8 002859 rtn +: 002865 afh_process_freq_map: +0x28a9 002866 bpatch patch0f_7 ,mem_patch0f +0x28aa 002867 arg mem_afh_map ,contw +0x28ab 002868 force 10 ,loopcnt +0x28ac 002869 call memset0 +0x28ad 002870 arg mem_afh_map ,contw +0x28ae 002871 force 0 ,regc +0x28af 002872 force 2 ,queue +: 002873 process_freq_3: +0x28b0 002874 fetch 5 ,mem_afh_map_lo +0x28b1 002875 iforce temp +0x28b2 002876 compare 2 ,queue ,0xff +0x28b3 002877 branch process_freq_1 ,true +0x28b4 002878 rshift temp ,temp +: 002879 process_freq_1: +0x28b5 002880 isolate0 0 ,temp +0x28b6 002881 branch process_freq_0 ,true +0x28b7 002882 deposit regc +0x28b8 002883 istore 1 ,contw +: 002884 process_freq_0: +0x28b9 002885 rshift2 temp ,temp +0x28ba 002886 increase 2 ,regc +0x28bb 002887 compare 40 ,regc ,0xfe +0x28bc 002888 nbranch process_freq_2 ,true +0x28bd 002889 fetch 5 ,mem_afh_map_hi +0x28be 002890 iforce temp +0x28bf 002891 compare 2 ,queue ,0xff +0x28c0 002892 branch process_freq_2 ,true +0x28c1 002893 rshift temp ,temp +: 002894 process_freq_2: +0x28c2 002895 sub regc ,78 ,null +0x28c3 002896 branch process_freq_1 ,positive +0x28c4 002897 force 1 ,regc +0x28c5 002898 increase -1 ,queue +0x28c6 002899 nbranch process_freq_3 ,zero +0x28c7 002900 arg mem_afh_map ,rega +0x28c8 002901 deposit contw +0x28c9 002902 isub rega ,pdata +0x28ca 002903 store 1 ,mem_afh_used +0x28cb 002904 rtn +: 002906 rx_radio_freq: +0x28cc 002907 bpatch patch10_0 ,mem_patch10 +0x28cd 002908 call calc_radio_freq +0x28ce 002909 fetch 1 ,mem_debug_config +0x28cf 002910 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +0x28d0 002911 fetcht 1 ,mem_rx_fixed_freq +: 002912 rx_radio_freq_now: +0x28d1 002913 branch set_freq_rx +: 002916 tx_radio_freq: +0x28d2 002917 bpatch patch10_1 ,mem_patch10 +0x28d3 002918 call calc_radio_freq +0x28d4 002919 fetch 1 ,mem_debug_config +0x28d5 002920 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +0x28d6 002921 fetcht 1 ,mem_tx_fixed_freq +: 002922 tx_radio_freq_now: +0x28d7 002923 branch set_freq_tx +: 002926 fetch_giac: +0x28d8 002927 force 0 ,uap +0x28d9 002928 fetch 3 ,mem_glap +0x28da 002929 iforce lap +0x28db 002930 rtn +: 002932 fetch_page_bt_adr: +0x28dc 002933 bpatch patch10_2 ,mem_patch10 +0x28dd 002934 fetch 1 ,mem_hci_puap +0x28de 002935 icopy uap +0x28df 002936 fetch 3 ,mem_hci_plap +0x28e0 002937 icopy lap +0x28e1 002938 rtn +: 002940 fetch_self_bt_adr: +0x28e2 002941 bpatch patch10_3 ,mem_patch10 +0x28e3 002942 fetch 2 ,mem_nap +0x28e4 002943 icopy nap +0x28e5 002944 fetch 1 ,mem_uap +0x28e6 002945 icopy uap +0x28e7 002946 fetch 3 ,mem_lap +0x28e8 002947 icopy lap +0x28e9 002948 rtn +: 002950 fetch_extm_bt_adr: +0x28ea 002951 bpatch patch10_4 ,mem_patch10 +0x28eb 002952 fetch 2 ,mem_pnap +0x28ec 002953 icopy nap +0x28ed 002954 fetch 1 ,mem_puap +0x28ee 002955 icopy uap +0x28ef 002956 fetch 3 ,mem_plap +0x28f0 002957 icopy lap +0x28f1 002958 rtn +: 002961 fetch_diac: +0x28f2 002962 bmark1 mark_all_diac ,fetch_diac_do +0x28f3 002963 rtnmark0 mark_inquiry_state +0x28f4 002964 rtnmark0 mark_periodical_diac +: 002965 fetch_diac_do: +0x28f5 002966 and_into -256 ,lap +0x28f6 002967 pulse recalc +0x28f7 002968 nop 32 +0x28f8 002969 rtn +: 002972 shutdown_radio: +0x28f9 002973 bpatch patch10_5 ,mem_patch10 +0x28fa 002974 branch shutdown_radio0 ,is_rx +0x28fb 002975 hjam 0xd4 ,0x955 +0x28fc 002976 nop 4 +0x28fd 002977 hjam 0xd2 ,0x955 +0x28fe 002978 nop 4 +0x28ff 002979 hjam 0xd1 ,0x955 +0x2900 002980 nop 4 +0x2901 002981 fetch 1 ,mem_tx_power +0x2902 002982 beq tx_power_0db ,shutdown_radio_0db +0x2903 002983 beq tx_power_3db ,shutdown_radio_3db +0x2904 002984 beq tx_power_5db ,shutdown_radio_5db +0x2905 002985 beq tx_power_f3db ,shutdown_radio_f3db +0x2906 002986 beq tx_power_f5db ,shutdown_radio_f5db +0x2907 002987 beq tx_power_pair ,shutdown_radio_pair +: 002988 shutdown_radio_5db: +: 002989 shutdown_radio_0db: +0x2908 002990 hjam 0xd0 ,0x955 +0x2909 002991 hjam 0xe0 ,0x956 +: 002992 shutdown_radio0: +0x290a 002993 force 0 ,radio_ctrl +0x290b 002994 disable is_rx +0x290c 002995 disable is_tx +0x290d 002996 pulse packet_end +0x290e 002997 hjam 0x0 ,rfen_mdm +0x290f 002998 hjam 0x0 ,rfen_tx +0x2910 002999 hjam 0x0 ,rfen_rx +0x2911 003000 hjam 0 ,rfen_sn +0x2912 003001 hjam 0x70 ,rfen_msc +0x2913 003002 hjam 0x0 ,rfen_adc +0x2914 003003 rtn +: 003005 shutdown_radio_pair: +: 003006 shutdown_radio_f5db: +: 003007 shutdown_radio_f3db: +: 003008 shutdown_radio_3db: +0x2915 003009 hjam 0xd0 ,0x955 +0x2916 003010 hjam 0xc0 ,0x956 +0x2917 003011 branch shutdown_radio0 +: 003013 set_sync_on: +0x2918 003014 bpatch patch10_6 ,mem_patch10 +0x2919 003015 hjam 0x0 ,rfen_mdm +0x291a 003016 hjam 0x0 ,rfen_tx +0x291b 003017 hjam 0x18 ,rfen_rx +0x291c 003018 hjam 0xa7 ,rfen_sn +0x291d 003019 hjam 0x7f ,rfen_msc +0x291e 003020 rtn +: 003022 set_freq_rx: +0x291f 003023 bpatch patch10_7 ,mem_patch10 +0x2920 003025 storet 1 ,mem_last_freq +0x2921 003026 add temp ,rx_freq_offset ,rega +0x2922 003027 hjam 0x07 ,0x96d +0x2923 003028 branch rf_write_freq +: 003029 rf_rx_enable: +0x2924 003030 bpatch patch11_0 ,mem_patch11 +0x2925 003031 hjam 0xcf ,rfen_tx +0x2926 003032 nop 10 +0x2927 003033 hjam 0xff ,rfen_rx +0x2928 003034 hjam 0xaf ,rfen_sn +0x2929 003035 hjam 0xff ,rfen_msc +0x292a 003036 nop 10 +0x292b 003037 hjam 0xa0 ,rfen_mdm +0x292c 003038 rtn +: 003040 set_freq_tx_offset: +0x292d 003041 fetch 1 ,mem_250k_freq_enable +0x292e 003042 branch set_freq_tx_2m_offset ,blank +: 003043 set_freq_tx_0m_offset: +0x292f 003044 add temp ,2 ,rega +0x2930 003045 rtn +: 003046 set_freq_tx_2m_offset: +0x2931 003047 add temp ,0 ,rega +0x2932 003048 rtn +: 003050 set_freq_tx: +0x2933 003051 bpatch patch11_1 ,mem_patch11 +0x2934 003052 storet 1 ,mem_last_freq +0x2935 003053 call set_freq_tx_offset +0x2936 003054 call rf_write_freq +0x2937 003055 setarg param_pll_setup +0x2938 003056 call sleep +: 003057 txon: +0x2939 003058 hjam 0x1 ,rfen_adc +0x293a 003059 hjam 0x3c ,rfen_rx +0x293b 003060 hjam 0xe0 ,rfen_tx +0x293c 003061 hjam 0x12 ,0x96d +0x293d 003062 nop 10 +0x293e 003063 hjam 0x01 ,rfen_mdm +0x293f 003064 hjam 0x3d ,rfen_mdm +0x2940 003065 nop 10 +0x2941 003066 hjam 0xb7 ,rfen_sn +0x2942 003067 nop 10 +0x2943 003068 hjam 0x7f ,rfen_mdm +0x2944 003069 fetch 1 ,mem_tx_power +0x2945 003070 beq tx_power_0db ,set_tx_power_0db +0x2946 003071 beq tx_power_3db ,set_tx_power_3db +0x2947 003072 beq tx_power_5db ,set_tx_power_5db +0x2948 003073 beq tx_power_f3db ,set_tx_power_f3db +0x2949 003074 beq tx_power_f5db ,set_tx_power_f5db +0x294a 003075 beq tx_power_pair ,set_tx_power_pair +: 003076 set_tx_power_0db: +0x294b 003077 hjam 0xf0 ,0x956 +0x294c 003078 call txon_common +0x294d 003079 hjam 0xd8 ,0x955 +0x294e 003080 rtn +: 003082 set_tx_power_3db: +0x294f 003083 hjam 0xdf ,0x956 +0x2950 003084 call txon_common +0x2951 003085 hjam 0xdf ,0x955 +0x2952 003086 rtn +: 003088 set_tx_power_5db: +0x2953 003089 hjam 0xff ,0x956 +0x2954 003090 call txon_common +0x2955 003091 hjam 0xdf ,0x955 +0x2956 003092 rtn +: 003093 set_tx_power_f3db: +0x2957 003094 hjam 0xce ,0x956 +0x2958 003095 call txon_common +0x2959 003096 hjam 0xd8 ,0x955 +0x295a 003097 rtn +: 003099 set_tx_power_f5db: +0x295b 003100 hjam 0xcb ,0x956 +0x295c 003101 call txon_common +0x295d 003102 hjam 0xd8 ,0x955 +0x295e 003103 rtn +: 003105 set_tx_power_pair: +0x295f 003106 hjam 0xd0 ,0x955 +0x2960 003107 hjam 0xc0 ,0x956 +0x2961 003108 hjam 0x4c ,0x957 +0x2962 003109 hjam 0x6c ,0x958 +0x2963 003110 hjam 0x50 ,0x959 +0x2964 003111 rtn +: 003113 txon_common: +0x2965 003114 nop 4 +0x2966 003115 hjam 0xd1 ,0x955 +0x2967 003116 nop 4 +0x2968 003117 hjam 0xd2 ,0x955 +0x2969 003118 nop 4 +0x296a 003119 hjam 0xd4 ,0x955 +0x296b 003120 rtn +: 003123 initialize_radio: +0x296c 003124 hjam clksel_rc ,core_clksel +: 003125 initialize_radio_wait: +0x296d 003126 fetch 2 ,mem_rf_init_ptr +0x296e 003127 bbit0 14 ,initialize_radio_wait +0x296f 003128 iforce contr +0x2970 003129 arg 0x8900 ,temp +: 003130 initialize_radio_loop: +0x2971 003131 ifetch 1 ,contr +0x2972 003132 beq 0xff ,initialize_radio_cont +0x2973 003133 ior temp ,contw +0x2974 003134 ifetch 1 ,contr +0x2975 003135 istore 1 ,contw +0x2976 003136 branch initialize_radio_loop +: 003137 initialize_radio_cont: +0x2977 003138 bpatch patch11_2 ,mem_patch11 +0x2978 003139 call lpm_cal_xtal_startup +0x2979 003140 call switchto_dpllclk +0x297a 003142 setarg param_dpll_start_delay +0x297b 003143 iadd clkn_bt ,pdata +0x297c 003144 store 4 ,mem_dpll_clkn +0x297d 003145 set1 reset ,radio_ctrl +0x297e 003146 force 0 ,radio_ctrl +0x297f 003147 ncall do_rccal ,wake +0x2980 003148 branch set_rccal +: 003151 rf_write_freq: +0x2981 003152 bpatch patch11_3 ,mem_patch11 +0x2982 003153 setarg 2400 +0x2983 003154 iadd rega ,temp +0x2984 003155 fetch 1 ,mem_fcomp_mul +0x2985 003156 hjam 0x04 ,rf_pll_rstn +0x2986 003157 imul32 temp ,pdata +0x2987 003158 fetcht 1 ,mem_fcomp_div +0x2988 003159 idiv temp +0x2989 003160 call wait_div_end +0x298a 003161 quotient rega +0x298b 003162 remainder pdata +0x298c 003163 lshift16 pdata ,pdata +0x298d 003164 lshift4 pdata ,pdata +0x298e 003165 idiv temp +0x298f 003166 call wait_div_end +0x2990 003167 quotient pdata +0x2991 003168 lshift8 pdata ,pdata +0x2992 003169 lshift pdata ,pdata +0x2993 003170 ior rega ,pdata +0x2994 003171 hstore 4 ,rf_pll_intg +0x2995 003172 hjam 0x44 ,rf_pll_rstn +0x2996 003173 hjam 0xc4 ,rf_pll_rstn +0x2997 003174 rtn +: 003177 do_rccal: +0x2998 003178 bpatch patch11_4 ,mem_patch11 +0x2999 003179 hjam 0x02 ,rfen_adc +0x299a 003180 setarg 250000 +0x299b 003181 call sleep +0x299c 003182 hjam 0x7f ,rfen_rx +0x299d 003183 nop 130 +0x299e 003184 hjam 0x30 ,rf_rccal_ctrl +0x299f 003185 hjam 0xd0 ,rfen_tx +0x29a0 003186 hjam 0x70 ,rf_rccal_ctrl +0x29a1 003187 hjam 0xf0 ,rf_rccal_ctrl +0x29a2 003188 force 50 ,loopcnt +: 003189 do_rccal_loop: +0x29a3 003190 hfetch 1 ,rf_rccal_result +0x29a4 003191 bbit1 5 ,do_rccal_end +0x29a5 003192 loop do_rccal_loop +: 003193 do_rccal_end: +0x29a6 003194 store 1 ,mem_rf_rccal +0x29a7 003195 hjam 0 ,rfen_tx +0x29a8 003196 hjam 0 ,rfen_rx +0x29a9 003197 hjam 0x00 ,rfen_adc +0x29aa 003198 rtn +: 003200 set_rccal: +0x29ab 003201 bpatch patch11_5 ,mem_patch11 +0x29ac 003202 fetch 1 ,mem_rf_rccal +0x29ad 003203 set1 5 ,pdata +0x29ae 003204 hstore 1 ,rf_rccal_ctrl +0x29af 003205 hfetcht 1 ,rf_bpf_ctrim +0x29b0 003206 and_into 7 ,temp +0x29b1 003207 lshift3 pdata ,pdata +0x29b2 003208 ior temp ,pdata +0x29b3 003209 hstore 1 ,rf_bpf_ctrim +0x29b4 003210 hfetch 1 ,rf_bpf_ib +0x29b5 003211 set0 bpf_rccal ,pdata +0x29b6 003212 hstore 1 ,rf_bpf_ib +0x29b7 003213 hfetch 1 ,rf_adc_rccal +0x29b8 003214 set0 adc_rccal ,pdata +0x29b9 003215 hstore 1 ,rf_adc_rccal +0x29ba 003216 rtn +: 003218 save_rssi: +0x29bb 003219 bpatch patch11_6 ,mem_patch11 +0x29bc 003220 hfetch 2 ,rf_afc_d2a +0x29bd 003221 rshift4 pdata ,pdata +0x29be 003222 rshift3 pdata ,pdata +0x29bf 003223 sub pdata ,0 ,pdata +0x29c0 003224 and_into 0xff ,pdata +0x29c1 003225 div pdata ,10 +0x29c2 003226 call wait_div_end +0x29c3 003227 quotient pdata +0x29c4 003228 lshift4 pdata ,pdata +0x29c5 003229 remainder temp +0x29c6 003230 ior temp ,pdata +0x29c7 003231 store 1 ,mem_rssi +0x29c8 003232 rtn +: 003235 switchto_dpllclk: +0x29c9 003236 hjam clksel_rc ,core_clksel +0x29ca 003237 hfetch 1 ,rf_clkpll_frac + 2 +0x29cb 003238 set0 4 ,pdata +0x29cc 003239 set0 5 ,pdata +0x29cd 003240 hstore 1 ,rf_clkpll_frac + 2 +0x29ce 003241 hjam 0x00 ,rfen_ck +0x29cf 003242 hjam 0x00 ,rfen_msc +0x29d0 003243 hjam 0x70 ,rfen_msc +0x29d1 003244 hjam 0xff ,rfen_ck +0x29d2 003245 hfetch 1 ,rf_clkpll_frac + 2 +0x29d3 003246 set1 4 ,pdata +0x29d4 003247 set1 5 ,pdata +0x29d5 003248 hstore 1 ,rf_clkpll_frac + 2 +0x29d6 003249 call init_lpm_ctrl +0x29d7 003250 hfetch 1 ,rf_clkpll_int +0x29d8 003251 set1 7 ,pdata +0x29d9 003252 hstore 1 ,rf_clkpll_int +0x29da 003253 set0 7 ,pdata +0x29db 003254 hstore 1 ,rf_clkpll_int +0x29dc 003255 set1 7 ,pdata +0x29dd 003256 hstore 1 ,rf_clkpll_int +0x29de 003257 hjam clksel_dpll ,core_clksel +0x29df 003258 nop 1 +0x29e0 003259 hjam clksel_xtal ,core_clksel +0x29e1 003260 hfetch 1 ,rf_clkpll_frac + 2 +0x29e2 003261 and_into 0xcf ,pdata +0x29e3 003262 hstore 1 ,rf_clkpll_frac + 2 +0x29e4 003263 or_into 0x30 ,pdata +0x29e5 003264 hstore 1 ,rf_clkpll_frac + 2 +0x29e6 003265 rtn +: 003268 xtal_fast_wake: +0x29e7 003269 setarg 0xf0f +0x29e8 003270 branch lpm_write_config +: 003272 init_lpm_ctrl: +0x29e9 003273 setarg 0x80f +0x29ea 003274 branch lpm_write_config +: 003278 start_receiver: +0x29eb 003279 bpatch patch11_7 ,mem_patch11 +0x29ec 003280 call rf_rx_enable +0x29ed 003281 disable is_tx +0x29ee 003282 enable is_rx +0x29ef 003283 pulse init_encrypt +0x29f0 003284 rtn +: 003286 prep_crypt: +0x29f1 003287 bpatch patch12_0 ,mem_patch12 +0x29f2 003288 fetch 1 ,mem_state_map +0x29f3 003289 isolate1 smap_encryption ,pdata +0x29f4 003290 setflag true ,0 ,pdata +0x29f5 003291 hstore 1 ,core_encrypt +0x29f6 003292 arg mem_kc ,contr +0x29f7 003293 ifetch 9 ,contr +0x29f8 003294 iforce kc_ls +0x29f9 003295 ifetch 7 ,contr +0x29fa 003296 iforce kc_ms +0x29fb 003297 fetch 1 ,mem_key_size +0x29fc 003298 add pdata ,-1 ,g1l +0x29fd 003299 pulse kc_p_activate +0x29fe 003300 rtn +: 003302 wait_access_end: +0x29ff 003303 deposit clke +0x2a00 003304 store 6 ,mem_sync_clke +0x2a01 003305 disable decode_fec0 +0x2a02 003306 nbranch shutdown_radio ,sync +0x2a03 003307 arg param_clke_cal ,clke_rt +0x2a04 003308 increase 1 ,clke_bt +0x2a05 003309 and_into 0x1fc ,clke_bt +0x2a06 003310 rtn +: 003314 wait_access_mhalfbnd: +0x2a07 003315 enable decode_fec0 +: 003316 wait_access_mhalfbnd_correlate: +0x2a08 003317 correlate null ,mhalfbnd +0x2a09 003318 branch wait_access_end ,sync +0x2a0a 003319 compare 0x02 ,clke_bt ,0x02 +0x2a0b 003320 nbranch wait_access_mhalfbnd_correlate ,true +0x2a0c 003321 branch wait_access_end +: 003323 wait_access_clkn_rt: +0x2a0d 003324 bpatch patch12_1 ,mem_patch12 +0x2a0e 003325 arg param_conn_access ,timeup +0x2a0f 003326 enable decode_fec0 +0x2a10 003327 correlate clkn_rt ,meet +0x2a11 003328 disable decode_fec0 +0x2a12 003329 nbranch shutdown_radio ,sync +0x2a13 003330 rtn +: 003332 wait_access_forever: +0x2a14 003333 bpatch patch12_2 ,mem_patch12 +0x2a15 003334 enable decode_fec0 +0x2a16 003335 correlate null ,timeout +0x2a17 003336 disable decode_fec0 +0x2a18 003337 nbranch shutdown_radio ,sync +0x2a19 003338 arg param_clke_cal ,clke_rt +0x2a1a 003339 and_into 0x1fc ,clke_bt +0x2a1b 003340 rtn +: 003343 reserve_slot: +0x2a1c 003344 bpatch patch12_3 ,mem_patch12 +0x2a1d 003345 iforce rega +0x2a1e 003346 deposit bt_clk +0x2a1f 003347 iadd temp ,timeup +0x2a20 003348 copy timeup ,pdata +0x2a21 003349 store 4 ,mem_next_btclk +0x2a22 003350 deposit rega +0x2a23 003351 rtn +: 003354 ahead_window: +0x2a24 003355 copy pdata ,temp +0x2a25 003356 bpatch patch12_4 ,mem_patch12 +0x2a26 003357 copy temp ,pdata +0x2a27 003358 call clk2bt +0x2a28 003359 lshift16 bt_clk ,pdata +0x2a29 003360 set1 44 ,pdata +0x2a2a 003361 call clk_diff +0x2a2b 003362 set0 44 ,pdata +0x2a2c 003363 call get_clk +0x2a2d 003364 call clk_diff +0x2a2e 003365 rtn user +0x2a2f 003366 call clk2rt +0x2a30 003367 iforce stop_watch +0x2a31 003368 until null ,timeout +0x2a32 003369 rtn +: 003372 setup_clk: +0x2a33 003373 bpatch patch12_5 ,mem_patch12 +0x2a34 003374 branch setup_clkn ,clknt +0x2a35 003375 until clke_rt ,meet +: 003376 skip_setup_clke: +0x2a36 003377 copy clke_bt ,temp +0x2a37 003378 branch setup_clknbt +: 003379 setup_clkn: +0x2a38 003380 branch skip_setup_clkn ,attempt +0x2a39 003381 until clkn_rt ,meet +: 003382 skip_setup_clkn: +0x2a3a 003383 copy clkn_bt ,temp +: 003384 setup_clknbt: +0x2a3b 003385 branch setup_clk11 ,user +0x2a3c 003386 compare 1 ,temp ,3 +0x2a3d 003387 nbranch setup_clk ,true +: 003388 setup_complete: +0x2a3e 003389 bpatch patch12_6 ,mem_patch12 +0x2a3f 003390 fetch 1 ,mem_state +0x2a40 003391 rtnbit0 state_inconn +0x2a41 003392 fetch 4 ,mem_next_btclk +0x2a42 003393 isub temp ,pdata +0x2a43 003394 nrtn positive +0x2a44 003395 sub pdata ,0xff ,null +0x2a45 003396 branch setup_clk ,positive +0x2a46 003397 rtn +: 003398 setup_clk11: +0x2a47 003399 compare 3 ,temp ,3 +0x2a48 003400 nbranch setup_clk ,true +0x2a49 003401 branch setup_complete +: 003403 rf_setup_time: +0x2a4a 003404 bpatch patch12_7 ,mem_patch12 +0x2a4b 003405 arg param_rf_setup ,timeup +0x2a4c 003406 branch setup_clk +: 003408 rf_setup_time_slave_slot: +0x2a4d 003409 disable user +0x2a4e 003410 branch rf_setup_time +: 003412 rf_setup_time_master_slot: +0x2a4f 003413 enable user +0x2a50 003414 branch rf_setup_time +: 003416 start_transmitter: +0x2a51 003417 bpatch patch13_0 ,mem_patch13 +0x2a52 003418 call prep_crypt +0x2a53 003419 disable is_rx +0x2a54 003420 enable is_tx +0x2a55 003421 rtn +: 003425 start_tx_native: +0x2a56 003426 bpatch patch13_1 ,mem_patch13 +0x2a57 003427 arg param_tx_setup ,timeup +0x2a58 003428 until clkn_rt ,meet +0x2a59 003429 pulse init_encrypt +0x2a5a 003430 rtn +: 003432 start_rx_native: +0x2a5b 003433 bpatch patch13_2 ,mem_patch13 +0x2a5c 003434 arg param_rx_setup ,timeup +0x2a5d 003435 until clkn_rt ,meet +0x2a5e 003436 rtn +: 003439 start_tx_external: +0x2a5f 003440 bpatch patch13_3 ,mem_patch13 +0x2a60 003441 arg param_tx_setup ,timeup +0x2a61 003442 until clke_rt ,meet +0x2a62 003443 pulse init_encrypt +0x2a63 003444 rtn +: 003446 send_access_word: +0x2a64 003447 bpatch patch13_4 ,mem_patch13 +0x2a65 003448 preload access +0x2a66 003449 enable encode_fec0 +0x2a67 003450 set1 txgfsk ,radio_ctrl +0x2a68 003451 inject mod ,72 +0x2a69 003452 disable encode_fec0 +0x2a6a 003453 rtn +: 003456 scan_mode_whiten: +0x2a6b 003457 copy xin ,temp +0x2a6c 003458 or_into 0x60 ,temp +0x2a6d 003459 copy temp ,white_init +0x2a6e 003460 rtn +: 003465 get_free_amaddr: +0x2a6f 003466 bpatch patch13_5 ,mem_patch13 +0x2a70 003467 fetch 1 ,mem_current_amaddr +0x2a71 003468 increase 1 ,pdata +0x2a72 003469 bne param_esco_addr ,get_free_amaddr_cont +0x2a73 003470 force 1 ,pdata +: 003471 get_free_amaddr_cont: +0x2a74 003472 store 1 ,mem_current_amaddr +0x2a75 003473 iforce am_addr +0x2a76 003474 rtn +: 003476 get_clk: +0x2a77 003477 copy clkn ,temp +0x2a78 003478 rtn master +0x2a79 003479 copy clke ,temp +0x2a7a 003480 rtn +: 003482 get_clkbt: +0x2a7b 003483 deposit clkn_bt +0x2a7c 003484 rtn master +0x2a7d 003485 deposit clke_bt +0x2a7e 003486 rtn +: 003489 supervision_update: +0x2a7f 003490 bpatch patch13_6 ,mem_patch13 +0x2a80 003491 fetcht 4 ,mem_supervision_timer +0x2a81 003492 call get_clkbt +0x2a82 003493 isub temp ,timeup +0x2a83 003494 deposit timeup +0x2a84 003495 fetcht 2 ,mem_supervision_to +0x2a85 003496 lshift temp ,temp +0x2a86 003497 isub temp ,pdata +0x2a87 003498 rtn +: 003500 supervision_flush: +0x2a88 003501 bpatch patch13_7 ,mem_patch13 +0x2a89 003502 call get_clkbt +0x2a8a 003503 store 4 ,mem_supervision_timer +0x2a8b 003504 rtn +: 003506 assert: +0x2a8c 003507 bpatch patch14_0 ,mem_patch14 +0x2a8d 003508 branch assert +: 003510 loop: +0x2a8e 003511 branch loop +: 003513 sleep: +0x2a8f 003514 rtn blank +0x2a90 003516 rshift pdata ,pdata +0x2a91 003517 increase -3 ,pdata +: 003518 sleep_loop: +0x2a92 003519 increase -1 ,pdata +0x2a93 003520 nbranch sleep_loop ,zero +0x2a94 003521 force 0 ,pdata +0x2a95 003522 rtn +: 003526 init_param: +0x2a96 003528 arg 0x10 ,loopcnt +0x2a97 003529 arg 0 ,contw +0x2a98 003530 call memset0 +0x2a99 003531 arg mem_le_state ,contw +0x2a9a 003532 arg 10 ,loopcnt +0x2a9b 003533 call memset0 +0x2a9c 003534 jam 0 ,mem_sp_calc +0x2a9d 003535 jam 0 ,mem_fifo_temp +0x2a9e 003536 jam 0 ,mem_le_testtype +0x2a9f 003537 jam 0 ,mem_debug_config +0x2aa0 003538 jam 0 ,mem_lmp_conn_state +0x2aa1 003539 bpatch patch14_1 ,mem_patch14 +0x2aa2 003540 jam 0 ,mem_connection_options +0x2aa3 003541 jam 0 ,mem_tester_emulate +0x2aa4 003542 jam 0 ,mem_tester_cnt +0x2aa5 003543 setarg param_glap +0x2aa6 003544 store 3 ,mem_glap +0x2aa7 003545 setarg param_acl_pktlen +0x2aa8 003546 store 2 ,mem_acl_pktlen +0x2aa9 003547 jam param_sco_pktlen ,mem_sco_pktlen +0x2aaa 003548 jam param_acl_pktcnt ,mem_acl_pktcnt +0x2aab 003549 jam param_sco_pktcnt ,mem_sco_pktcnt +0x2aac 003550 setarg param_hci_version +0x2aad 003551 store 3 ,mem_hci_version +0x2aae 003556 jam 0x60 ,mem_fhs_misc +0x2aaf 003557 jam param_max_slot ,mem_max_slot +0x2ab0 003558 jam 0x02 ,mem_fw_ver +0x2ab1 003559 fetch 1 ,mem_ssp_enable +0x2ab2 003560 ncall init_memp ,blank +0x2ab3 003561 fetch 1 ,mem_le_secure_connect_enable +0x2ab4 003562 ncall init_memp_256 ,blank +0x2ab5 003563 bpatch patch14_2 ,mem_patch14 +0x2ab6 003564 rtn wake +0x2ab7 003565 setarg 0 +0x2ab8 003566 store 2 ,mem_tx_len +0x2ab9 003567 rshift clkn_bt ,pdata +0x2aba 003568 store 4 ,mem_last_clkn +0x2abb 003569 rtn +: 003576 lpmstate: +0x2abc 003577 setarg 0xee21 +0x2abd 003578 hstore 2 ,core_clkoff +0x2abe 003579 hfetch 4 ,core_gpio_in +0x2abf 003580 store 4 ,mem_saved_gpio_in +0x2ac0 003581 hfetch 1 ,core_lpm_ldocnt +0x2ac1 003582 store 1 ,mem_wakup_from_power_flag +0x2ac2 003583 bbit0 gpio_latch ,loadcode +0x2ac3 003584 enable wake +0x2ac4 003585 bbit0 cold_wake ,lpmwake +0x2ac5 003586 disable wake +0x2ac6 003587 deposit auxcnt +0x2ac7 003588 nbranch lpmwake ,blank +0x2ac8 003589 hfetch 1 ,core_lpm_ctrl + 3 +0x2ac9 003590 bbit1 reload_code ,lpmwake +0x2aca 003591 arg param_hibernate_clks ,temp +0x2acb 003592 branch lpm_enter_sleep +: 003593 lpmwake: +0x2acc 003594 hfetch 3 ,core_lpm_xtalcnt +0x2acd 003595 hstore 3 ,core_lpm_reg +0x2ace 003596 ifetch 1 ,contr +0x2acf 003597 or_into isogate_mask ,pdata +0x2ad0 003598 istore 1 ,contw +0x2ad1 003599 call lpm_write_ctrl2 +0x2ad2 003600 hfetch 1 ,core_lpm_isogate +0x2ad3 003601 set1 enable_retmem ,pdata +0x2ad4 003602 hstore 1 ,core_lpm_isogate +0x2ad5 003603 call lpm_write_ctrl2 +0x2ad6 003604 call lpm_load_context ,wake +0x2ad7 003605 hfetch 1 ,core_lpm_reg + 2 +0x2ad8 003606 set0 gpio_latch ,pdata +0x2ad9 003607 hstore 1 ,core_lpm_reg + 2 +0x2ada 003608 call lpm_write_ctrl2 +0x2adb 003609 nbranch loadcode ,wake +0x2adc 003610 rtnmark0 mark_otp_encrypt +0x2add 003611 hjam lock_otp ,core_misc_ctrl +0x2ade 003612 rtn +: 003614 lpm_load_context: +0x2adf 003615 fetch 1 ,mem_saved_spidctrl +0x2ae0 003616 hstore 1 ,core_spid_ctrl +0x2ae1 003617 fetch 3 ,mem_saved_gsel +0x2ae2 003618 hstore 3 ,core_gpio_sel +0x2ae3 003619 fetch 4 ,mem_saved_gpio + 4 +0x2ae4 003620 hstore 4 ,core_gpio_out0 +0x2ae5 003621 fetch 4 ,mem_saved_gpio +0x2ae6 003622 hstore 4 ,core_gpio_oe0 +0x2ae7 003623 fetch 8 ,mem_saved_gpio + 8 +0x2ae8 003624 hstore 8 ,core_gpio_pu0 +0x2ae9 003625 fetch 8 ,mem_saved_mark +0x2aea 003626 iforce mark +0x2aeb 003627 hfetch 8 ,core_gpio_wakeup_low +0x2aec 003628 store 8 ,mem_gpio_wakeup_low +0x2aed 003629 call load_ucode +0x2aee 003630 rtn +: 003632 lpm_save_context: +0x2aef 003633 deposit mark +0x2af0 003634 store 8 ,mem_saved_mark +0x2af1 003635 hfetch 8 ,core_gpio_oe0 +0x2af2 003636 store 8 ,mem_saved_gpio +0x2af3 003637 ifetch 8 ,contr +0x2af4 003638 istore 8 ,contw +0x2af5 003639 hfetch 3 ,core_gpio_sel +0x2af6 003640 store 3 ,mem_saved_gsel +0x2af7 003641 hfetch 1 ,core_spid_ctrl +0x2af8 003642 store 1 ,mem_saved_spidctrl +0x2af9 003643 branch lpm_write_gpio_wakeup +: 003645 lpo_calibration: +0x2afa 003646 hfetch 1 ,core_bist_ctrl +0x2afb 003647 nbranch lpo_cal_inited ,blank +0x2afc 003648 fetch 3 ,mem_clks_per_lpo +0x2afd 003649 nrtn blank +0x2afe 003650 hjam 0xc0 ,core_bist_ctrl +0x2aff 003651 hjam ccnt_start ,core_misc_ctrl +: 003652 lpo_cal_inited: +0x2b00 003653 hfetch 1 ,core_perf_status +0x2b01 003654 rtnbit0 1 +0x2b02 003655 hfetch 3 ,core_clk_counter +0x2b03 003656 store 3 ,mem_clks_per_lpo +0x2b04 003657 rtn +: 003661 lpm_adjust_clk: +0x2b05 003662 bpatch patch14_3 ,mem_patch14 +0x2b06 003663 deposit clke +0x2b07 003664 call clk_diff_rt +0x2b08 003665 fetcht 4 ,mem_sleep_counter_all +0x2b09 003666 sub temp ,0xff ,null +0x2b0a 003667 rtn positive +0x2b0b 003668 lshift8 pdata ,pdata +0x2b0c 003669 lshift4 pdata ,pdata +0x2b0d 003670 idiv temp +0x2b0e 003671 call wait_div_end +0x2b0f 003672 quotient pdata +0x2b10 003673 arg param_lpm_adjmax ,temp +0x2b11 003674 call ceiling +0x2b12 003675 store 1 ,mem_lpm_adjust +0x2b13 003676 nbranch lpm_adjust_positive ,user +0x2b14 003677 sub pdata ,0 ,pdata +: 003678 lpm_adjust_positive: +0x2b15 003679 fetcht 3 ,mem_clks_per_lpo +0x2b16 003680 iadd temp ,pdata +0x2b17 003681 store 3 ,mem_clks_per_lpo +: 003682 lpm_clear_counter: +0x2b18 003683 setarg 0 +0x2b19 003684 store 4 ,mem_sleep_counter_all +0x2b1a 003685 rtn +: 003689 lpm_doze: +0x2b1b 003690 fetch 1 ,mem_lpm_config + 2 +0x2b1c 003691 set1 reload_code ,pdata +0x2b1d 003692 store 1 ,mem_lpm_config + 2 +0x2b1e 003693 branch lpm_hibernate_normal +: 003697 lpm_hibernate: +0x2b1f 003698 arg param_hibernate_clks ,temp +0x2b20 003699 fetch 1 ,mem_lpm_config + 1 +0x2b21 003700 set0 7 ,pdata +0x2b22 003701 store 1 ,mem_lpm_config + 1 +: 003702 lpm_hibernate_normal: +0x2b23 003703 bpatch patch14_4 ,mem_patch14 +0x2b24 003704 call lpm_write_gpio_wakeup +0x2b25 003705 fetch 1 ,mem_lpm_hibernate_switch +0x2b26 003706 store 1 ,mem_lpm_xtalcnt + 4 +0x2b27 003707 fetch 1 ,mem_lpm_xtalcnt + 2 +0x2b28 003708 set1 cold_wake ,pdata +0x2b29 003709 store 1 ,mem_lpm_xtalcnt + 2 +: 003712 lpm_sleep: +0x2b2a 003713 bpatch patch14_5 ,mem_patch14 +0x2b2b 003714 call xtal_fast_wake +0x2b2c 003715 fetch 4 ,mem_sleep_counter_all +0x2b2d 003716 iadd temp ,pdata +0x2b2e 003717 store 4 ,mem_sleep_counter_all +0x2b2f 003718 call lpm_save_context +0x2b30 003719 fetch 5 ,mem_lpm_xtalcnt +0x2b31 003720 hstore 4 ,core_lpm_reg +0x2b32 003721 rshift32 pdata ,rega +0x2b33 003722 until null ,lpo_edge +0x2b34 003723 deposit clkn +0x2b35 003724 store 6 ,mem_sleep_clkn +0x2b36 003725 hjam lpmreg_sel_ctrl2 ,core_lpm_wr +0x2b37 003726 until null ,lpo_edge +0x2b38 003727 until null ,lpo_edge +0x2b39 003728 deposit rega +0x2b3a 003729 hstore 1 ,core_lpm_isogate +0x2b3b 003730 hjam lpmreg_sel_ctrl2 ,core_lpm_wr +: 003731 lpm_enter_sleep: +0x2b3c 003732 until null ,lpo_edge +0x2b3d 003733 until null ,lpo_edge +0x2b3e 003734 hstoret 4 ,core_lpm_reg +0x2b3f 003735 hjam lpmreg_sel_counter ,core_lpm_wr +0x2b40 003736 until null ,never +: 003741 lpm_recover_clk: +0x2b41 003742 bpatch patch14_6 ,mem_patch14 +0x2b42 003743 setarg 0 +0x2b43 003744 copy auxcnt ,null +0x2b44 003745 branch lpm_recover_timeout ,zero +0x2b45 003746 hfetch 1 ,core_lpm_xtalcnt +0x2b46 003747 hfetcht 1 ,core_lpm_buckcnt +0x2b47 003748 isub temp ,null +0x2b48 003749 branch lpm_recover_xtal ,positive +0x2b49 003750 deposit temp +: 003751 lpm_recover_xtal: +0x2b4a 003752 isub auxcnt ,pdata +0x2b4b 003753 increase 1 ,pdata +: 003754 lpm_recover_timeout: +0x2b4c 003755 increase 8 ,pdata +0x2b4d 003756 until null ,lpo_edge +0x2b4e 003757 iadd lpo_time ,pdata +0x2b4f 003758 fetcht 4 ,mem_sleep_counter +0x2b50 003759 iadd temp ,pdata +0x2b51 003760 fetcht 3 ,mem_clks_per_lpo +0x2b52 003761 imul32 temp ,pdata +0x2b53 003762 rshift8 pdata ,pdata +0x2b54 003763 rshift4 pdata ,pdata +0x2b55 003764 increase param_lpm_fix ,pdata +0x2b56 003765 arg 3750 ,temp +0x2b57 003766 idiv temp +0x2b58 003767 call wait_div_end +0x2b59 003768 quotient pdata +0x2b5a 003769 lshift16 pdata ,pdata +0x2b5b 003770 remainder temp +0x2b5c 003771 ior temp ,pdata +0x2b5d 003772 fetcht 6 ,mem_sleep_clkn +0x2b5e 003773 call clk_add +0x2b5f 003774 copy temp ,clkn +0x2b60 003775 fetch 6 ,mem_context + coffset_clk_offset +0x2b61 003776 call calc_clke2 +0x2b62 003777 deposit clke +0x2b63 003778 store 6 ,mem_pdatatemp +0x2b64 003779 deposit auxcnt +0x2b65 003780 istore 1 ,contw +0x2b66 003781 hfetch 1 ,core_gpio_in1 +0x2b67 003782 or_into 0xf0 ,pdata +0x2b68 003783 istore 1 ,contw +0x2b69 003784 rtn +: 003786 lpm_dispatch: +0x2b6a 003787 bpatch patch14_7 ,mem_patch14 +0x2b6b 003788 call lpo_calibration +0x2b6c 003789 fetch 3 ,mem_clks_per_lpo +0x2b6d 003790 rtn blank +0x2b6e 003791 fetch 1 ,mem_lpm_mode +0x2b6f 003792 rtn blank +0x2b70 003793 fetch 1 ,mem_ssp_enable +0x2b71 003794 branch lpm_dispatch_next ,blank +0x2b72 003795 fetch 1 ,mem_sp_local_key_invalid +0x2b73 003796 rtn blank +: 003797 lpm_dispatch_next: +0x2b74 003798 fetch 1 ,mem_le_sc_calc +0x2b75 003799 nrtn blank +0x2b76 003800 call lpm_check_wake_lock +0x2b77 003801 nrtn blank +0x2b78 003802 fetch 1 ,mem_context +0x2b79 003803 compare 3 ,pdata ,0x7 +0x2b7a 003804 nbranch lpm_dispatch_unconn ,true +0x2b7b 003805 fetch 2 ,mem_context + coffset_tsniff +0x2b7c 003806 rtn blank +0x2b7d 003807 rtn wake +0x2b7e 003808 bpatch patch15_0 ,mem_patch15 +0x2b7f 003809 fetcht 1 ,mem_lpm_current_mult +0x2b80 003810 fetch 2 ,mem_context + coffset_tsniff +0x2b81 003811 imul32 temp ,pdata +0x2b82 003812 rshift4 temp ,temp +0x2b83 003813 rshift2 temp ,temp +0x2b84 003814 isub temp ,pdata +0x2b85 003815 fetcht 4 ,mem_context + coffset_sniff_anchor +0x2b86 003816 iadd temp ,pdata +0x2b87 003817 fetcht 1 ,mem_lpm_overhead +0x2b88 003818 isub temp ,pdata +0x2b89 003819 lshift16 pdata ,alarm +0x2b8a 003820 bpatch patch15_1 ,mem_patch15 +0x2b8b 003821 fetch 2 ,mem_context + coffset_rx_window +0x2b8c 003822 rshift pdata ,pdata +0x2b8d 003823 call clk2bt +0x2b8e 003824 deposit alarm +0x2b8f 003825 call clk_diff +0x2b90 003826 copy clke ,temp +0x2b91 003827 call clk_diff_rt +0x2b92 003828 rtn user +: 003829 lpm_dispatch_sleep: +0x2b93 003830 call clk2lpo +: 003831 lpm_dispatch_lpo: +0x2b94 003832 bpatch patch15_2 ,mem_patch15 +0x2b95 003833 fetch 1 ,mem_lpm_xtalcnt +0x2b96 003834 isub temp ,null +0x2b97 003835 branch lpm_clear_counter ,positive +0x2b98 003836 storet 4 ,mem_sleep_counter +0x2b99 003837 call app_will_enter_lpm +0x2b9a 003838 call l2cap_lpm_save_txbuf +0x2b9b 003839 fetcht 4 ,mem_sleep_counter +0x2b9c 003840 branch lpm_sleep +: 003842 lpm_dispatch_unconn: +0x2b9d 003843 bpatch patch15_3 ,mem_patch15 +0x2b9e 003844 fetch 1 ,mem_context +0x2b9f 003845 rtnbit1 state_inconn +0x2ba0 003846 rtnbit1 state_inpage +0x2ba1 003847 fetch 1 ,mem_ssp_enable +0x2ba2 003848 branch lpm_unconn_nossp ,blank +0x2ba3 003849 fetch 1 ,mem_sp_local_key_invalid +0x2ba4 003850 rtn blank +: 003851 lpm_unconn_nossp: +0x2ba5 003852 bpatch patch15_4 ,mem_patch15 +0x2ba6 003853 fetch 1 ,mem_le_adv_enable +0x2ba7 003854 nbranch lpm_unconn_cont ,blank +0x2ba8 003855 fetch 1 ,mem_scan_mode +0x2ba9 003856 rtn blank +: 003857 lpm_unconn_cont: +0x2baa 003858 fetch 2 ,mem_lpm_interval +0x2bab 003859 rtn blank +: 003860 lpm_sleep_btclk: +0x2bac 003861 fetcht 1 ,mem_lpm_overhead +0x2bad 003862 isub temp ,pdata +0x2bae 003863 arg 7500 ,temp +0x2baf 003864 imul32 temp ,pdata +0x2bb0 003865 branch lpm_dispatch_sleep +: 003867 lpm_set_mult: +0x2bb1 003868 bpatch patch15_5 ,mem_patch15 +0x2bb2 003869 disable wake +0x2bb3 003870 fetch 1 ,mem_state +0x2bb4 003871 rtnbit0 state_insniff +0x2bb5 003872 nbranch lpm_not_match ,match +0x2bb6 003873 call lpm_match +0x2bb7 003874 fetch 2 ,mem_rx_window_sniff +0x2bb8 003875 store 2 ,mem_rx_window +0x2bb9 003876 fetch 1 ,mem_arq +0x2bba 003877 bbit1 wack ,lpm_mult_short +0x2bbb 003878 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bbc 003879 call l2cap_malloc_is_fifo_empty +0x2bbd 003880 nbranch lpm_mult_short ,blank +0x2bbe 003881 fetch 1 ,mem_classic_bt_flag +0x2bbf 003882 bbit1 short_mult_flag ,lpm_mult_short +: 003883 lpm_mult_wait_timeout: +0x2bc0 003884 jam 0 ,mem_lpm_current_mult +0x2bc1 003885 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bc2 003886 fetch 1 ,mem_lpm_mult_cnt +0x2bc3 003887 branch lpm_mult_long ,blank +0x2bc4 003888 increase -1 ,pdata +0x2bc5 003889 store 1 ,mem_lpm_mult_cnt +0x2bc6 003890 rtn +: 003893 classic_bt_set_mult_short_flag: +0x2bc7 003894 arg short_mult_flag ,queue +0x2bc8 003895 branch classic_bluetooth_set_flag +: 003897 classic_bt_clr_mult_short_flag: +0x2bc9 003898 arg short_mult_flag ,queue +0x2bca 003899 branch classic_bluetooth_clr_flag +: 003903 lpm_match: +0x2bcb 003904 jam 0 ,mem_sniff_unint_lost +0x2bcc 003905 fetch 3 ,mem_sniff_rcv +0x2bcd 003906 increase 1 ,pdata +0x2bce 003907 store 3 ,mem_sniff_rcv +0x2bcf 003908 rtn +: 003910 lpm_not_match: +0x2bd0 003911 bpatch patch15_6 ,mem_patch15 +0x2bd1 003912 fetcht 2 ,mem_rx_window_sniff +0x2bd2 003913 rshift temp ,temp +0x2bd3 003914 fetch 2 ,mem_rx_window +0x2bd4 003915 iadd temp ,pdata +0x2bd5 003916 store 2 ,mem_rx_window +: 003917 lpm_lost: +0x2bd6 003918 jam 0 ,mem_lpm_current_mult +0x2bd7 003919 fetch 3 ,mem_sniff_lost +0x2bd8 003920 increase 1 ,pdata +0x2bd9 003921 store 3 ,mem_sniff_lost +0x2bda 003922 fetch 1 ,mem_sniff_unint_lost +0x2bdb 003923 increase 1 ,pdata +0x2bdc 003924 store 1 ,mem_sniff_unint_lost +0x2bdd 003925 rtn +: 003927 lpm_mult_short: +0x2bde 003928 jam 0 ,mem_lpm_current_mult +0x2bdf 003929 fetch 1 ,mem_lpm_mult_timeout +0x2be0 003930 store 1 ,mem_lpm_mult_cnt +0x2be1 003931 rtn +: 003933 lpm_mult_long: +0x2be2 003934 fetcht 1 ,mem_lpm_mult +0x2be3 003935 storet 1 ,mem_lpm_current_mult +0x2be4 003936 rtn +: 003938 lpm_cal_xtal_startup: +0x2be5 003939 bpatch patch15_7 ,mem_patch15 +0x2be6 003940 fetch 1 ,mem_lpm_xtalcnt +0x2be7 003941 nrtn blank +0x2be8 003942 hjam clksel_rc ,core_clksel +0x2be9 003943 setarg 0xf0c +0x2bea 003944 call lpm_write_config +0x2beb 003945 setarg 200000 +0x2bec 003946 call sleep +0x2bed 003947 until null ,lpo_edge +0x2bee 003948 copy lpo_time ,alarm +0x2bef 003949 call xtal_fast_wake +0x2bf0 003950 hjam clksel_xtal ,core_clksel +0x2bf1 003951 nop 10 +0x2bf2 003952 until null ,lpo_edge +0x2bf3 003953 deposit lpo_time +0x2bf4 003954 isub alarm ,pdata +0x2bf5 003955 increase 0x30 ,pdata +0x2bf6 003956 arg 0xff ,temp +0x2bf7 003957 call ceiling +0x2bf8 003958 store 1 ,mem_lpm_xtalcnt +0x2bf9 003959 nop 30000 +0x2bfa 003960 nop 30000 +0x2bfb 003961 nop 30000 +0x2bfc 003962 rtn +: 003964 lpm_cal_xtal_startup_by_snooze: +0x2bfd 003965 fetch 1 ,mem_lpm_xtalcnt +0x2bfe 003966 nrtn blank +0x2bff 003967 hjam 0xff ,core_xtal_stable_time +0x2c00 003968 hjam clksel_rc ,core_clksel +0x2c01 003969 call xtal_fast_wake +0x2c02 003970 setarg 1000 +0x2c03 003971 iadd lpo_time ,alarm +0x2c04 003972 snooze +0x2c05 003973 deposit lpo_time +0x2c06 003974 nop 12000 +0x2c07 003975 nop 12000 +0x2c08 003976 nop 12000 +0x2c09 003977 nop 12000 +0x2c0a 003978 nop 12000 +0x2c0b 003979 nop 12000 +0x2c0c 003980 nop 12000 +0x2c0d 003981 nop 12000 +0x2c0e 003982 nop 12000 +0x2c0f 003983 isub alarm ,pdata +0x2c10 003984 add pdata ,0x30 ,pdata +0x2c11 003985 arg 0xff ,temp +0x2c12 003986 call ceiling +0x2c13 003987 store 1 ,mem_lpm_xtalcnt +0x2c14 003988 nop 30000 +0x2c15 003989 nop 30000 +0x2c16 003990 nop 30000 +0x2c17 003991 rtn +: 003996 lpm_write_config: +0x2c18 003997 arg 0xfff ,contw +0x2c19 003998 iand contw ,contw +0x2c1a 003999 fetch 1 ,mem_lpm_config +0x2c1b 004000 and_into 0xf0 ,pdata +0x2c1c 004001 lshift8 pdata ,pdata +0x2c1d 004002 ior contw ,pdata +0x2c1e 004003 hstore 2 ,core_lpm_reg +0x2c1f 004004 ifetch 2 ,contr +0x2c20 004005 istore 2 ,contw +: 004007 lpm_write_ctrl: +0x2c21 004008 setarg lpmreg_sel_ctrl +0x2c22 004009 branch lpm_write +: 004011 lpm_write_ctrl2: +0x2c23 004012 setarg lpmreg_sel_ctrl2 +: 004013 lpm_write: +0x2c24 004014 until null ,lpo_edge +0x2c25 004015 hstore 1 ,core_lpm_wr +0x2c26 004016 until null ,lpo_edge +0x2c27 004017 until null ,lpo_edge +0x2c28 004018 rtn +: 004021 lpm_write_gpio_wakeup: +0x2c29 004022 bpatch patch16_0 ,mem_patch16 +0x2c2a 004023 fetch 4 ,mem_gpio_wakeup_low +0x2c2b 004024 hstore 4 ,core_lpm_reg +0x2c2c 004025 setarg lpmreg_sel_gpiolow +0x2c2d 004026 call lpm_write +0x2c2e 004027 fetch 4 ,mem_gpio_wakeup_high +0x2c2f 004028 hstore 4 ,core_lpm_reg +0x2c30 004029 setarg lpmreg_sel_gpiohigh +0x2c31 004030 branch lpm_write +: 004032 lpm_get_wake_lock: +0x2c32 004033 fetch 2 ,mem_lpm_wake_lock +0x2c33 004034 qset1 pdata +0x2c34 004035 store 2 ,mem_lpm_wake_lock +0x2c35 004036 rtn +: 004038 lpm_put_wake_lock: +0x2c36 004039 fetch 2 ,mem_lpm_wake_lock +0x2c37 004040 qset0 pdata +0x2c38 004041 store 2 ,mem_lpm_wake_lock +0x2c39 004042 rtn +: 004046 lpm_check_wake_lock: +0x2c3a 004047 bpatch patch16_1 ,mem_patch16 +0x2c3b 004048 call app_check_wake_lock +0x2c3c 004049 fetch 2 ,mem_lpm_wake_lock +0x2c3d 004050 copy pdata ,rega +0x2c3e 004051 fetch 1 ,mem_state_map +0x2c3f 004052 isolate1 smap_rxlmp ,pdata +0x2c40 004053 setflag true ,wake_lock_lmp_rx ,rega +0x2c41 004054 fetch 1 ,mem_lmo_opcode1 +0x2c42 004055 fetcht 1 ,mem_lmo_opcode2 +0x2c43 004056 iadd temp ,pdata +0x2c44 004057 fetcht 1 ,mem_lmp_to_send +0x2c45 004058 iadd temp ,pdata +0x2c46 004059 nsetflag blank ,wake_lock_lmp_tx ,rega +0x2c47 004060 fetch 1 ,mem_le_tx_buff_used +0x2c48 004061 nsetflag blank ,wake_lock_ble_tx ,rega +0x2c49 004062 fetch 2 ,mem_l2cap_rxbuff1_len +0x2c4a 004063 fetcht 2 ,mem_l2cap_rxbuff2_len +0x2c4b 004064 iadd temp ,pdata +0x2c4c 004065 nsetflag blank ,wake_lock_l2cap_rx ,rega +0x2c4d 004066 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +0x2c4e 004067 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +0x2c4f 004068 fetch util_fifo_len ,mem_ipc_fifo_c512bt +0x2c50 004069 nsetflag blank ,wake_lock_ipc_c512bt ,rega +0x2c51 004070 fetch 1 ,mem_hci_cmd +0x2c52 004071 nsetflag blank ,wake_lock_cmd ,rega +0x2c53 004072 fetch 1 ,mem_device_option +0x2c54 004073 compare dvc_op_module ,pdata ,0xff +0x2c55 004074 call lpm_uart_wake_lock ,true +0x2c56 004075 setarg -8 +0x2c57 004076 iand rega ,rega +0x2c58 004077 copy rega ,pdata +0x2c59 004078 store 2 ,mem_lpm_wake_lock +0x2c5a 004079 rtn +: 004081 lpm_uart_wake_lock: +0x2c5b 004082 hfetch 2 ,core_uart_rxitems +0x2c5c 004083 nsetflag blank ,wake_lock_uart_rx ,rega +0x2c5d 004084 hfetch 2 ,core_uart_txitems +0x2c5e 004085 nsetflag blank ,wake_lock_uart_tx ,rega +0x2c5f 004086 rtn +: 004088 lpm_shut_down: +0x2c60 004089 hfetch 4 ,core_lpm_ctrl +0x2c61 004090 set0 27 ,pdata +0x2c62 004091 hstore 4 ,core_lpm_reg +0x2c63 004092 call lpm_write_ctrl +0x2c64 004093 branch assert +: 004095 lpm_disable_exen_output: +0x2c65 004096 hfetch 4 ,core_lpm_xtalcnt +0x2c66 004097 set0 20 ,pdata +0x2c67 004098 hstore 4 ,core_lpm_reg +0x2c68 004099 branch lpm_write_ctrl2 +: 004101 check_bt_disabled: +0x2c69 004102 fetch 2 ,mem_chip_functions +0x2c6a 004103 bbit1 bt_disabled ,assert +0x2c6b 004104 rtn +: 004105 check_ble_disabled: +0x2c6c 004106 fetch 2 ,mem_chip_functions +0x2c6d 004107 bbit1 ble_disabled ,assert +0x2c6e 004108 rtn +: 004109 check_module_disabled: +0x2c6f 004110 fetch 2 ,mem_chip_functions +0x2c70 004111 bbit1 module_disable ,assert +0x2c71 004112 rtn +: 004173 g24_dispatch: +0x2c72 004174 bpatch patch16_2 ,mem_patch16 +0x2c73 004175 call g24_head_ptr2regc +0x2c74 004176 add regc ,offset_24g_mode ,regb +0x2c75 004177 ifetch 1 ,regb +0x2c76 004179 rtneq disable_24g +0x2c77 004180 beq tx_24g ,g24_transmit_process +0x2c78 004181 beq rx_24g ,g24_receive_process +0x2c79 004182 rtn +: 004184 g24_head_ptr2regc: +0x2c7a 004185 fetcht 2 ,mem_24g_head_ptr +0x2c7b 004186 copy temp ,regc +0x2c7c 004187 rtn +: 004189 g24_receive_process_init: +0x2c7d 004190 call g24_receive_init +0x2c7e 004191 branch g24_mode_switch_init +: 004193 g24_receive_process: +0x2c7f 004194 call g24_mode_switch +0x2c80 004195 call g24_dongle_work_mode_auto +0x2c81 004196 call g24_dongle_bind_mode_auto +0x2c82 004197 branch g24_dongle_search_mode_auto +: 004200 g24_pair_init: +0x2c83 004203 call g24_set0_mem_pid +0x2c84 004204 setarg g24_pair_ch +0x2c85 004205 call g24_store_mem_ch +0x2c86 004206 call g24_store_mem_pair_txpower +0x2c87 004209 add regc ,offset_24g_paring_addr ,rega +0x2c88 004210 ifetch 4 ,rega +0x2c89 004211 branch g24_store_mem_addr +: 004213 g24_ch: +0x2c8a 004214 call g24_head_ptr2regc +0x2c8b 004215 add regc ,offset_24g_current_ch_number ,regb +0x2c8c 004216 ifetcht 1 ,regb +0x2c8d 004218 call g24_ch_temp_incre_size4 +0x2c8e 004219 add regc ,offset_24g_current_ch_number ,contw +0x2c8f 004221 branch g24_contw_istoret_1byte +: 004223 g24_ch_temp_incre_size4: +0x2c90 004224 call g24_ch_calc +0x2c91 004225 increase 1 ,temp +0x2c92 004226 and_into 3 ,temp +0x2c93 004227 rtn +: 004229 g24_ch_calc: +0x2c94 004230 add regc ,offset_24g_addr ,regb +0x2c95 004231 ifetch 1 ,regb +0x2c96 004233 and_into 0x03 ,pdata +0x2c97 004234 mul32 pdata ,4 ,rega +0x2c98 004235 add regc ,offset_24g_ch_map1 ,pdata +0x2c99 004237 iadd rega ,pdata +0x2c9a 004238 iadd temp ,contr +0x2c9b 004239 ifetch 1 ,contr +0x2c9c 004241 branch g24_store_mem_ch +: 004243 g24_set_device_addr: +0x2c9d 004244 call g24_store_mem_tx_power_temp +0x2c9e 004245 call otp_enable_chgpump +0x2c9f 004246 setarg 0x7e2 +0x2ca0 004247 arg mem_temp ,rega +0x2ca1 004248 arg 4 ,temp +0x2ca2 004249 call otpd_read_data +0x2ca3 004250 call otp_disable_chgpump +0x2ca4 004251 fetch 4 ,mem_temp +0x2ca5 004252 call g24_store_mem_device_addr +0x2ca6 004254 nrtn blank +0x2ca7 004255 fetch 4 ,mem_lap +0x2ca8 004257 branch g24_store_mem_device_addr +: 004259 g24_transmit_rf_sta_init: +0x2ca9 004260 call g24_set1_mem_rf_last_sta +0x2caa 004262 setarg 0 +0x2cab 004263 call g24_store_mem_sync_cnt +: 004265 g24_transmit_rf_ctrl_clear: +0x2cac 004266 call g24_fetch_mem_data_type +0x2cad 004268 and_into bits_data ,pdata +0x2cae 004270 branch g24_store_mem_data_type +: 004272 g24_hop_ch_enable: +0x2caf 004273 call g24_fetch_mem_data_type +0x2cb0 004275 set1 bit_hop ,pdata +0x2cb1 004276 call g24_store_mem_data_type +0x2cb2 004279 branch g24_store_mem_txpayload +: 004281 g24_transmit_hop_pac_fail: +0x2cb3 004282 call g24_fetch_mem_rf_work_stage +0x2cb4 004284 beq 1 ,g24_transmit_hop_pac_fail_wo_hop +0x2cb5 004285 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 +0x2cb6 004286 rtn +: 004288 g24_transmit_hop_pac_fail_wo_hop: +0x2cb7 004289 call g24_set2_mem_sync_cnt +: 004291 g24_transmit_hop_pac_fail_stage1: +0x2cb8 004292 add regc ,offset_24g_hop_pac_retry ,contw +0x2cb9 004293 call g24_mem_set0 +0x2cba 004295 call g24_store_mem_rf_last_sta +0x2cbb 004297 branch g24_transmit_rf_ctrl_clear +: 004299 g24_transmit_hop_pac_fail_hop_stage2: +0x2cbc 004300 call g24_set0_mem_rf_hop_ch +0x2cbd 004302 branch g24_transmit_hop_pac_fail_stage1 +: 004304 g24_transmit_pac_fail_hop_stage3: +0x2cbe 004305 add regc ,offset_24g_txfail_cnt ,rega +0x2cbf 004306 ifetch 1 ,rega +0x2cc0 004308 increase 1 ,pdata +0x2cc1 004309 add regc ,offset_24g_txfail_cnt ,contw +0x2cc2 004310 istore 1 ,contw +0x2cc3 004312 beq 0x20 ,g24_tx_attempt_fail +0x2cc4 004313 call g24_fetch_mem_rf_hop_ch +0x2cc5 004315 beq 1 ,g24_rf_hop_fastly +0x2cc6 004316 setarg 1 +0x2cc7 004317 call g24_store_mem_rf_hop_ch +: 004319 g24_rf_hop_attemp_again: +0x2cc8 004320 call g24_fetch_mem_rf_hop_ch +0x2cc9 004322 bne 1 ,g24_transmit_rf_ctrl_clear +: 004323 g24_rf_hop_fastly: +0x2cca 004324 add regc ,offset_24g_hop_fastly_cnt ,rega +0x2ccb 004325 ifetch 1 ,rega +0x2ccc 004327 increase 1 ,pdata +0x2ccd 004328 call g24_store_mem_hop_fastly_cnt +0x2cce 004330 beq 4 ,g24_rf_hop_fastly_exit +0x2ccf 004331 call g24_ch +0x2cd0 004332 call g24_set2_mem_max_retry +0x2cd1 004334 branch g24_transmit_packet +: 004336 g24_rf_hop_fastly_exit: +0x2cd2 004337 call g24_set0_mem_hop_fastly_cnt +0x2cd3 004339 branch g24_transmit_rf_ctrl_clear +: 004341 g24_set0_mem_hop_fastly_cnt: +0x2cd4 004342 setarg 0 +: 004343 g24_store_mem_hop_fastly_cnt: +0x2cd5 004344 add regc ,offset_24g_hop_fastly_cnt ,contw +0x2cd6 004345 branch g24_contw_istore_1byte +: 004347 g24_transmit_hop_pac_succ_wo_hop: +0x2cd7 004348 call g24_set2_mem_sync_cnt +: 004350 g24_transmit_hop_pac_succ: +0x2cd8 004351 call g24_set0_mem_rf_hop_ch +0x2cd9 004353 call g24_set1_mem_rf_last_sta +0x2cda 004355 branch g24_transmit_rf_ctrl_clear +: 004357 g24_transmit_succ_rf_config: +0x2cdb 004358 call g24_fetch_mem_rf_work_stage +0x2cdc 004360 beq 3 ,g24_transmit_hop_pac_succ +0x2cdd 004361 call g24_fetch_mem_data_type +0x2cde 004363 isolate0 bit_hop ,pdata +0x2cdf 004364 branch g24_transmit_rf_sta_init ,true +0x2ce0 004365 call g24_fetch_mem_rf_work_stage +0x2ce1 004367 beq 1 ,g24_transmit_hop_pac_succ_wo_hop +0x2ce2 004368 beq 2 ,g24_transmit_hop_pac_succ +0x2ce3 004369 rtn +: 004371 g24_rf_sta_check: +0x2ce4 004372 call g24_fetch_mem_pairing_sm +0x2ce5 004374 rtnne state_24g_pairing_success +0x2ce6 004375 call g24_rf_laststa_synccnt_check +0x2ce7 004376 ncall g24_rf_sync_cnt_check ,user2 +0x2ce8 004377 rtn +: 004379 g24_rf_laststa_synccnt_check: +0x2ce9 004380 disable user2 +0x2cea 004381 add regc ,offset_24g_rf_last_sta ,rega +0x2ceb 004382 ifetch 1 ,rega +0x2cec 004384 rtnne 1 +0x2ced 004385 add regc ,offset_24g_sync_cnt ,rega +0x2cee 004386 ifetch 1 ,rega +0x2cef 004388 rtnne 0 +0x2cf0 004389 setarg 1 +0x2cf1 004390 call g24_store_mem_rf_work_stage +0x2cf2 004392 call g24_set4_mem_max_retry +0x2cf3 004394 branch enable_user2 +: 004396 g24_rf_sync_cnt_check: +0x2cf4 004397 add regc ,offset_24g_sync_cnt ,rega +0x2cf5 004398 ifetch 1 ,rega +0x2cf6 004400 branch g24_rf_hop_attemp ,blank +0x2cf7 004401 increase -1 ,pdata +0x2cf8 004402 call g24_store_mem_sync_cnt +0x2cf9 004404 setarg 2 +0x2cfa 004405 call g24_store_mem_rf_work_stage +0x2cfb 004407 call g24_ch +0x2cfc 004409 branch g24_set4_mem_max_retry +: 004411 g24_store_mem_rf_work_stage: +0x2cfd 004412 add regc ,offset_24g_rf_work_stage ,contw +0x2cfe 004413 branch g24_contw_istore_1byte +: 004416 g24_rf_hop_attemp: +0x2cff 004417 setarg 3 +0x2d00 004418 call g24_store_mem_rf_work_stage +0x2d01 004420 call g24_fetch_mem_rf_hop_ch +0x2d02 004422 nbranch g24_rf_hop_attemp_again ,blank +0x2d03 004423 call g24_ch +: 004425 g24_set2_mem_max_retry: +0x2d04 004426 setarg 2 +0x2d05 004427 branch g24_store_mem_max_retry +: 004429 g24_transmit_process: +0x2d06 004430 rtnmark0 mark_24g +0x2d07 004431 set1 mark_24g_conext ,mark +0x2d08 004432 bpatch patch16_3 ,mem_patch16 +0x2d09 004433 add regc ,offset_24g_tx_without_int ,rega +0x2d0a 004434 ifetch 1 ,rega +0x2d0b 004436 beq 1 ,g24_transmit_without_int +0x2d0c 004437 call g24_timer_check +0x2d0d 004438 nbranch g24_transmit_exit ,user +0x2d0e 004439 call g24_interval_calibrate +: 004440 g24_transmit_without_int: +0x2d0f 004441 add regc ,offset_24g_tx_without_int ,contw +0x2d10 004442 call g24_mem_set0 +0x2d11 004444 call g24_txdata_prep +0x2d12 004445 nbranch g24_enter_lpm ,user +0x2d13 004446 call g24_rf_sta_check +: 004447 g24_transmit_start: +0x2d14 004448 call g24_transmit_packet +0x2d15 004449 call g24_power_ctrl +: 004450 g24_transmit_exit: +0x2d16 004451 set0 mark_24g_conext ,mark +0x2d17 004452 rtn +: 004454 g24_timer_timeout: +0x2d18 004455 rtn zero +0x2d19 004456 set1 28 ,pdata +0x2d1a 004457 rtn +: 004459 g24_interval_calibrate: +0x2d1b 004460 add regc ,offset_24g_pac_index ,rega +0x2d1c 004461 ifetch 1 ,rega +0x2d1d 004463 increase 1 ,pdata +0x2d1e 004464 add regc ,offset_24g_pac_index ,contw +0x2d1f 004465 istore 1 ,contw +0x2d20 004467 beq 4 ,g24_interval_max +0x2d21 004468 beq 5 ,g24_interval_min +0x2d22 004469 rtn +: 004470 g24_interval_max: +0x2d23 004471 add regc ,offset_24g_interval_max ,rega +0x2d24 004472 ifetch 1 ,rega +: 004474 g24_interval_update: +0x2d25 004476 add regc ,offset_24g_interval ,contw +0x2d26 004477 branch g24_contw_istore_1byte +: 004479 g24_interval_min: +0x2d27 004480 add regc ,offset_24g_pac_index ,contw +0x2d28 004481 call g24_mem_set0 +0x2d29 004483 add regc ,offset_24g_interval_min ,rega +0x2d2a 004484 ifetch 1 ,rega +0x2d2b 004486 branch g24_interval_update +: 004488 g24_txdata_prep: +0x2d2c 004489 call g24_fetch_mem_pairing_sm +0x2d2d 004491 bne state_24g_pairing_success ,g24_pairing_sm +0x2d2e 004492 bpatch patch16_4 ,mem_patch16 +0x2d2f 004493 call g24_package_data +0x2d30 004494 nbranch g24_txdata_last_pac ,user +0x2d31 004495 call g24_transmit_prep +0x2d32 004496 call g24_power_ctrl_pac_incrs +: 004497 g24_txdata_enable_tx: +0x2d33 004499 setarg ensure_on_24g +: 004500 g24_store_mem_ensure: +0x2d34 004501 add regc ,offset_24g_ensure ,contw +0x2d35 004502 branch g24_contw_istore_1byte +: 004504 g24_txdata_last_pac: +0x2d36 004505 add regc ,offset_24g_ensure ,rega +0x2d37 004506 ifetch 1 ,rega +0x2d38 004508 beq ensure_on_24g ,enable_user +0x2d39 004509 rtn +: 004511 g24_package_data: +0x2d3a 004513 add regc ,offset_24g_cb_data ,temp +0x2d3b 004514 ifetch 2 ,temp +0x2d3c 004516 call callback_func +0x2d3d 004517 nrtn user +0x2d3e 004518 copy rega ,pdata +0x2d3f 004519 store 1 ,mem_rega +0x2d40 004520 add regc ,offset_24g_abort_pac ,contw +0x2d41 004521 call g24_mem_set0 +0x2d42 004523 call g24_transmit_rf_ctrl_clear +0x2d43 004524 store 1 ,mem_24g_common_temp +0x2d44 004525 fetch 1 ,mem_rega +0x2d45 004526 copy pdata ,rega +0x2d46 004527 add rega ,1 ,temp +0x2d47 004528 arg mem_24g_common_temp + 1 ,contw +0x2d48 004529 copy rega ,loopcnt +0x2d49 004530 copy regb ,contr +0x2d4a 004531 call memcpy +0x2d4b 004532 arg mem_24g_common_temp ,rega +: 004533 g24_put_data_in_buff: +0x2d4c 004534 rtnmark0 mark_24g_conext +0x2d4d 004535 add regc ,offset_24g_datalen ,contw +0x2d4e 004536 istoret 1 ,contw +0x2d4f 004538 copy temp ,loopcnt +0x2d50 004539 add regc ,offset_24g_txbuf ,contw +0x2d51 004541 copy rega ,contr +0x2d52 004542 branch memcpy +: 004544 g24_transmit_prep: +0x2d53 004546 add regc ,offset_24g_datalen ,rega +0x2d54 004547 ifetch 1 ,rega +0x2d55 004549 increase 2 ,pdata +0x2d56 004550 add regc ,offset_24g_txlen ,contw +0x2d57 004551 istore 1 ,contw +0x2d58 004554 call g24_fetch_mem_data_type +0x2d59 004556 call g24_store_mem_txpayload +0x2d5a 004559 add regc ,offset_24g_datalen ,rega +0x2d5b 004560 ifetch 1 ,rega +0x2d5c 004562 lshift3 pdata ,pdata +0x2d5d 004563 add regc ,offset_24g_pid ,rega +0x2d5e 004564 ifetcht 1 ,rega +0x2d5f 004566 and temp ,0x03 ,temp +0x2d60 004567 lshift temp ,temp +0x2d61 004568 ior temp ,pdata +0x2d62 004569 add regc ,offset_24g_no_ack ,rega +0x2d63 004570 ifetcht 1 ,rega +0x2d64 004572 iadd temp ,pdata +0x2d65 004573 istore 1 ,contw +0x2d66 004575 add regc ,offset_24g_datalen ,rega +0x2d67 004576 ifetch 1 ,rega +0x2d68 004578 iforce loopcnt +0x2d69 004579 add regc ,offset_24g_txbuf ,contr +0x2d6a 004581 branch memcpy +: 004583 g24_send_abort_packet: +0x2d6b 004584 call g24_set1_mem_abort_pac +0x2d6c 004586 call g24_set0_mem_rf_hop_ch +0x2d6d 004588 call g24_power_ctrl_reinit +0x2d6e 004589 call g24_transmit_rf_ctrl_clear +0x2d6f 004590 store 1 ,mem_24g_common_temp +0x2d70 004591 call g24_put_data_in_buff_pre +0x2d71 004592 call g24_fetch_mem_data_type +0x2d72 004594 set1 bit_abort ,pdata +0x2d73 004595 call g24_store_mem_data_type +0x2d74 004597 call g24_transmit_prep +0x2d75 004598 call g24_txdata_enable_tx +0x2d76 004599 branch g24_transmit_start +: 004601 g24_put_data_in_buff_pre: +0x2d77 004602 store 1 ,mem_24g_common_temp + 1 +0x2d78 004603 call g24_fetch_mem_device_addr +0x2d79 004605 store 4 ,mem_24g_common_temp + 2 +0x2d7a 004606 arg 6 ,temp +0x2d7b 004607 arg mem_24g_common_temp ,rega +0x2d7c 004608 branch g24_put_data_in_buff +: 004610 g24_enter_lpm: +0x2d7d 004611 add regc ,offset_24g_abort_pac ,rega +0x2d7e 004612 ifetch 1 ,rega +0x2d7f 004614 branch g24_send_abort_packet ,blank +: 004615 g24_enter_lpm_prepare: +0x2d80 004617 add regc ,offset_24g_cb_lpm_prepare ,rega +0x2d81 004618 ifetch 2 ,rega +0x2d82 004620 branch callback_func +: 004622 g24_lpm_long_sleep: +0x2d83 004623 call g24_head_ptr2regc +0x2d84 004625 call lpo_calibration +0x2d85 004626 fetch 3 ,mem_clks_per_lpo +0x2d86 004627 rtn blank +0x2d87 004628 add regc ,offset_24g_cb_lpm_before ,temp +0x2d88 004629 ifetch 2 ,temp +0x2d89 004631 call callback_func +0x2d8a 004632 add regc ,offset_24g_enter_hibernate ,temp +0x2d8b 004633 ifetch 8 ,temp +0x2d8c 004634 call clk2lpo +0x2d8d 004635 storet 4 ,mem_sleep_counter +0x2d8e 004636 branch lpm_sleep +: 004638 g24_transmit_packet: +0x2d8f 004639 call g24_head_ptr2regc +0x2d90 004640 add regc ,offset_24g_retry ,contw +0x2d91 004641 call g24_mem_set0 +: 004643 g24_transmit_loop: +0x2d92 004644 call g24_transmit_receive_ack +0x2d93 004645 nbranch g24_retransmit ,sync +0x2d94 004646 nbranch g24_retransmit ,user3 +0x2d95 004647 call g24_ackpayload_parse +0x2d96 004648 call g24_power_ctrl_ack_incrs +: 004649 g24_transmit_next_packet: +0x2d97 004650 call g24_head_ptr2regc +0x2d98 004651 add regc ,offset_24g_pid ,rega +0x2d99 004652 ifetch 1 ,rega +0x2d9a 004654 increase 1 ,pdata +0x2d9b 004655 call g24_store_mem_pid +0x2d9c 004657 call g24_fetch_mem_pairing_sm +0x2d9d 004659 bne state_24g_pairing_success ,g24_paring_mode +0x2d9e 004660 call g24_transmit_succ_rf_config +: 004661 g24_transmit_abandon: +0x2d9f 004662 setarg 0 +0x2da0 004663 add regc ,offset_24g_txfail_cnt ,contw +0x2da1 004664 istore 2 ,contw +0x2da2 004668 setarg ensure_off_24g +0x2da3 004669 branch g24_store_mem_ensure +: 004672 g24_transmit_receive_ack: +0x2da4 004673 disable user3 +0x2da5 004674 call g24_transmit +0x2da6 004675 call g24_head_ptr2regc +0x2da7 004676 add regc ,offset_24g_no_ack ,rega +0x2da8 004677 ifetch 1 ,rega +0x2da9 004679 beq no_ack_24g ,g24_transmit_no_ack +0x2daa 004680 call g24_receive_packet +0x2dab 004681 branch g24_end_of_packet +: 004682 g24_transmit_no_ack: +0x2dac 004683 call g24_end_of_packet +0x2dad 004684 branch g24_transmit_next_packet +: 004687 g24_retransmit: +0x2dae 004688 bpatch patch16_5 ,mem_patch16 +0x2daf 004689 add regc ,offset_24g_get_ack_fail ,rega +0x2db0 004690 ifetch 1 ,rega +0x2db1 004692 increase 1 ,pdata +0x2db2 004693 add regc ,offset_24g_get_ack_fail ,contw +0x2db3 004694 istore 1 ,contw +0x2db4 004696 call g24_fetch_mem_pairing_sm +0x2db5 004698 bne state_24g_pairing_success ,g24_tx_paring_retry +0x2db6 004699 add regc ,offset_24g_retry ,rega +0x2db7 004700 ifetcht 1 ,rega +0x2db8 004702 increase 1 ,temp +0x2db9 004703 add regc ,offset_24g_retry ,contw +0x2dba 004704 istoret 1 ,contw +0x2dbb 004706 add regc ,offset_24g_max_retry ,rega +0x2dbc 004707 ifetch 1 ,rega +0x2dbd 004709 isub temp ,pdata +0x2dbe 004710 nbranch g24_transmit_loop ,blank +0x2dbf 004711 bpatch patch16_6 ,mem_patch16 +0x2dc0 004712 call g24_fetch_mem_rf_work_stage +0x2dc1 004714 beq 3 ,g24_transmit_pac_fail_hop_stage3 +0x2dc2 004715 add regc ,offset_24g_hop_pac_retry ,rega +0x2dc3 004716 ifetch 1 ,rega +0x2dc4 004718 increase 1 ,pdata +0x2dc5 004719 add regc ,offset_24g_hop_pac_retry ,contw +0x2dc6 004720 istore 1 ,contw +0x2dc7 004722 beq 2 ,g24_transmit_hop_pac_fail +0x2dc8 004723 call g24_hop_ch_enable +0x2dc9 004724 setarg 1 +0x2dca 004725 call g24_store_mem_max_retry +0x2dcb 004727 branch g24_transmit_packet +: 004729 g24_tx_paring_retry: +0x2dcc 004730 add regc ,offset_24g_get_ack_fail ,rega +0x2dcd 004731 ifetch 1 ,rega +0x2dce 004733 rtnne 0xff +0x2dcf 004734 add regc ,offset_24g_get_ack_fail ,contw +0x2dd0 004735 call g24_mem_set0 +0x2dd1 004737 branch g24_stop_24g_mode +: 004739 g24_tx_attempt_fail: +0x2dd2 004740 add regc ,offset_24g_txfail_cnt ,contw +0x2dd3 004741 call g24_mem_set0 +: 004743 g24_stop_24g_mode: +0x2dd4 004744 jam bt_evt_24g_attempt_fail ,mem_fifo_temp +0x2dd5 004745 branch ui_ipc_send_event +: 004747 g24_ackpayload_parse: +0x2dd6 004748 call g24_read_len_pid_crc +0x2dd7 004749 add regc ,offset_24g_rxdata_length ,rega +0x2dd8 004750 ifetch 1 ,rega +0x2dd9 004752 rtn blank +0x2dda 004753 iforce loopcnt +0x2ddb 004754 add regc ,offset_24g_rxbuf_add2 ,contr +0x2ddc 004756 add regc ,offset_24g_rxpayload ,contw +0x2ddd 004758 branch memcpy +: 004761 g24_read_len_pid_crc: +0x2dde 004763 call g24_fetch_mem_rxbuf_add1 +0x2ddf 004765 rshift3 pdata ,pdata +0x2de0 004766 add regc ,offset_24g_rxdata_length ,contw +0x2de1 004767 istore 1 ,contw +0x2de2 004770 increase 1 ,pdata +0x2de3 004771 add regc ,offset_24g_rxbuf_add1 ,contr +0x2de4 004773 iadd contr ,contr +0x2de5 004774 ifetch 3 ,contr +0x2de6 004775 add regc ,offset_24g_sta_crc ,contw +0x2de7 004776 istore 3 ,contw +0x2de8 004779 call g24_fetch_mem_rxbuf_add1 +0x2de9 004781 rshift pdata ,pdata +0x2dea 004782 and pdata ,0x03 ,pdata +0x2deb 004783 add regc ,offset_24g_sta_pid ,contw +0x2dec 004784 istore 1 ,contw +0x2ded 004786 rtn +: 004788 g24_prep: +0x2dee 004789 disable enable_crc +0x2def 004790 disable enable_white +0x2df0 004791 setarg 0x555555 +0x2df1 004792 iforce crc24_init +0x2df2 004793 rtn +: 004795 g24_set_freq_tx: +0x2df3 004796 call set_sync_on +0x2df4 004797 add regc ,offset_24g_ch ,rega +0x2df5 004798 ifetcht 1 ,rega +0x2df6 004800 branch set_freq_tx +: 004802 g24_transmit: +0x2df7 004803 call g24_prep +0x2df8 004804 call g24_set_freq_tx +0x2df9 004805 set1 txgfsk ,radio_ctrl +0x2dfa 004806 enable encode_fec0 +0x2dfb 004807 enable is_tx +0x2dfc 004808 disable is_rx +0x2dfd 004809 call le_enable +0x2dfe 004810 call g24_fetch_mem_addr +0x2dff 004812 iforce access +0x2e00 004813 inject mod ,32 +0x2e01 004814 enable enable_crc +0x2e02 004815 add regc ,offset_24g_txlen ,rega +0x2e03 004816 ifetch 1 ,rega +0x2e04 004818 iforce loopcnt +0x2e05 004819 add regc ,offset_24g_txpayload ,contr +: 004821 g24tr_loop: +0x2e06 004822 ifetch 1 ,contr +0x2e07 004823 inject mod ,8 +0x2e08 004824 loop g24tr_loop +0x2e09 004825 enable enable_parity +0x2e0a 004826 inject mod ,24 +0x2e0b 004827 disable enable_parity +0x2e0c 004828 until null ,tx_clear +0x2e0d 004829 bpatch patch16_7 ,mem_patch16 +0x2e0e 004830 nop 100 +0x2e0f 004831 disable encode_fec0 +0x2e10 004832 rtn +: 004834 g24_receive_packet: +0x2e11 004835 disable user3 +0x2e12 004836 force 0 ,radio_ctrl +0x2e13 004837 add regc ,offset_24g_ch ,rega +0x2e14 004838 ifetcht 1 ,rega +0x2e15 004840 call set_freq_rx +0x2e16 004841 call rf_rx_enable +: 004842 g24_receive_rxon: +0x2e17 004843 call g24_prep +0x2e18 004844 enable decode_fec0 +0x2e19 004845 enable is_rx +0x2e1a 004846 disable is_tx +0x2e1b 004847 call le_enable +0x2e1c 004848 call g24_fetch_mem_addr +0x2e1d 004850 iforce access +0x2e1e 004851 enable swfine +0x2e1f 004852 add regc ,offset_24g_rx_window ,rega +0x2e20 004853 ifetch 2 ,rega +0x2e21 004855 iforce stop_watch +0x2e22 004856 correlate null ,timeout +0x2e23 004857 nbranch g24_sync_timeout ,sync +0x2e24 004858 enable enable_crc +0x2e25 004859 parse demod ,bucket ,8 +0x2e26 004860 rshift3 pwindow ,pdata +0x2e27 004861 add regc ,offset_24g_rxbuf ,contw +0x2e28 004862 istore 1 ,contw +0x2e29 004864 add regc ,offset_24g_mode ,rega +0x2e2a 004865 ifetch 1 ,rega +0x2e2b 004867 beq rx_24g ,g24_receive_skip +0x2e2c 004868 bpatch patch17_0 ,mem_patch17 +0x2e2d 004869 add regc ,offset_24g_rxbuf ,rega +0x2e2e 004870 ifetch 1 ,rega +0x2e2f 004872 add regc ,offset_24g_data_type ,rega +0x2e30 004873 ifetcht 1 ,rega +0x2e31 004875 icompare bits_data ,temp +0x2e32 004876 nbranch g24_end_of_packet ,true +: 004877 g24_receive_skip: +0x2e33 004878 parse demod ,bucket ,8 +0x2e34 004879 rshift3 pwindow ,pdata +0x2e35 004880 istore 1 ,contw +0x2e36 004881 rshift3 pdata ,pdata +0x2e37 004882 and pdata ,0x1f ,loopcnt +0x2e38 004883 branch g24rx_nopayload ,zero +: 004884 g24rx_loop: +0x2e39 004885 parse demod ,bucket ,8 +0x2e3a 004886 rshift3 pwindow ,pdata +0x2e3b 004887 istore 1 ,contw +0x2e3c 004888 loop g24rx_loop +: 004889 g24rx_nopayload: +0x2e3d 004890 parse demod ,bucket ,24 +0x2e3e 004891 rshift32 pdata ,pdata +0x2e3f 004892 rshift16 pdata ,pdata +0x2e40 004893 istore 3 ,contw +0x2e41 004894 branch g24_end_of_packet ,crc_failed +0x2e42 004895 enable user3 +0x2e43 004896 disable decode_fec0 +0x2e44 004897 rtn +: 004900 g24_end_of_packet: +0x2e45 004901 disable encode_fec0 +0x2e46 004902 disable decode_fec0 +0x2e47 004903 disable enable_crc +0x2e48 004904 disable enable_white +0x2e49 004905 branch shutdown_radio ,is_rx +0x2e4a 004906 until null ,tx_clear +0x2e4b 004907 nop 100 +0x2e4c 004908 branch shutdown_radio +: 004910 g24_sync_timeout: +0x2e4d 004911 call rssi_noise +0x2e4e 004912 branch g24_end_of_packet +: 004914 rssi_noise: +0x2e4f 004915 call save_rssi +0x2e50 004916 rtn blank +0x2e51 004917 add regc ,offset_rssi_noise_index ,rega +0x2e52 004918 ifetcht 1 ,rega +0x2e53 004920 arg mem_rssi_noise_buffer ,rega +0x2e54 004922 call rssi_noise_store +0x2e55 004923 add regc ,offset_rssi_noise_index ,contw +: 004925 g24_contw_istoret_1byte: +0x2e56 004926 istoret 1 ,contw +0x2e57 004927 rtn +: 004929 rssi_noise_store: +0x2e58 004930 arg rssi_buf_len_noise ,regb +0x2e59 004931 branch rssi_store +: 004949 rssi_store: +0x2e5a 004950 copy rega ,pdata +0x2e5b 004951 iadd temp ,contw +0x2e5c 004952 fetch 1 ,mem_rssi +0x2e5d 004953 istore 1 ,contw +0x2e5e 004954 increase 1 ,temp +0x2e5f 004955 copy regb ,pdata +0x2e60 004956 iand_into temp +0x2e61 004957 rtn +: 004959 rssi_average: +0x2e62 004960 arg 0 ,temp +0x2e63 004961 copy rega ,contr +: 004962 rssi_average_loop: +0x2e64 004963 ifetch 1 ,contr +0x2e65 004964 iadd temp ,temp +0x2e66 004965 loop rssi_average_loop +0x2e67 004966 rshift8 temp ,temp +0x2e68 004967 rtn +: 004969 g24_power_ctrl_init: +0x2e69 004970 call g24_head_ptr2regc +0x2e6a 004971 call g24_power_ctrl_incrs_level1 +0x2e6b 004972 setarg 1 +0x2e6c 004973 call g24_store_mem_power_ctrl_level +: 004975 g24_power_ctrl_reinit: +0x2e6d 004976 setarg 0 +0x2e6e 004977 call g24_store_mem_power_ctrl_pac +0x2e6f 004979 istore 1 ,contw +0x2e70 004981 rtn +: 004983 g24_power_ctrl_pac_incrs: +0x2e71 004984 call g24_fetch_mem_power_ctrl_pac +0x2e72 004986 increase 1 ,pdata +: 004987 g24_store_mem_power_ctrl_pac: +0x2e73 004989 add regc ,offset_power_ctrl_packet_cnt ,contw +0x2e74 004990 branch g24_contw_istore_1byte +: 004992 g24_power_ctrl_ack_incrs: +0x2e75 004995 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e76 004996 ifetch 1 ,rega +0x2e77 004997 increase 1 ,pdata +0x2e78 004998 add regc ,offset_power_ctrl_ack_cnt ,contw +0x2e79 004999 branch g24_contw_istore_1byte +: 005001 g24_power_ctrl: +0x2e7a 005002 bpatch patch17_1 ,mem_patch17 +0x2e7b 005003 call g24_fetch_mem_power_ctrl_pac +0x2e7c 005005 sub pdata ,power_ctrl_max_packet_cnt ,null +0x2e7d 005006 rtn positive +0x2e7e 005007 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e7f 005008 ifetcht 1 ,rega +0x2e80 005010 isub temp ,temp +0x2e81 005011 call g24_power_ctrl_reinit +0x2e82 005012 setarg offset_power_ctrl_threshold_up +0x2e83 005013 iadd regc ,rega +0x2e84 005014 ifetch 1 ,rega +0x2e85 005016 isub temp ,null +0x2e86 005017 nbranch g24_power_ctrl_incrs ,positive +0x2e87 005018 setarg offset_power_ctrl_threshold_down +0x2e88 005019 iadd regc ,rega +0x2e89 005020 ifetch 1 ,rega +0x2e8a 005022 isub temp ,null +0x2e8b 005023 branch g24_power_ctrl_decrs ,positive +0x2e8c 005024 rtn +: 005026 g24_power_ctrl_incrs: +0x2e8d 005027 add regc ,offset_power_ctrl_level ,rega +0x2e8e 005028 ifetch 1 ,rega +0x2e8f 005030 beq 2 ,g24_power_ctrl_incrs_level2 +0x2e90 005031 increase 1 ,pdata +0x2e91 005032 call g24_store_mem_power_ctrl_level +0x2e92 005034 beq 1 ,g24_power_ctrl_incrs_level1 +: 005035 g24_power_ctrl_incrs_level2: +0x2e93 005036 setarg power_ctrl_losspac_thresh_up2 +0x2e94 005037 call g24_store_mem_power_ctrl_threshold_up +0x2e95 005039 setarg power_ctrl_losspac_thresh_down2 +0x2e96 005040 call g24_store_mem_power_ctrl_threshold_down +0x2e97 005043 add regc ,offset_power_ctrl_txpwr_level2 ,rega +0x2e98 005045 branch g24_ifetch_rega_store_mem_txpower +: 005047 g24_power_ctrl_decrs: +0x2e99 005048 add regc ,offset_power_ctrl_level ,rega +0x2e9a 005049 ifetch 1 ,rega +0x2e9b 005051 beq 0 ,g24_power_ctrl_decrs_level0 +0x2e9c 005052 increase -1 ,pdata +0x2e9d 005053 call g24_store_mem_power_ctrl_level +0x2e9e 005055 beq 0 ,g24_power_ctrl_decrs_level0 +: 005056 g24_power_ctrl_decrs_level1: +: 005059 g24_power_ctrl_incrs_level1: +0x2e9f 005060 setarg power_ctrl_losspac_thresh_up1 +0x2ea0 005061 call g24_store_mem_power_ctrl_threshold_up +0x2ea1 005063 setarg power_ctrl_losspac_thresh_down1 +0x2ea2 005064 call g24_store_mem_power_ctrl_threshold_down +0x2ea3 005067 setarg offset_power_ctrl_txpwr_level1 +: 005068 g24_iadd_offset_mem_txpower: +0x2ea4 005069 iadd regc ,rega +: 005070 g24_ifetch_rega_store_mem_txpower: +0x2ea5 005071 ifetch 1 ,rega +0x2ea6 005073 branch g24_store_mem_txpower +: 005075 g24_power_ctrl_decrs_level0: +0x2ea7 005078 setarg power_ctrl_losspac_thresh_up0 +0x2ea8 005079 call g24_store_mem_power_ctrl_threshold_up +0x2ea9 005081 setarg power_ctrl_losspac_thresh_down0 +0x2eaa 005082 call g24_store_mem_power_ctrl_threshold_down +0x2eab 005085 setarg offset_power_ctrl_txpwr_level0 +0x2eac 005087 branch g24_iadd_offset_mem_txpower +: 005101 g24_start_pairing_sm1: +0x2ead 005102 set1 mark_24g ,mark +0x2eae 005103 call g24_pair_init +: 005104 g24_set_pairing_sm_1: +0x2eaf 005106 setarg state_24g_pairing_1 +0x2eb0 005107 branch g24_store_mem_pairing_sm +: 005109 g24_pairing_sm: +0x2eb1 005110 add regc ,offset_24g_ensure ,rega +0x2eb2 005111 ifetch 1 ,rega +0x2eb3 005113 beq ensure_on_24g ,enable_user +0x2eb4 005114 call g24_fetch_mem_pairing_sm +0x2eb5 005116 beq state_24g_pairing_1 ,g24_pairing_sm_1 +0x2eb6 005117 beq state_24g_pairing_2 ,g24_pairing_sm_2 +0x2eb7 005118 beq state_24g_pairing_3 ,g24_pairing_sm_3 +0x2eb8 005119 branch assert +: 005121 g24_pairing_sm_1: +0x2eb9 005122 setarg state_24g_pairing_1_waiting_ack +0x2eba 005123 call g24_store_mem_pairing_sm +0x2ebb 005125 jam 0xaa ,mem_24g_common_temp +0x2ebc 005126 branch g24_pairing_sm_common +: 005127 g24_pairing_sm_2: +0x2ebd 005128 setarg state_24g_pairing_2_waiting_ack +0x2ebe 005129 call g24_store_mem_pairing_sm +0x2ebf 005131 jam 0x55 ,mem_24g_common_temp +0x2ec0 005132 branch g24_pairing_sm_common +: 005133 g24_pairing_sm_3: +0x2ec1 005134 setarg state_24g_pairing_3_waiting_ack +0x2ec2 005135 call g24_store_mem_pairing_sm +0x2ec3 005137 jam 0x22 ,mem_24g_common_temp +: 005138 g24_pairing_sm_common: +0x2ec4 005139 call g24_fetch_mem_data_type +0x2ec5 005141 and_into bits_data ,pdata +0x2ec6 005142 store 1 ,mem_24g_common_temp + 1 +0x2ec7 005143 call g24_fetch_mem_device_addr +0x2ec8 005145 store 4 ,mem_24g_common_temp + 2 +: 005146 g24_put_pairing_data_in_buff: +0x2ec9 005147 jam 0 ,mem_24g_common_temp + 6 +0x2eca 005148 arg mem_24g_common_temp ,rega +0x2ecb 005149 arg 7 ,temp +0x2ecc 005150 call g24_put_data_in_buff +0x2ecd 005151 call g24_transmit_prep +0x2ece 005152 call g24_txdata_enable_tx +0x2ecf 005153 branch enable_user +: 005155 g24_paring_mode: +0x2ed0 005156 call g24_fetch_mem_pairing_sm +0x2ed1 005158 rtneq state_24g_pairing_success +0x2ed2 005159 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack +0x2ed3 005160 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack +0x2ed4 005161 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack +0x2ed5 005162 rtn +: 005164 g24_pairing_sm_1_waiting_ack: +0x2ed6 005165 setarg state_24g_pairing_2 +0x2ed7 005166 call g24_store_mem_pairing_sm +0x2ed8 005168 branch g24_transmit_abandon +: 005169 g24_pairing_sm_2_waiting_ack: +0x2ed9 005170 setarg state_24g_pairing_3 +0x2eda 005171 call g24_store_mem_pairing_sm +0x2edb 005173 branch g24_transmit_abandon +: 005174 g24_pairing_sm_3_waiting_ack: +0x2edc 005175 setarg state_24g_pairing_success +0x2edd 005176 call g24_store_mem_pairing_sm +0x2ede 005178 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0x2edf 005179 call ui_ipc_send_event +0x2ee0 005180 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ee1 005181 ifetch 4 ,rega +0x2ee2 005183 call g24_store_mem_addr +0x2ee3 005185 branch g24_transmit_abandon +: 005187 g24_auto_pair_start: +0x2ee4 005188 set0 mark_24g ,mark +0x2ee5 005189 call g24_auto_pair_set_device_info +0x2ee6 005190 call g24_tx_attemp_data_prep +: 005191 g24_auto_pair_restart: +0x2ee7 005192 call g24_set0_mem_check_dongle_times +: 005193 g24_auto_pair_start_loop: +0x2ee8 005194 nop 2000 +0x2ee9 005195 call g24_fetch_mem_check_dongle_times +0x2eea 005196 beq 0xff ,g24_stop_24g_mode +0x2eeb 005197 call g24_transmit_receive_ack +0x2eec 005198 nbranch g24_auto_pair_retry ,sync +0x2eed 005199 nbranch g24_auto_pair_retry ,user3 +0x2eee 005200 call g24_ackpayload_parse +0x2eef 005201 call g24_head_ptr2regc +0x2ef0 005202 add regc ,offset_24g_paring_addr ,rega +0x2ef1 005203 ifetcht 4 ,rega +0x2ef2 005204 call g24_fetch_mem_addr_isub_temp +0x2ef3 005205 branch g24_start_pairing_sm1 ,zero +0x2ef4 005206 call g24_head_ptr2regc +0x2ef5 005207 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ef6 005208 ifetch 4 ,rega +0x2ef7 005209 beq 0 ,g24_auto_pair_restart +0x2ef8 005210 call g24_store_mem_addr +0x2ef9 005211 branch g24_tx_attemp_dongle_succ +: 005213 g24_auto_pair_retry: +0x2efa 005214 call g24_fetch_mem_check_dongle_times +0x2efb 005215 increase 1 ,pdata +0x2efc 005216 call g24_store_mem_check_dongle_times +0x2efd 005218 call g24_fetch_mem_auto_paring_switch +0x2efe 005219 increase 1 ,pdata +0x2eff 005220 and_into 1 ,pdata +0x2f00 005221 call g24_store_mem_auto_paring_switch +0x2f01 005222 beq 0 ,g24_auto_pair_device_attemp +0x2f02 005223 beq 1 ,g24_auto_pair_pair_attemp +0x2f03 005224 rtn +: 005226 g24_fetch_mem_auto_paring_switch: +0x2f04 005227 setarg offset_24g_auto_pair_switch +0x2f05 005228 branch g24_set_rega_ifetch_1byte +: 005229 g24_store_mem_auto_paring_switch: +0x2f06 005230 arg offset_24g_auto_pair_switch ,rega +0x2f07 005231 branch g24_set_contw_with_regb_store_1byte +: 005233 g24_auto_pair_set_device_info: +0x2f08 005234 call g24_store_mem_tx_power +0x2f09 005235 call g24_fetch_mem_device_addr +0x2f0a 005236 call g24_store_mem_addr +0x2f0b 005237 branch g24_ch +: 005239 g24_auto_pair_device_attemp: +0x2f0c 005240 call g24_auto_pair_set_device_info +0x2f0d 005241 branch g24_auto_pair_start_loop +: 005243 g24_auto_pair_pair_attemp: +0x2f0e 005244 call g24_pair_init +0x2f0f 005245 branch g24_auto_pair_start_loop +: 005248 g24_start_24g_mode: +0x2f10 005249 set0 mark_24g ,mark +0x2f11 005250 call g24_ch +0x2f12 005251 call g24_fetch_mem_pairing_sm +0x2f13 005253 rtnne state_24g_pairing_success +0x2f14 005254 call g24_tx_attemp_data_prep +0x2f15 005255 call g24_set0_mem_check_dongle_times +: 005257 g24_tx_attemp_dongle_loop: +0x2f16 005258 nop 2000 +0x2f17 005259 call g24_fetch_mem_check_dongle_times +0x2f18 005261 beq 0xff ,g24_stop_24g_mode +0x2f19 005262 call g24_transmit_receive_ack +0x2f1a 005263 nbranch g24_attemp_txdata_retry ,sync +0x2f1b 005264 nbranch g24_attemp_txdata_retry ,user3 +: 005265 g24_tx_attemp_dongle_succ: +0x2f1c 005266 set1 mark_24g ,mark +0x2f1d 005267 call g24_set0_mem_check_dongle_times +0x2f1e 005268 setarg state_24g_pairing_success +0x2f1f 005269 call g24_store_mem_pairing_sm +0x2f20 005271 jam bt_evt_24g_attempt_success ,mem_fifo_temp +0x2f21 005272 branch ui_ipc_send_event +: 005274 g24_tx_attemp_data_prep: +0x2f22 005275 set1 mark_24g_conext ,mark +0x2f23 005276 jam 0xff ,mem_24g_common_temp +0x2f24 005277 call g24_fetch_mem_data_type +0x2f25 005279 call g24_put_data_in_buff_pre +0x2f26 005280 branch g24_transmit_prep +: 005282 g24_attemp_txdata_retry: +0x2f27 005283 call g24_fetch_mem_check_dongle_times +0x2f28 005285 increase 1 ,pdata +0x2f29 005286 call g24_store_mem_check_dongle_times +0x2f2a 005288 call g24_ch +0x2f2b 005289 branch g24_tx_attemp_dongle_loop +: 005291 g24_check_51cmd_start_24g: +0x2f2c 005292 call g24_store_mem_tx_power +0x2f2d 005295 setarg state_24g_pairing_success +0x2f2e 005296 call g24_store_mem_pairing_sm +0x2f2f 005298 branch g24_start_24g_mode +: 005307 dongle_init: +0x2f30 005308 bpatch patch17_2 ,mem_patch17 +0x2f31 005309 call g24_head_ptr2regc +0x2f32 005310 setarg dongle_rxdata_type1 +0x2f33 005311 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x2f34 005312 istore 2 ,contw +0x2f35 005314 call g24_receive_init +0x2f36 005315 call usb_init +0x2f37 005316 call g24_fetch_mem_pair_mode +0x2f38 005318 bpatch patch17_3 ,mem_patch17 +0x2f39 005319 beq 0x00 ,dongle_auto_bind +0x2f3a 005320 beq 0x01 ,dongle_pc_bind +0x2f3b 005321 beq 0x0f ,dongle_all_powerful +0x2f3c 005322 branch assert +: 005324 g24_receive_init: +0x2f3d 005325 call g24_store_mem_tx_power_temp +0x2f3e 005326 arg 0x80 ,loopcnt +0x2f3f 005327 arg mem_rssi_noise_buffer ,contw +0x2f40 005328 branch memset0 +: 005330 dongle_all_powerful: +0x2f41 005331 call dongle_check_mode +: 005332 dongle_all_powerful_loop: +0x2f42 005333 call g24_dongle_work_mode +0x2f43 005334 call usb_isr +0x2f44 005335 branch dongle_all_powerful_loop +: 005337 dongle_pc_bind: +0x2f45 005338 bpatch patch17_4 ,mem_patch17 +0x2f46 005339 call dongle_check_mode +: 005340 dongle_pc_bind_loop: +0x2f47 005341 call g24_dongle_work_mode +0x2f48 005342 call g24_dongle_bind_mode +0x2f49 005343 call usb_isr +0x2f4a 005344 call dongle_usb_dispatch +0x2f4b 005345 branch dongle_pc_bind_loop +: 005347 dongle_check_mode: +0x2f4c 005351 call g24_set_work_mem_dongle_work_mode +0x2f4d 005352 call g24_set0_mem_dongle_mode_init +0x2f4e 005353 branch g24_set0_mem_ackpayload_enable +: 005355 g24_dongle_work_mode: +0x2f4f 005356 call g24_fetch_mem_dongle_work_mode +0x2f50 005358 rtnne dongle_work +: 005359 g24_dongle_work_mode_start: +0x2f51 005360 call g24_dongle_work_init +0x2f52 005361 call g24_ch_process +0x2f53 005362 call g24_receive_packet_start +0x2f54 005363 branch g24_blank_data_process +: 005365 g24_dongle_work_init: +0x2f55 005366 call g24_fetch_mem_dongle_mode_init +0x2f56 005368 rtnbit1 dongle_work +0x2f57 005369 set1 dongle_work ,pdata +0x2f58 005370 call g24_store_mem_dongle_mode_init +0x2f59 005372 call g24_store_mem_tx_power +0x2f5a 005375 call g24_set0_mem_ackpayload_enable +0x2f5b 005377 jam 0 ,mem_usb_tx_enable +0x2f5c 005378 call g24_set1_mem_abort_pac +0x2f5d 005380 call g24_dongle_init +: 005381 g24_rx_interrupt_clear: +0x2f5e 005382 add regc ,offset_24g_rxbuf ,contw +0x2f5f 005384 arg 66 ,loopcnt +0x2f60 005385 branch clear_mem +: 005387 g24_dongle_init: +0x2f61 005388 call g24_set0_mem_pid +0x2f62 005390 call g24_fetch_mem_rx_addr +0x2f63 005392 call g24_store_mem_addr +0x2f64 005394 branch g24_ch +: 005396 g24_ch_process: +0x2f65 005397 bpatch patch17_5 ,mem_patch17 +0x2f66 005398 call g24_fetch_mem_abort_pac +0x2f67 005400 beq 1 ,g24_noise_rssi +0x2f68 005401 call g24_fetch_mem_hop_pac +0x2f69 005403 beq 1 ,g24_ch +0x2f6a 005404 setarg offset_24g_hop_btclk +0x2f6b 005405 iadd regc ,rega +0x2f6c 005406 ifetcht 4 ,rega +0x2f6d 005408 copy clkn_bt ,pdata +0x2f6e 005409 isub temp ,null +0x2f6f 005410 ncall g24_timer_timeout ,positive +0x2f70 005411 copy pdata ,regb +0x2f71 005412 setarg offset_24g_hop_btclk +0x2f72 005413 iadd regc ,rega +0x2f73 005414 ifetch 4 ,rega +0x2f74 005415 copy pdata ,temp +0x2f75 005417 setarg offset_24g_hop_interval +0x2f76 005418 iadd regc ,rega +0x2f77 005419 copy temp ,pdata +0x2f78 005420 ifetcht 1 ,rega +0x2f79 005422 iadd temp ,temp +0x2f7a 005423 copy regb ,pdata +0x2f7b 005424 isub temp ,null +0x2f7c 005425 nrtn positive +0x2f7d 005426 set0 28 ,pdata +0x2f7e 005427 setarg offset_24g_hop_btclk +0x2f7f 005428 iadd regc ,contw +0x2f80 005429 istore 4 ,contw +: 005431 g24_ch_update: +0x2f81 005432 call g24_ch +0x2f82 005433 call g24_fetch_mem_rf_laststa +0x2f83 005435 increase 1 ,pdata +0x2f84 005436 call g24_store_mem_rf_laststa +0x2f85 005438 rtnne 2 +0x2f86 005439 call g24_set0_mem_rf_laststa +0x2f87 005443 branch g24_set1_mem_abort_pac +: 005445 g24_ch_timer_reinit: +0x2f88 005446 copy clkn_bt ,pdata +0x2f89 005447 arg offset_24g_hop_btclk ,rega +0x2f8a 005448 call g24_set_contw_with_temp +0x2f8b 005449 istore 4 ,contw +0x2f8c 005453 branch g24_set0_mem_rf_laststa +: 005455 g24_noise_rssi: +0x2f8d 005456 arg mem_rssi_noise_buffer ,rega +0x2f8e 005457 call g24_noise_rssi_average +0x2f8f 005458 add regc ,offset_rssi_noise_avg ,contw +0x2f90 005459 istoret 1 ,contw +0x2f91 005461 sub temp ,rssi_thresh_noise ,null +0x2f92 005462 nrtn positive +0x2f93 005463 branch g24_ch +: 005465 g24_noise_rssi_average: +0x2f94 005466 arg rssi_buf_len_noise + 1 ,loopcnt +0x2f95 005467 branch rssi_average +: 005469 g24_blank_data_process: +0x2f96 005470 call g24_ms_blank_data +0x2f97 005471 call g24_kb_blank_data +0x2f98 005472 branch g24_kb_mul_blank_data +: 005474 g24_ms_blank_data: +0x2f99 005475 setarg offset_24g_ms_blank_data_enable +0x2f9a 005476 call g24_set_rega_ifetch_1byte +0x2f9b 005478 rtn blank +0x2f9c 005479 arg timer_ms_blank ,queue +0x2f9d 005480 call timer_check +0x2f9e 005481 nrtn blank +0x2f9f 005482 call g24_set0_mem_ms_blank_data_enable +0x2fa0 005484 setarg ms_report_id +0x2fa1 005485 store 1 ,mem_usb_mouse_data +0x2fa2 005486 setarg 0 +0x2fa3 005487 istore 7 ,contw +0x2fa4 005488 branch g24_data_type1_usbtx_enable +: 005490 g24_kb_blank_data: +0x2fa5 005491 setarg offset_24g_kb_blank_data_enable +0x2fa6 005492 call g24_set_rega_ifetch_1byte +0x2fa7 005494 rtn blank +0x2fa8 005495 arg timer_kb_blank ,queue +0x2fa9 005496 call timer_check +0x2faa 005497 nrtn blank +0x2fab 005498 call g24_set0_mem_kb_blank_data_enable +0x2fac 005500 arg mem_usb_kb_data ,contw +0x2fad 005501 arg 2 ,loopcnt +0x2fae 005502 call memset0 +0x2faf 005503 jam kb_normal_report_id ,mem_usb_kb_data +0x2fb0 005504 branch g24_kb_data_into_ep1_fifo +: 005506 g24_kb_mul_blank_data: +0x2fb1 005507 setarg offset_24g_kb_mul_blank_data_enable +0x2fb2 005508 call g24_set_rega_ifetch_1byte +0x2fb3 005510 rtn blank +0x2fb4 005511 arg timer_kb_mul_blank ,queue +0x2fb5 005512 call timer_check +0x2fb6 005513 nrtn blank +0x2fb7 005514 call g24_set0_mem_kb_mul_blank_data_enable +0x2fb8 005516 arg mem_usb_kb_multikey ,contw +0x2fb9 005517 arg 2 ,loopcnt +0x2fba 005518 call memset0 +0x2fbb 005519 jam kb_multikey_report_id ,mem_usb_kb_multikey +0x2fbc 005520 branch g24_kb_mul_data_into_ep2_fifo +: 005522 g24_dongle_bind_mode: +0x2fbd 005523 call g24_fetch_mem_dongle_work_mode +0x2fbe 005525 rtnne dongle_bind +0x2fbf 005526 call g24_dongle_bind_init +0x2fc0 005527 branch g24_dongle_bind_data_process +: 005529 g24_dongle_bind_init: +0x2fc1 005530 call g24_fetch_mem_dongle_mode_init +0x2fc2 005532 rtnbit1 dongle_bind +0x2fc3 005533 set1 dongle_bind ,pdata +0x2fc4 005534 call g24_store_mem_dongle_mode_init +0x2fc5 005536 call g24_set1_mem_ackpayload_enable +0x2fc6 005538 call g24_pair_init +0x2fc7 005539 setarg 0 +0x2fc8 005540 arg offset_dongle_ms_bind_step ,rega +0x2fc9 005541 call g24_set_contw_with_temp +0x2fca 005543 branch g24_contw_istore_3byte +: 005545 g24_dongle_bind_data_process: +0x2fcb 005546 call g24_receive_transmit_ack +0x2fcc 005547 nbranch g24_rx_interrupt_clear ,user3 +0x2fcd 005548 add regc ,offset_24g_rxbuf ,contr +0x2fce 005549 setarg offset_24g_rxdata_temp +0x2fcf 005550 iadd regc ,contw +0x2fd0 005551 arg 8 ,loopcnt +0x2fd1 005552 call memcpy +0x2fd2 005553 setarg offset_24g_rxdata_temp_add2 +0x2fd3 005554 call g24_set_rega_ifetch_1byte +0x2fd4 005555 beq datatype_bind ,g24_dongle_bind_first_step +0x2fd5 005556 beq datatype_config ,g24_dongle_bind_second_step +0x2fd6 005557 beq datatype_ok ,g24_dongle_bind_third_step +0x2fd7 005558 beq 0xff ,g24_data_attemp +0x2fd8 005559 branch g24_rx_interrupt_clear +: 005561 g24_dongle_bind_first_step: +0x2fd9 005562 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fda 005563 beq bind_mouse ,g24_dongle_bind_first_step_mouse +0x2fdb 005564 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard +0x2fdc 005565 rtn +: 005566 g24_dongle_bind_first_step_mouse: +0x2fdd 005567 setarg 1 +0x2fde 005568 call g24_store_mem_ms_bind_step +: 005570 g24_dongle_bind_ms_payload_cfg: +0x2fdf 005571 setarg datatype_mouse +0x2fe0 005572 call g24_store_mem_bind_payload +: 005574 g24_dongle_bind_payload_cfg: +0x2fe1 005575 setarg 0x80 +0x2fe2 005576 arg offset_24g_bind_payload_add1 ,rega +0x2fe3 005577 call g24_set_contw_with_regb_store_1byte +0x2fe4 005579 call g24_fetch_mem_rx_addr +0x2fe5 005581 arg offset_24g_bind_payload_add2 ,rega +0x2fe6 005582 call g24_set_contw_with_temp +0x2fe7 005584 branch g24_contw_istore_4byte +: 005586 g24_dongle_bind_first_step_keyboard: +0x2fe8 005587 setarg 1 +0x2fe9 005588 call g24_store_mem_kb_bind_step +: 005590 g24_dongle_bind_kb_payload_cfg: +0x2fea 005591 setarg datatype_keyboard +0x2feb 005592 call g24_store_mem_bind_payload +0x2fec 005594 branch g24_dongle_bind_payload_cfg +: 005596 g24_dongle_bind_second_step: +0x2fed 005597 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fee 005598 beq bind_mouse ,g24_dongle_bind_second_step_mouse +0x2fef 005599 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard +0x2ff0 005600 rtn +: 005601 g24_dongle_bind_second_step_mouse: +0x2ff1 005602 call g24_dongle_bind_ms_payload_cfg +0x2ff2 005603 setarg offset_dongle_ms_bind_step +0x2ff3 005604 call g24_set_rega_ifetch_1byte +0x2ff4 005606 beq 1 ,g24_dongle_ms_bind_step_set2 +0x2ff5 005607 rtn +: 005608 g24_dongle_ms_bind_step_set2: +0x2ff6 005609 setarg 2 +: 005611 g24_store_mem_ms_bind_step: +0x2ff7 005612 arg offset_dongle_ms_bind_step ,rega +0x2ff8 005613 branch g24_set_contw_with_regb_store_1byte +: 005615 g24_dongle_bind_second_step_keyboard: +0x2ff9 005616 call g24_dongle_bind_kb_payload_cfg +0x2ffa 005617 setarg offset_dongle_kb_bind_step +0x2ffb 005618 call g24_set_rega_ifetch_1byte +0x2ffc 005620 beq 1 ,g24_dongle_kb_bind_step_set2 +0x2ffd 005621 rtn +: 005622 g24_dongle_kb_bind_step_set2: +0x2ffe 005623 setarg 2 +: 005625 g24_store_mem_kb_bind_step: +0x2fff 005626 arg offset_dongle_kb_bind_step ,rega +0x3000 005627 branch g24_set_contw_with_regb_store_1byte +: 005629 g24_dongle_bind_third_step: +0x3001 005630 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3002 005631 beq bind_mouse ,g24_dongle_bind_third_step_mouse +0x3003 005632 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard +0x3004 005633 rtn +: 005634 g24_dongle_bind_third_step_mouse: +0x3005 005635 setarg offset_dongle_ms_bind_step +0x3006 005636 call g24_set_rega_ifetch_1byte +0x3007 005638 beq 2 ,g24_dongle_ms_bind_step_success +0x3008 005639 rtn +: 005640 g24_dongle_ms_bind_step_success: +0x3009 005641 call g24_fetch_mem_bind_device_status +0x300a 005643 or_into 0x01 ,pdata +0x300b 005644 call g24_store_mem_bind_device_status +: 005646 g24_dongle_bind_exit: +0x300c 005647 setarg 0 +0x300d 005648 setarg offset_dongle_ms_bind_step +0x300e 005649 iadd regc ,contw +0x300f 005650 istore 2 ,contw +0x3010 005651 branch g24_rx_interrupt_clear +: 005653 g24_dongle_bind_third_step_keyboard: +0x3011 005654 setarg offset_dongle_kb_bind_step +0x3012 005655 call g24_set_rega_ifetch_1byte +0x3013 005657 bne 0 ,g24_dongle_kb_bind_step_success +0x3014 005658 rtn +: 005659 g24_dongle_kb_bind_step_success: +0x3015 005660 call g24_fetch_mem_bind_device_status +0x3016 005662 or_into 0x02 ,pdata +0x3017 005663 call g24_store_mem_bind_device_status +0x3018 005665 branch g24_dongle_bind_exit +: 005668 dongle_usb_dispatch: +0x3019 005669 fetch 1 ,mem_usb0_get_set_report +0x301a 005670 rtn blank +0x301b 005671 jam 0 ,mem_usb0_get_set_report +0x301c 005672 fetch 2 ,mem_usb_setup_bvalue_temp +0x301d 005673 arg pc_set_report ,temp +0x301e 005674 isub temp ,null +0x301f 005675 nrtn zero +0x3020 005677 fetch 1 ,mem_usb0_set_report_data +0x3021 005678 rtnne pc_report_id +0x3022 005679 fetch 1 ,mem_usb0_set_report_data + 1 +0x3023 005680 bpatch patch17_6 ,mem_patch17 +0x3024 005681 beq command_mode ,dongle_dispose_cmd_mode +0x3025 005682 beq command_bind ,dongle_dispose_cmd_bind +0x3026 005683 beq command_current_project ,dongle_dispose_cmd_current_project +0x3027 005684 beq command_current_mode ,dongle_dispose_cmd_current_mode +0x3028 005685 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version +0x3029 005686 beq command_user_defined ,dongle_dispose_cmd_user_defined +: 005687 usb0_data_ready_report_set0: +0x302a 005688 jam 0 ,mem_usb0_data_ready_report +0x302b 005689 rtn +: 005690 dongle_dispose_cmd_bind: +0x302c 005691 fetch 1 ,mem_usb0_set_report_data + 2 +0x302d 005692 beq com_bind_get ,dongle_dispose_cmd_get_bind +0x302e 005693 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +0x302f 005694 beq com_read_mode ,dongle_dispose_cmd_read_mode +0x3030 005695 branch usb0_data_ready_report_set0 +: 005696 dongle_dispose_cmd_get_bind: +0x3031 005697 call g24_fetch_mem_bind_device_status +0x3032 005699 store 1 ,mem_usb0_get_report_data + 1 +0x3033 005700 branch usb0_data_ready_report_set1 +: 005701 dongle_dispose_cmd_exit_bind: +0x3034 005702 call g24_set_work_mem_dongle_work_mode +0x3035 005704 call g24_set0_mem_dongle_mode_init +0x3036 005706 call g24_fetch_mem_bind_device_status +0x3037 005708 store 1 ,mem_usb0_get_report_data + 1 +0x3038 005709 branch usb0_data_ready_report_set1 +: 005711 dongle_dispose_cmd_read_mode: +: 005712 dongle_dispose_in_bind_mode: +0x3039 005713 jam command_bind ,mem_usb0_get_report_data + 1 +0x303a 005714 branch usb0_data_ready_report_set1 +: 005716 dongle_dispose_cmd_mode: +0x303b 005717 fetch 1 ,mem_usb0_set_report_data + 2 +0x303c 005718 beq com_mode_bind ,dongle_enter_bind_mode +0x303d 005720 branch usb0_data_ready_report_set0 +: 005721 dongle_enter_bind_mode: +0x303e 005724 call g24_bind_mode_enable +: 005725 usb0_data_ready_report_set1: +0x303f 005726 jam 1 ,mem_usb0_data_ready_report +0x3040 005727 rtn +: 005732 dongle_dispose_cmd_current_project: +0x3041 005733 jam product_id ,mem_usb0_get_report_data + 1 +0x3042 005734 branch usb0_data_ready_report_set1 +: 005736 dongle_dispose_cmd_current_mode: +0x3043 005737 call g24_fetch_mem_dongle_work_mode +0x3044 005739 beq dongle_work ,dongle_dispose_in_work_mode +0x3045 005740 beq dongle_bind ,dongle_dispose_in_bind_mode +0x3046 005742 rtn +: 005743 dongle_dispose_in_work_mode: +0x3047 005744 jam command_mode ,mem_usb0_get_report_data + 1 +0x3048 005745 branch usb0_data_ready_report_set1 +: 005750 dongle_dispose_cmd_current_fw_version: +0x3049 005751 jam fw_version0 ,mem_usb0_get_report_data + 1 +0x304a 005752 jam fw_version1 ,mem_usb0_get_report_data + 2 +0x304b 005753 jam fw_version2 ,mem_usb0_get_report_data + 3 +0x304c 005754 branch usb0_data_ready_report_set1 +: 005756 dongle_dispose_cmd_user_defined: +0x304d 005758 call g24_set1_mem_ackpayload_enable +0x304e 005759 fetch 1 ,mem_usb0_set_report_data + 2 +0x304f 005760 increase 2 ,pdata +0x3050 005761 copy pdata ,loopcnt +0x3051 005762 arg mem_usb0_set_report_data ,contr +0x3052 005763 setarg offset_24g_ackpayload +0x3053 005764 iadd regc ,contw +0x3054 005765 branch memcpy +: 005768 dongle_auto_bind: +0x3055 005769 bpatch patch17_7 ,mem_patch17 +0x3056 005770 call g24_mode_switch_init +: 005771 dongle_auto_bind_loop: +0x3057 005772 call g24_receive_process +0x3058 005773 call usb_isr +0x3059 005774 branch dongle_auto_bind_loop +: 005776 g24_dongle_work_mode_auto: +0x305a 005777 call g24_fetch_mem_dongle_work_mode +0x305b 005779 rtnne dongle_work +0x305c 005780 call g24_dongle_work_mode_start +0x305d 005781 branch g24_rx_nodata_process +: 005783 g24_dongle_bind_mode_auto: +0x305e 005784 call g24_fetch_mem_dongle_work_mode +0x305f 005786 rtnne dongle_bind +0x3060 005787 call g24_dongle_bind_init +0x3061 005788 call g24_dongle_bind_data_process +0x3062 005789 call g24_fetch_mem_bind_device_status +0x3063 005791 rtn blank +0x3064 005792 call g24_set0_mem_mode_switch +0x3065 005794 call dongle_check_mode +0x3066 005795 call g24_enable_nodata_timer +: 005796 g24_timer_init: +0x3067 005797 setarg 0 +0x3068 005798 add regc ,offset_24g_tx_btclk ,contw +0x3069 005800 branch g24_contw_istore_4byte +: 005802 g24_timer_check: +0x306a 005803 call disable_user +0x306b 005804 add regc ,offset_24g_tx_btclk ,rega +0x306c 005805 ifetcht 4 ,rega +0x306d 005807 copy clkn_bt ,pdata +0x306e 005808 isub temp ,null +0x306f 005809 ncall g24_timer_timeout ,positive +0x3070 005810 copy pdata ,regb +0x3071 005811 add regc ,offset_24g_tx_btclk ,rega +0x3072 005812 ifetch 4 ,rega +0x3073 005814 add regc ,offset_24g_interval ,rega +0x3074 005815 ifetcht 1 ,rega +0x3075 005817 iadd temp ,temp +0x3076 005818 copy regb ,pdata +0x3077 005819 isub temp ,null +0x3078 005820 nrtn positive +0x3079 005821 set0 28 ,pdata +0x307a 005822 add regc ,offset_24g_tx_btclk ,contw +0x307b 005823 istore 4 ,contw +0x307c 005825 branch enable_user +: 005827 g24_mode_switch_init: +0x307d 005828 setarg 1 +0x307e 005829 call g24_store_mem_mode_switch +0x307f 005831 call g24_set0_mem_time_slice +0x3080 005833 setarg 0xff +0x3081 005834 add regc ,offset_24g_interval ,contw +0x3082 005835 istore 1 ,contw +0x3083 005837 branch g24_timer_init +: 005839 g24_mode_switch: +0x3084 005840 setarg offset_24g_mode_switch +0x3085 005841 call g24_set_rega_ifetch_1byte +0x3086 005843 rtn blank +0x3087 005844 call g24_timer_check +0x3088 005845 nrtn user +0x3089 005846 call g24_fetch_mem_time_slice +0x308a 005848 increase 1 ,pdata +0x308b 005849 and_into 1 ,pdata +0x308c 005850 call g24_store_mem_time_slice +0x308d 005852 beq 0 ,dongle_check_mode +0x308e 005853 beq 1 ,g24_bind_mode_enable +0x308f 005854 rtn +: 005856 g24_bind_mode_enable: +0x3090 005860 setarg dongle_bind +0x3091 005861 call g24_store_mem_dongle_work_mode +0x3092 005862 branch g24_set0_mem_dongle_mode_init +: 005864 g24_enable_nodata_timer: +0x3093 005865 setarg 1 +0x3094 005866 call g24_store_mem_nodata_timer_enable +0x3095 005868 setarg timer_nodata_delay +0x3096 005869 arg timer_nodata ,queue +0x3097 005870 branch timer_init +: 005872 g24_rx_nodata_process: +0x3098 005873 call g24_fetch_mem_nodata_timer_enable +0x3099 005875 rtn blank +0x309a 005876 arg timer_nodata ,queue +0x309b 005877 call timer_check +0x309c 005878 nrtn blank +0x309d 005879 call g24_set0_mem_nodata_timer_enable +0x309e 005882 setarg dongle_search +0x309f 005883 call g24_store_mem_dongle_work_mode +0x30a0 005885 call g24_set0_mem_dongle_mode_init +0x30a1 005887 branch g24_rx_interrupt_clear +: 005889 g24_dongle_search_mode_auto: +0x30a2 005890 bpatch patch18_0 ,mem_patch18 +0x30a3 005891 call g24_fetch_mem_dongle_work_mode +0x30a4 005893 rtnne dongle_search +0x30a5 005894 call g24_dongle_search_mode_init +0x30a6 005895 call g24_rx_auto_addr_ch_search +0x30a7 005896 call g24_receive_transmit_ack +0x30a8 005897 nbranch g24_rx_interrupt_clear ,user3 +0x30a9 005899 call g24_dongle_search_addr_check +0x30aa 005900 call g24_receive_packet_parse ,zero +0x30ab 005904 call dongle_check_mode +0x30ac 005905 call g24_fetch_mem_dongle_mode_init +0x30ad 005907 set1 dongle_work ,pdata +0x30ae 005908 call g24_store_mem_dongle_mode_init +0x30af 005910 call g24_rx_interrupt_clear +0x30b0 005911 call g24_enable_nodata_timer +0x30b1 005912 call g24_dongle_search_addr_check +0x30b2 005913 branch g24_dg_ch_num_reinit ,zero +0x30b3 005914 setarg offset_24g_kb_addr +0x30b4 005915 call g24_set_rega_ifetcht_4byte +0x30b5 005917 call g24_fetch_mem_addr_isub_temp +0x30b6 005918 branch g24_kb_ch_num_reinit ,zero +0x30b7 005919 setarg offset_24g_mouse_addr +0x30b8 005920 call g24_set_rega_ifetcht_4byte +0x30b9 005922 call g24_fetch_mem_addr_isub_temp +0x30ba 005923 branch g24_ms_ch_num_reinit ,zero +0x30bb 005924 rtn +: 005926 g24_dongle_search_addr_check: +0x30bc 005927 setarg offset_24g_rx_addr +0x30bd 005928 call g24_set_rega_ifetcht_4byte +: 005930 g24_fetch_mem_addr_isub_temp: +0x30be 005931 call g24_fetch_mem_addr +0x30bf 005933 isub temp ,null +0x30c0 005934 rtn +: 005936 g24_dg_ch_num_reinit: +0x30c1 005937 setarg offset_24g_dg_ch_number +0x30c2 005938 call g24_set_rega_ifetch_1byte +: 005940 g24_current_ch_num_reinit: +0x30c3 005942 add regc ,offset_24g_current_ch_number ,contw +0x30c4 005943 branch g24_contw_istore_1byte +: 005945 g24_kb_ch_num_reinit: +0x30c5 005946 setarg offset_24g_kb_ch_number +0x30c6 005947 call g24_set_rega_ifetch_1byte +0x30c7 005949 branch g24_current_ch_num_reinit +: 005950 g24_ms_ch_num_reinit: +0x30c8 005951 setarg offset_24g_ms_ch_number +0x30c9 005952 call g24_set_rega_ifetch_1byte +0x30ca 005954 branch g24_current_ch_num_reinit +: 005956 g24_dongle_search_mode_init: +0x30cb 005957 call g24_fetch_mem_dongle_mode_init +0x30cc 005959 rtnbit1 dongle_search +0x30cd 005960 set1 dongle_search ,pdata +0x30ce 005961 call g24_store_mem_dongle_mode_init +0x30cf 005963 call g24_set0_mem_time_slice +0x30d0 005965 call g24_set1_mem_ackpayload_enable +0x30d1 005967 setarg 0 +0x30d2 005968 add regc ,offset_rssi_noise_dg_index ,contw +0x30d3 005969 istore 3 ,contw +0x30d4 005971 arg offset_24g_dg_config_ch_once ,rega +0x30d5 005972 call g24_set_contw_with_temp +0x30d6 005973 istore 7 ,contw +0x30d7 005976 call g24_dongle_search_addr_check +0x30d8 005977 nrtn zero +0x30d9 005978 add regc ,offset_24g_current_ch_number ,rega +0x30da 005979 ifetch 1 ,rega +0x30db 005981 arg offset_24g_dg_ch_number ,rega +0x30dc 005982 call g24_set_contw_with_regb_store_1byte +0x30dd 005984 add regc ,offset_24g_ch ,rega +0x30de 005985 ifetch 1 ,rega +0x30df 005988 branch g24_store_mem_dg_last_ch +: 005990 g24_rx_auto_addr_ch_search: +0x30e0 005991 bpatch patch18_1 ,mem_patch18 +0x30e1 005992 call g24_fetch_mem_time_slice +0x30e2 005994 increase 1 ,pdata +0x30e3 005995 and_into 3 ,pdata +0x30e4 005996 call g24_store_mem_time_slice +0x30e5 005999 beq 0 ,g24_rx_auto_bind_config_kb +0x30e6 006000 beq 1 ,g24_rx_auto_bind_config_dongle +0x30e7 006001 beq 2 ,g24_rx_auto_bind_config_mouse +0x30e8 006002 beq 3 ,g24_rx_auto_bind_config_dongle +0x30e9 006003 rtn +: 006005 g24_rx_auto_bind_config_mouse: +0x30ea 006006 call g24_dongle_bind_ms_payload_cfg +0x30eb 006007 setarg offset_24g_mouse_addr +0x30ec 006008 call g24_set_rega_ifetch_4byte +0x30ed 006010 branch g24_rx_auto_addr_ch_search ,blank +0x30ee 006011 call g24_store_mem_addr +0x30ef 006013 setarg offset_24g_ms_config_ch_once +0x30f0 006014 call g24_set_rega_ifetch_1byte +0x30f1 006016 call g24_ms_config_ch_once ,blank +0x30f2 006017 setarg offset_24g_ms_last_ch +0x30f3 006018 call g24_set_rega_ifetch_1byte +0x30f4 006020 call g24_store_mem_ch +0x30f5 006022 add regc ,offset_rssi_noise_ms_index ,rega +0x30f6 006023 ifetcht 1 ,rega +0x30f7 006025 arg mem_rssi_noise_ms_buffer ,rega +0x30f8 006026 call rssi_noise_store +0x30f9 006027 add regc ,offset_rssi_noise_ms_index ,contw +0x30fa 006028 istoret 1 ,contw +0x30fb 006030 call g24_noise_rssi_average +0x30fc 006031 add regc ,offset_rssi_noise_ms_avg ,contw +0x30fd 006032 istoret 1 ,contw +0x30fe 006034 sub temp ,rssi_thresh_noise ,null +0x30ff 006035 nrtn positive +0x3100 006036 setarg offset_24g_ms_ch_number +0x3101 006037 call g24_set_rega_ifetcht_1byte +0x3102 006039 call g24_ch_temp_incre_size4 +0x3103 006040 arg offset_24g_ms_ch_number ,rega +0x3104 006041 call g24_set_contw_with_regb2 +0x3105 006042 istoret 1 ,contw +: 006044 g24_store_mem_ms_last_ch: +0x3106 006046 arg offset_24g_ms_last_ch ,rega +0x3107 006047 branch g24_set_contw_with_regb_store_1byte +: 006049 g24_ms_config_ch_once: +0x3108 006050 setarg 1 +0x3109 006051 arg offset_24g_ms_config_ch_once ,rega +0x310a 006052 call g24_set_contw_with_regb_store_1byte +0x310b 006054 arg 0 ,temp +0x310c 006055 call g24_ch_calc +0x310d 006058 branch g24_store_mem_ms_last_ch +: 006060 g24_rx_auto_bind_config_kb: +0x310e 006061 call g24_dongle_bind_kb_payload_cfg +0x310f 006062 setarg offset_24g_kb_addr +0x3110 006063 call g24_set_rega_ifetch_4byte +0x3111 006065 branch g24_rx_auto_addr_ch_search ,blank +0x3112 006066 call g24_store_mem_addr +0x3113 006068 setarg offset_24g_kb_config_ch_once +0x3114 006069 call g24_set_rega_ifetch_1byte +0x3115 006071 call g24_kb_config_ch_once ,blank +0x3116 006072 setarg offset_24g_kb_last_ch +0x3117 006073 call g24_set_rega_ifetch_1byte +0x3118 006075 call g24_store_mem_ch +0x3119 006077 add regc ,offset_rssi_noise_kb_index ,rega +0x311a 006078 ifetcht 1 ,rega +0x311b 006080 arg mem_rssi_noise_kb_buffer ,rega +0x311c 006081 call rssi_noise_store +0x311d 006082 add regc ,offset_rssi_noise_kb_index ,contw +0x311e 006083 istoret 1 ,contw +0x311f 006085 call g24_noise_rssi_average +0x3120 006086 add regc ,offset_rssi_noise_kb_avg ,contw +0x3121 006087 istoret 1 ,contw +0x3122 006089 sub temp ,rssi_thresh_noise ,null +0x3123 006090 nrtn positive +0x3124 006091 setarg offset_24g_kb_ch_number +0x3125 006092 call g24_set_rega_ifetcht_1byte +0x3126 006094 call g24_ch_temp_incre_size4 +0x3127 006095 arg offset_24g_kb_ch_number ,rega +0x3128 006096 call g24_set_contw_with_regb2 +0x3129 006097 istoret 1 ,contw +: 006099 g24_store_mem_kb_last_ch: +0x312a 006101 arg offset_24g_kb_last_ch ,rega +0x312b 006102 branch g24_set_contw_with_regb_store_1byte +: 006104 g24_kb_config_ch_once: +0x312c 006105 setarg 1 +0x312d 006106 arg offset_24g_kb_config_ch_once ,rega +0x312e 006107 call g24_set_contw_with_regb_store_1byte +0x312f 006109 arg 0 ,temp +0x3130 006110 call g24_ch_calc +0x3131 006113 branch g24_store_mem_kb_last_ch +: 006115 g24_rx_auto_bind_config_dongle: +0x3132 006116 call g24_dongle_bind_ms_payload_cfg +0x3133 006117 call g24_fetch_mem_rx_addr +0x3134 006119 call g24_store_mem_addr +0x3135 006121 setarg offset_24g_dg_config_ch_once +0x3136 006122 call g24_set_rega_ifetch_1byte +0x3137 006124 call g24_dg_config_ch_once ,blank +0x3138 006125 call g24_dg_store_config_ch +0x3139 006126 add regc ,offset_rssi_noise_dg_index ,rega +0x313a 006127 ifetcht 1 ,rega +0x313b 006129 arg mem_rssi_noise_dg_buffer ,rega +0x313c 006130 call rssi_noise_store +0x313d 006131 add regc ,offset_rssi_noise_dg_index ,contw +0x313e 006132 istoret 1 ,contw +0x313f 006134 call g24_noise_rssi_average +0x3140 006135 add regc ,offset_rssi_noise_dg_avg ,contw +0x3141 006136 istoret 1 ,contw +0x3142 006138 sub temp ,rssi_thresh_noise ,null +0x3143 006139 nrtn positive +0x3144 006140 setarg offset_24g_dg_ch_number +0x3145 006141 call g24_set_rega_ifetcht_1byte +0x3146 006143 call g24_ch_temp_incre_size4 +0x3147 006144 arg offset_24g_dg_ch_number ,rega +0x3148 006145 call g24_set_contw_with_regb2 +0x3149 006146 istoret 1 ,contw +: 006148 g24_store_mem_dg_last_ch: +0x314a 006151 arg offset_24g_dg_last_ch ,rega +0x314b 006152 branch g24_set_contw_with_regb_store_1byte +: 006155 g24_dg_config_ch_once: +0x314c 006160 setarg 1 +0x314d 006161 arg offset_24g_dg_config_ch_once ,rega +0x314e 006162 call g24_set_contw_with_regb_store_1byte +: 006163 g24_dg_store_config_ch: +0x314f 006164 setarg offset_24g_dg_last_ch +0x3150 006165 call g24_set_rega_ifetch_1byte +0x3151 006166 branch g24_store_mem_ch +: 006169 g24_transmit_ack: +0x3152 006171 add regc ,offset_24g_rxbuf ,rega +0x3153 006172 ifetch 1 ,rega +0x3154 006174 call g24_store_mem_data_type +0x3155 006177 call g24_read_len_pid_crc +0x3156 006179 call g24_fetch_mem_rxbuf_add1 +0x3157 006181 isolate1 bit_ack_24g ,pdata +0x3158 006182 branch g24tx_no_ack ,true +: 006183 g24tx_with_ack: +0x3159 006184 call g24_ackpayload_prep +0x315a 006185 call g24_transmit_prep +0x315b 006186 call g24_transmit +: 006187 g24tx_no_ack: +0x315c 006188 branch g24_end_of_packet +: 006190 g24_ackpayload_prep: +0x315d 006191 bpatch patch18_2 ,mem_patch18 +0x315e 006192 add regc ,offset_24g_datalen ,contw +0x315f 006193 call g24_mem_set0 +0x3160 006195 setarg offset_24g_ackpayload_enable +0x3161 006196 call g24_set_rega_ifetch_1byte +0x3162 006198 rtn blank +0x3163 006199 setarg 0x06 +0x3164 006200 add regc ,offset_24g_datalen ,contw +0x3165 006201 istore 1 ,contw +0x3166 006203 arg 0x06 ,loopcnt +0x3167 006204 setarg offset_24g_bind_payload +0x3168 006205 iadd regc ,contr +0x3169 006207 add regc ,offset_24g_txbuf ,contw +0x316a 006209 branch memcpy +: 006212 g24_receive_packet_start: +0x316b 006213 call g24_receive_transmit_ack +0x316c 006214 nbranch g24_rx_interrupt_clear ,user3 +0x316d 006215 branch g24_receive_packet_parse +: 006217 g24_receive_transmit_ack: +0x316e 006218 call g24_rx_interrupt_clear +0x316f 006219 call g24_receive_packet +0x3170 006220 nrtn user3 +0x3171 006221 branch g24_transmit_ack +: 006223 g24_receive_packet_parse: +0x3172 006224 bpatch patch18_3 ,mem_patch18 +0x3173 006225 call g24_receive_packet_parse_pid_crc +0x3174 006226 nbranch g24_rx_interrupt_clear ,user +0x3175 006227 add regc ,offset_24g_rxdata_length ,rega +0x3176 006228 ifetch 1 ,rega +0x3177 006230 branch g24_rx_interrupt_clear ,blank +0x3178 006231 increase 2 ,pdata +0x3179 006232 iforce loopcnt +0x317a 006233 add regc ,offset_24g_rxbuf ,contr +0x317b 006235 setarg offset_24g_rxdata_temp +0x317c 006236 iadd regc ,contw +0x317d 006238 call memcpy +0x317e 006239 call g24_set0_mem_mode_switch +0x317f 006241 call g24_fetch_mem_pair_mode +0x3180 006243 call g24_enable_nodata_timer ,blank +0x3181 006244 setarg offset_24g_rxdata_temp_add2 +0x3182 006245 call g24_set_rega_ifetch_1byte +0x3183 006247 beq 0x01 ,g24_data_type1 +0x3184 006248 beq 0x02 ,g24_data_type2 +0x3185 006249 beq 0x03 ,g24_data_type3 +0x3186 006250 beq 0xff ,g24_data_attemp +0x3187 006251 branch g24_rx_interrupt_clear +: 006253 g24_receive_packet_parse_pid_crc: +0x3188 006254 call g24_head_ptr2regc +0x3189 006255 call disable_user +0x318a 006256 add regc ,offset_24g_sta_pid ,rega +0x318b 006257 ifetch 1 ,rega +0x318c 006259 add regc ,offset_24g_last_pid ,rega +0x318d 006260 ifetcht 1 ,rega +0x318e 006262 isub temp ,null +0x318f 006263 ncall enable_user ,zero +0x3190 006264 add regc ,offset_24g_sta_pid ,rega +0x3191 006265 ifetch 1 ,rega +0x3192 006267 add regc ,offset_24g_last_pid ,contw +0x3193 006268 istore 1 ,contw +0x3194 006270 add regc ,offset_24g_sta_crc ,rega +0x3195 006271 ifetch 3 ,rega +0x3196 006273 add regc ,offset_24g_last_crc ,rega +0x3197 006274 ifetcht 3 ,rega +0x3198 006276 isub temp ,null +0x3199 006277 ncall enable_user ,zero +0x319a 006278 add regc ,offset_24g_sta_crc ,rega +0x319b 006279 ifetch 3 ,rega +0x319c 006281 add regc ,offset_24g_last_crc ,contw +0x319d 006283 branch g24_contw_istore_3byte +: 006285 g24_data_type1: +0x319e 006286 call g24_ch_timer_reinit +0x319f 006287 call g24_fetch_mem_abort_pac +0x31a0 006288 store 1 ,mem_temp +0x31a1 006290 call g24_fetcht_mem_rxdata_temp +0x31a2 006291 fetch 1 ,mem_temp +0x31a3 006293 isolate1 bit_abort ,temp +0x31a4 006294 setflag true ,0 ,pdata +0x31a5 006295 add regc ,offset_24g_abort_pac ,contw +0x31a6 006296 istore 1 ,contw +0x31a7 006298 beq 1 ,g24_data_attemp_mouse +0x31a8 006299 call g24_fetch_mem_hop_pac +0x31a9 006301 call g24_fetcht_mem_rxdata_temp +0x31aa 006303 isolate1 bit_hop ,temp +0x31ab 006304 setflag true ,0 ,pdata +0x31ac 006305 call g24_store_mem_hop_pac +0x31ad 006307 add regc ,offset_24g_cb_rxdata_type1 ,rega +0x31ae 006308 ifetch 2 ,rega +0x31af 006310 branch callback_func +: 006312 dongle_rxdata_type1: +0x31b0 006313 setarg ms_report_id +0x31b1 006314 store 1 ,mem_usb_mouse_data +0x31b2 006315 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b3 006317 istore 7 ,contw +0x31b4 006318 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b5 006320 ncall g24_ms_enable_blank_data_forcibly ,blank +0x31b6 006321 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b7 006323 call g24_ms_disable_blank_data_forcibly ,blank +: 006324 g24_data_type1_usbtx_enable: +0x31b8 006325 jam usb_ep2_ms ,mem_usb_ep2_data +: 006326 g24_data_type1_usbtx_enable_ep2: +0x31b9 006327 fetch 1 ,mem_usb_tx_enable +0x31ba 006328 set1 2 ,pdata +0x31bb 006329 store 1 ,mem_usb_tx_enable +0x31bc 006330 rtn +: 006332 g24_ms_enable_blank_data_forcibly: +0x31bd 006333 setarg 1 +0x31be 006334 call g24_store_mem_ms_blank_data_enable +0x31bf 006336 setarg timer_ms_blank_delay +0x31c0 006337 arg timer_ms_blank ,queue +0x31c1 006338 branch timer_init +: 006339 g24_ms_disable_blank_data_forcibly: +0x31c2 006340 call g24_set0_mem_ms_blank_data_enable +0x31c3 006342 setarg 0 +0x31c4 006343 arg timer_ms_blank ,queue +0x31c5 006344 branch timer_init +: 006346 g24_data_type2: +0x31c6 006347 call g24_fetcht_mem_rxdata_temp +0x31c7 006349 isolate1 bit_abort ,temp +0x31c8 006350 branch g24_data_attemp_kbd ,true +0x31c9 006351 arg mem_usb_kb_data ,contw +0x31ca 006352 call g24_data_type2_reverse_data +0x31cb 006353 fetch 8 ,mem_usb_kb_data +0x31cc 006354 ncall g24_kb_enable_blank_data_forcibly ,blank +0x31cd 006355 fetch 8 ,mem_usb_kb_data +0x31ce 006356 call g24_kb_disable_blank_data_forcibly ,blank +0x31cf 006357 call g24_head_ptr2regc +0x31d0 006358 fetch 8 ,mem_usb_kb_data +0x31d1 006359 arg offset_24g_kb_data_sta_data ,rega +0x31d2 006360 call g24_set_contw_with_temp +0x31d3 006361 istore 8 ,contw +0x31d4 006363 setarg offset_24g_kb_data_last_data +0x31d5 006364 iadd regc ,rega +0x31d6 006365 ifetcht 8 ,rega +0x31d7 006367 isub temp ,null +0x31d8 006368 ncall g24_kb_data_dispose ,zero +0x31d9 006369 setarg offset_24g_kb_data_sta_data +0x31da 006370 iadd regc ,rega +0x31db 006371 ifetch 8 ,rega +0x31dc 006373 arg offset_24g_kb_data_last_data ,rega +0x31dd 006374 call g24_set_contw_with_temp +0x31de 006375 istore 8 ,contw +0x31df 006377 branch g24_rx_interrupt_clear +: 006379 g24_data_type2_reverse_data: +0x31e0 006380 setarg offset_24g_rxdata_temp_add2 +0x31e1 006381 iadd regc ,contr +0x31e2 006383 arg 9 ,loopcnt +0x31e3 006384 branch reverse_byte +: 006386 g24_kb_enable_blank_data_forcibly: +0x31e4 006387 setarg 1 +0x31e5 006388 call g24_store_mem_kb_blank_data_enable +0x31e6 006390 setarg timer_kb_blank_delay +0x31e7 006391 arg timer_kb_blank ,queue +0x31e8 006392 branch timer_init +: 006394 g24_kb_disable_blank_data_forcibly: +0x31e9 006395 call g24_set0_mem_kb_blank_data_enable +0x31ea 006397 setarg 0 +0x31eb 006398 arg timer_kb_blank ,queue +0x31ec 006399 branch timer_init +: 006401 g24_kb_data_dispose: +: 006402 g24_kb_data_into_ep1_fifo: +0x31ed 006403 jam usb_ep1_kb ,mem_usb_ep1_data +0x31ee 006404 fetch 1 ,mem_usb_tx_enable +0x31ef 006405 set1 1 ,pdata +0x31f0 006406 store 1 ,mem_usb_tx_enable +0x31f1 006407 rtn +: 006409 g24_data_type3: +0x31f2 006410 arg mem_usb_kb_multikey ,contw +0x31f3 006411 call g24_data_type2_reverse_data +0x31f4 006412 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f5 006413 ncall g24_kb_mul_enable_blank_data_forcibly ,blank +0x31f6 006414 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f7 006415 call g24_kb_mul_disable_blank_data_forcibly ,blank +0x31f8 006416 call g24_head_ptr2regc +0x31f9 006417 fetch 3 ,mem_usb_kb_multikey +0x31fa 006418 arg offset_24g_kb_multikey_sta_data ,rega +0x31fb 006419 call g24_set_contw_with_temp_store_3byte +0x31fc 006421 setarg offset_24g_kb_multikey_last_data +0x31fd 006422 iadd regc ,rega +0x31fe 006423 ifetcht 3 ,rega +0x31ff 006425 isub temp ,null +0x3200 006426 ncall g24_kb_mul_data_into_ep2_fifo ,zero +0x3201 006427 setarg offset_24g_kb_multikey_sta_data +0x3202 006428 iadd regc ,rega +0x3203 006429 ifetch 3 ,rega +0x3204 006431 arg offset_24g_kb_multikey_last_data ,rega +0x3205 006432 call g24_set_contw_with_temp_store_3byte +0x3206 006434 branch g24_rx_interrupt_clear +: 006436 g24_kb_mul_data_into_ep2_fifo: +0x3207 006437 jam usb_ep2_multikey ,mem_usb_ep2_data +0x3208 006438 branch g24_data_type1_usbtx_enable_ep2 +: 006440 g24_kb_mul_enable_blank_data_forcibly: +0x3209 006441 setarg 1 +0x320a 006442 call g24_store_mem_kb_mul_blank_data_enable +0x320b 006444 setarg timer_kb_mul_blank_delay +0x320c 006445 arg timer_kb_mul_blank ,queue +0x320d 006446 branch timer_init +: 006448 g24_kb_mul_disable_blank_data_forcibly: +0x320e 006449 call g24_set0_mem_kb_mul_blank_data_enable +0x320f 006451 setarg 0 +0x3210 006452 arg timer_kb_mul_blank ,queue +0x3211 006453 branch timer_init +: 006455 g24_data_attemp: +0x3212 006456 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3213 006458 beq datatype_mouse ,g24_data_attemp_mouse +0x3214 006459 beq datatype_keyboard ,g24_data_attemp_kbd +0x3215 006460 rtn +: 006461 g24_data_attemp_mouse: +0x3216 006462 setarg offset_24g_rxdata_temp_add4 +0x3217 006463 call g24_set_rega_ifetch_4byte +0x3218 006464 arg offset_24g_mouse_addr ,rega +0x3219 006465 call g24_set_contw_with_temp +0x321a 006468 branch g24_contw_istore_4byte +: 006470 g24_data_attemp_kbd: +0x321b 006471 setarg offset_24g_rxdata_temp_add4 +0x321c 006472 call g24_set_rega_ifetch_4byte +0x321d 006473 arg offset_24g_kb_addr ,rega +0x321e 006474 call g24_set_contw_with_temp +0x321f 006477 branch g24_contw_istore_4byte +: 006479 g24_store_mem_24g_mode: +0x3220 006480 call g24_head_ptr2regc +0x3221 006481 add regc ,offset_24g_mode ,contw +0x3222 006482 istore 1 ,contw +0x3223 006483 rtn +: 006485 g24_fetch_mem_device_addr: +0x3224 006486 call g24_head_ptr2regc +0x3225 006487 add regc ,offset_24g_device_addr ,rega +0x3226 006488 branch g24_rega_ifetch_4byte +: 006489 g24_store_mem_device_addr: +0x3227 006490 call g24_head_ptr2regc +0x3228 006491 add regc ,offset_24g_device_addr ,contw +0x3229 006492 branch g24_contw_istore_4byte +: 006494 g24_fetch_mem_addr: +0x322a 006495 add regc ,offset_24g_addr ,rega +0x322b 006496 branch g24_rega_ifetch_4byte +: 006497 g24_store_mem_addr: +0x322c 006498 add regc ,offset_24g_addr ,contw +: 006499 g24_contw_istore_4byte: +0x322d 006500 istore 4 ,contw +0x322e 006501 rtn +: 006503 g24_store_mem_ch: +0x322f 006504 add regc ,offset_24g_ch ,contw +0x3230 006505 branch g24_contw_istore_1byte +: 006507 g24_set0_mem_pid: +0x3231 006508 setarg 0 +: 006509 g24_store_mem_pid: +0x3232 006510 call g24_head_ptr2regc +0x3233 006511 add regc ,offset_24g_pid ,contw +0x3234 006512 branch g24_contw_istore_1byte +: 006514 g24_store_mem_txpayload: +0x3235 006515 add regc ,offset_24g_txpayload ,contw +0x3236 006516 branch g24_contw_istore_1byte +: 006518 g24_set4_mem_max_retry: +0x3237 006519 setarg 4 +: 006520 g24_store_mem_max_retry: +0x3238 006521 add regc ,offset_24g_max_retry ,contw +0x3239 006522 branch g24_contw_istore_1byte +: 006524 g24_fetch_mem_data_type: +0x323a 006525 add regc ,offset_24g_data_type ,rega +0x323b 006526 branch g24_rega_ifetch_1byte +: 006527 g24_store_mem_data_type: +0x323c 006528 add regc ,offset_24g_data_type ,contw +0x323d 006529 branch g24_contw_istore_1byte +: 006531 g24_set2_mem_sync_cnt: +0x323e 006532 setarg 2 +: 006533 g24_store_mem_sync_cnt: +0x323f 006534 add regc ,offset_24g_sync_cnt ,contw +0x3240 006535 branch g24_contw_istore_1byte +: 006537 g24_set1_mem_rf_last_sta: +0x3241 006538 setarg 1 +: 006539 g24_store_mem_rf_last_sta: +0x3242 006540 call g24_head_ptr2regc +0x3243 006541 add regc ,offset_24g_rf_last_sta ,contw +0x3244 006542 branch g24_contw_istore_1byte +: 006544 g24_fetch_mem_hop_pac: +0x3245 006545 call g24_head_ptr2regc +0x3246 006546 add regc ,offset_24g_hop_pac ,rega +0x3247 006547 branch g24_rega_ifetch_1byte +: 006548 g24_set1_mem_hop_pac: +0x3248 006549 setarg 1 +: 006550 g24_store_mem_hop_pac: +0x3249 006551 call g24_head_ptr2regc +0x324a 006552 add regc ,offset_24g_hop_pac ,contw +0x324b 006553 branch g24_contw_istore_1byte +: 006555 g24_fetch_mem_abort_pac: +0x324c 006556 call g24_head_ptr2regc +0x324d 006557 add regc ,offset_24g_abort_pac ,rega +0x324e 006558 branch g24_rega_ifetch_1byte +: 006559 g24_set1_mem_abort_pac: +0x324f 006560 setarg 1 +: 006561 g24_store_mem_abort_pac: +0x3250 006562 call g24_head_ptr2regc +0x3251 006563 add regc ,offset_24g_abort_pac ,contw +0x3252 006564 branch g24_contw_istore_1byte +: 006566 g24_fetch_mem_pairing_sm: +0x3253 006567 call g24_head_ptr2regc +0x3254 006568 add regc ,offset_24g_pairing_sm ,rega +0x3255 006569 branch g24_rega_ifetch_1byte +: 006570 g24_store_mem_pairing_sm: +0x3256 006571 add regc ,offset_24g_pairing_sm ,contw +0x3257 006572 branch g24_contw_istore_1byte +: 006574 g24_fetch_mem_rf_hop_ch: +0x3258 006575 add regc ,offset_24g_rf_hop_ch ,rega +0x3259 006576 branch g24_rega_ifetch_1byte +: 006577 g24_set0_mem_rf_hop_ch: +0x325a 006578 setarg 0 +: 006579 g24_store_mem_rf_hop_ch: +0x325b 006580 add regc ,offset_24g_rf_hop_ch ,contw +0x325c 006581 branch g24_contw_istore_1byte +: 006583 g24_fetch_mem_rf_work_stage: +0x325d 006584 add regc ,offset_24g_rf_work_stage ,rega +0x325e 006585 branch g24_rega_ifetch_1byte +: 006587 g24_fetch_mem_rxbuf_add1: +0x325f 006588 add regc ,offset_24g_rxbuf_add1 ,rega +0x3260 006589 branch g24_rega_ifetch_1byte +: 006591 g24_fetch_mem_check_dongle_times: +0x3261 006592 add regc ,offset_24g_check_dongle_times ,rega +0x3262 006593 branch g24_rega_ifetch_1byte +: 006594 g24_set0_mem_check_dongle_times: +0x3263 006595 setarg 0 +: 006596 g24_store_mem_check_dongle_times: +0x3264 006597 call g24_head_ptr2regc +0x3265 006598 add regc ,offset_24g_check_dongle_times ,contw +0x3266 006599 branch g24_contw_istore_1byte +: 006601 g24_store_mem_tx_power: +0x3267 006602 call g24_head_ptr2regc +0x3268 006603 add regc ,offset_tx_power_temp ,rega +0x3269 006604 ifetch 1 ,rega +: 006605 g24_store_mem_txpower: +0x326a 006606 store 1 ,mem_tx_power +0x326b 006607 rtn +: 006609 g24_store_mem_tx_power_temp: +0x326c 006610 call g24_head_ptr2regc +0x326d 006611 fetch 1 ,mem_tx_power +0x326e 006613 add regc ,offset_tx_power_temp ,contw +0x326f 006614 branch g24_contw_istore_1byte +: 006616 g24_fetch_mem_power_ctrl_pac: +0x3270 006617 add regc ,offset_power_ctrl_packet_cnt ,rega +0x3271 006618 branch g24_rega_ifetch_1byte +: 006620 g24_store_mem_power_ctrl_level: +0x3272 006621 add regc ,offset_power_ctrl_level ,contw +0x3273 006622 branch g24_contw_istore_1byte +: 006624 g24_fetcht_mem_rxdata_temp: +0x3274 006625 setarg offset_24g_rxdata_temp +: 006626 g24_set_rega_ifetcht_1byte: +0x3275 006627 iadd regc ,rega +0x3276 006628 ifetcht 1 ,rega +0x3277 006629 rtn +: 006631 g24_fetch_mem_rf_laststa: +0x3278 006632 setarg offset_24g_rf_laststa +0x3279 006633 branch g24_set_rega_ifetch_1byte +: 006634 g24_set0_mem_rf_laststa: +0x327a 006635 setarg 0 +: 006636 g24_store_mem_rf_laststa: +0x327b 006637 arg offset_24g_rf_laststa ,rega +0x327c 006638 branch g24_set_contw_with_regb_store_1byte +: 006640 g24_fetch_mem_rx_addr: +0x327d 006641 setarg offset_24g_rx_addr +: 006642 g24_set_rega_ifetch_4byte: +0x327e 006643 call g24_set_rega +: 006644 g24_rega_ifetch_4byte: +0x327f 006645 ifetch 4 ,rega +0x3280 006646 rtn +: 006648 g24_fetch_mem_time_slice: +0x3281 006649 setarg offset_24g_time_slice +0x3282 006650 branch g24_set_rega_ifetch_1byte +: 006651 g24_set0_mem_time_slice: +0x3283 006652 setarg 0 +: 006653 g24_store_mem_time_slice: +0x3284 006654 arg offset_24g_time_slice ,rega +0x3285 006655 branch g24_set_contw_with_regb_store_1byte +: 006657 g24_set0_mem_mode_switch: +0x3286 006658 setarg 0 +: 006659 g24_store_mem_mode_switch: +0x3287 006660 arg offset_24g_mode_switch ,rega +0x3288 006661 branch g24_set_contw_with_regb_store_1byte +: 006663 g24_store_mem_bind_payload: +0x3289 006664 arg offset_24g_bind_payload ,rega +0x328a 006665 branch g24_set_contw_with_regb_store_1byte +: 006667 g24_fetch_mem_bind_device_status: +0x328b 006668 setarg offset_dongle_bind_device_status +0x328c 006669 branch g24_set_rega_ifetch_1byte +: 006670 g24_store_mem_bind_device_status: +0x328d 006671 arg offset_dongle_bind_device_status ,rega +0x328e 006672 branch g24_set_contw_with_regb_store_1byte +: 006674 g24_fetch_mem_dongle_work_mode: +0x328f 006675 setarg offset_dongle_work_mode +0x3290 006676 branch g24_set_rega_ifetch_1byte +: 006677 g24_set_work_mem_dongle_work_mode: +0x3291 006678 setarg dongle_work +: 006679 g24_store_mem_dongle_work_mode: +0x3292 006680 arg offset_dongle_work_mode ,rega +0x3293 006681 branch g24_set_contw_with_regb_store_1byte +: 006683 g24_fetch_mem_dongle_mode_init: +0x3294 006684 setarg offset_dongle_mode_init +0x3295 006685 branch g24_set_rega_ifetch_1byte +: 006686 g24_set0_mem_dongle_mode_init: +0x3296 006687 setarg clear_init +: 006688 g24_store_mem_dongle_mode_init: +0x3297 006689 arg offset_dongle_mode_init ,rega +0x3298 006690 branch g24_set_contw_with_regb_store_1byte +: 006692 g24_set0_mem_ackpayload_enable: +0x3299 006693 setarg 0 +: 006694 g24_store_mem_ackpayload_enable: +0x329a 006695 arg offset_24g_ackpayload_enable ,rega +0x329b 006696 branch g24_set_contw_with_regb_store_1byte +: 006697 g24_set1_mem_ackpayload_enable: +0x329c 006698 setarg 1 +0x329d 006699 branch g24_store_mem_ackpayload_enable +: 006701 g24_fetch_mem_rxdata_temp_add3_7byte: +0x329e 006702 setarg offset_24g_rxdata_temp_add3 +0x329f 006703 call g24_set_rega +0x32a0 006704 ifetch 7 ,rega +0x32a1 006705 rtn +: 006707 g24_fetch_mem_nodata_timer_enable: +0x32a2 006708 setarg offset_24g_nodata_timer_enable +0x32a3 006709 branch g24_set_rega_ifetch_1byte +: 006710 g24_set0_mem_nodata_timer_enable: +0x32a4 006711 setarg 0 +: 006712 g24_store_mem_nodata_timer_enable: +0x32a5 006713 arg offset_24g_nodata_timer_enable ,rega +0x32a6 006714 branch g24_set_contw_with_regb_store_1byte +: 006716 g24_set0_mem_ms_blank_data_enable: +0x32a7 006717 setarg 0 +: 006718 g24_store_mem_ms_blank_data_enable: +0x32a8 006719 arg offset_24g_ms_blank_data_enable ,rega +0x32a9 006720 branch g24_set_contw_with_regb_store_1byte +: 006722 g24_set0_mem_kb_blank_data_enable: +0x32aa 006723 setarg 0 +: 006724 g24_store_mem_kb_blank_data_enable: +0x32ab 006725 arg offset_24g_kb_blank_data_enable ,rega +0x32ac 006726 branch g24_set_contw_with_regb_store_1byte +: 006728 g24_set0_mem_kb_mul_blank_data_enable: +0x32ad 006729 setarg 0 +: 006730 g24_store_mem_kb_mul_blank_data_enable: +0x32ae 006731 arg offset_24g_kb_mul_blank_data_enable ,rega +0x32af 006732 branch g24_set_contw_with_regb_store_1byte +: 006734 g24_store_mem_power_ctrl_threshold_up: +0x32b0 006735 arg offset_power_ctrl_threshold_up ,rega +0x32b1 006736 branch g24_set_contw_with_regb_store_1byte +: 006738 g24_store_mem_power_ctrl_threshold_down: +0x32b2 006739 arg offset_power_ctrl_threshold_down ,rega +: 006740 g24_set_contw_with_regb_store_1byte: +0x32b3 006741 call g24_set_contw_with_regb +: 006742 g24_contw_istore_1byte: +0x32b4 006743 istore 1 ,contw +0x32b5 006744 rtn +: 006746 g24_fetch_mem_pair_mode: +0x32b6 006747 setarg offset_24g_pair_mode +0x32b7 006748 branch g24_set_rega_ifetch_1byte +: 006750 g24_store_mem_pair_mode: +0x32b8 006751 arg offset_24g_pair_mode ,rega +0x32b9 006752 branch g24_set_contw_with_regb_store_1byte +: 006754 g24_store_mem_pair_txpower: +0x32ba 006755 setarg offset_24g_pair_txpower +0x32bb 006756 call g24_set_rega_ifetch_1byte +0x32bc 006757 branch g24_store_mem_txpower +: 006759 g24_fetch_mem_rxdata_temp_add3_1byte: +0x32bd 006760 setarg offset_24g_rxdata_temp_add3 +0x32be 006761 branch g24_set_rega_ifetch_1byte +: 006763 g24_set_contw_with_temp: +0x32bf 006764 copy pdata ,temp +0x32c0 006765 copy rega ,pdata +0x32c1 006766 iadd regc ,contw +0x32c2 006767 copy temp ,pdata +0x32c3 006768 rtn +: 006770 g24_set_contw_with_temp_store_3byte: +0x32c4 006771 call g24_set_contw_with_temp +: 006772 g24_contw_istore_3byte: +0x32c5 006773 istore 3 ,contw +0x32c6 006774 rtn +: 006776 g24_set_contw_with_regb: +0x32c7 006777 call g24_head_ptr2regc +: 006778 g24_set_contw_with_regb2: +0x32c8 006779 copy pdata ,regb +0x32c9 006780 copy rega ,pdata +0x32ca 006781 iadd regc ,contw +0x32cb 006782 copy regb ,pdata +0x32cc 006783 rtn +: 006785 g24_set_rega: +0x32cd 006786 call g24_head_ptr2regc +0x32ce 006787 iadd regc ,rega +0x32cf 006788 rtn +: 006790 g24_set_rega_ifetch_1byte: +0x32d0 006791 call g24_set_rega +: 006792 g24_rega_ifetch_1byte: +0x32d1 006793 ifetch 1 ,rega +0x32d2 006794 rtn +: 006796 g24_set_rega_ifetcht_4byte: +0x32d3 006797 call g24_set_rega +0x32d4 006798 ifetcht 4 ,rega +0x32d5 006799 rtn +: 006801 g24_mem_set0: +0x32d6 006802 setarg 0 +0x32d7 006803 branch g24_contw_istore_1byte +: 006807 app_init: +0x32d8 006808 bpatch patch18_4 ,mem_patch18 +0x32d9 006809 fetch 1 ,mem_device_option +0x32da 006810 branch app_init ,blank +0x32db 006812 beq dvc_op_dongle ,dongle_init +0x32dc 006813 beq dvc_op_antilost ,antilost_init +0x32dd 006814 beq dvc_op_shutter ,shutter_init +0x32de 006815 beq dvc_op_module ,module_init +0x32df 006816 beq dvc_op_car ,car_init +0x32e0 006817 beq dvc_op_remote_car ,remote_car_init +0x32e1 006818 bbit1 dvc_op_mouse ,mouse_init +0x32e2 006819 rtn +: 006821 app_lpm_init: +0x32e3 006822 bpatch patch18_5 ,mem_patch18 +0x32e4 006823 jam 0 ,mem_tester_emulate +0x32e5 006824 jam 0 ,mem_debug_config +0x32e6 006825 jam 0 ,mem_lch_code +0x32e7 006826 setarg 0 +0x32e8 006827 store 5 ,mem_sp_state_start +0x32e9 006828 fetch 1 ,mem_device_option +0x32ea 006829 branch app_lpm_init ,blank +0x32eb 006830 beq dvc_op_module ,module_lpm_init +: 006831 app_lpm_init0: +0x32ec 006832 rtn +: 006835 app_process_idle: +0x32ed 006836 call ui_dispatch +0x32ee 006837 call check_51cmd +0x32ef 006838 call app_process_bb_event +0x32f0 006839 fetch 2 ,mem_cb_idle_process +0x32f1 006840 branch callback_func +: 006842 app_process_bt: +0x32f2 006843 fetch 2 ,mem_cb_bt_process +0x32f3 006844 branch callback_func +: 006846 app_process_ble: +0x32f4 006847 fetch 2 ,mem_cb_le_process +0x32f5 006848 branch callback_func +: 006850 app_process_bb_event: +0x32f6 006851 bpatch patch18_6 ,mem_patch18 +0x32f7 006853 arg mem_ipc_fifo_bt2c51 ,rega +0x32f8 006854 call fifo_out +0x32f9 006855 rtn blank +0x32fa 006857 copy pdata ,regc +0x32fb 006858 call app_event_normal_process +0x32fc 006859 branch app_process_bb_event_priority +: 006861 app_discard_event: +0x32fd 006862 arg 0 ,regc +0x32fe 006863 rtn +: 006868 app_event_normal_process: +0x32ff 006869 beq bt_evt_bb_connected ,app_evt_bt_conn +0x3300 006870 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +0x3301 006871 beq bt_evt_setup_complete ,app_evt_setup_complete +0x3302 006872 beq bt_evt_hid_handshake ,app_evt_hid_handshake +0x3303 006873 beq bt_evt_hid_connected ,app_bb_event_hid_connected +0x3304 006874 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +0x3305 006875 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +0x3306 006876 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +0x3307 006877 beq bt_evt_le_connected ,app_le_event_bb_connected +0x3308 006878 beq bt_evt_le_disconnected ,app_le_event_bb_disconn +0x3309 006879 beq bt_evt_reconn_started ,app_event_reconn_start +0x330a 006880 beq bt_evt_enter_sniff ,app_event_enter_sniff +0x330b 006881 beq bt_evt_exit_sniff ,app_event_exit_sniff +0x330c 006883 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +0x330d 006884 beq bt_evt_linkkey_generate ,app_event_linkkey_generate +0x330e 006885 beq bt_evt_switch_fail_master ,app_event_switch_fail_master +0x330f 006886 beq bt_evt_switch_success_master ,app_event_switch_success +0x3310 006887 rtn +: 006890 app_evt_bt_conn: +0x3311 006891 fetch 2 ,mem_ui_state_map +0x3312 006892 set1 ui_state_bt_connected ,pdata +0x3313 006893 store 2 ,mem_ui_state_map +0x3314 006894 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3315 006895 set0 app_disc_by_button ,pdata +0x3316 006896 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3317 006897 rtn +: 006899 app_event_switch_success: +0x3318 006900 jam 0 ,mem_switch_fail_master_count +0x3319 006901 rtn +: 006903 app_event_switch_fail_master: +0x331a 006904 fetch 1 ,mem_switch_fail_master_count +0x331b 006905 increase 1 ,pdata +0x331c 006906 store 1 ,mem_switch_fail_master_count +0x331d 006907 sub pdata ,1 ,null +0x331e 006908 branch app_bt_role_switch ,positive +0x331f 006909 jam 0 ,mem_switch_fail_master_count +0x3320 006910 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3321 006911 set1 app_disc_switch_fail ,pdata +0x3322 006912 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3323 006913 branch app_bt_disconnect +: 006915 app_process_bb_event_priority: +0x3324 006916 fetch 2 ,mem_cb_bb_event_process +0x3325 006917 branch callback_func +: 006919 app_check_wake_lock: +0x3326 006920 fetch 2 ,mem_cb_check_wakelock +0x3327 006921 branch callback_func +: 006923 app_will_enter_lpm: +0x3328 006924 fetch 2 ,mem_cb_before_lpm +0x3329 006925 branch callback_func +: 006927 app_event_linkkey_generate: +0x332a 006928 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332b 006929 set1 app_disc_after_pairing ,pdata +0x332c 006930 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332d 006931 branch app_bt_store_reconn_info +: 006933 app_event_reconn_start: +0x332e 006934 fetch 2 ,mem_ui_state_map +0x332f 006935 set1 ui_state_bt_reconnect ,pdata +0x3330 006936 store 2 ,mem_ui_state_map +0x3331 006937 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3332 006938 set1 app_disc_after_reconn ,pdata +0x3333 006939 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3334 006940 rtn +: 006942 app_evt_setup_complete: +0x3335 006943 fetch 2 ,mem_ui_state_map +0x3336 006944 set1 ui_state_bt_setup_complete ,pdata +0x3337 006945 store 2 ,mem_ui_state_map +0x3338 006946 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3339 006947 set1 app_disc_after_setup_done ,pdata +0x333a 006948 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x333b 006949 rtn +: 006951 app_evt_hid_handshake: +0x333c 006952 fetch 2 ,mem_ui_state_map +0x333d 006953 set1 ui_state_bt_hid_handshake ,pdata +0x333e 006954 store 2 ,mem_ui_state_map +0x333f 006955 rtn +: 006957 app_event_enter_sniff: +0x3340 006958 fetch 2 ,mem_ui_state_map +0x3341 006959 set1 ui_state_bt_sniff ,pdata +0x3342 006960 store 2 ,mem_ui_state_map +0x3343 006961 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3344 006962 set1 app_disc_after_sniff ,pdata +0x3345 006963 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3346 006964 rtn +: 006966 app_event_exit_sniff: +0x3347 006967 fetch 2 ,mem_ui_state_map +0x3348 006968 set0 ui_state_bt_sniff ,pdata +0x3349 006969 store 2 ,mem_ui_state_map +0x334a 006970 rtn +: 006972 app_le_event_bb_connected: +0x334b 006973 fetch 2 ,mem_ui_state_map +0x334c 006974 set1 ui_state_ble_connected ,pdata +0x334d 006975 store 2 ,mem_ui_state_map +0x334e 006976 rtn +: 006978 app_le_event_bb_disconn: +0x334f 006979 fetch 2 ,mem_ui_state_map +0x3350 006980 set0 ui_state_ble_connected ,pdata +0x3351 006981 store 2 ,mem_ui_state_map +0x3352 006982 branch app_lpm_mult_disable +: 006984 app_bb_event_hid_connected: +0x3353 006985 fetch 2 ,mem_ui_state_map +0x3354 006986 set1 ui_state_bt_hid_conn ,pdata +0x3355 006987 store 2 ,mem_ui_state_map +0x3356 006988 rtn +: 006990 app_evt_button_long_pressed: +0x3357 006991 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3358 006992 set1 app_disc_by_button ,pdata +0x3359 006993 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335a 006994 rtn +: 006996 app_event_ml2cap_conn_refused: +0x335b 006997 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335c 006998 set1 app_disc_l2cap_refused ,pdata +0x335d 006999 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335e 007000 branch app_bt_disconnect +: 007003 app_evt_timer: +0x335f 007004 bpatch patch18_7 ,mem_patch18 +0x3360 007005 store 1 ,mem_app_evt_timer_count +: 007006 app_evt_100ms_loop: +0x3361 007007 fetch 1 ,mem_app_evt_timer_count +0x3362 007008 rtn blank +0x3363 007009 increase -1 ,pdata +0x3364 007010 store 1 ,mem_app_evt_timer_count +0x3365 007011 call ui_button_polling +0x3366 007012 call app_lpm_wake_auto_lock_timer +0x3367 007013 call app_unsniff_delay_timer +0x3368 007014 call app_discovery_timer +0x3369 007015 call flash_write_spi_sm_timer +0x336a 007016 fetch 2 ,mem_cb_event_timer +0x336b 007017 call callback_func +0x336c 007018 branch app_evt_100ms_loop +: 007023 timer_single_step: +0x336d 007024 ifetch 1 ,regc +0x336e 007025 rtn blank +0x336f 007026 pincrease -1 +0x3370 007027 istore 1 ,regc +0x3371 007028 nrtn blank +0x3372 007029 copy regb ,pdata +0x3373 007030 branch callback_func +: 007034 timer_single_step_2b: +0x3374 007035 ifetch 2 ,regc +0x3375 007036 rtn blank +0x3376 007037 pincrease -1 +0x3377 007038 istore 2 ,regc +0x3378 007039 nrtn blank +0x3379 007040 copy regb ,pdata +0x337a 007041 branch callback_func +: 007043 app_power_timer: +0x337b 007044 fetcht 2 ,mem_power_param_ptr +0x337c 007045 add temp ,power_timer_offset ,regc +0x337d 007046 arg app_power_timer_timeout ,regb +0x337e 007047 branch timer_single_step +: 007049 app_power_timer_timeout: +0x337f 007050 call app_got_power_state_common +0x3380 007051 beq power_starting ,app_enter_power_stanby_state +: 007052 app_enter_power_off_state: +0x3381 007053 branch app_enter_hibernate +: 007054 app_enter_power_stanby_state: +0x3382 007055 setarg power_standby +0x3383 007056 istore 1 ,regc +0x3384 007057 add temp ,power_standby_cb_offset ,regb +: 007058 app_power_cb_common: +0x3385 007059 ifetch 2 ,regb +0x3386 007060 branch callback_func +: 007062 app_unsniff_delay_timer: +0x3387 007063 arg mem_unsniff2sniff_timer_count ,regc +0x3388 007064 arg app_unsniff_delay_timeout ,regb +0x3389 007065 branch timer_single_step +: 007067 app_unsniff_delay_timeout: +0x338a 007068 call context_check_idle +0x338b 007069 branch app_bt_enter_sniff ,zero +0x338c 007070 rtn +: 007073 app_discovery_timer: +0x338d 007074 arg mem_discovery_timeout_timer_count ,regc +0x338e 007075 arg app_discovery_timeout ,regb +0x338f 007076 branch timer_single_step_2b +: 007078 app_discovery_timeout: +0x3390 007079 call app_bt_stop_discovery +0x3391 007080 call app_led_off +0x3392 007081 fetch 2 ,mem_cb_discovry_timeout +0x3393 007082 branch callback_func +: 007085 app_bb_event_reconn_failed: +0x3394 007086 call app_disconn_reason_flag_clear +: 007087 app_clear_reconnect_flag: +0x3395 007088 fetch 2 ,mem_ui_state_map +0x3396 007089 set0 ui_state_bt_reconnect ,pdata +0x3397 007090 store 2 ,mem_ui_state_map +0x3398 007091 rtn +: 007093 app_bb_event_bb_disconn: +0x3399 007094 jam 0 ,mem_unsniff2sniff_timer_count +0x339a 007095 fetch 2 ,mem_ui_state_map +0x339b 007096 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +0x339c 007097 isolate0 ui_state_bt_setup_complete ,pdata +0x339d 007098 call app_discard_event ,true +: 007099 app_bb_event_bb_reconn_disconn: +0x339e 007100 bpatch patch19_0 ,mem_patch19 +0x339f 007101 fetch 2 ,mem_ui_state_map +0x33a0 007102 set0 ui_state_bt_connected ,pdata +0x33a1 007103 set0 ui_state_bt_setup_complete ,pdata +0x33a2 007104 set0 ui_state_bt_hid_conn ,pdata +0x33a3 007105 set0 ui_state_bt_hid_handshake ,pdata +0x33a4 007106 set0 ui_state_bt_reconnect ,pdata +0x33a5 007107 store 2 ,mem_ui_state_map +0x33a6 007108 branch app_lpm_mult_disable +: 007110 app_bb_hibernate: +0x33a7 007111 call app_disconn_reason_clear +0x33a8 007112 branch app_enter_hibernate +: 007115 app_disconn_reason_clear: +0x33a9 007116 setarg 0 +0x33aa 007117 store app_disc_rsn_size ,mem_app_disconn_reason +0x33ab 007118 rtn +: 007119 app_disconn_reason_flag_clear: +0x33ac 007120 setarg 0 +0x33ad 007121 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33ae 007122 rtn +: 007124 app_disconn_reason_collect_bt: +0x33af 007125 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b0 007126 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b1 007127 setarg 0 +0x33b2 007128 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b3 007129 rtn +: 007131 app_disconn_reason_collect_ble: +0x33b4 007132 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b5 007133 set1 app_disc_ble ,pdata +0x33b6 007134 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b7 007135 setarg 0 +0x33b8 007136 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b9 007137 rtn +: 007145 app_check_sniff: +0x33ba 007146 fetch 1 ,mem_ui_state_map +0x33bb 007147 isolate1 ui_state_bt_sniff ,pdata +0x33bc 007148 rtn +: 007156 app_initflag_store: +0x33bd 007157 setarg eeprom_init_flag +: 007158 app_flag_store: +0x33be 007159 store 2 ,mem_timeup +0x33bf 007160 bpatch patch19_1 ,mem_patch19 +0x33c0 007161 arg 2 ,temp +0x33c1 007162 arg mem_timeup ,rega +0x33c2 007163 arg eeprom_module_init_flag ,regb +0x33c3 007164 branch iicd_write_eep_data +: 007167 app_initflag_check: +0x33c4 007168 bpatch patch19_2 ,mem_patch19 +0x33c5 007169 arg 2 ,temp +0x33c6 007170 arg mem_pdatatemp ,rega +0x33c7 007171 arg eeprom_module_init_flag ,regb +0x33c8 007172 call iicd_read_eep_data +0x33c9 007173 fetch 2 ,mem_pdatatemp +0x33ca 007174 arg eeprom_init_flag ,temp +0x33cb 007175 isub temp ,null +0x33cc 007176 rtn +: 007179 app_start_auto_sniff: +0x33cd 007180 fetch 1 ,mem_unsniff2sniff_timer +0x33ce 007181 store 1 ,mem_unsniff2sniff_timer_count +0x33cf 007182 rtn +: 007184 app_get_lpm_wake_lock: +0x33d0 007185 arg wake_lock_app ,queue +0x33d1 007186 branch lpm_get_wake_lock +: 007188 app_put_lpm_wake_lock: +0x33d2 007189 arg wake_lock_app ,queue +0x33d3 007190 branch lpm_put_wake_lock +: 007192 app_lpm_wake_auto_lock: +0x33d4 007193 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +0x33d5 007194 branch app_get_lpm_wake_lock +: 007196 app_lpm_wake_auto_lock_timer: +0x33d6 007197 arg mem_wake_up_delay_timer ,regc +0x33d7 007198 arg app_put_lpm_wake_lock ,regb +0x33d8 007199 branch timer_single_step +: 007201 app_l2cap_flow_control_enable: +0x33d9 007202 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +0x33da 007203 rtn +: 007205 app_l2cap_flow_control_disable: +0x33db 007206 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +0x33dc 007207 rtn +: 007209 app_bt_set_pincode: +0x33dd 007210 jam bt_cmd_set_pin_code ,mem_fifo_temp +0x33de 007211 branch ui_ipc_send_cmd +: 007213 app_bt_role_switch: +0x33df 007214 jam bt_cmd_role_switch ,mem_fifo_temp +0x33e0 007215 branch ui_ipc_send_cmd +: 007217 app_bt_start_reconnect: +0x33e1 007218 bpatch patch19_3 ,mem_patch19 +0x33e2 007219 fetch 1 ,mem_app_connection_options +0x33e3 007220 store 1 ,mem_connection_options +0x33e4 007221 jam app_flag_reconnect ,mem_reconnect_flag +0x33e5 007222 jam bt_cmd_reconnect ,mem_fifo_temp +0x33e6 007223 branch ui_ipc_send_cmd +: 007225 app_bt_reconnect_cancel: +0x33e7 007226 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +0x33e8 007227 branch ui_ipc_send_cmd +: 007229 app_bt_disconnect: +0x33e9 007230 jam bt_cmd_disconnect ,mem_fifo_temp +0x33ea 007231 branch ui_ipc_send_cmd +: 007233 app_bt_start_discovery_short: +0x33eb 007234 fetch 2 ,mem_discovery_timeout +0x33ec 007235 store 2 ,mem_discovery_timeout_timer_count +: 007236 app_bt_start_discovery_led_blink: +0x33ed 007237 call app_led_start_blink +: 007238 app_bt_start_discovery: +0x33ee 007239 jam bt_cmd_start_discovery ,mem_fifo_temp +0x33ef 007240 branch ui_ipc_send_cmd +: 007242 app_bt_stop_discovery: +0x33f0 007243 setarg 0 +0x33f1 007244 store 2 ,mem_discovery_timeout_timer_count +0x33f2 007245 jam bt_cmd_stop_discovery ,mem_fifo_temp +0x33f3 007246 branch ui_ipc_send_cmd +: 007248 app_ble_start_direct_adv: +0x33f4 007249 jam bt_cmd_start_direct_adv ,mem_fifo_temp +0x33f5 007250 branch ui_ipc_send_cmd +: 007252 app_ble_stop_direct_adv: +0x33f6 007253 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +0x33f7 007254 branch ui_ipc_send_cmd +: 007256 app_ble_stop_adv: +0x33f8 007257 jam bt_cmd_stop_adv ,mem_fifo_temp +0x33f9 007258 branch ui_ipc_send_cmd +: 007260 app_ble_start_adv: +0x33fa 007261 jam bt_cmd_start_adv ,mem_fifo_temp +0x33fb 007262 branch ui_ipc_send_cmd +: 007264 app_ble_start_scan: +0x33fc 007265 jam bt_cmd_le_start_scan ,mem_fifo_temp +0x33fd 007266 branch ui_ipc_send_cmd +: 007268 app_ble_stop_scan: +0x33fe 007269 jam bt_cmd_le_stop_scan ,mem_fifo_temp +0x33ff 007270 branch ui_ipc_send_cmd +: 007272 app_ble_start_conn: +0x3400 007273 jam bt_cmd_le_start_conn ,mem_fifo_temp +0x3401 007274 branch ui_ipc_send_cmd +: 007276 app_ble_disconnect: +0x3402 007277 jam bt_cmd_le_disconnect ,mem_fifo_temp +0x3403 007278 branch ui_ipc_send_cmd +: 007280 app_led_start_blink: +0x3404 007281 jam bt_cmd_led_blink ,mem_fifo_temp +0x3405 007282 branch ui_ipc_send_cmd +: 007284 app_led_on: +0x3406 007285 jam bt_cmd_led_on ,mem_fifo_temp +0x3407 007286 branch ui_ipc_send_cmd +: 007288 app_led_stop_blink: +: 007289 app_led_off: +0x3408 007290 jam bt_cmd_led_off ,mem_fifo_temp +0x3409 007291 branch ui_ipc_send_cmd +: 007293 app_enter_hibernate: +0x340a 007294 jam bt_cmd_enter_hibernate ,mem_fifo_temp +0x340b 007295 branch ui_ipc_send_cmd +: 007297 app_bt_sniff_exit: +0x340c 007298 jam bt_cmd_exit_sniff ,mem_fifo_temp +0x340d 007299 branch ui_ipc_send_cmd +: 007301 app_bt_enter_sniff: +0x340e 007302 jam bt_cmd_enter_sniff ,mem_fifo_temp +0x340f 007303 branch ui_ipc_send_cmd +: 007305 app_ble_store_reconn_info: +0x3410 007306 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +0x3411 007307 branch ui_ipc_send_cmd +: 007309 app_bt_store_reconn_info: +0x3412 007310 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +0x3413 007311 branch ui_ipc_send_cmd +: 007313 app_store_reconn_info: +0x3414 007314 jam bt_cmd_store_reconn_info ,mem_fifo_temp +0x3415 007315 branch ui_ipc_send_cmd +: 007317 app_lpm_mult_enable: +0x3416 007318 set1 mark_lpm_mult_enable ,mark +0x3417 007319 rtn +: 007321 app_lpm_mult_disable: +0x3418 007322 set0 mark_lpm_mult_enable ,mark +0x3419 007323 rtn +: 007343 app_button_long_pressed: +0x341a 007344 call app_got_power_state_common +0x341b 007345 beq power_standby ,app_power_shutting_down +: 007346 app_power_starting: +0x341c 007347 setarg power_starting +0x341d 007348 istore 1 ,regc +0x341e 007349 add temp ,power_starting_timeout_offset ,rega +0x341f 007350 add temp ,power_starting_cb_offset ,regb +: 007351 app_power_common: +0x3420 007352 ifetcht 1 ,rega +0x3421 007353 increase 1 ,regc +0x3422 007354 istoret 1 ,regc +0x3423 007355 branch app_power_cb_common +: 007357 app_power_shutting_down: +0x3424 007358 setarg power_off +0x3425 007359 istore 1 ,regc +0x3426 007360 fetch 2 ,mem_ui_state_map +0x3427 007361 bbit0 ui_state_ble_connected ,app_power_off_end +0x3428 007362 call app_ble_disconnect +: 007363 app_power_off_end: +0x3429 007364 fetcht 2 ,mem_power_param_ptr +0x342a 007365 add temp ,power_off_timeout_offset ,rega +0x342b 007366 add temp ,power_off_cb_offset ,regb +0x342c 007367 branch app_power_common +: 007369 app_got_power_state_common: +0x342d 007370 fetcht 2 ,mem_power_param_ptr +0x342e 007371 add temp ,power_state_offset ,regc +0x342f 007372 ifetch 1 ,regc +0x3430 007373 rtn +: 007375 app_event_button_up: +0x3431 007376 call app_got_power_state_common +0x3432 007377 bne power_off ,app_power_release +0x3433 007378 branch app_enter_hibernate +: 007379 app_power_release: +0x3434 007380 add temp ,ui_butten_up_cb_offset ,regb +0x3435 007381 branch app_power_cb_common +: 007383 antilost_init: +0x3436 007384 rtn wake +0x3437 007385 hjam 0x00 ,core_gpio_sel1 +0x3438 007386 setarg antilost_le_before_hibernate +0x3439 007387 store 2 ,mem_cb_before_hibernate +0x343a 007388 setarg keyscan_process_lpm_before +0x343b 007389 store 2 ,mem_cb_before_lpm +0x343c 007390 setarg antilost_idle_process +0x343d 007391 store 2 ,mem_cb_idle_process +0x343e 007392 setarg antilost_le_conn_process +0x343f 007393 store 2 ,mem_cb_le_process +0x3440 007394 setarg antilost_bb_event_process +0x3441 007395 store 2 ,mem_cb_bb_event_process +0x3442 007396 setarg antilost_le_bb_event_timer +0x3443 007397 store 2 ,mem_cb_event_timer +0x3444 007398 setarg antilost_le_notification +0x3445 007399 store 2 ,mem_cb_ble_transmit +0x3446 007400 setarg antilost_lpm_lock_process +0x3447 007401 store 2 ,mem_cb_check_wakelock +0x3448 007402 setarg antilost_le_receive_data_process +0x3449 007403 store 2 ,mem_cb_att_write +0x344a 007404 bpatch patch19_4 ,mem_patch19 +0x344b 007405 call antilost_buzzer_pwm_init +0x344c 007406 call keyscan_key_init +0x344d 007407 call antilost_adc_init +0x344e 007408 call ui_led_init_global +0x344f 007409 call ui_button_init +0x3450 007410 setarg antilost_key_up_down +0x3451 007411 store 2 ,mem_cb_antl_key +0x3452 007412 setarg antilost_power_off_cb +0x3453 007413 store 2 ,mem_antl_power_off_cb +0x3454 007414 setarg antilost_power_starting_cb +0x3455 007415 store 2 ,mem_antl_power_starting_cb +0x3456 007416 setarg antilost_power_standby_cb +0x3457 007417 store 2 ,mem_antl_power_standby_cb +0x3458 007418 setarg antilost_led_on_cb +0x3459 007419 store 2 ,mem_antl_led_cb_on +0x345a 007420 setarg antilost_led_off_cb +0x345b 007421 store 2 ,mem_antl_led_cb_off +0x345c 007422 setarg antilost_buzzer_on +0x345d 007423 store 2 ,mem_antl_buzzer_cb_on +0x345e 007424 setarg antilost_buzzer_off +0x345f 007425 store 2 ,mem_antl_buzzer_cb_off +0x3460 007426 fetch 2 ,mem_ui_state_map +0x3461 007427 rtnbit1 ui_state_btn_down +0x3462 007428 branch app_enter_hibernate +: 007430 antilost_le_before_hibernate: +0x3463 007431 call antilost_led_buzzer_stop_blink +0x3464 007432 branch app_enter_hibernate +: 007434 antilost_le_notification: +0x3465 007435 call le_fifo_check_nearly_full +0x3466 007436 nrtn blank +0x3467 007437 arg mem_temp_block5 ,rega +0x3468 007438 call queue_pop +0x3469 007439 nrtn user +0x346a 007440 arg mem_temp_block5 ,contr +0x346b 007441 branch le_send_notify_from_list +: 007443 antilost_power_standby_cb: +0x346c 007444 fetch 2 ,mem_antl_le_sleep_timeout +0x346d 007445 store 2 ,mem_antl_le_sleep_timer +0x346e 007446 jam 1 ,mem_antl_key_scan_enable +0x346f 007447 branch antilost_fast_adv_start +: 007449 antilost_lpm_lock_process: +0x3470 007450 fetch 1 ,mem_antl_key_state +0x3471 007451 beq 1 ,antilost_lpm_ctrl_for_led_buzzer +0x3472 007452 fetch 2 ,mem_ui_state_map +0x3473 007453 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +0x3474 007454 fetch 1 ,mem_antl_lost_mode +0x3475 007455 beq 1 ,app_get_lpm_wake_lock +0x3476 007456 fetch 1 ,mem_antl_queue_curr_num +0x3477 007457 nbranch app_get_lpm_wake_lock ,blank +0x3478 007458 branch app_put_lpm_wake_lock +: 007460 antilost_lpm_ctrl_for_led_buzzer: +0x3479 007461 fetch 1 ,mem_antl_led_state +0x347a 007462 fetcht 1 ,mem_antl_buzzer_state +0x347b 007463 ior temp ,pdata +0x347c 007464 beq 1 ,app_get_lpm_wake_lock +0x347d 007465 branch app_put_lpm_wake_lock +: 007467 antilost_bb_event_process: +0x347e 007468 copy regc ,pdata +0x347f 007469 beq bt_evt_button_up ,app_event_button_up +0x3480 007470 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x3481 007471 beq bt_evt_le_connected ,antilost_le_process_conn +0x3482 007472 beq bt_evt_le_disconnected ,antilost_le_process_discon +0x3483 007473 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +0x3484 007474 rtn +: 007475 antilost_le_conn_param_update_rsp_recieved: +0x3485 007476 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x3486 007477 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected +: 007478 antilost_le_conn_param_accepted: +0x3487 007479 fetch 2 ,mem_le_new_connslavelatency +0x3488 007480 branch antilost_master_nonsupport_latency ,blank +: 007481 antilost_le_conn_param_updata_procedure_sucsess: +0x3489 007482 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +0x348a 007483 jam 60 ,mem_antl_conn_update_timer +0x348b 007484 rtn +: 007486 antilost_le_conn_param_rejected: +0x348c 007487 fetch 2 ,mem_le_latency +0x348d 007488 branch antilost_conn_param_updata_procedure_faild ,blank +: 007489 antilost_conn_param_retransimiting: +0x348e 007490 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x348f 007491 fetcht 2 ,mem_interval_increment +0x3490 007492 fetch 2 ,mem_le_interval_min +0x3491 007493 iadd temp ,pdata +0x3492 007494 store 2 ,mem_le_interval_min +0x3493 007495 copy pdata ,rega +0x3494 007496 fetch 2 ,mem_le_interval_max +0x3495 007497 iadd temp ,pdata +0x3496 007498 store 2 ,mem_le_interval_max +0x3497 007499 iadd rega ,pdata +0x3498 007500 rshift pdata ,temp +0x3499 007501 fetch 2 ,mem_antl_le_unnormal_interval_max +0x349a 007502 idiv temp +0x349b 007503 call wait_div_end +0x349c 007504 quotient pdata +0x349d 007505 store 2 ,mem_le_latency +0x349e 007506 jam 1 ,mem_antl_send_updata_le_param_timer +0x349f 007507 rtn +: 007508 antilost_conn_param_updata_procedure_faild: +0x34a0 007509 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +0x34a1 007510 rtn +: 007512 antilost_master_nonsupport_latency: +0x34a2 007513 jam 0 ,mem_lpm_mult +0x34a3 007514 jam 0 ,mem_antl_send_updata_le_param_timer +0x34a4 007515 fetch 2 ,mem_le_new_conninterval +0x34a5 007516 fetcht 2 ,mem_antl_le_unnormal_interval_min +0x34a6 007517 isub temp ,null +0x34a7 007518 setflag positive ,0 ,rega +0x34a8 007519 fetch 2 ,mem_antl_le_unnormal_interval_max +0x34a9 007520 fetcht 2 ,mem_le_new_conninterval +0x34aa 007521 isub temp ,pdata +0x34ab 007522 setflag positive ,1 ,rega +0x34ac 007523 compare 0x03 ,rega ,0x03 +0x34ad 007524 rtn true +0x34ae 007525 fetch 8 ,mem_antl_le_unnormal_interval_min +0x34af 007526 store 8 ,mem_le_interval_min +0x34b0 007527 jam 1 ,mem_antl_send_updata_le_param_timer +0x34b1 007528 rtn +: 007531 antilost_le_bb_event_timer: +0x34b2 007533 call app_power_timer +0x34b3 007534 call antilost_double_click_timer +0x34b4 007535 call antilost_le_fast_adv_timer +0x34b5 007536 call antilost_le_sleep_timer +0x34b6 007537 call antilost_app_updata_le_param_timer +0x34b7 007538 call antilost_conn_update_timer +0x34b8 007539 branch antilost_adc_check_timer +: 007542 antilost_double_click_timer: +0x34b9 007543 arg mem_double_click_timer ,regc +0x34ba 007544 arg antilost_double_click_timeout ,regb +0x34bb 007545 branch timer_single_step +: 007546 antilost_double_click_timeout: +0x34bc 007547 jam 0 ,mem_butten_click_cnt +0x34bd 007548 rtn +: 007549 antilost_le_fast_adv_timer: +0x34be 007550 arg mem_antl_fast_adv_timer ,regc +0x34bf 007551 arg antilost_le_fast_adv_timeout ,regb +0x34c0 007552 branch timer_single_step_2b +: 007553 antilost_le_fast_adv_timeout: +0x34c1 007554 arg mem_antl_slow_adv_led_style ,regc +0x34c2 007555 arg mem_antl_slow_adv_lpm_interval ,regb +0x34c3 007556 branch antilost_adv_start_common +: 007559 antilost_conn_update_timer: +0x34c4 007560 arg mem_antl_conn_update_timer ,regc +0x34c5 007561 arg antilost_conn_update_timer_time_out ,regb +0x34c6 007562 branch timer_single_step +: 007564 antilost_conn_update_timer_time_out: +0x34c7 007565 fetch 2 ,mem_le_latency +0x34c8 007566 store 1 ,mem_lpm_mult +0x34c9 007567 rtn +: 007568 antilost_app_updata_le_param_timer: +0x34ca 007569 arg mem_antl_send_updata_le_param_timer ,regc +0x34cb 007570 arg antilost_app_updata_le_param_timeout ,regb +0x34cc 007571 branch timer_single_step +: 007572 antilost_app_updata_le_param_timeout: +0x34cd 007573 fetch 1 ,mem_le_state +0x34ce 007574 compare 0 ,pdata ,0x60 +0x34cf 007575 nbranch antilost_wait_for_updata_param_instant_expire ,true +0x34d0 007576 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x34d1 007577 call app_lpm_mult_enable +0x34d2 007578 branch le_l2cap_tx_update_req +: 007579 antilost_wait_for_updata_param_instant_expire: +0x34d3 007580 jam 1 ,mem_antl_send_updata_le_param_timer +0x34d4 007581 rtn +: 007583 antilost_le_sleep_timer: +0x34d5 007584 arg mem_antl_le_sleep_timer ,regc +0x34d6 007585 arg antilost_le_sleep_timer_timeout ,regb +0x34d7 007586 branch timer_single_step_2b +: 007589 antilost_le_sleep_timer_timeout: +0x34d8 007590 branch app_button_long_pressed +: 007592 antilost_adc_check_timer: +0x34d9 007595 arg mem_adc_timer ,regc +0x34da 007596 arg antilost_adc_check_timer_timeout ,regb +0x34db 007597 branch timer_single_step_2b +: 007598 antilost_adc_check_timer_timeout: +0x34dc 007599 fetch 2 ,mem_adc_timeout +0x34dd 007600 store 2 ,mem_adc_timer +0x34de 007601 branch antilost_battery_process +: 007604 antilost_le_process_conn: +0x34df 007605 fetch 2 ,mem_adc_timeout +0x34e0 007606 store 2 ,mem_adc_timer +0x34e1 007607 setarg 0 +0x34e2 007608 store 2 ,mem_antl_fast_adv_timer +0x34e3 007609 store 2 ,mem_antl_le_sleep_timer +0x34e4 007610 call antilost_alert_off +0x34e5 007611 call antilost_led_buzzer_stop_blink +0x34e6 007612 jam 0 ,mem_lpm_mult +0x34e7 007613 branch app_ble_stop_adv +: 007616 antilost_le_process_discon: +0x34e8 007619 setarg 0 +0x34e9 007620 store 4 ,mem_adc_timer +0x34ea 007621 store 3 ,mem_antl_conn_updata_procedure_state +0x34eb 007622 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x34ec 007624 jam 1 ,mem_alarm_config_notfy_cnt +0x34ed 007625 fetch 2 ,mem_antl_le_sleep_timeout +0x34ee 007626 store 2 ,mem_antl_le_sleep_timer +0x34ef 007627 call queue_init +0x34f0 007628 fetch 1 ,mem_antl_power_state +0x34f1 007629 rtneq power_off +0x34f2 007630 call antilost_fast_adv_start +0x34f3 007631 branch antilost_on_off_alarm_after_disconn +: 007634 antilost_le_conn_process: +0x34f4 007636 branch antilost_key_process +: 007638 antilost_idle_process: +0x34f5 007640 fetch 1 ,mem_antl_power_state +0x34f6 007641 rtnne power_standby +0x34f7 007642 branch antilost_key_process +: 007647 antilost_power_starting_cb: +0x34f8 007648 arg mem_antl_power_starting_buzzer_style ,regc +0x34f9 007649 call antilost_buzzer_configuration +0x34fa 007650 arg mem_antl_power_starting_led_style ,regc +: 007651 antilost_power_common: +0x34fb 007652 branch antilost_led_configuration +: 007654 antilost_power_off_cb: +0x34fc 007655 jam off ,mem_le_adv_enable +0x34fd 007656 arg mem_antl_power_off_buzzer_style ,regc +0x34fe 007657 call antilost_buzzer_configuration +0x34ff 007658 arg mem_antl_power_off_led_style ,regc +0x3500 007659 branch antilost_power_common +: 007661 antilost_le_receive_data_process: +0x3501 007662 fetch 1 ,mem_le_att_opcode +0x3502 007663 beq attop_write_request ,antilost_le_parse_att_write_request +0x3503 007664 rtn +: 007665 antilost_le_parse_att_write_request: +0x3504 007666 fetch 2 ,mem_le_att_handle +0x3505 007668 beq new_spec_write_handle ,antilost_cmd_parse_for_application +0x3506 007669 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +0x3507 007670 rtn +: 007675 antilost_key_process: +0x3508 007676 fetch 1 ,mem_antl_key_scan_enable +0x3509 007677 rtn blank +0x350a 007678 branch keyscan_key_process +: 007682 antilost_key_up_down: +0x350b 007683 copy rega ,pdata +0x350c 007684 branch antilost_key_is_up ,blank +: 007685 antilost_key_is_down: +0x350d 007686 copy queue ,pdata +0x350e 007687 beq 0 ,antilost_key0_down +0x350f 007688 rtn +: 007689 antilost_key_is_up: +0x3510 007690 copy queue ,pdata +0x3511 007691 beq 0 ,antilost_key0_up +0x3512 007692 rtn +: 007694 antilost_key0_down: +0x3513 007695 jam 1 ,mem_antl_key_state +0x3514 007696 arg mem_antl_key_buzzer_style ,regc +0x3515 007697 call antilost_buzzer_configuration +0x3516 007698 arg mem_antl_key_led_style ,regc +0x3517 007699 call antilost_led_configuration +0x3518 007700 fetch 2 ,mem_ui_state_map +0x3519 007701 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +0x351a 007702 branch antilost_butten_down_after_conn +: 007704 antilost_key0_up: +0x351b 007705 jam 0 ,mem_antl_key_state +0x351c 007706 branch antilost_double_click_timer_init +: 007710 antilost_double_click_timer_init: +0x351d 007711 fetch 1 ,mem_butten_click_cnt +0x351e 007712 rtnne 1 +0x351f 007713 jam 5 ,mem_double_click_timer +0x3520 007714 rtn +: 007716 antilost_butten_down_after_conn: +0x3521 007717 fetch 1 ,mem_butten_click_cnt +0x3522 007718 pincrease 1 +0x3523 007719 store 1 ,mem_butten_click_cnt +0x3524 007720 beq 1 ,antilost_click_once +0x3525 007721 beq 2 ,antilost_click_twice +0x3526 007722 rtn +: 007723 antilost_click_once: +0x3527 007724 call antilost_alert_off +0x3528 007725 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +0x3529 007726 arg mem_antl_key0_press ,regc +0x352a 007727 branch antilost_prepare_data_and_send +: 007728 antilost_click_twice: +0x352b 007729 jam 0 ,mem_butten_click_cnt +0x352c 007730 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +0x352d 007731 arg mem_antl_key0_press ,regc +0x352e 007732 call antilost_prepare_data_and_send +0x352f 007733 fetch 1 ,mem_antl_lost_mode +0x3530 007734 beq 1 ,antilost_alert_on +0x3531 007735 rtn +: 007737 antilost_butten_down_while_disconn: +0x3532 007738 fetch 2 ,mem_antl_le_sleep_timeout +0x3533 007739 store 2 ,mem_antl_le_sleep_timer +0x3534 007740 call antilost_alert_off +0x3535 007741 branch antilost_fast_adv_start +: 007744 antilost_cmd_parse_for_application: +0x3536 007745 bpatch patch19_5 ,mem_patch19 +0x3537 007746 call le_app_receive_data +0x3538 007747 ifetch 1 ,rega +0x3539 007748 beq opcode3_antl_start_alram ,antilost_on_of_alram +0x353a 007749 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +0x353b 007750 rtn +: 007752 antilost_on_of_alram: +0x353c 007753 fetch 1 ,mem_antl_lost_mode +0x353d 007754 beq anti_le_alarm_off ,antilost_alert_on +0x353e 007755 beq anti_le_alarm_on ,antilost_alert_off +0x353f 007756 rtn +: 007758 antilost_configuration_for_alram: +0x3540 007759 ifetch 1 ,regb +0x3541 007760 beq 1 ,antilost_set_start_alarm_after_disconn +0x3542 007761 beq 0 ,antilost_set_no_alarm_after_disconn +0x3543 007762 rtn +: 007769 antilost_prepare_data_and_send: +0x3544 007770 bpatch patch19_6 ,mem_patch19 +0x3545 007771 fetch 1 ,mem_client_characteristic_configuration_descriptor +0x3546 007772 isolate1 notification_enable_bit ,pdata +0x3547 007773 nrtn true +0x3548 007774 add regc ,6 ,contr +0x3549 007775 ifetch 2 ,contr +0x354a 007776 byteswap pdata ,pdata +0x354b 007777 add pdata ,5 ,loopcnt +0x354c 007778 add regc ,3 ,contr +0x354d 007779 call calc_check_sum_start +0x354e 007780 istore 1 ,contr +0x354f 007781 copy regc ,rega +0x3550 007782 branch queue_push +: 007788 antilost_alert_on: +0x3551 007789 fetch 1 ,mem_antl_power_state +0x3552 007790 rtn blank +0x3553 007791 jam 1 ,mem_antl_lost_mode +0x3554 007792 arg mem_antl_alert_buzzer_stlye ,regc +0x3555 007793 call antilost_buzzer_configuration +0x3556 007794 arg mem_antl_alert_led_stlye ,regc +0x3557 007795 call antilost_led_configuration +0x3558 007796 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3559 007797 jam 1 ,mem_antl_key0_release + 8 +0x355a 007798 arg mem_antl_key0_release ,regc +0x355b 007799 branch antilost_prepare_data_and_send +: 007800 antilost_alert_off: +0x355c 007801 fetch 1 ,mem_antl_lost_mode +0x355d 007802 rtn blank +0x355e 007803 jam 0 ,mem_antl_lost_mode +0x355f 007804 call antilost_led_buzzer_stop_blink +0x3560 007805 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3561 007806 jam 0 ,mem_antl_key0_release + 8 +0x3562 007807 arg mem_antl_key0_release ,regc +0x3563 007808 branch antilost_prepare_data_and_send +: 007810 antilost_set_start_alarm_after_disconn: +0x3564 007811 jam 1 ,mem_alarm_config +0x3565 007812 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x3566 007813 jam 1 ,mem_antl_key0_release + 8 +0x3567 007814 arg mem_antl_key0_release ,regc +0x3568 007815 branch antilost_prepare_data_and_send +: 007816 antilost_set_no_alarm_after_disconn: +0x3569 007817 jam 0 ,mem_alarm_config +0x356a 007818 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x356b 007819 jam 0 ,mem_antl_key0_release + 8 +0x356c 007820 arg mem_antl_key0_release ,regc +0x356d 007821 branch antilost_prepare_data_and_send +: 007822 antilost_on_off_alarm_after_disconn: +0x356e 007823 fetch 1 ,mem_alarm_config +0x356f 007824 rtn blank +0x3570 007825 branch antilost_alert_on +: 007827 antilost_notify_alarm_config_first_time: +0x3571 007828 ifetch 2 ,rega +0x3572 007829 store 2 ,mem_client_characteristic_configuration_descriptor +0x3573 007830 isolate1 notification_enable_bit ,pdata +0x3574 007831 nrtn true +0x3575 007832 fetch 1 ,mem_alarm_config_notfy_cnt +0x3576 007833 rtn blank +0x3577 007834 jam 0 ,mem_alarm_config_notfy_cnt +0x3578 007835 fetch 8 ,mem_antl_le_interval_min +0x3579 007836 store 8 ,mem_le_interval_min +0x357a 007837 jam 2 ,mem_antl_send_updata_le_param_timer +0x357b 007838 call antilost_battery_process +0x357c 007839 call antilost_battery_calculate_end +0x357d 007840 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x357e 007841 fetch 1 ,mem_alarm_config +0x357f 007842 store 1 ,mem_antl_key0_release + 8 +0x3580 007843 arg mem_antl_key0_release ,regc +0x3581 007844 branch antilost_prepare_data_and_send +: 007848 antilost_buzzer_configuration: +0x3582 007849 arg 1 ,rega +0x3583 007850 branch antilost_configuration_common +: 007851 antilost_led_configuration: +0x3584 007852 arg 0 ,rega +: 007853 antilost_configuration_common: +0x3585 007854 branch antilost_led_buzzer_style_configuration +: 007856 antilost_led_buzzer_stop_blink: +0x3586 007857 arg 0 ,rega +0x3587 007858 call ui_led_blink_stop_global +0x3588 007859 arg 1 ,rega +0x3589 007860 call ui_led_blink_stop_global +0x358a 007861 fetch 1 ,mem_buzzer_pwm_conf +0x358b 007862 branch pwm_disable +: 007864 antilost_led_buzzer_style_configuration: +0x358c 007865 call calc_curr_struct_prt +0x358d 007866 arg 7 ,loopcnt +0x358e 007867 branch ui_led_set_style_global + 2 +: 007871 antilost_fast_adv_start: +0x358f 007872 arg mem_antl_fast_adv_led_style ,regc +0x3590 007873 arg mem_antl_lpm_interval ,regb +: 007874 antilost_adv_start_common: +0x3591 007875 call antilost_adv_interval_lpm_interval_set +0x3592 007876 call antilost_led_configuration +0x3593 007877 fetch 2 ,mem_antl_fast_adv_timeout +0x3594 007878 store 2 ,mem_antl_fast_adv_timer +0x3595 007879 branch app_ble_start_adv +: 007881 antilost_adv_interval_lpm_interval_set: +0x3596 007882 ifetch 2 ,regb +0x3597 007883 store 2 ,mem_lpm_interval +0x3598 007884 ifetch 2 ,contr +0x3599 007885 store 2 ,mem_le_adv_interval +0x359a 007886 rtn +: 007888 antilost_buzzer_pwm_init: +0x359b 007889 arg 0 ,rega +0x359c 007890 call pwm_init +0x359d 007891 fetch 6 ,mem_buzzer_pwm_conf +0x359e 007892 store 6 ,mem_pdatatemp +0x359f 007893 call pwm_out_set +0x35a0 007894 fetch 1 ,mem_buzzer_pwm_conf +0x35a1 007895 branch pwm_disable +: 007897 antilost_led_on_cb: +0x35a2 007898 jam 1 ,mem_antl_led_state +0x35a3 007899 rtn +: 007900 antilost_led_off_cb: +0x35a4 007901 jam 0 ,mem_antl_led_state +0x35a5 007902 rtn +: 007906 antilost_buzzer_off: +0x35a6 007907 jam 0 ,mem_antl_buzzer_state +0x35a7 007908 fetch 1 ,mem_buzzer_pwm_conf +0x35a8 007909 branch pwm_disable +: 007911 antilost_buzzer_on: +0x35a9 007912 jam 1 ,mem_antl_buzzer_state +0x35aa 007913 fetch 6 ,mem_buzzer_pwm_conf +0x35ab 007914 store 6 ,mem_pdatatemp +0x35ac 007915 branch pwm_out_set +: 007919 antilost_adc_init: +0x35ad 007920 jam 0 ,mem_adc_config_flag +0x35ae 007921 branch adc_init_data +: 007923 antilost_battery_process: +0x35af 007924 call adc_set_mode +0x35b0 007925 call vdd_calculate_by_mode +0x35b1 007926 store 2 ,mem_battery_current_voltage +0x35b2 007927 arg mem_battery_calculate_set ,rega +0x35b3 007928 call adc_bat_percent_lowpower_out +0x35b4 007929 store 1 ,mem_voltage_remain_percent +0x35b5 007930 beq 0 ,antilost_low_battery +0x35b6 007931 sub pdata ,0x64 ,null +0x35b7 007932 nbranch antilost_full_battery ,positive +0x35b8 007933 store 1 ,mem_antl_key0_release + 8 +: 007934 antilost_battery_calculate_end: +0x35b9 007935 jam opcode5_batter_information ,mem_antl_key0_release + 5 +0x35ba 007936 arg mem_antl_key0_release ,regc +0x35bb 007937 branch antilost_prepare_data_and_send +: 007938 antilost_full_battery: +0x35bc 007939 jam 100 ,mem_antl_key0_release + 8 +0x35bd 007940 branch antilost_battery_calculate_end +: 007942 antilost_low_battery: +0x35be 007943 branch app_button_long_pressed +: 007947 car_init: +0x35bf 007948 rtn wake +0x35c0 007949 hfetch 1 ,core_gpio_sel1 +0x35c1 007950 and_into 0xf0 ,pdata +0x35c2 007951 hstore 1 ,core_gpio_sel1 +0x35c3 007952 setarg car_le_before_hibernate +0x35c4 007953 store 2 ,mem_cb_before_hibernate +0x35c5 007955 setarg car_le_process_lpm_before +0x35c6 007956 store 2 ,mem_cb_before_lpm +0x35c7 007958 setarg app_enter_hibernate +0x35c8 007959 store 2 ,mem_cb_discovry_timeout +0x35c9 007961 setarg car_scale_process_idle +0x35ca 007962 store 2 ,mem_cb_idle_process +0x35cb 007964 setarg car_scale_process_bb_event +0x35cc 007965 store 2 ,mem_cb_bb_event_process +0x35cd 007967 setarg app_get_lpm_wake_lock +0x35ce 007968 store 2 ,mem_cb_check_wakelock +0x35cf 007970 setarg car_le_receive_data +0x35d0 007971 store 2 ,mem_cb_att_write +0x35d1 007973 setarg car_le_bb_event_timer +0x35d2 007974 store 2 ,mem_cb_event_timer +0x35d3 007976 call g24_head_ptr2regc +0x35d4 007977 setarg car_24g_receive_data +0x35d5 007978 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x35d6 007979 istore 2 ,contw +0x35d7 007981 setarg car_power_off_signal +0x35d8 007982 store 2 ,mem_remote_car_power_off_cb +0x35d9 007984 setarg car_soft_switch_power_on_signal +0x35da 007985 store 2 ,mem_remote_car_power_standby_cb +0x35db 007987 bpatch patch19_7 ,mem_patch19 +0x35dc 007988 call car_init_environment +0x35dd 007989 call queue_init +0x35de 007990 jam 2 ,mem_lpm_mult +0x35df 007991 jam power_on ,mem_car_24g_received_pac +0x35e0 007992 fetch 1 ,mem_car_config_soft_switch_enable +0x35e1 007993 store 1 ,mem_car_hard_soft_switch +0x35e2 007994 beq hard_switch ,car_hard_switch_power_on_signal +0x35e3 007995 fetch 1 ,mem_car_config_soft_switch_gpio +0x35e4 007996 store 1 ,mem_ui_button_gpio +0x35e5 007997 jam off ,mem_le_adv_enable +: 007998 car_soft_switch_power_on_init: +0x35e6 007999 call car_ui_led_init +0x35e7 008000 call ui_button_init +0x35e8 008001 call ui_button_polling +0x35e9 008002 jam power_starting ,mem_car_power_state +0x35ea 008003 fetch 2 ,mem_ui_state_map +0x35eb 008004 rtnbit1 ui_state_btn_down +0x35ec 008005 branch app_enter_hibernate +: 008007 car_power_off_signal: +0x35ed 008008 branch car_ui_led_init +: 008010 car_hard_switch_power_on_signal: +0x35ee 008011 jam power_standby ,mem_car_power_state +: 008012 car_soft_switch_power_on_signal: +0x35ef 008013 jam on ,mem_le_adv_enable +0x35f0 008014 call car_ui_led_init +0x35f1 008015 arg 0 ,rega +0x35f2 008016 call ui_led_blink_start_global +0x35f3 008018 setarg fast_adv_interval_value_car +0x35f4 008019 call shutter_ble_adv_interval_set +: 008020 car_le_modified_name_adv: +0x35f5 008021 arg mem_le_name + 7 ,contw +0x35f6 008022 fetch 1 ,mem_le_lap +: 008023 car_name_loop: +0x35f7 008024 and pdata ,0xF0 ,temp +0x35f8 008025 rshift4 temp ,temp +0x35f9 008026 call car_hex_to_ascii +0x35fa 008027 istoret 1 ,contw +0x35fb 008028 and pdata ,0x0F ,temp +0x35fc 008029 call car_hex_to_ascii +0x35fd 008030 istoret 1 ,contw +0x35fe 008031 call le_modified_name_att_list +0x35ff 008032 fetcht 1 ,mem_le_name_len +0x3600 008033 copy temp ,loopcnt +0x3601 008034 arg mem_le_adv_data + 2 ,contw +0x3602 008035 arg mem_le_name ,contr +0x3603 008036 call memcpy +: 008037 car_le_modified_name_scan: +0x3604 008038 fetcht 1 ,mem_le_name_len +0x3605 008039 copy temp ,loopcnt +0x3606 008040 arg mem_le_scan_data + 2 ,contw +0x3607 008041 arg mem_le_name ,contr +0x3608 008042 branch memcpy +: 008043 car_hex_to_ascii: +0x3609 008044 sub temp ,9 ,null +0x360a 008045 branch car_hex_num ,positive +0x360b 008046 add temp ,55 ,temp +0x360c 008047 rtn +: 008048 car_hex_num: +0x360d 008049 add temp ,48 ,temp +0x360e 008050 rtn +: 008052 car_ui_led_init: +0x360f 008053 fetch 1 ,mem_car_config_blood_led1_gpio +0x3610 008054 bne invalid_pin_num ,car_blood_led_gpio_set +: 008055 car_ui_led_init_1: +0x3611 008056 fetch 1 ,mem_car_config_pairing_led_gpio +0x3612 008057 bne invalid_pin_num ,car_pairing_led_gpio_set +: 008058 car_ui_led_init_2: +0x3613 008059 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x3614 008060 bne invalid_pin_num ,car_low_voltage_led_gpio_set +: 008061 car_ui_led_init_3: +0x3615 008062 fetch 1 ,mem_car_led_num +0x3616 008063 copy pdata ,loopcnt +0x3617 008064 setarg mem_car_led_map +0x3618 008065 copy pdata ,rega +: 008066 car_in_lp1: +0x3619 008067 copy rega ,contr +0x361a 008068 ifetch 1 ,contr +0x361b 008069 copy contr ,rega +0x361c 008070 beq invalid_pin_num ,car_in_lp1_end +0x361d 008071 copy pdata ,temp +0x361e 008072 call gpio_config_output +: 008073 car_in_lp1_end: +0x361f 008074 loop car_in_lp1 +: 008075 car_ui_led_init_end: +0x3620 008076 rtn +: 008077 car_blood_led_gpio_set: +0x3621 008078 fetch 8 ,mem_car_config_blood_led1_gpio +0x3622 008079 store 8 ,mem_car_led_map + 2 +0x3623 008080 branch car_ui_led_init_1 +: 008081 car_pairing_led_gpio_set: +0x3624 008082 store 1 ,mem_car_led_map +0x3625 008083 branch car_ui_led_init_2 +: 008084 car_low_voltage_led_gpio_set: +0x3626 008085 store 1 ,mem_car_led_map + 1 +0x3627 008086 branch car_ui_led_init_3 +: 008089 car_init_environment: +0x3628 008090 arg 0 ,rega +0x3629 008091 call pwm_init +0x362a 008092 call car_ir_rx_init +0x362b 008093 call g24_receive_process_init +0x362c 008094 branch car_init_adc_hvin +: 008096 car_init_adc_hvin: +0x362d 008097 jam 100 ,mem_car_notify_vdd_value_last +0x362e 008098 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x362f 008099 store 1 ,mem_car_style2_struct_led_gpio +0x3630 008100 branch adc_init_data +: 008102 car_le_before_hibernate: +0x3631 008103 call gpio_set_before_lpm_common +0x3632 008104 branch keyscan_process_lpm_before +: 008106 car_le_process_lpm_before: +0x3633 008107 branch keyscan_process_lpm_before +: 008109 car_key_scan_process: +0x3634 008112 branch keyscan_key_process +: 008114 car_scale_process_idle: +0x3635 008115 call car_le_send_packet +0x3636 008116 call car_ir_receive_process +0x3637 008117 call car_g24_status_process +0x3638 008118 branch car_key_scan_process +: 008120 car_g24_status_process: +0x3639 008121 fetch 2 ,mem_ui_state_map +0x363a 008122 rtnbit1 ui_state_ble_connected +0x363b 008123 fetch 1 ,mem_car_24g_received_pac +0x363c 008124 beq work_paired ,car_g24_connected_event +0x363d 008125 rtn +: 008126 car_g24_connected_event: +0x363e 008127 fetch 1 ,mem_car_24g_status +0x363f 008128 rtneq work_paired +0x3640 008129 jam work_paired ,mem_car_24g_status +0x3641 008130 branch car_g24_connected +: 008132 car_le_send_packet: +0x3642 008133 fetch 2 ,mem_ui_state_map +0x3643 008134 rtnbit0 ui_state_ble_connected +0x3644 008135 call le_fifo_check_nearly_full +0x3645 008136 nrtn blank +0x3646 008137 arg mem_car_pop_queue_buff ,rega +0x3647 008138 call queue_pop +0x3648 008139 nrtn user +0x3649 008140 arg mem_car_pop_queue_buff ,contr +0x364a 008141 branch le_send_notify_from_list +: 008143 car_scale_process_bb_event: +0x364b 008144 copy regc ,pdata +0x364c 008145 beq bt_evt_button_up ,app_event_button_up +0x364d 008146 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x364e 008147 beq bt_evt_le_connected ,car_scale_event_le_conn +0x364f 008148 beq bt_evt_le_disconnected ,car_scale_event_le_discon +0x3650 008149 rtn +: 008151 car_scale_event_le_conn: +0x3651 008152 setarg disable_24g +0x3652 008153 call g24_store_mem_24g_mode +0x3653 008154 branch car_scale_process_conn +: 008155 car_g24_connected: +0x3654 008156 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3655 008157 store 2 ,mem_car_24g_no_data_timeout_timer +: 008158 car_scale_process_conn: +0x3656 008159 jam 0x14 ,mem_car_notify_vdd_timer +0x3657 008160 jam 0 ,mem_lpm_mode +0x3658 008161 call app_ble_stop_adv +0x3659 008162 call app_lpm_mult_enable +0x365a 008163 fetch 1 ,mem_car_config_pairing_led_conn_status +0x365b 008164 beq 0x01 ,car_pairing_led_conn_status_setting +: 008165 car_scale_process_conn_next: +0x365c 008166 arg 0 ,rega +0x365d 008167 branch ui_led_on_global +: 008168 car_pairing_led_conn_status_setting: +0x365e 008169 arg 0 ,rega +0x365f 008170 branch ui_led_blink_stop_global +: 008172 car_scale_event_le_discon: +0x3660 008173 setarg rx_24g +0x3661 008174 call g24_store_mem_24g_mode +: 008175 car_g24_disconnect: +0x3662 008176 setarg 0 +0x3663 008177 store 5 ,mem_car_led_control +0x3664 008178 setarg 4 +0x3665 008179 call pwm_disable +0x3666 008180 setarg 5 +0x3667 008181 call pwm_disable +0x3668 008182 setarg 20 +0x3669 008183 call pwm_disable +0x366a 008184 setarg 21 +0x366b 008185 call pwm_disable +0x366c 008186 setarg 22 +0x366d 008187 call pwm_disable +0x366e 008188 setarg 7 +0x366f 008189 call pwm_disable +0x3670 008190 call queue_init +0x3671 008191 jam 10 ,mem_motor1_speed +0x3672 008192 jam 10 ,mem_motor2_speed +0x3673 008193 jam 10 ,mem_motor3_speed +0x3674 008195 jam 2 ,mem_lpm_mult +0x3675 008196 arg 0 ,rega +0x3676 008197 call ui_led_blink_start_global +0x3677 008199 setarg fast_adv_interval_value_car +0x3678 008200 call shutter_ble_adv_interval_set +0x3679 008201 branch app_ble_start_adv +: 008203 car_le_bb_event_timer: +0x367a 008205 call car_moto1_blank_data_timer +0x367b 008206 call car_moto2_blank_data_timer +0x367c 008207 call car_moto3_blank_data_timer +0x367d 008208 call app_power_timer +0x367e 008209 call car_led_control_timer +0x367f 008210 call car_notify_vdd_timer +0x3680 008211 call car_24g_no_data_timeout_timer +0x3681 008212 call car_ir_breakdown_timer +0x3682 008213 branch car_attack_shake_timer +: 008215 car_ir_breakdown_timer: +0x3683 008216 arg mem_car_ir_breakdown_check_timer ,regc +0x3684 008217 arg car_ir_breakdown_timeout ,regb +0x3685 008218 branch timer_single_step +: 008219 car_ir_breakdown_timeout: +0x3686 008220 call car_ir_gpio_get_status +0x3687 008221 nrtn true +0x3688 008222 jam 1 ,mem_car_ir_breakdown_flag +0x3689 008223 rtn +: 008225 car_24g_no_data_timeout_timer: +0x368a 008226 arg mem_car_24g_no_data_timeout_timer ,regc +0x368b 008227 arg car_24g_no_data_timer_timeout ,regb +0x368c 008228 branch timer_single_step_2b +: 008229 car_24g_no_data_timer_timeout: +0x368d 008230 jam work_search ,mem_car_24g_status +0x368e 008231 branch car_g24_disconnect +: 008233 car_attack_shake_timer: +0x368f 008234 arg mem_car_attack_shake_timer ,regc +0x3690 008235 arg car_attack_shake ,regb +0x3691 008236 branch timer_single_step +: 008237 car_attack_shake: +0x3692 008238 fetch 1 ,mem_car_attack_shake_flag +0x3693 008239 branch car_attack_shake_stop ,blank +0x3694 008240 jam 2 ,mem_car_attack_shake_timer +0x3695 008241 jam 0 ,mem_car_attack_shake_flag +0x3696 008242 setarg 0x0a02 +0x3697 008243 store 2 ,mem_le_receive_payload +0x3698 008244 fetch 1 ,mem_car_config_device_select +0x3699 008245 beq device_battle_tank ,car_attack_shake_front_battle_tank +: 008246 car_attack_shake_front_battle_car: +0x369a 008247 branch car_motor_control +: 008248 car_attack_shake_front_battle_tank: +0x369b 008249 setarg 0x0a02 +0x369c 008250 store 2 ,mem_le_receive_payload + 2 +0x369d 008251 branch car_motor_control +: 008252 car_attack_shake_stop: +0x369e 008253 setarg 0 +0x369f 008254 store 4 ,mem_le_receive_payload +0x36a0 008255 branch car_motor_control +: 008257 car_notify_vdd_timer: +0x36a1 008258 fetch 1 ,mem_car_config_bat_notify_enable +0x36a2 008259 rtn blank +0x36a3 008260 fetch 2 ,mem_ui_state_map +0x36a4 008261 bbit0 ui_state_ble_connected ,car_low_bat_led_off +0x36a5 008262 arg mem_car_notify_vdd_timer ,regc +0x36a6 008263 arg car_notify_vdd ,regb +0x36a7 008264 branch timer_single_step +: 008265 car_notify_vdd: +0x36a8 008266 fetch 1 ,mem_car_notify_vdd_count +0x36a9 008267 store 1 ,mem_car_notify_vdd_timer +0x36aa 008268 fetch 1 ,mem_car_working_flag +0x36ab 008269 nrtn blank +: 008270 car_read_hvin: +0x36ac 008271 call adc_set_mode +0x36ad 008272 call vdd_calculate_by_mode +0x36ae 008273 store 2 ,mem_vdd_now_vol +0x36af 008274 arg mem_vdd_calculate_set ,rega +0x36b0 008275 call adc_bat_percent_lowpower_out +0x36b1 008276 fetcht 1 ,mem_car_notify_vdd_value_last +0x36b2 008277 isub temp ,null +0x36b3 008278 branch car_notify_vdd_next2 ,positive +0x36b4 008279 store 1 ,mem_car_notify_vdd_value_last +0x36b5 008280 copy pdata ,temp +: 008281 car_notify_vdd_next2: +0x36b6 008282 storet 1 ,mem_car_notify_vdd_percent +0x36b7 008283 fetch 1 ,mem_car_config_low_voltage_percent +0x36b8 008284 isub temp ,null +0x36b9 008285 call car_enter_low_bat ,positive +0x36ba 008286 storet 1 ,mem_notify_bat_payload +0x36bb 008287 arg 6 ,loopcnt +0x36bc 008288 arg mem_notify_bat_head ,contr +0x36bd 008289 call calc_check_sum_start +0x36be 008290 store 1 ,mem_notify_bat_check_sum +0x36bf 008291 arg mem_notify_bat_packet ,rega +0x36c0 008292 branch queue_push +: 008293 car_enter_low_bat: +0x36c1 008294 fetch 1 ,mem_low_bat_flag +0x36c2 008295 nrtn blank +0x36c3 008296 jam 1 ,mem_low_bat_flag +0x36c4 008297 arg 1 ,rega +0x36c5 008298 branch ui_led_blink_start_global +: 008299 car_low_bat_led_off: +0x36c6 008300 arg 1 ,rega +0x36c7 008301 branch ui_led_blink_stop_global +: 008303 car_led_control_timer: +0x36c8 008304 arg mem_car_led_control_timer ,regc +0x36c9 008305 arg car_led_control ,regb +0x36ca 008306 branch timer_single_step +: 008307 car_led_control: +0x36cb 008308 jam 5 ,mem_car_led_control_timer +0x36cc 008309 jam 0 ,mem_car_led_no +0x36cd 008310 fetch 1 ,mem_car_led_blink_status +0x36ce 008311 beq led_on ,car_led_control_blink_off +0x36cf 008312 beq led_off ,car_led_control_blink_on +: 008313 car_led_control_set: +0x36d0 008314 arg mem_car_led_control ,contr +0x36d1 008315 copy contr ,rega +0x36d2 008316 arg 8 ,loopcnt +: 008317 car_led_control_timer_next: +0x36d3 008318 copy rega ,contr +0x36d4 008319 ifetch 1 ,contr +0x36d5 008320 copy contr ,rega +0x36d6 008321 beq led_off ,car_led_control_off +0x36d7 008322 beq led_on ,car_led_control_on +0x36d8 008323 beq led_blink ,car_led_control_blink +: 008324 car_led_control_timer_next_2: +0x36d9 008325 fetch 1 ,mem_car_led_no +0x36da 008326 increase 1 ,pdata +0x36db 008327 store 1 ,mem_car_led_no +0x36dc 008328 loop car_led_control_timer_next +0x36dd 008329 rtn +: 008330 car_led_switch: +0x36de 008331 fetch 1 ,mem_car_led_no +0x36df 008332 arg mem_car_config_blood_led_gpio ,regb +0x36e0 008333 iadd regb ,regb +0x36e1 008334 ifetcht 1 ,regb +0x36e2 008335 rtn +: 008336 car_led_control_off: +0x36e3 008337 call car_led_switch +0x36e4 008338 call gpio_out_inactive +0x36e5 008339 branch car_led_control_timer_next_2 +: 008340 car_led_control_on: +0x36e6 008341 call car_led_switch +0x36e7 008342 call gpio_out_active +0x36e8 008343 branch car_led_control_timer_next_2 +: 008344 car_led_control_blink: +0x36e9 008345 fetch 1 ,mem_car_led_blink_status +0x36ea 008346 beq led_on ,car_led_control_off +0x36eb 008347 branch car_led_control_on +: 008348 car_led_control_blink_on: +0x36ec 008349 jam led_on ,mem_car_led_blink_status +0x36ed 008350 branch car_led_control_set +: 008351 car_led_control_blink_off: +0x36ee 008352 jam led_off ,mem_car_led_blink_status +0x36ef 008353 branch car_led_control_set +: 008357 calc_check_sum_start: +0x36f0 008358 arg 0 ,rega +: 008359 calc_check_sum_loop: +0x36f1 008360 ifetch 1 ,contr +0x36f2 008361 iadd rega ,rega +0x36f3 008362 loop calc_check_sum_loop +: 008363 calc_check_sum_and: +0x36f4 008364 and rega ,0xff ,pdata +0x36f5 008365 rtn +: 008367 car_le_receive_data: +0x36f6 008368 fetch 1 ,mem_le_att_opcode +0x36f7 008369 beq attop_write_request ,car_le_parse_att_write_request +0x36f8 008370 rtn +: 008371 car_le_parse_att_write_request: +0x36f9 008372 fetch 2 ,mem_le_att_handle +0x36fa 008373 beq att_car_control_handle ,car_control_le_receive +0x36fb 008374 rtn +: 008386 le_app_receive_data: +0x36fc 008387 bpatch patch1a_0 ,mem_patch1a +0x36fd 008388 ifetch 5 ,rega +0x36fe 008389 store 5 ,mem_app_receive_temp +0x36ff 008390 fetch 2 ,mem_app_receive_temp +0x3700 008391 arg le_receive_packet_head ,temp +0x3701 008392 isub temp ,null +0x3702 008393 nrtn zero +0x3703 008394 fetch 2 ,mem_app_receive_temp + 3 +0x3704 008395 byteswap pdata ,pdata +0x3705 008396 store 2 ,mem_app_receive_temp + 3 +0x3706 008397 copy pdata ,loopcnt +0x3707 008398 increase 5 ,rega +0x3708 008399 copy rega ,contr +0x3709 008400 arg mem_app_receive_temp + 5 ,contw +0x370a 008401 call memcpy +0x370b 008402 ifetch 1 ,contr +0x370c 008403 store 1 ,mem_app_receive_temp + 15 +0x370d 008404 arg mem_app_receive_temp + 2 ,rega +0x370e 008405 arg mem_app_receive_temp + 5 ,regb +0x370f 008406 rtn +: 008408 car_control_le_receive: +0x3710 008409 setarg 0 +0x3711 008410 store 5 ,mem_le_receive_payload +0x3712 008411 store 5 ,mem_le_receive_payload + 5 +0x3713 008412 call le_app_receive_data +0x3714 008413 copy regb ,contr +0x3715 008414 arg mem_le_receive_payload ,contw +0x3716 008415 arg 10 ,loopcnt +0x3717 008416 call memcpy +: 008417 car_receive_cmd_select: +0x3718 008418 bpatch patch1a_1 ,mem_patch1a +0x3719 008419 ifetch 1 ,rega +0x371a 008420 beq car_cmd_old_car_control ,car_drive_old +0x371b 008421 beq car_cmd_old_speed_control ,car_speed_set_old +0x371c 008422 beq car_cmd_l_r_motor_control ,car_motor_control +0x371d 008423 beq car_cmd_f_b_motor_control ,car_motor_control +0x371e 008424 beq car_cmd_ir_control ,car_ir_data_rx_from_app +0x371f 008425 beq car_cmd_led_control ,car_led_control_receive +0x3720 008426 beq car_cmd_device_info ,car_info_request +0x3721 008427 rtn +: 008429 car_24g_receive_data: +0x3722 008430 fetch 2 ,mem_ui_state_map +0x3723 008431 rtnbit1 ui_state_ble_connected +0x3724 008433 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3725 008434 store 2 ,mem_car_24g_no_data_timeout_timer +0x3726 008436 jam work_paired ,mem_car_24g_received_pac +0x3727 008438 setarg offset_24g_rxdata_temp_add3 +0x3728 008439 call g24_set_rega +0x3729 008440 call car_control_le_receive +0x372a 008442 fetch 1 ,mem_app_receive_temp + 2 +0x372b 008443 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +0x372c 008444 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +0x372d 008445 rtn +: 008446 car_24g_receive_data_next: +0x372e 008447 fetch 1 ,mem_le_receive_payload +0x372f 008448 ncall car_moto1_enable_blank_data_timer ,blank +0x3730 008449 fetch 1 ,mem_le_receive_payload + 2 +0x3731 008450 ncall car_moto2_enable_blank_data_timer ,blank +0x3732 008451 fetch 1 ,mem_le_receive_payload + 4 +0x3733 008452 ncall car_moto3_enable_blank_data_timer ,blank +0x3734 008453 rtn +: 008455 car_moto1_enable_blank_data_timer: +0x3735 008456 jam 5 ,mem_car_moto1_blank_timer +0x3736 008457 rtn +: 008458 car_moto2_enable_blank_data_timer: +0x3737 008459 jam 5 ,mem_car_moto2_blank_timer +0x3738 008460 rtn +: 008461 car_moto3_enable_blank_data_timer: +0x3739 008462 jam 5 ,mem_car_moto3_blank_timer +0x373a 008463 rtn +: 008465 car_moto1_blank_data_timer: +0x373b 008466 arg mem_car_moto1_blank_timer ,regc +0x373c 008467 arg car_moto1_blank_data ,regb +0x373d 008468 branch timer_single_step +: 008469 car_moto2_blank_data_timer: +0x373e 008470 arg mem_car_moto2_blank_timer ,regc +0x373f 008471 arg car_moto2_blank_data ,regb +0x3740 008472 branch timer_single_step +: 008473 car_moto3_blank_data_timer: +0x3741 008474 arg mem_car_moto3_blank_timer ,regc +0x3742 008475 arg car_moto3_blank_data ,regb +0x3743 008476 branch timer_single_step +: 008478 car_moto1_blank_data: +0x3744 008479 jam 0 ,mem_le_receive_payload +0x3745 008480 branch car_motor_control +: 008481 car_moto2_blank_data: +0x3746 008482 jam 0 ,mem_le_receive_payload + 2 +0x3747 008483 branch car_motor_control +: 008484 car_moto3_blank_data: +0x3748 008485 jam 0 ,mem_le_receive_payload + 4 +0x3749 008486 branch car_motor_control +: 008491 car_drive_old: +0x374a 008492 call car_left_right_control_old +0x374b 008493 branch car_front_back_control_old +: 008494 car_left_right_control_old: +0x374c 008495 fetch 1 ,mem_le_receive_payload +0x374d 008496 store 1 ,mem_motor2_status +0x374e 008497 branch car_motor2_control +: 008498 car_front_back_control_old: +0x374f 008499 fetch 1 ,mem_motor1_speed +0x3750 008500 call car_reset_old_speed +0x3751 008501 fetch 1 ,mem_le_receive_payload + 1 +0x3752 008502 store 1 ,mem_motor1_status +0x3753 008503 branch car_motor1_control +: 008504 car_reset_old_speed: +0x3754 008505 beq speed_level_2 ,car_reset_old_speed2 +0x3755 008506 beq speed_level_3 ,car_reset_old_speed3 +0x3756 008507 store 1 ,mem_motor1_speed +0x3757 008508 rtn +: 008509 car_reset_old_speed2: +0x3758 008510 jam speed_level_5 ,mem_motor1_speed +0x3759 008511 rtn +: 008512 car_reset_old_speed3: +0x375a 008513 jam speed_level_10 ,mem_motor1_speed +0x375b 008514 rtn +: 008515 car_speed_set_old: +0x375c 008516 fetch 1 ,mem_le_receive_payload +0x375d 008517 call car_reset_old_speed +0x375e 008518 fetch 1 ,mem_motor1_speed +0x375f 008519 call car_motor_speed_duty_setting +0x3760 008520 call car_motor_speed_duty_transform +0x3761 008521 branch pwm_pwm0_duty_set +: 008523 car_motor_control: +0x3762 008524 fetch 1 ,mem_car_24g_go_die_flag +0x3763 008525 nrtn blank +0x3764 008526 fetch 6 ,mem_le_receive_payload +0x3765 008527 store 6 ,mem_motor1_status +0x3766 008528 fetch 1 ,mem_motor1_speed +0x3767 008529 fetcht 1 ,mem_motor2_speed +0x3768 008530 iand temp ,pdata +0x3769 008531 fetcht 1 ,mem_motor3_speed +0x376a 008532 iand temp ,pdata +0x376b 008533 call car_motor_working_flag ,blank +0x376c 008534 bpatch patch1a_2 ,mem_patch1a +0x376d 008535 call car_motor1_control +0x376e 008536 call car_motor2_control +0x376f 008537 branch car_motor3_control +: 008538 car_motor1_control: +0x3770 008539 arg mem_motor1_pwm_set ,regb +0x3771 008540 arg mem_motor1_status ,contr +0x3772 008541 branch car_motor_status_select +: 008542 car_motor2_control: +0x3773 008543 arg mem_motor2_pwm_set ,regb +0x3774 008544 arg mem_motor2_status ,contr +0x3775 008545 branch car_motor_status_select +: 008546 car_motor3_control: +0x3776 008547 arg mem_motor3_pwm_set ,regb +0x3777 008548 arg mem_motor3_status ,contr +0x3778 008549 branch car_motor_status_select +: 008550 car_motor_working_flag: +0x3779 008551 jam 0 ,mem_car_working_flag +0x377a 008552 rtn +: 008554 car_motor_status_select: +0x377b 008555 ifetch 1 ,contr +0x377c 008556 beq motor_stop ,car_motor_stop +0x377d 008557 beq go_front ,car_motor_positive +0x377e 008558 beq go_back ,car_motor_negative +0x377f 008559 rtn +: 008560 car_motor_positive: +0x3780 008561 jam 0 ,mem_motor_select_p_n +0x3781 008562 branch car_motor_negative + 1 +: 008563 car_motor_negative: +0x3782 008564 jam 1 ,mem_motor_select_p_n +0x3783 008565 ifetch 1 ,contr +0x3784 008566 store 1 ,mem_car_motor_speed +0x3785 008567 ifetch 8 ,regb +0x3786 008568 branch car_motor_work +: 008570 car_motor_stop: +0x3787 008571 ifetch 1 ,regb +0x3788 008572 call pwm_disable +0x3789 008573 increase 1 ,regb +0x378a 008574 ifetch 1 ,regb +0x378b 008575 branch pwm_disable +: 008576 car_motor_work: +0x378c 008577 store 8 ,mem_motor_pwm_pin1_set +0x378d 008578 jam 1 ,mem_car_working_flag +0x378e 008579 fetch 1 ,mem_motor_select_p_n +0x378f 008580 beq 0 ,car_motor_select_positive +: 008581 car_motor_select_negative: +0x3790 008582 fetch 1 ,mem_motor_pwm_pin2_set +0x3791 008583 store 1 ,mem_motor_pwm_pin_set +0x3792 008584 fetch 1 ,mem_motor_pwm_pin1_set +: 008585 car_motor_work_next: +0x3793 008586 call pwm_disable +0x3794 008587 fetch 1 ,mem_car_motor_speed +0x3795 008588 call car_motor_speed_duty_setting +0x3796 008589 store 1 ,mem_motor_pwm_dute_set +0x3797 008590 fetch 6 ,mem_motor_pwm_pin_set +0x3798 008591 store 6 ,mem_pdatatemp +0x3799 008592 branch pwm_out_set +: 008593 car_motor_select_positive: +0x379a 008594 fetch 1 ,mem_motor_pwm_pin1_set +0x379b 008595 store 1 ,mem_motor_pwm_pin_set +0x379c 008596 fetch 1 ,mem_motor_pwm_pin2_set +0x379d 008597 branch car_motor_work_next +: 008599 car_motor_speed_duty_setting: +0x379e 008600 mul32 pdata ,5 ,pdata +0x379f 008601 add pdata ,50 ,pdata +0x37a0 008602 rtn +: 008603 car_motor_speed_duty_transform: +0x37a1 008604 arg 12000 ,temp +0x37a2 008605 imul32 temp ,pdata +0x37a3 008606 div pdata ,100 +0x37a4 008607 call wait_div_end +0x37a5 008608 quotient temp +0x37a6 008609 copy temp ,rega +0x37a7 008610 setarg 12000 +0x37a8 008611 isub temp ,regb +0x37a9 008612 rtn +: 008615 car_ir_init: +0x37aa 008616 hfetch 1 ,core_gpio_sel2 +0x37ab 008617 set1 2 ,pdata +0x37ac 008618 hstore 1 ,core_gpio_sel2 +0x37ad 008619 setarg 158 +0x37ae 008620 hstore 2 ,core_pwm_pcnt4 +0x37af 008621 hstore 2 ,core_pwm_ncnt4 +0x37b0 008622 rtn +: 008624 car_ir_data_rx_from_app: +0x37b1 008625 fetch 1 ,mem_car_24g_go_die_flag +0x37b2 008626 nrtn blank +0x37b3 008627 fetch 2 ,mem_le_receive_payload +0x37b4 008628 store 2 ,mem_ir_data +0x37b5 008629 fetch 1 ,mem_car_24g_status +0x37b6 008630 bne work_paired ,car_ir_data_tx +0x37b7 008631 fetch 2 ,mem_le_lap +0x37b8 008632 store 2 ,mem_ir_data +: 008633 car_ir_data_tx: +0x37b9 008634 bpatch patch1a_3 ,mem_patch1a +0x37ba 008635 call car_ir_init +0x37bb 008636 call car_ir_enable +0x37bc 008637 setarg 48000 +0x37bd 008638 call sleep +0x37be 008639 call car_ir_disable +0x37bf 008640 setarg 7200 +0x37c0 008641 call sleep +0x37c1 008642 arg 16 ,loopcnt +: 008643 car_ir_send_loop: +0x37c2 008644 call car_ir_enable +0x37c3 008645 fetch 2 ,mem_ir_data +0x37c4 008646 bbit1 0 ,car_ir_is_bit1 +0x37c5 008647 setarg 7200 +0x37c6 008648 call sleep +0x37c7 008649 call car_ir_disable +0x37c8 008650 branch car_ir_wait_finish +: 008652 car_ir_is_bit1: +0x37c9 008653 setarg 14400 +0x37ca 008654 call sleep +0x37cb 008655 call car_ir_disable +: 008656 car_ir_wait_finish: +0x37cc 008657 setarg 7200 +0x37cd 008658 call sleep +0x37ce 008659 fetch 2 ,mem_ir_data +0x37cf 008660 rshift pdata ,pdata +0x37d0 008661 store 2 ,mem_ir_data +0x37d1 008662 loop car_ir_send_loop +0x37d2 008664 jam 2 ,mem_car_attack_shake_timer +0x37d3 008665 jam 1 ,mem_car_attack_shake_flag +0x37d4 008666 setarg 0x0a01 +0x37d5 008667 store 2 ,mem_le_receive_payload +0x37d6 008668 fetch 1 ,mem_car_config_device_select +0x37d7 008669 beq device_battle_tank ,car_attack_shake_back_battle_tank +: 008670 car_attack_shake_back_battle_car: +0x37d8 008671 branch car_motor_control +: 008672 car_attack_shake_back_battle_tank: +0x37d9 008673 setarg 0x0a01 +0x37da 008674 store 2 ,mem_le_receive_payload + 2 +0x37db 008675 branch car_motor_control +: 008677 car_ir_enable: +0x37dc 008678 hfetch 1 ,core_gpio_key2 +0x37dd 008679 or_into 0x40 ,pdata +0x37de 008680 hstore 1 ,core_gpio_key2 +0x37df 008681 rtn +: 008682 car_ir_disable: +0x37e0 008683 hfetch 1 ,core_gpio_key2 +0x37e1 008684 and_into 0xbf ,pdata +0x37e2 008685 hstore 1 ,core_gpio_key2 +0x37e3 008686 rtn +: 008688 car_ir_rx_init: +0x37e4 008689 fetch 1 ,mem_car_config_ir_enable +0x37e5 008690 rtneq 0x00 +0x37e6 008691 call lpm_disable_exen_output +0x37e7 008692 fetcht 1 ,mem_car_config_ir_rx_gpio +0x37e8 008693 storet 1 ,mem_ir_rx_gpio +0x37e9 008694 call gpio_config_input +0x37ea 008695 call car_ir_gpio_get_status +0x37eb 008696 nrtn true +0x37ec 008697 jam 1 ,mem_car_ir_breakdown_check_timer +0x37ed 008698 rtn +: 008700 car_ir_receive_process: +0x37ee 008701 fetch 1 ,mem_car_config_ir_enable +0x37ef 008702 rtneq flag_ir_disable +0x37f0 008703 fetch 1 ,mem_car_ir_breakdown_flag +0x37f1 008704 nrtn blank +0x37f2 008705 fetch 2 ,mem_ui_state_map +0x37f3 008706 bbit1 ui_state_ble_connected ,car_ir_receive_process_next +0x37f4 008707 fetch 1 ,mem_car_24g_status +0x37f5 008708 rtnne work_paired +: 008709 car_ir_receive_process_next: +0x37f6 008710 bpatch patch1a_4 ,mem_patch1a +0x37f7 008711 call car_ir_gpio_get_status +0x37f8 008712 nrtn true +0x37f9 008713 setarg 36000 +0x37fa 008714 call sleep +0x37fb 008715 call car_ir_gpio_get_status +0x37fc 008716 nrtn true +0x37fd 008717 call car_ir_clk_get +: 008718 car_ir_packet_head_wait_end: +0x37fe 008719 call car_ir_clk_check +0x37ff 008720 nrtn positive +0x3800 008721 call car_ir_gpio_get_status +0x3801 008722 branch car_ir_packet_head_wait_end ,true +0x3802 008723 arg 0 ,rega +0x3803 008724 arg 16 ,loopcnt +0x3804 008725 call car_ir_clk_get +: 008726 car_ir_receive_process_loop: +0x3805 008727 call car_ir_clk_check +0x3806 008728 nrtn positive +0x3807 008729 call car_ir_gpio_get_status +0x3808 008730 nbranch car_ir_receive_process_loop ,true +0x3809 008731 setarg 10800 +0x380a 008732 call sleep +0x380b 008733 call car_ir_gpio_get_status +0x380c 008734 branch car_ir_get_bit1 ,true +: 008735 car_ir_get_bit0: +0x380d 008736 setarg 0 +0x380e 008737 rshift rega ,rega +0x380f 008738 ior rega ,rega +0x3810 008739 loop car_ir_receive_process_loop +0x3811 008740 branch car_ir_receive_process_end +: 008741 car_ir_get_bit1: +0x3812 008742 setarg 0x8000 +0x3813 008743 rshift rega ,rega +0x3814 008744 ior rega ,rega +0x3815 008745 call car_ir_clk_get +: 008746 car_ir_get_bit1_wait_low_end: +0x3816 008747 call car_ir_clk_check +0x3817 008748 nrtn positive +0x3818 008749 call car_ir_gpio_get_status +0x3819 008750 branch car_ir_get_bit1_wait_low_end ,true +0x381a 008751 loop car_ir_receive_process_loop +: 008752 car_ir_receive_process_end: +0x381b 008753 bpatch patch1a_5 ,mem_patch1a +0x381c 008754 copy rega ,pdata +0x381d 008755 store 2 ,mem_ir_rx_buf +0x381e 008756 store 2 ,mem_ir_notify_data + 8 +0x381f 008757 fetch 1 ,mem_car_24g_status +0x3820 008758 beq work_paired ,car_ir_24g_receive_attack +: 008759 car_ir_data_notify: +0x3821 008760 arg 0x07 ,loopcnt +0x3822 008761 arg mem_ir_notify_data_head ,contr +0x3823 008762 call calc_check_sum_start +0x3824 008763 store 1 ,mem_ir_notify_data_check_sum +0x3825 008764 arg mem_ir_notify_data ,rega +0x3826 008765 branch queue_push +: 008767 car_ir_24g_receive_attack: +0x3827 008768 fetch 1 ,mem_car_24g_ir_receive_attack_count +0x3828 008769 increase 1 ,pdata +0x3829 008770 store 1 ,mem_car_24g_ir_receive_attack_count +0x382a 008771 div pdata ,2 +0x382b 008772 call wait_div_end +0x382c 008773 quotient temp +0x382d 008774 remainder pdata +0x382e 008775 nbranch car_ir_24g_receive_attack_blink ,blank +: 008776 car_ir_24g_receive_attack_off: +0x382f 008777 fetch 1 ,mem_car_config_led_num +0x3830 008778 isub temp ,null +0x3831 008779 call car_ir_24g_go_die ,zero +0x3832 008780 arg mem_car_led_control ,pdata +0x3833 008781 increase -1 ,temp +0x3834 008782 iadd temp ,rega +0x3835 008783 arg 0 ,pdata +0x3836 008784 istore 1 ,rega +0x3837 008785 rtn +: 008786 car_ir_24g_receive_attack_blink: +0x3838 008787 arg mem_car_led_control ,pdata +0x3839 008788 iadd temp ,rega +0x383a 008789 arg 2 ,pdata +0x383b 008790 istore 1 ,rega +0x383c 008791 rtn +: 008792 car_ir_24g_go_die: +0x383d 008793 jam 1 ,mem_car_24g_go_die_flag +0x383e 008794 rtn +: 008795 car_ir_clk_get: +0x383f 008796 copy clkn_bt ,pdata +0x3840 008797 store 4 ,mem_ir_receive_clkn +0x3841 008798 rtn +: 008799 car_ir_clk_check: +0x3842 008800 copy clkn_bt ,pdata +0x3843 008801 fetcht 4 ,mem_ir_receive_clkn +0x3844 008802 isub temp ,pdata +0x3845 008803 sub pdata ,200 ,null +0x3846 008804 rtn +: 008806 car_ir_gpio_get_status: +0x3847 008807 fetcht 1 ,mem_ir_rx_gpio +0x3848 008808 branch gpio_get_bit +: 008810 car_led_control_receive: +0x3849 008811 fetch 8 ,mem_le_receive_payload +0x384a 008812 store 8 ,mem_car_led_control +0x384b 008813 rtn +: 008815 car_info_request: +0x384c 008816 fetch 1 ,mem_car_config_device_select +0x384d 008817 store 1 ,mem_car_info_request_payload +0x384e 008818 fetch 1 ,mem_car_config_motor_layout +0x384f 008819 store 1 ,mem_car_info_request_payload + 1 +0x3850 008820 fetch 1 ,mem_car_config_ir_enable +0x3851 008821 store 1 ,mem_car_info_request_payload + 2 +0x3852 008822 arg 13 ,loopcnt +0x3853 008823 arg mem_car_info_request_head ,contr +0x3854 008824 call calc_check_sum_start +0x3855 008825 store 1 ,mem_car_info_request_checksum +0x3856 008826 arg mem_car_info_request ,rega +0x3857 008827 branch queue_push +: 008833 light_init: +0x3858 008834 call clear_eeprom_size_2k +0x3859 008835 jam 0x7a ,mem_curr_packet_num +0x385a 008836 call light_load_controler_list +0x385b 008837 call light_init_crr_cmd_count +0x385c 008838 setarg light_pairing_timer +0x385d 008839 store 2 ,mem_cb_event_timer +0x385e 008840 arg 0 ,rega +0x385f 008841 branch pwm_init +: 008843 light_pairing_timer: +0x3860 008844 fetch 2 ,mem_light_pairing_timer +0x3861 008845 rtn blank +0x3862 008846 increase -1 ,pdata +0x3863 008847 store 2 ,mem_light_pairing_timer +0x3864 008848 rtnne 0 +0x3865 008849 jam 0 ,mem_light_pairing_enable +0x3866 008850 rtn +: 008852 light_init_crr_cmd_count: +0x3867 008853 bpatch patch1a_6 ,mem_patch1a +0x3868 008854 fetch 1 ,mem_light_next_record +0x3869 008855 sub pdata ,40 ,null +0x386a 008856 rtn positive +0x386b 008857 jam 0 ,mem_light_next_record +0x386c 008858 rtn +: 008860 light_load_controler_list: +0x386d 008861 arg mem_light_next_record ,rega +0x386e 008862 arg 0 ,regb +0x386f 008863 arg 81 ,temp +0x3870 008864 branch iicd_read_eep_data +: 008867 light_find_controler_pairing: +0x3871 008868 disable user +0x3872 008869 fetch 1 ,mem_light_cnum +0x3873 008870 copy pdata ,loopcnt +0x3874 008872 arg mem_light_clist ,rega +0x3875 008873 copy regc ,regb +: 008874 light_find_controler_pairing_loop: +0x3876 008875 bpatch patch1a_7 ,mem_patch1a +0x3877 008876 call light_compare_addr_record +0x3878 008877 branch enable_user ,zero +: 008878 light_find_single_pairing_diff: +0x3879 008879 increase 4 ,rega +0x387a 008880 loop light_find_controler_pairing_loop +0x387b 008881 rtn +: 008884 light_compare_addr_record: +0x387c 008885 bpatch patch1b_0 ,mem_patch1b +0x387d 008886 ifetch 3 ,rega +0x387e 008887 ifetcht 3 ,regb +0x387f 008888 isub temp ,null +0x3880 008889 rtn +: 008891 light_compare_single_record: +0x3881 008892 bpatch patch1b_1 ,mem_patch1b +0x3882 008893 ifetch 3 ,rega +0x3883 008894 ifetcht 3 ,regb +0x3884 008895 isub temp ,null +0x3885 008896 nrtn zero +0x3886 008897 ifetch 1 ,contr +0x3887 008898 sub pdata ,0 ,null +0x3888 008899 rtn zero +0x3889 008900 add rega ,3 ,contr +0x388a 008901 ifetcht 1 ,contr +0x388b 008902 isub temp ,null +0x388c 008903 rtn +: 008906 light_find_controler_cmd: +0x388d 008907 bpatch patch1b_2 ,mem_patch1b +0x388e 008908 disable user +0x388f 008909 fetch 1 ,mem_light_cnum +0x3890 008910 copy pdata ,loopcnt +0x3891 008912 arg mem_light_clist ,rega +0x3892 008913 copy regc ,regb +: 008914 light_find_controler_cmd_loop: +0x3893 008915 call light_compare_single_record +0x3894 008916 branch enable_user ,zero +0x3895 008917 increase 4 ,rega +0x3896 008918 loop light_find_controler_cmd_loop +0x3897 008919 rtn +: 008922 light_recv_adv: +0x3898 008923 fetch 1 ,mem_le_scanrsp_rcv +0x3899 008924 increase 1 ,pdata +0x389a 008925 store 1 ,mem_le_scanrsp_rcv +0x389b 008926 arg mem_le_rxbuf + 12 ,regc +: 008928 light_anylize_command: +0x389c 008929 ifetch 2 ,regc +0x389d 008930 arg 0x55aa ,temp +0x389e 008931 isub temp ,null +0x389f 008932 nrtn zero +0x38a0 008933 copy contr ,regc +0x38a1 008934 ifetcht 3 ,regc +0x38a2 008935 setarg 0xffffff +0x38a3 008936 isub temp ,null +0x38a4 008937 branch light_parse_cmd ,zero +0x38a5 008938 call light_find_controler_cmd +0x38a6 008939 branch light_parse_cmd ,user +0x38a7 008940 rtn +: 008942 light_parse_cmd: +0x38a8 008943 bpatch patch1b_3 ,mem_patch1b +0x38a9 008944 increase 4 ,regc +0x38aa 008945 ifetch 1 ,regc +0x38ab 008946 fetcht 1 ,mem_curr_packet_num +0x38ac 008947 isub temp ,null +0x38ad 008948 rtn zero +0x38ae 008949 store 1 ,mem_curr_packet_num +0x38af 008950 fetch 1 ,mem_le_req_rcv +0x38b0 008951 increase 1 ,pdata +0x38b1 008952 store 1 ,mem_le_req_rcv +0x38b2 008954 increase 1 ,regc +0x38b3 008955 ifetch 1 ,regc +0x38b4 008956 store 1 ,mem_light_crr_cmd_count +0x38b5 008957 copy pdata ,loopcnt +0x38b6 008958 rtn blank +: 008959 light_parse_cmd_loop: +0x38b7 008960 ifetch 1 ,contr +0x38b8 008961 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 +0x38b9 008962 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 +0x38ba 008963 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 +0x38bb 008964 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 +0x38bc 008965 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 +0x38bd 008966 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 +0x38be 008967 beq light_cmd_auto_mode ,light_parse_auto_mode +0x38bf 008968 beq light_cmd_pairing ,light_parse_pairing +0x38c0 008969 loop light_parse_cmd_loop +0x38c1 008970 rtn +: 008972 light_parse_cmd_pwm0: +0x38c2 008973 copy contr ,regc +0x38c3 008974 fetch 1 ,mem_light_pwm0 +0x38c4 008975 store 1 ,mem_pdatatemp +0x38c5 008976 arg 0 ,temp +: 008977 light_parse_cmd_pwm_common: +0x38c6 008978 storet 1 ,mem_pdatatemp + 1 +0x38c7 008979 setarg 10000 +0x38c8 008980 store 3 ,mem_pdatatemp + 2 +0x38c9 008981 ifetch 1 ,regc +0x38ca 008982 store 1 ,mem_pdatatemp + 5 +0x38cb 008983 call pwm_out_set +0x38cc 008984 and regc ,1 ,contr +0x38cd 008985 loop light_parse_cmd_loop +0x38ce 008986 rtn +: 008987 light_parse_cmd_pwm1: +0x38cf 008988 copy regc ,contr +0x38d0 008989 fetch 1 ,mem_light_pwm1 +0x38d1 008990 store 1 ,mem_pdatatemp +0x38d2 008991 arg 1 ,temp +0x38d3 008992 branch light_parse_cmd_pwm_common +: 008993 light_parse_cmd_pwm2: +0x38d4 008994 copy regc ,contr +0x38d5 008995 fetch 1 ,mem_light_pwm2 +0x38d6 008996 store 1 ,mem_pdatatemp +0x38d7 008997 arg 2 ,temp +0x38d8 008998 branch light_parse_cmd_pwm_common +: 008999 light_parse_cmd_pwm3: +0x38d9 009000 copy regc ,contr +0x38da 009001 fetch 1 ,mem_light_pwm3 +0x38db 009002 store 1 ,mem_pdatatemp +0x38dc 009003 arg 3 ,temp +0x38dd 009004 branch light_parse_cmd_pwm_common +: 009005 light_parse_cmd_pwm4: +0x38de 009006 copy regc ,contr +0x38df 009007 fetch 1 ,mem_light_pwm4 +0x38e0 009008 store 1 ,mem_pdatatemp +0x38e1 009009 arg 4 ,temp +0x38e2 009010 branch light_parse_cmd_pwm_common +: 009011 light_parse_cmd_pwm5: +0x38e3 009012 copy regc ,contr +0x38e4 009013 fetch 1 ,mem_light_pwm5 +0x38e5 009014 store 1 ,mem_pdatatemp +0x38e6 009015 arg 5 ,temp +0x38e7 009016 branch light_parse_cmd_pwm_common +: 009018 light_parse_auto_mode: +0x38e8 009019 ifetch 1 ,contr +0x38e9 009020 rtn +: 009022 light_parse_pairing: +0x38ea 009023 copy contr ,regc +0x38eb 009024 fetch 1 ,mem_light_pairing_enable +0x38ec 009025 bne 1 ,light_parse_pairing_abandon +0x38ed 009026 call update_controler_list +: 009027 light_parse_pairing_abandon: +0x38ee 009028 and regc ,4 ,contr +0x38ef 009029 rtn +: 009030 update_controler_list: +0x38f0 009031 bpatch patch1b_4 ,mem_patch1b +0x38f1 009032 call light_find_controler_pairing +0x38f2 009033 branch update_conrtoler_list_found ,user +0x38f3 009034 fetch 1 ,mem_light_next_record +0x38f4 009035 copy pdata ,temp +0x38f5 009036 increase 1 ,pdata +0x38f6 009037 store 1 ,mem_light_next_record +0x38f7 009038 call light_init_crr_cmd_count +0x38f8 009039 lshift2 temp ,temp +0x38f9 009040 setarg mem_light_clist +0x38fa 009041 iadd temp ,contw +0x38fb 009042 ifetch 4 ,regc +0x38fc 009043 istore 4 ,contw +0x38fd 009044 branch update_conrtoler_store_list +: 009045 update_conrtoler_list_found: +0x38fe 009046 add regc ,3 ,contr +0x38ff 009047 ifetch 1 ,contr +0x3900 009048 rtn blank +0x3901 009049 ifetch 4 ,regc +0x3902 009050 istore 4 ,rega +: 009051 update_conrtoler_store_list: +0x3903 009052 arg mem_light_next_record ,rega +0x3904 009053 arg 0 ,regb +0x3905 009054 arg 81 ,temp +0x3906 009055 branch iicd_write_eep_data +: 009059 lightc_init: +0x3907 009063 fetcht 1 ,mem_lightc_led_gpio +0x3908 009064 call gpio_out_inactive +0x3909 009065 rtn +: 009068 lightc_dispatch: +0x390a 009071 fetcht 1 ,mem_lightc_led_gpio +0x390b 009072 call gpio_out_active +0x390c 009075 fetcht 1 ,mem_lightc_led_gpio +0x390d 009076 call gpio_out_inactive +0x390e 009079 call lightc_start_adv +0x390f 009081 fetch 1 ,mem_adv_time +0x3910 009082 nrtn blank +0x3911 009084 call lpm_write_gpio_wakeup +0x3912 009085 hfetch 4 ,core_lpm_ctrl +0x3913 009086 set0 15 ,pdata +0x3914 009087 hstore 4 ,core_lpm_reg +0x3915 009088 call lpm_write_ctrl +0x3916 009089 arg param_hibernate_clks ,temp +0x3917 009090 branch lpm_sleep +: 009092 lightc_adv: +0x3918 009093 fetch 1 ,mem_adv_time +0x3919 009094 branch le_adv_loop_tx ,blank +0x391a 009095 increase -1 ,pdata +0x391b 009096 store 1 ,mem_adv_time +0x391c 009097 branch le_adv_loop_tx +: 009099 lightc_start_adv: +0x391d 009100 mul32 pdata ,20 ,pdata +0x391e 009101 arg mem_cmd0_string ,contr +0x391f 009102 iadd contr ,contr +0x3920 009103 ifetch 1 ,contr +0x3921 009104 rtn blank +0x3922 009105 copy pdata ,rega +0x3923 009106 copy rega ,loopcnt +0x3924 009107 arg mem_le_adv_data + 2 ,contw +0x3925 009108 call memcpy +0x3926 009109 copy rega ,pdata +0x3927 009110 increase 2 ,pdata +0x3928 009111 store 1 ,mem_le_adv_data_len +0x3929 009112 rtn +: 009119 module_init: +0x392a 009121 rtn wake +0x392b 009122 call le_modified_name +0x392c 009123 call adc_init_data +0x392d 009124 setarg module_process_idle +0x392e 009125 store 2 ,mem_cb_idle_process +0x392f 009126 setarg module_bt_conn_process +0x3930 009127 store 2 ,mem_cb_bt_process +0x3931 009128 setarg module_process_bb_event +0x3932 009129 store 2 ,mem_cb_bb_event_process +0x3933 009130 setarg module_le_conn_process +0x3934 009131 store 2 ,mem_cb_le_process +0x3935 009132 setarg module_lpm_lock +0x3936 009133 store 2 ,mem_cb_check_wakelock +0x3937 009134 setarg module_hci_cmd_transmit_le_notify +0x3938 009135 store 2 ,mem_cb_ble_transmit +0x3939 009136 setarg module_hci_event_receive_spp_data +0x393a 009137 store 2 ,mem_cb_receive_spp_data +0x393b 009138 setarg module_le_receive_data +0x393c 009139 store 2 ,mem_cb_att_write +0x393d 009140 setarg module_bb_event_timer +0x393e 009141 store 2 ,mem_cb_event_timer +0x393f 009143 call module_spp_clear_last_transmite_clock +0x3940 009144 bpatch patch1b_5 ,mem_patch1b +0x3941 009145 call module_lpm_uart_init +0x3942 009146 call module_gpio_init +0x3943 009147 call check_module_disabled +0x3944 009148 branch module_hci_event_enter_standby_mode +: 009151 module_lpm_uart_init: +0x3945 009152 fetch 4 ,mem_module_uart_rx_buffer +0x3946 009153 hstore 4 ,core_uart_rsaddr +0x3947 009155 fetch 4 ,mem_module_uart_tx_buffer +0x3948 009156 hstore 4 ,core_uart_tsaddr +0x3949 009158 hfetch 1 ,core_gpio_sel1 +0x394a 009159 or_into 0x04 ,pdata +0x394b 009160 and_into 0xfc ,pdata +0x394c 009161 hstore 1 ,core_gpio_sel1 +0x394d 009162 hjam 0x00 ,core_uart_ctrl +0x394e 009164 fetch 2 ,mem_module_uart_rx_buffer +0x394f 009165 hstore 2 ,core_uart_rrptr +0x3950 009166 fetch 2 ,mem_module_uart_tx_buffer +0x3951 009167 hstore 2 ,core_uart_twptr +0x3952 009168 hstore 2 ,core_uart_trptrp +0x3953 009170 hfetch 4 ,core_gpio_pu0 +0x3954 009171 set1 7 ,pdata +0x3955 009172 hstore 4 ,core_gpio_pu0 +0x3956 009174 hfetch 2 ,core_clkoff +0x3957 009175 set0 clock_off_uart ,pdata +0x3958 009176 hstore 2 ,core_clkoff +0x3959 009177 call uart_set_baud_by_mem +0x395a 009178 hjam uartclk_crystal ,core_uart_clksel +0x395b 009179 hjam uart_ctrl_h4 ,core_uart_ctrl +0x395c 009181 fetch 1 ,mem_module_flag +0x395d 009182 isolate1 module_flag_uart_flow_control ,pdata +0x395e 009183 hfetcht 1 ,core_uart_ctrl +0x395f 009184 setflag true ,4 ,temp +0x3960 009185 hstoret 1 ,core_uart_ctrl +0x3961 009186 rtn +: 009190 module_lpm_init: +0x3962 009191 call module_spp_clear_last_transmite_clock +0x3963 009192 branch module_lpm_uart_init +: 009195 module_gpio_init: +0x3964 009200 fetcht 1 ,mem_module_connect_state_gpio +0x3965 009201 call gpio_config_output +0x3966 009202 call module_set_conn_pin_low +0x3967 009204 fetcht 1 ,mem_module_wake_up_gpio +0x3968 009205 branch gpio_config_input +: 009207 module_lpm_lock: +0x3969 009208 fetcht 1 ,mem_module_wake_up_gpio +0x396a 009209 call gpio_get_bit +0x396b 009210 nbranch app_put_lpm_wake_lock ,true +0x396c 009211 branch app_get_lpm_wake_lock +: 009214 module_le_conn_process: +0x396d 009215 rtn +: 009217 module_bt_conn_process: +0x396e 009218 call module_spp_enter_sniff +0x396f 009219 branch module_control_air_flow +: 009221 module_spp_enter_sniff: +0x3970 009222 fetch 1 ,mem_ui_state_map +0x3971 009223 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +0x3972 009224 bpatch patch1b_6 ,mem_patch1b +0x3973 009225 setarg 0x3eff +0x3974 009226 fetcht 4 ,mem_last_transmite_clock +0x3975 009227 iadd temp ,temp +0x3976 009228 copy clkn_bt ,pdata +0x3977 009229 isub temp ,null +0x3978 009230 nrtn positive +0x3979 009231 fetch 2 ,mem_ui_state_map +0x397a 009232 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +0x397b 009233 fetch 1 ,mem_module_flag +0x397c 009234 rtnbit1 moudle_task_sniff +0x397d 009235 call module_set_sniff_task_flag +0x397e 009236 call app_bt_enter_sniff +: 009237 module_spp_clear_last_transmite_clock: +0x397f 009238 copy clkn_bt ,pdata +0x3980 009239 store 4 ,mem_last_transmite_clock +0x3981 009240 rtn +: 009243 module_process_idle: +0x3982 009244 call module_control_air_flow +0x3983 009245 call l2cap_malloc_is_fifo_full +0x3984 009246 nrtn blank +0x3985 009247 branch module_process +: 009250 module_process_bb_event: +0x3986 009251 copy regc ,pdata +0x3987 009252 beq bt_evt_bb_connected ,module_process_bb_conn +0x3988 009253 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +0x3989 009254 beq bt_evt_reconn_failed ,module_process_reconn_fail +0x398a 009255 beq bt_evt_setup_complete ,module_process_setup_complete +0x398b 009256 beq bt_evt_spp_connected ,module_process_spp_connected +0x398c 009257 beq bt_evt_spp_disconnected ,module_process_spp_disconnected +0x398d 009258 beq bt_evt_pincode_req ,module_process_evt_pincode_req +0x398e 009259 beq bt_evt_enter_sniff ,module_process_enter_sniff +0x398f 009260 beq bt_evt_exit_sniff ,module_process_exit_sniff +0x3990 009261 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +0x3991 009262 beq bt_evt_le_connected ,module_process_le_conn +0x3992 009263 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +0x3993 009264 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +0x3994 009265 beq bt_evt_unsniff_accept ,module_process_unsniff_accept +0x3995 009266 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +0x3996 009267 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +0x3997 009268 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +0x3998 009269 beq bt_evt_le_start_enc ,module_hci_event_start_enc +0x3999 009270 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +0x399a 009271 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +0x399b 009272 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +0x399c 009273 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +0x399d 009274 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +0x399e 009275 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +0x399f 009276 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey +0x39a0 009277 beq bt_evt_store_nvram ,module_hci_event_store_device +0x39a1 009278 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +0x39a2 009279 rtn +: 009282 module_process_bb_event_disconned: +0x39a3 009283 call module_spp_clear_last_transmite_clock +0x39a4 009284 fetch 1 ,mem_flag_pairing_state +0x39a5 009285 ncall module_hci_event_bt_pairing_fail ,blank +0x39a6 009286 call module_disconn_start +0x39a7 009287 fetch 2 ,mem_ui_state_map +0x39a8 009288 rtnbit0 ui_state_bt_spp_conn +0x39a9 009289 branch module_spp_disconnected +: 009291 module_process_spp_connected: +0x39aa 009292 fetch 2 ,mem_ui_state_map +0x39ab 009293 set1 ui_state_bt_spp_conn ,pdata +0x39ac 009294 store 2 ,mem_ui_state_map +0x39ad 009295 fetch 1 ,mem_module_spp_lpm_mult +0x39ae 009296 store 1 ,mem_lpm_mult +0x39af 009297 call module_set_conn_pin_low +0x39b0 009298 branch module_hci_event_spp_connect +: 009300 module_process_spp_disconnected: +: 009302 module_spp_disconnected: +0x39b1 009303 fetch 2 ,mem_ui_state_map +0x39b2 009304 rtnbit0 ui_state_bt_spp_conn +0x39b3 009305 set0 ui_state_bt_spp_conn ,pdata +0x39b4 009306 store 2 ,mem_ui_state_map +0x39b5 009307 branch module_hci_event_spp_disconnect +: 009310 module_process_enter_sniff: +: 009312 module_sniff_param_check: +0x39b6 009313 call module_spp_clear_last_transmite_clock +0x39b7 009316 fetch 2 ,mem_context + coffset_tsniff +0x39b8 009317 rshift pdata ,pdata +0x39b9 009318 fetcht 2 ,mem_sniff_param_interval +0x39ba 009319 isub temp ,null +0x39bb 009320 nbranch module_sniff_param_check_unsniff ,zero +0x39bc 009321 branch app_lpm_mult_enable +: 009322 module_sniff_param_check_unsniff: +0x39bd 009323 fetch 1 ,mem_module_flag +0x39be 009324 rtnbit1 moudle_task_unsniff +0x39bf 009325 hfetch 2 ,core_uart_rxitems +0x39c0 009326 ncall module_set_unsniff_task_flag ,blank +0x39c1 009327 branch app_bt_sniff_exit +: 009329 module_process_exit_sniff: +0x39c2 009330 call module_clear_sniff_task_flag +0x39c3 009331 branch app_lpm_mult_disable +: 009333 module_process_setup_complete: +0x39c4 009334 call module_spp_clear_last_transmite_clock +0x39c5 009335 branch module_conn_start +: 009337 module_process_bb_even_le_disconn: +0x39c6 009338 call le_clr_config_more_data +0x39c7 009339 call module_disconn_start +0x39c8 009340 branch module_hci_event_le_disconnect +: 009342 module_process_evt_pincode_req: +0x39c9 009343 branch app_bt_set_pincode +: 009346 module_process_sniff_not_accept: +0x39ca 009347 branch module_clear_sniff_task_flag +: 009350 module_process_unsniff_accept: +0x39cb 009351 fetch 1 ,mem_module_flag +0x39cc 009352 bbit0 moudle_task_unsniff ,app_bt_enter_sniff +0x39cd 009353 branch module_clear_unsniff_task_flag +: 009356 module_process_unsniff_not_accept: +0x39ce 009357 branch module_clear_unsniff_task_flag +: 009360 module_process_le_conn: +0x39cf 009361 call le_send_att_exchange_mtu_requset +0x39d0 009362 call module_conn_start +0x39d1 009363 fetch 1 ,mem_module_le_lpm_mult +0x39d2 009364 store 1 ,mem_lpm_mult +0x39d3 009365 branch module_hci_event_le_connect +: 009368 module_process_bb_conn: +0x39d4 009369 jam 0 ,mem_flag_mode_ssp_pin +0x39d5 009370 call module_clear_sniff_task_flag +0x39d6 009371 branch module_clear_unsniff_task_flag +: 009373 module_process_page_time_out: +: 009374 module_process_reconn_fail: +: 009375 module_disconn_start: +0x39d7 009376 call module_start_adv_discovery_by_command +0x39d8 009377 branch module_set_conn_pin_high +: 009380 module_process_ble_ltk_lost: +0x39d9 009381 call le_send_reject_ind +0x39da 009382 branch le_send_smp_security_request +: 009385 module_set_conn_pin_high: +0x39db 009386 fetcht 1 ,mem_module_connect_state_gpio +0x39dc 009387 branch gpio_out_active +: 009389 module_conn_start: +0x39dd 009390 call module_stop_adv_discovery +0x39de 009391 branch module_set_conn_pin_low +: 009393 module_stop_adv_discovery: +0x39df 009394 fetch 1 ,mem_module_state +0x39e0 009395 isolate1 moudle_state_bt_bit ,pdata +0x39e1 009396 call app_bt_stop_discovery ,true +0x39e2 009397 fetch 1 ,mem_module_state +0x39e3 009398 isolate1 moudle_state_ble_bit ,pdata +0x39e4 009399 call app_ble_stop_adv ,true +0x39e5 009400 rtn +: 009401 module_set_conn_pin_low: +0x39e6 009402 fetcht 1 ,mem_module_connect_state_gpio +0x39e7 009403 branch gpio_out_inactive +: 009405 module_process_with_credit: +0x39e8 009406 fetch 1 ,mem_credit_flag +0x39e9 009407 rtneq credit_disable +0x39ea 009408 branch rfcomm_send_uih_without_payload +: 009410 module_process: +0x39eb 009411 hfetch 1 ,core_uart_status +0x39ec 009412 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +0x39ed 009413 call uartd_prepare_rx +0x39ee 009414 ifetch 1 ,contru +0x39ef 009415 bne 0x01 ,module_hci_in_excp +0x39f0 009416 hfetch 2 ,core_uart_rxitems +0x39f1 009417 sub pdata ,2 ,null +0x39f2 009418 rtn positive +0x39f3 009419 ifetch 1 ,contru +0x39f4 009420 store 1 ,mem_module_uart_opcode +0x39f5 009421 ifetcht 1 ,contru +0x39f6 009422 copy contru ,rega +0x39f7 009423 storet 1 ,mem_module_uart_len +0x39f8 009424 add temp ,3 ,temp +0x39f9 009425 hfetch 2 ,core_uart_rxitems +0x39fa 009426 isub temp ,temp +0x39fb 009427 nrtn positive +0x39fc 009428 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x39fd 009429 call module_hci_cmd_control +0x39fe 009430 fetch 1 ,mem_module_temp_nl_discard_packet +0x39ff 009431 rtneq hci_not_discard_packet +0x3a00 009432 branch module_hci_dicard_packet +: 009434 module_hci_in_excp: +0x3a01 009435 call delay_10ms +0x3a02 009436 call module_hci_event_invalid_packet +0x3a03 009437 branch module_hci_release_except +: 009440 module_hci_release_except: +0x3a04 009441 bpatch patch1b_7 ,mem_patch1b +0x3a05 009442 hfetch 2 ,core_uart_rxitems +0x3a06 009443 rtn blank +0x3a07 009444 call uartd_prepare_rx +0x3a08 009445 ifetch 1 ,contru +0x3a09 009446 sub pdata ,0x01 ,null +0x3a0a 009447 ncall module_hci_dicard_bytes ,zero +0x3a0b 009448 nbranch module_hci_release_except ,zero +0x3a0c 009449 ifetch 1 ,contru +0x3a0d 009450 rtneq hci_cmd_spp_data_req +0x3a0e 009451 rtneq hci_cmd_set_credit_given +0x3a0f 009452 increase -1 ,contru +0x3a10 009453 call module_hci_dicard_bytes +0x3a11 009454 branch module_hci_release_except +: 009456 module_hci_dicard_packet: +0x3a12 009457 call uartd_prepare_rx +0x3a13 009458 increase 2 ,contru +0x3a14 009459 ifetch 1 ,contru +0x3a15 009460 iadd contru ,contru +: 009461 module_hci_dicard_bytes: +0x3a16 009462 branch uartd_rxdone +: 009465 module_hci_cmd_control: +0x3a17 009466 bpatch patch1c_0 ,mem_patch1c +0x3a18 009467 fetch 1 ,mem_module_uart_opcode +0x3a19 009468 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +0x3a1a 009469 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +0x3a1b 009470 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +0x3a1c 009471 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +0x3a1d 009472 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +0x3a1e 009473 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +0x3a1f 009474 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +0x3a20 009475 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +0x3a21 009476 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +0x3a22 009477 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +0x3a23 009478 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +0x3a24 009479 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +0x3a25 009480 beq hci_cmd_version_req ,module_hci_cmd_version_request +0x3a26 009481 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +0x3a27 009482 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +0x3a28 009483 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +0x3a29 009484 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +0x3a2a 009485 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +0x3a2b 009486 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +0x3a2c 009487 beq hci_cmd_power_req ,module_hci_cmd_power_request +0x3a2d 009488 beq hci_cmd_power_set ,module_hci_cmd_power_set +0x3a2e 009489 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +0x3a2f 009490 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +0x3a30 009491 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +0x3a31 009492 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +0x3a32 009493 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +0x3a33 009494 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +0x3a34 009495 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +0x3a35 009496 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +0x3a36 009497 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +0x3a37 009498 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +0x3a38 009499 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +0x3a39 009500 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +0x3a3a 009501 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +0x3a3b 009502 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +0x3a3c 009503 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +0x3a3d 009504 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm +0x3a3e 009505 branch module_hci_event_receive_invalid_cmd +: 009510 module_hci_cmd_set_bt_addr: +0x3a3f 009511 fetch 1 ,mem_module_uart_len +0x3a40 009512 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a41 009513 ifetch 6 ,contru +0x3a42 009514 store 6 ,mem_lap +0x3a43 009515 branch module_hci_event_receive_valid_cmd +: 009518 module_hci_cmd_set_le_addr: +0x3a44 009519 fetch 1 ,mem_module_uart_len +0x3a45 009520 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a46 009521 ifetch 6 ,contru +0x3a47 009522 store 6 ,mem_le_lap +0x3a48 009523 branch module_hci_event_receive_valid_cmd +: 009527 module_hci_cmd_set_visibility: +0x3a49 009528 fetch 1 ,mem_module_uart_len +0x3a4a 009529 bne 1 ,module_hci_event_receive_invalid_cmd +0x3a4b 009530 copy rega ,contru +0x3a4c 009531 call module_hci_event_receive_valid_cmd +0x3a4d 009532 ifetcht 1 ,contru +0x3a4e 009533 storet 1 ,mem_module_bluetooth_stauts_by_command +0x3a4f 009534 fetch 2 ,mem_ui_state_map +0x3a50 009535 rtnbit1 ui_state_ble_connected +0x3a51 009536 rtnbit1 ui_state_bt_connected +: 009537 module_start_adv_discovery_by_command: +0x3a52 009538 fetch 1 ,mem_module_state +0x3a53 009539 isolate1 moudle_state_bt_bit ,pdata +0x3a54 009540 nbranch moudle_start_adv_by_command ,true +0x3a55 009541 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a56 009542 and temp ,0x03 ,pdata +0x3a57 009543 store 1 ,mem_scan_mode +: 009544 moudle_start_adv_by_command: +0x3a58 009545 fetch 1 ,mem_module_state +0x3a59 009546 isolate1 moudle_state_ble_bit ,pdata +0x3a5a 009547 nrtn true +0x3a5b 009548 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a5c 009549 isolate1 2 ,temp +0x3a5d 009550 branch app_ble_start_adv ,true +0x3a5e 009551 branch app_ble_stop_adv +: 009555 module_hci_cmd_set_bt_name: +0x3a5f 009556 fetch 1 ,mem_module_uart_len +0x3a60 009557 sub pdata ,67 ,null +0x3a61 009558 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a62 009559 store 1 ,mem_local_name_length +0x3a63 009560 arg 8 ,loopcnt +0x3a64 009561 call memset0 +0x3a65 009562 fetch 1 ,mem_module_uart_len +0x3a66 009563 copy pdata ,loopcnt +0x3a67 009564 copy rega ,contru +0x3a68 009565 arg mem_local_name ,contw +0x3a69 009566 call uart_copy_rx_bytes_fast +0x3a6a 009567 branch module_hci_event_receive_valid_cmd +: 009571 module_hci_cmd_set_le_name: +0x3a6b 009572 fetch 1 ,mem_module_uart_len +0x3a6c 009573 sub pdata ,29 ,null +0x3a6d 009574 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a6e 009575 store 1 ,mem_le_name_len +0x3a6f 009576 copy pdata ,loopcnt +0x3a70 009577 copy rega ,contru +0x3a71 009578 arg mem_le_name ,contw +0x3a72 009579 call uart_copy_rx_bytes_fast +0x3a73 009580 call le_modified_name +0x3a74 009581 branch module_hci_event_receive_valid_cmd +: 009585 module_hci_cmd_receive_spp_data: +0x3a75 009586 fetch 1 ,mem_ui_state_map +0x3a76 009587 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +0x3a77 009588 call app_check_sniff +0x3a78 009589 branch module_hci_cmd_spp_exit_sniff ,true +0x3a79 009590 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a7a 009592 call module_spp_clear_last_transmite_clock +0x3a7b 009593 fetch 1 ,mem_remote_credits +0x3a7c 009594 rtn blank +0x3a7d 009595 fetch 2 ,mem_nl_rx_len_all +0x3a7e 009596 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all +0x3a7f 009597 fetch 1 ,mem_module_uart_len +0x3a80 009598 store 2 ,mem_nl_rx_len_all +0x3a81 009600 copy rega ,contru +0x3a82 009603 copy contru ,pdata +0x3a83 009604 store 2 ,mem_nl_rx_data_src +: 009605 module_hci_cmd_pass_init_ng_rx_len_all: +0x3a84 009606 call module_hci_cmd_get_current_packet_len_and_remain_len +0x3a85 009607 branch spp_tx_rfcomm_packet +: 009609 module_hci_cmd_spp_exit_sniff: +0x3a86 009610 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a87 009611 branch module_exit_sniff +: 009613 module_hci_cmd_get_current_packet_len_and_remain_len: +0x3a88 009614 call module_hci_cmd_get_current_patcket_len +0x3a89 009615 fetch 2 ,mem_nl_rx_len_all +0x3a8a 009616 fetcht 2 ,mem_current_packet_length +0x3a8b 009617 isub temp ,pdata +0x3a8c 009618 store 2 ,mem_nl_rx_len_all +0x3a8d 009619 rtn +: 009621 module_hci_cmd_get_current_patcket_len: +0x3a8e 009622 fetch 2 ,mem_nl_rx_len_all +0x3a8f 009623 arg dm_refcom_buff_len ,temp +0x3a90 009624 call not_greater_than +0x3a91 009625 fetcht 2 ,mem_rfcomm_max_frame_size +0x3a92 009626 call not_greater_than +0x3a93 009627 fetcht 2 ,mem_pn_max_frame_size +0x3a94 009628 call not_greater_than +0x3a95 009629 store 2 ,mem_current_packet_length +0x3a96 009630 rtn +: 009632 module_hci_command_tx_spp_tx_complete: +0x3a97 009633 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3a98 009634 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +0x3a99 009635 branch module_hci_event_receive_valid_cmd +: 009639 module_hci_cmd_receive_le_data: +0x3a9a 009640 fetch 2 ,mem_ui_state_map +0x3a9b 009641 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3a9c 009642 call module_check_ble_encrypt_state +0x3a9d 009643 branch module_hci_event_receive_invalid_cmd ,user +0x3a9e 009644 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a9f 009645 fetch 1 ,mem_module_flag +0x3aa0 009646 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +0x3aa1 009647 fetch 1 ,mem_module_hci_notify_len +0x3aa2 009648 nrtn blank +0x3aa3 009649 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3aa4 009650 ifetch 2 ,contru +0x3aa5 009651 store 2 ,mem_module_hci_notify_handle +0x3aa6 009652 copy contru ,pdata +0x3aa7 009653 store 2 ,mem_module_hci_nofiy_addr +0x3aa8 009654 fetch 1 ,mem_module_uart_len +0x3aa9 009655 pincrease -2 +0x3aaa 009656 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aab 009657 branch module_hci_event_receive_invalid_cmd ,zero +0x3aac 009658 store 1 ,mem_module_hci_notify_len +0x3aad 009659 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3aae 009660 call le_set_config_more_data +0x3aaf 009661 call module_hci_cmd_transmit_le_notify +0x3ab0 009662 call module_hci_cmd_transmit_le_notify +0x3ab1 009663 call module_hci_cmd_transmit_le_notify +0x3ab2 009664 fetch 1 ,mem_module_flag +0x3ab3 009665 rtnbit0 module_flag_ble_data_finish +: 009666 module_hci_cmd_receive_le_data_finish: +0x3ab4 009667 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3ab5 009668 call module_clear_le_tx_data_flag +0x3ab6 009669 branch module_hci_event_receive_valid_cmd +: 009671 module_hci_cmd_transmit_le_notify: +0x3ab7 009672 fetch 1 ,mem_module_hci_notify_len +0x3ab8 009673 rtn blank +0x3ab9 009674 call le_fifo_check_nearly_full +0x3aba 009675 nrtn blank +0x3abb 009676 call module_get_le_remote_mtu +0x3abc 009677 bpatch patch1c_1 ,mem_patch1c +0x3abd 009678 add temp ,-3 ,pdata +0x3abe 009679 fetcht 1 ,mem_module_hci_notify_len +0x3abf 009680 call not_greater_than +0x3ac0 009681 copy pdata ,rega +0x3ac1 009682 copy temp ,pdata +0x3ac2 009683 isub rega ,pdata +0x3ac3 009684 store 1 ,mem_module_hci_notify_len +0x3ac4 009685 fetcht 2 ,mem_module_hci_notify_handle +0x3ac5 009686 call le_att_malloc_tx_notify +0x3ac6 009687 fetch 2 ,mem_module_hci_nofiy_addr +0x3ac7 009688 copy pdata ,contru +0x3ac8 009689 copy rega ,loopcnt +0x3ac9 009690 call uart_copy_rx_bytes_fast +0x3aca 009691 copy contru ,pdata +0x3acb 009692 store 2 ,mem_module_hci_nofiy_addr +0x3acc 009693 fetch 1 ,mem_module_hci_notify_len +0x3acd 009694 nrtn blank +0x3ace 009695 branch module_set_le_tx_data_flag +: 009699 module_get_le_remote_mtu: +0x3acf 009700 arg 0x17 ,temp +0x3ad0 009701 fetch 1 ,mem_module_flag +0x3ad1 009702 rtnbit1 module_flag_ble_send_mtu23 +0x3ad2 009703 fetcht 2 ,mem_le_remote_mtu +0x3ad3 009704 rtn +: 009706 module_check_ble_encrypt_state: +0x3ad4 009707 fetch 1 ,mem_module_flag +0x3ad5 009708 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +0x3ad6 009709 branch disable_user +: 009713 module_hci_cmd_inquire_status: +0x3ad7 009714 branch module_hci_event_status_res +: 009718 module_hci_cmd_set_pairing_mode: +0x3ad8 009719 copy rega ,contru +0x3ad9 009720 ifetch 1 ,contru +0x3ada 009721 beq pairing_pincode ,module_hci_pairing_pincode_mode +0x3adb 009722 beq pairing_justwork ,module_hci_pairing_just_work_mode +0x3adc 009723 beq pairing_passkey ,module_hci_pairing_passkey +0x3add 009724 beq pairing_confirm ,module_hci_pairing_numeric_comparison +0x3ade 009725 branch module_hci_event_receive_invalid_cmd +: 009726 module_hci_pairing_pincode_mode: +0x3adf 009727 call ssp_disable +0x3ae0 009728 jam 0 ,mem_ssp_enable +0x3ae1 009729 branch module_hci_event_receive_valid_cmd +: 009730 module_hci_pairing_just_work_mode: +0x3ae2 009731 setarg ssp_mode_just_work_io_cap_data +: 009732 module_hci_sspairing_mode: +0x3ae3 009733 store 3 ,mem_sp_iocap_local +0x3ae4 009734 store 1 ,mem_ssp_mode_flag +0x3ae5 009735 call ssp_enable +0x3ae6 009736 jam 1 ,mem_ssp_enable +0x3ae7 009737 branch module_hci_event_receive_valid_cmd +: 009738 module_hci_pairing_passkey: +0x3ae8 009739 setarg ssp_mode_passkey_io_cap_data +0x3ae9 009740 branch module_hci_sspairing_mode +: 009742 module_hci_pairing_numeric_comparison: +0x3aea 009743 setarg ssp_mode_ssp_pin_io_cap_data +0x3aeb 009744 branch module_hci_sspairing_mode +: 009747 module_hci_cmd_set_pincode: +0x3aec 009748 fetch 1 ,mem_module_uart_len +0x3aed 009749 sub pdata ,16 ,null +0x3aee 009750 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aef 009751 store 1 ,mem_pin_length +0x3af0 009752 copy pdata ,loopcnt +0x3af1 009753 arg mem_pin ,contw +0x3af2 009754 call uart_copy_rx_bytes +0x3af3 009755 branch module_hci_event_receive_valid_cmd +: 009759 module_hci_cmd_set_uart_control_mode: +0x3af4 009760 copy rega ,contru +0x3af5 009761 ifetch 1 ,contru +0x3af6 009762 hfetcht 1 ,core_uart_ctrl +0x3af7 009763 nsetflag blank ,4 ,temp +0x3af8 009764 hstoret 1 ,core_uart_ctrl +0x3af9 009765 branch module_hci_event_receive_valid_cmd +: 009769 module_hci_cmd_set_uart_baud: +0x3afa 009770 fetch 1 ,mem_module_uart_len +0x3afb 009771 copy pdata ,loopcnt +0x3afc 009772 copy rega ,contru +0x3afd 009773 call string2dec_from_uart +0x3afe 009774 setarg uart_clk_24 +0x3aff 009775 idiv temp +0x3b00 009776 call wait_div_end +0x3b01 009777 quotient pdata +: 009778 module_hci_cmd_set_uart_baud_ok: +0x3b02 009779 store uart_baud_len ,mem_baud +0x3b03 009780 call module_hci_event_receive_valid_cmd +0x3b04 009781 call wait_uarttx +0x3b05 009782 branch uart_set_baud_by_mem +: 009786 module_hci_cmd_version_request: +0x3b06 009787 arg 2 ,rega +0x3b07 009788 arg mem_soft_version_num ,regb +0x3b08 009789 arg 0 ,temp +0x3b09 009790 branch module_hci_event_set_cmd +: 009791 module_hci_event_set_cmd_send_response: +0x3b0a 009792 store 2 ,mem_event_cmd_response_content +0x3b0b 009793 arg mem_event_cmd_response_content ,regb +0x3b0c 009794 arg 0 ,temp +0x3b0d 009795 branch module_hci_event_set_cmd +: 009799 module_hci_cmd_bt_disconnect: +0x3b0e 009800 fetch 2 ,mem_ui_state_map +0x3b0f 009801 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +: 009802 module_hci_cmd_bt_disconnect_doing: +0x3b10 009803 call module_hci_event_receive_valid_cmd +0x3b11 009804 branch app_bt_disconnect +: 009808 module_hci_cmd_ble_disconnect: +0x3b12 009809 fetch 2 ,mem_ui_state_map +0x3b13 009810 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +: 009811 module_hci_cmd_ble_disconnect_doing: +0x3b14 009812 call module_hci_event_receive_valid_cmd +0x3b15 009813 branch app_ble_disconnect +: 009819 module_hci_cmd_set_nvram: +0x3b16 009820 fetch 1 ,mem_module_uart_len +0x3b17 009821 copy pdata ,loopcnt +0x3b18 009822 copy rega ,contru +0x3b19 009823 fetch 2 ,mem_nv_data_ptr +0x3b1a 009824 icopy contw +0x3b1b 009825 call uart_copy_rx_bytes_fast +0x3b1c 009826 branch module_hci_event_receive_valid_cmd +: 009830 module_hci_cmd_confirm_gkey: +0x3b1d 009831 fetch 1 ,mem_ui_state_map +0x3b1e 009832 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +0x3b1f 009833 ifetch 1 ,contru +0x3b20 009834 fetcht 1 ,mem_flag_mode_ssp_pin +0x3b21 009835 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +0x3b22 009836 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +0x3b23 009837 storet 1 ,mem_flag_mode_ssp_pin +0x3b24 009839 call module_hci_event_receive_valid_cmd +0x3b25 009841 fetch 1 ,mem_flag_mode_ssp_pin +0x3b26 009842 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +0x3b27 009843 rtn +: 009845 dhkey_not_accept: +0x3b28 009846 jam 0 ,mem_flag_mode_ssp_pin +0x3b29 009847 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +0x3b2a 009848 branch ui_ipc_send_cmd +: 009851 module_hci_cmd_spp_number_comparison_result_is1: +0x3b2b 009852 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x3b2c 009853 branch dhkey_not_accept +: 009857 module_hci_cmd_set_credit_given: +0x3b2d 009858 fetch 1 ,mem_ui_state_map +0x3b2e 009859 rtnbit0 ui_state_bt_spp_conn +0x3b2f 009860 fetch 1 ,mem_credit_flag +0x3b30 009861 rtneq credit_disable +0x3b31 009862 ifetch 1 ,contru +0x3b32 009863 fetcht 1 ,mem_credit_given +0x3b33 009864 iadd temp ,temp +0x3b34 009865 storet 1 ,mem_credit_given +0x3b35 009866 rtn +: 009870 module_hci_cmd_auto_adv: +0x3b36 009871 arg 0x40 ,loopcnt +0x3b37 009872 arg mem_le_adv_data_len ,contw +0x3b38 009873 call clear_mem +0x3b39 009874 setarg 0 +0x3b3a 009875 store 1 ,mem_regb +0x3b3b 009876 copy rega ,contru +: 009877 module_hci_cmd_auto_adv_loop: +0x3b3c 009878 copy contru ,pdata +0x3b3d 009879 store 2 ,mem_regc +0x3b3e 009880 call module_hci_cmd_auto_adv_adv_analys +0x3b3f 009882 fetch 1 ,mem_regb +0x3b40 009883 fetcht 1 ,mem_temp +0x3b41 009884 increase 1 ,temp +0x3b42 009885 iadd temp ,pdata +0x3b43 009886 store 1 ,mem_regb +0x3b44 009888 sub pdata ,31 ,null +0x3b45 009889 nbranch module_hci_cmd_auto_adv_store_scan ,positive +: 009890 module_hci_cmd_auto_adv_store_adv: +0x3b46 009891 fetcht 1 ,mem_le_adv_data_len +0x3b47 009892 setarg mem_le_adv_data +0x3b48 009893 iadd temp ,pdata +0x3b49 009894 store 2 ,mem_contw +0x3b4a 009895 fetcht 1 ,mem_temp +0x3b4b 009896 increase 1 ,temp +0x3b4c 009897 fetch 1 ,mem_le_adv_data_len +0x3b4d 009898 iadd temp ,pdata +0x3b4e 009899 store 1 ,mem_le_adv_data_len +0x3b4f 009900 branch module_hci_cmd_auto_adv_store_common +: 009901 module_hci_cmd_auto_adv_store_scan: +0x3b50 009902 fetcht 1 ,mem_le_scan_data_len +0x3b51 009903 setarg mem_le_scan_data +0x3b52 009904 iadd temp ,pdata +0x3b53 009905 store 2 ,mem_contw +0x3b54 009906 fetcht 1 ,mem_temp +0x3b55 009907 increase 1 ,temp +0x3b56 009908 fetch 1 ,mem_le_scan_data_len +0x3b57 009909 iadd temp ,pdata +0x3b58 009910 store 1 ,mem_le_scan_data_len +: 009911 module_hci_cmd_auto_adv_store_common: +0x3b59 009912 fetch 2 ,mem_contw +0x3b5a 009913 copy pdata ,contw +0x3b5b 009914 fetch 2 ,mem_regc +0x3b5c 009915 copy pdata ,contru +0x3b5d 009917 copy temp ,loopcnt +0x3b5e 009918 call uart_copy_rx_bytes_fast +0x3b5f 009920 fetch 1 ,mem_module_uart_len +0x3b60 009921 fetcht 1 ,mem_regb +0x3b61 009922 isub temp ,null +0x3b62 009923 nbranch module_hci_cmd_auto_adv_loop ,zero +0x3b63 009924 branch module_hci_event_receive_valid_cmd +: 009927 module_hci_cmd_auto_adv_adv_analys: +0x3b64 009928 ifetch 1 ,contru +0x3b65 009929 store 1 ,mem_temp +0x3b66 009930 ifetch 1 ,contru +0x3b67 009931 store 1 ,mem_rega +0x3b68 009932 rtn +: 009936 module_hci_cmd_power_request: +0x3b69 009937 arg 0 ,temp +0x3b6a 009938 arg 2 ,rega +0x3b6b 009939 fetch 2 ,mem_module_vdd_quotient +0x3b6c 009940 store 2 ,mem_event_cmd_response_content +0x3b6d 009941 arg mem_event_cmd_response_content ,regb +0x3b6e 009942 branch module_hci_event_set_cmd +: 009946 module_hci_cmd_power_set: +0x3b6f 009947 fetch 1 ,mem_module_uart_len +0x3b70 009948 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b71 009949 ifetch 1 ,contru +0x3b72 009950 store 1 ,mem_module_read_vdd_flag +0x3b73 009951 setarg 0x00 +0x3b74 009952 store 2 ,mem_module_vdd_quotient +0x3b75 009953 branch module_hci_event_receive_valid_cmd +: 009957 module_hci_cmd_passkey_entry: +0x3b76 009958 ifetch 4 ,contru +0x3b77 009959 store 4 ,mem_pin +0x3b78 009960 jam 4 ,mem_pin_length +0x3b79 009961 jam 0 ,mem_authentication_passkey_times +0x3b7a 009962 call module_hci_event_receive_valid_cmd +0x3b7b 009963 branch authentication_passkey +: 009967 module_hci_cmd_set_gpio: +0x3b7c 009968 fetch 1 ,mem_module_uart_len +0x3b7d 009969 bne 3 ,module_hci_event_receive_invalid_cmd +0x3b7e 009970 ifetch 1 ,contru +0x3b7f 009971 beq hci_cmd_config_gpio_input ,module_set_gpio_input +0x3b80 009972 beq hci_cmd_config_gpio_output ,module_set_gpio_output +0x3b81 009973 branch module_hci_event_receive_invalid_cmd +: 009975 module_set_gpio_input: +0x3b82 009976 ifetcht 1 ,contru +0x3b83 009977 ifetch 1 ,contru +0x3b84 009978 beq gpio_input_high_impedance ,module_set_gpio_high_impedance +0x3b85 009979 nsetflag blank ,7 ,temp +0x3b86 009980 call gpio_config_input +0x3b87 009981 branch module_hci_event_receive_valid_cmd +: 009983 module_set_gpio_high_impedance: +0x3b88 009984 call gpio_set_high_impedance +0x3b89 009985 branch module_hci_event_receive_valid_cmd +: 009987 module_set_gpio_output: +0x3b8a 009988 ifetcht 1 ,contru +0x3b8b 009989 call gpio_config_output0 +0x3b8c 009990 ifetch 1 ,contru +0x3b8d 009991 isolate1 0 ,pdata +0x3b8e 009992 call gpio_out_flag +0x3b8f 009993 branch module_hci_event_receive_valid_cmd +: 009997 module_hci_cmd_read_gpio: +0x3b90 009998 fetch 1 ,mem_module_uart_len +0x3b91 009999 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b92 010000 ifetcht 1 ,contru +0x3b93 010001 call gpio_get_bit +0x3b94 010002 setarg 0x0 +0x3b95 010003 nsetflag true ,0 ,pdata +0x3b96 010004 arg 1 ,rega +0x3b97 010005 branch module_hci_event_set_cmd_send_response +: 010009 module_hci_cmd_le_set_pairing_mode: +0x3b98 010010 copy rega ,contru +0x3b99 010011 ifetch 1 ,contru +0x3b9a 010012 copy pdata ,temp +0x3b9b 010013 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +0x3b9c 010014 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +0x3b9d 010015 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +0x3b9e 010016 store 1 ,mem_le_pairing_mode +0x3b9f 010017 beq le_pairing_mode_none ,module_le_set_no_pairing +0x3ba0 010018 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +0x3ba1 010019 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +0x3ba2 010020 branch module_hci_event_receive_invalid_cmd +: 010022 module_le_set_pairing_mode_secure_justwork: +0x3ba3 010023 fetch 1 ,mem_le_secure_connect_enable +0x3ba4 010024 branch module_hci_event_receive_invalid_cmd ,blank +0x3ba5 010025 storet 1 ,mem_le_pairing_mode +0x3ba6 010026 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3ba7 010027 branch module_le_set_noinputnooutput +: 010028 module_le_set_pairing_mode_secure_numeric: +0x3ba8 010029 fetch 1 ,mem_le_secure_connect_enable +0x3ba9 010030 branch module_hci_event_receive_invalid_cmd ,blank +0x3baa 010031 storet 1 ,mem_le_pairing_mode +0x3bab 010032 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bac 010033 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x3bad 010034 branch module_hci_event_receive_valid_cmd +: 010035 module_le_set_pairing_mode_secure_passkey: +0x3bae 010036 fetch 1 ,mem_le_secure_connect_enable +0x3baf 010037 branch module_hci_event_receive_invalid_cmd ,blank +0x3bb0 010038 storet 1 ,mem_le_pairing_mode +0x3bb1 010039 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bb2 010040 branch module_le_set_displayonly +: 010041 module_le_set_no_pairing: +0x3bb3 010042 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 010043 module_le_set_noinputnooutput: +0x3bb4 010044 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x3bb5 010045 branch module_hci_event_receive_valid_cmd +: 010046 module_le_set_pairing_mode_lagacy_just_work: +0x3bb6 010047 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x3bb7 010048 branch module_le_set_noinputnooutput +: 010049 module_le_set_pairing_mode_lagacy_passkey: +0x3bb8 010050 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 010051 module_le_set_displayonly: +0x3bb9 010052 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x3bba 010053 branch module_hci_event_receive_valid_cmd +: 010057 module_hci_cmd_le_set_adv_data: +0x3bbb 010058 fetch 1 ,mem_module_uart_len +0x3bbc 010059 sub pdata ,31 ,null +0x3bbd 010060 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bbe 010061 store 1 ,mem_le_adv_data_len +0x3bbf 010062 copy pdata ,loopcnt +0x3bc0 010063 copy rega ,contru +0x3bc1 010064 arg mem_le_adv_data ,contw +0x3bc2 010065 call uart_copy_rx_bytes_fast +0x3bc3 010066 branch module_hci_event_receive_valid_cmd +: 010070 module_hci_cmd_le_set_scan_data: +0x3bc4 010071 fetch 1 ,mem_module_uart_len +0x3bc5 010072 sub pdata ,31 ,null +0x3bc6 010073 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bc7 010074 store 1 ,mem_le_scan_data_len +0x3bc8 010075 copy pdata ,loopcnt +0x3bc9 010076 copy rega ,contru +0x3bca 010077 arg mem_le_scan_data ,contw +0x3bcb 010078 call uart_copy_rx_bytes_fast +0x3bcc 010079 branch module_hci_event_receive_valid_cmd +: 010083 module_hci_cmd_le_send_conn_update_req: +0x3bcd 010084 fetch 2 ,mem_ui_state_map +0x3bce 010085 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3bcf 010086 fetch 1 ,mem_module_uart_len +0x3bd0 010087 bne 0x08 ,module_hci_event_receive_invalid_cmd +0x3bd1 010088 copy rega ,contru +0x3bd2 010089 ifetch 8 ,contru +0x3bd3 010090 store 8 ,mem_le_interval_min +0x3bd4 010091 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3bd5 010092 call ui_ipc_send_cmd +0x3bd6 010093 branch module_hci_event_receive_valid_cmd +: 010097 module_hci_cmd_set_le_adv_parameter: +0x3bd7 010098 ifetch 2 ,contru +0x3bd8 010099 store 2 ,mem_le_adv_interval +0x3bd9 010100 branch module_hci_event_receive_valid_cmd +: 010104 module_hci_cmd_le_start_pairing: +0x3bda 010105 fetch 1 ,mem_le_pairing_mode +0x3bdb 010106 branch module_hci_event_receive_invalid_cmd ,blank +0x3bdc 010107 fetch 1 ,mem_le_pairing_state +0x3bdd 010108 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +0x3bde 010109 fetch 1 ,mem_le_enc_state +0x3bdf 010110 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +0x3be0 010111 call check_51cmd_le_smp_sec_req +0x3be1 010112 branch module_hci_event_receive_valid_cmd +: 010116 module_hci_cmd_set_wake_gpio: +0x3be2 010117 fetch 1 ,mem_module_uart_len +0x3be3 010118 bne 5 ,module_hci_event_receive_invalid_cmd +0x3be4 010119 ifetch 1 ,contru +0x3be5 010120 store 1 ,mem_module_mcu_wake_pin +0x3be6 010121 ifetch 4 ,contru +0x3be7 010122 store 4 ,mem_module_mcu_wake_delay_us +0x3be8 010123 fetcht 1 ,mem_module_mcu_wake_pin +0x3be9 010124 call gpio_config_output +0x3bea 010125 call module_set_mcu_wake_pin_low +0x3beb 010126 branch module_hci_event_receive_valid_cmd +: 010130 module_hci_cmd_set_tx_power: +0x3bec 010131 fetch 1 ,mem_module_uart_len +0x3bed 010132 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bee 010133 ifetch 1 ,contru +0x3bef 010134 store 1 ,mem_tx_power +0x3bf0 010135 branch module_hci_event_receive_valid_cmd +: 010139 module_hci_cmd_le_confirm_gkey: +0x3bf1 010140 ifetch 1 ,contru +0x3bf2 010141 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +0x3bf3 010142 fetch 1 ,mem_le_secure_connect_state +0x3bf4 010143 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +0x3bf5 010144 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf6 010145 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf7 010146 branch module_hci_event_receive_invalid_cmd +: 010147 module_hci_cmd_le_confirm_gkey_ok: +0x3bf8 010148 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +0x3bf9 010149 branch module_hci_event_receive_valid_cmd +: 010151 module_hci_cmd_le_confirm_gkey_fail: +0x3bfa 010152 call le_send_pairing_confirm_value_failed +0x3bfb 010153 branch module_hci_event_receive_valid_cmd +: 010157 module_hci_cmd_set_reject_justwork_flag: +0x3bfc 010158 fetch 1 ,mem_module_uart_len +0x3bfd 010159 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bfe 010160 call module_hci_event_receive_valid_cmd +0x3bff 010161 ifetch 1 ,contru +0x3c00 010162 branch classic_bt_clr_reject_justwork_flag ,blank +0x3c01 010163 branch classic_bt_set_reject_justwork_flag +: 010167 module_hci_cmd_reset_chip: +0x3c02 010168 call module_hci_event_receive_valid_cmd +0x3c03 010169 call wait_uarttx +0x3c04 010170 hjam 0x01 ,core_reset +0x3c05 010171 branch loop +: 010175 module_hci_cmd_le_set_fixed_passkey: +0x3c06 010176 fetch 1 ,mem_module_uart_len +0x3c07 010177 beq 0 ,module_hci_event_receive_invalid_cmd +0x3c08 010178 ifetch 1 ,contru +0x3c09 010179 branch module_hci_cmd_le_set_random_passkey ,blank +0x3c0a 010180 fetch 1 ,mem_module_uart_len +0x3c0b 010181 bne 5 ,module_hci_event_receive_invalid_cmd +0x3c0c 010182 ifetch 4 ,contru +0x3c0d 010183 arg 1000000 ,temp +0x3c0e 010184 isub temp ,null +0x3c0f 010185 branch module_hci_event_receive_invalid_cmd ,positive +0x3c10 010186 store 4 ,mem_le_tk +0x3c11 010187 call le_set_config_fixed_tk +0x3c12 010188 branch module_hci_event_receive_valid_cmd +: 010190 module_hci_cmd_le_set_random_passkey: +0x3c13 010191 call le_clr_config_fixed_tk +0x3c14 010192 branch module_hci_event_receive_valid_cmd +: 010196 module_hci_test_cmde_close_lpm: +0x3c15 010197 jam 0 ,mem_lpm_mode +0x3c16 010198 branch module_hci_event_receive_valid_cmd +: 010203 module_hci_event_receive_invalid_cmd: +0x3c17 010204 arg 1 ,temp +0x3c18 010205 arg 0 ,rega +0x3c19 010206 branch module_hci_event_set_cmd +: 010209 module_hci_event_receive_valid_cmd: +0x3c1a 010210 arg 0 ,temp +0x3c1b 010211 arg 0 ,rega +0x3c1c 010212 branch module_hci_event_set_cmd +: 010216 module_hci_event_spp_connect: +0x3c1d 010217 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +0x3c1e 010218 branch module_hci_event_enter_standby_mode_len0 +: 010222 module_hci_event_le_connect: +0x3c1f 010223 jam hci_event_le_conn_rep ,mem_module_uart_opcode +0x3c20 010224 branch module_hci_event_enter_standby_mode_len0 +: 010228 module_hci_event_spp_disconnect: +0x3c21 010229 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +0x3c22 010230 branch module_hci_event_enter_standby_mode_len0 +: 010234 module_hci_event_le_disconnect: +0x3c23 010235 jam hci_event_le_dis_rep ,mem_module_uart_opcode +0x3c24 010236 branch module_hci_event_enter_standby_mode_len0 +: 010244 module_hci_event_set_cmd: +0x3c25 010245 fetch 1 ,mem_module_uart_opcode +0x3c26 010246 copy pdata ,regc +0x3c27 010247 jam hci_event_cmd_res ,mem_module_uart_opcode +0x3c28 010248 setarg 2 +0x3c29 010249 iadd rega ,pdata +0x3c2a 010250 call module_hci_prepare_tx +0x3c2b 010251 copy regc ,pdata +0x3c2c 010252 istore 1 ,contwu +0x3c2d 010253 istoret 1 ,contwu +0x3c2e 010254 copy rega ,loopcnt +0x3c2f 010255 copy regb ,contr +0x3c30 010256 call uart_copy_tx_bytes +0x3c31 010257 branch uartd_send +: 010261 module_hci_event_receive_spp_data: +0x3c32 010263 call module_spp_clear_last_transmite_clock +0x3c33 010264 jam hci_event_spp_data_rep ,mem_module_uart_opcode +0x3c34 010265 fetch 1 ,mem_current_length +0x3c35 010266 rtn blank +0x3c36 010267 call module_hci_prepare_tx +0x3c37 010268 fetch 1 ,mem_current_length +0x3c38 010269 copy pdata ,loopcnt +0x3c39 010270 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x3c3a 010271 copy pdata ,contr +0x3c3b 010272 call uart_copy_tx_bytes_fast +0x3c3c 010273 branch uartd_send +: 010277 module_hci_event_receive_le_data: +0x3c3d 010278 jam hci_event_le_data_rep ,mem_module_uart_opcode +0x3c3e 010279 fetch 1 ,mem_module_le_rx_data_len +0x3c3f 010280 icopy loopcnt +0x3c40 010281 increase 2 ,pdata +0x3c41 010282 call module_hci_prepare_tx +0x3c42 010283 fetch 2 ,mem_module_le_rx_data_handle +0x3c43 010284 istore 2 ,contwu +0x3c44 010285 fetch 2 ,mem_module_le_rx_data_address +0x3c45 010286 icopy contr +0x3c46 010287 call uart_copy_tx_bytes_fast +0x3c47 010288 branch uartd_send +: 010292 module_hci_event_enter_standby_mode: +0x3c48 010293 jam hci_event_standby_rep ,mem_module_uart_opcode +: 010294 module_hci_event_enter_standby_mode_len0: +0x3c49 010295 setarg 0 +0x3c4a 010296 call module_hci_prepare_tx +0x3c4b 010297 branch uartd_send +: 010301 module_hci_event_status_res: +0x3c4c 010302 jam hci_event_status_res ,mem_module_uart_opcode +0x3c4d 010303 setarg 1 +0x3c4e 010304 call module_hci_prepare_tx +0x3c4f 010306 call module_hci_read_bt_status +0x3c50 010308 fetch 2 ,mem_ui_state_map +0x3c51 010309 arg ui_state_bt_hid_conn ,queue +0x3c52 010310 qisolate1 pdata +0x3c53 010311 setflag true ,3 ,temp +0x3c54 010313 arg ui_state_ble_connected ,queue +0x3c55 010314 qisolate1 pdata +0x3c56 010315 setflag true ,5 ,temp +0x3c57 010317 fetch 1 ,mem_ui_state_map +0x3c58 010318 arg ui_state_bt_spp_conn ,queue +0x3c59 010319 qisolate1 pdata +0x3c5a 010320 setflag true ,4 ,temp +0x3c5b 010322 istoret 1 ,contwu +0x3c5c 010323 branch uartd_send +: 010327 module_hci_read_bt_status: +0x3c5d 010328 arg 0 ,temp +0x3c5e 010329 fetch 1 ,mem_scan_mode +0x3c5f 010330 arg inq_scan_mode ,queue +0x3c60 010331 qisolate1 pdata +0x3c61 010332 setflag true ,0 ,temp +0x3c62 010333 arg page_scan_mode ,queue +0x3c63 010334 qisolate1 pdata +0x3c64 010335 setflag true ,1 ,temp +0x3c65 010337 fetch 1 ,mem_le_adv_enable +0x3c66 010338 arg 0 ,queue +0x3c67 010339 qisolate1 pdata +0x3c68 010340 setflag true ,2 ,temp +0x3c69 010341 rtn +: 010345 module_hci_event_store_device: +0x3c6a 010346 jam hci_event_nvram_rep ,mem_module_uart_opcode +0x3c6b 010347 fetch 1 ,mem_nv_data_number +0x3c6c 010348 mul32 pdata ,34 ,pdata +0x3c6d 010349 icopy loopcnt +0x3c6e 010350 call module_hci_prepare_tx +0x3c6f 010351 fetch 2 ,mem_nv_data_ptr +0x3c70 010352 icopy contr +0x3c71 010353 call uart_copy_tx_bytes_fast +0x3c72 010354 branch uartd_send +: 010358 module_hci_event_gkey_generate: +0x3c73 010359 jam hci_event_gkey ,mem_module_uart_opcode +0x3c74 010360 setarg 4 +0x3c75 010361 call module_hci_prepare_tx +0x3c76 010362 fetch 4 ,mem_gkey +0x3c77 010363 istore 4 ,contwu +0x3c78 010364 branch uartd_send +: 010368 module_hci_event_invalid_packet: +0x3c79 010369 jam hci_event_invalid_packet ,mem_module_uart_opcode +0x3c7a 010370 hfetch 2 ,core_uart_rxitems +0x3c7b 010371 arg 0xff ,temp +0x3c7c 010372 call not_greater_than +0x3c7d 010373 copy pdata ,loopcnt +0x3c7e 010374 call module_hci_prepare_tx +0x3c7f 010375 call uartd_prepare_rx +0x3c80 010376 call uart_copy_rx2tx +0x3c81 010377 branch uartd_send +: 010381 module_hci_event_passkey_entry_mode: +0x3c82 010382 jam hci_event_get_passkey ,mem_module_uart_opcode +0x3c83 010383 branch module_hci_event_enter_standby_mode_len0 +: 010387 module_hci_event_le_tk: +0x3c84 010388 jam hci_event_le_tk ,mem_module_uart_opcode +0x3c85 010389 setarg 4 +0x3c86 010390 call module_hci_prepare_tx +0x3c87 010391 fetch 4 ,mem_le_tk +0x3c88 010392 istore 4 ,contwu +0x3c89 010393 branch uartd_send +: 010397 module_hci_event_le_pairing_fail: +0x3c8a 010398 arg flag_ble_pairing_fail ,rega +0x3c8b 010399 branch module_hci_event_pairing_completed +: 010401 module_hci_event_le_pairing_success: +0x3c8c 010402 arg flag_ble_pairing_success ,rega +0x3c8d 010403 branch module_hci_event_pairing_completed +: 010405 module_hci_event_bt_pairing_fail: +0x3c8e 010406 arg flag_bt_pairing_fail ,rega +0x3c8f 010407 branch module_hci_event_pairing_completed +: 010409 module_hci_event_bt_pairing_success: +0x3c90 010410 arg flag_bt_pairing_success ,rega +: 010412 module_hci_event_pairing_completed: +0x3c91 010413 jam 0 ,mem_flag_mode_ssp_pin +0x3c92 010414 jam hci_event_le_pairing_state ,mem_module_uart_opcode +0x3c93 010415 setarg 2 +0x3c94 010416 call module_hci_prepare_tx +0x3c95 010417 copy rega ,pdata +0x3c96 010418 istore 2 ,contwu +0x3c97 010419 branch uartd_send +: 010423 module_hci_event_pause_enc: +0x3c98 010424 arg flag_event_pause_enc ,regc +0x3c99 010425 branch module_hci_event_enc +: 010427 module_hci_event_start_enc: +0x3c9a 010428 arg flag_event_start_enc ,regc +: 010430 module_hci_event_enc: +0x3c9b 010431 jam hci_event_le_encryption_state ,mem_module_uart_opcode +0x3c9c 010432 setarg 1 +0x3c9d 010433 call module_hci_prepare_tx +0x3c9e 010434 copy regc ,pdata +0x3c9f 010435 istore 1 ,contwu +0x3ca0 010436 branch uartd_send +: 010440 module_hci_event_le_gkey: +0x3ca1 010441 jam hci_event_le_gkey ,mem_module_uart_opcode +0x3ca2 010442 setarg 4 +0x3ca3 010443 call module_hci_prepare_tx +0x3ca4 010444 fetch 4 ,mem_gkey +0x3ca5 010445 istore 4 ,contwu +0x3ca6 010446 branch uartd_send +: 010457 module_hci_prepare_tx: +0x3ca7 010458 jam 0x02 ,mem_module_uart_cmd +0x3ca8 010459 store 1 ,mem_module_uart_len +0x3ca9 010460 storet 8 ,mem_temp +0x3caa 010461 bpatch patch1c_2 ,mem_patch1c +0x3cab 010462 call module_set_mcu_wake_pin_high_delay +0x3cac 010463 fetcht 8 ,mem_temp +0x3cad 010464 call uartd_prepare_tx +0x3cae 010465 fetch 3 ,mem_module_uart_cmd +0x3caf 010466 istore 3 ,contwu +0x3cb0 010467 rtn +: 010470 module_set_mcu_wake_pin_high_delay: +0x3cb1 010471 call module_check_mcu_wake_pin_high +0x3cb2 010472 rtn true +: 010473 module_set_mcu_wake_pin_h_delay: +0x3cb3 010474 call module_set_mcu_wake_pin_high +0x3cb4 010475 fetch 4 ,mem_module_mcu_wake_delay_us +0x3cb5 010476 rshift2 pdata ,pdata +0x3cb6 010477 rtn blank +0x3cb7 010478 branch delay +: 010480 module_set_mcu_wake_pin_high: +0x3cb8 010482 fetcht 1 ,mem_module_mcu_wake_pin +0x3cb9 010483 branch gpio_out_active +: 010485 module_check_mcu_wake_pin_high: +0x3cba 010486 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbb 010487 branch gpio_check_active +: 010489 module_set_mcu_wake_pin_low: +0x3cbc 010490 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbd 010491 branch gpio_out_inactive +: 010494 delay: +0x3cbe 010495 increase -1 ,pdata +0x3cbf 010496 nop 38 +0x3cc0 010497 nbranch delay ,blank +0x3cc1 010498 rtn +: 010507 module_le_receive_data: +0x3cc2 010508 call module_check_ble_encrypt_state +0x3cc3 010509 rtn user +0x3cc4 010510 copy rega ,pdata +0x3cc5 010511 store 2 ,mem_module_le_rx_data_address +0x3cc6 010512 copy regb ,pdata +0x3cc7 010513 store 1 ,mem_module_le_rx_data_len +0x3cc8 010514 fetch 2 ,mem_le_att_handle +0x3cc9 010515 fetcht 2 ,mem_module_data_write_handle +0x3cca 010516 isub temp ,null +0x3ccb 010517 branch module_le_receive_data_ok ,zero +0x3ccc 010518 fetcht 2 ,mem_module_data_write_handle2 +0x3ccd 010519 isub temp ,null +0x3cce 010520 nrtn zero +: 010521 module_le_receive_data_ok: +0x3ccf 010522 store 2 ,mem_module_le_rx_data_handle +0x3cd0 010523 branch module_hci_event_receive_le_data +: 010528 module_exit_sniff: +0x3cd1 010529 fetch 1 ,mem_module_flag +0x3cd2 010530 rtnbit1 moudle_task_unsniff +0x3cd3 010531 call module_set_unsniff_task_flag +0x3cd4 010532 branch app_bt_sniff_exit +: 010535 module_set_lpm_mult_2: +0x3cd5 010536 jam 2 ,mem_lpm_mult +0x3cd6 010537 rtn +: 010541 module_bb_event_timer: +0x3cd7 010542 branch module_read_vdd_timer +: 010544 module_read_vdd_timer: +0x3cd8 010545 fetch 1 ,mem_module_read_vdd_flag +0x3cd9 010546 rtn blank +0x3cda 010547 fetch 1 ,mem_module_read_vdd_count +0x3cdb 010548 rtn blank +0x3cdc 010549 increase -1 ,pdata +0x3cdd 010550 store 1 ,mem_module_read_vdd_count +0x3cde 010551 nrtn blank +0x3cdf 010552 jam flag_module_read_vdd_count ,mem_module_read_vdd_count +0x3ce0 010553 call adc_set_mode +0x3ce1 010554 call vdd_calculate_by_mode +0x3ce2 010555 div pdata ,0x64 +0x3ce3 010556 call wait_div_end +0x3ce4 010557 quotient pdata +0x3ce5 010558 remainder temp +0x3ce6 010559 store 1 ,mem_module_vdd_quotient +0x3ce7 010560 storet 1 ,mem_module_vdd_remainder +0x3ce8 010561 rtn +: 010564 module_control_air_flow: +0x3ce9 010565 call check_uart_tx_buff +0x3cea 010566 branch app_l2cap_flow_control_enable ,positive +0x3ceb 010567 branch app_l2cap_flow_control_disable +: 010571 module_set_sniff_task_flag: +0x3cec 010572 arg moudle_task_sniff ,queue +0x3ced 010573 branch module_set_state +: 010575 module_clear_sniff_task_flag: +0x3cee 010576 arg moudle_task_sniff ,queue +0x3cef 010577 branch module_clr_state +: 010579 module_set_unsniff_task_flag: +0x3cf0 010580 arg moudle_task_unsniff ,queue +0x3cf1 010581 branch module_set_state +: 010583 module_clear_unsniff_task_flag: +0x3cf2 010584 arg moudle_task_unsniff ,queue +0x3cf3 010585 branch module_clr_state +: 010587 module_set_le_tx_data_flag: +0x3cf4 010588 arg module_flag_ble_data_finish ,queue +0x3cf5 010589 branch module_set_state +: 010591 module_clear_le_tx_data_flag: +0x3cf6 010592 arg module_flag_ble_data_finish ,queue +0x3cf7 010593 branch module_clr_state +: 010595 module_clr_state: +0x3cf8 010596 fetch 1 ,mem_module_flag +0x3cf9 010597 qset0 pdata +0x3cfa 010598 store 1 ,mem_module_flag +0x3cfb 010599 rtn +: 010601 module_set_state: +0x3cfc 010602 fetch 1 ,mem_module_flag +0x3cfd 010603 qset1 pdata +0x3cfe 010604 store 1 ,mem_module_flag +0x3cff 010605 rtn +: 010615 mouse_init: +0x3d00 010616 call mouse_setting_config +0x3d01 010617 call spi_ncs_enable +0x3d02 010618 call mouse_init_sunt +0x3d03 010619 call mouse_dpi_config +0x3d04 010620 call spi_ncs_disable +0x3d05 010621 rtn wake +0x3d06 010622 call mouse_cheak_enable_usb +0x3d07 010623 call mouse_cb_fuction +0x3d08 010626 fetch mouse_flag_len ,mem_mouse_flag +0x3d09 010627 rtnbit1 mouse_enable_usb +0x3d0a 010628 call mouse_wakeup_from_power +0x3d0b 010629 rtnmark1 mark_24g +0x3d0c 010630 fetch 2 ,mem_ui_state_map +0x3d0d 010631 bbit1 ui_state_btn_down ,mouse_start_discovery +0x3d0e 010632 branch mouse_check_reconn_target +: 010635 mouse_delay_4s: +0x3d0f 010636 fetch mouse_flag_len ,mem_mouse_flag +0x3d10 010637 rtnbit0 mouse_enable_init_delay +0x3d11 010638 arg 20 ,loopcnt +: 010639 mouse_delay_20ms: +0x3d12 010640 setarg 200000 +0x3d13 010641 call sleep +0x3d14 010642 loop delay_10ms +0x3d15 010643 rtn +: 010646 mouse_cheak_enable_usb: +0x3d16 010647 fetch mouse_flag_len ,mem_mouse_flag +0x3d17 010648 rtnbit0 mouse_enable_usb +0x3d18 010649 branch usb_init +: 010652 mouse_cb_fuction: +0x3d19 010653 setarg mouse_le +0x3d1a 010654 store 2 ,mem_cb_le_process +0x3d1b 010655 setarg mouse_send_process +0x3d1c 010656 store 2 ,mem_cb_bt_process +0x3d1d 010657 setarg mouse_process_lpm_before +0x3d1e 010658 store 2 ,mem_cb_before_lpm +0x3d1f 010659 setarg mouse_priority_bb_event +0x3d20 010660 store 2 ,mem_cb_bb_event_process +0x3d21 010661 setarg mouse_idle +0x3d22 010662 store 2 ,mem_cb_idle_process +0x3d23 010663 setarg mouse_before_hibernate +0x3d24 010664 store 2 ,mem_cb_before_hibernate +0x3d25 010665 setarg le_mouse_bb_event_connect_complete +0x3d26 010666 store 2 ,mem_cb_att_write +0x3d27 010668 call g24_head_ptr2regc +0x3d28 010669 setarg mouse_g24_package_data +0x3d29 010670 add regc ,offset_24g_cb_data ,contw +0x3d2a 010671 istore 2 ,contw +0x3d2b 010672 setarg mouse_g24_enter_lpm +0x3d2c 010673 add regc ,offset_24g_cb_lpm_prepare ,contw +0x3d2d 010674 istore 2 ,contw +0x3d2e 010675 setarg mouse_lpm_before_common +0x3d2f 010676 add regc ,offset_24g_cb_lpm_before ,contw +0x3d30 010677 istore 2 ,contw +0x3d31 010679 setarg mouse_bb_event_timer +0x3d32 010680 store 2 ,mem_cb_event_timer +0x3d33 010681 setarg mouse_spi_write_flash_cb +0x3d34 010682 store 2 ,mem_cb_spi_flash_write_complate +0x3d35 010683 rtn +: 010684 mouse_spi_write_flash_cb: +: 010685 mouse_spi_init: +0x3d36 010686 fetch mouse_flag_len ,mem_mouse_flag +0x3d37 010687 bbit0 mouse_enable_spi2 ,spid_init +0x3d38 010688 branch spid_init2 +: 010690 mouse_setting_config: +0x3d39 010691 rtn wake +0x3d3a 010692 call g24_set_device_addr +0x3d3b 010693 call mouse_gpio_init +0x3d3c 010694 call mouse_param_init +0x3d3d 010695 call mouse_adc_init +0x3d3e 010696 call le_set_config_fixed_ltk +0x3d3f 010697 call le_set_justwork +0x3d40 010698 call le_set_fixed_ltk +0x3d41 010699 call le_set_config_read_authentication +0x3d42 010700 fetch mouse_flag_len ,mem_mouse_flag +0x3d43 010701 bbit1 mouse_enable_eeprom ,mouse_init_iic +0x3d44 010702 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak +0x3d45 010703 rtn +: 010705 mouse_init_iic: +0x3d46 010706 call iic_init_390k +0x3d47 010707 fetch mouse_flag_len ,mem_mouse_flag +0x3d48 010708 isolate1 mouse_enable_2k_eeprom ,pdata +0x3d49 010709 ncall clear_eeprom_size_2k ,true +0x3d4a 010710 call mouse_load_eeprom_dpi +0x3d4b 010711 call mouse_init_environment +0x3d4c 010712 call mouse_set_24g_addr_eeprom +0x3d4d 010713 branch iicd_read_eep_data +: 010715 mouse_wakeup_from_power: +0x3d4e 010716 fetch mouse_flag_len ,mem_mouse_flag +0x3d4f 010717 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power +0x3d50 010718 fetch 1 ,mem_wakup_from_power_flag +0x3d51 010719 isolate0 gpio_latch ,pdata +0x3d52 010720 nrtn true +: 010721 mouse_wakeup_no_from_power: +0x3d53 010722 fetch 1 ,mem_reconn_times_init +0x3d54 010723 store 1 ,mem_reconn_times +0x3d55 010724 fetch 1 ,mem_config_function_enable +0x3d56 010725 rtnbit1 enable_select_device_by_switch +: 010726 mouse_start_24g_mode: +0x3d57 010727 fetch mouse_flag_len ,mem_mouse_flag +0x3d58 010728 rtnbit0 mouse_enable_24g +0x3d59 010729 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start +0x3d5a 010730 branch g24_check_51cmd_start_24g +: 010731 le_mouse_bb_event_connect_complete: +0x3d5b 010732 fetch 1 ,mem_le_att_handle +0x3d5c 010733 sub pdata ,26 ,pdata +0x3d5d 010734 nrtn zero +0x3d5e 010735 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3d5f 010736 call ui_ipc_send_cmd +0x3d60 010737 arg write_req_enable_flag ,queue +0x3d61 010738 branch mouse_le_enable_connect_flag +: 010740 mouse_dpi_up: +0x3d62 010741 fetch 1 ,mem_mouse_dpi_button_state +0x3d63 010742 rtneq dpi_button_state_up +0x3d64 010743 jam dpi_button_state_up ,mem_mouse_dpi_button_state +0x3d65 010744 rtn +: 010745 mouse_dpi_config: +0x3d66 010746 fetch 1 ,mem_config_sensor_motion +0x3d67 010747 and pdata ,0x0f ,pdata +0x3d68 010748 store 1 ,mem_mouse_dpi +0x3d69 010749 branch mouse_seting_dpi + 2 +: 010752 mouse_dpi_cheak: +0x3d6a 010753 fetcht 1 ,mem_dpi_button_gpio +0x3d6b 010754 call gpio_get_bit +0x3d6c 010755 nbranch mouse_dpi_up ,true +: 010756 mouse_dpi_down: +0x3d6d 010757 fetch 1 ,mem_mouse_dpi_button_state +0x3d6e 010758 rtneq dpi_button_state_down +0x3d6f 010759 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x3d70 010760 fetch 1 ,mem_mouse_dpi +0x3d71 010761 increase 1 ,pdata +0x3d72 010762 and pdata ,0x03 ,pdata +0x3d73 010763 store 1 ,mem_mouse_dpi +0x3d74 010764 call mouse_seting_dpi +0x3d75 010765 fetch mouse_flag_len ,mem_mouse_flag +0x3d76 010766 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi +0x3d77 010767 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi +0x3d78 010768 rtn +: 010769 mouse_before_store_flash_cpi: +0x3d79 010770 arg mouse_spi2_clk_gpio ,temp +0x3d7a 010771 call gpio_config_output +0x3d7b 010772 arg mouse_spi2_sdio_gpio ,temp +0x3d7c 010773 call gpio_config_output +0x3d7d 010774 branch mouse_store_flash_device_info +: 010776 mouse_seting_dpi: +0x3d7e 010777 bpatch patch1c_3 ,mem_patch1c +0x3d7f 010778 call mosue_dpi_led_blink_init +0x3d80 010779 fetch 1 ,mem_config_sensor_type +0x3d81 010780 beq p3610 ,mouse_seting_3610_dpi +0x3d82 010781 beq p3212 ,mouse_seting_3212_dpi +0x3d83 010782 fetch 1 ,mem_mouse_dpi +0x3d84 010783 beq mouse_dpi_level1 ,mouse_set_cpi1 +0x3d85 010784 beq mouse_dpi_level2 ,mouse_set_cpi2 +0x3d86 010785 beq mouse_dpi_level3 ,mouse_set_cpi3 +0x3d87 010786 beq mouse_dpi_level4 ,mouse_set_cpi4 +: 010787 mouse_set_cpi2: +0x3d88 010788 fetch 1 ,mem_320x_dpi_2 +0x3d89 010789 branch mouse_p3205_dpi +: 010790 mouse_set_cpi1: +0x3d8a 010791 fetch 1 ,mem_320x_dpi_1 +0x3d8b 010792 branch mouse_p3205_dpi +: 010793 mouse_set_cpi3: +0x3d8c 010794 fetch 1 ,mem_320x_dpi_3 +0x3d8d 010795 branch mouse_p3205_dpi +: 010796 mouse_set_cpi4: +0x3d8e 010797 fetch 1 ,mem_320x_dpi_4 +0x3d8f 010798 branch mouse_p3205_dpi +: 010799 moue_seting_cpi_count: +0x3d90 010800 fetch 1 ,mem_config_sensor_type +0x3d91 010801 rtneq p3065_xy +0x3d92 010802 fetch 1 ,mem_mouse_cpi_count +0x3d93 010803 increase 1 ,pdata +0x3d94 010804 store 1 ,mem_mouse_cpi_count +0x3d95 010805 rtn +: 010807 mouse_seting_3212_dpi: +0x3d96 010808 fetch 1 ,mem_mouse_dpi +0x3d97 010809 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0x3d98 010810 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0x3d99 010811 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0x3d9a 010812 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +: 010813 mouse_set_p3212_cpi2: +0x3d9b 010814 fetch 1 ,mem_3212_dpi_2 +0x3d9c 010815 branch mouse_p3212_dpi +: 010816 mouse_set_p3212_cpi1: +0x3d9d 010817 fetch 1 ,mem_3212_dpi_1 +0x3d9e 010818 branch mouse_p3212_dpi +: 010819 mouse_set_p3212_cpi3: +0x3d9f 010820 fetch 1 ,mem_3212_dpi_3 +0x3da0 010821 branch mouse_p3212_dpi +: 010822 mouse_set_p3212_cpi4: +0x3da1 010823 fetch 1 ,mem_3212_dpi_4 +: 010824 mouse_p3212_dpi: +0x3da2 010825 store 1 ,mem_mouse_cpi_count +0x3da3 010826 lshift8 pdata ,pdata +0x3da4 010827 copy pdata ,rega +0x3da5 010828 add pdata ,mouse_p3212_dpi_xaddress ,pdata +0x3da6 010829 call twspi_write +0x3da7 010830 copy rega ,pdata +0x3da8 010831 add pdata ,mouse_p3212_dpi_yaddress ,pdata +0x3da9 010832 branch twspi_write +: 010834 mouse_seting_3610_dpi: +0x3daa 010835 fetch 1 ,mem_mouse_dpi +0x3dab 010836 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 +0x3dac 010837 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 +0x3dad 010838 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 +0x3dae 010839 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 +: 010840 mouse_set_p3610_cpi2: +0x3daf 010841 fetch 1 ,mem_3610_dpi_2 +0x3db0 010842 branch mouse_p3610_dpi +: 010843 mouse_set_p3610_cpi1: +0x3db1 010844 fetch 1 ,mem_3610_dpi_1 +0x3db2 010845 branch mouse_p3610_dpi +: 010846 mouse_set_p3610_cpi3: +0x3db3 010847 fetch 1 ,mem_3610_dpi_3 +0x3db4 010848 branch mouse_p3610_dpi +: 010849 mouse_set_p3610_cpi4: +0x3db5 010850 fetch 1 ,mem_3610_dpi_4 +: 010851 mouse_p3610_dpi: +0x3db6 010852 store 1 ,mem_mouse_cpi_count +0x3db7 010853 call mouse_spi_sdio_gpio_pollup +0x3db8 010854 fetch 1 ,mem_mouse_cpi_count +: 010855 mouse_reset_p3610_dpi: +0x3db9 010856 add pdata ,0x80 ,pdata +0x3dba 010857 lshift8 pdata ,pdata +0x3dbb 010858 add pdata ,mouse_p3610_dpi_address ,pdata +0x3dbc 010859 copy pdata ,rega +0x3dbd 010860 branch mouse_set_sensor_reg +: 010862 mouse_p3205_dpi: +0x3dbe 010863 store 1 ,mem_mouse_cpi_count +0x3dbf 010864 call moue_seting_cpi_count +0x3dc0 010865 fetch 1 ,mem_mouse_cpi_count +0x3dc1 010866 setarg mouse_dpi_address +0x3dc2 010867 call twspi_read +0x3dc3 010868 and pdata ,0xf8 ,temp +0x3dc4 010869 fetch 1 ,mem_mouse_cpi_count +0x3dc5 010870 iadd temp ,pdata +0x3dc6 010871 lshift8 pdata ,pdata +0x3dc7 010872 add pdata ,mouse_dpi_address ,pdata +0x3dc8 010873 branch twspi_write +: 010876 mouse_init_environment: +0x3dc9 010877 call app_initflag_check +0x3dca 010878 branch mouse_eeprom_load_recon_info ,zero +0x3dcb 010879 call mouse_ble_init_address +0x3dcc 010880 call mouse_store_eeprom_device_info +0x3dcd 010881 branch app_initflag_store +: 010884 mouse_24g_pairing_button: +0x3dce 010885 fetch 2 ,mem_24g_pairing_timer_count +0x3dcf 010886 rtn blank +0x3dd0 010887 fetch mouse_flag_len ,mem_mouse_flag +0x3dd1 010888 rtnbit0 mouse_enable_24g +0x3dd2 010889 rtnbit1 mosue_24g_pairing_flag +0x3dd3 010890 rtnmark1 mark_24g +0x3dd4 010891 call mouse_check_key_gpio +0x3dd5 010892 rtnne mouse_lmr_button +0x3dd6 010893 call mouse_devce_led_off +0x3dd7 010894 arg mosue_24g_pairing_flag ,queue +0x3dd8 010895 call mouse_enable_function_flag +0x3dd9 010896 setarg 0 +0x3dda 010897 store 2 ,mem_mouse_direct_timer +0x3ddb 010898 store 1 ,mem_mouse_send_blank_timer +0x3ddc 010899 call g24_set0_mem_check_dongle_times +0x3ddd 010901 fetch 2 ,mem_ui_state_map +0x3dde 010902 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x3ddf 010903 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x3de0 010904 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x3de1 010905 call mouse_stop_discovery +0x3de2 010906 branch g24_start_pairing_sm1 +: 010909 mouse_idle: +0x3de3 010910 call mouse_24g_pairing_button +0x3de4 010911 call ui_check_paring_button +0x3de5 010912 call mouse_dpi_cheak +0x3de6 010913 call mouse_usb_isr +0x3de7 010914 call mouse_wheel_check +0x3de8 010915 branch mouse_usb_mode +: 010916 mouse_usb_isr: +0x3de9 010917 fetch mouse_flag_len ,mem_mouse_flag +0x3dea 010918 rtnbit0 mouse_enable_usb +0x3deb 010919 call usb_isr +0x3dec 010920 branch usb_offline_state +: 010922 mouse_cheak_usb: +0x3ded 010923 hfetch 1 ,core_usb_addr +0x3dee 010924 bbit0 7 ,mouse_usb_no_exsit +0x3def 010925 bbit1 7 ,mouse_usb_exsit +0x3df0 010926 rtn +: 010927 mouse_usb_no_exsit: +0x3df1 010928 fetch 1 ,mem_usb_addr +0x3df2 010929 rtnbit0 7 +0x3df3 010930 branch soft_reset_chip +: 010931 mouse_usb_exsit: +0x3df4 010932 fetch 1 ,mem_usb_addr +0x3df5 010933 rtnbit1 7 +0x3df6 010934 branch mouse_stop_bluetooth_mode +: 010936 mouse_usb_mode: +0x3df7 010937 call mouse_cheak_usb +0x3df8 010938 hfetch 1 ,core_usb_addr +0x3df9 010939 store 1 ,mem_usb_addr +0x3dfa 010940 rtnbit0 7 +0x3dfb 010941 call mouse_clkn_check +0x3dfc 010942 fetch 4 ,mem_btclk_sensor +0x3dfd 010943 fetcht 1 ,mem_wire_usb_interval +0x3dfe 010944 iadd temp ,temp +0x3dff 010945 copy clkn_bt ,pdata +0x3e00 010946 isub temp ,null +0x3e01 010947 nrtn positive +0x3e02 010948 store 4 ,mem_btclk_sensor +0x3e03 010949 call mouse_motion +0x3e04 010950 nrtn user +0x3e05 010951 jam 4 ,mem_usb_tx_enable +0x3e06 010952 branch mouse_wired_to_usb +: 010954 mouse_clkn_check: +0x3e07 010955 fetcht 4 ,mem_btclk_sensor +0x3e08 010956 copy clkn_bt ,pdata +0x3e09 010957 isub temp ,null +0x3e0a 010958 ncall mouse_clkn_timeout ,positive +0x3e0b 010959 rtn +: 010960 mouse_clkn_timeout: +0x3e0c 010961 setarg 0 +0x3e0d 010962 store 4 ,mem_btclk_sensor +0x3e0e 010963 rtn +: 010967 mouse_wired_to_usb: +0x3e0f 010968 fetch 1 ,mem_usb_tx_enable +0x3e10 010969 rtnbit0 2 +0x3e11 010970 branch mouse_data_push +: 010971 mouse_data_push: +0x3e12 010972 hfetch 1 ,core_usb_addr +0x3e13 010973 rtnbit0 7 +0x3e14 010974 jam usb_ep2_ms ,mem_usb_ep2_data +0x3e15 010975 setarg ms_report_id +0x3e16 010976 store 1 ,mem_usb_mouse_data +0x3e17 010977 fetch 7 ,mem_mouse_key +0x3e18 010978 istore 7 ,contw +0x3e19 010979 rtn +: 010982 mouse_enable_clock_qdecoder: +0x3e1a 010983 hfetch 2 ,core_clkoff +0x3e1b 010984 set0 clock_off_qdecoder ,pdata +0x3e1c 010985 hstore 2 ,core_clkoff +0x3e1d 010986 rtn +: 010988 mouse_param_init: +0x3e1e 010989 setarg 0x8c00 +0x3e1f 010990 store 2 ,mem_ui_uuid_table +0x3e20 010991 setarg 0x8e7a +0x3e21 010992 store 2 ,mem_ui_le_uuid_table +0x3e22 010993 setarg 0x2402 +0x3e23 010994 store 2 ,mem_fcomp_mul +0x3e24 010995 setarg 0x2580 +0x3e25 010996 store 3 ,mem_class +0x3e26 010997 jam 3 ,mem_lpm_mult_timeout +0x3e27 010998 jam 8 ,mem_lpm_overhead +0x3e28 010999 jam dpi_button_state_up ,mem_select_device_button_statue +0x3e29 011000 setarg 0x0200 +0x3e2a 011001 store 2 ,mem_lpm_interval +0x3e2b 011002 jam 0x17 ,mem_le_local_mtu +0x3e2c 011003 jam 0x17 ,mem_le_remote_mtu +0x3e2d 011005 setarg 0x0a77 +0x3e2e 011006 store 2 ,mem_spi_init_clk +0x3e2f 011022 setsect 0 ,0x306 +0x3e30 011023 setsect 1 ,0x4440 +0x3e31 011024 setsect 2 ,0x10000 +0x3e32 011025 setsect 3 ,0x4408 +0x3e33 011026 store 9 ,mem_all_uuid_16bits +0x3e34 011027 setsect 0 ,0x1224 +0x3e35 011028 setsect 1 ,0x4000 +0x3e36 011029 setsect 2 ,0x0 +0x3e37 011030 istore 5 ,contw +0x3e38 011032 setsect 0 ,0x3ffff +0x3e39 011033 setsect 1 ,0x2fe23 +0x3e3a 011034 setsect 2 ,0x199d9 +0x3e3b 011035 setsect 3 ,0x20d +0x3e3c 011036 store 8 ,mem_features +0x3e3d 011038 setarg 0x012c +0x3e3e 011039 store 2 ,mem_24g_pairing_timer_count +0x3e3f 011040 call le_modified_name +0x3e40 011041 fetch mouse_flag_len ,mem_mouse_flag +0x3e41 011042 rtnbit0 mouse_enable_gpio_control_adc_sensor +0x3e42 011043 call mouse_sensor_set_angle +0x3e43 011044 branch mouse_select_adc +: 011046 mouse_sensor_set_angle: +0x3e44 011047 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e45 011048 call gpio_config_input +0x3e46 011049 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e47 011050 call gpio_get_bit +0x3e48 011051 jam mouse_3clk_angle ,mem_config_sensor_angle +0x3e49 011052 rtn true +0x3e4a 011053 jam mouse_12clk_angle ,mem_config_sensor_angle +0x3e4b 011054 rtn +: 011056 mouse_select_adc: +0x3e4c 011057 fetcht 1 ,mem_select_adc_gpio +0x3e4d 011058 call gpio_config_input +0x3e4e 011059 fetcht 1 ,mem_select_adc_gpio +0x3e4f 011060 call gpio_get_bit +0x3e50 011061 jam adc_config_vinlpm ,mem_adc_config_flag +0x3e51 011062 rtn true +0x3e52 011063 jam adc_config_gpio ,mem_adc_config_flag +0x3e53 011064 rtn +: 011067 mouse_adc_init: +0x3e54 011068 fetch 1 ,mem_adc_config_flag +0x3e55 011069 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm +0x3e56 011070 beq adc_config_hvin ,mouse_adc_init_data_hvin +0x3e57 011071 beq adc_config_gpio ,mouse_adc_init_data_io +0x3e58 011072 branch mouse_adc_init_data_vinlpm +: 011074 mouse_adc_init_data_vinlpm: +0x3e59 011075 fetcht 2 ,mem_2v_adc_vinlpm_data +0x3e5a 011076 fetch 2 ,mem_3v_adc_vinlpm_data +0x3e5b 011077 isub temp ,pdata +0x3e5c 011078 mul32 pdata ,20 ,pdata +0x3e5d 011079 div pdata ,100 +0x3e5e 011080 call wait_div_end +0x3e5f 011081 quotient pdata +0x3e60 011082 store 2 ,mem_adc_reference_voltage +0x3e61 011083 rtn +: 011084 mouse_adc_init_data_hvin: +0x3e62 011085 fetcht 2 ,mem_1v_adc_hvin_data +0x3e63 011086 fetch 2 ,mem_5v_adc_hvin_data +0x3e64 011087 isub temp ,pdata +0x3e65 011088 mul32 pdata ,230 ,pdata +0x3e66 011089 div pdata ,400 +0x3e67 011090 call wait_div_end +0x3e68 011091 quotient pdata +0x3e69 011092 store 2 ,mem_adc_reference_voltage +0x3e6a 011093 rtn +: 011094 mouse_adc_init_data_io: +0x3e6b 011095 fetch 2 ,mem_1v_adc_io_data +0x3e6c 011096 store 2 ,mem_adc_reference_voltage +0x3e6d 011097 rtn +: 011098 mouse_gpio_init: +0x3e6e 011099 fetcht 1 ,mem_eeprom_wp_gpio +0x3e6f 011100 call gpio_config_output +0x3e70 011101 call usb_offline_check_init +0x3e71 011102 fetcht 1 ,mem_lbutton_gpio +0x3e72 011103 call gpio_config_input +0x3e73 011104 fetcht 1 ,mem_rbutton_gpio +0x3e74 011105 call gpio_config_input +0x3e75 011106 fetcht 1 ,mem_mbutton_gpio +0x3e76 011107 call gpio_config_input +0x3e77 011108 fetcht 1 ,mem_sensor_data_gpio +0x3e78 011109 call gpio_config_input +0x3e79 011111 fetcht 1 ,mem_sensor_reset_gpio +0x3e7a 011112 call gpio_config_output +0x3e7b 011114 fetcht 1 ,mem_whee_a_data_gpio +0x3e7c 011115 call gpio_config_input +0x3e7d 011117 fetcht 1 ,mem_whee_b_data_gpio +0x3e7e 011118 call gpio_config_input +0x3e7f 011120 fetcht 1 ,mem_whee_ta_data_gpio +0x3e80 011121 call gpio_config_input +0x3e81 011122 fetcht 1 ,mem_whee_tb_data_gpio +0x3e82 011123 call gpio_config_input +0x3e83 011125 fetcht 1 ,mem_bk_button_gpio +0x3e84 011126 call gpio_config_input +0x3e85 011127 fetcht 1 ,mem_fw_button_gpio +0x3e86 011128 call gpio_config_input +0x3e87 011130 fetcht 1 ,mem_config_low_voltage_alarm_gpio +0x3e88 011131 call gpio_config_output +0x3e89 011133 fetcht 1 ,mem_config_device1_led_gpio +0x3e8a 011134 call gpio_config_output +0x3e8b 011136 fetcht 1 ,mem_config_device2_led_gpio +0x3e8c 011137 call gpio_config_output +0x3e8d 011139 fetcht 1 ,mem_config_device3_led_gpio +0x3e8e 011140 call gpio_config_output +0x3e8f 011142 fetcht 1 ,mem_dpi_led_gpio +0x3e90 011143 call gpio_config_output +0x3e91 011145 fetcht 1 ,mem_config_select_device_button_gpio +0x3e92 011146 call gpio_config_input +0x3e93 011148 fetcht 1 ,mem_config_bt_button_gpio +0x3e94 011149 call gpio_config_input +0x3e95 011151 fetcht 1 ,mem_dpi_button_gpio +0x3e96 011152 branch gpio_config_input +: 011154 mouse_wheel_gpio_set_wake: +0x3e97 011155 fetcht 1 ,mem_whee_a_data_gpio +0x3e98 011156 call gpio_set_wake_by_current_state +0x3e99 011157 fetcht 1 ,mem_whee_b_data_gpio +0x3e9a 011158 call gpio_set_wake_by_current_state +0x3e9b 011159 fetcht 1 ,mem_whee_ta_data_gpio +0x3e9c 011160 call gpio_set_wake_by_current_state +0x3e9d 011161 fetcht 1 ,mem_whee_tb_data_gpio +0x3e9e 011162 branch gpio_set_wake_by_current_state +: 011164 mouse_before_hibernate_wheel_gpio_set: +0x3e9f 011165 fetcht 1 ,mem_whee_a_data_gpio +0x3ea0 011166 call mouse_gpio_set_pupd_by_input +0x3ea1 011167 fetcht 1 ,mem_whee_b_data_gpio +0x3ea2 011168 call mouse_gpio_set_pupd_by_input +0x3ea3 011169 fetcht 1 ,mem_whee_ta_data_gpio +0x3ea4 011170 call mouse_gpio_set_pupd_by_input +0x3ea5 011171 fetcht 1 ,mem_whee_tb_data_gpio +0x3ea6 011172 branch mouse_gpio_set_pupd_by_input +: 011174 mouse_gpio_set_pupd_by_input: +0x3ea7 011175 sub temp ,ui_button_gpio_disable ,null +0x3ea8 011176 rtn zero +0x3ea9 011177 and temp ,0x7f ,queue +0x3eaa 011178 hfetch 4 ,core_gpio_in +0x3eab 011179 qisolate1 pdata +0x3eac 011180 hfetch 4 ,core_gpio_pu0 +0x3ead 011181 qsetflag true ,pdata +0x3eae 011182 hstore 4 ,core_gpio_pu0 +0x3eaf 011183 hfetch 4 ,core_gpio_pd0 +0x3eb0 011184 nqsetflag true ,pdata +0x3eb1 011185 hstore 4 ,core_gpio_pd0 +0x3eb2 011186 rtn +: 011188 mouse_before_hibernate: +0x3eb3 011189 enable user +0x3eb4 011190 hfetch 4 ,0x8138 +0x3eb5 011191 setflag user ,26 ,pdata +0x3eb6 011192 hstore 4 ,core_lpm_reg +0x3eb7 011193 call lpm_write_ctrl +0x3eb8 011194 call mouse_devce_led_off +0x3eb9 011195 call mouse_before_hibernate_wheel_gpio_set +0x3eba 011197 branch mouse_lpm_before_common +: 011201 mouse_process_lpm_before: +0x3ebb 011202 call mouse_lpm_before_common +0x3ebc 011203 fetch 1 ,mem_lpm_current_mult +0x3ebd 011204 nrtn blank +0x3ebe 011205 branch gpio_clr_wake +: 011207 mouse_lpm_before_common: +0x3ebf 011208 call mouse_wheel_check +0x3ec0 011209 arg mouse_spi1_clk_gpio ,temp +0x3ec1 011210 fetch mouse_flag_len ,mem_mouse_flag +0x3ec2 011211 isolate1 mouse_enable_spi2 ,pdata +0x3ec3 011212 call mouse_spi_clk_gpio ,true +0x3ec4 011213 call gpio_config_output +0x3ec5 011214 call twspi_disable +0x3ec6 011218 fetcht 1 ,mem_lbutton_gpio +0x3ec7 011219 call gpio_set_wake_by_current_state +0x3ec8 011220 fetcht 1 ,mem_rbutton_gpio +0x3ec9 011221 call gpio_set_wake_by_current_state +0x3eca 011222 fetcht 1 ,mem_mbutton_gpio +0x3ecb 011223 call gpio_set_wake_by_current_state +0x3ecc 011225 fetcht 1 ,mem_bk_button_gpio +0x3ecd 011226 call gpio_set_wake_by_current_state +0x3ece 011227 fetcht 1 ,mem_fw_button_gpio +0x3ecf 011228 call gpio_set_wake_by_current_state +0x3ed0 011229 fetcht 1 ,mem_dpi_button_gpio +0x3ed1 011230 call gpio_set_wake_by_current_state +0x3ed2 011231 fetcht 1 ,mem_config_select_device_button_gpio +0x3ed3 011232 call gpio_set_wake_by_current_state +0x3ed4 011233 fetcht 1 ,mem_whee_a_data_gpio +0x3ed5 011234 call gpio_set_wake_by_current_state +0x3ed6 011235 fetcht 1 ,mem_whee_b_data_gpio +0x3ed7 011236 call gpio_set_wake_by_current_state +0x3ed8 011237 fetcht 1 ,mem_whee_ta_data_gpio +0x3ed9 011238 call gpio_set_wake_by_current_state +0x3eda 011239 fetcht 1 ,mem_whee_tb_data_gpio +0x3edb 011240 call gpio_set_wake_by_current_state +0x3edc 011241 fetcht 1 ,mem_sensor_data_gpio +0x3edd 011242 branch gpio_set_wake +: 011246 mouse_spi_clk_gpio: +0x3ede 011247 arg mouse_spi2_clk_gpio ,temp +0x3edf 011248 rtn +: 011250 mouse_wheel_check: +0x3ee0 011251 bpatch patch1c_4 ,mem_patch1c +0x3ee1 011252 call mouse_t_wheel_scan +0x3ee2 011253 call mouse_wheel_scan +0x3ee3 011254 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3ee4 011255 fetcht 1 ,mem_wheel_tb_old_pinlevel +0x3ee5 011256 store 1 ,mem_wheel_tb_old_pinlevel +0x3ee6 011257 isub temp ,null +0x3ee7 011258 nbranch app_lpm_wake_auto_lock ,zero +0x3ee8 011259 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3ee9 011260 fetcht 1 ,mem_mwheel_b_old_pinlevel +0x3eea 011261 store 1 ,mem_mwheel_b_old_pinlevel +0x3eeb 011262 isub temp ,null +0x3eec 011263 nbranch app_lpm_wake_auto_lock ,zero +0x3eed 011264 rtn +: 011265 mouse_t_wheel_scan: +0x3eee 011266 fetch 1 ,mem_whee_ta_data_gpio +0x3eef 011267 rtneq gpio_disable +0x3ef0 011268 arg 0 ,rega +0x3ef1 011269 fetcht 1 ,mem_whee_ta_data_gpio +0x3ef2 011270 call gpio_get_bit +0x3ef3 011271 setflag true ,0 ,rega +0x3ef4 011272 fetcht 1 ,mem_whee_tb_data_gpio +0x3ef5 011273 call gpio_get_bit +0x3ef6 011274 setflag true ,1 ,rega +0x3ef7 011275 copy rega ,pdata +0x3ef8 011276 store 1 ,mem_wheel_tb_new_pinlevel +0x3ef9 011277 beq 0x01 ,mouse_t_wheel_scan_judge1 +0x3efa 011278 beq 0x02 ,mouse_t_wheel_scan_judge2 +0x3efb 011279 fetch 1 ,mem_wheel_tog +0x3efc 011280 bbit1 7 ,mouse_t_wheel_scan_judge3 +0x3efd 011281 rtn +: 011283 mouse_t_wheel_scan_judge1: +0x3efe 011284 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3eff 011285 beq 0 ,mouse_t_wheel_scan_judge11 +0x3f00 011286 beq 3 ,mouse_t_wheel_scan_judge12 +0x3f01 011287 rtn +: 011288 mouse_t_wheel_scan_judge2: +0x3f02 011289 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3f03 011290 beq 0 ,mouse_t_wheel_scan_judge21 +0x3f04 011291 beq 3 ,mouse_t_wheel_scan_judge22 +0x3f05 011292 rtn +: 011293 mouse_t_wheel_scan_judge11: +0x3f06 011294 jam 0x82 ,mem_wheel_tog +0x3f07 011295 rtn +: 011296 mouse_t_wheel_scan_judge12: +0x3f08 011297 jam 0x81 ,mem_wheel_tog +0x3f09 011298 rtn +: 011299 mouse_t_wheel_scan_judge21: +0x3f0a 011300 jam 0x80 ,mem_wheel_tog +0x3f0b 011301 rtn +: 011302 mouse_t_wheel_scan_judge22: +0x3f0c 011303 jam 0x83 ,mem_wheel_tog +0x3f0d 011304 rtn +: 011305 mouse_t_wheel_scan_judge3: +0x3f0e 011306 fetch 1 ,mem_wheel_tog +0x3f0f 011307 set0 7 ,pdata +0x3f10 011308 store 1 ,mem_wheel_tog +0x3f11 011309 beq 0 ,mouse_t_wheel_scan_judge30 +0x3f12 011310 beq 1 ,mouse_t_wheel_scan_judge31 +0x3f13 011311 beq 2 ,mouse_t_wheel_scan_judge32 +0x3f14 011312 beq 3 ,mouse_t_wheel_scan_judge33 +0x3f15 011313 rtn +: 011314 mouse_t_wheel_scan_judge30: +0x3f16 011315 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f17 011316 beq 3 ,mouse_wheel_t_forward +0x3f18 011317 rtn +: 011318 mouse_t_wheel_scan_judge31: +0x3f19 011319 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1a 011320 beq 0 ,mouse_wheel_t_forward +0x3f1b 011321 rtn +: 011322 mouse_t_wheel_scan_judge32: +0x3f1c 011323 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1d 011324 beq 3 ,mouse_wheel_t_back +0x3f1e 011325 rtn +: 011326 mouse_t_wheel_scan_judge33: +0x3f1f 011327 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f20 011328 beq 0 ,mouse_wheel_t_back +0x3f21 011329 rtn +: 011330 mouse_wheel_t_forward: +0x3f22 011331 fetch 1 ,mem_mouse_tz_data_count1 +0x3f23 011332 increase 1 ,pdata +0x3f24 011333 store 1 ,mem_mouse_tz_data_count1 +0x3f25 011334 sub pdata ,1 ,null +0x3f26 011335 rtn positive +0x3f27 011336 jam 0 ,mem_mouse_tz_data_count1 +0x3f28 011337 fetch 1 ,mem_mouse_tz_data +0x3f29 011338 increase 1 ,pdata +0x3f2a 011339 store 1 ,mem_mouse_tz_data +0x3f2b 011340 rtn +: 011341 mouse_wheel_t_back: +0x3f2c 011342 fetch 1 ,mem_mouse_tz_data_count +0x3f2d 011343 increase 1 ,pdata +0x3f2e 011344 store 1 ,mem_mouse_tz_data_count +0x3f2f 011345 sub pdata ,1 ,null +0x3f30 011346 rtn positive +0x3f31 011347 jam 0 ,mem_mouse_tz_data_count +0x3f32 011348 fetch 1 ,mem_mouse_tz_data +0x3f33 011349 increase -1 ,pdata +0x3f34 011350 store 1 ,mem_mouse_tz_data +0x3f35 011351 rtn +: 011354 mouse_wheel_scan: +0x3f36 011355 fetch 1 ,mem_whee_a_data_gpio +0x3f37 011356 rtneq gpio_disable +0x3f38 011357 arg 0 ,rega +0x3f39 011358 fetcht 1 ,mem_whee_a_data_gpio +0x3f3a 011359 call gpio_get_bit +0x3f3b 011360 setflag true ,0 ,rega +0x3f3c 011361 fetcht 1 ,mem_whee_b_data_gpio +0x3f3d 011362 call gpio_get_bit +0x3f3e 011363 setflag true ,1 ,rega +0x3f3f 011364 copy rega ,pdata +0x3f40 011365 store 1 ,mem_mwheel_b_new_pinlevel +0x3f41 011366 beq 0x01 ,mouse_wheel_scan_judge1 +0x3f42 011367 beq 0x02 ,mouse_wheel_scan_judge2 +0x3f43 011368 fetch 1 ,mem_mwheel_tog +0x3f44 011369 bbit1 7 ,mouse_wheel_scan_judge3 +0x3f45 011370 rtn +: 011372 mouse_wheel_scan_judge1: +0x3f46 011373 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f47 011374 beq 0 ,mouse_wheel_scan_judge11 +0x3f48 011375 beq 3 ,mouse_wheel_scan_judge12 +0x3f49 011376 rtn +: 011377 mouse_wheel_scan_judge2: +0x3f4a 011378 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f4b 011379 beq 0 ,mouse_wheel_scan_judge21 +0x3f4c 011380 beq 3 ,mouse_wheel_scan_judge22 +0x3f4d 011381 rtn +: 011382 mouse_wheel_scan_judge11: +0x3f4e 011383 jam 0x82 ,mem_mwheel_tog +0x3f4f 011384 rtn +: 011385 mouse_wheel_scan_judge12: +0x3f50 011386 jam 0x81 ,mem_mwheel_tog +0x3f51 011387 rtn +: 011388 mouse_wheel_scan_judge21: +0x3f52 011389 jam 0x80 ,mem_mwheel_tog +0x3f53 011390 rtn +: 011391 mouse_wheel_scan_judge22: +0x3f54 011392 jam 0x83 ,mem_mwheel_tog +0x3f55 011393 rtn +: 011394 mouse_wheel_scan_judge3: +0x3f56 011395 fetch 1 ,mem_mwheel_tog +0x3f57 011396 set0 7 ,pdata +0x3f58 011397 store 1 ,mem_mwheel_tog +0x3f59 011398 beq 0 ,mouse_wheel_scan_judge30 +0x3f5a 011399 beq 1 ,mouse_wheel_scan_judge31 +0x3f5b 011400 beq 2 ,mouse_wheel_scan_judge32 +0x3f5c 011401 beq 3 ,mouse_wheel_scan_judge33 +0x3f5d 011402 rtn +: 011403 mouse_wheel_scan_judge30: +0x3f5e 011404 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f5f 011405 beq 3 ,mouse_wheel_forward +0x3f60 011406 rtn +: 011407 mouse_wheel_scan_judge31: +0x3f61 011408 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f62 011409 beq 0 ,mouse_wheel_forward +0x3f63 011410 rtn +: 011411 mouse_wheel_scan_judge32: +0x3f64 011412 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f65 011413 beq 3 ,mouse_wheel_back +0x3f66 011414 rtn +: 011415 mouse_wheel_scan_judge33: +0x3f67 011416 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f68 011417 beq 0 ,mouse_wheel_back +0x3f69 011418 rtn +: 011419 mouse_wheel_forward: +0x3f6a 011420 jam 0 ,mem_mouse_z_data_count1 +0x3f6b 011421 fetch 1 ,mem_mouse_z_data +0x3f6c 011422 increase 1 ,pdata +0x3f6d 011423 store 1 ,mem_mouse_z_data +0x3f6e 011424 rtn +: 011425 mouse_wheel_back: +0x3f6f 011426 jam 0 ,mem_mouse_z_data_count +0x3f70 011427 fetch 1 ,mem_mouse_z_data +0x3f71 011428 increase -1 ,pdata +0x3f72 011429 store 1 ,mem_mouse_z_data +0x3f73 011430 rtn +: 011433 mouse_hid_connected: +0x3f74 011434 setarg hid_handshake_timeout +0x3f75 011435 store 1 ,mem_hid_handshake_timer_count +0x3f76 011436 rtn +: 011438 mouse_send_process: +0x3f77 011439 fetch 1 ,mem_app_handshake_flag +0x3f78 011440 rtn blank +0x3f79 011441 call l2cap_malloc_is_fifo_nearly_full +0x3f7a 011442 nrtn blank +0x3f7b 011443 fetch mouse_flag_len ,mem_mouse_flag +0x3f7c 011444 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data +0x3f7d 011445 bbit1 mouse_select_device_flag ,mouse_send_empty_data +0x3f7e 011446 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3f7f 011447 call mouse_motion +0x3f80 011448 nrtn user +: 011449 mouse_send_data: +0x3f81 011450 arg 9 ,rega +0x3f82 011451 call hid_malloc_tx_buff +0x3f83 011452 fetch 2 ,mem_hid_int_remote_cid +0x3f84 011453 istore 2 ,contw +0x3f85 011454 setarg 0x02a1 +0x3f86 011455 istore 2 ,contw +0x3f87 011456 fetch 7 ,mem_mouse_key +0x3f88 011457 istore 7 ,contw +0x3f89 011458 rtn +: 011461 mouse_send_empty_data: +0x3f8a 011462 setarg 0 +0x3f8b 011463 store 7 ,mem_mouse_key +0x3f8c 011464 branch mouse_send_data +: 011467 mouse_no_data_timer_init: +0x3f8d 011468 fetch 2 ,mem_mouse_no_data_timeout +0x3f8e 011469 store 2 ,mem_mouse_no_data_timer +0x3f8f 011470 rtn +: 011473 mouse_fill_data_le: +0x3f90 011474 bpatch patch1c_5 ,mem_patch1c +0x3f91 011475 arg 7 ,rega +0x3f92 011476 fetcht 2 ,mem_le_notify_handle +0x3f93 011477 call le_att_malloc_tx_notify +0x3f94 011478 fetch 7 ,mem_mouse_key +0x3f95 011479 istore 7 ,contw +0x3f96 011480 rtn +: 011482 mouse_motion: +0x3f97 011483 bpatch patch1c_6 ,mem_patch1c +0x3f98 011484 disable user +0x3f99 011485 setarg 0 +0x3f9a 011486 store 6 ,mem_mouse_x +0x3f9b 011487 call mouse_cheak_sensor_data +0x3f9c 011488 call mouse_zwheel +0x3f9d 011489 call mouse_t_zwheel +0x3f9e 011490 call mouse_key +0x3f9f 011491 nrtn user +0x3fa0 011492 call mouse_no_data_timer_init +0x3fa1 011493 arg mouse_statue_up_flag ,queue +0x3fa2 011494 branch mouse_enable_function_flag +: 011496 motion_6clk_direction_dispose: +0x3fa3 011497 fetch 2 ,mem_mouse_x +0x3fa4 011498 sub pdata ,0 ,pdata +0x3fa5 011499 store 2 ,mem_mouse_x +0x3fa6 011500 branch enable_user +: 011501 motion_12clk_direction_dispose: +0x3fa7 011502 fetch 2 ,mem_mouse_y +0x3fa8 011503 sub pdata ,0 ,pdata +0x3fa9 011504 store 2 ,mem_mouse_y +0x3faa 011505 branch enable_user +: 011506 motion_9clk_direction_dispose: +0x3fab 011507 fetch 2 ,mem_mouse_y +0x3fac 011508 sub pdata ,0 ,pdata +0x3fad 011509 store 2 ,mem_mouse_y +0x3fae 011510 fetch 2 ,mem_mouse_x +0x3faf 011511 sub pdata ,0 ,pdata +0x3fb0 011512 store 2 ,mem_mouse_x +0x3fb1 011513 call mouse_sensor_data_swap_places +0x3fb2 011514 branch enable_user +: 011515 motion_3clk_direction_dispose: +0x3fb3 011516 call mouse_sensor_data_swap_places +0x3fb4 011517 branch enable_user +: 011518 mouse_cheak_sensor_data: +0x3fb5 011519 fetch 1 ,mem_spi_write_flash_sm +0x3fb6 011520 rtnne flash_sm_no_buys +0x3fb7 011521 fetch 1 ,mem_config_sensor_type +0x3fb8 011522 beq p3205 ,mouse_p32xx_sensor_motion +0x3fb9 011523 beq p3065 ,mouse_p32xx_sensor_motion +0x3fba 011524 beq ka8 ,mouse_p32xx_sensor_motion +0x3fbb 011525 beq p3204 ,mouse_p32xx_sensor_motion +0x3fbc 011526 beq p3212 ,mouse_p3212_sensor_motion +0x3fbd 011527 beq p3610 ,mouse_p3610_sensor_motion +0x3fbe 011528 beq p3065_xy ,mouse_p32xx_sensor_motion +0x3fbf 011529 branch mouse_p32xx_sensor_motion +: 011531 mouse_clear_sensor_data: +0x3fc0 011532 fetch 1 ,mem_mouse_move_flag +0x3fc1 011533 call mouse_read_sensor_common ,blank +0x3fc2 011534 jam 1 ,mem_mouse_move_flag +0x3fc3 011535 rtn +: 011538 mouse_p3212_sensor_motion: +0x3fc4 011539 call mouse_clear_sensor_data +0x3fc5 011540 fetcht 1 ,mem_sensor_data_gpio +0x3fc6 011541 call gpio_get_bit +0x3fc7 011542 nrtn true +0x3fc8 011543 setarg pan_reg_pid_l +0x3fc9 011544 call twspi_read +0x3fca 011545 bne p32xx_id1 ,mouse_twspi_reset +0x3fcb 011546 setarg pan_reg_motion_staus +0x3fcc 011547 call twspi_read +0x3fcd 011548 rtnbit0 7 +0x3fce 011549 call mouse_read_sensor_common +0x3fcf 011550 call mouse_read_3212sensor_xy_high +0x3fd0 011551 store 1 ,mem_mouse_xy_h +0x3fd1 011552 rshift4 pdata ,pdata +0x3fd2 011553 call extsign_bit3 +0x3fd3 011554 store 1 ,mem_mouse_x + 1 +0x3fd4 011555 fetch 1 ,mem_mouse_xy_h +0x3fd5 011556 and pdata ,0x0f ,pdata +0x3fd6 011557 call extsign_bit3 +0x3fd7 011558 store 1 ,mem_mouse_y + 1 +0x3fd8 011559 fetch 1 ,mem_config_sensor_angle +0x3fd9 011560 beq mouse_6clk_angle ,motion_6clk_direction_dispose +0x3fda 011561 beq mouse_9clk_angle ,motion_9clk_direction_dispose +0x3fdb 011562 beq mouse_12clk_angle ,motion_12clk_direction_dispose +0x3fdc 011563 beq mouse_3clk_angle ,motion_3clk_direction_dispose +0x3fdd 011564 rtn +: 011566 mouse_read_3212sensor_xy_high: +0x3fde 011567 setarg 0x12 +0x3fdf 011568 branch twspi_read +: 011570 mouse_p3065_judge: +0x3fe0 011571 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +0x3fe1 011572 branch mouse_twspi_reset +: 011574 mouse_p32xx_sensor_motion: +0x3fe2 011575 call mouse_clear_sensor_data +0x3fe3 011576 disable user +0x3fe4 011577 fetcht 1 ,mem_sensor_data_gpio +0x3fe5 011578 call gpio_get_bit +0x3fe6 011579 nrtn true +0x3fe7 011580 setarg pan_reg_pid_l +0x3fe8 011581 call twspi_read +0x3fe9 011582 bne p32xx_id1 ,mouse_p3065_judge +: 011583 mouse_p32xx_sensor_motion_1: +0x3fea 011584 setarg pan_reg_motion_staus +0x3feb 011585 call twspi_read +0x3fec 011586 rtnbit0 7 +0x3fed 011587 call mouse_read_sensor_common +0x3fee 011588 fetch 1 ,mem_mouse_x +0x3fef 011589 call extsign +0x3ff0 011590 store 2 ,mem_mouse_x +0x3ff1 011591 fetch 1 ,mem_mouse_y +0x3ff2 011592 call extsign +0x3ff3 011593 store 2 ,mem_mouse_y +0x3ff4 011594 fetch 1 ,mem_config_sensor_angle +0x3ff5 011595 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection +0x3ff6 011596 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection +0x3ff7 011597 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection +0x3ff8 011598 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection +0x3ff9 011599 rtn +: 011601 motion32xx_6clk_direction_selection: +0x3ffa 011602 call motion_6clk_direction_dispose +0x3ffb 011603 branch mouse_sensor_sdio_low +: 011604 motion32xx_9clk_direction_selection: +0x3ffc 011605 call motion_9clk_direction_dispose +0x3ffd 011606 branch mouse_sensor_sdio_low +: 011607 motion32xx_12clk_direction_selection: +0x3ffe 011608 call motion_12clk_direction_dispose +0x3fff 011609 branch mouse_sensor_sdio_low +: 011610 motion32xx_3clk_direction_selection: +0x4000 011611 call motion_3clk_direction_dispose +0x4001 011612 branch mouse_sensor_sdio_low +: 011614 mouse_sensor_data_swap_places: +0x4002 011615 fetch 2 ,mem_mouse_y +0x4003 011616 fetcht 2 ,mem_mouse_x +0x4004 011617 store 2 ,mem_mouse_x +0x4005 011618 storet 2 ,mem_mouse_y +0x4006 011619 rtn +: 011621 mouse_p3610sensor_read: +0x4007 011622 call spi_ncs_enable +0x4008 011623 nop 100 +0x4009 011624 copy regb ,pdata +0x400a 011625 call twspi_read +0x400b 011626 copy pdata ,regb +0x400c 011627 call spi_ncs_disable +0x400d 011628 nop 100 +0x400e 011629 copy regb ,pdata +0x400f 011630 rtn +: 011631 mouse_p3610_sensor_motion: +0x4010 011632 disable user +0x4011 011633 fetcht 1 ,mem_sensor_data_gpio +0x4012 011634 call gpio_get_bit +0x4013 011635 nrtn true +0x4014 011636 arg pan_reg_motion_staus ,regb +0x4015 011637 call mouse_p3610sensor_read +0x4016 011638 rtnbit0 7 +0x4017 011639 arg pan_reg_pid_l ,regb +0x4018 011640 call mouse_p3610sensor_read +0x4019 011641 store 1 ,mem_sensor_id1 +0x401a 011642 bne p3610_id1 ,mouse_init_3610sensor_reset +0x401b 011643 fetch 1 ,mem_mouse_move_flag +0x401c 011644 call mouse_read_sensor3610_data ,blank +0x401d 011645 jam 1 ,mem_mouse_move_flag +0x401e 011646 call mouse_read_sensor3610_data +0x401f 011647 fetch 1 ,mem_mouse_xy_h +0x4020 011648 rshift4 pdata ,pdata +0x4021 011649 call extsign_bit3 +0x4022 011650 store 1 ,mem_mouse_x + 1 +0x4023 011651 fetch 1 ,mem_mouse_xy_h +0x4024 011652 and pdata ,0x0f ,pdata +0x4025 011653 call extsign_bit3 +0x4026 011654 store 1 ,mem_mouse_y + 1 +0x4027 011655 fetch 1 ,mem_config_sensor_angle +0x4028 011656 beq 0 ,motion3610_6clk_direction_selection +0x4029 011657 beq 1 ,motion3610_9clk_direction_selection +0x402a 011658 beq 2 ,motion3610_12clk_direction_selection +0x402b 011659 beq 3 ,motion3610_3clk_direction_selection +0x402c 011660 rtn +: 011662 mouse_3610_smart_select: +0x402d 011663 fetch 1 ,mem_sensor_smart_flag +0x402e 011664 beq p3610_smart_enable ,mouse_3610_smart_disable +0x402f 011665 beq p3610_smart_disable ,mouse_3610_smart_enable +0x4030 011666 rtn +: 011669 motion3610_6clk_direction_selection: +0x4031 011670 call motion_6clk_direction_dispose +0x4032 011671 branch mouse_3610_smart_select +: 011673 motion3610_12clk_direction_selection: +0x4033 011674 call motion_12clk_direction_dispose +0x4034 011675 branch mouse_3610_smart_select +: 011677 motion3610_9clk_direction_selection: +0x4035 011678 call motion_9clk_direction_dispose +0x4036 011679 branch mouse_3610_smart_select +: 011681 motion3610_3clk_direction_selection: +0x4037 011682 call motion_3clk_direction_dispose +0x4038 011683 branch mouse_3610_smart_select +: 011685 mouse_read_sensor3610_data: +0x4039 011686 call spi_ncs_enable +0x403a 011687 call mouse_read_sensor_common +0x403b 011688 arg 5 ,pdata +0x403c 011689 call twspi_read +0x403d 011690 store 1 ,mem_mouse_xy_h +0x403e 011691 arg 7 ,pdata +0x403f 011692 call twspi_read +0x4040 011693 store 1 ,mem_sensor_shutter_hi +0x4041 011694 arg 8 ,pdata +0x4042 011695 call twspi_read +0x4043 011696 store 1 ,mem_sensor_shutter_lo +0x4044 011697 branch spi_ncs_disable +: 011700 mouse_3610_smart_enable: +0x4045 011701 fetch 1 ,mem_sensor_shutter_hi +0x4046 011702 rtnne 0 +0x4047 011703 fetch 1 ,mem_sensor_shutter_lo +0x4048 011704 sub pdata ,45 ,null +0x4049 011705 rtn positive +0x404a 011706 jam p3610_smart_enable ,mem_sensor_smart_flag +0x404b 011707 setarg 0xba41 +0x404c 011708 call sensor_write +0x404d 011709 setarg 0x0032 +0x404e 011710 call sensor_write +0x404f 011711 setarg 0xb541 +0x4050 011712 branch sensor_write +: 011713 mouse_3610_smart_disable: +0x4051 011714 fetch 1 ,mem_sensor_shutter_hi +0x4052 011715 rtnne 0 +0x4053 011716 fetch 1 ,mem_sensor_shutter_lo +0x4054 011717 sub pdata ,45 ,null +0x4055 011718 nrtn positive +0x4056 011719 jam p3610_smart_disable ,mem_sensor_smart_flag +0x4057 011720 setarg 0xba41 +0x4058 011721 call sensor_write +0x4059 011722 setarg 0x8032 +0x405a 011723 call sensor_write +0x405b 011724 setarg 0xb541 +0x405c 011725 branch sensor_write +: 011729 mouse_read_sensor_common: +0x405d 011730 arg pan_reg_delta_x ,pdata +0x405e 011731 call twspi_read +0x405f 011732 store 2 ,mem_mouse_x +0x4060 011733 arg pan_reg_delta_y ,pdata +0x4061 011734 call twspi_read +0x4062 011735 store 2 ,mem_mouse_y +0x4063 011736 rtn +: 011738 mouse_set_qdecoder_x: +0x4064 011739 arg mouse_default_xa_gpio ,temp +0x4065 011740 call gpio_config_input +0x4066 011741 arg mouse_default_xa_gpio ,temp +0x4067 011742 call gpio_get_bit +0x4068 011743 rtn true +0x4069 011744 hfetch 1 ,core_qdec_cntx +0x406a 011745 set1 4 ,pdata +0x406b 011746 hstore 1 ,core_qdec_cntx +0x406c 011747 rtn +: 011749 mouse_hardware_zwheel: +0x406d 011750 fetcht 1 ,mem_mouse_z_data +0x406e 011751 hfetch 1 ,core_qdec_cntx +0x406f 011752 iadd temp ,pdata +0x4070 011753 rtn blank +0x4071 011754 store 1 ,mem_mouse_z +0x4072 011755 jam 0 ,mem_mouse_z_data +0x4073 011756 branch enable_user +: 011757 mouse_hardware_zwheel_beforelpm: +0x4074 011758 fetcht 1 ,mem_mouse_z_data +0x4075 011759 hfetch 1 ,core_qdec_cntx +0x4076 011760 iadd temp ,pdata +0x4077 011761 store 1 ,mem_mouse_z_data +0x4078 011762 rtn +: 011763 mouse_zwheel: +0x4079 011764 fetch 1 ,mem_mouse_z_data +0x407a 011765 rtn blank +0x407b 011766 store 1 ,mem_mouse_z +0x407c 011767 jam 0 ,mem_mouse_z_data +0x407d 011768 branch enable_user +: 011770 mouse_t_zwheel: +0x407e 011771 fetch 1 ,mem_mouse_tz_data +0x407f 011772 rtn blank +0x4080 011773 store 1 ,mem_mouse_tz +0x4081 011774 jam 0 ,mem_mouse_tz_data +0x4082 011775 branch enable_user +: 011777 mouse_check_key_gpio: +0x4083 011778 arg 0 ,rega +0x4084 011779 fetcht 1 ,mem_lbutton_gpio +0x4085 011780 call gpio_get_bit +0x4086 011781 setflag true ,0 ,rega +0x4087 011782 fetcht 1 ,mem_rbutton_gpio +0x4088 011783 call gpio_get_bit +0x4089 011784 setflag true ,1 ,rega +0x408a 011785 fetcht 1 ,mem_mbutton_gpio +0x408b 011786 call gpio_get_bit +0x408c 011787 setflag true ,2 ,rega +0x408d 011788 call mouse_check_s_key_gpio +0x408e 011789 copy rega ,pdata +0x408f 011790 rtn +: 011791 mouse_check_s_key_gpio: +0x4090 011792 fetch 1 ,mem_bk_button_gpio +0x4091 011793 rtneq gpio_disable +0x4092 011794 fetcht 1 ,mem_bk_button_gpio +0x4093 011795 call gpio_get_bit +0x4094 011796 setflag true ,3 ,rega +0x4095 011797 fetcht 1 ,mem_fw_button_gpio +0x4096 011798 call gpio_get_bit +0x4097 011799 setflag true ,4 ,rega +0x4098 011800 rtn +: 011802 mouse_key: +0x4099 011803 call mouse_check_key_gpio +0x409a 011804 call mouse_set_mult +0x409b 011805 call mouse_24g_key +0x409c 011806 copy rega ,pdata +0x409d 011807 fetcht 1 ,mem_mouse_key +0x409e 011808 store 1 ,mem_mouse_key +0x409f 011809 ixor temp ,pdata +0x40a0 011810 sub pdata ,0 ,null +0x40a1 011811 rtn zero +0x40a2 011812 branch enable_user +: 011814 mouse_24g_key: +0x40a3 011815 rtnmark0 mark_24g +0x40a4 011816 copy rega ,pdata +0x40a5 011817 rtn blank +0x40a6 011818 store 1 ,mem_mouse_key +0x40a7 011819 branch enable_user +: 011822 mouse_set_mult: +0x40a8 011823 fetch 2 ,mem_ui_state_map +0x40a9 011824 bbit1 ui_state_ble_connected ,mouse_set_ble_mult +0x40aa 011825 fetch 2 ,mem_ui_state_map +0x40ab 011826 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +0x40ac 011827 rtn +: 011828 mouse_set_ble_mult: +0x40ad 011829 copy rega ,pdata +0x40ae 011830 nbranch le_set_config_short_mult ,blank +0x40af 011831 branch le_clr_config_short_mult +: 011832 mouse_set_bt_mult: +0x40b0 011833 copy rega ,pdata +0x40b1 011834 nbranch classic_bt_set_mult_short_flag ,blank +0x40b2 011835 branch classic_bt_clr_mult_short_flag +: 011838 mouse_sensor_sdio_low: +0x40b3 011839 bpatch patch1c_7 ,mem_patch1c +0x40b4 011840 arg mouse_spi1_sdio_gpio ,temp +0x40b5 011841 fetch mouse_flag_len ,mem_mouse_flag +0x40b6 011842 isolate1 mouse_enable_spi2 ,pdata +0x40b7 011843 call mouse_sensor_sdio_low2 ,true +0x40b8 011844 call gpio_get_bit +0x40b9 011845 rtn true +0x40ba 011846 setarg 0x0a +0x40bb 011847 call twspi_read +0x40bc 011848 nop 1000 +0x40bd 011849 branch mouse_sensor_sdio_low +: 011850 mouse_sensor_sdio_low2: +0x40be 011851 arg mouse_spi2_sdio_gpio ,temp +0x40bf 011852 rtn +: 011854 mouse_spi_sdio_gpio_pollup: +0x40c0 011855 fetch mouse_flag_len ,mem_mouse_flag +0x40c1 011856 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup +: 011857 mouse_spi1_sdio_gpio_pollup: +0x40c2 011858 arg mouse_spi1_sdio_gpio ,temp +0x40c3 011859 branch gpio_config_input_without_wake +: 011860 mouse_spi2_sdio_gpio_pollup: +0x40c4 011861 arg mouse_spi2_sdio_gpio ,temp +0x40c5 011862 branch gpio_config_input_without_wake +: 011865 mouse_init_sunt: +0x40c6 011866 call mouse_spi_init +0x40c7 011867 rtn wake +0x40c8 011868 call mouse_spi_sdio_gpio_pollup +0x40c9 011869 fetch 1 ,mem_config_sensor_type +0x40ca 011870 beq p3610 ,mouse_init_3610sensor +: 011871 mouse_init_sensor: +0x40cb 011872 call mouse_read_sensor_id +0x40cc 011873 beq p32xx_id1 ,mouse_init_p32xx_id2_judge +0x40cd 011874 beq p3065_id1 ,mouse_p3065_init_param +0x40ce 011875 call mouse_twspi_reset +0x40cf 011876 nop 1000 +0x40d0 011877 branch mouse_init_sensor +: 011878 mouse_twspi_reset: +0x40d1 011879 bpatch patch1d_0 ,mem_patch1d +0x40d2 011880 fetch mouse_flag_len ,mem_mouse_flag +0x40d3 011881 bbit1 mouse_enable_spi2 ,twspi_reset2 +0x40d4 011882 branch twspi_reset +: 011884 mouse_init_3610sensor: +0x40d5 011885 call mouse_read_sensor_id +0x40d6 011886 beq p3610_id1 ,mouse_init_p3610 +0x40d7 011887 call mouse_init_3610sensor_reset +0x40d8 011888 branch mouse_init_3610sensor +: 011890 mouse_read_sensor_id: +0x40d9 011891 setarg pan_reg_pid_h +0x40da 011892 call twspi_read +0x40db 011893 store 1 ,mem_sensor_id2 +0x40dc 011894 setarg pan_reg_pid_l +0x40dd 011895 call twspi_read +0x40de 011896 store 1 ,mem_sensor_id1 +0x40df 011897 rtn +: 011898 mouse_init_p32xx_id2_judge: +0x40e0 011899 fetch 1 ,mem_sensor_id2 +0x40e1 011900 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +0x40e2 011901 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +0x40e3 011902 beq p3212_id2 ,mouse_3212_init_param +0x40e4 011903 beq pka8_id2 ,mouse_ka8_init_param +0x40e5 011904 rtn +: 011905 mouse_ka8_init_param: +0x40e6 011906 jam ka8 ,mem_config_sensor_type +0x40e7 011907 rtn +: 011908 mouse_p3065xy_init_param: +0x40e8 011909 jam p3065_xy ,mem_config_sensor_type +0x40e9 011910 rtn +: 011911 mouse_p3065_init_param: +0x40ea 011912 fetch 1 ,mem_sensor_id2 +0x40eb 011913 beq p3065_xy_id2 ,mouse_p3065xy_init_param +0x40ec 011914 jam p3065 ,mem_config_sensor_type +0x40ed 011915 rtn +: 011916 mouse_3212_init_param: +0x40ee 011917 jam p3212 ,mem_config_sensor_type +0x40ef 011918 call mouse_sensor_disable_wp +0x40f0 011919 setarg 0x3426 +0x40f1 011920 call twspi_write +0x40f2 011921 setarg 0x0419 +0x40f3 011922 call twspi_write +: 011923 mouse_sensor_enable_wp: +0x40f4 011924 setarg 0x0009 +0x40f5 011925 branch twspi_write +: 011926 mouse_sensor_disable_wp: +0x40f6 011927 setarg 0x5a09 +0x40f7 011928 branch twspi_write +: 011930 mouse_3204_3l_init_param: +0x40f8 011931 jam p3204 ,mem_config_sensor_type +0x40f9 011932 call mouse_sensor_disable_wp +0x40fa 011933 setarg 0x0f0d +0x40fb 011934 call twspi_write +0x40fc 011935 setarg 0xe31d +0x40fd 011936 call twspi_write +0x40fe 011937 setarg 0xd27d +0x40ff 011938 call twspi_write +0x4100 011939 call mouse_32xx_init_param +0x4101 011940 branch mouse_32xx_init_param_1 +: 011942 mouse_32xx_init_param: +0x4102 011943 setarg 0x351b +0x4103 011944 call twspi_write +0x4104 011945 setarg 0xb428 +0x4105 011946 call twspi_write +0x4106 011947 setarg 0x4629 +0x4107 011948 call twspi_write +0x4108 011949 setarg 0x962a +0x4109 011950 call twspi_write +0x410a 011951 setarg 0x8c2b +0x410b 011952 call twspi_write +0x410c 011953 setarg 0x6e2c +0x410d 011954 call twspi_write +0x410e 011955 setarg 0x642d +0x410f 011956 call twspi_write +0x4110 011957 setarg 0x5f38 +0x4111 011958 call twspi_write +0x4112 011959 setarg 0x0f39 +0x4113 011960 call twspi_write +0x4114 011961 setarg 0x323a +0x4115 011962 call twspi_write +0x4116 011963 setarg 0x473b +0x4117 011964 call twspi_write +0x4118 011965 setarg 0x1042 +0x4119 011966 branch twspi_write +: 011967 mouse_32xx_init_param_1: +0x411a 011968 setarg 0x2e54 +0x411b 011969 call twspi_write +0x411c 011970 setarg 0xf255 +0x411d 011971 call twspi_write +0x411e 011972 setarg 0xf461 +0x411f 011973 call twspi_write +0x4120 011974 setarg 0x7063 +0x4121 011975 call twspi_write +0x4122 011976 setarg 0x5275 +0x4123 011977 call twspi_write +0x4124 011978 setarg 0x4176 +0x4125 011979 call twspi_write +0x4126 011980 setarg 0xed77 +0x4127 011981 call twspi_write +0x4128 011982 setarg 0x2378 +0x4129 011983 call twspi_write +0x412a 011984 setarg 0x4679 +0x412b 011985 call twspi_write +0x412c 011986 setarg 0xe57a +0x412d 011987 call twspi_write +0x412e 011988 setarg 0x487c +0x412f 011989 call twspi_write +0x4130 011990 setarg 0x777e +0x4131 011991 call twspi_write +0x4132 011992 setarg 0x017f +0x4133 011993 call twspi_write +0x4134 011994 setarg 0x000b +0x4135 011995 call twspi_write +0x4136 011996 setarg 0x007f +0x4137 011997 call twspi_write +0x4138 011998 branch mouse_sensor_enable_wp +: 012001 mouse_3205_3t_init_param: +0x4139 012002 jam p3205 ,mem_config_sensor_type +0x413a 012003 call mouse_sensor_disable_wp +0x413b 012004 setarg 0x100d +0x413c 012005 call twspi_write +0x413d 012006 setarg 0xed1d +0x413e 012007 call twspi_write +0x413f 012008 setarg 0x807d +0x4140 012009 call twspi_write +0x4141 012010 call mouse_32xx_init_param +0x4142 012011 setarg 0x0943 +0x4143 012012 call twspi_write +0x4144 012013 branch mouse_32xx_init_param_1 +: 012016 mouse_init_3610sensor_reset: +0x4145 012017 fetcht 1 ,mem_sensor_reset_gpio +0x4146 012018 call gpio_out_active +0x4147 012019 call delay_10ms +0x4148 012020 fetcht 1 ,mem_sensor_reset_gpio +0x4149 012021 call gpio_out_inactive +0x414a 012022 branch delay_10ms +: 012024 mouse_init_p3610: +0x414b 012025 jam p3610 ,mem_config_sensor_type +0x414c 012026 setarg 0xba41 +0x414d 012027 call sensor_write +0x414e 012028 setarg 0x0d11 +0x414f 012029 call sensor_write +0x4150 012030 setarg 0x041b +0x4151 012031 call sensor_write +0x4152 012032 setarg 0x041c +0x4153 012033 call sensor_write +0x4154 012034 setarg 0x0f1d +0x4155 012035 call sensor_write +0x4156 012036 setarg 0x0032 +0x4157 012037 call sensor_write +0x4158 012038 setarg 0xb541 +0x4159 012039 branch sensor_write +: 012043 mouse_set_sensor_reg: +0x415a 012044 setarg 0xba41 +0x415b 012045 call sensor_write +0x415c 012046 nop 4000 +0x415d 012047 setarg 0xff7f +0x415e 012048 call sensor_write +0x415f 012049 copy rega ,pdata +0x4160 012050 call sensor_write +0x4161 012051 setarg 0x007f +0x4162 012052 call sensor_write +0x4163 012053 setarg 0xb541 +0x4164 012054 branch sensor_write +: 012056 extsign: +0x4165 012057 rtnbit0 7 +0x4166 012058 arg 0xff00 ,temp +0x4167 012059 ior temp ,pdata +0x4168 012060 rtn +: 012062 extsign_bit3: +0x4169 012063 rtnbit0 3 +0x416a 012064 arg 0xf0 ,temp +0x416b 012065 ior temp ,pdata +0x416c 012066 rtn +: 012069 mouse_le: +0x416d 012070 call le_fifo_check_nearly_full +0x416e 012071 nrtn blank +0x416f 012072 fetch 1 ,mem_le_connect_statue_flag +0x4170 012073 and pdata ,0x03 ,pdata +0x4171 012074 rtnne 0x03 +0x4172 012075 fetch mouse_flag_len ,mem_mouse_flag +0x4173 012076 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet +0x4174 012077 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +0x4175 012078 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x4176 012079 call mouse_motion +0x4177 012080 nrtn user +0x4178 012081 branch mouse_fill_data_le +: 012083 mouse_le_send_empty_packet: +0x4179 012084 setarg 0 +0x417a 012085 store 7 ,mem_mouse_key +0x417b 012086 branch mouse_fill_data_le +: 012088 mouse_priority_bb_event: +0x417c 012089 copy regc ,pdata +0x417d 012090 beq bt_evt_le_connected ,mouse_le_bb_event_connected +0x417e 012091 beq bt_evt_bb_connected ,mouse_stop_discovery +0x417f 012092 beq bt_evt_le_disconnected ,mouse_bb_disconnected +0x4180 012093 beq bt_evt_bb_disconnected ,mouse_bb_disconnected +0x4181 012094 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +0x4182 012095 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +0x4183 012096 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +0x4184 012097 beq bt_evt_hid_connected ,mouse_bt_hid_connected +0x4185 012098 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +0x4186 012099 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +0x4187 012100 beq bt_evt_pincode_req ,mouse_bb_event_pincode +0x4188 012101 beq bt_evt_remote_unsniff ,app_start_auto_sniff +0x4189 012102 beq bt_evt_le_pairing_success ,mouse_le_pairing_success +0x418a 012103 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +0x418b 012104 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +0x418c 012105 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +0x418d 012106 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +0x418e 012107 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +0x418f 012108 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +0x4190 012109 rtn +: 012112 mouse_le_pairing_complete: +0x4191 012113 branch app_ble_store_reconn_info +: 012115 mouse_24g_attempt_fail: +0x4192 012116 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x4193 012117 fetch 1 ,mem_reconn_times +0x4194 012118 nbranch mouse_polling_device ,blank +0x4195 012119 fetch 1 ,mem_device_flag +0x4196 012120 fetcht 1 ,mem_24g_device_number +0x4197 012121 isub temp ,null +0x4198 012122 branch app_enter_hibernate ,zero +0x4199 012123 rtn +: 012124 mouse_24g_attempt_success: +0x419a 012125 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419b 012126 rtn +: 012127 mouse_24g_pairing_complete: +0x419c 012128 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419d 012129 arg mosue_24g_pairing_flag ,queue +0x419e 012130 call mouse_disable_function_flag +0x419f 012131 setarg 0 +0x41a0 012132 store 2 ,mem_24g_pairing_timer_count +0x41a1 012133 jam 0 ,mem_mouse_move_flag +0x41a2 012135 fetch 1 ,mem_config_sensor_type +0x41a3 012136 sub pdata ,p3610 ,null +0x41a4 012137 call mouse_read_sensor3610_data ,zero +0x41a5 012138 ncall mouse_read_sensor_common ,zero +0x41a6 012140 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x41a7 012141 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address +0x41a8 012142 call mouse_set_24g_addr_eeprom +0x41a9 012143 branch iicd_write_protect_eep_data +: 012145 mouse_set_24g_addr_eeprom: +0x41aa 012146 call g24_head_ptr2regc +0x41ab 012147 add regc ,offset_24g_addr ,rega +0x41ac 012148 arg mouse_g24_addr_eeprom_offect ,regb +0x41ad 012149 arg 4 ,temp +0x41ae 012150 rtn +: 012152 mouse_store_flash_24g_address: +0x41af 012153 call g24_head_ptr2regc +0x41b0 012154 add regc ,offset_24g_addr ,regb +0x41b1 012155 ifetch 1 ,regb +0x41b2 012156 store 1 ,mem_mouse_24g_addr +0x41b3 012157 branch mouse_store_flash_device_info +: 012160 mouse_le_pairing_success: +0x41b4 012161 arg ll_pairing_success_flag ,queue +0x41b5 012162 branch mouse_le_enable_connect_flag +: 012163 mouse_le_ll_start_encryt: +0x41b6 012164 jam 2 ,mem_le_start_encrypt_timer +0x41b7 012165 arg ll_start_enc_flag ,queue +0x41b8 012166 branch mouse_le_enable_connect_flag +: 012169 mouse_le_enable_connect_flag: +0x41b9 012170 fetch 1 ,mem_le_connect_statue_flag +0x41ba 012171 qset1 pdata +0x41bb 012172 store 1 ,mem_le_connect_statue_flag +0x41bc 012173 rtn +: 012175 mouse_le_disable_connect_flag: +0x41bd 012176 fetch 1 ,mem_le_connect_statue_flag +0x41be 012177 qset0 pdata +0x41bf 012178 store 1 ,mem_le_connect_statue_flag +0x41c0 012179 rtn +: 012180 mouse_le_clean_connect_flag: +0x41c1 012181 jam 0 ,mem_le_connect_statue_flag +0x41c2 012182 rtn +: 012184 mouse_le_bb_event_connected: +0x41c3 012185 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c4 012186 set0 app_disc_by_button ,pdata +0x41c5 012187 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c6 012188 setarg 0 +0x41c7 012189 store 2 ,mem_mouse_direct_timer +0x41c8 012190 call mouse_no_data_timer_init +0x41c9 012191 branch mouse_stop_discovery +: 012193 mouse_bb_event_pincode: +0x41ca 012194 call pincode_reinit +0x41cb 012195 branch app_bt_set_pincode +: 012196 mouse_bb_event_reconn_timeout: +: 012197 mouse_bb_event_reconn_failed: +0x41cc 012198 fetch 1 ,mem_reconn_times +0x41cd 012199 nbranch mouse_polling_device ,blank +0x41ce 012200 fetch 2 ,mem_ui_state_map +0x41cf 012201 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41d0 012202 fetch mouse_flag_len ,mem_mouse_flag +0x41d1 012203 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41d2 012204 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery +0x41d3 012205 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41d4 012206 branch app_bb_hibernate +: 012209 mouse_bt_hid_connected: +0x41d5 012210 branch mouse_hid_connected +: 012212 mouse_bt_event_setup_complete: +0x41d6 012213 rtn +: 012215 mouse_soft_reset: +0x41d7 012216 call mouse_select_device_enable +0x41d8 012217 branch soft_reset_chip +: 012219 mouse_bb_disconnected: +0x41d9 012220 bpatch patch1d_1 ,mem_patch1d +0x41da 012221 call mouse_bb_discon_clear_stack +0x41db 012222 fetch mouse_flag_len ,mem_mouse_flag +0x41dc 012223 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41dd 012224 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41de 012225 fetch 1 ,mem_reconn_times +0x41df 012226 nbranch mouse_polling_device ,blank +0x41e0 012227 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41e1 012228 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +0x41e2 012229 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41e3 012230 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +0x41e4 012231 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +0x41e5 012232 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41e6 012233 branch mouse_start_discovery +: 012234 mouse_bb_discon_clear_stack: +0x41e7 012235 setarg 0 +0x41e8 012236 store 8 ,mem_wheel_tb_old_pinlevel +0x41e9 012237 istore 4 ,contw +0x41ea 012238 jam 0 ,mem_mouse_send_blank_timer +0x41eb 012239 jam 0 ,mem_mouse_move_flag +0x41ec 012240 jam app_handshake_null ,mem_app_handshake_flag +0x41ed 012241 jam 0 ,mem_ltk_exists +0x41ee 012242 rtn +: 012244 mouse_event_light_state_pairing: +0x41ef 012245 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +0x41f0 012246 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41f1 012247 branch mouse_start_discovery +: 012248 mouse_event_light_state_hibernate: +0x41f2 012249 fetch 2 ,mem_ui_state_map +0x41f3 012250 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41f4 012251 branch app_bb_hibernate +: 012253 mouse4_0_event_bb_disconn: +0x41f5 012254 call mouse_le_clean_connect_flag +0x41f6 012255 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41f7 012256 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41f8 012257 branch app_bb_hibernate +: 012259 mouse_bb_event_timer: +0x41f9 012260 call mouse_adc_read +0x41fa 012261 call mouse_24g_delay_timer +0x41fb 012262 call mouse_ban_24g_pairing_timer +0x41fc 012263 call mouse_dpi_led_blink_delay_timer +0x41fd 012264 call mouse_statue_up_timer +0x41fe 012266 call mouse_statue_cheak_timer +0x41ff 012267 call mouse_select_device +0x4200 012268 call mouse_bt_discovery_cheak +0x4201 012269 call mouse_low_voltage_led_timer +0x4202 012270 call mouse_sensor_led_contrl_timer +0x4203 012271 call mouse_check_hid_handshake_timer +0x4204 012272 call mouse_check_discovery_timeout_timer +0x4205 012273 call mouse_check_direct_timeout_timer +0x4206 012274 call mouse_check_no_data_timeout_timer +0x4207 012275 call mouse_check_mouse_state_timer +0x4208 012276 branch mouse_le_enable_att_list_timer +: 012280 mouse_sensor_led_contrl_timer: +0x4209 012281 fetch 1 ,mem_mouse_sensor_timer_count +0x420a 012282 rtn blank +0x420b 012283 increase -1 ,pdata +0x420c 012284 store 1 ,mem_mouse_sensor_timer_count +0x420d 012285 nrtn blank +0x420e 012286 branch mouse_sensor_led_contrl +: 012287 mouse_sensor_led_contrl: +0x420f 012288 fetch 1 ,mem_sensor_led_style +0x4210 012289 rtneq ui_led_state_blink_stop +0x4211 012290 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking +: 012291 mouse_sensor_led_blink_state_lighting: +0x4212 012292 call mouse_sensor_led_on +0x4213 012293 jam ui_led_state_blink_darking ,mem_sensor_led_style +0x4214 012294 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4215 012295 rtn +: 012296 mouse_sensor_led_blink_state_darking: +0x4216 012297 call mouse_sensor_led_off +0x4217 012298 jam ui_led_state_blink_lighting ,mem_sensor_led_style +0x4218 012299 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4219 012300 rtn +: 012302 mouse_sensor_led_blink_stop: +: 012303 mouse_sensor_reset: +0x421a 012304 setarg 0x8006 +0x421b 012305 call twspi_write +0x421c 012306 nop 1000 +0x421d 012307 jam 0x00 ,mem_mouse_sensor_timer_count +0x421e 012308 jam ui_led_state_blink_stop ,mem_sensor_led_style +0x421f 012309 branch mouse_init_p32xx_id2_judge +: 012311 mouse_p3212sensor_led_on: +0x4220 012312 setarg 0xa006 +0x4221 012313 call twspi_write +0x4222 012314 setarg 0xa005 +0x4223 012315 branch twspi_write +: 012316 mouse_sensor_led_on_global: +0x4224 012317 jam 0 ,mem_mouse_sensor_timer_count +: 012318 mouse_sensor_led_on: +0x4225 012319 fetch 1 ,mem_config_sensor_type +0x4226 012320 beq p3212 ,mouse_p3212sensor_led_on +0x4227 012321 setarg 0x0106 +0x4228 012322 call twspi_write +0x4229 012323 setarg 0xa105 +0x422a 012324 branch twspi_write +: 012326 mouse_sensor_led_off_global: +0x422b 012327 jam 0 ,mem_mouse_sensor_timer_count +: 012328 mouse_sensor_led_off: +0x422c 012329 setarg 0x0906 +0x422d 012330 branch twspi_write +: 012331 mouse_sensor_start_blink: +0x422e 012332 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x422f 012333 jam ui_led_state_blink_start ,mem_sensor_led_style +0x4230 012334 rtn +: 012336 mouse_check_hid_handshake_timer: +0x4231 012337 arg mem_hid_handshake_timer_count ,regc +0x4232 012338 arg mouse_bt_hid_handshake ,regb +0x4233 012339 branch timer_single_step +: 012341 mouse_check_discovery_timeout_timer: +0x4234 012342 arg mem_mouse_discovery_timer ,regc +0x4235 012343 arg mouse_check_discovery_timeout ,regb +0x4236 012344 branch timer_single_step_2b +: 012346 mouse_check_direct_timeout_timer: +0x4237 012347 arg mem_mouse_direct_timer ,regc +0x4238 012348 arg mouse_check_direct_timeout ,regb +0x4239 012349 branch timer_single_step_2b +: 012351 mouse_check_no_data_timeout_timer: +0x423a 012352 arg mem_mouse_no_data_timer ,regc +0x423b 012353 arg mouse_check_no_data_timeout ,regb +0x423c 012354 branch timer_single_step_2b +: 012356 mouse_check_mouse_state_timer: +0x423d 012357 arg mem_mouse_statue_led_timer ,regc +0x423e 012358 arg mouse_statue_led_off ,regb +0x423f 012359 branch timer_single_step +: 012363 mouse_le_enable_att_list_timer: +0x4240 012364 arg mem_le_start_encrypt_timer ,regc +0x4241 012365 arg mouse_le_enable_att_list ,regb +0x4242 012366 branch timer_single_step +: 012368 mouse_24g_delay_timer: +0x4243 012369 arg mem_24g_enter_lpm_timer ,regc +0x4244 012370 arg mouse_24g_delay ,regb +0x4245 012371 branch timer_single_step +: 012373 mouse_ban_24g_pairing_timer: +0x4246 012374 arg mem_24g_pairing_timer_count ,regc +0x4247 012375 arg mouse_ban_24g_pairing ,regb +0x4248 012376 branch timer_single_step_2b +: 012377 mouse_ban_24g_pairing: +: 012378 mouse_24g_delay: +0x4249 012379 rtn +: 012382 mosue_dpi_led_blink_init: +0x424a 012383 fetch mouse_flag_len ,mem_mouse_flag +0x424b 012384 rtnbit0 mouse_enable_dpi_led_blink +0x424c 012385 jam 10 ,mem_mouse_dpi_led_delay_count +0x424d 012386 fetch 1 ,mem_dpi_led_gpio +0x424e 012387 store 1 ,mem_mouse_struct_led_gpio +0x424f 012388 rtn +: 012391 mouse_dpi_led_blink_delay_timer: +0x4250 012392 arg mem_mouse_dpi_led_delay_count ,regc +0x4251 012393 arg mouse_dpi_led_setting ,regb +0x4252 012394 branch timer_single_step +: 012395 mouse_dpi_led_setting: +0x4253 012396 fetch 1 ,mem_dpi_led_gpio +0x4254 012397 store 1 ,mem_mouse_struct_led_gpio +0x4255 012398 setarg led_dpi_blink +0x4256 012399 store 2 ,mem_mouse_on_time +0x4257 012400 store 2 ,mem_mouse_off_time +0x4258 012401 arg 0 ,rega +0x4259 012402 fetcht 1 ,mem_mouse_dpi +0x425a 012403 increase 1 ,temp +0x425b 012404 storet 1 ,mem_mouse_blink_count +0x425c 012405 jam ui_led_state_blink_start ,mem_mouse_led_type +0x425d 012406 rtn +: 012408 mouse_le_enable_att_list: +0x425e 012409 fetch 1 ,mem_le_connect_statue_flag +0x425f 012410 rtnbit1 ll_pairing_success_flag +0x4260 012411 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x4261 012412 call ui_ipc_send_cmd +0x4262 012413 arg write_req_enable_flag ,queue +0x4263 012414 branch mouse_le_enable_connect_flag +: 012417 mouse_check_discovery_timeout: +0x4264 012418 call mouse_stop_discovery +0x4265 012419 branch app_enter_hibernate +: 012421 mouse_check_direct_timeout: +0x4266 012422 call app_ble_stop_direct_adv +0x4267 012423 fetch 1 ,mem_reconn_times +0x4268 012424 nbranch mouse_polling_device ,blank +0x4269 012425 branch app_enter_hibernate +: 012427 mouse_check_no_data_timeout: +0x426a 012428 bmark1 mark_24g ,check_51cmd_hibernate +0x426b 012429 branch mouse_disconnect +: 012433 mouse_bb_event_discovery_btn: +0x426c 012434 bpatch patch1d_2 ,mem_patch1d +0x426d 012435 jam 0 ,mem_mouse_send_blank_timer +0x426e 012436 call mouse_disconnect +0x426f 012437 call mouse_le_clean_connect_flag +0x4270 012438 branch mouse_start_discovery +: 012442 mouse3_0_check_reconn_target: +0x4271 012443 fetch 6 ,mem_hci_plap +0x4272 012444 branch app_bt_start_discovery_short ,blank +0x4273 012445 call mouse_reconn_setting_led_gpio +0x4274 012446 jam 0x17 ,mem_connection_options +0x4275 012447 fetch 1 ,mem_ssp_enable +0x4276 012448 nbranch app_bt_start_reconnect ,blank +0x4277 012449 jam 0x04 ,mem_connection_options +0x4278 012450 branch app_bt_start_reconnect +: 012452 mouse4_0_check_reconn_target: +0x4279 012453 fetch 2 ,mem_mouse_direct_timeout +0x427a 012454 store 2 ,mem_mouse_direct_timer +0x427b 012455 call mouse_reconn_setting_led_gpio +0x427c 012456 call app_lpm_mult_disable +0x427d 012457 branch check_51cmd_adv +: 012459 mouse_reconn_setting_led_gpio: +0x427e 012460 setarg led_reconnect_blink +0x427f 012461 store 2 ,mem_mouse_on_time +0x4280 012462 store 2 ,mem_mouse_off_time +0x4281 012463 branch mouse_setting_led_gpio_comman +: 012465 mouse_discover_setting_led_gpio: +0x4282 012466 setarg led_discovery_blink +0x4283 012467 store 2 ,mem_mouse_on_time +0x4284 012468 store 2 ,mem_mouse_off_time +: 012469 mouse_setting_led_gpio_comman: +0x4285 012470 fetch 1 ,mem_device_flag +0x4286 012471 beq mode_bt_device1 ,mouse_device_led1 +0x4287 012472 beq mode_bt_device2 ,mouse_device_led2 +0x4288 012473 beq mode_bt_device3 ,mouse_device_led3 +0x4289 012474 rtn +: 012475 mouse_device_led1: +0x428a 012476 fetch 1 ,mem_config_device1_led_gpio +0x428b 012477 branch mouse_led_blink +: 012478 mouse_device_led2: +0x428c 012479 fetch 1 ,mem_config_device2_led_gpio +0x428d 012480 branch mouse_led_blink +: 012481 mouse_device_led3: +0x428e 012482 fetch 1 ,mem_config_device3_led_gpio +: 012483 mouse_led_blink: +0x428f 012484 store 1 ,mem_temp +0x4290 012485 call mouse_devce_led_off +0x4291 012486 fetch 1 ,mem_temp +0x4292 012487 store 1 ,mem_mouse_struct_led_gpio +0x4293 012488 arg 0 ,rega +0x4294 012489 jam ui_led_state_blink_start ,mem_mouse_led_type +0x4295 012490 branch ui_led_blink_start_global +: 012492 mouse_led_off: +0x4296 012493 arg 0 ,rega +0x4297 012494 branch ui_led_off_global +: 012495 mouse_led_on: +0x4298 012496 arg 0 ,rega +0x4299 012497 branch ui_led_on_global +: 012499 mouse4_0_bb_event_discovery_btn: +0x429a 012500 branch mouse_le_clean_connect_flag +: 012502 mouse_bt_hid_handshake: +0x429b 012503 jam app_handshake_done ,mem_app_handshake_flag +0x429c 012504 call app_lpm_mult_enable +0x429d 012505 call app_bt_store_reconn_info +0x429e 012506 setarg 0 +0x429f 012507 store 2 ,mem_discovery_timeout_timer_count +0x42a0 012508 store 1 ,mem_hid_handshake_timer_count +0x42a1 012509 branch app_bt_enter_sniff +: 012511 mouse_check_reconn_target: +0x42a2 012512 call mouse_cheak_select_device_by_switch +0x42a3 012513 fetch 1 ,mem_device_flag +0x42a4 012514 fetcht 1 ,mem_24g_device_number +0x42a5 012515 isub temp ,null +0x42a6 012516 branch mouse_connect_24g_mode ,zero +0x42a7 012517 fetch 1 ,mem_xrecord_mode +0x42a8 012518 beq rec_3_mode ,mouse3_0_check_reconn_target +0x42a9 012519 beq rec_4_mode ,mouse4_0_check_reconn_target +0x42aa 012520 branch mouse_start_discovery +: 012521 mouse_connect_24g_mode: +0x42ab 012522 call mouse_start_24g_mode +0x42ac 012523 rtnmark1 mark_24g +0x42ad 012524 fetch 1 ,mem_reconn_times +0x42ae 012525 nbranch mouse_polling_device ,blank +0x42af 012526 rtn +: 012528 mouse_start_discovery: +0x42b0 012529 bpatch patch1d_3 ,mem_patch1d +0x42b1 012530 fetch 2 ,mem_ui_state_map +0x42b2 012531 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +0x42b3 012532 fetch mouse_flag_len ,mem_mouse_flag +0x42b4 012533 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +0x42b5 012534 random pdata +0x42b6 012535 store 1 ,mem_le_lap + 1 +: 012536 mouse_start_discovery_norandom: +0x42b7 012537 call app_lpm_mult_disable +0x42b8 012538 fetch 2 ,mem_discovery_timeout +0x42b9 012539 store 2 ,mem_mouse_discovery_timer +0x42ba 012540 jam 6 ,mem_connection_options +0x42bb 012541 setarg 0 +0x42bc 012542 store 2 ,mem_mouse_no_data_timer +0x42bd 012543 store 2 ,mem_mouse_direct_timer +0x42be 012544 arg mouse_store_eeprom_flag ,queue +0x42bf 012545 call mouse_enable_function_flag +0x42c0 012546 call mouse_bt_discovery_button_down_disable +0x42c1 012547 fetch 1 ,mem_device_option +0x42c2 012548 isolate1 mode_4_mouse ,pdata +0x42c3 012549 call check_51cmd_adv ,true +0x42c4 012550 fetch 1 ,mem_device_option +0x42c5 012551 isolate1 mode_3_mouse ,pdata +0x42c6 012552 call check_51cmd_start_discovery ,true +0x42c7 012553 fetch mouse_flag_len ,mem_mouse_flag +0x42c8 012554 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink +0x42c9 012555 branch mouse_discover_setting_led_gpio +: 012557 mouse_stop_discovery: +0x42ca 012558 bpatch patch1d_4 ,mem_patch1d +0x42cb 012559 fetch 1 ,mem_device_option +0x42cc 012560 isolate1 mode_4_mouse ,pdata +0x42cd 012561 call mouse_stop_le_adv ,true +0x42ce 012562 fetch 1 ,mem_device_option +0x42cf 012563 isolate1 mode_3_mouse ,pdata +0x42d0 012564 call mouse_stop_bt3_discovery ,true +0x42d1 012565 fetch mouse_flag_len ,mem_mouse_flag +0x42d2 012566 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop +0x42d3 012567 branch mouse_devce_led_off +: 012568 mouse_stop_le_adv: +0x42d4 012569 setarg 0 +0x42d5 012570 store 2 ,mem_mouse_direct_timer +0x42d6 012571 branch check_51cmd_stop_adv +: 012572 mouse_stop_bt3_discovery: +0x42d7 012573 setarg 0 +0x42d8 012574 store 2 ,mem_mouse_discovery_timer +0x42d9 012575 branch check_51cmd_stop_discovery +: 012581 mouse_store_remote_bdaddr: +0x42da 012582 fetch mouse_flag_len ,mem_mouse_flag +0x42db 012583 rtnbit0 mouse_store_eeprom_flag +0x42dc 012584 arg mouse_store_eeprom_flag ,queue +0x42dd 012585 call mouse_disable_function_flag +0x42de 012586 call mouse_check_device_addr +: 012587 mouse_unplug_clean_bdaddr: +0x42df 012588 call mouse_before_store_reconn_info +0x42e0 012589 fetch mouse_flag_len ,mem_mouse_flag +0x42e1 012590 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +0x42e2 012591 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +0x42e3 012592 rtn +: 012593 mouse_store_eeprom_device_info: +0x42e4 012594 arg 88 ,temp +0x42e5 012595 arg mem_device_flag ,rega +0x42e6 012596 arg mouse_info_eeprom_offect ,regb +0x42e7 012597 branch iicd_write_protect_eep_data +: 012599 mouse_check_device_addr: +0x42e8 012600 fetch 1 ,mem_record_bt_mode +0x42e9 012601 beq rec_4_mode ,mouse_check_le_device_addr +0x42ea 012602 beq rec_3_mode ,mouse_check_bt_device_addr +0x42eb 012603 rtn +: 012604 mouse_check_le_device_addr: +0x42ec 012605 store 1 ,mem_device_addr_temp +0x42ed 012606 fetch 6 ,mem_le_plap +0x42ee 012607 branch mouse_check_bt_device_addr_common +: 012608 mouse_check_bt_device_addr: +0x42ef 012609 store 1 ,mem_device_addr_temp +0x42f0 012610 fetch 6 ,mem_plap +: 012611 mouse_check_bt_device_addr_common: +0x42f1 012612 store 6 ,mem_device_addr_temp + 1 +0x42f2 012613 fetch 7 ,mem_device_addr_temp +0x42f3 012614 arg mem_device1_type ,contr +0x42f4 012615 arg 3 ,loopcnt +: 012616 mouse_check_device_addr_end: +0x42f5 012617 ifetcht 7 ,contr +0x42f6 012618 isub temp ,null +0x42f7 012619 branch mouse_clean_addr ,zero +0x42f8 012620 increase 22 ,contr +0x42f9 012621 loop mouse_check_device_addr_end +0x42fa 012622 rtn +: 012623 mouse_before_store_reconn_info: +0x42fb 012624 arg mem_device1_type ,rega +0x42fc 012625 fetch 1 ,mem_device_flag +0x42fd 012626 increase -1 ,pdata +0x42fe 012627 mul32 pdata ,29 ,pdata +0x42ff 012628 iadd rega ,rega +0x4300 012629 fetch 1 ,mem_record_bt_mode +0x4301 012630 istore 1 ,rega +0x4302 012631 beq rec_4_mode ,mouse_store_le_device +0x4303 012632 beq rec_3_mode ,mouse_store_bt_device +0x4304 012633 rtn +: 012635 mouse_store_le_device: +0x4305 012636 fetch 6 ,mem_le_plap +0x4306 012637 istore 6 ,contw +0x4307 012638 arg mem_le_ltk ,contr +0x4308 012639 call memcpy16 +0x4309 012640 fetch 6 ,mem_le_lap +0x430a 012641 istore 6 ,contw +0x430b 012642 rtn +: 012643 mouse_store_bt_device: +0x430c 012644 fetch 6 ,mem_plap +0x430d 012645 istore 6 ,contw +0x430e 012646 arg mem_link_key ,contr +0x430f 012647 branch memcpy16 +: 012649 mouse_clean_addr: +0x4310 012650 increase -6 ,contr +0x4311 012651 copy contr ,contw +0x4312 012652 fetcht 6 ,mem_device_addr_temp + 1 +0x4313 012653 increase 3 ,temp +0x4314 012654 istoret 6 ,contw +0x4315 012655 rtn +: 012659 mouse_eeprom_load_recon_info: +0x4316 012660 arg 88 ,temp +0x4317 012661 arg mem_device_flag ,rega +0x4318 012662 arg mouse_info_eeprom_offect ,regb +0x4319 012663 call iicd_read_eep_data +: 012664 mouse_select_reconn_device: +0x431a 012665 arg mem_device1_type ,rega +0x431b 012666 fetch 1 ,mem_device_flag +0x431c 012667 fetcht 1 ,mem_24g_device_number +0x431d 012668 isub temp ,null +0x431e 012669 rtn zero +0x431f 012670 increase -1 ,pdata +0x4320 012671 mul32 pdata ,29 ,pdata +0x4321 012672 iadd rega ,rega +0x4322 012673 ifetch 1 ,rega +0x4323 012674 store 1 ,mem_xrecord_mode +0x4324 012675 beq rec_3_mode ,mouse_load_bt_device +0x4325 012676 beq rec_4_mode ,mouse_load_le_device +0x4326 012677 rtn +: 012679 mouse_load_bt_device: +0x4327 012680 ifetch 6 ,contr +: 012681 mouse_load_bt_device_end: +0x4328 012682 store 6 ,mem_hci_plap +0x4329 012683 arg mem_link_key ,contw +0x432a 012684 call memcpy16 +0x432b 012685 branch check_link_key_load +: 012687 mouse_load_le_device: +0x432c 012688 ifetch 6 ,contr +: 012689 mouse_load_le_device_end: +0x432d 012690 store 6 ,mem_hci_plap +0x432e 012691 arg mem_le_ltk ,contw +0x432f 012692 call memcpy16 +0x4330 012693 ifetch 6 ,contr +0x4331 012694 store 6 ,mem_le_lap +0x4332 012695 rtn +: 012698 mouse_select_device: +0x4333 012699 fetch 1 ,mem_config_function_enable +0x4334 012700 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button +0x4335 012701 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch +0x4336 012702 branch mouse_select_device_by_combination_key +: 012704 mouse_select_device_by_combination_key: +0x4337 012705 call mouse_check_key_gpio +0x4338 012706 beq mouse_rm_button ,mouse_select_device_commbination_key_down +: 012707 mouse_select_device_commbination_key_up: +0x4339 012708 jam 30 ,mem_combination_select_device_count +0x433a 012709 fetch 1 ,mem_select_device_button_statue +0x433b 012710 rtneq dpi_button_state_up +0x433c 012711 jam dpi_button_state_up ,mem_select_device_button_statue +0x433d 012712 rtn +: 012714 mouse_select_device_commbination_key_down: +0x433e 012715 call mouse_combination_select_device_timer +0x433f 012716 fetch 1 ,mem_select_device_button_statue +0x4340 012717 rtneq dpi_button_state_down +0x4341 012718 jam dpi_button_state_down ,mem_select_device_button_statue +0x4342 012719 branch mouse_select_device_enable +: 012721 mouse_combination_select_device_timer: +0x4343 012722 fetch 1 ,mem_combination_select_device_count +0x4344 012723 rtn blank +0x4345 012724 pincrease -1 +0x4346 012725 store 1 ,mem_combination_select_device_count +0x4347 012726 nrtn blank +0x4348 012727 branch mouse_ready_reconnection_by_button +: 012729 mouse_select_device_by_button: +0x4349 012730 fetch 1 ,mem_config_select_device_button_gpio +0x434a 012731 rtneq gpio_disable +0x434b 012732 fetcht 1 ,mem_config_select_device_button_gpio +0x434c 012733 call gpio_get_bit +0x434d 012734 branch mouse_select_device_button_down ,true +: 012735 mouse_select_device_button_up: +0x434e 012736 fetch 1 ,mem_select_device_button_statue +0x434f 012737 rtneq dpi_button_state_up +0x4350 012738 jam dpi_button_state_up ,mem_select_device_button_statue +0x4351 012739 fetch mouse_flag_len ,mem_mouse_flag +0x4352 012740 rtnbit1 mouse_long_bt_button_flag +0x4353 012741 branch mouse_ready_reconnection_by_button +: 012743 mouse_select_device_button_down: +0x4354 012744 fetch 1 ,mem_select_device_button_statue +0x4355 012745 rtneq dpi_button_state_down +0x4356 012746 jam dpi_button_state_down ,mem_select_device_button_statue +0x4357 012747 arg mouse_long_bt_button_flag ,queue +0x4358 012748 branch mouse_disable_function_flag +: 012752 mouse_select_device_by_switch: +0x4359 012753 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x435a 012754 rtnbit0 enable_select_device_by_switch +0x435b 012755 fetch 1 ,mem_device_flag +0x435c 012756 beq mode_bt_device1 ,mouse_select1_device +0x435d 012757 beq mode_24g_device ,mouse_select2_device +0x435e 012758 rtn +: 012759 mouse_cheak_select_device_by_switch: +0x435f 012760 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x4360 012761 rtnbit0 enable_select_device_by_switch +0x4361 012762 fetcht 1 ,mem_config_select_device_button_gpio +0x4362 012763 call gpio_get_bit +0x4363 012764 branch mouse_cheak_select_24gdevice ,true +: 012765 mouse_select_btdevice: +0x4364 012766 jam mode_bt_device1 ,mem_device_flag +0x4365 012767 rtn +: 012768 mouse_cheak_select_24gdevice: +0x4366 012769 fetch 1 ,mem_24g_device_number +0x4367 012770 store 1 ,mem_device_flag +0x4368 012771 rtn +: 012772 mouse_select1_device: +0x4369 012773 fetcht 1 ,mem_config_select_device_button_gpio +0x436a 012774 nbranch mouse_ready_reconnection_by_button ,true +0x436b 012775 rtn +: 012776 mouse_select2_device: +0x436c 012777 fetcht 1 ,mem_config_select_device_button_gpio +0x436d 012778 call gpio_get_bit +0x436e 012779 branch mouse_select_device_button_down ,true +0x436f 012780 rtn +: 012785 mouse_ready_reconnection_by_button: +0x4370 012786 fetcht 1 ,mem_device_flag +0x4371 012787 increase 1 ,temp +0x4372 012788 fetch 1 ,mem_device_number +0x4373 012789 isub temp ,null +0x4374 012790 ncall mouse_select_device_count_clean ,positive +0x4375 012791 storet 1 ,mem_device_flag +0x4376 012792 jam 0 ,mem_link_key_exists +0x4377 012793 call mouse_store_device_number2eeprom +0x4378 012794 call mouse_select_device_enable +0x4379 012796 branch mouse_set_reconnection +: 012798 mouse_store_device_number2eeprom: +0x437a 012799 arg 1 ,temp +0x437b 012800 arg mem_device_flag ,rega +0x437c 012801 arg 0 ,regb +0x437d 012802 branch iicd_write_eep_data +: 012804 mouse_set_reconnection: +0x437e 012805 call mouse_stop_bluetooth_mode +0x437f 012806 call mouse_select_device_disable +0x4380 012807 branch mouse_soft_reset +: 012808 mouse_stop_bluetooth_mode: +0x4381 012809 fetch 2 ,mem_ui_state_map +0x4382 012810 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x4383 012811 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x4384 012812 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x4385 012813 branch mouse_stop_discovery +: 012815 mouse_disconnect: +0x4386 012816 bpatch patch1d_5 ,mem_patch1d +0x4387 012817 setarg 0 +0x4388 012818 store 2 ,mem_mouse_no_data_timer +0x4389 012819 fetch 2 ,mem_ui_state_map +0x438a 012820 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x438b 012821 fetch 2 ,mem_ui_state_map +0x438c 012822 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x438d 012823 rtn +: 012825 mouse_irtual_cable_unplug: +0x438e 012826 setarg 0x01 +0x438f 012827 store 6 ,mem_plap +0x4390 012828 jam rec_3_mode ,mem_record_bt_mode +0x4391 012829 branch mouse_unplug_clean_bdaddr +: 012832 mouse_cancel_reconnect: +0x4392 012833 call mouse_bt_cannel_reconn_enable +0x4393 012834 branch check_51cmd_bb_reconn_cancel +: 012836 mouse_bt_discovery_by_button: +0x4394 012837 fetch 1 ,mem_config_bt_button_gpio +0x4395 012838 rtneq gpio_disable +0x4396 012839 fetcht 1 ,mem_config_bt_button_gpio +0x4397 012840 call gpio_get_bit +0x4398 012841 branch mouse_bt_discovery_button_down ,true +: 012842 mouse_bt_discovery_button_up: +0x4399 012843 fetch 1 ,mem_ui_button_timeout +0x439a 012844 store 1 ,mem_combination_ui_button_count +0x439b 012845 fetch 1 ,mem_bt_discovey_button_statue +0x439c 012846 rtneq dpi_button_state_up +0x439d 012847 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x439e 012848 branch mouse_bt_discovery_button_down_disable +: 012849 mouse_bt_discovery_button_down: +0x439f 012850 call mouse_bt_discovry_timer +0x43a0 012851 fetch 1 ,mem_bt_discovey_button_statue +0x43a1 012852 rtneq dpi_button_state_down +0x43a2 012853 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43a3 012854 call check_51cmd_bb_reconn_cancel +0x43a4 012855 branch mouse_bt_discovery_button_down_enable +: 012858 mouse_bt_discovery_cheak: +0x43a5 012859 fetch 1 ,mem_config_function_enable +0x43a6 012860 bbit1 enable_bt_button ,mouse_bt_discovery_by_button +: 012861 mouse_bt_discovery_commbination_key: +0x43a7 012862 call mouse_check_key_gpio +0x43a8 012863 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down +: 012864 mouse_bt_discovery_commbination_key_up: +0x43a9 012865 fetch 1 ,mem_ui_button_timeout +0x43aa 012866 store 1 ,mem_combination_ui_button_count +0x43ab 012867 fetch 1 ,mem_bt_discovey_button_statue +0x43ac 012868 rtneq dpi_button_state_up +0x43ad 012869 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x43ae 012870 branch mouse_bt_discovery_button_down_disable +: 012873 mouse_bt_discovery_commbination_key_down: +0x43af 012874 call mouse_bt_discovry_timer +0x43b0 012875 fetch 1 ,mem_bt_discovey_button_statue +0x43b1 012876 rtneq dpi_button_state_down +0x43b2 012877 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43b3 012878 call check_51cmd_bb_reconn_cancel +0x43b4 012879 branch mouse_bt_discovery_button_down_enable +: 012881 mouse_bt_discovry_timer: +0x43b5 012882 arg mem_combination_ui_button_count ,regc +0x43b6 012883 arg mouse_long_button_bt_discovry ,regb +0x43b7 012884 branch timer_single_step +: 012886 mouse_long_button_bt_discovry: +0x43b8 012887 arg mouse_long_bt_button_flag ,queue +0x43b9 012888 call mouse_enable_function_flag +0x43ba 012889 call app_evt_button_long_pressed +0x43bb 012890 branch mouse_bb_event_discovery_btn +: 012893 mouse_cpi_enable: +0x43bc 012894 arg mouse_cpi_flag ,queue +0x43bd 012895 branch mouse_enable_function_flag +: 012896 mouse_cpi_disable: +0x43be 012897 arg mouse_cpi_flag ,queue +0x43bf 012898 branch mouse_disable_function_flag +: 012899 mouse_select_device_enable: +0x43c0 012900 arg mouse_select_device_flag ,queue +0x43c1 012901 branch mouse_enable_function_flag +: 012902 mouse_select_device_disable: +0x43c2 012903 arg mouse_select_device_flag ,queue +0x43c3 012904 branch mouse_disable_function_flag +: 012905 mouse_bt_cannel_reconn_enable: +0x43c4 012906 arg mouse_bt_cannel_reconn_flag ,queue +0x43c5 012907 branch mouse_enable_function_flag +: 012908 mouse_bt_cannel_reconn_disable: +0x43c6 012909 arg mouse_bt_cannel_reconn_flag ,queue +0x43c7 012910 branch mouse_disable_function_flag +: 012911 mouse_bt_discovery_button_down_enable: +0x43c8 012912 arg mouse_bt_discovery_button_down_flag ,queue +0x43c9 012913 branch mouse_enable_function_flag +: 012914 mouse_bt_discovery_button_down_disable: +0x43ca 012915 arg mouse_bt_discovery_button_down_flag ,queue +0x43cb 012916 branch mouse_disable_function_flag +: 012920 mouse_select_device_count_clean: +0x43cc 012921 arg 1 ,temp +0x43cd 012922 rtn +: 012924 mouse_enable_function_flag: +0x43ce 012925 fetch mouse_flag_len ,mem_mouse_flag +0x43cf 012926 qset1 pdata +0x43d0 012927 store mouse_flag_len ,mem_mouse_flag +0x43d1 012928 rtn +: 012930 mouse_disable_function_flag: +0x43d2 012931 fetch mouse_flag_len ,mem_mouse_flag +0x43d3 012932 qset0 pdata +0x43d4 012933 store mouse_flag_len ,mem_mouse_flag +0x43d5 012934 rtn +: 012936 mouse_adc_read: +0x43d6 012937 fetch mouse_flag_len ,mem_mouse_flag +0x43d7 012938 rtnbit0 mouse_enable_adc +0x43d8 012939 fetch 1 ,mem_adc_read_timer +0x43d9 012940 increase 1 ,pdata +0x43da 012941 store 1 ,mem_adc_read_timer +0x43db 012942 sub pdata ,10 ,null +0x43dc 012943 rtn positive +0x43dd 012944 jam 0 ,mem_adc_read_timer +0x43de 012945 call adc_set_mode +0x43df 012946 call vdd_calculate_by_mode +0x43e0 012947 store 2 ,mem_mouse_vdd_now_vol +0x43e1 012948 arg mem_mouse_vdd_calculate_set ,rega +0x43e2 012949 call adc_bat_percent_lowpower_out +0x43e3 012950 fetch 1 ,mem_adc_power_flag +0x43e4 012951 bbit1 1 ,mouse_power_down +0x43e5 012952 bbit0 0 ,mouse_adc_no_low_voltage +0x43e6 012953 branch mouse_adc_low_voltage +: 012954 mouse_adc_low_voltage: +0x43e7 012955 arg mouse_low_voltage_flag ,queue +0x43e8 012956 branch mouse_enable_function_flag +: 012957 mouse_adc_no_low_voltage: +0x43e9 012958 arg mouse_low_voltage_flag ,queue +0x43ea 012959 branch mouse_disable_function_flag +: 012961 mouse_low_voltage_led_timer: +0x43eb 012962 fetch mouse_flag_len ,mem_mouse_flag +0x43ec 012963 rtnbit0 mouse_low_voltage_flag +0x43ed 012964 fetch 1 ,mem_config_low_voltage_alarm_gpio +0x43ee 012965 store 1 ,mem_mouse_struct_led_gpio +0x43ef 012966 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x43f0 012967 pincrease 1 +0x43f1 012968 store 1 ,mem_adc_low_volatage_led_timer_count +0x43f2 012969 sub pdata ,20 ,null +0x43f3 012970 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +0x43f4 012971 beq 2 ,mouse_low_voltage_led_on +0x43f5 012972 beq 4 ,mouse_low_voltage_led_off +0x43f6 012973 beq 6 ,mouse_low_voltage_led_on +0x43f7 012974 beq 8 ,mouse_low_voltage_led_off +0x43f8 012975 rtn +: 012976 mouse_adc_low_volatage_led_timer_count_clean: +0x43f9 012977 jam 1 ,mem_adc_low_volatage_led_timer_count +0x43fa 012978 branch mouse_low_voltage_led_off +: 012979 mouse_low_voltage_led_on: +0x43fb 012980 arg 0 ,rega +0x43fc 012981 jam ui_led_state_lighting ,mem_mouse_led_type +0x43fd 012982 branch ui_led_on_global +: 012983 mouse_low_voltage_led_off: +0x43fe 012984 arg 0 ,rega +0x43ff 012985 jam ui_led_state_lighting ,mem_mouse_led_type +0x4400 012986 branch ui_led_off_global +: 012988 mouse_g24_package_data: +0x4401 012989 call mouse_motion +0x4402 012990 nrtn user +0x4403 012991 arg 7 ,rega +0x4404 012992 arg mem_mouse_key ,regb +0x4405 012993 rtn +: 012995 mouse_g24_enter_lpm: +0x4406 012996 fetch 1 ,mem_mouse_24g_enter_lpm_enable +0x4407 012997 rtn blank +0x4408 012999 fetcht 1 ,mem_dpi_button_gpio +0x4409 013000 call gpio_get_bit +0x440a 013001 call mouse_24g_dpi_delay_init ,true +0x440b 013002 fetch 1 ,mem_24g_enter_lpm_timer +0x440c 013003 nrtn blank +0x440d 013004 call mouse_check_key_gpio +0x440e 013005 nrtn blank +0x440f 013006 branch g24_lpm_long_sleep +: 013008 mouse_24g_dpi_delay_init: +0x4410 013009 fetch 1 ,mem_dpi_button_gpio +0x4411 013010 rtneq ui_button_gpio_disable +0x4412 013011 jam 10 ,mem_24g_enter_lpm_timer +0x4413 013012 rtn +: 013015 mouse_load_flash_info_cheak: +0x4414 013016 call mouse_load_flash_flag +0x4415 013017 fetch 2 ,mem_store_flag +0x4416 013018 arg eeprom_init_flag ,temp +0x4417 013019 isub temp ,null +0x4418 013020 branch mouse_load_flash_device_info ,zero +0x4419 013021 storet 2 ,mem_store_flag +0x441a 013022 call mouse_ble_init_address +0x441b 013023 branch mouse_store_flash_device_info +: 013024 mouse_ble_init_address: +0x441c 013025 fetch 6 ,mem_le_lap +0x441d 013026 store 6 ,mem_device1_locall_addr +0x441e 013027 add pdata ,0x0100 ,pdata +0x441f 013028 store 6 ,mem_device2_locall_addr +0x4420 013029 add pdata ,0x0100 ,pdata +0x4421 013030 store 6 ,mem_device3_locall_addr +0x4422 013031 rtn +: 013034 mouse_load_flash_flag: +0x4423 013035 setarg mem_store_flag +0x4424 013036 arg mem_mouse_information_start ,temp +0x4425 013037 isub temp ,temp +0x4426 013038 fetch 3 ,mem_flash_base +0x4427 013039 iadd temp ,pdata +0x4428 013040 arg 2 ,temp +0x4429 013041 arg mem_store_flag ,rega +0x442a 013042 branch spid_read_flash +: 013045 mouse_load_flash_device_info: +0x442b 013046 setarg mem_mouse_information_end +0x442c 013047 arg mem_mouse_information_start ,temp +0x442d 013048 isub temp ,temp +0x442e 013049 fetch 3 ,mem_flash_base +0x442f 013050 arg mem_mouse_information_start ,rega +0x4430 013051 call spid_read_flash +0x4431 013052 call mouse_select_reconn_device +0x4432 013053 fetch 4 ,mem_mouse_24g_addr +0x4433 013054 call g24_head_ptr2regc +0x4434 013055 branch g24_store_mem_addr +: 013057 mouse_store_flash_device_info: +0x4435 013058 setarg mem_mouse_information_end +0x4436 013059 arg mem_mouse_information_start ,temp +0x4437 013060 isub temp ,temp +0x4438 013061 arg mem_mouse_information_start ,rega +0x4439 013062 fetch 3 ,mem_flash_base +0x443a 013063 branch flash_write +: 013065 mouse_store_eerpom_dpi: +0x443b 013066 arg 1 ,temp +0x443c 013067 arg mem_mouse_dpi ,rega +0x443d 013068 arg mouse_dpi_eeprom_offect ,regb +0x443e 013069 branch iicd_write_protect_eep_data +: 013071 mouse_load_eeprom_dpi: +0x443f 013072 arg 1 ,temp +0x4440 013073 arg mem_mouse_dpi ,rega +0x4441 013074 arg mouse_dpi_eeprom_offect ,regb +0x4442 013075 branch iicd_read_eep_data +: 013077 mouse_statue_cheak_timer: +0x4443 013078 rtnmark1 mark_24g +0x4444 013079 fetch mouse_flag_len ,mem_mouse_flag +0x4445 013080 rtnbit0 mouse_enable_statue_up +0x4446 013081 fetch 1 ,mem_mouse_1step_up_count +0x4447 013082 pincrease 1 +0x4448 013083 and pdata ,0x07 ,pdata +0x4449 013084 store 1 ,mem_mouse_1step_up_count +0x444a 013085 rtnne 0x07 +0x444b 013086 fetch 2 ,mem_ui_state_map +0x444c 013087 bbit1 ui_state_bt_connected ,mouse_check_statue_up +0x444d 013088 bbit1 ui_state_ble_connected ,mouse_check_statue_up +0x444e 013089 rtn +: 013094 mouse_check_statue_up: +0x444f 013095 bpatch patch1d_6 ,mem_patch1d +0x4450 013096 fetch 1 ,mem_mouse_2step_up_count +0x4451 013097 nrtn blank +0x4452 013098 fetch mouse_flag_len ,mem_mouse_flag +0x4453 013099 rtnbit0 mouse_statue_up_flag +0x4454 013100 fetch 1 ,mem_sensor_squal_reg +0x4455 013101 call sensor_read +0x4456 013102 store 1 ,mem_sensor_iqc +0x4457 013103 sub pdata ,0x10 ,null +0x4458 013104 branch mouse_statue_up_timer_init ,positive +0x4459 013105 jam 0 ,mem_mouse_2step_up_count +0x445a 013106 rtn +: 013108 mouse_statue_up_timer_init: +0x445b 013109 jam 30 ,mem_mouse_2step_up_count +0x445c 013110 rtn +: 013111 mouse_statue_up_timer: +0x445d 013112 arg mem_mouse_2step_up_count ,regc +0x445e 013113 arg mouse_statue_up ,regb +0x445f 013114 branch timer_single_step +: 013116 mouse_statue_up: +0x4460 013117 fetch 1 ,mem_sensor_squal_reg +0x4461 013118 call twspi_read +0x4462 013119 sub pdata ,0x10 ,null +0x4463 013120 nrtn positive +0x4464 013121 fetch mouse_flag_len ,mem_mouse_flag +0x4465 013122 rtnbit0 mouse_statue_up_flag +0x4466 013123 arg mouse_statue_up_flag ,queue +0x4467 013124 call mouse_disable_function_flag +0x4468 013125 jam 0 ,mem_lpm_mult +0x4469 013126 jam 30 ,mem_mouse_statue_led_timer +0x446a 013127 call mouse_devce_led_off +0x446b 013128 fetch mouse_flag_len ,mem_mouse_flag +0x446c 013129 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up +: 013130 mouse_two_device_statue_up: +0x446d 013131 fetch 1 ,mem_device_flag +0x446e 013132 beq mode_bt_device1 ,mouse_device1_led_on +0x446f 013133 beq mode_bt_device2 ,mouse_device_blink_led_init +0x4470 013134 rtn +: 013135 mouse_three_device_statue_up: +0x4471 013136 fetch 1 ,mem_device_flag +0x4472 013137 beq mode_bt_device1 ,mouse_device1_led_on +0x4473 013138 beq mode_bt_device2 ,mouse_device2_led_on +0x4474 013139 beq mode_bt_device3 ,mouse_device3_led_on +0x4475 013140 rtn +: 013142 mouse_device_blink_led_init: +0x4476 013143 fetch 1 ,mem_config_device1_led_gpio +0x4477 013144 branch mouse_led_blink +: 013148 mouse_statue_led_off: +0x4478 013149 jam 0x20 ,mem_lpm_mult +0x4479 013150 branch mouse_devce_led_off +: 013154 mouse_devce1_led_off: +0x447a 013155 fetch 1 ,mem_config_device1_led_gpio +0x447b 013156 rtneq gpio_disable +0x447c 013157 store 1 ,mem_mouse_struct_led_gpio +0x447d 013158 branch mouse_led_off +: 013160 mouse_devce2_led_off: +0x447e 013161 fetch 1 ,mem_config_device2_led_gpio +0x447f 013162 rtneq gpio_disable +0x4480 013163 store 1 ,mem_mouse_struct_led_gpio +0x4481 013164 branch mouse_led_off +: 013166 mouse_devce_led_off: +0x4482 013167 call mouse_led_off +0x4483 013168 call mouse_devce1_led_off +0x4484 013169 call mouse_devce2_led_off +: 013170 mouse_devce3_led_off: +0x4485 013171 fetch 1 ,mem_config_device3_led_gpio +0x4486 013172 rtneq gpio_disable +0x4487 013173 store 1 ,mem_mouse_struct_led_gpio +0x4488 013174 branch mouse_led_off +: 013176 mouse_device1_led_on: +0x4489 013177 fetch 1 ,mem_config_device1_led_gpio +0x448a 013178 store 1 ,mem_mouse_struct_led_gpio +0x448b 013179 branch mouse_led_on +: 013180 mouse_device2_led_on: +0x448c 013181 fetch 1 ,mem_config_device2_led_gpio +0x448d 013182 store 1 ,mem_mouse_struct_led_gpio +0x448e 013183 branch mouse_led_on +: 013184 mouse_device3_led_on: +0x448f 013185 fetch 1 ,mem_config_device3_led_gpio +0x4490 013186 store 1 ,mem_mouse_struct_led_gpio +0x4491 013187 branch mouse_led_on +: 013191 mouse_polling_device: +0x4492 013192 bpatch patch1d_7 ,mem_patch1d +0x4493 013193 fetch 1 ,mem_reconn_times +0x4494 013194 increase -1 ,pdata +0x4495 013195 store 1 ,mem_reconn_times +0x4496 013196 fetcht 1 ,mem_device_flag +0x4497 013197 increase 1 ,temp +0x4498 013198 fetch 1 ,mem_device_number +0x4499 013199 isub temp ,null +0x449a 013200 ncall mouse_select_device_count_clean ,positive +0x449b 013201 storet 1 ,mem_device_flag +0x449c 013202 jam 0 ,mem_link_key_exists +0x449d 013203 call mouse_store_device_number2eeprom +0x449e 013204 call mouse_before_store_reconn_info +0x449f 013205 branch mouse_check_reconn_target +: 013207 mouse_power_down: +0x44a0 013208 call mouse_devce_led_off +0x44a1 013209 setarg 0 +0x44a2 013210 store 8 ,mem_gpio_wakeup_low +0x44a3 013211 branch lpm_hibernate +: 013222 remote_car_init: +0x44a4 013223 rtn wake +0x44a5 013224 hfetch 1 ,core_gpio_sel1 +0x44a6 013225 and_into 0xf0 ,pdata +0x44a7 013226 hstore 1 ,core_gpio_sel1 +0x44a8 013227 call keyscan_key_init +0x44a9 013228 setarg remote_car_le_before_hibernate +0x44aa 013229 store 2 ,mem_cb_before_hibernate +0x44ab 013231 setarg remote_car_process_lpm_before +0x44ac 013232 store 2 ,mem_cb_before_lpm +0x44ad 013234 setarg remote_car_scale_process_idle +0x44ae 013235 store 2 ,mem_cb_idle_process +0x44af 013237 setarg remote_car_scale_process_bb_event +0x44b0 013238 store 2 ,mem_cb_bb_event_process +0x44b1 013240 setarg app_get_lpm_wake_lock +0x44b2 013241 store 2 ,mem_cb_check_wakelock +0x44b3 013243 call g24_head_ptr2regc +0x44b4 013244 setarg remote_car_g24_package_data +0x44b5 013245 add regc ,offset_24g_cb_data ,contw +0x44b6 013246 istore 2 ,contw +0x44b7 013248 setarg remote_car_g24_enter_lpm +0x44b8 013249 add regc ,offset_24g_cb_lpm_prepare ,contw +0x44b9 013250 istore 2 ,contw +0x44ba 013252 setarg remote_car_process_lpm_before +0x44bb 013253 add regc ,offset_24g_cb_lpm_before ,contw +0x44bc 013254 istore 2 ,contw +0x44bd 013256 setarg remote_car_event_timer +0x44be 013257 store 2 ,mem_cb_event_timer +0x44bf 013259 setarg remote_car_power_off_signal +0x44c0 013260 store 2 ,mem_remote_car_power_off_cb +0x44c1 013262 setarg remote_car_soft_switch_power_on_signal +0x44c2 013263 store 2 ,mem_remote_car_power_standby_cb +0x44c3 013265 setarg remote_car_send_key_data +0x44c4 013266 store 2 ,mem_cb_remote_car_keyscan +0x44c5 013268 bpatch patch1e_0 ,mem_patch1e +0x44c6 013269 call remote_car_init_environment +0x44c7 013270 call queue_init +0x44c8 013271 jam 2 ,mem_lpm_mult +0x44c9 013272 fetch 1 ,mem_remote_car_config_soft_switch_enable +0x44ca 013273 store 1 ,mem_remote_car_hard_soft_switch +0x44cb 013274 beq hard_switch ,remote_car_hard_switch_power_on_signal +0x44cc 013275 fetch 1 ,mem_remote_car_config_soft_switch_gpio +0x44cd 013276 store 1 ,mem_ui_button_gpio +: 013277 remote_car_soft_switch_power_on_init: +0x44ce 013278 call remote_car_ui_led_init +0x44cf 013279 call ui_button_init +0x44d0 013280 call ui_button_polling +0x44d1 013281 jam power_starting ,mem_remote_car_power_state +0x44d2 013282 fetch 2 ,mem_ui_state_map +0x44d3 013283 rtnbit1 ui_state_btn_down +0x44d4 013284 branch app_enter_hibernate +: 013288 remote_car_hard_switch_power_on_signal: +0x44d5 013289 jam power_standby ,mem_remote_car_power_state +: 013290 remote_car_soft_switch_power_on_signal: +0x44d6 013291 call remote_car_ui_led_init +0x44d7 013293 arg 0 ,rega +0x44d8 013294 call ui_led_blink_start_global +: 013295 remote_car_connect_24g_mode: +0x44d9 013296 branch g24_auto_pair_start +: 013298 remote_car_power_off_signal: +0x44da 013299 branch remote_car_ui_led_init +: 013301 remote_car_ui_led_init: +0x44db 013302 bpatch patch1e_1 ,mem_patch1e +0x44dc 013303 fetch 1 ,mem_remote_car_config_connect_led_gpio +0x44dd 013304 bne invalid_pin_num ,remote_car_pairing_led_gpio_set +: 013305 remote_car_ui_led_init_1: +0x44de 013306 fetcht 1 ,mem_remote_car_led_map +0x44df 013307 branch gpio_config_output +: 013308 remote_car_pairing_led_gpio_set: +0x44e0 013309 store 1 ,mem_remote_car_led_map +0x44e1 013310 branch remote_car_ui_led_init_1 +: 013313 remote_car_init_environment: +0x44e2 013314 call g24_set_device_addr +0x44e3 013315 fetch 2 ,mem_remote_car_no_data_timeout +0x44e4 013316 store 2 ,mem_remote_car_no_data_timer +0x44e5 013317 branch remote_car_get_adc_default_data +: 013319 remote_car_le_before_hibernate: +: 013324 remote_car_in_enter_hibernate: +0x44e6 013325 call gpio_set_before_lpm_common +0x44e7 013326 call remote_car_process_lpm_before +0x44e8 013327 branch app_enter_hibernate +: 013329 remote_car_process_lpm_before: +0x44e9 013330 branch keyscan_process_lpm_before +: 013332 remote_car_g24_enter_lpm: +0x44ea 013333 fetch 1 ,mem_remote_car_24g_enter_lpm_enable +0x44eb 013334 rtn blank +0x44ec 013336 branch g24_lpm_long_sleep +: 013338 remote_car_process_auto_pair_exit: +0x44ed 013339 rtn +: 013341 remote_car_key_scan_process: +0x44ee 013342 branch keyscan_key_process +: 013344 remote_car_scale_process_idle: +0x44ef 013345 call remote_car_rocker_process +0x44f0 013346 call remote_car_24g_status_process +0x44f1 013347 branch remote_car_key_scan_process +: 013349 remote_car_scale_process_bb_event: +0x44f2 013350 copy regc ,pdata +0x44f3 013351 beq bt_evt_button_up ,app_event_button_up +0x44f4 013352 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x44f5 013353 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +0x44f6 013354 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +0x44f7 013355 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +0x44f8 013356 rtn +: 013358 remote_car_24g_attempt_fail: +0x44f9 013359 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fa 013360 rtn +: 013362 remote_car_24g_pairing_complete: +0x44fb 013363 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fc 013364 jam work_paired ,mem_remote_car_24g_auto_work_step +0x44fd 013365 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x44fe 013366 rtn +: 013368 remote_car_24g_attempt_success: +0x44ff 013369 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x4500 013370 jam work_paired ,mem_remote_car_24g_auto_work_step +0x4501 013371 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x4502 013372 rtn +: 013374 remote_car_24g_status_process: +0x4503 013375 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4504 013376 rtneq power_on +0x4505 013377 fetch 1 ,mem_remote_car_24g_status +0x4506 013378 rtneq work_paired +0x4507 013379 jam work_paired ,mem_remote_car_24g_status +: 013380 remote_car_scale_process_paired: +0x4508 013381 arg 0 ,rega +0x4509 013382 branch ui_led_off_global +: 013383 remote_car_scale_process_shutdown: +0x450a 013384 arg 0 ,rega +0x450b 013385 call ui_led_off_global +0x450c 013386 call remote_car_ui_led_init +0x450d 013387 branch app_enter_hibernate +: 013389 remote_car_event_timer: +0x450e 013390 call app_power_timer +0x450f 013391 branch remote_car_no_data_timer +: 013393 remote_car_no_data_timer: +0x4510 013394 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +0x4511 013395 rtn blank +0x4512 013396 arg mem_remote_car_no_data_timer ,regc +0x4513 013397 arg remote_car_scale_process_shutdown ,regb +0x4514 013398 branch timer_single_step_2b +: 013401 remote_car_get_adc_default_data: +0x4515 013402 call remote_car_rocker_get_x +0x4516 013403 storet 2 ,mem_current_vdd_value_default_mid_x +0x4517 013404 call remote_car_rocker_get_y +0x4518 013405 storet 2 ,mem_current_vdd_value_default_mid_y +0x4519 013406 rtn +: 013407 remote_car_rocker_data_get: +: 013408 remote_car_rocker_get_x: +0x451a 013409 fetch 2 ,mem_current_vdd_value_default_mid_x +0x451b 013410 store 2 ,mem_current_vdd_value_default_mid_temp +0x451c 013411 call remote_car_get_adc_from_gpio6 +0x451d 013412 call remote_car_rocker_get_value +0x451e 013413 store 1 ,mem_rocker_status +: 013414 remote_car_rocker_get_y: +0x451f 013415 fetch 2 ,mem_current_vdd_value_default_mid_y +0x4520 013416 store 2 ,mem_current_vdd_value_default_mid_temp +0x4521 013417 call remote_car_get_adc_from_gpio7 +0x4522 013418 call remote_car_rocker_get_value +0x4523 013419 store 1 ,mem_rocker_status + 1 +0x4524 013420 rtn +: 013421 remote_car_rocker_get_value: +0x4525 013422 fetch 2 ,mem_current_vdd_default_range +0x4526 013423 copy pdata ,rega +0x4527 013424 fetch 2 ,mem_current_vdd_value_default_mid_temp +0x4528 013425 call remote_car_rocker_mid_value_adjust +0x4529 013426 fetch 1 ,mem_rocker_work_status +0x452a 013427 nbranch remote_car_rocker_translate_key ,blank +0x452b 013428 nrtn positive +0x452c 013429 fetcht 2 ,mem_current_vdd_value_default_mid_temp +0x452d 013430 rtn +: 013431 remote_car_rocker_mid_value_adjust: +0x452e 013432 isub temp ,pdata +0x452f 013433 branch remote_car_rocker_mid_adjust_positive ,positive +0x4530 013434 sub pdata ,0 ,pdata +0x4531 013435 jam 1 ,mem_rocker_negative_flag +0x4532 013436 isub rega ,null +0x4533 013437 rtn +: 013438 remote_car_rocker_mid_adjust_positive: +0x4534 013439 jam 0 ,mem_rocker_negative_flag +0x4535 013440 isub rega ,null +0x4536 013441 rtn +: 013442 remote_car_rocker_translate_key: +0x4537 013443 nbranch remote_car_rocker_middle_key ,positive +0x4538 013444 fetch 1 ,mem_rocker_negative_flag +0x4539 013445 nbranch remote_car_rocker_negative_key ,blank +: 013446 remote_car_rocker_positive_key: +0x453a 013447 setarg rocker_positive_key +0x453b 013448 rtn +: 013449 remote_car_rocker_negative_key: +0x453c 013450 setarg rocker_negative_key +0x453d 013451 rtn +: 013452 remote_car_rocker_middle_key: +0x453e 013453 setarg rocker_middle_key +0x453f 013454 rtn +: 013455 remote_car_get_adc_from_gpio6: +0x4540 013456 jam 0x33 ,mem_adc_channel +0x4541 013457 branch adc_set_mode +: 013458 remote_car_get_adc_from_gpio7: +0x4542 013459 jam 0x34 ,mem_adc_channel +0x4543 013460 branch adc_set_mode +: 013463 remote_car_rocker_process: +0x4544 013464 fetch 1 ,mem_remote_car_config_check_way +0x4545 013465 rtnne car_remote_check_rocker +: 013466 remote_car_read_rocker_check_start: +0x4546 013467 bpatch patch1e_2 ,mem_patch1e +0x4547 013468 jam 1 ,mem_rocker_work_status +0x4548 013469 call remote_car_rocker_data_get +0x4549 013470 fetch 2 ,mem_rocker_status +0x454a 013471 fetcht 2 ,mem_rocker_last_status +0x454b 013472 isub temp ,null +0x454c 013473 rtn zero +0x454d 013474 store 2 ,mem_rocker_last_status +0x454e 013475 call remote_car_rocker_x_to_key +0x454f 013476 branch remote_car_rocker_y_to_key +: 013478 remote_car_rocker_x_to_key: +0x4550 013479 fetch 1 ,mem_rocker_x_status +0x4551 013480 branch rocker_to_queue_set_0 ,blank +0x4552 013481 increase -1 ,pdata +0x4553 013482 branch remote_car_rocker_to_key +: 013483 remote_car_rocker_y_to_key: +0x4554 013484 fetch 1 ,mem_rocker_y_status +0x4555 013485 branch rocker_to_queue_set_2 ,blank +0x4556 013486 increase 1 ,pdata +: 013487 remote_car_rocker_to_key: +0x4557 013488 copy pdata ,queue +0x4558 013489 arg 1 ,rega +0x4559 013490 branch remote_car_send_key_data +: 013492 rocker_to_queue_set_0: +0x455a 013493 arg 0 ,queue +0x455b 013494 arg 0 ,rega +0x455c 013495 branch remote_car_send_key_data +: 013496 rocker_to_queue_set_2: +0x455d 013497 arg 2 ,queue +0x455e 013498 arg 0 ,rega +0x455f 013499 branch remote_car_send_key_data +: 013501 remote_car_send_key_data: +0x4560 013502 copy rega ,pdata +0x4561 013503 store 1 ,mem_remote_key_status +0x4562 013504 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4563 013505 beq power_on ,g24_auto_pair_start +0x4564 013506 fetch 2 ,mem_remote_car_no_data_timeout +0x4565 013507 store 2 ,mem_remote_car_no_data_timer +0x4566 013508 fetch 1 ,mem_remote_key_status +0x4567 013509 branch remote_car_key_is_release ,blank +: 013510 remote_car_key_is_press: +0x4568 013511 bpatch patch1e_3 ,mem_patch1e +0x4569 013512 arg 0 ,rega +0x456a 013513 call ui_led_on_global +: 013514 remote_car_attack_key_press: +0x456b 013515 copy queue ,pdata +0x456c 013516 beq 4 ,remote_car_send_attack_key4_press +0x456d 013517 beq 5 ,remote_car_send_attack_key5_press +0x456e 013518 beq 6 ,remote_car_send_fire_key6_press +: 013521 remote_car_motor_key_press: +0x456f 013522 call remote_car_device_layout_select +0x4570 013523 beq control_f_b_ten ,remote_car_single_motor_key_is_press +0x4571 013524 beq control_l_r_ten ,remote_car_double_motor_key_press +0x4572 013525 beq control_l_r_lr ,remote_car_single_motor_key_is_press +0x4573 013526 rtn +: 013528 remote_car_single_motor_key_is_press: +0x4574 013529 copy queue ,pdata +0x4575 013530 beq 0 ,remote_car_send_motor1_key0_press +0x4576 013531 beq 1 ,remote_car_send_motor1_key1_press +0x4577 013532 beq 2 ,remote_car_send_motor2_key2_press +0x4578 013533 beq 3 ,remote_car_send_motor2_key3_press +0x4579 013534 rtn +: 013536 remote_car_double_motor_key_press: +0x457a 013537 copy queue ,pdata +0x457b 013538 beq 0 ,remote_car_send_double_motor_key0_press +0x457c 013539 beq 1 ,remote_car_send_double_motor_key1_press +0x457d 013540 beq 2 ,remote_car_send_double_motor_key2_press +0x457e 013541 beq 3 ,remote_car_send_double_motor_key3_press +0x457f 013542 rtn +: 013544 remote_car_key_is_release: +0x4580 013545 bpatch patch1e_4 ,mem_patch1e +0x4581 013546 arg 0 ,rega +0x4582 013547 call ui_led_off_global +: 013548 remote_car_attack_key_release: +0x4583 013549 copy queue ,pdata +0x4584 013550 beq 4 ,remote_car_send_attack_key4_rel +0x4585 013551 beq 5 ,remote_car_send_attack_key5_rel +: 013554 remote_car_motor_key_release: +0x4586 013555 call remote_car_device_layout_select +0x4587 013556 beq control_f_b_ten ,remote_car_single_motor_key_rel +0x4588 013557 beq control_l_r_ten ,remote_car_double_motor_key_rel +0x4589 013558 beq control_l_r_lr ,remote_car_single_motor_key_rel +0x458a 013559 rtn +: 013561 remote_car_device_layout_select: +0x458b 013562 fetch 1 ,mem_remote_car_config_layout +0x458c 013563 fetcht 1 ,mem_remote_car_config_key_map +0x458d 013564 ior temp ,pdata +0x458e 013565 rtn +: 013568 remote_car_send_motor1_key0_press: +0x458f 013569 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4590 013570 branch remote_car_send_key +: 013571 remote_car_send_motor1_key1_press: +0x4591 013572 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x4592 013573 branch remote_car_send_key +: 013574 remote_car_send_motor2_key2_press: +0x4593 013575 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4594 013576 branch remote_car_send_key +: 013577 remote_car_send_motor2_key3_press: +0x4595 013578 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x4596 013579 branch remote_car_send_key +: 013582 remote_car_send_double_motor_key0_press: +0x4597 013583 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4598 013584 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4599 013585 branch remote_car_send_key +: 013586 remote_car_send_double_motor_key1_press: +0x459a 013587 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459b 013588 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x459c 013589 branch remote_car_send_key +: 013590 remote_car_send_double_motor_key2_press: +0x459d 013591 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459e 013592 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x459f 013593 branch remote_car_send_key +: 013594 remote_car_send_double_motor_key3_press: +0x45a0 013595 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x45a1 013596 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x45a2 013597 branch remote_car_send_key +: 013600 remote_car_send_attack_key4_press: +0x45a3 013601 jam motor_positive ,mem_remote_car_24g_motor3_payload +0x45a4 013602 branch remote_car_send_key +: 013603 remote_car_send_attack_key5_press: +0x45a5 013604 jam motor_negative ,mem_remote_car_24g_motor3_payload +0x45a6 013605 branch remote_car_send_key +: 013607 remote_car_send_fire_key6_press: +0x45a7 013608 jam 0x01 ,mem_remote_car_24g_fire_send_payload +0x45a8 013609 branch remote_car_send_attack +: 013611 remote_car_single_motor_key_rel: +0x45a9 013612 copy queue ,pdata +0x45aa 013613 beq 0 ,remote_car_send_motor1_key0_rel +0x45ab 013614 beq 1 ,remote_car_send_motor1_key1_rel +0x45ac 013615 beq 2 ,remote_car_send_motor2_key2_rel +0x45ad 013616 beq 3 ,remote_car_send_motor2_key3_rel +0x45ae 013617 rtn +: 013619 remote_car_double_motor_key_rel: +0x45af 013620 copy queue ,pdata +0x45b0 013621 beq 0 ,remote_car_send_double_motor_key0_rel +0x45b1 013622 beq 1 ,remote_car_send_double_motor_key1_rel +0x45b2 013623 beq 2 ,remote_car_send_double_motor_key2_rel +0x45b3 013624 beq 3 ,remote_car_send_double_motor_key3_rel +0x45b4 013625 rtn +: 013627 remote_car_send_motor1_key0_rel: +: 013628 remote_car_send_motor1_key1_rel: +0x45b5 013629 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45b6 013630 branch remote_car_send_key +: 013631 remote_car_send_motor2_key2_rel: +: 013632 remote_car_send_motor2_key3_rel: +0x45b7 013633 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45b8 013634 branch remote_car_send_key +: 013636 remote_car_send_double_motor_key0_rel: +: 013637 remote_car_send_double_motor_key1_rel: +: 013638 remote_car_send_double_motor_key2_rel: +: 013639 remote_car_send_double_motor_key3_rel: +0x45b9 013640 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45ba 013641 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45bb 013642 branch remote_car_send_key +: 013644 remote_car_send_attack_key4_rel: +: 013645 remote_car_send_attack_key5_rel: +0x45bc 013646 jam motor_stop ,mem_remote_car_24g_motor3_payload +0x45bd 013647 branch remote_car_send_key +: 013649 remote_car_send_key: +0x45be 013650 arg mem_remote_car_24g_motor_packet ,rega +0x45bf 013651 branch queue_push +: 013652 remote_car_send_attack: +0x45c0 013653 arg mem_remote_car_24g_fire_packet ,rega +0x45c1 013654 branch queue_push +: 013656 remote_car_g24_package_data: +0x45c2 013657 fetch 1 ,mem_remote_car_24g_pair_success_flag +0x45c3 013658 beq work_paired ,remote_car_g24_send_empty +0x45c4 013659 arg mem_remote_car_24g_tx_temp ,rega +0x45c5 013660 call queue_pop +0x45c6 013661 nbranch remote_car_moto_data ,user +: 013662 remote_car_g24_package_data_continue: +0x45c7 013663 arg mem_remote_car_24g_tx_temp ,contr +0x45c8 013664 ifetch 1 ,contr +0x45c9 013665 copy pdata ,rega +0x45ca 013666 arg mem_remote_car_24g_tx_temp + 1 ,regb +0x45cb 013669 rtn +: 013671 remote_car_g24_send_empty: +0x45cc 013672 jam 0 ,mem_remote_car_24g_pair_success_flag +0x45cd 013673 enable user +0x45ce 013674 arg 1 ,rega +0x45cf 013675 arg mem_remote_car_empty_packet ,regb +0x45d0 013676 rtn +: 013678 remote_car_moto_data: +0x45d1 013679 fetch 1 ,mem_remote_car_24g_tx_temp + 3 +0x45d2 013680 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +0x45d3 013681 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +0x45d4 013682 rtn +: 013683 remote_car_moto_data_next: +0x45d5 013684 fetch 1 ,mem_remote_car_24g_tx_temp + 6 +0x45d6 013685 nbranch remote_car_moto_data_enable_user ,blank +0x45d7 013686 fetch 1 ,mem_remote_car_24g_tx_temp + 8 +0x45d8 013687 nbranch remote_car_moto_data_enable_user ,blank +0x45d9 013688 fetch 1 ,mem_remote_car_24g_tx_temp + 10 +0x45da 013689 nbranch remote_car_moto_data_enable_user ,blank +0x45db 013690 rtn +: 013691 remote_car_moto_data_enable_user: +0x45dc 013692 enable user +0x45dd 013693 branch remote_car_g24_package_data_continue +: 013701 shutter_init: +0x45de 013702 rtn wake +0x45df 013703 hfetch 1 ,core_gpio_sel1 +0x45e0 013704 and_into 0xfc ,pdata +0x45e1 013705 hstore 1 ,core_gpio_sel1 +0x45e2 013706 setarg shutter_le_before_hibernate +0x45e3 013707 store 2 ,mem_cb_before_hibernate +0x45e4 013709 setarg shutter_process_lpm_before +0x45e5 013710 store 2 ,mem_cb_before_lpm +0x45e6 013712 setarg app_enter_hibernate +0x45e7 013713 store 2 ,mem_cb_discovry_timeout +0x45e8 013715 setarg shutter_process_idle +0x45e9 013716 store 2 ,mem_cb_idle_process +0x45ea 013718 setarg shutter_process_bb_event +0x45eb 013719 store 2 ,mem_cb_bb_event_process +0x45ec 013721 setarg shutter_le_scale_lpm_lock +0x45ed 013722 store 2 ,mem_cb_check_wakelock +0x45ee 013724 setarg ble_shutter_receive_data +0x45ef 013725 store 2 ,mem_cb_att_write +0x45f0 013727 setarg shutter_le_bb_event_timer +0x45f1 013728 store 2 ,mem_cb_event_timer +0x45f2 013730 setarg shutter_key_change +0x45f3 013731 store 2 ,mem_cb_shutter_keycan +0x45f4 013733 setarg shutter_soft_swtich_power_on +0x45f5 013734 store 2 ,mem_shutter_soft_switch_poweron_callback_function +0x45f6 013735 setarg shutter_soft_swtich_power_off +0x45f7 013736 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +0x45f8 013738 call le_modified_name +0x45f9 013739 call shutter_load_bluetooth_config_by_user_config +0x45fa 013740 call shutter_init_bluetooth_config +0x45fb 013741 call shutter_init_param +0x45fc 013742 call keyscan_key_init +0x45fd 013743 call shutter_load_buffer_config_form_datarom +0x45fe 013744 call queue_init +0x45ff 013745 call ui_led_init_global +0x4600 013746 call shutter_load_bluetooth_config +0x4601 013747 call shutter_load_bluetooth_config_by_eeprom +0x4602 013749 bpatch patch1e_5 ,mem_patch1e +0x4603 013750 call classic_shutter_load_reconn_info +0x4604 013751 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4605 013752 beq hard_switch ,shutter_hart_swtich_power_on +0x4606 013753 fetch 1 ,mem_shutter_soft_switch_button_gpio +0x4607 013754 store 1 ,mem_ui_button_gpio +0x4608 013755 branch ui_soft_swtich_init +: 013758 shutter_hart_swtich_power_on: +0x4609 013759 jam ui_button_gpio_disable ,mem_ui_button_gpio +0x460a 013760 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +0x460b 013761 branch shutter_start_reconnect +: 013765 shutter_le_scale_lpm_lock: +0x460c 013766 fetch 1 ,mem_shutter_soft_switch_power_state +0x460d 013767 beq ss_state_power_off ,app_get_lpm_wake_lock +0x460e 013768 call l2cap_malloc_get_full_map +0x460f 013769 fetch 1 ,mem_used_map +0x4610 013770 nbranch app_get_lpm_wake_lock ,blank +0x4611 013771 branch app_put_lpm_wake_lock +: 013775 shutter_process_bb_event: +0x4612 013776 copy regc ,pdata +0x4613 013778 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect +0x4614 013779 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect +0x4615 013780 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed +0x4616 013781 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete +0x4617 013782 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect +0x4618 013783 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect +0x4619 013784 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake +0x461a 013785 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout +0x461b 013786 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug +0x461c 013787 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff +0x461d 013788 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information +0x461e 013790 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +0x461f 013791 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +0x4620 013792 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +0x4621 013793 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +0x4622 013795 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +0x4623 013796 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +0x4624 013797 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +0x4625 013798 rtn +: 013803 classic_shutter_process_baseband_connect: +0x4626 013804 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4627 013805 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4628 013806 rtn +: 013809 classic_shutter_process_baseband_disconnect: +0x4629 013810 call classic_shutter_disconnect_clear_flag +0x462a 013811 branch classic_shutter_process_reconnect_failed +: 013813 classic_shutter_disconnect_clear_flag: +0x462b 013814 jam app_handshake_null ,mem_app_handshake_flag +0x462c 013815 jam 0 ,mem_hid_handshake_timer_count +0x462d 013816 jam 0 ,mem_unsniff2sniff_timer_count +0x462e 013817 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x462f 013818 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4630 013819 branch queue_init +: 013822 classic_shutter_process_reconnect_failed: +0x4631 013823 call app_disconn_reason_clear +0x4632 013824 branch shutter_start_bluetooth_discovery +: 013827 classic_shutter_process_setup_complete: +0x4633 013828 call shutter_stop_bluetooth_discovery +0x4634 013829 branch app_led_stop_blink +: 013832 classic_shutter_process_hid_connect: +0x4635 013833 setarg hid_handshake_timeout +0x4636 013834 store 1 ,mem_hid_handshake_timer_count +0x4637 013835 rtn +: 013838 classic_shutter_process_hid_disconnect: +0x4638 013839 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4639 013840 setarg flag_shutter_hid_disconn_timeout +0x463a 013841 store 1 ,mem_classic_shutter_hid_disconn_count +0x463b 013842 rtn +: 013845 classic_shutter_process_hid_handshake: +0x463c 013846 fetch 1 ,mem_app_handshake_flag +0x463d 013847 rtneq app_handshake_done +0x463e 013848 jam app_handshake_done ,mem_app_handshake_flag +0x463f 013849 call app_lpm_mult_enable +0x4640 013850 call app_store_reconn_info +0x4641 013851 call shutter_stop_bluetooth_discovery +0x4642 013852 call app_led_off +0x4643 013853 branch app_bt_enter_sniff +: 013856 classic_shutter_process_reconnect_page_timeout: +0x4644 013857 branch classic_shutter_process_reconnect_failed +: 013860 classic_shutter_process_virtual_cable_unplug: +0x4645 013861 setarg flag_shutter_cable_unplug_timeout +0x4646 013862 store 1 ,mem_classic_shutter_cable_unplug_conut +0x4647 013863 rtn +: 013866 classic_shutter_process_remote_unsniff: +0x4648 013867 branch app_start_auto_sniff +: 013871 classic_shutter_process_store_reconnect_information: +0x4649 013872 arg nvram_eeprom_offset ,regb +0x464a 013873 fetch 1 ,mem_nv_data_number +0x464b 013874 mul32 pdata ,34 ,temp +0x464c 013875 fetch 2 ,mem_nv_data_ptr +0x464d 013876 copy pdata ,rega +0x464e 013877 branch iicd_write_eep_data +: 013879 classic_shutter_load_reconn_info: +0x464f 013880 arg nvram_eeprom_offset ,regb +0x4650 013881 fetch 1 ,mem_shutter_bluetooth_type +0x4651 013882 rtnbit0 classic_shutter +0x4652 013883 fetch 1 ,mem_nv_data_number +0x4653 013884 rtn blank +0x4654 013885 mul32 pdata ,34 ,temp +0x4655 013886 fetch 2 ,mem_nv_data_ptr +0x4656 013887 copy pdata ,rega +0x4657 013888 branch iicd_read_eep_data +: 013892 ble_shutter_process_baseband_connect: +0x4658 013893 call shutter_stop_bluetooth_discovery +0x4659 013894 setarg 0 +0x465a 013895 store 2 ,mem_ble_shutter_reconn_timer +0x465b 013896 branch app_led_off +: 013899 ble_shutter_process_baseband_disconnect: +0x465c 013900 call queue_init +0x465d 013901 jam 0 ,mem_ble_shutter_enable_notify +0x465e 013902 branch shutter_start_reconnect +: 013905 ble_shutter_process_reconnect_complete: +0x465f 013906 call queue_init +0x4660 013907 jam 1 ,mem_ble_shutter_enable_notify +0x4661 013908 fetch 8 ,mem_ble_shutter_interval_min +0x4662 013909 store 8 ,mem_le_interval_min +0x4663 013910 call app_lpm_mult_enable +0x4664 013911 branch le_l2cap_tx_update_req +: 013914 ble_shutter_process_parse_connect_parameter_update_response: +0x4665 013915 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x4666 013916 rtneq ble_signaling_connect_parameter_update_accepted +0x4667 013917 fetch 8 ,mem_ble_shutter_interval_min_new +0x4668 013918 rtn blank +0x4669 013919 store 8 ,mem_le_interval_min +0x466a 013920 branch le_l2cap_tx_update_req +: 013924 shutter_process_soft_swtich_button_long_press: +0x466b 013925 branch ui_soft_switch_botton_long_press +: 013927 shutter_process_soft_swtich_button_down: +0x466c 013928 fetch 1 ,mem_shutter_hard_soft_switch_case +0x466d 013929 rtneq hard_switch +0x466e 013930 fetch 1 ,mem_shutter_soft_switch_power_state +0x466f 013931 rtnne ss_state_power_on +0x4670 013932 call shutter_store_currenct_led_state +0x4671 013933 branch app_led_on +: 013935 shutter_store_currenct_led_state: +0x4672 013936 jam 1 ,mem_shutter_soft_swtich_botton_down +0x4673 013937 arg 11 ,loopcnt +0x4674 013938 arg mem_shutter_soft_swtich_led_struct_temp ,contw +0x4675 013939 arg mem_shutter_led_struct_app_led ,contr +0x4676 013940 branch memcpy +: 013942 shutter_process_soft_swtich_button_up: +0x4677 013943 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4678 013944 rtneq hard_switch +0x4679 013945 fetch 1 ,mem_shutter_soft_switch_power_state +0x467a 013946 beq ss_state_power_on ,shutter_load_currenct_led_state +0x467b 013947 branch ui_soft_switch_botton_up +: 013949 shutter_load_currenct_led_state: +0x467c 013950 fetch 1 ,mem_shutter_soft_swtich_botton_down +0x467d 013951 rtnne 1 +0x467e 013952 jam 0 ,mem_shutter_soft_swtich_botton_down +0x467f 013953 fetch 2 ,mem_ui_state_map +0x4680 013954 bbit1 ui_state_bt_connected ,app_led_off +0x4681 013955 bbit1 ui_state_ble_connected ,app_led_off +0x4682 013956 arg 11 ,loopcnt +0x4683 013957 arg mem_shutter_soft_swtich_led_struct_temp ,contr +0x4684 013958 arg mem_shutter_led_struct_app_led ,contw +0x4685 013959 branch memcpy +: 013964 shutter_le_bb_event_timer: +0x4686 013966 call shutter_check_sleep_timer +0x4687 013969 call shutter_check_power_off_timer +0x4688 013972 call classic_shutter_check_unplug_timer +0x4689 013973 call classic_shutter_hid_handshake_timer +0x468a 013974 call classic_shutter_hid_disconn_timer +0x468b 013977 branch ble_shutter_reconn_timer +: 013981 shutter_check_sleep_timer: +0x468c 013982 arg mem_shutter_sleep_timer ,regc +0x468d 013983 arg shutter_sleep_timeout ,regb +0x468e 013984 branch timer_single_step_2b +: 013985 shutter_sleep_timeout: +0x468f 013986 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +0x4690 013987 call app_led_off +0x4691 013988 call shutter_disconnect_current_connection +0x4692 013989 branch shutter_wait_power_off +: 013992 shutter_check_power_off_timer: +0x4693 013993 arg mem_shutter_power_off_timer ,regc +0x4694 013994 arg shutter_check_power_off_timeout ,regb +0x4695 013995 branch timer_single_step +: 013997 shutter_check_power_off_timeout: +0x4696 013998 fetch 2 ,mem_ui_state_map +0x4697 013999 bbit1 ui_state_ble_connected ,shutter_wait_power_off +0x4698 014000 bbit1 ui_state_bt_connected ,shutter_wait_power_off +0x4699 014001 fetch 1 ,mem_shutter_led_struct_app_led_type +0x469a 014002 beq ui_led_state_blink_start ,shutter_wait_power_off +0x469b 014003 beq ui_led_state_blink_lighting ,shutter_wait_power_off +0x469c 014004 beq ui_led_state_blink_darking ,shutter_wait_power_off +0x469d 014005 branch app_enter_hibernate +: 014009 classic_shutter_check_unplug_timer: +0x469e 014010 arg mem_classic_shutter_cable_unplug_conut ,regc +0x469f 014011 arg classic_shutter_unplug_timeout ,regb +0x46a0 014012 branch timer_single_step +: 014014 classic_shutter_unplug_timeout: +0x46a1 014015 fetch 1 ,mem_control_tasks +0x46a2 014016 set1 l2cap_disconnect_interrupt ,pdata +0x46a3 014017 set1 l2cap_disconnect_control ,pdata +0x46a4 014018 store 1 ,mem_control_tasks +0x46a5 014019 rtn +: 014021 classic_shutter_hid_handshake_timer: +0x46a6 014022 arg mem_hid_handshake_timer_count ,regc +0x46a7 014023 arg classic_shutter_process_hid_handshake ,regb +0x46a8 014024 branch timer_single_step +: 014026 classic_shutter_hid_disconn_timer: +0x46a9 014027 arg mem_classic_shutter_hid_disconn_count ,regc +0x46aa 014028 arg app_bt_disconnect ,regb +0x46ab 014029 branch timer_single_step +: 014034 ble_shutter_reconn_timer: +0x46ac 014035 fetch 1 ,mem_shutter_soft_switch_power_state +0x46ad 014036 rtnne ss_state_power_on +0x46ae 014037 arg mem_ble_shutter_reconn_timer ,regc +0x46af 014038 arg shutter_start_bluetooth_discovery ,regb +0x46b0 014039 branch timer_single_step_2b +: 014042 shutter_process_idle: +0x46b1 014043 call shutter_send_data_to_master +0x46b2 014044 branch keyscan_key_process +: 014047 shutter_process_lpm_before: +0x46b3 014048 branch keyscan_process_lpm_before +: 014050 shutter_le_before_hibernate: +0x46b4 014051 call gpio_set_before_lpm_common +0x46b5 014052 branch shutter_process_lpm_before +: 014058 shutter_stop_bluetooth_discovery: +0x46b6 014059 fetch 1 ,mem_shutter_bluetooth_type +0x46b7 014060 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery +0x46b8 014061 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +0x46b9 014062 rtn +: 014064 ble_shutter_stop_bluetooth_discovery: +0x46ba 014065 fetch 2 ,mem_ble_shutter_connect_timeout +0x46bb 014066 store 2 ,mem_shutter_sleep_timeout +0x46bc 014067 store 2 ,mem_shutter_sleep_timer +0x46bd 014068 branch app_ble_stop_adv +: 014070 classic_shutter_stop_bluetooth_discovery: +0x46be 014071 fetch 2 ,mem_classic_shutter_connect_timeout +0x46bf 014072 store 2 ,mem_shutter_sleep_timeout +0x46c0 014073 store 2 ,mem_shutter_sleep_timer +0x46c1 014074 branch app_bt_stop_discovery +: 014076 shutter_start_bluetooth_discovery: +0x46c2 014077 fetch 1 ,mem_shutter_soft_switch_power_state +0x46c3 014078 rtnne ss_state_power_on +0x46c4 014079 fetch 1 ,mem_shutter_bluetooth_type +0x46c5 014080 bbit1 classic_shutter ,classic_shutter_start_discovery +0x46c6 014081 bbit1 ble_shutter ,ble_shutter_start_discovery +0x46c7 014082 rtn +: 014084 classic_shutter_start_discovery: +0x46c8 014085 fetch 2 ,mem_classic_shutter_discovery_timeout , +0x46c9 014086 store 2 ,mem_shutter_sleep_timeout +0x46ca 014087 store 2 ,mem_shutter_sleep_timer +0x46cb 014088 branch app_bt_start_discovery_short +: 014090 ble_shutter_start_discovery: +0x46cc 014091 fetch 2 ,mem_ui_state_map +0x46cd 014092 rtnbit1 ui_state_ble_connected +0x46ce 014093 fetch 2 ,mem_ble_shutter_discovery_timeout +0x46cf 014094 store 2 ,mem_shutter_sleep_timeout +0x46d0 014095 store 2 ,mem_shutter_sleep_timer +0x46d1 014096 fetch 2 ,mem_ble_shutter_discovery_adv_interval +0x46d2 014097 call shutter_ble_adv_interval_set +0x46d3 014098 call app_led_start_blink +0x46d4 014099 fetch 4 ,mem_ble_shutter_discovery_blink_on_time +0x46d5 014100 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46d6 014101 fetch 2 ,mem_ui_state_map +0x46d7 014102 rtnbit1 ui_state_ble_adv +0x46d8 014103 branch app_ble_start_adv +: 014106 shutter_start_reconnect: +0x46d9 014107 fetch 1 ,mem_shutter_soft_switch_power_state +0x46da 014108 rtnne ss_state_power_on +0x46db 014109 fetch 1 ,mem_shutter_bluetooth_type +0x46dc 014110 bbit1 classic_shutter ,classic_shutter_start_reconnect +0x46dd 014111 bbit1 ble_shutter ,ble_shutter_start_reconnect +0x46de 014112 rtn +: 014114 classic_shutter_start_reconnect: +0x46df 014115 call app_check_reconn_target +0x46e0 014116 branch shutter_start_bluetooth_discovery ,blank +0x46e1 014117 call app_led_on +0x46e2 014118 call app_bt_stop_discovery +0x46e3 014119 branch app_bt_start_reconnect +: 014121 ble_shutter_start_reconnect: +0x46e4 014122 fetch 2 ,mem_ble_shutter_reconn_timer +0x46e5 014123 fetcht 2 ,mem_ble_shutter_reconn_timeout +0x46e6 014124 storet 2 ,mem_ble_shutter_reconn_timer +0x46e7 014125 nrtn blank +0x46e8 014126 fetch 2 ,mem_ble_shutter_reconn_dav_interval +0x46e9 014127 call shutter_ble_adv_interval_set +0x46ea 014128 call app_led_start_blink +0x46eb 014129 fetch 4 ,mem_ble_shutter_reconn_blink_on_time +0x46ec 014130 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46ed 014131 fetch 2 ,mem_ui_state_map +0x46ee 014132 rtnbit1 ui_state_ble_adv +0x46ef 014133 branch app_ble_start_adv +: 014136 shutter_ble_adv_interval_set: +0x46f0 014137 store 2 ,mem_lpm_interval +0x46f1 014138 increase -4 ,pdata +0x46f2 014139 store 2 ,mem_le_adv_interval +0x46f3 014140 rtn +: 014143 shutter_disconnect_current_connection: +0x46f4 014144 fetch 2 ,mem_ui_state_map +0x46f5 014145 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x46f6 014146 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x46f7 014147 branch shutter_stop_bluetooth_discovery +: 014151 app_check_reconn_target: +0x46f8 014152 fetch 1 ,mem_nv_data_number +0x46f9 014153 copy pdata ,loopcnt +0x46fa 014154 fetch 2 ,mem_nv_data_ptr +0x46fb 014155 copy pdata ,rega +: 014156 app_check_reconn_target_loop: +0x46fc 014157 ifetch 2 ,rega +0x46fd 014158 beq 0 ,found_reconn_device +0x46fe 014159 increase nv_data_len ,rega +0x46ff 014160 loop app_check_reconn_target_loop +0x4700 014161 branch enable_blank +: 014163 found_reconn_device: +0x4701 014164 ifetch 6 ,contr +0x4702 014165 store 6 ,mem_hci_plap +0x4703 014166 increase 10 ,contr +0x4704 014167 arg mem_link_key ,contw +0x4705 014168 call memcpy16 +0x4706 014169 call check_link_key_load +0x4707 014170 branch disable_blank +: 014176 shutter_check_data_enable: +0x4708 014177 call disable_user +0x4709 014178 fetch 2 ,mem_ui_state_map +0x470a 014179 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable +0x470b 014180 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +0x470c 014181 rtn +: 014183 shutter_check_bt_data_enable: +0x470d 014184 fetch 1 ,mem_hid_interrupt_state +0x470e 014185 rtnne 0x3f +0x470f 014186 branch enable_user +: 014188 shutter_check_ble_data_enable: +0x4710 014189 fetch 1 ,mem_ble_shutter_enable_notify +0x4711 014190 rtn blank +0x4712 014191 branch enable_user +: 014196 shutter_check_bluetooth_conn: +0x4713 014197 call disable_user +0x4714 014198 fetch 2 ,mem_ui_state_map +0x4715 014199 rtnbit1 ui_state_bt_connected +0x4716 014200 rtnbit1 ui_state_ble_connected +0x4717 014201 branch enable_user +: 014205 shutter_change_bluetooth_status_bt_disconn: +0x4718 014206 fetch 1 ,mem_shutter_bluetooth_type +0x4719 014207 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn +0x471a 014208 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +0x471b 014209 rtn +: 014211 classic_shutter_change_bluetooth_status_bt_disconn: +0x471c 014212 fetch 1 ,mem_scan_mode +0x471d 014213 rtnne 0x03 +0x471e 014214 branch shutter_start_reconnect +: 014216 ble_shutter_change_bluetooth_status_bt_disconn: +0x471f 014217 branch shutter_start_reconnect +: 014220 shutter_check_send_data: +0x4720 014221 disable user2 +0x4721 014222 fetch 2 ,mem_shutter_sleep_timeout +0x4722 014223 store 2 ,mem_shutter_sleep_timer +0x4723 014225 call shutter_check_bluetooth_conn +0x4724 014226 branch shutter_change_bluetooth_status_bt_disconn ,user +0x4725 014228 call shutter_check_data_enable +0x4726 014229 nrtn user +0x4727 014230 enable user2 +0x4728 014231 rtn +: 014235 shutter_key_change: +0x4729 014236 call shutter_check_send_data +0x472a 014237 nrtn user2 +0x472b 014238 deposit rega +0x472c 014239 branch shutter_key_release ,blank +: 014240 shutter_key_press: +0x472d 014241 call app_led_on +0x472e 014242 arg mem_key0_press ,regc +0x472f 014243 branch push_queue_press_or_release +: 014245 shutter_key_release: +0x4730 014246 call app_led_off +0x4731 014247 arg mem_key0_release ,regc +: 014249 push_queue_press_or_release: +0x4732 014250 arg max_queue_num ,pdata +0x4733 014251 imul32 queue ,pdata +0x4734 014252 iadd regc ,regc +: 014255 push_buffer_in_queue: +0x4735 014256 ifetch 1 ,regc +0x4736 014257 rtn blank +0x4737 014258 call queue_push_one_byte +0x4738 014259 increase 1 ,regc +0x4739 014260 branch push_buffer_in_queue +: 014263 shutter_send_data_to_master: +0x473a 014264 fetch 2 ,mem_ui_state_map +0x473b 014265 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +0x473c 014266 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data +0x473d 014267 rtn +: 014269 pop_queue_to_ble_data: +0x473e 014270 call le_fifo_check_nearly_full +0x473f 014271 nrtn blank +0x4740 014272 call queue_pop_one_byte +0x4741 014273 nrtn user +0x4742 014274 pincrease -1 +0x4743 014275 mul32 pdata ,shutter_ble_data_buffer ,pdata +0x4744 014276 arg mem_ble_data_buffer1 ,temp +0x4745 014277 iadd temp ,contr +: 014278 le_send_notify_from_list: +0x4746 014279 ifetch 1 ,contr +0x4747 014280 copy pdata ,rega +0x4748 014281 ifetcht 2 ,contr +0x4749 014282 call store_contr +0x474a 014283 call le_att_malloc_tx_notify +0x474b 014284 copy rega ,loopcnt +0x474c 014285 call get_contr +0x474d 014286 branch memcpy +: 014289 pop_queue_to_classic_data: +0x474e 014290 call l2cap_malloc_is_fifo_nearly_full +0x474f 014291 nrtn blank +0x4750 014292 call queue_pop_one_byte +0x4751 014293 nrtn user +0x4752 014294 pincrease -1 +0x4753 014295 mul32 pdata ,shutter_classic_data_buffer ,pdata +0x4754 014296 arg mem_classic_data_buffer1 ,temp +0x4755 014297 iadd temp ,contr +0x4756 014298 ifetch 5 ,contr +0x4757 014299 store 5 ,mem_classic_data_buffer +: 014300 classic_send_hid_data: +0x4758 014301 fetch 1 ,mem_classic_data_buffer +0x4759 014302 copy pdata ,rega +0x475a 014303 call hid_malloc_tx_buff +0x475b 014304 fetch 2 ,mem_hid_int_remote_cid +0x475c 014305 istore 2 ,contw +0x475d 014306 setarg 0xa1 +0x475e 014307 istore 1 ,contw +0x475f 014308 fetch 4 ,mem_classic_data_buffer + 1 +0x4760 014309 istore 9 ,contw +0x4761 014310 rtn +: 014314 queue_push_one_byte: +0x4762 014315 store 1 ,mem_pdatatemp +0x4763 014316 arg mem_pdatatemp ,rega +0x4764 014317 branch queue_push +: 014319 queue_pop_one_byte: +0x4765 014320 arg mem_pdatatemp ,rega +0x4766 014321 call queue_pop +0x4767 014322 nrtn user +0x4768 014323 fetch 1 ,mem_pdatatemp +0x4769 014324 rtn +: 014327 ble_shutter_receive_data: +0x476a 014328 fetch 2 ,mem_le_att_handle +0x476b 014329 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +0x476c 014330 rtn +: 014332 shutter_init_param: +0x476d 014333 setarg 0x02 +0x476e 014334 store 1 ,mem_shutter_power_off_timeout +0x476f 014336 setarg 0x00200008 +0x4770 014337 store 4 ,mem_ble_shutter_interval_min +0x4771 014338 setarg 0x012c0005 +0x4772 014339 istore 4 ,contw +0x4773 014342 jam 0x17 ,mem_le_local_mtu +0x4774 014345 setarg 0x1b +0x4775 014346 store 2 ,mem_le_pairing_handle +0x4776 014347 call le_set_config_fixed_ltk +0x4777 014348 call le_set_fixed_ltk +0x4778 014349 call le_set_justwork +0x4779 014350 branch le_set_config_read_authentication +: 014353 shutter_load_buffer_config_form_datarom: +0x477a 014355 arg ble_key_value_list_size ,loopcnt +0x477b 014356 arg mem_ble_data_buffer1 ,contw +0x477c 014357 arg ble_shutter_key_value_list ,contr +0x477d 014358 call memcpy_fast +0x477e 014359 arg bt_key_value_list_size ,loopcnt +0x477f 014360 arg mem_classic_data_buffer1 ,contw +0x4780 014361 arg classic_shutter_key_value_list ,contr +0x4781 014362 branch memcpy_fast +: 014365 shutter_load_ble_gatt_form_datarom: +0x4782 014366 arg ble_gatt_list_size ,loopcnt +0x4783 014367 arg ble_shutter_gatt_list ,contr +0x4784 014368 branch memcpy_fast +: 014371 shutter_load_bt_sdp_form_datarom: +0x4785 014372 arg bt_sdp_list_size ,loopcnt +0x4786 014373 arg classic_shutter_sdp_list ,contr +0x4787 014374 branch memcpy_fast +: 014378 shutter_init_bluetooth_config: +0x4788 014379 call shutter_check_load_config_flag +0x4789 014380 nrtn user +0x478a 014381 fetch 1 ,mem_shutter_config_select_gpio1 +0x478b 014382 call shutter_init_bluetooth_config_gpio_input +0x478c 014383 fetch 1 ,mem_shutter_config_select_gpio2 +0x478d 014384 call shutter_init_bluetooth_config_gpio_input +0x478e 014385 fetch 1 ,mem_shutter_config_select_gpio3 +0x478f 014386 branch shutter_init_bluetooth_config_gpio_input +: 014388 shutter_init_bluetooth_config_gpio_input: +0x4790 014389 rtn blank +0x4791 014390 or pdata ,0x80 ,temp +0x4792 014391 branch gpio_config_input_nowake +: 014394 shutter_load_bluetooth_config: +0x4793 014395 call shutter_check_load_config_flag +0x4794 014396 nrtn user +0x4795 014397 call shutter_load_bluetooth_config_label +0x4796 014398 branch shutter_load_bluetooth_config_by_otp +: 014400 shutter_load_bluetooth_config_label: +0x4797 014401 arg 0 ,rega +0x4798 014402 fetch 1 ,mem_shutter_config_select_gpio1 +0x4799 014403 call shutter_load_bluetooth_config_read_gpio_input +0x479a 014404 nsetflag blank ,0 ,rega +0x479b 014405 fetch 1 ,mem_shutter_config_select_gpio2 +0x479c 014406 call shutter_load_bluetooth_config_read_gpio_input +0x479d 014407 nsetflag blank ,1 ,rega +0x479e 014408 fetch 1 ,mem_shutter_config_select_gpio3 +0x479f 014409 call shutter_load_bluetooth_config_read_gpio_input +0x47a0 014410 nsetflag blank ,2 ,rega +0x47a1 014411 copy rega ,pdata +0x47a2 014412 store 1 ,mem_shutter_config_label +0x47a3 014413 fetch 1 ,mem_shutter_config_size +0x47a4 014414 imul32 rega ,pdata +0x47a5 014415 fetcht 2 ,mem_shutter_config_otp_base_address +0x47a6 014416 iadd temp ,pdata +0x47a7 014417 store 2 ,mem_shutter_config_otp_addr +0x47a8 014418 rtn +: 014420 shutter_load_bluetooth_config_read_gpio_input: +0x47a9 014421 rtn blank +0x47aa 014422 or pdata ,0x80 ,temp +0x47ab 014423 call gpio_get_bit +0x47ac 014424 nbranch enable_blank ,true +0x47ad 014425 branch disable_blank +: 014428 shutter_check_load_config_flag: +0x47ae 014429 call disable_user +0x47af 014430 fetch 1 ,mem_shutter_config_user_size +0x47b0 014431 nrtn blank +0x47b1 014432 fetch 1 ,mem_shutter_config_enable +0x47b2 014433 rtn blank +0x47b3 014434 branch enable_user +: 014437 shutter_load_bluetooth_config_by_otp: +0x47b4 014438 call otp_enable_chgpump +0x47b5 014439 fetch 2 ,mem_shutter_config_otp_addr +0x47b6 014440 arg mem_shutter_config_data_temp ,rega +0x47b7 014441 fetcht 1 ,mem_shutter_config_size +0x47b8 014442 call otpd_read_data +0x47b9 014443 call otp_disable_chgpump +: 014444 shutter_load_bluetooth_config_store_name: +0x47ba 014445 fetch 1 ,mem_shutter_config_data_temp +0x47bb 014446 copy pdata ,loopcnt +0x47bc 014447 store 1 ,mem_le_name_len +0x47bd 014448 call memcpy_fast +0x47be 014449 fetch 1 ,mem_shutter_config_data_temp +0x47bf 014450 copy pdata ,loopcnt +0x47c0 014451 store 1 ,mem_local_name_length +0x47c1 014452 call memcpy_fast +0x47c2 014453 ifetch 1 ,contr +0x47c3 014454 store 1 ,mem_shutter_key_num +0x47c4 014455 ifetch 1 ,contr +0x47c5 014456 store 1 ,mem_shutter_hard_soft_switch_case +0x47c6 014457 rtn +: 014460 shutter_load_bluetooth_config_by_eeprom: +0x47c7 014461 fetch 1 ,mem_shutter_bluetooth_type +0x47c8 014462 rtnbit0 classic_shutter +0x47c9 014463 arg 3 ,temp +0x47ca 014464 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47cb 014465 copy pdata ,regb +0x47cc 014466 arg mem_shutter_config_eeprom_start_flag ,rega +0x47cd 014467 call iicd_read_eep_data +0x47ce 014468 fetcht 2 ,mem_shutter_config_eeprom_start_flag +0x47cf 014469 setarg shutter_eeprom_config_crc +0x47d0 014470 isub temp ,null +0x47d1 014471 nrtn zero +0x47d2 014472 fetch 1 ,mem_shutter_config_user_size +0x47d3 014473 rtn blank +0x47d4 014474 copy pdata ,temp +0x47d5 014475 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47d6 014476 add pdata ,3 ,regb +0x47d7 014477 arg mem_shutter_config_data_temp ,rega +0x47d8 014478 call iicd_read_eep_data +0x47d9 014479 branch shutter_store_config +: 014481 shutter_load_bluetooth_config_by_user_config: +0x47da 014482 fetch 2 ,mem_shutter_config_user_otp_address +0x47db 014483 rtn blank +0x47dc 014484 call otp_enable_chgpump +0x47dd 014485 arg 1 ,temp +0x47de 014486 arg mem_shutter_config_user_size ,rega +0x47df 014487 call otpd_read_data +0x47e0 014489 fetch 1 ,mem_shutter_config_user_size +0x47e1 014490 rtn blank +0x47e2 014492 fetch 2 ,mem_shutter_config_user_otp_address +0x47e3 014493 pincrease 1 +0x47e4 014494 arg mem_shutter_config_data_temp ,rega +0x47e5 014495 fetcht 1 ,mem_shutter_config_user_size +0x47e6 014496 call otpd_read_data +0x47e7 014497 call otp_disable_chgpump +: 014498 shutter_store_config: +0x47e8 014499 call shutter_load_bluetooth_config_store_name +: 014500 shutter_load_bluetooth_config_custom: +0x47e9 014501 ifetch 2 ,contr +0x47ea 014502 rtn blank +0x47eb 014503 copy pdata ,contw +0x47ec 014504 ifetcht 1 ,contr +0x47ed 014505 copy temp ,loopcnt +0x47ee 014506 call memcpy +0x47ef 014507 branch shutter_load_bluetooth_config_custom +: 014511 shutter_random_mac_addr: +0x47f0 014512 fetch 1 ,mem_shutter_bluetooth_type +0x47f1 014513 rtnbit0 classic_shutter +0x47f2 014514 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47f3 014515 copy pdata ,regb +0x47f4 014516 arg 4 ,temp +0x47f5 014517 arg mem_shutter_random_mac_data_temp ,rega +0x47f6 014518 call iicd_read_eep_data +0x47f7 014519 fetch 1 ,mem_shutter_random_mac_data_temp +0x47f8 014520 bne 1 ,shutter_write_random_mac_addr_to_eeprom +: 014521 shutter_write_random_mac_addr_to_eeprom: +0x47f9 014522 setarg 1 +0x47fa 014523 store 1 ,mem_shutter_random_mac_data_temp +0x47fb 014524 force 3 ,loopcnt +0x47fc 014525 call generate_random_loop +0x47fd 014526 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47fe 014527 copy pdata ,regb +0x47ff 014528 arg 4 ,temp +0x4800 014529 arg mem_shutter_random_mac_data_temp ,rega +0x4801 014530 call iicd_write_eep_data +: 014531 shutter_write_random_mac_addr: +0x4802 014532 fetch 3 ,mem_shutter_random_mac_data_temp + 1 +0x4803 014533 store 3 ,mem_lap +0x4804 014534 store 3 ,mem_le_lap +0x4805 014535 rtn +: 014538 shutter_soft_swtich_power_on: +0x4806 014539 branch shutter_start_reconnect +: 014542 shutter_soft_swtich_power_off: +0x4807 014543 arg 0 ,rega +0x4808 014544 arg mem_shutter_power_off_led_style ,regc +0x4809 014545 call ui_led_set_style_global +0x480a 014546 call shutter_disconnect_current_connection +: 014547 shutter_wait_power_off: +0x480b 014548 fetch 1 ,mem_shutter_power_off_timeout +0x480c 014549 store 1 ,mem_shutter_power_off_timer +0x480d 014550 rtn +: 014554 ui_soft_swtich_init: +0x480e 014555 setarg ss_state_power_up +0x480f 014556 call ui_soft_swtich_init_power_on_time +0x4810 014557 jam ui_button_state_up ,mem_ui_button_last_state +0x4811 014558 call ui_button_init +0x4812 014559 call ui_button_polling +0x4813 014560 fetch 2 ,mem_ui_state_map +0x4814 014561 rtnbit1 ui_state_btn_down +0x4815 014562 branch app_enter_hibernate +: 014564 ui_soft_swtich_init_power_on_time: +0x4816 014565 fetcht 2 ,mem_power_param_ptr +0x4817 014566 istore 1 ,temp +0x4818 014567 ifetch 1 ,contw +0x4819 014568 store 1 ,mem_ui_button_timeout +0x481a 014569 rtn +: 014572 ui_soft_switch_botton_up: +0x481b 014573 fetch 2 ,mem_power_param_ptr +0x481c 014574 ifetch 1 ,pdata +0x481d 014575 rtnne ss_state_power_up +0x481e 014576 branch app_enter_hibernate +: 014579 ui_soft_switch_botton_long_press: +0x481f 014580 fetcht 2 ,mem_power_param_ptr +0x4820 014581 ifetch 1 ,temp +0x4821 014582 beq ss_state_power_on ,ui_soft_switch_power_off +: 014583 ui_soft_switch_power_on: +0x4822 014584 setarg ss_state_power_on +0x4823 014585 fetcht 2 ,mem_power_param_ptr +0x4824 014586 istore 1 ,temp +0x4825 014587 add temp ,ss_power_off_time ,contr +0x4826 014588 ifetch 1 ,contr +0x4827 014589 istore 1 ,mem_ui_button_timeout +0x4828 014590 ifetch 2 ,contr +0x4829 014591 branch callback_func +: 014593 ui_soft_switch_power_off: +0x482a 014594 setarg ss_state_power_off +0x482b 014595 call ui_soft_swtich_init_power_on_time +0x482c 014596 add temp ,ss_power_off_cb ,contr +0x482d 014597 ifetch 2 ,contr +0x482e 014598 branch app_enter_hibernate ,blank +0x482f 014599 branch callback_func +: 014605 shutter_byteswap: +0x4830 014606 store 6 ,mem_tmp_buffer +0x4831 014607 fetch 1 ,mem_tmp_buffer +0x4832 014608 store 1 ,mem_tmp_buffer + 11 +0x4833 014609 ifetch 1 ,contr +0x4834 014610 store 1 ,mem_tmp_buffer + 10 +0x4835 014611 ifetch 1 ,contr +0x4836 014612 store 1 ,mem_tmp_buffer + 9 +0x4837 014613 ifetch 1 ,contr +0x4838 014614 store 1 ,mem_tmp_buffer + 8 +0x4839 014615 ifetch 1 ,contr +0x483a 014616 store 1 ,mem_tmp_buffer + 7 +0x483b 014617 ifetch 1 ,contr +0x483c 014618 store 1 ,mem_tmp_buffer + 6 +0x483d 014619 fetch 6 ,mem_tmp_buffer + 6 +0x483e 014620 rtn +: 014622 shutter_random_addr_by_otp: +0x483f 014623 call load_adc_init +0x4840 014624 fetch 1 ,mem_1v_adc_io_data +0x4841 014625 store 1 ,mem_le_lap +0x4842 014626 fetch 1 ,mem_5v_adc_hvin_data +0x4843 014627 istore 1 ,contw +0x4844 014628 fetch 1 ,mem_3v_adc_vinlpm_data +0x4845 014629 istore 1 ,contw +0x4846 014630 fetch 3 ,mem_le_lap +0x4847 014631 store 3 ,mem_lap +0x4848 014632 rtn +: 014644 sim_iic_read_eep_data: +0x4849 014645 fetch 2 ,mem_eeprom_base +0x484a 014646 iadd regb ,pdata +0x484b 014647 byteswap pdata ,pdata +0x484c 014648 store 2 ,mem_addr_mi +0x484d 014649 copy temp ,regb +0x484e 014651 call sim_iic_start +0x484f 014652 setarg 0xa0 +0x4850 014653 call sim_iic_send_byte +0x4851 014654 fetch 1 ,mem_addr_mi +0x4852 014655 call sim_iic_send_byte +0x4853 014656 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k +0x4854 014657 fetch 1 ,mem_addr_mi + 1 +0x4855 014658 call sim_iic_send_byte +: 014659 sim_iic_read_eep_data_2k: +0x4856 014660 call sim_iic_stop +0x4857 014662 call sim_iic_start +0x4858 014663 setarg 0xa1 +0x4859 014664 call sim_iic_send_byte +: 014666 sim_iic_read_eep_data_loop: +0x485a 014667 call sim_iic_read_byte +0x485b 014668 istore 1 ,rega +0x485c 014669 increase 1 ,rega +0x485d 014670 increase -1 ,regb +0x485e 014671 nbranch sim_iic_read_eep_data_loop ,zero +0x485f 014672 branch sim_iic_stop +: 014683 sim_iic_write_eep_data: +0x4860 014684 byteswap regb ,pdata +0x4861 014685 store 2 ,mem_addr_mi +0x4862 014686 copy temp ,regb +0x4863 014688 call sim_iic_start +0x4864 014689 setarg 0xa0 +0x4865 014690 call sim_iic_send_byte +0x4866 014692 fetch 1 ,mem_addr_mi +0x4867 014693 call sim_iic_send_byte +0x4868 014694 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop +0x4869 014695 fetch 1 ,mem_addr_mi + 1 +0x486a 014696 call sim_iic_send_byte +: 014697 sim_iic_write_eep_data_loop: +0x486b 014698 ifetch 1 ,rega +0x486c 014699 call sim_iic_send_byte +0x486d 014700 increase 1 ,rega +0x486e 014701 increase -1 ,regb +0x486f 014702 nbranch sim_iic_write_eep_data_loop ,zero +0x4870 014703 branch sim_iic_stop +: 014707 sim_iic_wait_ack: +0x4871 014708 arg 10 ,loopcnt +0x4872 014709 call sim_iic_release_sda +0x4873 014710 call sim_iic_scl_output_high +0x4874 014711 call sim_iic_delay +: 014712 sim_iic_wait_ack_loop: +0x4875 014713 call sim_iic_read_sda_level +0x4876 014714 branch sim_iic_scl_output_low ,blank +0x4877 014715 loop sim_iic_wait_ack_loop +0x4878 014716 branch sim_iic_scl_output_low +: 014720 sim_iic_ack_slave: +0x4879 014721 call sim_iic_scl_output_low +0x487a 014722 call sim_iic_sda_output_low +0x487b 014723 call sim_iic_delay +0x487c 014724 call sim_iic_scl_output_high +0x487d 014725 call sim_iic_delay +0x487e 014726 branch sim_iic_scl_output_low +: 014731 sim_iic_read_byte: +0x487f 014732 arg 8 ,loopcnt +0x4880 014733 arg 0 ,regc +0x4881 014734 call sim_iic_release_sda +: 014735 sim_iic_read_byte_loop: +0x4882 014736 call sim_iic_scl_output_high +0x4883 014737 call sim_iic_delay +0x4884 014738 lshift regc ,regc +0x4885 014739 call sim_iic_read_sda_level +0x4886 014740 iadd regc ,regc +0x4887 014741 call sim_iic_delay +0x4888 014742 call sim_iic_scl_output_low +0x4889 014743 loop sim_iic_read_byte_loop +0x488a 014744 call sim_iic_ack_slave +0x488b 014745 copy regc ,pdata +0x488c 014746 rtn +: 014750 sim_iic_send_byte: +0x488d 014751 arg 8 ,loopcnt +0x488e 014752 copy pdata ,regc +0x488f 014753 call sim_iic_scl_output_low +: 014754 sim_iic_send_byte_loop: +0x4890 014755 isolate1 7 ,regc +0x4891 014756 call sim_iic_sda_output_high ,true +0x4892 014757 ncall sim_iic_sda_output_low ,true +0x4893 014758 lshift regc ,regc +0x4894 014759 call sim_iic_delay +0x4895 014760 call sim_iic_scl_output_high +0x4896 014761 call sim_iic_delay +0x4897 014762 call sim_iic_scl_output_low +0x4898 014763 call sim_iic_delay +0x4899 014764 loop sim_iic_send_byte_loop +0x489a 014765 branch sim_iic_wait_ack +: 014769 sim_iic_start: +0x489b 014770 call sim_iic_sda_output_high +0x489c 014771 call sim_iic_scl_output_high +0x489d 014772 call sim_iic_delay +0x489e 014773 call sim_iic_sda_output_low +0x489f 014774 call sim_iic_delay +0x48a0 014775 branch sim_iic_scl_output_low +: 014779 sim_iic_stop: +0x48a1 014780 call sim_iic_sda_output_low +0x48a2 014781 call sim_iic_scl_output_high +0x48a3 014782 call sim_iic_delay +0x48a4 014783 call sim_iic_sda_output_high +0x48a5 014784 branch sim_iic_delay +: 014788 sim_iic_scl_output_high: +0x48a6 014789 enable user +0x48a7 014790 fetch 1 ,sim_iic_scl_gpio_num +0x48a8 014791 branch sim_iic_config_gpio +: 014794 sim_iic_scl_output_low: +0x48a9 014795 disable user +0x48aa 014796 fetch 1 ,sim_iic_scl_gpio_num +0x48ab 014797 branch sim_iic_config_gpio +: 014800 sim_iic_sda_output_high: +0x48ac 014801 enable user +0x48ad 014802 fetch 1 ,sim_iic_sda_gpio_num +0x48ae 014803 branch sim_iic_config_gpio +: 014806 sim_iic_sda_output_low: +0x48af 014807 disable user +0x48b0 014808 fetch 1 ,sim_iic_sda_gpio_num +0x48b1 014809 branch sim_iic_config_gpio +: 014814 sim_iic_config_gpio: +0x48b2 014815 and pdata ,0x07 ,queue +0x48b3 014816 rshift3 pdata ,pdata +0x48b4 014817 arg core_gpio_oe0 ,temp +0x48b5 014818 iadd temp ,temp +0x48b6 014819 ifetch 1 ,temp +0x48b7 014820 qset1 pdata +0x48b8 014821 istore 1 ,temp +0x48b9 014822 increase 4 ,temp +0x48ba 014823 ifetch 1 ,temp +0x48bb 014824 qsetflag user ,pdata +0x48bc 014825 istore 1 ,temp +0x48bd 014826 rtn +: 014829 sim_iic_release_sda: +0x48be 014830 fetch 1 ,sim_iic_sda_gpio_num +0x48bf 014831 and pdata ,0x07 ,queue +0x48c0 014832 rshift3 pdata ,pdata +0x48c1 014833 arg core_gpio_oe0 ,temp +0x48c2 014834 iadd temp ,temp +0x48c3 014835 ifetch 1 ,temp +0x48c4 014836 qset0 pdata +0x48c5 014837 istore 1 ,temp +0x48c6 014838 rtn +: 014843 sim_iic_read_sda_level: +0x48c7 014844 nop 4 +0x48c8 014845 fetch 1 ,sim_iic_sda_gpio_num +0x48c9 014846 and pdata ,0x07 ,queue +0x48ca 014847 rshift3 pdata ,pdata +0x48cb 014848 arg core_gpio_in ,temp +0x48cc 014849 iadd temp ,temp +0x48cd 014850 setarg 0 +0x48ce 014851 ifetcht 1 ,temp +0x48cf 014852 qisolate1 temp +0x48d0 014853 setflag true ,0 ,pdata +0x48d1 014854 rtn +: 014857 sim_iic_delay: +0x48d2 014859 rtn +: 014865 usb_isr: +0x48d3 014866 bpatch patch1e_6 ,mem_patch1e +0x48d4 014867 hfetch 1 ,core_usb_status +0x48d5 014868 isolate1 7 ,pdata +0x48d6 014869 call usb_init ,true +0x48d7 014870 call usb_nak_state_judge +0x48d8 014871 hfetch 1 ,core_usb_status +0x48d9 014872 store 1 ,mem_usb_status +0x48da 014873 hfetch 1 ,core_usb_fifo_empty +0x48db 014874 store 1 ,mem_usb_fifo_empty +0x48dc 014875 hstore 1 ,core_usb_fifo_empty +0x48dd 014876 pinvert +0x48de 014877 fetcht 1 ,mem_usb_tx_wait +0x48df 014878 iand temp ,pdata +0x48e0 014879 store 1 ,mem_usb_tx_wait +0x48e1 014880 hjam 0xe0 ,core_usb_status +0x48e2 014881 fetch 1 ,mem_usb_fifo_empty +0x48e3 014882 compare 0x1 ,pdata ,0x1 +0x48e4 014883 call usb0_fifo_empty ,true +0x48e5 014884 fetch 1 ,mem_usb_status +0x48e6 014885 compare 0x1 ,pdata ,0x1 +0x48e7 014886 call usb_status1 ,true +0x48e8 014887 call usb_tx +0x48e9 014888 branch usb_nak_state +: 014890 usb_init: +0x48ea 014891 bpatch patch1e_7 ,mem_patch1e +0x48eb 014892 call usb_init_param +0x48ec 014893 hjam 0x00 ,core_usb_config +0x48ed 014894 nop 10000 +0x48ee 014895 hjam 0xc0 ,core_usb_trig +0x48ef 014896 hfetch 2 ,core_clkoff +0x48f0 014897 set0 clock_off_usb ,pdata +0x48f1 014898 hstore 2 ,core_clkoff +0x48f2 014899 hjam 0x3c ,core_usb_config +0x48f3 014900 hjam 0xff ,core_usb_status +0x48f4 014901 hjam 0xff ,core_usb_fifo_empty +0x48f5 014902 hjam 0 ,core_usb_addr +0x48f6 014903 jam dev_default ,mem_usb0_state +0x48f7 014904 setarg mem_usb_clear_mem_end +0x48f8 014905 arg mem_usb_clear_mem_start ,contw +0x48f9 014906 isub contw ,loopcnt +0x48fa 014907 branch clear_mem +: 014909 usb_offline_check_init: +0x48fb 014910 fetcht 1 ,mem_usb_offline_check_gpio +0x48fc 014911 branch gpio_config_input +: 014912 usb_offline_state: +0x48fd 014913 fetch 1 ,mem_usb_device_enumeration_endflag +0x48fe 014914 rtn blank +0x48ff 014915 fetcht 1 ,mem_usb_offline_check_gpio +0x4900 014916 call gpio_get_bit +0x4901 014917 branch usb_init ,true +0x4902 014918 rtn +: 014921 usb_nak_state: +0x4903 014922 arg timer_nak ,queue +0x4904 014923 call timer_check +0x4905 014924 nrtn blank +0x4906 014925 fetch 1 ,mem_usb_wakestate_onetime_flag +0x4907 014926 nrtn blank +0x4908 014927 fetch 1 ,mem_usb_device_enumeration_endflag +0x4909 014928 ncall usb_mac_wakeup_judge ,blank +0x490a 014929 rtn +: 014931 usb_mem_devicedesc_init: +0x490b 014932 arg mem_devicedesc ,contw +0x490c 014933 setsect 0 ,0x11212 +0x490d 014934 setsect 1 ,0x8000 +0x490e 014935 setsect 2 ,0x0 +0x490f 014936 setsect 3 ,0x10000 +0x4910 014937 istore 9 ,contw +0x4911 014938 setsect 0 ,0x22412 +0x4912 014939 setsect 1 ,0x8604 +0x4913 014940 setsect 2 ,0x1000 +0x4914 014941 setsect 3 ,0x8 +0x4915 014942 istore 9 ,contw +0x4916 014943 setsect 0 ,0x1 +0x4917 014944 istore 1 ,contw +0x4918 014945 rtn +: 014947 usb_init_param: +0x4919 014948 jam 2 ,mem_usb0_state +0x491a 014949 setarg 0x0 +0x491b 014950 store 1 ,mem_remain +0x491c 014951 store 2 ,mem_usb_zero_packet +0x491d 014952 pincrease 1 +0x491e 014953 store 2 ,mem_usb_ones_packet +0x491f 014954 pincrease 1 +0x4920 014955 store 2 ,mem_usb_two_packet +0x4921 014956 setarg hid_kbdata_addr +0x4922 014957 store 2 ,mem_hidreportdesc_kb +0x4923 014958 setarg hid_msdata_addr +0x4924 014959 store 2 ,mem_hidreportdesc_m +0x4925 014960 arg mem_confdesc ,contw +0x4926 014961 arg hid_confdata_addr ,contr +0x4927 014962 call memcpy64 +0x4928 014963 fetch 1 ,mem_usb_tx_interval +0x4929 014964 ncall usb_tx_interval_config ,blank +0x492a 014965 branch usb_mem_devicedesc_init +: 014967 usb_tx_interval_config: +0x492b 014968 store 1 ,mem_confdesc + 34 +0x492c 014969 store 1 ,mem_confdesc + 59 +0x492d 014970 rtn +: 014971 usb_nak_state_judge: +0x492e 014972 hfetch 1 ,core_usb_status +0x492f 014973 bbit1 usb_status_nak ,usb_nak_state_timer_init +0x4930 014974 rtn +: 014976 usb_nak_state_timer_init: +0x4931 014977 call usb0_attached_state_judge +0x4932 014978 call timer_reinit +0x4933 014979 setarg timer_nak_delay +0x4934 014980 arg timer_nak ,queue +0x4935 014981 branch timer_init +: 014983 usb0_attached_state_judge: +0x4936 014984 fetch 1 ,mem_usb_state +0x4937 014985 bne usb_connected ,usb_clear_halt_dispose +0x4938 014986 jam 0 ,mem_usb_wakestate_onetime_flag +0x4939 014987 jam 0 ,mem_usb_mac_wakeup_trig +0x493a 014988 rtn +: 014989 usb_clear_halt_dispose: +0x493b 014990 fetch 1 ,mem_usb_clear_halt +0x493c 014991 rtn blank +0x493d 014992 jam 0 ,mem_usb_clear_halt +0x493e 014993 jam usb_connected ,mem_usb_state +0x493f 014994 jam 1 ,mem_usb_device_enumeration_endflag +0x4940 014995 rtn +: 014997 usb0_fifo_empty: +0x4941 014998 hjam 0x1 ,core_usb_fifo_empty +0x4942 014999 branch usb0_tx +: 015001 usb_rx_no_data: +0x4943 015002 fetch 1 ,mem_usb_status +0x4944 015003 bbit1 usb_status_setup ,usb_class_type +0x4945 015004 rtn +: 015006 usb_rx_read: +0x4946 015007 hfetch 1 ,core_usb_ep +0x4947 015008 istore 1 ,contw +0x4948 015009 loop usb_rx_read +0x4949 015010 rtn +: 015012 usb_status1: +0x494a 015013 bpatch patch1f_0 ,mem_patch1f +0x494b 015014 hjam 0x11 ,core_usb_status +0x494c 015015 hfetch 1 ,core_usb_ep_len +0x494d 015016 store 1 ,mem_usb_read_len +0x494e 015017 copy pdata ,loopcnt +0x494f 015018 branch usb_rx_no_data ,blank +0x4950 015019 arg mem_usb_setup ,contw +0x4951 015020 call usb_rx_read +0x4952 015021 fetch 1 ,mem_usb_read_len +0x4953 015022 sub pdata ,7 ,null +0x4954 015023 rtn positive +: 015024 usb_class_type: +0x4955 015025 fetch 1 ,mem_usb_setup_bmrequesttype +0x4956 015026 and_into 0x80 ,pdata +0x4957 015027 beq in_device ,usb_in_device +0x4958 015028 beq out_device ,usb_out_device +0x4959 015029 branch assert +: 015031 usb_in_device: +0x495a 015032 fetch 1 ,mem_usb_setup_bmrequesttype +0x495b 015033 rshift4 pdata ,pdata +0x495c 015034 rshift pdata ,pdata +0x495d 015035 and_into 0x03 ,pdata +0x495e 015036 beq standard_req ,usb_in_standard_req +0x495f 015037 beq class_req ,usb_in_class_req +0x4960 015038 beq manufacturer_req ,usb_in_manufacturer_req +0x4961 015039 branch assert +: 015041 usb_out_device: +0x4962 015042 fetch 1 ,mem_usb_setup_bmrequesttype +0x4963 015043 rshift4 pdata ,pdata +0x4964 015044 rshift pdata ,pdata +0x4965 015045 and_into 0x03 ,pdata +0x4966 015046 beq standard_req ,usb_out_standard_req +0x4967 015047 beq class_req ,usb_out_class_req +0x4968 015048 beq manufacturer_req ,usb_out_manufacturer_req +0x4969 015049 branch assert +: 015051 usb_in_standard_req: +0x496a 015052 fetch 1 ,mem_usb_setup_brequest +0x496b 015053 beq get_configuration ,usb0_request_get_configuration +0x496c 015054 beq get_descriptor ,usb0_request_get_descriptor +0x496d 015055 beq get_interface ,usb0_request_get_interface +0x496e 015056 beq get_status ,usb0_request_get_status +0x496f 015057 branch usb0_force_stall +: 015059 usb_in_class_req: +0x4970 015060 fetch 1 ,mem_usb_setup_brequest +0x4971 015061 beq get_idle ,usb_get_idle +0x4972 015062 beq get_report ,usb_get_report +0x4973 015063 beq get_protocol ,usb_get_protocol_req +0x4974 015064 branch usb0_force_stall +: 015066 usb_in_manufacturer_req: +0x4975 015067 branch usb0_force_stall +: 015069 usb_out_standard_req: +0x4976 015070 fetch 1 ,mem_usb_setup_brequest +0x4977 015071 beq clear_feature ,usb0_request_clear_feature +0x4978 015072 beq set_feature ,usb0_request_set_feature +0x4979 015073 beq set_address ,usb0_request_set_address +0x497a 015074 beq set_configuration ,usb0_request_set_configuration +0x497b 015075 beq set_interface ,usb0_request_set_interface +0x497c 015076 beq set_descriptor ,usb0_force_stall +0x497d 015077 branch usb0_force_stall +: 015079 usb_out_class_req: +0x497e 015080 fetch 1 ,mem_usb_setup_brequest +0x497f 015081 beq set_idle ,usb_set_idle +0x4980 015082 beq set_report ,usb_set_report +0x4981 015083 beq set_protocol ,usb_set_protocol_req +0x4982 015084 branch usb0_force_stall +: 015086 usb_out_manufacturer_req: +0x4983 015087 branch usb0_force_stall +: 015089 usb0_force_stall: +0x4984 015090 hfetch 1 ,core_usb_stall +0x4985 015091 set1 0 ,pdata +0x4986 015092 hstore 1 ,core_usb_stall +0x4987 015093 branch usb0_reply_zerolen +: 015095 usb0_reply_zerolen: +0x4988 015096 hjam 0x40 ,core_usb_clear +0x4989 015097 rtn +: 015099 usb0_request_get_configuration: +0x498a 015100 fetch 1 ,mem_usb_setup_bmrequesttype +0x498b 015101 bne in_device ,usb0_force_stall +0x498c 015102 fetch 1 ,mem_usb_setup_windex +0x498d 015103 bne 0 ,usb0_force_stall +0x498e 015104 fetch 1 ,mem_usb_setup_windex + 1 +0x498f 015105 bne 0 ,usb0_force_stall +0x4990 015106 fetch 1 ,mem_usb_setup_blength +0x4991 015107 bne 1 ,usb0_force_stall +0x4992 015108 fetch 1 ,mem_usb_setup_blengthh +0x4993 015109 bne 0 ,usb0_force_stall +0x4994 015110 fetch 1 ,mem_usb_setup_bvalue +0x4995 015111 bne 0 ,usb0_force_stall +0x4996 015112 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4997 015113 bne 0 ,usb0_force_stall +0x4998 015114 fetch 1 ,mem_usb0_state +0x4999 015115 beq dev_configured ,usb0_request_get_cfg_dev_cfg +0x499a 015116 beq dev_address ,usb0_request_get_cfg_dev_addr +0x499b 015117 branch usb0_force_stall +: 015119 usb0_request_get_cfg_dev_cfg: +0x499c 015120 arg 1 ,regb +0x499d 015121 branch usb_send_ones_packet +: 015123 usb0_request_get_cfg_dev_addr: +0x499e 015124 arg 1 ,regb +0x499f 015125 branch usb_send_zero_packet +: 015127 usb0_request_get_descriptor: +0x49a0 015128 bpatch patch1f_1 ,mem_patch1f +0x49a1 015129 set0 mark_isstr ,mark +0x49a2 015130 fetch 1 ,mem_usb_setup_bvalueh +0x49a3 015131 beq dsc_device ,dsc_device_info +0x49a4 015132 beq dsc_config ,dsc_config_info +0x49a5 015133 beq dsc_string ,dsc_string_info +0x49a6 015134 beq dsc_hid ,dsc_hid_info +0x49a7 015135 beq dsc_hid_report ,dsc_hid_report_info +0x49a8 015136 branch usb0_force_stall +: 015138 dsc_hid_info: +0x49a9 015139 jam 0 ,mem_usb_get_protocol_flag +0x49aa 015140 fetch 1 ,mem_usb_setup_windex +0x49ab 015141 beq 0 ,dsc_hid_info_interface0 +0x49ac 015142 beq 1 ,dsc_hid_info_interface1 +0x49ad 015143 branch usb0_force_stall +: 015145 dsc_hid_info_interface0: +0x49ae 015146 arg mem_confdesc + 19 ,rega +0x49af 015147 ifetch 1 ,rega +0x49b0 015148 iforce regb +0x49b1 015149 branch usb0_respond +: 015151 dsc_hid_info_interface1: +0x49b2 015152 arg mem_confdesc + 44 ,rega +0x49b3 015153 ifetch 1 ,rega +0x49b4 015154 iforce regb +0x49b5 015155 branch usb0_respond +: 015157 dsc_device_info: +0x49b6 015161 fetch 1 ,mem_usb_set_high_addr_flag +0x49b7 015162 ncall usb_set_high_addr ,blank +0x49b8 015163 setarg mem_devicedesc +0x49b9 015164 fetcht 1 ,mem_devicedesc +: 015165 dsc_info_set_data_len: +0x49ba 015166 store 2 ,mem_dsc_info_data_pointer +0x49bb 015167 storet 1 ,mem_dsc_info_len +0x49bc 015168 fetch 1 ,mem_usb_setup_blength +0x49bd 015169 isub temp ,null +0x49be 015170 nbranch dsc_info_set_current_data_len ,positive +: 015171 dsc_info_set_initial_data_len: +0x49bf 015172 fetch 1 ,mem_dsc_info_len +: 015173 dsc_info_set_data_size_completed: +0x49c0 015174 iforce regb +0x49c1 015175 fetch 2 ,mem_dsc_info_data_pointer +0x49c2 015176 add pdata ,1 ,pdata +0x49c3 015177 iforce rega +0x49c4 015178 branch usb0_respond +: 015179 dsc_info_set_current_data_len: +0x49c5 015180 fetch 1 ,mem_usb_setup_blength +0x49c6 015181 branch dsc_info_set_data_size_completed +: 015183 usb_set_high_addr: +0x49c7 015184 hfetch 1 ,core_usb_addr +0x49c8 015185 ncall usb0_set_addr ,blank +0x49c9 015186 jam 0 ,mem_usb_set_high_addr_flag +0x49ca 015187 rtn +: 015188 usb0_set_addr: +0x49cb 015189 hfetch 1 ,core_usb_addr +0x49cc 015190 set1 7 ,pdata +0x49cd 015191 hstore 1 ,core_usb_addr +0x49ce 015192 rtn +: 015194 dsc_config_info: +0x49cf 015195 setarg mem_confdesc +0x49d0 015196 fetcht 1 ,mem_confdesc +0x49d1 015197 branch dsc_info_set_data_len +: 015199 dsc_string_info: +0x49d2 015200 fetch 1 ,mem_usb_setup_bvalue +0x49d3 015201 sub pdata ,3 ,null +0x49d4 015202 nbranch usb0_force_stall ,positive +0x49d5 015203 fetch 1 ,mem_usb_setup_bvalue +0x49d6 015204 arg mem_string0 ,rega +0x49d7 015205 beq 0 ,usb0_respond_length +0x49d8 015206 set1 mark_isstr ,mark +0x49d9 015207 arg mem_string1 ,rega +0x49da 015208 beq 1 ,usb0_respond_length +0x49db 015209 arg mem_string2 ,rega +0x49dc 015210 beq 2 ,usb0_respond_length +0x49dd 015211 arg mem_string3 ,rega +0x49de 015212 beq 3 ,usb0_respond_length +0x49df 015213 rtn +: 015215 dsc_hid_report_info: +0x49e0 015216 fetch 2 ,mem_usb_setup_windex +0x49e1 015217 beq 1 ,dsc_hid_report_info0 +0x49e2 015218 fetch 2 ,mem_hidreportdesc_kb +0x49e3 015219 copy pdata ,rega +0x49e4 015221 branch usb0_respond_length +: 015222 dsc_hid_report_info0: +0x49e5 015223 jam 1 ,mem_usb_device_enumeration_endflag +0x49e6 015224 jam usb_got_report_req ,mem_usb_state +0x49e7 015225 fetch 2 ,mem_hidreportdesc_m +0x49e8 015226 copy pdata ,rega +0x49e9 015228 branch usb0_respond_length +: 015231 usb0_request_get_interface: +0x49ea 015232 fetch 1 ,mem_usb0_state +0x49eb 015233 bne dev_configured ,usb0_force_stall +0x49ec 015234 fetch 1 ,mem_usb_setup_bmrequesttype +0x49ed 015235 bne in_interface ,usb0_force_stall +0x49ee 015236 fetch 1 ,mem_usb_setup_bvalue +0x49ef 015237 bne 0 ,usb0_force_stall +0x49f0 015238 fetch 1 ,mem_usb_setup_bvalueh +0x49f1 015239 bne 0 ,usb0_force_stall +0x49f2 015240 fetch 1 ,mem_usb_setup_blength +0x49f3 015241 bne 1 ,usb0_force_stall +0x49f4 015242 fetch 1 ,mem_usb_setup_blengthh +0x49f5 015243 bne 0 ,usb0_force_stall +0x49f6 015244 fetch 1 ,mem_usb_setup_windex +0x49f7 015245 bne 0 ,usb0_force_stall +0x49f8 015246 fetch 1 ,mem_usb_setup_windex + 1 +0x49f9 015247 bne 0 ,usb0_force_stall +0x49fa 015248 arg 1 ,regb +0x49fb 015249 branch usb_send_zero_packet +: 015252 usb0_request_get_status: +0x49fc 015253 fetch 1 ,mem_usb0_state +0x49fd 015254 beq dev_default ,usb0_force_stall +0x49fe 015255 fetch 1 ,mem_usb_setup_bvalue +0x49ff 015256 bne 0 ,usb0_force_stall +0x4a00 015257 fetch 1 ,mem_usb_setup_bvalueh +0x4a01 015258 bne 0 ,usb0_force_stall +0x4a02 015259 fetch 1 ,mem_usb_setup_blength +0x4a03 015260 bne 2 ,usb0_force_stall +0x4a04 015261 fetch 1 ,mem_usb_setup_blengthh +0x4a05 015262 bne 0 ,usb0_force_stall +0x4a06 015263 fetch 1 ,mem_usb_setup_windex + 1 +0x4a07 015264 bne 0 ,usb0_force_stall +0x4a08 015265 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a09 015266 beq in_device ,usb0_get_status_in_device +0x4a0a 015267 beq in_interface ,usb0_get_status_in_interface +0x4a0b 015268 beq in_endpoint ,usb0_get_status_in_endpoint +0x4a0c 015269 branch usb0_force_stall +: 015271 usb0_get_status_in_device: +0x4a0d 015272 fetch 1 ,mem_usb_setup_windex +0x4a0e 015273 bne 0 ,usb0_force_stall +0x4a0f 015274 arg 2 ,regb +0x4a10 015275 fetch 1 ,mem_usb_remote_wakeup +0x4a11 015276 beq 0x01 ,usb_send_two_packet +: 015278 usb_send_zero_packet: +0x4a12 015279 arg mem_usb_zero_packet ,rega +0x4a13 015280 branch usb0_respond +: 015281 usb_send_ones_packet: +0x4a14 015282 arg mem_usb_ones_packet ,rega +0x4a15 015283 branch usb0_respond +: 015284 usb_send_two_packet: +0x4a16 015285 arg mem_usb_two_packet ,rega +0x4a17 015286 branch usb0_respond +: 015288 usb0_get_status_in_interface: +0x4a18 015289 fetch 1 ,mem_usb0_state +0x4a19 015290 bne dev_configured ,usb0_force_stall +0x4a1a 015291 arg 2 ,regb +0x4a1b 015292 branch usb_send_zero_packet +: 015294 usb0_get_status_in_endpoint: +0x4a1c 015295 fetch 1 ,mem_usb0_state +0x4a1d 015296 bne dev_configured ,usb0_force_stall +0x4a1e 015297 fetch 1 ,mem_usb_setup_windex +0x4a1f 015298 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +0x4a20 015299 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +0x4a21 015300 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +0x4a22 015301 and_into 0x7f ,pdata +0x4a23 015302 beq 0x00 ,usb0_get_status_in_ep_in_ep0 +0x4a24 015303 branch usb0_force_stall +: 015305 usb0_get_status_in_ep_in_ep0: +0x4a25 015306 fetch 1 ,mem_usb_ep0_stall_status +: 015307 usb0_get_status_in_ep_in_ack: +0x4a26 015308 arg 2 ,regb +0x4a27 015309 beq 1 ,usb_send_ones_packet +0x4a28 015310 branch usb_send_zero_packet +: 015311 usb0_get_status_in_ep_in_ep1: +0x4a29 015312 fetch 1 ,mem_usb_ep1_stall_status +0x4a2a 015313 branch usb0_get_status_in_ep_in_ack +: 015314 usb0_get_status_in_ep_in_ep2: +0x4a2b 015315 fetch 1 ,mem_usb_ep2_stall_status +0x4a2c 015316 branch usb0_get_status_in_ep_in_ack +: 015317 usb0_get_status_in_ep_in_ep3: +0x4a2d 015318 fetch 1 ,mem_usb_ep3_stall_status +0x4a2e 015319 branch usb0_get_status_in_ep_in_ack +: 015321 usb_get_idle: +0x4a2f 015322 jam 1 ,mem_usb_idle_flag +0x4a30 015323 arg mem_usb_idle_rate ,rega +0x4a31 015324 arg 1 ,regb +0x4a32 015325 branch usb0_respond +: 015327 usb_get_report: +0x4a33 015328 fetch 2 ,mem_usb_setup_bvalue +0x4a34 015329 arg pc_get_report ,temp +0x4a35 015330 isub temp ,null +0x4a36 015331 nbranch usb0_force_stall ,zero +0x4a37 015332 set0 mark_isstr ,mark +: 015333 usb_get_report_dispose: +0x4a38 015334 fetch 1 ,mem_usb0_data_ready_report +0x4a39 015335 nbranch usb_get_report_data_success ,blank +0x4a3a 015336 jam pc_get_nondata ,mem_usb0_get_report_data +: 015337 usb_get_report_send_data: +0x4a3b 015338 fetch 1 ,mem_usb_setup_blength +0x4a3c 015339 iforce regb +0x4a3d 015340 arg mem_usb0_get_report_data ,rega +0x4a3e 015341 call usb0_respond +: 015342 usb_get_report_data_release: +0x4a3f 015343 arg mem_usb0_get_report_data ,contw +0x4a40 015344 arg 8 ,loopcnt +0x4a41 015345 branch memset0 +: 015346 usb_get_report_data_success: +0x4a42 015347 jam 0 ,mem_usb0_data_ready_report +0x4a43 015348 jam pc_get_data ,mem_usb0_get_report_data +0x4a44 015349 branch usb_get_report_send_data +: 015351 usb_get_protocol_req: +0x4a45 015352 fetch 1 ,mem_usb_setup_blength +0x4a46 015353 bne 1 ,usb0_force_stall +0x4a47 015354 jam 1 ,mem_usb_get_protocol_flag +0x4a48 015355 arg 1 ,regb +0x4a49 015356 fetch 1 ,mem_usb_set_protocol_value +0x4a4a 015357 beq 0 ,usb_get_report_protocol +0x4a4b 015358 beq 1 ,usb_get_boot_protocol +0x4a4c 015359 branch usb_send_zero_packet +: 015360 usb_get_report_protocol: +0x4a4d 015361 branch usb_send_ones_packet +: 015362 usb_get_boot_protocol: +0x4a4e 015363 branch usb_send_zero_packet +: 015368 usb0_request_clear_feature: +0x4a4f 015369 fetch 1 ,mem_usb0_state +0x4a50 015370 bne dev_configured ,usb0_force_stall +0x4a51 015371 fetch 1 ,mem_usb_setup_blength +0x4a52 015372 bne 0 ,usb0_force_stall +0x4a53 015373 fetch 1 ,mem_usb_setup_blengthh +0x4a54 015374 bne 0 ,usb0_force_stall +0x4a55 015375 fetch 1 ,mem_usb_setup_bvalueh +0x4a56 015376 bne 0 ,usb0_force_stall +0x4a57 015377 fetch 1 ,mem_usb_setup_windex + 1 +0x4a58 015378 bne 0 ,usb0_force_stall +0x4a59 015379 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a5a 015380 beq out_device ,usb0_request_clear_feature_out_device +0x4a5b 015381 beq out_interface ,usb0_request_clear_feature_out_interface +0x4a5c 015382 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +0x4a5d 015383 branch usb0_force_stall +: 015385 usb0_request_clear_feature_out_device: +0x4a5e 015386 fetch 1 ,mem_usb_setup_bvalue +0x4a5f 015387 bne device_remote_wakeup ,usb0_force_stall +0x4a60 015388 hfetch 1 ,core_usb_config +0x4a61 015389 set0 7 ,pdata +0x4a62 015390 hstore 1 ,core_usb_config +0x4a63 015391 jam 0 ,mem_usb_remote_wakeup +0x4a64 015392 jam 1 ,mem_usb_clear_remote_wakeup +0x4a65 015393 branch usb0_reply_zerolen +: 015395 usb0_request_clear_feature_out_interface: +0x4a66 015396 branch usb0_force_stall +: 015398 usb0_request_clear_feature_out_endpoint: +0x4a67 015399 fetch 1 ,mem_usb_setup_bvalue +0x4a68 015400 bne endpoint_halt ,usb0_force_stall +0x4a69 015401 fetch 1 ,mem_usb_setup_windex +0x4a6a 015402 beq in_ep1 ,usb0_force_stall_ep1_in_off +0x4a6b 015403 beq in_ep2 ,usb0_force_stall_ep2_in_off +0x4a6c 015404 beq in_ep3 ,usb0_force_stall_ep3_in_off +0x4a6d 015405 and_into 0x7f ,pdata +0x4a6e 015406 beq 0x00 ,usb0_force_stall_ep0_in_off +0x4a6f 015407 branch usb0_force_stall +: 015409 usb0_force_stall_ep0_in_off: +0x4a70 015410 jam 0 ,mem_usb_ep0_stall_status +0x4a71 015411 branch usb0_reply_zerolen +: 015412 usb0_force_stall_ep1_in_off: +0x4a72 015413 jam 0 ,mem_usb_ep1_stall_status +: 015414 usb0_force_stall_ep1_in_off_reply: +0x4a73 015415 jam 1 ,mem_usb_clear_halt +0x4a74 015416 branch usb0_reply_zerolen +: 015417 usb0_force_stall_ep2_in_off: +0x4a75 015418 jam 0 ,mem_usb_ep2_stall_status +0x4a76 015419 branch usb0_force_stall_ep1_in_off_reply +: 015420 usb0_force_stall_ep3_in_off: +0x4a77 015421 jam 0 ,mem_usb_ep3_stall_status +0x4a78 015422 branch usb0_force_stall_ep1_in_off_reply +: 015425 usb0_request_set_feature: +0x4a79 015426 fetch 1 ,mem_usb_setup_blength +0x4a7a 015427 bne 0 ,usb0_force_stall +0x4a7b 015428 fetch 1 ,mem_usb_setup_blengthh +0x4a7c 015429 bne 0 ,usb0_force_stall +0x4a7d 015430 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a7e 015431 beq out_device ,usb0_request_set_feature_out_device +0x4a7f 015432 beq out_interface ,usb0_request_set_feature_out_interface +0x4a80 015433 beq out_endpoint ,usb0_request_set_feature_out_endpoint +0x4a81 015434 branch usb0_force_stall +: 015436 usb0_request_set_feature_out_device: +0x4a82 015437 fetch 1 ,mem_usb_setup_bvalue +0x4a83 015438 bne device_remote_wakeup ,usb0_force_stall +0x4a84 015439 hfetch 1 ,core_usb_config +0x4a85 015440 set1 7 ,pdata +0x4a86 015441 hstore 1 ,core_usb_config +0x4a87 015442 jam 1 ,mem_usb_remote_wakeup +0x4a88 015443 jam usb_sleep ,mem_usb_state +0x4a89 015444 jam 0 ,mem_usb_tx_win_enable +0x4a8a 015445 call usb0_reply_zerolen +: 015446 usb_wakeup_timer_reinit: +0x4a8b 015447 call timer_reinit +0x4a8c 015448 setarg timer_wakeup_delay +0x4a8d 015449 arg timer_wakeup ,queue +0x4a8e 015450 branch timer_init +: 015452 usb0_request_set_feature_out_interface: +0x4a8f 015453 branch usb0_force_stall +: 015455 usb0_request_set_feature_out_endpoint: +0x4a90 015456 fetch 1 ,mem_usb_setup_bvalue +0x4a91 015457 bne endpoint_halt ,usb0_force_stall +0x4a92 015458 fetch 1 ,mem_usb_setup_bvalueh +0x4a93 015459 bne 0 ,usb0_force_stall +0x4a94 015460 fetch 1 ,mem_usb_setup_windex +0x4a95 015461 beq in_ep1 ,usb0_force_stall_ep1_in_on +0x4a96 015462 beq in_ep2 ,usb0_force_stall_ep2_in_on +0x4a97 015463 beq in_ep3 ,usb0_force_stall_ep3_in_on +0x4a98 015464 and_into 0x7f ,pdata +0x4a99 015465 beq 0x00 ,usb0_force_stall_ep0_in_on +0x4a9a 015466 branch usb0_force_stall +: 015468 usb0_force_stall_ep0_in_on: +0x4a9b 015469 jam 1 ,mem_usb_ep0_stall_status +0x4a9c 015470 branch usb0_reply_zerolen +: 015471 usb0_force_stall_ep1_in_on: +0x4a9d 015472 jam 1 ,mem_usb_ep1_stall_status +0x4a9e 015473 branch usb0_reply_zerolen +: 015474 usb0_force_stall_ep2_in_on: +0x4a9f 015475 jam 1 ,mem_usb_ep2_stall_status +0x4aa0 015476 branch usb0_reply_zerolen +: 015477 usb0_force_stall_ep3_in_on: +0x4aa1 015478 jam 1 ,mem_usb_ep3_stall_status +0x4aa2 015479 branch usb0_reply_zerolen +: 015482 usb0_request_set_address: +0x4aa3 015483 fetch 1 ,mem_usb_setup_bmrequesttype +0x4aa4 015484 bne out_device ,usb0_force_stall +0x4aa5 015485 fetch 1 ,mem_usb_setup_windex +0x4aa6 015486 bne 0 ,usb0_force_stall +0x4aa7 015487 fetch 1 ,mem_usb_setup_windex + 1 +0x4aa8 015488 bne 0 ,usb0_force_stall +0x4aa9 015489 fetch 1 ,mem_usb_setup_blength +0x4aaa 015490 bne 0 ,usb0_force_stall +0x4aab 015491 fetch 1 ,mem_usb_setup_blengthh +0x4aac 015492 bne 0 ,usb0_force_stall +0x4aad 015493 fetch 1 ,mem_usb_setup_bvalueh +0x4aae 015494 bne 0 ,usb0_force_stall +0x4aaf 015495 fetch 1 ,mem_usb_setup_bvalue +0x4ab0 015496 and_into 0x80 ,pdata +0x4ab1 015497 bne 0 ,usb0_force_stall +0x4ab2 015498 fetch 1 ,mem_usb_setup_bvalue +0x4ab3 015499 bne 0 ,usb_usb0_state_set_dev_addr +: 015500 usb_usb0_state_set_dev_default: +0x4ab4 015501 jam dev_default ,mem_usb0_state +: 015502 usb0_request_set_wait_address: +0x4ab5 015503 fetch 1 ,mem_usb_setup_bvalue +0x4ab6 015504 hstore 1 ,core_usb_addr +0x4ab7 015505 call usb0_reply_zerolen +0x4ab8 015506 jam 1 ,mem_usb_set_high_addr_flag +0x4ab9 015507 rtn +: 015508 usb_usb0_state_set_dev_addr: +0x4aba 015509 jam dev_address ,mem_usb0_state +0x4abb 015510 branch usb0_request_set_wait_address +: 015513 usb0_request_set_configuration: +0x4abc 015514 fetch 1 ,mem_usb0_state +0x4abd 015515 beq dev_default ,usb0_force_stall +0x4abe 015516 fetch 1 ,mem_usb_setup_bmrequesttype +0x4abf 015517 bne out_device ,usb0_force_stall +0x4ac0 015518 fetch 1 ,mem_usb_setup_windex +0x4ac1 015519 bne 0 ,usb0_force_stall +0x4ac2 015520 fetch 1 ,mem_usb_setup_windex + 1 +0x4ac3 015521 bne 0 ,usb0_force_stall +0x4ac4 015522 fetch 1 ,mem_usb_setup_blength +0x4ac5 015523 bne 0 ,usb0_force_stall +0x4ac6 015524 fetch 1 ,mem_usb_setup_blengthh +0x4ac7 015525 bne 0 ,usb0_force_stall +0x4ac8 015526 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4ac9 015527 bne 0 ,usb0_force_stall +0x4aca 015528 fetch 1 ,mem_usb_setup_bvalue +0x4acb 015529 sub pdata ,usb_max_num_cfg ,null +0x4acc 015530 nbranch usb0_force_stall ,positive +0x4acd 015531 fetch 1 ,mem_usb0_state +0x4ace 015532 beq dev_address ,usb0_request_set_cfg_addr_state +0x4acf 015533 beq dev_configured ,usb0_request_set_cfg_cfg_state +0x4ad0 015534 branch usb0_force_stall +: 015536 usb0_request_set_cfg_addr_state: +: 015537 usb0_request_set_cfg_cfg_state: +0x4ad1 015538 fetch 1 ,mem_usb_setup_bvalue +0x4ad2 015539 beq 0 ,usb0_request_set_cfg_stay_addr_state +0x4ad3 015540 jam dev_configured ,mem_usb0_state +0x4ad4 015541 branch usb0_reply_zerolen +: 015542 usb0_request_set_cfg_stay_addr_state: +0x4ad5 015543 jam dev_address ,mem_usb0_state +0x4ad6 015544 branch usb0_reply_zerolen +: 015547 usb0_request_set_interface: +0x4ad7 015548 fetch 1 ,mem_usb0_state +0x4ad8 015549 bne dev_configured ,usb0_force_stall +0x4ad9 015550 fetch 1 ,mem_usb_setup_bmrequesttype +0x4ada 015551 bne out_interface ,usb0_force_stall +0x4adb 015552 fetch 1 ,mem_usb_setup_bvalue +0x4adc 015553 bne 0 ,usb0_force_stall +0x4add 015554 fetch 1 ,mem_usb_setup_bvalueh +0x4ade 015555 bne 0 ,usb0_force_stall +0x4adf 015556 fetch 1 ,mem_usb_setup_blength +0x4ae0 015557 bne 0 ,usb0_force_stall +0x4ae1 015558 fetch 1 ,mem_usb_setup_blengthh +0x4ae2 015559 bne 0 ,usb0_force_stall +0x4ae3 015560 fetch 1 ,mem_usb_setup_windex +0x4ae4 015561 bne 0 ,usb0_force_stall +0x4ae5 015562 fetch 1 ,mem_usb_setup_windex + 1 +0x4ae6 015563 bne 0 ,usb0_force_stall +0x4ae7 015564 branch usb0_reply_zerolen +: 015567 usb_set_idle: +0x4ae8 015568 jam 1 ,mem_usb_idle_flag +0x4ae9 015569 fetch 1 ,mem_usb_setup_bvalueh +0x4aea 015570 store 1 ,mem_usb_idle_rate +0x4aeb 015571 fetch 1 ,mem_usb_setup_windex +0x4aec 015572 sub pdata ,1 ,null +0x4aed 015573 call usb_clear_remote_wakeup_set0 ,zero +0x4aee 015574 fetch 1 ,mem_usb_state +0x4aef 015575 bne usb_resume ,usb0_reply_zerolen +0x4af0 015576 jam usb_connected ,mem_usb_state +0x4af1 015577 call usb0_reply_zerolen +0x4af2 015578 nop 30000 +0x4af3 015579 nop 30000 +0x4af4 015580 rtn +: 015581 usb_clear_remote_wakeup_set0: +0x4af5 015582 jam 1 ,mem_usb_device_enumeration_endflag +0x4af6 015583 jam 0 ,mem_usb_clear_remote_wakeup +0x4af7 015584 jam usb_resume ,mem_usb_state +0x4af8 015585 rtn +: 015588 usb_set_report: +0x4af9 015589 jam 1 ,mem_usb0_get_set_report +0x4afa 015590 call usb_set_report_resume_judge +0x4afb 015591 fetch 2 ,mem_usb_setup_bvalue +0x4afc 015592 store 2 ,mem_usb_setup_bvalue_temp +0x4afd 015593 fetch 1 ,mem_usb_setup_blength +0x4afe 015594 iforce loopcnt +0x4aff 015595 arg mem_usb0_setup ,contr +0x4b00 015596 arg mem_usb0_set_report_data ,contw +0x4b01 015597 call memcpy +0x4b02 015598 branch usb0_reply_zerolen +: 015600 usb_set_report_resume_judge: +0x4b03 015601 fetch 2 ,mem_usb_setup_bvalue +0x4b04 015602 arg pc_set_report_bvalue ,temp +0x4b05 015603 isub temp ,null +0x4b06 015604 nrtn zero +0x4b07 015605 fetch 2 ,mem_usb_setup_windex +0x4b08 015606 arg pc_set_report_windex ,temp +0x4b09 015607 isub temp ,null +0x4b0a 015608 nrtn zero +0x4b0b 015609 fetch 2 ,mem_usb_setup_blength +0x4b0c 015610 arg pc_set_report_blength ,temp +0x4b0d 015611 isub temp ,null +0x4b0e 015612 nrtn zero +0x4b0f 015613 jam 1 ,mem_usb_tx_win_enable +0x4b10 015614 rtn +: 015617 usb_set_protocol_req: +0x4b11 015618 fetch 1 ,mem_usb_setup_blength +0x4b12 015619 bne 0 ,usb0_force_stall +0x4b13 015620 fetch 1 ,mem_usb_setup_bvalue +0x4b14 015621 beq boot_protocol ,usb_set_boot_protocol +0x4b15 015622 beq report_protocol ,usb_set_report_protocol +0x4b16 015623 branch usb0_force_stall +: 015624 usb_set_boot_protocol: +0x4b17 015625 jam 0 ,mem_usb_set_protocol_status +0x4b18 015626 jam 1 ,mem_usb_set_protocol_value +0x4b19 015627 branch usb0_reply_zerolen +: 015628 usb_set_report_protocol: +0x4b1a 015629 jam 1 ,mem_usb_tx_mac_enable +0x4b1b 015630 jam 1 ,mem_usb_set_protocol_status +0x4b1c 015631 jam 0 ,mem_usb_set_protocol_value +0x4b1d 015632 branch usb0_reply_zerolen +: 015635 usb0_respond_length: +0x4b1e 015636 ifetch 1 ,rega +0x4b1f 015637 iforce regb +0x4b20 015638 increase 1 ,rega +: 015640 usb0_respond: +0x4b21 015641 bpatch patch1f_2 ,mem_patch1f +0x4b22 015642 bmark0 mark_isstr ,usb0_respond0 +0x4b23 015643 add regb ,1 ,pdata +0x4b24 015644 lshift pdata ,pdata +0x4b25 015645 hstore 1 ,core_usb_dfifo0 +0x4b26 015646 hjam 3 ,core_usb_dfifo0 +0x4b27 015647 fetch 1 ,mem_usb_setup_blength +0x4b28 015648 increase -2 ,pdata +0x4b29 015649 rshift pdata ,pdata +0x4b2a 015650 store 1 ,mem_usb_setup_blength +0x4b2b 015651 beq 0 ,usb_no_respond_data +: 015652 usb0_respond0: +0x4b2c 015653 fetch 2 ,mem_usb_setup_blength +0x4b2d 015654 isub regb ,null +0x4b2e 015655 branch usb0_respond1 ,positive +0x4b2f 015656 copy pdata ,regb +: 015657 usb0_respond1: +0x4b30 015658 deposit rega +0x4b31 015659 store 2 ,mem_bufptr +0x4b32 015660 deposit regb +0x4b33 015661 store 1 ,mem_remain +0x4b34 015662 branch usb0_tx +: 015664 usb_no_respond_data: +0x4b35 015665 arg 0 ,queue +0x4b36 015666 branch usb_trig +: 015669 usb0_tx: +0x4b37 015670 bpatch patch1f_3 ,mem_patch1f +0x4b38 015671 fetch 1 ,mem_remain +0x4b39 015672 rtn blank +0x4b3a 015673 copy pdata ,loopcnt +0x4b3b 015674 sub pdata ,ep0_packet_size ,null +0x4b3c 015675 branch usb0_tx_info ,positive +0x4b3d 015676 arg ep0_packet_size ,loopcnt +: 015677 usb0_tx_info: +0x4b3e 015678 fetch 1 ,mem_remain +0x4b3f 015679 isub loopcnt ,pdata +0x4b40 015680 store 1 ,mem_remain +0x4b41 015681 fetch 2 ,mem_bufptr +0x4b42 015682 copy pdata ,contr +: 015683 usb0_tx0: +0x4b43 015684 ifetch 1 ,contr +0x4b44 015685 hstore 1 ,core_usb_dfifo0 +0x4b45 015686 bmark0 mark_isstr ,usb0_tx1 +0x4b46 015687 hjam 0 ,core_usb_dfifo0 +: 015688 usb0_tx1: +0x4b47 015689 loop usb0_tx0 +0x4b48 015690 copy contr ,pdata +0x4b49 015691 store 2 ,mem_bufptr +0x4b4a 015692 arg 0 ,queue +0x4b4b 015693 call usb_trig +0x4b4c 015694 fetch 1 ,mem_remain +0x4b4d 015695 nrtn blank +0x4b4e 015696 fetch 1 ,mem_usb_state +0x4b4f 015697 rtnne usb_got_report_req +0x4b50 015698 jam usb_connected ,mem_usb_state +0x4b51 015699 rtn +: 015702 usb_tx_ep1: +0x4b52 015703 arg core_usb_dfifo1 ,rega +0x4b53 015704 arg 1 ,queue +: 015705 usb_tx_loop: +0x4b54 015706 ifetch 1 ,contr +0x4b55 015707 istore 1 ,rega +0x4b56 015708 loop usb_tx_loop +: 015709 usb_trig: +0x4b57 015710 setarg 0 +0x4b58 015711 qset1 pdata +0x4b59 015712 hstore 1 ,core_usb_trig +0x4b5a 015713 fetcht 1 ,mem_usb_tx_wait +0x4b5b 015714 ior temp ,pdata +0x4b5c 015715 store 1 ,mem_usb_tx_wait +0x4b5d 015716 rtn +: 015718 usb_tx_ep2: +0x4b5e 015719 arg 2 ,queue +0x4b5f 015720 arg core_usb_dfifo2 ,rega +0x4b60 015721 branch usb_tx_loop +: 015723 usb_tx: +0x4b61 015724 bpatch patch1f_4 ,mem_patch1f +0x4b62 015725 fetch 1 ,mem_usb_tx_enable +0x4b63 015726 rtn blank +0x4b64 015727 fetch 1 ,mem_usb_tx_wait +0x4b65 015728 nbranch usb_inwake_state_tx_dispose ,blank +0x4b66 015729 fetch 1 ,mem_usb_device_enumeration_endflag +0x4b67 015730 branch usb_tx_fifo_release ,blank +0x4b68 015731 fetch 1 ,mem_usb_state +0x4b69 015732 beq usb_sleep ,usb_windows_wakeup +0x4b6a 015733 bne usb_connected ,usb_tx_fifo_release +0x4b6b 015734 fetch 1 ,mem_usb_clear_remote_wakeup +0x4b6c 015735 nbranch usb_tx_fifo_release ,blank +0x4b6d 015736 call usb_tx_data_ep1 +0x4b6e 015737 branch usb_tx_data_ep2 +: 015739 usb_tx_data_ep1: +0x4b6f 015740 fetch 1 ,mem_usb_tx_enable +0x4b70 015741 rtnbit0 1 +0x4b71 015742 fetch 1 ,mem_usb_tx_wait +0x4b72 015743 rtnbit1 1 +0x4b73 015744 fetch 1 ,mem_usb_tx_enable +0x4b74 015745 set0 1 ,pdata +0x4b75 015746 store 1 ,mem_usb_tx_enable +0x4b76 015747 fetch 1 ,mem_usb_ep1_data +0x4b77 015748 rtn blank +0x4b78 015749 beq usb_ep1_kb ,usb_tx_kb_normal_data +0x4b79 015750 branch assert +: 015752 usb_tx_data_ep2: +0x4b7a 015753 fetch 1 ,mem_usb_tx_enable +0x4b7b 015754 rtnbit0 2 +0x4b7c 015755 fetch 1 ,mem_usb_tx_wait +0x4b7d 015756 rtnbit1 2 +0x4b7e 015757 fetch 1 ,mem_usb_tx_enable +0x4b7f 015758 set0 2 ,pdata +0x4b80 015759 store 1 ,mem_usb_tx_enable +0x4b81 015760 fetch 1 ,mem_usb_ep2_data +0x4b82 015761 rtn blank +0x4b83 015762 beq usb_ep2_ms ,usb_tx_ms_data +0x4b84 015763 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +0x4b85 015764 branch assert +: 015766 usb_tx_fifo_release: +0x4b86 015768 arg mem_usb_mouse_data ,contw +0x4b87 015769 arg 6 ,loopcnt +0x4b88 015770 branch memset0 +: 015772 usb_tx_ms_data: +0x4b89 015773 fetch 1 ,mem_usb_idle_flag +0x4b8a 015774 fetcht 1 ,mem_usb_get_protocol_flag +0x4b8b 015775 iand temp ,pdata +0x4b8c 015776 branch usb_tx_ms_data_normal_mode ,blank +0x4b8d 015777 fetcht 1 ,mem_usb_set_protocol_status +0x4b8e 015778 iadd temp ,pdata +0x4b8f 015779 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +0x4b90 015780 branch usb_tx_ms_data_normal_mode +: 015782 usb_tx_ms_data_mac_boot_mode: +0x4b91 015783 jam 0 ,mem_usb_ep2_data +: 015784 usb_tx_ms_data_mac_boot_regroup: +0x4b92 015785 fetch 1 ,mem_usb_mouse_data + 1 +0x4b93 015786 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b94 015787 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b95 015788 fetch 1 ,mem_usb_mouse_data + 1 +0x4b96 015789 store 1 ,mem_usb_mouse_data +0x4b97 015790 fetch 1 ,mem_usb_mouse_data + 2 +0x4b98 015791 istore 1 ,contw +0x4b99 015792 fetch 1 ,mem_usb_mouse_data + 4 +0x4b9a 015793 istore 1 ,contw +0x4b9b 015794 fetch 1 ,mem_usb_mouse_data + 6 +0x4b9c 015795 istore 1 ,contw +0x4b9d 015796 arg 4 ,loopcnt +0x4b9e 015797 arg mem_usb_mouse_data ,contr +0x4b9f 015798 branch usb_tx_ep2 +: 015800 usb_tx_ms_data_normal_mode: +0x4ba0 015801 jam 0 ,mem_usb_ep2_data +: 015802 usb_tx_mac_boot_ms_regroup_r_or_lrkey: +0x4ba1 015803 arg 8 ,loopcnt +0x4ba2 015804 arg mem_usb_mouse_data ,contr +0x4ba3 015805 branch usb_tx_ep2 +: 015807 usb_tx_kb_multikey_data: +0x4ba4 015808 jam 0 ,mem_usb_ep2_data +0x4ba5 015809 arg 3 ,loopcnt +0x4ba6 015810 arg mem_usb_kb_multikey ,contr +0x4ba7 015811 branch usb_tx_ep2 +: 015813 usb_tx_kb_normal_data: +0x4ba8 015814 jam 0 ,mem_usb_ep1_data +0x4ba9 015815 arg 8 ,loopcnt +0x4baa 015816 arg mem_usb_kb_data ,contr +0x4bab 015817 branch usb_tx_ep1 +: 015819 usb_inwake_state_tx_dispose: +0x4bac 015820 fetch 1 ,mem_usb_state +0x4bad 015821 beq usb_sleep ,usb_clear_tx_wait +0x4bae 015822 beq usb_connected ,usb_mac_wakeup_trig +0x4baf 015823 rtn +: 015824 usb_clear_tx_wait: +0x4bb0 015825 jam 0 ,mem_usb_tx_wait +0x4bb1 015826 rtn +: 015827 usb_mac_wakeup_trig: +0x4bb2 015828 hfetch 1 ,core_usb_config +0x4bb3 015829 set1 7 ,pdata +0x4bb4 015830 hstore 1 ,core_usb_config +0x4bb5 015831 jam 1 ,mem_usb_mac_wakeup_trig +0x4bb6 015832 rtn +: 015834 usb_mac_wakeup_judge: +0x4bb7 015835 fetch 1 ,mem_usb_state +0x4bb8 015836 rtneq usb_sleep +0x4bb9 015837 beq usb_connected ,usb_mac_wakeup +0x4bba 015838 rtn +: 015839 usb_mac_wakeup: +0x4bbb 015840 fetch 1 ,mem_usb_mac_wakeup_trig +0x4bbc 015841 rtn blank +0x4bbd 015842 jam 1 ,mem_usb_wakestate_onetime_flag +0x4bbe 015843 branch usb_wakeup +: 015845 usb_windows_wakeup: +0x4bbf 015846 arg timer_wakeup ,queue +0x4bc0 015847 call timer_check +0x4bc1 015848 nrtn blank +: 015849 usb_wakeup: +0x4bc2 015850 hfetch 1 ,core_usb_config +0x4bc3 015851 rtnbit0 7 +0x4bc4 015852 hjam 0xfc ,core_usb_config +0x4bc5 015853 nop 30000 +0x4bc6 015854 hjam 0x3c ,core_usb_config +0x4bc7 015855 rtn +: 015862 hci_rx_h4: +0x4bc8 015863 bpatch patch1f_5 ,mem_patch1f +0x4bc9 015864 fetch 1 ,mem_hci_cmd +0x4bca 015865 nrtn blank +: 015866 hci_rx_h4_1: +0x4bcb 015867 call hci_h4_parse_packet +0x4bcc 015868 ncall h4_rx_discard_packet ,user +0x4bcd 015869 rtn +: 015871 hci_h4_parse_packet: +0x4bce 015872 bpatch patch1f_6 ,mem_patch1f +0x4bcf 015873 copy contru ,rega +0x4bd0 015874 arg 4 ,temp +0x4bd1 015875 ifetch 1 ,contru +0x4bd2 015876 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len +0x4bd3 015877 increase 1 ,temp +0x4bd4 015878 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len +0x4bd5 015879 copy contru ,pdata +0x4bd6 015880 hstore 2 ,core_uart_rrptr +0x4bd7 015881 rtn +: 015882 hci_h4_parse_packet_wait_len: +0x4bd8 015883 hfetch 2 ,core_uart_rxitems +0x4bd9 015884 isub temp ,null +0x4bda 015885 nbranch hci_h4_parse_packet_wait_len ,positive +0x4bdb 015887 disable user +0x4bdc 015888 copy rega ,contru +0x4bdd 015889 call h4_get_rx_payload_len +0x4bde 015890 iadd temp ,temp +: 015891 hci_h4_parse_packet_wait: +0x4bdf 015892 hfetch 2 ,core_uart_rxitems +0x4be0 015893 isub temp ,null +0x4be1 015894 nbranch hci_h4_parse_packet_wait ,positive +0x4be2 015895 copy rega ,contru +0x4be3 015896 ifetch 1 ,contru +0x4be4 015897 beq hci_h4_type_cmd ,process_hci_cmd +0x4be5 015898 branch assert +: 015900 h4_rx_discard_packet: +0x4be6 015901 bpatch patch1f_7 ,mem_patch1f +0x4be7 015902 hfetch 2 ,core_uart_rrptr +0x4be8 015903 iforce contru +0x4be9 015904 call h4_get_rx_payload_len +0x4bea 015905 iadd contru ,contru +0x4beb 015906 deposit contru +0x4bec 015907 hstore 2 ,core_uart_rrptr +0x4bed 015908 rtn +: 015913 h4_get_rx_payload_len: +0x4bee 015914 ifetch 1 ,contru +0x4bef 015915 increase 2 ,contru +0x4bf0 015916 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl +0x4bf1 015917 ifetch 1 ,contru +0x4bf2 015918 rtn +: 015919 h4_get_rx_payload_len_acl: +0x4bf3 015920 ifetch 2 ,contru +0x4bf4 015921 rtn +: 015923 h4_get_tx_ptr: +0x4bf5 015924 hfetch 2 ,core_uart_twptr +0x4bf6 015925 increase -5 ,contwu +0x4bf7 015926 iadd contwu ,contwu +0x4bf8 015927 rtn +: 015929 h4_send_packet_event: +0x4bf9 015930 arg hci_h4_type_event ,temp +0x4bfa 015931 branch h4_send_packet +: 015932 h4_send_packet_acl: +0x4bfb 015933 arg hci_h4_type_acl ,temp +: 015934 h4_send_packet: +0x4bfc 015935 bpatchx patch20_0 ,mem_patch20 +0x4bfd 015936 increase 1 ,loopcnt +0x4bfe 015937 hfetch 2 ,core_uart_twptr +0x4bff 015938 copy pdata ,contwu +0x4c00 015939 copy loopcnt ,pdata +0x4c01 015940 istoret 1 ,contwu +0x4c02 015941 increase -1 ,pdata +0x4c03 015942 iadd contwu ,contwu +0x4c04 015943 copy contwu ,pdata +0x4c05 015944 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c06 015945 copy temp ,pdata +0x4c07 015946 rtneq hci_h4_type_acl +0x4c08 015947 fetch 2 ,mem_hci_acl_tx_trigger_wptr +0x4c09 015948 hstore 2 ,core_uart_twptr +0x4c0a 015949 branch h4_send_acl_trigger_clear +: 015952 h4_send_acl_trigger_clear: +0x4c0b 015953 setarg 0 +0x4c0c 015954 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c0d 015955 rtn +: 015962 hci_init: +0x4c0e 015963 rtn wake +0x4c0f 015964 setarg hci_idle_dispatch +0x4c10 015965 store 2 ,mem_cb_idle_process +0x4c11 015967 setarg uart_baud_115200 +0x4c12 015968 store uart_baud_len ,mem_baud +: 015969 hci_lpm_init: +0x4c13 015970 setarg mem_h5rx_buf +0x4c14 015971 hstore 2 ,core_uart_rsaddr +0x4c15 015972 setarg mem_h5rx_buf_end +0x4c16 015973 hstore 2 ,core_uart_readdr +0x4c17 015974 setarg mem_h5tx_buf +0x4c18 015975 hstore 2 ,core_uart_tsaddr +0x4c19 015976 call hci_sel_init +: 015977 hci_reinit: +0x4c1a 015978 hjam 0x0 ,core_uart_ctrl +0x4c1b 015979 setarg mem_h5tx_buf +0x4c1c 015980 hstore 2 ,core_uart_twptr +0x4c1d 015981 hstore 2 ,core_uart_trptrp +0x4c1e 015982 setarg mem_h5rx_buf +0x4c1f 015983 hstore 2 ,core_uart_rrptr +0x4c20 015984 store 2 ,mem_h5rx_rptr +: 015985 hci_init_common: +0x4c21 015986 hfetch 2 ,core_clkoff +0x4c22 015987 set0 clock_off_uart ,pdata +0x4c23 015988 hstore 2 ,core_clkoff +0x4c24 015989 call uart_set_baud_by_mem +0x4c25 015990 hjam uartclk_dpll ,core_uart_clksel +0x4c26 015991 hjam uart_ctrl_h4 ,core_uart_ctrl +0x4c27 015992 rtn +: 015994 hci_sel_init: +0x4c28 015995 setarg mem_h5tx_buf_end +0x4c29 015996 hstore 2 ,core_uart_teaddr +0x4c2a 015997 hfetch 1 ,core_gpio_sel1 +0x4c2b 015998 or_into 0x07 ,pdata +0x4c2c 015999 hstore 1 ,core_gpio_sel1 +0x4c2d 016000 rtn +: 016003 hci_rx_packet: +0x4c2e 016004 bpatchx patch20_1 ,mem_patch20 +0x4c2f 016005 hfetch 1 ,core_uart_status +0x4c30 016006 iforce regb +0x4c31 016007 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont +0x4c32 016008 hfetch 2 ,core_uart_rxitems +0x4c33 016009 iforce regc +0x4c34 016010 arg 0x44f ,temp +0x4c35 016011 isub temp ,null +0x4c36 016012 nrtn zero +: 016013 hci_rx_packet_cont: +0x4c37 016014 hfetch 2 ,core_uart_rrptr +0x4c38 016015 iforce contru +0x4c39 016016 branch hci_rx_h4 +: 016018 uart_send_byte: +0x4c3a 016019 hfetcht 1 ,core_uart_status +0x4c3b 016020 isolate1 6 ,temp +0x4c3c 016021 branch uart_send_byte ,true +0x4c3d 016022 hstore 1 ,core_uart_txd +0x4c3e 016023 rtn +: 016025 process_hci_cmd: +0x4c3f 016026 bpatchx patch20_2 ,mem_patch20 +0x4c40 016027 fetch 1 ,mem_hci_cmd +0x4c41 016028 branch process_hci_cmd_cont ,blank +0x4c42 016029 enable user +0x4c43 016030 rtn +: 016031 process_hci_cmd_cont: +0x4c44 016032 ifetch 2 ,contru +0x4c45 016033 iforce alarm +0x4c46 016034 iforce queue +0x4c47 016035 ifetch 1 ,contru +0x4c48 016036 iforce temp +0x4c49 016037 rshift2 alarm ,pdata +0x4c4a 016038 rshift8 pdata ,pdata +0x4c4b 016039 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific +0x4c4c 016040 rtn +: 016043 phci_grp_vendor_specific: +0x4c4d 016044 bpatchx patch20_3 ,mem_patch20 +0x4c4e 016045 deposit queue +0x4c4f 016046 beq hci_vendor_cmd_reset ,hci_normal_reply +0x4c50 016047 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +0x4c51 016048 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +0x4c52 016049 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +0x4c53 016050 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +0x4c54 016051 beq hci_vendor_cmd_echo ,hci_normal_reply +0x4c55 016052 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr +0x4c56 016053 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm +0x4c57 016055 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +0x4c58 016056 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep +0x4c59 016057 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init +0x4c5a 016058 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec +0x4c5b 016059 branch hci_normal_reply +: 016061 phci_grp_vendor_enter_lpm: +0x4c5c 016062 call hci_normal_reply +0x4c5d 016063 call wait_uarttx +0x4c5e 016064 call gpio_pu_uart_tx +: 016065 hci_enter_lpm: +0x4c5f 016066 call app_put_lpm_wake_lock +0x4c60 016067 call app_l2cap_flow_control_enable +0x4c61 016068 branch gpio_rx_config_input_with_pu +: 016070 hci_exit_lpm: +0x4c62 016071 jam hci_rx_ready ,mem_hci_lt_rx_state +0x4c63 016072 call app_get_lpm_wake_lock +0x4c64 016073 call hci_lpm_init +0x4c65 016074 branch app_l2cap_flow_control_disable +: 016076 phci_grp_vendor_chipid: +0x4c66 016077 call hci_get_cmd_complete_ptr +0x4c67 016078 hfetch 2 ,core_chipid +0x4c68 016079 istore 2 ,contwu +0x4c69 016080 force 6 ,loopcnt +0x4c6a 016081 branch hci_command_complete +: 016083 phci_grp_vendor_baud: +0x4c6b 016084 ifetch 2 ,contru +0x4c6c 016085 store 2 ,mem_baud +0x4c6d 016086 hstore 2 ,core_uart_baud +0x4c6e 016087 rtn +: 016090 phci_grp_vendor_patch_common: +0x4c6f 016092 ifetch 1 ,contru +0x4c70 016093 copy pdata ,temp +0x4c71 016094 hstore 1 ,core_ucode_low +0x4c72 016095 ifetch 1 ,contru +0x4c73 016096 iadd temp ,temp +0x4c74 016097 set1 7 ,pdata +0x4c75 016098 hstore 1 ,core_ucode_ctrl +0x4c76 016099 ifetch 1 ,contru +0x4c77 016100 iadd temp ,temp +0x4c78 016101 copy pdata ,loopcnt +0x4c79 016102 rtn +: 016104 phci_grp_vendor_patch: +0x4c7a 016105 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c7b 016106 call phci_grp_vendor_patch_common +: 016107 phci_grp_vendor_patch_loop: +0x4c7c 016108 ifetch 1 ,contru +0x4c7d 016109 hstore 1 ,core_ucode_data +0x4c7e 016110 iadd temp ,temp +0x4c7f 016111 loop phci_grp_vendor_patch_loop +: 016112 phci_grp_vendor_patch_check_sum: +0x4c80 016113 and temp ,0xff ,temp +0x4c81 016114 ifetch 1 ,contru +0x4c82 016115 isub temp ,null +0x4c83 016116 nbranch phci_grp_vendor_patch_bad ,zero +0x4c84 016117 branch hci_normal_reply +: 016120 phci_grp_vendor_patch_sec: +0x4c85 016121 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c86 016122 call phci_grp_vendor_patch_common +0x4c87 016123 store 8 ,mem_pdatatemp +: 016124 phci_grp_vendor_patch_sec_loop: +0x4c88 016125 call do_aes_cbc +0x4c89 016126 arg 16 ,loopcnt +0x4c8a 016127 arg mem_temp_block0 ,contw +0x4c8b 016128 call load_uart_sum_loop +0x4c8c 016129 storet 8 ,mem_temp +0x4c8d 016130 arg mem_temp_block2 ,contw +0x4c8e 016131 call store_aes_result +0x4c8f 016132 arg mem_temp_block2 ,rega +0x4c90 016133 arg mem_temp_block0 ,regb +0x4c91 016134 arg mem_temp_block3 ,contw +0x4c92 016135 call xor16 +0x4c93 016136 arg 16 ,loopcnt +0x4c94 016137 arg mem_temp_block3 ,contr +0x4c95 016138 call load_ucode_only_loop +0x4c96 016139 fetcht 8 ,mem_temp +0x4c97 016140 fetch 8 ,mem_pdatatemp +0x4c98 016141 increase -16 ,pdata +0x4c99 016142 store 8 ,mem_pdatatemp +0x4c9a 016143 nbranch phci_grp_vendor_patch_sec_loop ,blank +0x4c9b 016144 branch phci_grp_vendor_patch_check_sum +: 016146 load_ucode_only_loop: +0x4c9c 016147 ifetch 1 ,contr +0x4c9d 016148 hstore 1 ,core_ucode_data +0x4c9e 016149 loop load_ucode_only_loop +0x4c9f 016150 rtn +: 016152 load_uart_sum_loop: +0x4ca0 016153 ifetch 1 ,contru +0x4ca1 016154 istore 1 ,contw +0x4ca2 016155 iadd temp ,temp +0x4ca3 016156 loop load_uart_sum_loop +0x4ca4 016157 rtn +: 016159 phci_grp_vendor_patch_sec_init: +0x4ca5 016160 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4ca6 016161 arg 0 ,temp +0x4ca7 016162 arg 16 ,loopcnt +0x4ca8 016163 arg mem_temp_block0 ,contw +0x4ca9 016164 call load_uart_sum_loop +0x4caa 016165 hfetch 1 ,core_gpio_key2 +0x4cab 016166 and_into 0xfd ,pdata +0x4cac 016167 hstore 1 ,core_gpio_key2 +0x4cad 016168 arg mem_temp_block0 ,contr +0x4cae 016169 arg 16 ,loopcnt +0x4caf 016170 call aes_load_data +0x4cb0 016171 call aes_init +0x4cb1 016172 call aes_clear_data +0x4cb2 016173 branch phci_grp_vendor_patch_check_sum +: 016176 phci_grp_vendor_done: +0x4cb3 016177 arg 0x20 ,loopcnt +0x4cb4 016178 arg mem_patch00 ,contw +0x4cb5 016179 arg 0 ,temp +: 016180 phci_grp_vendor_done_loop: +0x4cb6 016181 ifetch 1 ,contru +0x4cb7 016182 istore 1 ,contw +0x4cb8 016183 iadd temp ,temp +0x4cb9 016184 loop phci_grp_vendor_done_loop +0x4cba 016185 and temp ,0xff ,temp +0x4cbb 016186 ifetch 1 ,contru +0x4cbc 016187 isub temp ,null +0x4cbd 016188 nbranch phci_grp_vendor_patch_bad ,zero +0x4cbe 016189 hjam 0 ,core_ucode_ctrl +0x4cbf 016190 call hci_normal_reply +0x4cc0 016191 call h4_rx_discard_packet +0x4cc1 016192 call clear_key_buf +0x4cc2 016193 call wait_uarttx +0x4cc3 016194 branch soft_reset +: 016196 phci_grp_vendor_patch_bad: +0x4cc4 016197 hjam 0 ,core_ucode_ctrl +0x4cc5 016198 branch start +: 016200 phci_grp_vendor_bdaddr: +0x4cc6 016201 ifetch 6 ,contru +0x4cc7 016202 store 6 ,mem_lap +0x4cc8 016203 branch hci_normal_reply +: 016206 phci_grp_vendor_mem: +0x4cc9 016207 ifetch 1 ,contru +0x4cca 016208 store 1 ,mem_hci_curr_len +0x4ccb 016209 copy pdata ,loopcnt +0x4ccc 016210 ifetch 2 ,contru +0x4ccd 016211 store 2 ,mem_hci_curr_target +0x4cce 016212 copy pdata ,contw +0x4ccf 016213 call uart_copy_rx_bytes +0x4cd0 016214 branch hci_normal_reply +: 016217 phci_grp_vendor_eep: +0x4cd1 016218 ifetch 1 ,contru +0x4cd2 016219 store 1 ,mem_hci_curr_len +0x4cd3 016220 copy pdata ,loopcnt +0x4cd4 016221 ifetch 2 ,contru +0x4cd5 016222 store 2 ,mem_hci_curr_target +0x4cd6 016223 arg mem_l2cap_rxbuff1 ,contw +0x4cd7 016224 call uart_copy_rx_bytes +0x4cd8 016225 fetcht 1 ,mem_hci_curr_len +0x4cd9 016226 arg mem_l2cap_rxbuff1 ,rega +0x4cda 016227 fetch 2 ,mem_hci_curr_target +0x4cdb 016228 branch iicd_write_ota_data +: 016233 hci_normal_reply: +0x4cdc 016234 force 4 ,loopcnt +: 016235 hci_command_complete: +0x4cdd 016236 call hci_get_payload_ptr +0x4cde 016237 force 0x1 ,pdata +0x4cdf 016238 istore 1 ,contwu +0x4ce0 016239 deposit alarm +0x4ce1 016240 istore 3 ,contwu +0x4ce2 016241 force hci_event_command_complete ,queue +: 016242 hci_send_event: +0x4ce3 016243 bpatchx patch20_4 ,mem_patch20 +0x4ce4 016244 call hci_get_packet_ptr +0x4ce5 016245 deposit queue +0x4ce6 016246 istore 1 ,contwu +0x4ce7 016247 deposit loopcnt +0x4ce8 016248 istore 1 ,contwu +: 016249 hci_send_event_raw: +0x4ce9 016250 force 5 ,queue +0x4cea 016251 increase 2 ,loopcnt +: 016252 hci_send_packet: +0x4ceb 016253 branch h4_send_packet_event +: 016255 hci_send_commu_ready_event: +0x4cec 016256 force hci_event_vendor_specific ,queue +0x4ced 016257 call hci_get_payload_ptr +0x4cee 016258 setarg hci_vendor_event_commu_ready +0x4cef 016259 istore 1 ,contwu +0x4cf0 016260 force 1 ,loopcnt +0x4cf1 016261 branch hci_send_event +: 016263 hci_get_cmd_complete_ptr: +0x4cf2 016264 force 12 ,contwu +0x4cf3 016265 branch hci_get_tx_ptr +: 016267 hci_get_payload_ptr: +0x4cf4 016268 force 8 ,contwu +0x4cf5 016269 branch hci_get_tx_ptr +: 016271 hci_get_packet_ptr: +0x4cf6 016272 force 6 ,contwu +: 016273 hci_get_tx_ptr: +0x4cf7 016274 branch h4_get_tx_ptr +: 016278 calc_tx_crc16: +0x4cf8 016279 pulse crc16 +0x4cf9 016280 enable enable_crc +: 016281 crcloop: +0x4cfa 016282 ifetch 1 ,contwu +0x4cfb 016283 inject bucket ,8 +0x4cfc 016284 loop crcloop +0x4cfd 016285 enable enable_parity +0x4cfe 016286 inject bucket ,16 +0x4cff 016287 disable enable_parity +0x4d00 016288 disable enable_crc +0x4d01 016289 disable crc16 +0x4d02 016290 byteswap pdata ,pdata +0x4d03 016291 rtn +: 016295 cmd_exit: +0x4d04 016296 jam 0 ,mem_hci_cmd +0x4d05 016297 rtn +: 016298 cmd_check_plap: +0x4d06 016299 fetch 6 ,mem_hci_plap +0x4d07 016300 fetcht 6 ,mem_plap +0x4d08 016301 isub temp ,null +0x4d09 016302 rtn +: 016307 cmd_pair: +0x4d0a 016308 fetch 1 ,mem_op +0x4d0b 016309 bbit1 op_inrand_req ,cmd_pair_passive +0x4d0c 016310 call tid_initiate +0x4d0d 016311 jam lmp_in_rand ,mem_lmo_opcode2 +0x4d0e 016312 branch cmd_exit +: 016313 cmd_pair_passive: +0x4d0f 016314 set0 op_inrand_req ,pdata +0x4d10 016315 store 1 ,mem_op +0x4d11 016316 call lmp_accept_inrand +0x4d12 016317 setarg 0 +0x4d13 016318 setflag master ,smap_lmptid ,pdata +0x4d14 016319 store 1 ,mem_lmo_tid2 +0x4d15 016320 branch cmd_exit +0x4d16 016321 rtn +: 016322 cmd_in_sniff: +0x4d17 016323 jam lmp_sniff_req ,mem_lmo_opcode2 +0x4d18 016324 arg mem_sniff_payload ,contw +0x4d19 016325 setarg 0 +0x4d1a 016326 isolate1 27 ,clke_bt +0x4d1b 016327 setflag true ,1 ,pdata +0x4d1c 016328 istore 1 ,contw +0x4d1d 016329 setarg 0 +0x4d1e 016330 istore 2 ,contw +0x4d1f 016331 fetch 2 ,mem_sniff_param_interval +0x4d20 016332 istore 2 ,contw +0x4d21 016333 fetch 1 ,mem_sniff_param_attempt +0x4d22 016334 istore 2 ,contw +0x4d23 016335 fetch 1 ,mem_sniff_param_timeout +0x4d24 016336 istore 2 ,contw +0x4d25 016337 branch cmd_exit +: 016339 cmd_exit_sniff: +0x4d26 016340 jam lmp_unsniff_req ,mem_lmo_opcode2 +0x4d27 016341 branch cmd_exit +: 016343 hci_idle_dispatch: +0x4d28 016344 call gpio_check_uart_state +0x4d29 016345 rtn true +0x4d2a 016346 arg uart_wakeup_rx ,temp +0x4d2b 016347 call gpio_get_bit +0x4d2c 016348 nbranch uart_wake_up ,true +0x4d2d 016349 jam hci_rx_wake ,mem_hci_lt_rx_state +0x4d2e 016350 rtn +: 016351 uart_wake_up: +0x4d2f 016352 fetch 1 ,mem_hci_lt_rx_state +0x4d30 016353 rtnne hci_rx_wake +0x4d31 016354 call hci_exit_lpm +0x4d32 016355 branch hci_send_commu_ready_event +: 016369 hid_rx_process: +0x4d33 016370 bpatchx patch20_5 ,mem_patch20 +0x4d34 016371 fetch 2 ,mem_l2cap_payload_ptr +0x4d35 016372 copy pdata ,contr +0x4d36 016373 ifetch 1 ,contr +0x4d37 016374 and pdata ,0x0f ,temp +0x4d38 016375 rshift4 pdata ,pdata +0x4d39 016376 beq hid_type_set_idle ,hid_rx_process_handshake +0x4d3a 016377 beq hid_type_set_protocol ,hid_rx_process_handshake +0x4d3b 016378 beq hid_type_data ,hid_rx_process_data +0x4d3c 016379 beq hid_type_set_report ,hid_rx_process_set_report +0x4d3d 016380 beq hid_type_control ,hid_rx_process_hid_control +0x4d3e 016381 rtn +: 016383 hid_rx_process_hid_control: +0x4d3f 016384 copy temp ,pdata +0x4d40 016385 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +0x4d41 016386 beq hid_control_p_suspend ,hid_rx_process_suspend +0x4d42 016387 rtn +: 016389 hid_rx_process_virtual_cable_unplug: +0x4d43 016390 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +0x4d44 016391 call ui_ipc_send_event +0x4d45 016392 fetch 1 ,mem_device_option +0x4d46 016393 rtnbit0 dvc_op_mouse +0x4d47 016394 copy temp ,pdata +0x4d48 016395 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +0x4d49 016396 rtn +: 016397 hid_rx_process_suspend: +0x4d4a 016398 rtn +: 016400 hid_rx_process_set_report: +0x4d4b 016401 call hid_rx_process_data +0x4d4c 016402 arg 0x01 ,rega +0x4d4d 016403 call hid_malloc_tx_buff +0x4d4e 016404 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d4f 016405 istore 2 ,contw +0x4d50 016406 setarg 0x00 +0x4d51 016407 istore 1 ,contw +0x4d52 016408 rtn +: 016410 hid_rx_process_handshake: +0x4d53 016411 arg 1 ,rega +0x4d54 016412 call hid_malloc_tx_buff +0x4d55 016413 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d56 016414 istore 2 ,contw +0x4d57 016415 setarg 0 +0x4d58 016416 istore 1 ,contw +0x4d59 016417 jam 1 ,mem_ui_data_txbuff_length +0x4d5a 016418 fetch 1 ,mem_hid_control_state +0x4d5b 016419 set1 l2cap_channel_hid_handshake_done +0x4d5c 016420 store 1 ,mem_hid_control_state +0x4d5d 016421 jam bt_evt_hid_handshake ,mem_fifo_temp +0x4d5e 016422 branch ui_ipc_send_event +: 016424 hid_rx_process_data: +0x4d5f 016425 ifetch 1 ,contr +0x4d60 016426 beq hid_report_id_kb ,hid_rx_process_data_hid_kb +0x4d61 016427 rtn +: 016429 hid_rx_process_data_hid_kb: +0x4d62 016430 rtn +: 016433 hid_malloc_tx_buff: +0x4d63 016434 call l2cap_malloc +0x4d64 016435 copy rega ,temp +0x4d65 016436 storet 1 ,mem_ui_data_txbuff_length +0x4d66 016437 copy pdata ,contw +0x4d67 016438 copy rega ,pdata +0x4d68 016439 istore 2 ,contw +0x4d69 016440 rtn +: 016457 l2cap_init: +0x4d6a 016458 branch l2cap_init_wake ,wake +: 016459 l2cap_init_work: +0x4d6b 016460 setarg mem_l2cap_xmem_end +0x4d6c 016461 arg mem_l2cap_xmem_start ,contw +0x4d6d 016462 isub contw ,loopcnt +0x4d6e 016463 call clear_mem +: 016464 l2cap_init_wake: +0x4d6f 016465 bpatchx patch20_6 ,mem_patch20 +0x4d70 016466 setarg mem_sdp_mem_end +0x4d71 016467 arg mem_sdp_mem_start ,contw +0x4d72 016468 isub contw ,loopcnt +0x4d73 016469 call clear_mem +0x4d74 016470 setarg mem_l2cap_mem_end +0x4d75 016471 arg mem_l2cap_mem_start ,contw +0x4d76 016472 isub contw ,loopcnt +0x4d77 016473 call clear_mem +0x4d78 016474 branch l2cap_lpm_load_txbuf +: 016476 process_rx_l2cap_pkt: +0x4d79 016477 bpatchx patch20_7 ,mem_patch20 +0x4d7a 016478 copy contr ,temp +0x4d7b 016481 copy temp ,contr +0x4d7c 016482 ifetch 2 ,contr +0x4d7d 016483 store 2 ,mem_l2cap_rx_pkt_length +0x4d7e 016484 ifetch 2 ,contr +0x4d7f 016485 store 2 ,mem_l2cap_rx_cid +0x4d80 016486 deposit contr +0x4d81 016487 store 2 ,mem_l2cap_payload_ptr +0x4d82 016488 fetch 1 ,memui_reconnect_mode +0x4d83 016489 beq no_reconnection ,l2cap_rx_multiplexing +0x4d84 016490 branch ml2cap_rx_multiplexing +: 016492 l2cap_rx_multiplexing: +0x4d85 016493 fetch 2 ,mem_l2cap_rx_pkt_length +0x4d86 016494 branch l2cap_rx_reset_state ,blank +0x4d87 016495 bpatchx patch21_0 ,mem_patch21 +0x4d88 016496 fetch 1 ,mem_l2cap_rx_cid +0x4d89 016497 beq l2cap_signal_channel ,l2cap_call_proc_signal +: 016498 l2cap_rx_multiplexing0: +0x4d8a 016499 beq l2cap_sdp_channel ,l2cap_call_proc_sdp +0x4d8b 016500 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x4d8c 016501 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x4d8d 016502 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x4d8e 016503 branch l2cap_rx_reset_state +: 016505 l2cap_check_map: +0x4d8f 016508 bpatchx patch21_1 ,mem_patch21 +0x4d90 016509 call l2cap_malloc_get_full_map +0x4d91 016510 fetch 1 ,mem_used_map +0x4d92 016511 beq 0 ,set_pdata_0 +0x4d93 016512 beq 1 ,set_pdata_0 +0x4d94 016513 beq 2 ,set_pdata_0 +0x4d95 016514 beq 3 ,set_pdata_0 +0x4d96 016515 beq 0x81 ,set_pdata_0 +0x4d97 016516 beq 0xc0 ,set_pdata_0 +0x4d98 016517 beq 0x80 ,set_pdata_0 +0x4d99 016518 beq 0x40 ,set_pdata_0 +0x4d9a 016519 rtn +: 016521 set_pdata_0: +0x4d9b 016522 setarg 0 +0x4d9c 016523 rtn +: 016526 l2cap_call_proc_signal: +0x4d9d 016527 call l2cap_check_map +0x4d9e 016528 nrtn blank +: 016529 l2cap_call_proc_signal0: +0x4d9f 016530 call l2cap_malloc_signal_channel +0x4da0 016531 call l2cap_process_signal_pkt +0x4da1 016532 fetcht 2 ,mem_l2cap_signal_tx_length +0x4da2 016533 branch l2cap_call_proc_no_reply ,blank +0x4da3 016534 call l2cap_get_signal_tx_buff +0x4da4 016535 fetch 2 ,mem_l2cap_signal_tx_length +0x4da5 016536 istore 2 ,contw +0x4da6 016537 force l2cap_signal_channel ,pdata +0x4da7 016538 istore 2 ,contw +0x4da8 016539 branch l2cap_rx_reset_state +: 016541 l2cap_call_proc_sigal_pending: +0x4da9 016542 fetch 1 ,mem_l2cap_pending_item +0x4daa 016543 rtn blank +0x4dab 016544 copy pdata ,rega +0x4dac 016545 bpatchx patch21_2 ,mem_patch21 +0x4dad 016546 fetch 4 ,mem_l2cap_sdpres_delay_time +0x4dae 016547 arg 0x100 ,temp +0x4daf 016548 iadd temp ,temp +0x4db0 016549 copy clkn_bt ,pdata +0x4db1 016550 isub temp ,null +0x4db2 016551 nrtn positive +0x4db3 016552 jam 0 ,mem_l2cap_pending_item +0x4db4 016553 copy rega ,pdata +0x4db5 016554 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +0x4db6 016555 branch assert +: 016556 l2cap_sdp_conn_succ: +0x4db7 016557 arg 0 ,debug +0x4db8 016558 call l2cap_malloc_signal_channel +0x4db9 016559 call restore_l2cap_req_param +0x4dba 016560 call l2cap_get_signal_tx_payload +0x4dbb 016561 call save_cont_pointers +0x4dbc 016562 call send_connection_sdp_res +0x4dbd 016563 call l2cap_get_signal_tx_buff +0x4dbe 016565 setarg 0x000c +0x4dbf 016566 istore 2 ,contw +0x4dc0 016567 force l2cap_signal_channel ,pdata +0x4dc1 016568 istore 2 ,contw +0x4dc2 016569 branch l2cap_rx_reset_state +: 016573 l2cap_reset_sdp_map: +0x4dc3 016574 bpatchx patch21_3 ,mem_patch21 +0x4dc4 016575 fetch 2 ,mem_sdp_tx_pkt_length +0x4dc5 016576 increase 4 ,pdata +0x4dc6 016577 rshift4 pdata ,pdata +0x4dc7 016578 rshift3 pdata ,pdata +0x4dc8 016579 add pdata ,1 ,temp +0x4dc9 016580 arg mem_tx_fifo3 ,contr +0x4dca 016581 ifetch 3 ,contr +0x4dcb 016582 rtn blank +0x4dcc 016583 store 3 ,mem_tx_fifo_map_temp +0x4dcd 016584 fetch 1 ,mem_tx_fifo_map_temp +0x4dce 016585 copy pdata ,rega +0x4dcf 016586 call check_l2cap_map +0x4dd0 016587 copy regb ,pdata +0x4dd1 016588 store 1 ,mem_tx_fifo3 +0x4dd2 016589 rtn +: 016591 check_l2cap_map: +0x4dd3 016592 arg 0 ,queue +0x4dd4 016593 arg 0 ,regb +: 016595 check_l2cap_map_loop: +0x4dd5 016596 sub queue ,7 ,null +0x4dd6 016597 nrtn positive +0x4dd7 016598 qisolate1 rega +0x4dd8 016599 branch check_l2cap_map_used ,true +0x4dd9 016600 branch check_l2cap_map_used2 +: 016602 check_l2cap_map_used: +0x4dda 016603 copy temp ,pdata +0x4ddb 016604 branch check_l2cap_map_used2 ,blank +0x4ddc 016605 qset1 regb +0x4ddd 016606 increase -1 ,temp +: 016608 check_l2cap_map_used2: +0x4dde 016609 increase 1 ,queue +0x4ddf 016610 branch check_l2cap_map_loop +: 016612 l2cap_call_proc_sdp: +0x4de0 016613 call l2cap_malloc_is_fifo_empty +0x4de1 016614 nrtn blank +0x4de2 016615 call l2cap_check_map +0x4de3 016616 nrtn blank +0x4de4 016617 call l2cap_malloc_sdp_channel +0x4de5 016618 call sdp_process +0x4de6 016619 call l2cap_reset_sdp_map +0x4de7 016620 branch l2cap_call_proc_sdp_common +: 016623 ml2cap_call_proc_sdp: +0x4de8 016624 call l2cap_malloc_is_fifo_empty +0x4de9 016625 nrtn blank +0x4dea 016626 call l2cap_malloc_sdp_channel +0x4deb 016627 call sdp_process +: 016628 l2cap_call_proc_sdp_common: +0x4dec 016629 call l2cap_get_sdp_tx_buff +0x4ded 016630 fetch 2 ,mem_sdp_tx_pkt_length +0x4dee 016631 branch l2cap_call_proc_no_reply ,blank +0x4def 016632 istore 2 ,contw +0x4df0 016633 fetch 2 ,mem_sdp_remote_cid +0x4df1 016634 istore 2 ,contw +0x4df2 016635 branch l2cap_rx_reset_state +: 016637 l2cap_call_proc_hid: +0x4df3 016638 call hid_rx_process +0x4df4 016639 branch l2cap_rx_reset_state +: 016641 l2cap_call_proc_rfcomm: +0x4df5 016642 bpatchx patch21_4 ,mem_patch21 +0x4df6 016643 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x4df7 016644 call rfcomm_rx_process +0x4df8 016645 fetch 1 ,mem_rfcomm_malloc_fail_flag +0x4df9 016646 rtneq rfcomm_malloc_fail +0x4dfa 016647 branch l2cap_rx_reset_state +: 016648 l2cap_call_proc_no_reply: +0x4dfb 016649 call l2cap_malloc_discard +: 016651 l2cap_rx_reset_state: +0x4dfc 016652 setarg 0 +0x4dfd 016653 store 2 ,mem_l2cap_rx_pkt_length +0x4dfe 016654 store 2 ,mem_l2cap_rx_cid +0x4dff 016655 jam l2cap_rx_done ,mem_l2cap_rx_done +0x4e00 016656 rtn +: 016658 l2cap_process_signal_pkt: +0x4e01 016659 bpatchx patch21_5 ,mem_patch21 +0x4e02 016660 call l2cap_get_signal_tx_payload +0x4e03 016661 force 0 ,regb +0x4e04 016662 fetch 2 ,mem_l2cap_rx_pkt_length +0x4e05 016663 copy pdata ,regc +0x4e06 016664 fetch 2 ,mem_l2cap_payload_ptr +0x4e07 016665 iforce contr +: 016666 l2cap_process_signal_pkt_loop: +0x4e08 016667 call l2cap_process_one_signal +0x4e09 016668 deposit regc +0x4e0a 016669 increase -4 ,regc +0x4e0b 016670 increase -4 ,pdata +0x4e0c 016671 nbranch l2cap_process_signal_pkt_loop ,blank +0x4e0d 016672 copy regb ,pdata +0x4e0e 016673 store 2 ,mem_l2cap_signal_tx_length +0x4e0f 016674 rtn +: 016676 l2cap_process_one_signal: +0x4e10 016677 bpatchx patch21_6 ,mem_patch21 +0x4e11 016678 ifetch 1 ,contr +0x4e12 016679 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +0x4e13 016680 beq signal_connect_req ,l2cap_proc_signal_connect_req +0x4e14 016681 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +0x4e15 016682 beq signal_config_req ,l2cap_proc_signal_config_req +0x4e16 016683 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +0x4e17 016684 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +0x4e18 016685 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +0x4e19 016686 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x4e1a 016687 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +0x4e1b 016688 beq signal_info_req ,l2cap_proc_signal_info_req +0x4e1c 016689 beq signal_info_rsp ,l2cap_proc_signal_info_rsp +0x4e1d 016690 call l2cap_reject_command +: 016691 l2cap_process_one_signal_rtn: +0x4e1e 016692 rtn +: 016694 l2cap_proc_signal_info_req: +0x4e1f 016695 ifetch 1 ,contr +0x4e20 016696 copy pdata ,queue +0x4e21 016697 ifetch 2 ,contr +0x4e22 016698 copy pdata ,rega +0x4e23 016699 copy regc ,pdata +0x4e24 016700 isub rega ,regc +0x4e25 016701 setarg signal_info_rsp +0x4e26 016702 istore 1 ,contw +0x4e27 016703 copy queue ,pdata +0x4e28 016704 istore 1 ,contw +0x4e29 016705 ifetch 2 ,contr +: 016706 l2cap_proc_signal_info_req_reply: +0x4e2a 016707 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +0x4e2b 016708 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +0x4e2c 016709 rtn +: 016710 l2cap_proc_signal_info_req_ext: +0x4e2d 016711 setarg 0x020008 +0x4e2e 016712 istore 6 ,contw +0x4e2f 016713 setarg 0x0280 +0x4e30 016714 istore 4 ,contw +0x4e31 016715 force 12 ,pdata +0x4e32 016716 branch l2cap_proc_signal_info_req_common +: 016717 l2cap_proc_signal_info_req_fix: +0x4e33 016718 setarg 0x3000c +0x4e34 016719 istore 6 ,contw +0x4e35 016720 setarg 0x0006 +0x4e36 016721 istore 8 ,contw +0x4e37 016722 force 16 ,pdata +: 016723 l2cap_proc_signal_info_req_common: +0x4e38 016724 iadd regb ,regb +0x4e39 016725 branch l2cap_process_one_signal_rtn +: 016727 ml2cap_proc_signal_info_req: +0x4e3a 016728 ifetch 1 ,contr +0x4e3b 016729 copy pdata ,queue +0x4e3c 016730 ifetch 2 ,contr +0x4e3d 016731 copy pdata ,rega +0x4e3e 016732 ifetch 2 ,contr +0x4e3f 016733 store 2 ,mem_temp +0x4e40 016734 copy regc ,pdata +0x4e41 016735 isub rega ,regc +0x4e42 016736 call l2cap_get_signal_tx_payload +0x4e43 016737 setarg signal_info_rsp +0x4e44 016738 istore 1 ,contw +0x4e45 016739 copy queue ,pdata +0x4e46 016740 istore 1 ,contw +0x4e47 016741 fetch 2 ,mem_temp +0x4e48 016742 branch l2cap_proc_signal_info_req_reply +: 016746 l2cap_proc_signal_cmd_reject: +0x4e49 016747 ifetch 1 ,contr +0x4e4a 016748 copy pdata ,queue +0x4e4b 016749 ifetch 2 ,contr +0x4e4c 016750 copy pdata ,rega +0x4e4d 016751 iadd contr ,contr +0x4e4e 016752 copy regc ,pdata +0x4e4f 016753 isub rega ,regc +: 016754 l2cap_proc_signal_cmd_reject_rtn: +0x4e50 016755 branch l2cap_process_one_signal_rtn +: 016757 l2cap_proc_signal_connect_req: +0x4e51 016758 call save_cont_pointers +0x4e52 016761 call load_cont_pointers +0x4e53 016762 arg 0 ,debug +0x4e54 016763 ifetch 1 ,contr +0x4e55 016764 copy pdata ,queue +0x4e56 016765 ifetch 2 ,contr +0x4e57 016766 copy pdata ,rega +0x4e58 016767 ifetch 2 ,contr +0x4e59 016768 copy pdata ,temp +0x4e5a 016769 ifetch 2 ,contr +0x4e5b 016770 copy pdata ,timeup +0x4e5c 016771 bpatchx patch21_7 ,mem_patch21 +0x4e5d 016772 copy temp ,pdata +0x4e5e 016773 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +0x4e5f 016774 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +0x4e60 016775 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +0x4e61 016776 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +0x4e62 016777 call l2cap_reject_command +0x4e63 016778 branch l2cap_proc_signal_connect_req_rtn +: 016780 l2cap_proc_signal_connect_req_sdp: +0x4e64 016781 call save_cont_pointers +0x4e65 016782 arg l2cap_sdp_channel ,temp +0x4e66 016783 fetch 2 ,mem_sdp_remote_cid +0x4e67 016784 nbranch already_connected ,blank +0x4e68 016785 copy timeup ,pdata +0x4e69 016786 store 2 ,mem_sdp_remote_cid +0x4e6a 016787 copy clkn_bt ,pdata +0x4e6b 016788 store 4 ,mem_l2cap_sdpres_delay_time +0x4e6c 016789 call store_l2cap_req_param +0x4e6d 016790 branch send_connection_pending +: 016792 store_l2cap_req_param: +0x4e6e 016793 storet 2 ,mem_psm +0x4e6f 016794 deposit timeup +0x4e70 016795 store 2 ,mem_scid +0x4e71 016796 deposit rega +0x4e72 016797 store 2 ,mem_cmd_length +0x4e73 016798 deposit regb +0x4e74 016799 store 2 ,mem_tt2 +0x4e75 016800 deposit regc +0x4e76 016801 store 2 ,mem_tt3 +0x4e77 016802 deposit queue +0x4e78 016803 store 2 ,mem_id +0x4e79 016804 rtn +: 016806 restore_l2cap_req_param: +0x4e7a 016807 fetcht 2 ,mem_psm +0x4e7b 016808 fetch 2 ,mem_scid +0x4e7c 016809 copy pdata ,timeup +0x4e7d 016810 fetch 2 ,mem_cmd_length +0x4e7e 016811 copy pdata ,rega +0x4e7f 016812 fetch 2 ,mem_tt2 +0x4e80 016813 copy pdata ,regb +0x4e81 016814 fetch 2 ,mem_tt3 +0x4e82 016815 copy pdata ,regc +0x4e83 016816 fetch 2 ,mem_id +0x4e84 016817 copy pdata ,queue +0x4e85 016818 rtn +: 016820 l2cap_proc_signal_connect_req_rfcomm: +0x4e86 016821 call save_cont_pointers +0x4e87 016822 setarg l2cap_rfcomm_channel +0x4e88 016823 arg l2cap_rfcomm_channel ,temp +0x4e89 016824 fetch 2 ,mem_rfcomm_remote_cid +0x4e8a 016825 nbranch already_connected ,blank +0x4e8b 016826 copy timeup ,pdata +0x4e8c 016827 store 2 ,mem_rfcomm_remote_cid +0x4e8d 016828 fetch 1 ,mem_rfcomm_state +0x4e8e 016829 set1 l2cap_channel_state_conn_req ,pdata +0x4e8f 016830 set1 l2cap_channel_state_conn_res ,pdata +0x4e90 016831 store 1 ,mem_rfcomm_state +0x4e91 016832 branch send_connection_res +: 016833 l2cap_proc_signal_connect_req_hid_ctrl: +0x4e92 016834 call save_cont_pointers +0x4e93 016835 arg l2cap_hid_control_channel ,temp +0x4e94 016836 fetch 2 ,mem_hid_ctrl_remote_cid +0x4e95 016837 nbranch already_connected ,blank +0x4e96 016838 copy timeup ,pdata +0x4e97 016839 store 2 ,mem_hid_ctrl_remote_cid +0x4e98 016840 fetch 1 ,mem_hid_control_state +0x4e99 016841 set1 l2cap_channel_state_conn_req ,pdata +0x4e9a 016842 set1 l2cap_channel_state_conn_res ,pdata +0x4e9b 016843 store 1 ,mem_hid_control_state +0x4e9c 016844 branch send_connection_res +: 016845 l2cap_proc_signal_connect_req_hid_int: +0x4e9d 016846 call save_cont_pointers +0x4e9e 016847 deposit clke +0x4e9f 016848 arg l2cap_hid_interrupt_channel ,temp +0x4ea0 016849 fetch 2 ,mem_hid_int_remote_cid +0x4ea1 016850 nbranch already_connected ,blank +0x4ea2 016851 copy timeup ,pdata +0x4ea3 016852 store 2 ,mem_hid_int_remote_cid +0x4ea4 016853 fetch 1 ,mem_hid_interrupt_state +0x4ea5 016854 set1 l2cap_channel_state_conn_req ,pdata +0x4ea6 016855 set1 l2cap_channel_state_conn_res ,pdata +0x4ea7 016856 store 1 ,mem_hid_interrupt_state +0x4ea8 016857 branch send_connection_res +: 016859 send_connection_pending: +0x4ea9 016860 setarg l2cap_connect_pending +0x4eaa 016861 store 2 ,meml2cap_t1 +0x4eab 016862 jam l2cap_sdp_channel ,mem_l2cap_pending_item +0x4eac 016863 branch send_connection_res0 +: 016864 send_connection_sdp_res: +0x4ead 016865 fetch 1 ,mem_sdp_state +0x4eae 016866 set1 l2cap_channel_state_conn_req ,pdata +0x4eaf 016867 set1 l2cap_channel_state_conn_res ,pdata +0x4eb0 016868 store 1 ,mem_sdp_state +: 016869 send_connection_res: +0x4eb1 016870 setarg l2cap_connect_successful +0x4eb2 016871 store 2 ,meml2cap_t1 +: 016872 send_connection_res0: +0x4eb3 016873 bpatchx patch22_0 ,mem_patch22 +0x4eb4 016874 call load_cont_pointers +0x4eb5 016875 setarg signal_connect_rsp +0x4eb6 016876 istore 1 ,contw +0x4eb7 016877 copy queue ,pdata +0x4eb8 016878 istore 1 ,contw +0x4eb9 016879 setarg 0x0008 +0x4eba 016880 istore 2 ,contw +0x4ebb 016881 copy temp ,pdata +0x4ebc 016882 istore 2 ,contw +0x4ebd 016883 copy timeup ,pdata +0x4ebe 016884 istore 2 ,contw +0x4ebf 016885 fetch 2 ,meml2cap_t1 +0x4ec0 016886 beq l2cap_connect_pending ,connect_pending +0x4ec1 016887 isolate0 0 ,debug +0x4ec2 016888 branch connect_suc ,true +0x4ec3 016889 setarg l2cap_connect_refused_no_resources +: 016890 connect_suc: +0x4ec4 016891 istore 2 ,contw +0x4ec5 016892 force 0x0000 ,pdata +0x4ec6 016893 istore 2 ,contw +0x4ec7 016894 setarg 12 +0x4ec8 016895 branch connect_req_update_byte_counts +: 016896 connect_pending: +0x4ec9 016897 istore 2 ,contw +0x4eca 016898 force 0x0002 ,pdata +0x4ecb 016899 istore 2 ,contw +0x4ecc 016900 setarg 12 +0x4ecd 016901 branch connect_req_update_byte_counts +: 016903 already_connected: +0x4ece 016904 set1 0 ,debug +0x4ecf 016905 branch send_connection_res +: 016906 connect_req_update_byte_counts: +0x4ed0 016907 iadd regb ,regb +0x4ed1 016908 copy regc ,pdata +0x4ed2 016909 isub rega ,regc +0x4ed3 016910 branch l2cap_proc_signal_connect_req_rtn +: 016911 l2cap_proc_signal_connect_req_rtn: +0x4ed4 016912 branch l2cap_process_one_signal_rtn +: 016914 l2cap_proc_signal_connect_rsp: +0x4ed5 016915 ifetch 1 ,contr +0x4ed6 016916 copy pdata ,queue +0x4ed7 016917 ifetch 2 ,contr +0x4ed8 016918 copy pdata ,rega +0x4ed9 016919 copy regc ,pdata +0x4eda 016920 isub rega ,regc +0x4edb 016921 ifetch 2 ,contr +0x4edc 016922 copy pdata ,timeup +0x4edd 016923 ifetch 2 ,contr +0x4ede 016924 copy pdata ,temp +0x4edf 016925 bpatchx patch22_1 ,mem_patch22 +0x4ee0 016926 setarg l2cap_sdp_channel +0x4ee1 016927 isub temp ,null +0x4ee2 016928 branch l2cap_proc_signal_connect_rsp_sdp ,zero +0x4ee3 016929 setarg l2cap_rfcomm_channel +0x4ee4 016930 isub temp ,null +0x4ee5 016931 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +0x4ee6 016932 setarg l2cap_hid_control_channel +0x4ee7 016933 isub temp ,null +0x4ee8 016934 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x4ee9 016935 setarg l2cap_hid_interrupt_channel +0x4eea 016936 isub temp ,null +0x4eeb 016937 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +0x4eec 016938 rtn +: 016940 l2cap_proc_signal_connect_rsp_sdp: +0x4eed 016941 copy timeup ,pdata +0x4eee 016942 store 2 ,mem_sdp_remote_cid +0x4eef 016943 fetch 1 ,mem_sdp_state +0x4ef0 016944 set1 l2cap_channel_state_conn_res ,pdata +0x4ef1 016945 store 1 ,mem_sdp_state +0x4ef2 016946 branch l2cap_process_one_signal_rtn +: 016947 l2cap_proc_signal_connect_rsp_rfcomm: +0x4ef3 016948 copy timeup ,pdata +0x4ef4 016949 store 2 ,mem_rfcomm_remote_cid +0x4ef5 016950 fetch 1 ,mem_rfcomm_state +0x4ef6 016951 set1 l2cap_channel_state_conn_res ,pdata +0x4ef7 016952 store 1 ,mem_rfcomm_state +0x4ef8 016953 rtn +: 016954 l2cap_proc_signal_connect_rsp_hid_int: +0x4ef9 016955 copy timeup ,pdata +0x4efa 016956 store 2 ,mem_hid_ctrl_remote_cid +0x4efb 016957 fetch 1 ,mem_hid_interrupt_state +0x4efc 016958 set1 l2cap_channel_state_conn_res ,pdata +0x4efd 016959 store 1 ,mem_hid_interrupt_state +0x4efe 016960 rtn +: 016961 l2cap_proc_signal_connect_rsp_hid_ctrl: +0x4eff 016962 copy timeup ,pdata +0x4f00 016963 store 2 ,mem_hid_int_remote_cid +0x4f01 016964 fetch 1 ,mem_hid_control_state +0x4f02 016965 set1 l2cap_channel_state_conn_res ,pdata +0x4f03 016966 store 1 ,mem_hid_control_state +0x4f04 016967 rtn +: 016969 l2cap_proc_signal_config_req: +0x4f05 016970 ifetch 1 ,contr +0x4f06 016971 copy pdata ,queue +0x4f07 016972 ifetch 2 ,contr +0x4f08 016973 copy pdata ,rega +0x4f09 016974 copy regc ,pdata +0x4f0a 016975 isub rega ,regc +0x4f0b 016976 ifetch 2 ,contr +0x4f0c 016977 copy pdata ,temp +0x4f0d 016978 copy temp ,rega +0x4f0e 016979 bpatchx patch22_2 ,mem_patch22 +0x4f0f 016980 setarg l2cap_sdp_channel +0x4f10 016981 isub temp ,null +0x4f11 016982 branch l2cap_proc_signal_config_req_sdp ,zero +0x4f12 016983 setarg l2cap_rfcomm_channel +0x4f13 016984 isub temp ,null +0x4f14 016985 branch l2cap_proc_signal_config_req_rfcomm ,zero +0x4f15 016986 setarg l2cap_hid_control_channel +0x4f16 016987 isub temp ,null +0x4f17 016988 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +0x4f18 016989 setarg l2cap_hid_interrupt_channel +0x4f19 016990 isub temp ,null +0x4f1a 016991 branch l2cap_proc_signal_config_req_hid_int ,zero +0x4f1b 016992 branch l2cap_reject_command +: 016994 l2cap_proc_signal_config_req_sdp: +0x4f1c 016995 copy contw ,timeup +0x4f1d 016996 fetch 1 ,mem_sdp_state +0x4f1e 016997 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f1f 016998 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f20 017000 store 1 ,mem_sdp_state +0x4f21 017001 copy timeup ,contw +0x4f22 017002 arg l2cap_sdp_channel ,timeup +0x4f23 017003 fetch 2 ,mem_sdp_remote_cid +0x4f24 017004 copy pdata ,temp +0x4f25 017005 branch l2cap_send_config_rsp +: 017006 l2cap_proc_signal_config_req_hid_ctrl: +0x4f26 017007 copy contw ,timeup +0x4f27 017008 fetch 1 ,mem_hid_control_state +0x4f28 017009 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f29 017010 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f2a 017012 store 1 ,mem_hid_control_state +0x4f2b 017013 copy timeup ,contw +0x4f2c 017014 arg l2cap_hid_control_channel ,timeup +0x4f2d 017015 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f2e 017016 copy pdata ,temp +0x4f2f 017017 branch l2cap_send_config_rsp +: 017018 l2cap_proc_signal_config_req_hid_int: +0x4f30 017019 copy contw ,timeup +0x4f31 017020 fetch 1 ,mem_hid_interrupt_state +0x4f32 017021 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f33 017022 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f34 017024 store 1 ,mem_hid_interrupt_state +0x4f35 017025 copy timeup ,contw +0x4f36 017026 arg l2cap_hid_interrupt_channel ,timeup +0x4f37 017027 fetch 2 ,mem_hid_int_remote_cid +0x4f38 017028 copy pdata ,temp +0x4f39 017029 branch l2cap_send_config_rsp +: 017030 l2cap_proc_signal_config_req_rfcomm: +0x4f3a 017031 copy contw ,timeup +0x4f3b 017032 fetch 1 ,mem_rfcomm_state +0x4f3c 017033 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f3d 017034 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f3e 017036 store 1 ,mem_rfcomm_state +0x4f3f 017038 copy timeup ,contw +0x4f40 017039 arg l2cap_rfcomm_channel ,timeup +0x4f41 017040 fetch 2 ,mem_rfcomm_remote_cid +0x4f42 017041 copy pdata ,temp +: 017042 l2cap_send_config_rsp: +0x4f43 017043 bpatchx patch22_3 ,mem_patch22 +0x4f44 017044 setarg signal_config_rsp +0x4f45 017045 istore 1 ,contw +0x4f46 017046 copy queue ,pdata +0x4f47 017047 istore 1 ,contw +0x4f48 017048 setarg 0x0006 +0x4f49 017049 istore 2 ,contw +0x4f4a 017050 copy temp ,pdata +0x4f4b 017051 istore 2 ,contw +0x4f4c 017052 force 0x00 ,pdata +0x4f4d 017053 istore 2 ,contw +0x4f4e 017054 force l2cap_config_success ,pdata +0x4f4f 017055 istore 2 ,contw +0x4f50 017056 force 10 ,pdata +0x4f51 017057 iadd regb ,regb +0x4f52 017059 storet 2 ,mem_config_req_dest_cid +0x4f53 017060 copy queue ,pdata +0x4f54 017061 store 1 ,mem_config_identifier +0x4f55 017062 force l2cap_sdp_channel ,pdata +0x4f56 017063 icompare 0xff ,timeup +0x4f57 017064 branch l2cap_send_config_rsp_is_sdp ,true +0x4f58 017065 increase 1 ,pdata +: 017066 l2cap_send_config_rsp_is_sdp: +0x4f59 017068 rtn +: 017069 l2cap_check_channel_state: +0x4f5a 017070 disable user +0x4f5b 017071 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5c 017072 rtnbit0 l2cap_channel_state_conn_req ,pdata +0x4f5d 017073 rtnbit0 l2cap_channel_state_conn_res ,pdata +0x4f5e 017074 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5f 017075 copy contr ,contw +0x4f60 017076 increase -1 ,contw +0x4f61 017077 istore 1 ,contw +0x4f62 017078 enable user +0x4f63 017079 rtn +: 017080 l2cap_send_config_req: +: 017081 l2cap_send_config_req_sdp: +0x4f64 017082 fetch 1 ,mem_sdp_state +0x4f65 017083 call l2cap_check_channel_state +0x4f66 017084 nbranch l2cap_send_config_req_rfcomm ,user +0x4f67 017085 jam l2cap_sdp_channel ,mem_send_config_req +0x4f68 017086 fetch 2 ,mem_sdp_remote_cid +0x4f69 017087 store 2 ,mem_config_req_dest_cid +0x4f6a 017088 branch l2cap_generate_config_req +: 017089 l2cap_send_config_req_rfcomm: +0x4f6b 017090 fetch 1 ,mem_rfcomm_state +0x4f6c 017091 call l2cap_check_channel_state +0x4f6d 017092 nbranch l2cap_send_config_req_hid_ctrl ,user +0x4f6e 017093 jam l2cap_rfcomm_channel ,mem_send_config_req +0x4f6f 017094 fetch 2 ,mem_rfcomm_remote_cid +0x4f70 017095 store 2 ,mem_config_req_dest_cid +0x4f71 017096 branch l2cap_generate_config_req +: 017097 l2cap_send_config_req_hid_ctrl: +0x4f72 017098 fetch 1 ,mem_hid_control_state +0x4f73 017099 call l2cap_check_channel_state +0x4f74 017100 nbranch l2cap_send_config_req_hid_int ,user +0x4f75 017101 jam l2cap_hid_control_channel ,mem_send_config_req +0x4f76 017102 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f77 017103 store 2 ,mem_config_req_dest_cid +0x4f78 017104 branch l2cap_generate_config_req +: 017105 l2cap_send_config_req_hid_int: +0x4f79 017106 fetch 1 ,mem_hid_interrupt_state +0x4f7a 017107 call l2cap_check_channel_state +0x4f7b 017108 nrtn user +0x4f7c 017109 jam l2cap_hid_interrupt_channel ,mem_send_config_req +0x4f7d 017110 fetch 2 ,mem_hid_int_remote_cid +0x4f7e 017111 store 2 ,mem_config_req_dest_cid +: 017114 l2cap_generate_config_req: +0x4f7f 017115 bpatchx patch22_4 ,mem_patch22 +0x4f80 017116 call l2cap_get_req_id +0x4f81 017117 call l2cap_malloc_signal_channel +0x4f82 017118 force 0 ,regb +0x4f83 017119 call l2cap_get_signal_tx_payload +0x4f84 017120 force signal_config_req ,pdata +0x4f85 017121 istore 1 ,contw +0x4f86 017122 fetch 1 ,mem_ml2cap_comm_id +0x4f87 017123 istore 1 ,contw +0x4f88 017124 setarg 0x0008 +0x4f89 017125 istore 2 ,contw +0x4f8a 017126 fetch 2 ,mem_config_req_dest_cid +0x4f8b 017127 istore 2 ,contw +0x4f8c 017128 setarg 0x0000 +0x4f8d 017129 istore 2 ,contw +0x4f8e 017130 force 1 ,pdata +0x4f8f 017131 istore 1 ,contw +0x4f90 017132 force 2 ,pdata +0x4f91 017133 istore 1 ,contw +0x4f92 017134 fetch 1 ,mem_send_config_req +0x4f93 017135 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +0x4f94 017136 setarg l2cap_config_mtu_sdp +0x4f95 017137 istore 2 ,contw +0x4f96 017138 branch l2cap_generate_config_req_done +: 017139 l2cap_generate_config_req_rfcomm: +0x4f97 017140 setarg l2cap_config_mtu_rfcomm +0x4f98 017141 istore 2 ,contw +: 017142 l2cap_generate_config_req_done: +0x4f99 017143 arg 0x0c ,temp +0x4f9a 017144 storet 2 ,mem_l2cap_signal_tx_length +0x4f9b 017145 call l2cap_get_signal_tx_buff +0x4f9c 017146 fetch 2 ,mem_l2cap_signal_tx_length +0x4f9d 017147 istore 2 ,contw +0x4f9e 017148 force l2cap_signal_channel ,pdata +0x4f9f 017149 istore 2 ,contw +0x4fa0 017150 jam 0 ,mem_send_config_req +: 017151 l2cap_proc_signal_config_req_rtn: +0x4fa1 017152 branch l2cap_process_one_signal_rtn +: 017154 l2cap_proc_signal_config_rsp: +0x4fa2 017155 increase 1 ,contr +0x4fa3 017156 ifetch 2 ,contr +0x4fa4 017157 copy pdata ,rega +0x4fa5 017158 copy regc ,pdata +0x4fa6 017159 isub rega ,regc +0x4fa7 017160 ifetch 2 ,contr +0x4fa8 017161 copy pdata ,rega +0x4fa9 017162 bpatchx patch22_5 ,mem_patch22 +0x4faa 017163 setarg l2cap_sdp_channel +0x4fab 017164 isub rega ,null +0x4fac 017165 branch l2cap_proc_signal_config_rsp_sdp ,zero +0x4fad 017166 setarg l2cap_rfcomm_channel +0x4fae 017167 isub rega ,null +0x4faf 017168 branch l2cap_proc_signal_config_rsp_rfcomm ,zero +0x4fb0 017169 setarg l2cap_hid_control_channel +0x4fb1 017170 isub rega ,null +0x4fb2 017171 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x4fb3 017172 setarg l2cap_hid_interrupt_channel +0x4fb4 017173 isub rega ,null +0x4fb5 017174 branch l2cap_proc_signal_config_rsp_hid_int ,zero +0x4fb6 017175 increase 2 ,contr +0x4fb7 017176 ifetch 2 ,contr +0x4fb8 017177 iforce null +0x4fb9 017178 branch l2cap_process_one_signal_rtn +: 017179 l2cap_proc_signal_config_rsp_sdp: +0x4fba 017180 fetch 1 ,mem_sdp_state +0x4fbb 017181 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fbc 017182 store 1 ,mem_sdp_state +0x4fbd 017183 branch l2cap_process_one_signal_rtn +: 017184 l2cap_proc_signal_config_rsp_rfcomm: +0x4fbe 017185 fetch 1 ,mem_rfcomm_state +0x4fbf 017186 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc0 017187 store 1 ,mem_rfcomm_state +0x4fc1 017188 branch l2cap_process_one_signal_rtn +: 017189 l2cap_proc_signal_config_rsp_hid_ctrl: +0x4fc2 017190 fetch 1 ,mem_hid_control_state +0x4fc3 017191 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc4 017192 store 1 ,mem_hid_control_state +0x4fc5 017193 branch l2cap_process_one_signal_rtn +: 017194 l2cap_proc_signal_config_rsp_hid_int: +0x4fc6 017195 fetch 1 ,mem_hid_interrupt_state +0x4fc7 017196 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc8 017197 store 1 ,mem_hid_interrupt_state +0x4fc9 017198 jam bt_evt_hid_connected ,mem_fifo_temp +0x4fca 017199 branch ui_ipc_send_event +: 017203 l2cap_proc_signal_disconnect_req: +0x4fcb 017204 ifetch 1 ,contr +0x4fcc 017205 copy pdata ,queue +0x4fcd 017206 ifetch 2 ,contr +0x4fce 017207 copy pdata ,rega +0x4fcf 017208 copy regc ,pdata +0x4fd0 017209 isub rega ,regc +0x4fd1 017210 ifetch 2 ,contr +0x4fd2 017211 copy pdata ,rega +0x4fd3 017212 ifetch 2 ,contr +0x4fd4 017213 copy pdata ,timeup +0x4fd5 017214 copy rega ,temp +0x4fd6 017215 call save_cont_pointers +0x4fd7 017216 bpatchx patch22_6 ,mem_patch22 +0x4fd8 017217 setarg l2cap_sdp_channel +0x4fd9 017218 isub temp ,null +0x4fda 017219 branch l2cap_proc_signal_disconnect_req_sdp ,zero +0x4fdb 017220 setarg l2cap_rfcomm_channel +0x4fdc 017221 isub temp ,null +0x4fdd 017222 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +0x4fde 017223 setarg l2cap_hid_control_channel +0x4fdf 017224 isub temp ,null +0x4fe0 017225 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +0x4fe1 017226 setarg l2cap_hid_interrupt_channel +0x4fe2 017227 isub temp ,null +0x4fe3 017228 branch l2cap_proc_signal_disconnect_req_hid_int ,zero +0x4fe4 017229 call l2cap_reject_command +0x4fe5 017230 branch l2cap_proc_signal_disconnect_req_err_rtn +: 017231 l2cap_proc_signal_disconnect_req_hid_ctrl: +0x4fe6 017232 copy timeup ,temp +0x4fe7 017233 fetch 2 ,mem_hid_ctrl_remote_cid +0x4fe8 017234 isub temp ,null +0x4fe9 017235 branch l2cap_disconnect_hid_control_now ,zero +0x4fea 017236 call l2cap_reject_command +0x4feb 017237 branch l2cap_proc_signal_disconnect_req_err_rtn +: 017238 l2cap_proc_signal_disconnect_req_hid_int: +0x4fec 017239 copy timeup ,temp +0x4fed 017240 fetch 2 ,mem_hid_int_remote_cid +0x4fee 017241 isub temp ,null +0x4fef 017242 branch l2cap_disconnect_hid_interrupt_now ,zero +0x4ff0 017243 call l2cap_reject_command +0x4ff1 017244 branch l2cap_proc_signal_disconnect_req_err_rtn +: 017246 l2cap_proc_signal_disconnect_req_sdp: +0x4ff2 017247 copy timeup ,temp +0x4ff3 017248 fetch 2 ,mem_sdp_remote_cid +0x4ff4 017249 isub temp ,null +0x4ff5 017250 branch l2cap_disconnect_sdp_now ,zero +0x4ff6 017251 call l2cap_reject_command +0x4ff7 017252 branch l2cap_proc_signal_disconnect_req_err_rtn +: 017253 l2cap_disconnect_hid_control_now: +0x4ff8 017254 call l2cap_reset_hid_ctrl_state +0x4ff9 017255 branch l2cap_send_disconnect_rsp_pkt +: 017256 l2cap_disconnect_hid_interrupt_now: +0x4ffa 017257 call l2cap_reset_hid_int_state +0x4ffb 017258 fetch 2 ,mem_hid_ctrl_remote_cid +0x4ffc 017259 branch l2cap_send_disconnect_rsp_pkt ,blank +0x4ffd 017267 branch l2cap_send_disconnect_rsp_pkt +: 017269 l2cap_disconnect_sdp_now: +0x4ffe 017270 call l2cap_reset_sdp_channel_state +0x4fff 017271 fetch 1 ,mem_upper_sm_ss +0x5000 017272 nbranch l2cap_send_disconnect_rsp_pkt ,blank +0x5001 017275 branch l2cap_send_disconnect_rsp_pkt +: 017276 l2cap_proc_signal_disconnect_req_rfcomm: +0x5002 017277 copy timeup ,temp +0x5003 017278 fetch 2 ,mem_rfcomm_remote_cid +0x5004 017279 isub temp ,null +0x5005 017280 branch l2cap_disconnect_rfcomm_now ,zero +0x5006 017281 call l2cap_reject_command +0x5007 017282 branch l2cap_proc_signal_disconnect_req_err_rtn +: 017283 l2cap_disconnect_rfcomm_now: +0x5008 017284 call l2cap_reset_rfcomm_channel_state +0x5009 017285 branch l2cap_send_disconnect_rsp_pkt +: 017286 l2cap_send_disconnect_rsp_pkt: +0x500a 017287 call load_cont_pointers +0x500b 017288 setarg signal_disconnect_rsp +0x500c 017289 istore 1 ,contw +0x500d 017290 copy queue ,pdata +0x500e 017291 istore 1 ,contw +0x500f 017292 setarg 0x0004 +0x5010 017293 istore 2 ,contw +0x5011 017294 copy rega ,pdata +0x5012 017295 istore 2 ,contw +0x5013 017296 copy timeup ,pdata +0x5014 017297 istore 2 ,contw +0x5015 017298 force 8 ,pdata +0x5016 017299 branch l2cap_proc_signal_disconnect_req_rtn +: 017300 l2cap_proc_signal_disconnect_req_err_rtn: +0x5017 017301 call load_cont_pointers +0x5018 017302 branch l2cap_proc_signal_disconnect_req_rtn +: 017303 l2cap_proc_signal_disconnect_req_rtn: +0x5019 017304 iadd regb ,regb +0x501a 017305 branch l2cap_process_one_signal_rtn +: 017306 l2cap_proc_signal_disconnect_rsp: +0x501b 017307 ifetch 1 ,contr +0x501c 017308 copy pdata ,queue +0x501d 017309 ifetch 2 ,contr +0x501e 017310 copy pdata ,rega +0x501f 017311 copy regc ,pdata +0x5020 017312 isub rega ,regc +0x5021 017313 ifetch 2 ,contr +0x5022 017314 copy pdata ,timeup +0x5023 017315 ifetch 2 ,contr +0x5024 017316 copy pdata ,temp +0x5025 017317 call save_cont_pointers +0x5026 017318 bpatchx patch22_7 ,mem_patch22 +0x5027 017319 setarg l2cap_sdp_channel +0x5028 017320 isub temp ,null +0x5029 017321 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +0x502a 017322 setarg l2cap_rfcomm_channel +0x502b 017323 isub temp ,null +0x502c 017324 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +0x502d 017325 setarg l2cap_hid_control_channel +0x502e 017326 isub temp ,null +0x502f 017327 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +0x5030 017328 setarg l2cap_hid_interrupt_channel +0x5031 017329 isub temp ,null +0x5032 017330 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +0x5033 017331 call l2cap_reject_command +0x5034 017332 branch l2cap_proc_signal_disconnect_rsp_err_rtn +: 017333 l2cap_proc_signal_disconnect_rsp_sdp: +0x5035 017334 copy temp ,rega +0x5036 017335 copy timeup ,temp +0x5037 017336 fetch 2 ,mem_sdp_remote_cid +0x5038 017337 isub temp ,null +0x5039 017338 call l2cap_reset_sdp_channel_state ,zero +0x503a 017339 branch l2cap_proc_signal_disconnect_rsp_rtn +: 017340 l2cap_proc_signal_disconnect_rsp_rfcomm: +0x503b 017341 copy temp ,rega +0x503c 017342 copy timeup ,temp +0x503d 017343 fetch 2 ,mem_rfcomm_remote_cid +0x503e 017344 isub temp ,null +0x503f 017345 call l2cap_reset_rfcomm_channel_state ,zero +0x5040 017346 branch l2cap_proc_signal_disconnect_rsp_rtn +: 017347 l2cap_proc_signal_disconnect_rsp_hid_ctrl: +0x5041 017348 copy temp ,rega +0x5042 017349 copy timeup ,temp +0x5043 017350 fetch 2 ,mem_hid_ctrl_remote_cid +0x5044 017351 isub temp ,null +0x5045 017352 call l2cap_reset_hid_ctrl_state ,zero +0x5046 017353 branch l2cap_proc_signal_disconnect_rsp_rtn +: 017354 l2cap_proc_signal_disconnect_rsp_hid_int: +0x5047 017355 copy temp ,rega +0x5048 017356 copy timeup ,temp +0x5049 017357 fetch 2 ,mem_hid_int_remote_cid +0x504a 017358 isub temp ,null +0x504b 017359 call l2cap_reset_hid_int_state ,zero +0x504c 017360 branch l2cap_proc_signal_disconnect_rsp_rtn +: 017361 l2cap_proc_signal_disconnect_rsp_rtn: +0x504d 017362 call load_cont_pointers +0x504e 017363 branch l2cap_process_one_signal_rtn +: 017364 l2cap_proc_signal_disconnect_rsp_err_rtn: +0x504f 017365 branch l2cap_process_one_signal_rtn +: 017368 l2cap_proc_signal_echo_req: +0x5050 017369 ifetch 1 ,contr +0x5051 017370 copy pdata ,queue +0x5052 017371 ifetch 2 ,contr +0x5053 017372 copy pdata ,rega +0x5054 017373 iadd contr ,contr +0x5055 017374 setarg 9 +0x5056 017375 istore 1 ,contw +0x5057 017376 copy queue ,pdata +0x5058 017377 istore 1 ,contw +0x5059 017378 force 0x0000 ,pdata +0x505a 017379 istore 2 ,contw +0x505b 017380 force 4 ,pdata +0x505c 017381 iadd regb ,regb +0x505d 017382 copy regc ,pdata +0x505e 017383 isub rega ,regc +0x505f 017384 branch l2cap_process_one_signal_rtn +: 017385 l2cap_proc_signal_echo_rsp: +0x5060 017386 branch l2cap_process_one_signal_rtn +: 017388 l2cap_proc_signal_info_rsp: +0x5061 017389 branch l2cap_process_one_signal_rtn +: 017390 l2cap_reject_command: +0x5062 017391 force 0 ,regb +0x5063 017392 call l2cap_get_signal_tx_payload +0x5064 017393 setarg signal_cmd_reject +0x5065 017394 istore 1 ,contw +0x5066 017395 copy queue ,pdata +0x5067 017396 istore 1 ,contw +0x5068 017397 setarg 2 +0x5069 017398 istore 2 ,contw +0x506a 017399 setarg cmd_not_understood +0x506b 017400 istore 2 ,contw +0x506c 017401 increase 6 ,regb +0x506d 017402 arg 4 ,regc +0x506e 017403 branch l2cap_process_one_signal_rtn +: 017407 l2cap_reset_rfcomm_channel_state: +0x506f 017408 setarg 0 +0x5070 017409 store 2 ,mem_rfcomm_tx_pkt_length +0x5071 017410 store 2 ,mem_rfcomm_remote_cid +0x5072 017411 jam 0 ,mem_rfcomm_state +0x5073 017412 rtn +: 017413 l2cap_reset_sdp_channel_state: +0x5074 017414 setarg 0 +0x5075 017415 store 2 ,mem_sdp_tx_pkt_length +0x5076 017416 store 2 ,mem_sdp_remote_cid +0x5077 017417 jam 0 ,mem_sdp_state +0x5078 017418 rtn +: 017419 l2cap_reset_hid_ctrl_state: +0x5079 017420 setarg 0 +0x507a 017421 store 2 ,mem_hid_ctrl_remote_cid +0x507b 017422 jam 0 ,mem_hid_control_state +0x507c 017423 fetch 1 ,mem_hid_interrupt_state +0x507d 017424 beq 0 ,l2cap_reset_hid_disconnected +0x507e 017425 rtn +: 017427 l2cap_reset_hid_int_state: +0x507f 017428 setarg 0 +0x5080 017429 store 2 ,mem_hid_int_remote_cid +0x5081 017430 jam 0 ,mem_hid_interrupt_state +0x5082 017431 fetch 1 ,mem_hid_control_state +0x5083 017432 beq 0 ,l2cap_reset_hid_disconnected +0x5084 017433 rtn +: 017435 l2cap_reset_hid_disconnected: +0x5085 017436 jam bt_evt_hid_disconnected ,mem_fifo_temp +0x5086 017437 branch ui_ipc_send_event +: 017439 l2cap_disconnect_interrupt_req: +0x5087 017440 fetch 1 ,mem_control_tasks +0x5088 017441 set0 l2cap_disconnect_interrupt ,pdata +0x5089 017442 store 1 ,mem_control_tasks +0x508a 017443 fetch 2 ,mem_hid_int_remote_cid +0x508b 017444 rtn blank +0x508c 017445 call l2cap_malloc_signal_channel +0x508d 017446 fetch 2 ,mem_hid_int_remote_cid +0x508e 017447 copy pdata ,rega +0x508f 017448 force l2cap_hid_interrupt_channel ,regb +0x5090 017449 branch l2cap_generate_disconnect_req +: 017450 l2cap_disconnect_control_req: +0x5091 017451 fetch 1 ,mem_control_tasks +0x5092 017452 set0 l2cap_disconnect_control ,pdata +0x5093 017453 store 1 ,mem_control_tasks +0x5094 017454 fetch 2 ,mem_hid_ctrl_remote_cid +0x5095 017455 rtn blank +0x5096 017456 call l2cap_malloc_signal_channel +0x5097 017457 fetch 2 ,mem_hid_ctrl_remote_cid +0x5098 017458 copy pdata ,rega +0x5099 017459 force l2cap_hid_control_channel ,regb +: 017460 l2cap_generate_disconnect_req: +0x509a 017461 call l2cap_get_req_id +0x509b 017462 call l2cap_get_signal_tx_payload +0x509c 017463 force signal_disconnect_req ,pdata +0x509d 017464 istore 1 ,contw +0x509e 017465 fetch 1 ,mem_ml2cap_comm_id +0x509f 017466 istore 1 ,contw +0x50a0 017467 setarg 0x0004 +0x50a1 017468 istore 2 ,contw +0x50a2 017469 copy rega ,pdata +0x50a3 017470 istore 2 ,contw +0x50a4 017471 copy regb ,pdata +0x50a5 017472 istore 2 ,contw +0x50a6 017473 force 0x08 ,temp +0x50a7 017474 branch ml2cap_send_signal +: 017476 ml2cap_send_signal_connect_req: +0x50a8 017477 bpatchx patch23_0 ,mem_patch23 +0x50a9 017478 call l2cap_get_req_id +0x50aa 017479 call l2cap_get_signal_tx_payload +0x50ab 017480 setarg signal_connect_req +0x50ac 017481 istore 1 ,contw +0x50ad 017482 fetch 1 ,mem_ml2cap_comm_id +0x50ae 017483 istore 1 ,contw +0x50af 017484 setarg 0x0004 +0x50b0 017485 istore 2 ,contw +0x50b1 017486 copy temp ,pdata +0x50b2 017487 istore 2 ,contw +0x50b3 017488 copy timeup ,pdata +0x50b4 017489 istore 2 ,contw +0x50b5 017490 arg 8 ,temp +0x50b6 017491 branch ml2cap_send_signal +: 017492 ml2cap_send_signal_config_req: +0x50b7 017493 bpatchx patch23_1 ,mem_patch23 +0x50b8 017494 call l2cap_get_req_id +0x50b9 017495 call l2cap_get_signal_tx_payload +0x50ba 017496 setarg signal_config_req +0x50bb 017497 istore 1 ,contw +0x50bc 017498 fetch 1 ,mem_ml2cap_comm_id +0x50bd 017499 istore 1 ,contw +0x50be 017500 setarg 0x0008 +0x50bf 017501 istore 2 ,contw +0x50c0 017503 copy temp ,pdata +0x50c1 017505 istore 2 ,contw +0x50c2 017506 setarg 0x0000 +0x50c3 017507 istore 2 ,contw +0x50c4 017508 setarg 0x01 +0x50c5 017509 istore 1 ,contw +0x50c6 017510 setarg 0x02 +0x50c7 017511 istore 1 ,contw +0x50c8 017512 setarg l2cap_config_mtu_rfcomm +0x50c9 017513 istore 2 ,contw +0x50ca 017514 arg 0xc ,temp +0x50cb 017515 branch ml2cap_send_signal +: 017516 ml2cap_send_signal_disconn_req: +0x50cc 017517 bpatchx patch23_2 ,mem_patch23 +0x50cd 017518 call l2cap_get_req_id +0x50ce 017519 call l2cap_get_signal_tx_payload +0x50cf 017520 setarg signal_disconnect_req +0x50d0 017521 istore 1 ,contw +0x50d1 017522 fetch 1 ,mem_ml2cap_comm_id +0x50d2 017523 increase 1 ,pdata +0x50d3 017524 copy contw ,rega +0x50d4 017525 store 1 ,mem_ml2cap_comm_id +0x50d5 017526 copy rega ,contw +0x50d6 017527 istore 1 ,contw +0x50d7 017528 setarg 0x0004 +0x50d8 017529 istore 2 ,contw +0x50d9 017530 copy temp ,pdata +0x50da 017531 istore 2 ,contw +0x50db 017532 copy timeup ,pdata +0x50dc 017533 istore 2 ,contw +0x50dd 017534 arg 0x8 ,temp +: 017537 ml2cap_send_signal: +0x50de 017538 storet 2 ,mem_l2cap_signal_tx_length +0x50df 017539 copy temp ,pdata +0x50e0 017540 branch l2cap_malloc_discard ,blank +0x50e1 017541 call l2cap_get_signal_tx_buff +0x50e2 017542 fetch 2 ,mem_l2cap_signal_tx_length +0x50e3 017543 istore 2 ,contw +0x50e4 017544 force l2cap_signal_channel ,pdata +0x50e5 017545 istore 2 ,contw +0x50e6 017546 rtn +: 017548 msdp_send_req_done: +0x50e7 017549 fetch 2 ,mem_sdp_tx_pkt_length +0x50e8 017550 branch assert ,blank +0x50e9 017551 call l2cap_get_sdp_tx_buff +0x50ea 017552 fetch 2 ,mem_sdp_tx_pkt_length +0x50eb 017553 istore 2 ,contw +0x50ec 017554 fetch 2 ,mem_sdp_remote_cid +0x50ed 017555 istore 2 ,contw +0x50ee 017556 rtn +: 017557 ml2cap_rx_multiplexing: +0x50ef 017558 fetch 2 ,mem_l2cap_rx_pkt_length +0x50f0 017559 branch l2cap_rx_reset_state ,blank +0x50f1 017560 bpatchx patch23_3 ,mem_patch23 +0x50f2 017561 fetch 1 ,mem_l2cap_rx_cid +0x50f3 017562 beq l2cap_signal_channel ,ml2cap_call_proc_signal +0x50f4 017563 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +0x50f5 017564 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x50f6 017565 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x50f7 017566 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x50f8 017567 branch l2cap_rx_reset_state +: 017569 ml2cap_call_proc_signal: +0x50f9 017570 bpatchx patch23_4 ,mem_patch23 +0x50fa 017571 call l2cap_malloc_signal_channel +0x50fb 017572 force 0 ,regb +0x50fc 017573 call l2cap_get_signal_tx_payload +0x50fd 017574 copy pdata ,contw +0x50fe 017575 fetch 2 ,mem_l2cap_rx_pkt_length +0x50ff 017576 copy pdata ,regc +0x5100 017577 fetch 2 ,mem_l2cap_payload_ptr +0x5101 017578 iforce contr +: 017579 ml2cap_proc_one_comm_loop: +0x5102 017580 call ml2cap_proc_one_comm +0x5103 017581 increase -4 ,regc +0x5104 017582 nbranch ml2cap_proc_one_comm_loop ,zero +0x5105 017583 copy regb ,temp +0x5106 017584 call ml2cap_send_signal +0x5107 017585 branch l2cap_rx_reset_state +: 017587 ml2cap_proc_one_comm: +0x5108 017588 ifetch 1 ,contr +0x5109 017589 beq signal_connect_req ,ml2cap_proc_signal_connect_req +0x510a 017590 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +0x510b 017591 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +0x510c 017592 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +0x510d 017593 beq signal_config_req ,ml2cap_proc_signal_config_req +0x510e 017594 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +0x510f 017595 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +0x5110 017596 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x5111 017597 beq signal_info_req ,ml2cap_proc_signal_info_req +0x5112 017598 branch ml2cap_proc_send_reject +: 017600 ml2cap_proc_signal_connect_req: +0x5113 017601 call save_cont_pointers +0x5114 017603 call load_cont_pointers +0x5115 017604 branch l2cap_proc_signal_connect_req +: 017605 ml2cap_proc_signal_cmd_reject: +0x5116 017606 ifetch 1 ,contr +0x5117 017607 copy pdata ,queue +0x5118 017608 ifetch 2 ,contr +0x5119 017609 copy pdata ,rega +0x511a 017610 copy regc ,pdata +0x511b 017611 isub rega ,regc +: 017612 mvptr: +0x511c 017613 ifetch 1 ,contr +0x511d 017614 increase -1 ,rega +0x511e 017615 nbranch mvptr ,zero +0x511f 017616 rtn +: 017617 ml2cap_proc_signal_connect_rsp: +0x5120 017618 ifetch 1 ,contr +0x5121 017619 copy pdata ,queue +0x5122 017620 ifetch 2 ,contr +0x5123 017621 copy pdata ,rega +0x5124 017622 ifetch 2 ,contr +0x5125 017623 copy pdata ,timeup +0x5126 017624 ifetch 2 ,contr +0x5127 017625 copy pdata ,temp +0x5128 017626 ifetch 2 ,contr +0x5129 017627 sub pdata ,0 ,null +0x512a 017628 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +0x512b 017629 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +0x512c 017630 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +0x512d 017631 branch ml2cap_proc_signal_connect_rsp_mnosucc +: 017632 ml2cap_proc_signal_connect_refused_result: +0x512e 017633 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +0x512f 017634 call ui_ipc_send_event +: 017635 ml2cap_proc_signal_connect_rsp_mnosucc: +0x5130 017636 ifetch 2 ,contr +0x5131 017637 branch mnosucc +: 017638 ml2cap_proc_signal_connect_rsp_sucessful: +0x5132 017639 call save_cont_pointers +0x5133 017643 bpatchx patch23_5 ,mem_patch23 +0x5134 017644 setarg l2cap_sdp_channel +0x5135 017645 isub temp ,null +0x5136 017646 branch ml2cap_proc_signal_connect_rsp_sdp ,zero +0x5137 017647 setarg l2cap_rfcomm_channel +0x5138 017648 isub temp ,null +0x5139 017649 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +0x513a 017650 setarg l2cap_hid_interrupt_channel +0x513b 017651 isub temp ,null +0x513c 017652 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +0x513d 017653 setarg l2cap_hid_control_channel +0x513e 017654 isub temp ,null +0x513f 017655 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x5140 017656 branch mnosucc +: 017657 ml2cap_proc_signal_connect_rsp_sdp: +0x5141 017658 copy timeup ,pdata +0x5142 017659 store 2 ,mem_sdp_remote_cid +0x5143 017660 fetch 1 ,mem_sdp_state +0x5144 017661 set1 l2cap_channel_state_conn_res +0x5145 017662 store 1 ,mem_sdp_state +0x5146 017663 branch mnosucc1 +: 017664 ml2cap_proc_signal_connect_rsp_rfcomm: +0x5147 017665 copy timeup ,pdata +0x5148 017666 store 2 ,mem_rfcomm_remote_cid +0x5149 017667 fetch 1 ,mem_rfcomm_state +0x514a 017668 set1 l2cap_channel_state_conn_res +0x514b 017669 store 1 ,mem_rfcomm_state +0x514c 017670 branch mnosucc1 +: 017671 ml2cap_proc_signal_connect_rsp_hid_ctrl: +0x514d 017672 copy timeup ,pdata +0x514e 017673 store 2 ,mem_hid_ctrl_remote_cid +0x514f 017674 fetch 1 ,mem_hid_control_state +0x5150 017675 set1 l2cap_channel_state_conn_res +0x5151 017676 store 1 ,mem_hid_control_state +0x5152 017677 branch mnosucc1 +: 017678 ml2cap_proc_signal_connect_rsp_hid_int: +0x5153 017679 copy timeup ,pdata +0x5154 017680 store 2 ,mem_hid_int_remote_cid +0x5155 017681 fetch 1 ,mem_hid_interrupt_state +0x5156 017682 set1 l2cap_channel_state_conn_res +0x5157 017683 store 1 ,mem_hid_interrupt_state +: 017686 mnosucc1: +0x5158 017687 call load_cont_pointers +: 017688 mnosucc: +0x5159 017689 copy regc ,pdata +0x515a 017690 isub rega ,regc +0x515b 017691 rtn +: 017693 ml2cap_proc_signal_config_rsp: +0x515c 017694 ifetch 1 ,contr +0x515d 017695 copy pdata ,queue +0x515e 017696 ifetch 2 ,contr +0x515f 017697 copy pdata ,rega +0x5160 017698 copy regc ,pdata +0x5161 017699 isub rega ,regc +0x5162 017700 ifetch 2 ,contr +0x5163 017701 copy pdata ,timeup +0x5164 017702 ifetch 2 ,contr +0x5165 017703 ifetch 2 ,contr +0x5166 017704 nbranch mcrsdone1 ,blank +0x5167 017705 call save_cont_pointers +0x5168 017709 copy timeup ,temp +0x5169 017710 bpatchx patch23_6 ,mem_patch23 +0x516a 017711 setarg l2cap_sdp_channel +0x516b 017712 isub temp ,null +0x516c 017713 branch ml2cap_proc_signal_config_rsp_sdp ,zero +0x516d 017714 setarg l2cap_rfcomm_channel +0x516e 017715 isub temp ,null +0x516f 017716 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +0x5170 017717 setarg l2cap_hid_control_channel +0x5171 017718 isub temp ,null +0x5172 017719 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x5173 017720 setarg l2cap_hid_interrupt_channel +0x5174 017721 isub temp ,null +0x5175 017722 branch ml2cap_proc_signal_config_rsp_hid_int ,zero +: 017723 ml2cap_proc_signal_config_rsp_sdp: +0x5176 017724 fetch 1 ,mem_sdp_state +0x5177 017725 set1 l2cap_channel_state_rcv_cfg_res +0x5178 017726 store 1 ,mem_sdp_state +0x5179 017727 rtn +: 017728 ml2cap_proc_signal_config_rsp_rfcomm: +0x517a 017729 fetch 1 ,mem_rfcomm_state +0x517b 017730 set1 l2cap_channel_state_rcv_cfg_res +0x517c 017731 store 1 ,mem_rfcomm_state +0x517d 017732 rtn +: 017733 ml2cap_proc_signal_config_rsp_hid_ctrl: +0x517e 017734 fetch 1 ,mem_hid_control_state +0x517f 017735 set1 l2cap_channel_state_rcv_cfg_res +0x5180 017736 store 1 ,mem_hid_control_state +0x5181 017737 rtn +: 017738 ml2cap_proc_signal_config_rsp_hid_int: +0x5182 017739 fetch 1 ,mem_hid_interrupt_state +0x5183 017740 set1 l2cap_channel_state_rcv_cfg_res +0x5184 017741 store 1 ,mem_hid_interrupt_state +0x5185 017742 jam bt_evt_hid_connected ,mem_fifo_temp +0x5186 017743 branch ui_ipc_send_event +: 017746 mcfrsdone: +0x5187 017747 call load_cont_pointers +: 017748 mcrsdone1: +0x5188 017749 increase -6 ,rega +: 017750 mloop2: +0x5189 017751 branch mcrsdone ,zero +0x518a 017752 increase 1 ,contr +0x518b 017753 increase -1 ,rega +0x518c 017754 branch mloop2 +: 017755 mcrsdone: +0x518d 017756 rtn +: 017757 ml2cap_proc_signal_config_req: +0x518e 017758 ifetch 1 ,contr +0x518f 017759 copy pdata ,queue +0x5190 017760 ifetch 2 ,contr +0x5191 017761 copy pdata ,rega +0x5192 017762 copy regc ,pdata +0x5193 017763 isub rega ,regc +0x5194 017764 ifetch 2 ,contr +0x5195 017765 increase 2 ,contr +0x5196 017766 copy pdata ,temp +0x5197 017767 setarg signal_config_rsp +0x5198 017768 istore 1 ,contw +0x5199 017769 copy queue ,pdata +0x519a 017770 istore 1 ,contw +0x519b 017771 increase 2 ,rega +0x519c 017772 copy rega ,pdata +0x519d 017773 istore 2 ,contw +0x519e 017774 call save_cont_pointers +0x519f 017775 bpatchx patch23_7 ,mem_patch23 +0x51a0 017776 setarg l2cap_sdp_channel +0x51a1 017777 isub temp ,null +0x51a2 017778 branch ml2cap_proc_signal_config_req_sdp ,zero +0x51a3 017779 setarg l2cap_rfcomm_channel +0x51a4 017780 isub temp ,null +0x51a5 017781 branch ml2cap_proc_signal_config_req_rfcomm ,zero +0x51a6 017782 setarg l2cap_hid_control_channel +0x51a7 017783 isub temp ,null +0x51a8 017784 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +0x51a9 017785 setarg l2cap_hid_interrupt_channel +0x51aa 017786 isub temp ,null +0x51ab 017787 branch ml2cap_proc_signal_config_req_hid_int ,zero +0x51ac 017788 branch mcfgrq_done +: 017789 ml2cap_proc_signal_config_req_sdp: +0x51ad 017790 fetch 1 ,mem_sdp_state +0x51ae 017791 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51af 017792 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51b0 017793 store 1 ,mem_sdp_state +0x51b1 017794 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +0x51b2 017795 fetcht 1 ,mem_control_tasks +0x51b3 017796 set1 l2cap_init_config_req ,temp +0x51b4 017797 storet 1 ,mem_control_tasks +0x51b5 017798 copy queue ,pdata +0x51b6 017799 increase 1 ,pdata +0x51b7 017800 store 1 ,mem_config_identifier +0x51b8 017801 fetch 1 ,mem_sdp_state +0x51b9 017802 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x51ba 017803 store 1 ,mem_sdp_state +: 017804 ml2cap_proc_signal_config_req_sdp_nsndreq: +0x51bb 017805 fetch 2 ,mem_sdp_remote_cid +0x51bc 017806 store 2 ,mem_config_req_dest_cid +0x51bd 017807 branch mcfgrq_done +: 017808 ml2cap_proc_signal_config_req_rfcomm: +0x51be 017809 fetch 1 ,mem_rfcomm_state +0x51bf 017810 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c0 017811 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c1 017812 store 1 ,mem_rfcomm_state +0x51c2 017813 fetch 2 ,mem_rfcomm_remote_cid +0x51c3 017814 branch mcfgrq_done +: 017815 ml2cap_proc_signal_config_req_hid_ctrl: +0x51c4 017816 fetch 1 ,mem_hid_control_state +0x51c5 017817 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c6 017818 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c7 017819 store 1 ,mem_hid_control_state +0x51c8 017820 fetch 2 ,mem_hid_ctrl_remote_cid +0x51c9 017821 branch mcfgrq_done +: 017822 ml2cap_proc_signal_config_req_hid_int: +0x51ca 017823 fetch 1 ,mem_hid_interrupt_state +0x51cb 017824 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51cc 017825 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51cd 017826 store 1 ,mem_hid_interrupt_state +0x51ce 017827 fetch 2 ,mem_hid_int_remote_cid +: 017830 mcfgrq_done: +0x51cf 017831 copy pdata ,timeup +0x51d0 017832 call load_cont_pointers +0x51d1 017834 copy timeup ,pdata +0x51d2 017836 istore 2 ,contw +0x51d3 017837 force 0x0000 ,pdata +0x51d4 017838 istore 2 ,contw +0x51d5 017839 force 0x0000 ,pdata +0x51d6 017840 istore 2 ,contw +0x51d7 017841 force 10 ,pdata +0x51d8 017842 iadd regb ,regb +0x51d9 017843 increase -6 ,rega +: 017844 mloop1: +0x51da 017845 branch mcrqdone ,zero +0x51db 017846 ifetch 1 ,contr +0x51dc 017847 istore 1 ,contw +0x51dd 017848 increase 1 ,regb +0x51de 017849 increase -1 ,rega +0x51df 017850 branch mloop1 +: 017851 mcrqdone: +0x51e0 017852 rtn +: 017853 ml2cap_proc_signal_disconn_req: +0x51e1 017854 ifetch 1 ,contr +0x51e2 017855 copy pdata ,queue +0x51e3 017856 ifetch 2 ,contr +0x51e4 017857 copy pdata ,rega +0x51e5 017858 copy regc ,pdata +0x51e6 017859 isub rega ,regc +0x51e7 017861 ifetch 2 ,contr +0x51e8 017862 copy pdata ,rega +0x51e9 017863 ifetch 2 ,contr +0x51ea 017864 copy pdata ,timeup +0x51eb 017865 call save_cont_pointers +0x51ec 017866 bpatchx patch24_0 ,mem_patch24 +0x51ed 017867 setarg l2cap_sdp_channel +0x51ee 017868 copy rega ,temp +0x51ef 017869 isub temp ,null +0x51f0 017870 branch ml2cap_proc_signal_disconn_sdp ,zero +0x51f1 017871 setarg l2cap_hid_control_channel +0x51f2 017872 copy rega ,temp +0x51f3 017873 isub temp ,null +0x51f4 017874 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +0x51f5 017875 setarg l2cap_hid_interrupt_channel +0x51f6 017876 copy rega ,temp +0x51f7 017877 isub temp ,null +0x51f8 017878 branch ml2cap_proc_signal_disconn_hid_int ,zero +0x51f9 017879 branch mclsrfc +: 017880 ml2cap_proc_signal_disconn_sdp: +0x51fa 017881 setarg 0x0000 +0x51fb 017882 store 2 ,mem_sdp_tx_pkt_length +0x51fc 017883 store 2 ,mem_sdp_remote_cid +0x51fd 017884 store 1 ,mem_sdp_state +0x51fe 017885 branch mclssdp +: 017886 ml2cap_proc_signal_disconn_hid_ctrl: +0x51ff 017887 call l2cap_reset_hid_ctrl_state +0x5200 017888 branch mclssdp +: 017889 ml2cap_proc_signal_disconn_hid_int: +0x5201 017890 call l2cap_reset_hid_int_state +0x5202 017896 branch mclssdp +: 017897 mclsrfc: +0x5203 017898 setarg 0x0000 +0x5204 017899 store 2 ,mem_rfcomm_tx_pkt_length +: 017900 mclssdp: +0x5205 017901 call load_cont_pointers +0x5206 017902 setarg signal_disconnect_rsp +0x5207 017903 istore 1 ,contw +0x5208 017904 copy queue ,pdata +0x5209 017905 istore 1 ,contw +0x520a 017906 setarg 0x0004 +0x520b 017907 istore 2 ,contw +0x520c 017908 copy rega ,pdata +0x520d 017909 istore 2 ,contw +0x520e 017910 copy timeup ,pdata +0x520f 017911 istore 2 ,contw +0x5210 017912 force 8 ,pdata +0x5211 017913 iadd regb ,regb +0x5212 017914 rtn +: 017916 ml2cap_proc_signal_disconn_rsp: +0x5213 017917 ifetch 1 ,contr +0x5214 017918 copy pdata ,queue +0x5215 017919 ifetch 2 ,contr +0x5216 017920 copy pdata ,rega +0x5217 017921 ifetch 2 ,contr +0x5218 017922 copy pdata ,timeup +0x5219 017923 ifetch 2 ,contr +0x521a 017924 copy pdata ,temp +0x521b 017925 call save_cont_pointers +0x521c 017926 bpatchx patch24_1 ,mem_patch24 +0x521d 017927 fetch 1 ,mem_ml2cap_comm_id +0x521e 017928 icompare 0xff ,queue +0x521f 017929 nbranch mdisdone ,true +0x5220 017930 setarg l2cap_sdp_channel +0x5221 017931 isub temp ,null +0x5222 017932 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +0x5223 017933 setarg l2cap_rfcomm_channel +0x5224 017934 isub temp ,null +0x5225 017935 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +0x5226 017936 branch mdisdone +: 017937 ml2cap_proc_signal_disconn_rsp_sdp: +0x5227 017938 jam 0 ,mem_sdp_remote_cid +0x5228 017939 jam 0 ,mem_sdp_state +0x5229 017940 branch mdisdone +: 017941 ml2cap_proc_signal_disconn_rsp_rfcomm: +: 017944 mdisdone: +0x522a 017945 call load_cont_pointers +0x522b 017946 copy regc ,pdata +0x522c 017947 isub rega ,regc +0x522d 017948 rtn +: 017950 ml2cap_proc_send_reject: +0x522e 017951 setarg signal_cmd_reject +0x522f 017952 istore 1 ,contw +0x5230 017953 ifetch 1 ,contr +0x5231 017954 istore 1 ,contw +0x5232 017955 setarg 0x0002 +0x5233 017956 istore 2 ,contw +0x5234 017957 setarg 0x0000 +0x5235 017958 istore 2 ,contw +0x5236 017959 setarg 0x0006 +0x5237 017960 iadd regb ,regb +0x5238 017961 force 4 ,regc +0x5239 017962 rtn +: 017965 l2cap_get_req_id: +0x523a 017966 fetch 1 ,mem_ml2cap_comm_id +0x523b 017967 increase 1 ,pdata +0x523c 017968 bne 0 ,l2cap_get_req_id_ok +0x523d 017969 increase 1 ,pdata +: 017970 l2cap_get_req_id_ok: +0x523e 017971 store 1 ,mem_ml2cap_comm_id +0x523f 017972 rtn +: 017982 l2cap_malloc: +0x5240 017983 bpatchx patch24_2 ,mem_patch24 +0x5241 017984 arg 0 ,regb +0x5242 017985 call l2cap_malloc_is_fifo_full +0x5243 017986 nbranch assert ,blank +0x5244 017987 call l2cap_malloc_get_full_map +0x5245 017988 arg mem_tx_buff0 ,regb +0x5246 017989 arg 0 ,queue +: 017990 l2cap_malloc_loop: +0x5247 017991 fetcht 1 ,mem_used_map +0x5248 017992 qisolate1 temp +0x5249 017993 branch l2cap_malloc_next ,true +0x524a 017994 call l2cap_malloc_enough +0x524b 017995 sub timeup ,0 ,null +0x524c 017996 branch l2cap_malloc_next ,positive +0x524d 017997 call l2cap_malloc_into_fifo +0x524e 017998 branch l2cap_malloc_rtn +: 017999 l2cap_malloc_next: +0x524f 018000 increase 128 ,regb +0x5250 018001 increase 1 ,queue +0x5251 018002 setarg 8 +0x5252 018003 isub queue ,null +0x5253 018004 branch l2cap_malloc_loop ,positive +0x5254 018005 arg 0 ,regb +: 018006 l2cap_malloc_rtn: +0x5255 018007 copy regb ,pdata +0x5256 018008 branch assert ,blank +0x5257 018009 rtn +: 018017 l2cap_malloc_fifo_out: +0x5258 018018 bpatchx patch24_3 ,mem_patch24 +0x5259 018019 call l2cap_malloc_fifo_get_first_ptr +0x525a 018020 increase 1 ,contr +0x525b 018021 ifetch 2 ,contr +0x525c 018022 rtn +: 018028 l2cap_malloc_free: +0x525d 018029 bpatchx patch24_4 ,mem_patch24 +0x525e 018030 call l2cap_malloc_fifo_get_first_ptr +0x525f 018031 copy contr ,contw +0x5260 018032 copy contr ,temp +0x5261 018033 setarg 0 +0x5262 018034 istore 3 ,contw +0x5263 018035 rtn +: 018040 l2cap_malloc_discard: +0x5264 018041 bpatchx patch24_5 ,mem_patch24 +0x5265 018042 call l2cap_malloc_is_fifo_empty +0x5266 018043 branch assert ,blank +0x5267 018044 fetch 3 ,mem_tx_fifo2 +0x5268 018045 store 3 ,mem_tx_fifo3 +0x5269 018046 fetch 3 ,mem_tx_fifo1 +0x526a 018047 store 3 ,mem_tx_fifo2 +0x526b 018048 fetch 3 ,mem_tx_fifo0 +0x526c 018049 store 3 ,mem_tx_fifo1 +0x526d 018050 rtn +: 018056 l2cap_malloc_is_fifo_full: +0x526e 018057 bpatchx patch24_6 ,mem_patch24 +0x526f 018058 fetch 3 ,mem_tx_fifo0 +0x5270 018059 rtn +: 018065 l2cap_malloc_is_fifo_nearly_full: +0x5271 018066 bpatchx patch24_7 ,mem_patch24 +0x5272 018067 fetch 3 ,mem_tx_fifo1 +0x5273 018068 rtn +: 018074 l2cap_malloc_is_fifo_empty: +0x5274 018075 bpatchx patch25_0 ,mem_patch25 +0x5275 018076 fetch 3 ,mem_tx_fifo3 +0x5276 018077 rtn +: 018082 l2cap_malloc_fifo_get_first_ptr: +0x5277 018083 call l2cap_malloc_is_fifo_empty +0x5278 018084 branch assert ,blank +0x5279 018085 arg mem_tx_fifo0 ,contr +: 018086 l2cap_malloc_free_loop: +0x527a 018087 ifetch 3 ,contr +0x527b 018088 branch l2cap_malloc_free_loop ,blank +0x527c 018089 increase -3 ,contr +0x527d 018090 rtn +: 018097 l2cap_malloc_get_full_map: +0x527e 018098 bpatchx patch25_1 ,mem_patch25 +0x527f 018099 arg 4 ,loopcnt +0x5280 018100 arg mem_tx_fifo0_map ,contr +0x5281 018101 arg 0 ,temp +: 018102 l2cap_malloc_get_full_map_loop: +0x5282 018103 ifetch 3 ,contr +0x5283 018104 and pdata ,0xff ,pdata +0x5284 018105 ior temp ,temp +0x5285 018106 loop l2cap_malloc_get_full_map_loop +0x5286 018107 storet 1 ,mem_used_map +0x5287 018108 rtn +: 018116 l2cap_malloc_into_fifo: +0x5288 018117 bpatchx patch25_2 ,mem_patch25 +0x5289 018118 call l2cap_malloc_is_fifo_full +0x528a 018119 nbranch assert ,blank +0x528b 018120 call l2cap_malloc_is_fifo_empty +0x528c 018121 branch l2cap_malloc_into_fifo_no_push ,blank +0x528d 018122 fetch 3 ,mem_tx_fifo1 +0x528e 018123 store 3 ,mem_tx_fifo0 +0x528f 018124 ifetch 3 ,contr +0x5290 018125 istore 3 ,contw +0x5291 018126 ifetch 3 ,contr +0x5292 018127 istore 3 ,contw +0x5293 018128 setarg 0 +0x5294 018129 istore 3 ,contw +: 018130 l2cap_malloc_into_fifo_no_push: +0x5295 018131 arg 0 ,temp +0x5296 018132 copy timeup ,pdata +0x5297 018133 iadd queue ,pdata +: 018134 l2cap_malloc_into_fifo_loop: +0x5298 018135 qset1 temp +0x5299 018136 increase 1 ,queue +0x529a 018137 isub queue ,null +0x529b 018138 nbranch l2cap_malloc_into_fifo_loop ,zero +0x529c 018140 lshift8 regb ,pdata +0x529d 018141 ior temp ,pdata +0x529e 018142 store 3 ,mem_tx_fifo3 +0x529f 018143 rtn +: 018153 l2cap_malloc_enough: +0x52a0 018154 bpatchx patch25_3 ,mem_patch25 +0x52a1 018155 call l2cap_malloc_get_full_map +0x52a2 018156 copy queue ,regc +0x52a3 018157 arg 0 ,temp +0x52a4 018158 arg 0 ,timeup +: 018160 l2cap_malloc_enough_loop: +0x52a5 018161 copy queue ,pdata +0x52a6 018162 beq 8 ,l2cap_malloc_enough_end +0x52a7 018163 fetch 1 ,mem_used_map +0x52a8 018164 qisolate1 pdata +0x52a9 018165 branch l2cap_malloc_enough_end ,true +0x52aa 018166 increase 128 ,temp +0x52ab 018167 increase 1 ,queue +0x52ac 018168 copy rega ,pdata +0x52ad 018169 isub temp ,null +0x52ae 018170 branch l2cap_malloc_enough_end ,zero +0x52af 018171 branch l2cap_malloc_enough_loop ,positive +: 018172 l2cap_malloc_enough_end: +0x52b0 018173 copy temp ,pdata +0x52b1 018174 isub rega ,null +0x52b2 018175 nbranch l2cap_malloc_enough_rtn ,positive +0x52b3 018176 copy queue ,pdata +0x52b4 018177 copy regc ,temp +0x52b5 018178 isub temp ,timeup +: 018179 l2cap_malloc_enough_rtn: +0x52b6 018180 copy regc ,queue +0x52b7 018181 rtn +: 018184 l2cap_malloc_signal_channel: +0x52b8 018185 bpatchx patch25_4 ,mem_patch25 +0x52b9 018186 arg l2cap_signal_malloc_size ,rega +0x52ba 018187 call l2cap_malloc +0x52bb 018188 store 2 ,mem_l2cap_signal_tx_buff_ptr +0x52bc 018189 increase 4 ,pdata +0x52bd 018190 store 2 ,mem_l2cap_signal_tx_payload_ptr +0x52be 018191 setarg 0 +0x52bf 018192 store 2 ,mem_l2cap_signal_tx_length +0x52c0 018193 rtn +: 018195 l2cap_get_signal_tx_buff: +0x52c1 018196 fetch 2 ,mem_l2cap_signal_tx_buff_ptr +0x52c2 018197 branch l2cap_util_pdata_to_contw +: 018199 l2cap_get_signal_tx_payload: +0x52c3 018200 fetch 2 ,mem_l2cap_signal_tx_payload_ptr +0x52c4 018201 branch l2cap_util_pdata_to_contw +: 018204 l2cap_malloc_sdp_channel: +0x52c5 018205 bpatchx patch25_5 ,mem_patch25 +0x52c6 018206 arg sdp_malloc_size ,rega +0x52c7 018207 call l2cap_malloc +0x52c8 018208 store 2 ,mem_sdp_tx_buff_ptr +0x52c9 018209 increase 4 ,pdata +0x52ca 018210 store 2 ,mem_sdp_tx_payload_ptr +0x52cb 018211 setarg 0 +0x52cc 018212 store 2 ,mem_sdp_tx_pkt_length +0x52cd 018213 rtn +: 018215 l2cap_get_sdp_tx_buff: +0x52ce 018216 fetch 2 ,mem_sdp_tx_buff_ptr +0x52cf 018217 branch l2cap_util_pdata_to_contw +: 018219 l2cap_get_sdp_tx_payload: +0x52d0 018220 fetch 2 ,mem_sdp_tx_payload_ptr +0x52d1 018221 branch l2cap_util_pdata_to_contw +: 018224 l2cap_malloc_rfcomm_channel: +0x52d2 018225 bpatchx patch25_6 ,mem_patch25 +0x52d3 018226 call push_stack +0x52d4 018227 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +0x52d5 018228 call l2cap_malloc_is_fifo_full +0x52d6 018229 nrtn blank +0x52d7 018230 arg rfcomm_malloc_size ,rega +0x52d8 018231 call l2cap_malloc +0x52d9 018232 store 2 ,mem_rfcomm_tx_buff_ptr +0x52da 018233 increase 4 ,pdata +0x52db 018234 store 2 ,mem_rfcomm_tx_payload_ptr +0x52dc 018235 setarg 0 +0x52dd 018236 store 2 ,mem_rfcomm_tx_pkt_length +0x52de 018237 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x52df 018238 branch pop_stack +: 018240 l2cap_get_rfcomm_tx_buff: +0x52e0 018241 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x52e1 018242 branch l2cap_util_pdata_to_contw +: 018244 l2cap_util_pdata_to_contw: +0x52e2 018245 branch assert ,blank +0x52e3 018246 copy pdata ,contw +0x52e4 018247 rtn +: 018250 l2cap_lpm_save_calc_len: +0x52e5 018251 bpatchx patch25_7 ,mem_patch25 +0x52e6 018252 arg 0 ,regb +0x52e7 018253 arg mem_tx_fifo0_map ,rega +0x52e8 018254 increase -2 ,rega +: 018255 l2cap_lpm_save_calc_len_loop: +0x52e9 018256 increase 2 ,rega +0x52ea 018257 setarg mem_tx_fifo_end +0x52eb 018258 isub rega ,null +0x52ec 018259 branch l2cap_lpm_save_calc_len_end ,zero +0x52ed 018260 ifetch 1 ,rega +0x52ee 018261 increase 1 ,rega +0x52ef 018262 branch l2cap_lpm_save_calc_len_loop ,blank +0x52f0 018263 ifetcht 2 ,rega +0x52f1 018264 ifetch 2 ,temp +0x52f2 018265 iadd regb ,regb +0x52f3 018266 increase 4 ,regb +0x52f4 018267 branch l2cap_lpm_save_calc_len_loop +: 018268 l2cap_lpm_save_calc_len_end: +0x52f5 018269 copy regb ,pdata +0x52f6 018270 rtn +: 018273 l2cap_lpm_get_wake_lock: +0x52f7 018274 arg wake_lock_l2cap_tx ,queue +0x52f8 018275 branch lpm_get_wake_lock +: 018277 l2cap_lpm_put_wake_lock: +0x52f9 018278 arg wake_lock_l2cap_tx ,queue +0x52fa 018279 branch lpm_put_wake_lock +: 018281 l2cap_lpm_save_txbuf: +0x52fb 018282 bpatchx patch26_0 ,mem_patch26 +0x52fc 018283 call l2cap_malloc_get_full_map +0x52fd 018284 fetch 1 ,mem_used_map +0x52fe 018285 rtn blank +0x52ff 018286 call l2cap_lpm_save_calc_len +0x5300 018287 arg l2cap_lpm_txbuf_len ,temp +0x5301 018288 isub temp ,null +0x5302 018289 branch l2cap_lpm_get_wake_lock ,positive +0x5303 018290 call l2cap_lpm_put_wake_lock +0x5304 018291 arg mem_l2cap_lpm_txbuf ,contw +0x5305 018292 arg mem_tx_fifo0 ,rega +: 018293 l2cap_lpm_save_txbuf_loop: +0x5306 018294 setarg mem_tx_fifo_end +0x5307 018295 isub rega ,null +0x5308 018296 rtn zero +0x5309 018297 ifetch 1 ,rega +0x530a 018298 increase 1 ,rega +0x530b 018299 nbranch l2cap_lpm_save_txbuf_nempty ,blank +0x530c 018300 istore 2 ,contw +0x530d 018301 increase 2 ,rega +0x530e 018302 branch l2cap_lpm_save_txbuf_loop +: 018303 l2cap_lpm_save_txbuf_nempty: +0x530f 018304 ifetch 2 ,rega +0x5310 018305 increase 2 ,rega +0x5311 018306 copy pdata ,contr +0x5312 018307 ifetch 2 ,contr +0x5313 018308 istore 2 ,contw +0x5314 018309 copy pdata ,loopcnt +0x5315 018310 increase 2 ,loopcnt +0x5316 018311 call memcpy +0x5317 018312 branch l2cap_lpm_save_txbuf_loop +: 018314 l2cap_lpm_load_txbuf: +0x5318 018315 bpatchx patch26_1 ,mem_patch26 +0x5319 018316 call l2cap_malloc_get_full_map +0x531a 018317 fetch 1 ,mem_used_map +0x531b 018318 rtn blank +0x531c 018319 arg mem_tx_fifo0_ptr ,rega +0x531d 018320 increase -3 ,rega +0x531e 018321 arg mem_l2cap_lpm_txbuf ,contr +: 018322 l2cap_lpm_load_txbuf_loop: +0x531f 018323 increase 3 ,rega +0x5320 018324 setarg mem_tx_fifo_end + 1 +0x5321 018325 isub rega ,null +0x5322 018326 rtn zero +0x5323 018327 ifetch 2 ,contr +0x5324 018328 branch l2cap_lpm_load_txbuf_loop ,blank +0x5325 018329 increase 4 ,pdata +0x5326 018330 copy pdata ,loopcnt +0x5327 018331 copy contr ,regb +0x5328 018332 ifetch 2 ,rega +0x5329 018333 copy pdata ,contw +0x532a 018334 copy regb ,contr +0x532b 018335 increase -2 ,contr +0x532c 018336 call memcpy +0x532d 018337 branch l2cap_lpm_load_txbuf_loop +: 018347 le_init_conn: +0x532e 018348 bpatchx patch26_2 ,mem_patch26 +0x532f 018349 disable wake +0x5330 018350 jam 1 ,mem_le_conn_handle +0x5331 018351 jam 3 ,mem_le_state +0x5332 018352 jam 1 ,mem_le_arq +0x5333 018353 setarg -1 +0x5334 018354 store 2 ,mem_le_event_count +0x5335 018355 force 0 ,pdata +0x5336 018356 store 1 ,mem_le_ch +0x5337 018357 store 1 ,mem_le_op +0x5338 018358 store 3 ,mem_sniff_rcv +0x5339 018359 store 3 ,mem_sniff_lost +0x533a 018360 store 5 ,mem_le_pcnt_tx +0x533b 018361 set1 39 ,pdata +0x533c 018362 store 5 ,mem_le_pcnt_rx +0x533d 018363 jam 1 ,mem_le_txheader +0x533e 018364 jam 0 ,mem_le_txlen +0x533f 018365 branch le_supervision_flush +: 018367 le_init_master: +0x5340 018368 bpatchx patch26_3 ,mem_patch26 +0x5341 018369 enable master +0x5342 018370 jam lemode_master ,mem_le_mode +0x5343 018371 jam 1 ,mem_le_att_handle +0x5344 018372 jam 1 ,mem_le_search_handle_start +0x5345 018373 setarg 0xffff +0x5346 018374 store 2 ,mem_le_search_handle_end +0x5347 018375 force 0 ,pdata +0x5348 018376 store 5 ,mem_le_pcnt_rx +0x5349 018377 set1 39 ,pdata +0x534a 018378 store 5 ,mem_le_pcnt_tx +0x534b 018379 branch le_init_conn +: 018382 le_init_slave: +0x534c 018383 bpatchx patch26_4 ,mem_patch26 +0x534d 018384 disable master +0x534e 018385 setarg 0x17 +0x534f 018386 store 2 ,mem_le_remote_mtu +0x5350 018387 jam lemode_slave ,mem_le_mode +0x5351 018388 jam 0 ,mem_le_adv_enable +0x5352 018389 jam 0 ,mem_lpm_current_mult +0x5353 018390 jam flag_le_pairing_null ,mem_le_pairing_state +0x5354 018391 jam flag_le_enc_null ,mem_le_enc_state +0x5355 018392 fetch 2 ,mem_le_superto +0x5356 018393 store 2 ,mem_le_init_superto +0x5357 018394 fetch 2 ,mem_le_tsniff +0x5358 018395 mul32 pdata ,5 ,pdata +0x5359 018396 rshift4 pdata ,pdata +0x535a 018397 store 2 ,mem_le_superto +0x535b 018398 branch le_init_conn +: 018404 le_dispatch: +0x535c 018405 call le_enable +0x535d 018406 call le_scan +0x535e 018407 call le_adv +0x535f 018408 branch le_disable +: 018410 le_conn_dispatch: +0x5360 018411 bpatchx patch26_5 ,mem_patch26 +0x5361 018412 call le_enable +0x5362 018413 call app_process_ble +0x5363 018414 fetch 1 ,mem_le_mode +0x5364 018415 beq lemode_master ,le_master_dispatch +0x5365 018416 branch le_slave_dispatch +: 018422 le_master_dispatch: +0x5366 018423 bpatchx patch26_6 ,mem_patch26 +0x5367 018424 enable master +0x5368 018425 call le_supervision_update +0x5369 018426 branch le_master_disconn ,positive +0x536a 018427 call check_ble_disabled +0x536b 018428 call le_setup +0x536c 018429 call le_prepare_tx +0x536d 018430 disable match +0x536e 018431 call le_transmit_receive_sifs +0x536f 018432 nrtn match +0x5370 018433 bpatchx patch26_7 ,mem_patch26 +0x5371 018434 fetch 1 ,mem_le_conn_rcv +0x5372 018435 increase 1 ,pdata +0x5373 018436 store 1 ,mem_le_conn_rcv +0x5374 018437 call le_acknowledge +0x5375 018438 disable master +0x5376 018439 rtn +: 018441 le_master_disconn: +0x5377 018442 call le_disconnect +0x5378 018443 disable master +0x5379 018444 rtn +: 018449 le_slave_dispatch: +0x537a 018450 bpatchx patch27_0 ,mem_patch27 +0x537b 018451 jam 0 ,mem_le_md_count +0x537c 018452 call sp_calc_sequence_256 +0x537d 018453 call le_secure_connect_sm +0x537e 018454 disable attempt +0x537f 018455 call le_supervision_update +0x5380 018456 branch le_slave_disconn ,positive +0x5381 018457 call check_ble_disabled +0x5382 018458 call le_setup +0x5383 018459 call le_receive_slave +0x5384 018460 nbranch le_slave_unsync ,sync +0x5385 018461 call le_got_first_packet +0x5386 018462 branch le_slave_match ,match +0x5387 018463 branch le_slave_cont +: 018466 le_slave_match: +0x5388 018467 bpatchx patch27_1 ,mem_patch27 +0x5389 018468 fetch 1 ,mem_le_md_count +0x538a 018469 pincrease 1 +0x538b 018470 store 1 ,mem_le_md_count +0x538c 018471 beq le_md_max_count ,le_slave_cont +0x538d 018472 call le_acknowledge +0x538e 018473 call le_prepare_tx +0x538f 018474 call le_transmit_norx +0x5390 018475 call le_parse +0x5391 018476 fetch 2 ,mem_cb_ble_transmit +0x5392 018477 call callback_func +0x5393 018478 call le_check_md +0x5394 018479 branch le_slave_more_data ,user +: 018480 le_slave_cont: +0x5395 018481 bpatchx patch27_2 ,mem_patch27 +0x5396 018482 call le_pairing_sm +0x5397 018483 call le_check_paring_time +0x5398 018484 call check_51cmd +0x5399 018485 fetch 1 ,mem_le_op +0x539a 018486 bbit1 op_disconn ,le_slave_disconn +: 018487 le_slave_unsync: +0x539b 018488 bpatchx patch27_3 ,mem_patch27 +0x539c 018489 call le_lpm_set_mult +0x539d 018490 call le_update_channel_map +0x539e 018491 call le_update_param +0x539f 018492 branch calc_clke_offset +: 018495 le_check_md: +0x53a0 018496 disable user +0x53a1 018497 bmark1 mark_ble_rx_md ,enable_user +0x53a2 018498 bmark1 mark_ble_tx_md ,enable_user +0x53a3 018499 rtn +: 018502 le_slave_more_data: +0x53a4 018503 bpatchx patch27_4 ,mem_patch27 +0x53a5 018504 enable attempt +0x53a6 018505 call le_transmit_receive_sifs_notx +0x53a7 018506 branch le_slave_match ,match +0x53a8 018507 branch le_slave_cont +: 018509 le_slave_disconn: +: 018512 le_disconnect: +0x53a9 018513 bpatchx patch27_5 ,mem_patch27 +0x53aa 018514 call le_clear_connection_info +0x53ab 018515 call app_disconn_reason_collect_ble +0x53ac 018516 call sp_initialize_256 +0x53ad 018517 jam bt_evt_le_disconnected ,mem_fifo_temp +0x53ae 018518 branch ui_ipc_send_event +: 018520 le_clear_connection_info: +0x53af 018521 setarg 0 +0x53b0 018522 store 9 ,mem_le_tx_buff_used +0x53b1 018523 jam 0 ,mem_le_conn_handle +0x53b2 018524 jam lemode_idle ,mem_le_mode +0x53b3 018525 jam 0 ,mem_le_state +0x53b4 018526 jam flag_le_enc_null ,mem_le_enc_state +0x53b5 018527 jam flag_le_pairing_null ,mem_le_pairing_state +0x53b6 018528 rtn +: 018530 le_got_first_packet: +0x53b7 018531 bpatchx patch27_6 ,mem_patch27 +0x53b8 018532 fetch 1 ,mem_le_conn_rcv +0x53b9 018533 increase 1 ,pdata +0x53ba 018534 store 1 ,mem_le_conn_rcv +0x53bb 018535 fetch 1 ,mem_le_state +0x53bc 018536 rtnbit1 lestate_got_first_packet +0x53bd 018537 set1 lestate_got_first_packet +0x53be 018538 store 1 ,mem_le_state +0x53bf 018539 fetch 2 ,mem_le_init_superto +0x53c0 018540 store 2 ,mem_le_superto +0x53c1 018541 setarg 0 +0x53c2 018542 store 4 ,mem_le_transmit_window +0x53c3 018543 rtn +: 018546 le_enable: +0x53c4 018547 bpatchx patch27_7 ,mem_patch27 +0x53c5 018548 hjam 0x36 ,0x90f +0x53c6 018549 hjam 0x5f ,0x90b +0x53c7 018550 enable le +0x53c8 018551 hjam 7 ,rfen_ulp +0x53c9 018552 call check_ble_disabled +0x53ca 018553 fetch 1 ,mem_250k_freq_enable +0x53cb 018554 rtn blank +0x53cc 018555 hjam 0xb8 ,0x90a +0x53cd 018556 rtn +: 018558 le_disable: +0x53ce 018559 bpatchx patch28_0 ,mem_patch28 +0x53cf 018560 hjam 0x2e ,0x90f +0x53d0 018561 hjam 0xff ,0x90b +0x53d1 018562 disable le +0x53d2 018563 hjam 3 ,rfen_ulp +0x53d3 018564 arg 0 ,stop_watch +0x53d4 018565 rtn +: 018567 le_prep: +0x53d5 018568 disable enable_crc +0x53d6 018569 disable enable_white +0x53d7 018570 fetch 3 ,mem_le_crcinit +0x53d8 018571 iforce crc24_init +0x53d9 018572 fetch 1 ,mem_le_ch_mapped +0x53da 018573 reverse pdata ,temp +0x53db 018574 set1 1 ,temp +0x53dc 018575 rshift temp ,white_init +0x53dd 018576 rtn +: 018579 lerx_setfreq: +0x53de 018580 call le_setfreq +0x53df 018581 call set_freq_rx +0x53e0 018582 setarg param_pll_setup +0x53e1 018583 call sleep +0x53e2 018584 branch rf_rx_enable +: 018586 letx_setfreq: +0x53e3 018587 branch txon ,match +: 018588 letx_setfreq0: +0x53e4 018589 call le_setfreq +0x53e5 018590 branch set_freq_tx +: 018591 le_setfreq: +0x53e6 018592 bpatchx patch28_1 ,mem_patch28 +0x53e7 018593 call set_sync_on +0x53e8 018594 fetch 1 ,mem_le_testtype +0x53e9 018595 nbranch le_ctf_test ,blank +0x53ea 018596 fetch 1 ,mem_le_ch_mapped +0x53eb 018597 sub pdata ,36 ,null +0x53ec 018598 branch le_ctf_normal ,positive +0x53ed 018599 force 0 ,temp +0x53ee 018600 rtneq 37 +0x53ef 018601 force 24 ,temp +0x53f0 018602 rtneq 38 +0x53f1 018603 force 78 ,temp +0x53f2 018604 rtn +: 018606 le_ctf_normal: +0x53f3 018607 sub pdata ,10 ,null +0x53f4 018608 branch le_ctf_low ,positive +0x53f5 018609 increase 1 ,pdata +: 018611 le_ctf_low: +0x53f6 018612 lshift pdata ,pdata +0x53f7 018613 add pdata ,2 ,temp +0x53f8 018614 rtn +: 018616 le_ctf_test: +0x53f9 018617 fetch 1 ,mem_le_ch_mapped +0x53fa 018618 lshift pdata ,temp +0x53fb 018619 rtn +: 018621 le_sca_map: +0x53fc 018622 arg 500 ,temp +0x53fd 018623 rtn blank +0x53fe 018624 arg 250 ,temp +0x53ff 018625 rtneq 1 +0x5400 018626 arg 150 ,temp +0x5401 018627 rtneq 2 +0x5402 018628 arg 100 ,temp +0x5403 018629 rtneq 3 +0x5404 018630 arg 75 ,temp +0x5405 018631 rtneq 4 +0x5406 018632 arg 50 ,temp +0x5407 018633 rtneq 5 +0x5408 018634 arg 40 ,temp +0x5409 018635 rtneq 6 +0x540a 018636 arg 20 ,temp +0x540b 018637 rtn +: 018641 le_adv_access: +0x540c 018642 setarg 0x8e89be +0x540d 018643 lshift8 pdata ,pdata +0x540e 018644 or_into 0xd6 ,pdata +0x540f 018645 iforce access +0x5410 018646 setarg 0x555555 +0x5411 018647 store 3 ,mem_le_crcinit +0x5412 018648 rtn +: 018650 le_setup: +0x5413 018651 bpatchx patch28_2 ,mem_patch28 +0x5414 018652 enable swfine +0x5415 018653 fetch 4 ,mem_le_access +0x5416 018654 iforce access +0x5417 018655 call le_map_channel +0x5418 018656 setarg 0x200 +0x5419 018657 branch le_setup_master ,master +0x541a 018658 fetch 2 ,mem_le_receive_window +0x541b 018659 rshift pdata ,pdata +: 018660 le_setup_master: +0x541c 018661 arg param_pll_setup ,temp +0x541d 018662 iadd temp ,pdata +0x541e 018663 call ahead_window +0x541f 018664 deposit clke +0x5420 018665 store 6 ,mem_le_rxon_ts +0x5421 018666 rtn +: 018668 le_next_adv_channel: +0x5422 018669 bpatchx patch28_3 ,mem_patch28 +0x5423 018670 fetch 1 ,mem_le_ch_mapped +0x5424 018671 beq 37 ,le_next_adv_channel_curr_channel_37 +0x5425 018672 beq 38 ,le_next_adv_channel_curr_channel_38 +0x5426 018673 beq 39 ,le_next_adv_channel_curr_channel_39 +0x5427 018674 branch le_next_adv_channel_curr_channel_39 +: 018676 le_next_adv_channel_curr_channel_37: +0x5428 018677 fetcht 1 ,mem_le_adv_channel_map +0x5429 018678 isolate1 bit_adv_channel_map_38 ,temp +0x542a 018679 branch set_le_next_adv_channel_38 ,true +0x542b 018680 isolate1 bit_adv_channel_map_39 ,temp +0x542c 018681 branch set_le_next_adv_channel_39 ,true +0x542d 018682 branch set_le_next_adv_channel_37 +: 018685 le_next_adv_channel_curr_channel_38: +0x542e 018686 fetcht 1 ,mem_le_adv_channel_map +0x542f 018687 isolate1 bit_adv_channel_map_39 ,temp +0x5430 018688 branch set_le_next_adv_channel_39 ,true +0x5431 018689 isolate1 bit_adv_channel_map_37 ,temp +0x5432 018690 branch set_le_next_adv_channel_37 ,true +0x5433 018691 branch set_le_next_adv_channel_38 +: 018694 le_next_adv_channel_curr_channel_39: +0x5434 018695 fetcht 1 ,mem_le_adv_channel_map +0x5435 018696 isolate1 bit_adv_channel_map_37 ,temp +0x5436 018697 branch set_le_next_adv_channel_37 ,true +0x5437 018698 isolate1 bit_adv_channel_map_38 ,temp +0x5438 018699 branch set_le_next_adv_channel_38 ,true +0x5439 018700 branch set_le_next_adv_channel_39 +: 018704 set_le_next_adv_channel_37: +0x543a 018705 jam 37 ,mem_le_ch_mapped +0x543b 018706 fetch 1 ,mem_le_adv_channel_map_temp +0x543c 018707 set1 bit_adv_channel_map_37 ,pdata +0x543d 018708 store 1 ,mem_le_adv_channel_map_temp +0x543e 018709 rtn +: 018711 set_le_next_adv_channel_38: +0x543f 018712 jam 38 ,mem_le_ch_mapped +0x5440 018713 fetch 1 ,mem_le_adv_channel_map_temp +0x5441 018714 set1 bit_adv_channel_map_38 ,pdata +0x5442 018715 store 1 ,mem_le_adv_channel_map_temp +0x5443 018716 rtn +: 018718 set_le_next_adv_channel_39: +0x5444 018719 jam 39 ,mem_le_ch_mapped +0x5445 018720 fetch 1 ,mem_le_adv_channel_map_temp +0x5446 018721 set1 bit_adv_channel_map_39 ,pdata +0x5447 018722 store 1 ,mem_le_adv_channel_map_temp +0x5448 018723 rtn +: 018727 le_context_nexthop: +0x5449 018728 bpatchx patch28_4 ,mem_patch28 +0x544a 018729 add rega ,coffset_mode ,contr +0x544b 018730 ifetch 1 ,contr +0x544c 018731 rtnbit0 mode_le +0x544d 018732 add rega ,coffset_le_event_cnt ,contw +0x544e 018733 ifetch 2 ,contw +0x544f 018734 increase 1 ,pdata +0x5450 018735 istore 2 ,contw +0x5451 018736 add rega ,coffset_le_hop ,contr +0x5452 018737 ifetch 1 ,contr +0x5453 018738 add rega ,coffset_le_ch ,contw +0x5454 018739 ifetcht 1 ,contw +0x5455 018740 iadd temp ,pdata +0x5456 018741 sub pdata ,36 ,null +0x5457 018742 branch le_nexthop_nowrap ,positive +0x5458 018743 increase -37 ,pdata +: 018744 le_nexthop_nowrap: +0x5459 018745 istore 1 ,contw +0x545a 018746 rtn +: 018749 le_calc_channel_map: +0x545b 018750 bpatchx patch28_5 ,mem_patch28 +0x545c 018751 fetch 5 ,mem_le_channel_map +0x545d 018752 force 0 ,temp +0x545e 018753 force 37 ,loopcnt +: 018754 le_count_channels_loop: +0x545f 018755 bbit0 0 ,le_count_channels_notused +0x5460 018756 increase 1 ,temp +: 018757 le_count_channels_notused: +0x5461 018758 rshift pdata ,pdata +0x5462 018759 loop le_count_channels_loop +0x5463 018760 add temp ,-1 ,pdata +0x5464 018761 store 1 ,mem_le_channels +0x5465 018762 rtn +: 018764 le_map_channel: +0x5466 018765 bpatchx patch28_6 ,mem_patch28 +0x5467 018766 fetch 1 ,mem_le_ch +0x5468 018767 iforce queue +0x5469 018768 fetcht 5 ,mem_le_channel_map +0x546a 018769 qisolate1 temp +0x546b 018770 branch le_map_channel_end ,true +: 018771 le_map_channel_next: +0x546c 018772 bpatchx patch28_7 ,mem_patch28 +0x546d 018773 fetch 1 ,mem_le_channels +0x546e 018774 isub queue ,pdata +0x546f 018775 branch le_map_channel_cont ,positive +0x5470 018776 sub pdata ,-1 ,queue +0x5471 018777 branch le_map_channel_next +: 018778 le_map_channel_cont: +0x5472 018779 copy queue ,loopcnt +0x5473 018780 force 0 ,queue +: 018781 le_map_channel_loop: +0x5474 018782 qisolate1 temp +0x5475 018783 branch le_map_channel_skip ,true +0x5476 018784 increase 1 ,loopcnt +: 018785 le_map_channel_skip: +0x5477 018786 deposit loopcnt +0x5478 018787 branch le_map_channel_end ,blank +0x5479 018788 increase 1 ,queue +0x547a 018789 increase -1 ,loopcnt +0x547b 018790 branch le_map_channel_loop +: 018791 le_map_channel_end: +0x547c 018792 deposit queue +0x547d 018793 store 1 ,mem_le_ch_mapped +0x547e 018794 rtn +: 018797 le_wait_tx: +0x547f 018798 branch le_wait_master ,master +0x5480 018799 until null ,timeout +0x5481 018800 rtn +: 018802 le_wait_master: +0x5482 018803 arg 0xea0 ,timeup +0x5483 018804 until clkn_rt ,meet +0x5484 018805 rtn +: 018807 le_receive_adv: +0x5485 018808 disable swfine +0x5486 018809 fetch 2 ,mem_le_scan_window +0x5487 018810 copy pdata ,timeup +0x5488 018811 branch le_receive_packet +: 018814 le_receive_slave: +0x5489 018815 bpatchx patch29_0 ,mem_patch29 +0x548a 018816 enable swfine +0x548b 018817 fetch 2 ,mem_le_receive_window +0x548c 018818 fetcht 4 ,mem_le_transmit_window +0x548d 018819 iadd temp ,timeup +: 018820 le_receive_packet: +0x548e 018821 call lerx_setfreq +: 018822 le_receive_rxon: +0x548f 018823 bpatchx patch29_1 ,mem_patch29 +0x5490 018824 call le_prep +0x5491 018825 disable match +0x5492 018826 enable decode_fec0 +0x5493 018827 enable is_rx +0x5494 018828 disable is_tx +0x5495 018829 copy timeup ,stop_watch +0x5496 018830 correlate null ,timeout +0x5497 018831 branch le_receive_on_attempt ,attempt +0x5498 018832 copy clke ,temp +0x5499 018833 storet 6 ,mem_sync_clke +: 018834 le_receive_on_attempt: +0x549a 018835 nbranch end_of_packet ,sync +0x549b 018836 branch le_receive_skip ,attempt +0x549c 018837 arg param_clke_cal_le ,clke_rt +0x549d 018838 copy bt_clk ,clke_bt +0x549e 018839 fetch 1 ,mem_le_state +0x549f 018840 bbit0 lestate_got_first_packet ,le_receive_skip +0x54a0 018841 call lpm_adjust_clk ,wake +: 018842 le_receive_skip: +0x54a1 018843 bpatchx patch29_2 ,mem_patch29 +0x54a2 018844 call save_rssi +0x54a3 018845 enable enable_white +0x54a4 018846 enable enable_crc +0x54a5 018847 parse demod ,bucket ,8 +0x54a6 018848 rshift3 pwindow ,pdata +0x54a7 018849 store 1 ,mem_le_rxbuf +0x54a8 018850 parse demod ,bucket ,8 +0x54a9 018851 rshift3 pwindow ,pdata +0x54aa 018852 istore 1 ,contw +0x54ab 018853 and pdata ,0x3f ,loopcnt +0x54ac 018854 branch lerx_nopayload ,zero +: 018856 lerx_loop: +0x54ad 018857 parse demod ,bucket ,8 +0x54ae 018858 rshift3 pwindow ,pdata +0x54af 018859 istore 1 ,contw +0x54b0 018860 loop lerx_loop +: 018862 lerx_nopayload: +0x54b1 018863 bpatchx patch29_3 ,mem_patch29 +0x54b2 018864 parse demod ,bucket ,24 +0x54b3 018865 enable swfine +0x54b4 018866 arg param_sifs ,stop_watch +0x54b5 018867 rshift32 pdata ,pdata +0x54b6 018868 rshift16 pdata ,pdata +0x54b7 018869 istore 3 ,contw +0x54b8 018870 branch end_of_packet ,crc_failed +0x54b9 018871 enable match +0x54ba 018872 fetch 1 ,mem_last_freq +0x54bb 018873 add pdata ,0 ,rega +0x54bc 018874 call rf_write_freq +0x54bd 018875 disable decode_fec0 +0x54be 018876 branch set_sync_on +: 018878 le_transmit_receive_sifs: +0x54bf 018879 bpatchx patch29_4 ,mem_patch29 +0x54c0 018880 call le_transmit +: 018881 le_transmit_receive_sifs_notx: +0x54c1 018882 fetcht 1 ,mem_last_freq +0x54c2 018883 call set_freq_rx +0x54c3 018884 call rf_rx_enable +0x54c4 018885 enable swfine +0x54c5 018886 arg 5500 ,timeup +0x54c6 018887 branch le_receive_rxon +: 018889 le_transmit_norx: +0x54c7 018890 call le_transmit +0x54c8 018891 branch end_of_packet +: 018893 le_transmit: +0x54c9 018894 bpatchx patch29_5 ,mem_patch29 +0x54ca 018895 call le_prep +0x54cb 018896 call letx_setfreq +0x54cc 018897 branch le_transmit0 +: 018899 le_transmit0: +0x54cd 018900 set1 txgfsk ,radio_ctrl +0x54ce 018901 enable encode_fec0 +0x54cf 018902 enable is_tx +0x54d0 018903 disable is_rx +0x54d1 018904 call le_wait_tx +0x54d2 018905 rshift16 access ,pdata +0x54d3 018906 rshift8 pdata ,pdata +0x54d4 018907 rshift4 pdata ,pdata +0x54d5 018908 inject mod ,40 +0x54d6 018909 enable enable_white +0x54d7 018910 enable enable_crc +0x54d8 018911 bpatchx patch29_6 ,mem_patch29 +0x54d9 018912 fetch 1 ,mem_le_txheader +0x54da 018913 inject mod ,8 +0x54db 018914 ifetch 1 ,contr +0x54dc 018915 and pdata ,0x3f ,loopcnt +0x54dd 018916 inject mod ,8 +0x54de 018917 branch letr_nopayload ,zero +: 018918 letr_loop: +0x54df 018919 ifetch 1 ,contr +0x54e0 018920 inject mod ,8 +0x54e1 018921 loop letr_loop +: 018923 letr_nopayload: +0x54e2 018924 enable enable_parity +0x54e3 018925 inject mod ,24 +0x54e4 018926 disable enable_parity +0x54e5 018927 until null ,tx_clear +0x54e6 018928 nop 100 +0x54e7 018929 disable encode_fec0 +0x54e8 018930 rtn +: 018932 le_send_adv_ind: +0x54e9 018933 bpatchx patch29_7 ,mem_patch29 +0x54ea 018934 fetch 1 ,mem_le_adv_type +0x54eb 018935 beq adv_direct_ind ,le_send_adv_direct_ind +0x54ec 018936 fetch 1 ,mem_le_adv_own_addr_type +0x54ed 018937 lshift4 pdata ,pdata +0x54ee 018938 lshift2 pdata ,pdata +0x54ef 018939 store 1 ,mem_le_txheader +0x54f0 018940 fetcht 1 ,mem_le_adv_data_len +0x54f1 018941 add temp ,6 ,pdata +0x54f2 018942 store 1 ,mem_le_txlen +0x54f3 018943 fetch 6 ,mem_le_lap +0x54f4 018944 store 6 ,mem_le_txpayload +0x54f5 018945 copy temp ,loopcnt +0x54f6 018946 arg mem_le_adv_data ,contr +0x54f7 018947 call memcpy_fast +0x54f8 018948 branch le_send_adv_transmit +: 018949 le_send_adv_direct_ind: +0x54f9 018950 fetch 1 ,mem_le_adv_direct_addr_type +0x54fa 018951 lshift4 pdata ,pdata +0x54fb 018952 lshift2 pdata ,pdata +0x54fc 018953 increase 1 ,pdata +0x54fd 018954 store 1 ,mem_le_txheader +0x54fe 018955 setarg 12 +0x54ff 018956 store 1 ,mem_le_txlen +0x5500 018957 fetch 6 ,mem_le_lap +0x5501 018958 store 6 ,mem_le_txpayload +0x5502 018959 fetch 6 ,mem_hci_plap +0x5503 018960 istore 6 ,contw +: 018961 le_send_adv_transmit: +0x5504 018962 bpatchx patch2a_0 ,mem_patch2a +0x5505 018963 fetch 1 ,mem_le_adv_transmit +0x5506 018964 increase 1 ,pdata +0x5507 018965 store 1 ,mem_le_adv_transmit +0x5508 018966 arg 1800 ,stop_watch +0x5509 018967 disable match +0x550a 018968 branch le_transmit_receive_sifs +: 018970 le_send_scan_request: +0x550b 018971 bpatchx patch2a_1 ,mem_patch2a +0x550c 018972 fetch 1 ,mem_le_scan_type +0x550d 018973 rtnne le_scan_type_active +0x550e 018974 fetch 1 ,mem_le_adv_transmit +0x550f 018975 increase 1 ,pdata +0x5510 018976 store 1 ,mem_le_adv_transmit +0x5511 018977 arg 0x0c03 ,temp +0x5512 018978 fetch 1 ,mem_le_scan_own_addr_type +0x5513 018979 nsetflag blank ,le_sender_addr_bit ,temp +0x5514 018980 copy rega ,pdata +0x5515 018981 nsetflag blank ,le_receiver_addr_bit ,temp +0x5516 018982 storet 2 ,mem_le_txheader +0x5517 018983 fetch 6 ,mem_le_lap +0x5518 018984 istore 6 ,contw +0x5519 018985 fetch 6 ,mem_le_plap +0x551a 018986 istore 6 ,contw +0x551b 018987 branch le_transmit_receive_sifs +: 018990 le_send_scan_response: +0x551c 018991 bpatchx patch2a_2 ,mem_patch2a +0x551d 018992 arg scan_rsp ,temp +0x551e 018993 fetch 1 ,mem_le_adv_own_addr_type +0x551f 018994 nsetflag blank ,le_sender_addr_bit ,temp +0x5520 018995 storet 1 ,mem_le_txheader +0x5521 018996 fetcht 1 ,mem_le_scan_data_len +0x5522 018997 add temp ,6 ,pdata +0x5523 018998 store 1 ,mem_le_txlen +0x5524 018999 fetch 6 ,mem_le_lap +0x5525 019000 store 6 ,mem_le_txpayload +0x5526 019001 arg mem_le_scan_data ,contr +0x5527 019002 copy temp ,loopcnt +0x5528 019003 call memcpy_fast +0x5529 019004 call le_transmit_norx +0x552a 019005 branch le_adv_not_match +: 019007 le_connect_request: +0x552b 019008 bpatchx patch2a_3 ,mem_patch2a +0x552c 019009 force -1 ,pdata +0x552d 019010 setsect 2 ,1 +0x552e 019011 store 5 ,mem_le_channel_map +0x552f 019012 call le_calc_channel_map +0x5530 019013 force 4 ,loopcnt +0x5531 019014 arg mem_le_access ,contw +0x5532 019015 call generate_random_loop +0x5533 019016 fetch 2 ,mem_le_timeout +0x5534 019017 store 2 ,mem_le_superto +: 019018 le_con_req_hop_retry: +0x5535 019019 random pdata +0x5536 019020 and_into 0xf ,pdata +0x5537 019021 sub pdata ,4 ,null +0x5538 019022 branch le_con_req_hop_retry ,positive +0x5539 019023 store 1 ,mem_le_hop +0x553a 019024 store 1 ,mem_tmp1 +0x553b 019025 bpatchx patch2a_4 ,mem_patch2a +0x553c 019026 fetcht 2 ,mem_le_conn_interval +0x553d 019027 storet 2 ,mem_le_tsniff +0x553e 019028 copy temp ,regc +0x553f 019029 add clkn_bt ,7 ,pdata +0x5540 019030 idiv regc +0x5541 019031 call wait_div_end +0x5542 019032 remainder rega +0x5543 019033 isub rega ,pdata +0x5544 019034 iadd regc ,pdata +0x5545 019035 fetcht 2 ,mem_le_dsniff +0x5546 019036 iadd temp ,pdata +0x5547 019037 store 4 ,mem_le_anchor +0x5548 019038 isub clkn_bt ,rega +0x5549 019039 increase -6 ,rega +0x554a 019040 arg 0x2205 ,regb +0x554b 019041 fetch 1 ,mem_le_conn_own_addr_type +0x554c 019042 nsetflag blank ,le_sender_addr_bit ,regb +0x554d 019043 fetch 1 ,mem_le_conn_peer_addr_type +0x554e 019044 nsetflag blank ,le_receiver_addr_bit ,regb +0x554f 019045 copy regb ,pdata +0x5550 019046 store 2 ,mem_le_txheader +0x5551 019047 fetch 6 ,mem_le_lap +0x5552 019048 istore 6 ,contw +0x5553 019049 fetch 6 ,mem_le_plap +0x5554 019050 istore 6 ,contw +0x5555 019051 fetch 4 ,mem_le_access +0x5556 019052 istore 4 ,contw +0x5557 019053 random pdata +0x5558 019054 istore 2 ,contw +0x5559 019055 random pdata +0x555a 019056 istore 1 ,contw +0x555b 019057 force 2 ,pdata +0x555c 019058 istore 1 ,contw +0x555d 019059 rshift2 rega ,pdata +0x555e 019060 istore 2 ,contw +0x555f 019061 rshift2 regc ,pdata +0x5560 019062 istore 2 ,contw +0x5561 019063 bpatchx patch2a_5 ,mem_patch2a +0x5562 019064 setarg 0 +0x5563 019065 istore 2 ,contw +0x5564 019066 fetch 2 ,mem_le_timeout +0x5565 019067 istore 2 ,contw +0x5566 019068 fetch 5 ,mem_le_channel_map +0x5567 019069 istore 5 ,contw +0x5568 019070 fetch 1 ,mem_le_hop +0x5569 019071 arg param_le_sca ,temp +0x556a 019072 ior temp ,pdata +0x556b 019073 istore 1 ,contw +0x556c 019074 call le_transmit_norx +0x556d 019075 setarg mem_le_txheader +0x556e 019076 add pdata ,18 ,contr +0x556f 019077 ifetch 3 ,contr +0x5570 019078 store 3 ,mem_le_crcinit +0x5571 019079 rtn +: 019081 le_init_adv: +0x5572 019082 bpatchx patch2a_6 ,mem_patch2a +0x5573 019083 disable master +0x5574 019084 branch le_adv_access +: 019088 le_update_param: +0x5575 019089 fetch 1 ,mem_le_state +0x5576 019090 rtnbit0 lestate_update_param +0x5577 019091 fetch 2 ,mem_le_event_count +0x5578 019092 fetcht 2 ,mem_le_instant +0x5579 019093 isub temp ,pdata +0x557a 019094 nrtn positive +0x557b 019095 store 2 ,mem_pdatatemp +0x557c 019096 bpatchx patch2a_7 ,mem_patch2a +0x557d 019097 fetch 1 ,mem_le_state +0x557e 019098 set0 lestate_update_param ,pdata +0x557f 019099 set0 lestate_got_first_packet ,pdata +0x5580 019100 store 1 ,mem_le_state +0x5581 019101 fetch 4 ,mem_le_anchor +0x5582 019102 fetcht 2 ,mem_le_tsniff +0x5583 019103 storet 2 ,mem_temp +0x5584 019104 isub temp ,rega +0x5585 019105 bpatchx patch2b_0 ,mem_patch2b +0x5586 019106 fetch 1 ,mem_le_new_param +0x5587 019107 store 1 ,mem_le_window_size +0x5588 019108 ifetcht 2 ,contr +0x5589 019109 ifetch 2 ,contr +0x558a 019110 lshift2 pdata ,pdata +0x558b 019111 store 2 ,mem_le_tsniff +0x558c 019112 lshift2 temp ,temp +0x558d 019113 iadd temp ,pdata +0x558e 019114 ifetcht 4 ,contr +0x558f 019115 storet 4 ,mem_le_slave_latency +0x5590 019116 iadd rega ,pdata +0x5591 019117 copy pdata ,regab +0x5592 019118 fetch 2 ,mem_le_tsniff +0x5593 019119 fetcht 2 ,mem_temp +0x5594 019120 isub temp ,pdata +0x5595 019121 fetcht 2 ,mem_pdatatemp +0x5596 019122 imul32 temp ,pdata +0x5597 019123 iadd regab ,pdata +0x5598 019124 store 4 ,mem_le_anchor +0x5599 019125 call le_receive_window_size +0x559a 019126 fetch 2 ,mem_le_superto +0x559b 019127 store 2 ,mem_le_init_superto +0x559c 019128 rtn +: 019131 le_update_channel_map: +0x559d 019132 bpatchx patch2b_1 ,mem_patch2b +0x559e 019133 fetch 1 ,mem_le_state +0x559f 019134 rtnbit0 lestate_update_map +0x55a0 019135 fetch 2 ,mem_le_event_count +0x55a1 019136 fetcht 2 ,mem_le_instant +0x55a2 019137 isub temp ,pdata +0x55a3 019138 nrtn positive +0x55a4 019139 fetch 1 ,mem_le_state +0x55a5 019140 set0 lestate_update_map ,pdata +0x55a6 019141 store 1 ,mem_le_state +0x55a7 019142 fetch 5 ,mem_le_new_map +0x55a8 019143 store 5 ,mem_le_channel_map +0x55a9 019144 branch le_calc_channel_map +: 019147 le_acknowledge: +0x55aa 019148 bpatchx patch2b_2 ,mem_patch2b +0x55ab 019149 call le_supervision_flush +0x55ac 019150 call le_check_wak +0x55ad 019151 fetch 1 ,mem_le_rxbuf +0x55ae 019152 isolate1 md ,pdata +0x55af 019153 setflag true ,mark_ble_rx_md ,mark +0x55b0 019154 rshift pdata ,pdata +0x55b1 019155 ixor temp ,pdata +0x55b2 019156 isolate1 nesn ,pdata +0x55b3 019157 setflag true ,mark_old_packet ,mark +0x55b4 019158 rtnmark1 mark_old_packet +0x55b5 019159 fetch 1 ,mem_le_rxbuf + 1 +0x55b6 019160 branch le_ack_unenc ,blank +0x55b7 019161 fetch 1 ,mem_le_state +0x55b8 019162 bbit0 lestate_encryption ,le_ack_unenc +0x55b9 019163 call load_sk +0x55ba 019164 call le_decrypt +0x55bb 019165 nrtn blank +: 019166 le_ack_unenc: +0x55bc 019167 fetcht 1 ,mem_le_arq +0x55bd 019168 setflip nesn ,temp +0x55be 019169 storet 1 ,mem_le_arq +0x55bf 019170 rtn +: 019173 le_check_wak: +0x55c0 019174 bpatchx patch2b_3 ,mem_patch2b +0x55c1 019175 fetcht 1 ,mem_le_arq +0x55c2 019176 isolate0 wak ,temp +0x55c3 019177 rtn true +0x55c4 019178 fetch 1 ,mem_le_rxbuf +0x55c5 019179 lshift pdata ,pdata +0x55c6 019180 ixor temp ,pdata +0x55c7 019181 rtnbit0 sn +0x55c8 019182 set0 wak ,temp +0x55c9 019183 setflip sn ,temp +0x55ca 019184 storet 1 ,mem_le_arq +0x55cb 019185 compare 3 ,temp ,3 +0x55cc 019186 nrtn true +0x55cd 019187 fetch 1 ,mem_le_txpayload +0x55ce 019188 beq ll_start_enc_req ,le_set_enc +0x55cf 019189 fetch 1 ,mem_le_enc_state +0x55d0 019190 beq flag_le_enc_pause ,le_clear_enc +0x55d1 019191 rtn +: 019194 le_set_enc: +0x55d2 019195 fetch 1 ,mem_le_state +0x55d3 019196 set1 lestate_encryption ,pdata +0x55d4 019197 store 1 ,mem_le_state +0x55d5 019198 rtn +: 019200 le_clear_enc: +0x55d6 019201 bpatchx patch2b_4 ,mem_patch2b +0x55d7 019202 jam flag_le_enc_null ,mem_le_enc_state +0x55d8 019203 arg 0 ,pdata +0x55d9 019204 store 4 ,mem_le_last_mic +0x55da 019205 store 5 ,mem_le_pcnt_tx +0x55db 019206 set1 39 ,pdata +0x55dc 019207 store 5 ,mem_le_pcnt_rx +0x55dd 019208 fetch 1 ,mem_le_state +0x55de 019209 set0 lestate_encryption ,pdata +0x55df 019210 store 1 ,mem_le_state +0x55e0 019211 rtn +: 019214 le_wait_adv: +0x55e1 019215 bpatchx patch2b_5 ,mem_patch2b +0x55e2 019216 call le_next_adv_channel +0x55e3 019217 call le_receive_adv +0x55e4 019218 fetch 1 ,mem_le_adv_waitcnt +0x55e5 019219 increase 1 ,pdata +0x55e6 019220 store 1 ,mem_le_adv_waitcnt +0x55e7 019221 rtn +: 019224 le_scan: +0x55e8 019225 bpatchx patch2b_6 ,mem_patch2b +0x55e9 019226 fetch 1 ,mem_le_scan_enable +0x55ea 019227 rtnne le_scan_enable +0x55eb 019228 arg le_scan_interval_timer ,queue +0x55ec 019229 call timer_check +0x55ed 019230 nrtn blank +0x55ee 019231 fetch 2 ,mem_le_scan_interval +0x55ef 019232 fetcht 2 ,mem_le_scan_window +0x55f0 019233 isub temp ,pdata +0x55f1 019234 arg le_scan_interval_timer ,queue +0x55f2 019235 call timer_init +0x55f3 019236 disable master +0x55f4 019237 call le_init_adv +0x55f5 019238 call le_wait_adv +0x55f6 019239 nrtn match +0x55f7 019240 bpatchx patch2b_7 ,mem_patch2b +0x55f8 019241 fetch 6 ,mem_le_rxbuf + 2 +0x55f9 019242 store 6 ,mem_le_plap +0x55fa 019245 fetch 1 ,mem_le_adv_rcv +0x55fb 019246 increase 1 ,pdata +0x55fc 019247 store 1 ,mem_le_adv_rcv +0x55fd 019248 call le_create_conn +0x55fe 019249 rtn master +0x55ff 019250 call le_send_scan_request +0x5600 019251 nrtn match +0x5601 019252 bpatchx patch2c_0 ,mem_patch2c +0x5602 019253 fetch 1 ,mem_le_scanrsp_rcv +0x5603 019254 increase 1 ,pdata +0x5604 019255 store 1 ,mem_le_scanrsp_rcv +0x5605 019256 fetch 9 ,mem_le_rxbuf + 8 +0x5606 019257 store 9 ,mem_tmp_buffer +0x5607 019258 rtn +: 019260 le_create_conn: +0x5608 019261 bpatchx patch2c_1 ,mem_patch2c +0x5609 019262 fetch 1 ,mem_cmd_le_create_conn +0x560a 019263 rtnne hci_cmd_le_create_conn +0x560b 019264 fetch 6 ,mem_le_plap +0x560c 019265 fetcht 6 ,mem_le_conn_peer_addr +0x560d 019266 isub temp ,null +0x560e 019267 nrtn zero +0x560f 019268 call context_new +0x5610 019269 nrtn zero +0x5611 019270 call le_connect_request +0x5612 019271 call le_init_master +0x5613 019272 bpatchx patch2c_2 ,mem_patch2c +0x5614 019273 jam 0 ,mem_hci_cmd +0x5615 019274 jam 0 ,mem_le_peer_sca +0x5616 019275 jam 0 ,mem_le_scan_enable +0x5617 019276 jam 0 ,mem_cmd_le_create_conn +0x5618 019277 branch context_save +: 019279 le_scan_check_sender_addr_type: +0x5619 019280 arg 1 ,rega +0x561a 019281 fetch 1 ,mem_le_rxbuf +0x561b 019282 rtnbit1 le_sender_addr_bit +0x561c 019283 arg 0 ,rega +0x561d 019284 rtn +: 019288 le_prepare_tx: +0x561e 019289 bpatchx patch2c_3 ,mem_patch2c +0x561f 019290 fetch 1 ,mem_le_arq +0x5620 019291 rtnbit1 wak +0x5621 019292 call le_check_tx_md +0x5622 019293 call le_fifo_get_first_tx_ptr +0x5623 019294 branch le_send_empty ,blank +0x5624 019295 ifetch 1 ,contr +0x5625 019296 ifetcht 1 ,contr +0x5626 019297 copy temp ,rega +0x5627 019298 isub rega ,pdata +0x5628 019299 arg le_max_paket_len ,temp +0x5629 019300 call not_greater_than +0x562a 019301 copy pdata ,temp +0x562b 019302 ifetch 1 ,contr +0x562c 019303 copy pdata ,type +0x562d 019304 copy rega ,pdata +0x562e 019305 iadd contr ,contr +0x562f 019306 arg mem_le_txpayload ,contw +0x5630 019307 copy temp ,loopcnt +0x5631 019308 call memcpy +0x5632 019309 call le_update_tx_type +0x5633 019310 call le_send_packet +0x5634 019312 call le_fifo_get_first_tx_ptr +0x5635 019313 ifetch 1 ,contr +0x5636 019314 copy pdata ,rega +0x5637 019315 copy contr ,regc +0x5638 019316 ifetcht 1 ,contr +0x5639 019317 copy temp ,regb +0x563a 019318 isub regb ,pdata +0x563b 019319 arg le_max_paket_len ,temp +0x563c 019320 call not_greater_than +0x563d 019321 iadd regb ,pdata +0x563e 019322 istore 1 ,regc +0x563f 019323 isub rega ,null +0x5640 019324 nrtn zero +0x5641 019325 branch le_fifo_release_first_node +: 019328 le_check_tx_md: +0x5642 019329 call le_check_continue +0x5643 019330 rtnmark1 mark_ble_tx_md +0x5644 019331 fetch 1 ,mem_le_configuration +0x5645 019332 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +0x5646 019333 call le_fifo_get_second_tx_ptr +0x5647 019334 branch le_clear_md ,blank +0x5648 019335 branch le_set_md +: 019338 le_check_continue: +0x5649 019339 call le_fifo_get_first_tx_ptr +0x564a 019340 branch le_clear_md ,blank +0x564b 019341 ifetch 1 ,contr +0x564c 019342 ifetcht 1 ,contr +0x564d 019343 isub temp ,pdata +0x564e 019344 sub pdata ,le_max_paket_len ,null +0x564f 019345 branch le_clear_md ,positive +: 019346 le_set_md: +0x5650 019347 set1 mark_ble_tx_md ,mark +0x5651 019348 rtn +: 019350 le_clear_md: +0x5652 019351 set0 mark_ble_tx_md ,mark +0x5653 019352 rtn +: 019354 le_update_tx_type: +0x5654 019355 copy rega ,pdata +0x5655 019356 rtn blank +0x5656 019357 arg llid_continue ,type +0x5657 019358 rtn +: 019361 le_att_check_notification_enable: +0x5658 019362 bpatchx patch2c_4 ,mem_patch2c +0x5659 019363 increase 1 ,temp +0x565a 019364 call le_att_get_handle_ptr +0x565b 019365 increase -2 ,contr +0x565c 019366 ifetch 2 ,contr +0x565d 019367 arg client_charactertic_configuration ,temp +0x565e 019368 isub temp ,null +0x565f 019369 nrtn zero +0x5660 019370 increase 1 ,contr +0x5661 019371 copy contr ,rega +0x5662 019372 ifetch 1 ,contr +0x5663 019373 rtn +: 019376 le_send_empty: +0x5664 019377 force 0 ,temp +0x5665 019378 force 1 ,type +: 019380 le_send_packet: +0x5666 019381 bpatchx patch2c_5 ,mem_patch2c +0x5667 019382 storet 1 ,mem_le_txlen +0x5668 019383 fetcht 1 ,mem_le_arq +0x5669 019384 set1 wak ,temp +0x566a 019385 and temp ,0xfc ,pdata +0x566b 019386 ior type ,pdata +0x566c 019387 store 1 ,mem_le_arq +0x566d 019388 and_into 0x1f ,pdata +0x566e 019389 isolate1 mark_ble_tx_md ,mark +0x566f 019390 setflag true ,md ,pdata +0x5670 019391 store 1 ,mem_le_txheader +0x5671 019393 fetch 1 ,mem_le_txheader +0x5672 019394 compare 1 ,type ,3 +0x5673 019395 nbranch le_send_no_txlen ,true +0x5674 019396 fetch 1 ,mem_le_txlen +0x5675 019397 rtn blank +: 019398 le_send_no_txlen: +0x5676 019399 fetch 1 ,mem_le_state +0x5677 019400 rtnbit0 lestate_encryption +0x5678 019401 call load_sk +0x5679 019402 branch le_encrypt +: 019405 get_lpm_wake_ble_rx_lock: +0x567a 019406 arg wake_lock_ble_rx ,queue +0x567b 019407 branch lpm_get_wake_lock +: 019409 put_lpm_wake_ble_rx_lock: +0x567c 019410 arg wake_lock_ble_rx ,queue +0x567d 019411 branch lpm_put_wake_lock +: 019414 le_parse: +0x567e 019415 bpatchx patch2c_6 ,mem_patch2c +0x567f 019416 rtnmark1 mark_old_packet +0x5680 019417 call le_fifo_check_full +0x5681 019418 nrtn blank +0x5682 019419 fetch 1 ,mem_le_rxbuf +0x5683 019420 and pdata ,0x3 ,pdata +0x5684 019421 store 1 ,mem_le_packet_llid +0x5685 019422 ifetch 1 ,contr +0x5686 019423 and pdata ,0x1f ,pdata +0x5687 019424 store 1 ,mem_le_packet_size +0x5688 019425 rtn blank +0x5689 019426 copy contr ,pdata +0x568a 019427 store 2 ,mem_le_payload_ptr +0x568b 019428 fetch 1 ,mem_le_packet_llid +0x568c 019429 beq llid_le_ll ,le_parse_ll +: 019430 le_parse_l2cap: +0x568d 019431 call le_check_l2cap_complete +0x568e 019432 nbranch get_lpm_wake_ble_rx_lock ,user +0x568f 019433 call put_lpm_wake_ble_rx_lock +0x5690 019434 fetch 2 ,mem_le_payload_ptr +0x5691 019435 copy pdata ,contr +0x5692 019436 ifetch 2 ,contr +0x5693 019437 store 2 ,mem_le_l2cap_size +0x5694 019438 bpatchx patch2c_7 ,mem_patch2c +0x5695 019439 ifetch 2 ,contr +0x5696 019440 beq le_l2cap_cid_att ,le_parse_att +0x5697 019441 beq le_l2cap_cid_smp ,le_parse_smp +0x5698 019442 beq le_l2cap_cid_signal ,le_parse_signaling +0x5699 019443 rtn +: 019446 le_check_l2cap_complete: +0x569a 019447 fetch 1 ,mem_le_packet_llid +0x569b 019448 beq llid_start ,le_check_l2cap_llid_start +0x569c 019449 beq llid_continue ,le_check_l2cap_llid_continue +0x569d 019450 rtn +: 019455 le_check_l2cap_cid_legal: +0x569e 019456 call enable_user +0x569f 019457 arg le_l2cap_cid_att ,temp +0x56a0 019458 isub pdata ,null +0x56a1 019459 rtn zero +0x56a2 019460 arg le_l2cap_cid_signal ,temp +0x56a3 019461 isub pdata ,null +0x56a4 019462 rtn zero +0x56a5 019463 arg le_l2cap_cid_smp ,temp +0x56a6 019464 isub pdata ,null +0x56a7 019465 rtn zero +0x56a8 019466 branch disable_user +: 019469 le_check_l2cap_llid_start: +0x56a9 019470 fetch 2 ,mem_le_payload_ptr +0x56aa 019471 copy pdata ,contr +0x56ab 019472 ifetch 2 ,contr +0x56ac 019473 store 2 ,mem_le_l2cap_size +0x56ad 019474 ifetch 2 ,contr +0x56ae 019475 call le_check_l2cap_cid_legal +0x56af 019476 nrtn user +0x56b0 019477 fetcht 1 ,mem_le_packet_size +0x56b1 019478 storet 1 ,mem_le_packet_len_recved +0x56b2 019479 fetch 2 ,mem_le_l2cap_size +0x56b3 019480 increase 4 ,pdata +0x56b4 019481 isub temp ,null +0x56b5 019482 branch enable_user ,zero +0x56b6 019483 fetch 1 ,mem_le_packet_size +0x56b7 019484 copy pdata ,loopcnt +0x56b8 019485 arg mem_le_l2capbuf ,contw +0x56b9 019486 fetch 2 ,mem_le_payload_ptr +0x56ba 019487 copy pdata ,contr +0x56bb 019488 call memcpy +0x56bc 019489 branch disable_user +: 019494 le_check_l2cap_continue_legal: +0x56bd 019495 call enable_user +0x56be 019496 fetch 1 ,mem_le_packet_len_recved +0x56bf 019497 nrtn blank +0x56c0 019498 branch disable_user +: 019500 le_check_l2cap_llid_continue: +0x56c1 019501 call le_check_l2cap_continue_legal +0x56c2 019502 nrtn user +0x56c3 019503 fetch 1 ,mem_le_packet_len_recved +0x56c4 019504 arg mem_le_l2capbuf ,contw +0x56c5 019505 iadd contw ,rega +0x56c6 019506 fetcht 1 ,mem_le_packet_size +0x56c7 019507 iadd temp ,pdata +0x56c8 019508 store 1 ,mem_le_packet_len_recved +0x56c9 019509 fetch 1 ,mem_le_packet_size +0x56ca 019510 copy pdata ,loopcnt +0x56cb 019511 copy rega ,contw +0x56cc 019512 fetch 2 ,mem_le_payload_ptr +0x56cd 019513 copy pdata ,contr +0x56ce 019514 call memcpy_fast +0x56cf 019515 setarg mem_le_l2capbuf +0x56d0 019516 store 2 ,mem_le_payload_ptr +0x56d1 019517 fetch 2 ,mem_le_l2cap_size +0x56d2 019518 increase 4 ,pdata +0x56d3 019519 fetcht 1 ,mem_le_packet_len_recved +0x56d4 019520 isub temp ,null +0x56d5 019521 branch enable_user ,zero +0x56d6 019522 branch disable_user +: 019528 le_get_search_att_type: +0x56d7 019529 call store_contr +0x56d8 019530 arg mem_le_search_att_type_length ,contw +: 019531 le_get_search_common: +0x56d9 019532 fetch 2 ,mem_le_l2cap_size +0x56da 019533 increase -5 ,pdata +: 019534 le_get_search_common2: +0x56db 019535 istore 1 ,contw +0x56dc 019536 copy pdata ,loopcnt +0x56dd 019537 call get_contr +0x56de 019538 branch memcpy_fast +: 019540 le_get_search_att_uuid: +0x56df 019541 call store_contr +0x56e0 019542 arg mem_le_search_uuid_length ,contw +0x56e1 019543 branch le_get_search_common +: 019547 le_writeatt_cb: +0x56e2 019548 fetch 2 ,mem_cb_att_write +0x56e3 019549 branch callback_func +: 019551 le_supervision_update: +0x56e4 019552 fetcht 4 ,mem_le_supervision_timer +0x56e5 019553 call get_clkbt +0x56e6 019554 isub temp ,timeup +0x56e7 019555 deposit timeup +0x56e8 019556 fetcht 2 ,mem_le_superto +0x56e9 019557 lshift4 temp ,temp +0x56ea 019558 lshift temp ,temp +0x56eb 019559 isub temp ,pdata +0x56ec 019560 rtn +: 019562 le_supervision_flush: +0x56ed 019563 call get_clkbt +0x56ee 019564 store 4 ,mem_le_supervision_timer +0x56ef 019565 rtn +: 019568 le_adv: +0x56f0 019569 jam 36 ,mem_le_ch_mapped +0x56f1 019570 jam 0 ,mem_le_adv_channel_map_temp +: 019571 le_adv_loop: +0x56f2 019572 bpatchx patch2d_0 ,mem_patch2d +0x56f3 019573 fetch 1 ,mem_le_adv_enable +0x56f4 019574 rtn blank +0x56f5 019575 arg le_adv_interval_timer ,queue +0x56f6 019576 call timer_check +0x56f7 019577 nrtn blank +0x56f8 019578 bpatchx patch2d_1 ,mem_patch2d +: 019579 le_adv_loop_tx: +0x56f9 019580 disable master +0x56fa 019581 enable swfine +0x56fb 019582 call le_init_adv +0x56fc 019583 call le_next_adv_channel +0x56fd 019584 call le_send_adv_ind +0x56fe 019585 nbranch le_adv_not_match ,match +0x56ff 019586 fetch 1 ,mem_le_req_rcv +0x5700 019587 increase 1 ,pdata +0x5701 019588 store 1 ,mem_le_req_rcv +0x5702 019589 fetch 1 ,mem_le_rxbuf +0x5703 019590 and pdata ,0x0f ,pdata +0x5704 019591 beq scan_req ,le_send_scan_response +0x5705 019592 beq connect_req ,le_parse_connect_req +: 019593 le_adv_not_match: +0x5706 019594 bpatchx patch2d_2 ,mem_patch2d +0x5707 019595 random pdata +0x5708 019596 arg 0x1ff ,temp +0x5709 019597 iand temp ,pdata +0x570a 019598 add pdata ,250 ,pdata +0x570b 019599 call delay +0x570c 019600 fetch 1 ,mem_le_adv_channel_map_temp +0x570d 019601 fetcht 1 ,mem_le_adv_channel_map +0x570e 019602 isub temp ,null +0x570f 019603 nbranch le_adv_loop ,zero +0x5710 019604 arg le_adv_interval_timer ,queue +0x5711 019605 fetch 2 ,mem_le_adv_interval +0x5712 019606 branch timer_init +: 019609 le_receive_window_size: +0x5713 019610 bpatchx patch2d_3 ,mem_patch2d +0x5714 019611 fetch 1 ,mem_le_peer_sca +0x5715 019612 call le_sca_map +0x5716 019613 fetch 2 ,mem_le_tsniff +0x5717 019614 imul32 temp ,pdata +0x5718 019615 arg 375 ,temp +0x5719 019616 imul32 temp ,pdata +0x571a 019617 arg 100000 ,temp +0x571b 019618 idiv temp +0x571c 019619 fetch 1 ,mem_le_window_size +0x571d 019620 arg 20000 ,temp +0x571e 019621 imul32 temp ,pdata +0x571f 019622 iadd temp ,pdata +0x5720 019623 store 4 ,mem_le_transmit_window +0x5721 019624 bpatchx patch2d_4 ,mem_patch2d +0x5722 019625 fetch 2 ,mem_rx_window_sniff +0x5723 019626 call wait_div_end +0x5724 019627 quotient temp +0x5725 019628 iadd temp ,pdata +0x5726 019629 store 2 ,mem_le_receive_window +0x5727 019630 rtn +: 019632 le_parse_connect_req: +0x5728 019633 bpatchx patch2d_5 ,mem_patch2d +0x5729 019634 fetch 6 ,mem_le_rxbuf + 8 +0x572a 019635 fetcht 6 ,mem_le_lap +0x572b 019636 isub temp ,null +0x572c 019637 nrtn zero +0x572d 019638 call le_scan_check_sender_addr_type +0x572e 019639 copy rega ,pdata +0x572f 019640 store 1 ,mem_le_conn_peer_addr_type +0x5730 019641 fetch 7 ,mem_le_rxbuf + 21 +0x5731 019642 store 7 ,mem_tmp_buffer +0x5732 019643 ifetch 8 ,contr +0x5733 019644 istore 8 ,contw +0x5734 019645 fetch 6 ,mem_le_rxbuf + 2 +0x5735 019646 store 6 ,mem_le_plap +0x5736 019647 increase 6 ,contr +0x5737 019648 ifetch 8 ,contr +0x5738 019649 store 8 ,mem_le_access +0x5739 019650 ifetcht 2 ,contr +0x573a 019651 bpatchx patch2d_6 ,mem_patch2d +0x573b 019653 lshift2 temp ,temp +0x573c 019654 ifetch 2 ,contr +0x573d 019655 lshift2 pdata ,pdata +0x573e 019656 store 2 ,mem_le_tsniff +0x573f 019657 store 4 ,mem_le_anchor +0x5740 019658 isub temp ,pdata +0x5741 019659 add pdata ,-2 ,clke_bt +0x5742 019660 ifetch 9 ,contr +0x5743 019661 store 9 ,mem_le_slave_latency +0x5744 019662 bpatchx patch2d_7 ,mem_patch2d +0x5745 019663 ifetch 1 ,contr +0x5746 019664 rshift4 pdata ,temp +0x5747 019665 rshift temp ,temp +0x5748 019666 storet 1 ,mem_le_peer_sca +0x5749 019667 and_into 0x1f ,pdata +0x574a 019668 store 1 ,mem_le_hop +0x574b 019669 call le_receive_window_size +0x574c 019670 call le_calc_channel_map +0x574d 019671 call le_init_slave +0x574e 019672 call context_new +0x574f 019673 nrtn zero +0x5750 019674 bpatchx patch2e_0 ,mem_patch2e +0x5751 019675 call calc_clke_offset +0x5752 019676 call le_l2cap_reset_signaling_identifier +0x5753 019677 jam bt_evt_le_connected ,mem_fifo_temp +0x5754 019678 call ui_ipc_send_event +0x5755 019680 branch context_save +: 019683 le_init_attlist_search: +0x5756 019684 bpatchx patch2e_1 ,mem_patch2e +0x5757 019685 fetch 2 ,mem_le_search_handle_start +0x5758 019686 iforce regb +0x5759 019687 fetch 2 ,mem_le_search_handle_end +0x575a 019688 iforce regc +0x575b 019689 fetch 2 ,mem_ui_le_uuid_table +0x575c 019690 iforce contr +0x575d 019691 enable user +0x575e 019692 rtn +: 019695 le_att_handle_inrange: +0x575f 019696 ifetch 2 ,contr +0x5760 019697 rtn blank +0x5761 019698 isub regb ,null +0x5762 019699 nrtn positive +0x5763 019700 isub regc ,null +0x5764 019701 rtn zero +0x5765 019702 branch le_att_handle_blank ,positive +0x5766 019703 force 1 ,null +0x5767 019704 rtn +: 019705 le_att_handle_blank: +0x5768 019706 force 0 ,pdata +0x5769 019707 rtn +: 019711 le_att_get_handle_ptr: +0x576a 019712 call le_att_get_handle_ptr2 +0x576b 019713 branch le_att_get_handle_ptr_found ,zero +0x576c 019714 rtn +: 019716 le_att_get_handle_ptr2: +0x576d 019717 bpatchx patch2e_2 ,mem_patch2e +0x576e 019718 fetch 2 ,mem_ui_le_uuid_table +0x576f 019719 iforce contr +: 019720 le_att_get_handle_loop1: +0x5770 019721 ifetch 2 ,contr +0x5771 019722 rtn blank +0x5772 019723 isub temp ,null +0x5773 019724 rtn zero +0x5774 019725 ifetch 1 ,contr +0x5775 019726 iadd contr ,contr +0x5776 019727 ifetch 1 ,contr +0x5777 019728 iadd contr ,contr +0x5778 019729 branch le_att_get_handle_loop1 +: 019730 le_att_get_handle_ptr_found: +0x5779 019731 ifetch 1 ,contr +0x577a 019732 iadd contr ,contr +0x577b 019733 rtn +: 019737 le_att_get_short_uuid_ptr: +0x577c 019738 bpatchx patch2e_3 ,mem_patch2e +0x577d 019739 fetch 2 ,mem_ui_le_uuid_table +0x577e 019740 iforce contr +: 019741 le_att_get_short_uuid_loop: +0x577f 019742 ifetch 2 ,contr +0x5780 019743 rtn blank +0x5781 019744 ifetch 1 ,contr +0x5782 019745 iadd contr ,contr +0x5783 019746 increase -2 ,contr +0x5784 019747 ifetch 2 ,contr +0x5785 019748 isub temp ,null +0x5786 019749 rtn zero +0x5787 019750 ifetch 1 ,contr +0x5788 019751 iadd contr ,contr +0x5789 019752 branch le_att_get_short_uuid_loop +: 019756 le_att_get_handle_info_from_ptr: +0x578a 019757 fetch 2 ,mem_le_cur_attlist_start_ptr +0x578b 019758 branch le_att_get_handle_info_fast +: 019760 le_att_get_handle_info: +0x578c 019761 bpatchx patch2e_4 ,mem_patch2e +0x578d 019762 fetch 2 ,mem_ui_le_uuid_table +: 019763 le_att_get_handle_info_fast: +0x578e 019764 iforce contr +0x578f 019765 copy temp ,rega +: 019766 le_att_get_handle_loop: +0x5790 019767 ifetch 2 ,contr +0x5791 019768 branch le_att_unfind_handle ,blank +0x5792 019769 isub rega ,null +0x5793 019770 branch le_att_finded_handle ,zero +0x5794 019771 ifetch 1 ,contr +0x5795 019772 iadd contr ,contr +0x5796 019773 ifetch 1 ,contr +0x5797 019774 iadd contr ,contr +0x5798 019775 branch le_att_get_handle_loop +: 019776 le_att_unfind_handle: +0x5799 019777 branch disable_blank +: 019779 le_att_finded_handle: +0x579a 019780 ifetch 1 ,contr +0x579b 019781 store 1 ,mem_le_cur_uuid_length +0x579c 019782 copy pdata ,loopcnt +0x579d 019783 arg mem_le_cur_uuid ,contw +0x579e 019784 call memcpy_fast +0x579f 019785 ifetch 1 ,contr +0x57a0 019786 store 1 ,mem_le_curr_att_len +0x57a1 019787 call store_contr +0x57a2 019788 branch enable_blank +: 019791 le_modified_name: +0x57a3 019792 bpatchx patch2e_5 ,mem_patch2e +0x57a4 019793 call le_modified_name_att_list +0x57a5 019794 branch le_modified_name_adv +: 019796 le_modified_name_att_list: +0x57a6 019797 arg uuid_chrctr_device_name ,temp +0x57a7 019798 call le_att_get_short_uuid_ptr +0x57a8 019799 rtn blank +0x57a9 019800 ifetch 1 ,contr +0x57aa 019801 copy contr ,contw +0x57ab 019802 fetcht 1 ,mem_le_name_len +0x57ac 019803 copy temp ,loopcnt +0x57ad 019804 isub temp ,null +0x57ae 019805 nbranch le_name_length_longer_than_att ,positive +0x57af 019806 isub temp ,temp +0x57b0 019807 arg mem_le_name ,contr +0x57b1 019808 call memcpy +0x57b2 019809 copy temp ,loopcnt +0x57b3 019810 ncall memcpy_empty ,zero +0x57b4 019811 rtn +: 019812 le_name_length_longer_than_att: +0x57b5 019813 copy pdata ,loopcnt +0x57b6 019814 arg mem_le_name ,contr +0x57b7 019815 branch memcpy_fast +: 019818 le_modified_name_adv: +0x57b8 019819 arg mem_le_adv_data_len + 32 ,regc +0x57b9 019820 arg mem_le_adv_data ,rega +0x57ba 019821 call le_modified_name_adv_and_scan +0x57bb 019822 setarg 0 +0x57bc 019823 setflag user ,0 ,pdata +0x57bd 019824 store 1 ,mem_pdatatemp +0x57be 019825 arg mem_le_scan_data_len + 32 ,regc +0x57bf 019826 arg mem_le_scan_data ,rega +0x57c0 019827 call le_modified_name_adv_and_scan +0x57c1 019828 rtn user +0x57c2 019829 fetch 1 ,mem_pdatatemp +0x57c3 019830 branch assert ,blank +0x57c4 019831 rtn +: 019834 le_modified_name_adv_and_scan: +0x57c5 019835 bpatchx patch2e_6 ,mem_patch2e +0x57c6 019836 call enable_user +0x57c7 019837 call clear_temp_block +0x57c8 019838 arg 0 ,regb +0x57c9 019839 arg mem_le_data_temp ,contw +0x57ca 019840 call le_modified_name_adv_loop +0x57cb 019841 fetch 1 ,mem_le_name_len +0x57cc 019842 add pdata ,1 ,temp +0x57cd 019843 iadd regb ,rega +0x57ce 019844 increase 2 ,rega +0x57cf 019845 sub rega ,0x1f ,null +0x57d0 019846 nbranch le_modified_name_adv_and_scan_name_overflow ,positive +0x57d1 019847 istoret 1 ,contw +0x57d2 019848 arg gap_adtype_local_name_complete ,temp +0x57d3 019849 istoret 1 ,contw +0x57d4 019850 iforce loopcnt +0x57d5 019851 call memcpy_fast +0x57d6 019852 copy rega ,regb +: 019853 le_modified_name_adv_and_scan_store_data: +0x57d7 019854 deposit regb +0x57d8 019855 store 1 ,mem_le_data_len_temp +0x57d9 019856 arg mem_le_data_len_temp ,contr +0x57da 019857 setarg -32 +0x57db 019858 iadd regc ,contw +0x57dc 019859 branch memcpy32 +: 019861 le_modified_name_adv_and_scan_name_overflow: +0x57dd 019862 call disable_user +0x57de 019863 branch le_modified_name_adv_and_scan_store_data +: 019865 le_modified_name_adv_loop: +0x57df 019866 ifetch 1 ,rega +0x57e0 019867 rtn blank +0x57e1 019868 pincrease 1 +0x57e2 019869 ifetcht 1 ,contr +0x57e3 019870 sub temp ,gap_adtype_local_name_complete ,null +0x57e4 019871 branch le_modified_name_adv_found_name ,zero +0x57e5 019872 iadd regb ,regb +0x57e6 019873 copy rega ,contr +0x57e7 019874 iforce loopcnt +0x57e8 019875 call memcpy_fast +0x57e9 019876 copy contr ,rega +: 019877 le_modified_name_adv_loop2: +0x57ea 019878 deposit rega +0x57eb 019879 isub regc ,null +0x57ec 019880 rtn positive +0x57ed 019881 branch le_modified_name_adv_loop +: 019883 le_modified_name_adv_found_name: +0x57ee 019884 iadd rega ,rega +0x57ef 019885 branch le_modified_name_adv_loop2 +: 019888 memcpy_empty: +0x57f0 019889 setarg space +0x57f1 019890 istore 1 ,contw +0x57f2 019891 loop memcpy_empty +0x57f3 019892 rtn +: 019895 le_lpm_set_mult: +0x57f4 019896 bpatchx patch2e_7 ,mem_patch2e +0x57f5 019897 disable wake +0x57f6 019898 branch le_lpm_set_mult_attempt ,attempt +0x57f7 019899 nbranch le_lpm_lost ,match +: 019900 le_lpm_set_mult_attempt: +0x57f8 019901 call lpm_match +0x57f9 019902 fetch 2 ,mem_rx_window_sniff +0x57fa 019903 store 2 ,mem_le_receive_window +0x57fb 019905 nbranch lpm_mult_short ,match +0x57fc 019906 bmark1 mark_old_packet ,lpm_mult_short +0x57fd 019908 fetch 1 ,mem_le_packet_size +0x57fe 019909 nbranch lpm_mult_short ,blank +0x57ff 019910 fetch 1 ,mem_le_txlen +0x5800 019911 nbranch lpm_mult_short ,blank +0x5801 019913 fetch 1 ,mem_le_configuration +0x5802 019914 bbit1 bit_ble_short_mult ,lpm_mult_short +0x5803 019916 fetch 1 ,mem_le_state +0x5804 019917 bbit1 lestate_update_param ,lpm_mult_short +0x5805 019918 branch lpm_mult_wait_timeout +: 019920 le_lpm_lost: +0x5806 019921 fetcht 2 ,mem_rx_window_sniff +0x5807 019922 rshift temp ,temp +0x5808 019923 fetch 2 ,mem_le_receive_window +0x5809 019924 iadd temp ,pdata +0x580a 019925 store 2 ,mem_le_receive_window +0x580b 019926 branch lpm_lost +: 019929 le_set_config_fixed_tk: +0x580c 019930 arg bit_ble_passkey_fixed_key ,queue +0x580d 019931 branch le_set_config +: 019933 le_clr_config_fixed_tk: +0x580e 019934 arg bit_ble_passkey_fixed_key ,queue +0x580f 019935 branch le_clr_config +: 019937 le_set_config_fixed_ltk: +0x5810 019938 arg bit_ble_pairing_fixed_ltk ,queue +0x5811 019939 branch le_set_config +: 019941 le_clr_config_fixed_ltk: +0x5812 019942 arg bit_ble_pairing_fixed_ltk ,queue +0x5813 019943 branch le_clr_config +: 019945 le_set_config_more_data: +0x5814 019946 arg bit_ble_transmit_packet_by_md ,queue +0x5815 019947 branch le_set_config +: 019949 le_clr_config_more_data: +0x5816 019950 arg bit_ble_transmit_packet_by_md ,queue +0x5817 019951 branch le_clr_config +: 019953 le_set_config_read_authentication: +0x5818 019954 arg bit_ble_read_auth ,queue +0x5819 019955 branch le_set_config +: 019957 le_clr_config_read_authentication: +0x581a 019958 arg bit_ble_read_auth ,queue +0x581b 019959 branch le_clr_config +: 019961 le_set_config_write_authentication: +0x581c 019962 arg bit_ble_write_auth ,queue +0x581d 019963 branch le_set_config +: 019965 le_clr_config_write_authentication: +0x581e 019966 arg bit_ble_write_auth ,queue +0x581f 019967 branch le_clr_config +: 019969 le_set_config_short_mult: +0x5820 019970 arg bit_ble_short_mult ,queue +0x5821 019971 branch le_set_config +: 019973 le_clr_config_short_mult: +0x5822 019974 arg bit_ble_short_mult ,queue +0x5823 019975 branch le_clr_config +: 019978 le_set_config: +0x5824 019979 fetch 1 ,mem_le_configuration +0x5825 019980 qset1 pdata +0x5826 019981 store 1 ,mem_le_configuration +0x5827 019982 rtn +: 019984 le_clr_config: +0x5828 019985 fetch 1 ,mem_le_configuration +0x5829 019986 qset0 pdata +0x582a 019987 store 1 ,mem_le_configuration +0x582b 019988 rtn +: 019990 le_set_fixed_ltk: +0x582c 019991 setarg 0x112233 +0x582d 019992 store 3 ,mem_le_fixed_ltk +0x582e 019993 setarg 0x445566 +0x582f 019994 istore 3 ,contw +0x5830 019995 setarg 0x778899 +0x5831 019996 istore 3 ,contw +0x5832 019997 setarg 0x001122 +0x5833 019998 istore 3 ,contw +0x5834 019999 setarg 0x334455 +0x5835 020000 istore 3 ,contw +0x5836 020001 setarg 0x66 +0x5837 020002 istore 1 ,contw +0x5838 020003 rtn +: 020006 le_set_justwork: +0x5839 020007 setarg 0x01000302 +0x583a 020008 store 4 ,mem_le_pres +0x583b 020009 setarg 0x010010 +0x583c 020010 store 3 ,mem_le_pres_max_keysize +0x583d 020011 jam 1 ,mem_le_pairing_mode +0x583e 020012 rtn +: 020016 le_fifo_malloc_tx_empty: +0x583f 020017 arg 0 ,rega +0x5840 020018 arg llid_empty ,type +0x5841 020019 branch le_fifo_malloc_tx +: 020023 le_fifo_malloc_tx_ll: +0x5842 020024 arg llid_le_ll ,type +0x5843 020025 call le_fifo_malloc_tx +0x5844 020026 copy regb ,pdata +0x5845 020027 istore 1 ,contw +0x5846 020028 rtn +: 020032 le_fifo_malloc_tx_l2cap: +0x5847 020033 force llid_l2cap_start ,type +0x5848 020034 increase 4 ,rega +0x5849 020035 call le_fifo_malloc_tx +0x584a 020036 increase -4 ,rega +0x584b 020037 copy rega ,pdata +0x584c 020038 istore 2 ,contw +0x584d 020039 copy regb ,pdata +0x584e 020040 istore 2 ,contw +0x584f 020041 rtn +: 020045 le_fifo_malloc_tx: +0x5850 020046 sub rega ,240 ,null +0x5851 020047 nbranch assert ,positive +0x5852 020048 fetch 1 ,mem_le_tx_buff_used +0x5853 020049 arg 1 ,temp +0x5854 020050 arg le_tx_buff_count ,loopcnt +: 020051 le_fifo_malloc_tx_loop: +0x5855 020052 iand temp ,null +0x5856 020053 branch le_fifo_malloc_tx_got_empty ,zero +0x5857 020054 lshift temp ,temp +0x5858 020055 loop le_fifo_malloc_tx_loop +0x5859 020056 branch assert +: 020057 le_fifo_malloc_tx_got_empty: +0x585a 020058 ixor temp ,pdata +0x585b 020059 store 1 ,mem_le_tx_buff_used +0x585c 020060 sub loopcnt ,le_tx_buff_count ,pdata +0x585d 020061 lshift4 pdata ,pdata +0x585e 020062 lshift4 pdata ,pdata +0x585f 020063 arg mem_le_tx_buffer0 ,temp +0x5860 020064 iadd temp ,temp +: 020065 le_fifo_tx_find_empty_ptr: +0x5861 020066 arg 0 ,loopcnt +0x5862 020067 arg mem_le_tx_ptr0 ,contr +: 020068 le_fifo_tx_find_empty_ptr_loop: +0x5863 020069 ifetch 2 ,contr +0x5864 020070 branch le_fifo_tx_found_empty_ptr ,blank +0x5865 020071 copy loopcnt ,pdata +0x5866 020072 increase 1 ,loopcnt +0x5867 020073 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop +0x5868 020074 branch assert +: 020077 le_fifo_tx_found_empty_ptr: +0x5869 020078 increase -2 ,contr +0x586a 020079 istoret 2 ,contr +0x586b 020080 copy temp ,contw +0x586c 020081 copy rega ,pdata +0x586d 020082 istore 1 ,contw +0x586e 020083 setarg 0 +0x586f 020084 istore 1 ,contw +0x5870 020085 copy type ,pdata +0x5871 020086 istore 1 ,contw +0x5872 020087 rtn +: 020091 le_fifo_get_first_tx_ptr: +0x5873 020092 fetch 2 ,mem_le_tx_ptr0 +0x5874 020093 copy pdata ,contr +0x5875 020094 rtn +: 020096 le_fifo_get_second_tx_ptr: +0x5876 020097 fetch 2 ,mem_le_tx_ptr1 +0x5877 020098 copy pdata ,contr +0x5878 020099 rtn +: 020101 le_fifo_get_last_tx_ptr: +0x5879 020102 call le_fifo_get_last_tx_ptr0 +0x587a 020103 copy pdata ,contr +0x587b 020104 rtn +: 020105 le_fifo_get_last_tx_ptr0: +0x587c 020106 fetch 2 ,mem_le_tx_ptr3 +0x587d 020107 nrtn blank +0x587e 020108 fetch 2 ,mem_le_tx_ptr2 +0x587f 020109 nrtn blank +0x5880 020110 fetch 2 ,mem_le_tx_ptr1 +0x5881 020111 nrtn blank +0x5882 020112 fetch 2 ,mem_le_tx_ptr0 +0x5883 020113 rtn +: 020115 le_fifo_get_first_l2cap_ptr: +0x5884 020116 call le_fifo_get_first_tx_ptr +0x5885 020117 increase 3 ,contr +0x5886 020118 rtn +: 020120 le_fifo_get_first_att_ptr: +0x5887 020121 call le_fifo_get_first_tx_ptr +0x5888 020122 increase 7 ,contr +0x5889 020123 rtn +: 020125 le_fifo_get_last_att_ptr: +0x588a 020126 call le_fifo_get_last_tx_ptr +0x588b 020127 increase 7 ,contr +0x588c 020128 rtn +: 020130 le_fifo_get_last_l2cap_ptr: +0x588d 020131 call le_fifo_get_last_tx_ptr +0x588e 020132 increase 3 ,contr +0x588f 020133 rtn +: 020137 le_fifo_check_full: +0x5890 020138 fetch 2 ,mem_le_tx_ptr3 +0x5891 020139 rtn +: 020142 le_fifo_check_nearly_full: +0x5892 020143 fetch 2 ,mem_le_tx_ptr2 +0x5893 020144 rtn +: 020147 le_fifo_check_empty: +0x5894 020148 fetch 2 ,mem_le_tx_ptr0 +0x5895 020149 rtn +: 020152 le_fifo_release_first_node: +0x5896 020153 fetch 2 ,mem_le_tx_ptr0 +0x5897 020154 arg mem_le_tx_buffer0 ,temp +0x5898 020155 isub temp ,pdata +0x5899 020156 rshift4 pdata ,pdata +0x589a 020157 rshift4 pdata ,queue +0x589b 020158 fetch 1 ,mem_le_tx_buff_used +0x589c 020159 qset0 pdata +0x589d 020160 store 1 ,mem_le_tx_buff_used +0x589e 020161 arg 0 ,loopcnt +: 020162 le_fifo_release_first_node_loop: +0x589f 020163 lshift loopcnt ,pdata +0x58a0 020164 arg mem_le_tx_ptr1 ,temp +0x58a1 020165 iadd temp ,temp +0x58a2 020166 ifetch 2 ,temp +0x58a3 020167 increase -2 ,temp +0x58a4 020168 istore 2 ,temp +0x58a5 020169 copy loopcnt ,pdata +0x58a6 020170 increase 1 ,loopcnt +0x58a7 020171 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop +0x58a8 020172 setarg 0 +0x58a9 020173 istore 2 ,temp +0x58aa 020174 rtn +: 020180 le_parse_att: +0x58ab 020181 ifetch 3 ,contr +0x58ac 020182 store 3 ,mem_le_att_opcode +0x58ad 020183 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +0x58ae 020184 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +0x58af 020185 beq attop_find_information_request ,le_parse_att_find_information_request +0x58b0 020186 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +0x58b1 020187 beq attop_read_by_type_request ,le_parse_att_read_by_type_request +0x58b2 020188 beq attop_read_request ,le_parse_att_read_request +0x58b3 020189 beq attop_read_blob_request ,le_parse_att_read_blob_request +0x58b4 020190 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +0x58b5 020191 beq attop_write_request ,le_parse_att_write_request +0x58b6 020192 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +0x58b7 020193 beq attop_execute_write_request ,le_parse_att_execute_write_request +0x58b8 020194 beq attop_write_command ,le_parse_att_write_command +0x58b9 020195 rtn +: 020198 le_send_att_exchange_mtu_requset: +0x58ba 020199 force 3 ,rega +0x58bb 020200 call le_fifo_malloc_tx_l2cap_gatt +0x58bc 020201 setarg attop_exchange_mtu_request +0x58bd 020202 istore 1 ,contw +0x58be 020203 fetch 2 ,mem_le_local_mtu +0x58bf 020204 istore 2 ,contw +0x58c0 020205 rtn +: 020208 le_parse_att_exchange_mtu_request: +0x58c1 020209 call le_parse_att_exchange_mtu_response +: 020210 le_send_att_exchange_mtu_response: +0x58c2 020211 force 3 ,rega +0x58c3 020212 call le_fifo_malloc_tx_l2cap_gatt +0x58c4 020213 setarg attop_exchange_mtu_response +0x58c5 020214 istore 1 ,contw +0x58c6 020215 fetch 2 ,mem_le_local_mtu +0x58c7 020216 istore 2 ,contw +0x58c8 020217 rtn +: 020219 le_parse_att_exchange_mtu_response: +0x58c9 020220 rshift8 pdata ,pdata +0x58ca 020221 store 2 ,mem_le_remote_mtu +0x58cb 020222 rtn +: 020224 le_parse_att_find_information_request: +0x58cc 020225 call le_get_search_handle_start_end_common +0x58cd 020226 call enable_user +0x58ce 020227 branch le_send_att_find_information_response +: 020229 le_send_att_find_information_response: +0x58cf 020230 arg 3 ,timeup +0x58d0 020231 call le_init_attlist_search +: 020232 le_send_att_find_information_res_loop: +0x58d1 020233 call le_att_handle_inrange +0x58d2 020234 branch le_send_att_find_information_res_end ,blank +0x58d3 020235 nbranch le_send_att_find_information_res_next ,positive +0x58d4 020236 increase -2 ,contr +0x58d5 020237 call store_contr +0x58d6 020238 call get_contw +0x58d7 020239 nbranch le_send_att_find_information_res_store_info ,user +0x58d8 020240 call push_stack_rega_b_c +0x58d9 020241 call disable_user +0x58da 020242 force 20 ,rega +0x58db 020243 call le_fifo_malloc_tx_l2cap_gatt +0x58dc 020244 call pop_stack_rega_b_c +0x58dd 020245 setarg attop_find_information_response +0x58de 020246 istore 1 ,contw +0x58df 020247 setarg uuid_size_16bit +0x58e0 020248 istore 1 ,contw +: 020249 le_send_att_find_information_res_store_info: +0x58e1 020250 call get_contr +0x58e2 020251 ifetch 2 ,contr +0x58e3 020252 istore 2 ,contw +0x58e4 020253 ifetch 1 ,contr +0x58e5 020254 copy pdata ,loopcnt +0x58e6 020255 call memcpy +0x58e7 020256 call store_contw +0x58e8 020257 increase -1 ,timeup +0x58e9 020258 branch le_send_att_find_information_res_end ,zero +: 020259 le_send_att_find_information_res_cont: +0x58ea 020260 ifetch 1 ,contr +0x58eb 020261 iadd contr ,contr +0x58ec 020262 branch le_send_att_find_information_res_loop +: 020263 le_send_att_find_information_res_next: +0x58ed 020264 ifetch 1 ,contr +0x58ee 020265 iadd contr ,contr +0x58ef 020266 branch le_send_att_find_information_res_cont +: 020267 le_send_att_find_information_res_end: +0x58f0 020268 branch le_send_att_error_response_notfound ,user +0x58f1 020269 branch le_send_auto_len_by_mem +: 020272 le_parse_att_find_by_type_value_request: +0x58f2 020273 call le_get_search_handle_start_end_common +0x58f3 020274 ifetch 2 ,contr +0x58f4 020275 store 2 ,mem_le_search_uuid +0x58f5 020276 call store_contr +0x58f6 020277 arg mem_le_search_att_type_length ,contw +0x58f7 020278 fetch 2 ,mem_le_l2cap_size +0x58f8 020279 increase -7 ,pdata +0x58f9 020280 call le_get_search_common2 +0x58fa 020281 branch le_send_att_find_by_type_value_response +: 020284 le_start_end_handle_check_1: +0x58fb 020285 disable user +0x58fc 020286 fetcht 2 ,mem_le_search_handle_start +0x58fd 020287 fetch 2 ,mem_le_search_handle_end +0x58fe 020288 isub temp ,null +0x58ff 020289 nbranch le_start_end_handle_check_1_fail ,positive +0x5900 020290 deposit temp +0x5901 020291 rtnne 0 +: 020292 le_start_end_handle_check_1_fail: +0x5902 020293 enable user +0x5903 020294 jam att_err_invalid_handle ,mem_le_err_code +0x5904 020295 branch le_send_att_error_response +: 020298 le_send_att_find_by_type_value_response: +0x5905 020299 call le_start_end_handle_check_1 +0x5906 020300 rtn user +0x5907 020301 fetcht 2 ,mem_le_search_uuid +0x5908 020302 setarg uuid_gatt_primary_service +0x5909 020303 isub temp ,null +0x590a 020304 branch le_send_att_find_by_type_value_res_primary ,zero +0x590b 020305 branch le_send_att_error_response_notfound +: 020308 le_send_att_find_by_type_value_res_primary: +0x590c 020309 jam le_find_by_type_val_res_not_found ,mem_le_search_res +0x590d 020310 fetcht 2 ,mem_le_search_handle_start +0x590e 020311 storet 2 ,mem_temp +0x590f 020312 call le_att_get_handle_info +0x5910 020313 nbranch le_send_att_error_response_notfound ,blank +: 020314 le_send_att_find_primary_search_loop: +0x5911 020315 fetcht 2 ,mem_temp +0x5912 020316 call le_att_get_handle_info +0x5913 020317 nbranch le_send_att_error_response_notfound2 ,blank +0x5914 020318 copy contr ,rega +0x5915 020319 fetch 1 ,mem_le_curr_att_len +0x5916 020320 copy pdata ,loopcnt +0x5917 020321 fetcht 1 ,mem_le_search_att_type_length +0x5918 020322 isub temp ,null +0x5919 020323 nbranch le_send_att_find_primary_search_loop1 ,zero +0x591a 020324 arg mem_le_search_att_type ,regb +0x591b 020325 call string_compare +0x591c 020327 branch le_send_att_find_primary_search_end_start_handle_found ,zero +0x591d 020329 fetch 2 ,mem_le_cur_uuid +0x591e 020330 fetcht 2 ,mem_le_search_uuid +0x591f 020331 isub temp ,null +0x5920 020332 branch le_send_att_find_primary_search_end_ending_handle_found ,zero +: 020333 le_send_att_find_primary_search_loop1: +0x5921 020334 fetch 2 ,mem_temp +0x5922 020335 increase 1 ,pdata +0x5923 020336 store 2 ,mem_temp +0x5924 020337 branch le_send_att_find_primary_search_loop +: 020339 le_send_att_error_response_notfound2: +0x5925 020340 fetch 1 ,mem_le_search_res +0x5926 020341 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +0x5927 020342 branch le_send_att_error_response_notfound +: 020345 le_send_att_find_primary_search_end_start_handle_found: +0x5928 020346 fetch 2 ,mem_le_cur_uuid +0x5929 020347 fetcht 2 ,mem_le_search_uuid +0x592a 020348 isub temp ,null +0x592b 020349 nbranch le_send_att_find_primary_search_loop1 ,zero +0x592c 020350 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +0x592d 020352 fetcht 2 ,mem_temp +0x592e 020353 storet 2 ,mem_le_cur_handle_start +0x592f 020354 branch le_send_att_find_primary_search_loop1 +: 020356 le_send_att_find_primary_search_end_ending_handle_found: +0x5930 020357 fetch 1 ,mem_le_search_res +0x5931 020358 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +0x5932 020359 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +0x5933 020360 fetcht 2 ,mem_temp +0x5934 020361 increase -1 ,temp +0x5935 020362 storet 2 ,mem_le_cur_handle_end +: 020364 le_send_att_find_primary_search_end: +0x5936 020365 arg 5 ,rega +0x5937 020366 call le_fifo_malloc_tx_l2cap_gatt +0x5938 020367 setarg attop_find_by_type_value_response +0x5939 020368 istore 1 ,contw +0x593a 020369 fetch 2 ,mem_le_cur_handle_start +0x593b 020370 istore 2 ,contw +0x593c 020371 fetch 2 ,mem_le_cur_handle_end +0x593d 020372 istore 2 ,contw +0x593e 020373 rtn +: 020377 le_parse_att_read_by_type_request: +0x593f 020378 call le_get_search_handle_start_end_common +0x5940 020379 call le_get_search_att_uuid +0x5941 020380 branch le_send_att_read_by_type_response +: 020382 le_send_att_read_by_type_response: +0x5942 020383 fetcht 2 ,mem_le_search_handle_start +0x5943 020384 storet 2 ,mem_temp +0x5944 020385 call le_init_attlist_search +0x5945 020386 call le_att_get_handle_ptr2 +0x5946 020387 increase -2 ,contr +0x5947 020388 copy contr ,pdata +0x5948 020389 store 2 ,mem_le_cur_attlist_start_ptr +0x5949 020391 fetcht 2 ,mem_le_search_uuid +0x594a 020392 setarg uuid_chrctr_device_name +0x594b 020393 isub temp ,null +0x594c 020394 branch le_send_att_read_by_type_res_device_name ,zero +0x594d 020395 setarg uuid_gatt_characteristic +0x594e 020396 isub temp ,null +0x594f 020397 nbranch le_send_att_read_by_type_res_not_characteristic ,zero +0x5950 020398 arg 2 ,timeup +: 020399 le_send_att_read_by_type_response_loop: +0x5951 020400 call le_att_check_handle_end +0x5952 020401 nbranch le_send_att_read_by_type_response_end ,positive +0x5953 020402 fetcht 2 ,mem_temp +0x5954 020403 call le_att_get_handle_info_from_ptr +0x5955 020404 beq 1 ,le_send_att_read_by_type_response_end +0x5956 020405 call le_att_same_uuid +0x5957 020406 nbranch le_send_att_read_by_type_response_next_handle ,zero +0x5958 020407 nbranch le_send_att_read_by_type_res_found_next ,user +0x5959 020408 disable user +0x595a 020409 arg 20 ,rega +0x595b 020410 call le_fifo_malloc_tx_l2cap_gatt +0x595c 020411 setarg attop_read_by_type_response +0x595d 020412 istore 1 ,contw +0x595e 020413 copy contw ,alarm +0x595f 020414 increase 1 ,contw +0x5960 020416 call le_send_att_read_by_type_write_properties +0x5961 020417 call le_att_next_handle +0x5962 020418 call le_att_get_handle_info_from_ptr +0x5963 020419 call le_send_att_read_by_type_write_uuid +0x5964 020420 fetch 1 ,mem_le_cur_uuid_length +0x5965 020421 increase 5 ,pdata +0x5966 020422 istore 1 ,alarm +0x5967 020423 fetch 1 ,mem_le_cur_uuid_length +0x5968 020424 beq 16 ,le_send_att_read_by_type_response_end +0x5969 020425 increase -1 ,timeup +0x596a 020426 branch le_send_att_read_by_type_response_end ,zero +: 020427 le_send_att_read_by_type_response_next_handle: +0x596b 020428 call le_att_next_handle +0x596c 020429 branch le_send_att_read_by_type_response_loop +: 020430 le_send_att_read_by_type_response_end: +0x596d 020431 branch le_send_att_error_response_notfound ,user +0x596e 020432 branch le_send_auto_len_by_mem +: 020434 le_send_att_read_by_type_res_found_next: +0x596f 020435 call le_store_att_record +0x5970 020436 call le_att_next_handle +0x5971 020437 call le_att_get_handle_info_from_ptr +0x5972 020438 fetch 1 ,mem_le_cur_uuid_length +0x5973 020439 beq 16 ,le_send_att_read_by_type_response_end +0x5974 020441 call get_contw +0x5975 020442 fetch 2 ,mem_temp +0x5976 020443 increase -1 ,pdata +0x5977 020444 istore 2 ,contw +0x5978 020445 call le_write_att_record_common +0x5979 020446 call le_send_att_read_by_type_write_uuid +0x597a 020447 increase -1 ,timeup +0x597b 020448 branch le_send_att_read_by_type_response_end ,zero +0x597c 020449 branch le_send_att_read_by_type_response_next_handle +: 020452 le_send_att_read_by_type_write_properties: +0x597d 020453 fetch 2 ,mem_temp +0x597e 020454 istore 2 ,contw +0x597f 020456 fetch 1 ,mem_le_curr_att_len +0x5980 020457 copy pdata ,loopcnt +0x5981 020458 call get_contr +0x5982 020459 call memcpy_fast +0x5983 020460 branch store_contw +: 020461 le_send_att_read_by_type_write_uuid: +0x5984 020462 call get_contw +0x5985 020463 fetch 2 ,mem_temp +0x5986 020464 istore 2 ,contw +0x5987 020465 call store_contw +0x5988 020466 fetch 1 ,mem_le_cur_uuid_length +0x5989 020467 copy pdata ,loopcnt +0x598a 020468 call get_contw +0x598b 020469 call get_contr +0x598c 020470 isub loopcnt ,contr +0x598d 020471 increase -1 ,contr +0x598e 020472 call memcpy_fast +0x598f 020473 branch store_contw +: 020477 le_send_att_read_by_type_res_not_characteristic: +0x5990 020478 fetcht 2 ,mem_le_search_handle_start +0x5991 020479 storet 2 ,mem_temp +: 020480 le_send_att_read_by_type_res_not_char_loop: +0x5992 020481 call le_att_check_handle_end +0x5993 020482 nbranch le_send_att_error_response_notfound ,positive +0x5994 020483 call le_att_get_handle_info_from_ptr +0x5995 020484 beq 1 ,le_send_att_error_response_notfound +0x5996 020485 call le_att_same_uuid +0x5997 020486 nbranch le_send_att_read_by_type_res_not_char_next ,zero +: 020488 le_send_att_read_by_type_res_not_char_common: +0x5998 020489 arg 20 ,rega +0x5999 020490 call le_fifo_malloc_tx_l2cap_gatt +0x599a 020491 setarg attop_read_by_type_response +0x599b 020492 istore 1 ,contw +0x599c 020493 fetch 1 ,mem_le_curr_att_len +0x599d 020494 copy pdata ,loopcnt +0x599e 020495 increase 2 ,pdata +0x599f 020496 istore 1 ,contw +0x59a0 020497 fetch 2 ,mem_temp +0x59a1 020498 istore 2 ,contw +0x59a2 020499 call get_contr +0x59a3 020500 call memcpy_fast +0x59a4 020501 call store_contw +0x59a5 020502 branch le_send_auto_len_by_mem +: 020504 le_send_att_read_by_type_res_not_char_next: +0x59a6 020505 call le_att_next_handle +0x59a7 020506 branch le_send_att_read_by_type_res_not_char_loop +: 020509 le_send_att_read_by_type_res_device_name: +0x59a8 020510 arg uuid_chrctr_device_name ,temp +0x59a9 020511 call le_att_get_short_uuid_ptr +0x59aa 020512 rtn blank +0x59ab 020513 increase -5 ,contr +0x59ac 020514 ifetch 2 ,contr +0x59ad 020515 store 2 ,mem_temp +0x59ae 020516 arg 20 ,rega +0x59af 020517 call le_fifo_malloc_tx_l2cap_gatt +0x59b0 020518 setarg attop_read_by_type_response +0x59b1 020519 istore 1 ,contw +0x59b2 020520 fetch 1 ,mem_le_name_len +0x59b3 020521 copy pdata ,loopcnt +0x59b4 020522 increase 2 ,pdata +0x59b5 020523 istore 1 ,contw +0x59b6 020524 fetch 2 ,mem_temp +0x59b7 020525 istore 2 ,contw +0x59b8 020526 arg mem_le_name ,contr +0x59b9 020527 call memcpy_fast +0x59ba 020528 call store_contw +0x59bb 020529 branch le_send_auto_len_by_mem +: 020533 le_parse_att_read_request: +0x59bc 020534 fetcht 2 ,mem_le_att_handle +0x59bd 020535 fetch 1 ,mem_le_configuration +0x59be 020536 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth +: 020538 le_send_att_read_response: +0x59bf 020539 call le_att_get_handle_ptr +0x59c0 020540 branch le_send_att_error_response_notfound ,blank +0x59c1 020541 increase -2 ,contr +0x59c2 020542 ifetch 2 ,contr +0x59c3 020543 arg uuid_chrctr_device_name ,temp +0x59c4 020544 isub temp ,null +0x59c5 020545 branch le_send_device_name ,zero +0x59c6 020546 ifetch 1 ,contr +0x59c7 020547 sub pdata ,22 ,null +0x59c8 020548 branch le_send_att_read_response_less ,positive +0x59c9 020549 force 22 ,pdata +: 020550 le_send_att_read_response_less: +0x59ca 020551 copy pdata ,regc +0x59cb 020552 call store_contr +0x59cc 020553 add regc ,1 ,rega +0x59cd 020554 call le_fifo_malloc_tx_l2cap_gatt +0x59ce 020555 setarg attop_read_response +0x59cf 020556 istore 1 ,contw +0x59d0 020557 copy regc ,loopcnt +0x59d1 020558 call get_contr +0x59d2 020559 branch memcpy +: 020561 le_send_device_name: +0x59d3 020562 call store_contr +0x59d4 020563 fetch 1 ,mem_le_name_len +0x59d5 020564 add pdata ,1 ,rega +0x59d6 020565 call le_fifo_malloc_tx_l2cap_gatt +0x59d7 020566 setarg attop_read_response +0x59d8 020567 istore 1 ,contw +0x59d9 020568 fetch 1 ,mem_le_name_len +0x59da 020569 copy pdata ,loopcnt +0x59db 020570 arg mem_le_name ,contr +0x59dc 020571 branch memcpy +: 020574 le_send_att_read_response_check_auth: +0x59dd 020575 fetch 2 ,mem_le_pairing_handle +0x59de 020576 isub temp ,null +0x59df 020577 nbranch le_send_att_read_response ,zero +0x59e0 020579 call le_check_encrypt_state +0x59e1 020580 nbranch le_send_att_read_response ,user +0x59e2 020581 jam att_err_insufficient_authentication ,mem_le_err_code +0x59e3 020582 branch le_send_att_error_response +: 020585 le_parse_att_read_blob_request: +0x59e4 020586 ifetch 2 ,contr +0x59e5 020587 store 2 ,mem_le_att_offset +: 020588 le_send_att_read_blob_response: +0x59e6 020589 arg 20 ,rega +0x59e7 020590 call le_fifo_malloc_tx_l2cap_gatt +0x59e8 020591 setarg attop_read_blob_response +0x59e9 020592 istore 1 ,contw +0x59ea 020593 fetch 2 ,mem_le_att_offset +0x59eb 020594 iforce rega +0x59ec 020595 fetcht 2 ,mem_le_att_handle +0x59ed 020596 call le_att_get_handle_ptr +0x59ee 020597 branch le_send_att_error_response_notfound ,blank +0x59ef 020598 ifetch 1 ,contr +0x59f0 020599 isub rega ,loopcnt +0x59f1 020600 nbranch le_send_att_error_response_notfound ,positive +0x59f2 020601 sub loopcnt ,22 ,null +0x59f3 020602 branch le_send_att_read_blob_response_less ,positive +0x59f4 020603 force 22 ,loopcnt +: 020604 le_send_att_read_blob_response_less: +0x59f5 020605 deposit rega +0x59f6 020606 iadd contr ,contr +0x59f7 020607 call memcpy_fast +0x59f8 020608 call store_contw +0x59f9 020609 branch le_send_auto_len_by_mem +: 020612 le_parse_att_read_by_group_type_request: +0x59fa 020613 call le_get_search_handle_start_end_common +0x59fb 020614 call le_get_search_att_type +0x59fc 020615 branch le_send_att_read_by_group_type_response +: 020620 le_send_att_read_by_group_type_response: +0x59fd 020621 arg 2 ,timeup +0x59fe 020622 fetcht 2 ,mem_le_search_handle_start +0x59ff 020626 storet 2 ,mem_temp +0x5a00 020627 call le_init_attlist_search +0x5a01 020628 call le_att_get_handle_ptr2 +0x5a02 020629 increase -2 ,contr +0x5a03 020630 copy contr ,pdata +0x5a04 020631 store 2 ,mem_le_cur_attlist_start_ptr +: 020632 le_send_att_read_by_group_type_response_loop: +0x5a05 020633 call le_att_check_handle_end +0x5a06 020634 nbranch le_send_att_read_by_group_type_end0 ,positive +0x5a07 020635 fetcht 2 ,mem_temp +0x5a08 020636 call le_att_get_handle_info_from_ptr +0x5a09 020637 beq 1 ,le_send_att_read_by_group_type_end1 +0x5a0a 020639 call le_att_same_type +0x5a0b 020640 nbranch le_send_att_read_by_group_type_next_handle ,zero +0x5a0c 020641 copy timeup ,pdata +0x5a0d 020642 beq 0 ,le_send_att_read_by_group_type_end1 +0x5a0e 020643 nbranch le_send_att_read_by_group_type_store_write_record ,user +0x5a0f 020644 disable user +0x5a10 020646 arg 20 ,rega +0x5a11 020647 call le_fifo_malloc_tx_l2cap_gatt +0x5a12 020648 setarg attop_read_by_group_type_response +0x5a13 020649 istore 1 ,contw +0x5a14 020650 fetch 1 ,mem_le_curr_att_len +0x5a15 020651 increase 4 ,pdata +0x5a16 020652 istore 1 ,contw +0x5a17 020653 call store_contw +0x5a18 020654 branch le_send_att_read_by_group_type_store_record +: 020655 le_send_att_read_by_group_type_store_write_record: +0x5a19 020656 fetch 1 ,mem_le_curr_att_len +0x5a1a 020657 beq 16 ,le_send_att_read_by_group_type_end1 +0x5a1b 020658 fetch 2 ,mem_temp +0x5a1c 020659 increase -1 ,pdata +0x5a1d 020660 store 2 ,mem_le_cur_handle_end +0x5a1e 020661 call le_write_att_record +: 020662 le_send_att_read_by_group_type_store_record: +0x5a1f 020663 fetch 2 ,mem_temp +0x5a20 020664 store 2 ,mem_le_cur_handle_start +0x5a21 020665 call le_store_att_record +0x5a22 020666 increase -1 ,timeup +: 020668 le_send_att_read_by_group_type_next_handle: +0x5a23 020669 call le_att_next_handle +0x5a24 020670 branch le_send_att_read_by_group_type_response_loop +: 020672 le_send_att_read_by_group_type_end0: +0x5a25 020673 fetch 2 ,mem_temp +0x5a26 020674 store 2 ,mem_le_cur_handle_end +0x5a27 020675 branch le_send_att_read_by_group_type_end_common +: 020676 le_send_att_read_by_group_type_end1: +0x5a28 020677 fetch 2 ,mem_temp +0x5a29 020678 increase -1 ,pdata +0x5a2a 020679 store 2 ,mem_le_cur_handle_end +0x5a2b 020680 branch le_send_att_read_by_group_type_end_common +: 020681 le_send_att_read_by_group_type_end_common: +0x5a2c 020682 branch le_send_att_error_response_notfound ,user +0x5a2d 020683 call le_write_att_record +0x5a2e 020684 branch le_send_auto_len_by_mem +: 020689 le_parse_att_write_request: +0x5a2f 020690 copy contr ,rega +0x5a30 020691 fetch 2 ,mem_le_l2cap_size +0x5a31 020692 add pdata ,-3 ,regb +0x5a32 020693 call le_writeatt_cb +: 020694 le_send_att_write_response_check_auth: +0x5a33 020695 fetch 1 ,mem_le_configuration +0x5a34 020696 bbit0 bit_ble_write_auth ,le_send_att_write_response +0x5a35 020698 fetcht 2 ,mem_le_att_handle +0x5a36 020699 fetch 2 ,mem_le_pairing_handle +0x5a37 020700 isub temp ,null +0x5a38 020701 nbranch le_send_att_write_response ,zero +0x5a39 020702 call le_check_encrypt_state +0x5a3a 020703 nbranch le_send_att_write_response ,user +0x5a3b 020704 jam att_err_insufficient_authentication ,mem_le_err_code +0x5a3c 020705 branch le_send_att_error_response +: 020707 le_send_att_write_response: +0x5a3d 020708 force 1 ,rega +0x5a3e 020709 call le_fifo_malloc_tx_l2cap_gatt +0x5a3f 020710 setarg attop_write_response +0x5a40 020711 istore 1 ,contw +0x5a41 020712 rtn +: 020714 le_check_encrypt_state: +0x5a42 020715 call disable_user +0x5a43 020716 fetch 1 ,mem_le_pairing_mode +0x5a44 020717 rtneq le_pairing_mode_none +0x5a45 020718 fetch 1 ,mem_context +0x5a46 020719 rtnbit1 lestate_encryption +0x5a47 020720 branch enable_user +: 020723 le_parse_att_prepare_write_request: +0x5a48 020724 add contr ,2 ,rega +0x5a49 020725 fetch 2 ,mem_le_l2cap_size +0x5a4a 020726 add pdata ,-5 ,regb +0x5a4b 020727 call le_writeatt_cb +0x5a4c 020728 branch le_send_att_prepare_write_response +: 020731 le_send_att_prepare_write_response: +0x5a4d 020732 fetch 2 ,mem_le_l2cap_size +0x5a4e 020733 copy pdata ,rega +0x5a4f 020734 call le_fifo_malloc_tx_l2cap_gatt +0x5a50 020735 setarg attop_prepare_write_response +0x5a51 020736 istore 1 ,contw +0x5a52 020737 fetch 2 ,mem_le_att_handle +0x5a53 020738 istore 2 ,contw +0x5a54 020739 fetch 2 ,mem_le_l2cap_size +0x5a55 020740 add pdata ,-5 ,loopcnt +0x5a56 020741 fetch 2 ,mem_le_payload_ptr +0x5a57 020742 add pdata ,7 ,contr +0x5a58 020743 ifetch 2 ,contr +0x5a59 020744 istore 2 ,contw +0x5a5a 020745 branch memcpy_fast +: 020749 le_parse_att_execute_write_request: +: 020751 le_send_att_execute_write_response: +0x5a5b 020752 force 1 ,rega +0x5a5c 020753 call le_fifo_malloc_tx_l2cap_gatt +0x5a5d 020754 setarg attop_execute_write_response +0x5a5e 020755 istore 1 ,contw +0x5a5f 020756 rtn +: 020760 le_parse_att_write_command: +0x5a60 020761 copy contr ,rega +0x5a61 020762 fetch 2 ,mem_le_l2cap_size +0x5a62 020763 add pdata ,-3 ,regb +0x5a63 020764 branch le_writeatt_cb +: 020769 le_att_malloc_tx_notify: +0x5a64 020770 copy temp ,regc +0x5a65 020771 increase 3 ,rega +0x5a66 020772 call le_fifo_malloc_tx_l2cap_gatt +0x5a67 020773 increase -3 ,rega +0x5a68 020774 setarg attop_handle_value_notification +0x5a69 020775 istore 1 ,contw +0x5a6a 020776 copy regc ,temp +0x5a6b 020777 istoret 2 ,contw +0x5a6c 020778 rtn +: 020781 le_att_malloc_tx_indication: +0x5a6d 020782 copy temp ,regc +0x5a6e 020783 increase 3 ,rega +0x5a6f 020784 call le_fifo_malloc_tx_l2cap_gatt +0x5a70 020785 increase -3 ,rega +0x5a71 020786 setarg attop_handle_value_indication +0x5a72 020787 istore 1 ,contw +0x5a73 020788 copy regc ,temp +0x5a74 020789 istoret 2 ,contw +0x5a75 020790 rtn +: 020795 le_send_att_error_response_notfound: +0x5a76 020796 jam att_err_attribute_not_found ,mem_le_err_code +: 020797 le_send_att_error_response: +0x5a77 020798 force 5 ,rega +0x5a78 020799 call le_fifo_malloc_tx_l2cap_gatt +0x5a79 020800 setarg attop_error_response +0x5a7a 020801 istore 1 ,contw +0x5a7b 020802 fetch 1 ,mem_le_att_opcode +0x5a7c 020803 istore 1 ,contw +0x5a7d 020804 fetch 2 ,mem_le_att_handle +0x5a7e 020805 istore 2 ,contw +0x5a7f 020806 fetch 1 ,mem_le_err_code +0x5a80 020807 istore 1 ,contw +0x5a81 020808 rtn +: 020811 le_fifo_malloc_tx_l2cap_gatt: +0x5a82 020812 force le_l2cap_cid_att ,regb +0x5a83 020813 branch le_fifo_malloc_tx_l2cap +: 020816 le_att_next_handle: +0x5a84 020817 fetcht 2 ,mem_temp +0x5a85 020818 increase 1 ,temp +0x5a86 020819 storet 2 ,mem_temp +0x5a87 020820 rtn +: 020822 le_att_check_handle_end: +0x5a88 020823 fetcht 2 ,mem_temp +0x5a89 020824 fetch 2 ,mem_le_search_handle_end +0x5a8a 020825 isub temp ,null +0x5a8b 020826 rtn +: 020829 le_att_same_type: +0x5a8c 020830 fetcht 1 ,mem_le_search_att_type_length +0x5a8d 020831 arg mem_le_search_att_type ,rega +: 020832 le_att_check_same_common: +0x5a8e 020833 fetch 1 ,mem_le_cur_uuid_length +0x5a8f 020834 copy pdata ,loopcnt +0x5a90 020835 isub temp ,null +0x5a91 020836 nrtn zero +0x5a92 020837 arg mem_le_cur_uuid ,regb +0x5a93 020838 branch string_compare +: 020840 le_att_same_uuid: +0x5a94 020841 fetcht 1 ,mem_le_search_uuid_length +0x5a95 020842 arg mem_le_search_uuid ,rega +0x5a96 020843 branch le_att_check_same_common +: 020846 le_store_att_record: +0x5a97 020847 fetch 1 ,mem_le_curr_att_len +0x5a98 020848 store 1 ,mem_tmp_buffer +0x5a99 020849 copy pdata ,loopcnt +0x5a9a 020850 call get_contr +0x5a9b 020851 branch memcpy_fast +: 020854 le_write_att_record: +0x5a9c 020855 call get_contw +0x5a9d 020856 fetch 2 ,mem_le_cur_handle_start +0x5a9e 020857 istore 2 ,contw +0x5a9f 020858 fetch 2 ,mem_le_cur_handle_end +0x5aa0 020859 istore 2 ,contw +: 020860 le_write_att_record_common: +0x5aa1 020861 fetch 1 ,mem_tmp_buffer +0x5aa2 020862 copy pdata ,loopcnt +0x5aa3 020863 call memcpy_fast +0x5aa4 020864 branch store_contw +: 020868 le_send_auto_len_by_mem: +0x5aa5 020869 call get_contw +0x5aa6 020870 call le_fifo_get_last_att_ptr +0x5aa7 020871 copy contw ,pdata +0x5aa8 020872 isub contr ,rega +0x5aa9 020873 call le_fifo_get_last_l2cap_ptr +0x5aaa 020874 copy rega ,pdata +0x5aab 020875 istore 2 ,contr +0x5aac 020876 increase 4 ,rega +0x5aad 020877 call le_fifo_get_last_tx_ptr +0x5aae 020878 copy rega ,pdata +0x5aaf 020879 istore 1 ,contr +0x5ab0 020880 rtn +: 020883 le_get_search_handle_start_end_common: +0x5ab1 020884 rshift8 pdata ,pdata +0x5ab2 020885 store 2 ,mem_le_search_handle_start +0x5ab3 020886 ifetch 2 ,contr +0x5ab4 020887 store 2 ,mem_le_search_handle_end +0x5ab5 020888 rtn +: 020893 le_parse_signaling: +0x5ab6 020894 ifetch 1 ,contr +0x5ab7 020895 ifetcht 1 ,contr +0x5ab8 020896 ifetcht 2 ,contr +0x5ab9 020897 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +0x5aba 020898 rtn +: 020899 le_l2cap_parse_conn_parameter_update_rsp: +0x5abb 020900 ifetch 2 ,contr +0x5abc 020901 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x5abd 020902 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +0x5abe 020903 branch ui_ipc_send_event +: 020909 le_l2cap_tx_update_req: +0x5abf 020910 arg 0x0c ,rega +0x5ac0 020911 arg l2cap_connection_parameter_update_request ,regc +0x5ac1 020912 call le_fifo_malloc_tx_l2cap_signaling +0x5ac2 020913 setarg 0x08 +0x5ac3 020914 istore 2 ,contw +0x5ac4 020915 fetch 8 ,mem_le_interval_min +0x5ac5 020916 istore 8 ,contw +0x5ac6 020917 rtn +: 020921 le_fifo_malloc_tx_l2cap_signaling: +0x5ac7 020922 call le_l2cap_update_signaling_identifier +0x5ac8 020923 arg le_l2cap_cid_signal ,regb +0x5ac9 020924 call le_fifo_malloc_tx_l2cap +0x5aca 020925 copy regc ,pdata +0x5acb 020926 istore 1 ,contw +0x5acc 020927 fetch 1 ,mem_le_signaling_identifier +0x5acd 020928 istore 1 ,contw +0x5ace 020929 rtn +: 020932 le_l2cap_update_signaling_identifier: +0x5acf 020933 fetch 1 ,mem_le_signaling_identifier +0x5ad0 020935 pincrease 1 +0x5ad1 020936 store 1 ,mem_le_signaling_identifier +0x5ad2 020937 rtnne 0 +: 020939 le_l2cap_reset_signaling_identifier: +0x5ad3 020940 jam 1 ,mem_le_signaling_identifier +0x5ad4 020941 rtn +: 020946 le_pairing_mode_init: +0x5ad5 020947 fetch 1 ,mem_le_pairing_mode +0x5ad6 020948 beq le_pairing_mode_none ,le_set_no_pairing +0x5ad7 020949 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +0x5ad8 020950 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +0x5ad9 020951 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +0x5ada 020952 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +0x5adb 020953 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +0x5adc 020954 rtn +: 020956 le_set_pairing_mode_secure_justwork: +0x5add 020957 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ade 020958 branch le_set_noinputnooutput +: 020959 le_set_pairing_mode_secure_numeric: +0x5adf 020960 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae0 020961 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x5ae1 020962 rtn +: 020963 le_set_pairing_mode_secure_passkey: +0x5ae2 020964 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae3 020965 branch le_set_displayonly +: 020966 le_set_no_pairing: +0x5ae4 020967 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 020968 le_set_noinputnooutput: +0x5ae5 020969 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x5ae6 020970 rtn +: 020971 le_set_pairing_mode_lagacy_just_work: +0x5ae7 020972 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x5ae8 020973 branch le_set_noinputnooutput +: 020974 le_set_pairing_mode_lagacy_passkey: +0x5ae9 020975 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 020976 le_set_displayonly: +0x5aea 020977 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x5aeb 020978 rtn +: 020981 le_secure_connection_enable: +0x5aec 020982 fetch 1 ,mem_le_pres_auth +0x5aed 020983 set1 le_auth_secure_connection_pairing_bit ,pdata +0x5aee 020984 store 1 ,mem_le_pres_auth +0x5aef 020985 rtn +: 020986 le_secure_connection_disable: +0x5af0 020987 fetch 1 ,mem_le_pres_auth +0x5af1 020988 set0 le_auth_secure_connection_pairing_bit ,pdata +0x5af2 020989 store 1 ,mem_le_pres_auth +0x5af3 020990 rtn +: 020992 le_parse_smp: +0x5af4 020993 ifetch 1 ,contr +0x5af5 020994 beq smp_pairing_request ,le_parse_smp_pairing_request +0x5af6 020996 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +0x5af7 020997 beq smp_pairing_random ,le_parse_smp_pairing_random +0x5af8 020998 beq smp_pairing_failed ,le_parse_smp_pairing_failed +0x5af9 020999 beq smp_encryption_information ,le_parse_smp_encryption_information +0x5afa 021000 beq smp_master_identification ,le_parse_smp_master_identification +0x5afb 021001 beq smp_identity_information ,le_parse_smp_identity_information +0x5afc 021002 beq smp_identity_address_information ,le_parse_smp_identity_address_information +0x5afd 021003 beq smp_signing_information ,le_parse_smp_signing_information +0x5afe 021004 beq smp_security_request ,le_parse_smp_security_request +0x5aff 021005 beq smp_pairing_public_key ,le_parse_smp_public_key +0x5b00 021006 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +0x5b01 021007 rtn +: 021011 le_send_smp_security_request: +0x5b02 021012 force 2 ,rega +0x5b03 021013 call le_fifo_malloc_tx_l2cap_smp +0x5b04 021014 setarg smp_security_request +0x5b05 021015 istore 1 ,contw +0x5b06 021016 fetch 1 ,mem_le_pres_auth +0x5b07 021017 istore 1 ,contw +0x5b08 021018 rtn +: 021020 le_parse_smp_pairing_request: +0x5b09 021021 store 1 ,mem_le_preq +0x5b0a 021022 ifetch 6 ,contr +0x5b0b 021023 istore 6 ,contw +0x5b0c 021024 fetch 1 ,mem_le_pairing_mode +0x5b0d 021025 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +0x5b0e 021026 call le_send_smp_pairing_response +0x5b0f 021027 call le_check_master_support_secure_connect +0x5b10 021028 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +0x5b11 021029 fetch 1 ,mem_le_preq_iocap +0x5b12 021030 beq flag_iocap_displayonly ,le_set_tk_0 +0x5b13 021031 beq flag_iocap_displayyesno ,le_set_tk_0 +0x5b14 021032 beq flag_iocap_noinputnooutput ,le_set_tk_0 +0x5b15 021033 fetch 1 ,mem_le_pairing_mode +0x5b16 021034 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +0x5b17 021035 rtneq le_pairing_mode_secure_connect_passkey +: 021036 le_set_tk_0: +0x5b18 021037 arg 0 ,pdata +0x5b19 021038 store 4 ,mem_le_tk +0x5b1a 021039 rtn +: 021041 le_parse_smp_pairing_req_passkey: +0x5b1b 021042 fetch 1 ,mem_le_configuration +0x5b1c 021043 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey +: 021044 le_genernate_tk: +0x5b1d 021045 arg mem_le_tk ,rega +0x5b1e 021046 copy rega ,contw +0x5b1f 021047 arg 3 ,loopcnt +0x5b20 021048 call generate_random_loop +0x5b21 021049 fetch 2 ,mem_le_tk + 2 +0x5b22 021050 and_into 0x7 ,pdata +0x5b23 021051 store 2 ,mem_le_tk + 2 +: 021052 le_parse_smp_pairing_req_fixed_passkey: +0x5b24 021053 jam bt_evt_le_tk_generate ,mem_fifo_temp +0x5b25 021054 branch ui_ipc_send_event +: 021056 le_check_master_support_secure_connect: +0x5b26 021057 fetch 1 ,mem_le_preq_auth +0x5b27 021058 rtnbit1 le_auth_secure_connection_pairing_bit +0x5b28 021059 fetch 1 ,mem_le_pairing_mode +0x5b29 021060 rtnbit0 le_pairing_mode_secure_connect_bit +0x5b2a 021061 branch app_ble_disconnect +: 021063 le_send_smp_pairing_response: +0x5b2b 021064 force 7 ,rega +0x5b2c 021065 call le_fifo_malloc_tx_l2cap_smp +0x5b2d 021066 fetch 7 ,mem_le_pres +0x5b2e 021067 istore 7 ,contw +0x5b2f 021068 rtn +: 021071 le_parse_smp_pairing_confirm: +0x5b30 021072 copy contr ,rega +0x5b31 021073 fetch 1 ,mem_le_pairing_mode +0x5b32 021074 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +0x5b33 021075 copy rega ,contr +0x5b34 021076 arg mem_le_rconfirm ,contw +0x5b35 021077 call memcpy16 +0x5b36 021078 branch le_send_smp_pairing_confirm +: 021079 le_parse_smp_pairing_confirm_secure_passkey: +0x5b37 021080 copy rega ,contr +0x5b38 021081 arg mem_le_rconfirm ,contw +0x5b39 021082 call memcpy16 +0x5b3a 021083 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5b3b 021084 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +0x5b3c 021085 rtn +: 021088 le_send_smp_pairing_confirm: +0x5b3d 021089 fetch 1 ,mem_le_pairing_mode +0x5b3e 021090 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +0x5b3f 021091 call generate_confirm +0x5b40 021092 force 17 ,rega +0x5b41 021093 call le_fifo_malloc_tx_l2cap_smp +0x5b42 021094 setarg smp_pairing_confirm +0x5b43 021095 istore 1 ,contw +0x5b44 021096 branch store_aes_result +: 021099 le_send_smp_pairing_confirm_sc: +0x5b45 021100 arg mem_le_srand ,contw +0x5b46 021101 call generate_random +0x5b47 021102 call function_f4_cb +0x5b48 021103 force 17 ,rega +0x5b49 021104 call le_fifo_malloc_tx_l2cap_smp +0x5b4a 021105 setarg smp_pairing_confirm +0x5b4b 021106 istore 1 ,contw +0x5b4c 021107 branch load_inverse_result +: 021111 le_parse_smp_pairing_random: +0x5b4d 021112 copy contr ,rega +0x5b4e 021113 fetch 1 ,mem_le_pairing_mode +0x5b4f 021114 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +0x5b50 021115 copy rega ,contr +0x5b51 021116 call authenticate_rconfirm +0x5b52 021117 branch le_parse_smp_pairing_random_success ,zero +: 021118 le_send_pairing_confirm_value_failed: +0x5b53 021119 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason +: 021120 le_send_pairing_failed: +0x5b54 021121 force 2 ,rega +0x5b55 021122 call le_fifo_malloc_tx_l2cap_smp +0x5b56 021123 setarg smp_pairing_failed +0x5b57 021124 istore 1 ,contw +0x5b58 021125 fetch 1 ,mem_le_ll_pairing_fail_reason +0x5b59 021126 istore 1 ,contw +: 021127 le_parse_smp_pairing_failed: +0x5b5a 021128 force smp_pairing_timer ,queue +0x5b5b 021129 call timer_stop +0x5b5c 021130 jam flag_le_pairing_null ,mem_le_pairing_state +0x5b5d 021131 jam bt_evt_le_pairing_fail ,mem_fifo_temp +0x5b5e 021132 branch ui_ipc_send_event +: 021134 le_smp_pairing_fail_reason_not_support_pairing: +0x5b5f 021135 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +0x5b60 021136 branch le_send_pairing_failed +: 021139 le_parse_smp_pairing_random_sc: +0x5b61 021140 arg mem_le_mrand ,contw +0x5b62 021141 copy rega ,contr +0x5b63 021142 call memcpy16 +0x5b64 021143 fetch 1 ,mem_le_pairing_mode +0x5b65 021144 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +0x5b66 021145 call function_g2 +0x5b67 021148 call le_send_smp_pairing_random +0x5b68 021149 fetch 1 ,mem_le_pairing_mode +0x5b69 021150 rtnne le_pairing_mode_secure_connect_numeric +0x5b6a 021151 jam bt_evt_le_gkey_generate ,mem_fifo_temp +0x5b6b 021152 branch ui_ipc_send_event +: 021154 le_parse_smp_pairing_random_sc_passkey: +0x5b6c 021155 call function_f4_ca +0x5b6d 021156 arg mem_aes_cmac_temp ,contw +0x5b6e 021157 call load_inverse_result +0x5b6f 021158 arg mem_aes_cmac_temp ,rega +0x5b70 021159 arg mem_le_rconfirm ,regb +0x5b71 021160 arg 16 ,loopcnt +0x5b72 021161 call string_compare +0x5b73 021162 nbranch le_send_pairing_confirm_value_failed ,zero +0x5b74 021163 branch le_send_smp_pairing_random +: 021165 le_parse_smp_pairing_random_success: +0x5b75 021166 call generate_stk +0x5b76 021167 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5b77 021168 call ui_ipc_send_event +0x5b78 021169 jam 1 ,mem_ltk_exists +0x5b79 021170 jam flag_le_pairing_after_auth ,mem_le_pairing_state +: 021172 le_send_smp_pairing_random: +0x5b7a 021173 force 17 ,rega +0x5b7b 021174 call le_fifo_malloc_tx_l2cap_smp +0x5b7c 021175 setarg smp_pairing_random +0x5b7d 021176 istore 1 ,contw +0x5b7e 021177 arg mem_le_srand ,contr +0x5b7f 021178 branch memcpy16 +: 021180 le_parse_smp_encryption_information: +0x5b80 021181 arg mem_le_peer_ltk ,contw +0x5b81 021182 branch memcpy16 +: 021184 le_send_smp_encryption_information: +0x5b82 021185 force 17 ,rega +0x5b83 021186 call le_fifo_malloc_tx_l2cap_smp +0x5b84 021187 setarg smp_encryption_information +0x5b85 021188 istore 1 ,contw +0x5b86 021189 fetch 1 ,mem_le_configuration +0x5b87 021190 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +0x5b88 021191 arg mem_le_ltk ,contr +0x5b89 021192 branch memcpy16 +: 021194 le_send_fixed_ltk: +0x5b8a 021195 arg mem_le_fixed_ltk ,contr +0x5b8b 021196 branch memcpy16 +: 021199 le_send_smp_master_identification: +0x5b8c 021200 arg mem_le_ediv ,contw +0x5b8d 021201 force 10 ,loopcnt +0x5b8e 021202 call generate_random_loop +0x5b8f 021203 force 11 ,rega +0x5b90 021204 call le_fifo_malloc_tx_l2cap_smp +0x5b91 021205 setarg smp_master_identification +0x5b92 021206 istore 1 ,contw +0x5b93 021207 fetch 2 ,mem_le_ediv +0x5b94 021208 istore 2 ,contw +0x5b95 021209 fetch 8 ,mem_le_rand +0x5b96 021210 istore 8 ,contw +0x5b97 021211 rtn +: 021213 le_send_smp_identity_information: +0x5b98 021214 force 17 ,rega +0x5b99 021215 call le_fifo_malloc_tx_l2cap_smp +0x5b9a 021216 setarg smp_identity_information +0x5b9b 021217 istore 1 ,contw +0x5b9c 021218 setarg 0 +0x5b9d 021219 istore 8 ,contw +0x5b9e 021220 istore 8 ,contw +0x5b9f 021221 rtn +: 021224 le_send_smp_identity_address_information: +0x5ba0 021225 force 8 ,rega +0x5ba1 021226 call le_fifo_malloc_tx_l2cap_smp +0x5ba2 021227 setarg smp_identity_address_information +0x5ba3 021228 istore 1 ,contw +0x5ba4 021229 fetch 1 ,mem_le_conn_own_addr_type +0x5ba5 021230 istore 1 ,contw +0x5ba6 021231 fetch 6 ,mem_le_lap +0x5ba7 021232 istore 6 ,contw +0x5ba8 021233 rtn +: 021236 le_send_pairing_fail_unspecified_reason: +0x5ba9 021237 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +0x5baa 021238 branch le_send_pairing_failed +: 021240 le_check_init_key_distribution: +0x5bab 021241 fetch 1 ,mem_le_pres_init_key_distribution +0x5bac 021242 fetcht 1 ,mem_le_pres_init_key_distribution +0x5bad 021243 iand temp ,pdata +0x5bae 021244 rtn +: 021246 le_parse_smp_identity_information: +0x5baf 021247 arg mem_le_irk ,contw +0x5bb0 021248 call memcpy16 +0x5bb1 021249 call le_check_init_key_distribution +0x5bb2 021250 isolate0 le_initator_irk_bit ,pdata +0x5bb3 021251 branch le_send_pairing_fail_unspecified_reason ,true +0x5bb4 021252 fetch 1 ,mem_device_option +0x5bb5 021253 rtnne dvc_op_module +0x5bb6 021254 call le_check_master_addr_type +0x5bb7 021255 nrtn user +0x5bb8 021256 branch app_ble_store_reconn_info +: 021259 le_check_master_addr_type: +0x5bb9 021260 call disable_user +0x5bba 021261 fetch 1 ,mem_le_conn_peer_addr_type +0x5bbb 021262 rtneq master_public_addr +0x5bbc 021263 fetch 1 ,mem_le_plap + 5 +0x5bbd 021264 compare 0xc0 ,pdata ,0xc0 +0x5bbe 021265 rtn true +0x5bbf 021266 branch enable_user +: 021268 le_parse_smp_identity_address_information: +0x5bc0 021269 call le_check_init_key_distribution +0x5bc1 021270 isolate0 le_initator_irk_bit ,pdata +0x5bc2 021271 branch le_send_pairing_fail_unspecified_reason ,true +0x5bc3 021272 rtn +: 021274 le_parse_smp_master_identification: +: 021275 le_parse_smp_signing_information: +: 021276 le_parse_smp_security_request: +0x5bc4 021277 rtn +: 021279 le_parse_smp_public_key: +0x5bc5 021280 arg mem_le_pubkey_remote_x_256 ,contw +0x5bc6 021281 call memcpy64 +0x5bc7 021282 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bc8 021283 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +0x5bc9 021284 rtn +: 021286 le_parse_smp_dhkey_check: +0x5bca 021287 arg mem_sp_confirm_remote ,contw +0x5bcb 021288 call memcpy16 +0x5bcc 021289 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +0x5bcd 021290 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bce 021291 rtn +: 021293 le_send_smp_pairing_public_key: +0x5bcf 021294 force 65 ,rega +0x5bd0 021295 call le_fifo_malloc_tx_l2cap_smp +0x5bd1 021296 setarg smp_pairing_public_key +0x5bd2 021297 istore 1 ,contw +0x5bd3 021298 arg mem_le_pubkey_local_x_256 ,contr +0x5bd4 021299 branch memcpy64 +: 021301 le_send_smp_pairing_dhkey_check: +0x5bd5 021302 call function_f6_eb +0x5bd6 021303 force 17 ,rega +0x5bd7 021304 call le_fifo_malloc_tx_l2cap_smp +0x5bd8 021305 setarg smp_pairing_dhkey_check +0x5bd9 021306 istore 1 ,contw +0x5bda 021307 branch load_inverse_result +: 021310 le_check_paring_time: +0x5bdb 021311 fetch 1 ,mem_le_pairing_state +0x5bdc 021312 rtneq flag_le_pairing_end +0x5bdd 021313 arg flag_le_pairing_rcv_pairing_req ,temp +0x5bde 021314 isub temp ,null +0x5bdf 021315 nrtn positive +0x5be0 021316 arg smp_pairing_timer ,queue +0x5be1 021317 call timer_check +0x5be2 021318 nrtn blank +0x5be3 021319 branch le_send_pairing_fail_unspecified_reason +: 021321 le_pairing_sm: +0x5be4 021322 bpatchx patch2f_0 ,mem_patch2f +0x5be5 021323 fetch 1 ,mem_le_pairing_state +0x5be6 021324 beq flag_le_pairing_null ,le_pairing_sm_null +0x5be7 021325 beq flag_le_pairing_start ,le_pairing_sm_start +0x5be8 021326 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +0x5be9 021327 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +0x5bea 021328 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +0x5beb 021329 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +0x5bec 021330 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +0x5bed 021331 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +0x5bee 021332 rtn +: 021334 le_pairing_sm_null: +: 021335 le_pairing_sm_send_sec_req: +0x5bef 021336 fetch 1 ,mem_le_enc_state +0x5bf0 021337 rtnne flag_le_send_start_enc_rsp +0x5bf1 021338 jam flag_le_enc_end ,mem_le_enc_state +0x5bf2 021339 jam flag_le_pairing_end ,mem_le_pairing_state +0x5bf3 021340 jam bt_evt_le_reconnect_complete ,mem_fifo_temp +0x5bf4 021341 branch ui_ipc_send_event +: 021344 le_pairing_sm_start: +0x5bf5 021345 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +0x5bf6 021346 branch le_send_smp_security_request +: 021348 le_pairing_sm_rcv_pairing_req: +0x5bf7 021349 jam flag_le_pairing_auth ,mem_le_pairing_state +0x5bf8 021350 setarg timer_smp_pairing_timeout +0x5bf9 021351 arg smp_pairing_timer ,queue +0x5bfa 021352 branch timer_init +: 021354 le_pairing_sm_after_auth: +0x5bfb 021355 fetch 1 ,mem_le_enc_state +0x5bfc 021356 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +0x5bfd 021357 rtn +: 021359 le_pairing_sm_after_auth_start_enc: +0x5bfe 021360 jam flag_le_paring_send_enc_information ,mem_le_pairing_state +0x5bff 021361 jam bt_evt_le_enc_info ,mem_fifo_temp +0x5c00 021362 call ui_ipc_send_event +0x5c01 021363 call le_send_smp_encryption_information +0x5c02 021364 fetch 1 ,mem_device_option +0x5c03 021365 rtnne dvc_op_module +0x5c04 021366 call le_check_master_addr_type +0x5c05 021367 rtn user +0x5c06 021368 branch app_ble_store_reconn_info +: 021371 le_pairng_sm_send_enc_information: +0x5c07 021372 jam flag_le_paring_send_master_identification ,mem_le_pairing_state +0x5c08 021373 branch le_send_smp_master_identification +: 021375 le_pairng_sm_send_master_indentification: +0x5c09 021376 fetch 1 ,mem_le_preq_resp_key_distribution +0x5c0a 021377 fetcht 1 ,mem_le_pres_resp_key_distribution +0x5c0b 021378 iand temp ,pdata +0x5c0c 021379 isolate0 le_initator_irk_bit ,pdata +0x5c0d 021380 branch le_parse_start_enc_rsp_after_auth_end ,true +0x5c0e 021381 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +0x5c0f 021382 branch le_send_smp_identity_information +: 021384 le_pairng_sm_send_indentity_information: +0x5c10 021385 call le_send_smp_identity_address_information +0x5c11 021386 branch le_parse_start_enc_rsp_after_auth_end +: 021389 le_parse_start_enc_rsp_after_auth_end: +0x5c12 021390 force smp_pairing_timer ,queue +0x5c13 021391 call timer_stop +0x5c14 021392 jam flag_le_enc_end ,mem_le_enc_state +0x5c15 021393 jam flag_le_pairing_end ,mem_le_pairing_state +0x5c16 021394 jam bt_evt_le_pairing_complete ,mem_fifo_temp +0x5c17 021395 branch ui_ipc_send_event +: 021399 le_secure_connect_sm: +0x5c18 021400 bpatchx patch2f_1 ,mem_patch2f +0x5c19 021401 fetch 1 ,mem_le_pairing_mode +0x5c1a 021402 rtnbit0 le_pairing_mode_secure_connect_bit +0x5c1b 021403 fetch 1 ,mem_le_secure_connect_flag +0x5c1c 021404 rtnne le_sp_flag_commit_256 +0x5c1d 021405 jam sp_flag_standby ,mem_le_secure_connect_flag +0x5c1e 021406 fetch 1 ,mem_le_secure_connect_state +0x5c1f 021407 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +0x5c20 021408 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +0x5c21 021409 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +0x5c22 021410 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +0x5c23 021411 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +0x5c24 021412 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +0x5c25 021413 rtn +: 021416 le_sc_sm_passkey_wait_confirm: +0x5c26 021417 fetch 1 ,mem_authentication_passkey_times +0x5c27 021418 copy pdata ,queue +0x5c28 021419 increase 1 ,pdata +0x5c29 021420 store 1 ,mem_authentication_passkey_times +0x5c2a 021421 fetch 4 ,mem_le_tk +0x5c2b 021422 qisolate1 pdata +0x5c2c 021423 setarg 0x80 +0x5c2d 021424 setflag true ,0 ,pdata +0x5c2e 021425 store 1 ,mem_passkey_1bit +0x5c2f 021426 branch le_sc_sm_ready_send_pairing_confirm +: 021428 le_sc_sm_wait_confirm_gkey: +0x5c30 021429 fetch 1 ,mem_le_sc_confirm_gkey_flag +0x5c31 021430 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +0x5c32 021431 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +0x5c33 021432 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c34 021433 rtn +: 021435 le_sc_confirm_gkey_ok: +0x5c35 021436 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5c36 021437 call ui_ipc_send_event +0x5c37 021438 jam flag_le_pairing_after_auth ,mem_le_pairing_state +0x5c38 021439 branch le_send_smp_pairing_dhkey_check +: 021441 le_sc_sm_receive_dhkey: +0x5c39 021442 fetch 1 ,mem_sp_dhkey_invalid +0x5c3a 021443 beq sp_key_valid_256 ,le_dhkey_ready +0x5c3b 021444 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c3c 021445 rtn +: 021447 le_dhkey_ready: +0x5c3d 021448 call function_f5 +0x5c3e 021452 fetch 1 ,mem_le_pairing_mode +0x5c3f 021453 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +0x5c40 021454 call le_set_tk_0 +: 021455 le_dhkey_ready_common: +0x5c41 021456 call function_f6_ea +0x5c42 021457 arg mem_aes_cmac_temp ,rega +0x5c43 021458 arg mem_sp_confirm_remote ,regb +0x5c44 021459 arg 16 ,loopcnt +0x5c45 021460 call string_compare +0x5c46 021461 branch le_dhkey_check_ok ,zero +: 021462 le_dhkey_check_fail: +0x5c47 021463 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +0x5c48 021464 branch le_send_pairing_failed +: 021467 le_dhkey_check_ok: +0x5c49 021468 call sp_calc_check_publickey_256 +0x5c4a 021469 nbranch le_dhkey_check_fail ,zero +0x5c4b 021470 jam 1 ,mem_ltk_exists +0x5c4c 021471 fetch 1 ,mem_le_pairing_mode +0x5c4d 021472 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +0x5c4e 021473 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +0x5c4f 021474 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c50 021475 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +0x5c51 021476 rtn +: 021478 le_sc_sm_send_public_key: +0x5c52 021479 fetch 1 ,mem_le_pairing_mode +0x5c53 021480 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +0x5c54 021481 jam 0 ,mem_passkey_1bit +: 021482 le_sc_sm_ready_send_pairing_confirm: +0x5c55 021483 branch le_send_smp_pairing_confirm +: 021485 le_sc_sm_send_public_key_passkey: +0x5c56 021489 jam 0 ,mem_authentication_passkey_times +0x5c57 021490 branch le_parse_smp_pairing_req_passkey +: 021493 le_sc_sm_receive_public_key: +0x5c58 021494 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c59 021495 fetch 1 ,mem_le_sc_local_key_invalid +0x5c5a 021496 beq sp_key_valid_256 ,le_public_key_ready +0x5c5b 021498 rtn +: 021500 le_public_key_ready: +0x5c5c 021501 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +0x5c5d 021502 jam sp_key_invalid ,mem_sp_dhkey_invalid +0x5c5e 021503 branch sp_dhkey_calc_256 +: 021505 le_sc_sm_wait_send_public_key: +0x5c5f 021506 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c60 021507 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +0x5c61 021508 branch le_send_smp_pairing_public_key +: 021512 le_fifo_malloc_tx_l2cap_smp: +0x5c62 021513 force le_l2cap_cid_smp ,regb +0x5c63 021514 branch le_fifo_malloc_tx_l2cap +: 021518 le_parse_ll: +0x5c64 021519 fetch 1 ,mem_le_rxbuf + 2 +0x5c65 021520 beq ll_connection_update_req ,le_parse_connection_update_req +0x5c66 021521 beq ll_channel_map_req ,le_parse_channel_map_req +0x5c67 021522 beq ll_terminate_ind ,le_parse_terminate_ind +0x5c68 021523 beq ll_enc_req ,le_parse_enc_req +0x5c69 021524 beq ll_enc_rsp ,le_parse_enc_rsp +0x5c6a 021525 beq ll_start_enc_req ,le_parse_start_enc_req +0x5c6b 021526 beq ll_start_enc_rsp ,le_parse_start_enc_rsp +0x5c6c 021527 beq ll_unknown_rsp ,le_parse_unknown_rsp +0x5c6d 021528 beq ll_feature_req ,le_parse_feature_req +0x5c6e 021529 beq ll_feature_rsp ,le_parse_feature_rsp +0x5c6f 021530 beq ll_pause_enc_req ,le_parse_pause_enc_req +0x5c70 021531 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +0x5c71 021532 beq ll_version_ind ,le_parse_version_ind +0x5c72 021533 beq ll_reject_ind ,le_parse_reject_ind +0x5c73 021534 beq ll_ping_req ,le_parse_ping_req +0x5c74 021535 beq ll_ping_rsp ,le_parse_ping_rsp +0x5c75 021536 arg 2 ,rega +0x5c76 021537 arg ll_unknown_rsp ,regb +0x5c77 021538 call le_fifo_malloc_tx_ll +0x5c78 021539 fetch 1 ,mem_le_rxbuf + 2 +0x5c79 021540 istore 1 ,contw +0x5c7a 021541 rtn +: 021544 le_parse_connection_update_req: +0x5c7b 021545 ifetch 9 ,contr +0x5c7c 021546 store 9 ,mem_le_new_param +0x5c7d 021547 ifetch 2 ,contr +0x5c7e 021548 store 2 ,mem_le_instant +0x5c7f 021549 fetch 1 ,mem_le_state +0x5c80 021550 set1 lestate_update_param ,pdata +0x5c81 021551 store 1 ,mem_le_state +0x5c82 021552 rtn +: 021554 le_parse_channel_map_req: +0x5c83 021555 ifetch 5 ,contr +0x5c84 021556 store 5 ,mem_le_new_map +0x5c85 021557 ifetch 2 ,contr +0x5c86 021558 store 2 ,mem_le_instant +0x5c87 021559 fetcht 2 ,mem_le_event_count +0x5c88 021560 isub temp ,null +0x5c89 021561 nbranch le_parse_terminate_ind ,positive +0x5c8a 021562 fetch 1 ,mem_le_state +0x5c8b 021563 set1 lestate_update_map ,pdata +0x5c8c 021564 store 1 ,mem_le_state +0x5c8d 021565 rtn +: 021568 le_parse_terminate_ind: +0x5c8e 021569 setarg 20 +0x5c8f 021570 store 2 ,mem_le_superto +0x5c90 021571 store 2 ,mem_le_init_superto +0x5c91 021572 rtn +: 021574 le_send_terminate_ind_user_terminated: +0x5c92 021575 arg error_remote_user_terminated_connection ,regc +: 021578 le_send_terminate_ind: +0x5c93 021579 arg 2 ,rega +0x5c94 021580 arg ll_terminate_ind ,regb +0x5c95 021581 call le_fifo_malloc_tx_ll +0x5c96 021582 copy regc ,pdata +0x5c97 021583 istore 1 ,contw +0x5c98 021584 rtn +: 021586 le_parse_feature_req: +: 021588 le_send_feature_rsp: +0x5c99 021589 arg 9 ,rega +0x5c9a 021590 arg ll_feature_rsp ,regb +0x5c9b 021591 call le_fifo_malloc_tx_ll +0x5c9c 021592 setarg param_le_features +0x5c9d 021593 istore 8 ,contw +0x5c9e 021594 rtn +: 021597 le_parse_version_ind: +0x5c9f 021598 rtn master +: 021599 le_send_version_ind: +0x5ca0 021600 arg 6 ,rega +0x5ca1 021601 arg ll_version_ind ,regb +0x5ca2 021602 call le_fifo_malloc_tx_ll +0x5ca3 021603 fetch 5 ,mem_lmp_version +0x5ca4 021604 istore 5 ,contw +0x5ca5 021605 rtn +: 021608 le_parse_ping_req: +0x5ca6 021609 arg ll_ping_rsp ,regb +0x5ca7 021610 branch le_send_ll_one_lenth +: 021613 le_send_ll_one_lenth: +0x5ca8 021614 arg 1 ,rega +0x5ca9 021615 branch le_fifo_malloc_tx_ll +: 021618 le_parse_enc_req: +0x5caa 021619 ifetch 8 ,contr +0x5cab 021620 store 8 ,mem_le_rand +0x5cac 021621 ifetch 2 ,contr +0x5cad 021622 store 2 ,mem_le_ediv +0x5cae 021623 ifetch 8 ,contr +0x5caf 021624 store 8 ,mem_le_skdm +0x5cb0 021625 ifetch 4 ,contr +0x5cb1 021626 store 4 ,mem_le_ivm +0x5cb2 021627 call le_send_enc_rsp +0x5cb3 021628 bpatchx patch2f_2 ,mem_patch2f +0x5cb4 021629 fetch 1 ,mem_le_pairing_state +0x5cb5 021630 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +0x5cb6 021631 fetch 1 ,mem_le_configuration +0x5cb7 021632 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +0x5cb8 021633 fetch 1 ,mem_nv_data_number +0x5cb9 021634 ncall load_device_list_mode_4 ,blank +0x5cba 021635 fetch 1 ,mem_ltk_exists +0x5cbb 021636 beq 0 ,le_ltk_lost +: 021637 le_parse_enc_req_after_auth: +0x5cbc 021638 jam flag_le_rcv_enc_start ,mem_le_enc_state +0x5cbd 021639 call le_send_start_enc_req +0x5cbe 021640 branch generate_sk +: 021642 le_parse_enc_req_fixed_ltk: +0x5cbf 021643 jam 1 ,mem_ltk_exists +0x5cc0 021644 arg mem_le_fixed_ltk ,contr +0x5cc1 021645 arg mem_le_ltk ,contw +0x5cc2 021646 call memcpy16 +0x5cc3 021647 branch le_parse_enc_req_after_auth +: 021650 le_ltk_lost: +0x5cc4 021651 bpatchx patch2f_3 ,mem_patch2f +0x5cc5 021652 jam flag_le_enc_null ,mem_le_enc_state +0x5cc6 021653 jam flag_le_enc_null ,mem_le_pairing_state +0x5cc7 021654 jam bt_evt_le_ltk_lost ,mem_fifo_temp +0x5cc8 021655 branch ui_ipc_send_event +: 021657 le_send_reject_ind: +0x5cc9 021658 arg 2 ,rega +0x5cca 021659 arg ll_reject_ind ,regb +0x5ccb 021660 call le_fifo_malloc_tx_ll +0x5ccc 021661 setarg le_err_pin_or_key_missing +0x5ccd 021662 istore 1 ,contw +0x5cce 021663 rtn +: 021665 le_send_enc_rsp: +0x5ccf 021666 arg mem_le_skds ,contw +0x5cd0 021667 force 8 ,loopcnt +0x5cd1 021668 call generate_random_loop +0x5cd2 021669 arg mem_le_ivs ,contw +0x5cd3 021670 force 4 ,loopcnt +0x5cd4 021671 call generate_random_loop +0x5cd5 021672 arg 13 ,rega +0x5cd6 021673 arg ll_enc_rsp ,regb +0x5cd7 021674 call le_fifo_malloc_tx_ll +0x5cd8 021675 fetch 8 ,mem_le_skds +0x5cd9 021676 istore 8 ,contw +0x5cda 021677 fetch 4 ,mem_le_ivs +0x5cdb 021678 istore 4 ,contw +0x5cdc 021679 rtn +: 021681 le_send_start_enc_req: +0x5cdd 021682 arg ll_start_enc_req ,regb +0x5cde 021683 branch le_send_ll_one_lenth +: 021685 le_send_start_enc_rsp: +0x5cdf 021686 arg ll_start_enc_rsp ,regb +0x5ce0 021687 branch le_send_ll_one_lenth +: 021690 le_parse_enc_rsp: +0x5ce1 021691 ifetch 8 ,contr +0x5ce2 021692 store 8 ,mem_le_skds +0x5ce3 021693 ifetch 4 ,contr +0x5ce4 021694 store 4 ,mem_le_ivs +0x5ce5 021695 branch generate_sk +: 021697 le_parse_start_enc_req: +0x5ce6 021698 fetch 1 ,mem_le_state +0x5ce7 021699 set1 lestate_encryption ,pdata +0x5ce8 021700 store 1 ,mem_le_state +0x5ce9 021701 rtn +: 021703 le_parse_start_enc_rsp: +0x5cea 021704 rtn master +0x5ceb 021705 jam bt_evt_le_start_enc ,mem_fifo_temp +0x5cec 021706 call ui_ipc_send_event +0x5ced 021707 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +0x5cee 021708 branch le_send_start_enc_rsp +: 021710 le_parse_pause_enc_req: +0x5cef 021711 jam flag_le_enc_pause ,mem_le_enc_state +0x5cf0 021712 call le_send_pause_enc_rsp +0x5cf1 021713 jam bt_evt_le_pause_enc ,mem_fifo_temp +0x5cf2 021714 branch ui_ipc_send_event +: 021716 le_send_pause_enc_rsp: +0x5cf3 021717 arg ll_pause_enc_rsp ,regb +0x5cf4 021718 branch le_send_ll_one_lenth +: 021721 le_parse_feature_rsp: +: 021722 le_parse_unknown_rsp: +: 021723 le_parse_pause_enc_rsp: +: 021724 le_parse_reject_ind: +: 021725 le_parse_ping_rsp: +0x5cf5 021726 rtn +: 021733 init_lmp: +0x5cf6 021734 rtn wake +: 021735 init_lmp_work: +0x5cf7 021736 bpatchx patch2f_4 ,mem_patch2f +0x5cf8 021737 setarg 0 +0x5cf9 021738 store 1 ,mem_lmp_to_send +0x5cfa 021739 store 1 ,mem_conn_sm +0x5cfb 021740 store 1 ,mem_lmo_opcode1 +0x5cfc 021741 store 1 ,mem_lmo_opcode2 +0x5cfd 021742 store 1 ,mem_esco_addr +0x5cfe 021743 store 1 ,mem_auth_enable +0x5cff 021744 store 1 ,mem_connection_options +0x5d00 021745 store 1 ,mem_pairing_auth +0x5d01 021746 jam switch_flag_init ,mem_switch_flag +0x5d02 021747 jam 0 ,mem_switch_fail_master_count +0x5d03 021748 jam null_encryp ,mem_wait_encryption +: 021749 init_lmp_reinit: +0x5d04 021750 jam 0 ,mem_pairing_auth +0x5d05 021751 jam 0 ,mem_sp_localsm +0x5d06 021752 jam 0 ,mem_lmp_conn_state +: 021754 parse_rx_done: +0x5d07 021755 rtn +: 021757 parse_lmp: +0x5d08 021758 bpatchx patch2f_5 ,mem_patch2f +0x5d09 021759 call setlocalsm_master ,master +0x5d0a 021760 ncall setlocalsm_slave ,master +0x5d0b 021761 call lmo_fifo_check +0x5d0c 021762 nrtn blank +0x5d0d 021763 fetch 1 ,mem_state_map +0x5d0e 021764 rtnbit0 smap_rxlmp +0x5d0f 021765 set0 smap_rxlmp ,pdata +0x5d10 021766 set0 mark_rxbuf_inuse ,mark +0x5d11 021767 store 1 ,mem_state_map +0x5d12 021768 fetch 1 ,mem_rxbuf +0x5d13 021769 fetcht 1 ,mem_state_map +0x5d14 021770 isolate1 smap_lmptidinit ,pdata +0x5d15 021771 setflag true ,smap_lmptid ,temp +0x5d16 021772 storet 1 ,mem_state_map +0x5d17 021773 and_into 0x2 ,temp +0x5d18 021774 storet 1 ,mem_lmo_tid2 +0x5d19 021775 fetcht 1 ,mem_state_map +0x5d1a 021776 rshift pdata ,pdata +0x5d1b 021777 store 1 ,mem_lmi_opcode2 +0x5d1c 021778 bpatchx patch2f_6 ,mem_patch2f +0x5d1d 021779 fetch 1 ,mem_lmi_opcode2 +0x5d1e 021780 beq lmp_escape ,parse_lmp_escape +0x5d1f 021781 beq lmp_accepted ,parse_lmp_accepted +0x5d20 021782 beq lmp_not_accepted ,parse_lmp_not_accepted +0x5d21 021783 beq lmp_set_afh ,parse_lmp_set_afh +0x5d22 021784 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +0x5d23 021785 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +0x5d24 021786 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +0x5d25 021787 beq lmp_auto_rate ,parse_lmp_auto_rate +0x5d26 021788 beq lmp_test_control ,parse_lmp_test_control +0x5d27 021789 beq lmp_test_activate ,parse_lmp_test_activate +0x5d28 021790 beq lmp_setup_complete ,parse_lmp_setup_complete +0x5d29 021791 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +0x5d2a 021792 beq lmp_features_req ,parse_lmp_features_req +0x5d2b 021793 beq lmp_host_connection_req ,parse_lmp_conn_req +0x5d2c 021794 beq lmp_version_req ,parse_lmp_version_req +0x5d2d 021795 beq lmp_version_res ,parse_lmp_version_res +0x5d2e 021796 beq lmp_detach ,parse_lmp_detach +0x5d2f 021797 beq lmp_max_slot ,parse_lmp_max_slot +0x5d30 021798 beq lmp_max_slot_req ,parse_lmp_max_slot_req +0x5d31 021799 beq lmp_name_req ,parse_lmp_name_req +0x5d32 021800 beq lmp_name_res ,parse_lmp_name_res +0x5d33 021801 beq lmp_features_res ,parse_lmp_features_res +0x5d34 021802 beq lmp_comb_key ,parse_lmp_comb_key +0x5d35 021803 beq lmp_au_rand ,parse_lmp_au_rand +0x5d36 021804 beq lmp_in_rand ,parse_lmp_in_rand +0x5d37 021805 beq lmp_sres ,parse_lmp_sres +0x5d38 021806 beq lmp_incr_power_req ,parse_lmp_incr_power +0x5d39 021807 beq lmp_decr_power_req ,parse_lmp_decr_power +0x5d3a 021808 beq lmp_max_power ,parse_lmp_max_power +0x5d3b 021809 beq lmp_min_power ,parse_lmp_min_power +0x5d3c 021810 beq lmp_page_mode_req ,parse_lmp_page_mode_req +0x5d3d 021811 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +0x5d3e 021812 beq lmp_preferred_rate ,parse_lmp_preferred_rate +0x5d3f 021813 beq lmp_slot_offset ,parse_lmp_slot_offset +0x5d40 021814 beq lmp_sniff_req ,parse_lmp_sniff_req +0x5d41 021815 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +0x5d42 021816 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +0x5d43 021817 beq lmp_switch_req ,parse_lmp_switch_req +0x5d44 021818 beq lmp_temp_rand ,parse_lmp_temp_rand +0x5d45 021819 beq lmp_temp_key ,parse_lmp_temp_key +0x5d46 021820 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +0x5d47 021821 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +0x5d48 021822 beq lmp_unit_key ,parse_lmp_unit_key +0x5d49 021823 beq lmp_unsniff_req ,parse_lmp_unsniff_req +0x5d4a 021824 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +0x5d4b 021825 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +0x5d4c 021826 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +0x5d4d 021827 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +0x5d4e 021828 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +0x5d4f 021829 beq lmp_dhkey_check ,parse_dhkey_check +0x5d50 021830 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +0x5d51 021831 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req +: 021834 reject_unknown_packet: +0x5d52 021835 jam unknown_lmp_pdu ,mem_lmo_reason2 +: 021836 reject_lmp_packet: +0x5d53 021837 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5d54 021838 rtn +: 021840 parse_lmp_clkoffset_req: +0x5d55 021841 jam lmp_clkoffset_res ,mem_lmo_opcode2 +0x5d56 021842 rtn +: 021844 parse_enc_key_size_mask_req: +0x5d57 021845 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +0x5d58 021846 rtn +: 021848 parse_lmp_set_afh: +0x5d59 021849 fetch 4 ,mem_rxbuf + 1 +0x5d5a 021850 lshift pdata ,pdata +0x5d5b 021851 store 4 ,mem_afh_instant +0x5d5c 021852 fetch 1 ,mem_rxbuf + 5 +0x5d5d 021853 store 1 ,mem_afh_new_mod +0x5d5e 021854 fetch 5 ,mem_rxbuf + 6 +0x5d5f 021855 store 5 ,mem_afh_map_new +0x5d60 021856 fetch 5 ,mem_rxbuf + 11 +0x5d61 021857 istore 5 ,contw +0x5d62 021858 fetch 1 ,mem_mode +0x5d63 021859 set1 afh_change ,pdata +0x5d64 021860 store 1 ,mem_mode +0x5d65 021861 rtn +: 021862 parse_lmp_escape: +0x5d66 021863 bpatchx patch2f_7 ,mem_patch2f +0x5d67 021864 fetch 1 ,mem_rxbuf + 1 +0x5d68 021865 set1 7 ,pdata +0x5d69 021866 store 1 ,mem_lmi_opcode2 +0x5d6a 021867 beq lmp_ext_accepted ,parse_lmpext_accepted +0x5d6b 021868 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +0x5d6c 021869 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +0x5d6d 021870 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +0x5d6e 021871 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +0x5d6f 021872 beq lmp_ext_features_req ,parse_lmpext_features_req +0x5d70 021873 beq lmp_ext_features_res ,parse_lmpext_features_res +0x5d71 021874 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +0x5d72 021875 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +0x5d73 021876 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +0x5d74 021877 beq lmp_io_cap_req ,parse_lmpext_iocap_req +0x5d75 021878 beq lmp_io_cap_res ,parse_lmpext_iocap_res +0x5d76 021879 rtneq lmp_ext_features_res +: 021882 reject_unknown_ext_packet: +0x5d77 021883 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d78 021884 jam unknown_lmp_pdu ,mem_lmo_reason2 +0x5d79 021886 rtn +: 021887 parse_lmpext_chn_classification_req: +0x5d7a 021888 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d7b 021889 jam not_support_chn_classification ,mem_lmo_reason2 +0x5d7c 021890 rtn +: 021892 parse_lmpext_iocap_req: +0x5d7d 021893 call iocap_lmpext_load +0x5d7e 021894 jam lmp_io_cap_res ,mem_lmo_opcode2 +0x5d7f 021895 rtn +: 021897 parse_lmpext_iocap_res: +0x5d80 021898 call iocap_lmpext_load +0x5d81 021899 branch iocap_lmpext_common +: 021901 iocap_lmpext_load: +0x5d82 021902 arg mem_sp_iocap_remote ,contw +0x5d83 021903 fetch 3 ,mem_rxbuf + 2 +0x5d84 021904 istore 3 ,contw +0x5d85 021905 rtn +: 021907 iocap_lmpext_common: +0x5d86 021908 branch master_set_mem_master_sp_flag ,true +0x5d87 021909 rtn +: 021910 parse_lmpext_accepted: +0x5d88 021911 fetch 1 ,mem_rxbuf + 3 +0x5d89 021912 set1 7 ,pdata +0x5d8a 021913 store 1 ,mem_lmi_accepted_opcode +0x5d8b 021914 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +0x5d8c 021915 rtn +: 021918 parse_lmpext_not_accepted: +0x5d8d 021919 fetch 1 ,mem_rxbuf + 3 +0x5d8e 021920 set1 7 ,pdata +0x5d8f 021921 store 1 ,mem_lmi_accepted_opcode +0x5d90 021922 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +0x5d91 021923 rtn +: 021925 parse_lmpext_accepted_ptt: +0x5d92 021926 fetch 1 ,mem_ptt +0x5d93 021927 fetcht 1 ,mem_state_map +0x5d94 021928 nsetflag blank ,smap_edr ,temp +0x5d95 021929 storet 1 ,mem_state_map +: 021930 parse_lmpext_not_accepted_ptt: +0x5d96 021931 fetch 1 ,mem_state +0x5d97 021932 rtnbit0 state_init_seq +0x5d98 021933 set0 state_init_seq ,pdata +0x5d99 021934 store 1 ,mem_state +0x5d9a 021935 fetch 1 ,mem_auth_enable +0x5d9b 021936 nrtn blank +0x5d9c 021937 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5d9d 021938 rtn +: 021940 parse_lmpext_pause_encrypt: +0x5d9e 021941 nbranch parse_lmpext_pause_encrypt_slave ,master +0x5d9f 021942 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5da0 021943 branch tid_reply +: 021945 parse_lmpext_pause_encrypt_slave: +0x5da1 021946 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +0x5da2 021947 rtn +: 021949 parse_lmpext_resume_encrypt: +0x5da3 021952 call tid_reply +0x5da4 021953 branch lmp_start_encryption +: 021955 parse_lmpext_features_req: +0x5da5 021956 jam lmp_ext_features_res ,mem_lmo_opcode2 +0x5da6 021957 rtn +: 021959 parse_lmpext_features_res: +0x5da7 021960 fetcht 1 ,mem_rxbuf + 4 +0x5da8 021961 and temp ,0x1 ,temp +0x5da9 021962 storet 1 ,mem_remote_sppcap +0x5daa 021963 fetch 1 ,mem_hci_cmd +0x5dab 021964 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +0x5dac 021965 jam 0 ,mem_hci_cmd +: 021966 parse_lmpext_features_res_not_hci: +0x5dad 021967 fetch 1 ,mem_conn_sm +0x5dae 021968 rtnne conn_sm_wait_features_ext +0x5daf 021969 jam conn_sm_send_conn_req ,mem_conn_sm +0x5db0 021970 branch process_conn_sm +: 021972 parse_lmp_accepted: +0x5db1 021973 bpatchx patch30_0 ,mem_patch30 +0x5db2 021974 fetch 1 ,mem_rxbuf + 1 +0x5db3 021975 store 1 ,mem_lmi_accepted_opcode +0x5db4 021976 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +0x5db5 021977 beq lmp_in_rand ,parse_lmp_accepted_inrand +0x5db6 021978 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +0x5db7 021979 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +0x5db8 021980 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +0x5db9 021981 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +0x5dba 021982 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +0x5dbb 021983 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +0x5dbc 021984 beq lmp_switch_req ,parse_lmp_accepted_switch +0x5dbd 021986 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +0x5dbe 021987 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +0x5dbf 021988 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +0x5dc0 021989 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +0x5dc1 021990 rtn +: 021992 parse_lmp_not_accepted: +0x5dc2 021993 bpatchx patch30_1 ,mem_patch30 +0x5dc3 021994 fetch 1 ,mem_rxbuf + 1 +0x5dc4 021995 store 1 ,mem_lmi_accepted_opcode +0x5dc5 021996 beq lmp_name_req ,parse_lmp_not_accepted_name_req +0x5dc6 021997 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +0x5dc7 021998 beq lmp_au_rand ,parse_lmp_not_accepted_aurand +0x5dc8 021999 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +0x5dc9 022000 beq lmp_switch_req ,parse_lmp_not_accepted_switch +0x5dca 022002 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +0x5dcb 022003 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +0x5dcc 022004 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +0x5dcd 022005 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +0x5dce 022006 rtn +: 022008 parse_lmp_accepted_switch: +0x5dcf 022009 jam bt_evt_switch_accept ,mem_fifo_temp +0x5dd0 022010 call ui_ipc_send_event +0x5dd1 022011 branch role_switch_prepare0 +: 022012 parse_lmp_not_accepted_switch: +0x5dd2 022013 jam bt_evt_switch_not_accept ,mem_fifo_temp +0x5dd3 022014 call ui_ipc_send_event +0x5dd4 022015 jam switch_flag_not_accept ,mem_switch_flag +0x5dd5 022016 setarg timer_switch_waite +0x5dd6 022017 arg switch_wait_timer ,queue +0x5dd7 022018 branch timer_init +: 022021 parse_lmp_accepted_hostconn: +0x5dd8 022024 fetch 1 ,mem_lmp_conn_state +0x5dd9 022025 set1 received_conn_req ,pdata +0x5dda 022026 store 1 ,mem_lmp_conn_state +0x5ddb 022027 jam bt_evt_bb_connected ,mem_fifo_temp +0x5ddc 022028 call ui_ipc_send_event +0x5ddd 022029 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +: 022031 parse_lmp_accepted_hostconn_ctn: +0x5dde 022033 fetch 1 ,mem_conn_sm +0x5ddf 022034 bne conn_sm_wait_conn_accept ,parse_rx_done +0x5de0 022037 jam conn_sm_auth_pair ,mem_conn_sm +0x5de1 022038 rtn +: 022046 parse_lmp_not_accepted_hostconn: +0x5de2 022047 jam acl_connection_already_exists ,mem_disconn_reason_send +0x5de3 022048 jam lmp_detach ,mem_lmo_opcode2 +0x5de4 022050 jam conn_sm_standby ,mem_conn_sm +0x5de5 022052 branch parse_rx_done ,true +0x5de6 022053 rtn +: 022055 parse_lmp_accepted_inrand: +0x5de7 022056 fetch 1 ,mem_link_key_exists +0x5de8 022057 nrtn blank +0x5de9 022058 call clear_linkkey +0x5dea 022059 call lmp_generate_key +0x5deb 022060 rtn master +0x5dec 022061 set1 mark_slave_in_rand_accepted ,mark +0x5ded 022062 rtn +: 022064 parse_lmp_accepted_enc_mode: +0x5dee 022065 nrtn master +0x5def 022066 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x5df0 022067 fetch 1 ,mem_state_map +0x5df1 022068 rtnbit0 smap_encryption +0x5df2 022069 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5df3 022070 rtn +: 022072 parse_lmp_accepted_enc_keysize: +0x5df4 022073 branch lmp_start_encryption +: 022075 parse_lmp_accepted_start_enc: +0x5df5 022076 call send_create_conn_start_l2cap_timer_sm +0x5df6 022077 fetch 1 ,mem_state +0x5df7 022078 rtnbit1 state_conn_comp +0x5df8 022079 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5df9 022080 fetch 1 ,mem_conn_sm +0x5dfa 022081 rtnne conn_sm_encrypt_wait +0x5dfb 022082 jam conn_sm_encrypt_wait_clear ,mem_conn_sm +0x5dfc 022083 rtn +: 022085 parse_lmp_accepted_stop_enc: +0x5dfd 022093 rtn +: 022095 parse_lmp_not_accepted_aurand: +: 022096 parse_lmp_not_accepted_aurand_send_detach: +0x5dfe 022097 jam lmp_detach ,mem_lmo_opcode2 +0x5dff 022098 jam other_end_terminated ,mem_disconn_reason_send +0x5e00 022099 rtn +: 022101 parse_lmp_not_accepted_inrand: +0x5e01 022102 fetch 1 ,mem_rxbuf + 2 +0x5e02 022103 beq key_missing ,parse_lmp_inrand_key_missing +0x5e03 022104 rtnne pairing_not_allowed +0x5e04 022105 jam pairing_not_allowed ,mem_disconn_reason_send +0x5e05 022106 jam lmp_detach ,mem_lmo_opcode2 +0x5e06 022107 rtn +: 022108 parse_lmp_inrand_key_missing: +0x5e07 022109 jam key_missing ,mem_disconn_reason_send +0x5e08 022110 jam lmp_detach ,mem_lmo_opcode2 +0x5e09 022111 rtn +: 022113 parse_lmp_not_accepted_name_req: +0x5e0a 022114 rtn +: 022116 parse_lmp_not_accepted_simple_pairing_number: +0x5e0b 022117 jam sp_stat_null ,mem_sp_state +0x5e0c 022118 jam lmp_detach ,mem_lmo_opcode2 +0x5e0d 022119 branch parse_rx_done +: 022121 parse_lmp_not_accepted_dhkey_check: +0x5e0e 022122 jam sp_stat_null ,mem_sp_state +0x5e0f 022123 jam lmp_detach ,mem_lmo_opcode2 +0x5e10 022124 branch parse_rx_done +: 022125 parse_lmp_not_accepted_unsniff_req: +0x5e11 022126 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +0x5e12 022127 branch ui_ipc_send_event +: 022129 parse_lmp_accepted_unsniff_req: +0x5e13 022130 jam bt_evt_unsniff_accept ,mem_fifo_temp +0x5e14 022131 call ui_ipc_send_event +0x5e15 022132 branch sniff_exit +: 022134 parse_lmp_accepted_sniff_req: +0x5e16 022135 jam bt_evt_sniff_accept ,mem_fifo_temp +0x5e17 022136 call ui_ipc_send_event +0x5e18 022137 setarg 0 +0x5e19 022138 store 2 ,mem_dsniff +0x5e1a 022139 fetch 2 ,mem_sniff_param_interval +0x5e1b 022140 lshift pdata ,pdata +0x5e1c 022141 store 2 ,mem_tsniff +0x5e1d 022142 fetch 1 ,mem_sniff_param_attempt +0x5e1e 022143 store 1 ,mem_sniff_attempt +0x5e1f 022144 fetch 1 ,mem_sniff_param_timeout +0x5e20 022145 store 1 ,mem_sniff_timeout +0x5e21 022146 branch sniff_init +: 022148 parse_lmp_not_acdcept_sniff_req: +0x5e22 022149 jam bt_evt_sniff_not_accept ,mem_fifo_temp +0x5e23 022150 branch ui_ipc_send_event +: 022152 parse_lmp_crypt_key: +0x5e24 022153 fetcht 1 ,mem_rxbuf + 1 +0x5e25 022154 storet 1 ,mem_key_size +0x5e26 022155 branch accept_lmp_msg +: 022157 parse_lmp_setup_complete: +0x5e27 022158 fetch 1 ,mem_lmp_conn_state +0x5e28 022159 set1 received_setup_complete ,pdata +0x5e29 022160 store 1 ,mem_lmp_conn_state +0x5e2a 022161 rtnbit1 sent_setup_complete +0x5e2b 022162 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5e2c 022163 branch parse_rx_done +: 022165 parse_lmp_max_slot: +0x5e2d 022168 rtn +: 022170 parse_lmp_max_slot_req: +0x5e2e 022171 fetch 1 ,mem_max_slot +0x5e2f 022172 fetcht 1 ,mem_rxbuf + 1 +0x5e30 022173 isub temp ,null +0x5e31 022175 branch accept_lmp_msg ,positive +0x5e32 022176 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e33 022177 jam unspecified_error ,mem_lmo_reason2 +0x5e34 022178 jam lmp_max_slot_req ,mem_lmi_opcode2 +0x5e35 022179 rtn +: 022181 parse_lmp_detach: +0x5e36 022182 call prepare_disconnect +0x5e37 022183 branch accept_lmp_msg +: 022185 accept_lmp_msg: +0x5e38 022186 jam lmp_accepted ,mem_lmo_opcode2 +0x5e39 022187 rtn +: 022189 parse_lmp_incr_power: +0x5e3a 022190 jam lmp_max_power ,mem_lmo_opcode2 +0x5e3b 022191 rtn +: 022193 parse_lmp_decr_power: +0x5e3c 022194 jam lmp_min_power ,mem_lmo_opcode2 +0x5e3d 022195 rtn +: 022197 parse_lmp_version_res: +0x5e3e 022198 fetch 1 ,mem_conn_sm +0x5e3f 022199 rtneq conn_sm_wait_version +0x5e40 022201 jam conn_sm_send_features ,mem_conn_sm +0x5e41 022203 rtn +: 022206 parse_lmp_auto_rate: +0x5e42 022207 rtn +: 022209 parse_lmp_in_rand: +0x5e43 022210 call lmp_copy_rand +0x5e44 022211 jam pincode_state_wait_pincode ,mem_pincode_state +0x5e45 022212 jam bt_evt_pincode_req ,mem_fifo_temp +0x5e46 022213 call ui_ipc_send_event +0x5e47 022215 call tid_check +0x5e48 022216 nbranch lmp_accept_inrand ,true +0x5e49 022218 nbranch parse_lmp_inrand_res ,master +0x5e4a 022219 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e4b 022220 jam lmp_in_rand ,mem_lmi_opcode2 +0x5e4c 022221 jam transaction_collision ,mem_lmo_reason2 +0x5e4d 022222 rtn +: 022223 parse_lmp_inrand_res: +0x5e4e 022224 fetch 1 ,mem_op +0x5e4f 022225 set1 op_inrand_req ,pdata +0x5e50 022226 store 1 ,mem_op +0x5e51 022227 rtn +: 022230 pop_tid_follow: +0x5e52 022231 fetcht 1 ,mem_state_map +0x5e53 022232 nsetflag blank ,smap_lmptid ,temp +0x5e54 022233 storet 1 ,mem_state_map +0x5e55 022234 rtn +: 022237 push_tid_follow: +0x5e56 022238 fetch 1 ,mem_lmo_tid2 +0x5e57 022239 rshift pdata ,pdata +0x5e58 022240 and_into 1 ,pdata +0x5e59 022241 rtn +: 022243 parse_lmp_au_rand_moudle: +0x5e5a 022244 fetch 1 ,mem_nv_data_number +0x5e5b 022245 rtn blank +0x5e5c 022246 fetch 1 ,mem_pairing_auth +0x5e5d 022247 call load_device_list ,blank +0x5e5e 022248 rtn +: 022250 parse_lmp_au_rand: +0x5e5f 022251 call parse_lmp_au_rand_moudle +0x5e60 022252 call push_tid_follow +0x5e61 022253 store 1 ,mem_sres_tid +0x5e62 022254 call lmp_copy_rand +0x5e63 022255 jam lmp_sres ,mem_lmo_opcode2 +0x5e64 022256 fetch 1 ,mem_link_key_exists +0x5e65 022257 nrtn blank +0x5e66 022258 fetch 1 ,mem_state +0x5e67 022259 rtnbit1 state_combkey +0x5e68 022260 jam key_missing ,mem_lmo_reason2 +0x5e69 022261 branch reject_lmp_packet +: 022263 parse_lmp_sres: +0x5e6a 022264 arg mem_plap ,rega +0x5e6b 022265 call function_e1 +0x5e6c 022266 fetch 4 ,mem_rxbuf + 1 +0x5e6d 022267 fetcht 4 ,mem_input_store +0x5e6e 022268 isub temp ,null +0x5e6f 022269 branch authentication_ok ,zero +0x5e70 022270 jam lmp_detach ,mem_lmo_opcode2 +0x5e71 022271 jam authentication_failure_error ,mem_disconn_reason_send +0x5e72 022272 rtn +: 022273 authentication_ok: +0x5e73 022274 call authentication_ok_common +0x5e74 022275 fetch 1 ,mem_ssp_enable +0x5e75 022276 branch pairing_success ,blank +0x5e76 022277 rtn +: 022280 authentication_ok_common: +0x5e77 022281 call copy_aco +0x5e78 022282 call linkkey_ready +0x5e79 022283 fetch 1 ,mem_op +0x5e7a 022284 isolate1 op_auth_req ,pdata +0x5e7b 022285 set0 op_auth_req ,pdata +0x5e7c 022286 store 1 ,mem_op +0x5e7d 022287 fetch 1 ,mem_conn_sm +0x5e7e 022288 beq conn_sm_auth_wait ,authentication_ok_conn_sm +0x5e7f 022289 beq conn_sm_pairing_wait ,authentication_ok_conn_sm +0x5e80 022290 rtn +: 022291 authentication_ok_conn_sm: +0x5e81 022292 fetch 1 ,mem_pairing_auth +0x5e82 022293 rtnne defalt_pairing_auth +0x5e83 022294 fetch 1 ,mem_state_map +0x5e84 022295 rtnbit1 smap_encryption +0x5e85 022296 branch host_create_conn_encrypt +: 022298 parse_lmp_comb_key: +0x5e86 022299 arg mem_rxbuf + 1 ,rega +0x5e87 022300 arg mem_kinit ,regb +0x5e88 022301 arg mem_random_number ,contw +0x5e89 022302 call xor16 +0x5e8a 022303 arg mem_plap ,rega +0x5e8b 022304 call generate_linkkey +0x5e8c 022305 jam lmp_au_rand ,mem_lmo_opcode2 +0x5e8d 022306 fetch 1 ,mem_state +0x5e8e 022307 bbit0 state_combkey ,lmp_generate_key +0x5e8f 022308 rtn +: 022310 parse_lmp_name_res: +0x5e90 022311 fetch 2 ,mem_len +0x5e91 022312 add pdata ,-3 ,loopcnt +0x5e92 022313 fetcht 1 ,mem_rxbuf + 1 +0x5e93 022314 setarg mem_tmp_buffer +0x5e94 022315 iadd temp ,contw +0x5e95 022316 arg mem_rxbuf + 3 ,contr +0x5e96 022317 call memcpy +0x5e97 022318 fetcht 1 ,mem_name_offset +0x5e98 022319 fetch 1 ,mem_rxbuf + 2 +0x5e99 022320 isub temp ,pdata +0x5e9a 022321 sub pdata ,14 ,null +0x5e9b 022322 branch parse_lmp_name_res_end ,positive +0x5e9c 022323 add temp ,14 ,pdata +0x5e9d 022324 store 1 ,mem_name_offset +0x5e9e 022325 jam lmp_name_req ,mem_lmo_opcode2 +0x5e9f 022326 rtn +: 022327 parse_lmp_name_res_end: +0x5ea0 022328 fetch 1 ,mem_state_map +0x5ea1 022329 set1 smap_name_res ,pdata +0x5ea2 022330 store 1 ,mem_state_map +0x5ea3 022331 bbit1 smap_name_req ,lmp_disconnect +0x5ea4 022332 rtn +: 022333 parse_lmp_name_req: +0x5ea5 022334 fetch 1 ,mem_rxbuf + 1 +0x5ea6 022335 store 1 ,mem_lmi_opcode2 +0x5ea7 022336 jam lmp_name_res ,mem_lmo_opcode2 +0x5ea8 022337 rtn +: 022339 parse_lmp_conn_req: +0x5ea9 022340 branch accept_lmp_msg +: 022342 parse_lmp_timing_accuracy_req: +0x5eaa 022343 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +0x5eab 022344 rtn +: 022346 parse_lmp_features_req: +0x5eac 022347 jam lmp_features_res ,mem_lmo_opcode2 +0x5ead 022348 rtn +: 022350 parse_lmp_version_req: +0x5eae 022351 jam lmp_version_res ,mem_lmo_opcode2 +0x5eaf 022352 rtn +: 022354 parse_lmp_supervision_timeout: +0x5eb0 022357 rtn +: 022361 parse_lmp_sniff_subrating_req: +0x5eb1 022362 fetch 2 ,mem_tsniff +0x5eb2 022363 iforce temp +0x5eb3 022364 fetch 1 ,mem_rxbuf + 2 +0x5eb4 022365 store 1 ,mem_subsniff_rate +0x5eb5 022366 imul32 temp ,temp +0x5eb6 022367 fetch 2 ,mem_rxbuf + 3 +0x5eb7 022368 lshift pdata ,pdata +0x5eb8 022369 store 2 ,mem_subsniff_tcmax +0x5eb9 022370 fetch 4 ,mem_rxbuf + 5 +0x5eba 022371 lshift pdata ,pdata +0x5ebb 022372 store 4 ,mem_subsniff_instant +0x5ebc 022374 deposit temp +0x5ebd 022375 store 2 ,mem_subsniff_tsniff +0x5ebe 022376 rtn +: 022377 parse_lmpext_packet_type_table_req: +0x5ebf 022378 fetcht 1 ,mem_ptt +0x5ec0 022379 fetch 1 ,mem_rxbuf + 2 +0x5ec1 022380 ixor temp ,null +0x5ec2 022381 nbranch reject_unknown_ext_packet ,zero +0x5ec3 022382 isolate1 0 ,pdata +0x5ec4 022383 fetch 1 ,mem_state_map +0x5ec5 022384 setflag true ,smap_edr ,pdata +0x5ec6 022385 store 1 ,mem_state_map +0x5ec7 022386 jam lmp_ext_accepted ,mem_lmo_opcode2 +0x5ec8 022387 jam lmp_packet_type_table_req ,mem_lmi_opcode2 +0x5ec9 022388 rtn +: 022391 parse_lmp_sniff_subrating_res: +: 022392 parse_lmp_preferred_rate: +: 022393 parse_lmp_max_power: +: 022394 parse_lmp_min_power: +0x5eca 022395 rtn +: 022396 parse_lmp_page_mode_req: +0x5ecb 022398 branch accept_lmp_msg +: 022399 parse_lmp_page_scan_mode_req: +0x5ecc 022402 branch accept_lmp_msg +: 022406 parse_lmp_slot_offset: +0x5ecd 022407 fetch 2 ,mem_rxbuf + 1 +0x5ece 022408 store 2 ,mem_slot_offset +0x5ecf 022409 rtn +: 022411 parse_lmp_sniff_req_check_sniff_para: +0x5ed0 022412 fetch 2 ,mem_rxbuf + 4 +0x5ed1 022413 fetcht 1 ,mem_lpm_mult +0x5ed2 022414 imul32 temp ,pdata +0x5ed3 022415 arg 0x640 ,temp +0x5ed4 022416 isub temp ,null +0x5ed5 022418 rtn +: 022420 parse_lmp_sniff_req: +0x5ed6 022421 fetch 2 ,mem_rxbuf + 6 +0x5ed7 022422 branch lmp_reject_sniff ,blank +0x5ed8 022423 call parse_lmp_sniff_req_check_sniff_para +0x5ed9 022424 branch lmp_reject_sniff ,positive +0x5eda 022425 fetch 1 ,mem_device_option +0x5edb 022426 sub pdata ,dvc_op_module ,null +0x5edc 022427 call module_set_lpm_mult_2 ,zero +0x5edd 022428 fetch 1 ,mem_state +0x5ede 022429 bbit1 state_insniff ,lmp_reject_sniff +0x5edf 022430 fetch 2 ,mem_rxbuf + 2 +0x5ee0 022431 lshift pdata ,pdata +0x5ee1 022432 store 2 ,mem_dsniff +0x5ee2 022433 fetch 2 ,mem_rxbuf + 4 +0x5ee3 022434 lshift pdata ,pdata +0x5ee4 022435 store 2 ,mem_tsniff +0x5ee5 022436 fetch 2 ,mem_rxbuf + 6 +0x5ee6 022437 store 1 ,mem_sniff_attempt +0x5ee7 022438 iforce temp +0x5ee8 022439 fetch 2 ,mem_rxbuf + 8 +0x5ee9 022440 store 1 ,mem_sniff_timeout +0x5eea 022441 isub temp ,null +0x5eeb 022442 nbranch set_big_value_to_attempt ,positive +0x5eec 022443 store 1 ,mem_sniff_attempt +: 022444 set_big_value_to_attempt: +0x5eed 022446 jam lmp_accepted ,mem_lmo_opcode2 +0x5eee 022447 jam lmp_sniff_req ,mem_lmi_opcode2 +0x5eef 022448 rtn +: 022450 lmp_reject_sniff: +0x5ef0 022451 jam pdu_not_allowed ,mem_lmo_reason2 +0x5ef1 022452 branch reject_lmp_packet +: 022454 parse_lmp_start_encryption_req: +0x5ef2 022455 call accept_lmp_msg +0x5ef3 022456 call lmp_copy_rand +0x5ef4 022457 call function_e3 +0x5ef5 022458 branch start_encryption +: 022460 parse_lmp_stop_encryption_req: +0x5ef6 022461 call accept_lmp_msg +0x5ef7 022462 branch stop_encryption +: 022465 parse_lmp_switch_req: +0x5ef8 022466 fetch 4 ,mem_rxbuf + 1 +0x5ef9 022467 lshift pdata ,pdata +0x5efa 022469 branch parse_lmp_switch_accept ,master +0x5efb 022470 fetcht 1 ,mem_link_key_exists +0x5efc 022471 nbranch parse_lmp_switch_req_clear_mark ,blank +: 022472 parse_lmp_switch_req_not_accept: +0x5efd 022473 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5efe 022474 jam lmp_switch_req ,mem_lmi_opcode2 +0x5eff 022475 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f00 022476 rtn +: 022477 parse_lmp_switch_req_clear_mark: +0x5f01 022478 jam lmp_slot_offset ,mem_lmo_opcode2 +0x5f02 022479 jam 0 ,mem_conn_sm +0x5f03 022480 branch role_switch_prepare +: 022482 parse_lmp_switch_accept: +0x5f04 022483 call role_switch_prepare +0x5f05 022484 set1 mark_reconn_recieve_switch ,mark +0x5f06 022485 fetch 1 ,mem_connection_options +0x5f07 022486 set0 connection_switch ,pdata +0x5f08 022487 store 1 ,mem_connection_options +0x5f09 022488 branch accept_lmp_msg +: 022492 parse_lmp_temp_rand: +: 022493 parse_lmp_temp_key: +: 022494 parse_lmp_timing_accuracy_res: +: 022495 parse_lmp_unit_key: +: 022496 parse_lmp_use_semi_permanend_key: +0x5f0a 022497 rtn +: 022500 parse_lmp_unsniff_req: +0x5f0b 022501 jam lmp_accepted ,mem_lmo_opcode2 +0x5f0c 022502 jam lmp_unsniff_req ,mem_lmi_opcode2 +0x5f0d 022503 jam bt_evt_remote_unsniff ,mem_fifo_temp +0x5f0e 022504 call ui_ipc_send_event +0x5f0f 022505 branch sniff_exit +: 022507 parse_lmp_encapsulated_header: +0x5f10 022508 fetch 1 ,mem_rxbuf + 1 +0x5f11 022509 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f12 022510 fetch 1 ,mem_rxbuf + 2 +0x5f13 022511 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f14 022512 fetch 1 ,mem_rxbuf + 3 +0x5f15 022513 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject +0x5f16 022514 call check_localsm +0x5f17 022515 branch parse_lmp_encapsulated_header_master ,true +0x5f18 022516 jam sp_stat_key_recv ,mem_sp_state +: 022517 parse_lmp_encapsulated_header_master: +0x5f19 022518 jam lmp_accepted ,mem_lmo_opcode2 +0x5f1a 022519 jam lmp_encapsulated_header ,mem_lmi_opcode2 +0x5f1b 022520 branch parse_rx_done +: 022522 parse_lmp_encapsulated_header_reject: +0x5f1c 022523 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f1d 022524 branch reject_lmp_packet +: 022526 parse_lmp_accepted_encapsulated_header: +0x5f1e 022529 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f1f 022531 rtn +: 022532 parse_lmp_accepted_simple_pairing_number: +0x5f20 022533 fetch 1 ,mem_ssp_mode_flag +0x5f21 022534 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +0x5f22 022535 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey +: 022536 parse_lmp_accepted_simple_pairing_number_common: +0x5f23 022537 call check_localsm +0x5f24 022538 rtn true +0x5f25 022539 jam sp_stat_confirm_recv ,mem_sp_state +0x5f26 022540 rtn +: 022542 parse_lmp_accepted_simple_pairing_number_ssp_pin: +0x5f27 022543 call g_noninit_number_confirm +0x5f28 022544 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +0x5f29 022545 call ui_ipc_send_event +0x5f2a 022546 branch parse_lmp_accepted_simple_pairing_number_common +: 022549 parse_lmp_accepted_simple_pairing_number_passkey: +0x5f2b 022550 call check_localsm +0x5f2c 022551 rtn true +0x5f2d 022552 fetch 1 ,mem_authentication_passkey_times +0x5f2e 022553 beq 19 ,authentication_passkey_end +0x5f2f 022554 increase 1 ,pdata +0x5f30 022555 store 1 ,mem_authentication_passkey_times +: 022558 authentication_passkey: +0x5f31 022559 jam sp_flag_commit ,mem_sp_flag +0x5f32 022560 jam sp_stat_commit_calc ,mem_sp_state +0x5f33 022561 fetch 1 ,mem_authentication_passkey_times +0x5f34 022562 copy pdata ,queue +0x5f35 022563 fetch 6 ,mem_pin +0x5f36 022564 qisolate1 pdata +0x5f37 022565 setarg 0x80 +0x5f38 022566 setflag true ,0 ,pdata +0x5f39 022567 store 1 ,mem_passkey_1bit +0x5f3a 022568 rtn +: 022570 authentication_passkey_end: +0x5f3b 022571 jam sp_stat_confirm_recv ,mem_sp_state +0x5f3c 022572 rtn +: 022574 parse_lmp_accepted_dhkey_check: +0x5f3d 022575 call parse_lmp_accepted_dhkey_check_common +: 022576 pairing_success: +0x5f3e 022577 fetch 1 ,mem_flag_pairing_state +0x5f3f 022578 rtn blank +0x5f40 022579 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +0x5f41 022580 jam bt_evt_bt_pairing_success ,mem_fifo_temp +0x5f42 022581 branch ui_ipc_send_event +: 022584 parse_lmp_accepted_dhkey_check_common: +0x5f43 022586 call check_localsm +0x5f44 022587 ncall g_noninit ,true +0x5f45 022588 call g_init ,true +0x5f46 022589 call check_localsm +0x5f47 022590 rtn true +0x5f48 022591 jam sp_stat_link_key_calc ,mem_sp_state +0x5f49 022592 jam sp_flag_commit ,mem_sp_flag +0x5f4a 022593 rtn +: 022595 parse_simple_pairing_confirm: +0x5f4b 022596 arg mem_sp_confirm_remote ,contw +0x5f4c 022597 arg mem_rxbuf + 1 ,contr +0x5f4d 022598 call memcpy16 +0x5f4e 022599 fetch 1 ,mem_ssp_mode_flag +0x5f4f 022600 rtneq ssp_mode_passkey_entry_flag +0x5f50 022601 branch master_set_mem_master_sp_flag +: 022603 parse_lmp_encapsulated_payload: +0x5f51 022604 fetch 1 ,mem_master_sp_state +0x5f52 022605 beq sp_stat_random_send ,parse_encapsulated_payload_master +0x5f53 022606 fetch 1 ,mem_sp_state +0x5f54 022607 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject +: 022608 parse_encapsulated_payload_master: +0x5f55 022609 fetch 1 ,mem_sp_remote_key_recv_count +0x5f56 022610 sub pdata ,0x20 ,contw +0x5f57 022611 nbranch parse_lmp_encapsulated_payload_reject ,positive +0x5f58 022612 arg mem_sp_pubkey_remote ,contw +0x5f59 022613 iadd contw ,contw +0x5f5a 022614 fetch 8 ,mem_rxbuf + 1 +0x5f5b 022615 istore 8 ,contw +0x5f5c 022616 fetch 8 ,mem_rxbuf + 9 +0x5f5d 022617 istore 8 ,contw +0x5f5e 022618 fetch 1 ,mem_sp_remote_key_recv_count +0x5f5f 022619 increase 16 ,pdata +0x5f60 022620 store 1 ,mem_sp_remote_key_recv_count +0x5f61 022621 bne encapsulated_len_p192 ,accept_lmp_msg +: 022622 parse_lmp_encapsulated_payload_completed: +0x5f62 022623 call check_localsm +0x5f63 022624 branch accept_lmp_msg ,true +0x5f64 022625 jam sp_key_valid ,mem_sp_remote_key_invalid +0x5f65 022626 jam sp_stat_key_generate ,mem_sp_state +0x5f66 022627 jam sp_flag_commit ,mem_sp_flag +0x5f67 022628 branch accept_lmp_msg +: 022629 parse_lmp_encapsulated_payload_reject: +0x5f68 022630 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f69 022631 branch reject_lmp_packet +: 022632 parse_lmp_accepted_encapsulated_payload: +0x5f6a 022633 fetch 1 ,mem_sp_local_key_send_count +0x5f6b 022634 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +0x5f6c 022635 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f6d 022636 branch parse_rx_done +: 022638 parse_lmp_encapsulated_payload_all_accepted: +0x5f6e 022639 call check_localsm +0x5f6f 022640 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +0x5f70 022641 fetch 1 ,mem_ssp_mode_flag +0x5f71 022642 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +0x5f72 022643 jam sp_flag_commit ,mem_sp_flag +0x5f73 022644 jam sp_stat_commit_calc ,mem_sp_state +0x5f74 022645 branch parse_rx_done +: 022647 parse_lmp_encapsulated_payload_all_accepted_get_passkey: +0x5f75 022648 jam bt_evt_bt_get_passkey ,mem_fifo_temp +0x5f76 022649 branch ui_ipc_send_event +: 022652 parse_lmp_encapsulated_payload_all_accepted_master: +0x5f77 022654 branch parse_rx_done +: 022656 parse_lmp_simple_pairing_number: +0x5f78 022657 fetch 1 ,mem_master_sp_state +0x5f79 022658 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +0x5f7a 022659 fetch 1 ,mem_sp_state +0x5f7b 022660 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject +: 022661 parse_lmp_simple_pairing_number_master: +0x5f7c 022662 arg mem_sp_random_remote ,contw +0x5f7d 022663 fetch 8 ,mem_rxbuf + 1 +0x5f7e 022664 istore 8 ,contw +0x5f7f 022665 fetch 8 ,mem_rxbuf + 9 +0x5f80 022666 istore 8 ,contw +0x5f81 022667 call check_localsm +0x5f82 022668 branch parse_lmp_simple_pairing_number_master0 ,true +0x5f83 022669 jam sp_stat_random_send ,mem_sp_state +0x5f84 022670 jam sp_flag_commit ,mem_sp_flag +0x5f85 022671 branch accept_lmp_msg +: 022672 parse_lmp_simple_pairing_number_master0: +0x5f86 022673 jam sp_stat_commit_calc ,mem_master_sp_state +0x5f87 022674 branch master_set_mem_master_sp_flag +: 022677 parse_lmp_simple_pairing_number_reject: +0x5f88 022678 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f89 022679 branch reject_lmp_packet +: 022681 parse_dhkey_check: +0x5f8a 022682 fetch 1 ,mem_master_sp_state +0x5f8b 022683 beq sp_stat_confirm_send ,parse_dhkey_check_master +0x5f8c 022684 fetch 1 ,mem_sp_state +0x5f8d 022685 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject +: 022686 parse_dhkey_check_master: +0x5f8e 022687 arg mem_sp_check_result ,contw +0x5f8f 022688 arg mem_rxbuf + 1 ,contr +0x5f90 022689 call memcpy16 +0x5f91 022690 call check_localsm +0x5f92 022691 branch parse_dhkey_check_master0 ,true +0x5f93 022692 fetch 1 ,mem_ssp_mode_flag +0x5f94 022693 beq ssp_mode_ssp_pin_flag ,number_comparison_mode +: 022694 number_comparison_successed: +0x5f95 022695 jam 0 ,mem_flag_mode_ssp_pin +0x5f96 022696 jam sp_stat_confirm_check ,mem_sp_state +0x5f97 022697 jam sp_flag_commit ,mem_sp_flag +0x5f98 022698 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x5f99 022699 branch parse_rx_done +: 022701 parse_dhkey_check_master0: +0x5f9a 022702 jam sp_stat_confirm_check ,mem_master_sp_state +0x5f9b 022703 jam sp_flag_commit ,mem_master_sp_flag +0x5f9c 022704 branch parse_rx_done +: 022705 parse_lmp_dhkey_check_reject: +0x5f9d 022706 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f9e 022707 branch reject_lmp_packet +: 022709 number_comparison_mode: +0x5f9f 022710 fetch 1 ,mem_flag_mode_ssp_pin +0x5fa0 022711 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +0x5fa1 022712 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +0x5fa2 022713 store 1 ,mem_flag_mode_ssp_pin +0x5fa3 022714 rtn +: 022716 comparison_result: +0x5fa4 022717 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x5fa5 022718 jam 0 ,mem_flag_mode_ssp_pin +0x5fa6 022719 branch parse_lmp_dhkey_check_reject +: 022722 parse_lmp_clkoffset_res: +0x5fa7 022723 branch parse_rx_done +: 022725 parse_lmp_encryption_mode_req: +0x5fa8 022726 fetch 1 ,mem_connection_options +0x5fa9 022727 set0 connection_encrypt +0x5faa 022728 store 1 ,mem_connection_options +0x5fab 022729 call accept_lmp_msg +0x5fac 022730 nrtn master +0x5fad 022731 fetch 1 ,mem_rxbuf + 1 +0x5fae 022732 fetcht 1 ,mem_op +0x5faf 022733 setflag blank ,op_stop_enc ,temp +0x5fb0 022734 nsetflag blank ,op_start_enc ,temp +0x5fb1 022735 storet 1 ,mem_op +0x5fb2 022736 rtn +: 022738 parse_lmp_features_res: +0x5fb3 022739 fetcht 8 ,mem_rxbuf + 1 +: 022740 parse_lmp_features_res_not_hci: +0x5fb4 022741 fetch 1 ,mem_conn_sm +0x5fb5 022742 rtnne conn_sm_wait_features_res +0x5fb6 022744 fetch 1 ,mem_connection_options +0x5fb7 022745 bbit0 connection_feature_ext ,parse_lmp_send_conn +0x5fb8 022747 jam conn_sm_send_features_ext ,mem_conn_sm +0x5fb9 022748 rtn +: 022749 parse_lmp_send_conn: +0x5fba 022750 jam conn_sm_send_conn_req ,mem_conn_sm +0x5fbb 022751 rtn +: 022752 parse_lmp_test_activate: +0x5fbc 022753 fetch 1 ,mem_debug_config +0x5fbd 022754 store 1 ,mem_test_mode_old_debug_config +0x5fbe 022755 jam lmp_accepted ,mem_lmo_opcode2 +0x5fbf 022756 jam lmp_test_activate ,mem_lmi_opcode2 +0x5fc0 022757 rtn +: 022758 parse_lmp_test_control: +0x5fc1 022761 jam lmp_accepted ,mem_lmo_opcode2 +0x5fc2 022762 jam lmp_test_control ,mem_lmi_opcode2 +0x5fc3 022763 force 9 ,loopcnt +0x5fc4 022764 arg mem_rxbuf + 1 ,contr +0x5fc5 022765 arg mem_temp_payload ,contw +: 022766 parse_lmp_test_xor: +0x5fc6 022767 ifetch 1 ,contr +0x5fc7 022768 xor_into 0x55 ,pdata +0x5fc8 022769 istore 1 ,contw +0x5fc9 022770 loop parse_lmp_test_xor +0x5fca 022771 fetch 1 ,test_mode_scenario +0x5fcb 022772 fetcht 1 ,mem_tester_emulate +0x5fcc 022773 set0 tester_no_whitening ,temp +0x5fcd 022774 set0 tester_pattern_test ,temp +0x5fce 022775 beq exit_test_mode ,parse_lmp_test_control_exit +0x5fcf 022776 beq pause_test_mode ,parse_lmp_test_control_pause +0x5fd0 022777 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +0x5fd1 022778 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd2 022779 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +0x5fd3 022780 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd4 022781 beq zero_pattern ,parse_lmp_test_control_pattern +0x5fd5 022782 beq one_pattern ,parse_lmp_test_control_pattern +0x5fd6 022783 beq alt_pattern ,parse_lmp_test_control_pattern +0x5fd7 022784 beq alt2_pattern ,parse_lmp_test_control_pattern +0x5fd8 022785 beq pseudorandom ,parse_lmp_test_control_pattern +0x5fd9 022786 rtn +: 022787 parse_lmp_test_control_exit: +0x5fda 022789 fetch 1 ,mem_tester_emulate +0x5fdb 022790 set1 tester_exit ,pdata +0x5fdc 022791 set1 tester_change ,pdata +0x5fdd 022792 store 1 ,mem_tester_emulate +0x5fde 022793 rtn +: 022794 parse_lmp_test_control_pattern: +0x5fdf 022795 set1 tester_pattern_test ,temp +0x5fe0 022796 jam 5 ,mem_lch_code +0x5fe1 022797 fetch 2 ,test_mode_data_length +0x5fe2 022798 iforce loopcnt +0x5fe3 022799 store 2 ,mem_len +0x5fe4 022800 arg mem_rxbuf ,contw +0x5fe5 022801 call pn9 +: 022802 parse_lmp_test_control_loopback_nowhite: +0x5fe6 022803 set1 tester_no_whitening ,temp +: 022804 parse_lmp_test_control_loopback: +0x5fe7 022805 set1 tester_change ,temp +0x5fe8 022806 force 0 ,pdata +0x5fe9 022807 store 1 ,mem_slave_rcvcnt +0x5fea 022808 store 2 ,mem_tst_pktcnt_crc +0x5feb 022809 store 2 ,mem_tst_pktcnt_dmh +0x5fec 022810 store 2 ,mem_tst_pktcnt_hec +0x5fed 022811 store 2 ,mem_tst_pktcnt_sync +0x5fee 022812 fetch 1 ,test_mode_hopping_mode +0x5fef 022813 compare fixed_freq ,pdata ,0xff +0x5ff0 022814 setflag true ,tester_fixed_freq ,temp +0x5ff1 022815 storet 1 ,mem_tester_emulate +0x5ff2 022816 rtn +: 022818 parse_lmp_test_control_pause: +0x5ff3 022819 set0 mark_testmode ,mark +0x5ff4 022820 jam 0 ,mem_tester_emulate +0x5ff5 022821 fetch 1 ,mem_debug_config +0x5ff6 022822 set0 debug_tx_pattern ,pdata +0x5ff7 022823 store 1 ,mem_debug_config +0x5ff8 022824 rtn +: 022830 lmp_copy_rand: +0x5ff9 022831 arg mem_rxbuf + 1 ,contr +0x5ffa 022832 arg mem_random_number ,contw +0x5ffb 022833 branch memcpy16 +: 022835 lmp_generate_key: +0x5ffc 022836 jam lmp_comb_key ,mem_lmo_opcode2 +0x5ffd 022837 rtn +: 022839 lmp_start_encryption: +0x5ffe 022840 nrtn master +0x5fff 022841 jam lmp_start_encryption_req ,mem_lmo_opcode2 +0x6000 022842 rtn +: 022844 lmp_accept_inrand: +0x6001 022845 arg mem_lap ,rega +0x6002 022846 call generate_kinit +0x6003 022847 jam lmp_accepted ,mem_lmo_opcode2 +0x6004 022848 jam lmp_in_rand ,mem_lmi_opcode2 +0x6005 022849 rtn +: 022851 lmp_disconnect: +0x6006 022852 jam 10 ,mem_conn_timer +0x6007 022853 jam lmp_detach ,mem_lmo_opcode2 +0x6008 022854 jam local_host ,mem_disconn_reason_send +0x6009 022855 rtn +: 022861 send_lmp: +0x600a 022862 bpatchx patch30_2 ,mem_patch30 +0x600b 022863 disable user +0x600c 022864 call lmo_fifo_process +0x600d 022865 fetch 1 ,mem_lmp_to_send +0x600e 022866 rtn blank +0x600f 022871 bbit1 7 ,send_lmp_escape +: 022872 send_lmp0: +0x6010 022873 beq lmp_name_req ,send_lmp_name_req +0x6011 022874 beq lmp_name_res ,send_lmp_name_res +0x6012 022875 beq lmp_accepted ,send_lmp_accepted +0x6013 022876 beq lmp_not_accepted ,send_lmp_not_accepted +0x6014 022877 beq lmp_features_req ,send_lmp_features_req +0x6015 022878 beq lmp_features_res ,send_lmp_features_res +0x6016 022879 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +0x6017 022880 beq lmp_version_req ,send_lmp_version_req +0x6018 022881 beq lmp_version_res ,send_lmp_version_res +0x6019 022882 beq lmp_setup_complete ,send_lmp_setup_complete +0x601a 022883 beq lmp_supervision_timeout ,send_lmp_superto +0x601b 022884 beq lmp_host_connection_req ,send_lmp_no_payload +0x601c 022885 beq lmp_in_rand ,send_lmp_inrand +0x601d 022886 beq lmp_comb_key ,send_lmp_comb_key +0x601e 022887 beq lmp_au_rand ,send_lmp_aurand +0x601f 022888 beq lmp_sres ,send_lmp_sres +0x6020 022889 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +0x6021 022890 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +0x6022 022891 beq lmp_start_encryption_req ,send_lmp_start_encryption +0x6023 022892 beq lmp_detach ,send_lmp_detach +0x6024 022893 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +0x6025 022894 beq lmp_unit_key ,send_lmp_unit_key +0x6026 022896 beq lmp_incr_power_req ,send_lmp_inc_power +0x6027 022897 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +0x6028 022898 beq lmp_max_power ,send_lmp_nopayload_reply +0x6029 022899 beq lmp_max_slot ,send_lmp_max_slot +0x602a 022900 beq lmp_max_slot_req ,send_lmp_max_slot_req +0x602b 022901 beq lmp_min_power ,send_lmp_nopayload_reply +0x602c 022902 beq lmp_slot_offset ,send_lmp_slot_offset +0x602d 022903 beq lmp_switch_req ,send_lmp_switch_req +0x602e 022904 beq lmp_sniff_req ,send_lmp_sniff_req +0x602f 022905 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +0x6030 022906 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +0x6031 022907 beq lmp_unsniff_req ,send_lmp_unsniff_req +0x6032 022908 beq lmp_encapsulated_header ,send_lmp_encapsulated_header +0x6033 022909 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +0x6034 022910 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +0x6035 022911 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +0x6036 022912 beq lmp_dhkey_check ,send_lmp_dhkey_check +0x6037 022913 beq lmp_auto_rate ,send_lmp_auto_rate +0x6038 022914 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +0x6039 022916 beq lmp_clkoffset_req ,send_lmp_clkoffset_req +0x603a 022917 beq lmp_quality_of_service ,send_lmp_quality_of_service +0x603b 022918 beq lmp_test_activate ,send_lmp_test_activate +0x603c 022919 beq lmp_test_control ,send_lmp_test_control +: 022920 send_lmp_error: +0x603d 022921 branch assert +0x603e 022922 rtn +: 022923 send_lmp_escape: +0x603f 022924 beq lmp_ext_accepted ,send_lmpext_accepted +0x6040 022925 beq lmp_ext_features_res ,send_lmpext_features_res +0x6041 022926 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +0x6042 022927 beq lmp_ext_features_req ,send_lmpext_features_req +0x6043 022928 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +0x6044 022929 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +0x6045 022930 beq lmp_io_cap_req ,send_lmp_io_cap_req +0x6046 022931 beq lmp_io_cap_res ,send_lmpext_io_cap_res +0x6047 022932 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +0x6048 022933 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +0x6049 022934 branch assert +: 022940 send_lmp_accepted: +0x604a 022941 force 2 ,pdata +0x604b 022942 call msg_send_lmp +0x604c 022943 fetch 1 ,mem_lmi_opcode +0x604d 022944 istore 1 ,contw +0x604e 022945 call send_lmp_follow +0x604f 022946 bpatchx patch30_3 ,mem_patch30 +0x6050 022947 fetch 1 ,mem_lmi_opcode +0x6051 022948 beq lmp_in_rand ,send_lmp_accepted_inrand +0x6052 022949 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +0x6053 022950 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +0x6054 022951 beq lmp_sniff_req ,send_lmp_accept_sniff_req +0x6055 022952 beq lmp_host_connection_req ,send_lmp_accepted_connection +0x6056 022953 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +0x6057 022954 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +0x6058 022955 rtn +: 022957 send_create_conn_start_l2cap_timer_sm: +0x6059 022958 fetch 1 ,mem_conn_sm +0x605a 022959 rtn blank +0x605b 022960 jam conn_sm_wait_done ,mem_conn_sm +0x605c 022961 setarg timer_enpt_waite +0x605d 022962 arg enpt_delay_timer ,queue +0x605e 022963 branch timer_init +: 022965 send_lmp_accept_sniff_req: +0x605f 022966 branch sniff_init +: 022967 send_lmp_not_accepted: +0x6060 022968 force 3 ,pdata +0x6061 022969 call msg_send_lmp +0x6062 022970 fetch 1 ,mem_lmi_opcode +0x6063 022971 beq lmp_au_rand ,send_not_accept_aurand +0x6064 022972 istore 1 ,contw +0x6065 022973 fetch 1 ,mem_lmo_reason +0x6066 022974 istore 1 ,contw +0x6067 022975 branch send_lmp_follow +: 022977 send_not_accept_aurand: +0x6068 022978 istore 1 ,contw +0x6069 022979 fetch 1 ,mem_lmo_reason +0x606a 022980 istore 1 ,contw +0x606b 022981 arg mem_sres_tid ,temp +0x606c 022982 branch special_tid_store +: 022984 send_lmpext_accepted: +0x606d 022985 force 4 ,queue +0x606e 022986 call send_lmpext +0x606f 022987 setarg lmp_escape +0x6070 022988 istore 1 ,contw +0x6071 022989 fetch 1 ,mem_lmi_opcode +0x6072 022990 set0 7 ,pdata +0x6073 022991 istore 1 ,contw +0x6074 022992 fetch 1 ,mem_lmi_opcode +0x6075 022993 branch send_lmp_follow +: 022995 send_lmpext_not_accepted: +0x6076 022996 force 5 ,queue +0x6077 022997 call send_lmpext +0x6078 022998 setarg lmp_escape +0x6079 022999 istore 1 ,contw +0x607a 023000 fetch 1 ,mem_lmi_opcode +0x607b 023001 set0 7 ,pdata +0x607c 023002 istore 1 ,contw +0x607d 023003 fetch 1 ,mem_lmo_reason +0x607e 023004 istore 1 ,contw +0x607f 023005 branch send_lmp_follow +: 023008 send_lmp_accepted_inrand: +0x6080 023009 call clear_linkkey +0x6081 023010 call tid_check +0x6082 023011 rtn true +0x6083 023012 branch lmp_generate_key +: 023014 send_lmp_accepted_enc_mode: +0x6084 023015 fetch 1 ,mem_op +0x6085 023016 bbit1 op_start_enc ,send_lmp_accepted_enc_start +0x6086 023017 rtnbit0 op_stop_enc +0x6087 023018 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x6088 023019 set0 op_stop_enc ,pdata +0x6089 023020 call tid_reply +0x608a 023021 branch send_lmp_accepted_enc_exit +: 023022 send_lmp_accepted_enc_start: +0x608b 023023 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x608c 023024 set0 op_start_enc ,pdata +: 023025 send_lmp_accepted_enc_exit: +0x608d 023026 store 1 ,mem_op +0x608e 023027 rtn +: 023029 send_lmp_accepted_enc_key: +0x608f 023030 call check_localsm +0x6090 023031 branch lmp_start_encryption ,true +0x6091 023032 rtn +: 023034 send_lmp_accepted_connection: +0x6092 023035 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +0x6093 023037 fetch 1 ,mem_lmp_conn_state +0x6094 023038 set1 received_conn_req ,pdata +0x6095 023039 store 1 ,mem_lmp_conn_state +0x6096 023040 jam bt_evt_bb_connected ,mem_fifo_temp +0x6097 023041 branch ui_ipc_send_event +: 023044 send_lmp_accept_dhkey_check: +0x6098 023045 rtn +: 023049 send_lmpext_features_res: +0x6099 023050 force 12 ,queue +0x609a 023051 call send_lmpext +0x609b 023052 setarg 0x01 +0x609c 023053 istore 1 ,contw +0x609d 023054 fetch 2 ,mem_lmpext_ssp_enable +0x609e 023055 istore 2 ,contw +0x609f 023056 setarg 0 +0x60a0 023057 istore 3 ,contw +0x60a1 023058 setarg 0x00 +0x60a2 023059 istore 4 ,contw +0x60a3 023060 branch send_lmp_reply +: 023061 send_lmpext_io_cap_res: +0x60a4 023062 force 5 ,queue +0x60a5 023063 call send_lmpext +0x60a6 023064 fetch 3 ,mem_sp_iocap_local +0x60a7 023065 istore 3 ,contw +0x60a8 023066 call send_lmp_reply +0x60a9 023067 jam flag_pairing_state_pairing ,mem_flag_pairing_state +0x60aa 023068 fetch 1 ,mem_sp_iocap_local +0x60ab 023069 beq display_yesno ,responder_iocap_display_yesno +0x60ac 023070 beq keyboard_only ,responder_iocap_keyboard_only +0x60ad 023071 beq no_input_no_output ,responder_iocap_no_input_no_output +0x60ae 023072 rtn +: 023074 responder_iocap_keyboard_only: +0x60af 023075 fetch 1 ,mem_sp_iocap_remote +0x60b0 023076 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +0x60b1 023077 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +0x60b2 023078 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +0x60b3 023079 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +0x60b4 023080 rtn +: 023083 responder_iocap_display_yesno: +0x60b5 023084 fetch 1 ,mem_sp_iocap_remote +0x60b6 023085 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +0x60b7 023086 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +0x60b8 023087 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +0x60b9 023088 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +0x60ba 023089 rtn +: 023092 responder_iocap_no_input_no_output: +0x60bb 023093 fetch 1 ,mem_sp_iocap_remote +0x60bc 023094 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +0x60bd 023095 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +0x60be 023096 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +0x60bf 023097 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +0x60c0 023098 rtn +: 023100 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: +: 023101 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: +: 023102 responder_iocap_display_yesno_initiator_iocap_display_only: +: 023103 responder_iocap_no_input_no_output_initiator_iocap_display_only: +: 023104 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: +: 023105 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: +: 023106 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: +: 023107 set_ssp_mode_justwork: +0x60c1 023108 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +0x60c2 023109 fetch 1 ,mem_classic_bt_flag +0x60c3 023110 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +0x60c4 023111 rtn +: 023113 responder_iocap_display_yesno_initiator_iocap_display_yesno: +: 023114 set_ssp_mode_numeric_comparison: +0x60c5 023115 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +0x60c6 023116 rtn +: 023118 responder_iocap_keyboard_only_initiator_iocap_display_yesno: +: 023119 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: +: 023120 responder_iocap_keyboard_only_initiator_iocap_display_only: +: 023121 responder_iocap_display_yesno_initiator_iocap_keyboard_only: +: 023122 set_ssp_mode_passkey: +0x60c7 023123 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +0x60c8 023124 rtn +: 023127 classic_bt_set_reject_justwork_flag: +0x60c9 023128 arg flag_ssp_reject_justwork ,queue +0x60ca 023129 branch classic_bluetooth_set_flag +: 023131 classic_bt_clr_reject_justwork_flag: +0x60cb 023132 arg flag_ssp_reject_justwork ,queue +0x60cc 023133 branch classic_bluetooth_clr_flag +: 023135 classic_bluetooth_set_flag: +0x60cd 023136 fetch 1 ,mem_classic_bt_flag +0x60ce 023137 qset1 pdata +0x60cf 023138 store 1 ,mem_classic_bt_flag +0x60d0 023139 rtn +: 023141 classic_bluetooth_clr_flag: +0x60d1 023142 fetch 1 ,mem_classic_bt_flag +0x60d2 023143 qset0 pdata +0x60d3 023144 store 1 ,mem_classic_bt_flag +0x60d4 023145 rtn +: 023148 send_lmp_io_cap_req: +0x60d5 023149 force 5 ,queue +0x60d6 023150 call send_lmpext +0x60d7 023151 fetch 3 ,mem_sp_iocap_local +0x60d8 023152 istore 3 ,contw +0x60d9 023153 branch send_lmp_request +: 023156 send_lmpext_sniff_subrating_req: +0x60da 023158 rtn +: 023159 send_lmpext_sniff_subrating_res: +0x60db 023160 force 9 ,queue +0x60dc 023161 call send_lmpext +0x60dd 023162 fetch 1 ,mem_subsniff_rate +0x60de 023163 istore 1 ,contw +0x60df 023164 fetch 2 ,mem_subsniff_tcmax +0x60e0 023165 istore 2 ,contw +0x60e1 023166 fetch 4 ,mem_subsniff_instant +0x60e2 023167 istore 4 ,contw +0x60e3 023168 branch send_lmp_reply +: 023170 send_lmp_name_res: +0x60e4 023171 force 17 ,pdata +0x60e5 023172 call msg_send_lmp +0x60e6 023173 fetch 1 ,mem_lmi_opcode +0x60e7 023174 copy pdata ,temp +0x60e8 023175 beq 0x00 ,send_lmp_name_res_offset_ok +0x60e9 023176 beq 0x0e ,send_lmp_name_res_offset_ok +0x60ea 023177 beq 0x1c ,send_lmp_name_res_offset_ok +0x60eb 023178 rtn +: 023179 send_lmp_name_res_offset_ok: +0x60ec 023180 istore 1 ,contw +0x60ed 023181 fetch 1 ,mem_local_name_length +0x60ee 023182 istore 1 ,contw +0x60ef 023183 arg 14 ,loopcnt +0x60f0 023184 setarg mem_local_name +0x60f1 023185 iadd temp ,contr +0x60f2 023186 call memcpy +0x60f3 023187 branch send_lmp_reply +: 023190 send_lmp_timing_accuracy_res: +0x60f4 023191 force 3 ,pdata +0x60f5 023192 call msg_send_lmp +0x60f6 023193 setarg 0x0114 +0x60f7 023194 istore 2 ,contw +0x60f8 023195 branch send_lmp_reply +: 023197 send_lmp_clkoffset_res: +0x60f9 023199 force 3 ,pdata +0x60fa 023200 call msg_send_lmp +0x60fb 023201 fetch 4 ,mem_clke_bt +0x60fc 023202 isub clkn_bt ,pdata +0x60fd 023203 branch send_lmp_clkoffset_res_master ,master +0x60fe 023204 sub pdata ,0 ,pdata +: 023205 send_lmp_clkoffset_res_master: +0x60ff 023207 rshift2 pdata ,pdata +0x6100 023208 set0 15 ,pdata +0x6101 023209 istore 2 ,contw +0x6102 023210 branch send_lmp_reply +: 023212 send_lmp_version_res: +0x6103 023213 force 6 ,pdata +0x6104 023214 call msg_send_lmp +0x6105 023215 fetch 5 ,mem_lmp_version +0x6106 023216 istore 5 ,contw +0x6107 023217 branch send_lmp_reply +: 023219 send_lmp_features_res: +0x6108 023220 force 9 ,pdata +0x6109 023221 call msg_send_lmp +0x610a 023222 fetch 8 ,mem_features +0x610b 023223 istore 8 ,contw +0x610c 023224 branch send_lmp_reply +: 023231 send_lmpext_features_req: +0x610d 023232 force 12 ,queue +0x610e 023233 call send_lmpext +0x610f 023234 setarg 0x01 +0x6110 023235 istore 1 ,contw +0x6111 023236 fetch 2 ,mem_lmpext_ssp_enable +0x6112 023237 istore 2 ,contw +0x6113 023238 setarg 0 +0x6114 023239 istore 3 ,contw +0x6115 023240 setarg 0x00 +0x6116 023241 istore 4 ,contw +0x6117 023242 branch send_lmp_request +: 023244 send_lmpext_packet_type_table_req: +0x6118 023245 force 3 ,queue +0x6119 023246 call send_lmpext +0x611a 023247 fetch 1 ,mem_ptt +0x611b 023248 istore 1 ,contw +0x611c 023249 disable user +0x611d 023250 call send_lmp_request +0x611e 023251 nrtn user +0x611f 023252 nrtn master +0x6120 023253 fetch 1 ,mem_afh_cfg +0x6121 023254 rtnbit0 afh_cfg_on +0x6122 023255 call afh_init +0x6123 023256 branch afh_open_all_channels +: 023259 ssp_enable: +0x6124 023260 bpatchx patch30_4 ,mem_patch30 +0x6125 023261 fetch 1 ,mem_features + 6 +0x6126 023262 set1 param_featrue_ssp ,pdata +0x6127 023263 store 1 ,mem_features + 6 +0x6128 023264 setarg param_lmpext_ssp_enable +0x6129 023265 store 2 ,mem_lmpext_ssp_enable +0x612a 023266 rtn +: 023268 ssp_disable: +0x612b 023269 bpatchx patch30_5 ,mem_patch30 +0x612c 023270 fetch 1 ,mem_features + 6 +0x612d 023271 set0 param_featrue_ssp ,pdata +0x612e 023272 store 1 ,mem_features + 6 +0x612f 023273 setarg 0 +0x6130 023274 store 2 ,mem_lmpext_ssp_enable +0x6131 023275 rtn +: 023277 afh_init: +0x6132 023278 jam 0x3 ,mem_afh_cfg +0x6133 023279 setarg 0 +0x6134 023280 store 4 ,mem_afh_timer +0x6135 023281 arg mem_afh_map_lo ,contw +0x6136 023282 call afh_reset_map +0x6137 023283 arg mem_afh_map_new ,contw +0x6138 023284 call afh_reset_map +0x6139 023285 arg mem_afh_classify_channel_map ,contw +0x613a 023286 call afh_reset_map +0x613b 023287 branch afh_clear_error_counter +: 023288 afh_open_all_channels: +0x613c 023289 arg mem_afh_map_new ,contw +0x613d 023290 call afh_reset_map +0x613e 023291 call afh_clear_error_counter +0x613f 023292 branch afh_set_send_flag +: 023295 afh_reset_map: +0x6140 023296 setarg 0xffffff +0x6141 023297 istore 3 ,contw +0x6142 023298 istore 3 ,contw +0x6143 023299 istore 3 ,contw +0x6144 023300 setarg 0x7f +0x6145 023301 istore 1 ,contw +0x6146 023302 rtn +: 023303 afh_clear_error_counter: +0x6147 023304 setarg 0 +0x6148 023305 store 2 ,mem_afh_error_total +0x6149 023306 rtn +: 023307 afh_set_send_flag: +0x614a 023308 fetch 1 ,mem_afh_cfg +0x614b 023309 set1 send_lmp_set_afh ,pdata +0x614c 023310 store 1 ,mem_afh_cfg +0x614d 023311 rtn +: 023314 send_lmpext_pause_encryption_req: +0x614e 023315 force 2 ,queue +0x614f 023316 call send_lmpext +0x6150 023317 nbranch send_lmp_reply ,master +0x6151 023319 branch send_lmp_request +: 023323 send_lmp_detach: +0x6152 023324 force 2 ,pdata +0x6153 023325 call msg_send_lmp +0x6154 023326 fetch 1 ,mem_disconn_reason_send +0x6155 023327 istore 1 ,contw +0x6156 023328 call send_lmp_request +: 023329 prepare_disconnect: +0x6157 023330 fetch 1 ,mem_op +0x6158 023331 set1 op_disconn ,pdata +0x6159 023332 store 1 ,mem_op +0x615a 023333 jam 50 ,mem_conn_timer +0x615b 023334 rtn +: 023337 send_lmp_no_payload: +0x615c 023338 force 1 ,pdata +0x615d 023339 call msg_send_lmp +0x615e 023340 branch send_lmp_request +: 023341 send_lmp_nopayload_reply: +0x615f 023342 force 1 ,pdata +0x6160 023343 call msg_send_lmp +0x6161 023344 branch send_lmp_reply +: 023347 send_lmp_encryption_mode_req: +0x6162 023348 force 2 ,pdata +0x6163 023349 call msg_send_lmp +0x6164 023350 fetch 1 ,mem_state_map +0x6165 023351 isolate0 smap_encryption ,pdata +0x6166 023352 setflag true ,0 ,pdata +0x6167 023353 and_into 1 ,pdata +0x6168 023354 istore 1 ,contw +0x6169 023355 branch send_lmp_request +: 023358 send_lmp_superto: +0x616a 023359 force 3 ,pdata +0x616b 023360 call msg_send_lmp +0x616c 023361 fetch 2 ,mem_supervision_to +0x616d 023362 istore 2 ,contw +0x616e 023363 branch send_lmp_request +: 023365 send_lmp_name_req: +0x616f 023366 jam 250 ,mem_conn_timer +0x6170 023367 force 2 ,pdata +0x6171 023368 call msg_send_lmp +0x6172 023369 fetch 1 ,mem_name_offset +0x6173 023370 istore 1 ,contw +0x6174 023371 branch send_lmp_request +: 023373 send_lmp_test_control: +0x6175 023374 force 10 ,pdata +0x6176 023375 call msg_send_lmp +0x6177 023376 arg mem_temp_payload ,contr +0x6178 023377 force 9 ,loopcnt +: 023378 send_lmp_test_control_loop: +0x6179 023379 ifetch 1 ,contr +0x617a 023380 xor_into 0x55 ,pdata +0x617b 023381 istore 1 ,contw +0x617c 023382 loop send_lmp_test_control_loop +0x617d 023383 branch send_lmp_request +: 023385 send_lmp_quality_of_service_req: +0x617e 023386 branch send_lmp_request +: 023387 send_lmp_unit_key: +0x617f 023388 branch send_lmp_request +: 023390 send_lmp_slot_offset: +0x6180 023391 rtn master +0x6181 023392 call calc_slot_offset +0x6182 023393 force 9 ,pdata +0x6183 023394 call msg_send_lmp +0x6184 023395 fetch 2 ,mem_slot_offset +0x6185 023396 istore 2 ,contw +0x6186 023397 fetch 3 ,mem_lap +0x6187 023398 istore 3 ,contw +0x6188 023399 fetch 1 ,mem_uap +0x6189 023400 istore 1 ,contw +0x618a 023401 fetch 2 ,mem_nap +0x618b 023402 istore 2 ,contw +0x618c 023403 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +0x618d 023404 set0 mark_switch_initiated ,mark +0x618e 023405 call send_lmp_request +0x618f 023406 jam lmp_switch_req ,mem_lmo_opcode2 +0x6190 023407 rtn +: 023408 send_lmp_slot_offset_reply: +0x6191 023409 call send_lmp_reply +0x6192 023410 jam lmp_accepted ,mem_lmo_opcode2 +0x6193 023411 jam lmp_switch_req ,mem_lmi_opcode2 +0x6194 023412 rtn +: 023414 send_lmp_switch_req: +0x6195 023415 arg 0x200 ,temp +0x6196 023416 branch switch_on_native ,master +0x6197 023417 deposit clke_bt +0x6198 023418 branch switch_slack +: 023419 switch_on_native: +0x6199 023420 deposit clkn_bt +: 023421 switch_slack: +0x619a 023422 deposit bt_clk +0x619b 023423 iadd temp ,pdata +0x619c 023424 and_into 0x1fc ,pdata +0x619d 023425 store 4 ,mem_sniff_anchor +0x619e 023426 force 5 ,pdata +0x619f 023427 call msg_send_lmp +0x61a0 023428 fetch 4 ,mem_sniff_anchor +0x61a1 023429 rshift pdata ,pdata +0x61a2 023430 istore 4 ,contw +0x61a3 023431 branch send_lmp_request +: 023433 send_lmp_sniff_req: +0x61a4 023434 force 10 ,pdata +0x61a5 023435 call msg_send_lmp +0x61a6 023436 arg mem_sniff_payload ,contr +0x61a7 023437 ifetch 9 ,contr +0x61a8 023438 istore 9 ,contw +0x61a9 023439 branch send_lmp_request +: 023442 send_lmp_timing_accuracy_req: +0x61aa 023444 force 3 ,pdata +0x61ab 023445 call msg_send_lmp +0x61ac 023446 setarg 0x0114 +0x61ad 023447 istore 2 ,contw +0x61ae 023448 branch send_lmp_request +: 023450 send_lmp_unsniff_req: +0x61af 023452 force 1 ,pdata +0x61b0 023453 call msg_send_lmp +0x61b1 023462 branch send_lmp_request +: 023465 send_lmp_max_slot: +0x61b2 023466 force 2 ,pdata +0x61b3 023467 call msg_send_lmp +0x61b4 023468 fetch 1 ,mem_max_slot +0x61b5 023469 istore 1 ,contw +0x61b6 023470 branch send_lmp_request +: 023473 send_lmp_max_slot_req: +0x61b7 023474 force 2 ,pdata +0x61b8 023475 call msg_send_lmp +0x61b9 023476 setarg 0x05 +0x61ba 023477 istore 1 ,contw +0x61bb 023478 branch send_lmp_request +: 023481 send_lmp_inc_power: +0x61bc 023482 force 2 ,pdata +0x61bd 023483 call msg_send_lmp +0x61be 023484 setarg 0x00 +0x61bf 023485 istore 1 ,contw +0x61c0 023486 branch send_lmp_request +: 023489 send_lmp_setup_complete_by_module: +0x61c1 023490 jam lmp_max_slot_req ,mem_lmo_opcode2 +0x61c2 023491 rtn +: 023492 send_lmp_setup_complete: +0x61c3 023493 fetch 1 ,mem_device_option +0x61c4 023494 sub pdata ,dvc_op_module ,null +0x61c5 023495 call send_lmp_setup_complete_by_module ,zero +0x61c6 023496 fetch 1 ,mem_state +0x61c7 023497 set1 state_conn_comp ,pdata +0x61c8 023498 store 1 ,mem_state +0x61c9 023499 copy clkn_bt ,pdata +0x61ca 023500 store 4 ,mem_aurand_send_delay_time +0x61cb 023501 fetch 1 ,mem_lmp_conn_state +0x61cc 023502 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +0x61cd 023503 set1 sent_setup_complete ,pdata +0x61ce 023504 store 1 ,mem_lmp_conn_state +0x61cf 023505 jam bt_evt_setup_complete ,mem_fifo_temp +0x61d0 023506 call ui_ipc_send_event +0x61d1 023507 force 1 ,pdata +0x61d2 023508 call msg_send_lmp +0x61d3 023509 branch send_lmp_request +: 023510 send_lmp_setup_complete_has_sent: +0x61d4 023511 jam 0 ,mem_lmp_to_send +0x61d5 023512 rtn +: 023514 send_lmp_version_req: +0x61d6 023515 force 6 ,pdata +0x61d7 023516 call msg_send_lmp +0x61d8 023517 fetch 5 ,mem_lmp_version +0x61d9 023518 istore 5 ,contw +0x61da 023519 branch send_lmp_request +: 023521 send_lmp_features_req: +0x61db 023522 force 9 ,pdata +0x61dc 023523 call msg_send_lmp +0x61dd 023524 fetch 8 ,mem_features +0x61de 023525 istore 8 ,contw +0x61df 023526 branch send_lmp_request +: 023528 sp_master_send_io_cap_get: +0x61e0 023529 jam sp_flag_commit ,mem_master_sp_flag +0x61e1 023530 fetch 1 ,mem_sp_local_key_invalid +0x61e2 023531 rtnne sp_key_valid +0x61e3 023532 jam sp_master_stat_start_done ,mem_master_sp_state +0x61e4 023533 rtn +: 023535 sp_master_send_io_cap_send: +0x61e5 023536 call tid_initiate +0x61e6 023537 jam lmp_io_cap_req ,mem_lmo_opcode2 +0x61e7 023538 jam sp_stat_key_send ,mem_master_sp_state +0x61e8 023539 rtn +: 023542 sp_master_send_lmp_encapsulated_header: +0x61e9 023543 call tid_initiate +0x61ea 023544 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61eb 023545 jam sp_stat_random_send ,mem_master_sp_state +0x61ec 023546 rtn +: 023548 sp_master_commitment_compare: +0x61ed 023549 arg mem_sp_calc_result_high ,rega +0x61ee 023550 arg mem_sp_confirm_remote ,regb +0x61ef 023551 arg 16 ,loopcnt +0x61f0 023552 call string_compare +0x61f1 023553 branch sp_master_commitment_compare_success ,zero +0x61f2 023554 jam sp_stat_null ,mem_master_sp_state +0x61f3 023555 call master_clear_mem_master_sp_flag +0x61f4 023556 jam pdu_not_allowed ,mem_lmo_reason2 +0x61f5 023557 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61f6 023558 branch reject_lmp_packet +: 023559 sp_master_commitment_compare_success: +0x61f7 023560 jam sp_stat_confirm_calc ,mem_master_sp_state +0x61f8 023561 call master_set_mem_master_sp_flag +0x61f9 023562 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61fa 023563 branch accept_lmp_msg +: 023567 sp_master_send_lmp_simple_pairing_number: +0x61fb 023568 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x61fc 023569 rtn +: 023573 sp_send_lmp_encapsulated_header: +0x61fd 023576 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61fe 023578 rtn +: 023584 send_lmp_encapsulated_header: +0x61ff 023585 jam 0 ,mem_sp_local_key_send_count +0x6200 023586 force 4 ,pdata +0x6201 023587 call msg_send_lmp +0x6202 023588 force encapsulated_major_type_p192 ,pdata +0x6203 023589 istore 1 ,contw +0x6204 023590 force encapsulated_minor_type_p192 ,pdata +0x6205 023591 istore 1 ,contw +0x6206 023592 force encapsulated_len_p192 ,pdata +0x6207 023593 istore 1 ,contw +0x6208 023594 call check_localsm +0x6209 023595 branch send_lmp_request ,true +0x620a 023596 branch send_lmp_reply +: 023598 send_lmp_encapsulated_payload: +0x620b 023600 force 17 ,pdata +0x620c 023601 call msg_send_lmp +0x620d 023602 fetch 1 ,mem_sp_local_key_send_count +0x620e 023603 arg mem_sp_pubkey_local ,contr +0x620f 023604 iadd contr ,contr +0x6210 023605 ifetch 8 ,contr +0x6211 023606 istore 8 ,contw +0x6212 023607 ifetch 8 ,contr +0x6213 023608 istore 8 ,contw +0x6214 023609 fetch 1 ,mem_sp_local_key_send_count +0x6215 023610 increase 16 ,pdata +0x6216 023611 store 1 ,mem_sp_local_key_send_count +0x6217 023612 call check_localsm +0x6218 023613 branch send_lmp_request ,true +0x6219 023614 branch send_lmp_reply +: 023617 sp_send_lmp_simple_pairing_comfirm: +0x621a 023618 jam sp_stat_random_recv ,mem_sp_state +0x621b 023619 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +0x621c 023620 rtn +: 023621 send_lmp_simple_pairing_comfirm: +0x621d 023624 force 17 ,pdata +0x621e 023625 call msg_send_lmp +0x621f 023626 arg mem_sp_calc_result_high ,contr +0x6220 023627 ifetch 8 ,contr +0x6221 023628 istore 8 ,contw +0x6222 023629 ifetch 8 ,contr +0x6223 023630 istore 8 ,contw +0x6224 023631 branch send_lmp_reply +: 023633 sp_send_lmp_simple_pairing_number: +0x6225 023634 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x6226 023635 rtn +: 023637 send_lmp_simple_pairing_number: +0x6227 023639 call check_localsm +0x6228 023640 call sp_local_random_key_generator ,true +0x6229 023641 force 17 ,pdata +0x622a 023642 call msg_send_lmp +0x622b 023643 arg mem_sp_random_local ,contr +0x622c 023644 ifetch 8 ,contr +0x622d 023645 istore 8 ,contw +0x622e 023646 ifetch 8 ,contr +0x622f 023647 istore 8 ,contw +0x6230 023648 call check_localsm +0x6231 023649 nbranch send_lmp_reply ,true +0x6232 023650 branch send_lmp_request ,true +: 023652 master_sp_sm_end: +0x6233 023654 jam sp_stat_done ,mem_master_sp_state +: 023655 sp_aurand_send: +0x6234 023656 call tid_initiate +0x6235 023657 jam lmp_au_rand ,mem_lmo_opcode2 +0x6236 023658 call check_localsm_master +0x6237 023659 branch sp_master_key_prarm_push ,true +0x6238 023660 branch sp_link_key_prarm_push +: 023661 master_sp_send_lmp_dhkey_check: +0x6239 023662 call tid_reply +: 023663 sp_send_lmp_dhkey_check: +0x623a 023664 jam lmp_dhkey_check ,mem_lmo_opcode2 +0x623b 023665 rtn +: 023666 send_lmp_dhkey_check: +0x623c 023668 force 17 ,pdata +0x623d 023669 call msg_send_lmp +0x623e 023670 arg mem_sp_calc_result_high ,contr +0x623f 023671 ifetch 8 ,contr +0x6240 023672 istore 8 ,contw +0x6241 023673 ifetch 8 ,contr +0x6242 023674 istore 8 ,contw +0x6243 023675 call check_localsm +0x6244 023676 nbranch send_lmp_reply ,true +0x6245 023677 branch send_lmp_request ,true +: 023679 send_lmp_enc_key_size_mask_res: +0x6246 023680 force 3 ,pdata +0x6247 023681 call msg_send_lmp +0x6248 023682 setarg 0xfffe +0x6249 023683 istore 2 ,contw +0x624a 023684 branch send_lmp_reply +: 023686 send_lmp_auto_rate: +0x624b 023687 branch send_lmp_request +: 023688 send_lmp_clkoffset_req: +0x624c 023689 branch send_lmp_request +: 023690 send_lmp_quality_of_service: +0x624d 023691 branch send_lmp_request +: 023692 send_lmp_test_activate: +0x624e 023693 branch send_lmp_request +: 023698 send_lmp_comb_key: +0x624f 023699 call generate_random_number +0x6250 023700 arg mem_lap ,rega +0x6251 023701 call generate_linkkey +0x6252 023702 force 17 ,pdata +0x6253 023703 call msg_send_lmp +0x6254 023704 arg mem_kinit ,rega +0x6255 023705 arg mem_random_number ,regb +0x6256 023706 call xor16 +0x6257 023707 nbranch send_lmp_follow ,master +0x6258 023708 branch send_lmp_tid +: 023710 send_lmp_inrand: +0x6259 023711 call generate_random_number +0x625a 023712 arg mem_plap ,rega +0x625b 023713 call generate_kinit +: 023714 send_lmp_rand: +0x625c 023715 force 17 ,pdata +0x625d 023716 call msg_send_lmp +0x625e 023717 arg mem_random_number ,contr +0x625f 023718 call memcpy16 +0x6260 023719 fetch 1 ,mem_conn_sm +0x6261 023720 beq conn_sm_auth_wait ,send_lmp_request +0x6262 023721 beq conn_sm_pairing_wait ,send_lmp_request +0x6263 023722 branch send_lmp_tid +: 023724 send_lmp_aurand: +0x6264 023725 fetch 1 ,mem_pairing_auth +0x6265 023726 branch send_lmp_aurand_notpairing ,blank +0x6266 023727 call check_localsm +0x6267 023728 call tid_initiate ,true +0x6268 023729 ncall tid_reply ,true +0x6269 023730 branch send_lmp_aurand_common +: 023731 send_lmp_aurand_notpairing: +0x626a 023732 call tid_initiate +: 023733 send_lmp_aurand_common: +0x626b 023734 call generate_random_number +0x626c 023735 branch send_lmp_rand +: 023737 send_lmp_sres: +0x626d 023738 arg mem_lap ,rega +0x626e 023739 call function_e1 +0x626f 023740 force 5 ,pdata +0x6270 023741 call msg_send_lmp +0x6271 023742 fetch 4 ,mem_input_store +0x6272 023743 istore 4 ,contw +0x6273 023744 arg mem_sres_tid ,temp +0x6274 023745 call special_tid_store +0x6275 023746 call copy_aco +0x6276 023747 call check_localsm +0x6277 023748 branch send_lmp_sres_master ,true +0x6278 023749 jam done_encryp ,mem_wait_encryption +0x6279 023750 fetch 1 ,mem_pairing_auth +0x627a 023751 rtn blank +0x627b 023752 jam lmp_au_rand ,mem_lmo_opcode2 +: 023753 send_lmp_sres_master: +0x627c 023754 fetch 1 ,mem_link_key_exists +0x627d 023755 rtn blank +: 023756 send_lmp_sres_startenc: +0x627e 023757 call check_localsm +0x627f 023758 nbranch send_lmp_sres_startenc_slave ,true +0x6280 023759 fetch 1 ,mem_auth_enable +0x6281 023760 rtn blank +0x6282 023761 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6283 023762 rtn +: 023763 send_lmp_sres_startenc_slave: +0x6284 023764 rtnmark0 mark_slave_in_rand_accepted +0x6285 023765 set0 mark_slave_in_rand_accepted ,mark +0x6286 023766 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6287 023767 rtn +: 023771 send_lmp_start_encryption: +0x6288 023772 call generate_random_number +0x6289 023773 call function_e3 +0x628a 023774 force 17 ,pdata +0x628b 023775 call msg_send_lmp +0x628c 023776 arg mem_random_number ,contr +0x628d 023777 call memcpy16 +0x628e 023778 branch send_lmp_tid +: 023780 send_lmp_stop_encryption_req: +0x628f 023781 force 1 ,pdata +0x6290 023782 call msg_send_lmp +0x6291 023783 branch send_lmp_tid +: 023785 send_lmp_encryption_key_size_req: +0x6292 023786 force 2 ,pdata +0x6293 023787 call msg_send_lmp +0x6294 023788 force 16 ,pdata +0x6295 023789 istore 1 ,contw +0x6296 023790 store 1 ,mem_key_size +0x6297 023791 branch send_lmp_tid +: 023793 msg_send_lmp: +0x6298 023795 lshift3 pdata ,pdata +0x6299 023796 or_into 0x07 ,pdata +0x629a 023797 store 1 ,mem_lmo_header_length +0x629b 023798 arg 17 ,loopcnt +0x629c 023799 arg mem_lmo_payload ,contw +0x629d 023800 call clear_mem +0x629e 023801 arg mem_lmo_payload ,contw +0x629f 023802 rtn +: 023804 send_lmpext: +0x62a0 023805 and pdata ,0x7f ,rega +0x62a1 023806 jam lmp_escape ,mem_lmp_to_send +0x62a2 023807 deposit queue +0x62a3 023808 call msg_send_lmp +0x62a4 023809 deposit rega +0x62a5 023810 istore 1 ,contw +0x62a6 023811 rtn +: 023813 send_lmp_follow: +0x62a7 023814 fetch 1 ,mem_lmp_to_send +0x62a8 023815 lshift pdata ,pdata +0x62a9 023816 fetcht 1 ,mem_state_map +0x62aa 023817 isolate1 smap_lmptid ,temp +0x62ab 023818 setflag true ,0 ,pdata +0x62ac 023819 branch send_lmp_exit +: 023822 send_lmp_tid: +0x62ad 023823 fetcht 1 ,mem_state_map +0x62ae 023824 and_into 1 ,temp +0x62af 023825 branch send_lmp_end +: 023827 send_lmp_reply: +0x62b0 023828 force 0 ,temp +0x62b1 023829 branch send_lmp_end +: 023831 send_lmp_request: +0x62b2 023832 force 1 ,temp +: 023833 send_lmp_end: +0x62b3 023834 fetch 1 ,mem_lmp_to_send +0x62b4 023835 lshift pdata ,pdata +0x62b5 023836 setflag master ,0 ,pdata +0x62b6 023837 ixor temp ,pdata +: 023838 send_lmp_exit: +0x62b7 023839 store 1 ,mem_lmo_header_opcode +0x62b8 023840 jam 0 ,mem_lmp_to_send +0x62b9 023841 call lmo_fifo_process_lmo0empty +0x62ba 023842 enable user +0x62bb 023843 rtn +: 023846 lmo_fifo_check: +0x62bc 023847 fetch 1 ,mem_lmo_opcode2 +0x62bd 023848 rtn blank +0x62be 023849 call lmo_fifo_process +0x62bf 023850 fetch 1 ,mem_lmo_opcode2 +0x62c0 023851 rtn +: 023853 lmo_fifo_process: +0x62c1 023854 bpatchx patch30_6 ,mem_patch30 +0x62c2 023855 fetch 1 ,mem_lmp_to_send +0x62c3 023856 branch lmo_fifo_process_lmo0empty ,blank +0x62c4 023857 fetch 1 ,mem_lmo_opcode1 +0x62c5 023858 nrtn blank +0x62c6 023859 branch lmo_fifo_process_lmo2to1 +: 023860 lmo_fifo_process_lmo0empty: +0x62c7 023861 fetch 1 ,mem_lmo_opcode1 +0x62c8 023862 branch lmo_fifo_process_lmo1_empty ,blank +0x62c9 023863 fetch 3 ,mem_lmo_opcode1 +0x62ca 023864 store 3 ,mem_lmp_to_send +0x62cb 023865 fetcht 1 ,mem_lmo_tid1 +0x62cc 023866 fetch 1 ,mem_state_map +0x62cd 023867 set0 smap_lmptid ,pdata +0x62ce 023868 ior temp ,pdata +0x62cf 023869 store 1 ,mem_state_map +0x62d0 023870 jam 0 ,mem_lmo_opcode1 +: 023871 lmo_fifo_process_lmo2to1: +0x62d1 023872 fetch 1 ,mem_lmo_opcode2 +0x62d2 023873 rtn blank +0x62d3 023874 fetch 4 ,mem_lmo_opcode2 +0x62d4 023875 store 4 ,mem_lmo_opcode1 +0x62d5 023876 jam 0 ,mem_lmo_opcode2 +0x62d6 023877 rtn +: 023878 lmo_fifo_process_lmo1_empty: +0x62d7 023879 fetch 1 ,mem_lmo_opcode2 +0x62d8 023880 rtn blank +0x62d9 023881 fetch 3 ,mem_lmo_opcode2 +0x62da 023882 store 3 ,mem_lmp_to_send +0x62db 023883 fetcht 1 ,mem_lmo_tid2 +0x62dc 023884 fetch 1 ,mem_state_map +0x62dd 023885 set0 smap_lmptid ,pdata +0x62de 023886 ior temp ,pdata +0x62df 023887 store 1 ,mem_state_map +0x62e0 023888 jam 0 ,mem_lmo_opcode2 +0x62e1 023889 rtn +: 023892 special_tid_store: +0x62e2 023893 bpatchx patch30_7 ,mem_patch30 +0x62e3 023894 fetch 1 ,mem_state_map +0x62e4 023895 copy pdata ,regc +0x62e5 023896 ifetch 1 ,temp +0x62e6 023897 call pop_tid_follow +0x62e7 023898 call send_lmp_follow +0x62e8 023899 copy regc ,pdata +0x62e9 023900 store 1 ,mem_state_map +0x62ea 023901 rtn +: 023903 tid_reply: +0x62eb 023904 fetcht 1 ,mem_state_map +0x62ec 023905 set0 smap_lmptidinit ,temp +0x62ed 023906 storet 1 ,mem_state_map +0x62ee 023907 rtn +: 023909 tid_initiate: +0x62ef 023910 fetcht 1 ,mem_state_map +0x62f0 023911 set1 smap_lmptidinit ,temp +0x62f1 023912 storet 1 ,mem_state_map +0x62f2 023913 rtn +: 023916 tid_check: +0x62f3 023917 nsetflag master ,smap_lmptid ,pdata +0x62f4 023918 fetcht 1 ,mem_state_map +0x62f5 023919 ixor temp ,pdata +0x62f6 023920 isolate1 smap_lmptid ,pdata +0x62f7 023921 rtn +: 023924 tid_set_reply: +0x62f8 023925 fetch 1 ,mem_state_map +0x62f9 023926 setflag master ,smap_lmptid ,pdata +0x62fa 023927 store 1 ,mem_state_map +0x62fb 023928 rtn +: 023931 check_localsm: +0x62fc 023932 fetch 1 ,mem_sp_localsm +0x62fd 023933 compare local_statemachine ,pdata ,0x7f +0x62fe 023934 rtn +: 023935 setlocalsm_master: +0x62ff 023936 fetch 1 ,mem_sp_localsm +0x6300 023937 set1 7 ,pdata +0x6301 023938 store 1 ,mem_sp_localsm +0x6302 023939 rtn +: 023940 setlocalsm_slave: +0x6303 023941 fetch 1 ,mem_sp_localsm +0x6304 023942 set0 7 ,pdata +0x6305 023943 store 1 ,mem_sp_localsm +0x6306 023944 rtn +: 023945 check_localsm_master: +0x6307 023946 fetch 1 ,mem_sp_localsm +0x6308 023947 isolate1 7 ,pdata +0x6309 023948 store 1 ,mem_sp_localsm +0x630a 023949 rtn +: 023951 generate_random_number: +0x630b 023953 arg mem_random_number ,contw +: 023954 generate_random: +0x630c 023955 force 16 ,loopcnt +: 023956 generate_random_another: +: 023957 generate_random_loop: +0x630d 023958 random pdata +0x630e 023959 istore 1 ,contw +0x630f 023960 loop generate_random_another +0x6310 023961 rtn +: 023963 generate_linkkey: +0x6311 023964 call function_e21 +0x6312 023965 arg mem_link_key ,rega +0x6313 023966 arg mem_input_store ,regb +0x6314 023967 ifetch 8 ,rega +0x6315 023968 fetcht 1 ,mem_state +0x6316 023969 nsetflag blank ,state_combkey ,temp +0x6317 023970 storet 1 ,mem_state +0x6318 023971 copy rega ,contw +0x6319 023972 call xor16 +0x631a 023973 branch generate_linkkey_continue +: 023979 process_conn_sm: +0x631b 023981 bpatchx patch31_0 ,mem_patch31 +0x631c 023983 call lmo_fifo_check +0x631d 023984 nrtn blank +: 023985 process_conn_sm_continue: +0x631e 023986 fetch 1 ,mem_conn_sm +0x631f 023987 rtn blank +0x6320 023991 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +0x6321 023992 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +0x6322 023993 beq conn_sm_send_features ,host_create_conn_send_features +0x6323 023994 beq conn_sm_wait_features_res ,host_create_conn_waiting +0x6324 023995 beq conn_sm_send_switch ,host_create_conn_send_switch +0x6325 023996 beq conn_sm_auth_pair ,host_create_conn_auth_pair +0x6326 023997 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +0x6327 023998 beq conn_sm_encrypt ,host_create_conn_encrypt +0x6328 023999 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +0x6329 024000 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +0x632a 024001 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +0x632b 024002 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +0x632c 024003 beq conn_sm_detach_delay ,host_create_conn_master_detach +0x632d 024004 beq conn_sm_send_version ,host_create_conn_send_version +0x632e 024005 beq conn_sm_wait_version ,host_create_conn_waiting +0x632f 024006 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +0x6330 024007 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +0x6331 024008 beq conn_sm_wait_features_ext ,host_create_conn_waiting +0x6332 024009 beq conn_sm_pairing ,host_create_conn_pairing +0x6333 024010 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +0x6334 024011 beq conn_sm_auth ,host_create_conn_auth +0x6335 024012 beq conn_sm_auth_wait ,host_create_conn_auth_wait +0x6336 024013 beq conn_sm_done ,host_create_conn_done +0x6337 024014 beq conn_sm_wait_done ,host_create_conn_done_wait +0x6338 024015 jam conn_sm_standby ,mem_conn_sm +0x6339 024017 rtn +: 024018 host_create_conn_done: +0x633a 024019 fetch 1 ,mem_lmp_conn_state +0x633b 024020 rtnbit0 received_setup_complete +0x633c 024021 rtnbit0 sent_setup_complete +0x633d 024022 jam conn_sm_standby ,mem_conn_sm +0x633e 024023 call host_conn_judge_encrypt +0x633f 024024 branch scheduler_start_upper_sm +: 024026 host_conn_judge_encrypt: +0x6340 024027 fetch 1 ,mem_connection_options +0x6341 024028 rtnbit0 connection_encrypt +0x6342 024029 jam conn_sm_encrypt_wait ,mem_conn_sm +0x6343 024030 rtn +: 024032 host_create_conn_done_wait: +0x6344 024033 arg enpt_delay_timer ,queue +0x6345 024034 call timer_check +0x6346 024035 nrtn blank +0x6347 024036 jam conn_sm_done ,mem_conn_sm +0x6348 024037 rtn +: 024039 host_create_conn_auth: +0x6349 024040 fetch 1 ,mem_connection_options +0x634a 024041 set0 connection_auth ,pdata +0x634b 024042 store 1 ,mem_connection_options +0x634c 024043 jam conn_sm_auth_wait ,mem_conn_sm +0x634d 024044 jam lmp_au_rand ,mem_lmo_opcode2 +0x634e 024045 rtn +: 024046 host_create_conn_auth_wait: +0x634f 024047 rtn +: 024048 host_create_conn_pairing: +0x6350 024049 fetch 1 ,mem_pincode_state +0x6351 024050 rtnne pincode_state_pincode_ready +0x6352 024051 call host_auth +0x6353 024052 jam conn_sm_pairing_wait ,mem_conn_sm +0x6354 024053 rtn +: 024055 host_create_conn_pairing_wait: +0x6355 024056 rtn +: 024057 host_creat_conn_send_feat_ext: +0x6356 024058 jam conn_sm_wait_features_ext ,mem_conn_sm +0x6357 024059 jam lmp_ext_features_req ,mem_lmo_opcode2 +0x6358 024060 rtn +: 024061 host_create_conn_send_version: +0x6359 024062 jam conn_sm_wait_version ,mem_conn_sm +0x635a 024063 jam lmp_version_req ,mem_lmo_opcode2 +0x635b 024064 rtn +: 024066 host_creat_conn_wait_switch: +0x635c 024067 fetch 1 ,mem_switch_flag +0x635d 024068 rtneq switch_flag_init +0x635e 024069 beq switch_flag_accept ,host_create_conn_switch_accept +0x635f 024070 arg switch_wait_timer ,queue +0x6360 024071 call timer_check +0x6361 024072 nrtn blank +0x6362 024073 jam switch_flag_init ,mem_switch_flag +0x6363 024074 branch host_create_conn_switch +: 024075 host_create_conn_switch_accept: +0x6364 024076 rtn master +0x6365 024077 branch host_create_conn_auth_pair +: 024079 host_create_conn_send_features: +0x6366 024080 jam conn_sm_wait_features_res ,mem_conn_sm +0x6367 024081 jam lmp_features_req ,mem_lmo_opcode2 +0x6368 024082 rtn +: 024083 host_create_conn_send_switch: +0x6369 024084 jam lmp_switch_req ,mem_lmo_opcode2 +0x636a 024085 set1 mark_switch_initiated ,mark +0x636b 024086 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x636c 024087 setarg 0x1ff +0x636d 024088 store 2 ,mem_soft_timer +0x636e 024089 rtn +: 024090 host_create_conn_send_conn_req: +0x636f 024091 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x6370 024092 jam 0xff ,mem_soft_timer +0x6371 024093 set0 mark_reconn_recieve_switch ,mark +0x6372 024094 jam lmp_host_connection_req ,mem_lmo_opcode2 +0x6373 024095 branch init_lmp_reinit +: 024096 host_create_conn_wait_accept: +0x6374 024097 rtnmark1 mark_reconn_recieve_switch +0x6375 024098 fetch 2 ,mem_soft_timer +0x6376 024099 sub pdata ,1 ,pdata +0x6377 024100 branch host_create_conn_resend ,zero +0x6378 024101 store 2 ,mem_soft_timer +0x6379 024102 rtn +: 024103 host_create_conn_resend: +0x637a 024104 jam conn_sm_send_switch ,mem_conn_sm +0x637b 024105 rtn +: 024106 host_create_conn_waiting: +0x637c 024108 rtn +: 024110 host_create_conn_switch: +0x637d 024111 fetch 1 ,mem_lmp_conn_state +0x637e 024112 rtnbit0 sent_setup_complete +0x637f 024113 rtnbit0 received_setup_complete +0x6380 024114 fetch 1 ,mem_connection_options +0x6381 024115 set0 connection_switch ,pdata +0x6382 024116 store 1 ,mem_connection_options +0x6383 024117 jam lmp_switch_req ,mem_lmo_opcode2 +0x6384 024118 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +0x6385 024119 rtn +: 024121 host_create_conn_send_setup_complete: +0x6386 024122 jam conn_sm_wait_setup_complete ,mem_conn_sm +0x6387 024123 jam lmp_setup_complete ,mem_lmo_opcode2 +0x6388 024124 rtn +: 024126 host_create_conn_wait_setup_complete: +0x6389 024127 fetch 1 ,mem_lmp_conn_state +0x638a 024128 rtnbit0 received_setup_complete +0x638b 024129 jam conn_sm_standby ,mem_conn_sm +0x638c 024131 rtn +: 024132 host_create_conn_wait_setup_complete_rtn: +0x638d 024133 jam conn_sm_auth_pair ,mem_conn_sm +0x638e 024134 rtn +: 024136 host_create_conn_master_detach: +0x638f 024137 fetch 1 ,mem_soft_timer +0x6390 024138 increase -1 ,pdata +0x6391 024139 branch host_create_conn_send_detach ,blank +0x6392 024140 store 1 ,mem_soft_timer +0x6393 024141 rtn +: 024142 host_create_conn_send_detach: +0x6394 024143 jam lmp_detach ,mem_lmo_opcode2 +0x6395 024144 jam local_host ,mem_disconn_reason_send +0x6396 024145 jam 0 ,mem_conn_sm +0x6397 024146 rtn +: 024147 host_create_conn_auth_pair: +0x6398 024149 fetch 1 ,mem_connection_options +0x6399 024150 bbit1 connection_switch ,host_create_conn_switch +0x639a 024151 bbit1 connection_auth ,host_create_conn_auth_pair_true +: 024152 host_create_conn_sm_done: +0x639b 024153 jam conn_sm_done ,mem_conn_sm +0x639c 024154 rtn +: 024155 host_create_conn_auth_pair_true: +0x639d 024156 fetch 1 ,mem_link_key_exists +0x639e 024157 branch host_create_conn_auth_pair_nokey ,blank +0x639f 024158 fetch 1 ,mem_lmp_conn_state +0x63a0 024159 rtnbit0 sent_setup_complete +0x63a1 024160 rtnbit0 received_setup_complete +0x63a2 024161 fetch 4 ,mem_aurand_send_delay_time +0x63a3 024162 arg 100 ,temp +0x63a4 024163 iadd temp ,temp +0x63a5 024164 copy clkn_bt ,pdata +0x63a6 024165 isub temp ,null +0x63a7 024166 nrtn positive +0x63a8 024167 branch host_create_conn_auth +: 024171 host_create_conn_auth_pair_nokey: +0x63a9 024172 jam conn_sm_pairing ,mem_conn_sm +0x63aa 024173 jam 4 ,mem_pin_length +0x63ab 024174 setarg 0x3030 +0x63ac 024175 store 2 ,mem_pin +0x63ad 024176 istore 2 ,contw +0x63ae 024177 jam pincode_state_pincode_ready ,mem_pincode_state +0x63af 024178 branch host_create_conn_pairing +: 024180 host_create_conn_auth_pair_wait: +0x63b0 024181 rtn +: 024182 host_create_conn_encrypt: +0x63b1 024183 fetch 1 ,mem_connection_options +0x63b2 024184 bbit1 connection_encrypt ,host_create_conn_encrypt_start +0x63b3 024185 jam conn_sm_done ,mem_conn_sm +0x63b4 024186 rtn +: 024188 host_create_conn_encrypt_start: +0x63b5 024189 fetch 1 ,mem_connection_options +0x63b6 024190 set0 connection_encrypt ,pdata +0x63b7 024191 store 1 ,mem_connection_options +0x63b8 024192 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x63b9 024193 rtn +: 024195 host_create_conn_encrypt_wait: +0x63ba 024196 fetch 1 ,mem_wait_encryption +0x63bb 024197 rtn blank +0x63bc 024198 jam conn_sm_standby ,mem_conn_sm +0x63bd 024199 branch host_create_conn_encrypt_start +: 024201 host_create_conn_encrypt_wait_clear: +0x63be 024202 jam conn_sm_send_setup_complete ,mem_conn_sm +0x63bf 024203 rtn +: 024205 host_auth: +0x63c0 024206 fetch 1 ,mem_op +0x63c1 024207 bbit1 op_inrand_req ,remote_auth +0x63c2 024208 call tid_initiate +0x63c3 024209 jam lmp_in_rand ,mem_lmo_opcode2 +0x63c4 024210 branch cmd_exit +: 024211 remote_auth: +0x63c5 024212 fetch 1 ,mem_op +0x63c6 024213 set0 op_inrand_req ,pdata +0x63c7 024214 store 1 ,mem_op +0x63c8 024215 call lmp_accept_inrand +0x63c9 024216 call tid_set_reply +0x63ca 024217 branch cmd_exit +: 024219 pincode_reinit: +0x63cb 024220 setarg 4 +0x63cc 024221 store 1 ,mem_pin_length +0x63cd 024222 setarg 0x3030 +0x63ce 024223 istore 2 ,contw +0x63cf 024224 istore 2 ,contw +0x63d0 024225 rtn +: 024231 twspi_reset: +0x63d1 024232 bpatchx patch31_4 ,mem_patch31 +0x63d2 024233 hfetch 1 ,core_gpio_oe3 +0x63d3 024234 arg 0x06 ,temp +0x63d4 024235 ior temp ,pdata +0x63d5 024236 hstore 1 ,core_gpio_oe3 +0x63d6 024237 hfetch 1 ,core_gpio_out3 +0x63d7 024238 ior temp ,pdata +0x63d8 024239 hstore 1 ,core_gpio_out3 +0x63d9 024240 call twspi_disable +0x63da 024241 hfetch 1 ,core_gpio_out3 +0x63db 024242 set0 1 ,pdata +0x63dc 024243 set0 2 ,pdata +0x63dd 024244 hstore 1 ,core_gpio_out3 +0x63de 024245 nop 30 +0x63df 024246 branch twspi_enable +: 024248 twspi_reset2: +0x63e0 024249 hfetch 1 ,core_gpio_oe3 +0x63e1 024250 arg 0xc0 ,temp +0x63e2 024251 ior temp ,pdata +0x63e3 024252 hstore 1 ,core_gpio_oe3 +0x63e4 024253 hfetch 1 ,core_gpio_out3 +0x63e5 024254 ior temp ,pdata +0x63e6 024255 hstore 1 ,core_gpio_out3 +0x63e7 024256 call twspi_disable +0x63e8 024257 hfetch 1 ,core_gpio_out3 +0x63e9 024258 set0 6 ,pdata +0x63ea 024259 set0 7 ,pdata +0x63eb 024260 hstore 1 ,core_gpio_out3 +0x63ec 024261 nop 30 +0x63ed 024262 branch twspi_enable2 +: 024264 twspi_disable: +0x63ee 024265 hfetch 1 ,core_gpio_sel1 +0x63ef 024266 and pdata ,0xfc ,pdata +0x63f0 024267 hstore 1 ,core_gpio_sel1 +0x63f1 024268 rtn +: 024269 twspi_enable: +0x63f2 024270 hfetch 1 ,core_gpio_sel1 +0x63f3 024271 or pdata ,0x01 ,pdata +0x63f4 024272 hstore 1 ,core_gpio_sel1 +0x63f5 024273 rtn +: 024274 twspi_enable2: +0x63f6 024275 hfetch 1 ,core_gpio_sel1 +0x63f7 024276 or pdata ,0x03 ,pdata +0x63f8 024277 set0 4 ,pdata +0x63f9 024278 hstore 1 ,core_gpio_sel1 +0x63fa 024279 rtn +: 024283 sensor_read: +0x63fb 024284 copy pdata ,regb +0x63fc 024285 call spi_ncs_enable +0x63fd 024286 nop 100 +0x63fe 024287 copy regb ,pdata +0x63ff 024288 call twspi_read +0x6400 024289 copy pdata ,regb +0x6401 024290 call spi_ncs_disable +0x6402 024291 nop 100 +0x6403 024292 copy regb ,pdata +0x6404 024293 rtn +: 024295 sensor_write: +0x6405 024296 copy pdata ,regb +0x6406 024297 call spi_ncs_enable +0x6407 024298 nop 100 +0x6408 024299 copy regb ,pdata +0x6409 024300 call twspi_write +0x640a 024301 call spi_ncs_disable +0x640b 024302 nop 100 +0x640c 024303 rtn +: 024306 spi_ncs_gpio_init: +0x640d 024307 fetcht 1 ,mem_spi_ncs_gpio +0x640e 024308 branch gpio_config_output +: 024311 spi_ncs_enable: +0x640f 024312 fetcht 1 ,mem_spi_ncs_gpio +0x6410 024313 branch gpio_out_active +: 024316 spi_ncs_disable: +0x6411 024317 fetcht 1 ,mem_spi_ncs_gpio +0x6412 024318 branch gpio_out_inactive +: 024321 twspi_write: +0x6413 024322 branch spid_write_reg +: 024324 twspi_read: +0x6414 024325 branch spid_read_reg +: 024332 read_function_aes: +0x6415 024333 nbranch read_function ,user +0x6416 024334 hfetch 1 ,core_gpio_key2 +0x6417 024335 or_into 0x2 ,pdata +0x6418 024336 hstore 1 ,core_gpio_key2 +: 024337 read_function: +0x6419 024338 copy temp ,null +0x641a 024339 branch read_fuction_zero ,zero +0x641b 024340 copy regc ,pc +: 024341 read_fuction_zero: +0x641c 024342 isolate0 0 ,null +0x641d 024343 branch set_ucode_status +: 024346 get_block_header: +0x641e 024347 force 4 ,temp +: 024348 get_block_header0: +0x641f 024349 arg mem_ucode_buf ,rega +0x6420 024350 hfetch 1 ,core_gpio_key2 +0x6421 024351 and_into 0xfd ,pdata +0x6422 024352 hstore 1 ,core_gpio_key2 +0x6423 024353 call read_function +0x6424 024354 arg 0x55aa ,rega +0x6425 024355 fetch 2 ,mem_ucode_buf +0x6426 024356 ifetcht 2 ,contr +0x6427 024357 isub rega ,null +0x6428 024358 rtn +: 024360 read_first_block: +0x6429 024361 arg 2 ,temp +0x642a 024362 arg mem_ucode_ptr ,rega +0x642b 024363 call read_function +0x642c 024364 fetch 2 ,mem_ucode_ptr +0x642d 024365 store 2 ,mem_addr_mi +0x642e 024366 call get_iv ,user +0x642f 024367 rtn +: 024369 get_iv: +0x6430 024370 arg 16 ,temp +0x6431 024371 arg mem_ucode_keybuf ,rega +0x6432 024372 hfetch 1 ,core_gpio_key2 +0x6433 024373 and_into 0xfd ,pdata +0x6434 024374 hstore 1 ,core_gpio_key2 +0x6435 024375 call read_function +0x6436 024376 arg mem_ucode_keybuf ,contr +0x6437 024377 arg 16 ,loopcnt +0x6438 024378 call aes_load_data +0x6439 024379 call aes_init +0x643a 024380 call aes_clear_data +0x643b 024381 branch do_aes_cbc +: 024383 load_storage: +0x643c 024384 disable match +0x643d 024385 call get_block_header +0x643e 024386 nrtn zero +0x643f 024387 enable match +0x6440 024388 hjam 0x80 ,core_ucode_ctrl +0x6441 024389 hjam 0 ,core_ucode_hi +0x6442 024390 hjam 0 ,core_ucode_low +0x6443 024391 arg core_ucode_data ,rega +0x6444 024392 call read_function_aes +0x6445 024393 hjam 0x0 ,core_ucode_ctrl +: 024394 load_storage_loop: +0x6446 024395 arg 6 ,temp +0x6447 024396 call get_block_header0 +0x6448 024397 nrtn zero +0x6449 024398 ifetch 2 ,contr +0x644a 024399 iforce rega +0x644b 024400 call read_function +0x644c 024401 branch load_storage_loop +: 024405 reload_eeprom: +0x644d 024406 call clean_mem +0x644e 024407 setarg 0x1000 +0x644f 024408 store 2 ,mem_addr_mi +0x6450 024409 arg iicd_read_eep ,regc +0x6451 024410 arg 2 ,loopcnt +: 024411 reload_eeprom_loop: +0x6452 024412 call get_block_header +0x6453 024413 nrtn zero +0x6454 024414 fetch 2 ,mem_addr_mi +0x6455 024415 byteswap pdata ,pdata +0x6456 024416 iadd temp ,pdata +0x6457 024417 byteswap pdata ,pdata +0x6458 024418 store 2 ,mem_addr_mi +0x6459 024419 loop reload_eeprom_loop +0x645a 024420 branch load_storage_loop +: 024422 loadcode: +0x645b 024423 call clean_mem +0x645c 024424 disable user +0x645d 024425 call otp_enable_chgpump +0x645e 024426 setarg otp_ucode_flag +0x645f 024427 arg mem_otp_ucode_flag ,rega +0x6460 024428 arg 2 ,temp +0x6461 024429 call otpd_read_data +0x6462 024430 fetch 2 ,mem_otp_ucode_flag +0x6463 024431 bbit0 otp_uflag_aes ,loadcode_otp +0x6464 024432 hjam 0x25 ,core_clkoff +0x6465 024433 setarg otp_ucode_aeskey +0x6466 024434 arg mem_ucode_keybuf ,rega +0x6467 024435 arg 16 ,temp +0x6468 024436 call otpd_read_data +0x6469 024437 hjam lock_otp ,core_misc_ctrl +0x646a 024438 set1 mark_otp_encrypt ,mark +0x646b 024439 arg mem_ucode_keybuf ,contr +0x646c 024440 call load_key +0x646d 024441 enable user +: 024442 loadcode_otp: +0x646e 024443 jam 0 ,mem_loadcode_times +: 024444 loadcode_otp_2: +0x646f 024445 call loadcode_check_times +0x6470 024446 fetch 2 ,mem_otp_ucode_flag +0x6471 024447 byteswap pdata ,pdata +0x6472 024448 arg 0x7ff ,temp +0x6473 024449 iand temp ,pdata +0x6474 024450 branch loadcode_iic ,zero +0x6475 024451 call otp_set_addr +0x6476 024452 arg otpd_read_code ,regc +0x6477 024453 call get_iv ,user +0x6478 024454 call load_storage +0x6479 024455 fetch 1 ,mem_ucode_status +0x647a 024456 bbit0 0 ,loadcode_otp_2 +: 024458 loadcode_iic: +0x647b 024459 call otp_disable_chgpump +0x647c 024460 jam 0 ,mem_loadcode_times +: 024461 loadcode_iic_2: +0x647d 024462 call loadcode_check_times +0x647e 024463 call clear_eeprom_size_2k +0x647f 024464 fetch 1 ,mem_otp_ucode_flag +0x6480 024465 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6481 024466 call loadcode_iic_by_eeprom +0x6482 024467 nbranch loadcode_iic_eeprom_2k ,match +0x6483 024468 fetch 1 ,mem_ucode_status +0x6484 024469 bbit0 0 ,loadcode_iic_2 +0x6485 024470 branch loadcode_hci +: 024471 loadcode_iic_eeprom_2k: +0x6486 024472 call set_eeprom_size_2k +0x6487 024473 fetch 1 ,mem_otp_ucode_flag +0x6488 024474 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6489 024475 call loadcode_iic_by_eeprom +0x648a 024476 nbranch loadcode_spi ,match +0x648b 024477 fetch 1 ,mem_ucode_status +0x648c 024478 bbit0 0 ,loadcode_iic_2 +0x648d 024479 branch loadcode_hci +: 024481 loadcode_spi: +0x648e 024482 jam 0 ,mem_loadcode_times +: 024483 loadcode_spi_2: +0x648f 024484 call loadcode_check_times +0x6490 024485 fetch 1 ,mem_otp_ucode_flag +0x6491 024486 bbit1 otp_uflag_skip_flash ,loadcode_hci +0x6492 024487 setarg 0x0 +0x6493 024488 store 3 ,mem_addr_hi +0x6494 024489 call spid_init_flash +0x6495 024490 arg spid_load_flash ,regc +0x6496 024491 call read_first_block +0x6497 024492 call load_storage +0x6498 024493 nbranch loadcode_hci ,match +0x6499 024494 fetch 1 ,mem_ucode_status +0x649a 024495 bbit0 0 ,loadcode_spi_2 +: 024497 loadcode_hci: +0x649b 024498 bmark1 mark_otp_encrypt ,loadcode_hci_enc +0x649c 024499 call clear_key_buf +: 024500 loadcode_hci_enc: +0x649d 024501 fetch 1 ,mem_otp_ucode_flag +0x649e 024502 bbit0 otp_uflag_hci ,clear_key_buf +0x649f 024503 hjam 0x21 ,core_clkoff +0x64a0 024504 call hci_init +: 024505 loadcode_hci_loop: +0x64a1 024506 call hci_rx_packet +0x64a2 024507 branch loadcode_hci_loop +: 024509 clear_key_buf: +0x64a3 024510 setarg 0 +0x64a4 024511 store 8 ,mem_ucode_keybuf +0x64a5 024512 store 8 ,mem_ucode_keybuf + 8 +0x64a6 024513 force regidx_key ,regext_index +0x64a7 024514 call aes_clear +0x64a8 024515 hjam 0x21 ,core_clkoff +0x64a9 024516 rtn +: 024519 loadcode_iic_by_eeprom: +0x64aa 024520 setarg 0x0 +0x64ab 024521 store 2 ,mem_addr_mi +0x64ac 024522 arg iicd_read_eep ,regc +0x64ad 024523 call iicd_init_12m +0x64ae 024524 call read_first_block +0x64af 024525 branch load_storage +: 024528 loadcode_check_times: +0x64b0 024529 fetch 1 ,mem_loadcode_times +0x64b1 024530 increase 1 ,pdata +0x64b2 024531 sub pdata ,3 ,null +0x64b3 024532 nbranch loadcode_error ,positive +0x64b4 024533 store 1 ,mem_loadcode_times +0x64b5 024534 rtn +: 024536 loadcode_error: +0x64b6 024537 call clear_key_buf +0x64b7 024538 call ice_break +0x64b8 024539 rtn +: 024543 set_ucode_status: +0x64b9 024544 fetch 1 ,mem_ucode_status +0x64ba 024545 lshift pdata ,pdata +0x64bb 024546 setflag true ,0 ,pdata +0x64bc 024547 isolate0 15 ,rega +0x64bd 024548 rtn true +0x64be 024549 store 1 ,mem_ucode_status +0x64bf 024550 rtn +: 024553 decrypt_code: +0x64c0 024554 hfetch 1 ,core_gpio_key2 +0x64c1 024555 rtnbit0 1 +0x64c2 024556 branch decrypt_code_skip +: 024557 decrypt_code_loop: +0x64c3 024558 hfetch 1 ,core_dma_status +0x64c4 024559 qisolate1 pdata +0x64c5 024560 rtn true +: 024561 decrypt_code_skip: +0x64c6 024562 hfetch 1 ,core_misc_status +0x64c7 024563 bbit0 1 ,decrypt_code_loop +0x64c8 024564 call do_aes_cbc +0x64c9 024565 branch decrypt_code_loop +: 024569 load_ucode: +0x64ca 024570 fetch 2 ,mem_patch_ptr +0x64cb 024571 rtn blank +0x64cc 024572 hjam 0x80 ,core_ucode_ctrl +0x64cd 024573 hjam 0 ,core_ucode_hi +0x64ce 024574 hjam 0 ,core_ucode_low +0x64cf 024575 fetcht 2 ,mem_patch_len +0x64d0 024576 lshift2 temp ,loopcnt +0x64d1 024577 iforce contr +: 024578 load_ucode_loop: +0x64d2 024579 ifetch 1 ,contr +0x64d3 024580 hstore 1 ,core_ucode_data +0x64d4 024581 loop load_ucode_loop +0x64d5 024582 hjam 0x0 ,core_ucode_ctrl +0x64d6 024583 rtn +: 024588 spid_init: +0x64d7 024589 bpatchx patch31_5 ,mem_patch31 +0x64d8 024590 call spid_init_common +0x64d9 024591 branch twspi_enable +: 024593 spid_init2: +0x64da 024594 call spid_init_common +0x64db 024595 call twspi_disable +0x64dc 024596 branch twspi_enable2 +: 024598 spid_init_common: +0x64dd 024599 fetch 1 ,mem_spi_init_clk +0x64de 024600 hstore 1 ,core_spid_ctrl +0x64df 024601 fetch 1 ,mem_spi_init_delay_time +0x64e0 024602 hstore 1 ,core_spid_delay +0x64e1 024603 setarg mem_spid_tbuf +0x64e2 024604 hstore 2 ,core_spid_txaddr +0x64e3 024605 setarg mem_spid_rbuf +0x64e4 024606 hstore 2 ,core_spid_rxaddr +0x64e5 024607 branch twspi_disable +: 024609 spid_reset: +0x64e6 024610 hfetch 1 ,core_spid_ctrl +0x64e7 024611 set1 7 ,pdata +0x64e8 024612 hstore 1 ,core_spid_ctrl +0x64e9 024613 set0 7 ,pdata +0x64ea 024614 hstore 1 ,core_spid_ctrl +0x64eb 024615 rtn +: 024619 spid_write_reg: +0x64ec 024620 set1 7 ,pdata +0x64ed 024621 store 2 ,mem_spid_tbuf +0x64ee 024622 bpatchx patch31_6 ,mem_patch31 +0x64ef 024623 hjam 2 ,core_spid_txlen +0x64f0 024624 hjam 0 ,core_spid_rxlen +0x64f1 024625 hjam spid_start ,core_misc_ctrl +0x64f2 024626 branch wait_spid_done +: 024629 spid_read_reg: +0x64f3 024630 force 1 ,temp +: 024632 spid_read_regs: +0x64f4 024634 store 1 ,mem_spid_tbuf +0x64f5 024635 bpatchx patch31_7 ,mem_patch31 +0x64f6 024636 hjam 1 ,core_spid_txlen +0x64f7 024637 hstoret 2 ,core_spid_rxlen +0x64f8 024638 hjam spid_start ,core_misc_ctrl +0x64f9 024639 call wait_spid_done +0x64fa 024640 fetch 1 ,mem_spid_rbuf +0x64fb 024641 rtn +: 024643 wait_spid_done: +0x64fc 024644 fetch 2 ,mem_afh_error_total +0x64fd 024645 increase 1 ,pdata +0x64fe 024646 store 2 ,mem_afh_error_total +0x64ff 024647 hfetch 1 ,core_dma_status +0x6500 024648 bbit0 spid_done ,wait_spid_done +0x6501 024649 rtn +: 024651 spid_init_flash: +0x6502 024652 hjam 0x40 ,core_spid_ctrl +0x6503 024653 hjam 0x0 ,core_spid_delay +0x6504 024654 hfetch 1 ,core_gpio_sel1 +0x6505 024655 set0 0 ,pdata +0x6506 024656 set1 1 ,pdata +0x6507 024657 hstore 1 ,core_gpio_sel1 +0x6508 024658 setarg 0 +0x6509 024659 store 4 ,mem_spid_tbuf +0x650a 024660 rtn +: 024663 spid_unlock_flash: +0x650b 024664 setarg 0 +0x650c 024665 hstore 2 ,core_spid_rxlen +0x650d 024666 setarg 1 +0x650e 024667 hstore 2 ,core_spid_txlen +0x650f 024668 setarg mem_spid_tbuf +0x6510 024669 hstore 2 ,core_spid_txaddr +0x6511 024670 jam 6 ,mem_spid_tbuf +0x6512 024671 hjam spid_start ,core_misc_ctrl +0x6513 024672 branch wait_spid_done +: 024687 flash_write: +0x6514 024688 disable user +0x6515 024689 copy pdata ,regb +0x6516 024690 fetch 1 ,mem_spi_write_flash_sm +0x6517 024691 rtnne flash_sm_no_buys +0x6518 024692 enable user +0x6519 024693 copy regb ,pdata +0x651a 024694 branch flash_write_start +: 024697 flash_write_spi_sm_timer: +0x651b 024698 fetch 1 ,mem_spi_write_flash_sm +0x651c 024699 beq flash_sm_start ,flash_write_start +0x651d 024700 beq flash_sm_erase_sector ,flash_erase_sector +0x651e 024701 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector +0x651f 024702 beq flash_sm_write_data ,flash_write_data +0x6520 024703 beq flash_sm_wait_write_data ,flash_wait_write_data +0x6521 024704 rtn +: 024706 flash_write_start: +0x6522 024707 store 3 ,mem_spi_write_addr +0x6523 024708 copy rega ,pdata +0x6524 024709 store 2 ,mem_spi_write_ptr +0x6525 024710 storet 2 ,mem_spi_write_len +0x6526 024711 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +0x6527 024712 branch spid_init_flash +: 024713 flash_erase_sector: +0x6528 024714 call spid_init_flash +0x6529 024715 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +0x652a 024716 call spid_unlock_flash +0x652b 024717 arg mem_spid_tbuf ,rega +0x652c 024718 fetch 3 ,mem_spi_write_addr +0x652d 024719 hjam 4 ,core_spid_txlen +0x652e 024720 arg flash_command_sector_erase ,temp +0x652f 024721 branch spid_write_flash_common +: 024723 flash_wait_erase_sector: +0x6530 024724 call spid_init_flash +0x6531 024725 call spid_unlock_flash +0x6532 024726 setarg flash_read_satus +0x6533 024727 call spid_read_reg +0x6534 024728 rtnbit1 flash_status_wip +0x6535 024729 jam flash_sm_write_data ,mem_spi_write_flash_sm +0x6536 024730 rtn +: 024731 flash_write_data: +0x6537 024732 call spid_init_flash +0x6538 024733 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +0x6539 024734 call spid_unlock_flash +0x653a 024735 call flash_data_preserve +0x653b 024736 call spid_write_flash +0x653c 024737 branch flash_data_recover +: 024738 flash_wait_write_data: +0x653d 024739 call spid_init_flash +0x653e 024740 call spid_unlock_flash +0x653f 024741 setarg flash_read_satus +0x6540 024742 call spid_read_reg +0x6541 024743 rtnbit1 flash_status_wip +0x6542 024744 jam flash_sm_no_buys ,mem_spi_write_flash_sm +0x6543 024745 fetch 2 ,mem_cb_spi_flash_write_complate +0x6544 024746 branch callback_func +: 024747 flash_data_recover: +0x6545 024748 fetch 4 ,mem_temp +0x6546 024749 fetcht 2 ,mem_spi_write_ptr +0x6547 024750 increase -4 ,temp +0x6548 024751 istore 4 ,temp +0x6549 024752 rtn +: 024753 flash_data_preserve: +0x654a 024754 fetcht 2 ,mem_spi_write_ptr +0x654b 024755 copy temp ,rega +0x654c 024756 increase -4 ,temp +0x654d 024757 ifetch 4 ,temp +0x654e 024758 store 4 ,mem_temp +0x654f 024759 fetcht 2 ,mem_spi_write_len +0x6550 024760 fetch 3 ,mem_spi_write_addr +0x6551 024761 rtn +: 024765 spid_write_flash: +0x6552 024766 increase 4 ,temp +0x6553 024767 hstoret 2 ,core_spid_txlen +0x6554 024768 arg flash_command_write_data ,temp +0x6555 024769 increase -4 ,rega +: 024770 spid_write_flash_common: +0x6556 024772 istoret 1 ,rega +0x6557 024773 rshift16 pdata ,temp +0x6558 024774 istoret 1 ,contw +0x6559 024775 rshift8 pdata ,temp +0x655a 024776 istoret 1 ,contw +0x655b 024777 istore 1 ,contw +0x655c 024778 deposit rega +0x655d 024779 hstore 2 ,core_spid_txaddr +0x655e 024780 setarg 0 +0x655f 024781 hstore 2 ,core_spid_rxlen +0x6560 024782 hjam spid_start ,core_misc_ctrl +0x6561 024783 branch wait_spid_done +: 024787 spid_read_flash: +0x6562 024788 hstoret 2 ,core_spid_rxlen +0x6563 024789 rshift16 pdata ,temp +0x6564 024790 storet 1 ,mem_addr_hi +0x6565 024791 rshift8 pdata ,temp +0x6566 024792 storet 1 ,mem_addr_mi +0x6567 024793 store 1 ,mem_addr_lo +0x6568 024794 setarg 4 +0x6569 024795 hstore 2 ,core_spid_txlen +0x656a 024796 jam flash_command_read_data ,mem_spid_tbuf +0x656b 024797 setarg mem_spid_tbuf +0x656c 024798 hstore 2 ,core_spid_txaddr +0x656d 024799 deposit rega +0x656e 024800 hstore 2 ,core_spid_rxaddr +0x656f 024801 hfetch 1 ,core_spid_ctrl +0x6570 024802 isolate0 15 ,rega +0x6571 024803 setflag true ,6 ,pdata +0x6572 024804 hstore 1 ,core_spid_ctrl +0x6573 024805 hjam spid_start ,core_misc_ctrl +: 024806 spi_read_flash_wait: +0x6574 024807 hfetch 1 ,core_dma_status +0x6575 024808 bbit1 7 ,spi_read_flash_wait +0x6576 024809 arg spid_done ,queue +0x6577 024810 branch wait_spid_done +: 024814 spid_load_flash: +0x6578 024815 hstoret 2 ,core_spid_rxlen +0x6579 024816 setarg 4 +0x657a 024817 hstore 2 ,core_spid_txlen +0x657b 024818 jam 3 ,mem_spid_tbuf +0x657c 024819 setarg mem_spid_tbuf +0x657d 024820 hstore 2 ,core_spid_txaddr +0x657e 024821 deposit rega +0x657f 024822 hstore 2 ,core_spid_rxaddr +0x6580 024823 hfetch 1 ,core_spid_ctrl +0x6581 024824 isolate0 15 ,rega +0x6582 024825 setflag true ,6 ,pdata +0x6583 024826 hstore 1 ,core_spid_ctrl +0x6584 024827 hjam spid_start ,core_misc_ctrl +: 024828 spi_load_flash_wait: +0x6585 024829 hfetch 1 ,core_dma_status +0x6586 024830 bbit1 7 ,spi_load_flash_wait +0x6587 024831 arg spid_done ,queue +0x6588 024832 call decrypt_code +0x6589 024833 call wait_spid_done +0x658a 024834 isolate1 spid_crcok ,pdata +0x658b 024835 call set_ucode_status +0x658c 024836 fetch 1 ,mem_addr_hi +0x658d 024837 lshift16 pdata ,regb +0x658e 024838 fetch 1 ,mem_addr_mi +0x658f 024839 lshift8 pdata ,pdata +0x6590 024840 ior regb ,regb +0x6591 024841 fetch 1 ,mem_addr_lo +0x6592 024842 ior regb ,pdata +0x6593 024843 iadd temp ,pdata +0x6594 024844 store 1 ,mem_addr_lo +0x6595 024845 rshift8 pdata ,pdata +0x6596 024846 store 1 ,mem_addr_mi +0x6597 024847 rshift8 pdata ,pdata +0x6598 024848 store 1 ,mem_addr_hi +0x6599 024849 rtn +: 024854 soft_reset_chip: +0x659a 024855 hjam 1 ,core_reset +0x659b 024856 rtn +: 024862 iic_init_390k: +0x659c 024863 hjam 12 ,core_iicd_scl_low +0x659d 024864 hjam 13 ,core_iicd_scl_high +0x659e 024865 hjam 13 ,core_iicd_start_setup +0x659f 024866 hjam 13 ,core_iicd_start_hold +0x65a0 024867 hjam 13 ,core_iicd_stop_setup +0x65a1 024868 hjam 12 ,core_iicd_data_setup +0x65a2 024869 branch iicd_init_gpio +: 024872 iicd_init_12m: +0x65a3 024873 hjam 5 ,core_iicd_scl_low +0x65a4 024874 hjam 7 ,core_iicd_scl_high +0x65a5 024875 hjam 7 ,core_iicd_start_setup +0x65a6 024876 hjam 7 ,core_iicd_start_hold +0x65a7 024877 hjam 7 ,core_iicd_stop_setup +0x65a8 024878 hjam 5 ,core_iicd_data_setup +: 024879 iicd_init_gpio: +0x65a9 024880 hfetch 1 ,core_gpio_pu3 +0x65aa 024881 or_into 0xc0 ,pdata +0x65ab 024882 hstore 1 ,core_gpio_pu3 +0x65ac 024883 hfetch 1 ,core_gpio_sel1 +0x65ad 024884 or_into 0x10 ,pdata +0x65ae 024885 hstore 1 ,core_gpio_sel1 +0x65af 024886 rtn +: 024890 wait_iicd_done: +0x65b0 024891 hfetch 1 ,core_dma_status +0x65b1 024892 bbit0 iicd_done ,wait_iicd_done +0x65b2 024893 rtn +: 024901 iicd_read_data: +0x65b3 024902 hstore 2 ,core_iicd_txlen +0x65b4 024903 deposit rega +0x65b5 024904 hstore 2 ,core_iicd_txaddr +0x65b6 024905 deposit regb +0x65b7 024906 hstore 2 ,core_iicd_rxaddr +0x65b8 024907 deposit temp +0x65b9 024908 hstore 2 ,core_iicd_rxlen +0x65ba 024909 arg 1 ,temp +0x65bb 024910 nsetflag blank ,1 ,temp +0x65bc 024911 hstore 1 ,core_iicd_ctrl +0x65bd 024912 hjam iicd_start ,core_misc_ctrl +0x65be 024913 branch wait_iicd_done +: 024916 set_eeprom_size_2k: +0x65bf 024917 set1 mark_eeprom_size ,mark +0x65c0 024918 jam 0x08 ,mem_eeprom_block_size +0x65c1 024919 rtn +: 024921 clear_eeprom_size_2k: +0x65c2 024922 set0 mark_eeprom_size ,mark +0x65c3 024923 jam 0x20 ,mem_eeprom_block_size +0x65c4 024924 rtn +: 024927 iicd_read_eep_data_size_2k: +0x65c5 024928 fetch 1 ,mem_eeprom_base +0x65c6 024929 iadd regb ,pdata +0x65c7 024930 store 1 ,mem_addr_mi +0x65c8 024931 branch iicd_read_eep_size_2k +: 024933 iicd_read_eep_size_2k_lcadcode: +0x65c9 024934 fetch 2 ,mem_addr_mi +0x65ca 024935 byteswap pdata ,pdata +0x65cb 024936 store 1 ,mem_addr_mi +: 024941 iicd_read_eep_size_2k: +0x65cc 024942 setarg 3 +0x65cd 024943 hstore 2 ,core_iicd_txlen +0x65ce 024944 jam 0xa0 ,mem_iicd_tbuf +0x65cf 024945 jam 0xa1 ,mem_iicd_tbuf + 2 +0x65d0 024946 branch iicd_read_eep_common +: 024952 iicd_write_protect_eep_data: +0x65d1 024953 storet 2 ,mem_temp +0x65d2 024954 call iicd_eeprom_write_enable +0x65d3 024955 fetcht 2 ,mem_temp +0x65d4 024956 call iicd_write_eep_data +0x65d5 024957 branch iicd_eeprom_write_disable +: 024959 iicd_eeprom_write_enable: +0x65d6 024960 fetch 1 ,mem_eeprom_wp_gpio +0x65d7 024961 rtneq gpio_disable +0x65d8 024962 bbit0 6 ,iicd_wp_gpio_output_low +0x65d9 024963 setarg 150000 +0x65da 024964 call sleep +: 024965 iicd_wp_gpio_output_low: +0x65db 024966 fetcht 1 ,mem_eeprom_wp_gpio +0x65dc 024967 branch gpio_out_active +: 024969 iicd_eeprom_write_disable: +0x65dd 024970 fetcht 1 ,mem_eeprom_wp_gpio +0x65de 024971 branch gpio_out_inactive +: 024976 iicd_read_eep_data: +0x65df 024977 bpatchx patch32_0 ,mem_patch32 +0x65e0 024978 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +0x65e1 024979 fetch 2 ,mem_eeprom_base +0x65e2 024980 iadd regb ,pdata +0x65e3 024981 byteswap pdata ,pdata +0x65e4 024982 store 2 ,mem_addr_mi +: 024985 iicd_read_eep: +0x65e5 024986 bpatchx patch32_1 ,mem_patch32 +0x65e6 024987 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +0x65e7 024988 setarg 4 +0x65e8 024989 hstore 2 ,core_iicd_txlen +0x65e9 024990 jam 0xa0 ,mem_iicd_tbuf +0x65ea 024991 jam 0xa1 ,mem_iicd_tbuf + 3 +: 024992 iicd_read_eep_common: +0x65eb 024993 setarg mem_iicd_tbuf +0x65ec 024994 hstore 2 ,core_iicd_txaddr +0x65ed 024995 hstoret 2 ,core_iicd_rxlen +0x65ee 024996 deposit rega +0x65ef 024997 hstore 2 ,core_iicd_rxaddr +0x65f0 024998 setarg 2 +0x65f1 024999 isolate0 15 ,rega +0x65f2 025000 setflag true ,0 ,pdata +0x65f3 025001 hstore 1 ,core_iicd_ctrl +0x65f4 025002 hjam iicd_start ,core_misc_ctrl +0x65f5 025003 arg iicd_done ,queue +0x65f6 025004 call decrypt_code +0x65f7 025005 call wait_iicd_done +0x65f8 025006 isolate1 iicd_crcok ,pdata +0x65f9 025007 call set_ucode_status +0x65fa 025008 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +0x65fb 025009 fetch 2 ,mem_addr_mi +0x65fc 025010 byteswap pdata ,pdata +0x65fd 025011 iadd temp ,pdata +0x65fe 025012 byteswap pdata ,pdata +0x65ff 025013 store 2 ,mem_addr_mi +0x6600 025014 rtn +: 025016 iicd_read_eep_load_code_size_2k: +0x6601 025017 fetch 1 ,mem_addr_mi +0x6602 025018 iadd temp ,pdata +0x6603 025019 byteswap pdata ,pdata +0x6604 025020 store 2 ,mem_addr_mi +0x6605 025021 rtn +: 025027 iicd_write_eep_data: +0x6606 025028 fetch 2 ,mem_eeprom_base +0x6607 025029 iadd regb ,pdata +: 025032 iicd_write_ota_data: +0x6608 025033 store 2 ,mem_pdatatemp +0x6609 025034 bpatchx patch32_2 ,mem_patch32 +0x660a 025035 storet 2 ,mem_temp +0x660b 025036 copy rega ,pdata +0x660c 025037 store 2 ,mem_contr +: 025038 iicd_write_eep_loop: +0x660d 025039 call iicd_eep_transparency +0x660e 025041 fetcht 2 ,mem_regb +0x660f 025042 fetch 2 ,mem_contr +0x6610 025043 copy pdata ,rega +0x6611 025044 fetch 2 ,mem_pdatatemp +0x6612 025046 call iicd_write_eep +0x6613 025048 fetch 2 ,mem_regb +0x6614 025049 fetcht 2 ,mem_contr +0x6615 025050 iadd temp ,temp +0x6616 025051 storet 2 ,mem_contr +0x6617 025052 fetcht 2 ,mem_pdatatemp +0x6618 025053 iadd temp ,temp +0x6619 025054 storet 2 ,mem_pdatatemp +0x661a 025055 fetch 2 ,mem_temp +0x661b 025056 nbranch iicd_write_eep_loop ,blank +0x661c 025057 rtn +: 025065 iicd_eep_transparency: +0x661d 025066 bpatchx patch32_3 ,mem_patch32 +0x661e 025067 fetch 1 ,mem_eeprom_block_size +0x661f 025068 increase -1 ,pdata +0x6620 025069 fetcht 2 ,mem_pdatatemp +0x6621 025070 ior temp ,pdata +0x6622 025071 increase 1 ,pdata +0x6623 025072 store 3 ,mem_regc +0x6624 025074 fetch 2 ,mem_temp +0x6625 025075 iadd temp ,pdata +0x6626 025077 fetcht 3 ,mem_regc +0x6627 025078 isub temp ,pdata +0x6628 025079 nbranch iicd_eep_deal_short_packet ,positive +0x6629 025080 store 2 ,mem_temp +0x662a 025081 fetch 3 ,mem_regc +0x662b 025082 fetcht 2 ,mem_pdatatemp +0x662c 025083 isub temp ,pdata +0x662d 025084 store 2 ,mem_regb +0x662e 025085 rtn +: 025086 iicd_eep_deal_short_packet: +0x662f 025087 fetch 2 ,mem_temp +0x6630 025088 store 2 ,mem_regb +0x6631 025089 setarg 0 +0x6632 025090 store 2 ,mem_temp +0x6633 025091 rtn +: 025093 iicd_write_eep_size_2k: +0x6634 025094 increase 2 ,temp +0x6635 025095 hstoret 2 ,core_iicd_txlen +0x6636 025096 increase -2 ,rega +0x6637 025097 ifetcht 3 ,rega +0x6638 025098 copy temp ,regb +0x6639 025099 arg 0xa0 ,temp +0x663a 025100 istoret 1 ,rega +0x663b 025102 istore 1 ,contw +0x663c 025103 branch iicd_write_eep_common +: 025106 iicd_write_eep: +0x663d 025107 copy pdata ,regb +0x663e 025108 bpatchx patch32_4 ,mem_patch32 +0x663f 025109 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +0x6640 025110 copy regb ,pdata +0x6641 025111 increase 3 ,temp +0x6642 025112 hstoret 2 ,core_iicd_txlen +0x6643 025113 increase -3 ,rega +0x6644 025114 ifetcht 3 ,rega +0x6645 025115 copy temp ,regb +0x6646 025116 arg 0xa0 ,temp +0x6647 025117 istoret 1 ,rega +0x6648 025118 byteswap pdata ,pdata +0x6649 025119 istore 2 ,contw +: 025120 iicd_write_eep_common: +0x664a 025121 deposit rega +0x664b 025122 hstore 2 ,core_iicd_txaddr +0x664c 025123 setarg 0 +0x664d 025124 hstore 2 ,core_iicd_rxlen +0x664e 025125 hjam 1 ,core_iicd_ctrl +0x664f 025126 hjam iicd_start ,core_misc_ctrl +0x6650 025127 call wait_iicd_done +0x6651 025128 copy regb ,pdata +0x6652 025129 istore 3 ,rega +: 025131 iic_check_eeprom_standby: +0x6653 025132 bpatchx patch32_5 ,mem_patch32 +0x6654 025133 jam 0 ,mem_iicd_tbuf + 3 +: 025134 iic_check_eeprom_standby_wait: +0x6655 025135 setarg 1 +0x6656 025136 hstore 2 ,core_iicd_txlen +0x6657 025137 jam 0xa0 ,mem_iicd_tbuf +0x6658 025138 setarg mem_iicd_tbuf +0x6659 025139 hstore 2 ,core_iicd_txaddr +0x665a 025140 setarg 0 +0x665b 025141 hstore 2 ,core_iicd_rxlen +0x665c 025142 hstore 2 ,core_iicd_rxaddr +0x665d 025143 setarg 3 +0x665e 025144 hstore 1 ,core_iicd_ctrl +0x665f 025145 hjam iicd_start ,core_misc_ctrl +0x6660 025146 call wait_iicd_done +0x6661 025147 hfetch 1 ,core_dma_status +0x6662 025148 rtnbit0 iicd_ack +0x6663 025149 nop 1500 +0x6664 025150 fetch 1 ,mem_iicd_tbuf + 3 +0x6665 025151 increase 1 ,pdata +0x6666 025152 store 1 ,mem_iicd_tbuf + 3 +0x6667 025153 sub pdata ,40 ,null +0x6668 025154 nrtn positive +0x6669 025155 branch iic_check_eeprom_standby_wait +: 025159 otp_enable_chgpump: +0x666a 025160 hjam 0x70 ,rfen_chgpump +0x666b 025161 nop param_chgpump_delay +0x666c 025162 rtn +: 025164 otp_disable_chgpump: +0x666d 025165 hjam 0x30 ,rfen_chgpump +0x666e 025166 rtn +: 025168 otp_set_addr: +0x666f 025169 lshift3 pdata ,pdata +0x6670 025170 hstore 2 ,core_otp_addr +0x6671 025171 hjam 0 ,core_otpd_ctrl +0x6672 025172 rtn +: 025175 otp_write: +0x6673 025176 call otp_set_addr +0x6674 025177 call otp_ce +: 025178 otp_program: +0x6675 025179 ifetcht 1 ,rega +0x6676 025180 increase 1 ,rega +0x6677 025181 force 0 ,queue +: 025182 otp_program_bit: +0x6678 025183 qisolate0 temp +0x6679 025184 branch otp_skip_0 ,true +0x667a 025185 hfetch 1 ,core_otp_din +0x667b 025186 set1 6 ,pdata +0x667c 025187 set1 7 ,pdata +0x667d 025188 hstore 1 ,core_otp_din +0x667e 025189 hjam 0x02 ,core_otp_ctrl +0x667f 025190 hjam 0x82 ,core_otp_ctrl +0x6680 025191 set0 7 ,pdata +0x6681 025192 hstore 1 ,core_otp_din +0x6682 025193 hjam 0x8a ,core_otp_ctrl +0x6683 025194 nop 11 +0x6684 025195 hjam 0xca ,core_otp_ctrl +0x6685 025196 nop 33 +0x6686 025197 hjam 0x4a ,core_otp_ctrl +0x6687 025198 nop 44 +0x6688 025199 hjam 0xca ,core_otp_ctrl +0x6689 025200 nop 22 +0x668a 025201 hjam 0x8a ,core_otp_ctrl +0x668b 025202 nop 33 +0x668c 025203 hjam 0x82 ,core_otp_ctrl +0x668d 025204 nop 1 +0x668e 025205 hjam 0x92 ,core_otp_ctrl +0x668f 025206 nop 10 +0x6690 025207 hjam 0xb2 ,core_otp_ctrl +0x6691 025208 hfetch 1 ,core_otp_rdata +0x6692 025209 hjam 0x92 ,core_otp_ctrl +0x6693 025210 nop 1 +0x6694 025211 hjam 0x82 ,core_otp_ctrl +0x6695 025212 qisolate0 pdata +0x6696 025213 branch otp_program_bit ,true +: 025214 otp_skip_0: +0x6697 025215 hfetch 2 ,core_otp_addr +0x6698 025216 increase 1 ,pdata +0x6699 025217 hstore 2 ,core_otp_addr +0x669a 025218 increase 1 ,queue +0x669b 025219 compare 8 ,queue ,0xf +0x669c 025220 nbranch otp_program_bit ,true +0x669d 025221 loop otp_program +0x669e 025222 hjam 0x83 ,core_otp_ctrl +0x669f 025223 rtn +: 025225 otp_ce: +0x66a0 025226 hjam 0x82 ,core_otp_ctrl +0x66a1 025227 nop 12 +0x66a2 025228 hjam 0x80 ,core_otp_ctrl +0x66a3 025229 hjam 0x82 ,core_otp_ctrl +0x66a4 025230 nop 150 +0x66a5 025231 rtn +: 025234 otpd_read_init: +0x66a6 025235 call otp_ce +0x66a7 025236 hjam 0xa2 ,core_otp_ctrl +0x66a8 025237 deposit rega +0x66a9 025238 hstore 2 ,core_otpd_addr +0x66aa 025239 set1 11 ,temp +0x66ab 025240 isolate0 15 ,pdata +0x66ac 025241 setflag true ,15 ,temp +0x66ad 025242 hstoret 2 ,core_otpd_len +0x66ae 025243 hjam otpd_start ,core_misc_ctrl +0x66af 025244 rtn +: 025246 otpd_wait_end: +0x66b0 025247 hfetch 1 ,core_dma_status +0x66b1 025248 bbit0 otpd_done ,otpd_wait_end +0x66b2 025249 rtn +: 025252 otpd_read_data: +0x66b3 025253 call otp_set_addr +0x66b4 025254 call otpd_read_init +0x66b5 025255 call otpd_wait_end +0x66b6 025256 hjam 0x83 ,core_otp_ctrl +0x66b7 025257 rtn +: 025262 otpd_read_code: +0x66b8 025263 hfetch 2 ,core_current_otp_addr +0x66b9 025264 hstore 2 ,core_otp_addr +0x66ba 025265 call otpd_read_init +0x66bb 025266 arg otpd_done ,queue +0x66bc 025267 call decrypt_code +0x66bd 025268 call otpd_wait_end +0x66be 025269 isolate1 otpd_crcok ,pdata +0x66bf 025270 call set_ucode_status +0x66c0 025271 hjam 0x83 ,core_otp_ctrl +0x66c1 025272 rtn +: 025275 uartd_prepare_tx: +0x66c2 025276 hfetch 2 ,core_uart_twptr +0x66c3 025277 iforce contwu +0x66c4 025278 rtn +: 025280 uartd_send: +0x66c5 025281 deposit contwu +0x66c6 025282 hstore 2 ,core_uart_twptr +0x66c7 025283 rtn +: 025285 uartd_rxdone: +0x66c8 025286 deposit contru +0x66c9 025287 hstore 2 ,core_uart_rrptr +0x66ca 025288 rtn +: 025290 uartd_prepare_rx: +0x66cb 025291 hfetch 2 ,core_uart_rrptr +0x66cc 025292 copy pdata ,contru +0x66cd 025293 rtn +: 025295 uart_set_baud_by_mem: +0x66ce 025296 fetch uart_baud_len ,mem_baud +0x66cf 025297 hstore uart_baud_len ,core_uart_baud +0x66d0 025298 rtn +: 025300 uart_copy_tx_bytes_fast: +0x66d1 025301 deposit loopcnt +0x66d2 025302 rtn blank +: 025303 uart_copy_tx_bytes_fast_loop: +0x66d3 025304 increase -8 ,loopcnt +0x66d4 025305 call uart_tx_8_bytes ,positive +0x66d5 025306 rtn zero +0x66d6 025307 branch uart_copy_tx_bytes_fast_loop ,positive +0x66d7 025308 increase 8 ,loopcnt +: 025309 uart_copy_tx_bytes_fast_loop_four: +0x66d8 025310 increase -4 ,loopcnt +0x66d9 025311 call uart_tx_4_bytes ,positive +0x66da 025312 rtn zero +0x66db 025313 branch uart_copy_tx_bytes_fast_loop_four ,positive +0x66dc 025314 increase 4 ,loopcnt +0x66dd 025315 branch uart_copy_tx_bytes +: 025317 uart_tx_8_bytes: +0x66de 025318 ifetch 8 ,contr +0x66df 025319 istore 8 ,contwu +0x66e0 025320 rtn +: 025322 uart_tx_4_bytes: +0x66e1 025323 ifetch 4 ,contr +0x66e2 025324 istore 4 ,contwu +0x66e3 025325 rtn +: 025327 uart_copy_tx_bytes: +0x66e4 025328 deposit loopcnt +0x66e5 025329 rtn blank +: 025330 uart_copy_tx_bytes_loop: +0x66e6 025331 ifetch 1 ,contr +0x66e7 025332 istore 1 ,contwu +0x66e8 025333 loop uart_copy_tx_bytes_loop +0x66e9 025334 rtn +: 025336 uart_copy_rx_bytes_fast: +0x66ea 025337 deposit loopcnt +0x66eb 025338 rtn blank +: 025339 uart_copy_rx_bytes_fast_loop: +0x66ec 025340 increase -8 ,loopcnt +0x66ed 025341 call uart_rx_8_bytes ,positive +0x66ee 025342 rtn zero +0x66ef 025343 branch uart_copy_rx_bytes_fast_loop ,positive +0x66f0 025344 increase 8 ,loopcnt +: 025345 uart_copy_rx_bytes_fast_loop_four: +0x66f1 025346 increase -4 ,loopcnt +0x66f2 025347 call uart_rx_4_bytes ,positive +0x66f3 025348 rtn zero +0x66f4 025349 branch uart_copy_rx_bytes_fast_loop_four ,positive +0x66f5 025350 increase 4 ,loopcnt +0x66f6 025351 branch uart_copy_rx_bytes +: 025353 uart_rx_8_bytes: +0x66f7 025354 ifetch 8 ,contru +0x66f8 025355 istore 8 ,contw +0x66f9 025356 rtn +: 025358 uart_rx_4_bytes: +0x66fa 025359 ifetch 4 ,contru +0x66fb 025360 istore 4 ,contw +0x66fc 025361 rtn +: 025364 uart_copy_rx_bytes: +0x66fd 025365 deposit loopcnt +0x66fe 025366 rtn blank +: 025367 uart_copy_rx_bytes_loop: +0x66ff 025368 ifetch 1 ,contru +0x6700 025369 istore 1 ,contw +0x6701 025370 loop uart_copy_rx_bytes_loop +0x6702 025371 rtn +: 025374 uart_copy_rx2tx: +0x6703 025375 deposit loopcnt +0x6704 025376 rtn blank +: 025377 uart_copy_rx2tx_loop: +0x6705 025378 ifetch 1 ,contru +0x6706 025379 istore 1 ,contwu +0x6707 025380 loop uart_copy_rx2tx_loop +0x6708 025381 rtn +: 025386 app_store_nvram_event: +0x6709 025387 jam bt_evt_store_nvram ,mem_fifo_temp +0x670a 025388 branch ui_ipc_send_event +: 025390 check_51cmd_store_reconn_info: +: 025391 check_51cmd_update_device_record: +0x670b 025392 bpatchx patch32_6 ,mem_patch32 +0x670c 025393 fetch 1 ,mem_nv_data_number +0x670d 025394 rtn blank +0x670e 025395 call check_nvram +0x670f 025396 call init_device_list ,zero +0x6710 025397 call nvram_find_addr_from_bd_list +: 025398 write_device_record: +0x6711 025399 fetch 1 ,mem_nv_data_number +0x6712 025400 icopy regc +0x6713 025401 fetcht 2 ,mem_nv_data_ptr +0x6714 025402 storet 2 ,mem_list_item_ptr +: 025403 write_device_loop_find: +0x6715 025404 copy regc ,pdata +0x6716 025405 branch app_store_nvram_event ,blank +0x6717 025406 increase -1 ,regc +0x6718 025407 copy temp ,rega +0x6719 025408 ifetch 1 ,rega +0x671a 025409 fetcht 1 ,mem_select_list_item +0x671b 025410 isub temp ,null +0x671c 025411 call set_index_finded_device ,zero +0x671d 025412 branch write_device_loop_find0 ,positive +0x671e 025413 ifetch 1 ,rega +0x671f 025414 increase 1 ,pdata +0x6720 025415 istore 1 ,rega +: 025416 write_device_loop_find0: +0x6721 025417 fetcht 2 ,mem_list_item_ptr +0x6722 025418 increase nv_data_len ,temp +0x6723 025419 storet 2 ,mem_list_item_ptr +0x6724 025420 branch write_device_loop_find +: 025422 set_index_finded_device: +0x6725 025423 setarg 0 +0x6726 025424 istore 1 ,rega +0x6727 025425 fetch 1 ,mem_temp_reconn_record +0x6728 025426 istore 1 ,contw +0x6729 025427 bne rec_3_mode ,set_index_finded_device_ble_mode +0x672a 025428 arg mem_link_key ,regb +: 025429 set_index_find_device_master_addr: +0x672b 025430 ifetch 6 ,contr +0x672c 025431 istore 8 ,contw +0x672d 025432 setarg 0 +0x672e 025433 istore 8 ,contw +0x672f 025434 copy regb ,contr +: 025435 store_rec_data_common: +0x6730 025436 call memcpy16 +0x6731 025437 force 1 ,null +0x6732 025438 rtn +: 025440 set_index_finded_device_ble_mode: +0x6733 025441 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +0x6734 025442 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +0x6735 025443 arg mem_le_ltk ,regb +0x6736 025444 branch set_index_find_device_master_addr +: 025446 set_index_finded_device_irk: +0x6737 025447 arg mem_le_irk ,contr +0x6738 025448 call memcpy16 +: 025449 store_ble_rec_data_common: +0x6739 025450 arg mem_le_ltk ,contr +0x673a 025451 branch store_rec_data_common +: 025453 set_index_finded_device_ediv: +0x673b 025454 arg mem_le_rand ,contr +0x673c 025455 call memcpy16 +0x673d 025456 branch store_ble_rec_data_common +: 025459 nvram_find_addr_from_bd_list: +0x673e 025460 call disable_user +0x673f 025461 fetch 1 ,mem_nv_data_number +0x6740 025462 rtn blank +0x6741 025463 fetch 2 ,mem_ui_state_map +0x6742 025464 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode +: 025465 find_addr_from_bd_list_ble_mode: +0x6743 025466 bpatchx patch32_7 ,mem_patch32 +0x6744 025467 fetch 1 ,mem_le_conn_peer_addr_type +0x6745 025468 beq master_public_addr ,find_addr_from_bd_list_static_addr +0x6746 025469 fetch 1 ,mem_le_plap + 5 +0x6747 025470 compare 0xc0 ,pdata ,0xc0 +0x6748 025471 branch find_addr_from_bd_list_static_addr ,true +0x6749 025472 compare 0x40 ,pdata ,0xc0 +0x674a 025473 branch find_addr_from_bd_list_random_addr ,true +0x674b 025474 compare 0x00 ,pdata ,0xc0 +0x674c 025475 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true +: 025476 find_addr_from_bd_list_static_addr: +0x674d 025477 jam rec_4_mode_static_address ,mem_temp_reconn_record +0x674e 025478 fetch 6 ,mem_le_plap +0x674f 025479 branch find_addr_from_bd_list_common +: 025481 find_addr_from_bd_list_random_non_resolvable_private_address: +0x6750 025482 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +0x6751 025483 branch find_addr_from_bd_list_common +: 025486 find_addr_from_bd_list_random_addr: +0x6752 025487 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +0x6753 025488 branch find_addr_from_bd_list_common +: 025491 find_addr_from_bd_list_spp_mode: +0x6754 025492 bpatchx patch33_0 ,mem_patch33 +0x6755 025493 jam rec_3_mode ,mem_temp_reconn_record +0x6756 025494 fetch 6 ,mem_plap +: 025495 find_addr_from_bd_list_common: +0x6757 025496 store 6 ,mem_temp_reconn_record + 1 +0x6758 025497 fetch 2 ,mem_nv_data_ptr +0x6759 025498 ifetcht 1 ,pdata +0x675a 025499 pincrease 1 +0x675b 025500 store 2 ,mem_list_item_ptr +0x675c 025501 storet 1 ,mem_select_list_item +0x675d 025502 fetch 1 ,mem_nv_data_number +0x675e 025503 icopy regc +: 025504 nvram_find_addr_from_list: +0x675f 025505 fetch 2 ,mem_list_item_ptr +0x6760 025506 copy pdata ,rega +0x6761 025507 call nvram_find_addr_from_list_compare +0x6762 025508 rtn user +0x6763 025509 fetcht 2 ,mem_list_item_ptr +0x6764 025510 increase nv_data_len ,temp +0x6765 025511 storet 2 ,mem_list_item_ptr +0x6766 025512 increase -1 ,temp +0x6767 025513 ifetch 1 ,temp +0x6768 025514 store 1 ,mem_select_list_item +0x6769 025515 increase -1 ,regc +0x676a 025516 nbranch nvram_find_addr_from_list ,zero +0x676b 025517 fetch 1 ,mem_nv_data_number +0x676c 025518 pincrease decreased_one +0x676d 025519 store 1 ,mem_select_list_item +0x676e 025520 rtn +: 025521 nvram_find_addr_from_list_compare: +0x676f 025522 fetch 1 ,mem_temp_reconn_record +0x6770 025523 bne rec_3_mode ,find_addr_from_list_compare_ble_mode +: 025524 find_master_addr_from_list_compare: +0x6771 025525 arg mem_temp_reconn_record ,regb +0x6772 025526 arg 7 ,loopcnt +0x6773 025527 call string_compare +0x6774 025528 branch enable_user ,zero +0x6775 025529 rtn +: 025531 find_addr_from_list_compare_ble_mode: +0x6776 025532 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +0x6777 025533 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +0x6778 025534 branch find_master_addr_from_list_compare +: 025536 find_irk_form_list_compare: +0x6779 025537 ifetcht 1 ,rega +0x677a 025538 isub temp ,null +0x677b 025539 nrtn zero +0x677c 025540 arg mem_le_prand ,contw +0x677d 025541 arg 16 ,loopcnt +0x677e 025542 call clear_mem +0x677f 025543 fetch 3 ,mem_le_plap + 3 +0x6780 025544 store 3 ,mem_le_prand +0x6781 025545 call genernate_master_macaddress +0x6782 025546 fetch 2 ,mem_le_aes_128 + 13 +0x6783 025547 byteswap pdata ,pdata +0x6784 025548 lshift8 pdata ,temp +0x6785 025549 ifetch 1 ,contr +0x6786 025550 iadd temp ,pdata +0x6787 025551 fetcht 3 ,mem_le_plap +0x6788 025552 isub temp ,null +0x6789 025553 branch enable_user ,zero +0x678a 025554 rtn +: 025557 genernate_master_macaddress: +0x678b 025558 arg mem_le_prand ,contr +0x678c 025559 call load_data128 +0x678d 025561 ifetch 1 ,rega +0x678e 025562 call load_regext +0x678f 025563 force 0x38 ,aes_ctrl +0x6790 025564 force 0x0 ,aes_ctrl +0x6791 025565 call wait_aes +0x6792 025566 arg mem_le_aes_128 ,contw +0x6793 025567 branch store_aes_result +: 025569 find_ediv_form_list_compare: +0x6794 025570 ifetcht 1 ,rega +0x6795 025571 isub temp ,null +0x6796 025572 nrtn zero +0x6797 025573 copy contr ,rega +0x6798 025574 add contr ,8 ,regc +0x6799 025575 arg mem_le_rand ,regb +0x679a 025576 arg 8 ,loopcnt +0x679b 025577 call string_compare +0x679c 025578 branch enable_user ,zero +0x679d 025579 copy regc ,rega +0x679e 025580 arg mem_le_irk ,regb +0x679f 025581 arg 8 ,loopcnt +0x67a0 025582 call string_compare +0x67a1 025583 branch enable_user ,zero +0x67a2 025584 rtn +: 025586 check_nvram: +0x67a3 025587 fetch 2 ,mem_nv_data_ptr +0x67a4 025588 ifetcht 1 ,pdata +0x67a5 025589 pincrease nv_data_len +0x67a6 025590 ifetch 1 ,pdata +0x67a7 025591 isub temp ,null +0x67a8 025592 rtn +: 025594 init_device_list: +0x67a9 025595 fetch 1 ,mem_nv_data_number +0x67aa 025596 icopy loopcnt +0x67ab 025597 fetcht 2 ,mem_nv_data_ptr +0x67ac 025598 setarg 0 +: 025599 init_device_list_loop: +0x67ad 025600 istore 1 ,temp +0x67ae 025601 increase nv_data_len ,temp +0x67af 025602 pincrease 1 +0x67b0 025603 loop init_device_list_loop +0x67b1 025604 rtn +: 025606 load_device_list: +0x67b2 025607 bpatchx patch33_1 ,mem_patch33 +0x67b3 025608 call nvram_find_addr_from_bd_list +0x67b4 025609 fetch 1 ,mem_state +0x67b5 025610 setflag user ,state_combkey ,pdata +0x67b6 025611 store 1 ,mem_state +0x67b7 025612 nbranch clear_key_exists ,user +0x67b8 025613 add rega ,10 ,contr +0x67b9 025615 arg mem_link_key ,contw +0x67ba 025616 call memcpy16 +0x67bb 025617 branch check_link_key_load +: 025618 clear_key_exists: +0x67bc 025619 jam 0 ,mem_link_key_exists +0x67bd 025620 rtn +: 025622 load_device_list_mode_4: +0x67be 025623 fetch 9 ,mem_le_ediv +0x67bf 025624 branch clear_ltk_exists ,blank +0x67c0 025625 call nvram_find_addr_from_bd_list +0x67c1 025626 nbranch clear_ltk_exists ,user +0x67c2 025627 fetch 2 ,mem_list_item_ptr +0x67c3 025628 add pdata ,1 ,contr +0x67c4 025629 arg mem_le_irk ,contw +0x67c5 025630 call memcpy16 +0x67c6 025631 arg mem_le_ltk ,contw +0x67c7 025632 call memcpy16 +0x67c8 025633 jam 1 ,mem_ltk_exists +0x67c9 025634 rtn +: 025636 clear_ltk_exists: +0x67ca 025637 jam 0 ,mem_ltk_exists +0x67cb 025638 rtn +: 025641 eeprom_store_le_reconn_info: +0x67cc 025642 fetch 6 ,mem_le_plap +0x67cd 025643 store 6 ,mem_temp_lap +0x67ce 025644 jam rec_4_mode ,mem_record_bt_mode +0x67cf 025645 branch eeprom_store_reconn_info +: 025646 eeprom_store_bd_reconn_info: +0x67d0 025647 fetch 6 ,mem_plap +0x67d1 025648 store 6 ,mem_temp_lap +0x67d2 025649 jam rec_3_mode ,mem_record_bt_mode +: 025650 eeprom_store_reconn_info: +0x67d3 025651 fetch 1 ,mem_device_option +0x67d4 025652 beq dvc_op_module ,check_51cmd_update_device_record +0x67d5 025653 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr +0x67d6 025654 rtn +: 025657 check_link_key_load: +0x67d7 025658 fetch 8 ,mem_link_key +0x67d8 025659 fetcht 8 ,mem_link_key + 8 +0x67d9 025660 ior temp ,pdata +0x67da 025661 rtn blank +0x67db 025662 jam 1 ,mem_link_key_exists +0x67dc 025663 rtn +: 025670 gpio_set_wake_by_current_state: +0x67dd 025671 bpatchx patch33_2 ,mem_patch33 +0x67de 025672 set1 7 ,temp +0x67df 025673 call gpio_get_bit +0x67e0 025674 nsetflag true ,7 ,temp +: 025679 gpio_set_wake: +0x67e1 025680 bpatchx patch33_3 ,mem_patch33 +0x67e2 025681 sub temp ,ui_button_gpio_disable ,null +0x67e3 025682 rtn zero +0x67e4 025683 isolate0 7 ,temp +0x67e5 025684 and temp ,0x1f ,queue +0x67e6 025685 fetch 4 ,mem_gpio_wakeup_low +0x67e7 025686 qsetflag true ,pdata +0x67e8 025687 store 4 ,mem_gpio_wakeup_low +0x67e9 025688 fetch 4 ,mem_gpio_wakeup_high +0x67ea 025689 nqsetflag true ,pdata +0x67eb 025690 store 4 ,mem_gpio_wakeup_high +0x67ec 025691 rtn +: 025694 gpio_clr_wake: +0x67ed 025695 bpatchx patch33_4 ,mem_patch33 +0x67ee 025696 sub temp ,ui_button_gpio_disable ,null +0x67ef 025697 rtn zero +0x67f0 025698 isolate0 7 ,temp +0x67f1 025699 and temp ,0x1f ,queue +0x67f2 025700 fetch 4 ,mem_gpio_wakeup_low +0x67f3 025701 qset0 pdata +0x67f4 025702 store 4 ,mem_gpio_wakeup_low +0x67f5 025703 fetch 4 ,mem_gpio_wakeup_high +0x67f6 025704 qset0 pdata +0x67f7 025705 store 4 ,mem_gpio_wakeup_high +0x67f8 025706 rtn +: 025709 gpio_config_input_nowake: +0x67f9 025710 call gpio_clr_wake +0x67fa 025711 branch gpio_config_input_without_wake +: 025714 gpio_config_input: +0x67fb 025715 sub temp ,ui_button_gpio_disable ,null +0x67fc 025716 rtn zero +0x67fd 025717 ncall gpio_set_wake ,wake +: 025719 gpio_config_input_without_wake: +0x67fe 025720 arg core_gpio_pd0 ,contw +0x67ff 025721 call gpio_set_bit +0x6800 025722 setflip gpio_active_bit ,temp +0x6801 025723 arg core_gpio_pu0 ,contw +0x6802 025724 call gpio_set_bit +0x6803 025725 set0 gpio_active_bit ,temp +0x6804 025726 arg core_gpio_oe0 ,contw +0x6805 025727 branch gpio_set_bit +: 025730 gpio_set_high_impedance: +0x6806 025731 arg core_gpio_pd0 ,contw +0x6807 025732 call gpio_set_bit +0x6808 025733 set0 gpio_active_bit ,temp +0x6809 025734 arg core_gpio_pu0 ,contw +0x680a 025735 call gpio_set_bit +0x680b 025736 set0 gpio_active_bit ,temp +0x680c 025737 arg core_gpio_oe0 ,contw +0x680d 025738 branch gpio_set_bit +: 025742 gpio_config_output: +0x680e 025743 sub temp ,ui_button_gpio_disable ,null +0x680f 025744 rtn zero +0x6810 025745 setflip gpio_active_bit ,temp +0x6811 025746 call gpio_out +: 025747 gpio_config_output0: +0x6812 025748 set1 gpio_active_bit ,temp +0x6813 025749 arg core_gpio_oe0 ,contw +0x6814 025750 branch gpio_set_bit +: 025752 gpio_common: +0x6815 025753 and temp ,0x07 ,queue +0x6816 025754 rshift3 temp ,pdata +0x6817 025755 and_into 3 ,pdata +0x6818 025756 iadd contw ,contw +0x6819 025757 ifetch 1 ,contw +0x681a 025758 rtn +: 025760 gpio_check_active: +0x681b 025761 arg core_gpio_out0 ,contw +0x681c 025762 branch get_bit_common +: 025766 gpio_get_bit: +0x681d 025767 arg core_gpio_in ,contw +: 025768 get_bit_common: +0x681e 025769 call gpio_common +0x681f 025770 isolate1 gpio_active_bit ,temp +0x6820 025771 branch gpio_get_bit_reverse ,true +0x6821 025772 qisolate0 pdata +0x6822 025773 rtn +: 025774 gpio_get_bit_reverse: +0x6823 025775 qisolate1 pdata +0x6824 025776 rtn +: 025778 gpio_out_inactive: +0x6825 025779 sub temp ,ui_button_gpio_disable ,null +0x6826 025780 rtn zero +0x6827 025781 isolate1 7 ,null +0x6828 025782 branch gpio_out_flag +: 025784 gpio_out_active: +0x6829 025785 sub temp ,ui_button_gpio_disable ,null +0x682a 025786 rtn zero +0x682b 025787 isolate0 7 ,null +: 025790 gpio_out_flag: +0x682c 025791 setarg 0 +0x682d 025792 nsetflag true ,gpio_active_bit ,pdata +0x682e 025793 ixor temp ,temp +: 025796 gpio_out: +0x682f 025797 arg core_gpio_out0 ,contw +: 025800 gpio_set_bit: +0x6830 025801 call gpio_common +0x6831 025802 isolate1 gpio_active_bit ,temp +0x6832 025803 qsetflag true ,pdata +0x6833 025804 istore 1 ,contw +0x6834 025805 rtn +: 025807 gpio_set_before_lpm_common: +0x6835 025808 arg -1 ,rega +0x6836 025809 hfetch 1 ,core_gpio_sel1 +0x6837 025810 compare 0x02 ,pdata ,0x03 +0x6838 025811 call neglact4_from_23_pin ,true +0x6839 025813 compare 0x01 ,pdata ,0x03 +0x683a 025814 call neglact2_form_25_pin ,true +0x683b 025816 compare 0x03 ,pdata ,0x03 +0x683c 025817 call neglact2_form_25_pin ,true +0x683d 025819 isolate1 2 ,pdata +0x683e 025820 call neglect2_from_6_pin ,true +0x683f 025822 isolate1 3 ,pdata +0x6840 025823 call neglect4_from_9_pin ,true +0x6841 025825 isolate1 4 ,pdata +0x6842 025826 call neglact2_form_30_pin ,true +0x6843 025828 isolate1 6 ,pdata +0x6844 025829 nsetflag true ,04 ,rega +0x6845 025831 isolate1 7 ,pdata +0x6846 025832 nsetflag true ,05 ,rega +0x6847 025834 hfetch 1 ,core_gpio_sel2 +0x6848 025835 isolate1 0 ,pdata +0x6849 025836 nsetflag true ,27 ,rega +0x684a 025837 isolate1 1 ,pdata +0x684b 025838 nsetflag true ,28 ,rega +0x684c 025839 isolate1 2 ,pdata +0x684d 025840 nsetflag true ,03 ,rega +0x684e 025841 isolate1 3 ,pdata +0x684f 025842 nsetflag true ,08 ,rega +0x6850 025843 isolate1 4 ,pdata +0x6851 025844 nsetflag true ,20 ,rega +0x6852 025845 isolate1 5 ,pdata +0x6853 025846 nsetflag true ,21 ,rega +0x6854 025847 isolate1 6 ,pdata +0x6855 025848 nsetflag true ,22 ,rega +0x6856 025849 isolate1 7 ,pdata +0x6857 025850 nsetflag true ,23 ,rega +0x6858 025852 hfetch 1 ,core_gpio_sel +0x6859 025853 isolate1 0 ,pdata +0x685a 025854 nsetflag true ,05 ,rega +0x685b 025855 isolate1 1 ,pdata +0x685c 025856 nsetflag true ,06 ,rega +0x685d 025857 isolate1 2 ,pdata +0x685e 025858 nsetflag true ,07 ,rega +0x685f 025859 isolate1 3 ,pdata +0x6860 025860 nsetflag true ,18 ,rega +0x6861 025861 isolate1 4 ,pdata +0x6862 025862 nsetflag true ,19 ,rega +0x6863 025863 isolate1 5 ,pdata +0x6864 025864 nsetflag true ,20 ,rega +0x6865 025865 isolate1 6 ,pdata +0x6866 025866 nsetflag true ,21 ,rega +0x6867 025867 isolate1 7 ,pdata +0x6868 025868 nsetflag true ,22 ,rega +0x6869 025870 hfetch 1 ,core_uart_ctrl +0x686a 025871 isolate1 4 ,pdata +0x686b 025872 call neglact2_form_2_pin ,true +0x686c 025873 bpatchx patch33_5 ,mem_patch33 +0x686d 025875 hfetch 4 ,core_gpio_pu0 +0x686e 025876 hfetcht 4 ,core_gpio_pd0 +0x686f 025877 ior temp ,pdata +0x6870 025878 invert pdata ,pdata +0x6871 025879 iand rega ,pdata +0x6872 025881 hstore 4 ,core_gpio_oe0 +0x6873 025882 rtn +: 025885 neglect2_from_6_pin: +0x6874 025886 arg 6 ,queue +0x6875 025887 branch neglect_2_pin +: 025888 neglect4_from_9_pin: +0x6876 025889 arg 9 ,queue +0x6877 025890 branch neglact_4_pin +: 025891 neglact4_from_23_pin: +0x6878 025892 arg 23 ,queue +0x6879 025893 branch neglact_4_pin +: 025894 neglact2_form_25_pin: +0x687a 025895 arg 25 ,queue +0x687b 025896 branch neglect_2_pin +: 025897 neglact2_form_30_pin: +0x687c 025898 arg 30 ,queue +0x687d 025899 branch neglect_2_pin +: 025900 neglact2_form_2_pin: +0x687e 025901 arg 2 ,queue +0x687f 025902 branch neglect_2_pin +: 025903 neglact_1_pin: +0x6880 025904 arg 1 ,loopcnt +0x6881 025905 branch neglect_pin_loop +: 025906 neglact_4_pin: +0x6882 025907 arg 4 ,loopcnt +0x6883 025908 branch neglect_pin_loop +: 025909 neglect_2_pin: +0x6884 025910 arg 2 ,loopcnt +: 025911 neglect_pin_loop: +0x6885 025912 qset0 rega +0x6886 025913 increase 1 ,queue +0x6887 025914 loop neglect_pin_loop +0x6888 025915 rtn +: 025923 gpio_cfg_uart_tx_output: +0x6889 025924 call gpio_uart2gpio +0x688a 025925 arg uart_wakeup_tx ,temp +0x688b 025926 branch gpio_config_output +: 025928 gpio_pu_uart_tx: +0x688c 025929 call gpio_cfg_uart_tx_output +0x688d 025930 arg uart_wakeup_tx ,temp +0x688e 025931 branch gpio_out_inactive +: 025935 gpio_rx_config_input_with_pu: +0x688f 025936 call gpio_uart2gpio +0x6890 025937 hfetch 1 ,core_gpio_pu0 +0x6891 025938 set1 uart_wakeup_rx ,pdata +0x6892 025939 hstore 1 ,core_gpio_pu0 +0x6893 025940 arg uart_wakeup_rx ,temp +0x6894 025941 branch gpio_config_input +: 025943 gpio_uart2gpio: +0x6895 025944 hfetch 1 ,core_gpio_sel1 +0x6896 025945 and_into 0xfb ,pdata +0x6897 025946 hstore 1 ,core_gpio_sel1 +0x6898 025947 rtn +: 025949 gpio_check_uart_state: +0x6899 025950 hfetch 1 ,core_gpio_sel1 +0x689a 025951 isolate1 2 ,pdata +0x689b 025952 rtn +: 025954 load_chip_option: +0x689c 025955 call otp_enable_chgpump +0x689d 025956 setarg otp_chip_functions +0x689e 025957 arg mem_chip_functions ,rega +0x689f 025958 arg 0x02 ,temp +0x68a0 025959 call otpd_read_data +0x68a1 025960 branch otp_disable_chgpump +: 025963 load_adc_init: +0x68a2 025964 call otp_enable_chgpump +0x68a3 025965 setarg otp_adc_io_0_5v_addr +0x68a4 025966 arg mem_0_5_adc_io_data ,rega +0x68a5 025967 arg 14 ,temp +0x68a6 025968 call otpd_read_data +0x68a7 025969 branch otp_disable_chgpump +: 025973 adc_init_data: +0x68a8 025974 bpatchx patch33_6 ,mem_patch33 +0x68a9 025976 call load_adc_init +0x68aa 025978 fetch 1 ,mem_adc_config_flag +0x68ab 025979 beq adc_config_vinlpm ,adc_init_data_vinlpm +0x68ac 025980 beq adc_config_hvin ,adc_init_data_hvin +0x68ad 025981 beq adc_config_gpio ,adc_init_data_io +0x68ae 025982 rtn +: 025984 adc_init_data_vinlpm: +0x68af 025985 fetcht 2 ,mem_otp_adc_flag +0x68b0 025986 setarg otp_adc_flag +0x68b1 025987 isub temp ,null +0x68b2 025988 branch adc_check_data_vinlpm ,zero +0x68b3 025989 setarg 0x4dfa +0x68b4 025990 store 2 ,mem_3v_adc_vinlpm_data +0x68b5 025991 setarg 0x4894 +0x68b6 025992 store 2 ,mem_2v_adc_vinlpm_data +0x68b7 025993 branch set_vdd_reference_voltage_1v +: 025995 adc_check_data_vinlpm: +0x68b8 025996 fetch 2 ,mem_3v_adc_vinlpm_data +0x68b9 025997 nbranch adc_check_2v_vinlpm ,blank +0x68ba 025998 setarg 0x4dfa +0x68bb 025999 store 2 ,mem_3v_adc_vinlpm_data +: 026000 adc_check_2v_vinlpm: +0x68bc 026001 fetch 2 ,mem_2v_adc_vinlpm_data +0x68bd 026002 nbranch set_vdd_reference_voltage_1v ,blank +0x68be 026003 setarg 0x4894 +0x68bf 026004 store 2 ,mem_2v_adc_vinlpm_data +: 026005 set_vdd_reference_voltage_1v: +0x68c0 026006 setarg 100 +0x68c1 026007 store 2 ,mem_reference_voltage +0x68c2 026008 rtn +: 026010 adc_init_data_hvin: +0x68c3 026011 fetcht 2 ,mem_otp_adc_flag +0x68c4 026012 setarg otp_adc_flag +0x68c5 026013 isub temp ,null +0x68c6 026014 branch adc_check_data_hvin ,zero +0x68c7 026015 setarg 0x5932 +0x68c8 026016 store 2 ,mem_5v_adc_hvin_data +0x68c9 026017 setarg 0x4323 +0x68ca 026018 store 2 ,mem_1v_adc_hvin_data +0x68cb 026019 branch set_vdd_reference_voltage_4v +: 026021 adc_check_data_hvin: +0x68cc 026022 fetch 2 ,mem_5v_adc_hvin_data +0x68cd 026023 nbranch adc_check_1v_hvin ,blank +0x68ce 026024 setarg 0x5932 +0x68cf 026025 store 2 ,mem_5v_adc_hvin_data +: 026026 adc_check_1v_hvin: +0x68d0 026027 fetch 2 ,mem_1v_adc_hvin_data +0x68d1 026028 nbranch set_vdd_reference_voltage_4v ,blank +0x68d2 026029 setarg 0x4323 +0x68d3 026030 store 2 ,mem_1v_adc_hvin_data +: 026031 set_vdd_reference_voltage_4v: +0x68d4 026032 setarg 400 +0x68d5 026033 store 2 ,mem_reference_voltage +0x68d6 026034 rtn +: 026036 adc_init_data_io: +0x68d7 026037 fetcht 2 ,mem_otp_adc_flag +0x68d8 026038 setarg otp_adc_flag +0x68d9 026039 isub temp ,null +0x68da 026040 branch adc_check_data_io ,zero +0x68db 026041 setarg 0x6946 +0x68dc 026042 store 2 ,mem_1v_adc_io_data +0x68dd 026043 setarg 0x5377 +0x68de 026044 store 2 ,mem_0_5_adc_io_data +0x68df 026045 branch set_vdd_reference_voltage_0_5v +: 026047 adc_check_data_io: +0x68e0 026048 fetch 2 ,mem_1v_adc_io_data +0x68e1 026049 nbranch adc_check_0_5v_io ,blank +0x68e2 026050 setarg 0x6946 +0x68e3 026051 store 2 ,mem_1v_adc_io_data +: 026052 adc_check_0_5v_io: +0x68e4 026053 fetch 2 ,mem_0_5_adc_io_data +0x68e5 026054 nbranch set_vdd_reference_voltage_0_5v ,blank +0x68e6 026055 setarg 0x5377 +0x68e7 026056 store 2 ,mem_0_5_adc_io_data +: 026057 set_vdd_reference_voltage_0_5v: +0x68e8 026058 setarg 50 +0x68e9 026059 store 2 ,mem_reference_voltage +0x68ea 026060 rtn +: 026063 adc_set_mode: +0x68eb 026064 fetch 1 ,mem_adc_config_flag +0x68ec 026065 beq adc_config_vinlpm ,adc_check_vinlpm +0x68ed 026066 beq adc_config_hvin ,adc_check_hvin +0x68ee 026067 beq adc_config_gpio ,adc_check_gpio +0x68ef 026068 rtn +: 026069 adc_check_vinlpm: +0x68f0 026070 hjam 0xbf ,rf_adc_mode +0x68f1 026071 branch read_adc +: 026072 adc_check_hvin: +0x68f2 026073 hjam 0xaf ,rf_adc_mode +0x68f3 026074 branch read_adc +: 026075 adc_check_gpio: +0x68f4 026076 hjam 0x8f ,rf_adc_mode +0x68f5 026077 fetch 1 ,mem_adc_channel +0x68f6 026078 hstore 1 ,rf_adc_ch +0x68f7 026079 branch read_adc +: 026080 read_adc: +0x68f8 026081 bpatchx patch33_7 ,mem_patch33 +0x68f9 026082 hfetch 1 ,core_uart_baud + 1 +0x68fa 026083 set1 7 ,pdata +0x68fb 026084 hstore 1 ,core_uart_baud + 1 +0x68fc 026085 hfetch 1 ,rf_adc_ch +0x68fd 026086 or_into 0x30 ,pdata +0x68fe 026087 hstore 1 ,rf_adc_ch +0x68ff 026088 hjam 0x7c ,rfen_adc +0x6900 026089 hjam 0xaa ,rf_adc_gc +0x6901 026090 nop 5000 +0x6902 026091 hfetcht 2 ,core_adc_sum +0x6903 026092 hfetch 1 ,core_uart_baud + 1 +0x6904 026093 set0 7 ,pdata +0x6905 026094 hstore 1 ,core_uart_baud + 1 +0x6906 026095 storet 2 ,mem_adc_current_value +0x6907 026096 rtn +: 026098 vdd_calculate_by_mode: +0x6908 026099 bpatchx patch34_0 ,mem_patch34 +0x6909 026100 fetch 1 ,mem_adc_config_flag +0x690a 026101 beq adc_config_vinlpm ,vdd_calculate_vinlpm +0x690b 026102 beq adc_config_hvin ,vdd_calculate_hvin +0x690c 026103 beq adc_config_gpio ,vdd_calculate_io +0x690d 026104 rtn +: 026106 vdd_calculate_vinlpm: +0x690e 026107 fetch 2 ,mem_3v_adc_vinlpm_data +0x690f 026108 fetcht 2 ,mem_2v_adc_vinlpm_data +0x6910 026109 arg 200 ,regc +0x6911 026110 branch vdd_calculate +: 026112 vdd_calculate_hvin: +0x6912 026113 fetch 2 ,mem_5v_adc_hvin_data +0x6913 026114 fetcht 2 ,mem_1v_adc_hvin_data +0x6914 026115 arg 100 ,regc +0x6915 026116 branch vdd_calculate +: 026118 vdd_calculate_io: +0x6916 026119 fetch 2 ,mem_1v_adc_io_data +0x6917 026120 fetcht 2 ,mem_0_5_adc_io_data +0x6918 026121 arg 50 ,regc +0x6919 026122 branch vdd_calculate +: 026124 vdd_calculate: +0x691a 026125 isub temp ,rega +0x691b 026126 fetch 2 ,mem_adc_current_value +0x691c 026127 isub temp ,pdata +0x691d 026128 nbranch vdd_calculate1 ,positive +0x691e 026129 fetcht 2 ,mem_reference_voltage +0x691f 026130 imul32 temp ,regb +0x6920 026131 copy regc ,pdata +0x6921 026132 imul32 rega ,pdata +0x6922 026133 iadd regb ,pdata +: 026134 vdd_calculate2: +0x6923 026135 idiv rega +0x6924 026136 call wait_div_end +0x6925 026137 quotient pdata +0x6926 026138 rtn +: 026140 vdd_calculate1: +0x6927 026141 copy temp ,pdata +0x6928 026142 fetcht 2 ,mem_adc_current_value +0x6929 026143 isub temp ,pdata +0x692a 026144 fetcht 2 ,mem_reference_voltage +0x692b 026145 imul32 temp ,regb +0x692c 026146 copy regc ,pdata +0x692d 026147 imul32 rega ,pdata +0x692e 026148 isub regb ,pdata +0x692f 026149 branch vdd_calculate2 +: 026160 adc_bat_percent_lowpower_out: +0x6930 026161 ifetch 8 ,rega +0x6931 026162 store 8 ,mem_pdatatemp +0x6932 026163 fetch 2 ,mem_pdatatemp +0x6933 026164 fetcht 2 ,mem_pdatatemp + 2 +0x6934 026165 isub temp ,rega +0x6935 026166 fetch 2 ,mem_pdatatemp + 6 +0x6936 026167 isub temp ,regb +0x6937 026168 fetcht 2 ,mem_pdatatemp + 4 +0x6938 026169 isub temp ,null +0x6939 026170 ncall adc_set_low_power_flag ,positive +0x693a 026171 mul32 regb ,100 ,pdata +0x693b 026172 idiv rega +0x693c 026173 call wait_div_end +0x693d 026174 quotient pdata +0x693e 026175 call adc_set_no_power_flag ,blank +0x693f 026176 rtn +: 026177 adc_set_low_power_flag: +0x6940 026178 fetch 1 ,mem_adc_power_flag +0x6941 026179 set1 0 ,pdata +0x6942 026180 store 1 ,mem_adc_power_flag +0x6943 026181 rtn +: 026182 adc_set_no_power_flag: +0x6944 026183 fetcht 1 ,mem_adc_power_flag +0x6945 026184 set1 1 ,temp +0x6946 026185 storet 1 ,mem_adc_power_flag +0x6947 026186 rtn +: 026191 keyscan_key_init: +0x6948 026192 fetch 2 ,mem_key_num_ptr +0x6949 026193 ifetch 1 ,pdata +: 026194 keyscan_key_init_next: +0x694a 026195 rtn blank +0x694b 026196 copy pdata ,loopcnt +0x694c 026198 fetch 2 ,mem_keyscan_ptr +0x694d 026199 increase 3 ,pdata +0x694e 026200 copy pdata ,rega +: 026201 keyscan_key_init_lp1: +0x694f 026202 ifetcht 1 ,rega +0x6950 026203 call gpio_config_input +0x6951 026204 increase key_conf_struct_len ,rega +0x6952 026205 loop keyscan_key_init_lp1 +: 026206 keyscan_key_init_end: +0x6953 026207 rtn +: 026209 keyscan_scan_key: +0x6954 026210 fetch 2 ,mem_keyscan_ptr +0x6955 026211 increase 3 ,pdata +0x6956 026212 copy pdata ,rega +0x6957 026214 force 0 ,regb +0x6958 026215 jam 0 ,mem_key_value_temp +: 026216 keyscan_scan_key_lp1: +0x6959 026217 ifetcht 1 ,rega +0x695a 026218 call gpio_get_bit +0x695b 026219 bpatchx patch34_1 ,mem_patch34 +0x695c 026220 fetch 2 ,mem_key_value_temp +0x695d 026221 copy regb ,queue +0x695e 026222 qsetflag true ,pdata +0x695f 026223 store 2 ,mem_key_value_temp +0x6960 026224 increase key_conf_struct_len ,rega +0x6961 026225 increase 1 ,regb +0x6962 026226 fetch 2 ,mem_key_num_ptr +0x6963 026227 ifetch 1 ,pdata +: 026228 keyscan_scan_key_lp1_next: +0x6964 026229 ixor regb ,null +0x6965 026230 nbranch keyscan_scan_key_lp1 ,zero +0x6966 026231 fetch 2 ,mem_key_value_temp +0x6967 026232 fetcht 2 ,mem_key_value +0x6968 026233 ixor temp ,null +0x6969 026234 rtn zero +0x696a 026235 enable user +0x696b 026236 rtn +: 026238 keyscan_process_lpm_before: +0x696c 026239 fetch 2 ,mem_key_num_ptr +0x696d 026240 ifetch 1 ,pdata +: 026241 keyscan_process_lpm_before_next: +0x696e 026242 rtn blank +0x696f 026243 copy pdata ,loopcnt +0x6970 026244 fetch 2 ,mem_keyscan_ptr +0x6971 026245 increase 3 ,pdata +0x6972 026246 copy pdata ,rega +: 026247 keyscan_process_lpm_before_lp1: +0x6973 026248 ifetcht 1 ,rega +0x6974 026249 call gpio_set_wake_by_current_state +0x6975 026250 increase key_conf_struct_len ,rega +0x6976 026251 loop keyscan_process_lpm_before_lp1 +: 026252 keyscan_process_lpm_before_end: +0x6977 026253 rtn +: 026255 keyscan_key_process: +0x6978 026256 arg key_scan_timer ,queue +0x6979 026257 call timer_check +0x697a 026258 nrtn blank +0x697b 026259 setarg 0x20 +0x697c 026260 arg key_scan_timer ,queue +0x697d 026261 call timer_init +0x697e 026262 disable user +0x697f 026263 call keyscan_process_lpm_before +0x6980 026264 bpatchx patch34_2 ,mem_patch34 +0x6981 026265 fetch 2 ,mem_key_num_ptr +0x6982 026266 ifetch 1 ,pdata +: 026267 keyscan_key_process_next: +0x6983 026268 rtn blank +0x6984 026269 call keyscan_scan_key +0x6985 026270 nbranch lpm_button_clean_wake_lock ,user +0x6986 026271 call lpm_button_get_wake_lock +0x6987 026272 disable user +0x6988 026273 fetch 2 ,mem_key_value_temp +0x6989 026274 store 2 ,mem_key_value_temp4 +0x698a 026275 jam 0 ,mem_key_value_temp6 +0x698b 026276 force 0 ,queue +: 026277 keyscan_key_lp1: +0x698c 026278 fetch 2 ,mem_key_value +0x698d 026279 rshift pdata ,temp +0x698e 026280 storet 2 ,mem_key_value +0x698f 026281 and pdata ,0x01 ,pdata +0x6990 026282 fetcht 2 ,mem_key_value_temp4 +0x6991 026283 and temp ,0x01 ,rega +0x6992 026284 rshift temp ,temp +0x6993 026285 storet 2 ,mem_key_value_temp4 +0x6994 026286 ixor rega ,null +0x6995 026287 ncall keyscan_send_key_data ,zero +0x6996 026288 fetch 2 ,mem_key_num_ptr +0x6997 026289 ifetch 1 ,pdata +: 026290 keyscan_key_lp1_next: +0x6998 026291 fetcht 1 ,mem_key_value_temp6 +0x6999 026292 increase 1 ,temp +0x699a 026293 storet 1 ,mem_key_value_temp6 +0x699b 026294 copy temp ,queue +0x699c 026295 ixor queue ,null +0x699d 026296 nbranch keyscan_key_lp1 ,zero +0x699e 026297 fetch 2 ,mem_key_value_temp +0x699f 026298 store 2 ,mem_key_value +0x69a0 026299 rtn +: 026300 keyscan_send_key_data: +0x69a1 026301 bpatchx patch34_3 ,mem_patch34 +0x69a2 026302 fetch 2 ,mem_keyscan_ptr +0x69a3 026303 increase 1 ,pdata +0x69a4 026304 ifetch 2 ,pdata +0x69a5 026305 branch callback_func +: 026316 pwm_init: +0x69a6 026317 hfetch 1 ,core_clksel +0x69a7 026318 ior rega ,pdata +0x69a8 026319 hstore 1 ,core_clksel +0x69a9 026320 hfetch 2 ,core_clkoff +0x69aa 026321 set0 clock_off_pwm ,pdata +0x69ab 026322 hstore 2 ,core_clkoff +0x69ac 026323 nop 100 +0x69ad 026324 rtn +: 026335 pwm_out_set: +0x69ae 026336 fetcht 3 ,mem_pdatatemp + 2 +0x69af 026337 setarg pwm_12mhz +0x69b0 026338 idiv temp +0x69b1 026339 call wait_div_end +0x69b2 026340 quotient temp +0x69b3 026341 fetch 1 ,mem_pdatatemp + 5 +0x69b4 026342 imul32 temp ,pdata +0x69b5 026343 div pdata ,100 +0x69b6 026344 call wait_div_end +0x69b7 026345 quotient rega +0x69b8 026346 copy temp ,pdata +0x69b9 026347 isub rega ,regb +0x69ba 026348 fetch 1 ,mem_pdatatemp + 1 +0x69bb 026349 call pwm_duty_cycle_set +0x69bc 026350 fetch 1 ,mem_pdatatemp +0x69bd 026351 branch pwm_enable +: 026354 pwm_duty_cycle_set: +0x69be 026355 beq 0 ,pwm_pwm0_duty_set +0x69bf 026356 beq 1 ,pwm_pwm1_duty_set +0x69c0 026357 beq 2 ,pwm_pwm2_duty_set +0x69c1 026358 beq 3 ,pwm_pwm3_duty_set +0x69c2 026359 beq 4 ,pwm_pwm4_duty_set +0x69c3 026360 beq 5 ,pwm_pwm5_duty_set +: 026361 pwm_pwm0_duty_set: +0x69c4 026362 arg core_pwm_pcnt0 ,contw +0x69c5 026363 branch pwm_set_pncnt +: 026364 pwm_pwm1_duty_set: +0x69c6 026365 arg core_pwm_pcnt1 ,contw +0x69c7 026366 branch pwm_set_pncnt +: 026367 pwm_pwm2_duty_set: +0x69c8 026368 arg core_pwm_pcnt2 ,contw +0x69c9 026369 branch pwm_set_pncnt +: 026370 pwm_pwm3_duty_set: +0x69ca 026371 arg core_pwm_pcnt3 ,contw +0x69cb 026372 branch pwm_set_pncnt +: 026373 pwm_pwm4_duty_set: +0x69cc 026374 arg core_pwm_pcnt4 ,contw +0x69cd 026375 branch pwm_set_pncnt +: 026376 pwm_pwm5_duty_set: +0x69ce 026377 arg core_pwm_pcnt5 ,contw +0x69cf 026378 branch pwm_set_pncnt +: 026379 pwm_set_pncnt: +0x69d0 026380 copy rega ,pdata +0x69d1 026381 istore 2 ,contw +0x69d2 026382 copy regb ,pdata +0x69d3 026383 istore 2 ,contw +0x69d4 026384 rtn +: 026388 pwm_enable: +0x69d5 026389 enable user +0x69d6 026390 branch pwm_gpio_set +: 026391 pwm_disable: +0x69d7 026392 disable user +: 026393 pwm_gpio_set: +0x69d8 026394 beq 4 ,pwm_gpio4_set +0x69d9 026395 beq 5 ,pwm_gpio5_set +0x69da 026396 beq 27 ,pwm_gpio27_set +0x69db 026397 beq 28 ,pwm_gpio28_set +0x69dc 026398 beq 3 ,pwm_gpio3_set +0x69dd 026399 beq 8 ,pwm_gpio8_set +0x69de 026400 beq 20 ,pwm_gpio20_set +0x69df 026401 beq 21 ,pwm_gpio21_set +0x69e0 026402 beq 22 ,pwm_gpio22_set +0x69e1 026403 beq 23 ,pwm_gpio23_set +0x69e2 026404 rtn +: 026407 pwm_gpio4_set: +0x69e3 026408 arg 6 ,queue +0x69e4 026409 branch pwm_one_set_select +: 026410 pwm_gpio5_set: +0x69e5 026411 arg 7 ,queue +0x69e6 026412 branch pwm_one_set_select +: 026413 pwm_gpio27_set: +0x69e7 026414 arg 8 ,queue +0x69e8 026415 branch pwm_one_set_select +: 026416 pwm_gpio28_set: +0x69e9 026417 arg 9 ,queue +0x69ea 026418 branch pwm_one_set_select +: 026419 pwm_gpio3_set: +0x69eb 026420 arg 10 ,queue +0x69ec 026421 branch pwm_one_set_select +: 026422 pwm_gpio8_set: +0x69ed 026423 arg 11 ,queue +0x69ee 026424 branch pwm_one_set_select +: 026425 pwm_gpio20_set: +0x69ef 026426 arg 12 ,queue +0x69f0 026427 branch pwm_tw0_set_select +: 026428 pwm_gpio21_set: +0x69f1 026429 arg 13 ,queue +0x69f2 026430 branch pwm_tw0_set_select +: 026431 pwm_gpio22_set: +0x69f3 026432 arg 14 ,queue +0x69f4 026433 branch pwm_tw0_set_select +: 026434 pwm_gpio23_set: +0x69f5 026435 arg 15 ,queue +0x69f6 026436 branch pwm_tw0_set_select +: 026438 pwm_set_select: +0x69f7 026439 hfetch 2 ,core_gpio_sel1 +0x69f8 026440 qsetflag user ,pdata +0x69f9 026441 hstore 2 ,core_gpio_sel1 +0x69fa 026442 copy rega ,queue +0x69fb 026443 hfetch 1 ,core_gpio_key2 +0x69fc 026444 qsetflag user ,pdata +0x69fd 026445 hstore 1 ,core_gpio_key2 +0x69fe 026446 rtn +: 026448 pwm_one_set_select: +0x69ff 026449 add queue ,-4 ,rega +0x6a00 026450 branch pwm_set_select +: 026452 pwm_tw0_set_select: +0x6a01 026453 add queue ,-10 ,rega +0x6a02 026454 branch pwm_set_select +: 026459 rfcomm_init: +0x6a03 026460 rtn wake +0x6a04 026461 jam 0 ,mem_rfcomm_send_more_pkt +0x6a05 026462 jam bits9600 ,memremoterpnbitrate +0x6a06 026463 jam databits8 ,memremoteprndatabits +0x6a07 026464 jam 0x11 ,memremoteprnxon +0x6a08 026465 jam 0x13 ,memremoteprnxoff +0x6a09 026466 setarg 0 +0x6a0a 026467 store 3 ,memremoteprnstopbit +0x6a0b 026468 store 1 ,mem_spp_state +0x6a0c 026469 jam 0 ,memui_reconnect_mode +: 026471 rfcomm_init_spp: +0x6a0d 026472 bpatchx patch34_4 ,mem_patch34 +0x6a0e 026473 setarg 0 +0x6a0f 026474 store 1 ,mem_spp_state +0x6a10 026475 store 1 ,mem_remote_spp_channel +0x6a11 026476 store 1 ,mem_pn_dlci +0x6a12 026477 fetch 1 ,mem_credit_flag +0x6a13 026478 beq credit_enable ,rfcomm_init_spp_with_credit +0x6a14 026479 jam 0x50 ,mem_credit_given +0x6a15 026480 rtn +: 026482 rfcomm_init_spp_with_credit: +0x6a16 026483 jam 0x00 ,mem_credit_given +0x6a17 026484 rtn +: 026486 set_cr_bit: +0x6a18 026487 or_into 0x02 ,temp +0x6a19 026488 rtn +: 026500 rfcomm_calculate_fcs_sabm: +0x6a1a 026501 copy temp ,pdata +0x6a1b 026502 reverse pdata ,pdata +0x6a1c 026503 store 1 ,memfcstemp3 +0x6a1d 026504 force ini_tx_sabm ,pdata +0x6a1e 026505 reverse pdata ,pdata +0x6a1f 026506 store 1 ,memfcstemp2 +0x6a20 026507 force 0x01 ,pdata +0x6a21 026508 reverse pdata ,pdata +0x6a22 026509 store 1 ,memfcstemp1 +0x6a23 026510 call caculate_fcs +0x6a24 026511 copy temp ,pdata +0x6a25 026512 rtn +: 026513 rfcomm_calculate_fcs_ua: +0x6a26 026514 reverse pdata ,pdata +0x6a27 026515 store 1 ,memfcstemp3 +0x6a28 026516 force rsp_tx_ua ,pdata +0x6a29 026517 reverse pdata ,pdata +0x6a2a 026518 store 1 ,memfcstemp2 +0x6a2b 026519 force 0x01 ,pdata +0x6a2c 026520 reverse pdata ,pdata +0x6a2d 026521 store 1 ,memfcstemp1 +0x6a2e 026522 branch caculate_fcs +: 026524 rfcomm_calculate_fcs_dlci0: +0x6a2f 026525 fetch 1 ,mem_rfcomm_initiator +0x6a30 026526 branch rfcomm_calculate_fcs_dlci0_res ,blank +0x6a31 026527 setarg 0x70 +0x6a32 026528 rtn +: 026529 rfcomm_calculate_fcs_dlci0_res: +0x6a33 026530 setarg 0xaa +0x6a34 026531 rtn +: 026533 rfcomm_save_fcs_uih: +0x6a35 026534 reverse pdata ,pdata +0x6a36 026535 store 1 ,memfcstemp3 +0x6a37 026536 force rsp_rx_uih ,pdata +0x6a38 026537 call caculate_uihdata_fcs +0x6a39 026538 fetcht 2 ,mem_contw_temp +0x6a3a 026539 copy temp ,contw +0x6a3b 026540 istore 1 ,contw +0x6a3c 026541 copy contw ,temp +0x6a3d 026542 storet 2 ,mem_contw_temp +0x6a3e 026543 force rsp_rx_uih_wdata ,pdata +0x6a3f 026544 call caculate_uihdata_fcs +0x6a40 026545 fetcht 2 ,mem_contw_temp +0x6a41 026546 copy temp ,contw +0x6a42 026547 istore 1 ,contw +0x6a43 026548 rtn +: 026557 caculate_uihdata_fcs: +0x6a44 026558 reverse pdata ,pdata +0x6a45 026559 store 1 ,memfcstemp2 +0x6a46 026560 fetch 2 ,memfcstemp2 +0x6a47 026561 lshift8 pdata ,pdata +0x6a48 026562 store 3 ,mem_mod2div_temp +0x6a49 026563 arg 0x107 ,rega +0x6a4a 026564 arg 0xf ,regb +0x6a4b 026565 call mod2div +0x6a4c 026566 xor_into 0xd7 ,pdata +0x6a4d 026567 invert pdata ,pdata +0x6a4e 026568 reverse pdata ,pdata +0x6a4f 026569 rtn +: 026579 caculate_fcs: +0x6a50 026580 fetch 3 ,memfcstemp1 +0x6a51 026581 store 3 ,mem_mod2div_temp +0x6a52 026582 arg 0x107 ,rega +0x6a53 026583 arg 0xf ,regb +0x6a54 026584 call mod2div +0x6a55 026585 lshift8 pdata ,pdata +0x6a56 026586 arg 0x7 ,regb +0x6a57 026587 call mod2div +0x6a58 026588 xor_into 0x2b ,pdata +0x6a59 026589 invert pdata ,pdata +0x6a5a 026590 reverse pdata ,pdata +0x6a5b 026591 copy pdata ,temp +0x6a5c 026592 rtn +: 026594 mod2div: +0x6a5d 026595 arg 0 ,regc +0x6a5e 026596 copy regb ,loopcnt +0x6a5f 026597 call right_shift_n +0x6a60 026598 icopy temp +: 026599 mod2div_loop: +0x6a61 026604 copy temp ,pdata +0x6a62 026605 lshift regc ,regc +0x6a63 026606 bbit0 8 ,mod2div_not_enough_reduction +0x6a64 026607 ixor rega ,temp +0x6a65 026608 increase 1 ,regc +: 026609 mod2div_not_enough_reduction: +0x6a66 026610 lshift temp ,temp +0x6a67 026611 fetch 3 ,mem_mod2div_temp +0x6a68 026612 increase -1 ,regb +0x6a69 026613 compare 0xff ,regb ,0xff +0x6a6a 026614 branch mod2div_end ,true +0x6a6b 026615 copy regb ,loopcnt +0x6a6c 026616 call right_shift_n +0x6a6d 026617 isolate1 0 ,pdata +0x6a6e 026618 setflag true ,0 ,temp +0x6a6f 026619 branch mod2div_loop +: 026620 mod2div_end: +0x6a70 026622 rshift temp ,pdata +0x6a71 026623 rtn +: 026625 get_rfcomm_snd_adss: +0x6a72 026626 fetcht 1 ,mem_pn_dlci +: 026627 dlci_to_address_cmd: +0x6a73 026629 lshift2 temp ,temp +0x6a74 026630 set1 rfcomm_address_ext_len ,temp +0x6a75 026631 fetch 1 ,mem_rfcomm_initiator +0x6a76 026632 ncall set_cr_bit ,blank +0x6a77 026633 storet 1 ,mem_rfcomm_send_adss +0x6a78 026634 rtn +: 026636 channel_to_dlci: +0x6a79 026638 lshift temp ,temp +0x6a7a 026639 fetch 1 ,mem_rfcomm_initiator +0x6a7b 026640 setflag blank ,0 ,temp +0x6a7c 026642 rtn +: 026643 rfcomm_rx_process_dlci0_sabm: +0x6a7d 026644 fetcht 1 ,mem_current_channel +0x6a7e 026645 jam 0xd7 ,mem_current_fcs +0x6a7f 026646 call rfcomm_send_ua +0x6a80 026647 fetch 1 ,mem_rfcomm_state +0x6a81 026648 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6a82 026649 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a83 026650 store 1 ,mem_rfcomm_state +0x6a84 026651 jam 0 ,mem_rfcomm_initiator +0x6a85 026652 branch rfcomm_rx_process_end +: 026653 rfcomm_rx_process_dlci0_ua: +0x6a86 026654 fetch 1 ,mem_rfcomm_state +0x6a87 026655 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a88 026656 store 1 ,mem_rfcomm_state +0x6a89 026657 branch rfcomm_rx_process_end +: 026660 rfcomm_rx_process: +0x6a8a 026661 bpatchx patch34_5 ,mem_patch34 +0x6a8b 026662 fetch 1 ,memui_reconnect_mode +0x6a8c 026663 beq no_reconnection ,rfcomm_rx_process_remote_page +0x6a8d 026664 branch rfcomm_rx_process_reconn +: 026666 rfcomm_rx_process_remote_page: +0x6a8e 026667 fetch 2 ,mem_l2cap_payload_ptr +0x6a8f 026668 copy pdata ,contr +0x6a90 026669 call get_rfcomm_head_struct +0x6a91 026670 fetch 1 ,mem_current_channel +0x6a92 026671 beq 0 ,parse_dlci0_rp +0x6a93 026672 branch parse_uih_rp +: 026673 parse_dlci0_rp: +0x6a94 026674 bpatchx patch34_6 ,mem_patch34 +0x6a95 026675 fetch 1 ,mem_current_frame_type +0x6a96 026676 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6a97 026677 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6a98 026678 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +0x6a99 026679 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +0x6a9a 026680 rtn +: 026683 parse_dlci0_rp_uih: +0x6a9b 026684 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6a9c 026685 copy pdata ,contr +0x6a9d 026686 call get_rfcomm_uih_head_struct +0x6a9e 026687 fetch 1 ,mem_uih_cmd_type +0x6a9f 026688 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +0x6aa0 026689 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +0x6aa1 026690 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +0x6aa2 026691 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +0x6aa3 026692 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +0x6aa4 026693 branch rfcomm_rx_process_end +: 026695 parse_dlci0_rp_uih_pn_cmd: +0x6aa5 026696 call parse_dlci0_rp_uih_pn_res_common +0x6aa6 026698 branch parse_dlci0_rp_uih_pn_cmd_spp +: 026700 parse_dlci0_rp_uih_pn_cmd_spp: +0x6aa7 026701 fetch 1 ,mem_spp_state +0x6aa8 026702 set1 rfcomm_channel_state_pn_cmd ,pdata +0x6aa9 026703 set1 rfcomm_channel_state_pn_res ,pdata +0x6aaa 026704 store 1 ,mem_spp_state +0x6aab 026705 call rfcomm_send_param_neg_res +0x6aac 026706 branch rfcomm_rx_process_end +: 026708 parse_dlci0_rp_uih_pn_res: +0x6aad 026709 call parse_dlci0_rp_uih_pn_res_common +0x6aae 026710 branch rfcomm_rx_process_end +: 026712 parse_dlci0_rp_uih_pn_res_common: +0x6aaf 026713 call get_param_payload_ptr +0x6ab0 026714 branch get_rfcomm_prarmer_negotiation +: 026716 get_rfcomm_param_modem_status: +0x6ab1 026717 call get_param_payload_ptr +0x6ab2 026718 ifetch 1 ,contr +0x6ab3 026719 rshift3 pdata ,pdata +0x6ab4 026720 store 1 ,mem_ms_channel +0x6ab5 026721 ifetch 1 ,contr +0x6ab6 026722 store 1 ,mem_ms_param +0x6ab7 026723 rtn +: 026726 get_rfcomm_head_struct: +0x6ab8 026727 ifetch 1 ,contr +0x6ab9 026728 store 1 ,mem_current_adss +0x6aba 026729 rshift3 pdata ,pdata +0x6abb 026730 store 1 ,mem_current_channel +0x6abc 026731 ifetch 1 ,contr +0x6abd 026732 store 1 ,mem_current_frame_type +: 026733 get_rfcomm_current_length: +0x6abe 026734 call get_rfcomm_length_common +0x6abf 026735 storet 2 ,mem_current_length +0x6ac0 026736 copy contr ,pdata +0x6ac1 026737 store 2 ,mem_rfcomm_uih_payload_ptr +0x6ac2 026738 rtn +: 026740 get_rfcomm_uih_head_struct: +0x6ac3 026741 ifetch 1 ,contr +0x6ac4 026742 rshift pdata ,pdata +0x6ac5 026743 store 1 ,mem_uih_cmd_type +0x6ac6 026744 call get_rfcomm_length_common +0x6ac7 026745 storet 2 ,mem_uih_length +0x6ac8 026746 copy contr ,pdata +0x6ac9 026747 store 2 ,mem_param_payload_ptr +0x6aca 026748 rtn +: 026751 get_param_payload_ptr: +0x6acb 026752 fetch 2 ,mem_param_payload_ptr +0x6acc 026753 copy pdata ,contr +0x6acd 026754 rtn +: 026756 get_rfcomm_length_common: +0x6ace 026757 ifetch 1 ,contr +0x6acf 026758 copy pdata ,temp +0x6ad0 026759 rshift temp ,temp +0x6ad1 026760 rtnbit1 0 +0x6ad2 026761 ifetch 1 ,contr +0x6ad3 026762 lshift3 pdata ,pdata +0x6ad4 026763 lshift4 pdata ,pdata +0x6ad5 026764 iadd temp ,temp +0x6ad6 026765 rtn +: 026767 get_rfcomm_prarmer_negotiation: +0x6ad7 026768 ifetch 1 ,contr +0x6ad8 026769 store 1 ,mem_pn_dlci +0x6ad9 026770 ifetch 1 ,contr +0x6ada 026771 store 1 ,mem_pn_credit_flow_type_info +0x6adb 026772 ifetch 1 ,contr +0x6adc 026773 store 1 ,mem_pn_priority +0x6add 026774 ifetch 1 ,contr +0x6ade 026775 store 1 ,mem_pn_acknowledg_timer +0x6adf 026776 ifetch 2 ,contr +0x6ae0 026777 store 2 ,mem_pn_max_frame_size +0x6ae1 026778 ifetch 1 ,contr +0x6ae2 026779 store 1 ,mem_pn_max_retrans +0x6ae3 026780 ifetch 1 ,contr +0x6ae4 026781 store 1 ,mem_remote_credits +0x6ae5 026782 rtn +: 026785 parse_dlci0_rp_uih_ms_cmd: +0x6ae6 026786 call get_rfcomm_param_modem_status +0x6ae7 026788 branch parse_dlci0_rp_uih_ms_cmd_spp +: 026790 parse_dlci0_rp_uih_ms_cmd_spp: +0x6ae8 026791 fetch 1 ,mem_spp_state +0x6ae9 026792 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6aea 026793 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6aeb 026794 store 1 ,mem_spp_state +0x6aec 026795 fetcht 1 ,mem_pn_dlci +0x6aed 026796 lshift2 temp ,temp +0x6aee 026797 or_into 3 ,temp +0x6aef 026798 call rfcomm_send_modem_status_res +0x6af0 026799 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +0x6af1 026800 branch rfcomm_rx_process_end +: 026802 parse_dlci0_rp_uih_ms_res: +0x6af2 026803 jam bt_evt_spp_connected ,mem_fifo_temp +0x6af3 026804 call ui_ipc_send_event +0x6af4 026805 call get_rfcomm_param_modem_status +0x6af5 026806 fetch 1 ,mem_ms_channel +0x6af6 026807 sub pdata ,1 ,null +0x6af7 026808 branch parse_dlci0_rp_uih_ms_res_spp ,zero +0x6af8 026809 branch assert +: 026810 parse_dlci0_rp_uih_ms_res_spp: +0x6af9 026811 fetch 1 ,mem_spp_state +0x6afa 026812 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6afb 026813 store 1 ,mem_spp_state +0x6afc 026814 branch rfcomm_rx_process_end +: 026816 parse_dlci0_rp_uih_cmd_port: +0x6afd 026817 call get_param_payload_ptr +0x6afe 026818 ifetch 1 ,contr +0x6aff 026819 store 1 ,mem_rpn_dlci +0x6b00 026820 call l2cap_malloc_rfcomm_channel +0x6b01 026821 call l2cap_get_rfcomm_tx_buff +0x6b02 026822 setarg 0x000e +0x6b03 026823 istore 2 ,contw +0x6b04 026824 fetch 2 ,mem_rfcomm_remote_cid +0x6b05 026825 istore 2 ,contw +0x6b06 026826 fetch 1 ,mem_rfcomm_initiator +0x6b07 026828 lshift pdata ,pdata +0x6b08 026829 set1 0 ,pdata +0x6b09 026830 istore 1 ,contw +0x6b0a 026831 bpatchx patch34_7 ,mem_patch34 +0x6b0b 026832 setarg 0x15ef +0x6b0c 026833 istore 2 ,contw +0x6b0d 026834 setarg 0x1191 +0x6b0e 026835 istore 2 ,contw +0x6b0f 026838 fetch 1 ,mem_rpn_dlci +0x6b10 026839 istore 1 ,contw +0x6b11 026840 setarg 0x000007 +0x6b12 026841 istore 5 ,contw +0x6b13 026844 setarg 0x01 +0x6b14 026845 istore 2 ,contw +0x6b15 026848 call rfcomm_calculate_fcs_dlci0 +0x6b16 026849 istore 1 ,contw +0x6b17 026850 rtn +: 026854 parse_uih_rp: +0x6b18 026855 branch parse_uih_rp_spp +: 026857 parse_uih_rp_spp: +0x6b19 026858 bpatchx patch35_0 ,mem_patch35 +0x6b1a 026859 fetch 1 ,mem_current_frame_type +0x6b1b 026860 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +0x6b1c 026861 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +0x6b1d 026862 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b1e 026863 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b1f 026864 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +0x6b20 026865 rtn +: 026866 parse_uih_rp_spp_ua: +0x6b21 026867 fetch 1 ,mem_spp_state +0x6b22 026868 set1 rfcomm_channel_state_ua ,pdata +0x6b23 026869 store 1 ,mem_spp_state +0x6b24 026870 branch rfcomm_rx_process_end +: 026871 parse_uih_rp_spp_sabm: +0x6b25 026872 fetch 1 ,mem_spp_state +0x6b26 026873 set1 rfcomm_channel_state_ua ,pdata +0x6b27 026874 set1 rfcomm_channel_state_sabm ,pdata +0x6b28 026875 store 1 ,mem_spp_state +0x6b29 026876 fetch 1 ,mem_current_adss +0x6b2a 026877 call rfcomm_calculate_fcs_ua +0x6b2b 026878 store 1 ,mem_current_fcs +0x6b2c 026879 call rfcomm_send_ua +0x6b2d 026880 fetch 1 ,mem_current_adss +0x6b2e 026881 rshift2 pdata ,pdata +0x6b2f 026882 store 1 ,mem_pn_dlci +0x6b30 026883 lshift2 pdata ,pdata +0x6b31 026884 set0 rfcomm_address_cr ,pdata +0x6b32 026885 set1 rfcomm_address_ext_len ,pdata +0x6b33 026886 arg mem_hiufcs_spp ,temp +0x6b34 026887 storet 2 ,mem_contw_temp +0x6b35 026888 call rfcomm_save_fcs_uih +0x6b36 026889 branch rfcomm_rx_process_end +: 026891 parse_uih_spp_uih_credits: +0x6b37 026892 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b38 026893 copy pdata ,contr +0x6b39 026894 increase 1 ,pdata +0x6b3a 026895 store 2 ,mem_rfcomm_uih_payload_ptr +0x6b3b 026896 ifetch 1 ,contr +0x6b3c 026897 fetcht 1 ,mem_remote_credits +0x6b3d 026898 iadd temp ,pdata +0x6b3e 026899 store 1 ,mem_remote_credits +: 026900 parse_uih_spp_uih: +0x6b3f 026901 call rfcomm_increase_credit_given +: 026902 parse_uih_spp_uih_cont: +0x6b40 026903 call get_rfcomm_snd_adss +0x6b41 026904 call rfcomm_send_uih_without_payload +0x6b42 026905 call spp_process_rx_data +0x6b43 026906 branch rfcomm_rx_process_end +: 026908 parse_uih_rp_spp_disconn_send_event: +0x6b44 026909 jam bt_evt_spp_disconnected ,mem_fifo_temp +0x6b45 026910 call ui_ipc_send_event +: 026911 parse_uih_rp_spp_disconn: +0x6b46 026912 call rfcomm_init_spp +0x6b47 026913 fetch 1 ,mem_current_adss +0x6b48 026914 call rfcomm_calculate_fcs_ua +0x6b49 026915 store 1 ,mem_current_fcs +0x6b4a 026916 call rfcomm_send_ua +0x6b4b 026917 branch rfcomm_rx_process_end +: 026922 rfcomm_rx_process_reconn: +0x6b4c 026923 fetch 2 ,mem_l2cap_payload_ptr +0x6b4d 026924 copy pdata ,contr +0x6b4e 026925 call get_rfcomm_head_struct +0x6b4f 026926 fetch 1 ,mem_current_channel +0x6b50 026927 beq 0 ,parse_dlci0_reconn +0x6b51 026928 branch parse_uih_reconn +: 026930 parse_dlci0_reconn: +0x6b52 026931 bpatchx patch35_1 ,mem_patch35 +0x6b53 026932 fetch 1 ,mem_current_frame_type +0x6b54 026933 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6b55 026934 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6b56 026935 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +0x6b57 026936 branch rfcomm_rx_process_end +: 026937 parse_dlci0_reconn_uih: +0x6b58 026938 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b59 026939 copy pdata ,contr +0x6b5a 026940 call get_rfcomm_uih_head_struct +0x6b5b 026941 fetch 1 ,mem_uih_cmd_type +0x6b5c 026942 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +0x6b5d 026943 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +0x6b5e 026944 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +0x6b5f 026945 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +0x6b60 026946 branch rfcomm_rx_process_end +: 026948 parse_dlci0_reconn_uih_pn_cmd: +0x6b61 026949 call parse_dlci0_rp_uih_pn_res_common +0x6b62 026950 fetch 1 ,mem_pn_dlci +0x6b63 026951 rshift pdata ,pdata +0x6b64 026952 fetcht 1 ,mem_remote_spp_channel +0x6b65 026953 isub temp ,null +0x6b66 026954 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +0x6b67 026955 branch assert +: 026956 parse_dlci0_reconn_uih_pn_cmd_spp: +0x6b68 026957 fetch 1 ,mem_spp_state +0x6b69 026958 set1 rfcomm_channel_state_pn_res ,pdata +0x6b6a 026959 store 1 ,mem_spp_state +0x6b6b 026960 branch rfcomm_rx_process_end +: 026962 parse_dlci0_reconn_uih_ms_cmd: +0x6b6c 026963 call get_rfcomm_param_modem_status +0x6b6d 026964 fetch 1 ,mem_ms_channel +0x6b6e 026965 fetcht 1 ,mem_remote_spp_channel +0x6b6f 026966 isub temp ,null +0x6b70 026967 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +0x6b71 026968 branch assert +0x6b72 026969 branch rfcomm_rx_process_end +: 026970 parse_dlci0_reconn_uih_ms_cmd_spp: +0x6b73 026971 fetch 1 ,mem_spp_state +0x6b74 026972 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6b75 026973 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6b76 026974 store 1 ,mem_spp_state +0x6b77 026975 fetcht 1 ,mem_pn_dlci +0x6b78 026976 lshift2 temp ,temp +0x6b79 026977 or_into 3 ,temp +0x6b7a 026978 call rfcomm_send_modem_status_res +0x6b7b 026979 branch rfcomm_rx_process_end +: 026981 parse_dlci0_reconn_uih_ms_res: +0x6b7c 026982 call get_rfcomm_param_modem_status +0x6b7d 026983 fetch 1 ,mem_ms_channel +0x6b7e 026984 fetcht 1 ,mem_remote_spp_channel +0x6b7f 026985 isub temp ,null +0x6b80 026986 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +0x6b81 026987 branch assert +: 026988 parse_dlci0_reconn_uih_ms_res_spp: +0x6b82 026989 fetch 1 ,mem_spp_state +0x6b83 026990 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6b84 026991 store 1 ,mem_spp_state +0x6b85 026992 branch rfcomm_rx_process_end +: 026994 parse_uih_reconn: +0x6b86 026995 fetch 1 ,mem_current_channel +0x6b87 026996 fetcht 1 ,mem_remote_spp_channel +0x6b88 026997 isub temp ,null +0x6b89 026998 branch parse_uih_reconn_spp ,zero +0x6b8a 026999 branch assert +0x6b8b 027000 branch rfcomm_rx_process_end +: 027002 parse_uih_reconn_spp: +0x6b8c 027003 fetch 1 ,mem_current_frame_type +0x6b8d 027004 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +0x6b8e 027005 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b8f 027006 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b90 027007 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn +: 027008 parse_uih_reconn_spp_ua: +0x6b91 027009 fetch 1 ,mem_spp_state +0x6b92 027010 set1 rfcomm_channel_state_ua ,pdata +0x6b93 027011 store 1 ,mem_spp_state +0x6b94 027012 branch rfcomm_rx_process_end +: 027013 parse_uih_reconn_spp_sabm: +0x6b95 027014 branch parse_uih_reconn_spp_sabm +: 027015 parse_uih_reconn_spp_disconn: +0x6b96 027016 branch parse_uih_rp_spp_disconn +: 027017 rfcomm_rx_process_end: +0x6b97 027018 rtn +: 027020 rfcomm_send_more_pkt: +0x6b98 027021 fetch 1 ,mem_rfcomm_send_more_pkt +0x6b99 027022 rtn blank +0x6b9a 027023 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +0x6b9b 027024 branch assert +: 027026 rfcomm_send_more_pkt_msc_cmd_spp: +0x6b9c 027027 jam 0 ,mem_rfcomm_send_more_pkt +0x6b9d 027028 call l2cap_malloc_rfcomm_channel +0x6b9e 027029 arg spp_slave_channel ,temp +0x6b9f 027030 fetcht 1 ,mem_pn_dlci +0x6ba0 027031 lshift2 temp ,temp +: 027032 rfcomm_send_more_pkt_msc_cmd_spp0: +0x6ba1 027033 or_into 0x03 ,temp +0x6ba2 027034 arg 0xaa ,rega +0x6ba3 027035 call rfcomm_send_modem_status_cmd +0x6ba4 027036 call l2cap_get_rfcomm_tx_buff +0x6ba5 027037 copy contw ,contr +0x6ba6 027038 ifetch 2 ,contr +0x6ba7 027039 branch assert ,blank +0x6ba8 027040 rtn +: 027042 rfcomm_send_sabm: +0x6ba9 027043 call l2cap_get_rfcomm_tx_buff +0x6baa 027044 setarg 0x0004 +0x6bab 027045 istore 2 ,contw +0x6bac 027046 fetch 2 ,mem_rfcomm_remote_cid +0x6bad 027047 istore 2 ,contw +0x6bae 027048 fetch 1 ,mem_current_adss +0x6baf 027049 istore 1 ,contw +0x6bb0 027050 bpatchx patch35_2 ,mem_patch35 +0x6bb1 027051 setarg 0x013f +0x6bb2 027052 istore 2 ,contw +0x6bb3 027053 fetch 1 ,mem_current_fcs +0x6bb4 027054 istore 1 ,contw +0x6bb5 027055 rtn +: 027056 rfcomm_send_ua: +0x6bb6 027057 call l2cap_malloc_rfcomm_channel +0x6bb7 027058 call l2cap_get_rfcomm_tx_buff +0x6bb8 027059 setarg 0x0004 +0x6bb9 027060 istore 2 ,contw +0x6bba 027061 fetch 2 ,mem_rfcomm_remote_cid +0x6bbb 027062 istore 2 ,contw +0x6bbc 027063 fetch 1 ,mem_current_adss +0x6bbd 027064 istore 1 ,contw +0x6bbe 027065 bpatchx patch35_3 ,mem_patch35 +0x6bbf 027066 setarg 0x0173 +0x6bc0 027067 istore 2 ,contw +0x6bc1 027068 fetch 1 ,mem_current_fcs +0x6bc2 027069 istore 1 ,contw +0x6bc3 027070 rtn +: 027071 rfcomm_send_param_neg_cmd: +0x6bc4 027072 call l2cap_get_rfcomm_tx_buff +0x6bc5 027073 setarg 0x000e +0x6bc6 027074 istore 2 ,contw +0x6bc7 027075 fetch 2 ,mem_rfcomm_remote_cid +0x6bc8 027076 istore 2 ,contw +0x6bc9 027077 fetch 1 ,mem_rfcomm_initiator +0x6bca 027078 lshift pdata ,pdata +0x6bcb 027079 set1 0 ,pdata +0x6bcc 027080 istore 1 ,contw +0x6bcd 027081 bpatchx patch35_4 ,mem_patch35 +0x6bce 027082 setarg 0x15ef +0x6bcf 027083 istore 2 ,contw +0x6bd0 027084 setarg 0x1183 +0x6bd1 027085 istore 2 ,contw +0x6bd2 027086 copy temp ,pdata +0x6bd3 027087 istore 1 ,contw +0x6bd4 027088 setarg 0x0000f0 +0x6bd5 027089 istore 3 ,contw +0x6bd6 027090 setarg rfcomm_max_frame_size +0x6bd7 027091 istore 2 ,contw +0x6bd8 027092 setarg 0 +0x6bd9 027093 istore 1 ,contw +0x6bda 027094 setarg 0x01 +0x6bdb 027095 istore 1 ,contw +0x6bdc 027096 call rfcomm_calculate_fcs_dlci0 +0x6bdd 027097 istore 1 ,contw +0x6bde 027098 jam 0x10 ,mem_credit_given +0x6bdf 027099 rtn +: 027100 rfcomm_send_param_neg_res: +0x6be0 027101 call l2cap_malloc_rfcomm_channel +0x6be1 027102 call l2cap_get_rfcomm_tx_buff +0x6be2 027103 setarg 0x000e +0x6be3 027104 istore 2 ,contw +0x6be4 027105 fetch 2 ,mem_rfcomm_remote_cid +0x6be5 027106 istore 2 ,contw +0x6be6 027107 fetch 1 ,mem_rfcomm_initiator +0x6be7 027108 lshift pdata ,pdata +0x6be8 027109 set1 0 ,pdata +0x6be9 027110 istore 1 ,contw +0x6bea 027111 bpatchx patch35_5 ,mem_patch35 +0x6beb 027112 setarg 0x15ef +0x6bec 027113 istore 2 ,contw +0x6bed 027114 setarg 0x1181 +0x6bee 027115 istore 2 ,contw +0x6bef 027116 fetch 1 ,mem_pn_dlci +0x6bf0 027117 istore 1 ,contw +0x6bf1 027118 setarg 0x0000e0 +0x6bf2 027119 istore 3 ,contw +0x6bf3 027120 fetch 2 ,mem_rfcomm_max_frame_size +0x6bf4 027121 istore 2 ,contw +0x6bf5 027122 setarg 0x00 +0x6bf6 027123 istore 1 ,contw +0x6bf7 027124 fetch 1 ,mem_rfcomm_credit_init_data +0x6bf8 027125 istore 1 ,contw +0x6bf9 027126 call rfcomm_calculate_fcs_dlci0 +0x6bfa 027127 istore 1 ,contw +0x6bfb 027128 rtn +: 027129 rfcomm_send_modem_status_cmd: +0x6bfc 027130 call l2cap_get_rfcomm_tx_buff +0x6bfd 027131 setarg 0x0008 +0x6bfe 027132 istore 2 ,contw +0x6bff 027133 fetch 2 ,mem_rfcomm_remote_cid +0x6c00 027134 istore 2 ,contw +0x6c01 027135 fetch 1 ,mem_rfcomm_initiator +0x6c02 027136 lshift pdata ,pdata +0x6c03 027137 set1 0 ,pdata +0x6c04 027138 istore 1 ,contw +0x6c05 027139 bpatchx patch35_6 ,mem_patch35 +0x6c06 027140 setarg 0x09ef +0x6c07 027141 istore 2 ,contw +0x6c08 027142 setarg 0x05e3 +0x6c09 027143 istore 2 ,contw +0x6c0a 027144 copy temp ,pdata +0x6c0b 027145 istore 1 ,contw +0x6c0c 027146 setarg 0x8d +0x6c0d 027147 istore 1 ,contw +0x6c0e 027148 call rfcomm_calculate_fcs_dlci0 +0x6c0f 027149 istore 1 ,contw +0x6c10 027150 rtn +: 027152 rfcomm_send_modem_status_res: +0x6c11 027153 call l2cap_malloc_rfcomm_channel +0x6c12 027154 call l2cap_get_rfcomm_tx_buff +0x6c13 027155 setarg 0x0008 +0x6c14 027156 istore 2 ,contw +0x6c15 027157 fetch 2 ,mem_rfcomm_remote_cid +0x6c16 027158 istore 2 ,contw +0x6c17 027159 copy temp ,timeup +0x6c18 027160 fetch 1 ,mem_rfcomm_initiator +0x6c19 027161 lshift pdata ,pdata +0x6c1a 027162 set1 0 ,pdata +0x6c1b 027163 istore 1 ,contw +0x6c1c 027164 bpatchx patch35_7 ,mem_patch35 +0x6c1d 027165 setarg 0x09ef +0x6c1e 027166 istore 2 ,contw +0x6c1f 027167 setarg 0x05e1 +0x6c20 027168 istore 2 ,contw +0x6c21 027169 copy timeup ,pdata +0x6c22 027170 istore 1 ,contw +0x6c23 027171 setarg 0x8d +0x6c24 027172 istore 1 ,contw +0x6c25 027173 call rfcomm_calculate_fcs_dlci0 +0x6c26 027174 istore 1 ,contw +0x6c27 027175 rtn +: 027177 rfcomm_send_uih_without_payload: +0x6c28 027178 bpatchx patch36_0 ,mem_patch36 +0x6c29 027179 fetch 1 ,mem_credit_given +0x6c2a 027180 rtn blank +0x6c2b 027181 hfetch 2 ,core_uart_rxitems +0x6c2c 027182 nrtn blank +0x6c2d 027183 copy rega ,pdata +0x6c2e 027184 store 1 ,mem_pdatatemp + 1 +0x6c2f 027185 storet 1 ,mem_pdatatemp +0x6c30 027186 call l2cap_malloc_is_fifo_full +0x6c31 027187 nrtn blank +0x6c32 027188 call l2cap_malloc_rfcomm_channel +0x6c33 027189 call l2cap_get_rfcomm_tx_buff +0x6c34 027190 setarg 0x05 +0x6c35 027191 istore 2 ,contw +0x6c36 027192 fetch 2 ,mem_rfcomm_remote_cid +0x6c37 027193 istore 2 ,contw +0x6c38 027194 fetch 1 ,mem_rfcomm_send_adss +0x6c39 027195 istore 1 ,contw +0x6c3a 027196 setarg 0x01ff +0x6c3b 027197 istore 2 ,contw +0x6c3c 027198 fetch 1 ,mem_credit_given +0x6c3d 027199 istore 1 ,contw +0x6c3e 027200 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c3f 027201 istore 1 ,contw +0x6c40 027202 jam 0 ,mem_credit_given +0x6c41 027203 rtn +: 027205 rfcomm_increase_credit_given: +0x6c42 027206 bpatchx patch36_1 ,mem_patch36 +0x6c43 027207 fetch 1 ,mem_credit_flag +0x6c44 027208 rtneq credit_enable +0x6c45 027209 fetch 2 ,mem_current_length +0x6c46 027210 rtn blank +0x6c47 027211 fetch 1 ,mem_credit_given +0x6c48 027212 increase 1 ,pdata +0x6c49 027213 store 1 ,mem_credit_given +0x6c4a 027214 rtn +: 027216 spp_process_rx_data: +0x6c4b 027217 fetch 2 ,mem_cb_receive_spp_data +0x6c4c 027218 branch callback_func +: 027220 spp_tx_rfcomm_packet: +0x6c4d 027221 bpatchx patch36_2 ,mem_patch36 +0x6c4e 027223 fetch 1 ,mem_remote_credits +0x6c4f 027224 rtn blank +0x6c50 027225 increase -1 ,pdata +0x6c51 027226 store 1 ,mem_remote_credits +0x6c52 027227 fetch 2 ,mem_pn_max_frame_size +0x6c53 027228 fetcht 2 ,mem_current_packet_length +0x6c54 027229 isub temp ,null +0x6c55 027230 branch ssp_tx_rfcomm_from_uart ,positive +0x6c56 027231 store 2 ,mem_current_packet_length +: 027232 ssp_tx_rfcomm_from_uart: +0x6c57 027233 fetch 1 ,mem_credit_given +0x6c58 027234 branch ssp_tx_rfcomm_from_uart_without_credit ,blank +0x6c59 027235 jam 1 ,mem_rfcomm_send_offset +0x6c5a 027236 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c5b 027237 store 1 ,mem_rfcomm_send_fcs +0x6c5c 027238 setarg rsp_rx_uih_wdata +0x6c5d 027239 store 1 ,mem_rfcomm_send_frame_type +0x6c5e 027240 branch ssp_tx_rfcomm_from_uart_common +: 027241 ssp_tx_rfcomm_from_uart_without_credit: +0x6c5f 027242 jam 0 ,mem_rfcomm_send_offset +0x6c60 027243 fetch 1 ,mem_hiufcs_spp +0x6c61 027244 store 1 ,mem_rfcomm_send_fcs +0x6c62 027245 setarg rsp_tx_uih +0x6c63 027246 store 1 ,mem_rfcomm_send_frame_type +: 027247 ssp_tx_rfcomm_from_uart_common: +0x6c64 027248 bpatchx patch36_3 ,mem_patch36 +0x6c65 027249 fetch 2 ,mem_current_packet_length +0x6c66 027250 sub pdata ,127 ,null +0x6c67 027251 branch ssp_tx_rfcomm_from_uart_common0 ,positive +0x6c68 027252 fetch 1 ,mem_rfcomm_send_offset +0x6c69 027253 increase 1 ,pdata +0x6c6a 027254 store 1 ,mem_rfcomm_send_offset +: 027255 ssp_tx_rfcomm_from_uart_common0: +0x6c6b 027256 call get_rfcomm_snd_adss +0x6c6c 027257 fetch 2 ,mem_current_packet_length +0x6c6d 027258 increase 8 ,pdata +0x6c6e 027259 fetcht 1 ,mem_rfcomm_send_offset +0x6c6f 027260 iadd temp ,rega +0x6c70 027262 call l2cap_malloc +0x6c71 027263 store 2 ,mem_rfcomm_tx_buff_ptr +0x6c72 027264 increase 4 ,pdata +0x6c73 027265 store 2 ,mem_rfcomm_tx_payload_ptr +0x6c74 027266 copy pdata ,contw +0x6c75 027267 fetch 1 ,mem_rfcomm_send_adss +0x6c76 027268 istore 1 ,contw +0x6c77 027269 fetch 1 ,mem_rfcomm_send_frame_type +0x6c78 027270 istore 1 ,contw +0x6c79 027271 call ssp_tx_write_length +0x6c7a 027272 call ssp_tx_write_given_credit +0x6c7b 027273 bpatchx patch36_4 ,mem_patch36 +0x6c7c 027274 fetch 2 ,mem_nl_rx_data_src +0x6c7d 027275 copy pdata ,contru +0x6c7e 027276 fetch 2 ,mem_current_packet_length +0x6c7f 027277 copy pdata ,loopcnt +0x6c80 027278 call uart_copy_rx_bytes_fast +0x6c81 027279 copy contw ,temp +0x6c82 027280 copy contru ,pdata +0x6c83 027281 store 2 ,mem_nl_rx_data_src +0x6c84 027282 copy temp ,contw +0x6c85 027283 fetch 1 ,mem_rfcomm_send_fcs +0x6c86 027284 istore 1 ,contw +0x6c87 027285 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x6c88 027286 copy pdata ,contw +0x6c89 027287 fetch 2 ,mem_current_packet_length +0x6c8a 027288 fetcht 1 ,mem_rfcomm_send_offset +0x6c8b 027289 iadd temp ,pdata +0x6c8c 027290 increase 4 ,pdata +0x6c8d 027291 istore 2 ,contw +0x6c8e 027292 fetch 2 ,mem_rfcomm_remote_cid +0x6c8f 027293 istore 2 ,contw +0x6c90 027294 jam 0 ,mem_credit_given +0x6c91 027295 fetch 2 ,mem_nl_rx_len_all +0x6c92 027296 beq 0 ,module_hci_command_tx_spp_tx_complete +0x6c93 027297 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x6c94 027298 rtn +: 027300 ssp_tx_write_length: +0x6c95 027301 bpatchx patch36_5 ,mem_patch36 +0x6c96 027302 fetch 2 ,mem_current_packet_length +0x6c97 027303 sub pdata ,0x7f ,null +0x6c98 027304 nbranch ssp_tx_write_long_packet ,positive +0x6c99 027305 lshift pdata ,pdata +0x6c9a 027306 set1 0 ,pdata +0x6c9b 027307 istore 1 ,contw +0x6c9c 027308 rtn +: 027309 ssp_tx_write_long_packet: +0x6c9d 027310 fetch 2 ,mem_current_packet_length +0x6c9e 027311 rshift3 pdata ,pdata +0x6c9f 027312 rshift4 pdata ,temp +0x6ca0 027313 and_into 0x7f ,pdata +0x6ca1 027314 lshift pdata ,pdata +0x6ca2 027315 set0 0 ,pdata +0x6ca3 027316 istore 1 ,contw +0x6ca4 027317 istoret 1 ,contw +0x6ca5 027318 rtn +: 027319 ssp_tx_write_given_credit: +0x6ca6 027320 fetch 1 ,mem_credit_given +0x6ca7 027321 rtn blank +0x6ca8 027322 istore 1 ,contw +0x6ca9 027323 rtn +: 027328 scheduler_process: +0x6caa 027329 bpatchx patch36_6 ,mem_patch36 +0x6cab 027330 call check_51cmd +0x6cac 027331 call app_process_bb_event +0x6cad 027332 call process_conn_sm +0x6cae 027334 bpatchx patch36_7 ,mem_patch36 +0x6caf 027335 call sp_calc_sequence +0x6cb0 027336 call simple_pairing_sequence +0x6cb1 027337 call master_simple_paring_sequence +0x6cb2 027340 call l2cap_malloc_is_fifo_full +0x6cb3 027341 nrtn blank +0x6cb4 027343 call l2cap_call_proc_sigal_pending +0x6cb5 027344 call l2cap_malloc_is_fifo_full +0x6cb6 027345 nrtn blank +0x6cb7 027346 bpatchx patch37_0 ,mem_patch37 +0x6cb8 027348 call process_upper_sm +0x6cb9 027349 call l2cap_send_config_req +0x6cba 027350 call rfcomm_send_more_pkt +: 027351 scheduler_process0: +0x6cbb 027352 call scheduler_tx_disconnect_hid +0x6cbc 027353 bpatchx patch37_1 ,mem_patch37 +0x6cbd 027356 branch app_process_bt +: 027358 scheduler_tx_disconnect_hid: +0x6cbe 027359 fetch 1 ,mem_control_tasks +0x6cbf 027360 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +0x6cc0 027361 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +0x6cc1 027362 rtn +: 027364 scheduler_tx_l2cap_pkt: +0x6cc2 027365 bpatchx patch37_2 ,mem_patch37 +0x6cc3 027366 call l2cap_malloc_is_fifo_empty +0x6cc4 027367 rtn blank +0x6cc5 027368 fetch 1 ,mem_op +0x6cc6 027369 rtnbit1 op_txl2cap +0x6cc7 027370 call l2cap_malloc_fifo_out +0x6cc8 027371 store 2 ,mem_txptr +0x6cc9 027372 copy pdata ,contr +0x6cca 027373 ifetch 2 ,contr +0x6ccb 027374 increase 4 ,pdata +0x6ccc 027375 store 2 ,mem_tx_len +0x6ccd 027376 jam 6 ,mem_tx_lch +0x6cce 027377 bpatchx patch37_3 ,mem_patch37 +0x6ccf 027378 fetch 2 ,mem_l2cap_tx_multi_offset +0x6cd0 027379 branch scheduler_tx_l2cap_start_pkt ,blank +0x6cd1 027380 fetch 1 ,mem_op +0x6cd2 027381 rtnbit0 op_pkt_comp +0x6cd3 027382 set0 op_pkt_comp ,pdata +0x6cd4 027383 store 1 ,mem_op +0x6cd5 027384 jam 5 ,mem_tx_lch +0x6cd6 027385 fetcht 2 ,mem_l2cap_tx_multi_offset +0x6cd7 027386 fetch 2 ,mem_txptr +0x6cd8 027387 iadd temp ,pdata +0x6cd9 027388 store 2 ,mem_txptr +0x6cda 027389 fetch 2 ,mem_tx_len +0x6cdb 027390 isub temp ,pdata +0x6cdc 027391 store 2 ,mem_tx_len +: 027392 scheduler_tx_l2cap_start_pkt: +0x6cdd 027393 bpatchx patch37_4 ,mem_patch37 +0x6cde 027394 fetch 2 ,mem_tx_len +0x6cdf 027395 branch assert ,blank +0x6ce0 027396 arg l2cap_max_pkt_len ,temp +0x6ce1 027397 isub temp ,pdata +0x6ce2 027398 nbranch scheduler_tx_l2cap_last_pkt ,positive +0x6ce3 027399 bpatchx patch37_5 ,mem_patch37 +0x6ce4 027400 storet 2 ,mem_tx_len +0x6ce5 027401 fetch 2 ,mem_l2cap_tx_multi_offset +0x6ce6 027402 iadd temp ,pdata +0x6ce7 027403 store 2 ,mem_l2cap_tx_multi_offset +0x6ce8 027404 branch scheduler_tx_l2cap_pkt_end +: 027405 scheduler_tx_l2cap_last_pkt: +0x6ce9 027406 setarg 0 +0x6cea 027407 store 2 ,mem_l2cap_tx_multi_offset +: 027408 scheduler_tx_l2cap_pkt_end: +0x6ceb 027409 fetch 1 ,mem_op +0x6cec 027410 set1 op_txl2cap ,pdata +0x6ced 027411 store 1 ,mem_op +0x6cee 027412 rtn +: 027414 scheduler_start_upper_sm: +0x6cef 027415 fetch 1 ,mem_ui_profile_supported +0x6cf0 027416 bbit1 support_hid ,scheduler_start_upper_sm_hid +0x6cf1 027417 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +0x6cf2 027418 rtn +: 027419 scheduler_start_upper_sm_hid: +0x6cf3 027420 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6cf4 027421 rtn +: 027423 process_upper_sm: +0x6cf5 027424 fetch 1 ,memui_reconnect_mode +0x6cf6 027425 nbranch process_upper_sm_reconn ,blank +: 027426 process_upper_sm_remote_page: +0x6cf7 027427 fetch 1 ,mem_upper_sm_remote_page +0x6cf8 027429 rtn blank +0x6cf9 027431 jam 0 ,mem_upper_sm_remote_page +: 027432 process_upper_sm_rp_wait: +0x6cfa 027433 rtn +: 027436 process_upper_sm_reconn: +0x6cfb 027437 bpatchx patch37_6 ,mem_patch37 +0x6cfc 027438 fetch 1 ,mem_upper_sm_reconn +0x6cfd 027439 rtn blank +0x6cfe 027440 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +0x6cff 027441 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +0x6d00 027442 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +0x6d01 027443 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +0x6d02 027444 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +0x6d03 027445 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +0x6d04 027446 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +0x6d05 027447 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +0x6d06 027448 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +0x6d07 027449 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +0x6d08 027450 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +0x6d09 027451 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +0x6d0a 027452 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +0x6d0b 027453 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +0x6d0c 027454 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +0x6d0d 027455 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +0x6d0e 027456 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +0x6d0f 027457 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +0x6d10 027458 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +0x6d11 027459 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +0x6d12 027460 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +0x6d13 027461 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +0x6d14 027462 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +0x6d15 027463 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +0x6d16 027464 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +0x6d17 027465 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +0x6d18 027466 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +0x6d19 027467 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait +: 027468 process_upper_sm_reconn_wait: +0x6d1a 027469 rtn +: 027470 process_upper_sm_reconn_sdp_conn: +0x6d1b 027471 call upper_sm_send_sdp_conn +0x6d1c 027472 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +0x6d1d 027473 fetch 1 ,mem_sdp_state +0x6d1e 027474 set1 l2cap_channel_state_conn_req ,pdata +0x6d1f 027475 store 1 ,mem_sdp_state +0x6d20 027476 rtn +: 027477 process_upper_sm_reconn_sdp_cfg: +0x6d21 027478 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d22 027479 fetch 1 ,mem_sdp_state +0x6d23 027480 rtnbit1 l2cap_channel_state_snd_cfg_req +0x6d24 027481 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d25 027482 call upper_sm_send_sdp_cfg +0x6d26 027483 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d27 027484 fetch 1 ,mem_sdp_state +0x6d28 027485 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d29 027486 store 1 ,mem_sdp_state +0x6d2a 027487 rtn +: 027488 process_upper_sm_reconn_ss_spp: +0x6d2b 027489 call l2cap_malloc_is_fifo_empty +0x6d2c 027490 nrtn blank +0x6d2d 027491 call upper_sm_send_ss_spp +0x6d2e 027492 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +0x6d2f 027493 rtn +: 027494 process_upper_sm_reconn_sdp_disconn: +0x6d30 027495 call upper_sm_send_sdp_disconn +0x6d31 027496 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +0x6d32 027497 rtn +: 027498 process_upper_sm_reconn_hid_ctrl_conn: +0x6d33 027499 call upper_sm_send_hid_ctrl_conn +0x6d34 027500 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +0x6d35 027501 fetch 1 ,mem_hid_control_state +0x6d36 027502 set1 l2cap_channel_state_conn_req ,pdata +0x6d37 027503 store 1 ,mem_hid_control_state +0x6d38 027504 rtn +: 027505 process_upper_sm_reconn_hid_ctrl_cfg: +0x6d39 027506 call upper_sm_send_hid_ctrl_cfg +0x6d3a 027507 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +0x6d3b 027508 fetch 1 ,mem_hid_control_state +0x6d3c 027509 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d3d 027510 store 1 ,mem_hid_control_state +0x6d3e 027511 rtn +: 027512 process_upper_sm_reconn_hid_int_conn: +0x6d3f 027513 call upper_sm_send_hid_int_conn +0x6d40 027514 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +0x6d41 027515 fetch 1 ,mem_hid_interrupt_state +0x6d42 027516 set1 l2cap_channel_state_conn_req ,pdata +0x6d43 027517 store 1 ,mem_hid_interrupt_state +0x6d44 027518 rtn +: 027519 process_upper_sm_reconn_hid_int_cfg: +0x6d45 027520 call upper_sm_send_hid_int_cfg +0x6d46 027521 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +0x6d47 027522 fetch 1 ,mem_hid_interrupt_state +0x6d48 027523 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d49 027524 store 1 ,mem_hid_interrupt_state +0x6d4a 027525 rtn +: 027526 process_upper_sm_reconn_rfcomm_conn: +0x6d4b 027527 call upper_sm_send_rfcomm_conn +0x6d4c 027528 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +0x6d4d 027529 fetch 1 ,mem_rfcomm_state +0x6d4e 027530 set1 l2cap_channel_state_conn_req ,pdata +0x6d4f 027531 store 1 ,mem_rfcomm_state +0x6d50 027532 rtn +: 027533 process_upper_sm_reconn_rfcomm_cfg: +0x6d51 027534 call upper_sm_send_rfcomm_cfg +0x6d52 027535 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +0x6d53 027536 fetch 1 ,mem_rfcomm_state +0x6d54 027537 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d55 027538 store 1 ,mem_rfcomm_state +0x6d56 027539 rtn +: 027540 process_upper_sm_reconn_rfcomm_sabm: +0x6d57 027541 call upper_sm_send_rfcomm_sabm +0x6d58 027542 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +0x6d59 027543 fetch 1 ,mem_rfcomm_state +0x6d5a 027544 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6d5b 027545 store 1 ,mem_rfcomm_state +0x6d5c 027546 rtn +: 027547 process_upper_sm_reconn_spp_cmd_pn: +0x6d5d 027548 call upper_sm_send_spp_cmd_pn +0x6d5e 027549 fetch 1 ,mem_spp_state +0x6d5f 027550 set1 rfcomm_channel_state_pn_cmd +0x6d60 027551 store 1 ,mem_spp_state +0x6d61 027552 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +0x6d62 027553 rtn +: 027554 process_upper_sm_reconn_spp_sabm: +0x6d63 027555 call upper_sm_send_spp_sabm +0x6d64 027556 fetch 1 ,mem_spp_state +0x6d65 027557 set1 rfcomm_channel_state_sabm +0x6d66 027558 store 1 ,mem_spp_state +0x6d67 027559 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +0x6d68 027560 fetch 1 ,mem_remote_spp_channel +0x6d69 027561 lshift3 pdata ,pdata +0x6d6a 027562 or_into 3 ,pdata +0x6d6b 027563 arg mem_hiufcs_spp ,temp +0x6d6c 027564 storet 2 ,mem_contw_temp +0x6d6d 027565 branch rfcomm_save_fcs_uih +: 027566 process_upper_sm_reconn_spp_cmd_ms: +0x6d6e 027567 call upper_sm_send_spp_cmd_ms +0x6d6f 027568 fetch 1 ,mem_spp_state +0x6d70 027569 set1 rfcomm_channel_state_snd_ms_cmd +0x6d71 027570 store 1 ,mem_spp_state +0x6d72 027571 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +0x6d73 027572 rtn +: 027574 process_upper_sm_reconn_sdp_conn_wait: +0x6d74 027575 fetch 1 ,mem_sdp_state +0x6d75 027576 rtnbit0 l2cap_channel_state_conn_res +0x6d76 027577 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d77 027578 branch process_upper_sm_reconn +: 027579 process_upper_sm_reconn_sdp_cfg_wait: +0x6d78 027580 fetch 1 ,mem_sdp_state +0x6d79 027581 rtnne l2cap_channel_setup_complete +0x6d7a 027582 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn +: 027583 process_upper_sm_reconn_ss_spp_wait: +0x6d7b 027584 fetch 1 ,mem_message_to_uppersm +0x6d7c 027585 rtnne recieve_ss_reasult_hf +0x6d7d 027586 jam 0 ,mem_message_to_uppersm +0x6d7e 027587 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +0x6d7f 027588 branch process_upper_sm_reconn +: 027589 process_upper_sm_reconn_sdp_disconn_wait: +0x6d80 027590 fetch 1 ,mem_sdp_state +0x6d81 027591 nrtn blank +0x6d82 027592 fetch 1 ,mem_ui_profile_supported +0x6d83 027593 bbit1 support_hid ,process_upper_sm_reconn_setup_hid +0x6d84 027594 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d85 027595 branch process_upper_sm_reconn_termination +: 027596 process_upper_sm_reconn_hid_ctrl_conn_wait: +0x6d86 027597 fetch 1 ,mem_hid_control_state +0x6d87 027598 rtnbit0 l2cap_channel_state_conn_res +0x6d88 027599 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +0x6d89 027600 branch process_upper_sm_reconn +: 027601 process_upper_sm_reconn_hid_ctrl_cfg_wait: +0x6d8a 027602 fetch 1 ,mem_hid_control_state +0x6d8b 027603 rtnne l2cap_channel_setup_complete +0x6d8c 027604 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +0x6d8d 027605 branch process_upper_sm_reconn +: 027606 process_upper_sm_reconn_hid_int_conn_wait: +0x6d8e 027607 fetch 1 ,mem_hid_interrupt_state +0x6d8f 027608 rtnbit0 l2cap_channel_state_conn_res +0x6d90 027609 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +0x6d91 027610 branch process_upper_sm_reconn +: 027611 process_upper_sm_reconn_hid_int_cfg_wait: +0x6d92 027612 fetch 1 ,mem_hid_interrupt_state +0x6d93 027613 rtnne l2cap_channel_setup_complete +0x6d94 027614 fetch 1 ,mem_ui_profile_supported +0x6d95 027615 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d96 027616 branch process_upper_sm_reconn_termination +: 027617 process_upper_sm_reconn_rfcomm_conn_wait: +0x6d97 027618 fetch 1 ,mem_rfcomm_state +0x6d98 027619 rtnbit0 l2cap_channel_state_conn_res +0x6d99 027620 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +0x6d9a 027621 branch process_upper_sm_reconn +: 027622 process_upper_sm_reconn_rfcomm_cfg_wait: +0x6d9b 027623 fetch 1 ,mem_rfcomm_state +0x6d9c 027624 rtnne l2cap_channel_setup_complete +0x6d9d 027625 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +0x6d9e 027626 branch process_upper_sm_reconn +: 027627 process_upper_sm_reconn_rfcomm_sabm_wait: +0x6d9f 027628 fetch 1 ,mem_rfcomm_state +0x6da0 027629 rtnne l2cap_channel_rfcomm_dlci0_opened +0x6da1 027630 fetch 1 ,mem_ui_profile_supported +0x6da2 027631 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +0x6da3 027632 branch process_upper_sm_reconn_termination +: 027633 process_upper_sm_reconn_spp_cmd_pn_wait: +0x6da4 027634 fetch 1 ,mem_spp_state +0x6da5 027635 rtnbit0 rfcomm_channel_state_pn_res +0x6da6 027636 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +0x6da7 027637 branch process_upper_sm_reconn +: 027638 process_upper_sm_reconn_spp_sabm_wait: +0x6da8 027639 fetch 1 ,mem_spp_state +0x6da9 027640 rtnbit0 rfcomm_channel_state_ua +0x6daa 027641 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +0x6dab 027642 branch process_upper_sm_reconn +: 027643 process_upper_sm_reconn_spp_cmd_ms_wait: +0x6dac 027644 fetch 1 ,mem_spp_state +0x6dad 027645 rtnne rfcomm_channel_setup_complete +0x6dae 027646 branch process_upper_sm_reconn_termination +: 027648 process_upper_sm_reconn_setup_hid: +0x6daf 027649 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6db0 027650 branch process_upper_sm_reconn +: 027652 process_upper_sm_reconn_setup_rfcomm: +0x6db1 027653 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +0x6db2 027654 branch process_upper_sm_reconn +: 027655 process_upper_sm_reconn_setup_spp: +0x6db3 027656 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +0x6db4 027657 branch process_upper_sm_reconn +: 027661 process_upper_sm_reconn_termination: +0x6db5 027662 jam 0 ,mem_upper_sm_reconn +0x6db6 027663 rtn +: 027664 upper_sm_send_sdp_conn: +0x6db7 027665 bpatchx patch37_7 ,mem_patch37 +0x6db8 027666 call l2cap_malloc_signal_channel +0x6db9 027667 setarg psm_sdp +0x6dba 027668 copy pdata ,temp +0x6dbb 027669 setarg l2cap_sdp_channel +0x6dbc 027670 copy pdata ,timeup +0x6dbd 027671 branch ml2cap_send_signal_connect_req +: 027673 upper_sm_send_sdp_cfg: +0x6dbe 027674 bpatchx patch38_0 ,mem_patch38 +0x6dbf 027675 call l2cap_malloc_signal_channel +0x6dc0 027676 fetch 2 ,mem_sdp_remote_cid +0x6dc1 027677 copy pdata ,temp +0x6dc2 027678 branch ml2cap_send_signal_config_req +: 027680 upper_sm_send_sdp_disconn: +0x6dc3 027681 bpatchx patch38_1 ,mem_patch38 +0x6dc4 027682 call l2cap_malloc_signal_channel +0x6dc5 027683 fetch 2 ,mem_sdp_remote_cid +0x6dc6 027684 copy pdata ,temp +0x6dc7 027685 arg l2cap_sdp_channel ,timeup +0x6dc8 027686 call ml2cap_send_signal_disconn_req +0x6dc9 027687 fetch 1 ,mem_sdp_state +0x6dca 027688 set0 l2cap_channel_state_rcv_cfg_res ,pdata +0x6dcb 027689 store 1 ,mem_sdp_state +0x6dcc 027690 rtn +: 027692 upper_sm_send_ss_spp: +0x6dcd 027693 bpatchx patch38_2 ,mem_patch38 +0x6dce 027694 call l2cap_malloc_sdp_channel +0x6dcf 027695 call sdp_send_spp_request +0x6dd0 027696 branch msdp_send_req_done +: 027698 upper_sm_send_rfcomm_conn: +0x6dd1 027699 bpatchx patch38_3 ,mem_patch38 +0x6dd2 027700 call l2cap_malloc_signal_channel +0x6dd3 027701 setarg psm_rfcomm +0x6dd4 027702 copy pdata ,temp +0x6dd5 027703 setarg l2cap_rfcomm_channel +0x6dd6 027704 copy pdata ,timeup +0x6dd7 027705 branch ml2cap_send_signal_connect_req +: 027707 upper_sm_send_rfcomm_cfg: +0x6dd8 027708 bpatchx patch38_4 ,mem_patch38 +0x6dd9 027709 call l2cap_malloc_signal_channel +0x6dda 027710 fetch 2 ,mem_rfcomm_remote_cid +0x6ddb 027711 copy pdata ,temp +0x6ddc 027712 branch ml2cap_send_signal_config_req +: 027714 upper_sm_send_hid_ctrl_conn: +0x6ddd 027715 bpatchx patch38_5 ,mem_patch38 +0x6dde 027716 call l2cap_malloc_signal_channel +0x6ddf 027717 setarg psm_hid_control +0x6de0 027718 copy pdata ,temp +0x6de1 027719 setarg l2cap_hid_control_channel +0x6de2 027720 copy pdata ,timeup +0x6de3 027721 branch ml2cap_send_signal_connect_req +: 027723 upper_sm_send_hid_ctrl_cfg: +0x6de4 027724 bpatchx patch38_6 ,mem_patch38 +0x6de5 027725 call l2cap_malloc_signal_channel +0x6de6 027726 fetch 2 ,mem_hid_ctrl_remote_cid +0x6de7 027727 copy pdata ,temp +0x6de8 027728 branch ml2cap_send_signal_config_req +: 027730 upper_sm_send_hid_int_conn: +0x6de9 027731 bpatchx patch38_7 ,mem_patch38 +0x6dea 027732 call l2cap_malloc_signal_channel +0x6deb 027733 setarg psm_hid_interrupt +0x6dec 027734 copy pdata ,temp +0x6ded 027735 setarg l2cap_hid_interrupt_channel +0x6dee 027736 copy pdata ,timeup +0x6def 027737 branch ml2cap_send_signal_connect_req +: 027739 upper_sm_send_hid_int_cfg: +0x6df0 027740 bpatchx patch39_0 ,mem_patch39 +0x6df1 027741 call l2cap_malloc_signal_channel +0x6df2 027742 fetch 2 ,mem_hid_int_remote_cid +0x6df3 027743 copy pdata ,temp +0x6df4 027744 branch ml2cap_send_signal_config_req +: 027746 upper_sm_send_rfcomm_sabm: +0x6df5 027747 bpatchx patch39_1 ,mem_patch39 +0x6df6 027748 call l2cap_malloc_rfcomm_channel +0x6df7 027750 jam 3 ,mem_current_adss +0x6df8 027751 jam 0x1c ,mem_current_fcs +0x6df9 027752 call rfcomm_send_sabm +0x6dfa 027753 jam 1 ,mem_rfcomm_initiator +0x6dfb 027754 rtn +: 027756 upper_sm_send_spp_cmd_pn: +0x6dfc 027757 bpatchx patch39_2 ,mem_patch39 +0x6dfd 027758 call l2cap_malloc_rfcomm_channel +0x6dfe 027759 fetcht 1 ,mem_remote_spp_channel +0x6dff 027760 call channel_to_dlci +0x6e00 027761 storet 1 ,mem_pn_dlci +0x6e01 027762 branch rfcomm_send_param_neg_cmd +: 027764 upper_sm_send_spp_sabm: +0x6e02 027765 bpatchx patch39_3 ,mem_patch39 +0x6e03 027766 call l2cap_malloc_rfcomm_channel +0x6e04 027767 fetcht 1 ,mem_pn_dlci +0x6e05 027768 call dlci_to_address_cmd +0x6e06 027769 call rfcomm_calculate_fcs_sabm +0x6e07 027770 store 1 ,mem_current_fcs +0x6e08 027771 fetcht 1 ,mem_pn_dlci +0x6e09 027772 call dlci_to_address_cmd +0x6e0a 027773 storet 1 ,mem_current_adss +0x6e0b 027774 branch rfcomm_send_sabm +: 027776 upper_sm_send_spp_cmd_ms: +0x6e0c 027777 bpatchx patch39_4 ,mem_patch39 +0x6e0d 027778 call l2cap_malloc_rfcomm_channel +0x6e0e 027779 fetcht 1 ,mem_pn_dlci +0x6e0f 027780 call dlci_to_address_cmd +0x6e10 027781 branch rfcomm_send_modem_status_cmd +: 027794 sdp_process: +0x6e11 027795 bpatchx patch39_5 ,mem_patch39 +0x6e12 027796 fetch 2 ,mem_l2cap_payload_ptr +0x6e13 027797 iforce contr +0x6e14 027800 ifetch 1 ,contr +0x6e15 027801 copy pdata ,regb +0x6e16 027802 store 1 ,mem_sdp_pduid +0x6e17 027803 ifetch 2 ,contr +0x6e18 027804 store 2 ,mem_sdp_transactionid +0x6e19 027805 ifetch 1 ,contr +0x6e1a 027806 lshift8 pdata ,timeup +0x6e1b 027807 ifetch 1 ,contr +0x6e1c 027808 iadd timeup ,timeup +0x6e1d 027809 bpatchx patch39_6 ,mem_patch39 +0x6e1e 027810 copy contr ,temp +0x6e1f 027811 arg 4 ,loopcnt +0x6e20 027812 arg mem_sdp_handle_list ,contw +0x6e21 027813 call memset0 +0x6e22 027814 copy temp ,contr +0x6e23 027815 deposit regb +0x6e24 027816 beq sdp_error_res ,sdp_process_error_res +0x6e25 027817 beq sdp_search_req ,sdp_process_ss_req +0x6e26 027818 beq sdp_search_res ,sdp_process_ss_res +0x6e27 027819 beq sdp_attribute_req ,sdp_process_sa_req +0x6e28 027820 beq sdp_attribute_res ,sdp_process_sa_res +0x6e29 027821 beq sdp_searchattrib_req ,sdp_process_ssa_req +0x6e2a 027822 beq sdp_searchattrib_res ,sdp_process_ssa_res +0x6e2b 027823 branch sdp_insufficient_resource +: 027834 sdp_process_ss_req: +0x6e2c 027835 bpatchx patch39_7 ,mem_patch39 +0x6e2d 027836 call ask_serviceclassid +0x6e2e 027837 compare 1 ,temp ,0xff +0x6e2f 027838 branch ss_empty_rsp ,true +0x6e30 027839 compare 0xff ,temp ,0xff +0x6e31 027840 branch sdp_invalid_request_syntax ,true +0x6e32 027842 ifetch 2 ,contr +0x6e33 027843 store 2 ,mem_sdp_record_maxcnt +0x6e34 027844 increase -2 ,timeup +0x6e35 027846 increase -1 ,timeup +0x6e36 027847 nbranch sdp_invalid_pdu_size ,zero +0x6e37 027848 arg mem_sdp_uuid_search_ptr ,timeup +0x6e38 027849 ifetch 2 ,timeup +0x6e39 027850 rtn blank +0x6e3a 027851 call search_all_uuid +0x6e3b 027852 call l2cap_get_sdp_tx_payload +0x6e3c 027853 force 3 ,pdata +0x6e3d 027854 istore 1 ,contw +0x6e3e 027855 fetch 2 ,mem_sdp_transactionid +0x6e3f 027856 istore 2 ,contw +0x6e40 027857 lshift2 queue ,pdata +0x6e41 027858 add pdata ,5 ,pdata +0x6e42 027859 add pdata ,5 ,regc +0x6e43 027860 byteswap pdata ,pdata +0x6e44 027861 istore 2 ,contw +0x6e45 027862 deposit queue +0x6e46 027863 byteswap pdata ,pdata +0x6e47 027864 istore 2 ,contw +0x6e48 027865 istore 2 ,contw +0x6e49 027866 arg mem_sdp_handle_list ,contr +0x6e4a 027867 copy queue ,loopcnt +0x6e4b 027868 branch ss_req_blank ,zero +: 027869 ss_req_loop: +0x6e4c 027870 ifetch 4 ,contr +0x6e4d 027871 istore 4 ,contw +0x6e4e 027872 loop ss_req_loop +: 027873 ss_req_blank: +0x6e4f 027874 force 0 ,pdata +0x6e50 027875 istore 1 ,contw +0x6e51 027876 deposit regc +0x6e52 027877 store 2 ,mem_sdp_tx_pkt_length +0x6e53 027879 rtn +: 027890 sdp_process_sa_req: +0x6e54 027891 bpatchx patch3a_0 ,mem_patch3a +0x6e55 027892 ifetch 4 ,contr +0x6e56 027893 store 4 ,mem_sdp_record_handle +0x6e57 027894 increase -4 ,timeup +0x6e58 027895 call sdp_store_maxbyte +0x6e59 027896 store 2 ,mem_sdp_attribute_maxbyte +0x6e5a 027897 increase -2 ,timeup +0x6e5b 027898 call dataelementtype6 +0x6e5c 027899 branch sdp_invalid_request_syntax ,zero +0x6e5d 027900 compare 5 ,rega ,0xff +0x6e5e 027902 branch sa_judge_wholerange ,true +: 027903 sa_isnot_wholerange: +0x6e5f 027904 arg mem_sdp_attrib_list ,contw +0x6e60 027905 force 0 ,queue +0x6e61 027906 branch sa_req_loop +: 027907 sa_judge_wholerange: +0x6e62 027908 ifetch 1 ,contr +0x6e63 027909 bne sdp_attribute_range ,sdp_invalid_request_syntax +0x6e64 027910 ifetch 2 ,contr +0x6e65 027911 nbranch sa_judge_wholerange_false1 ,blank +0x6e66 027912 ifetch 1 ,contr +0x6e67 027913 bne 0xff ,sa_judge_wholerange_false2 +0x6e68 027914 ifetch 1 ,contr +0x6e69 027915 bne 0xff ,sa_judge_wholerange_false3 +0x6e6a 027916 branch sa_req_all +: 027917 sa_judge_wholerange_false3: +0x6e6b 027918 increase -5 ,contr +0x6e6c 027919 branch sa_isnot_wholerange +: 027920 sa_judge_wholerange_false2: +0x6e6d 027921 increase -4 ,contr +0x6e6e 027922 branch sa_isnot_wholerange +: 027923 sa_judge_wholerange_false1: +0x6e6f 027924 increase -3 ,contr +0x6e70 027925 branch sa_isnot_wholerange +: 027926 sa_req_loop: +0x6e71 027927 ifetch 1 ,contr +0x6e72 027928 beq sdp_attribute_id ,sa_req_one_id +0x6e73 027929 beq sdp_attribute_range ,sa_req_range +: 027930 sa_req_range: +0x6e74 027931 ifetch 2 ,contr +0x6e75 027932 istore 2 ,contw +0x6e76 027933 increase 1 ,queue +0x6e77 027934 byteswap pdata ,regb +0x6e78 027935 ifetch 2 ,contr +0x6e79 027936 byteswap pdata ,pdata +: 027937 sa_req_range_id_increase: +0x6e7a 027938 increase 1 ,regb +0x6e7b 027939 isub regb ,null +0x6e7c 027940 nbranch sa_req_range_id_finish ,positive +0x6e7d 027941 copy pdata ,regc +0x6e7e 027942 byteswap regb ,pdata +0x6e7f 027943 istore 2 ,contw +0x6e80 027944 increase 1 ,queue +0x6e81 027945 copy regc ,pdata +0x6e82 027946 branch sa_req_range_id_increase +: 027947 sa_req_range_id_finish: +0x6e83 027948 increase -5 ,timeup +0x6e84 027949 increase -5 ,rega +0x6e85 027950 branch sa_req_check_next_id +: 027951 sa_req_one_id: +0x6e86 027952 ifetch 2 ,contr +0x6e87 027953 istore 2 ,contw +0x6e88 027954 increase 1 ,queue +0x6e89 027955 increase -3 ,timeup +0x6e8a 027956 increase -3 ,rega +: 027957 sa_req_check_next_id: +0x6e8b 027958 nbranch sdp_invalid_request_syntax ,positive +0x6e8c 027959 nbranch sa_req_loop ,zero +0x6e8d 027960 increase -1 ,timeup +0x6e8e 027961 nbranch sdp_invalid_request_syntax ,zero +0x6e8f 027963 call l2cap_get_sdp_tx_payload +0x6e90 027964 increase 10 ,contw +0x6e91 027965 arg mem_sdp_attrib_list ,rega +: 027966 sa_req_handle_attributelist_next: +0x6e92 027967 copy queue ,pdata +0x6e93 027968 branch sa_req_handle_attributelist_end ,blank +0x6e94 027969 ifetch 2 ,rega +0x6e95 027970 branch sa_req_handle_attributelist_end ,blank +0x6e96 027971 iforce regb +0x6e97 027972 fetch 4 ,mem_sdp_record_handle +0x6e98 027973 iforce temp +0x6e99 027974 call search_handle_attrib +0x6e9a 027975 copy contr ,pdata +0x6e9b 027976 branch sa_req_handle_attributelist_notfound ,blank +0x6e9c 027977 increase -3 ,contr +0x6e9d 027978 ifetch 3 ,contr +0x6e9e 027979 istore 3 ,contw +0x6e9f 027980 call sdp_data_len +0x6ea0 027981 iforce loopcnt +0x6ea1 027982 call memcpy +: 027983 sa_req_handle_attributelist_notfound: +0x6ea2 027984 increase 2 ,rega +0x6ea3 027985 increase -1 ,queue +0x6ea4 027986 branch sa_req_handle_attributelist_next +: 027988 sa_req_handle_attributelist_end: +0x6ea5 027989 arg sdp_attribute_res ,rega +0x6ea6 027990 call ssa_req_range_lastfreg_common +0x6ea7 027991 fetch 2 ,mem_sdp_tx_pkt_length +0x6ea8 027992 beq 11 ,sa_empty_rsp +0x6ea9 027993 branch ssa_req_range_attrbutes_length_no_continue +: 027996 sdp_store_continue_common: +0x6eaa 027997 ifetch 1 ,contr +0x6eab 027998 beq 0 ,sdp_store_continue_0byte +0x6eac 027999 beq 1 ,sdp_store_continue_1byte +0x6ead 028000 beq 2 ,sdp_store_continue_2byte +: 028001 sdp_store_continue_0byte: +0x6eae 028002 increase -1 ,timeup +0x6eaf 028003 branch sdp_store_continue_end +: 028004 sdp_store_continue_1byte: +0x6eb0 028005 ifetch 1 ,contr +0x6eb1 028006 increase -2 ,timeup +0x6eb2 028007 branch sdp_store_continue_end +: 028008 sdp_store_continue_2byte: +0x6eb3 028009 ifetch 2 ,contr +0x6eb4 028010 byteswap pdata ,pdata +0x6eb5 028011 increase -3 ,timeup +: 028012 sdp_store_continue_end: +0x6eb6 028013 store 2 ,mem_sdp_continue_byte +0x6eb7 028014 rtn +: 028016 sa_req_all: +0x6eb8 028017 increase -5 ,timeup +0x6eb9 028018 call sdp_store_continue_common +0x6eba 028019 nbranch sdp_invalid_pdu_size ,zero +0x6ebb 028020 fetcht 4 ,mem_sdp_record_handle +0x6ebc 028021 call search_handle +0x6ebd 028022 nbranch sdp_invalid_service_record_handle ,zero +0x6ebe 028023 copy contr ,rega +0x6ebf 028024 call l2cap_get_sdp_tx_payload +0x6ec0 028025 copy rega ,contr +0x6ec1 028026 increase 3 ,contw +0x6ec2 028027 copy contr ,timeup +0x6ec3 028028 call sdp_get_data +0x6ec4 028029 copy pdata ,rega +0x6ec5 028031 fetch 2 ,mem_sdp_continue_byte +0x6ec6 028032 copy pdata ,regb +0x6ec7 028033 copy rega ,pdata +0x6ec8 028034 isub regb ,regb +0x6ec9 028035 fetch 2 ,mem_sdp_attribute_maxbyte +0x6eca 028036 isub regb ,null +0x6ecb 028037 nbranch sa_req_all_fragment_sdp ,positive +0x6ecc 028039 disable user +0x6ecd 028040 fetch 2 ,mem_sdp_continue_byte +0x6ece 028041 branch sa_req_all_fisrt_fragment ,blank +0x6ecf 028042 iadd timeup ,contr +0x6ed0 028043 increase 3 ,regb +0x6ed1 028044 copy regb ,loopcnt +0x6ed2 028045 copy loopcnt ,pdata +0x6ed3 028046 increase 3 ,pdata +0x6ed4 028047 byteswap pdata ,pdata +0x6ed5 028048 istore 2 ,contw +0x6ed6 028049 copy loopcnt ,pdata +0x6ed7 028050 byteswap pdata ,pdata +0x6ed8 028051 istore 2 ,contw +0x6ed9 028052 branch sa_req_all_answer_attributelist_full_loop +: 028053 sa_req_all_fisrt_fragment: +0x6eda 028054 add rega ,6 ,loopcnt +0x6edb 028055 branch sa_req_all_parlength_continue_byte ,user +0x6edc 028056 byteswap loopcnt ,pdata +0x6edd 028057 branch sa_req_all_parlength_continue_byte_end +: 028058 sa_req_all_parlength_continue_byte: +0x6ede 028059 copy loopcnt ,pdata +0x6edf 028060 increase 2 ,pdata +0x6ee0 028061 byteswap pdata ,pdata +: 028062 sa_req_all_parlength_continue_byte_end: +0x6ee1 028063 istore 2 ,contw +0x6ee2 028064 increase -3 ,loopcnt +0x6ee3 028065 byteswap loopcnt ,pdata +0x6ee4 028066 istore 2 ,contw +0x6ee5 028067 copy timeup ,contr +0x6ee6 028068 branch sa_req_all_answer_attributelist_full_loop +: 028069 sa_req_all_fragment_sdp: +0x6ee7 028070 enable user +0x6ee8 028072 fetch 2 ,mem_sdp_attribute_maxbyte +0x6ee9 028073 copy pdata ,rega +0x6eea 028074 copy rega ,loopcnt +0x6eeb 028075 fetch 2 ,mem_sdp_continue_byte +0x6eec 028076 branch sa_req_all_fisrt_fragment ,blank +0x6eed 028077 iadd timeup ,contr +0x6eee 028078 copy rega ,pdata +0x6eef 028079 increase 5 ,pdata +0x6ef0 028080 byteswap pdata ,pdata +0x6ef1 028081 istore 2 ,contw +0x6ef2 028082 copy rega ,pdata +0x6ef3 028083 byteswap pdata ,pdata +0x6ef4 028084 istore 2 ,contw +: 028085 sa_req_all_answer_attributelist_full_loop: +0x6ef5 028086 call memcpy +0x6ef6 028087 nbranch sa_req_all_last_frag_continue ,user +0x6ef7 028088 force 2 ,pdata +0x6ef8 028089 istore 1 ,contw +0x6ef9 028090 copy contr ,pdata +0x6efa 028091 isub timeup ,pdata +0x6efb 028092 byteswap pdata ,pdata +0x6efc 028093 istore 2 ,contw +0x6efd 028094 branch sa_req_all_frag_end +: 028095 sa_req_all_last_frag_continue: +0x6efe 028096 force 0 ,pdata +0x6eff 028097 istore 1 ,contw +: 028098 sa_req_all_frag_end: +0x6f00 028099 arg sdp_attribute_res ,rega +0x6f01 028100 branch ssa_req_range_common +: 028111 sdp_process_ssa_req: +0x6f02 028112 bpatchx patch3a_1 ,mem_patch3a +0x6f03 028113 call ask_serviceclassid +0x6f04 028114 compare 0xff ,temp ,0xff +0x6f05 028115 branch sdp_invalid_request_syntax ,true +0x6f06 028116 call sdp_store_maxbyte +0x6f07 028117 store 2 ,mem_sdp_attribute_maxbyte +0x6f08 028118 increase -2 ,timeup +0x6f09 028119 call dataelementtype6 +0x6f0a 028120 arg mem_sdp_attrib_list ,contw +0x6f0b 028121 force 0 ,queue +: 028122 ssa_req_loop: +0x6f0c 028123 ifetch 1 ,contr +0x6f0d 028124 beq sdp_attribute_range ,ssa_req_range +0x6f0e 028125 ifetch 2 ,contr +0x6f0f 028126 istore 2 ,contw +0x6f10 028127 increase 1 ,queue +0x6f11 028128 increase -3 ,timeup +0x6f12 028129 increase -3 ,rega +0x6f13 028130 nbranch sdp_invalid_request_syntax ,positive +0x6f14 028131 nbranch ssa_req_loop ,zero +0x6f15 028132 increase -1 ,timeup +0x6f16 028133 nbranch sdp_invalid_request_syntax ,zero +0x6f17 028134 call l2cap_get_sdp_tx_payload +0x6f18 028135 increase 13 ,contw +0x6f19 028136 fetch 2 ,mem_sdp_uuid_search_ptr +0x6f1a 028137 iforce regc +0x6f1b 028138 arg mem_sdp_attrib_list ,rega +: 028139 ssa_req_attributelist_next: +0x6f1c 028140 ifetch 2 ,rega +0x6f1d 028141 branch ssa_req_attributelist_end ,blank +0x6f1e 028142 iforce regb +0x6f1f 028143 call search_attrib +0x6f20 028144 branch ssa_req_attributelist_notfound ,blank +0x6f21 028145 increase -3 ,contr +0x6f22 028146 ifetch 3 ,contr +0x6f23 028147 istore 3 ,contw +0x6f24 028148 call sdp_data_len +0x6f25 028149 iforce loopcnt +0x6f26 028150 call memcpy +: 028151 ssa_req_attributelist_notfound: +0x6f27 028152 increase 2 ,rega +0x6f28 028153 branch ssa_req_attributelist_next +: 028155 ssa_req_attributelist_end: +0x6f29 028156 call ssa_req_range_lastfreg +0x6f2a 028157 fetch 2 ,mem_sdp_tx_pkt_length +0x6f2b 028158 beq 14 ,ssa_empty_rsp +0x6f2c 028159 call ssa_req_range_attrbutes_length_no_continue +0x6f2d 028160 branch ssa_req_range_attrbutes_length_no_continue +: 028163 sdp_store_maxbyte: +0x6f2e 028164 ifetch 2 ,contr +0x6f2f 028165 byteswap pdata ,pdata +0x6f30 028166 increase -3 ,pdata +0x6f31 028167 arg 200 ,temp +0x6f32 028168 isub temp ,null +0x6f33 028169 nrtn positive +0x6f34 028170 setarg 200 +0x6f35 028171 rtn +: 028174 ssa_req_range: +0x6f36 028175 increase 4 ,contr +0x6f37 028176 increase -5 ,timeup +0x6f38 028177 increase -5 ,rega +0x6f39 028178 nbranch sdp_invalid_request_syntax ,zero +0x6f3a 028179 call sdp_store_continue_common +0x6f3b 028180 nbranch sdp_invalid_pdu_size ,zero +0x6f3c 028181 arg mem_sdp_uuid_search_ptr ,timeup +0x6f3d 028182 call search_all_uuid +0x6f3e 028183 deposit queue +0x6f3f 028184 branch ssa_empty_rsp ,blank +0x6f40 028185 store 1 ,mem_handle_humber +0x6f41 028187 copy regb ,pdata +0x6f42 028188 store 2 ,mem_sdp_all_length +0x6f43 028189 arg 0 ,queue +0x6f44 028190 arg 0 ,rega +0x6f45 028191 call l2cap_get_sdp_tx_payload +0x6f46 028192 increase 10 ,contw +: 028193 ssa_req_range_find_handle: +0x6f47 028194 call ssa_req_range_get_length +0x6f48 028195 nbranch assert ,user +0x6f49 028196 copy contr ,timeup +0x6f4a 028197 copy pdata ,regc +0x6f4b 028198 iadd rega ,rega +0x6f4c 028201 fetch 2 ,mem_sdp_continue_byte +0x6f4d 028202 copy pdata ,regb +0x6f4e 028203 branch ssa_req_range_first_freg ,blank +: 028204 ssa_req_range_later_freg_with_continue: +0x6f4f 028205 copy rega ,pdata +0x6f50 028206 isub regb ,regb +0x6f51 028207 branch ssa_req_range_next_handle ,zero +0x6f52 028208 nbranch ssa_req_range_next_handle ,positive +0x6f53 028209 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f54 028210 isub regb ,null +0x6f55 028211 branch ssa_req_range_maxbyte_with_continue ,zero +0x6f56 028212 nbranch ssa_req_range_maxbyte_with_continue ,positive +: 028215 ssa_req_range_send_not_maxbyte: +0x6f57 028216 copy regb ,loopcnt +0x6f58 028217 call ssa_req_range_maxbyte_with_continue_cpy +0x6f59 028218 fetch 1 ,mem_handle_humber +0x6f5a 028219 increase 1 ,queue +0x6f5b 028220 isub queue ,null +0x6f5c 028221 branch ssa_req_range_lastfreg ,zero +0x6f5d 028222 branch ssa_req_range_freg_with_continue +: 028224 ssa_req_range_maxbyte_with_continue: +0x6f5e 028225 copy pdata ,loopcnt +0x6f5f 028226 call ssa_req_range_maxbyte_with_continue_cpy +0x6f60 028227 branch ssa_req_range_freg_with_continue +: 028229 ssa_req_range_maxbyte_with_continue_cpy: +0x6f61 028230 increase -3 ,contw +0x6f62 028231 copy loopcnt ,temp +0x6f63 028232 copy regc ,pdata +0x6f64 028233 isub regb ,pdata +0x6f65 028234 iadd timeup ,contr +0x6f66 028235 branch memcpy +: 028237 ssa_req_range_next_handle: +0x6f67 028238 fetch 1 ,mem_handle_humber +0x6f68 028239 increase 1 ,queue +0x6f69 028240 isub queue ,null +0x6f6a 028241 rtn zero +0x6f6b 028242 branch ssa_req_range_find_handle +: 028244 ssa_req_range_get_length: +0x6f6c 028245 call disable_user +0x6f6d 028246 arg mem_sdp_handle_list ,contr +0x6f6e 028247 lshift2 queue ,pdata +0x6f6f 028248 iadd contr ,contr +0x6f70 028249 ifetcht 4 ,contr +0x6f71 028250 call search_handle +0x6f72 028251 nrtn zero +0x6f73 028252 call sdp_data_len +0x6f74 028253 branch enable_user +: 028255 ssa_req_range_first_freg: +0x6f75 028256 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f76 028257 isub rega ,null +0x6f77 028258 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +0x6f78 028259 copy rega ,loopcnt +0x6f79 028260 copy loopcnt ,temp +0x6f7a 028261 copy timeup ,contr +0x6f7b 028262 call memcpy +0x6f7c 028263 fetch 2 ,mem_sdp_all_length +0x6f7d 028264 isub rega ,null +0x6f7e 028265 branch ssa_req_range_freg_no_continue ,zero +: 028266 ssa_req_range_firstfreg_not_maxbyte_with_continue: +0x6f7f 028267 call ssa_req_range_freg_with_continue +0x6f80 028268 branch ssa_req_range_attrbutes_length +: 028270 ssa_req_range_freg_no_continue: +0x6f81 028271 call ssa_req_range_lastfreg +0x6f82 028272 branch ssa_req_range_attrbutes_length +: 028274 ssa_req_range_lastfreg: +0x6f83 028275 arg sdp_searchattrib_res ,rega +: 028276 ssa_req_range_lastfreg_common: +0x6f84 028277 force 0 ,pdata +0x6f85 028278 istore 1 ,contw +0x6f86 028279 call ssa_req_range_common +0x6f87 028280 fetcht 2 ,mem_sdp_tx_pkt_length +0x6f88 028281 increase -5 ,temp +0x6f89 028282 byteswap temp ,pdata +0x6f8a 028283 istore 2 ,contw +0x6f8b 028284 increase -3 ,temp +0x6f8c 028285 byteswap temp ,pdata +0x6f8d 028286 istore 2 ,contw +0x6f8e 028287 rtn +: 028289 ssa_req_range_firstfreg_maxbyte_with_continue: +0x6f8f 028290 copy pdata ,loopcnt +0x6f90 028291 copy loopcnt ,temp +0x6f91 028292 copy timeup ,contr +0x6f92 028293 call memcpy +0x6f93 028294 call ssa_req_range_freg_with_continue +: 028295 ssa_req_range_attrbutes_length: +0x6f94 028296 setarg 0x36 +0x6f95 028297 istore 1 ,contw +0x6f96 028298 fetch 2 ,mem_sdp_all_length +0x6f97 028299 byteswap pdata ,pdata +0x6f98 028300 istore 2 ,contw +0x6f99 028301 rtn +: 028303 ssa_req_range_attrbutes_length_no_continue: +0x6f9a 028304 setarg 0x36 +0x6f9b 028305 istore 1 ,contw +0x6f9c 028306 increase -3 ,temp +0x6f9d 028307 byteswap temp ,pdata +0x6f9e 028308 istore 2 ,contw +0x6f9f 028309 rtn +: 028311 ssa_req_range_freg_with_continue: +0x6fa0 028312 arg sdp_searchattrib_res ,rega +0x6fa1 028313 setarg 2 +0x6fa2 028314 istore 1 ,contw +0x6fa3 028315 fetch 2 ,mem_sdp_continue_byte +0x6fa4 028316 iadd temp ,temp +0x6fa5 028317 byteswap temp ,pdata +0x6fa6 028318 istore 2 ,contw +0x6fa7 028319 call ssa_req_range_common +0x6fa8 028320 fetcht 2 ,mem_sdp_tx_pkt_length +0x6fa9 028321 increase -5 ,temp +0x6faa 028322 byteswap temp ,pdata +0x6fab 028323 istore 2 ,contw +0x6fac 028324 increase -5 ,temp +0x6fad 028325 byteswap temp ,pdata +0x6fae 028326 istore 2 ,contw +0x6faf 028327 rtn +: 028329 ssa_req_range_common: +0x6fb0 028330 fetch 2 ,mem_sdp_tx_payload_ptr +0x6fb1 028331 isub contw ,pdata +0x6fb2 028332 sub pdata ,0 ,pdata +0x6fb3 028333 store 2 ,mem_sdp_tx_pkt_length +0x6fb4 028334 call l2cap_get_sdp_tx_payload +0x6fb5 028335 copy rega ,pdata +0x6fb6 028336 istore 1 ,contw +0x6fb7 028337 fetch 2 ,mem_sdp_transactionid +0x6fb8 028338 istore 2 ,contw +0x6fb9 028339 rtn +: 028352 sdp_process_ssa_res: +: 028353 sdp_process_ss_res: +: 028354 sdp_process_sa_res: +: 028355 sdp_process_error_res: +0x6fba 028356 rtn +: 028389 sdp_invalid_service_record_handle: +0x6fbb 028390 setarg 0x0200 +0x6fbc 028391 store 2 ,mem_sdp_error_code +0x6fbd 028392 branch sdp_error_response +: 028393 sdp_invalid_pdu_size: +0x6fbe 028394 setarg 0x0400 +0x6fbf 028395 store 2 ,mem_sdp_error_code +0x6fc0 028396 branch sdp_error_response +: 028397 sdp_insufficient_resource: +0x6fc1 028398 setarg 0x0600 +0x6fc2 028399 store 2 ,mem_sdp_error_code +0x6fc3 028400 branch sdp_error_response +: 028401 sdp_invalid_request_syntax: +0x6fc4 028402 setarg 0x0300 +0x6fc5 028403 store 2 ,mem_sdp_error_code +: 028404 sdp_error_response: +0x6fc6 028405 call l2cap_get_sdp_tx_payload +0x6fc7 028406 istore 1 ,contw +0x6fc8 028407 fetch 2 ,mem_sdp_transactionid +0x6fc9 028408 istore 2 ,contw +0x6fca 028409 setarg 0x0200 +0x6fcb 028410 istore 2 ,contw +0x6fcc 028411 fetch 2 ,mem_sdp_error_code +0x6fcd 028412 istore 2 ,contw +0x6fce 028413 jam 7 ,mem_sdp_tx_pkt_length +0x6fcf 028414 rtn +: 028419 ask_serviceclassid: +0x6fd0 028420 arg 0 ,regb +0x6fd1 028421 force 0 ,temp +0x6fd2 028422 arg mem_sdp_uuid_search_ptr ,contw +0x6fd3 028423 call dataelementtype6 +0x6fd4 028424 branch asksrv_error ,zero +: 028425 classidloop: +0x6fd5 028426 increase 1 ,regb +0x6fd6 028427 ifetch 1 ,contr +0x6fd7 028428 increase -1 ,rega +0x6fd8 028429 increase -1 ,timeup +0x6fd9 028430 compare 0x18 ,pdata ,0xf8 +0x6fda 028431 nbranch asksrv_error ,true +0x6fdb 028432 compare 0x04 ,pdata ,0x07 +0x6fdc 028433 nbranch cmp032 ,true +0x6fdd 028434 force 1 ,temp +: 028435 skip2bytes: +0x6fde 028436 ifetch 1 ,contr +0x6fdf 028437 increase -1 ,rega +0x6fe0 028438 increase -1 ,timeup +0x6fe1 028439 bne 0x00 ,frstbwrong +0x6fe2 028440 ifetch 1 ,contr +0x6fe3 028441 increase -1 ,rega +0x6fe4 028442 increase -1 ,timeup +0x6fe5 028443 beq 0x00 ,cmpuuid +0x6fe6 028444 branch scndbwrong +: 028445 frstbwrong: +0x6fe7 028446 increase 1 ,contr +0x6fe8 028447 increase -1 ,rega +0x6fe9 028448 increase -1 ,timeup +: 028449 scndbwrong: +0x6fea 028450 increase 2 ,contr +0x6feb 028451 increase -2 ,rega +0x6fec 028452 increase -2 ,timeup +0x6fed 028453 compare 0x00 ,temp ,0xff +0x6fee 028454 branch loopornot ,true +0x6fef 028455 increase 12 ,contr +0x6ff0 028456 increase -12 ,rega +0x6ff1 028457 increase -12 ,timeup +0x6ff2 028458 branch loopornot +: 028459 cmp032: +0x6ff3 028460 compare 0x02 ,pdata ,0x07 +0x6ff4 028461 nbranch cmp016 ,true +0x6ff5 028462 branch skip2bytes +: 028463 cmp016: +0x6ff6 028464 compare 0x01 ,pdata ,0x07 +0x6ff7 028465 nbranch asksrv_error ,true +: 028466 cmpuuid: +0x6ff8 028467 increase -2 ,rega +0x6ff9 028468 increase -2 ,timeup +0x6ffa 028469 ifetch 2 ,contr +0x6ffb 028470 sub regb ,4 ,null +0x6ffc 028471 branch uuidsize ,zero +0x6ffd 028472 istore 2 ,contw +: 028473 uuidsize: +0x6ffe 028474 compare 0x00 ,temp ,0xff +0x6fff 028475 branch loopornot ,true +0x7000 028476 copy contr ,temp +0x7001 028477 ifetch 1 ,contr +0x7002 028478 bne 0x00 ,wrong12b +0x7003 028479 ifetch 1 ,contr +0x7004 028480 bne 0x00 ,wrong12b +0x7005 028481 ifetch 1 ,contr +0x7006 028482 bne 0x10 ,wrong12b +0x7007 028483 ifetch 1 ,contr +0x7008 028484 bne 0x00 ,wrong12b +0x7009 028485 ifetch 1 ,contr +0x700a 028486 bne 0x80 ,wrong12b +0x700b 028487 ifetch 1 ,contr +0x700c 028488 bne 0x00 ,wrong12b +0x700d 028489 ifetch 1 ,contr +0x700e 028490 bne 0x00 ,wrong12b +0x700f 028491 ifetch 1 ,contr +0x7010 028492 bne 0x80 ,wrong12b +0x7011 028493 ifetch 1 ,contr +0x7012 028494 bne 0x5f ,wrong12b +0x7013 028495 ifetch 1 ,contr +0x7014 028496 bne 0x9b ,wrong12b +0x7015 028497 ifetch 1 ,contr +0x7016 028498 bne 0x34 ,wrong12b +0x7017 028499 ifetch 1 ,contr +0x7018 028500 beq 0xfb ,chck12dn +: 028501 wrong12b: +0x7019 028502 copy temp ,contr +: 028503 wrong12b1: +0x701a 028504 increase 12 ,contr +0x701b 028505 force 0x00 ,queue +0x701c 028506 force 0x00 ,temp +0x701d 028507 branch chck12dn +: 028509 chck12dn: +0x701e 028510 increase -12 ,timeup +0x701f 028511 increase -12 ,rega +: 028512 loopornot: +0x7020 028513 force 0x00 ,temp +0x7021 028514 compare 0x00 ,rega ,0xff +0x7022 028515 nbranch classidloop ,true +0x7023 028516 force 0 ,pdata +0x7024 028517 istore 2 ,contw +0x7025 028518 rtn +: 028519 asksrv_error: +0x7026 028520 arg 0xff ,temp +0x7027 028521 rtn +: 028531 dataelementtype6: +0x7028 028532 bpatchx patch3a_4 ,mem_patch3a +0x7029 028533 ifetch 1 ,contr +0x702a 028534 increase -1 ,timeup +0x702b 028535 compare 0x30 ,pdata ,0xf8 +0x702c 028536 nbranch dsize_error ,true +0x702d 028537 compare 0x07 ,pdata ,0x07 +0x702e 028538 branch dsize32 ,true +0x702f 028539 compare 0x06 ,pdata ,0x07 +0x7030 028540 branch dsize16 ,true +0x7031 028541 compare 0x05 ,pdata ,0x07 +0x7032 028542 nbranch dsize_error ,true +0x7033 028544 ifetch 1 ,contr +0x7034 028545 copy pdata ,rega +0x7035 028546 increase -1 ,timeup +0x7036 028547 branch dsize +: 028548 dsize32: +0x7037 028549 increase 2 ,contr +0x7038 028550 increase -2 ,timeup +: 028551 dsize16: +0x7039 028552 ifetch 2 ,contr +0x703a 028553 byteswap pdata ,rega +0x703b 028554 increase -2 ,timeup +: 028555 dsize: +0x703c 028556 force 0x01 ,pdata +0x703d 028557 rtn +: 028558 dsize_error: +0x703e 028559 force 0x00 ,pdata +0x703f 028560 rtn +: 028570 ss_empty_rsp: +0x7040 028571 setarg sdp_search_res +0x7041 028572 store 1 ,mem_sdp_pduid +0x7042 028573 branch empty_response +: 028574 sa_empty_rsp: +0x7043 028575 setarg sdp_attribute_res +0x7044 028576 store 1 ,mem_sdp_pduid +0x7045 028577 branch empty_response +: 028578 ssa_empty_rsp: +0x7046 028579 setarg sdp_searchattrib_res +0x7047 028580 store 1 ,mem_sdp_pduid +: 028581 empty_response: +0x7048 028582 call l2cap_get_sdp_tx_payload +0x7049 028585 fetch 1 ,mem_sdp_pduid +0x704a 028586 copy pdata ,regb +0x704b 028587 istore 1 ,contw +0x704c 028588 fetch 2 ,mem_sdp_transactionid +0x704d 028589 istore 2 ,contw +0x704e 028590 setarg 0x0500 +0x704f 028591 istore 2 ,contw +0x7050 028592 compare sdp_attribute_res ,regb ,0xff +0x7051 028593 branch fullsearch ,true +0x7052 028594 compare sdp_searchattrib_res ,regb ,0xff +0x7053 028595 branch fullsearch ,true +0x7054 028596 setarg 0x000000 +0x7055 028597 istore 5 ,contw +0x7056 028598 branch outempty +: 028600 fullsearch: +0x7057 028601 setarg 0x350200 +0x7058 028602 istore 5 ,contw +: 028603 outempty: +0x7059 028604 jam 10 ,mem_sdp_tx_pkt_length +0x705a 028605 rtn +: 028608 sdp_data_len: +0x705b 028609 call store_contw +0x705c 028610 call store_contr +0x705d 028611 call sdp_get_data +0x705e 028612 call get_contw +0x705f 028613 call get_contr +0x7060 028614 copy temp ,pdata +0x7061 028615 rtn +: 028618 sdp_get_data: +0x7062 028619 ifetch 1 ,contr +0x7063 028620 and pdata ,0x7 ,loopcnt +0x7064 028621 rshift3 pdata ,pdata +0x7065 028622 bne 0 ,sdp_get_data_type_not0 +: 028623 sdp_get_data_type0: +0x7066 028624 force 1 ,pdata +0x7067 028625 force 1 ,temp +0x7068 028626 rtn +: 028628 sdp_get_data_type_not0_sizeindex01234: +0x7069 028629 call left_shift_n +0x706a 028630 add pdata ,1 ,temp +0x706b 028631 rtn +: 028632 sdp_get_data_type_not0: +0x706c 028633 deposit loopcnt +0x706d 028634 sub pdata ,4 ,null +0x706e 028635 branch sdp_get_data_type_not0_sizeindex01234 ,positive +0x706f 028636 beq 5 ,sdp_get_data_type_not0_sizeindex5 +0x7070 028637 beq 6 ,sdp_get_data_type_not0_sizeindex6 +0x7071 028638 beq 7 ,sdp_get_data_type_not0_sizeindex7 +0x7072 028639 rtn +: 028641 sdp_get_data_type_not0_sizeindex5: +0x7073 028642 ifetch 1 ,contr +0x7074 028643 add pdata ,2 ,temp +0x7075 028644 rtn +: 028645 sdp_get_data_type_not0_sizeindex6: +0x7076 028646 ifetch 2 ,contr +0x7077 028647 byteswap pdata ,pdata +0x7078 028648 add pdata ,3 ,temp +0x7079 028649 rtn +: 028650 sdp_get_data_type_not0_sizeindex7: +0x707a 028651 ifetch 2 ,contr +0x707b 028652 byteswap pdata ,pdata +0x707c 028653 ifetcht 2 ,contr +0x707d 028654 byteswap temp ,temp +0x707e 028655 lshift16 temp ,temp +0x707f 028656 iadd temp ,pdata +0x7080 028657 add pdata ,5 ,temp +0x7081 028658 rtn +: 028664 search_all_uuid: +0x7082 028665 bpatchx patch3a_5 ,mem_patch3a +0x7083 028666 force 0 ,queue +0x7084 028667 arg 0 ,regb +0x7085 028668 arg mem_sdp_handle_list ,contw +: 028669 search_all_uuid_llop: +0x7086 028670 ifetch 2 ,timeup +0x7087 028671 rtn blank +0x7088 028672 call search_uuid +0x7089 028673 copy queue ,pdata +0x708a 028674 rtneq sdp_max_handle_number +0x708b 028675 increase 2 ,timeup +0x708c 028676 branch search_all_uuid_llop +: 028678 search_uuid: +0x708d 028680 iforce regc +0x708e 028682 fetch 2 ,mem_ui_uuid_table +0x708f 028683 iforce contr +: 028684 search_uuid_next: +0x7090 028685 copy queue ,pdata +0x7091 028686 rtneq sdp_max_handle_number +0x7092 028687 disable user +0x7093 028688 ifetch 1 ,contr +0x7094 028689 rtn blank +0x7095 028690 iforce loopcnt +: 028691 search_uuid_loop: +0x7096 028692 ifetch 2 ,contr +0x7097 028693 isub regc ,null +0x7098 028694 nbranch search_uuid_not_found ,zero +0x7099 028695 enable user +: 028696 search_uuid_not_found: +0x709a 028697 loop search_uuid_loop +0x709b 028698 ifetcht 4 ,contr +0x709c 028699 copy contr ,rega +0x709d 028700 nbranch search_uuid_nomatch ,user +0x709e 028701 arg mem_sdp_handle_list ,contr +0x709f 028702 arg sdp_max_handle_number ,loopcnt +: 028703 search_uuid_check_same_handle: +0x70a0 028704 ifetch 4 ,contr +0x70a1 028705 branch search_uuid_store_handle ,blank +0x70a2 028706 isub temp ,null +0x70a3 028707 branch search_uuid_nomatch ,zero +0x70a4 028708 loop search_uuid_check_same_handle +0x70a5 028709 rtn +: 028710 search_uuid_store_handle: +0x70a6 028711 istoret 4 ,contw +0x70a7 028712 increase 1 ,queue +0x70a8 028713 copy rega ,contr +0x70a9 028714 call sdp_data_len +0x70aa 028715 iadd regb ,regb +0x70ab 028716 iadd contr ,contr +0x70ac 028717 branch search_uuid_next +: 028718 search_uuid_nomatch: +0x70ad 028719 copy rega ,contr +0x70ae 028720 call sdp_get_data +0x70af 028721 iadd contr ,contr +0x70b0 028722 branch search_uuid_next +: 028728 search_handle: +0x70b1 028729 bpatchx patch3a_6 ,mem_patch3a +0x70b2 028730 fetch 2 ,mem_ui_uuid_table +0x70b3 028731 iforce contr +: 028732 search_handle_loop: +0x70b4 028733 ifetch 1 ,contr +0x70b5 028734 branch disable_zero ,blank +0x70b6 028735 lshift pdata ,pdata +0x70b7 028736 iadd contr ,contr +0x70b8 028737 ifetch 4 ,contr +0x70b9 028738 isub temp ,null +0x70ba 028739 rtn zero +0x70bb 028740 deposit contw +0x70bc 028741 store 2 ,mem_contw +0x70bd 028742 storet 8 ,mem_temp +0x70be 028743 call sdp_get_data +0x70bf 028744 iadd contr ,contr +0x70c0 028745 copy contr ,pdata +0x70c1 028746 fetcht 2 ,mem_contw +0x70c2 028747 copy temp ,contw +0x70c3 028748 fetcht 8 ,mem_temp +0x70c4 028749 copy pdata ,contr +0x70c5 028750 branch search_handle_loop +: 028756 search_attrib: +0x70c6 028757 bpatchx patch3a_7 ,mem_patch3a +0x70c7 028758 fetch 2 ,mem_ui_uuid_table +0x70c8 028759 iforce contr +: 028760 search_attrib_next: +0x70c9 028761 ifetch 1 ,contr +0x70ca 028762 branch search_attrib_end ,blank +0x70cb 028763 iforce loopcnt +: 028764 search_attrib_loop: +0x70cc 028765 ifetch 2 ,contr +0x70cd 028766 isub regc ,null +0x70ce 028767 branch search_attrib_found_uuid ,zero +0x70cf 028768 loop search_attrib_loop +0x70d0 028769 increase 4 ,contr +0x70d1 028770 call sdp_get_data +0x70d2 028771 iadd contr ,contr +0x70d3 028772 branch search_attrib_next +: 028773 search_attrib_found_uuid: +0x70d4 028774 increase -1 ,loopcnt +0x70d5 028775 lshift loopcnt ,pdata +0x70d6 028776 iadd contr ,contr +0x70d7 028777 increase 4 ,contr +0x70d8 028778 call sdp_get_data +0x70d9 028779 iadd contr ,timeup +: 028780 search_attrib_loop_attribs: +0x70da 028781 increase 1 ,contr +0x70db 028782 ifetch 2 ,contr +0x70dc 028783 isub regb ,null +0x70dd 028787 branch disable_blank ,zero +0x70de 028788 call sdp_data_len +0x70df 028789 iadd contr ,contr +0x70e0 028790 deposit timeup +0x70e1 028791 isub contr ,null +0x70e2 028792 branch search_attrib_end ,zero +0x70e3 028793 branch search_attrib_loop_attribs +: 028794 search_attrib_end: +0x70e4 028795 force 0 ,contr +0x70e5 028796 force 0 ,pdata +0x70e6 028797 rtn +: 028803 search_handle_attrib: +0x70e7 028804 bpatchx patch3b_0 ,mem_patch3b +0x70e8 028805 fetch 2 ,mem_ui_uuid_table +0x70e9 028806 iforce contr +: 028807 search_handle_attrib_next: +0x70ea 028808 ifetch 1 ,contr +0x70eb 028809 branch search_handle_attrib_end ,blank +0x70ec 028810 lshift pdata ,pdata +0x70ed 028811 iadd contr ,contr +0x70ee 028812 ifetch 4 ,contr +0x70ef 028813 isub temp ,null +0x70f0 028814 branch search_handl_attrib_found_handle ,zero +0x70f1 028815 call sdp_get_data +0x70f2 028816 iadd contr ,contr +0x70f3 028817 branch search_handle_attrib_next +: 028818 search_handl_attrib_found_handle: +0x70f4 028819 call sdp_get_data +0x70f5 028820 iadd contr ,timeup +: 028821 search_handle_attrib_loop_attribs: +0x70f6 028822 increase 1 ,contr +0x70f7 028823 ifetch 2 ,contr +0x70f8 028824 isub regb ,null +0x70f9 028825 rtn zero +0x70fa 028826 call sdp_data_len +0x70fb 028827 iadd contr ,contr +0x70fc 028828 deposit timeup +0x70fd 028829 isub contr ,null +0x70fe 028830 branch search_handle_attrib_end ,zero +0x70ff 028831 branch search_handle_attrib_loop_attribs +: 028832 search_handle_attrib_end: +0x7100 028833 force 0 ,contr +0x7101 028834 rtn +: 028838 search_rfcomm_cn: +0x7102 028839 arg 0x0400 ,regb +0x7103 028840 call search_handl_attrib_found_handle +0x7104 028841 arg 0x0300 ,regb +0x7105 028842 call search_uuid_in_data +0x7106 028843 nrtn user +0x7107 028844 sub rega ,3 ,null +0x7108 028845 branch disable_user ,positive +0x7109 028846 ifetch 1 ,contr +0x710a 028847 bne 0x08 ,disable_user +0x710b 028848 ifetch 1 ,contr +0x710c 028849 rtn +: 028854 search_uuid_in_data: +0x710d 028855 bpatchx patch3b_1 ,mem_patch3b +0x710e 028856 call sdp_get_data +0x710f 028857 copy pdata ,rega +: 028858 search_uuid_in_data_loop: +0x7110 028859 ifetch 1 ,contr +0x7111 028860 and pdata ,0x7 ,loopcnt +0x7112 028861 rshift3 pdata ,pdata +0x7113 028862 sub pdata ,3 ,null +0x7114 028863 branch search_uuid_in_data_found_uuid ,zero +0x7115 028864 copy loopcnt ,pdata +0x7116 028865 beq 5 ,search_uuid_in_data_found_element_index5 +0x7117 028866 beq 6 ,search_uuid_in_data_found_element_index6 +0x7118 028867 beq 7 ,search_uuid_in_data_found_element_index7 +0x7119 028868 increase -1 ,contr +0x711a 028869 call sdp_get_data +0x711b 028870 iadd contr ,contr +0x711c 028871 copy rega ,pdata +0x711d 028872 isub temp ,rega +0x711e 028873 branch disable_user ,zero +0x711f 028874 branch search_uuid_in_data_loop +: 028876 search_uuid_in_data_found_element_index5: +0x7120 028877 increase -2 ,rega +0x7121 028878 increase 1 ,contr +0x7122 028879 branch search_uuid_in_data_loop +: 028880 search_uuid_in_data_found_element_index6: +0x7123 028881 increase -3 ,rega +0x7124 028882 increase 2 ,contr +0x7125 028883 branch search_uuid_in_data_loop +: 028884 search_uuid_in_data_found_element_index7: +0x7126 028885 increase -5 ,rega +0x7127 028886 increase 4 ,contr +0x7128 028887 branch search_uuid_in_data_loop +: 028889 search_uuid_in_data_found_uuid: +0x7129 028890 increase -1 ,rega +0x712a 028891 copy loopcnt ,pdata +0x712b 028892 beq 1 ,search_uuid_in_data_type_uuid_16 +0x712c 028893 beq 2 ,search_uuid_in_data_type_uuid_32 +0x712d 028894 beq 4 ,search_uuid_in_data_type_uuid_128 +0x712e 028895 branch disable_user +: 028896 search_uuid_in_data_type_uuid_128: +0x712f 028897 increase -12 ,rega +: 028898 search_uuid_in_data_type_uuid_32: +0x7130 028899 ifetch 2 ,contr +0x7131 028900 increase -2 ,rega +: 028901 search_uuid_in_data_type_uuid_16: +0x7132 028902 ifetch 2 ,contr +0x7133 028903 isub regb ,null +0x7134 028904 branch enable_user ,zero +0x7135 028905 increase -2 ,rega +0x7136 028906 branch disable_user ,zero +0x7137 028907 branch search_uuid_in_data_loop +: 028966 sdp_send_spp_request: +0x7138 028967 call l2cap_get_sdp_tx_payload +0x7139 028968 copy pdata ,contw +0x713a 028969 setarg 6 +0x713b 028970 istore 1 ,contw +0x713c 028971 setarg sdp_tid_spp +0x713d 028972 istore 2 ,contw +0x713e 028973 setarg 0x0f00 +0x713f 028974 istore 2 ,contw +0x7140 028975 setarg 0x1a0535 +0x7141 028976 istore 3 ,contw +0x7142 028977 setarg 0x0111 +0x7143 028978 lshift16 pdata ,pdata +0x7144 028979 istore 4 ,contw +0x7145 028980 setarg 0x2600 +0x7146 028981 istore 2 ,contw +0x7147 028982 setarg 0x0335 +0x7148 028983 istore 2 ,contw +0x7149 028984 setarg 0x0009 +0x714a 028985 istore 2 ,contw +0x714b 028986 setarg 0x0004 +0x714c 028987 istore 2 ,contw +0x714d 028988 jam 0x14 ,mem_sdp_tx_pkt_length +0x714e 028989 rtn +: 028993 function_g2: +0x714f 028994 bpatchx patch3b_2 ,mem_patch3b +0x7150 028995 jam 80 ,mem_aes_cmac_data_length +0x7151 028996 arg memdat ,contw +0x7152 028997 arg mem_le_srand ,contr +0x7153 028998 call memcpy16 +0x7154 028999 arg mem_le_pubkey_local_x_256 ,contr +0x7155 029000 call memcpy32 +0x7156 029001 arg mem_le_pubkey_remote_x_256 ,contr +0x7157 029002 call memcpy32 +0x7158 029003 call inverse_memdat +0x7159 029004 arg mem_le_mrand ,contr +0x715a 029005 call store_inverse_k +0x715b 029006 call function_aes_cmac +0x715c 029008 arg mem_aes_cmac_temp ,contw +0x715d 029009 call load_inverse_result +0x715e 029010 setarg 1000000 +0x715f 029011 copy pdata ,rega +0x7160 029012 fetch 4 ,mem_aes_cmac_temp +0x7161 029013 idiv rega +0x7162 029014 call wait_div_end +0x7163 029015 remainder pdata +0x7164 029016 store 4 ,mem_gkey +0x7165 029018 rtn +: 029020 function_f6_eb: +0x7166 029021 jam 65 ,mem_aes_cmac_data_length +0x7167 029022 arg memdat ,contw +0x7168 029023 call store_addr_common_a +0x7169 029024 call store_addr_common_b +0x716a 029025 fetch 3 ,mem_le_pres + 1 +0x716b 029026 istore 3 ,contw +0x716c 029029 call get_r +0x716d 029031 arg mem_le_mrand ,contr +0x716e 029032 call memcpy16 +0x716f 029033 arg mem_le_srand ,contr +0x7170 029034 call memcpy16 +0x7171 029035 call inverse_memdat +0x7172 029036 arg mem_le_mackey ,contr +0x7173 029037 arg mem_aes_cmac_k ,contw +0x7174 029038 call memcpy16 +0x7175 029040 branch function_aes_cmac +: 029044 get_r: +0x7176 029045 fetch 4 ,mem_le_tk +0x7177 029046 istore 4 ,contw +0x7178 029047 call memset0_4 +0x7179 029048 branch memset0_8 +: 029050 function_f6_ea: +0x717a 029051 bpatchx patch3b_3 ,mem_patch3b +0x717b 029052 jam 65 ,mem_aes_cmac_data_length +0x717c 029053 arg memdat ,contw +0x717d 029054 call store_addr_common_b +0x717e 029055 call store_addr_common_a +0x717f 029056 fetch 3 ,mem_le_preq + 1 +0x7180 029057 istore 3 ,contw +0x7181 029060 call get_r +0x7182 029061 arg mem_le_srand ,contr +0x7183 029062 call memcpy16 +0x7184 029063 arg mem_le_mrand ,contr +0x7185 029064 call memcpy16 +0x7186 029065 call inverse_memdat +0x7187 029066 arg mem_le_mackey ,contr +0x7188 029067 arg mem_aes_cmac_k ,contw +0x7189 029068 call memcpy16 +0x718a 029070 call function_aes_cmac +0x718b 029071 arg mem_aes_cmac_temp ,contw +0x718c 029072 branch load_inverse_result +: 029074 function_f5: +0x718d 029075 jam 32 ,mem_aes_cmac_data_length +0x718e 029076 arg mem_le_dhkey_256 ,contr +0x718f 029077 arg memdat ,contw +0x7190 029078 call memcpy32 +0x7191 029079 call inverse_memdat +0x7192 029080 arg mem_le_slat ,contr +0x7193 029081 call store_inverse_k +0x7194 029082 call function_aes_cmac +0x7195 029083 arg mem_aes_cmac_k ,contw +0x7196 029084 call store_aes_result +0x7197 029085 arg 1 ,temp +0x7198 029086 call function_f5_common +0x7199 029087 arg mem_le_ltk ,contw +0x719a 029088 call load_inverse_result +0x719b 029089 arg 0 ,temp +0x719c 029090 call function_f5_common +0x719d 029091 arg mem_le_mackey ,contw +0x719e 029093 branch store_aes_result +: 029096 function_f5_common: +0x719f 029097 bpatchx patch3b_4 ,mem_patch3b +0x71a0 029098 jam 53 ,mem_aes_cmac_data_length +0x71a1 029099 setarg 0x100 +0x71a2 029100 store 2 ,memdat +0x71a3 029101 call store_addr_common_b +0x71a4 029102 call store_addr_common_a +0x71a5 029103 arg mem_le_srand ,contr +0x71a6 029104 call memcpy16 +0x71a7 029105 arg mem_le_mrand ,contr +0x71a8 029106 call memcpy16 +0x71a9 029108 setarg 0x6c65 +0x71aa 029109 istore 2 ,contw +0x71ab 029110 setarg 0x6274 +0x71ac 029111 istore 2 ,contw +0x71ad 029112 istoret 1 ,contw +0x71ae 029113 call inverse_memdat +0x71af 029114 branch function_aes_cmac +: 029116 store_addr_common_b: +0x71b0 029117 fetch 6 ,mem_le_lap +0x71b1 029118 istore 6 ,contw +0x71b2 029119 fetch 1 ,mem_le_conn_own_addr_type +0x71b3 029120 istore 1 ,contw +0x71b4 029121 rtn +: 029123 store_addr_common_a: +0x71b5 029124 fetch 6 ,mem_le_plap +0x71b6 029125 istore 6 ,contw +0x71b7 029130 fetch 1 ,mem_le_conn_peer_addr_type +0x71b8 029131 istore 1 ,contw +0x71b9 029132 rtn +: 029134 function_f4_ca: +0x71ba 029135 jam 65 ,mem_aes_cmac_data_length +0x71bb 029136 fetch 1 ,mem_passkey_1bit +0x71bc 029137 store 1 ,memdat +0x71bd 029138 arg mem_le_pubkey_local_x_256 ,contr +0x71be 029139 call memcpy32 +0x71bf 029140 arg mem_le_pubkey_remote_x_256 ,contr +0x71c0 029141 call memcpy32 +0x71c1 029142 call inverse_memdat +0x71c2 029143 arg mem_le_mrand ,contr +0x71c3 029144 call store_inverse_k +0x71c4 029145 branch function_aes_cmac +: 029148 function_f4_cb: +0x71c5 029149 jam 65 ,mem_aes_cmac_data_length +0x71c6 029150 fetch 1 ,mem_passkey_1bit +0x71c7 029151 store 1 ,memdat +0x71c8 029152 arg mem_le_pubkey_remote_x_256 ,contr +0x71c9 029153 call memcpy32 +0x71ca 029154 arg mem_le_pubkey_local_x_256 ,contr +0x71cb 029155 call memcpy32 +0x71cc 029156 call inverse_memdat +0x71cd 029157 arg mem_le_srand ,contr +0x71ce 029158 call store_inverse_k +0x71cf 029159 branch function_aes_cmac +: 029161 function_aes_cmac: +0x71d0 029162 bpatchx patch3b_5 ,mem_patch3b +0x71d1 029163 call function_aes_cmac_generate_subkey +0x71d2 029167 fetch 1 ,mem_aes_cmac_data_length +0x71d3 029168 copy pdata ,temp +: 029169 function_ceil16: +0x71d4 029170 increase 15 ,pdata +0x71d5 029171 rshift4 pdata ,pdata +0x71d6 029172 copy pdata ,regb +0x71d7 029173 branch function_aes_cmac_set_flag_0_balnk ,blank +0x71d8 029174 and temp ,0x0f ,pdata +0x71d9 029175 nbranch function_aes_cmac_set_flag_0 ,blank +0x71da 029177 arg mem_aes_cmac_k1 ,regc +0x71db 029178 arg memdat ,pdata +0x71dc 029179 increase -16 ,pdata +0x71dd 029182 iadd temp ,rega +0x71de 029183 arg mem_aes_cmac_m_last ,contw +0x71df 029184 arg 4 ,loopcnt +0x71e0 029185 call xor_loop +0x71e1 029189 branch function_aes_cmac_aes +: 029191 function_aes_cmac_set_flag_0_balnk: +0x71e2 029192 arg 1 ,regb +0x71e3 029193 arg 0 ,rega +0x71e4 029195 branch function_aes_cmac_set_flag_0_common +: 029198 function_aes_cmac_set_flag_0: +0x71e5 029200 and temp ,0x0f ,rega +: 029201 function_aes_cmac_set_flag_0_common: +0x71e6 029202 arg memdat ,pdata +0x71e7 029203 iadd temp ,pdata +0x71e8 029204 isub rega ,contr +0x71e9 029206 arg mem_aes_cmac_temp ,contw +0x71ea 029207 call function_aes_cmac_padding +0x71eb 029209 arg mem_aes_cmac_k2 ,regc +0x71ec 029210 arg mem_aes_cmac_temp ,rega +0x71ed 029211 arg mem_aes_cmac_m_last ,contw +0x71ee 029212 arg 4 ,loopcnt +0x71ef 029213 call xor_loop +: 029220 function_aes_cmac_aes: +0x71f0 029225 call aes_clear_data +0x71f1 029226 call aes_init +0x71f2 029229 arg memdat ,contr +: 029230 function_aes_cmac_aes_loop: +0x71f3 029232 increase -1 ,regb +0x71f4 029233 deposit regb +0x71f5 029234 branch function_aes_cmac_aes_loop_end ,blank +0x71f6 029235 call load_data128 +0x71f7 029236 call do_aes_cbc +0x71f8 029237 branch function_aes_cmac_aes_loop +: 029239 function_aes_cmac_aes_loop_end: +0x71f9 029240 arg mem_aes_cmac_temp ,contw +0x71fa 029241 call store_aes_result +0x71fb 029242 arg mem_aes_cmac_m_last ,contr +0x71fc 029243 call load_data128 +0x71fd 029244 call aes_init +0x71fe 029245 arg mem_aes_cmac_temp ,contr +0x71ff 029246 call load_data128 +0x7200 029247 branch do_aes_cbc +: 029251 load_inverse_result: +0x7201 029253 copy contw ,rega +0x7202 029254 call store_aes_result +0x7203 029256 arg 16 ,loopcnt +0x7204 029257 branch inverse_data +: 029259 store_inverse_k: +0x7205 029260 arg mem_aes_cmac_k ,contw +0x7206 029261 call memcpy16 +: 029262 inverse_k: +0x7207 029263 arg 16 ,loopcnt +0x7208 029264 arg mem_aes_cmac_k ,rega +0x7209 029265 branch inverse_data +: 029267 inverse_memdat: +0x720a 029268 fetch 1 ,mem_aes_cmac_data_length +0x720b 029269 copy pdata ,loopcnt +0x720c 029270 arg memdat ,rega +0x720d 029271 branch inverse_data +: 029273 bn_lshift_0_inverse: +0x720e 029274 ifetch 1 ,rega +0x720f 029275 lshift pdata ,pdata +0x7210 029276 isolate1 0 ,regc +0x7211 029277 setflag true ,0 ,pdata +0x7212 029278 isolate1 8 ,pdata +0x7213 029279 setflag true ,0 ,regc +0x7214 029280 istore 1 ,rega +0x7215 029281 increase -1 ,rega +0x7216 029282 loop bn_lshift_0_inverse +0x7217 029283 rtn +: 029285 function_aes_cmac_k1_inverse: +0x7218 029286 arg mem_aes_cmac_k1 ,rega +: 029287 function_aes_cmac_inverse_common: +0x7219 029288 increase 15 ,rega +0x721a 029289 force 16 ,loopcnt +0x721b 029290 force 0 ,regc +0x721c 029291 branch bn_lshift_0_inverse +: 029293 function_aes_cmac_k2_inverse: +0x721d 029294 arg mem_aes_cmac_k2 ,rega +0x721e 029295 branch function_aes_cmac_inverse_common +: 029298 function_aes_cmac_generate_subkey: +0x721f 029299 arg mem_aes_cmac_k ,contr +0x7220 029300 call load_key +0x7221 029303 force regidx_xor ,regext_index +0x7222 029304 call aes_clear +0x7223 029305 call aes_clear_data +0x7224 029306 call do_aes_ocb +0x7225 029311 arg mem_aes_cmac_k1 ,contw +0x7226 029312 call store_aes_result +: 029313 function_aes_cmac_k1: +0x7227 029314 bpatchx patch3b_6 ,mem_patch3b +0x7228 029315 fetch 1 ,mem_aes_cmac_k1 +0x7229 029316 isolate1 7 ,pdata +0x722a 029317 nbranch function_aes_cmac_k1_0 ,true +0x722b 029318 call function_aes_cmac_k1_inverse +0x722c 029321 arg mem_aes_cmac_k1 ,regc +0x722d 029323 arg mem_aes_cmac_k1 ,contw +0x722e 029326 call function_aes_cmac_xor_rb +0x722f 029327 branch function_aes_cmac_k2 +: 029328 function_aes_cmac_k1_0: +0x7230 029329 call function_aes_cmac_k1_inverse +: 029330 function_aes_cmac_k2: +0x7231 029332 arg mem_aes_cmac_k1 ,contr +0x7232 029333 arg mem_aes_cmac_k2 ,contw +0x7233 029334 call memcpy16 +0x7234 029335 fetch 1 ,mem_aes_cmac_k2 +0x7235 029336 isolate1 7 ,pdata +0x7236 029337 nbranch function_aes_cmac_k2_inverse ,true +0x7237 029338 call function_aes_cmac_k2_inverse +0x7238 029340 arg mem_aes_cmac_k2 ,regc +0x7239 029342 arg mem_aes_cmac_k2 ,contw +: 029348 function_aes_cmac_xor_rb: +0x723a 029349 arg 3 ,loopcnt +: 029350 function_aes_cmac_xor_rb_loop: +0x723b 029351 arg 0 ,temp +0x723c 029352 call function_aes_cmac_xor_loop_common +0x723d 029353 increase 4 ,regc +0x723e 029354 loop function_aes_cmac_xor_rb_loop +0x723f 029355 arg 0x8700 ,temp +0x7240 029356 lshift16 temp ,temp +: 029357 function_aes_cmac_xor_loop_common: +0x7241 029358 ifetch 4 ,regc +0x7242 029359 ixor temp ,pdata +0x7243 029360 istore 4 ,contw +0x7244 029361 rtn +: 029367 function_aes_cmac_padding: +0x7245 029368 bpatchx patch3b_7 ,mem_patch3b +0x7246 029369 arg 16 ,loopcnt +0x7247 029370 arg 0 ,pdata +: 029371 function_aes_cmac_padding_loop: +0x7248 029372 isub rega ,null +0x7249 029373 branch function_aes_cmac_padding_beq_length ,zero +0x724a 029374 branch function_aes_cmac_padding_big_length ,positive +0x724b 029375 ifetcht 1 ,contr +0x724c 029376 istoret 1 ,contw +: 029377 function_aes_cmac_padding_loop2: +0x724d 029378 increase 1 ,pdata +0x724e 029379 loop function_aes_cmac_padding_loop +0x724f 029380 rtn +: 029381 function_aes_cmac_padding_beq_length: +0x7250 029382 arg 0x80 ,temp +: 029383 function_aes_cmac_padding_common: +0x7251 029384 istoret 1 ,contw +0x7252 029385 branch function_aes_cmac_padding_loop2 +: 029387 function_aes_cmac_padding_big_length: +0x7253 029388 arg 0 ,temp +0x7254 029389 branch function_aes_cmac_padding_common +: 029392 generate_kinit: +0x7255 029393 call function_e22 +0x7256 029394 arg mem_input_store ,contr +0x7257 029395 arg mem_kinit ,contw +0x7258 029396 branch memcpy16 +: 029399 function_e21: +0x7259 029400 disable user +0x725a 029401 call function_expand +0x725b 029402 arg mem_random_number ,contr +0x725c 029403 arg mem_x ,contw +0x725d 029404 force 15 ,loopcnt +0x725e 029405 call memcpy +0x725f 029406 ifetch 1 ,contr +0x7260 029407 xor_into 6 ,pdata +0x7261 029408 istore 1 ,contw +0x7262 029409 setarg mem_y +0x7263 029410 store 2 ,memp_ar_input +0x7264 029411 setarg mem_x +0x7265 029412 store 2 ,memp_ar_key +0x7266 029413 set1 mark_ar2 ,mark +0x7267 029414 branch function_ar +: 029418 function_e22: +0x7268 029419 fetcht 1 ,mem_pin_length +0x7269 029420 force 16 ,regb +0x726a 029421 add temp ,6 ,regc +0x726b 029422 sub regc ,16 ,null +0x726c 029423 branch function_e22_pin_init ,positive +0x726d 029424 force 16 ,regc +: 029425 function_e22_pin_init: +0x726e 029426 arg mem_x ,contw +: 029427 function_e22_genx_pin: +0x726f 029428 arg mem_pin ,contr +0x7270 029429 copy temp ,loopcnt +0x7271 029430 disable user +: 029431 function_e22_genx_loop: +0x7272 029432 ifetch 1 ,contr +0x7273 029433 istore 1 ,contw +0x7274 029434 increase -1 ,regb +0x7275 029435 branch function_e22_genx_end ,zero +0x7276 029436 loop function_e22_genx_loop +0x7277 029437 branch function_e22_genx_pin ,user +0x7278 029438 enable user +0x7279 029439 force 6 ,loopcnt +0x727a 029440 copy rega ,contr +0x727b 029441 branch function_e22_genx_loop +: 029442 function_e22_genx_end: +0x727c 029443 arg mem_random_number ,contr +0x727d 029444 arg mem_y ,contw +0x727e 029445 call memcpy16 +0x727f 029446 fetch 1 ,mem_y15 +0x7280 029447 ixor regc ,pdata +0x7281 029448 store 1 ,mem_y15 +0x7282 029449 setarg mem_y +0x7283 029450 store 2 ,memp_ar_input +0x7284 029451 setarg mem_x +0x7285 029452 store 2 ,memp_ar_key +0x7286 029453 set1 mark_ar2 ,mark +0x7287 029454 branch function_ar +: 029459 function_e1: +0x7288 029460 disable user +0x7289 029461 call function_expand +0x728a 029462 branch function_hash +: 029464 function_e3: +0x728b 029465 arg mem_aco ,rega +0x728c 029466 enable user +0x728d 029467 call function_expand +0x728e 029468 call function_hash +0x728f 029469 arg mem_input_store ,contr +0x7290 029470 arg mem_kc ,contw +0x7291 029471 branch memcpy16 +: 029474 function_hash: +0x7292 029475 setarg mem_random_number +0x7293 029476 store 2 ,memp_ar_input +0x7294 029477 setarg mem_link_key +0x7295 029478 store 2 ,memp_ar_key +0x7296 029479 set0 mark_ar2 ,mark +0x7297 029480 call function_ar +0x7298 029481 arg mem_input_store ,rega +0x7299 029482 arg mem_random_number ,regb +0x729a 029483 arg mem_x ,contw +0x729b 029484 call xor16 +0x729c 029485 arg mem_x ,rega +0x729d 029486 arg mem_y ,regb +0x729e 029487 copy regb ,contw +0x729f 029488 enable user +0x72a0 029489 call add16 +0x72a1 029490 call key_offset +0x72a2 029491 setarg mem_y +0x72a3 029492 store 2 ,memp_ar_input +0x72a4 029493 setarg mem_x +0x72a5 029494 store 2 ,memp_ar_key +0x72a6 029495 set1 mark_ar2 ,mark +0x72a7 029496 branch function_ar +: 029500 function_ar: +0x72a8 029501 jam 0 ,mem_ar_hround +0x72a9 029502 fetch 2 ,memp_ar_key +0x72aa 029503 iforce contr +0x72ab 029504 arg mem_key_store ,contw +0x72ac 029505 call memcpy16 +0x72ad 029506 fetch 2 ,memp_ar_input +0x72ae 029507 iforce contr +0x72af 029508 arg mem_input_store ,contw +0x72b0 029509 call memcpy16 +: 029511 function_ar_loop: +0x72b1 029512 call key_scheduling +0x72b2 029513 disable user +0x72b3 029514 bmark0 mark_ar2 ,function_ar_original +0x72b4 029515 fetch 1 ,mem_ar_hround +0x72b5 029516 bne 4 ,function_ar_original +0x72b6 029517 fetch 2 ,memp_ar_input +0x72b7 029518 iforce regb +0x72b8 029519 call xor_mod32_ar2 +: 029520 function_ar_original: +0x72b9 029521 call xor_mod32 +0x72ba 029522 call el_boxes +0x72bb 029523 fetch 1 ,mem_ar_hround +0x72bc 029524 increase 1 ,pdata +0x72bd 029525 store 1 ,mem_ar_hround +0x72be 029527 call key_scheduling +0x72bf 029528 enable user +0x72c0 029529 call xor_mod32 +0x72c1 029530 call pht +0x72c2 029531 call permute +0x72c3 029532 call pht +0x72c4 029533 call permute +0x72c5 029534 call pht +0x72c6 029535 call permute +0x72c7 029536 call pht +0x72c8 029537 fetch 1 ,mem_ar_hround +0x72c9 029538 increase 1 ,pdata +0x72ca 029539 store 1 ,mem_ar_hround +0x72cb 029540 bne 16 ,function_ar_loop +0x72cc 029541 call key_scheduling +0x72cd 029542 disable user +0x72ce 029543 branch xor_mod32 +: 029547 key_scheduling: +0x72cf 029548 fetch 1 ,mem_ar_hround +0x72d0 029549 arg mem_key_store ,contr +0x72d1 029550 branch key_sched_zero ,blank +0x72d2 029551 iforce regb +0x72d3 029552 force 17 ,loopcnt +0x72d4 029553 copy contr ,contw +: 029554 key_rotateloop: +0x72d5 029555 ifetch 1 ,contr +0x72d6 029556 lshift3 pdata ,temp +0x72d7 029557 rshift2 pdata ,pdata +0x72d8 029558 rshift3 pdata ,pdata +0x72d9 029559 ior temp ,pdata +0x72da 029560 istore 1 ,contw +0x72db 029561 loop key_rotateloop +0x72dc 029562 setarg mem_key_store +0x72dd 029563 iadd regb ,contr +0x72de 029564 force 16 ,loopcnt +0x72df 029565 arg mem_round_key ,contw +: 029566 key_select_octet_loop: +0x72e0 029567 ifetch 1 ,contr +0x72e1 029568 istore 1 ,contw +0x72e2 029569 compare mem_key_store_end ,contr ,0xff +0x72e3 029570 nbranch key_select_octet_nwrap ,true +0x72e4 029571 increase -17 ,contr +: 029572 key_select_octet_nwrap: +0x72e5 029573 loop key_select_octet_loop +0x72e6 029574 force 0 ,rega +0x72e7 029575 add regb ,-1 ,regc +0x72e8 029576 lshift2 regc ,regc +0x72e9 029577 lshift2 regc ,regc +0x72ea 029578 call enable_authrom +0x72eb 029579 setarg mem_b_box +0x72ec 029580 iadd regc ,regc +0x72ed 029581 arg mem_round_key ,contw +0x72ee 029582 force 16 ,loopcnt +: 029583 bias_round_key_loop: +0x72ef 029584 ifetcht 1 ,regc +0x72f0 029585 ifetch 1 ,contw +0x72f1 029586 iadd temp ,pdata +0x72f2 029587 istore 1 ,contw +0x72f3 029588 increase 1 ,regc +0x72f4 029589 loop bias_round_key_loop +0x72f5 029590 branch disable_authrom +: 029592 key_sched_zero: +0x72f6 029593 force 16 ,loopcnt +0x72f7 029594 force 0 ,temp +: 029595 create_byte_16_loop: +0x72f8 029596 ifetch 1 ,contr +0x72f9 029597 ixor temp ,temp +0x72fa 029598 loop create_byte_16_loop +0x72fb 029599 deposit temp +0x72fc 029600 istore 1 ,contr +0x72fd 029601 arg mem_key_store ,contr +0x72fe 029602 arg mem_round_key ,contw +0x72ff 029603 branch memcpy16 +: 029605 xor_mod32: +0x7300 029606 arg mem_round_key ,regb +: 029607 xor_mod32_ar2: +0x7301 029608 force 16 ,loopcnt +0x7302 029609 arg mem_input_store ,rega +0x7303 029610 copy rega ,contw +: 029611 xor_mod32_loop: +0x7304 029612 ifetcht 1 ,rega +0x7305 029613 ifetch 1 ,regb +0x7306 029614 ixor temp ,alarm +0x7307 029615 and loopcnt ,3 ,regc +0x7308 029616 nbranch xor_mod32_invert ,user +0x7309 029617 xor_into 3 ,regc +: 029618 xor_mod32_invert: +0x730a 029619 sub regc ,1 ,regc +0x730b 029620 branch xor_even ,positive +0x730c 029621 iadd temp ,alarm +: 029622 xor_even: +0x730d 029623 deposit alarm +0x730e 029624 istore 1 ,contw +0x730f 029625 increase 1 ,rega +0x7310 029626 increase 1 ,regb +0x7311 029627 loop xor_mod32_loop +0x7312 029628 rtn +: 029630 el_boxes: +0x7313 029631 call enable_authrom +0x7314 029632 force 16 ,loopcnt +0x7315 029633 arg mem_input_store ,rega +: 029634 el_box_loop: +0x7316 029635 ifetch 1 ,rega +0x7317 029636 arg mem_e_box ,contr +0x7318 029637 and loopcnt ,3 ,regc +0x7319 029638 sub regc ,1 ,null +0x731a 029639 branch e_boxes ,positive +0x731b 029640 arg mem_l_box ,contr +: 029641 e_boxes: +0x731c 029642 iadd contr ,contr +0x731d 029643 ifetch 1 ,contr +0x731e 029644 istore 1 ,rega +0x731f 029645 increase 1 ,rega +0x7320 029646 loop el_box_loop +0x7321 029647 branch disable_authrom +: 029649 pht: +0x7322 029650 force 8 ,loopcnt +0x7323 029651 arg mem_input_store ,contr +0x7324 029652 copy contr ,contw +: 029653 pht_loop: +0x7325 029654 ifetch 1 ,contr +0x7326 029655 iforce rega +0x7327 029656 ifetch 1 ,contr +0x7328 029657 iforce regb +0x7329 029658 lshift rega ,pdata +0x732a 029659 iadd regb ,pdata +0x732b 029660 istore 1 ,contw +0x732c 029661 deposit rega +0x732d 029662 iadd regb ,pdata +0x732e 029663 istore 1 ,contw +0x732f 029664 loop pht_loop +0x7330 029665 rtn +: 029668 permute: +0x7331 029669 setarg 0x8ae42c +0x7332 029670 iforce temp +0x7333 029671 force 7 ,loopcnt +0x7334 029672 call permute_exchange +0x7335 029673 setarg 0xd751b +0x7336 029674 iforce temp +0x7337 029675 force 5 ,loopcnt +0x7338 029676 call permute_exchange +0x7339 029677 fetch 1 ,mem_input_store + 15 +0x733a 029678 iforce rega +0x733b 029679 fetch 1 ,mem_input_store + 3 +0x733c 029680 store 1 ,mem_input_store + 15 +0x733d 029681 deposit rega +0x733e 029682 store 1 ,mem_input_store + 3 +0x733f 029683 rtn +: 029685 permute_exchange: +0x7340 029686 and temp ,0xf ,regb +: 029687 permute_loop: +0x7341 029688 and temp ,0xf ,pdata +0x7342 029689 arg mem_input_store ,contw +0x7343 029690 iadd contw ,contw +0x7344 029691 ifetch 1 ,contw +0x7345 029692 iforce regc +0x7346 029693 deposit rega +0x7347 029694 istore 1 ,contw +0x7348 029695 copy regc ,rega +0x7349 029696 rshift4 temp ,temp +0x734a 029697 loop permute_loop +0x734b 029698 setarg mem_input_store +0x734c 029699 iadd regb ,contw +0x734d 029700 deposit rega +0x734e 029701 istore 1 ,contw +0x734f 029702 rtn +: 029704 add16: +0x7350 029705 enable user +0x7351 029706 branch xor_add16 +: 029708 xor16: +0x7352 029709 disable user +: 029710 xor_add16: +0x7353 029711 force 16 ,loopcnt +: 029712 xoradd_loop: +0x7354 029713 ifetcht 1 ,rega +0x7355 029714 ifetch 1 ,regb +0x7356 029715 branch xoradd_add ,user +0x7357 029716 ixor temp ,pdata +0x7358 029717 branch xoradd_store +: 029718 xoradd_add: +0x7359 029719 iadd temp ,pdata +: 029720 xoradd_store: +0x735a 029721 istore 1 ,contw +0x735b 029722 increase 1 ,rega +0x735c 029723 increase 1 ,regb +0x735d 029724 loop xoradd_loop +0x735e 029725 rtn +: 029728 function_expand: +0x735f 029729 arg mem_y ,contw +0x7360 029730 ifetch 6 ,rega +0x7361 029731 istore 6 ,contw +0x7362 029732 branch expand_12 ,user +0x7363 029733 ifetch 6 ,rega +0x7364 029734 branch expand_cont +: 029735 expand_12: +0x7365 029736 ifetch 6 ,contr +: 029737 expand_cont: +0x7366 029738 istore 6 ,contw +0x7367 029739 ifetch 4 ,rega +0x7368 029740 istore 4 ,contw +0x7369 029741 rtn +: 029743 key_offset: +0x736a 029744 arg mem_link_key ,contr +0x736b 029745 arg mem_x ,contw +0x736c 029746 arg 0 ,temp +0x736d 029747 setarg 0x8395a7 +0x736e 029748 call concatenate_temp24 +0x736f 029749 setarg 0xb3c1df +0x7370 029750 call concatenate_temp24 +0x7371 029751 setarg 0xe5e9 +0x7372 029752 call concatenate_temp16 +0x7373 029753 copy temp ,regab +0x7374 029754 disable user +0x7375 029755 call key_addxor +0x7376 029756 copy regab ,temp +0x7377 029757 enable user +0x7378 029758 branch key_addxor +: 029760 key_addxor: +0x7379 029761 force 8 ,loopcnt +: 029762 key_addxor_loop: +0x737a 029763 ifetch 1 ,contr +0x737b 029764 compare 1 ,loopcnt ,1 +0x737c 029765 branch key_high ,user +0x737d 029766 branch key_xor ,true +: 029767 key_add: +0x737e 029768 iadd temp ,pdata +0x737f 029769 branch key_store +: 029770 key_high: +0x7380 029771 branch key_add ,true +: 029772 key_xor: +0x7381 029773 ixor temp ,pdata +: 029774 key_store: +0x7382 029775 istore 1 ,contw +0x7383 029776 rshift8 temp ,temp +0x7384 029777 loop key_addxor_loop +0x7385 029778 rtn +: 029780 copy_aco: +0x7386 029781 fetch 6 ,mem_input_store + 4 +0x7387 029782 store 6 ,mem_aco +0x7388 029783 ifetch 6 ,contr +0x7389 029784 istore 6 ,contw +0x738a 029785 rtn +: 029787 concatenate_temp24: +0x738b 029788 lshift8 temp ,temp +: 029789 concatenate_temp16: +0x738c 029790 lshift16 temp ,temp +0x738d 029791 ior temp ,temp +0x738e 029792 rtn +: 029796 loop1: +0x738f 029797 branch loop1 +: 029801 generate_stk: +0x7390 029802 bpatchx patch3c_0 ,mem_patch3c +0x7391 029803 call function_s1 +0x7392 029804 arg mem_le_ltk ,contw +0x7393 029805 branch store_aes_result +: 029808 authenticate_rconfirm: +0x7394 029809 arg mem_le_srand ,contw +0x7395 029810 branch authenticate_mconfirm ,master +0x7396 029811 arg mem_le_mrand ,contw +: 029812 authenticate_mconfirm: +0x7397 029813 copy contr ,rega +0x7398 029814 call memcpy16 +0x7399 029815 call function_c1 +0x739a 029816 arg mem_le_rconfirm ,contr +0x739b 029817 branch compare_res +: 029819 generate_confirm: +0x739c 029820 arg mem_le_mrand ,rega +0x739d 029821 branch generate_mrand ,master +0x739e 029822 arg mem_le_srand ,rega +: 029823 generate_mrand: +0x739f 029824 copy rega ,contw +0x73a0 029825 call generate_random +0x73a1 029826 branch function_c1 +: 029828 generate_sk: +0x73a2 029829 arg mem_le_skdm ,contr +0x73a3 029830 call load_data128 +0x73a4 029831 arg mem_le_ltk ,contr +0x73a5 029832 call load_regext +0x73a6 029833 force 0x38 ,aes_ctrl +0x73a7 029834 force 0x0 ,aes_ctrl +0x73a8 029835 call wait_aes +0x73a9 029836 arg mem_le_sk ,contw +0x73aa 029837 branch store_aes_result +: 029840 first_block_counter: +0x73ab 029841 force 0x49 ,pdata +0x73ac 029842 branch first_block +: 029843 first_block_data: +0x73ad 029844 force 1 ,pdata +: 029845 first_block: +0x73ae 029846 force regidx_data ,regext_index +0x73af 029847 lshift8 temp ,regext +0x73b0 029848 ior regext ,regext +0x73b1 029849 increase 1 ,regext_index +0x73b2 029850 rshift8 temp ,regext +0x73b3 029851 rshift16 regext ,regext +0x73b4 029852 fetch 2 ,mem_le_ivm +0x73b5 029853 lshift16 ,pdata ,pdata +0x73b6 029854 ior regext ,regext +0x73b7 029855 increase 1 ,regext_index +0x73b8 029856 ifetch 4 ,contr +0x73b9 029857 iforce regext +0x73ba 029858 increase 1 ,regext_index +0x73bb 029859 ifetch 2 ,contr +0x73bc 029860 byteswap rega ,regext +0x73bd 029861 lshift16 regext ,regext +0x73be 029862 ior regext ,regext +0x73bf 029863 increase 1 ,regext_index +0x73c0 029864 rtn +: 029868 generate_mic: +0x73c1 029869 add regc ,1 ,contr +0x73c2 029870 ifetch 1 ,contr +0x73c3 029871 iforce rega +0x73c4 029872 call first_block_counter +0x73c5 029873 call do_aes_ocb +0x73c6 029875 force regidx_data ,regext_index +0x73c7 029876 ifetch 1 ,regc +0x73c8 029877 and_into 0x3 ,pdata +0x73c9 029878 lshift16 pdata ,regext +0x73ca 029879 set1 8 ,regext +0x73cb 029880 call clear_hidata +0x73cc 029881 call do_aes_cbc +0x73cd 029883 copy rega ,loopcnt +0x73ce 029884 add regc ,2 ,contr +0x73cf 029885 call padding_data +: 029886 generate_mic_loop: +0x73d0 029887 call aes_load_data +0x73d1 029888 call do_aes_cbc +0x73d2 029889 deposit loopcnt +0x73d3 029890 branch generate_mic_end ,blank +0x73d4 029891 branch generate_mic_loop +: 029892 generate_mic_end: +0x73d5 029893 force regidx_result ,regext_index +0x73d6 029894 deposit regext +0x73d7 029895 store 4 ,mem_le_mic +0x73d8 029896 rtn +: 029898 aes_crypt_data: +0x73d9 029899 increase 1 ,rega +0x73da 029900 call first_block_data +0x73db 029901 copy regc ,contr +0x73dc 029902 call aes_load_xor +0x73dd 029903 call do_aes_ctr +0x73de 029904 call store_enc_data +0x73df 029905 increase 16 ,regc +0x73e0 029906 increase -16 ,regb +0x73e1 029907 branch aes_crypt_data ,positive +0x73e2 029908 rtn +: 029910 le_encrypt: +0x73e3 029911 bpatchx patch3c_1 ,mem_patch3c +0x73e4 029912 arg mem_le_txheader ,regc +0x73e5 029913 fetcht 5 ,mem_le_pcnt_tx +0x73e6 029914 call generate_mic +0x73e7 029915 force regidx_xor ,regext_index +0x73e8 029916 iforce regext +0x73e9 029917 force 0 ,rega +0x73ea 029918 call first_block_data +0x73eb 029919 call do_aes_ctr +0x73ec 029920 arg mem_le_txpayload ,regc +0x73ed 029921 fetch 1 ,mem_le_txlen +0x73ee 029922 add pdata ,-1 ,regb +0x73ef 029923 iadd regc ,contw +0x73f0 029924 force regidx_result ,regext_index +0x73f1 029925 deposit regext +0x73f2 029926 istore 4 ,contw +0x73f3 029927 call aes_crypt_data +0x73f4 029928 fetch 1 ,mem_le_txlen +0x73f5 029929 increase 4 ,pdata +0x73f6 029930 store 1 ,mem_le_txlen +0x73f7 029931 fetcht 5 ,mem_le_pcnt_tx +0x73f8 029932 increase 1 ,temp +0x73f9 029933 storet 5 ,mem_le_pcnt_tx +0x73fa 029934 rtn +: 029936 le_decrypt: +0x73fb 029937 bpatchx patch3c_2 ,mem_patch3c +0x73fc 029938 fetch 1 ,mem_le_rxbuf + 1 +0x73fd 029939 sub pdata ,20 ,null +0x73fe 029940 branch le_dec_cont ,positive +: 029941 le_dec_cont: +0x73ff 029942 arg mem_le_rxbuf + 2 ,regc +0x7400 029943 add pdata ,-1 ,regb +0x7401 029944 increase -4 ,pdata +0x7402 029945 store 1 ,mem_le_rxbuf + 1 +0x7403 029946 iadd regc ,contr +0x7404 029947 ifetch 4 ,contr +0x7405 029948 force regidx_xor ,regext_index +0x7406 029949 iforce regext +0x7407 029950 force 0 ,rega +0x7408 029951 fetcht 5 ,mem_le_pcnt_rx +0x7409 029952 call first_block_data +0x740a 029953 call do_aes_ctr +0x740b 029954 force regidx_result ,regext_index +0x740c 029955 deposit regext +0x740d 029956 store 4 ,mem_le_peer_mic +0x740e 029957 call aes_crypt_data +0x740f 029958 arg mem_le_rxbuf ,regc +0x7410 029959 call generate_mic +0x7411 029960 fetcht 4 ,mem_le_peer_mic +0x7412 029961 isub temp ,pdata +0x7413 029962 nrtn blank +0x7414 029963 fetch 4 ,mem_le_last_mic +0x7415 029964 isub temp ,pdata +0x7416 029965 rtn blank +0x7417 029966 storet 4 ,mem_le_last_mic +0x7418 029967 fetch 5 ,mem_le_pcnt_rx +0x7419 029968 increase 1 ,pdata +0x741a 029969 store 5 ,mem_le_pcnt_rx +0x741b 029970 force 0 ,pdata +0x741c 029971 rtn +: 029973 wait_aes: +0x741d 029974 nbranch wait_aes ,aes_ready +0x741e 029975 rtn +: 029977 do_aes_ocb: +0x741f 029978 force 0x30 ,aes_ctrl +0x7420 029979 force 0x0 ,aes_ctrl +0x7421 029980 branch wait_aes +: 029982 do_aes_cbc: +0x7422 029983 force 0x32 ,aes_ctrl +0x7423 029984 force 0x2 ,aes_ctrl +0x7424 029985 branch wait_aes +: 029987 do_aes_ctr: +0x7425 029988 force 0x34 ,aes_ctrl +0x7426 029989 force 0x4 ,aes_ctrl +0x7427 029990 branch wait_aes +: 029993 aes_init: +0x7428 029994 force 1 ,aes_ctrl +0x7429 029995 force 0 ,aes_ctrl +0x742a 029996 rtn +: 029997 function_s1: +0x742b 029998 force regidx_data ,regext_index +0x742c 029999 fetch 4 ,mem_le_mrand +0x742d 030000 iforce regext +0x742e 030001 increase 1 ,regext_index +0x742f 030002 ifetch 4 ,contr +0x7430 030003 iforce regext +0x7431 030004 increase 1 ,regext_index +0x7432 030005 fetch 4 ,mem_le_srand +0x7433 030006 iforce regext +0x7434 030007 increase 1 ,regext_index +0x7435 030008 ifetch 4 ,contr +0x7436 030009 iforce regext +0x7437 030010 increase 1 ,regext_index +0x7438 030011 call aes_clear +0x7439 030012 increase -4 ,regext_index +0x743a 030013 fetch 4 ,mem_le_tk +0x743b 030014 copy pdata ,regext +0x743c 030015 increase 4 ,regext_index +0x743d 030016 force 0x38 ,aes_ctrl +0x743e 030017 force 0x8 ,aes_ctrl +0x743f 030018 branch wait_aes +: 030021 function_c1: +0x7440 030022 bpatchx patch3c_3 ,mem_patch3c +0x7441 030023 fetch 6 ,mem_le_lap +0x7442 030024 fetcht 6 ,mem_le_plap +0x7443 030025 branch function_c1_master ,master +0x7444 030026 fetch 6 ,mem_le_plap +0x7445 030027 fetcht 6 ,mem_le_lap +: 030028 function_c1_master: +0x7446 030029 force regidx_xor ,regext_index +0x7447 030030 copy temp ,regext +0x7448 030031 increase 1 ,regext_index +0x7449 030032 rshift32 temp ,regext +0x744a 030033 lshift16 pdata ,pdata +0x744b 030034 ior regext ,regext +0x744c 030035 increase 1 ,regext_index +0x744d 030036 rshift32 pdata ,regext +0x744e 030037 increase 1 ,regext_index +0x744f 030038 force 0 ,regext +0x7450 030039 force 0 ,pdata +0x7451 030040 fetch 1 ,mem_le_conn_peer_addr_type +0x7452 030041 fetcht 1 ,mem_le_adv_own_addr_type +0x7453 030042 nbranch function_c1_irat ,master +0x7454 030044 fetch 1 ,mem_le_conn_own_addr_type +0x7455 030045 fetcht 1 ,mem_le_conn_peer_addr_type +: 030046 function_c1_irat: +0x7456 030047 store 1 ,mem_le_iat +0x7457 030048 storet 1 ,mem_le_rat +0x7458 030049 force regidx_data ,regext_index +0x7459 030050 arg mem_le_iat ,regb +0x745a 030051 force 4 ,loopcnt +: 030052 function_c1_loop1: +0x745b 030053 ifetch 4 ,rega +0x745c 030054 ifetcht 4 ,regb +0x745d 030055 ixor temp ,regext +0x745e 030056 increase 1 ,regext_index +0x745f 030057 increase 4 ,rega +0x7460 030058 increase 4 ,regb +0x7461 030059 loop function_c1_loop1 +0x7462 030060 call aes_clear +0x7463 030061 increase -4 ,regext_index +0x7464 030062 fetch 4 ,mem_le_tk +0x7465 030063 copy pdata ,regext +0x7466 030064 increase 4 ,regext_index +0x7467 030065 force 0x38 ,aes_ctrl +0x7468 030066 force 0xc ,aes_ctrl +0x7469 030067 call wait_aes +0x746a 030069 call aes_clear_data +0x746b 030070 force 0x3a ,aes_ctrl +0x746c 030071 force 0x8 ,aes_ctrl +0x746d 030072 branch wait_aes +: 030074 padding_data: +0x746e 030075 compare 0 ,loopcnt ,3 +0x746f 030076 rtn true +0x7470 030077 deposit contr +0x7471 030078 iadd loopcnt ,contw +0x7472 030079 force 0 ,pdata +: 030080 padding_loop: +0x7473 030081 istore 1 ,contw +0x7474 030082 increase 1 ,loopcnt +0x7475 030083 compare 0 ,loopcnt ,3 +0x7476 030084 rtn true +0x7477 030085 branch padding_loop +: 030087 aes_load_data: +0x7478 030088 force regidx_data ,regext_index +: 030089 load_data_loop: +0x7479 030090 deposit loopcnt +0x747a 030091 branch load_data_padding ,blank +0x747b 030092 ifetch 4 ,contr +0x747c 030093 increase -4 ,loopcnt +: 030094 load_data_padding: +0x747d 030095 iforce regext +0x747e 030096 increase 1 ,regext_index +0x747f 030097 compare regidx_key ,regext_index ,0xf +0x7480 030098 rtn true +0x7481 030099 branch load_data_loop +: 030101 aes_load_xor: +0x7482 030102 force regidx_xor ,regext_index +0x7483 030103 branch load_regext +: 030104 load_key: +0x7484 030105 force regidx_key ,regext_index +0x7485 030106 branch load_regext +: 030107 load_data128: +0x7486 030108 force regidx_data ,regext_index +: 030109 load_regext: +0x7487 030110 force 4 ,loopcnt +: 030111 load_regext_loop: +0x7488 030112 ifetch 4 ,contr +0x7489 030113 iforce regext +0x748a 030114 increase 1 ,regext_index +0x748b 030115 loop load_regext_loop +0x748c 030116 rtn +: 030118 load_sk: +0x748d 030119 arg mem_le_sk ,contr +0x748e 030120 branch load_key +: 030122 clear_hidata: +0x748f 030123 force 4 ,loopcnt +0x7490 030124 branch clear_data_rest +: 030126 aes_clear_data: +0x7491 030127 force regidx_data ,regext_index +: 030128 aes_clear: +0x7492 030129 force 4 ,loopcnt +: 030130 clear_loop: +0x7493 030131 force 0 ,regext +: 030132 clear_data_rest: +0x7494 030133 increase 1 ,regext_index +0x7495 030134 loop clear_loop +0x7496 030135 rtn +: 030137 store_aes_result: +0x7497 030138 force regidx_result ,regext_index +0x7498 030139 force 4 ,loopcnt +: 030140 send_aes_result_loop: +0x7499 030141 deposit regext +0x749a 030142 istore 4 ,contw +0x749b 030143 increase 1 ,regext_index +0x749c 030144 loop send_aes_result_loop +0x749d 030145 rtn +: 030147 store_enc_data: +0x749e 030148 force regidx_result ,regext_index +0x749f 030149 copy regc ,contw +0x74a0 030150 add regb ,1 ,loopcnt +0x74a1 030151 sub loopcnt ,15 ,null +0x74a2 030152 branch store_enc_loop ,positive +0x74a3 030153 force 16 ,loopcnt +: 030154 store_enc_loop: +0x74a4 030155 deposit regext +0x74a5 030156 sub loopcnt ,3 ,null +0x74a6 030157 branch store_enc_byte ,positive +0x74a7 030158 istore 4 ,contw +0x74a8 030159 increase -4 ,loopcnt +0x74a9 030160 rtn zero +0x74aa 030161 increase 1 ,regext_index +0x74ab 030162 branch store_enc_loop +: 030163 store_enc_byte: +0x74ac 030164 istore 1 ,contw +0x74ad 030165 rshift8 pdata ,pdata +0x74ae 030166 loop store_enc_byte +0x74af 030167 rtn +: 030170 compare_res: +0x74b0 030171 force regidx_result ,regext_index +0x74b1 030172 force 4 ,loopcnt +: 030173 compare_res_loop: +0x74b2 030174 ifetch 4 ,contr +0x74b3 030175 isub regext ,null +0x74b4 030176 nrtn zero +0x74b5 030177 increase 1 ,regext_index +0x74b6 030178 loop compare_res_loop +0x74b7 030179 force 0 ,null +0x74b8 030180 rtn +: 030182 enable_authrom: +0x74b9 030183 hfetch 1 ,core_clkoff +0x74ba 030184 set0 clock_off_auth_rom ,pdata +0x74bb 030185 hstore 1 ,core_clkoff +0x74bc 030186 rtn +: 030188 disable_authrom: +0x74bd 030189 hfetch 1 ,core_clkoff +0x74be 030190 set1 clock_off_auth_rom ,pdata +0x74bf 030191 hstore 1 ,core_clkoff +0x74c0 030192 rtn +: 030194 init_memp: +0x74c1 030195 arg mem_p ,contw +0x74c2 030196 setsect 0 ,0x3ffff +0x74c3 030197 setsect 1 ,0x3ffff +0x74c4 030198 setsect 2 ,0x3ffff +0x74c5 030199 setsect 3 ,0x3fbff +0x74c6 030200 istore 9 ,contw +0x74c7 030201 setsect 0 ,0x3ffff +0x74c8 030202 setsect 1 ,0x3ffff +0x74c9 030203 setsect 2 ,0x3ffff +0x74ca 030204 setsect 3 ,0x3ffff +0x74cb 030205 istore 9 ,contw +0x74cc 030206 setsect 0 ,0x3ffff +0x74cd 030207 setsect 1 ,0x3ffff +0x74ce 030208 setsect 2 ,0x3cfff +0x74cf 030209 setsect 3 ,0x3ffff +0x74d0 030210 istore 9 ,contw +0x74d1 030211 setsect 0 ,0x3ffff +0x74d2 030212 setsect 1 ,0x3ffff +0x74d3 030213 setsect 2 ,0x3ffef +0x74d4 030214 setsect 3 ,0x3ffff +0x74d5 030215 istore 9 ,contw +0x74d6 030216 setsect 0 ,0x3ffff +0x74d7 030217 setsect 1 ,0x3ffff +0x74d8 030218 setsect 2 ,0x3ffff +0x74d9 030219 setsect 3 ,0x3ffff +0x74da 030220 istore 9 ,contw +0x74db 030221 setsect 0 ,0x3ffff +0x74dc 030222 setsect 1 ,0x26c7f +0x74dd 030223 setsect 2 ,0x146b +0x74de 030224 setsect 3 ,0x37bb3 +0x74df 030225 istore 9 ,contw +0x74e0 030226 setsect 0 ,0x1feb8 +0x74e1 030227 setsect 1 ,0x10c12 +0x74e2 030228 setsect 2 ,0x2b722 +0x74e3 030229 setsect 3 ,0x29fa6 +0x74e4 030230 istore 9 ,contw +0x74e5 030231 setsect 0 ,0xe70f +0x74e6 030232 setsect 1 ,0x16720 +0x74e7 030233 setsect 2 ,0x519e +0x74e8 030234 setsect 3 ,0x19084 +0x74e9 030235 istore 9 ,contw +0x74ea 030236 setsect 0 ,0x31012 +0x74eb 030237 setsect 1 ,0x360bf +0x74ec 030238 setsect 2 ,0x3f0af +0x74ed 030239 setsect 3 ,0x3d3 +0x74ee 030240 istore 9 ,contw +0x74ef 030241 setsect 0 ,0x3a188 +0x74f0 030242 setsect 1 ,0x3ad0 +0x74f1 030243 setsect 2 ,0x3cbf2 +0x74f2 030244 setsect 3 ,0x243d9 +0x74f3 030245 istore 9 ,contw +0x74f4 030246 setsect 0 ,0x2b030 +0x74f5 030247 setsect 1 ,0x36a03 +0x74f6 030248 setsect 2 ,0x11188 +0x74f7 030249 setsect 3 ,0x1e520 +0x74f8 030250 istore 9 ,contw +0x74f9 030251 setsect 0 ,0x3a11e +0x74fa 030252 setsect 1 ,0xfe5d +0x74fb 030253 setsect 2 ,0xdd57 +0x74fc 030254 setsect 3 ,0x1ac93 +0x74fd 030255 istore 9 ,contw +0x74fe 030256 setsect 0 ,0x11ed +0x74ff 030257 setsect 1 ,0x218c4 +0x7500 030258 setsect 2 ,0x8da7 +0x7501 030259 setsect 3 ,0x257ff +0x7502 030260 istore 9 ,contw +0x7503 030261 setsect 0 ,0x3192b +0x7504 030262 setsect 1 ,0x34641 +0x7505 030263 setsect 2 ,0x1be0c +0x7506 030264 setsect 3 ,0x366ad +0x7507 030265 istore 9 ,contw +0x7508 030266 setsect 0 ,0x1f83 +0x7509 030267 setsect 1 ,0x15a23 +0x750a 030268 setsect 2 ,0x3f9b0 +0x750b 030269 setsect 3 ,0x3949 +0x750c 030270 istore 9 ,contw +0x750d 030271 setsect 0 ,0x13a51 +0x750e 030272 setsect 1 ,0x153fd +0x750f 030273 setsect 2 ,0x3372a +0x7510 030274 setsect 3 ,0xf1bb +0x7511 030275 istore 9 ,contw +0x7512 030276 setsect 0 ,0x3ae85 +0x7513 030277 setsect 1 ,0x1eed9 +0x7514 030278 setsect 2 ,0x9e66 +0x7515 030279 setsect 3 ,0x1a8 +0x7516 030280 istore 8 ,contw +0x7517 030281 rtn +: 030285 init_memp_256: +0x7518 030286 arg mem_p_256 ,contw +0x7519 030287 setsect 0 ,0x3ffff +0x751a 030288 setsect 1 ,0x3ffff +0x751b 030289 setsect 2 ,0x3ffff +0x751c 030290 setsect 3 ,0x3ffff +0x751d 030291 istore 9 ,contw +0x751e 030292 setsect 0 ,0x3ffff +0x751f 030293 setsect 1 ,0x3f +0x7520 030294 setsect 2 ,0x0 +0x7521 030295 setsect 3 ,0x0 +0x7522 030296 istore 9 ,contw +0x7523 030297 setsect 0 ,0x0 +0x7524 030298 setsect 1 ,0x0 +0x7525 030299 setsect 2 ,0x1000 +0x7526 030300 setsect 3 ,0x0 +0x7527 030301 istore 9 ,contw +0x7528 030302 setsect 0 ,0x3ff00 +0x7529 030303 setsect 1 ,0x3ffff +0x752a 030304 setsect 2 ,0x3ffcf +0x752b 030305 setsect 3 ,0x3ffff +0x752c 030306 istore 9 ,contw +0x752d 030307 setsect 0 ,0x3ffff +0x752e 030308 setsect 1 ,0x3ffff +0x752f 030309 setsect 2 ,0x3ffff +0x7530 030310 setsect 3 ,0x3ff +0x7531 030311 istore 9 ,contw +0x7532 030312 setsect 0 ,0x0 +0x7533 030313 setsect 1 ,0x0 +0x7534 030314 setsect 2 ,0x0 +0x7535 030315 setsect 3 ,0x0 +0x7536 030316 istore 9 ,contw +0x7537 030317 setsect 0 ,0x10000 +0x7538 030318 setsect 1 ,0x0 +0x7539 030319 setsect 2 ,0x3f000 +0x753a 030320 setsect 3 ,0x3ffff +0x753b 030321 istore 9 ,contw +0x753c 030322 setsect 0 ,0x296ff +0x753d 030323 setsect 1 ,0x22630 +0x753e 030324 setsect 2 ,0x3945d +0x753f 030325 setsect 3 ,0x3d284 +0x7540 030326 istore 9 ,contw +0x7541 030327 setsect 0 ,0x333a0 +0x7542 030328 setsect 1 ,0x4b7a +0x7543 030329 setsect 2 ,0x37d8 +0x7544 030330 setsect 3 ,0x3c9dc +0x7545 030331 istore 9 ,contw +0x7546 030332 setsect 0 ,0x3a440 +0x7547 030333 setsect 1 ,0x1b958 +0x7548 030334 setsect 2 ,0x38bce +0x7549 030335 setsect 3 ,0x1091f +0x754a 030336 istore 9 ,contw +0x754b 030337 setsect 0 ,0x2e12c +0x754c 030338 setsect 1 ,0x1f47c +0x754d 030339 setsect 2 ,0x356b1 +0x754e 030340 setsect 3 ,0x2fd47 +0x754f 030341 istore 9 ,contw +0x7550 030342 setsect 0 ,0x6837 +0x7551 030343 setsect 1 ,0x2ed90 +0x7552 030344 setsect 2 ,0x1ecec +0x7553 030345 setsect 3 ,0x1acc5 +0x7554 030346 istore 9 ,contw +0x7555 030347 setsect 0 ,0x23357 +0x7556 030348 setsect 1 ,0x18af3 +0x7557 030349 setsect 2 ,0xf9e1 +0x7558 030350 setsect 3 ,0x129f0 +0x7559 030351 istore 9 ,contw +0x755a 030352 setsect 0 ,0x2e7eb +0x755b 030353 setsect 1 ,0x3e6e3 +0x755c 030354 setsect 2 ,0x3e1a7 +0x755d 030355 setsect 3 ,0x10b8b +0x755e 030356 istore 9 ,contw +0x755f 030357 setsect 0 ,0x24fe3 +0x7560 030358 setsect 1 ,0x20ef +0x7561 030359 setsect 2 ,0x1b5a6 +0x7562 030360 setsect 3 ,0xdc2f +0x7563 030361 istore 9 ,contw +0x7564 030362 setsect 0 ,0x13860 +0x7565 030363 setsect 1 ,0x2bd69 +0x7566 030364 setsect 2 ,0x391a +0x7567 030365 setsect 3 ,0x1b222 +0x7568 030366 istore 9 ,contw +0x7569 030367 rtn +: 030370 publickey_init: +0x756a 030371 fetch 1 ,mem_ssp_enable +0x756b 030372 nbranch sp_initialize ,blank +0x756c 030373 branch sp_initialize_256 +: 030375 sp_calc_sequence_256_check: +0x756d 030376 bpatchx patch3c_4 ,mem_patch3c +0x756e 030377 fetch 1 ,mem_ssp_enable +0x756f 030378 rtn blank +0x7570 030379 fetch 1 ,mem_sp_local_key_invalid +0x7571 030380 rtnne sp_key_valid +0x7572 030381 fetch 1 ,mem_le_secure_connect_enable +0x7573 030382 rtn blank +0x7574 030383 fetch 1 ,mem_le_sc_local_key_invalid +0x7575 030384 rtneq sp_key_valid_256 +0x7576 030385 fetch 2 ,mem_ui_state_map +0x7577 030386 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +0x7578 030387 fetch 1 ,mem_le_sc_calc +0x7579 030388 beq sp_calc_standby ,sp_initialize_256 +0x757a 030389 rtn +: 030390 stop_publickey_calc_256: +0x757b 030391 jam sp_calc_standby ,mem_le_sc_calc +0x757c 030392 rtn +: 030395 sp_initialize: +0x757d 030396 bpatchx patch3c_5 ,mem_patch3c +0x757e 030397 fetch 1 ,mem_ssp_enable +0x757f 030398 branch ssp_disable ,blank +0x7580 030399 call ssp_enable +0x7581 030400 call sp_clear_flags +0x7582 030401 branch sp_pubkey_calc +: 030403 sp_clear_flags: +0x7583 030404 setarg 0 +0x7584 030405 store 8 ,mem_sp_state_start +0x7585 030406 store 4 ,mem_sp_flag_start +0x7586 030407 store 7 ,mem_sp_iocap_remote +0x7587 030408 rtn +: 030410 sp_generate_local_key: +0x7588 030411 jam sp_flag_commit ,mem_sp_flag +0x7589 030412 branch sp_generate_local_key0 +: 030413 sp_master_generate_local_key: +0x758a 030414 fetch 1 ,mem_sp_local_key_invalid +0x758b 030415 beq sp_key_valid ,sp_dhkey_calc +0x758c 030416 branch assert +: 030417 sp_generate_local_key0: +0x758d 030418 fetch 1 ,mem_sp_local_key_invalid +0x758e 030419 beq sp_key_valid ,sp_start_send_pubkey +0x758f 030420 branch sp_pubkey_calc +: 030422 sp_start_send_pubkey: +0x7590 030423 call sp_dhkey_calc +0x7591 030424 fetch 1 ,mem_master_sp_state +0x7592 030425 nrtn blank +0x7593 030426 jam sp_stat_key_send ,mem_sp_state +0x7594 030427 rtn +: 030430 sp_calc_check_publickey_256: +0x7595 030431 call sp_calc_b256 +0x7596 030432 arg mem_le_pubkey_remote_y_256 ,rega +0x7597 030433 arg mem_t7_256 ,contw +0x7598 030434 call bn_sqrmod_256 +0x7599 030435 arg mem_le_pubkey_remote_x_256 ,rega +0x759a 030436 arg mem_t2_256 ,contw +0x759b 030437 call bn_sqrmod_256 +0x759c 030438 arg mem_t2_256 ,rega +0x759d 030439 arg mem_le_pubkey_remote_x_256 ,regb +0x759e 030440 arg mem_t2_256 ,contw +0x759f 030441 call bn_mulmod_256 +0x75a0 030442 arg mem_a_256 ,rega +0x75a1 030443 arg mem_le_pubkey_remote_x_256 ,regb +0x75a2 030444 arg mem_t3_256 ,contw +0x75a3 030445 call bn_mulmod_256 +0x75a4 030446 arg mem_t3_256 ,rega +0x75a5 030447 arg mem_t2_256 ,regb +0x75a6 030448 arg mem_t2_256 ,contw +0x75a7 030449 call bn_addmod_256 +0x75a8 030450 arg mem_t0_256 ,rega +0x75a9 030451 arg mem_t2_256 ,regb +0x75aa 030452 arg mem_t0_256 ,contw +0x75ab 030453 call bn_addmod_256 +0x75ac 030454 arg 32 ,loopcnt +0x75ad 030455 arg mem_t7_256 ,rega +0x75ae 030456 arg mem_t0_256 ,regb +0x75af 030457 branch string_compare +: 030459 sp_calc_b256: +0x75b0 030460 arg mem_gy_256 ,rega +0x75b1 030461 arg mem_t0_256 ,contw +0x75b2 030462 call bn_sqrmod_256 +0x75b3 030463 arg mem_gx_256 ,rega +0x75b4 030464 arg mem_t2_256 ,contw +0x75b5 030465 call bn_sqrmod_256 +0x75b6 030466 arg mem_t2_256 ,rega +0x75b7 030467 arg mem_gx_256 ,regb +0x75b8 030468 arg mem_t2_256 ,contw +0x75b9 030469 call bn_mulmod_256 +0x75ba 030470 arg mem_a_256 ,rega +0x75bb 030471 arg mem_gx_256 ,regb +0x75bc 030472 arg mem_t3_256 ,contw +0x75bd 030473 call bn_mulmod_256 +0x75be 030474 arg mem_t3_256 ,rega +0x75bf 030475 arg mem_t2_256 ,regb +0x75c0 030476 arg mem_t2_256 ,contw +0x75c1 030477 call bn_addmod_256 +0x75c2 030478 arg mem_t0_256 ,rega +0x75c3 030479 arg mem_t2_256 ,regb +0x75c4 030480 arg mem_t0_256 ,contw +0x75c5 030481 branch bn_submod_256 +: 030483 sp_calc_check_publickey: +0x75c6 030484 call sp_calc_b +0x75c7 030485 arg mem_sp_pubkey_remote_y ,rega +0x75c8 030486 arg mem_t7_256 ,contw +0x75c9 030487 call bn_sqrmod +0x75ca 030488 arg mem_sp_pubkey_remote_x ,rega +0x75cb 030489 arg mem_t2_256 ,contw +0x75cc 030490 call bn_sqrmod +0x75cd 030491 arg mem_t2_256 ,rega +0x75ce 030492 arg mem_sp_pubkey_remote_x ,regb +0x75cf 030493 arg mem_t2_256 ,contw +0x75d0 030494 call bn_mulmod +0x75d1 030495 arg mem_a ,rega +0x75d2 030496 arg mem_sp_pubkey_remote_x ,regb +0x75d3 030497 arg mem_t3_256 ,contw +0x75d4 030498 call bn_mulmod +0x75d5 030499 arg mem_t3_256 ,rega +0x75d6 030500 arg mem_t2_256 ,regb +0x75d7 030501 arg mem_t2_256 ,contw +0x75d8 030502 call bn_addmod +0x75d9 030503 arg mem_t0_256 ,rega +0x75da 030504 arg mem_t2_256 ,regb +0x75db 030505 arg mem_t0_256 ,contw +0x75dc 030506 call bn_addmod +0x75dd 030507 arg 24 ,loopcnt +0x75de 030508 arg mem_t7_256 ,rega +0x75df 030509 arg mem_t0_256 ,regb +0x75e0 030510 branch string_compare +: 030512 sp_calc_b: +0x75e1 030513 arg mem_gy ,rega +0x75e2 030514 arg mem_t0_256 ,contw +0x75e3 030515 call bn_sqrmod +0x75e4 030516 arg mem_gx ,rega +0x75e5 030517 arg mem_t2_256 ,contw +0x75e6 030518 call bn_sqrmod +0x75e7 030519 arg mem_t2_256 ,rega +0x75e8 030520 arg mem_gx ,regb +0x75e9 030521 arg mem_t2_256 ,contw +0x75ea 030522 call bn_mulmod +0x75eb 030523 arg mem_a ,rega +0x75ec 030524 arg mem_gx ,regb +0x75ed 030525 arg mem_t3_256 ,contw +0x75ee 030526 call bn_mulmod +0x75ef 030527 arg mem_t3_256 ,rega +0x75f0 030528 arg mem_t2_256 ,regb +0x75f1 030529 arg mem_t2_256 ,contw +0x75f2 030530 call bn_addmod +0x75f3 030531 arg mem_t0_256 ,rega +0x75f4 030532 arg mem_t2_256 ,regb +0x75f5 030533 arg mem_t0_256 ,contw +0x75f6 030534 branch bn_submod +: 030537 sp_calculate_commitment: +0x75f7 030538 fetch 1 ,mem_sp_calc +0x75f8 030539 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +0x75f9 030540 call sp_local_random_key_generator +0x75fa 030541 arg mem_sp_prarm_stack ,contw +0x75fb 030542 setarg mem_sp_random_local_end +0x75fc 030543 istore 2 ,contw +0x75fd 030544 setarg mem_sp_pubkey_local_x_end +0x75fe 030545 istore 2 ,contw +0x75ff 030546 setarg mem_sp_pubkey_remote_x_end +0x7600 030547 istore 2 ,contw +0x7601 030548 branch sp_calculate_commitment0 +: 030549 master_sp_calculate_commitment: +0x7602 030550 arg mem_sp_prarm_stack ,contw +0x7603 030551 setarg mem_sp_random_remote_end +0x7604 030552 istore 2 ,contw +0x7605 030553 setarg mem_sp_pubkey_remote_x_end +0x7606 030554 istore 2 ,contw +0x7607 030555 setarg mem_sp_pubkey_local_x_end +0x7608 030556 istore 2 ,contw +: 030557 sp_calculate_commitment0: +0x7609 030558 call function_f1 +0x760a 030559 fetch 1 ,mem_master_sp_state +0x760b 030560 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +0x760c 030561 jam sp_flag_commit ,mem_sp_flag +0x760d 030562 jam sp_stat_commit_send ,mem_sp_state +0x760e 030563 rtn +: 030564 master_sp_calculate_commitment0: +0x760f 030565 jam sp_stat_commitment_compare ,mem_master_sp_state +0x7610 030566 call sp_master_generate_local_key +0x7611 030567 branch master_set_mem_master_sp_flag +: 030569 sp_local_random_key_generator: +0x7612 030570 arg mem_sp_random_local ,contw +0x7613 030571 force 8 ,queue +0x7614 030572 branch random_generator +: 030574 sp_calculate_commitment_wait_dhkey_calc: +0x7615 030575 jam sp_flag_commit ,mem_sp_flag +0x7616 030576 rtn +: 030578 sp_confirm_check: +0x7617 030580 bpatchx patch3c_6 ,mem_patch3c +0x7618 030581 arg mem_addr_value ,contw +0x7619 030582 fetch 6 ,mem_lap +0x761a 030583 istore 6 ,contw +0x761b 030584 fetch 6 ,mem_plap +0x761c 030585 istore 6 ,contw +0x761d 030586 fetch 3 ,mem_sp_iocap_remote +0x761e 030587 istore 3 ,contw +0x761f 030589 call function_f3a +0x7620 030591 arg mem_sp_calc_result_high ,rega +0x7621 030592 arg mem_sp_check_result ,regb +0x7622 030593 force 4 ,queue +0x7623 030594 call compare4 +0x7624 030595 nbranch sp_confirm_check_failed ,true +0x7625 030597 call sp_confirm_check_success +0x7626 030598 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7627 030599 branch tid_set_reply +: 030601 sp_confirm_check_success: +0x7628 030602 fetch 1 ,mem_master_sp_state +0x7629 030603 beq sp_stat_confirm_check ,sp_confirm_check_success_master +0x762a 030604 jam sp_stat_confirm_calc ,mem_sp_state +0x762b 030605 jam sp_flag_commit ,mem_sp_flag +0x762c 030606 jam lmp_accepted ,mem_lmo_opcode2 +0x762d 030607 rtn +: 030608 sp_confirm_check_success_master: +0x762e 030609 jam lmp_accepted ,mem_lmo_opcode2 +0x762f 030610 jam sp_state_end ,mem_master_sp_state +0x7630 030611 branch master_set_mem_master_sp_flag +: 030614 sp_confirm_check_failed: +0x7631 030615 fetch 1 ,mem_master_sp_state +0x7632 030616 beq sp_stat_confirm_check ,sp_confirm_check_failed_master +0x7633 030617 jam sp_stat_null ,mem_sp_state +0x7634 030618 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7635 030620 jam authentication_failure_error ,mem_lmo_reason2 +0x7636 030621 rtn +: 030622 sp_confirm_check_failed_master: +0x7637 030623 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7638 030624 jam sp_stat_null ,mem_master_sp_state +0x7639 030625 rtn +: 030627 sp_confirm_calc: +0x763a 030628 fetch 1 ,mem_sp_dh_ready +0x763b 030629 beq sp_flag_commit ,sp_confirm_calc_ready +0x763c 030630 jam sp_stat_confirm_calc ,mem_master_sp_state +0x763d 030631 branch master_set_mem_master_sp_flag +: 030632 sp_confirm_calc_ready: +0x763e 030633 arg mem_addr_value ,contw +0x763f 030634 fetch 6 ,mem_plap +0x7640 030635 istore 6 ,contw +0x7641 030636 fetch 6 ,mem_lap +0x7642 030637 istore 6 ,contw +0x7643 030638 fetch 3 ,mem_sp_iocap_local +0x7644 030639 istore 3 ,contw +0x7645 030641 call function_f3b +0x7646 030642 fetch 1 ,mem_master_sp_state +0x7647 030643 beq sp_stat_confirm_calc ,sp_confirm_calc_master +0x7648 030644 jam sp_stat_confirm_send ,mem_sp_state +0x7649 030645 jam sp_flag_commit ,mem_sp_flag +0x764a 030646 rtn +: 030647 sp_confirm_calc_master: +0x764b 030648 jam sp_stat_confirm_send ,mem_master_sp_state +0x764c 030649 jam sp_flag_commit ,mem_master_sp_flag +0x764d 030650 rtn +: 030652 sp_master_key_prarm_push: +0x764e 030653 arg mem_sp_prarm_stack ,contw +0x764f 030654 fetch 6 ,mem_plap +0x7650 030655 istore 6 ,contw +0x7651 030656 fetch 6 ,mem_lap +0x7652 030657 istore 6 ,contw +0x7653 030658 setarg mem_sp_random_local_end +0x7654 030659 istore 2 ,contw +0x7655 030660 setarg mem_sp_random_remote_end +0x7656 030661 istore 2 ,contw +0x7657 030662 branch sp_link_key_calc +: 030663 sp_link_key_prarm_push: +0x7658 030664 jam sp_stat_done ,mem_sp_state +0x7659 030665 arg mem_sp_prarm_stack ,contw +0x765a 030666 fetch 6 ,mem_lap +0x765b 030667 istore 6 ,contw +0x765c 030668 fetch 6 ,mem_plap +0x765d 030669 istore 6 ,contw +0x765e 030670 setarg mem_sp_random_remote_end +0x765f 030671 istore 2 ,contw +0x7660 030672 setarg mem_sp_random_local_end +0x7661 030673 istore 2 ,contw +: 030674 sp_link_key_calc: +0x7662 030676 arg mem_addr_value ,contw +0x7663 030677 fetch 6 ,mem_sp_prarm_stack +0x7664 030678 istore 6 ,contw +0x7665 030679 fetch 6 ,mem_sp_prarm_stack + 6 +0x7666 030680 istore 6 ,contw +0x7667 030682 call function_f2 +0x7668 030685 jam 1 ,mem_link_key_exists +0x7669 030686 arg mem_link_key ,contw +0x766a 030687 arg mem_sp_calc_result_high ,contr +0x766b 030688 call memcpy16 +0x766c 030689 branch generate_linkkey_continue +: 030692 sp_pubkey_calc: +0x766d 030693 bpatchx patch3c_7 ,mem_patch3c +0x766e 030694 fetch 1 ,mem_sp_local_key_invalid +0x766f 030695 rtnne sp_key_invalid +0x7670 030696 fetch 1 ,mem_sp_calc +0x7671 030697 rtnne sp_calc_standby +0x7672 030698 arg mem_sp_private_key ,contw +0x7673 030699 force 11 ,queue +0x7674 030700 call random_generator +0x7675 030701 random pdata +0x7676 030702 rshift pdata ,pdata +0x7677 030703 istore 2 ,contw +0x7678 030705 arg mem_k ,contw +0x7679 030706 arg mem_sp_private_key ,contr +0x767a 030707 call memcpy24 +0x767b 030709 arg mem_ax ,contw +0x767c 030710 arg mem_gx ,contr +0x767d 030711 call memcpy48 +0x767e 030713 arg mem_az ,contw +0x767f 030714 call bn_zero +0x7680 030715 jam 1 ,mem_az +0x7681 030717 call eckp_calc_init +0x7682 030718 jam sp_calc_pubkey ,mem_sp_calc +0x7683 030719 rtn +: 030721 sp_pubkey_generated: +0x7684 030722 arg mem_sp_pubkey_local ,contw +0x7685 030723 arg mem_bx ,contr +0x7686 030724 call memcpy48 +0x7687 030725 jam sp_key_valid ,mem_sp_local_key_invalid +0x7688 030726 jam sp_calc_standby ,mem_sp_calc +0x7689 030727 rtn +: 030729 sp_dhkey_calc: +0x768a 030730 bpatchx patch3d_0 ,mem_patch3d +0x768b 030731 fetch 1 ,mem_sp_dhkey_invalid +0x768c 030732 rtnne sp_key_invalid +0x768d 030733 fetch 1 ,mem_sp_calc +0x768e 030734 rtnne sp_calc_standby +0x768f 030736 arg mem_k ,contw +0x7690 030737 arg mem_sp_private_key ,contr +0x7691 030738 call memcpy24 +0x7692 030740 arg mem_ax ,contw +0x7693 030741 arg mem_sp_pubkey_remote ,contr +0x7694 030742 call memcpy48 +0x7695 030744 arg mem_az ,contw +0x7696 030745 call bn_zero +0x7697 030746 jam 1 ,mem_az +0x7698 030748 call eckp_calc_init +0x7699 030749 jam sp_calc_dhkey ,mem_sp_calc +0x769a 030750 rtn +: 030752 sp_dhkey_generated: +0x769b 030753 jam sp_flag_commit ,mem_sp_dh_ready +0x769c 030754 arg mem_sp_dhkey ,contw +0x769d 030755 arg mem_bx ,contr +0x769e 030756 call memcpy24 +0x769f 030757 jam sp_key_valid ,mem_sp_dhkey_invalid +0x76a0 030758 jam sp_calc_standby ,mem_sp_calc +0x76a1 030759 rtn +: 030761 random_generator: +0x76a2 030762 increase -1 ,queue +0x76a3 030763 nrtn positive +0x76a4 030764 random pdata +0x76a5 030765 istore 2 ,contw +0x76a6 030766 branch random_generator +: 030767 compare4: +0x76a7 030768 increase -1 ,queue +0x76a8 030769 nbranch compare4_success ,positive +0x76a9 030770 ifetch 4 ,rega +0x76aa 030771 copy pdata ,temp +0x76ab 030772 ifetch 4 ,regb +0x76ac 030773 iflip temp ,pdata +0x76ad 030774 nbranch compare4_failed ,zero +0x76ae 030775 increase 4 ,rega +0x76af 030776 increase 4 ,regb +0x76b0 030777 branch compare4 +: 030778 compare4_failed: +0x76b1 030779 disable true +0x76b2 030780 rtn +: 030781 compare4_success: +0x76b3 030782 enable true +0x76b4 030783 rtn +: 030790 simple_pairing_sequence: +0x76b5 030791 bpatchx patch3d_1 ,mem_patch3d +0x76b6 030792 fetch 1 ,mem_sp_flag +0x76b7 030793 rtn blank +0x76b8 030794 call lmo_fifo_check +0x76b9 030795 nrtn blank +0x76ba 030796 jam sp_flag_standby ,mem_sp_flag +0x76bb 030797 fetch 1 ,mem_sp_state +0x76bc 030798 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +0x76bd 030799 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +0x76be 030800 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +0x76bf 030801 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +0x76c0 030802 beq sp_stat_key_generate ,sp_generate_local_key +0x76c1 030803 beq sp_stat_commit_calc ,sp_calculate_commitment +0x76c2 030804 beq sp_stat_confirm_check ,sp_confirm_check +0x76c3 030805 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76c4 030806 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +0x76c5 030808 rtn +: 030810 master_simple_paring_sequence: +0x76c6 030811 bpatchx patch3d_2 ,mem_patch3d +0x76c7 030812 fetch 1 ,mem_master_sp_flag +0x76c8 030813 rtn blank +0x76c9 030814 call lmo_fifo_check +0x76ca 030815 nrtn blank +0x76cb 030816 jam sp_flag_standby ,mem_master_sp_flag +0x76cc 030817 fetch 1 ,mem_master_sp_state +0x76cd 030818 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +0x76ce 030819 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +0x76cf 030820 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +0x76d0 030821 beq sp_stat_commit_calc ,master_sp_calculate_commitment +0x76d1 030822 beq sp_stat_commitment_compare ,sp_master_commitment_compare +0x76d2 030823 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +0x76d3 030824 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76d4 030825 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +0x76d5 030826 beq sp_stat_confirm_check ,sp_confirm_check +0x76d6 030827 beq sp_state_end ,master_sp_sm_end +0x76d7 030828 rtn +: 030830 master_set_mem_master_sp_flag: +0x76d8 030831 jam sp_flag_commit ,mem_master_sp_flag +0x76d9 030832 rtn +: 030834 master_clear_mem_master_sp_flag: +0x76da 030835 jam sp_flag_standby ,mem_master_sp_flag +0x76db 030836 rtn +: 030837 sp_calc_sequence: +0x76dc 030838 bpatchx patch3d_3 ,mem_patch3d +0x76dd 030839 fetch 1 ,mem_ssp_enable +0x76de 030840 rtn blank +0x76df 030841 fetch 1 ,mem_sp_calc +0x76e0 030842 rtn blank +0x76e1 030843 increase 0x80 ,pdata +0x76e2 030844 store 1 ,mem_sp_calc +0x76e3 030845 rtnbit1 7 +0x76e4 030846 fetch 1 ,mem_ec_loopc +0x76e5 030847 branch sp_calc_sequence_done ,blank +0x76e6 030848 branch eckp_calc +: 030850 sp_calc_sequence_done: +0x76e7 030851 call ecunmapz +0x76e8 030852 fetch 1 ,mem_sp_calc +0x76e9 030853 beq sp_calc_pubkey ,sp_pubkey_generated +0x76ea 030854 beq sp_calc_dhkey ,sp_dhkey_generated +0x76eb 030855 rtn +: 030858 bn_testbit: +0x76ec 030859 and pdata ,7 ,queue +0x76ed 030860 rshift3 pdata ,pdata +0x76ee 030861 iadd contr ,contr +0x76ef 030862 ifetch 1 ,contr +0x76f0 030863 qisolate0 pdata +0x76f1 030864 rtn +: 030867 ec_copy: +0x76f2 030868 call memcpy24 +0x76f3 030869 call memcpy24 +0x76f4 030870 branch memcpy24 +: 030873 bn_eq_zero: +0x76f5 030874 ifetch 8 ,contr +0x76f6 030875 nrtn blank +0x76f7 030876 ifetch 8 ,contr +0x76f8 030877 nrtn blank +0x76f9 030878 ifetch 8 ,contr +0x76fa 030879 rtn +: 030884 bn_eq_0: +0x76fb 030885 ifetch 4 ,rega +0x76fc 030886 iforce temp +0x76fd 030887 ifetch 4 ,regb +0x76fe 030888 isub temp ,null +0x76ff 030889 nrtn zero +0x7700 030890 increase 4 ,rega +0x7701 030891 increase 4 ,regb +0x7702 030892 loop bn_eq_0 +0x7703 030893 rtn +: 030896 bn_bigeq: +0x7704 030897 force 6 ,loopcnt +0x7705 030898 increase 20 ,rega +0x7706 030899 increase 20 ,regb +: 030900 bn_bigeq_0: +0x7707 030901 ifetch 4 ,regb +0x7708 030902 iforce temp +0x7709 030903 ifetch 4 ,rega +0x770a 030904 isub temp ,pdata +0x770b 030905 nrtn positive +0x770c 030906 nrtn blank +0x770d 030907 increase -4 ,rega +0x770e 030908 increase -4 ,regb +0x770f 030909 loop bn_bigeq_0 +0x7710 030910 rtn +: 030912 bn_add: +0x7711 030913 force 6 ,loopcnt +0x7712 030914 force 0 ,regc +: 030915 bn_add_0: +0x7713 030916 ifetch 4 ,rega +0x7714 030917 iforce temp +0x7715 030918 ifetch 4 ,regb +0x7716 030919 iadd temp ,pdata +0x7717 030920 iadd regc ,pdata +0x7718 030921 istore 4 ,contw +0x7719 030922 isolate1 32 ,pdata +0x771a 030923 setflag true ,0 ,regc +0x771b 030924 increase 4 ,rega +0x771c 030925 increase 4 ,regb +0x771d 030926 loop bn_add_0 +0x771e 030927 rtn +: 030929 bn_sub: +0x771f 030930 force 6 ,loopcnt +0x7720 030931 force 0 ,regc +: 030932 bn_sub_0: +0x7721 030933 ifetch 4 ,regb +0x7722 030934 iforce temp +0x7723 030935 ifetch 4 ,rega +0x7724 030936 isub temp ,pdata +0x7725 030937 isub regc ,pdata +0x7726 030938 istore 4 ,contw +0x7727 030939 isolate1 32 ,pdata +0x7728 030940 setflag true ,0 ,regc +0x7729 030941 increase 4 ,rega +0x772a 030942 increase 4 ,regb +0x772b 030943 loop bn_sub_0 +0x772c 030944 rtn +: 030946 bn_rshift6: +0x772d 030947 force 6 ,loopcnt +0x772e 030948 increase 20 ,rega +: 030949 bn_rshift: +0x772f 030950 force 0 ,regc +: 030951 bn_rshift_0: +0x7730 030952 ifetch 4 ,rega +0x7731 030953 isolate1 0 ,pdata +0x7732 030954 setflag true ,1 ,regc +0x7733 030955 rshift pdata ,pdata +0x7734 030956 isolate1 0 ,regc +0x7735 030957 setflag true ,31 ,pdata +0x7736 030958 istore 4 ,rega +0x7737 030959 increase -4 ,rega +0x7738 030960 rshift regc ,regc +0x7739 030961 loop bn_rshift_0 +0x773a 030962 rtn +: 030964 bn_lshift: +0x773b 030965 force 6 ,loopcnt +0x773c 030966 force 0 ,regc +: 030967 bn_lshift_0: +0x773d 030968 ifetch 4 ,rega +0x773e 030969 isolate1 31 ,pdata +0x773f 030970 setflag true ,1 ,regc +0x7740 030971 lshift pdata ,pdata +0x7741 030972 isolate1 0 ,regc +0x7742 030973 setflag true ,0 ,pdata +0x7743 030974 istore 4 ,rega +0x7744 030975 increase 4 ,rega +0x7745 030976 rshift regc ,regc +0x7746 030977 loop bn_lshift_0 +0x7747 030978 rtn +: 030980 bn_lshiftmod: +0x7748 030981 call bn_lshift +: 030982 bn_lshiftmod_ismod: +0x7749 030983 isolate1 0 ,regc +0x774a 030984 branch bn_lshiftmod_0 ,true +0x774b 030985 arg mem_p ,regb +0x774c 030986 copy rega ,regc +0x774d 030987 increase -24 ,rega +0x774e 030988 call bn_bigeq +0x774f 030989 nrtn positive +0x7750 030990 copy regc ,rega +: 030991 bn_lshiftmod_0: +0x7751 030992 increase -24 ,rega +0x7752 030993 arg mem_p ,regb +0x7753 030994 copy rega ,contw +0x7754 030995 branch bn_sub +: 030998 bn_addmod: +0x7755 030999 call bn_add +0x7756 031000 copy contw ,rega +0x7757 031001 branch bn_lshiftmod_ismod +: 031003 bn_submod: +0x7758 031004 call bn_sub +0x7759 031005 isolate0 0 ,regc +0x775a 031006 rtn true +0x775b 031007 arg mem_p ,regb +0x775c 031008 add contw ,-24 ,rega +0x775d 031009 copy rega ,contw +0x775e 031010 branch bn_add +: 031013 bn_p192mod: +0x775f 031014 copy contw ,timeup +0x7760 031015 copy rega ,alarm +0x7761 031016 arg mem_tmp2 ,regb +0x7762 031017 copy regb ,contw +0x7763 031018 add rega ,24 ,contr +0x7764 031019 ifetch 8 ,contr +0x7765 031020 istore 8 ,contw +0x7766 031021 istore 8 ,contw +0x7767 031022 force 0 ,pdata +0x7768 031023 istore 8 ,contw +0x7769 031024 copy timeup ,contw +0x776a 031025 call bn_addmod +0x776b 031026 arg mem_tmp2 ,regb +0x776c 031027 copy regb ,contw +0x776d 031028 force 0 ,pdata +0x776e 031029 istore 8 ,contw +0x776f 031030 add alarm ,32 ,contr +0x7770 031031 ifetch 8 ,contr +0x7771 031032 istore 8 ,contw +0x7772 031033 istore 8 ,contw +0x7773 031034 copy timeup ,rega +0x7774 031035 copy rega ,contw +0x7775 031036 call bn_addmod +0x7776 031037 arg mem_tmp2 ,regb +0x7777 031038 copy regb ,contw +0x7778 031039 add alarm ,40 ,contr +0x7779 031040 ifetch 8 ,contr +0x777a 031041 istore 8 ,contw +0x777b 031042 istore 8 ,contw +0x777c 031043 istore 8 ,contw +0x777d 031044 copy timeup ,rega +0x777e 031045 copy rega ,contw +0x777f 031046 branch bn_addmod +: 031049 bn_load: +0x7780 031050 force 6 ,loopcnt +: 031051 bn_load_0: +0x7781 031052 ifetch 4 ,contr +0x7782 031053 iforce regext +0x7783 031054 increase 1 ,regext_index +0x7784 031055 loop bn_load_0 +0x7785 031056 rtn +: 031060 bn_mulmod: +0x7786 031061 copy contw ,timeup +0x7787 031062 arg mem_tmp1 ,contw +0x7788 031063 call bn_zero +0x7789 031064 arg mem_tmp1 ,contw +0x778a 031065 copy rega ,contr +0x778b 031066 force 0 ,regext_index +0x778c 031067 call bn_load +0x778d 031068 copy regb ,contr +0x778e 031069 call bn_load +0x778f 031070 force 0 ,regb +: 031071 bn_mulmod_1: +0x7790 031072 force 0 ,temp +0x7791 031073 force 6 ,regc +: 031074 bn_mulmod_0: +0x7792 031075 ifetch 4 ,contw +0x7793 031076 iforce rega +0x7794 031077 copy regb ,regext_index +0x7795 031078 deposit regext +0x7796 031079 copy regc ,regext_index +0x7797 031080 imul32 regext ,pdata +0x7798 031081 iadd rega ,pdata +0x7799 031082 iadd temp ,pdata +0x779a 031083 istore 4 ,contw +0x779b 031084 rshift32 pdata ,temp +0x779c 031085 increase 1 ,regc +0x779d 031086 compare 12 ,regc ,0xff +0x779e 031087 nbranch bn_mulmod_0 ,true +0x779f 031088 deposit temp +0x77a0 031089 istore 4 ,contw +0x77a1 031090 increase -24 ,contw +0x77a2 031091 increase 1 ,regb +0x77a3 031092 compare 6 ,regb ,0xff +0x77a4 031093 nbranch bn_mulmod_1 ,true +0x77a5 031094 arg mem_tmp1 ,rega +0x77a6 031095 copy timeup ,contw +0x77a7 031096 branch bn_p192mod +: 031099 bn_sqrmod: +0x77a8 031100 copy rega ,regb +0x77a9 031101 branch bn_mulmod +: 031103 bn_rshifteven: +0x77aa 031104 copy rega ,alarm +: 031105 bn_rshifteven_1: +0x77ab 031106 copy alarm ,rega +0x77ac 031107 ifetch 1 ,rega +0x77ad 031108 isolate1 0 ,pdata +0x77ae 031109 rtn true +0x77af 031110 call bn_rshift6 +0x77b0 031111 ifetch 1 ,regb +0x77b1 031112 isolate0 0 ,pdata +0x77b2 031113 branch bn_rshifteven_0 ,true +0x77b3 031114 arg mem_p ,rega +0x77b4 031115 copy regb ,contw +0x77b5 031116 call bn_add +0x77b6 031117 ifetch 1 ,regb +0x77b7 031118 iadd regc ,pdata +0x77b8 031119 istore 1 ,regb +0x77b9 031120 increase -24 ,regb +: 031121 bn_rshifteven_0: +0x77ba 031122 add regb ,24 ,rega +0x77bb 031123 force 7 ,loopcnt +0x77bc 031124 call bn_rshift +0x77bd 031125 branch bn_rshifteven_1 +: 031128 bn_invmod: +0x77be 031129 copy contw ,timeup +0x77bf 031130 arg mem_tmp0 ,contw +0x77c0 031131 call bn_zero +0x77c1 031132 force 0 ,pdata +0x77c2 031133 store 4 ,mem_tmp5 +0x77c3 031134 store 4 ,mem_t2 +0x77c4 031135 jam 1 ,mem_tmp0 +0x77c5 031136 arg mem_tmp1 ,contw +0x77c6 031137 call bn_zero +0x77c7 031138 arg mem_p ,contr +0x77c8 031139 arg mem_tmp2 ,contw +0x77c9 031140 call memcpy24 +0x77ca 031141 copy rega ,contr +0x77cb 031142 arg mem_tmp3 ,contw +0x77cc 031143 call memcpy24 +: 031144 bn_invmod_2: +0x77cd 031145 arg mem_tmp3 ,contr +0x77ce 031146 call bn_eq_zero +0x77cf 031147 branch bn_invmod_0 ,blank +0x77d0 031148 arg mem_tmp3 ,rega +0x77d1 031149 arg mem_tmp0 ,regb +0x77d2 031150 call bn_rshifteven +0x77d3 031152 arg mem_tmp2 ,rega +0x77d4 031153 arg mem_tmp1 ,regb +0x77d5 031154 call bn_rshifteven +0x77d6 031155 arg mem_tmp3 ,rega +0x77d7 031156 arg mem_tmp2 ,regb +0x77d8 031157 call bn_bigeq +0x77d9 031158 branch bn_invmod_1 ,positive +0x77da 031159 arg mem_tmp2 ,rega +0x77db 031160 arg mem_tmp3 ,regb +0x77dc 031161 copy rega ,contw +0x77dd 031162 call bn_sub +0x77de 031163 arg mem_tmp0 ,rega +0x77df 031164 arg mem_tmp1 ,regb +0x77e0 031165 copy regb ,contw +0x77e1 031166 call bn_add +0x77e2 031167 ifetch 1 ,rega +0x77e3 031168 iadd regc ,regc +0x77e4 031169 ifetch 1 ,regb +0x77e5 031170 iadd regc ,pdata +0x77e6 031171 istore 1 ,regb +0x77e7 031172 branch bn_invmod_2 +: 031173 bn_invmod_1: +0x77e8 031174 arg mem_tmp3 ,rega +0x77e9 031175 arg mem_tmp2 ,regb +0x77ea 031176 copy rega ,contw +0x77eb 031177 call bn_sub +0x77ec 031178 arg mem_tmp1 ,rega +0x77ed 031179 arg mem_tmp0 ,regb +0x77ee 031180 copy regb ,contw +0x77ef 031181 call bn_add +0x77f0 031182 ifetch 1 ,rega +0x77f1 031183 iadd regc ,regc +0x77f2 031184 ifetch 1 ,regb +0x77f3 031185 iadd regc ,pdata +0x77f4 031186 istore 1 ,regb +0x77f5 031187 branch bn_invmod_2 +: 031188 bn_invmod_0: +0x77f6 031189 arg mem_tmp0 ,contw +0x77f7 031190 call bn_zero +0x77f8 031191 fetch 1 ,mem_tmp5 +0x77f9 031192 store 1 ,mem_tmp0 +0x77fa 031193 store 1 ,mem_tmp0a +0x77fb 031194 arg mem_tmp0 ,rega +0x77fc 031195 arg mem_tmp1 ,regb +0x77fd 031196 copy regb ,contw +0x77fe 031197 call bn_addmod +0x77ff 031198 arg mem_p ,rega +0x7800 031199 arg mem_tmp1 ,regb +0x7801 031200 copy timeup ,contw +0x7802 031201 branch bn_submod +: 031206 ecdbl: +0x7803 031207 arg mem_cz ,rega +0x7804 031208 arg mem_t2 ,contw +0x7805 031209 call bn_sqrmod +0x7806 031210 arg mem_t2 ,rega +0x7807 031211 arg mem_t3 ,contw +0x7808 031212 call bn_sqrmod +0x7809 031213 arg mem_a ,rega +0x780a 031214 arg mem_t3 ,regb +0x780b 031215 arg mem_t3 ,contw +0x780c 031216 call bn_mulmod +0x780d 031217 arg mem_cx ,rega +0x780e 031218 arg mem_t2 ,contw +0x780f 031219 call bn_sqrmod +0x7810 031220 arg mem_t2 ,contr +0x7811 031221 arg mem_t1 ,contw +0x7812 031222 call memcpy24 +0x7813 031223 arg mem_t1 ,rega +0x7814 031224 call bn_lshiftmod +0x7815 031225 arg mem_t2 ,rega +0x7816 031226 arg mem_t1 ,regb +0x7817 031227 arg mem_t2 ,contw +0x7818 031228 call bn_addmod +0x7819 031229 arg mem_t2 ,rega +0x781a 031230 arg mem_t3 ,regb +0x781b 031231 arg mem_t2 ,contw +0x781c 031232 call bn_addmod +0x781d 031233 arg mem_cx ,contr +0x781e 031234 arg mem_t1 ,contw +0x781f 031235 call memcpy24 +0x7820 031236 arg mem_cy ,rega +0x7821 031237 arg mem_t3 ,contw +0x7822 031238 call bn_sqrmod +0x7823 031239 arg mem_t1 ,rega +0x7824 031240 call bn_lshiftmod +0x7825 031241 arg mem_t1 ,rega +0x7826 031242 call bn_lshiftmod +0x7827 031243 arg mem_t1 ,rega +0x7828 031244 arg mem_t3 ,regb +0x7829 031245 arg mem_t1 ,contw +0x782a 031246 call bn_mulmod +0x782b 031247 arg mem_t3 ,rega +0x782c 031248 arg mem_t0 ,contw +0x782d 031249 call bn_sqrmod +0x782e 031250 arg mem_t0 ,rega +0x782f 031251 call bn_lshiftmod +0x7830 031252 arg mem_t0 ,rega +0x7831 031253 call bn_lshiftmod +0x7832 031254 arg mem_t0 ,rega +0x7833 031255 call bn_lshiftmod +0x7834 031256 arg mem_cy ,contr +0x7835 031257 arg mem_t3 ,contw +0x7836 031258 call memcpy24 +0x7837 031259 arg mem_t3 ,rega +0x7838 031260 call bn_lshiftmod +0x7839 031261 arg mem_t3 ,rega +0x783a 031262 arg mem_cz ,regb +0x783b 031263 arg mem_cz ,contw +0x783c 031264 call bn_mulmod +0x783d 031265 arg mem_t2 ,rega +0x783e 031266 arg mem_t3 ,contw +0x783f 031267 call bn_sqrmod +0x7840 031268 arg mem_t3 ,rega +0x7841 031269 arg mem_t1 ,regb +0x7842 031270 arg mem_t3 ,contw +0x7843 031271 call bn_submod +0x7844 031272 arg mem_t3 ,rega +0x7845 031273 arg mem_t1 ,regb +0x7846 031274 arg mem_cx ,contw +0x7847 031275 call bn_submod +0x7848 031276 arg mem_t1 ,rega +0x7849 031277 arg mem_cx ,regb +0x784a 031278 arg mem_t3 ,contw +0x784b 031279 call bn_submod +0x784c 031280 arg mem_t3 ,rega +0x784d 031281 arg mem_t2 ,regb +0x784e 031282 arg mem_t3 ,contw +0x784f 031283 call bn_mulmod +0x7850 031284 arg mem_t3 ,rega +0x7851 031285 arg mem_t0 ,regb +0x7852 031286 arg mem_cy ,contw +0x7853 031287 branch bn_submod +: 031291 ecadd: +0x7854 031292 arg mem_az ,rega +0x7855 031293 arg mem_t7 ,contw +0x7856 031294 call bn_sqrmod +0x7857 031295 arg mem_cx ,rega +0x7858 031296 arg mem_t7 ,regb +0x7859 031297 arg mem_t0 ,contw +0x785a 031298 call bn_mulmod +0x785b 031299 arg mem_az ,rega +0x785c 031300 arg mem_t7 ,regb +0x785d 031301 arg mem_t7 ,contw +0x785e 031302 call bn_mulmod +0x785f 031303 arg mem_cy ,rega +0x7860 031304 arg mem_t7 ,regb +0x7861 031305 arg mem_t1 ,contw +0x7862 031306 call bn_mulmod +0x7863 031307 arg mem_cz ,rega +0x7864 031308 arg mem_t7 ,contw +0x7865 031309 call bn_sqrmod +0x7866 031310 arg mem_ax ,rega +0x7867 031311 arg mem_t7 ,regb +0x7868 031312 arg mem_t2 ,contw +0x7869 031313 call bn_mulmod +0x786a 031314 arg mem_cz ,rega +0x786b 031315 arg mem_t7 ,regb +0x786c 031316 arg mem_t7 ,contw +0x786d 031317 call bn_mulmod +0x786e 031318 arg mem_ay ,rega +0x786f 031319 arg mem_t7 ,regb +0x7870 031320 arg mem_t3 ,contw +0x7871 031321 call bn_mulmod +0x7872 031322 arg mem_t0 ,rega +0x7873 031323 arg mem_t2 ,regb +0x7874 031324 arg mem_t7 ,contw +0x7875 031325 call bn_submod +0x7876 031326 arg mem_t0 ,rega +0x7877 031327 arg mem_t2 ,regb +0x7878 031328 arg mem_t0 ,contw +0x7879 031329 call bn_addmod +0x787a 031330 arg mem_t1 ,rega +0x787b 031331 arg mem_t3 ,regb +0x787c 031332 arg mem_t2 ,contw +0x787d 031333 call bn_submod +0x787e 031334 arg mem_t1 ,rega +0x787f 031335 arg mem_t3 ,regb +0x7880 031336 arg mem_t1 ,contw +0x7881 031337 call bn_addmod +0x7882 031338 arg mem_t1 ,rega +0x7883 031339 arg mem_t7 ,regb +0x7884 031340 arg mem_t1 ,contw +0x7885 031341 call bn_mulmod +0x7886 031342 arg mem_cz ,rega +0x7887 031343 arg mem_az ,regb +0x7888 031344 arg mem_t3 ,contw +0x7889 031345 call bn_mulmod +0x788a 031346 arg mem_t3 ,rega +0x788b 031347 arg mem_t7 ,regb +0x788c 031348 arg mem_cz ,contw +0x788d 031349 call bn_mulmod +0x788e 031350 arg mem_t7 ,rega +0x788f 031351 arg mem_t7 ,contw +0x7890 031352 call bn_sqrmod +0x7891 031353 arg mem_t7 ,rega +0x7892 031354 arg mem_t0 ,regb +0x7893 031355 arg mem_t3 ,contw +0x7894 031356 call bn_mulmod +0x7895 031357 arg mem_t7 ,rega +0x7896 031358 arg mem_t1 ,regb +0x7897 031359 arg mem_t1 ,contw +0x7898 031360 call bn_mulmod +0x7899 031361 arg mem_t2 ,rega +0x789a 031362 arg mem_cx ,contw +0x789b 031363 call bn_sqrmod +0x789c 031364 arg mem_cx ,rega +0x789d 031365 arg mem_t3 ,regb +0x789e 031366 arg mem_cx ,contw +0x789f 031367 call bn_submod +0x78a0 031368 arg mem_cx ,contr +0x78a1 031369 arg mem_t7 ,contw +0x78a2 031370 call memcpy24 +0x78a3 031371 arg mem_t7 ,rega +0x78a4 031372 call bn_lshiftmod +0x78a5 031373 arg mem_t3 ,rega +0x78a6 031374 arg mem_t7 ,regb +0x78a7 031375 arg mem_t3 ,contw +0x78a8 031376 call bn_submod +0x78a9 031377 arg mem_t3 ,rega +0x78aa 031378 arg mem_t2 ,regb +0x78ab 031379 arg mem_t2 ,contw +0x78ac 031380 call bn_mulmod +0x78ad 031381 arg mem_t2 ,rega +0x78ae 031382 arg mem_t1 ,regb +0x78af 031383 arg mem_cy ,contw +0x78b0 031384 call bn_submod +0x78b1 031385 arg mem_cy ,rega +0x78b2 031386 arg mem_p ,regb +0x78b3 031387 arg mem_cy ,contw +0x78b4 031388 force 0 ,regc +0x78b5 031389 fetch 1 ,mem_cy +0x78b6 031390 isolate1 0 ,pdata +0x78b7 031391 call bn_add ,true +0x78b8 031392 copy regc ,alarm +0x78b9 031393 arg mem_cy ,rega +0x78ba 031394 call bn_rshift6 +0x78bb 031395 fetch 1 ,mem_cy5 +0x78bc 031396 isolate1 0 ,alarm +0x78bd 031397 setflag true ,7 ,pdata +0x78be 031398 store 1 ,mem_cy5 +0x78bf 031399 rtn +: 031403 eckp_0: +0x78c0 031404 fetch 1 ,mem_ec_loopc +0x78c1 031405 increase -1 ,pdata +0x78c2 031406 nrtn positive +0x78c3 031407 store 1 ,mem_ec_loopc +0x78c4 031408 fetch 1 ,mem_ec_infinite +0x78c5 031409 call ecdbl ,blank +0x78c6 031410 fetch 1 ,mem_ec_loopc +0x78c7 031411 arg mem_k ,contr +0x78c8 031412 call bn_testbit +0x78c9 031413 branch eckp_0 ,true +0x78ca 031414 fetch 1 ,mem_ec_infinite +0x78cb 031415 nbranch eckp_1 ,blank +0x78cc 031416 call ecadd +0x78cd 031417 branch eckp_0 +: 031418 eckp_1: +0x78ce 031419 jam 0 ,mem_ec_infinite +0x78cf 031420 arg mem_ax ,contr +0x78d0 031421 arg mem_cx ,contw +0x78d1 031422 call ec_copy +0x78d2 031423 branch eckp_0 +: 031426 ecunmapz: +0x78d3 031427 arg mem_cz ,rega +0x78d4 031428 arg mem_t3 ,contw +0x78d5 031429 call bn_invmod +0x78d6 031430 arg mem_t3 ,rega +0x78d7 031431 arg mem_t1 ,contw +0x78d8 031432 call bn_sqrmod +0x78d9 031433 arg mem_cx ,rega +0x78da 031434 arg mem_t1 ,regb +0x78db 031435 arg mem_bx ,contw +0x78dc 031436 call bn_mulmod +0x78dd 031437 arg mem_t3 ,rega +0x78de 031438 arg mem_t1 ,regb +0x78df 031439 arg mem_t2 ,contw +0x78e0 031440 call bn_mulmod +0x78e1 031441 arg mem_cy ,rega +0x78e2 031442 arg mem_t2 ,regb +0x78e3 031443 arg mem_by ,contw +0x78e4 031444 branch bn_mulmod +: 031448 sha_endian_swap2: +0x78e5 031449 ifetch 4 ,contr +0x78e6 031450 force 4 ,rega +0x78e7 031451 increase 3 ,contw +: 031452 sha_endian_loop: +0x78e8 031453 istore 1 ,contw +0x78e9 031454 rshift8 pdata ,pdata +0x78ea 031455 increase -2 ,contw +0x78eb 031456 increase -1 ,rega +0x78ec 031457 nbranch sha_endian_loop ,zero +0x78ed 031458 increase 5 ,contw +0x78ee 031459 loop sha_endian_swap2 +0x78ef 031460 rtn +: 031463 sha_getw: +0x78f0 031464 lshift2 queue ,pdata +0x78f1 031465 iadd timeup ,contr +0x78f2 031466 ifetch 4 ,contr +0x78f3 031467 rtn +: 031469 sha_r: +0x78f4 031470 force 16 ,alarm +0x78f5 031471 arg memdat ,timeup +: 031472 sha_r_loop: +0x78f6 031473 add alarm ,-7 ,queue +0x78f7 031474 call sha_getw +0x78f8 031475 iforce temp +0x78f9 031476 add alarm ,-16 ,queue +0x78fa 031477 call sha_getw +0x78fb 031478 iadd temp ,temp +0x78fc 031479 add alarm ,-2 ,queue +0x78fd 031480 call sha_getw +0x78fe 031481 shasx pdata ,1 ,pdata +0x78ff 031482 iadd temp ,temp +0x7900 031483 add alarm ,-15 ,queue +0x7901 031484 call sha_getw +0x7902 031485 shasx pdata ,0 ,pdata +0x7903 031486 iadd temp ,temp +0x7904 031487 lshift2 alarm ,pdata +0x7905 031488 iadd timeup ,contw +0x7906 031489 istoret 4 ,contw +0x7907 031490 increase 1 ,alarm +0x7908 031491 compare 64 ,alarm ,0xff +0x7909 031492 nbranch sha_r_loop ,true +0x790a 031493 rtn +: 031496 sha_init: +0x790b 031497 arg memh0 ,contr +0x790c 031498 force 7 ,regext_index +: 031499 sha_init_0: +0x790d 031500 ifetch 4 ,contr +0x790e 031501 iforce regext +0x790f 031502 increase -1 ,regext_index +0x7910 031503 branch sha_init_0 ,positive +0x7911 031504 rtn +: 031506 sha: +0x7912 031507 bpatchx patch3d_4 ,mem_patch3d +0x7913 031508 call sha_r +0x7914 031509 arg memahbak ,contw +0x7915 031510 force 0 ,regext_index +: 031511 sha_0: +0x7916 031512 deposit regext +0x7917 031513 istore 4 ,contw +0x7918 031514 increase 1 ,regext_index +0x7919 031515 compare 8 ,regext_index ,0xff +0x791a 031516 nbranch sha_0 ,true +0x791b 031517 call enable_authrom +0x791c 031518 arg memk ,timeup +0x791d 031519 arg memdat ,alarm +0x791e 031520 force 64 ,loopcnt +: 031521 sha_loop: +0x791f 031522 ifetcht 4 ,alarm +0x7920 031523 ifetch 4 ,timeup +0x7921 031524 increase 4 ,timeup +0x7922 031525 increase 4 ,alarm +0x7923 031526 iadd temp ,pdata +0x7924 031527 force 7 ,regext_index +0x7925 031528 iadd regext ,temp +0x7926 031529 force 4 ,regext_index +0x7927 031530 shasx regext ,3 ,pdata +0x7928 031531 iadd temp ,temp +0x7929 031532 force 5 ,regext_index +0x792a 031533 deposit regext +0x792b 031534 force 6 ,regext_index +0x792c 031535 ixor regext ,pdata +0x792d 031536 force 4 ,regext_index +0x792e 031537 iand regext ,pdata +0x792f 031538 force 6 ,regext_index +0x7930 031539 ixor regext ,pdata +0x7931 031540 iadd temp ,temp +0x7932 031541 force 7 ,regext_index +0x7933 031542 copy temp ,regext +0x7934 031543 force 3 ,regext_index +0x7935 031544 deposit regext +0x7936 031545 iadd temp ,regext +0x7937 031546 force 0 ,regext_index +0x7938 031547 deposit regext +0x7939 031548 force 1 ,regext_index +0x793a 031549 iand regext ,temp +0x793b 031550 ior regext ,pdata +0x793c 031551 force 2 ,regext_index +0x793d 031552 iand regext ,pdata +0x793e 031553 ior temp ,temp +0x793f 031554 force 0 ,regext_index +0x7940 031555 shasx regext ,2 ,pdata +0x7941 031556 iadd temp ,pdata +0x7942 031557 force 7 ,regext_index +0x7943 031558 iadd regext ,regext +0x7944 031559 regexrot +0x7945 031560 loop sha_loop +0x7946 031561 arg memahbak ,contr +0x7947 031562 force 0 ,regext_index +: 031563 sha_1: +0x7948 031564 ifetch 4 ,contr +0x7949 031565 iadd regext ,regext +0x794a 031566 increase 1 ,regext_index +0x794b 031567 compare 8 ,regext_index ,0xff +0x794c 031568 nbranch sha_1 ,true +0x794d 031569 branch disable_authrom +: 031572 sha_result: +0x794e 031573 arg memresult ,contw +0x794f 031574 force 7 ,regext_index +: 031575 sha_regext_save: +0x7950 031576 deposit regext +0x7951 031577 istore 4 ,contw +0x7952 031578 increase -1 ,regext_index +0x7953 031579 branch sha_regext_save ,positive +0x7954 031580 rtn +: 031582 pad_xor: +0x7955 031584 arg memdat ,contw +0x7956 031585 increase -4 ,contr +0x7957 031586 sub loopcnt ,16 ,rega +: 031587 pad_xor_0: +0x7958 031588 ifetch 4 ,contr +0x7959 031589 ixor temp ,pdata +0x795a 031590 istore 4 ,contw +0x795b 031591 increase -8 ,contr +0x795c 031592 loop pad_xor_0 +0x795d 031593 copy rega ,loopcnt +0x795e 031594 deposit temp +: 031595 pad_xor_1: +0x795f 031596 istore 4 ,contw +0x7960 031597 loop pad_xor_1 +0x7961 031598 rtn +: 031600 g_noninit_number_confirm: +0x7962 031601 call g_noninit0 +0x7963 031602 call sha_result +0x7964 031603 branch g_common0 +: 031605 g_noninit: +0x7965 031606 call g_noninit0 +0x7966 031607 branch g_common0 +: 031609 g_noninit0: +0x7967 031610 arg mem_sp_pubkey_remote_x_end ,contr +0x7968 031611 arg memdat ,contw +0x7969 031612 force 6 ,loopcnt +0x796a 031613 call memcpy_dword_swap +0x796b 031614 arg mem_sp_pubkey_local_x_end ,contr +0x796c 031615 force 6 ,loopcnt +0x796d 031616 call memcpy_dword_swap +0x796e 031617 arg mem_sp_random_remote_end ,contr +0x796f 031618 call memcpy_dword_swap4 +0x7970 031619 call sha_init +0x7971 031620 call sha +0x7972 031621 arg mem_sp_random_local_end ,contr +0x7973 031622 arg memdat ,contw +0x7974 031623 branch g_common +: 031625 g_init: +0x7975 031626 arg mem_sp_pubkey_local_x_end ,contr +0x7976 031627 arg memdat ,contw +0x7977 031628 force 6 ,loopcnt +0x7978 031629 call memcpy_dword_swap +0x7979 031630 arg mem_sp_pubkey_remote_x_end ,contr +0x797a 031631 force 6 ,loopcnt +0x797b 031632 call memcpy_dword_swap +0x797c 031633 arg mem_sp_random_local_end ,contr +0x797d 031634 call memcpy_dword_swap4 +0x797e 031635 call sha_init +0x797f 031636 call sha +0x7980 031637 arg mem_sp_random_remote_end ,contr +0x7981 031638 arg memdat ,contw +0x7982 031639 call g_common +0x7983 031640 branch g_common0 +: 031642 g_common: +0x7984 031643 call memcpy_dword_swap4 +0x7985 031644 setarg 0x800000 +0x7986 031645 lshift8 pdata ,pdata +0x7987 031646 istore 4 ,contw +0x7988 031647 force 5 ,loopcnt +0x7989 031648 call memset0 +0x798a 031649 setarg 640 +0x798b 031650 istore 4 ,contw +0x798c 031651 branch sha +: 031652 g_common0: +0x798d 031653 fetch 4 ,memresult +0x798e 031655 arg 1000 ,rega +0x798f 031656 idiv rega +0x7990 031657 call wait_div_end +0x7991 031658 remainder pdata +0x7992 031659 store 4 ,mem_gkey +0x7993 031660 quotient pdata +0x7994 031661 arg 1000 ,rega +0x7995 031662 idiv rega +0x7996 031663 call wait_div_end +0x7997 031664 remainder pdata +0x7998 031665 arg 1000 ,rega +0x7999 031666 imul32 rega ,pdata +0x799a 031667 fetcht 4 ,mem_gkey +0x799b 031668 iadd temp ,pdata +0x799c 031669 store 4 ,mem_gkey +0x799d 031670 rtn +: 031672 function_f1_no_key: +0x799e 031673 jam 0 ,mem_passkey_1bit +0x799f 031674 branch function_f1_common +: 031676 function_f1: +0x79a0 031677 fetch 1 ,mem_ssp_mode_flag +0x79a1 031678 bne ssp_mode_passkey_entry_flag ,function_f1_no_key +: 031679 function_f1_common: +0x79a2 031680 bpatchx patch3d_5 ,mem_patch3d +0x79a3 031681 setarg 0x363636 +0x79a4 031682 lshift8 pdata ,temp +0x79a5 031683 or_into 0x36 ,temp +0x79a6 031684 fetch 2 ,mem_sp_prarm_stack +0x79a7 031685 copy pdata ,contr +0x79a8 031686 force 4 ,loopcnt +0x79a9 031687 call pad_xor +0x79aa 031688 call sha_init +0x79ab 031689 call sha +0x79ac 031690 fetch 2 ,mem_sp_prarm_stack + 2 +0x79ad 031691 copy pdata ,contr +0x79ae 031692 arg memdat ,contw +0x79af 031693 force 6 ,loopcnt +0x79b0 031694 call memcpy_dword_swap +0x79b1 031695 fetch 2 ,mem_sp_prarm_stack + 4 +0x79b2 031696 copy pdata ,contr +0x79b3 031697 force 6 ,loopcnt +0x79b4 031698 call memcpy_dword_swap +0x79b5 031699 setarg 0x800000 +0x79b6 031700 istore 3 ,contw +0x79b7 031702 fetch 1 ,mem_passkey_1bit +0x79b8 031704 istore 1 ,contw +0x79b9 031705 force 0 ,pdata +0x79ba 031706 istore 8 ,contw +0x79bb 031707 setarg 0x0388 +0x79bc 031708 istore 4 ,contw +0x79bd 031709 call sha +0x79be 031710 call sha_result +0x79bf 031711 arg memresult ,contr +0x79c0 031712 arg memahsave ,contw +0x79c1 031713 call memcpy32 +0x79c2 031715 setarg 0x5c5c5c +0x79c3 031716 lshift8 pdata ,temp +0x79c4 031717 or_into 0x5c ,temp +0x79c5 031718 fetch 2 ,mem_sp_prarm_stack +0x79c6 031719 copy pdata ,contr +0x79c7 031720 force 4 ,loopcnt +0x79c8 031721 call pad_xor +0x79c9 031722 call sha_init +0x79ca 031723 call sha +0x79cb 031724 arg memahsave_end ,contr +0x79cc 031725 arg memdat ,contw +0x79cd 031726 force 8 ,loopcnt +0x79ce 031727 call memcpy_dword_swap +0x79cf 031728 setarg 0x800000 +0x79d0 031729 lshift8 pdata ,pdata +0x79d1 031730 istore 4 ,contw +0x79d2 031731 call bn_zero +0x79d3 031732 setarg 0x0300 +0x79d4 031733 istore 4 ,contw +0x79d5 031734 call sha +0x79d6 031735 branch sha_result +: 031738 function_f2: +0x79d7 031739 setarg 0x363636 +0x79d8 031740 lshift8 pdata ,temp +0x79d9 031741 or_into 0x36 ,temp +0x79da 031742 arg mem_sp_dhkey_end ,contr +0x79db 031743 force 6 ,loopcnt +0x79dc 031744 call pad_xor +0x79dd 031745 call sha_init +0x79de 031746 call sha +0x79df 031747 fetch 2 ,mem_sp_prarm_stack + 12 +0x79e0 031748 copy pdata ,contr +0x79e1 031749 arg memdat ,contw +0x79e2 031750 call memcpy_dword_swap4 +0x79e3 031751 fetch 2 ,mem_sp_prarm_stack + 14 +0x79e4 031752 copy pdata ,contr +0x79e5 031753 call memcpy_dword_swap4 +0x79e6 031755 setarg 0x62746c +0x79e7 031756 lshift8 pdata ,pdata +0x79e8 031757 or_into 0x6b ,pdata +0x79e9 031758 istore 4 ,contw +0x79ea 031759 arg mem_addr_value_end ,contr +0x79eb 031760 force 3 ,loopcnt +0x79ec 031761 call memcpy_dword_swap +0x79ed 031763 setarg 0x800000 +0x79ee 031764 lshift8 pdata ,pdata +0x79ef 031765 istore 4 ,contw +0x79f0 031766 force 0 ,pdata +0x79f1 031767 istore 8 ,contw +0x79f2 031768 setarg 0x0380 +0x79f3 031769 istore 4 ,contw +0x79f4 031770 call sha +0x79f5 031772 call sha_result +0x79f6 031773 arg memresult ,contr +0x79f7 031774 arg memahsave ,contw +0x79f8 031775 call memcpy32 +0x79f9 031777 setarg 0x5c5c5c +0x79fa 031778 lshift8 pdata ,temp +0x79fb 031779 or_into 0x5c ,temp +0x79fc 031780 arg mem_sp_dhkey_end ,contr +0x79fd 031781 force 6 ,loopcnt +0x79fe 031782 call pad_xor +0x79ff 031783 call sha_init +0x7a00 031784 call sha +0x7a01 031785 arg memahsave_end ,contr +0x7a02 031786 arg memdat ,contw +0x7a03 031787 force 8 ,loopcnt +0x7a04 031788 call memcpy_dword_swap +0x7a05 031789 setarg 0x800000 +0x7a06 031790 lshift8 pdata ,pdata +0x7a07 031791 istore 4 ,contw +0x7a08 031792 call bn_zero +0x7a09 031793 setarg 0x0300 +0x7a0a 031794 istore 4 ,contw +0x7a0b 031795 call sha +0x7a0c 031796 branch sha_result +: 031799 function_f3a: +0x7a0d 031800 fetch 1 ,mem_ssp_mode_flag +0x7a0e 031801 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin +: 031802 function_f3a_common: +0x7a0f 031803 bpatchx patch3d_6 ,mem_patch3d +0x7a10 031804 setarg 0x363636 +0x7a11 031805 lshift8 pdata ,temp +0x7a12 031806 or_into 0x36 ,temp +0x7a13 031807 arg mem_sp_dhkey_end ,contr +0x7a14 031808 force 6 ,loopcnt +0x7a15 031809 call pad_xor +0x7a16 031810 call sha_init +0x7a17 031811 call sha +0x7a18 031812 arg mem_sp_random_remote_end ,contr +0x7a19 031813 arg memdat ,contw +0x7a1a 031814 call memcpy_dword_swap4 +0x7a1b 031815 arg mem_sp_random_local_end ,contr +0x7a1c 031816 call memcpy_dword_swap4 +0x7a1d 031817 branch function_f3_common +: 031819 function_f3a_no_pin: +0x7a1e 031820 setarg 0 +0x7a1f 031821 store 4 ,mem_pin +0x7a20 031822 branch function_f3a_common +: 031824 function_f3b_no_pin: +0x7a21 031825 setarg 0 +0x7a22 031826 store 4 ,mem_pin +0x7a23 031827 branch function_f3b_common +: 031830 function_f3b: +0x7a24 031831 fetch 1 ,mem_ssp_mode_flag +0x7a25 031832 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin +: 031833 function_f3b_common: +0x7a26 031834 setarg 0x363636 +0x7a27 031835 lshift8 pdata ,temp +0x7a28 031836 or_into 0x36 ,temp +0x7a29 031837 arg mem_sp_dhkey_end ,contr +0x7a2a 031838 force 6 ,loopcnt +0x7a2b 031839 call pad_xor +0x7a2c 031840 call sha_init +0x7a2d 031841 call sha +0x7a2e 031843 arg mem_sp_random_local_end ,contr +0x7a2f 031844 arg memdat ,contw +0x7a30 031845 call memcpy_dword_swap4 +0x7a31 031846 arg mem_sp_random_remote_end ,contr +0x7a32 031847 call memcpy_dword_swap4 +: 031848 function_f3_common: +0x7a33 031849 setarg 0x0 +0x7a34 031850 istore 8 ,contw +0x7a35 031851 istore 4 ,contw +0x7a36 031852 fetch 4 ,mem_pin +0x7a37 031853 istore 4 ,contw +0x7a38 031855 copy contw ,temp +0x7a39 031856 jam 0x80 ,mem_addr_padding +0x7a3a 031857 copy temp ,contw +0x7a3b 031858 arg mem_addr_iocap_end ,contr +0x7a3c 031859 call memcpy_dword_swap4 +0x7a3d 031861 call sha +0x7a3e 031863 arg memdat ,contw +0x7a3f 031864 force 7 ,loopcnt +0x7a40 031865 call memset0 +0x7a41 031866 istore 4 ,contw +0x7a42 031867 setarg 0x03F8 +0x7a43 031868 istore 4 ,contw +0x7a44 031869 call sha +0x7a45 031870 call sha_result +0x7a46 031872 arg memresult ,contr +0x7a47 031873 arg memahsave ,contw +0x7a48 031874 call memcpy32 +0x7a49 031876 setarg 0x5c5c5c +0x7a4a 031877 lshift8 pdata ,temp +0x7a4b 031878 or_into 0x5c ,temp +0x7a4c 031879 arg mem_sp_dhkey_end ,contr +0x7a4d 031880 force 6 ,loopcnt +0x7a4e 031881 call pad_xor +0x7a4f 031882 call sha_init +0x7a50 031883 call sha +0x7a51 031884 arg memahsave_end ,contr +0x7a52 031885 arg memdat ,contw +0x7a53 031886 force 8 ,loopcnt +0x7a54 031887 call memcpy_dword_swap +0x7a55 031888 setarg 0x800000 +0x7a56 031889 lshift8 pdata ,pdata +0x7a57 031890 istore 4 ,contw +0x7a58 031891 call bn_zero +0x7a59 031892 setarg 0x0300 +0x7a5a 031893 istore 4 ,contw +0x7a5b 031894 call sha +0x7a5c 031895 branch sha_result +: 031902 eckp_calc_init: +0x7a5d 031903 jam 192 ,mem_ec_loopc +: 031904 eckp_calc_init_1: +0x7a5e 031905 fetch 1 ,mem_ec_loopc +0x7a5f 031906 rtn blank +0x7a60 031907 increase -1 ,pdata +0x7a61 031908 store 1 ,mem_ec_loopc +0x7a62 031909 arg mem_k ,contr +0x7a63 031910 call bn_testbit +0x7a64 031911 branch eckp_calc_init_1 ,true +0x7a65 031912 arg mem_ax ,contr +0x7a66 031913 arg mem_cx ,contw +0x7a67 031914 branch ec_copy +: 031916 eckp_calc: +0x7a68 031917 call ecdbl +0x7a69 031918 fetch 1 ,mem_ec_loopc +0x7a6a 031919 increase -1 ,pdata +0x7a6b 031920 store 1 ,mem_ec_loopc +0x7a6c 031921 arg mem_k ,contr +0x7a6d 031922 call bn_testbit +0x7a6e 031923 rtn true +0x7a6f 031924 branch ecadd +: 031926 memcpy_dword_swap4: +0x7a70 031927 force 4 ,loopcnt +: 031928 memcpy_dword_swap: +0x7a71 031929 increase -4 ,contr +: 031930 memcpy_dword_swap_loop: +0x7a72 031931 ifetch 4 ,contr +0x7a73 031932 istore 4 ,contw +0x7a74 031933 increase -8 ,contr +0x7a75 031934 loop memcpy_dword_swap_loop +0x7a76 031935 rtn +: 031940 sp_initialize_256: +0x7a77 031941 bpatchx patch3d_7 ,mem_patch3d +0x7a78 031942 fetch 1 ,mem_le_secure_connect_enable +0x7a79 031943 branch le_secure_connection_disable ,blank +0x7a7a 031944 call le_secure_connection_enable +0x7a7b 031945 call sp_clear_flags +0x7a7c 031947 branch sp_pubkey_calc_256 +: 031952 sp_pubkey_calc_256: +0x7a7d 031953 fetch 1 ,mem_le_sc_local_key_invalid +0x7a7e 031954 rtnne sp_key_invalid +0x7a7f 031955 fetch 1 ,mem_le_sc_calc +0x7a80 031956 rtnne sp_calc_standby +0x7a81 031958 arg mem_le_private_key_256 ,contw +0x7a82 031959 force 15 ,queue +0x7a83 031960 call random_generator +0x7a84 031961 random pdata +0x7a85 031962 rshift pdata ,pdata +0x7a86 031963 istore 2 ,contw +0x7a87 031965 arg mem_k_256 ,contw +0x7a88 031966 arg mem_le_private_key_256 ,contr +0x7a89 031967 call memcpy32 +0x7a8a 031969 arg mem_ax_256 ,contw +0x7a8b 031970 arg mem_gx_256 ,contr +0x7a8c 031971 call memcpy64 +0x7a8d 031973 arg mem_az_256 ,contw +0x7a8e 031974 call clear_mem_256 +0x7a8f 031975 jam 1 ,mem_az_256 +0x7a90 031977 call eckp_calc_init_256 +0x7a91 031978 jam sp_calc_pubkey_256 ,mem_le_sc_calc +0x7a92 031979 rtn +: 031981 sp_pubkey_generated_256: +0x7a93 031982 arg mem_le_pubkey_local_x_256 ,contw +0x7a94 031983 arg mem_bx_256 ,contr +0x7a95 031984 call memcpy64 +0x7a96 031985 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid +0x7a97 031986 jam sp_calc_standby ,mem_le_sc_calc +0x7a98 031987 rtn +: 031991 sp_dhkey_calc_256: +0x7a99 031992 fetch 1 ,mem_sp_dhkey_invalid +0x7a9a 031993 rtnne sp_key_invalid +0x7a9b 031994 fetch 1 ,mem_le_sc_calc +0x7a9c 031995 rtnne sp_calc_standby +0x7a9d 031997 arg mem_k_256 ,contw +0x7a9e 031998 arg mem_le_private_key_256 ,contr +0x7a9f 031999 call memcpy32 +0x7aa0 032001 arg mem_ax_256 ,contw +0x7aa1 032002 arg mem_le_pubkey_remote_x_256 ,contr +0x7aa2 032003 call memcpy64 +0x7aa3 032005 arg mem_az_256 ,contw +0x7aa4 032006 call clear_mem_256 +0x7aa5 032007 jam 1 ,mem_az_256 +0x7aa6 032009 call eckp_calc_init_256 +0x7aa7 032010 jam sp_calc_dhkey_256 ,mem_le_sc_calc +0x7aa8 032011 rtn +: 032014 sp_dhkey_generated_256: +0x7aa9 032016 arg mem_le_dhkey_256 ,contw +0x7aaa 032017 arg mem_bx_256 ,contr +0x7aab 032018 call memcpy32 +0x7aac 032019 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +0x7aad 032020 jam sp_calc_standby ,mem_le_sc_calc +0x7aae 032021 rtn +: 032025 sp_calc_sequence_256: +0x7aaf 032026 fetch 1 ,mem_le_secure_connect_enable +0x7ab0 032027 rtn blank +0x7ab1 032028 fetch 1 ,mem_le_sc_calc +0x7ab2 032029 rtn blank +0x7ab3 032030 increase 0x80 ,pdata +0x7ab4 032031 store 1 ,mem_le_sc_calc +0x7ab5 032032 rtnbit1 7 +0x7ab6 032033 fetch 2 ,mem_ec_loopc +0x7ab7 032034 branch sp_calc_sequence_done_256 ,blank +0x7ab8 032035 branch eckp_calc_256 +: 032037 sp_calc_sequence_done_256: +0x7ab9 032038 bpatchx patch3e_0 ,mem_patch3e +0x7aba 032039 call ecunmapz_256 +0x7abb 032040 fetch 1 ,mem_le_sc_calc +0x7abc 032041 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +0x7abd 032042 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +0x7abe 032043 rtn +: 032046 eckp_calc_256: +0x7abf 032047 call ecdbl_256 +0x7ac0 032048 fetch 2 ,mem_ec_loopc +0x7ac1 032049 increase -1 ,pdata +0x7ac2 032050 store 2 ,mem_ec_loopc +0x7ac3 032051 arg mem_k_256 ,contr +0x7ac4 032052 call bn_testbit +0x7ac5 032053 rtn true +0x7ac6 032054 branch ecadd_256 +: 032056 eckp_calc_init_256: +0x7ac7 032057 bpatchx patch3e_1 ,mem_patch3e +0x7ac8 032058 setarg 256 ,pdata +0x7ac9 032059 store 2 ,mem_ec_loopc +: 032060 eckp_calc_init_256_1: +0x7aca 032061 fetch 2 ,mem_ec_loopc +0x7acb 032062 rtn blank +0x7acc 032063 increase -1 ,pdata +0x7acd 032064 store 2 ,mem_ec_loopc +0x7ace 032065 arg mem_k_256 ,contr +0x7acf 032066 call bn_testbit +0x7ad0 032067 branch eckp_calc_init_256_1 ,true +0x7ad1 032068 arg mem_ax_256 ,contr +0x7ad2 032069 arg mem_cx_256 ,contw +0x7ad3 032070 branch memcpy96 +: 032073 ecunmapz_256: +0x7ad4 032074 arg mem_cz_256 ,rega +0x7ad5 032075 arg mem_t3_256 ,contw +0x7ad6 032076 call bn_invmod_256 +0x7ad7 032077 arg mem_t3_256 ,rega +0x7ad8 032078 arg mem_t1_256 ,contw +0x7ad9 032079 call bn_sqrmod_256 +0x7ada 032080 arg mem_cx_256 ,rega +0x7adb 032081 arg mem_t1_256 ,regb +0x7adc 032082 arg mem_bx_256 ,contw +0x7add 032083 call bn_mulmod_256 +0x7ade 032084 arg mem_t3_256 ,rega +0x7adf 032085 arg mem_t1_256 ,regb +0x7ae0 032086 arg mem_t2_256 ,contw +0x7ae1 032087 call bn_mulmod_256 +0x7ae2 032088 arg mem_cy_256 ,rega +0x7ae3 032089 arg mem_t2_256 ,regb +0x7ae4 032090 arg mem_by_256 ,contw +0x7ae5 032091 branch bn_mulmod_256 +: 032093 ecdbl_256: +0x7ae6 032094 arg mem_cz_256 ,rega +0x7ae7 032095 arg mem_t2_256 ,contw +0x7ae8 032096 call bn_sqrmod_256 +0x7ae9 032097 arg mem_t2_256 ,rega +0x7aea 032098 arg mem_t3_256 ,contw +0x7aeb 032099 call bn_sqrmod_256 +0x7aec 032101 arg mem_a_256 ,rega +0x7aed 032102 arg mem_t3_256 ,regb +0x7aee 032103 arg mem_t3_256 ,contw +0x7aef 032104 call bn_mulmod_256 +0x7af0 032105 arg mem_cx_256 ,rega +0x7af1 032106 arg mem_t2_256 ,contw +0x7af2 032107 call bn_sqrmod_256 +0x7af3 032109 arg mem_t2_256 ,contr +0x7af4 032110 arg mem_t1_256 ,contw +0x7af5 032111 call memcpy32 +0x7af6 032112 arg mem_t1_256 ,rega +0x7af7 032113 call bn_lshiftmod_256 +0x7af8 032114 arg mem_t2_256 ,rega +0x7af9 032115 arg mem_t1_256 ,regb +0x7afa 032116 arg mem_t2_256 ,contw +0x7afb 032117 call bn_addmod_256 +0x7afc 032119 arg mem_t2_256 ,rega +0x7afd 032120 arg mem_t3_256 ,regb +0x7afe 032121 arg mem_t2_256 ,contw +0x7aff 032122 call bn_addmod_256 +0x7b00 032124 arg mem_cx_256 ,contr +0x7b01 032125 arg mem_t1_256 ,contw +0x7b02 032126 call memcpy32 +0x7b03 032127 arg mem_cy_256 ,rega +0x7b04 032128 arg mem_t3_256 ,contw +0x7b05 032129 call bn_sqrmod_256 +0x7b06 032130 arg mem_t1_256 ,rega +0x7b07 032131 call bn_lshiftmod_256 +0x7b08 032132 arg mem_t1_256 ,rega +0x7b09 032133 call bn_lshiftmod_256 +0x7b0a 032134 arg mem_t1_256 ,rega +0x7b0b 032135 arg mem_t3_256 ,regb +0x7b0c 032136 arg mem_t1_256 ,contw +0x7b0d 032137 call bn_mulmod_256 +0x7b0e 032138 arg mem_t3_256 ,rega +0x7b0f 032139 arg mem_t0_256 ,contw +0x7b10 032140 call bn_sqrmod_256 +0x7b11 032141 arg mem_t0_256 ,rega +0x7b12 032142 call bn_lshiftmod_256 +0x7b13 032143 arg mem_t0_256 ,rega +0x7b14 032144 call bn_lshiftmod_256 +0x7b15 032145 arg mem_t0_256 ,rega +0x7b16 032146 call bn_lshiftmod_256 +0x7b17 032147 arg mem_cy_256 ,contr +0x7b18 032148 arg mem_t3_256 ,contw +0x7b19 032149 call memcpy32 +0x7b1a 032150 arg mem_t3_256 ,rega +0x7b1b 032151 call bn_lshiftmod_256 +0x7b1c 032152 arg mem_t3_256 ,rega +0x7b1d 032153 arg mem_cz_256 ,regb +0x7b1e 032154 arg mem_cz_256 ,contw +0x7b1f 032155 call bn_mulmod_256 +0x7b20 032158 arg mem_t2_256 ,rega +0x7b21 032159 arg mem_t3_256 ,contw +0x7b22 032160 call bn_sqrmod_256 +0x7b23 032162 arg mem_t3_256 ,rega +0x7b24 032163 arg mem_t1_256 ,regb +0x7b25 032164 arg mem_t3_256 ,contw +0x7b26 032165 call bn_submod_256 +0x7b27 032166 arg mem_t3_256 ,rega +0x7b28 032167 arg mem_t1_256 ,regb +0x7b29 032168 arg mem_cx_256 ,contw +0x7b2a 032169 call bn_submod_256 +0x7b2b 032170 arg mem_t1_256 ,rega +0x7b2c 032171 arg mem_cx_256 ,regb +0x7b2d 032172 arg mem_t3_256 ,contw +0x7b2e 032173 call bn_submod_256 +0x7b2f 032174 arg mem_t3_256 ,rega +0x7b30 032175 arg mem_t2_256 ,regb +0x7b31 032176 arg mem_t3_256 ,contw +0x7b32 032177 call bn_mulmod_256 +0x7b33 032178 arg mem_t3_256 ,rega +0x7b34 032179 arg mem_t0_256 ,regb +0x7b35 032180 arg mem_cy_256 ,contw +0x7b36 032181 branch bn_submod_256 +: 032183 ecadd_256: +0x7b37 032185 arg mem_az_256 ,rega +0x7b38 032186 arg mem_t7_256 ,contw +0x7b39 032187 call bn_sqrmod_256 +0x7b3a 032188 arg mem_cx_256 ,rega +0x7b3b 032189 arg mem_t7_256 ,regb +0x7b3c 032190 arg mem_t0_256 ,contw +0x7b3d 032191 call bn_mulmod_256 +0x7b3e 032194 arg mem_az_256 ,rega +0x7b3f 032195 arg mem_t7_256 ,regb +0x7b40 032196 arg mem_t7_256 ,contw +0x7b41 032197 call bn_mulmod_256 +0x7b42 032198 arg mem_cy_256 ,rega +0x7b43 032199 arg mem_t7_256 ,regb +0x7b44 032200 arg mem_t1_256 ,contw +0x7b45 032201 call bn_mulmod_256 +0x7b46 032204 arg mem_cz_256 ,rega +0x7b47 032205 arg mem_t7_256 ,contw +0x7b48 032206 call bn_sqrmod_256 +0x7b49 032207 arg mem_ax_256 ,rega +0x7b4a 032208 arg mem_t7_256 ,regb +0x7b4b 032209 arg mem_t2_256 ,contw +0x7b4c 032210 call bn_mulmod_256 +0x7b4d 032212 arg mem_cz_256 ,rega +0x7b4e 032213 arg mem_t7_256 ,regb +0x7b4f 032214 arg mem_t7_256 ,contw +0x7b50 032215 call bn_mulmod_256 +0x7b51 032216 arg mem_ay_256 ,rega +0x7b52 032217 arg mem_t7_256 ,regb +0x7b53 032218 arg mem_t3_256 ,contw +0x7b54 032219 call bn_mulmod_256 +0x7b55 032224 arg mem_t0_256 ,regb +0x7b56 032225 arg mem_t2_256 ,rega +0x7b57 032226 arg mem_t7_256 ,contw +0x7b58 032227 call bn_submod_256 +0x7b59 032228 arg mem_t0_256 ,rega +0x7b5a 032229 arg mem_t2_256 ,regb +0x7b5b 032230 arg mem_t0_256 ,contw +0x7b5c 032231 call bn_addmod_256 +0x7b5d 032234 arg mem_t1_256 ,regb +0x7b5e 032235 arg mem_t3_256 ,rega +0x7b5f 032236 arg mem_t2_256 ,contw +0x7b60 032237 call bn_submod_256 +0x7b61 032238 arg mem_t1_256 ,rega +0x7b62 032239 arg mem_t3_256 ,regb +0x7b63 032240 arg mem_t1_256 ,contw +0x7b64 032241 call bn_addmod_256 +0x7b65 032242 arg mem_t1_256 ,rega +0x7b66 032243 arg mem_t7_256 ,regb +0x7b67 032244 arg mem_t1_256 ,contw +0x7b68 032245 call bn_mulmod_256 +0x7b69 032246 arg mem_cz_256 ,rega +0x7b6a 032247 arg mem_az_256 ,regb +0x7b6b 032248 arg mem_t3_256 ,contw +0x7b6c 032249 call bn_mulmod_256 +0x7b6d 032250 arg mem_t3_256 ,rega +0x7b6e 032251 arg mem_t7_256 ,regb +0x7b6f 032252 arg mem_cz_256 ,contw +0x7b70 032253 call bn_mulmod_256 +0x7b71 032255 arg mem_t7_256 ,rega +0x7b72 032256 arg mem_t7_256 ,contw +0x7b73 032257 call bn_sqrmod_256 +0x7b74 032258 arg mem_t7_256 ,rega +0x7b75 032259 arg mem_t0_256 ,regb +0x7b76 032260 arg mem_t3_256 ,contw +0x7b77 032261 call bn_mulmod_256 +0x7b78 032262 arg mem_t7_256 ,rega +0x7b79 032263 arg mem_t1_256 ,regb +0x7b7a 032264 arg mem_t1_256 ,contw +0x7b7b 032265 call bn_mulmod_256 +0x7b7c 032266 arg mem_t2_256 ,rega +0x7b7d 032267 arg mem_cx_256 ,contw +0x7b7e 032268 call bn_sqrmod_256 +0x7b7f 032269 arg mem_cx_256 ,rega +0x7b80 032270 arg mem_t3_256 ,regb +0x7b81 032271 arg mem_cx_256 ,contw +0x7b82 032272 call bn_submod_256 +0x7b83 032273 arg mem_cx_256 ,contr +0x7b84 032274 arg mem_t7_256 ,contw +0x7b85 032275 call memcpy32 +0x7b86 032276 arg mem_t7_256 ,rega +0x7b87 032277 call bn_lshiftmod_256 +0x7b88 032278 arg mem_t3_256 ,rega +0x7b89 032279 arg mem_t7_256 ,regb +0x7b8a 032280 arg mem_t3_256 ,contw +0x7b8b 032281 call bn_submod_256 +0x7b8c 032282 arg mem_t3_256 ,rega +0x7b8d 032283 arg mem_t2_256 ,regb +0x7b8e 032284 arg mem_t2_256 ,contw +0x7b8f 032285 call bn_mulmod_256 +0x7b90 032286 arg mem_t2_256 ,rega +0x7b91 032287 arg mem_t1_256 ,regb +0x7b92 032288 arg mem_cy_256 ,contw +0x7b93 032289 call bn_submod_256 +0x7b94 032290 arg mem_cy_256 ,rega +0x7b95 032291 arg mem_p_256 ,regb +0x7b96 032292 arg mem_cy_256 ,contw +0x7b97 032293 force 0 ,regc +0x7b98 032294 fetch 1 ,mem_cy_256 +0x7b99 032295 isolate1 0 ,pdata +0x7b9a 032296 call bn_add_256 ,true +0x7b9b 032297 copy regc ,alarm +0x7b9c 032298 arg mem_cy_256 ,rega +0x7b9d 032299 call bn_rshift_256 +0x7b9e 032300 fetch 1 ,mem_cy5_256 +0x7b9f 032301 isolate1 0 ,alarm +0x7ba0 032302 setflag true ,7 ,pdata +0x7ba1 032303 store 1 ,mem_cy5_256 +0x7ba2 032304 rtn +: 032306 bn_invmod_256: +0x7ba3 032307 copy contw ,timeup +0x7ba4 032308 arg mem_tmp0_256 ,contw +0x7ba5 032309 call clear_mem_256 +0x7ba6 032310 force 0 ,pdata +0x7ba7 032312 store 4 ,mem_t2_256 +0x7ba8 032313 jam 1 ,mem_tmp0_256 +0x7ba9 032314 arg mem_tmp1_256 ,contw +0x7baa 032315 call clear_mem_512 +0x7bab 032316 arg mem_p_256 ,contr +0x7bac 032317 arg mem_tmp2_256 ,contw +0x7bad 032318 call memcpy32 +0x7bae 032319 copy rega ,contr +0x7baf 032320 arg mem_tmp3_256 ,contw +0x7bb0 032321 call memcpy32 +: 032327 bn_invmod_256_2: +0x7bb1 032328 arg mem_tmp3_256 ,contr +0x7bb2 032329 call bn_eq_zero_256 +0x7bb3 032330 branch bn_invmod_256_0 ,blank +0x7bb4 032335 arg mem_tmp3_256 ,rega +0x7bb5 032336 arg mem_tmp0_256 ,regb +0x7bb6 032337 call bn_rshifteven_256 +0x7bb7 032338 arg mem_tmp2_256 ,rega +0x7bb8 032339 arg mem_tmp1_256 ,regb +0x7bb9 032340 call bn_rshifteven_256 +0x7bba 032342 arg mem_tmp3_256 ,rega +0x7bbb 032343 arg mem_tmp2_256 ,regb +0x7bbc 032344 call bn_bigeq_256 +0x7bbd 032345 branch bn_invmod_256_1 ,positive +0x7bbe 032346 arg mem_tmp2_256 ,rega +0x7bbf 032347 arg mem_tmp3_256 ,regb +0x7bc0 032348 copy rega ,contw +0x7bc1 032349 call bn_sub_256 +0x7bc2 032350 arg mem_tmp0_256 ,rega +0x7bc3 032351 arg mem_tmp1_256 ,regb +0x7bc4 032352 copy regb ,contw +0x7bc5 032353 call bn_add_256 +0x7bc6 032354 ifetch 1 ,rega +0x7bc7 032355 iadd regc ,regc +0x7bc8 032356 ifetch 1 ,regb +0x7bc9 032357 iadd regc ,pdata +0x7bca 032358 istore 1 ,regb +0x7bcb 032359 branch bn_invmod_256_2 +: 032360 bn_invmod_256_1: +0x7bcc 032361 arg mem_tmp3_256 ,rega +0x7bcd 032362 arg mem_tmp2_256 ,regb +0x7bce 032363 copy rega ,contw +0x7bcf 032364 call bn_sub_256 +0x7bd0 032365 arg mem_tmp1_256 ,rega +0x7bd1 032366 arg mem_tmp0_256 ,regb +0x7bd2 032367 copy regb ,contw +0x7bd3 032368 call bn_add_256 +0x7bd4 032369 ifetch 1 ,rega +0x7bd5 032370 iadd regc ,regc +0x7bd6 032371 ifetch 1 ,regb +0x7bd7 032372 iadd regc ,pdata +0x7bd8 032373 istore 1 ,regb +0x7bd9 032374 branch bn_invmod_256_2 +: 032375 bn_invmod_256_0: +0x7bda 032377 arg mem_tmp1_256 ,rega +0x7bdb 032378 copy timeup ,contw +0x7bdc 032379 call bn_p256mod +0x7bdd 032381 arg mem_p_256 ,rega +0x7bde 032382 copy timeup ,regb +0x7bdf 032383 copy timeup ,contw +0x7be0 032384 branch bn_submod_256 +: 032387 bn_mulmod_256: +0x7be1 032388 copy contw ,timeup +0x7be2 032390 force 0 ,regext_index +0x7be3 032392 arg mem_tmp1_256 ,contw +0x7be4 032393 call clear_mem_512 +0x7be5 032394 arg mem_regext ,contw +0x7be6 032395 call clear_mem_512 +0x7be7 032399 copy rega ,contr +0x7be8 032401 jam 0 ,mem_regext +0x7be9 032402 setarg 0 +0x7bea 032403 call bn_load_mem +0x7beb 032404 copy regb ,contr +0x7bec 032405 call bn_load_256 +0x7bed 032408 force 0 ,queue +0x7bee 032409 arg mem_tmp1_256 ,contw +: 032410 bn_mulmod_256_1: +0x7bef 032413 arg mem_regext ,temp +0x7bf0 032414 copy queue ,regb +0x7bf1 032415 lshift2 regb ,pdata +0x7bf2 032417 iadd temp ,regb +0x7bf3 032418 force 0 ,temp +0x7bf4 032419 force 0 ,regc +: 032420 bn_mulmod_256_0: +0x7bf5 032425 ifetch 4 ,contw +0x7bf6 032426 iforce rega +0x7bf7 032429 ifetch 4 ,regb +0x7bf8 032430 copy regc ,regext_index +0x7bf9 032431 imul32 regext ,pdata +0x7bfa 032432 iadd rega ,pdata +0x7bfb 032433 iadd temp ,pdata +0x7bfc 032434 istore 4 ,contw +0x7bfd 032435 rshift32 pdata ,temp +0x7bfe 032436 increase 1 ,regc +0x7bff 032437 compare 8 ,regc ,0xff +0x7c00 032438 nbranch bn_mulmod_256_0 ,true +0x7c01 032440 deposit temp +0x7c02 032441 istore 4 ,contw +0x7c03 032442 increase -32 ,contw +0x7c04 032445 increase 1 ,queue +0x7c05 032446 compare 8 ,queue ,0xff +0x7c06 032447 nbranch bn_mulmod_256_1 ,true +0x7c07 032448 arg mem_tmp1_256 ,rega +0x7c08 032449 copy timeup ,contw +0x7c09 032450 branch bn_p256mod +: 032452 bn_p256mod: +0x7c0a 032453 bpatchx patch3e_2 ,mem_patch3e +0x7c0b 032454 copy contw ,timeup +0x7c0c 032455 copy rega ,alarm +0x7c0d 032456 arg mem_tmp2_256 ,regb +0x7c0e 032457 copy regb ,contw +0x7c0f 032458 call memset0_4 +0x7c10 032459 istore 8 ,contw +0x7c11 032460 add rega ,44 ,contr +0x7c12 032461 call memcpy8 +0x7c13 032462 call memcpy12 +0x7c14 032463 copy regb ,rega +0x7c15 032464 call bn_lshiftmod_256 +0x7c16 032465 arg mem_tmp2_256 ,regb +0x7c17 032466 copy alarm ,rega +0x7c18 032467 copy timeup ,contw +0x7c19 032468 call bn_addmod_256 +0x7c1a 032470 arg mem_tmp2_256 ,regb +0x7c1b 032471 copy regb ,contw +0x7c1c 032472 call memset0_4 +0x7c1d 032473 istore 8 ,contw +0x7c1e 032474 add alarm ,48 ,contr +0x7c1f 032475 call memcpy16 +0x7c20 032476 call memset0_4 +0x7c21 032477 copy regb ,rega +0x7c22 032478 call bn_lshiftmod_256 +0x7c23 032482 arg mem_tmp2_256 ,regb +0x7c24 032483 copy timeup ,rega +0x7c25 032484 copy rega ,contw +0x7c26 032485 call bn_addmod_256 +0x7c27 032489 arg mem_tmp2_256 ,regb +0x7c28 032490 copy regb ,contw +0x7c29 032491 add alarm ,32 ,contr +0x7c2a 032492 call memcpy12 +0x7c2b 032493 call memset0_4 +0x7c2c 032494 istore 8 ,contw +0x7c2d 032495 add alarm ,56 ,contr +0x7c2e 032496 call memcpy8 +0x7c2f 032497 copy timeup ,rega +0x7c30 032498 copy rega ,contw +0x7c31 032499 call bn_addmod_256 +0x7c32 032503 arg mem_tmp2_256 ,regb +0x7c33 032504 copy regb ,contw +0x7c34 032505 add alarm ,36 ,contr +0x7c35 032506 call memcpy12 +0x7c36 032507 add alarm ,52 ,contr +0x7c37 032508 call memcpy12 +0x7c38 032509 add alarm ,52 ,contr +0x7c39 032510 call memcpy4 +0x7c3a 032511 add alarm ,32 ,contr +0x7c3b 032512 call memcpy4 +0x7c3c 032513 copy timeup ,rega +0x7c3d 032514 copy rega ,contw +0x7c3e 032515 call bn_addmod_256 +0x7c3f 032518 arg mem_tmp2_256 ,regb +0x7c40 032519 copy regb ,contw +0x7c41 032520 add alarm ,44 ,contr +0x7c42 032521 call memcpy12 +0x7c43 032522 call memset0_4 +0x7c44 032523 istore 8 ,contw +0x7c45 032524 add alarm ,32 ,contr +0x7c46 032525 call memcpy4 +0x7c47 032526 add alarm ,40 ,contr +0x7c48 032527 call memcpy4 +0x7c49 032528 copy timeup ,rega +0x7c4a 032529 copy rega ,contw +0x7c4b 032530 call bn_submod_256 +0x7c4c 032533 arg mem_tmp2_256 ,regb +0x7c4d 032534 copy regb ,contw +0x7c4e 032535 add alarm ,48 ,contr +0x7c4f 032536 call memcpy8 +0x7c50 032537 call memcpy8 +0x7c51 032538 force 0 ,pdata +0x7c52 032539 istore 8 ,contw +0x7c53 032540 add alarm ,36 ,contr +0x7c54 032541 call memcpy4 +0x7c55 032542 add alarm ,44 ,contr +0x7c56 032543 call memcpy4 +0x7c57 032544 copy timeup ,rega +0x7c58 032545 copy rega ,contw +0x7c59 032546 call bn_submod_256 +0x7c5a 032549 arg mem_tmp2_256 ,regb +0x7c5b 032550 copy regb ,contw +0x7c5c 032551 add alarm ,52 ,contr +0x7c5d 032552 call memcpy12 +0x7c5e 032553 add alarm ,32 ,contr +0x7c5f 032554 call memcpy12 +0x7c60 032555 call memset0_4 +0x7c61 032556 add alarm ,48 ,contr +0x7c62 032557 call memcpy4 +0x7c63 032558 copy timeup ,rega +0x7c64 032559 copy rega ,contw +0x7c65 032560 call bn_submod_256 +0x7c66 032563 arg mem_tmp2_256 ,regb +0x7c67 032564 copy regb ,contw +0x7c68 032565 add alarm ,56 ,contr +0x7c69 032566 call memcpy8 +0x7c6a 032567 call memset0_4 +0x7c6b 032568 add alarm ,36 ,contr +0x7c6c 032569 call memcpy12 +0x7c6d 032570 call memset0_4 +0x7c6e 032571 add alarm ,52 ,contr +0x7c6f 032572 call memcpy4 +0x7c70 032573 copy timeup ,rega +0x7c71 032574 copy rega ,contw +0x7c72 032575 branch bn_submod_256 +: 032578 bn_load_mem: +0x7c73 032579 force 32 ,loopcnt +0x7c74 032580 arg mem_regext ,contw +0x7c75 032581 iadd contw ,contw +0x7c76 032582 branch memcpy +: 032584 bn_load_256: +0x7c77 032585 force 8 ,loopcnt +0x7c78 032586 branch bn_load_0 +: 032588 bn_sqrmod_256: +0x7c79 032589 copy rega ,regb +0x7c7a 032590 branch bn_mulmod_256 +: 032592 bn_add_256: +0x7c7b 032593 force 8 ,loopcnt +0x7c7c 032594 branch bn_add + 1 +: 032596 bn_addmod_256: +0x7c7d 032597 call bn_add_256 +0x7c7e 032598 copy contw ,rega +0x7c7f 032599 branch bn_lshiftmod_ismod_256 +: 032601 bn_lshiftmod_256: +0x7c80 032602 call bn_lshift_256 +: 032603 bn_lshiftmod_ismod_256: +0x7c81 032604 isolate1 0 ,regc +0x7c82 032605 branch bn_lshiftmod_p_256 ,true +0x7c83 032606 arg mem_p_256 ,regb +0x7c84 032607 copy rega ,regc +0x7c85 032608 increase -32 ,rega +0x7c86 032609 call bn_bigeq_256 +0x7c87 032610 nrtn positive +0x7c88 032611 copy regc ,rega +0x7c89 032612 branch sub_p2_256 +: 032614 bn_lshiftmod_p_256: +0x7c8a 032615 call sub_p2_256 +0x7c8b 032617 copy rega ,regc +0x7c8c 032618 increase -32 ,rega +0x7c8d 032619 arg mem_p_256 ,regb +0x7c8e 032620 call bn_bigeq_256 +0x7c8f 032621 nrtn positive +0x7c90 032622 copy regc ,rega +0x7c91 032623 branch sub_p2_256 +: 032626 sub_p2_256: +0x7c92 032627 increase -32 ,rega +0x7c93 032628 arg mem_p_256 ,regb +0x7c94 032629 copy rega ,contw +0x7c95 032630 branch bn_sub_256 +: 032635 bn_submod_256: +0x7c96 032636 call bn_sub_256 +0x7c97 032638 branch bn_submod_256_np ,true +0x7c98 032641 add contw ,-32 ,rega +0x7c99 032642 arg mem_p_256 ,regb +0x7c9a 032643 call bn_bigeq_256 +0x7c9b 032644 nrtn positive +0x7c9c 032645 arg mem_p_256 ,regb +0x7c9d 032646 add contw ,-32 ,rega +0x7c9e 032648 copy rega ,contw +0x7c9f 032649 branch bn_sub_256 +: 032650 bn_submod_256_np: +0x7ca0 032651 add contw ,-32 ,rega +0x7ca1 032652 arg mem_p_256 ,regb +0x7ca2 032653 copy rega ,contw +0x7ca3 032654 call bn_add_256 +0x7ca4 032656 rtn true +0x7ca5 032657 add contw ,-32 ,rega +0x7ca6 032658 arg mem_p_256 ,regb +0x7ca7 032659 copy rega ,contw +0x7ca8 032660 branch bn_add_256 +: 032664 bn_sub_256: +0x7ca9 032665 force 8 ,loopcnt +0x7caa 032666 branch bn_sub + 1 +: 032668 bn_rshift_256: +0x7cab 032669 force 8 ,loopcnt +0x7cac 032670 increase 28 ,rega +0x7cad 032671 branch bn_rshift +: 032673 bn_lshift_256: +0x7cae 032674 force 8 ,loopcnt +0x7caf 032675 force 0 ,regc +0x7cb0 032676 branch bn_lshift_0 +: 032678 bn_bigeq_256: +0x7cb1 032679 force 8 ,loopcnt +0x7cb2 032680 increase 28 ,rega +0x7cb3 032681 increase 28 ,regb +0x7cb4 032682 branch bn_bigeq_0 +: 032685 bn_eq_zero_256: +0x7cb5 032686 ifetch 8 ,contr +0x7cb6 032687 nrtn blank +0x7cb7 032688 branch bn_eq_zero +: 032693 bn_rshifteven_256: +0x7cb8 032694 copy rega ,alarm +: 032695 bn_rshifteven_256_1: +0x7cb9 032696 copy alarm ,rega +0x7cba 032697 ifetch 1 ,rega +0x7cbb 032698 isolate1 0 ,pdata +0x7cbc 032699 rtn true +0x7cbd 032700 call bn_rshift_256 +0x7cbe 032701 ifetch 1 ,regb +0x7cbf 032702 isolate0 0 ,pdata +0x7cc0 032703 branch bn_rshifteven_256_0 ,true +0x7cc1 032704 arg mem_p_256 ,rega +0x7cc2 032705 copy regb ,contw +0x7cc3 032706 call bn_add_256 +0x7cc4 032707 ifetch 1 ,regb +0x7cc5 032708 iadd regc ,pdata +0x7cc6 032709 istore 1 ,regb +0x7cc7 032710 increase -32 ,regb +: 032711 bn_rshifteven_256_0: +0x7cc8 032712 add regb ,32 ,rega +0x7cc9 032713 force 9 ,loopcnt +0x7cca 032714 call bn_rshift +0x7ccb 032715 branch bn_rshifteven_256_1 +: 032719 ui_init: +0x7ccc 032720 call lpm_disable_exen_output +0x7ccd 032721 rtn wake +0x7cce 032722 call ui_button_init +0x7ccf 032723 call ui_timer_init +0x7cd0 032724 branch ui_led_init_global +: 032726 ui_dispatch: +0x7cd1 032727 call ui_led_dispatch +0x7cd2 032729 branch ui_timer_check +: 032731 ui_button_init: +0x7cd3 032732 fetch 1 ,mem_ui_button_gpio +0x7cd4 032733 rtneq ui_button_gpio_disable +0x7cd5 032734 iforce temp +0x7cd6 032735 call gpio_config_output +0x7cd7 032736 fetcht 1 ,mem_ui_button_gpio +0x7cd8 032737 call gpio_out_inactive +0x7cd9 032738 nop 100 +0x7cda 032739 fetcht 1 ,mem_ui_button_gpio +0x7cdb 032740 call gpio_config_input +0x7cdc 032741 branch ui_button_polling +: 032745 ui_button_polling: +0x7cdd 032746 bpatchx patch3e_3 ,mem_patch3e +0x7cde 032747 fetch 1 ,mem_ui_button_gpio +0x7cdf 032748 rtneq ui_button_gpio_disable +0x7ce0 032749 copy pdata ,temp +0x7ce1 032750 call gpio_get_bit +0x7ce2 032751 nbranch ui_button_up ,true +: 032753 ui_button_down: +0x7ce3 032754 call ui_button_check_long_press +0x7ce4 032755 fetch 2 ,mem_ui_state_map +0x7ce5 032756 set1 ui_state_btn_down +0x7ce6 032757 store 2 ,mem_ui_state_map +0x7ce7 032758 fetch 1 ,mem_ui_button_last_state +0x7ce8 032759 rtneq ui_button_state_down +0x7ce9 032760 jam ui_button_state_down ,mem_ui_button_last_state +0x7cea 032762 fetch 1 ,mem_ui_button_timeout +0x7ceb 032763 store 1 ,mem_ui_button_timer +0x7cec 032764 call lpm_button_get_wake_lock +0x7ced 032765 jam bt_evt_button_down ,mem_fifo_temp +0x7cee 032766 branch ui_ipc_send_event +: 032767 ui_button_up: +0x7cef 032768 fetch 2 ,mem_ui_state_map +0x7cf0 032769 set0 ui_state_btn_down +0x7cf1 032770 store 2 ,mem_ui_state_map +0x7cf2 032771 fetch 1 ,mem_ui_button_last_state +0x7cf3 032772 rtneq ui_button_state_up +0x7cf4 032773 jam ui_button_state_up ,mem_ui_button_last_state +0x7cf5 032775 jam 0 ,mem_ui_button_timer +0x7cf6 032776 call lpm_button_clean_wake_lock +0x7cf7 032777 jam bt_evt_button_up ,mem_fifo_temp +0x7cf8 032778 branch ui_ipc_send_event +: 032780 ui_button_check_long_press: +0x7cf9 032781 fetch 1 ,mem_ui_button_timer +0x7cfa 032782 rtn blank +0x7cfb 032783 increase -1 ,pdata +0x7cfc 032784 store 1 ,mem_ui_button_timer +0x7cfd 032785 nrtn blank +0x7cfe 032787 jam bt_evt_button_long_pressed ,mem_fifo_temp +0x7cff 032788 branch ui_ipc_send_event +: 032790 lpm_button_get_wake_lock: +0x7d00 032791 arg wake_lock_button ,queue +0x7d01 032792 branch lpm_get_wake_lock +: 032794 lpm_button_clean_wake_lock: +0x7d02 032795 arg wake_lock_button ,queue +0x7d03 032796 branch lpm_put_wake_lock +: 032818 calc_curr_struct_prt: +0x7d04 032819 fetch 2 ,mem_ui_led_struct_ptr +0x7d05 032820 mul32 rega ,led_offset_length ,regb +0x7d06 032821 iadd regb ,regb +0x7d07 032822 rtn +: 032825 ui_led_init_global: +0x7d08 032826 fetch 1 ,mem_ui_led_struct_num +0x7d09 032827 rtn blank +0x7d0a 032828 copy pdata ,loopcnt +0x7d0b 032829 fetch 2 ,mem_ui_led_struct_ptr +0x7d0c 032830 copy pdata ,regb +: 032831 ui_led_init_loop: +0x7d0d 032832 add regb ,led_offset_led_gpio ,regc +0x7d0e 032833 ifetcht 1 ,regc +0x7d0f 032834 call gpio_config_output +0x7d10 032835 call ui_led_off_static +0x7d11 032836 increase led_offset_length ,regb +0x7d12 032837 loop ui_led_init_loop +0x7d13 032838 rtn +: 032842 ui_led_on_global: +0x7d14 032843 call calc_curr_struct_prt +0x7d15 032844 setarg ui_led_state_lighting +0x7d16 032845 istore 1 ,regb +0x7d17 032846 call ui_led_stop_timer +0x7d18 032847 branch ui_led_on_static +: 032851 ui_led_blink_stop_global: +: 032852 ui_led_off_global: +0x7d19 032853 call calc_curr_struct_prt +0x7d1a 032854 setarg ui_led_state_darking +0x7d1b 032855 istore 1 ,regb +0x7d1c 032856 call ui_led_stop_timer +0x7d1d 032857 branch ui_led_off_static +: 032861 ui_led_blink_start_global: +0x7d1e 032862 call calc_curr_struct_prt +0x7d1f 032863 setarg ui_led_state_blink_start +0x7d20 032864 istore 1 ,regb +0x7d21 032865 setarg led_infinite_flash_num +0x7d22 032866 istore 1 ,contw +0x7d23 032867 branch ui_led_off_static +: 032872 ui_led_set_style_global: +0x7d24 032873 call calc_curr_struct_prt +0x7d25 032874 arg led_offset_length ,loopcnt +0x7d26 032875 copy regc ,contr +0x7d27 032876 copy regb ,contw +0x7d28 032877 branch memcpy_fast +: 032881 ui_led_dispatch: +0x7d29 032882 fetch 1 ,mem_ui_led_struct_num +0x7d2a 032883 rtn blank +0x7d2b 032884 arg 0 ,rega +: 032885 ui_led_blink_polling: +0x7d2c 032886 call ui_led_change_style_by_type +0x7d2d 032887 increase 1 ,rega +0x7d2e 032888 fetch 1 ,mem_ui_led_struct_num +0x7d2f 032889 isub rega ,null +0x7d30 032890 rtn zero +0x7d31 032891 branch ui_led_blink_polling +: 032894 ui_led_off_static: +0x7d32 032895 add regb ,led_offset_led_gpio ,regc +0x7d33 032896 ifetcht 1 ,regc +0x7d34 032897 branch gpio_out_inactive +: 032900 ui_led_on_static: +0x7d35 032901 add regb ,led_offset_led_gpio ,regc +0x7d36 032902 ifetcht 1 ,regc +0x7d37 032903 branch gpio_out_active +: 032907 ui_led_change_style_by_type: +0x7d38 032908 add rega ,ui_led_blink ,queue +0x7d39 032909 call timer_check +0x7d3a 032910 nrtn blank +0x7d3b 032912 call calc_curr_struct_prt +0x7d3c 032914 ifetch 1 ,regb +0x7d3d 032916 beq ui_led_state_lighting ,ui_led_on_static +0x7d3e 032917 beq ui_led_state_darking ,ui_led_off_static +0x7d3f 032918 beq ui_led_state_blink_stop ,ui_led_off_static +0x7d40 032919 beq ui_led_state_blink_darking ,ui_led_blink_state_darking +: 032920 ui_led_blink_state_lighting: +0x7d41 032921 call ui_led_on_static +0x7d42 032922 add regb ,led_offset_cb_ledon ,regc +0x7d43 032923 call push_stack +0x7d44 032924 ifetch 2 ,regc +0x7d45 032925 call callback_func +0x7d46 032926 call pop_stack +0x7d47 032927 setarg ui_led_state_blink_darking +0x7d48 032928 istore 1 ,regb +0x7d49 032929 add regb ,led_offset_on_time ,regc +0x7d4a 032930 ifetch 2 ,regc +0x7d4b 032931 branch ui_led_blink_timer_start +: 032934 ui_led_blink_state_darking: +0x7d4c 032935 call ui_led_off_static +0x7d4d 032936 add regb ,led_offset_cb_ledoff ,regc +0x7d4e 032937 call push_stack +0x7d4f 032938 ifetch 2 ,regc +0x7d50 032939 call callback_func +0x7d51 032940 call pop_stack +0x7d52 032942 add regb ,led_offset_blink_count ,regc +0x7d53 032943 ifetch 1 ,regc +0x7d54 032944 beq led_infinite_flash_num ,ui_led_blink_infinite +0x7d55 032945 increase -1 ,pdata +0x7d56 032946 istore 1 ,regc +0x7d57 032947 branch ui_led_blink_stop_global ,blank +: 032948 ui_led_blink_infinite: +0x7d58 032949 setarg ui_led_state_blink_lighting +0x7d59 032950 istore 1 ,regb +0x7d5a 032951 add regb ,led_offset_off_time ,regc +0x7d5b 032952 ifetch 2 ,regc +: 032953 ui_led_blink_timer_start: +0x7d5c 032954 add rega ,ui_led_blink ,queue +0x7d5d 032955 branch timer_init +: 032957 ui_led_stop_timer: +0x7d5e 032958 setarg 0 +0x7d5f 032959 branch ui_led_blink_timer_start +: 032965 ui_timer_timeout: +0x7d60 032966 setarg 0x1000 +0x7d61 032967 lshift16 pdata ,pdata +0x7d62 032968 iadd regb ,regb +0x7d63 032969 rtn +: 032971 ui_timer_check: +0x7d64 032972 bpatchx patch3e_4 ,mem_patch3e +0x7d65 032973 arg 0 ,rega +0x7d66 032974 fetcht 4 ,mem_ui_timer_last_btclk +0x7d67 032975 copy clkn_bt ,regb +0x7d68 032976 copy regb ,pdata +0x7d69 032977 isub temp ,null +0x7d6a 032978 ncall ui_timer_timeout ,positive +: 032980 ui_timer_check_loop: +0x7d6b 032981 copy regb ,pdata +0x7d6c 032982 increase 160 ,temp +0x7d6d 032983 increase 160 ,temp +0x7d6e 032984 isub temp ,null +0x7d6f 032985 nbranch ui_timer_check_end ,positive +0x7d70 032986 increase 1 ,rega +0x7d71 032987 and rega ,0x0f ,pdata +0x7d72 032988 nbranch ui_timer_check_loop ,blank +0x7d73 032989 arg 0 ,rega +0x7d74 032990 call ui_timer_check_send_evt +: 032991 ui_timer_init: +0x7d75 032992 copy clkn_bt ,pdata +0x7d76 032993 store 4 ,mem_ui_timer_last_btclk +0x7d77 032994 rtn +: 032995 ui_timer_check_end: +0x7d78 032996 bpatchx patch3e_5 ,mem_patch3e +0x7d79 032997 copy rega ,pdata +0x7d7a 032998 rtn blank +0x7d7b 032999 increase -160 ,temp +0x7d7c 033000 increase -160 ,temp +0x7d7d 033001 set0 28 ,temp +0x7d7e 033002 storet 4 ,mem_ui_timer_last_btclk +: 033003 ui_timer_check_send_evt: +0x7d7f 033004 branch app_evt_timer +: 033011 ui_ipc_get_lock: +0x7d80 033012 jam 1 ,mem_ipc_lock_bt +: 033013 ui_ipc_get_lock_wait: +0x7d81 033014 fetch 1 ,mem_ipc_lock_c51 +0x7d82 033015 nbranch ui_ipc_get_lock_wait ,blank +0x7d83 033016 rtn +: 033018 ui_ipc_put_lock: +0x7d84 033019 jam 0 ,mem_ipc_lock_bt +0x7d85 033020 rtn +: 033024 ui_ipc_send_event: +0x7d86 033025 bpatchx patch3e_6 ,mem_patch3e +0x7d87 033026 call ui_ipc_get_lock +0x7d88 033027 copy rega ,pdata +0x7d89 033028 store 4 ,mem_ipc_rega_temp +0x7d8a 033029 arg mem_ipc_fifo_bt2c51 ,rega +0x7d8b 033030 call fifo_in +0x7d8c 033031 fetch 4 ,mem_ipc_rega_temp +0x7d8d 033032 copy pdata ,rega +0x7d8e 033033 branch ui_ipc_put_lock +: 033035 ui_ipc_send_cmd: +0x7d8f 033036 bpatchx patch3e_7 ,mem_patch3e +0x7d90 033037 call ui_ipc_get_lock +0x7d91 033038 copy rega ,pdata +0x7d92 033039 store 4 ,mem_ipc_rega_temp +0x7d93 033040 arg mem_ipc_fifo_c512bt ,rega +0x7d94 033041 call fifo_in +0x7d95 033042 fetch 4 ,mem_ipc_rega_temp +0x7d96 033043 copy pdata ,rega +0x7d97 033044 branch ui_ipc_put_lock +: 033046 ui_ipc_clean_all_fifo: +0x7d98 033047 setarg 0 +0x7d99 033048 store util_fifo_len ,mem_ipc_fifo_c512bt +0x7d9a 033049 store util_fifo_len ,mem_ipc_fifo_bt2c51 +0x7d9b 033050 rtn +: 033052 check_51cmd: +0x7d9c 033053 bpatchx patch3f_0 ,mem_patch3f +0x7d9d 033054 fetch 1 ,mem_hci_cmd +0x7d9e 033055 nrtn blank +0x7d9f 033056 arg mem_ipc_fifo_c512bt ,rega +0x7da0 033057 call fifo_is_empty +0x7da1 033058 rtn blank +0x7da2 033059 jam ipc_continue_process ,mem_ipc_skip_continue_proc +0x7da3 033060 call check_51cmd_once +0x7da4 033061 fetch 1 ,mem_ipc_skip_continue_proc +0x7da5 033062 branch check_51cmd ,blank +0x7da6 033063 rtn +: 033065 check_51cmd_once: +0x7da7 033066 call ui_ipc_get_lock +0x7da8 033067 arg mem_ipc_fifo_c512bt ,rega +0x7da9 033068 call fifo_out +0x7daa 033069 copy pdata ,temp +0x7dab 033070 call ui_ipc_put_lock +0x7dac 033071 bpatchx patch3f_1 ,mem_patch3f +0x7dad 033072 copy temp ,pdata +0x7dae 033073 rtn blank +0x7daf 033074 beq bt_cmd_start_discovery ,check_51cmd_start_discovery +0x7db0 033075 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +0x7db1 033076 beq bt_cmd_reconnect ,check_51cmd_reconnect +0x7db2 033077 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating +0x7db3 033078 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating +0x7db4 033079 beq bt_cmd_sniff_test ,check_51cmd_sniff_test +0x7db5 033080 beq bt_cmd_start_inquiry ,check_51cmd_inq +0x7db6 033081 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq +0x7db7 033082 beq bt_cmd_start_adv ,check_51cmd_adv +0x7db8 033083 beq bt_cmd_stop_adv ,check_51cmd_stop_adv +0x7db9 033084 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +0x7dba 033085 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +0x7dbb 033086 beq bt_cmd_led_off ,check_51cmd_led_off +0x7dbc 033087 beq bt_cmd_led_on ,check_51cmd_led_on +0x7dbd 033088 beq bt_cmd_led_blink ,check_51cmd_led_start_blink +0x7dbe 033089 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +0x7dbf 033090 beq bt_cmd_le_start_scan ,check_51cmd_start_scan +0x7dc0 033091 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +0x7dc1 033092 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +0x7dc2 033093 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +0x7dc3 033094 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +0x7dc4 033096 store 1 ,mem_fifo_temp +0x7dc5 033097 bpatchx patch3f_2 ,mem_patch3f +0x7dc6 033098 call lmo_fifo_check +0x7dc7 033099 nbranch check_51cmd_restore ,blank +: 033100 check_51cmd_once_continue: +0x7dc8 033101 fetch 1 ,mem_fifo_temp +0x7dc9 033102 bmark0 mark_context ,check_51cmd_check_idle +0x7dca 033103 beq bt_cmd_disconnect ,check_51cmd_disconnect +0x7dcb 033104 beq bt_cmd_enter_sniff ,cmd_in_sniff +0x7dcc 033105 beq bt_cmd_exit_sniff ,cmd_exit_sniff +0x7dcd 033106 beq bt_cmd_set_pin_code ,check_51cmd_pincode +0x7dce 033107 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +0x7dcf 033108 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +0x7dd0 033109 beq bt_cmd_role_switch ,check_51cmd_role_switch +0x7dd1 033110 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +0x7dd2 033111 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +0x7dd3 033112 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +0x7dd4 033113 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +0x7dd5 033114 rtn +: 033116 check_51cmd_check_idle: +0x7dd6 033117 store 1 ,mem_fifo_temp +0x7dd7 033118 call context_check_idle +0x7dd8 033119 branch check_51cmd_restore ,zero +0x7dd9 033120 call context_search_plap +0x7dda 033121 nrtn zero +: 033122 check_51cmd_restore: +0x7ddb 033123 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +0x7ddc 033124 branch ui_ipc_send_cmd +: 033129 check_51cmd_start_discovery: +0x7ddd 033130 fetch 2 ,mem_ui_state_map +0x7dde 033131 set1 ui_state_bt_discovery +0x7ddf 033132 store 2 ,mem_ui_state_map +0x7de0 033133 jam 3 ,mem_scan_mode +0x7de1 033134 rtn +: 033138 check_51cmd_stop_discovery: +0x7de2 033139 jam 0 ,mem_hid_handshake_timer_count +0x7de3 033140 jam 0 ,mem_scan_mode +0x7de4 033141 fetch 2 ,mem_ui_state_map +0x7de5 033142 set0 ui_state_bt_discovery +0x7de6 033143 store 2 ,mem_ui_state_map +0x7de7 033144 rtn +: 033148 check_51cmd_reconnect: +0x7de8 033149 jam hci_cmd_create_conn ,mem_hci_cmd +0x7de9 033150 rtn +: 033154 check_51cmd_disconnect: +0x7dea 033155 jam lmp_detach ,mem_lmo_opcode2 +0x7deb 033156 jam other_end_terminated ,mem_disconn_reason_send +0x7dec 033157 rtn +: 033161 check_51cmd_enter_sniff_subrating: +0x7ded 033162 rtn +: 033166 check_51cmd_exit_sniff_subrating: +0x7dee 033167 rtn +: 033171 check_51cmd_sniff_test: +0x7def 033172 rtn +: 033176 check_51cmd_pincode: +0x7df0 033177 jam pincode_state_pincode_ready ,mem_pincode_state +0x7df1 033178 branch cmd_pair +: 033182 check_51cmd_inq: +0x7df2 033183 rtn +: 033187 check_51cmd_stop_inq: +0x7df3 033188 rtn +: 033192 check_51cmd_adv: +0x7df4 033193 jam on ,mem_le_adv_enable +0x7df5 033194 jam adv_ind ,mem_le_adv_type +0x7df6 033195 fetch 2 ,mem_ui_state_map +0x7df7 033196 set1 ui_state_ble_adv ,pdata +0x7df8 033197 store 2 ,mem_ui_state_map +0x7df9 033198 rtn +: 033202 check_51cmd_stop_adv: +0x7dfa 033203 fetch 2 ,mem_ui_state_map +0x7dfb 033204 set0 ui_state_ble_adv ,pdata +0x7dfc 033205 store 2 ,mem_ui_state_map +0x7dfd 033206 jam off ,mem_le_adv_enable +0x7dfe 033207 rtn +: 033211 check_51cmd_direct_adv: +0x7dff 033212 jam on ,mem_le_adv_enable +0x7e00 033213 jam adv_direct_ind ,mem_le_adv_type +0x7e01 033214 fetch 2 ,mem_ui_state_map +0x7e02 033215 set1 ui_state_ble_adv ,pdata +0x7e03 033216 store 2 ,mem_ui_state_map +0x7e04 033217 rtn +: 033221 check_51cmd_stop_direct_adv: +0x7e05 033222 fetch 2 ,mem_ui_state_map +0x7e06 033223 set0 ui_state_ble_adv ,pdata +0x7e07 033224 store 2 ,mem_ui_state_map +0x7e08 033225 jam off ,mem_le_adv_enable +0x7e09 033226 rtn +: 033230 check_51cmd_le_disconnect: +0x7e0a 033231 setarg 20 +0x7e0b 033232 store 2 ,mem_le_superto +0x7e0c 033233 store 2 ,mem_le_init_superto +0x7e0d 033234 branch le_send_terminate_ind_user_terminated +: 033238 check_51cmd_ble_update_connect_param: +0x7e0e 033239 branch le_l2cap_tx_update_req +: 033243 check_51cmd_led_off: +0x7e0f 033244 arg 0 ,rega +0x7e10 033245 branch ui_led_off_global +: 033249 check_51cmd_led_on: +0x7e11 033250 arg 0 ,rega +0x7e12 033251 branch ui_led_on_global +: 033255 check_51cmd_led_start_blink: +0x7e13 033256 arg 0 ,rega +0x7e14 033257 branch ui_led_blink_start_global +: 033261 check_51cmd_le_start_con: +0x7e15 033262 jam on ,mem_le_scan_enable +0x7e16 033263 jam hci_cmd_le_create_conn ,mem_hci_cmd +0x7e17 033266 rtn +: 033270 check_51cmd_start_scan: +0x7e18 033271 jam on ,mem_le_scan_enable +0x7e19 033272 rtn +: 033276 check_51cmd_stop_scan: +0x7e1a 033277 jam off ,mem_le_scan_enable +0x7e1b 033278 jam 0 ,mem_hci_cmd +0x7e1c 033279 rtn +: 033283 check_51cmd_hibernate: +0x7e1d 033284 fetch 2 ,mem_cb_before_hibernate +0x7e1e 033285 call callback_func +0x7e1f 033286 fetch 1 ,mem_ui_button_gpio +0x7e20 033287 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +0x7e21 033288 copy pdata ,temp +0x7e22 033289 call gpio_config_input +: 033290 check_51cmd_hibernate_btn_disabled: +0x7e23 033291 call ui_ipc_clean_all_fifo +0x7e24 033292 branch lpm_hibernate +: 033296 check_51cmd_le_smp_sec_req: +0x7e25 033297 branch le_send_smp_security_request +: 033301 check_51cmd_role_switch: +0x7e26 033302 jam lmp_slot_offset ,mem_lmo_opcode2 +0x7e27 033303 set1 mark_switch_initiated ,mark +0x7e28 033304 nrtn master +0x7e29 033305 jam switch_flag_init ,mem_switch_flag +0x7e2a 033306 jam lmp_switch_req ,mem_lmo_opcode2 +0x7e2b 033307 fetch 1 ,mem_connection_options +0x7e2c 033308 set0 connection_switch ,pdata +0x7e2d 033309 store 1 ,mem_connection_options +0x7e2e 033310 rtn +: 033314 check_51cmd_bb_reconn_cancel: +0x7e2f 033315 force page_length_timer ,queue +0x7e30 033316 branch timer_stop +: 033320 check_51cmd_dhkey_not_accept: +0x7e31 033321 call tid_set_reply +0x7e32 033322 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7e33 033323 branch parse_lmp_dhkey_check_reject +: 033326 ui_check_paring_button: +0x7e34 033327 fetch 1 ,mem_ui_state_map +0x7e35 033328 rtnbit0 ui_state_btn_down +0x7e36 033329 rtnbit0 ui_state_bt_reconnect +0x7e37 033330 branch check_51cmd_bb_reconn_cancel +: 033335 queue_init: +0x7e38 033336 fetch 2 ,mem_queue_ptr +0x7e39 033337 add pdata ,queue_offset_curr_num ,contw +0x7e3a 033338 setarg 0 +0x7e3b 033339 istore 3 ,contw +0x7e3c 033340 rtn +: 033344 queue_push: +0x7e3d 033345 call disable_user +0x7e3e 033346 call queue_full +0x7e3f 033347 rtn blank +0x7e40 033348 fetch 2 ,mem_queue_ptr +0x7e41 033349 add pdata ,queue_offset_curr_num ,regb +0x7e42 033350 ifetcht 1 ,regb +0x7e43 033351 increase 1 ,temp +0x7e44 033352 istoret 1 ,regb +0x7e45 033354 ifetcht 1 ,pdata +0x7e46 033355 copy temp ,loopcnt +0x7e47 033356 add pdata ,queue_offset_write_ptr ,regb +0x7e48 033357 ifetch 1 ,regb +0x7e49 033358 imul32 temp ,pdata +0x7e4a 033359 iadd contr ,contw +0x7e4b 033360 copy rega ,contr +: 033361 calc_queue_next_ptr: +0x7e4c 033362 call memcpy +0x7e4d 033363 call queue_get_size +0x7e4e 033364 pincrease -1 +0x7e4f 033365 ifetcht 1 ,regb +0x7e50 033366 increase 1 ,temp +0x7e51 033367 iand temp ,temp +0x7e52 033368 istoret 1 ,regb +0x7e53 033369 branch enable_user +: 033374 queue_pop: +0x7e54 033375 call disable_user +0x7e55 033376 call queue_empty +0x7e56 033377 rtn blank +0x7e57 033378 fetch 2 ,mem_queue_ptr +0x7e58 033379 add pdata ,queue_offset_curr_num ,regb +0x7e59 033380 ifetcht 1 ,regb +0x7e5a 033381 increase -1 ,temp +0x7e5b 033382 istoret 1 ,regb +0x7e5c 033383 ifetcht 1 ,pdata +0x7e5d 033384 copy temp ,loopcnt +0x7e5e 033385 add pdata ,queue_offset_read_ptr ,regb +0x7e5f 033386 ifetch 1 ,regb +0x7e60 033387 imul32 temp ,pdata +0x7e61 033388 iadd contr ,contr +0x7e62 033389 increase 1 ,contr +0x7e63 033390 copy rega ,contw +0x7e64 033391 branch calc_queue_next_ptr +: 033395 queue_empty: +0x7e65 033396 fetch 2 ,mem_queue_ptr +0x7e66 033397 add pdata ,queue_offset_curr_num ,contr +0x7e67 033398 ifetch 1 ,contr +0x7e68 033399 rtn +: 033402 queue_full: +0x7e69 033403 call queue_get_size +0x7e6a 033404 ifetcht 1 ,contr +0x7e6b 033405 isub temp ,pdata +0x7e6c 033406 rtn +: 033409 queue_get_size: +0x7e6d 033410 fetch 2 ,mem_queue_ptr +0x7e6e 033411 add pdata ,queue_offset_length ,contr +0x7e6f 033412 ifetch 1 ,contr +0x7e70 033413 rtn +: 033421 right_shift_n: +0x7e71 033422 sub loopcnt ,0 ,null +0x7e72 033423 rtn zero +: 033424 right_shift_n_loop: +0x7e73 033425 rshift pdata ,pdata +0x7e74 033426 loop right_shift_n_loop +0x7e75 033427 rtn +: 033430 left_shift_n: +0x7e76 033431 force 1 ,pdata +0x7e77 033432 sub loopcnt ,0 ,null +0x7e78 033433 rtn zero +: 033434 left_shift_n_loop: +0x7e79 033435 lshift pdata ,pdata +0x7e7a 033436 loop left_shift_n_loop +0x7e7b 033437 rtn +: 033438 push_stack: +0x7e7c 033439 deposit contw +0x7e7d 033440 store 2 ,mem_contw +0x7e7e 033441 storet 8 ,mem_temp +0x7e7f 033442 deposit timeup +0x7e80 033443 store 4 ,mem_timeup +0x7e81 033444 call push_stack_rega_b_c +0x7e82 033445 deposit contr +0x7e83 033446 store 2 ,mem_contr +0x7e84 033447 rtn +: 033449 push_stack_rega_b_c: +0x7e85 033450 deposit rega +0x7e86 033451 store 4 ,mem_rega +0x7e87 033452 deposit regb +0x7e88 033453 store 4 ,mem_regb +0x7e89 033454 deposit regc +0x7e8a 033455 store 3 ,mem_regc +0x7e8b 033456 rtn +: 033458 pop_stack: +0x7e8c 033459 fetcht 8 ,mem_temp +0x7e8d 033460 fetch 4 ,mem_timeup +0x7e8e 033461 iforce timeup +0x7e8f 033462 call pop_stack_rega_b_c +0x7e90 033463 fetch 2 ,mem_contw +0x7e91 033464 iforce contw +0x7e92 033465 fetch 2 ,mem_contr +0x7e93 033466 iforce contr +0x7e94 033467 rtn +: 033469 pop_stack_rega_b_c: +0x7e95 033470 fetch 4 ,mem_rega +0x7e96 033471 iforce rega +0x7e97 033472 fetch 4 ,mem_regb +0x7e98 033473 iforce regb +0x7e99 033474 fetch 3 ,mem_regc +0x7e9a 033475 iforce regc +0x7e9b 033476 rtn +: 033478 get_contw: +0x7e9c 033479 fetch 2 ,mem_contw +0x7e9d 033480 copy pdata ,contw +0x7e9e 033481 rtn +: 033482 get_contr: +0x7e9f 033483 fetch 2 ,mem_contr +0x7ea0 033484 copy pdata ,contr +0x7ea1 033485 rtn +: 033486 store_contw: +0x7ea2 033487 copy contw ,pdata +0x7ea3 033488 store 2 ,mem_contw +0x7ea4 033489 rtn +: 033490 store_contr: +0x7ea5 033491 copy contr ,pdata +0x7ea6 033492 store 2 ,mem_contr +0x7ea7 033493 rtn +: 033497 save_cont_pointers: +0x7ea8 033498 copy contw ,pdata +0x7ea9 033499 store 2 ,mem_hold_contw +0x7eaa 033500 copy contr ,pdata +0x7eab 033501 store 2 ,mem_hold_contr +0x7eac 033502 rtn +: 033503 load_cont_pointers: +0x7ead 033504 fetch 2 ,mem_hold_contw +0x7eae 033505 copy pdata ,contw +0x7eaf 033506 fetch 2 ,mem_hold_contr +0x7eb0 033507 copy pdata ,contr +0x7eb1 033508 rtn +: 033510 memcpy96: +0x7eb2 033511 call memcpy32 +: 033512 memcpy64: +0x7eb3 033513 call memcpy32 +0x7eb4 033514 branch memcpy32 +: 033515 memcpy12: +0x7eb5 033516 call memcpy8 +: 033517 memcpy4: +0x7eb6 033518 ifetch 4 ,contr +0x7eb7 033519 istore 4 ,contw +0x7eb8 033520 rtn +: 033521 memcpy8: +0x7eb9 033522 ifetch 8 ,contr +0x7eba 033523 istore 8 ,contw +0x7ebb 033524 rtn +: 033526 memcpy48: +0x7ebc 033527 call memcpy16 +: 033528 memcpy32: +0x7ebd 033529 call memcpy8 +: 033530 memcpy24: +0x7ebe 033531 call memcpy8 +: 033532 memcpy16: +0x7ebf 033533 call memcpy8 +0x7ec0 033534 branch memcpy8 +: 033538 delay_10ms: +0x7ec1 033539 arg 10 ,loopcnt +: 033540 delay_ms_wait: +0x7ec2 033541 nop 12000 +0x7ec3 033542 loop delay_ms_wait +0x7ec4 033543 rtn +: 033545 bn_zero: +0x7ec5 033546 force 3 ,loopcnt +: 033547 memset0: +0x7ec6 033548 force 0 ,pdata +: 033549 memset8: +0x7ec7 033550 istore 8 ,contw +0x7ec8 033551 loop memset8 +0x7ec9 033552 rtn +: 033554 memset0_8: +0x7eca 033555 force 0 ,pdata +0x7ecb 033556 istore 8 ,contw +0x7ecc 033557 rtn +: 033558 memset0_4: +0x7ecd 033559 force 0 ,pdata +0x7ece 033560 istore 4 ,contw +0x7ecf 033561 rtn +: 033563 clear_mem_256: +0x7ed0 033564 force 4 ,loopcnt +0x7ed1 033565 branch memset0 +: 033566 clear_mem_512: +0x7ed2 033567 force 8 ,loopcnt +0x7ed3 033568 branch memset0 +: 033570 clear_mem: +0x7ed4 033571 deposit loopcnt +0x7ed5 033572 rtn blank +0x7ed6 033573 setarg 0 +: 033574 clear_mem_loop: +0x7ed7 033575 istore 1 ,contw +0x7ed8 033576 loop clear_mem_loop +0x7ed9 033577 rtn +: 033580 clear_temp_block: +0x7eda 033581 arg 32 ,loopcnt +0x7edb 033582 arg mem_temp_block0 ,contw +0x7edc 033583 branch clear_mem +: 033585 xor_loop: +0x7edd 033586 ifetch 4 ,regc +0x7ede 033587 ifetcht 4 ,rega +0x7edf 033588 ixor temp ,pdata +0x7ee0 033589 istore 4 ,contw +0x7ee1 033590 increase 4 ,rega +0x7ee2 033591 increase 4 ,regc +0x7ee3 033592 loop xor_loop +0x7ee4 033593 rtn +: 033597 inverse_data: +0x7ee5 033598 bpatchx patch3f_3 ,mem_patch3f +0x7ee6 033599 copy loopcnt ,pdata +0x7ee7 033600 sub pdata ,1 ,null +0x7ee8 033601 rtn positive +0x7ee9 033602 iadd rega ,regb +0x7eea 033603 increase -1 ,regb +0x7eeb 033604 rshift loopcnt ,loopcnt +: 033605 inverse_loop: +0x7eec 033606 ifetcht 1 ,rega +0x7eed 033607 ifetch 1 ,regb +0x7eee 033608 istore 1 ,rega +0x7eef 033609 istoret 1 ,regb +0x7ef0 033610 increase -1 ,regb +0x7ef1 033611 increase 1 ,rega +0x7ef2 033612 loop inverse_loop +0x7ef3 033613 rtn +: 033616 memcpy_fast: +0x7ef4 033617 deposit loopcnt +0x7ef5 033618 rtn blank +: 033619 memcpy_fast_loop: +0x7ef6 033620 increase -8 ,loopcnt +0x7ef7 033621 call memcpy8 ,positive +0x7ef8 033622 rtn zero +0x7ef9 033623 branch memcpy_fast_loop ,positive +0x7efa 033624 increase 8 ,loopcnt +: 033625 memcpy_fast_loop_four: +0x7efb 033626 increase -4 ,loopcnt +0x7efc 033627 call memcpy4 ,positive +0x7efd 033628 rtn zero +0x7efe 033629 branch memcpy_fast_loop_four ,positive +0x7eff 033630 increase 4 ,loopcnt +0x7f00 033631 branch memcpy +: 033633 memcpy: +0x7f01 033634 deposit loopcnt +0x7f02 033635 rtn blank +: 033636 memcpy_loop: +0x7f03 033637 ifetch 1 ,contr +0x7f04 033638 istore 1 ,contw +0x7f05 033639 loop memcpy_loop +0x7f06 033640 rtn +: 033642 timer_stop: +0x7f07 033643 setarg 0 +: 033644 timer_init: +0x7f08 033645 rshift clkn_bt ,temp +0x7f09 033646 storet 4 ,mem_last_clkn +0x7f0a 033647 arg mem_timers ,contw +0x7f0b 033648 iforce temp +0x7f0c 033649 lshift queue ,pdata +0x7f0d 033650 iadd contw ,contw +0x7f0e 033651 istoret 2 ,contw +0x7f0f 033652 bpatchx patch3f_4 ,mem_patch3f +0x7f10 033653 rtn +: 033655 timer_check_timeout: +0x7f11 033656 arg 0x800 ,timeup +0x7f12 033657 lshift16 timeup ,timeup +0x7f13 033658 iadd timeup ,pdata +0x7f14 033659 rtn +: 033662 timer_reinit: +0x7f15 033663 arg 0 ,queue +: 033664 timer_check: +0x7f16 033665 bpatchx patch3f_5 ,mem_patch3f +0x7f17 033666 fetcht 4 ,mem_last_clkn +0x7f18 033667 rshift clkn_bt ,pdata +0x7f19 033668 store 4 ,mem_last_clkn +0x7f1a 033669 isub temp ,null +0x7f1b 033670 ncall timer_check_timeout ,positive +0x7f1c 033671 isub temp ,timeup +0x7f1d 033672 copy timeup ,temp +0x7f1e 033673 arg mem_timers ,contr +0x7f1f 033674 copy contr ,contw +0x7f20 033675 arg 16 ,loopcnt +: 033676 timer_loop: +0x7f21 033677 ifetch 2 ,contr +0x7f22 033678 isub temp ,pdata +0x7f23 033679 branch timer_counting ,positive +0x7f24 033680 force 0 ,pdata +: 033681 timer_counting: +0x7f25 033682 istore 2 ,contw +0x7f26 033683 loop timer_loop +0x7f27 033684 arg mem_timers ,contr +0x7f28 033685 lshift queue ,pdata +0x7f29 033686 iadd contr ,contr +0x7f2a 033687 ifetch 2 ,contr +0x7f2b 033688 rtn +: 033693 clk_add: +0x7f2c 033694 iadd temp ,temp +0x7f2d 033695 copy temp ,loopcnt +0x7f2e 033696 setarg 3750 +0x7f2f 033697 isub loopcnt ,pdata +0x7f30 033698 rtn positive +0x7f31 033699 sub pdata ,0 ,pdata +0x7f32 033700 rshift16 temp ,temp +0x7f33 033701 increase 1 ,temp +0x7f34 033702 lshift16 temp ,temp +0x7f35 033703 ior temp ,temp +0x7f36 033704 rtn +: 033706 clk_diff_rt: +0x7f37 033707 call clk_diff +0x7f38 033708 branch clk2rt +: 033711 clk_diff: +0x7f39 033712 disable user +0x7f3a 033713 isub temp ,pdata +0x7f3b 033714 branch clk_diff_pos ,positive +0x7f3c 033715 enable user +0x7f3d 033716 sub pdata ,0 ,pdata +: 033717 clk_diff_pos: +0x7f3e 033718 rtnbit0 15 +0x7f3f 033719 arg -61786 ,temp +0x7f40 033720 iadd temp ,pdata +0x7f41 033721 set0 64 ,pdata +0x7f42 033722 rtn +: 033724 clk2rt: +0x7f43 033725 iforce contr +0x7f44 033726 rshift16 pdata ,pdata +0x7f45 033727 arg 3750 ,temp +0x7f46 033728 imul32 temp ,pdata +0x7f47 033729 iadd contr ,pdata +0x7f48 033730 rtn +: 033733 clk2lpo: +0x7f49 033734 lshift8 pdata ,pdata +0x7f4a 033735 lshift4 pdata ,pdata +0x7f4b 033736 fetcht 3 ,mem_clks_per_lpo +0x7f4c 033737 idiv temp +0x7f4d 033738 call wait_div_end +0x7f4e 033739 quotient temp +0x7f4f 033740 rtn +: 033743 clk2bt: +0x7f50 033744 arg 3750 ,temp +0x7f51 033745 idiv temp +0x7f52 033746 call wait_div_end +0x7f53 033747 quotient pdata +0x7f54 033748 lshift16 pdata ,pdata +0x7f55 033749 remainder temp +0x7f56 033750 ior temp ,temp +0x7f57 033751 rtn +: 033758 string2dec_from_uart: +0x7f58 033759 arg 0 ,temp +: 033760 string2dec_from_uart_done: +0x7f59 033761 copy temp ,regc +0x7f5a 033762 ifetch 1 ,contru +0x7f5b 033763 call uchar2dialog +0x7f5c 033764 copy regc ,temp +0x7f5d 033765 call swap +0x7f5e 033766 arg 10 ,regb +0x7f5f 033767 imul32 regb ,pdata +0x7f60 033768 iadd temp ,pdata +0x7f61 033769 copy pdata ,temp +0x7f62 033770 loop string2dec_from_uart_done +0x7f63 033771 rtn +: 033775 uchar2dialog: +0x7f64 033776 arg 0x3a ,temp +0x7f65 033777 isub temp ,null +0x7f66 033778 nbranch uchar2dialog_number ,positive +0x7f67 033779 arg 0x61 ,temp +0x7f68 033780 isub temp ,null +0x7f69 033781 branch uchar2dialog_a2f ,positive +0x7f6a 033782 arg 0x37 ,temp +0x7f6b 033783 isub temp ,pdata +0x7f6c 033784 rtn +: 033785 uchar2dialog_number: +0x7f6d 033786 arg 0x30 ,temp +0x7f6e 033787 isub temp ,pdata +0x7f6f 033788 rtn +: 033789 uchar2dialog_a2f: +0x7f70 033790 arg 0x57 ,temp +0x7f71 033791 isub temp ,pdata +0x7f72 033792 rtn +: 033794 pn9: +0x7f73 033795 copy temp ,alarm +0x7f74 033796 setarg 0x1ff +0x7f75 033797 force 0 ,regb +: 033798 pn9_loop: +0x7f76 033799 rshift3 pdata ,rega +0x7f77 033800 rshift rega ,rega +0x7f78 033801 ixor rega ,rega +0x7f79 033802 isolate1 0 ,rega +0x7f7a 033803 setflag true ,9 ,pdata +0x7f7b 033804 rshift temp ,temp +0x7f7c 033805 isolate1 0 ,pdata +0x7f7d 033806 setflag true ,7 ,temp +0x7f7e 033807 rshift pdata ,pdata +0x7f7f 033808 increase 1 ,regb +0x7f80 033809 compare 0 ,regb ,0x7 +0x7f81 033810 nbranch pn9_loop ,true +0x7f82 033811 istoret 1 ,contw +0x7f83 033812 loop pn9_loop +0x7f84 033813 copy alarm ,temp +0x7f85 033814 rtn +: 033817 wait_div_end: +0x7f86 033818 rtn modone +0x7f87 033819 branch wait_div_end +: 033829 compare_loop: +: 033830 string_compare: +0x7f88 033831 ifetch 1 ,rega +0x7f89 033832 ifetcht 1 ,regb +0x7f8a 033833 isub temp ,null +0x7f8b 033834 nrtn zero +0x7f8c 033835 increase 1 ,rega +0x7f8d 033836 increase 1 ,regb +0x7f8e 033837 loop string_compare +0x7f8f 033838 force 0 ,null +0x7f90 033839 rtn +: 033842 ceiling: +0x7f91 033843 isub temp ,null +0x7f92 033844 nrtn positive +0x7f93 033845 deposit temp +0x7f94 033846 rtn +: 033848 swap: +0x7f95 033849 iadd temp ,pdata +0x7f96 033850 isub temp ,temp +0x7f97 033851 isub temp ,pdata +0x7f98 033852 rtn +: 033854 clean_mem: +0x7f99 033855 arg 0x200 ,loopcnt +0x7f9a 033856 arg 0x4000 ,contw +0x7f9b 033857 branch memset0 +: 033860 callback_func: +0x7f9c 033861 rtn blank +0x7f9d 033862 copy pdata ,pc +: 033865 wait_uarttx: +0x7f9e 033866 hfetch 2 ,core_uart_txitems +0x7f9f 033867 nbranch wait_uarttx ,blank +0x7fa0 033868 rtn +: 033870 ice_break: +0x7fa1 033871 hjam 0x1 ,core_ice_ctrl +0x7fa2 033872 rtn +: 033874 ice_setbp: +0x7fa3 033875 hstore 2 ,core_ice_break0 +0x7fa4 033876 hfetch 1 ,core_ice_ctrl +0x7fa5 033877 set1 4 ,pdata +0x7fa6 033878 hstore 1 ,core_ice_ctrl +0x7fa7 033879 rtn +: 033880 ice_setbp2: +0x7fa8 033881 hstore 2 ,core_ice_break1 +0x7fa9 033882 hfetch 1 ,core_ice_ctrl +0x7faa 033883 set1 6 ,pdata +0x7fab 033884 hstore 1 ,core_ice_ctrl +0x7fac 033885 rtn +: 033887 ice_set_write_bp: +0x7fad 033888 hstore 2 ,core_ice_break0 +0x7fae 033889 hjam 0x30 ,core_ice_ctrl +0x7faf 033890 rtn +: 033894 test_enable_white: +0x7fb0 033895 hfetch 1 ,core_config +0x7fb1 033896 set0 whiteoff_bit ,pdata +0x7fb2 033897 hstore 1 ,core_config +0x7fb3 033898 rtn +: 033900 check_uart_tx_buff: +0x7fb4 033901 hfetch 2 ,core_uart_txitems +0x7fb5 033902 arg uart_air_control_threshold ,temp +: 033903 pdata_sub_temp: +0x7fb6 033904 isub temp ,null +0x7fb7 033905 rtn +: 033911 fifo_in: +0x7fb8 033912 bpatchx patch3f_6 ,mem_patch3f +0x7fb9 033913 ifetcht util_fifo_len ,rega +0x7fba 033914 and temp ,0xff ,pdata +0x7fbb 033915 nbranch fifo_in_push ,blank +0x7fbc 033916 rshift8 temp ,pdata +0x7fbd 033917 istore util_fifo_len ,rega +: 033918 fifo_in_push: +0x7fbe 033919 increase util_fifo_len + util_fifo_offset ,rega +0x7fbf 033920 ifetch 1 ,rega +0x7fc0 033921 nbranch assert ,blank +0x7fc1 033922 fetch 1 ,mem_fifo_temp +0x7fc2 033923 istore 1 ,rega +0x7fc3 033924 rtn +: 033929 fifo_out: +0x7fc4 033930 bpatchx patch3f_7 ,mem_patch3f +0x7fc5 033931 arg util_fifo_len ,loopcnt +0x7fc6 033932 ifetch util_fifo_len ,rega +0x7fc7 033933 rtn blank +: 033934 fifo_out_loop: +0x7fc8 033935 ifetch 1 ,rega +0x7fc9 033936 nbranch fifo_out_end ,blank +0x7fca 033937 increase 1 ,rega +0x7fcb 033938 loop fifo_out_loop +0x7fcc 033939 branch assert +: 033940 fifo_out_end: +0x7fcd 033941 arg 0 ,temp +0x7fce 033942 istoret 1 ,rega +0x7fcf 033943 rtn +: 033948 fifo_is_empty: +0x7fd0 033949 ifetch util_fifo_len ,rega +0x7fd1 033950 rtn +: 033955 fifo_is_full: +0x7fd2 033956 ifetch 1 ,rega +0x7fd3 033957 rtn +: 033960 fifo_is_near_full: +0x7fd4 033961 ifetch 2 ,rega +0x7fd5 033962 rtn +: 033966 fifo_content_count: +0x7fd6 033967 arg 0 ,temp +: 033968 fifo_content_count_loop: +0x7fd7 033969 fetch 1 ,contr +0x7fd8 033970 loop fifo_content_count_loop ,blank +0x7fd9 033971 increase 1 ,temp +0x7fda 033972 loop fifo_content_count_loop +0x7fdb 033973 copy temp ,pdata +0x7fdc 033974 rtn +: 033976 not_greater_than: +0x7fdd 033977 isub temp ,null +0x7fde 033978 nrtn positive +0x7fdf 033979 copy temp ,pdata +0x7fe0 033980 rtn +: 033983 disable_positive: +0x7fe1 033984 force -1 ,null +0x7fe2 033985 rtn +: 033986 enable_positive: +: 033987 disable_zero: +0x7fe3 033988 force 1 ,null +0x7fe4 033989 rtn +: 033990 enable_zero: +0x7fe5 033991 force 0 ,null +0x7fe6 033992 rtn +: 033994 enable_user: +0x7fe7 033995 enable user +0x7fe8 033996 rtn +: 033998 disable_user: +0x7fe9 033999 disable user +0x7fea 034000 rtn +: 034002 enable_user2: +0x7feb 034003 enable user2 +0x7fec 034004 rtn +: 034006 disable_user2: +0x7fed 034007 disable user2 +0x7fee 034008 rtn +: 034010 disable_blank: +0x7fef 034011 setarg 1 +0x7ff0 034012 rtn +: 034014 enable_blank: +0x7ff1 034015 setarg 0 +0x7ff2 034016 rtn +: 034019 reverse_byte: +0x7ff3 034020 copy loopcnt ,pdata +0x7ff4 034021 rtn blank +0x7ff5 034022 copy contr ,pdata +0x7ff6 034023 iadd loopcnt ,pdata +0x7ff7 034024 increase -1 ,pdata +0x7ff8 034025 copy pdata ,contr +: 034026 reverse_loop: +0x7ff9 034027 ifetch 1 ,contr +0x7ffa 034028 increase -2 ,contr +0x7ffb 034029 istore 1 ,contw +0x7ffc 034030 loop reverse_loop +0x7ffd 034031 rtn Index: 1066_OTP_FLASH/output/bt_program23.meta =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_program23.meta (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/bt_program23.meta (working copy) @@ -0,0 +1,34033 @@ +define REVD +//define FPGA +define ROMCODE +define PATCH +define ADC +//define RAM_VERSION +//define CLK6M +//define DEBUG_MALLOC +//define DEBUG_H4LOG_ENABLE +//define DEBUG_LIGHT_STATE +//define E2_LOG +//define LMP_DBG +//define ACL_DEBUG +//define DCDC +define NVRAM +define RELEASE +define SECURE_CONNECTION +define DEBUG_RF_INIT +//define SPI_SIMULATE +//define ROM_RESPIN_OPTIONAL + +define SIMPLE_PAIRING +define COMPILE_RFCOMM +define COMPILE_SHUTTER +define COMPILE_AntiLost +//define COMPILE_IR +define COMPILE_KEYBOARD +define COMPILE_MOUSE +define COMPILE_MODULE +//define COMPILE_AT +//define COMPILE_PRCP +//define COMPILE_USB +//define COMPILE_DONGLE +define COMPILE_LE +define COMPILE_24G +define COMPILE_CAR +define COMPILE_REMOTE_CAR + + +INCLUDE "bt_format" + +org 0x0000 // start from patch ram address start + + call initialize_radio_cont + 1 + setarg 0x0 + store 3,mem_addr_hi + call spid_b_init_flash + call spid_unlock_flash + arg 0xab,temp + call spid_write_flash_common + arg spid_load_flash,regc + call read_first_block + branch load_storage + +spid_b_init_flash: + hjam 0x40,core_spid_ctrl + hjam 0x0,core_spid_delay + hfetch 1,core_gpio_sel1 + set0 0,pdata + set0 1,pdata + set1 3,pdata + hstore 1,core_gpio_sel1 + setarg 0 + store 4,mem_spid_tbuf + rtn + + + + +/******************************************/ +/*********** ROM Start ***************/ +/******************************************/ + +org 0x2000 // start from rom address start +start: + call lpmstate + +soft_reset: + bpatch patch00_0,mem_patch00 + clear_stack + call spi_ncs_gpio_init // 0xff disable spi ncs gpio init + call initialize_radio + call iicd_init_12m + call init_param + call l2cap_init + bpatch patch00_1,mem_patch00 + call rfcomm_init + call init_lmp + call ui_init + call app_init + ncall load_chip_option,wake + bpatch patch00_2,mem_patch00 + call app_lpm_init,wake + call publickey_init + call lpm_recover_clk,wake +main_loop: + bpatch patch00_3,mem_patch00 + call sp_calc_sequence + call sp_calc_sequence_256 + call sp_calc_sequence_256_check + call le_dispatch + bpatch patch00_4,mem_patch00 + call idle_dispatch + call app_process_idle + call inquiry_dispatch + call inquiry_scan_dispatch + call page_scan_dispatch + call connection_dispatch + call lpm_dispatch + call g24_dispatch + branch main_loop + +connection_dispatch: + call connection_incontext + rtnmark0 mark_context + set0 mark_context,mark + call context_save + branch le_disable + +connection_incontext: + bpatch patch00_5,mem_patch00 + call context_search_insniff + nbranch connection_nosniff,zero + call context_load + add rega,coffset_mode,contr + ifetch 1,contr + bbit1 mode_le,le_conn_dispatch + bbit1 mode_master, master_dispatch + branch slave_dispatch +connection_nosniff: + call context_get_next + copy loopcnt,null + rtn zero + call context_load + fetch 1,mem_state + bbit1 state_inpage,master_page + fetch 1,mem_mode + bbit1 mode_master, master_dispatch + branch slave_dispatch + + + +/**************************************/ +/**************idle dispatch*********/ +/**************************************/ + +idle_dispatch: + fetch 1,mem_hci_cmd + rtn blank + beq hci_cmd_inquiry,idle_inquiry + beq hci_cmd_inquiry_cancel,idle_inquiry_cancel + beq hci_cmd_remote_name_req,idle_remote_name_req + beq hci_cmd_create_conn,idle_create_conn + beq hci_cmd_le_create_conn,idle_le_create_conn + call context_search_conn_handle + rtn zero + call context_search_plap + rtn zero +idle_exit: + jam 0,mem_hci_cmd + rtn + +idle_le_create_conn: + jam hci_cmd_le_create_conn,mem_cmd_le_create_conn + jam 0,mem_hci_cmd + rtn + +idle_inquiry: + set1 mark_inquiry_on,mark + set0 mark_inquiry_trainb,mark + jam param_ninquiry,mem_ninqy_index + jam 31,mem_nfreq_index_inq + branch idle_exit + +idle_inquiry_cancel: + set0 mark_inquiry_on,mark + force 0,stop_watch + branch idle_exit + +idle_remote_name_req: + call context_search_plap + rtn zero + force LMP_NAME_REQ,temp + jam 5,mem_nameres_cnt + branch idle_start_page + +idle_create_conn: + bpatch patch00_6,mem_patch00 +idle_create_conn_device: + fetch 6,mem_hci_plap + branch idle_exit,blank + jam RECONNECT_HID,memui_reconnect_mode + //jam HS_INIT_CALL,mem_hs_mode //init as master + jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm + branch idle_create_conn_cont + +idle_create_conn_cont: + force LMP_VERSION_REQ,temp +idle_start_page: + bpatch patch00_7,mem_patch00 + fetch 1,mem_page_mode + branch idle_page_mode_r0,blank + lshift3 pdata,pdata + lshift4 pdata,pdata + increase -1,pdata +idle_page_mode_r0: + store 1,mem_npage + store 1,mem_npage_index + jam 31,mem_nfreq_index_page + set0 mark_page_trainb,mark + call context_new + nbranch idle_page_fail,zero + call get_free_amaddr + store 1,mem_amaddr + storet 1,mem_lmo_opcode2 + fetch 6,mem_hci_plap + store 6,mem_plap + bpatch patch01_0,mem_patch01 + call timer_reinit + force 0,pdata + compare LMP_NAME_REQ,temp,0xff + nsetflag true,state_init_seq,pdata + set1 state_inpage,pdata + store 1,mem_state + jam BT_EVT_RECONN_STARTED,mem_fifo_temp + call ui_ipc_send_event + force 0,pdata + setflag true,smap_name_req,pdata + store 1,mem_state_map + setarg 0 + set1 mode_master,pdata + store 1,mem_mode + enable master + call context_save + disable master + force page_length_timer,queue + fetch 2,mem_page_to + call timer_init + branch idle_exit +idle_page_fail: + bpatch patch01_1,mem_patch01 + fetch 6,mem_hci_plap + store 6,mem_plap + compare LMP_NAME_REQ,temp,0xff + branch idle_name_fail,true + branch idle_exit +idle_name_fail: + arg mem_tmp_buffer,contw + arg 8,loopcnt + call memset0 + jam BT_EVT_RECONN_FAILED,mem_fifo_temp + call ui_ipc_send_event + branch idle_exit + + +/******************************************/ +/************** Inquiry *****************/ +/******************************************/ + +inquiry_dispatch: + rtnmark0 mark_inquiry_on + force inquiry_length_timer,queue + call timer_check + nsetflag blank,mark_inquiry_on,mark + nbranch inquiry_start,blank + rtn + + + +inquiry_start: + bpatch patch01_2,mem_patch01 + fetcht 2,mem_inq_window + force 4,queue + call sniff_check_window + rtn user + call afh_clear + force 0,freq_mode +inquiry_restart: + rtn timeout + set0 mark_fhs_already_good,mark + set0 mark_fhs_eir,mark +inquiry_rx_restart: + add clkn_bt,1,bt_clk + isolate1 mark_inquiry_trainb,mark + setflag true,2,freq_mode + compare 0x00,bt_clk,0x02 /* see if this is even slot */ + nbranch inquiry_receive,true + +inquiry_transmit: + bpatch patch01_3,mem_patch01 + fetch 1,mem_inquiry_transmit + increase 1,pdata + store 1,mem_inquiry_transmit + call fetch_giac + call tx_radio_freq + call fetch_diac + call start_transmitter /* get ready for that id packet */ + call start_tx_native + call send_access_word + call end_of_packet + call inquiry_check_train + branch inquiry_restart + +inquiry_check_train: + bpatch patch01_4,mem_patch01 + fetch 1,mem_nfreq_index_inq + increase -1,pdata + store 1,mem_nfreq_index_inq + rtn positive /* if it's time to incremnt N */ + jam 31,mem_nfreq_index_inq + fetch 1,mem_ninqy_index + increase -1,pdata + store 1,mem_ninqy_index + rtn positive /* if it's time to change train */ + setflip mark_inquiry_trainb,mark + jam param_ninquiry,mem_ninqy_index + rtn + +inquiry_receive: + bpatch patch01_5,mem_patch01 + call fetch_giac + call rx_radio_freq + call fetch_diac + call start_rx_native + call start_receiver /* get ready for that id packet */ + call wait_access_clkn_rt + branch inquiry_sync,sync /* try look for id packet again if not found */ + call inquiry_check_train + branch inquiry_rx_restart +inquiry_sync: + bpatch patch01_6,mem_patch01 + call save_rssi + call scan_mode_whiten + call receive_packet_whitened + set0 mark_rxbuf_inuse,mark + rtnmark0 mark_fhs_already_good +inquiry_receive_rtn: + bpatch patch01_7,mem_patch01 +inquiry_receive_eir_rtn: + fetch 1,mem_inquiry_rcv + increase 1,pdata + store 1,mem_inquiry_rcv + rtn + +/******************************************/ +/************** Master Dispatch *************/ +/******************************************/ + + + +master_page: + bpatch patch02_0,mem_patch02 + enable master + enable clknt + fetch 2,mem_page_interval + branch master_page_no_interval,blank + force page_interval_timer,queue + call timer_check + nrtn blank +master_page_no_interval: + bpatch patch02_1,mem_patch02 + fetcht 2,mem_page_window + force 40,queue + call sniff_check_window + branch page_exit,user + force page_length_timer,queue + call timer_check + nbranch page_start,blank + fetch 1,mem_state_map + bbit1 smap_name_req,master_npage_timeout + branch master_page_timeout +master_npage_timeout: + arg mem_tmp_buffer,contw + arg 8,loopcnt + call memset0 +master_page_timeout: + bpatch patch02_2,mem_patch02 + jam 0,mem_state + call init_lmp_work + jam 0,memui_reconnect_mode + jam BT_EVT_RECONN_PAGE_TIMEOUT,mem_fifo_temp + call ui_ipc_send_event + branch page_exit + +page_start: + bpatch patch02_3,mem_patch02 + force 0,timeup + until clkn_rt,meet + fetch 1,mem_page_clk + increase -1,pdata + ixor clkn_bt,pdata + compare 0,pdata,3 + nbranch page_start,true + deposit am_addr + store 1,mem_fhs_am_addr + force 0,N_tx_slot + force 0,freq_mode + +page_restart: + bpatch patch02_4,mem_patch02 + branch page_exit,timeout + call fetch_page_bt_adr + arg param_rf_setup, timeup + until clkn_rt,meet /* wait for the start_receiver time against native real clk */ +page_rx_restart: + bpatch patch02_5,mem_patch02 + fetch 4,mem_page_clk /* deposit clk_estimate */ + iforce bt_clk + increase 1,pdata + store 4,mem_page_clk + isolate1 mark_page_trainb,mark + setflag true,2,freq_mode + compare 0x00,bt_clk,0x02 /* see if this is even slot */ + nbranch page_receive,true + fetch 1, mem_page_transmit + increase 1,pdata + store 1, mem_page_transmit + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + call start_tx_native + call send_access_word + call end_of_packet + call page_check_train + branch page_restart +page_exit: + bpatch patch02_6,mem_patch02 + disable master + fetch 2,mem_page_interval + rtn blank + force page_interval_timer,queue + branch timer_init + +page_check_train: + bpatch patch02_7,mem_patch02 + fetch 1,mem_nfreq_index_page + increase -1,pdata + store 1,mem_nfreq_index_page + rtn positive + jam 31,mem_nfreq_index_page + fetch 1,mem_npage_index + increase -1,pdata /* increment N */ + store 1,mem_npage_index + rtn positive /* if it's time to change train */ + setflip mark_page_trainb,mark /* change train */ + fetch 1,mem_npage + store 1,mem_npage_index + rtn + +page_receive: + bpatch patch03_0,mem_patch03 + call rx_radio_freq + call start_rx_native + call start_receiver /* get ready for that id packet */ + call wait_access_clkn_rt /* try id look for id packet again */ + branch page_sync,sync /* restart if didn't receive anything */ + call page_check_train + branch page_rx_restart +page_sync: + call end_of_packet + fetch 1, mem_page_rcv + increase 1,pdata + store 1, mem_page_rcv + force 0,stop_watch + fetch 4,mem_page_clk +page_send_fhs: + bpatch patch03_1,mem_patch03 + call rf_setup_time_master_slot + call fetch_page_bt_adr + increase 1,N_tx_slot +page_send_fhs_continue: + and_into 0x1fd,bt_clk + and_into 0x1fc,freq_mode /* master response = x00, even_train settin must remain the same */ + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + call start_tx_native + call send_access_word + deposit clkn_bt + store 4,mem_clkn_bt + force 0,am_addr + force type_fhs,type + call scan_mode_whiten + call transmit_packet_whitened +page_wait_fhs_reply: + bpatch patch03_2,mem_patch03 + call rf_setup_time_slave_slot + or_into 0x02,bt_clk + and_into 0x1fc,freq_mode /* master response sequence = x00, even train setting must be preserved */ + call rx_radio_freq + call start_rx_native + call start_receiver /* get ready for that id packet */ + call wait_access_clkn_rt /* look for that reply */ + call end_of_packet,sync /* id reply is enough */ + branch page_wait_fhs_reply_ok,sync /* no reply then send fhs again */ + fetch 1,mem_fhs_wait_counter + branch page_restart,blank + increase -1,pdata + store 1,mem_fhs_wait_counter + branch page_send_fhs + +page_wait_fhs_reply_ok: + bpatch patch03_3,mem_patch03 + fetch 1, mem_page_rcv_fhs + increase 1,pdata + store 1, mem_page_rcv_fhs + call prepare_newconn +master_newconn_loop: + call master_newconn_once + branch newconn_poll_responded,sync + call new_conn_timeout + nbranch master_newconn_loop,blank + branch page_restart + +newconn_poll_responded: + bpatch patch03_4,mem_patch03 + fetch 1,mem_state + set0 state_inpage,pdata + store 1,mem_state + call newconn_init + disable master + rtn + + +master_dispatch: + bpatch patch03_5,mem_patch03 + enable master + enable clknt + call role_switch_master + rtn user + call check_bt_disabled + call rf_setup_time_master_slot + add clkn_bt,1,bt_clk + call fetch_self_bt_adr + force 0x03,freq_mode + call scheduler_tx_l2cap_pkt + call prepare_tx + call tx_radio_freq + call start_transmitter + call start_tx_native + call send_access_word + call transmit_packet +master_loop: + bpatch patch03_6,mem_patch03 + call parse_lmp + call master_conn_recv_packet + nbranch master_notmatch,match + call supervision_flush + call parse_l2cap + fetch 1,mem_master_rcvcnt + increase 1,pdata + store 1,mem_master_rcvcnt +master_notmatch: + bpatch patch03_7,mem_patch03 + call scheduler_process + call check_master_disconnect + nrtn master /* disconnected */ + call check_attempt + nbranch master_attempt,blank +master_exit: + disable master + rtn + +master_attempt: + call prepare_tx + call master_conn_send_packet + branch master_loop + + +check_master_disconnect: + branch check_master_match,match + call supervision_update + branch master_disconnect,positive +check_master_match: + call check_disconnect_timeout + nbranch master_disconnect,user + fetch 1,mem_state_map + rtnbit0 smap_name_req + rtnbit1 smap_name_res + fetch 1,mem_op + rtnbit1 op_disconn + call conn_timer_expired + nrtn blank + fetch 1,mem_nameres_cnt + increase -1,pdata + store 1,mem_nameres_cnt + nrtn blank + branch lmp_disconnect + +master_disconnect: + bpatch patch04_0,mem_patch04 + call quit_connection + disable master + fetch 1,mem_state_map + bbit1 smap_name_req,master_name_disconnect + rtn + +master_name_disconnect: + fetch 1,mem_state_map + rtnbit1 smap_name_res +master_name_error: + arg mem_tmp_buffer,contw + arg 8,loopcnt + branch memset0 + +check_disconnect_timeout: + bpatch patch04_1,mem_patch04 + enable user + fetch 1,mem_op + rtnbit0 op_disconn + call conn_timer_expired + nrtn blank + branch disable_user + +conn_timer_expired: + fetch 1,mem_conn_timer + increase -1,pdata + store 1,mem_conn_timer + rtn + +linkkey_ready: + bpatch patch04_2,mem_patch04 + fetch 1,mem_state + bbit1 state_linkkey,linkkey_set + fetch 1,mem_pairing_auth + branch linkkey_set,blank + jam DEFALT_PAIRING_AUTH,mem_pairing_auth + jam BT_EVT_LINKKEY_GENERATE,mem_fifo_temp + call ui_ipc_send_event + branch linkkey_set +linkkey_set: + bpatch patch04_3,mem_patch04 + call context_traverse_linkkey + fetch 1,mem_state + set1 state_linkkey,pdata + store 1,mem_state + jam 1,mem_link_key_exists + fetch 1,mem_conn_sm + bne CONN_SM_PAIRING,linkkey_set_continue +linkkey_set_continue: + rtn + +generate_linkkey_continue: + jam PAIRING_AUTH,mem_pairing_auth +clear_linkstate: + fetch 1,mem_state + set0 state_linkkey,pdata + store 1,mem_state + rtn + + + /* rtn user if switch */ +role_switch_check: + bpatch patch04_4,mem_patch04 + disable user + fetch 2,mem_tsniff + arg 0xffff,temp + isub temp,null + nrtn zero + fetch 4,mem_sniff_anchor + branch role_switch_clkn,clknt + isub clke_bt,pdata + branch role_switch_clke +role_switch_clkn: + isub clkn_bt,pdata +role_switch_clke: + sub pdata,4,null + nrtn positive + force 0,pdata + store 2,mem_tsniff + branch enable_user + + + /* pdata: switch instant, set tsniff=0 for special sniff */ +role_switch_prepare: + copy pdata,temp + bpatch patch04_5,mem_patch04 + storet 4,mem_sniff_anchor +role_switch_prepare0: + jam SWITCH_FLAG_ACCEPT,mem_switch_flag + setarg 0xffff + store 2,mem_tsniff + jam 1,mem_sniff_attempt + rtn + + +role_switch_master: + bpatch patch04_6,mem_patch04 + call role_switch_check + nrtn user + disable user + jam param_newconnto,mem_newconnto_counter + set0 mark_fhs_already_good,mark +roles_waitfhs_loop: + call rf_setup_time_master_slot + call master_recv_packet + bmark1 mark_fhs_already_good,roles_replyto_fhs + call new_conn_timeout + nbranch roles_waitfhs_loop,blank +role_switch_fail_master: + bpatch patch04_7,mem_patch04 + disable user + deposit clkn_bt + store 4,mem_next_btclk + enable clknt + enable master + jam BT_EVT_SWITCH_FAIL_MASTER,mem_fifo_temp + branch ui_ipc_send_event + +roles_replyto_fhs: + bpatch patch05_0,mem_patch05 + call rf_setup_time_slave_slot + arg type_id,type + call master_send_packet + disable clknt + disable master + call apply_switch_clke + call prepare_newconn +roles_newconns_loop: + bpatch patch05_1,mem_patch05 + call slave_newconn_once + branch roles_newconns_responded,match + call new_conn_timeout + nbranch roles_newconns_loop,blank + branch role_switch_fail_master +roles_newconns_responded: + fetch 1,mem_mode + set0 mode_master,pdata + store 1,mem_mode + call supervision_flush + call calc_clke_offset + enable user + jam BT_EVT_SWITCH_SUCCESS_MASTER,mem_fifo_temp + branch ui_ipc_send_event + + + + +context_load: + bpatch patch05_2,mem_patch05 + set1 mark_context,mark + deposit rega + store 2,mem_context_ptr + force context_size,loopcnt + arg mem_le_state,contw + add rega,coffset_mode,contr + ifetch 1,contr + copy rega,contr + bbit1 mode_le,memcpy + arg mem_state,contw + call memcpy + disable attempt + fetch 1,mem_amaddr + iforce am_addr + jam 1,mem_current_sniff_attempt + branch context_load_master,master + jam 1,mem_current_sniff_attempt +context_load_master: + fetch 1,mem_state + rtnbit0 state_insniff + fetch 1,mem_sniff_attempt + store 1,mem_current_sniff_attempt + fetch 1,mem_sniff_timeout + store 1,mem_current_sniff_timeout + rtn + +context_save: + bpatch patch05_3,mem_patch05 + fetch 2,mem_context_ptr + iforce contw + force context_size,loopcnt + arg mem_le_state,contr + branch memcpy,le + arg mem_state,contr + branch memcpy + + + +context_get_next: + arg context_num,loopcnt + fetcht 1,mem_current_context +context_get_next_loop: + increase 1,temp + compare context_num,temp,0xff + nbranch context_get_next_cont,true + arg 0,temp +context_get_next_cont: + storet 1,mem_current_context + mul32 temp,context_size,pdata + arg mem_context,rega + iadd rega,rega + ifetch 1,rega + bbit1 state_insniff,context_get_next_sniff + rtnbit1 state_inconn + rtnbit1 state_inpage +context_get_next_sniff: + loop context_get_next_loop + rtn + +context_new: + bpatch patch05_4,mem_patch05 + arg context_search_empty,regc + call context_search + nrtn zero // all occupied + deposit rega + store 2,mem_context_ptr + force 0,null + rtn + + //return zero if anyone's wack is 1. + //return nzero if all wack is 0 +context_check_all_wack: + call check_esco_amaddr + branch context_check_esco_wack,true + fetch 2,mem_context_ptr + add pdata,coffset_arq,contw + fetch 1,mem_arq + istore 1,contw + arg context_check_a_wack,regc + branch context_search + +context_check_esco_wack: + fetch 1,mem_arq + isolate1 wack,pdata + branch context_esco_wack,true + force 1,null + rtn +context_esco_wack: + force 0,null + rtn + + //rtn nzero if idle(no conn) +context_check_idle: + arg context_check_inconn,regc + branch context_search + +context_traverse_linkkey: + fetcht 2,mem_context_ptr + arg context_traverse_clearkey,regc + branch context_search + + + /* return zero if conn handle is found */ +context_search_conn_handle: + fetcht 1,mem_hci_conn_handle +context_search_conn_handle2: + arg context_search_handle,regc + branch context_search + /* return zero if plap is found */ +context_search_plap: + bpatch patch05_5,mem_patch05 + fetcht 6,mem_hci_plap +context_search_plap2: + arg context_search_lap,regc + branch context_search + /* return zero if sniff anchor is meet and rega pointers to context */ +context_search_insniff: + arg context_search_sniff,regc + branch context_search + /* return zero if sniff window is in content with current transaction */ +context_search_sniff_window: + arg context_search_window,regc +context_search: + bpatch patch05_6,mem_patch05 + arg mem_context,rega + arg context_num,loopcnt +context_search_loop: + ifetch 1,rega + copy regc,pc +context_search_next: + increase context_size,rega + loop context_search_loop + force 1,null + rtn + +context_search_empty: + bbit1 state_inconn,context_search_next + bbit1 state_inpage,context_search_next + force 0,null + rtn + +context_search_lap: + bbit1 state_inpage,context_search_lap_cont + bbit0 state_inconn,context_search_next +context_search_lap_cont: + add rega,coffset_plap,contr + ifetch 6,contr + isub temp,null + rtn zero + branch context_search_next + +context_search_handle: + bbit0 state_inconn,context_search_next + add rega,coffset_conn_handle,contr + ifetch 1,contr + isub temp,null + rtn zero + branch context_search_next + +context_search_sniff: + bbit0 state_insniff,context_search_next +context_search_sniff_loop: + call context_get_anchor + call sign_pdata_temp + isub temp,pdata + increase 1,pdata + branch context_search_sniff_miss,positive + copy contr,regb + store 9,mem_temp + fetch 1,mem_le_sc_calc + nbranch context_search_sniff_sc,blank + fetch 9,mem_temp + copy regb,contr + increase 5,pdata + branch context_search_meet1 +context_search_sniff_sc: + fetch 9,mem_temp + copy regb,contr + increase 20,pdata +context_search_meet1: + nbranch context_search_next,positive +context_search_meet: + copy temp,bt_clk + call context_next_anchor + force 0,null + rtn + + +context_search_sniff_miss: + iforce regb + add rega,coffset_tsniff,contr + ifetch 2,contr + branch context_search_meet,blank + call context_next_anchor + branch context_search_sniff_loop + +sign_pdata_temp: + rshift16 pdata,timeup + rshift8 timeup,timeup + branch sign_pdata_temp_p0,zero + compare 0xf,timeup,0xf + nrtn true + rshift16 temp,timeup + rshift8 timeup,timeup + nrtn zero + set1 28,temp + rtn +sign_pdata_temp_p0: + rshift16 temp,timeup + rshift8 timeup,timeup + compare 0xf,timeup,0xf + nrtn true + set1 28,pdata + rtn + +context_check_inconn: + bbit0 state_inconn,context_search_next + force 0,null // found + rtn + +context_check_a_wack: + bbit0 state_inconn,context_search_next + add rega,coffset_mode,contr + ifetch 1,contr + bbit1 mode_le,context_search_next + add rega,coffset_arq,contr + ifetch 1,contr + bbit0 wack,context_search_next + force 0,null // found + rtn + +context_get_anchor: + add rega,coffset_mode,contr + ifetcht 1,contr + deposit clkn_bt + isolate1 mode_master,temp + add rega,coffset_sniff_anchor,contr + ifetcht 4,contr + rtn true + add rega,coffset_clk_offset,contr + ifetch 6,contr + call calc_clke2 + deposit clke_bt + rtn + +context_next_anchor: + add rega,coffset_tsniff,contr + add rega,coffset_sniff_anchor,contw + ifetch 2,contr + iadd temp,timeup /* wrap to 28 bits */ + deposit timeup + istore 4,contw + branch le_context_nexthop + + +context_search_window: + bbit0 state_insniff,context_search_next + call context_get_anchor + iadd stop_watch,pdata + iadd stop_watch,pdata + iadd queue,pdata + isub temp,null + nbranch context_search_next,positive + force 0,null + rtn + +context_traverse_clearkey: + bbit0 state_inconn,context_search_next + deposit temp + isub rega,null + branch context_search_next,null + add rega,coffset_mode,contr + ifetch 1,contr + bbit1 mode_le,context_search_next + ifetch 1,rega + set0 state_linkkey,pdata + istore 1,rega + branch context_search_next + + +master_conn_send_packet: + bpatch patch05_7,mem_patch05 + call rf_setup_time_master_slot +master_send_packet: + add clkn_bt,1,bt_clk /* master start to use native clock */ + call fetch_self_bt_adr + force 0x03,freq_mode /* we are in connection!! */ + call tx_radio_freq + call start_transmitter + call start_tx_native + call send_access_word + branch transmit_packet + +master_conn_recv_packet: + bpatch patch06_0,mem_patch06 + call rf_setup_time_slave_slot +master_recv_packet: + add clkn_bt,1,bt_clk /* master start to use native clock */ + call fetch_self_bt_adr + force 0x03,freq_mode /* we are in connection!! */ + call rx_radio_freq + call init_rx_packet_flags + call prep_crypt + call start_rx_native /* start listening at start_rx time */ + call start_receiver +master_rx_conn_finish_packet: + call wait_access_clkn_rt /* master use native clock */ + nrtn sync + call save_rssi + branch receive_packet + + + +master_newconn_once: + bpatch patch06_1,mem_patch06 + fetch 1,mem_fhs_am_addr + iforce am_addr //review + force type_poll,type + call master_conn_send_packet + branch master_conn_recv_packet + + + + + + +/******************************************/ +/************* Inquiry Scan ***************/ +/******************************************/ + +inquiry_scan_dispatch: + fetch 1,mem_scan_mode + rtnbit0 inq_scan_mode + force iscan_interval_timer,queue + call timer_check + nrtn blank + fetcht 2,mem_iscan_window + force 4,queue + call sniff_check_window + rtn user + call inquiry_scan_start + force iscan_interval_timer,queue + fetch 2,mem_iscan_interval + nbranch timer_init,sync + random pdata /* inquiry scan backoff */ + iand mask3ff,pdata + branch timer_init + + +inquiry_scan_start: + bpatch patch06_2,mem_patch06 + jam 0,mem_fhs_am_addr + disable clknt + disable attempt + call afh_clear + and clkn_bt,0x1fc,bt_clk /* freeze the clock, set bit[1] 0, this is version 1.1 */ + force 0x01,freq_mode /* slave in inquiry scan, kind of same as inquriy_response, this is version 1.1 */ + call fetch_giac + call rx_radio_freq + setflip mark_inquiry_state,mark + fetch 1,mem_inquiryscan_waitcnt + increase 1,pdata + store 1,mem_inquiryscan_waitcnt + call fetch_diac + call start_receiver /* get ready for that id packet */ + call wait_access_forever /* until there is timeout, or matched (true) */ + nrtn sync + bpatch patch06_3,mem_patch06 + force 0,stop_watch + call shutdown_radio /* must have heard */ + fetch 1,mem_inquiryscan_rcvcnt + increase 1,pdata + store 1,mem_inquiryscan_rcvcnt + call fetch_giac + call rf_setup_time_slave_slot + or_into 0x002,bt_clk /* put clk(1) to 1 */ + force 0x01,freq_mode /* slave in inquriy and page, response only */ + call tx_radio_freq + call fetch_diac + call start_transmitter /* get ready for that id packet */ + call start_tx_external + deposit clkn_bt + store 4,mem_clkn_bt + call send_access_word + force type_fhs,type + force 0,am_addr /* put 0 into am_addr field for fhs */ + call scan_mode_whiten + call transmit_packet_whitened + call send_eir + and_into 0x1fd,bt_clk /* put clk(1) back to 0 */ + increase 1,N_tx_slot + rtn + +send_eir: + bpatch patch06_4,mem_patch06 + fetch 1,mem_eir_enable + rtn blank + arg mem_eir,contw + fetch 1,mem_local_name_length + copy pdata,loopcnt + increase 1,pdata + istore 1,contw + copy contw,temp + increase 1,pdata + store 2,mem_tx_len + copy temp,contw + setarg 0x09 //type:name + istore 1,contw + arg mem_local_name,contr + call memcpy //name + + arg mem_all_uuid_128bits,regc + arg 4,loopcnt + call get_all_uuid + arg mem_all_uuid_16bits,regc + arg 1,loopcnt + call get_all_uuid + + force type_dm3,type /* DM3 */ + jam 2,mem_tx_lch + setarg mem_eir + store 2,mem_txptr + call rf_setup_time_slave_slot + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + call start_tx_external + call send_access_word + call scan_mode_whiten + call transmit_packet_whitened + rtn + + +get_all_uuid: + copy contw,temp + copy regc,contr + ifetch 1,contr + rtn blank +lshift_loop: + lshift pdata,pdata + loop lshift_loop + copy pdata,rega + increase 2,pdata + copy pdata,queue + fetch 2,mem_tx_len + iadd queue,pdata + store 2,mem_tx_len + copy temp,contw + copy rega,pdata + increase 1,pdata + istore 1,contw + copy regc,contr + ifetch 1,contr + ifetch 1,contr //fetch type + istore 1,contw + copy rega,loopcnt + branch memcpy //copy uuid + +/******************************************/ +/******** Slave dispatch ***********/ +/******************************************/ + +page_scan_dispatch: + fetch 1,mem_scan_mode + rtnbit0 page_scan_mode + force pscan_interval_timer,queue + call timer_check + nrtn blank + fetcht 2,mem_pscan_window + force 40,queue + call sniff_check_window + rtn user + force 0,am_addr + jam param_pagerespto,mem_fhs_wait_counter + set0 mark_fhs_already_good,mark + call page_scan_start + force pscan_interval_timer,queue + fetch 2,mem_pscan_interval + branch timer_init + + +page_scan_start: + bpatch patch06_5,mem_patch06 + disable clknt + call afh_clear + fetch 1,mem_pagescan_waitcnt + increase 1,pdata + store 1,mem_pagescan_waitcnt + force 0,N_tx_slot + call fetch_self_bt_adr + add clkn_bt,1,bt_clk /* freeze the clock on native clock until scan window is up */ + force 0x02, freq_mode /* slave in inquiry and page, not response */ + bpatch patch06_6,mem_patch06 + call rx_radio_freq + call start_receiver /* wait for that id packet from master */ + call wait_access_forever + nrtn sync /* pscan window timeout occured, back to dispatch */ + call shutdown_radio /* got the id packet */ + fetch 1,mem_pagescan_rcvcnt + increase 1,pdata + store 1,mem_pagescan_rcvcnt + force 0,stop_watch + call rf_setup_time_slave_slot + or_into 0x002,bt_clk /* put clk(1) to 1 */ + force 0x01,freq_mode /* slave in inquriy and page, response only */ + call tx_radio_freq + call start_transmitter + call start_tx_external + call send_access_word + call end_of_packet + force 0,am_addr + arg param_rf_setup, timeup + until clke_rt,meet + or_into 0x03,clke_bt + and_into 0x1fd,bt_clk +page_scan_wait_fhs_restart: + bpatch patch06_7,mem_patch06 + increase 1,N_tx_slot + call rx_radio_freq + call start_receiver + call wait_access_mhalfbnd + nbranch page_scan_wait_fhs_again,sync /* go back if didn't find access code */ + call scan_mode_whiten + call receive_packet_whitened + bmark1 mark_fhs_already_good,page_scan_reply_to_fhs +page_scan_wait_fhs_again: + bpatch patch07_0,mem_patch07 + fetch 1,mem_fhs_wait_counter + rtn blank + increase -1,pdata + store 1,mem_fhs_wait_counter + call rf_setup_time_master_slot /* set up expiration time */ + branch page_scan_wait_fhs_restart + + +page_scan_reply_to_fhs: + bpatch patch07_1,mem_patch07 + set0 1,clke_bt + set1 0,clke_bt + fetch 1,mem_pagescan_rcvfhscnt + increase 1,pdata + store 1,mem_pagescan_rcvfhscnt + call rf_setup_time_slave_slot + or_into 0x02,bt_clk + call tx_radio_freq + call start_transmitter + call start_tx_external + call send_access_word + call end_of_packet +slave_apply_clke_bt: + compare 0x03,clke_bt,0x03 + branch slave_apply_clke_bt_now,true + until null,mhalfbnd + branch slave_apply_clke_bt +slave_apply_clke_bt_now: + fetch 4,mem_clke_bt + or_into 0x03,pdata + icopy clke_bt + +start_slave_connection: + bpatch patch07_2,mem_patch07 + fetch 6,extm_lap + store 6,mem_plap + call prepare_newconn +slave_newconn_loop: + call slave_newconn_once + branch sconn_successful,match /* we were talked to */ + call new_conn_timeout + nbranch slave_newconn_loop,blank + rtn + + +sconn_successful: + bpatch patch07_3,mem_patch07 + call newconn_init + call context_new + nrtn zero + jam 0,mem_mode + call calc_clke_offset + branch context_save + + + + +slave_dispatch: + bpatch patch07_4,mem_patch07 + call calc_clke + call role_switch_slave + rtn user +slave_loop: + bpatch patch07_5,mem_patch07 + call check_bt_disabled + call scheduler_process + call slave_conn_recv_packet /* go listen for a packet */ + nbranch slave_notmatch,match + call supervision_flush + call scheduler_tx_l2cap_pkt + call prepare_tx + call slave_conn_send_packet + call parse_l2cap + call parse_lmp + fetch 1,mem_slave_rcvcnt + increase 1,pdata + store 1,mem_slave_rcvcnt + call calc_clke_offset +slave_notmatch: + bpatch patch07_6,mem_patch07 + call lpm_set_mult + call supervision_update + branch slave_disconnect,positive + call check_disconnect_timeout + nbranch slave_disconnect,user + call check_attempt + nbranch slave_loop,blank + rtn + +slave_disconnect: + bpatch patch07_7,mem_patch07 + jam 0,mem_tester_emulate + jam 0,mem_debug_config + call quit_connection + set0 mark_testmode,mark + call test_enable_white + fetch 1,mem_state + rtn + + +role_switch_slave: + bpatch patch08_0,mem_patch08 + call role_switch_check + nrtn user + copy am_addr,temp + call get_free_amaddr + store 1,mem_fhs_am_addr + copy temp,am_addr + jam param_newconnto,mem_newconnto_counter +roles_sendfhs_loop: + bpatch patch08_1,mem_patch08 + call rf_setup_time_master_slot + force type_fhs,type + call slave_send_access + deposit clkn_bt + store 4,mem_clkn_bt + call transmit_packet + call rf_setup_time_slave_slot + enable user3 + call slave_receive_access + branch roles_got_fhs_reply,sync + call shutdown_radio + call new_conn_timeout + nbranch roles_sendfhs_loop,blank + rtnmark0 mark_accept_switch + jam LMP_SLOT_OFFSET,mem_lmo_opcode2 + set1 mark_switch_initiated,mark + rtn +roles_got_fhs_reply: + enable clknt + call prepare_newconn + call afh_clear +roles_newconn_loop: + bpatch patch08_2,mem_patch08 + call master_newconn_once + branch roles_newconn_responded,sync + call new_conn_timeout + nbranch roles_newconn_loop,blank + disable clknt + deposit clke_bt + store 4,mem_next_btclk + rtn +roles_newconn_responded: + enable master + bmark0 mark_accept_switch,roles_newconn_nolmp + set0 mark_accept_switch,mark + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_HOST_CONNECTION_REQ,mem_lmi_opcode2 + call tid_set_reply +roles_newconn_nolmp: + deposit am_addr + store 1,mem_amaddr + force 0,pdata + store 6,mem_clk_offset + fetch 1,mem_mode + set1 mode_master,pdata + store 1,mem_mode + call supervision_flush + disable master + enable user + rtn + + + +init_rx_packet_flags: + bpatch patch08_3,mem_patch08 + disable match + set0 mark_loopback,mark + set0 mark_am_addr_broadcast,mark /* initialize slave flags */ + set0 mark_longpacket,mark + set0 mark_old_packet,mark + fetch 1,mem_arq /* mem_arq + am_addr */ + set0 arqnx,pdata + set1 flowx,pdata + store 1,mem_arq + rtn + +prepare_newconn: + bpatch patch08_4,mem_patch08 + jam param_newconnto,mem_newconnto_counter + jam param_newconn_arq,mem_arq + fetch 2,mem_rx_window_init + store 2,mem_rx_window + deposit clkn_bt + store 4,mem_next_btclk + rtn clknt + deposit clke_bt + store 4,mem_next_btclk + rtn + +newconn_init: + bpatch patch08_5,mem_patch08 + call init_lmp_reinit + call new_conn_handle + store 1,mem_conn_handle + setarg 0 + store 2,mem_l2cap_rxbuff1_len + setarg param_supervision_to + store 2,mem_supervision_to + fetch 1,mem_state + set1 state_inconn,pdata + store 1,mem_state + jam 0,mem_op + jam 0,mem_state_map + jam 0,mem_lpm_current_mult + branch supervision_flush + + +clear_linkkey: + bpatch patch08_6,mem_patch08 + force 0,pdata + store 8,mem_link_key + istore 8,contw + call clear_linkstate + branch context_traverse_linkkey + +new_conn_timeout: + fetch 1,mem_newconnto_counter + increase -1,pdata + store 1,mem_newconnto_counter + rtn + +new_conn_handle: + fetch 1,mem_handle_num + increase 1,pdata + store 1,mem_handle_num + rtn + + +quit_connection: + bpatch patch08_7,mem_patch08 + fetch 1,mem_hci_cmd + beq hci_cmd_remote_name_req,quit_connection_name + fetch 1,mem_lmp_to_send + bne LMP_NAME_REQ,quit_connection_cont +quit_connection_name: + call cmd_check_plap + nbranch quit_connection_cont,zero + call master_name_error + jam 0,mem_hci_cmd +quit_connection_cont: + bpatch patch09_0,mem_patch09 + call app_disconn_reason_collect_bt + call sniff_exit + jam BT_EVT_BB_DISCONNECTED,mem_fifo_temp + call ui_ipc_send_event + call init_lmp_work + call l2cap_init_work + call sp_initialize + fetch 1,mem_state + set0 state_inconn + store 1,mem_state + jam 0,memui_reconnect_mode + + fetch 1,mem_state_map + compare 0x0,pdata,0xc0 + branch quit_connection_not_clear_mark,true + set0 mark_rxbuf_inuse,mark +quit_connection_not_clear_mark: + fetch 1,mem_arq + bbit0 wack,quit_connection_not_clear_tx +quit_connection_not_clear_tx: + fetch 1,mem_op + rtnbit0 op_txl2cap + set0 mark_tx_l2cap,mark + rtn + +slave_newconn_once: + bpatch patch09_1,mem_patch09 + fetch 1,extm_newconn_am_addr + rtn blank + icopy am_addr + call slave_conn_recv_packet + nrtn match + force type_null,type + call slave_conn_send_packet + deposit am_addr + store 1,mem_amaddr /* now the new am_addr is official */ + force 0,pdata + store 1,extm_newconn_am_addr + rtn + + +/******************************************/ +/******** Time consuming task ***********/ +/******************************************/ +prepare_tx: + bpatch patch09_2,mem_patch09 + fetch 1,mem_state + bbit0 state_insco,prepare_tx_not_sco + force type_hv3,type + bmark0 mark_esco,prepare_tx_not_esco + call check_esco_amaddr + nbranch prepare_tx_not_sco,true + branch prepare_tx_not_sco,attempt + call set_wait_ack /* send esco only at the first attempt */ + setarg 2 /* esco only has 1 retry */ + store 2,mem_retransmission_cnt + rtn +prepare_tx_not_esco: + nrtn attempt /* send sco only at the first attempt */ +prepare_tx_not_sco: + bpatch patch09_3,mem_patch09 + call context_check_all_wack //abandon mark_retransmit, use context_check_all_wack instead. + nbranch prepare_tx_no_retransmit,zero + fetch 1,mem_arq + bbit0 wack,prepare_tx_pollnull /* other wack, tx buffer in use, but not me */ +prepare_tx_retransmit: + bmark1 mark_loopback,prepare_tx_loopback + fetch 1,mem_debug_config + bbit1 debug_tx_pattern,prepare_tx_txpat + fetch 2,mem_retransmission_cnt + increase -1,pdata + store 2,mem_retransmission_cnt + branch prepare_tx_nomore_retransmit,blank + fetch 1,mem_last_type + iforce type + rtn + +prepare_tx_nomore_retransmit: + bpatch patch09_4,mem_patch09 + call clear_got_tx +prepare_tx_no_retransmit: + call check_esco_amaddr + branch prepare_tx_pollnull,true + call send_lmp + branch prepare_tx_sendlmp,user + fetch 1,mem_op + bbit1 op_txl2cap,prepare_tx_sendl2cap + bmark1 mark_loopback,prepare_tx_loopback + fetch 1,mem_debug_config + bbit1 debug_tx_pattern,prepare_tx_txpat +prepare_tx_pollnull: + force type_poll,type /* POLL for master */ + rtn master + force type_null,type /* default is NULL */ + rtn +prepare_tx_loopback: + bpatch patch09_5,mem_patch09 + fetch 1,mem_rx_type + iforce type + rtnne 1 + force type_null,type + rtn +prepare_tx_txpat: + fetch 1,test_mode_packet_type + and pdata,0xf,type + set1 mark_loopback,mark + rtn +prepare_tx_sendlmp: + force type_lmp,type + branch set_wait_ack +prepare_tx_sendl2cap: + call tx_l2cap_type + +set_wait_ack: + bpatch patch09_6,mem_patch09 + fetcht 1,mem_arq + set1 wack,temp + storet 1,mem_arq + deposit type + store 1,mem_last_type + setarg 0xffff + store 2,mem_retransmission_cnt + rtn + +tx_l2cap_type: + bpatch patch09_7,mem_patch09 + fetch 1,mem_state_map + isolate1 smap_edr,pdata + fetch 2,mem_tx_len + branch tx_l2cap_type_edr,true + force type_dm1,type /* DM1 */ + sub pdata,17,null + rtn positive + force type_dh1,type /* DH1 */ + sub pdata,27,null + rtn positive + force type_dm3,type /* DM3 */ + sub pdata,121,null + rtn positive + force type_dh3,type /* DH3 */ + sub pdata,183,null + rtn positive + force type_dm5,type /* DM5 */ + sub pdata,224,null + rtn positive + force type_dh5,type /* DH5 */ + rtn +tx_l2cap_type_edr: + force type_dm1,type + sub pdata,17,null + rtn positive + force type_dh1,type /*2-DH1*/ + sub pdata,54,null + rtn positive + force type_dm3,type /*2-DH3*/ + arg 367,temp + isub temp,null + nrtn positive + force type_dm5,type /*2-DH5*/ + arg 679,temp + isub temp,null + nrtn positive + force type_dh5,type /*3-DH5*/ + rtn + + +/******************************************/ +/*********** Receive Packet *************/ +/******************************************/ + + + +slave_receive_master_slot: + fetch 1,mem_state + bbit0 state_insniff,slave_receive_notsniff + fetch 2,mem_tsniff + branch slave_receive_notsniff,blank /* role switch */ + nbranch slave_receive_sniff,attempt +slave_receive_notsniff: + call rf_setup_time_master_slot +slave_receive_access: + add clke_bt,1,bt_clk +slave_receive_sniff: + enable swfine + fetch 2,mem_rx_window + rshift pdata,pdata + arg param_pll_setup,temp + iadd temp,pdata + call ahead_window + call fetch_extm_bt_adr + force 0x03,freq_mode /* connection hop */ + call rx_radio_freq + call init_rx_packet_flags + call prep_crypt + bpatch patch0a_0,mem_patch0a + fetch 2,mem_rx_window + rshift pdata,pdata + call ahead_window + call start_receiver + enable decode_fec0 + fetch 2,mem_rx_window + arg param_clke_cal,temp + iadd temp,stop_watch + correlate null,timeout + copy clke,temp + storet 6,mem_sync_clke + disable decode_fec0 + nrtn sync + arg param_clke_cal,clke_rt + copy bt_clk,clke_bt + branch lpm_adjust_clk,wake + rtn + + +slave_conn_recv_packet: + bpatch patch0a_1,mem_patch0a + call slave_receive_master_slot + nbranch shutdown_radio,sync + call save_rssi + bmark0 mark_testmode,receive_packet + fetch 2,mem_tst_pktcnt_sync + increase 1,pdata + store 2,mem_tst_pktcnt_sync +receive_packet: + rshift bt_clk,temp + or temp,0x40,white_init +receive_packet_whitened: + bpatch patch0a_2,mem_patch0a + enable enable_white + enable enable_hec + enable decode_fec1 + parse demod,bucket,3 /* get am_addr */ + rshift8 pwindow,pdata + store 1,mem_temp_am_addr + parse demod,bucket,4 /* get type */ + inject bucket,7 /* align up to pwindow */ + copy pwindow,pdata + store 1,mem_rx_type + parse demod,bucket,3 /* get arq */ + rshift8 pwindow,pdata + store 1,mem_temp_arq + fetch 1,mem_rx_type + sub pdata,3,null + branch receive_packet_noedr,positive + beq 7,receive_packet_noedr /* esco packet */ + fetch 1,mem_state_map + isolate1 smap_edr,pdata + setflag true,PSK,radio_ctrl +receive_packet_noedr: + bpatch patch0a_3,mem_patch0a + parse demod,bucket,8 /* cycle thru hec */ + disable decode_fec1 + disable enable_hec /* at this moment, 1 seqn + 8 hec is in shift */ + branch error_header,crc_failed /* if hec error, nothing is valid */ + bmark0 mark_testmode,receive_packet_amchk + fetch 2,mem_tst_pktcnt_hec + increase 1,pdata + store 2,mem_tst_pktcnt_hec +receive_packet_amchk: + bpatch patch0a_4,mem_patch0a + fetch 1,mem_temp_am_addr + compare 0,pdata,0x07 /* check for broadcast */ + setflag true,mark_am_addr_broadcast,mark /* received a broadcast message, can fire ar_addr if during unpark_req */ + branch am_addr_ok,true + icompare 0x07,am_addr + branch am_addr_match,true + bmark0 mark_esco,end_of_packet + fetcht 1,mem_saved_amaddr + icompare 0x7,temp + nbranch end_of_packet,true + fetch 1,mem_arq /* mem_arq + am_addr */ + set0 arqnx,pdata + set1 flowx,pdata + store 1,mem_arq +am_addr_match: + enable match +am_addr_ok: + bpatch patch0a_5,mem_patch0a + fetch 1,mem_rx_type + icopy type + bmark1 mark_am_addr_broadcast,arqn_bypass /* arqn doesn't make sense */ + fetcht 1,mem_temp_arq + fetch 1,mem_arq + set0 flow,pdata + isolate1 flow,temp + setflag true,flow,pdata + isolate1 arqn,temp + setflag true,arqn,pdata + store 1,mem_arq + isolate0 arqn,temp + branch arqn_bypass,true + call clear_got_tx +arqn_bypass: + bpatch patch0a_6,mem_patch0a + arg 0,temp + call reserve_slot + and type,0xf,pdata + beq type_poll,process_poll + beq type_null,end_of_packet /* null */ + beq type_fhs,process_fhs + fetcht 1,mem_temp_arq + fetch 1,mem_arq + icompare 0x04,temp /* bit 2 is seqn */ + nbranch rx_type_dispatch,true /* different then it's new */ + bmark0 mark_am_addr_broadcast,failed_seqn /* seqn failed, and not broadcast */ + bbit0 bcast1,rx_type_dispatch /* first broadcast never fail seqn */ +failed_seqn: + set1 mark_old_packet,mark +rx_type_dispatch: + bpatch patch0a_7,mem_patch0a + deposit type + beq type_dm1, process_dm1 + beq type_dh1, process_dh1 + beq type_hv3, process_hev + beq type_3dh1, process_3dh1 + arg 4,temp + call reserve_slot + beq type_dm3, process_dm3 + beq type_dh3, process_dh3 + arg 8,temp + call reserve_slot + beq type_dm5, process_dm5 + beq type_dh5, process_dh5 + rtn + + +process_hev: + bpatch patch0b_0,mem_patch0b + enable decode_fec0 + enable enable_crc + enable encrypt + arg mem_sco_ibuf,contw + force 30,loopcnt +process_hev_loop: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop process_hev_loop + bmark0 mark_esco,end_of_packet + parse demod,bucket,16 /* cycle through the crc */ + nsetflag crc_failed,mark_esco_rxok,mark + branch error_payload,crc_failed + branch ack_payload + + +process_poll: + branch end_of_packet + +process_dm3: +process_dm5: + set1 mark_longpacket,mark +process_dm1: + enable decode_fec2 + branch process_dmh + +process_dh3: +process_dh5: + set1 mark_longpacket,mark +process_3dh1: + set1 PSK3M,radio_ctrl +process_dh1: + enable decode_fec0 +process_dmh: + bpatch patch0b_1,mem_patch0b + bmark1 mark_rxbuf_inuse,end_of_packet /* buffer in use, nack */ + isolate0 PSK,radio_ctrl + branch process_dmh_noedr,true + disable enable_white + enable decode_fec0 + disable decode_fec2 + add clkn_bt,2,timeup + correlate clkn_bt,meet + nbranch error_payload,sync + set1 mark_longpacket,mark + enable enable_white +process_dmh_noedr: + bpatch patch0b_2,mem_patch0b + enable encrypt + enable enable_crc + parse demod,bucket,3 /* parse in lch+l2cap flow */ + rshift8 pwindow,pdata + store 1,mem_lch_code /* for loopback */ + parse demod,bucket,5 /* parse in 5 bit packetlength */ + bmark1 mark_longpacket,process_dmh_long + rshift3 pwindow,loopcnt + rshift3 loopcnt,loopcnt + branch process_dmh_common +process_dmh_long: + parse demod,bucket,5 /* multi slot packet length of dh3 dh5 dm3 dm5 */ + rshift pwindow,loopcnt + parse demod,bucket,3 /* undefined+bit 9 of length */ +process_dmh_common: + bpatch patch0b_3,mem_patch0b + deposit loopcnt + store 2,mem_len + branch process_dmh_data_end,blank + isub mask3ff,null + branch error_payload,positive /* packet too large, discard */ + bpatch patch0b_4,mem_patch0b + set0 mark_fhs_eir,mark + fetch 1,mem_lch_code + and_into 0x03,pdata + arg mem_rxbuf,contw //lmp_data or test packet + beq LLID_LMP,process_lmp + bmark1 mark_testmode,process_dmh_data + //non-HCI mode + fetch 1,mem_lch_code + and_into 0x03,pdata + beq LLID_L2CAP_START,process_dmh_data_l2cap_start_pkt + beq LLID_L2CAP_CONT,process_dmh_data_l2cap_continue_pkt + branch error_payload + +process_lmp: + fetch 2,mem_len + sub pdata,0x70,null //lmp buffer size + nbranch error_payload,positive + bmark1 mark_old_packet,ack_payload + branch process_dmh_data + + +process_dmh_data_l2cap_start_pkt: + bpatch patch0b_5,mem_patch0b + bmark1 mark_old_packet,ack_payload + fetch 2,mem_len + arg 0x2e0,temp //l2cap buffer size + isub temp,null + branch error_payload,positive + fetch 1,mem_l2cap_rxbuff_inuse + bbit0 L2CAP_INUSE_BUFF1,process_dmh_data_into_buff1 + bbit0 L2CAP_INUSE_BUFF2,process_dmh_data_into_buff2 + branch end_of_packet +process_dmh_data_into_buff1: + jam 1,mem_l2cap_rxbuff_new //new data in buff 1 + fetch 2,mem_l2cap_rxbuff1_len + bne 0,end_of_packet //baseband head error + arg mem_l2cap_rxbuff1,contw + branch process_dmh_data +process_dmh_data_into_buff2: + jam 2,mem_l2cap_rxbuff_new //new data in buff 2 + fetch 2,mem_l2cap_rxbuff2_len + bne 0,end_of_packet + arg mem_l2cap_rxbuff2,contw + branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt: + bpatch patch0b_6,mem_patch0b + bmark1 mark_old_packet,ack_payload + fetch 2,mem_len + arg 0x2e0,temp //l2cap buffer size + isub temp,null + branch error_payload,positive + fetch 1,mem_l2cap_rxbuff_new + beq 1,process_dmh_data_l2cap_continue_pkt1 + beq 2,process_dmh_data_l2cap_continue_pkt2 + branch end_of_packet +process_dmh_data_l2cap_continue_pkt1: + arg mem_l2cap_rxbuff1,contw + fetch 2,mem_l2cap_rxbuff1_len + iadd contw,contw + branch process_dmh_data +process_dmh_data_l2cap_continue_pkt2: + arg mem_l2cap_rxbuff2,contw + fetch 2,mem_l2cap_rxbuff2_len + iadd contw,contw +process_dmh_data: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop process_dmh_data +process_dmh_data_end: + bpatch patch0b_7,mem_patch0b + parse demod,bucket,16 /* cycle through the crc */ + branch error_payload_crc,crc_failed + fetch 1,mem_l2cap_flow_ctrl_flag + beq L2CAP_FLOW_CTRL_ENABLE,end_of_packet + bmark1 mark_testmode,process_dmh_cont + bmark1 mark_old_packet,redundant_payload + fetch 1,mem_lch_code + compare 3,pdata,3 + branch process_dmh_cont,true + fetch 2,mem_len + branch process_dmh_cont,blank + bpatch patch0c_0,mem_patch0c + fetch 1,mem_l2cap_rxbuff_new + beq 1,process_l2cap_pass_crc_buff1 + beq 2,process_l2cap_pass_crc_buff2 + branch assert +process_l2cap_pass_crc_buff1: + fetch 2,mem_l2cap_rxbuff1_len + fetcht 2,mem_len + iadd temp,pdata + store 2,mem_l2cap_rxbuff1_len + beq 0,assert + fetcht 2,mem_l2cap_rxbuff1// l2cap payload length + increase 4,temp + isub temp,null + call l2cap_buff1_inuse,zero //l2cap pkts not ended + branch process_dmh_cont +process_l2cap_pass_crc_buff2: + fetch 2,mem_l2cap_rxbuff2_len + fetcht 2,mem_len + iadd temp,pdata + store 2,mem_l2cap_rxbuff2_len + beq 0,assert + fetcht 2,mem_l2cap_rxbuff2// l2cap payload length + add temp,4,temp + isub temp,null + call l2cap_buff2_inuse,zero //l2cap pkts not ended + branch process_dmh_cont +process_dmh_cont: + bpatch patch0c_1,mem_patch0c + fetcht 1,mem_state_map + fetch 1,mem_lch_code + compare 3,pdata,0x03 + setflag true,smap_rxlmp,temp + nsetflag true,smap_rxl2cap,temp + storet 1,mem_state_map + nbranch process_dmh_cont_rxbuf_not_use,true + set1 mark_rxbuf_inuse,mark +process_dmh_cont_rxbuf_not_use: + bmark0 mark_testmode,ack_payload + isolate1 smap_rxlmp,temp + branch ack_payload,true + fetch 2,mem_tst_pktcnt_crc + increase 1,pdata + store 2,mem_tst_pktcnt_crc + set1 mark_loopback,mark + set0 smap_rxl2cap,temp + set0 mark_rxbuf_inuse,mark + storet 1,mem_state_map +ack_payload: + bpatch patch0c_2,mem_patch0c + fetcht 1,mem_temp_arq + fetch 1,mem_arq + set1 arqnx,pdata + isolate1 seqn,temp /* if accept, seqn always copies from the header */ + setflag true,seqn,pdata + isolate1 mark_am_addr_broadcast,mark + setflag true,bcast1,pdata + store 1,mem_arq + fetch 2,mem_len + nbranch end_of_packet,blank + fetch 1,mem_state_map + set0 smap_rxl2cap,pdata//better to do this in l2cap_flow_ctrl_stop + store 1,mem_state_map + fetch 1,mem_lch_code + compare 0x01,pdata,0x07 + //call l2cap_flow_ctrl_stop,true + branch end_of_packet + +error_header: + bpatch patch0c_3,mem_patch0c + disable match + fetch 2,mem_rx_hec_err + increase 1,pdata + store 2,mem_rx_hec_err + branch end_of_packet +error_payload_crc: + fetch 2,mem_rx_crc_err + increase 1,pdata + store 2,mem_rx_crc_err + call discard_pkt + bmark0 mark_testmode,error_payload + set1 mark_loopback,mark +error_payload: + branch end_of_packet + +discard_pkt: + bpatch patch0c_4,mem_patch0c + fetch 1,mem_lch_code + compare 3,pdata,0x03 + nbranch discard_pkt_l2cap,true +discard_pkt_lmp: + fetcht 1,mem_state_map + set0 smap_rxlmp,temp + storet 1,mem_state_map + rtn +discard_pkt_l2cap: +// isolate1 mark_testmode,mark +// setflag true,mark_loopback,mark + fetcht 1,mem_state_map + set0 smap_rxl2cap,temp + storet 1,mem_state_map + branch h4_send_acl_trigger_clear + +redundant_payload: + fetch 1,mem_arq + set1 arqnx,pdata + store 1,mem_arq +end_of_packet: + bpatch patch0c_5,mem_patch0c + disable encode_fec0 + disable encode_fec2 + disable decode_fec0 + disable decode_fec2 + disable enable_crc + disable encrypt + disable enable_white + branch shutdown_radio,is_rx + until null,tx_clear + nop 100 /* flush out the last bit */ + branch shutdown_radio + +process_fhs: + bpatch patch0c_6,mem_patch0c + enable enable_crc + enable decode_fec2 + parse demod,bucket,72 + isolate1 58,pdata + setflag true,mark_fhs_eir,mark + copy bt_adr,temp /* save current address to aside */ + ialigned bt_adr /* send it to access gen */ + ialigned fhs0 /* get fhs_misc */ + pulse recalc /* calc the lap just received from the other guy */ + setsect 2,0xfffff /* preset ms of shift reg as big mask */ + setsect 3,0x0ffff /* preset ms of shift reg as big mask */ + nop 32 /* 30 cycles after recalc */ + iverify fhs_parity /* check fhs_parity against ls 34 bits at shift reg, with msb 36 bits as mask */ + deposit lap + store 3,extm_lap + deposit uap + store 1,extm_uap + copy temp,bt_adr /* put the address back */ + branch fhs_parity_ok,true /* fhs parity failed */ + branch error_payload +fhs_parity_ok: + bpatch patch0c_7,mem_patch0c + parse demod,bucket,72 + ialigned fhs1 /* give host the information on class and fhs_misc */ + ialigned am_addr /* store the am_addr the master assigned us */ + ialigned nap + ialigned regb /* store external clock in regb according to clock format */ + force 0,pdata + parse demod,bucket,16 /* cycle through the crc */ + branch error_payload,crc_failed + setarg 0x0ffffffc + iand regb,pdata + store 4,mem_clke_bt + deposit fhs_class + store 3,extm_class + deposit fhs_misc + store 1,extm_fhs_misc + deposit am_addr + store 1,extm_newconn_am_addr + deposit nap + store 2,extm_nap + deposit bt_clk + inject rxf,32 + compare type_fhs,type,0x0f /* see if this was fhs packet */ + setflag true,mark_fhs_already_good,mark + branch end_of_packet + +clear_got_tx: + bpatch patch0d_0,mem_patch0d + fetch 1,mem_arq + rtnbit0 wack + set0 wack,pdata + setflip seqnx,pdata + store 1,mem_arq + fetch 1,mem_last_type + beq type_lmp,clear_got_txlmp + rtneq type_hv3 + fetch 1,mem_op + rtnbit0 op_txl2cap,pdata + set0 op_txl2cap,pdata + set1 op_pkt_comp,pdata + store 1,mem_op + set0 mark_tx_l2cap,mark + fetch 2,mem_l2cap_tx_multi_offset + nrtn blank + fetch 1,mem_op + set0 op_pkt_comp,pdata + store 1,mem_op + branch l2cap_malloc_free + +clear_got_txlmp: + bpatch patch0d_1,mem_patch0d + fetch 1,mem_lmo_header_opcode + rshift pdata,pdata + beq LMP_START_ENCRYPTION_REQ,start_encryption + beq LMP_STOP_ENCRYPTION_REQ,stop_encryption + beq LMP_UNSNIFF_REQ, sniff_exit + beq LMP_ESCAPE,clear_lmp_escape + rtnne LMP_ACCEPTED + fetch 1,mem_lmo_payload + beq LMP_SCO_LINK_REQ,sco_link_req_by_slave + beq LMP_START_ENCRYPTION_REQ,clear_send_setup_complete + rtn + +clear_lmp_escape: + fetch 1,mem_lmo_payload + set1 7,pdata + rtn +clear_send_setup_complete: + rtn master + fetch 1,mem_state + rtnbit1 state_conn_comp + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + rtn + +// nokia BH-105 CALLING when reconnection +sco_link_req_by_slave: + rtn master + fetch 1,mem_mode + isolate1 send_sco_when_slave,pdata + branch clean_mem_mode,true + //jam LMP_REMOVE_SCO_LINK_REQ,mem_lmo_opcode2 + rtn +clean_mem_mode: + set0 send_sco_when_slave,pdata + store 1,mem_mode + rtn + +start_encryption: + bpatch patch0d_2,mem_patch0d + fetch 1,mem_state_map + set1 smap_encryption,pdata + store 1,mem_state_map + hjam 1,core_encrypt + fetch 1,mem_state + isolate1 state_conn_comp,pdata + rtn + +stop_encryption: + bpatch patch0d_3,mem_patch0d + fetch 1,mem_state_map + set0 smap_encryption,pdata + store 1,mem_state_map + hjam 0,core_encrypt + rtn + + +sniff_init: + bpatch patch0d_4,mem_patch0d + copy clkn_bt,pdata + store 4,mem_lpm_delay_after_sniff + add clkn_bt,3,rega + branch sniff_init_master,master + add clke_bt,3,rega +sniff_init_master: + fetcht 2,mem_tsniff + deposit rega + set0 27,pdata + idiv temp + fetch 2,mem_dsniff + call wait_div_end + remainder regc + isub regc,pdata + branch sniff_init_nowrap,positive + iadd temp,pdata +sniff_init_nowrap: + iadd rega,pdata + store 4,mem_sniff_anchor + jam SWITCH_FLAG_INIT,mem_switch_flag + fetch 1,mem_state + set1 state_insniff,pdata + store 1,mem_state + fetch 1,mem_sniff_attempt + store 1,mem_current_sniff_attempt + setarg 0 + store 3,mem_sniff_rcv + store 3,mem_sniff_lost + store 1,mem_sniff_unint_lost + jam BT_EVT_ENTER_SNIFF,mem_fifo_temp + call ui_ipc_send_event + fetch 2,mem_rx_window_sniff + store 2,mem_rx_window + nrtn master + add am_addr,-1,queue + rtn + +sniff_exit: + bpatch patch0d_5,mem_patch0d + fetch 1,mem_state + rtnbit0 state_insniff + set0 state_insniff,pdata + store 1,mem_state + fetch 2,mem_rx_window_init + store 2,mem_rx_window + disable wake + jam BT_EVT_EXIT_SNIFF,mem_fifo_temp + branch ui_ipc_send_event + + +check_attempt: + bpatch patch0d_6,mem_patch0d + enable attempt + fetch 1,mem_state + bbit1 state_insniff,check_attempt_sniff + rtnmark1 mark_testmode /* pdata won't be blank now, try attempt */ + fetch 1,mem_arq + rtnbit1 wack + fetch 1,mem_lmp_to_send + nrtn blank + fetch 1,mem_op + rtnbit1 op_txl2cap +check_attempt_nomore: + force 0,pdata + rtn + +check_attempt_sniff: + bbit0 state_insco,check_attempt_not_sco + fetch 1,mem_current_sniff_attempt + beq 2,check_attempt_sniff_restore_sco + fetch 1,mem_arq + bbit1 wack,check_attempt_notimeout + bmark0 mark_esco_rxok,check_attempt_notimeout +check_attempt_sniff_restore_sco: + nbranch check_attempt_notimeout,master + fetch 1,mem_lmp_to_send + nbranch check_attempt_notimeout,blank +check_attempt_sco_master: + fetch 1,mem_sco_poll + increase -1,pdata + store 1,mem_sco_poll + nbranch check_attempt_nomore,blank + jam param_sco_poll,mem_sco_poll + branch check_attempt_notimeout + + + + + + +check_attempt_not_sco: + fetch 1,mem_current_sniff_attempt + bne 1,check_attempt_notimeout + fetch 1,mem_current_sniff_timeout + branch check_attempt_notimeout,blank + increase -1,pdata + store 1,mem_current_sniff_timeout + fetch 1,mem_arq + rtnbit1 wack // waiting for next ack + nrtn match // waiting for next poll +check_attempt_notimeout: + fetch 1,mem_current_sniff_attempt + increase -1,pdata + store 1,mem_current_sniff_attempt + rtn + + + + + + + + + + /* enable user if sniff window vialation, queue is extra overhead */ +sniff_check_window: + bpatch patch0d_7,mem_patch0d + disable swfine + copy temp,stop_watch + call context_search_sniff_window + disable user + nrtn zero + force 0,stop_watch + enable user + rtn + + //return true if it is esco context +check_esco_amaddr: + fetch 1,mem_esco_addr + icompare 0xff,am_addr + rtn + + +parse_l2cap: + bpatch patch0e_0,mem_patch0e + set0 mark_rxbuf_inuse,mark +parse_l2cap_cont: + jam L2CAP_RX_CLEAR,mem_l2cap_rx_done + fetch 1,mem_l2cap_rxbuff_inuse + rtn blank + isolate1 L2CAP_INUSE_BUFF1,pdata + arg mem_l2cap_rxbuff1,contr + call process_rx_l2cap_pkt,true + bpatch patch0e_1,mem_patch0e + fetch 1,mem_l2cap_rx_done + beq L2CAP_RX_DONE,parse_l2cap_release_buff1 + + jam L2CAP_RX_CLEAR,mem_l2cap_rx_done + fetch 1,mem_l2cap_rxbuff_inuse + rtnbit0 L2CAP_INUSE_BUFF2 + arg mem_l2cap_rxbuff2,contr + call process_rx_l2cap_pkt + fetch 1,mem_l2cap_rx_done + beq L2CAP_RX_DONE,parse_l2cap_release_buff2 + rtn + +parse_l2cap_release_buff1: + fetch 1,mem_l2cap_rxbuff_inuse + set0 L2CAP_INUSE_BUFF1,pdata + store 1,mem_l2cap_rxbuff_inuse + setarg 0 + store 2,mem_l2cap_rxbuff1_len + rtn +parse_l2cap_release_buff2: + fetch 1,mem_l2cap_rxbuff_inuse + set0 L2CAP_INUSE_BUFF2,pdata + store 1,mem_l2cap_rxbuff_inuse + setarg 0 + store 2,mem_l2cap_rxbuff2_len + rtn + +l2cap_buff1_inuse: + fetch 1,mem_l2cap_rxbuff_inuse + set1 L2CAP_INUSE_BUFF1,pdata + store 1,mem_l2cap_rxbuff_inuse + rtn + +l2cap_buff2_inuse: + fetch 1,mem_l2cap_rxbuff_inuse + set1 L2CAP_INUSE_BUFF2,pdata + store 1,mem_l2cap_rxbuff_inuse + rtn + +/******************************************/ +/********** Transmit Packet *************/ +/******************************************/ + +slave_send_access: + bpatch patch0e_2,mem_patch0e + add clke_bt,1,bt_clk /* slave start to use native clock */ + call fetch_extm_bt_adr + force 0x03,freq_mode /* connection frequency */ + call tx_radio_freq + call start_transmitter + call start_tx_external + branch send_access_word + + +slave_conn_send_packet: + bpatch patch0e_3,mem_patch0e + call rf_setup_time_slave_slot + deposit clke_bt + fetcht 4,mem_next_btclk + isub temp,pdata + rtnne 1 /* missed slave slot */ + compare type_null,type,0x1f + nbranch slave_conn_send_access,true + fetch 1,mem_rx_type + rtn blank /* null packet, do nothing */ +slave_conn_send_access: + call slave_send_access +transmit_packet: + compare type_id,type,0x1f /* is this id only ? */ + branch end_of_packet,true + rshift bt_clk,temp + or temp,0x40,white_init +transmit_packet_whitened: + bpatch patch0e_4,mem_patch0e + enable enable_white + enable enable_hec + enable encode_fec1 + set0 mark_longpacket,mark + deposit am_addr + inject mod,3 /* am_addr, temp is disabled */ + deposit type + inject mod,4 + fetch 1,mem_arq /* aka mem_arq */ + inject bucket,4 /* align up to flowx, arqnx, seqnx */ + inject mod,3 + enable enable_parity + inject mod,8 /* transmit parity */ + disable encode_fec1 + disable enable_parity + disable enable_hec + set0 PSK3M,radio_ctrl + arg 0,temp + call reserve_slot + bpatch patch0e_5,mem_patch0e + and type,0x1f,pdata + beq type_lmp, transmit_lmp + beq type_null, end_of_packet + beq type_poll, end_of_packet + beq type_fhs, transmit_fhs /* master mode fhs need got_tx and ack */ + beq type_dm1, transmit_dm1 + beq type_dh1, transmit_dh1 + beq type_hv3, transmit_hev + beq type_3dh1, transmit_3dh1 + arg 4,temp + call reserve_slot + beq type_dm3, transmit_dm3 + beq type_dh3, transmit_dh3 + arg 8,temp + call reserve_slot + beq type_dh5, transmit_dh5 + branch transmit_dm5 /* must be 14, dm5 */ + + +transmit_hev: + bpatch patch0e_6,mem_patch0e + enable encode_fec0 + enable enable_crc + enable encrypt + force 30,loopcnt + arg mem_sco_obuf,contr +transmit_ev_loop: + ifetch 1,contr + inject mod,8 + loop transmit_ev_loop + bmark1 mark_esco,transmit_end + branch end_of_packet + +transmit_fhs: + bpatch patch0e_7,mem_patch0e + fetch 1,mem_fhs_am_addr /* this is the am_addr to assign to slave */ + icopy am_addr + fetch 1,mem_fhs_misc + icopy fhs_misc /* [7:6]SR [5:4]SP [3:1]PS [0]undef */ + fetch 3,mem_class /* store away class */ + icopy fhs_class + fetch 2,mem_nap + icopy nap + enable enable_crc + enable encode_fec2 + copy bt_adr,rega + call fetch_self_bt_adr + pulse recalc + nop 32 /* 30 cycles after recalc for sync word generation */ + copy bt_clk,timeup + fetch 4,mem_clkn_bt + icopy bt_clk + preload fhs0 + set1 58,pdata /* eir */ + inject mod,72 + preload fhs1 + inject mod,72 + copy timeup,bt_clk + copy rega,bt_adr + enable enable_parity + inject mod,16 /* generate CRC */ + disable enable_parity + branch end_of_packet + +transmit_lmp: /* expect the payload ready as in bb spec */ + bpatch patch0f_0,mem_patch0f + enable encrypt + enable enable_crc + enable encode_fec2 + fetch 1,mem_lmo_header_length /* this is the payload header */ + and pdata,0x1f8,temp /* temp is number of bits, check payload header format */ + arg mem_lmo_header_length,contr + increase 8,temp /* temp is in bits */ +transmit_lmp_loop: + add temp,-72,regc /* regc is remainder */ + nbranch transmit_lmp_finish,positive + ifetch 9,contr + inject mod,72 + copy regc,temp + branch transmit_lmp_loop +transmit_lmp_finish: + ifetch 9,contr + iinject mod,temp + branch transmit_end + +transmit_dm1: + enable encode_fec2 + branch transmit_dmh +transmit_dm3: +transmit_dm5: + enable encode_fec2 + set1 mark_longpacket,mark + branch transmit_dmh + +transmit_3dh1: + set1 PSK3M,radio_ctrl +transmit_dh1: + enable encode_fec0 + branch transmit_dmh + +transmit_dh3: +transmit_dh5: + set1 PSK3M,radio_ctrl + enable encode_fec0 + set1 mark_longpacket,mark + +transmit_dmh: + bpatch patch0f_1,mem_patch0f + fetch 1,mem_state_map + bbit0 smap_edr,transmit_noedr + sub type,3,null + branch transmit_noedr,positive + disable encrypt + disable encode_fec2 + enable encode_fec0 + disable enable_white + set1 PSK,radio_ctrl + isolate1 PSK3M,radio_ctrl + branch transmit_edr3m,true + setarg 0xabeee + inject mod,20 + branch transmit_edr_sync_end +transmit_edr3m: + setarg 0x5faeba + inject mod,24 + setarg 0x12 + inject mod,6 +transmit_edr_sync_end: + enable enable_white + set1 mark_longpacket,mark +transmit_noedr: + enable encrypt + enable enable_crc + bmark1 mark_loopback,transmit_loopback + fetch 1,mem_tx_lch + inject mod,3 + fetch 2,mem_tx_len + iforce loopcnt + bmark1 mark_longpacket,transmit_long + inject mod,5 + branch transmit_stuff +transmit_long: + inject mod,13 +transmit_stuff: + deposit loopcnt + branch transmit_end,blank + fetch 2,mem_txptr + iforce contr +transmit_stuff_loop: + ifetch 1,contr + inject mod,8 + loop transmit_stuff_loop +// branch transmit_end + +transmit_end: + enable enable_parity + inject mod,16 + disable enable_parity + call set_wait_ack + fetch 1,mem_state_map + bbit0 smap_edr,end_of_packet + force 0,pdata + inject mod,6 /* edr trailer */ + branch end_of_packet + + +transmit_loopback: + bpatch patch0f_2,mem_patch0f + bmark1 mark_longpacket,transmit_loopback_long +transmit_loopback_short: + fetch 1,mem_lch_code + inject mod,3 /* LLID and FLOW */ + fetch 1,mem_len /* take packet length */ + iforce regc + inject mod,5 + branch transmit_loopback_cont +transmit_loopback_long: + fetch 1,mem_lch_code + inject mod,3 /* LLID and FLOW */ + fetch 2,mem_len /* take packet length */ + iforce regc + inject mod,13 +transmit_loopback_cont: + arg mem_rxbuf,contr +transmit_loopback_loop: + copy regc,null + branch transmit_loopback_end,zero + ifetch 1,contr + inject mod,8 + increase -1,regc + branch transmit_loopback_loop +transmit_loopback_end: + fetch 2,mem_tst_pktcnt_dmh + increase 1,pdata + store 2,mem_tst_pktcnt_dmh + branch transmit_end + + +apply_switch_clke: + fetch 4,mem_clke_bt + add pdata,7,rega + fetch 2,mem_slot_offset + nbranch apply_switch_nozero,blank + increase -3,rega + branch apply_switch_wait_loop +apply_switch_nozero: + mul32 pdata,12,pdata + hfetcht 2,core_halfslot + increase 1,temp +apply_switch_loop: + isub temp,pdata + nbranch apply_switch_bt,positive + increase -1,rega + branch apply_switch_loop +apply_switch_bt: + sub pdata,0,pdata +apply_switch_wait_loop: + until null,oneslot + compare 0,clkn_bt,3 + nbranch apply_switch_wait_loop,true + iforce clke_rt + copy rega,clke_bt + iforce clke_rt + rtn + + +calc_slot_offset: + bpatch patch0f_3,mem_patch0f + until null,halfslot + deposit clke + iforce contr + rshift16,pdata,pdata + isub clkn_bt,loopcnt + and_into 3,loopcnt /* bt portion */ + nbranch calc_bt_portion,zero + force 0,pdata + branch calc_skip_bt +calc_bt_portion: + arg 3750,temp + force 0,pdata +calc_slot_offset_loop: + iadd temp,pdata + loop calc_slot_offset_loop +calc_skip_bt: + iadd contr,pdata /* add rt portion */ + div pdata,12 + call wait_div_end + quotient pdata + store 2,mem_slot_offset + rtn + +calc_clke_offset: + bpatch patch0f_4,mem_patch0f + deposit clke + copy clkn,temp + isub temp,null + nsetflag positive,44,pdata + isub temp,temp + setarg 3750 + isolate0 15,temp + branch calc_clke_pos,true + setarg -61786 + iadd temp,temp +calc_clke_pos: + storet 6,mem_le_clk_offset + rtn le + storet 6,mem_clk_offset + rtn + +calc_clke: + disable clknt + fetch 6,mem_le_clk_offset + branch calc_clke2,le + fetch 6,mem_clk_offset +calc_clke2: + iadd clkn,alarm + increase 10,alarm + setarg 3750 + isub alarm,pdata + isolate0 15,pdata + branch calc_clke_pos_adj,true + setarg 0xf15a + iadd alarm,alarm +calc_clke_pos2: + copy alarm,clke + rtn +calc_clke_pos_adj: /* add 2 clock */ + force 0,null + branch calc_clke_pos2 + +/******************************************/ +/********* RF related functions ***********/ +/******************************************/ + + +calc_radio_freq: + bpatch patch0f_5,mem_patch0f + call set_sync_on + copy bt_clk,pdata + and_into 0x180,pdata + compare 3,freq_mode,0x07 + nbranch freq_not_connection,true /* don't do the hack if not in connection */ + rshift3 pdata,pdata + iadd freq_index,pdata + branch do_hop_mod_now +freq_not_connection: + copy freq_index,pdata +do_hop_mod_now: + div pdata,79 + pulse recalc /* now is good time to recalc id */ + call wait_div_end + remainder rega + add rega,-40,temp + branch odd_half,positive + lshift rega,temp + branch freq_result +odd_half: + lshift temp,temp + increase 1,temp +freq_result: + bpatch patch0f_6,mem_patch0f + fetch 1,mem_mode + bbit0 afh_change,afh_process_con +afh_process_0: + fetch 4, mem_afh_instant + isub bt_clk, null + branch afh_process_con,positive + call afh_clear + fetch 1,mem_afh_new_mod + rtn blank + fetch 1,mem_mode + set1 afh_enable,pdata + store 1,mem_mode + fetch 5,mem_afh_map_new + store 5,mem_afh_map_lo + ifetch 5,contr + store 5,mem_afh_map_hi + call afh_process_freq_map +afh_process_con: + fetch 1,mem_mode + rtnbit0 afh_enable + isolate1 1,bt_clk + branch afh_same_channel,true /* at odd slot, use the same as last even */ + rshift3 temp,rega + and temp,7,queue + setarg mem_afh_map_lo + iadd rega, rega + ifetch 1, rega + qisolate0 pdata + branch afh_process_1,true /* not in map, do afh */ + deposit temp + branch afh_process_end +afh_process_1: + fetch 1, mem_afh_used + iforce regb + deposit bt_clk + and_into 0x180, pdata + rshift3 pdata,pdata + iadd freq_index,pdata + idiv regb + setarg mem_afh_map + call wait_div_end + remainder rega + iadd rega,contr + ifetch 1,contr +afh_process_end: + store 1,mem_afh_index + iforce temp + rtn + +afh_same_channel: + fetch 1, mem_afh_index /* last afh index */ + iforce temp + rtn + +afh_clear: + fetch 1,mem_mode + set0 afh_enable,pdata + set0 afh_change,pdata + store 1,mem_mode + rtn +/* +fixed_frequency: + fetcht 1,mem_fixed_freq + rtn +*/ +afh_process_freq_map: + bpatch patch0f_7,mem_patch0f + arg mem_afh_map,contw + force 10,loopcnt + call memset0 + arg mem_afh_map,contw + force 0,regC + force 2,queue +process_freq_3: + fetch 5,mem_afh_map_lo + iforce temp + compare 2,queue,0xff + branch process_freq_1,true + rshift temp,temp +process_freq_1: + isolate0 0,temp + branch process_freq_0,true + deposit regC + istore 1,contw +process_freq_0: + rshift2 temp,temp + increase 2,regC + compare 40,regC,0xfe + nbranch process_freq_2,true + fetch 5,mem_afh_map_hi + iforce temp + compare 2,queue,0xff + branch process_freq_2,true + rshift temp,temp +process_freq_2: + sub regC,78,null + branch process_freq_1,positive + force 1,regC + increase -1,queue + nbranch process_freq_3,zero + arg mem_afh_map,rega + deposit contw + isub rega,pdata + store 1,mem_afh_used + rtn + +rx_radio_freq: + bpatch patch10_0,mem_patch10 + call calc_radio_freq + fetch 1,mem_debug_config + bbit0 debug_rx_fixed_freq,rx_radio_freq_now + fetcht 1,mem_rx_fixed_freq +rx_radio_freq_now: + branch set_freq_rx + + +tx_radio_freq: + bpatch patch10_1,mem_patch10 + call calc_radio_freq + fetch 1,mem_debug_config + bbit0 debug_tx_fixed_freq,tx_radio_freq_now + fetcht 1,mem_tx_fixed_freq +tx_radio_freq_now: + branch set_freq_tx + + +fetch_giac: + force 0,uap + fetch 3,mem_glap + iforce lap + rtn + +fetch_page_bt_adr: + bpatch patch10_2,mem_patch10 + fetch 1,mem_hci_puap + icopy uap + fetch 3,mem_hci_plap + icopy lap + rtn + +fetch_self_bt_adr: + bpatch patch10_3,mem_patch10 + fetch 2,mem_nap + icopy nap + fetch 1,mem_uap + icopy uap + fetch 3,mem_lap + icopy lap /* copy self_adr,bt_adr */ /* use own address */ + rtn + +fetch_extm_bt_adr: + bpatch patch10_4,mem_patch10 + fetch 2,mem_pnap + icopy nap + fetch 1,mem_puap + icopy uap + fetch 3,mem_plap + icopy lap + rtn + + +fetch_diac: + bmark1 mark_all_diac,fetch_diac_do + rtnmark0 mark_inquiry_state + rtnmark0 mark_periodical_diac +fetch_diac_do: + and_into -256,lap + pulse recalc + nop 32 + rtn + + +shutdown_radio: + bpatch patch10_5,mem_patch10 + branch shutdown_radio0,is_rx + hjam 0xd4, 0x955 + nop 4 + hjam 0xd2, 0x955 + nop 4 + hjam 0xd1, 0x955 + nop 4 + fetch 1,mem_tx_power + beq TX_POWER_0DB,shutdown_radio_0db + beq TX_POWER_3DB,shutdown_radio_3db + beq TX_POWER_5DB,shutdown_radio_5db + beq TX_POWER_f3DB,shutdown_radio_f3db + beq TX_POWER_f5DB,shutdown_radio_f5db + beq TX_POWER_PAIR,shutdown_radio_pair +shutdown_radio_5db: +shutdown_radio_0db: + hjam 0xd0, 0x955 + hjam 0xe0, 0x956 +shutdown_radio0: + force 0,radio_ctrl + disable is_rx + disable is_tx + pulse packet_end + hjam 0x0,rfen_mdm + hjam 0x0,rfen_tx + hjam 0x0,rfen_rx + hjam 0,rfen_sn + hjam 0x70,rfen_msc + hjam 0x0,rfen_adc + rtn + +shutdown_radio_pair: +shutdown_radio_f5db: +shutdown_radio_f3db: +shutdown_radio_3db: + hjam 0xd0,0x955 + hjam 0xc0,0x956 + branch shutdown_radio0 + +set_sync_on: + bpatch patch10_6,mem_patch10 + hjam 0x0,rfen_mdm /* if called from tx or rx */ + hjam 0x0,rfen_tx + hjam 0x18,rfen_rx + hjam 0xa7,rfen_sn + hjam 0x7f,rfen_msc + rtn + +set_freq_rx: + bpatch patch10_7,mem_patch10 + /* IF is +2MHz */ + storet 1,mem_last_freq + add temp,rx_freq_offset,rega /* index to frequency */ + hjam 0x07,0x96d /*Max added, for best sensitivity*/ + branch rf_write_freq +rf_rx_enable: + bpatch patch11_0,mem_patch11 + hjam 0xcf,rfen_tx + nop 10 /* wait adc clk48 ready */ + hjam 0xff,rfen_rx + hjam 0xaf,rfen_sn + hjam 0xff,rfen_msc + nop 10 + hjam 0xa0,rfen_mdm + rtn + +set_freq_tx_offset: + fetch 1,mem_250k_freq_enable //default: 0 + branch set_freq_tx_2M_offset,blank +set_freq_tx_0M_offset: + add temp,2,rega //250k + rtn +set_freq_tx_2M_offset: + add temp,0,rega // bt 2M Medium Frequency + rtn + +set_freq_tx: + bpatch patch11_1,mem_patch11 + storet 1,mem_last_freq + call set_freq_tx_offset + call rf_write_freq + setarg param_pll_setup + call sleep +txon: + hjam 0x1,rfen_adc + hjam 0x3c,rfen_rx + hjam 0xe0,rfen_tx + hjam 0x12,0x96d + nop 10 + hjam 0x01,rfen_mdm + hjam 0x3d,rfen_mdm + nop 10 + hjam 0xb7,rfen_sn + nop 10 + hjam 0x7f, rfen_mdm + fetch 1,mem_tx_power + beq TX_POWER_0DB,set_tx_power_0db + beq TX_POWER_3DB,set_tx_power_3db + beq TX_POWER_5DB,set_tx_power_5db + beq TX_POWER_f3DB,set_tx_power_f3db + beq TX_POWER_f5DB,set_tx_power_f5db + beq TX_POWER_PAIR,set_tx_power_pair +set_tx_power_0db: + hjam 0xf0,0x956 + call txon_common + hjam 0xd8,0x955 + rtn + +set_tx_power_3db: + hjam 0xdf,0x956 + call txon_common + hjam 0xdf,0x955 + rtn + +set_tx_power_5db: + hjam 0xff,0x956 + call txon_common + hjam 0xdf,0x955 + rtn +set_tx_power_f3db: + hjam 0xce,0x956 + call txon_common + hjam 0xd8,0x955 + rtn + +set_tx_power_f5db: + hjam 0xcb,0x956 + call txon_common + hjam 0xd8,0x955 + rtn + +set_tx_power_pair: + hjam 0xd0,0x955 + hjam 0xc0,0x956 + hjam 0x4c,0x957 + hjam 0x6c,0x958 + hjam 0x50,0x959 + rtn + +txon_common: + nop 4 + hjam 0xd1,0x955 + nop 4 + hjam 0xd2,0x955 + nop 4 + hjam 0xd4,0x955 + rtn + + +initialize_radio: + hjam clksel_rc,core_clksel +initialize_radio_wait: + fetch 2,mem_rf_init_ptr + bbit0 14,initialize_radio_wait + iforce contr + arg 0x8900,temp +initialize_radio_loop: + ifetch 1,contr + beq 0xff,initialize_radio_cont + ior temp,contw + ifetch 1,contr + istore 1,contw + branch initialize_radio_loop +initialize_radio_cont: + bpatch patch11_2,mem_patch11 + call lpm_cal_xtal_startup + call switchto_dpllclk +// ncall check_dpll,wake + setarg param_dpll_start_delay + iadd clkn_bt,pdata + store 4,mem_dpll_clkn + set1 RESET,radio_ctrl + force 0,radio_ctrl + ncall do_rccal,wake + branch set_rccal + + /* rega is frequency, 00=2400Mhz */ +rf_write_freq: + bpatch patch11_3,mem_patch11 + setarg 2400 + iadd rega,temp + fetch 1,mem_fcomp_mul + hjam 0x04,rf_pll_rstn + imul32 temp,pdata + fetcht 1,mem_fcomp_div + idiv temp + call wait_div_end + quotient rega /* rega is FLOOR(FVCO/fcomp) */ + remainder pdata + lshift16 pdata,pdata + lshift4 pdata,pdata /* pdata is frac * 2^20 */ + idiv temp + call wait_div_end + quotient pdata /* pdata is frac *2^20/fcomp */ + lshift8 pdata,pdata + lshift pdata,pdata + ior rega,pdata + hstore 4,rf_pll_intg + hjam 0x44,rf_pll_rstn + hjam 0xc4,rf_pll_rstn + rtn + + +do_rccal: + bpatch patch11_4,mem_patch11 + hjam 0x02,rfen_adc + setarg 250000 + call sleep /* wait clkpll&xtal stable */ + hjam 0x7f,rfen_rx + nop 130 + hjam 0x30,rf_rccal_ctrl + hjam 0xd0,rfen_tx + hjam 0x70,rf_rccal_ctrl + hjam 0xf0,rf_rccal_ctrl + force 50,loopcnt +do_rccal_loop: + hfetch 1,rf_rccal_result + bbit1 5,do_rccal_end + loop do_rccal_loop +do_rccal_end: + store 1,mem_rf_rccal + hjam 0,rfen_tx + hjam 0,rfen_rx + hjam 0x00,rfen_adc + rtn + +set_rccal: + bpatch patch11_5,mem_patch11 + fetch 1,mem_rf_rccal + set1 5,pdata + hstore 1,rf_rccal_ctrl + hfetcht 1,rf_bpf_ctrim + and_into 7,temp + lshift3 pdata,pdata + ior temp,pdata + hstore 1,rf_bpf_ctrim + hfetch 1,rf_bpf_ib + set0 bpf_rccal,pdata + hstore 1,rf_bpf_ib + hfetch 1,rf_adc_rccal + set0 adc_rccal,pdata + hstore 1,rf_adc_rccal + rtn + +save_rssi: + bpatch patch11_6,mem_patch11 + hfetch 2,rf_afc_d2a + rshift4 pdata,pdata + rshift3 pdata,pdata + sub pdata,0,pdata + and_into 0xff,pdata + div pdata,10 + call wait_div_end + quotient pdata + lshift4 pdata,pdata + remainder temp + ior temp,pdata + store 1,mem_rssi /* bcd value */ + rtn + + +switchto_dpllclk: + hjam clksel_rc,core_clksel + hfetch 1,rf_clkpll_frac+2 + set0 4,pdata + set0 5,pdata + hstore 1,rf_clkpll_frac+2 + hjam 0x00,rfen_ck + hjam 0x00,rfen_msc + hjam 0x70,rfen_msc + hjam 0xff,rfen_ck + hfetch 1,rf_clkpll_frac+2 + set1 4,pdata + set1 5,pdata + hstore 1,rf_clkpll_frac+2 + call init_lpm_ctrl + hfetch 1,rf_clkpll_int + set1 7,pdata + hstore 1,rf_clkpll_int + set0 7,pdata + hstore 1,rf_clkpll_int + set1 7,pdata + hstore 1,rf_clkpll_int + hjam clksel_dpll,core_clksel + nop 1 + hjam clksel_xtal,core_clksel + hfetch 1,rf_clkpll_frac+2 + and_into 0xcf,pdata + hstore 1,rf_clkpll_frac+2 + or_into 0x30,pdata + hstore 1,rf_clkpll_frac+2 + rtn + + +xtal_fast_wake: + setarg 0xf0f + branch lpm_write_config + +init_lpm_ctrl: + setarg 0x80f + branch lpm_write_config + + + +start_receiver: + bpatch patch11_7,mem_patch11 + call rf_rx_enable + disable is_tx + enable is_rx + pulse init_encrypt + rtn + +prep_crypt: + bpatch patch12_0,mem_patch12 + fetch 1,mem_state_map + isolate1 smap_encryption,pdata + setflag true,0,pdata + hstore 1,core_encrypt + arg mem_kc,contr + ifetch 9,contr + iforce kc_ls + ifetch 7,contr + iforce kc_ms + fetch 1,mem_key_size + add pdata,-1,g1l + pulse kc_p_activate /* immediately start calculating primary Key */ + rtn + +wait_access_end: + deposit clke + store 6,mem_sync_clke + disable decode_fec0 + nbranch shutdown_radio,sync + arg param_clke_cal,clke_rt + increase 1,clke_bt + and_into 0x1fc,clke_bt + rtn + + + +wait_access_mhalfbnd: + enable decode_fec0 +wait_access_mhalfbnd_correlate: + correlate null,mhalfbnd /* keep correlating until sync is found, or clke half */ + branch wait_access_end,sync + compare 0x02,clke_bt,0x02 + nbranch wait_access_mhalfbnd_correlate,true + branch wait_access_end + +wait_access_clkn_rt: + bpatch patch12_1,mem_patch12 + arg param_conn_access,timeup /* found sync must occur within this time */ + enable decode_fec0 + correlate clkn_rt,meet /* keep correlating until sync is found, or until clkn_rt timeup */ + disable decode_fec0 + nbranch shutdown_radio,sync + rtn + +wait_access_forever: + bpatch patch12_2,mem_patch12 + enable decode_fec0 + correlate null,timeout /* keep correlating until sync is found, or timeout */ + disable decode_fec0 + nbranch shutdown_radio,sync + arg param_clke_cal,clke_rt + and_into 0x1fc,clke_bt + rtn + + /* reserve slots for mult-slot packet */ +reserve_slot: + bpatch patch12_3,mem_patch12 + iforce rega + deposit bt_clk + iadd temp,timeup + copy timeup,pdata + store 4,mem_next_btclk + deposit rega + rtn + + /* pdata = clks ahead of bt_clk */ +ahead_window: + copy pdata,temp + bpatch patch12_4,mem_patch12 + copy temp,pdata + call clk2bt + lshift16 bt_clk,pdata + set1 44,pdata + call clk_diff + set0 44,pdata + call get_clk + call clk_diff + rtn user + call clk2rt + iforce stop_watch + until null,timeout + rtn + + +setup_clk: + bpatch patch12_5,mem_patch12 + branch setup_clkn,clknt + until clke_rt,meet +skip_setup_clke: + copy clke_bt,temp + branch setup_clknbt +setup_clkn: + branch skip_setup_clkn,attempt + until clkn_rt,meet +skip_setup_clkn: + copy clkn_bt,temp +setup_clknbt: + branch setup_clk11,user + compare 1,temp,3 + nbranch setup_clk,true +setup_complete: + bpatch patch12_6,mem_patch12 + fetch 1,mem_state + rtnbit0 state_inconn + fetch 4,mem_next_btclk + isub temp,pdata + nrtn positive + sub pdata,0xff,null + branch setup_clk,positive + rtn +setup_clk11: + compare 3,temp,3 + nbranch setup_clk,true + branch setup_complete + +rf_setup_time: + bpatch patch12_7,mem_patch12 + arg param_rf_setup,timeup + branch setup_clk + +rf_setup_time_slave_slot: + disable user + branch rf_setup_time + +rf_setup_time_master_slot: + enable user + branch rf_setup_time + +start_transmitter: + bpatch patch13_0,mem_patch13 + call prep_crypt + disable is_rx + enable is_tx + rtn + + + +start_tx_native: + bpatch patch13_1,mem_patch13 + arg param_tx_setup,timeup + until clkn_rt,meet /* wait until start_tx time */ + pulse init_encrypt + rtn + +start_rx_native: + bpatch patch13_2,mem_patch13 + arg param_rx_setup,timeup + until clkn_rt,meet + rtn + + +start_tx_external: + bpatch patch13_3,mem_patch13 + arg param_tx_setup,timeup + until clke_rt,meet /* wait until start_tx time */ + pulse init_encrypt + rtn + +send_access_word: + bpatch patch13_4,mem_patch13 + preload access /* load in access word ready to be sent */ + enable encode_fec0 + set1 TXGFSK,radio_ctrl + inject mod,72 + disable encode_fec0 + rtn + + +scan_mode_whiten: + copy xin,temp + or_into 0x60,temp /* extend xin with 5->1, 6->1 */ + copy temp,white_init + rtn + + + + /* return blank if free amaddr is found */ +get_free_amaddr: + bpatch patch13_5,mem_patch13 + fetch 1,mem_current_amaddr + increase 1,pdata + bne param_esco_addr,get_free_amaddr_cont + force 1,pdata +get_free_amaddr_cont: + store 1,mem_current_amaddr + iforce am_addr + rtn + +get_clk: + copy clkn,temp + rtn master + copy clke,temp + rtn + +get_clkbt: + deposit clkn_bt + rtn master + deposit clke_bt + rtn + + +supervision_update: + bpatch patch13_6,mem_patch13 + fetcht 4,mem_supervision_timer + call get_clkbt + isub temp,timeup /* and to 28 bits */ + deposit timeup + fetcht 2,mem_supervision_to + lshift temp,temp + isub temp,pdata + rtn + +supervision_flush: + bpatch patch13_7,mem_patch13 + call get_clkbt + store 4,mem_supervision_timer + rtn + +assert: + bpatch patch14_0,mem_patch14 + branch assert + +loop: + branch loop + +sleep: + rtn blank + /* sleep pdata clocks, only even clocks are accurate */ + rshift pdata,pdata + increase -3,pdata +sleep_loop: + increase -1,pdata + nbranch sleep_loop,zero + force 0,pdata + rtn + + + +init_param: + /* clear specified sched ram */ + arg 0x10,loopcnt + arg 0,contw + call memset0 + arg mem_le_state,contw + arg 10,loopcnt + call memset0 + jam 0,mem_sp_calc + jam 0,mem_fifo_temp + jam 0,mem_le_testtype + jam 0,mem_debug_config + jam 0,mem_lmp_conn_state + bpatch patch14_1,mem_patch14 + jam 0,mem_connection_options + jam 0,mem_tester_emulate + jam 0,mem_tester_cnt + setarg param_glap + store 3,mem_glap + setarg param_acl_pktlen + store 2,mem_acl_pktlen + jam param_sco_pktlen,mem_sco_pktlen + jam param_acl_pktcnt,mem_acl_pktcnt + jam param_sco_pktcnt,mem_sco_pktcnt + setarg param_hci_version + store 3,mem_hci_version +// setarg param_lmp_version +// store 3,mem_lmp_version +// setarg param_lmp_subversion +// store 2,mem_lmp_subversion + jam 0x60,mem_fhs_misc /* R1 for 1.28s ps interval,P2 */ + jam param_max_slot,mem_max_slot + jam 0x02,mem_fw_ver /* set firmware version */ + fetch 1,mem_ssp_enable + ncall init_memp,blank + fetch 1,mem_le_secure_connect_enable + ncall init_memp_256,blank + bpatch patch14_2,mem_patch14 + rtn wake + setarg 0 + store 2,mem_tx_len + rshift clkn_bt,pdata + store 4,mem_last_clkn + rtn + + + + +/*****************************************LPO************************************************/ + +lpmstate: + setarg 0xee21 + hstore 2,core_clkoff // disable unused peripherals + hfetch 4,core_gpio_in + store 4,mem_saved_gpio_in + hfetch 1,core_lpm_ldocnt + store 1,mem_wakup_from_power_flag + bbit0 gpio_latch,loadcode // power up boot + enable wake + bbit0 cold_wake,lpmwake + disable wake + deposit auxcnt + nbranch lpmwake,blank // sleep interrupted, wakeup + hfetch 1,core_lpm_ctrl + 3 + bbit1 reload_code,lpmwake + arg param_hibernate_clks,temp + branch lpm_enter_sleep +lpmwake: + hfetch 3,core_lpm_xtalcnt + hstore 3,core_lpm_reg + ifetch 1,contr + or_into isogate_mask,pdata // open all isolation gate&power switch + istore 1,contw + call lpm_write_ctrl2 + hfetch 1,core_lpm_isogate + set1 enable_retmem,pdata + hstore 1,core_lpm_isogate + call lpm_write_ctrl2 + call lpm_load_context,wake + hfetch 1,core_lpm_reg+2 + set0 gpio_latch,pdata // enable gpio fuction + hstore 1,core_lpm_reg+2 + call lpm_write_ctrl2 + nbranch loadcode,wake // wakeup from hibernate + rtnmark0 mark_otp_encrypt + hjam lock_otp,core_misc_ctrl // disable further read/write of key + rtn + +lpm_load_context: + fetch 1,mem_saved_spidctrl + hstore 1,core_spid_ctrl + fetch 3,mem_saved_gsel + hstore 3,core_gpio_sel + fetch 4,mem_saved_gpio+4 + hstore 4,core_gpio_out0 + fetch 4,mem_saved_gpio + hstore 4,core_gpio_oe0 + fetch 8,mem_saved_gpio+8 + hstore 8,core_gpio_pu0 + fetch 8,mem_saved_mark + iforce mark + hfetch 8,core_gpio_wakeup_low + store 8,mem_gpio_wakeup_low + call load_ucode + rtn + +lpm_save_context: + deposit mark + store 8,mem_saved_mark + hfetch 8,core_gpio_oe0 + store 8,mem_saved_gpio + ifetch 8,contr + istore 8,contw + hfetch 3,core_gpio_sel + store 3,mem_saved_gsel + hfetch 1,core_spid_ctrl + store 1,mem_saved_spidctrl + branch lpm_write_gpio_wakeup + +lpo_calibration: + hfetch 1,core_bist_ctrl + nbranch lpo_cal_inited,blank + fetch 3,mem_clks_per_lpo + nrtn blank + hjam 0xc0,core_bist_ctrl + hjam ccnt_start,core_misc_ctrl +lpo_cal_inited: + hfetch 1,core_perf_status + rtnbit0 1 + hfetch 3,core_clk_counter + store 3,mem_clks_per_lpo + rtn + + + /* temp is synced clke */ +lpm_adjust_clk: + bpatch patch14_3,mem_patch14 + deposit clke + call clk_diff_rt + fetcht 4,mem_sleep_counter_all + sub temp,0xff,null + rtn positive // interval too small + lshift8 pdata,pdata + lshift4 pdata,pdata + idiv temp + call wait_div_end + quotient pdata + arg param_lpm_adjmax,temp + call ceiling + store 1,mem_lpm_adjust + nbranch lpm_adjust_positive,user + sub pdata,0,pdata +lpm_adjust_positive: + fetcht 3,mem_clks_per_lpo + iadd temp,pdata + store 3,mem_clks_per_lpo +lpm_clear_counter: + setarg 0 + store 4,mem_sleep_counter_all + rtn + + + /* temp is lpo counter for doze */ +lpm_doze: + fetch 1,mem_lpm_config+2 + set1 reload_code,pdata + store 1,mem_lpm_config+2 + branch lpm_hibernate_normal + + + /* no retention memory at all */ +lpm_hibernate: + arg param_hibernate_clks,temp + fetch 1,mem_lpm_config+1 + set0 7,pdata /* lowest lpo */ + store 1,mem_lpm_config+1 +lpm_hibernate_normal: + bpatch patch14_4,mem_patch14 + call lpm_write_gpio_wakeup + fetch 1,mem_lpm_hibernate_switch + store 1,mem_lpm_xtalcnt + 4 + fetch 1,mem_lpm_xtalcnt + 2 + set1 cold_wake,pdata + store 1,mem_lpm_xtalcnt + 2 + + /* temp is lpo clocks to sleep */ +lpm_sleep: + bpatch patch14_5,mem_patch14 + call xtal_fast_wake + fetch 4,mem_sleep_counter_all + iadd temp,pdata + store 4,mem_sleep_counter_all + call lpm_save_context + fetch 5,mem_lpm_xtalcnt + hstore 4,core_lpm_reg + rshift32 pdata,rega + until null,lpo_edge + deposit clkn + store 6,mem_sleep_clkn + hjam lpmreg_sel_ctrl2,core_lpm_wr + until null,lpo_edge + until null,lpo_edge + deposit rega + hstore 1,core_lpm_isogate + hjam lpmreg_sel_ctrl2,core_lpm_wr +lpm_enter_sleep: + until null,lpo_edge + until null,lpo_edge + hstoret 4,core_lpm_reg + hjam lpmreg_sel_counter,core_lpm_wr + until null,never + + + + +lpm_recover_clk: + bpatch patch14_6,mem_patch14 + setarg 0 + copy auxcnt,null + branch lpm_recover_timeout,zero + hfetch 1,core_lpm_xtalcnt + hfetcht 1,core_lpm_buckcnt + isub temp,null + branch lpm_recover_xtal,positive + deposit temp +lpm_recover_xtal: + isub auxcnt,pdata + increase 1,pdata +lpm_recover_timeout: + increase 8,pdata + until null,lpo_edge + iadd lpo_time,pdata + fetcht 4,mem_sleep_counter + iadd temp,pdata + fetcht 3,mem_clks_per_lpo + imul32 temp,pdata + rshift8 pdata,pdata + rshift4 pdata,pdata + increase param_lpm_fix,pdata + arg 3750,temp + idiv temp + call wait_div_end + quotient pdata + lshift16 pdata,pdata + remainder temp + ior temp,pdata + fetcht 6,mem_sleep_clkn + call clk_add + copy temp,clkn + fetch 6,mem_context + coffset_clk_offset + call calc_clke2 + deposit clke + store 6,mem_pdatatemp + deposit auxcnt + istore 1,contw + hfetch 1,core_gpio_in1 + or_into 0xf0,pdata + istore 1,contw + rtn + +lpm_dispatch: + bpatch patch14_7,mem_patch14 + call lpo_calibration + fetch 3,mem_clks_per_lpo + rtn blank + fetch 1,mem_lpm_mode + rtn blank + fetch 1,mem_ssp_enable + branch lpm_dispatch_next,blank + fetch 1,mem_sp_local_key_invalid // simple pairing is not ready + rtn blank +lpm_dispatch_next: + fetch 1,mem_le_sc_calc + nrtn blank + call lpm_check_wake_lock + nrtn blank + fetch 1,mem_context + compare 3,pdata,0x7 /* sco won't sleep */ + nbranch lpm_dispatch_unconn,true + fetch 2,mem_context + coffset_tsniff + rtn blank /* role switch */ + rtn wake + bpatch patch15_0,mem_patch15 + fetcht 1,mem_lpm_current_mult + fetch 2,mem_context + coffset_tsniff + imul32 temp,pdata + rshift4 temp,temp + rshift2 temp,temp + isub temp,pdata + fetcht 4,mem_context + coffset_sniff_anchor + iadd temp,pdata + fetcht 1,mem_lpm_overhead + isub temp,pdata + lshift16 pdata,alarm + bpatch patch15_1,mem_patch15 + fetch 2,mem_context + coffset_rx_window + rshift pdata,pdata + call clk2bt + deposit alarm + call clk_diff + copy clke,temp + call clk_diff_rt + rtn user +lpm_dispatch_sleep: + call clk2lpo +lpm_dispatch_lpo: + bpatch patch15_2,mem_patch15 + fetch 1,mem_lpm_xtalcnt + isub temp,null + branch lpm_clear_counter,positive + storet 4,mem_sleep_counter + call app_will_enter_lpm + call l2cap_lpm_save_txbuf + fetcht 4,mem_sleep_counter + branch lpm_sleep + +lpm_dispatch_unconn: + bpatch patch15_3,mem_patch15 + fetch 1,mem_context + rtnbit1 state_inconn // wont sleep in connection + rtnbit1 state_inpage // wont sleep when paging + fetch 1,mem_ssp_enable + branch lpm_unconn_nossp,blank + fetch 1,mem_sp_local_key_invalid // simple pairing is not ready + rtn blank +lpm_unconn_nossp: + bpatch patch15_4,mem_patch15 + fetch 1,mem_le_adv_enable + nbranch lpm_unconn_cont,blank + fetch 1,mem_scan_mode + rtn blank +lpm_unconn_cont: + fetch 2,mem_lpm_interval + rtn blank +lpm_sleep_btclk: + fetcht 1,mem_lpm_overhead + isub temp,pdata + arg 7500,temp /* 1.25ms */ + imul32 temp,pdata + branch lpm_dispatch_sleep + +lpm_set_mult: + bpatch patch15_5,mem_patch15 + disable wake + fetch 1,mem_state + rtnbit0 state_insniff + nbranch lpm_not_match,match + call lpm_match + fetch 2,mem_rx_window_sniff + store 2,mem_rx_window + fetch 1,mem_arq + bbit1 wack,lpm_mult_short + bmark0 mark_lpm_mult_enable,lpm_mult_short + call l2cap_malloc_is_fifo_empty + nbranch lpm_mult_short,blank + fetch 1,mem_classic_bt_flag + bbit1 SHORT_MULT_FLAG,lpm_mult_short +lpm_mult_wait_timeout: + jam 0,mem_lpm_current_mult + bmark0 mark_lpm_mult_enable,lpm_mult_short + fetch 1,mem_lpm_mult_cnt + branch lpm_mult_long,blank + increase -1,pdata + store 1,mem_lpm_mult_cnt + rtn + + +classic_bt_set_mult_short_flag: + arg SHORT_MULT_FLAG,queue + branch classic_bluetooth_set_flag + +classic_bt_clr_mult_short_flag: + arg SHORT_MULT_FLAG,queue + branch classic_bluetooth_clr_flag + + + +lpm_match: + jam 0,mem_sniff_unint_lost + fetch 3,mem_sniff_rcv + increase 1,pdata + store 3,mem_sniff_rcv + rtn + +lpm_not_match: + bpatch patch15_6,mem_patch15 + fetcht 2,mem_rx_window_sniff + rshift temp,temp + fetch 2,mem_rx_window + iadd temp,pdata + store 2,mem_rx_window +lpm_lost: + jam 0,mem_lpm_current_mult + fetch 3,mem_sniff_lost + increase 1,pdata + store 3,mem_sniff_lost + fetch 1,mem_sniff_unint_lost + increase 1,pdata + store 1,mem_sniff_unint_lost + rtn + +lpm_mult_short: + jam 0,mem_lpm_current_mult + fetch 1,mem_lpm_mult_timeout + store 1,mem_lpm_mult_cnt + rtn + +lpm_mult_long: + fetcht 1,mem_lpm_mult + storet 1,mem_lpm_current_mult + rtn + +lpm_cal_xtal_startup: + bpatch patch15_7,mem_patch15 + fetch 1,mem_lpm_xtalcnt + nrtn blank + hjam clksel_rc,core_clksel + setarg 0xf0c + call lpm_write_config + setarg 200000 + call sleep + until null,lpo_edge + copy lpo_time,alarm + call xtal_fast_wake + hjam clksel_xtal,core_clksel + nop 10 + until null,lpo_edge + deposit lpo_time + isub alarm,pdata + increase 0x30,pdata + arg 0xff,temp + call ceiling + store 1,mem_lpm_xtalcnt + nop 30000 + nop 30000 + nop 30000 + rtn + +lpm_cal_xtal_startup_by_snooze: + fetch 1,mem_lpm_xtalcnt + nrtn blank + hjam 0xff,core_xtal_stable_time + hjam clksel_rc,core_clksel + call xtal_fast_wake + setarg 1000 + iadd lpo_time,alarm + snooze + deposit lpo_time + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + isub alarm,pdata + add pdata,0x30,pdata + arg 0xff,temp + call ceiling + store 1,mem_lpm_xtalcnt + nop 30000 + nop 30000 + nop 30000 //delay 90000 nop + rtn + + + + /* pdata is lpm_reg[11:0] */ +lpm_write_config: + arg 0xfff,contw + iand contw,contw + fetch 1,mem_lpm_config + and_into 0xf0,pdata + lshift8 pdata,pdata + ior contw,pdata + hstore 2,core_lpm_reg + ifetch 2,contr + istore 2,contw + +lpm_write_ctrl: + setarg lpmreg_sel_ctrl + branch lpm_write + +lpm_write_ctrl2: + setarg lpmreg_sel_ctrl2 +lpm_write: + until null,lpo_edge + hstore 1,core_lpm_wr + until null,lpo_edge + until null,lpo_edge + rtn + + +lpm_write_gpio_wakeup: + bpatch patch16_0,mem_patch16 + fetch 4,mem_gpio_wakeup_low + hstore 4,core_lpm_reg + setarg lpmreg_sel_gpiolow + call lpm_write + fetch 4,mem_gpio_wakeup_high + hstore 4,core_lpm_reg + setarg lpmreg_sel_gpiohigh + branch lpm_write + +lpm_get_wake_lock: + fetch 2,mem_lpm_wake_lock + qset1 pdata + store 2,mem_lpm_wake_lock + rtn + +lpm_put_wake_lock: + fetch 2,mem_lpm_wake_lock + qset0 pdata + store 2,mem_lpm_wake_lock + rtn + + + +lpm_check_wake_lock: + bpatch patch16_1,mem_patch16 + call app_check_wake_lock + fetch 2,mem_lpm_wake_lock + copy pdata,rega + fetch 1,mem_state_map + isolate1 smap_rxlmp,pdata + setflag true,wake_lock_lmp_rx,rega + fetch 1,mem_lmo_opcode1 + fetcht 1,mem_lmo_opcode2 + iadd temp,pdata + fetcht 1,mem_lmp_to_send + iadd temp,pdata + nsetflag blank,wake_lock_lmp_tx,rega + fetch 1,mem_le_tx_buff_used + nsetflag blank,wake_lock_ble_tx,rega + fetch 2,mem_l2cap_rxbuff1_len + fetcht 2,mem_l2cap_rxbuff2_len + iadd temp,pdata + nsetflag blank,wake_lock_l2cap_rx,rega + fetch UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51 + nsetflag blank,wake_lock_ipc_bt2c51,rega + fetch UTIL_FIFO_LEN,mem_ipc_fifo_c512bt + nsetflag blank,wake_lock_ipc_c512bt,rega + fetch 1,mem_hci_cmd + nsetflag blank,wake_lock_cmd,rega + fetch 1,mem_device_option + compare dvc_op_module,pdata,0xff + call lpm_uart_wake_lock,true + setarg -8 + iand rega,rega + copy rega,pdata + store 2,mem_lpm_wake_lock + rtn + +lpm_uart_wake_lock: + hfetch 2,core_uart_rxitems + nsetflag blank,wake_lock_uart_rx ,rega + hfetch 2,core_uart_txitems + nsetflag blank,wake_lock_uart_tx ,rega + rtn + +lpm_shut_down: + hfetch 4,core_lpm_ctrl + set0 27,pdata + hstore 4,core_lpm_reg + call lpm_write_ctrl + branch assert + +lpm_disable_exen_output: + hfetch 4,core_lpm_xtalcnt + set0 20,pdata + hstore 4,core_lpm_reg + branch lpm_write_ctrl2 + +check_bt_disabled: + fetch 2,mem_chip_functions + bbit1 bt_disabled,assert + rtn +check_ble_disabled: + fetch 2,mem_chip_functions + bbit1 ble_disabled,assert + rtn +check_module_disabled: + fetch 2,mem_chip_functions + bbit1 module_disable,assert + rtn + + + + + + + +//p_check_attempt_sniff: +// bbit0 state_insco,p_check_attempt_not_sco +// fetch 1,mem_current_sniff_attempt +// beq 2,p_check_attempt_sniff_restore_sco +// fetch 1,mem_arq +// bbit1 wack,p_check_attempt_notimeout +// bmark0 mark_esco_rxok,p_check_attempt_notimeout +//p_check_attempt_sniff_restore_sco: +// nbranch p_check_attempt_notimeout,master +// fetch 1,mem_lmp_to_send +// nbranch p_check_attempt_notimeout,blank +//p_check_attempt_sco_master: +// fetch 1,mem_sco_poll +// increase -1,pdata +// store 1,mem_sco_poll +// nbranch check_attempt_nomore,blank +// jam param_sco_poll,mem_sco_poll +// branch check_attempt_notimeout +//p_check_attempt_not_sco: +// compare type_null,type,0x1f +// branch check_timeout,true +// compare type_poll,type,0x1f +// branch check_timeout,true +// branch check_anchor_end +//p_check_attempt_notimeout: +//check_atttemp_decrease: +// fetch 1,mem_current_sniff_attempt +// increase -1,pdata +// store 1,mem_current_sniff_attempt +// rtn +//check_timeout: +// fetch 1,mem_sniff_timeout_temp +// increase 1,pdata +// store 1,mem_sniff_timeout_temp +//check_anchor_end: +// fetch 1,mem_current_sniff_attempt +// branch check_anchor_end_attempt0,blank +// call check_atttemp_decrease +// nrtn blank +//check_anchor_end_attempt0: +// fetch 1,mem_sniff_timeout_temp +// fetcht 1,mem_current_sniff_timeout +// isub temp,null +// branch p_blank,positive +// arg 1,pdata +// rtn +//p_blank: +// arg 0,pdata +// rtn + + + + +g24_dispatch: + bpatch patch16_2,mem_patch16 + call g24_head_ptr2regc + add regc,offset_24g_mode,regb + ifetch 1,regb + //fetch 1,mem_24g_mode + rtneq disable_24g + beq tx_24g,g24_transmit_process + beq rx_24g,g24_receive_process + rtn + +g24_head_ptr2regc: + fetcht 2,mem_24g_head_ptr + copy temp,regc + rtn + +g24_receive_process_init: + call g24_receive_init + branch g24_mode_switch_init + +g24_receive_process: + call g24_mode_switch + call g24_dongle_work_mode_auto + call g24_dongle_bind_mode_auto + branch g24_dongle_search_mode_auto + + +g24_pair_init: + //jam 0,mem_24g_pid + //jam G24_PAIR_CH,mem_24g_ch + call g24_set0_mem_pid + setarg G24_PAIR_CH + call g24_store_mem_ch + call g24_store_mem_pair_txpower + //fetch 4,mem_24g_paring_addr + //store 4,mem_24g_addr + add regc,offset_24g_paring_addr,rega + ifetch 4,rega + branch g24_store_mem_addr + +g24_ch: + call g24_head_ptr2regc + add regc,offset_24g_current_ch_number,regb + ifetcht 1,regb + //fetcht 1,mem_24g_current_ch_number + call g24_ch_temp_incre_size4 //map size =4 + add regc,offset_24g_current_ch_number,contw + //storet 1,mem_24g_current_ch_number + branch g24_contw_istoret_1byte + +g24_ch_temp_incre_size4: + call g24_ch_calc + increase 1,temp + and_into 3,temp + rtn + +g24_ch_calc: + add regc,offset_24g_addr,regb + ifetch 1,regb + //fetch 1,mem_24g_addr + and_into 0x03,pdata + mul32 pdata,4,rega //24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4 + add regc,offset_24g_ch_map1,pdata + //setarg mem_24g_ch_map1 + iadd rega,pdata + iadd temp,contr + ifetch 1,contr + //store 1,mem_24g_ch + branch g24_store_mem_ch + +g24_set_device_addr: + call g24_store_mem_tx_power_temp + call otp_enable_chgpump + setarg 0x7e2 + arg mem_temp,rega + arg 4,temp + call otpd_read_data + call otp_disable_chgpump + fetch 4,mem_temp //adc data from otp + call g24_store_mem_device_addr + //store 4,mem_24g_device_addr + nrtn blank + fetch 4,mem_lap + //store 4,mem_24g_device_addr + branch g24_store_mem_device_addr + +g24_transmit_rf_sta_init: + call g24_set1_mem_rf_last_sta + //jam 1,mem_24g_rf_last_sta + setarg 0 + call g24_store_mem_sync_cnt + //jam 0,mem_24g_sync_cnt +g24_transmit_rf_ctrl_clear: + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + and_into bits_data,pdata + //store 1,mem_24g_data_type + branch g24_store_mem_data_type + +g24_hop_ch_enable: + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + set1 bit_hop,pdata + call g24_store_mem_data_type + //store 1,mem_24g_data_type + //store 1,mem_24g_txpayload + branch g24_store_mem_txpayload + +g24_transmit_hop_pac_fail: + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 1,g24_transmit_hop_pac_fail_wo_hop + beq 2,g24_transmit_hop_pac_fail_hop_stage2 + rtn + +g24_transmit_hop_pac_fail_wo_hop: + call g24_set2_mem_sync_cnt + //jam 2,mem_24g_sync_cnt +g24_transmit_hop_pac_fail_stage1: + add regc,offset_24g_hop_pac_retry,contw + call g24_mem_set0 + //jam 0,mem_24g_hop_pac_retry + call g24_store_mem_rf_last_sta + //jam 0,mem_24g_rf_last_sta + branch g24_transmit_rf_ctrl_clear + +g24_transmit_hop_pac_fail_hop_stage2: + call g24_set0_mem_rf_hop_ch + //jam 0,mem_24g_rf_hop_ch + branch g24_transmit_hop_pac_fail_stage1 + +g24_transmit_pac_fail_hop_stage3: + add regc,offset_24g_txfail_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_txfail_cnt + increase 1,pdata + add regc,offset_24g_txfail_cnt,contw + istore 1,contw + //store 1,mem_24g_txfail_cnt + beq 0x20,g24_tx_attempt_fail + call g24_fetch_mem_rf_hop_ch + //fetch 1,mem_24g_rf_hop_ch + beq 1,g24_rf_hop_fastly + setarg 1 + call g24_store_mem_rf_hop_ch + //jam 1,mem_24g_rf_hop_ch +g24_rf_hop_attemp_again: + call g24_fetch_mem_rf_hop_ch + //fetch 1,mem_24g_rf_hop_ch + bne 1,g24_transmit_rf_ctrl_clear +g24_rf_hop_fastly: + add regc,offset_24g_hop_fastly_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_hop_fastly_cnt + increase 1,pdata + call g24_store_mem_hop_fastly_cnt + //store 1,mem_24g_hop_fastly_cnt + beq 4,g24_rf_hop_fastly_exit + call g24_ch + call g24_set2_mem_max_retry + //jam 2,mem_24g_max_retry + branch g24_transmit_packet + +g24_rf_hop_fastly_exit: + call g24_set0_mem_hop_fastly_cnt + //jam 0,mem_24g_hop_fastly_cnt + branch g24_transmit_rf_ctrl_clear + +g24_set0_mem_hop_fastly_cnt: + setarg 0 +g24_store_mem_hop_fastly_cnt: + add regc,offset_24g_hop_fastly_cnt,contw + branch g24_contw_istore_1byte + +g24_transmit_hop_pac_succ_wo_hop: + call g24_set2_mem_sync_cnt + //jam 2,mem_24g_sync_cnt +g24_transmit_hop_pac_succ: + call g24_set0_mem_rf_hop_ch + //jam 0,mem_24g_rf_hop_ch + call g24_set1_mem_rf_last_sta + //jam 1,mem_24g_rf_last_sta + branch g24_transmit_rf_ctrl_clear + +g24_transmit_succ_rf_config: + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 3,g24_transmit_hop_pac_succ + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + isolate0 bit_hop,pdata + branch g24_transmit_rf_sta_init,true + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 1,g24_transmit_hop_pac_succ_wo_hop + beq 2,g24_transmit_hop_pac_succ + rtn + +g24_rf_sta_check: + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + rtnne STATE_24G_PAIRING_SUCCESS + call g24_rf_laststa_synccnt_check + ncall g24_rf_sync_cnt_check,user2 + rtn + +g24_rf_laststa_synccnt_check: + disable user2 + add regc,offset_24g_rf_last_sta,rega + ifetch 1,rega + //fetch 1,mem_24g_rf_last_sta + rtnne 1 + add regc,offset_24g_sync_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_sync_cnt + rtnne 0 + setarg 1 + call g24_store_mem_rf_work_stage + //jam 1,mem_24g_rf_work_stage + call g24_set4_mem_max_retry + //jam 4,mem_24g_max_retry + branch enable_user2 + +g24_rf_sync_cnt_check: + add regc,offset_24g_sync_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_sync_cnt + branch g24_rf_hop_attemp,blank + increase -1,pdata + call g24_store_mem_sync_cnt + //store 1,mem_24g_sync_cnt + setarg 2 + call g24_store_mem_rf_work_stage + //jam 2,mem_24g_rf_work_stage + call g24_ch + //jam 4,mem_24g_max_retry + branch g24_set4_mem_max_retry + +g24_store_mem_rf_work_stage: + add regc,offset_24g_rf_work_stage,contw + branch g24_contw_istore_1byte + + +g24_rf_hop_attemp: + setarg 3 + call g24_store_mem_rf_work_stage + //jam 3,mem_24g_rf_work_stage + call g24_fetch_mem_rf_hop_ch + //fetch 1,mem_24g_rf_hop_ch + nbranch g24_rf_hop_attemp_again,blank + call g24_ch + //jam 2,mem_24g_max_retry +g24_set2_mem_max_retry: + setarg 2 + branch g24_store_mem_max_retry + +g24_transmit_process: + rtnmark0 mark_24g + set1 mark_24g_conext,mark + bpatch patch16_3,mem_patch16 + add regc,offset_24g_tx_without_int,rega + ifetch 1,rega + //fetch 1,mem_24g_tx_without_int + beq 1,g24_transmit_without_int + call g24_timer_check + nbranch g24_transmit_exit,user + call g24_interval_calibrate +g24_transmit_without_int: + add regc,offset_24g_tx_without_int,contw + call g24_mem_set0 + //jam 0,mem_24g_tx_without_int + call g24_txdata_prep + nbranch g24_enter_lpm,user + call g24_rf_sta_check +g24_transmit_start: + call g24_transmit_packet + call g24_power_ctrl +g24_transmit_exit: + set0 mark_24g_conext,mark + rtn + +g24_timer_timeout: + rtn zero + set1 28,pdata + rtn + +g24_interval_calibrate: + add regc,offset_24g_pac_index,rega + ifetch 1,rega + //fetch 1,mem_24g_pac_index + increase 1,pdata + add regc,offset_24g_pac_index,contw + istore 1,contw + //store 1,mem_24g_pac_index + beq 4,g24_interval_max + beq 5,g24_interval_min + rtn +g24_interval_max: + add regc,offset_24g_interval_max,rega + ifetch 1,rega + //fetch 1,mem_24g_interval_max +g24_interval_update: + //store 1,mem_24g_interval + add regc,offset_24g_interval,contw + branch g24_contw_istore_1byte + +g24_interval_min: + add regc,offset_24g_pac_index,contw + call g24_mem_set0 + //jam 0,mem_24g_pac_index + add regc,offset_24g_interval_min,rega + ifetch 1,rega + //fetch 1,mem_24g_interval_min + branch g24_interval_update + +g24_txdata_prep: + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + bne STATE_24G_PAIRING_SUCCESS,g24_pairing_sm + bpatch patch16_4,mem_patch16 + call g24_package_data + nbranch g24_txdata_last_pac,user + call g24_transmit_prep + call g24_power_ctrl_pac_incrs +g24_txdata_enable_tx: + //jam ENSURE_ON_24G,mem_24g_ensure + setarg ENSURE_ON_24G +g24_store_mem_ensure: + add regc,offset_24g_ensure,contw + branch g24_contw_istore_1byte + +g24_txdata_last_pac: + add regc,offset_24g_ensure,rega + ifetch 1,rega + //fetch 1,mem_24g_ensure + beq ENSURE_ON_24G,enable_user + rtn + +g24_package_data: + //rega:length,regb:contr + add regc,offset_24g_cb_data,temp + ifetch 2,temp + //fetch 2,mem_24g_cb_data + call callback_func + nrtn user + copy rega,pdata + store 1,mem_rega + add regc,offset_24g_abort_pac,contw + call g24_mem_set0 + //jam 0,mem_24g_abort_pac + call g24_transmit_rf_ctrl_clear + store 1,mem_24g_common_temp + fetch 1,mem_rega + copy pdata,rega + add rega,1,temp + arg mem_24g_common_temp+1,contw + copy rega,loopcnt + copy regb,contr + call memcpy + arg mem_24g_common_temp,rega +g24_put_data_in_buff: + rtnmark0 mark_24g_conext + add regc,offset_24g_datalen,contw + istoret 1,contw + //storet 1,mem_24g_datalen + copy temp,loopcnt + add regc,offset_24g_txbuf,contw + //arg mem_24g_txbuf,contw + copy rega,contr + branch memcpy + +g24_transmit_prep: +// total length + add regc,offset_24g_datalen,rega + ifetch 1,rega + //fetch 1,mem_24g_datalen + increase 2,pdata + add regc,offset_24g_txlen,contw + istore 1,contw + //store 1,mem_24g_txlen +// data type + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + call g24_store_mem_txpayload + //store 1,mem_24g_txpayload +//prepare 5bit payload length, 2bit PID, 1bit NO_ACK + add regc,offset_24g_datalen,rega + ifetch 1,rega + //fetch 1,mem_24g_datalen + lshift3 pdata,pdata + add regc,offset_24g_pid,rega + ifetcht 1,rega + //fetcht 1,mem_24g_pid + and temp,0x03,temp + lshift temp,temp + ior temp,pdata + add regc,offset_24g_no_ack,rega + ifetcht 1,rega + //fetcht 1,mem_24g_no_ack + iadd temp,pdata + istore 1,contw +//prepare payload data + add regc,offset_24g_datalen,rega + ifetch 1,rega + //fetch 1,mem_24g_datalen + iforce loopcnt + add regc,offset_24g_txbuf,contr + //arg mem_24g_txbuf,contr + branch memcpy + +g24_send_abort_packet: + call g24_set1_mem_abort_pac + //jam 1,mem_24g_abort_pac + call g24_set0_mem_rf_hop_ch + //jam 0,mem_24g_rf_hop_ch + call g24_power_ctrl_reinit + call g24_transmit_rf_ctrl_clear + store 1,mem_24g_common_temp + call g24_put_data_in_buff_pre + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + set1 bit_abort,pdata + call g24_store_mem_data_type + //store 1,mem_24g_data_type + call g24_transmit_prep + call g24_txdata_enable_tx + branch g24_transmit_start + +g24_put_data_in_buff_pre: + store 1,mem_24g_common_temp+1 + call g24_fetch_mem_device_addr + //fetch 4,mem_24g_device_addr + store 4,mem_24g_common_temp+2 + arg 6,temp + arg mem_24g_common_temp,rega + branch g24_put_data_in_buff + +g24_enter_lpm: + add regc,offset_24g_abort_pac,rega + ifetch 1,rega + //fetch 1,mem_24g_abort_pac + branch g24_send_abort_packet,blank +g24_enter_lpm_prepare: + // some thing need to do and do not enter 24g long sleep + add regc,offset_24g_cb_lpm_prepare,rega + ifetch 2,rega + //fetch 2,mem_24g_cb_lpm_prepare + branch callback_func + +g24_lpm_long_sleep: + call g24_head_ptr2regc + //fetch 8,mem_24g_enter_hibernate + call lpo_calibration + fetch 3,mem_clks_per_lpo + rtn blank + add regc,offset_24g_cb_lpm_before,temp + ifetch 2,temp + //fetch 2,mem_24g_cb_lpm_before + call callback_func + add regc,offset_24g_enter_hibernate,temp + ifetch 8,temp + call clk2lpo + storet 4,mem_sleep_counter + branch lpm_sleep + +g24_transmit_packet: + call g24_head_ptr2regc + add regc,offset_24g_retry,contw + call g24_mem_set0 + //jam 0,mem_24g_retry +g24_transmit_loop: + call g24_transmit_receive_ack + nbranch g24_retransmit,sync + nbranch g24_retransmit,user3 + call g24_ackpayload_parse + call g24_power_ctrl_ack_incrs +g24_transmit_next_packet: + call g24_head_ptr2regc + add regc,offset_24g_pid,rega + ifetch 1,rega + //fetch 1,mem_24g_pid + increase 1,pdata + call g24_store_mem_pid + //store 1,mem_24g_pid + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + bne STATE_24G_PAIRING_SUCCESS,g24_paring_mode + call g24_transmit_succ_rf_config +g24_transmit_abandon: + setarg 0 + add regc,offset_24g_txfail_cnt,contw + istore 2,contw //include mem_24g_get_ack_fail + //store 1,mem_24g_txfail_cnt + //store 1,mem_24g_get_ack_fail + //jam ENSURE_OFF_24G,mem_24g_ensure + setarg ENSURE_OFF_24G + branch g24_store_mem_ensure + + +g24_transmit_receive_ack: + disable user3 + call g24_transmit + call g24_head_ptr2regc + add regc,offset_24g_no_ack,rega + ifetch 1,rega + //fetch 1,mem_24g_no_ack + beq no_ack_24g,g24_transmit_no_ack //tx no ack + call g24_receive_packet + branch g24_end_of_packet +g24_transmit_no_ack: + call g24_end_of_packet + branch g24_transmit_next_packet + + +g24_retransmit: + bpatch patch16_5,mem_patch16 + add regc,offset_24g_get_ack_fail,rega + ifetch 1,rega + //fetch 1,mem_24g_get_ack_fail + increase 1,pdata + add regc,offset_24g_get_ack_fail,contw + istore 1,contw + //store 1,mem_24g_get_ack_fail + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + bne STATE_24G_PAIRING_SUCCESS,g24_tx_paring_retry + add regc,offset_24g_retry,rega + ifetcht 1,rega + //fetcht 1,mem_24g_retry + increase 1,temp + add regc,offset_24g_retry,contw + istoret 1,contw + //storet 1,mem_24g_retry + add regc,offset_24g_max_retry,rega + ifetch 1,rega + //fetch 1,mem_24g_max_retry + isub temp,pdata + nbranch g24_transmit_loop,blank + bpatch patch16_6,mem_patch16 + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 3,g24_transmit_pac_fail_hop_stage3 + add regc,offset_24g_hop_pac_retry,rega + ifetch 1,rega + //fetch 1,mem_24g_hop_pac_retry + increase 1,pdata + add regc,offset_24g_hop_pac_retry,contw + istore 1,contw + //store 1,mem_24g_hop_pac_retry + beq 2,g24_transmit_hop_pac_fail + call g24_hop_ch_enable + setarg 1 + call g24_store_mem_max_retry + //jam 1,mem_24g_max_retry + branch g24_transmit_packet + +g24_tx_paring_retry: + add regc,offset_24g_get_ack_fail,rega + ifetch 1,rega + //fetch 1,mem_24g_get_ack_fail + rtnne 0xff + add regc,offset_24g_get_ack_fail,contw + call g24_mem_set0 + //jam 0,mem_24g_get_ack_fail + branch g24_stop_24g_mode + +g24_tx_attempt_fail: + add regc,offset_24g_txfail_cnt,contw + call g24_mem_set0 + //jam 0,mem_24g_txfail_cnt +g24_stop_24g_mode: + jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp + branch ui_ipc_send_event + +g24_ackpayload_parse: + call g24_read_len_pid_crc + add regc,offset_24g_rxdata_length,rega + ifetch 1,rega + //fetch 1,mem_24g_rxdata_length //ack payload length + rtn blank + iforce loopcnt + add regc,offset_24g_rxbuf_add2,contr + //arg mem_24g_rxbuf+2,contr + add regc,offset_24g_rxpayload,contw + //arg mem_24g_rxpayload,contw //ack payload buffer + branch memcpy + + +g24_read_len_pid_crc: +//read control + call g24_fetch_mem_rxbuf_add1 + //fetch 1,mem_24g_rxbuf+1 + rshift3 pdata,pdata + add regc,offset_24g_rxdata_length,contw + istore 1,contw + //store 1,mem_24g_rxdata_length +//get crc + increase 1,pdata + add regc,offset_24g_rxbuf_add1,contr + //arg mem_24g_rxbuf+1,contr + iadd contr,contr + ifetch 3,contr + add regc,offset_24g_sta_crc,contw + istore 3,contw + //store 3,mem_24g_sta_crc +//read pid + call g24_fetch_mem_rxbuf_add1 + //fetch 1,mem_24g_rxbuf+1 + rshift pdata,pdata + and pdata,0x03,pdata + add regc,offset_24g_sta_pid,contw + istore 1,contw + //store 1,mem_24g_sta_pid + rtn + +g24_prep: + disable enable_crc + disable enable_white + setarg 0x555555 + iforce crc24_init + rtn + +g24_set_freq_tx: + call set_sync_on + add regc,offset_24g_ch,rega + ifetcht 1,rega + //fetcht 1,mem_24g_ch + branch set_freq_tx + +g24_transmit: + call g24_prep + call g24_set_freq_tx + set1 TXGFSK,radio_ctrl + enable encode_fec0 + enable is_tx + disable is_rx + call le_enable + call g24_fetch_mem_addr + //fetch 4,mem_24g_addr + iforce access + inject mod,32 + enable enable_crc + add regc,offset_24g_txlen,rega + ifetch 1,rega + //fetch 1,mem_24g_txlen + iforce loopcnt + add regc,offset_24g_txpayload,contr + //arg mem_24g_txpayload,contr +g24tr_loop: + ifetch 1,contr + inject mod,8 + loop g24tr_loop + enable enable_parity + inject mod,24 //crc + disable enable_parity + until null,tx_clear + bpatch patch16_7,mem_patch16 + nop 100 + disable encode_fec0 + rtn + +g24_receive_packet: + disable user3 + force 0,radio_ctrl + add regc,offset_24g_ch,rega + ifetcht 1,rega + //fetcht 1,mem_24g_ch + call set_freq_rx + call rf_rx_enable +g24_receive_rxon: + call g24_prep + enable decode_fec0 + enable is_rx + disable is_tx + call le_enable + call g24_fetch_mem_addr + //fetch 4,mem_24g_addr + iforce access + enable swfine + add regc,offset_24g_rx_window,rega + ifetch 2,rega + //fetch 2,mem_24g_rx_window + iforce stop_watch + correlate null,timeout + nbranch g24_sync_timeout,sync + enable enable_crc + parse demod,bucket,8 + rshift3 pwindow,pdata + add regc,offset_24g_rxbuf,contw + istore 1,contw + //store 1,mem_24g_rxbuf //device id + add regc,offset_24g_mode,rega + ifetch 1,rega + //fetch 1,mem_24g_mode + beq rx_24g,g24_receive_skip + bpatch patch17_0,mem_patch17 + add regc,offset_24g_rxbuf,rega + ifetch 1,rega + //fetch 1,mem_24g_rxbuf + add regc,offset_24g_data_type,rega + ifetcht 1,rega + //fetcht 1,mem_24g_data_type + icompare bits_data,temp + nbranch g24_end_of_packet,true +g24_receive_skip: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + rshift3 pdata,pdata + and pdata,0x1f,loopcnt //max payload: 32bytes + branch g24rx_nopayload,zero +g24rx_loop: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop g24rx_loop +g24rx_nopayload: + parse demod,bucket,24 + rshift32 pdata,pdata + rshift16 pdata,pdata + istore 3,contw + branch g24_end_of_packet,crc_failed + enable user3 + disable decode_fec0 + rtn +// branch rssi_signal + +g24_end_of_packet: + disable encode_fec0 + disable decode_fec0 + disable enable_crc + disable enable_white + branch shutdown_radio,is_rx + until null,tx_clear + nop 100 /* flush out the last bit */ + branch shutdown_radio + +g24_sync_timeout: + call rssi_noise + branch g24_end_of_packet + +rssi_noise: + call save_rssi + rtn blank + add regc,offset_rssi_noise_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_index + arg mem_rssi_noise_buffer,rega + //arg mem_rssi_noise_buf,rega + call rssi_noise_store + add regc,offset_rssi_noise_index,contw + //storet 1,mem_rssi_noise_index +g24_contw_istoret_1byte: + istoret 1,contw + rtn + +rssi_noise_store: + arg RSSI_BUF_LEN_NOISE,regb + branch rssi_store + +/* +rssi_signal: + call save_rssi + rtn blank + add regc,offset_rssi_signal_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_signal_index + add regc,offset_rssi_signal_buf,rega + //arg mem_rssi_signal_buf,rega + arg RSSI_BUF_LEN_SIGNAL,regb + call rssi_store + add regc,offset_rssi_signal_index,contw + istoret 1,contw + //storet 1,mem_rssi_signal_index + rtn +*/ +rssi_store: + copy rega,pdata + iadd temp,contw + fetch 1,mem_rssi + istore 1,contw + increase 1,temp + copy regb,pdata + iand_into temp + rtn + +rssi_average: + arg 0,temp + copy rega,contr +rssi_average_loop: + ifetch 1,contr + iadd temp,temp + loop rssi_average_loop + rshift8 temp,temp + rtn + +g24_power_ctrl_init: + call g24_head_ptr2regc + call g24_power_ctrl_incrs_level1 + setarg 1 + call g24_store_mem_power_ctrl_level + //jam 1,mem_power_ctrl_level +g24_power_ctrl_reinit: + setarg 0 + call g24_store_mem_power_ctrl_pac + //jam 0,mem_power_ctrl_packet_cnt + istore 1,contw + //jam 0,mem_power_ctrl_ack_cnt + rtn + +g24_power_ctrl_pac_incrs: + call g24_fetch_mem_power_ctrl_pac + //fetch 1,mem_power_ctrl_packet_cnt + increase 1,pdata +g24_store_mem_power_ctrl_pac: + //store 1,mem_power_ctrl_packet_cnt + add regc,offset_power_ctrl_packet_cnt,contw + branch g24_contw_istore_1byte + +g24_power_ctrl_ack_incrs: + //fetch 1,mem_power_ctrl_ack_cnt + //store 1,mem_power_ctrl_ack_cnt + add regc,offset_power_ctrl_ack_cnt,rega + ifetch 1,rega + increase 1,pdata + add regc,offset_power_ctrl_ack_cnt,contw + branch g24_contw_istore_1byte + +g24_power_ctrl: + bpatch patch17_1,mem_patch17 + call g24_fetch_mem_power_ctrl_pac + //fetch 1,mem_power_ctrl_packet_cnt + sub pdata,POWER_CTRL_MAX_PACKET_CNT,null + rtn positive + add regc,offset_power_ctrl_ack_cnt,rega + ifetcht 1,rega + //fetcht 1,mem_power_ctrl_ack_cnt + isub temp,temp //loss packet cnt + call g24_power_ctrl_reinit + setarg offset_power_ctrl_threshold_up + iadd regc,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_threshold_up + isub temp,null + nbranch g24_power_ctrl_incrs,positive + setarg offset_power_ctrl_threshold_down + iadd regc,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_threshold_down + isub temp,null + branch g24_power_ctrl_decrs,positive + rtn + +g24_power_ctrl_incrs: + add regc,offset_power_ctrl_level,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_level + beq 2,g24_power_ctrl_incrs_level2 + increase 1,pdata + call g24_store_mem_power_ctrl_level + //store 1,mem_power_ctrl_level + beq 1,g24_power_ctrl_incrs_level1 +g24_power_ctrl_incrs_level2: + setarg POWER_CTRL_LOSSPAC_THRESH_UP2 + call g24_store_mem_power_ctrl_threshold_up + //jam POWER_CTRL_LOSSPAC_THRESH_UP2,mem_power_ctrl_threshold_up + setarg POWER_CTRL_LOSSPAC_THRESH_DOWN2 + call g24_store_mem_power_ctrl_threshold_down + //jam POWER_CTRL_LOSSPAC_THRESH_DOWN2,mem_power_ctrl_threshold_down +// jam POWER_CTRL_RSSI_THRESH_DOWN2,mem_rssi_ctrl_threshold_down + add regc,offset_power_ctrl_txpwr_level2,rega + //fetch 1,mem_power_ctrl_txpwr_level2 + branch g24_ifetch_rega_store_mem_txpower + +g24_power_ctrl_decrs: + add regc,offset_power_ctrl_level,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_level + beq 0,g24_power_ctrl_decrs_level0 + increase -1,pdata + call g24_store_mem_power_ctrl_level + //store 1,mem_power_ctrl_level + beq 0,g24_power_ctrl_decrs_level0 +g24_power_ctrl_decrs_level1: +// call rssi_check_distance +// nrtn user +g24_power_ctrl_incrs_level1: + setarg POWER_CTRL_LOSSPAC_THRESH_UP1 + call g24_store_mem_power_ctrl_threshold_up + //jam POWER_CTRL_LOSSPAC_THRESH_UP1,mem_power_ctrl_threshold_up + setarg POWER_CTRL_LOSSPAC_THRESH_DOWN1 + call g24_store_mem_power_ctrl_threshold_down + //jam POWER_CTRL_LOSSPAC_THRESH_DOWN1,mem_power_ctrl_threshold_down +// jam POWER_CTRL_RSSI_THRESH_DOWN1,mem_rssi_ctrl_threshold_down + setarg offset_power_ctrl_txpwr_level1 +g24_iadd_offset_mem_txpower: + iadd regc,rega +g24_ifetch_rega_store_mem_txpower: + ifetch 1,rega + //fetch 1,mem_power_ctrl_txpwr_level1 + branch g24_store_mem_txpower + +g24_power_ctrl_decrs_level0: +// call rssi_check_distance +// nrtn user + setarg POWER_CTRL_LOSSPAC_THRESH_UP0 + call g24_store_mem_power_ctrl_threshold_up + //jam POWER_CTRL_LOSSPAC_THRESH_UP0,mem_power_ctrl_threshold_up + setarg POWER_CTRL_LOSSPAC_THRESH_DOWN0 + call g24_store_mem_power_ctrl_threshold_down + //jam POWER_CTRL_LOSSPAC_THRESH_DOWN0,mem_power_ctrl_threshold_down +// jam POWER_CTRL_RSSI_THRESH_DOWN0,mem_rssi_ctrl_threshold_down + setarg offset_power_ctrl_txpwr_level0 + //fetch 1,mem_power_ctrl_txpwr_level0 + branch g24_iadd_offset_mem_txpower + +/* +rssi_check_distance: + disable user + arg mem_rssi_signal_buf,rega + arg RSSI_BUF_LEN_SIGNAL+1,loopcnt + call rssi_average + storet 1,mem_rssi_signal_avg + fetch 1,mem_rssi_ctrl_threshold_down + isub temp,null + branch enable_user,positive + rtn +*/ +g24_start_pairing_sm1: + set1 mark_24g,mark + call g24_pair_init +g24_set_pairing_sm_1: + //jam STATE_24G_PAIRING_1,mem_24g_pairing_sm + setarg STATE_24G_PAIRING_1 + branch g24_store_mem_pairing_sm + +g24_pairing_sm: + add regc,offset_24g_ensure,rega + ifetch 1,rega + //fetch 1,mem_24g_ensure + beq ENSURE_ON_24G,enable_user + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + beq STATE_24G_PAIRING_1,g24_pairing_sm_1 + beq STATE_24G_PAIRING_2,g24_pairing_sm_2 + beq STATE_24G_PAIRING_3,g24_pairing_sm_3 + branch assert + +g24_pairing_sm_1: + setarg STATE_24G_PAIRING_1_WAITING_ACK + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm + jam 0xaa,mem_24g_common_temp + branch g24_pairing_sm_common +g24_pairing_sm_2: + setarg STATE_24G_PAIRING_2_WAITING_ACK + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm + jam 0x55,mem_24g_common_temp + branch g24_pairing_sm_common +g24_pairing_sm_3: + setarg STATE_24G_PAIRING_3_WAITING_ACK + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm + jam 0x22,mem_24g_common_temp +g24_pairing_sm_common: + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + and_into bits_data,pdata + store 1,mem_24g_common_temp+1 + call g24_fetch_mem_device_addr + //fetch 4,mem_24g_device_addr + store 4,mem_24g_common_temp+2 +g24_put_pairing_data_in_buff: + jam 0,mem_24g_common_temp+6 + arg mem_24g_common_temp,rega + arg 7,temp + call g24_put_data_in_buff + call g24_transmit_prep + call g24_txdata_enable_tx + branch enable_user + +g24_paring_mode: + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + rtneq STATE_24G_PAIRING_SUCCESS + beq STATE_24G_PAIRING_1_WAITING_ACK,g24_pairing_sm_1_waiting_ack + beq STATE_24G_PAIRING_2_WAITING_ACK,g24_pairing_sm_2_waiting_ack + beq STATE_24G_PAIRING_3_WAITING_ACK,g24_pairing_sm_3_waiting_ack + rtn + +g24_pairing_sm_1_waiting_ack: + setarg STATE_24G_PAIRING_2 + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_2,mem_24g_pairing_sm + branch g24_transmit_abandon +g24_pairing_sm_2_waiting_ack: + setarg STATE_24G_PAIRING_3 + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_3,mem_24g_pairing_sm + branch g24_transmit_abandon +g24_pairing_sm_3_waiting_ack: + setarg STATE_24G_PAIRING_SUCCESS + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm + jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp + call ui_ipc_send_event + add regc,offset_24g_rxpayload_add2,rega + ifetch 4,rega + //fetch 4,mem_24g_rxpayload+2 + call g24_store_mem_addr + //store 4,mem_24g_addr + branch g24_transmit_abandon + +g24_auto_pair_start: + set0 mark_24g,mark + call g24_auto_pair_set_device_info + call g24_tx_attemp_data_prep +g24_auto_pair_restart: + call g24_set0_mem_check_dongle_times +g24_auto_pair_start_loop: + nop 2000 + call g24_fetch_mem_check_dongle_times + beq 0xff,g24_stop_24g_mode + call g24_transmit_receive_ack + nbranch g24_auto_pair_retry,sync + nbranch g24_auto_pair_retry,user3 + call g24_ackpayload_parse + call g24_head_ptr2regc + add regc,offset_24g_paring_addr,rega + ifetcht 4,rega + call g24_fetch_mem_addr_isub_temp + branch g24_start_pairing_sm1,zero + call g24_head_ptr2regc + add regc,offset_24g_rxpayload_add2,rega + ifetch 4,rega + beq 0,g24_auto_pair_restart + call g24_store_mem_addr + branch g24_tx_attemp_dongle_succ + +g24_auto_pair_retry: + call g24_fetch_mem_check_dongle_times + increase 1,pdata + call g24_store_mem_check_dongle_times + + call g24_fetch_mem_auto_paring_switch + increase 1,pdata + and_into 1,pdata + call g24_store_mem_auto_paring_switch + beq 0,g24_auto_pair_device_attemp + beq 1,g24_auto_pair_pair_attemp + rtn + +g24_fetch_mem_auto_paring_switch: + setarg offset_24g_auto_pair_switch + branch g24_set_rega_ifetch_1byte +g24_store_mem_auto_paring_switch: + arg offset_24g_auto_pair_switch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_auto_pair_set_device_info: + call g24_store_mem_tx_power + call g24_fetch_mem_device_addr + call g24_store_mem_addr + branch g24_ch + +g24_auto_pair_device_attemp: + call g24_auto_pair_set_device_info + branch g24_auto_pair_start_loop + +g24_auto_pair_pair_attemp: + call g24_pair_init + branch g24_auto_pair_start_loop + + +g24_start_24g_mode: + set0 mark_24g,mark + call g24_ch + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + rtnne STATE_24G_PAIRING_SUCCESS + call g24_tx_attemp_data_prep + call g24_set0_mem_check_dongle_times + //jam 0,mem_24g_check_dongle_times +g24_tx_attemp_dongle_loop: + nop 2000 + call g24_fetch_mem_check_dongle_times + //fetch 1,mem_24g_check_dongle_times + beq 0xff,g24_stop_24g_mode + call g24_transmit_receive_ack + nbranch g24_attemp_txdata_retry,sync + nbranch g24_attemp_txdata_retry,user3 +g24_tx_attemp_dongle_succ: + set1 mark_24g,mark + call g24_set0_mem_check_dongle_times + setarg STATE_24G_PAIRING_SUCCESS + call g24_store_mem_pairing_sm + //jam 0,mem_24g_check_dongle_times + jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp + branch ui_ipc_send_event + +g24_tx_attemp_data_prep: + set1 mark_24g_conext,mark + jam 0xff,mem_24g_common_temp + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + call g24_put_data_in_buff_pre + branch g24_transmit_prep + +g24_attemp_txdata_retry: + call g24_fetch_mem_check_dongle_times + //fetch 1,mem_24g_check_dongle_times + increase 1,pdata + call g24_store_mem_check_dongle_times + //store 1,mem_24g_check_dongle_times + call g24_ch + branch g24_tx_attemp_dongle_loop + +g24_check_51cmd_start_24g: + call g24_store_mem_tx_power + //fetch 1,mem_tx_power_temp + //store 1,mem_tx_power + setarg STATE_24G_PAIRING_SUCCESS + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm + branch g24_start_24g_mode +/* +g24_check_51cmd_stop_24g: + call g24_store_mem_tx_power + set0 mark_24g,mark + branch le_disable +*/ + + +dongle_init: + bpatch patch17_2,mem_patch17 + call g24_head_ptr2regc + setarg dongle_rxdata_type1 + add regc,offset_24g_cb_rxdata_type1,contw + istore 2,contw + //store 2,mem_24g_cb_rxdata_type1 + call g24_receive_init + call usb_init + call g24_fetch_mem_pair_mode + //fetch 1,mem_24g_pair_mode + bpatch patch17_3,mem_patch17 + beq 0x00,dongle_auto_bind + beq 0x01,dongle_pc_bind + beq 0x0f,dongle_all_powerful + branch assert + +g24_receive_init: + call g24_store_mem_tx_power_temp + arg 0x80,loopcnt + arg mem_rssi_noise_buffer,contw + branch memset0 + +dongle_all_powerful: + call dongle_check_mode +dongle_all_powerful_loop: + call g24_dongle_work_mode + call usb_isr + branch dongle_all_powerful_loop + +dongle_pc_bind: + bpatch patch17_4,mem_patch17 + call dongle_check_mode +dongle_pc_bind_loop: + call g24_dongle_work_mode + call g24_dongle_bind_mode + call usb_isr + call dongle_usb_dispatch + branch dongle_pc_bind_loop + +dongle_check_mode: + //jam DONGLE_WORK,mem_dongle_work_mode + //jam CLEAR_INIT,mem_dongle_mode_init + //jam 0,mem_24g_ackpayload_enable + call g24_set_work_mem_dongle_work_mode + call g24_set0_mem_dongle_mode_init + branch g24_set0_mem_ackpayload_enable + +g24_dongle_work_mode: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_WORK +g24_dongle_work_mode_start: + call g24_dongle_work_init + call g24_ch_process + call g24_receive_packet_start + branch g24_blank_data_process + +g24_dongle_work_init: + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + rtnbit1 DONGLE_WORK + set1 DONGLE_WORK,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_store_mem_tx_power + //fetch 1,mem_tx_power_temp + //store 1,mem_tx_power + call g24_set0_mem_ackpayload_enable + //jam 0,mem_24g_ackpayload_enable + jam 0,mem_usb_tx_enable + call g24_set1_mem_abort_pac + //jam 1,mem_24g_abort_pac + call g24_dongle_init +g24_rx_interrupt_clear: + add regc,offset_24g_rxbuf,contw + //arg mem_24g_rxbuf,contw + arg 66,loopcnt + branch clear_mem + +g24_dongle_init: + call g24_set0_mem_pid + //jam 0,mem_24g_pid + call g24_fetch_mem_rx_addr + //fetch 4,mem_24g_rx_addr + call g24_store_mem_addr + //store 4,mem_24g_addr + branch g24_ch + +g24_ch_process: + bpatch patch17_5,mem_patch17 + call g24_fetch_mem_abort_pac + //fetch 1,mem_24g_abort_pac + beq 1,g24_noise_rssi + call g24_fetch_mem_hop_pac + //fetch 1,mem_24g_hop_pac + beq 1,g24_ch + setarg offset_24g_hop_btclk + iadd regc,rega + ifetcht 4,rega + //fetcht 4,mem_24g_hop_btclk + copy clkn_bt,pdata + isub temp,null + ncall g24_timer_timeout,positive + copy pdata,regb + setarg offset_24g_hop_btclk + iadd regc,rega + ifetch 4,rega + copy pdata,temp + //fetch 4,mem_24g_hop_btclk + setarg offset_24g_hop_interval + iadd regc,rega + copy temp,pdata + ifetcht 1,rega + //fetcht 1,mem_24g_hop_interval + iadd temp,temp + copy regb,pdata + isub temp,null + nrtn positive + set0 28,pdata + setarg offset_24g_hop_btclk + iadd regc,contw + istore 4,contw + //store 4,mem_24g_hop_btclk +g24_ch_update: + call g24_ch + call g24_fetch_mem_rf_laststa + //fetch 1,mem_24g_rf_laststa + increase 1,pdata + call g24_store_mem_rf_laststa + //store 1,mem_24g_rf_laststa + rtnne 2 + call g24_set0_mem_rf_laststa + //jam 0,mem_24g_rf_laststa + //jam 1,mem_24g_abort_pac + //rtn + branch g24_set1_mem_abort_pac + +g24_ch_timer_reinit: + copy clkn_bt,pdata + arg offset_24g_hop_btclk,rega + call g24_set_contw_with_temp + istore 4,contw + //store 4,mem_24g_hop_btclk + //jam 0,mem_24g_rf_laststa + //rtn + branch g24_set0_mem_rf_laststa + +g24_noise_rssi: + arg mem_rssi_noise_buffer,rega + call g24_noise_rssi_average + add regc,offset_rssi_noise_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + branch g24_ch + +g24_noise_rssi_average: + arg RSSI_BUF_LEN_NOISE+1,loopcnt + branch rssi_average + +g24_blank_data_process: + call g24_ms_blank_data + call g24_kb_blank_data + branch g24_kb_mul_blank_data + +g24_ms_blank_data: + setarg offset_24g_ms_blank_data_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_blank_data_enable + rtn blank + arg TIMER_MS_BLANK,queue + call timer_check + nrtn blank + call g24_set0_mem_ms_blank_data_enable + //jam 0,mem_24g_ms_blank_data_enable + setarg MS_REPORT_ID + store 1,mem_usb_mouse_data + setarg 0 + istore 7,contw + branch g24_data_type1_usbtx_enable + +g24_kb_blank_data: + setarg offset_24g_kb_blank_data_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_blank_data_enable + rtn blank + arg TIMER_KB_BLANK,queue + call timer_check + nrtn blank + call g24_set0_mem_kb_blank_data_enable + //jam 0,mem_24g_kb_blank_data_enable + arg mem_usb_kb_data,contw + arg 2,loopcnt + call memset0 + jam KB_NORMAL_REPORT_ID,mem_usb_kb_data + branch g24_kb_data_into_ep1_fifo + +g24_kb_mul_blank_data: + setarg offset_24g_kb_mul_blank_data_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_mul_blank_data_enable + rtn blank + arg TIMER_KB_MUL_BLANK,queue + call timer_check + nrtn blank + call g24_set0_mem_kb_mul_blank_data_enable + //jam 0,mem_24g_kb_mul_blank_data_enable + arg mem_usb_kb_multikey,contw + arg 2,loopcnt + call memset0 + jam KB_MULTIKEY_REPORT_ID,mem_usb_kb_multikey + branch g24_kb_mul_data_into_ep2_fifo + +g24_dongle_bind_mode: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_BIND + call g24_dongle_bind_init + branch g24_dongle_bind_data_process + +g24_dongle_bind_init: + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + rtnbit1 DONGLE_BIND + set1 DONGLE_BIND,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_set1_mem_ackpayload_enable + //jam 1,mem_24g_ackpayload_enable + call g24_pair_init + setarg 0 + arg offset_dongle_ms_bind_step,rega + call g24_set_contw_with_temp + //store 3,mem_dongle_ms_bind_step + branch g24_contw_istore_3byte + +g24_dongle_bind_data_process: + call g24_receive_transmit_ack + nbranch g24_rx_interrupt_clear,user3 + add regc,offset_24g_rxbuf,contr + setarg offset_24g_rxdata_temp + iadd regc,contw + arg 8,loopcnt + call memcpy + setarg offset_24g_rxdata_temp_add2 + call g24_set_rega_ifetch_1byte + beq DATATYPE_BIND,g24_dongle_bind_first_step //bind step 1 + beq DATATYPE_CONFIG,g24_dongle_bind_second_step + beq DATATYPE_OK,g24_dongle_bind_third_step + beq 0xff,g24_data_attemp + branch g24_rx_interrupt_clear + +g24_dongle_bind_first_step: + call g24_fetch_mem_rxdata_temp_add3_1byte + beq BIND_MOUSE,g24_dongle_bind_first_step_mouse + beq BIND_KEYBOARD,g24_dongle_bind_first_step_keyboard + rtn +g24_dongle_bind_first_step_mouse: + setarg 1 + call g24_store_mem_ms_bind_step + //jam 1,mem_dongle_ms_bind_step +g24_dongle_bind_ms_payload_cfg: + setarg DATATYPE_MOUSE + call g24_store_mem_bind_payload + //jam DATATYPE_MOUSE,mem_24g_bind_payload +g24_dongle_bind_payload_cfg: + setarg 0x80 + arg offset_24g_bind_payload_add1,rega + call g24_set_contw_with_regb_store_1byte + //jam 0x80,mem_24g_bind_payload+1 + call g24_fetch_mem_rx_addr + //fetch 4,mem_24g_rx_addr + arg offset_24g_bind_payload_add2,rega + call g24_set_contw_with_temp + //store 4,mem_24g_bind_payload+2 + branch g24_contw_istore_4byte + +g24_dongle_bind_first_step_keyboard: + setarg 1 + call g24_store_mem_kb_bind_step + //jam 1,mem_dongle_kb_bind_step +g24_dongle_bind_kb_payload_cfg: + setarg DATATYPE_KEYBOARD + call g24_store_mem_bind_payload + //jam DATATYPE_KEYBOARD,mem_24g_bind_payload + branch g24_dongle_bind_payload_cfg + +g24_dongle_bind_second_step: + call g24_fetch_mem_rxdata_temp_add3_1byte + beq BIND_MOUSE,g24_dongle_bind_second_step_mouse + beq BIND_KEYBOARD,g24_dongle_bind_second_step_keyboard + rtn +g24_dongle_bind_second_step_mouse: + call g24_dongle_bind_ms_payload_cfg + setarg offset_dongle_ms_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_ms_bind_step + beq 1,g24_dongle_ms_bind_step_set2 + rtn +g24_dongle_ms_bind_step_set2: + setarg 2 + //jam 2,mem_dongle_ms_bind_step +g24_store_mem_ms_bind_step: + arg offset_dongle_ms_bind_step,rega + branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_second_step_keyboard: + call g24_dongle_bind_kb_payload_cfg + setarg offset_dongle_kb_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_kb_bind_step + beq 1,g24_dongle_kb_bind_step_set2 + rtn +g24_dongle_kb_bind_step_set2: + setarg 2 + //jam 2,mem_dongle_kb_bind_step +g24_store_mem_kb_bind_step: + arg offset_dongle_kb_bind_step,rega + branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_third_step: + call g24_fetch_mem_rxdata_temp_add3_1byte + beq BIND_MOUSE,g24_dongle_bind_third_step_mouse + beq BIND_KEYBOARD,g24_dongle_bind_third_step_keyboard + rtn +g24_dongle_bind_third_step_mouse: + setarg offset_dongle_ms_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_ms_bind_step + beq 2,g24_dongle_ms_bind_step_success + rtn +g24_dongle_ms_bind_step_success: + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + or_into 0x01,pdata + call g24_store_mem_bind_device_status + //store 1,mem_dongle_bind_device_status +g24_dongle_bind_exit: + setarg 0 + setarg offset_dongle_ms_bind_step + iadd regc,contw + istore 2,contw + branch g24_rx_interrupt_clear + +g24_dongle_bind_third_step_keyboard: + setarg offset_dongle_kb_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_kb_bind_step + bne 0,g24_dongle_kb_bind_step_success + rtn +g24_dongle_kb_bind_step_success: + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + or_into 0x02,pdata + call g24_store_mem_bind_device_status + //store 1,mem_dongle_bind_device_status + branch g24_dongle_bind_exit + + +dongle_usb_dispatch: + fetch 1,mem_usb0_get_set_report + rtn blank + jam 0,mem_usb0_get_set_report + fetch 2,mem_usb_setup_bValue_temp + arg PC_SET_REPORT,temp + isub temp,null + nrtn zero + //get usb host command + fetch 1,mem_usb0_set_report_data + rtnne PC_REPORT_ID + fetch 1,mem_usb0_set_report_data+1 + bpatch patch17_6,mem_patch17 + beq COMMAND_MODE,dongle_dispose_cmd_mode + beq COMMAND_BIND,dongle_dispose_cmd_bind + beq COMMAND_CURRENT_PROJECT,dongle_dispose_cmd_current_project + beq COMMAND_CURRENT_MODE,dongle_dispose_cmd_current_mode + beq COMMAND_CURRENT_FW_VERSION,dongle_dispose_cmd_current_fw_version + beq COMMAND_USER_DEFINED,dongle_dispose_cmd_user_defined +usb0_data_ready_report_set0: + jam 0,mem_usb0_data_ready_report + rtn +dongle_dispose_cmd_bind: + fetch 1,mem_usb0_set_report_data+2 + beq COM_BIND_GET,dongle_dispose_cmd_get_bind + beq COM_BIND_EXIT,dongle_dispose_cmd_exit_bind + beq COM_READ_MODE,dongle_dispose_cmd_read_mode + branch usb0_data_ready_report_set0 +dongle_dispose_cmd_get_bind: + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + store 1,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 +dongle_dispose_cmd_exit_bind: + call g24_set_work_mem_dongle_work_mode + //jam DONGLE_WORK,mem_dongle_work_mode + call g24_set0_mem_dongle_mode_init + //jam CLEAR_INIT,mem_dongle_mode_init + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + store 1,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_read_mode: +dongle_dispose_in_bind_mode: + jam COMMAND_BIND,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_mode: + fetch 1,mem_usb0_set_report_data+2 + beq COM_MODE_BIND,dongle_enter_bind_mode +// beq COM_MODE_TEST,dongle_enter_test_mode + branch usb0_data_ready_report_set0 +dongle_enter_bind_mode: + //jam DONGLE_BIND,mem_dongle_work_mode + //jam CLEAR_INIT,mem_dongle_mode_init + call g24_bind_mode_enable +usb0_data_ready_report_set1: + jam 1,mem_usb0_data_ready_report + rtn +//dongle_enter_test_mode: +// jam DONGLE_TEST,mem_dongle_work_mode +// branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_project: + jam PRODUCT_ID,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_mode: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + beq DONGLE_WORK,dongle_dispose_in_work_mode + beq DONGLE_BIND,dongle_dispose_in_bind_mode +// beq DONGLE_TEST,dongle_dispose_in_test_mode + rtn +dongle_dispose_in_work_mode: + jam COMMAND_MODE,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 +//dongle_dispose_in_test_mode: +// jam COMMAND_TEST,mem_usb0_get_report_data+1 +// branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_fw_version: + jam FW_VERSION0,mem_usb0_get_report_data+1 + jam FW_VERSION1,mem_usb0_get_report_data+2 + jam FW_VERSION2,mem_usb0_get_report_data+3 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_user_defined: + //report_id|cmd|data_len|data + call g24_set1_mem_ackpayload_enable + fetch 1,mem_usb0_set_report_data+2 //data_len:max 30bytes + increase 2,pdata + copy pdata,loopcnt + arg mem_usb0_set_report_data,contr + setarg offset_24g_ackpayload + iadd regc,contw + branch memcpy + + +dongle_auto_bind: + bpatch patch17_7,mem_patch17 + call g24_mode_switch_init +dongle_auto_bind_loop: + call g24_receive_process + call usb_isr + branch dongle_auto_bind_loop + +g24_dongle_work_mode_auto: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_WORK + call g24_dongle_work_mode_start + branch g24_rx_nodata_process + +g24_dongle_bind_mode_auto: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_BIND + call g24_dongle_bind_init + call g24_dongle_bind_data_process + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + rtn blank + call g24_set0_mem_mode_switch + //jam 0,mem_24g_mode_switch + call dongle_check_mode + call g24_enable_nodata_timer +g24_timer_init: + setarg 0 + add regc,offset_24g_tx_btclk,contw + //store 4,mem_24g_tx_btclk + branch g24_contw_istore_4byte + +g24_timer_check: + call disable_user + add regc,offset_24g_tx_btclk,rega + ifetcht 4,rega + //fetcht 4,mem_24g_tx_btclk + copy clkn_bt,pdata + isub temp,null + ncall g24_timer_timeout,positive + copy pdata,regb + add regc,offset_24g_tx_btclk,rega + ifetch 4,rega + //fetch 4,mem_24g_tx_btclk + add regc,offset_24g_interval,rega + ifetcht 1,rega + //fetcht 1,mem_24g_interval + iadd temp,temp + copy regb,pdata + isub temp,null + nrtn positive + set0 28,pdata + add regc,offset_24g_tx_btclk,contw + istore 4,contw + //store 4,mem_24g_tx_btclk + branch enable_user + +g24_mode_switch_init: + setarg 1 + call g24_store_mem_mode_switch + //jam 1,mem_24g_mode_switch + call g24_set0_mem_time_slice + //jam 0,mem_24g_time_slice + setarg 0xff + add regc,offset_24g_interval,contw + istore 1,contw + //jam 0xff,mem_24g_interval + branch g24_timer_init + +g24_mode_switch: + setarg offset_24g_mode_switch + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_mode_switch + rtn blank + call g24_timer_check + nrtn user + call g24_fetch_mem_time_slice + //fetch 1,mem_24g_time_slice + increase 1,pdata + and_into 1,pdata + call g24_store_mem_time_slice + //store 1,mem_24g_time_slice + beq 0,dongle_check_mode + beq 1,g24_bind_mode_enable + rtn + +g24_bind_mode_enable: + //jam DONGLE_BIND,mem_dongle_work_mode + //jam CLEAR_INIT,mem_dongle_mode_init + //rtn + setarg DONGLE_BIND + call g24_store_mem_dongle_work_mode + branch g24_set0_mem_dongle_mode_init + +g24_enable_nodata_timer: + setarg 1 + call g24_store_mem_nodata_timer_enable + //jam 1,mem_24g_nodata_timer_enable + setarg TIMER_NODATA_DELAY + arg TIMER_NODATA,queue + branch timer_init + +g24_rx_nodata_process: + call g24_fetch_mem_nodata_timer_enable + //fetch 1,mem_24g_nodata_timer_enable + rtn blank + arg TIMER_NODATA,queue + call timer_check + nrtn blank + call g24_set0_mem_nodata_timer_enable + //jam 0,mem_24g_nodata_timer_enable + //no data for more than 100ms,then go to search + setarg DONGLE_SEARCH + call g24_store_mem_dongle_work_mode + //jam DONGLE_SEARCH,mem_dongle_work_mode + call g24_set0_mem_dongle_mode_init + //jam CLEAR_INIT,mem_dongle_mode_init + branch g24_rx_interrupt_clear + +g24_dongle_search_mode_auto: + bpatch patch18_0,mem_patch18 + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_SEARCH + call g24_dongle_search_mode_init + call g24_rx_auto_addr_ch_search + call g24_receive_transmit_ack + nbranch g24_rx_interrupt_clear,user3 + //dongle addr,then parse rxdata + call g24_dongle_search_addr_check + call g24_receive_packet_parse,zero + //receive data,then go to paired + //jam DONGLE_WORK,mem_dongle_work_mode + //jam 0,mem_24g_ackpayload_enable + call dongle_check_mode + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + set1 DONGLE_WORK,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_rx_interrupt_clear + call g24_enable_nodata_timer + call g24_dongle_search_addr_check + branch g24_dg_ch_num_reinit,zero + setarg offset_24g_kb_addr + call g24_set_rega_ifetcht_4byte + //fetcht 4,mem_24g_kb_addr + call g24_fetch_mem_addr_isub_temp + branch g24_kb_ch_num_reinit,zero + setarg offset_24g_mouse_addr + call g24_set_rega_ifetcht_4byte + //fetcht 4,mem_24g_mouse_addr + call g24_fetch_mem_addr_isub_temp + branch g24_ms_ch_num_reinit,zero + rtn + +g24_dongle_search_addr_check: + setarg offset_24g_rx_addr + call g24_set_rega_ifetcht_4byte + //fetcht 4,mem_24g_rx_addr +g24_fetch_mem_addr_isub_temp: + call g24_fetch_mem_addr + //fetch 4,mem_24g_addr + isub temp,null + rtn + +g24_dg_ch_num_reinit: + setarg offset_24g_dg_ch_number + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_dg_ch_number +g24_current_ch_num_reinit: + //store 1,mem_24g_current_ch_number + add regc,offset_24g_current_ch_number,contw + branch g24_contw_istore_1byte + +g24_kb_ch_num_reinit: + setarg offset_24g_kb_ch_number + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_ch_number + branch g24_current_ch_num_reinit +g24_ms_ch_num_reinit: + setarg offset_24g_ms_ch_number + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_ch_number + branch g24_current_ch_num_reinit + +g24_dongle_search_mode_init: + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + rtnbit1 DONGLE_SEARCH + set1 DONGLE_SEARCH,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_set0_mem_time_slice + //jam 0,mem_24g_time_slice + call g24_set1_mem_ackpayload_enable + //jam 1,mem_24g_ackpayload_enable + setarg 0 + add regc,offset_rssi_noise_dg_index,contw + istore 3,contw + //store 3,mem_rssi_noise_dg_index + arg offset_24g_dg_config_ch_once,rega + call g24_set_contw_with_temp + istore 7,contw + //store 7,mem_24g_dg_config_ch_once + + call g24_dongle_search_addr_check + nrtn zero + add regc,offset_24g_current_ch_number,rega + ifetch 1,rega + //fetch 1,mem_24g_current_ch_number + arg offset_24g_dg_ch_number,rega + call g24_set_contw_with_regb_store_1byte + //store 1,mem_24g_dg_ch_number + add regc,offset_24g_ch,rega + ifetch 1,rega + //fetch 1,mem_24g_ch + //store 1,mem_24g_dg_last_ch + branch g24_store_mem_dg_last_ch + +g24_rx_auto_addr_ch_search: + bpatch patch18_1,mem_patch18 + call g24_fetch_mem_time_slice + //fetch 1,mem_24g_time_slice + increase 1,pdata + and_into 3,pdata + call g24_store_mem_time_slice + //store 1,mem_24g_time_slice + //pairing address and channel come first + beq 0,g24_rx_auto_bind_config_kb + beq 1,g24_rx_auto_bind_config_dongle + beq 2,g24_rx_auto_bind_config_mouse + beq 3,g24_rx_auto_bind_config_dongle + rtn + +g24_rx_auto_bind_config_mouse: + call g24_dongle_bind_ms_payload_cfg + setarg offset_24g_mouse_addr + call g24_set_rega_ifetch_4byte + //fetch 4,mem_24g_mouse_addr + branch g24_rx_auto_addr_ch_search,blank + call g24_store_mem_addr + //store 4,mem_24g_addr + setarg offset_24g_ms_config_ch_once + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_config_ch_once + call g24_ms_config_ch_once,blank + setarg offset_24g_ms_last_ch + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_last_ch + call g24_store_mem_ch + //store 1,mem_24g_ch + add regc,offset_rssi_noise_ms_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_ms_index + arg mem_rssi_noise_ms_buffer,rega + call rssi_noise_store + add regc,offset_rssi_noise_ms_index,contw + istoret 1,contw + //storet 1,mem_rssi_noise_ms_index + call g24_noise_rssi_average + add regc,offset_rssi_noise_ms_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_ms_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + setarg offset_24g_ms_ch_number + call g24_set_rega_ifetcht_1byte + //fetcht 1,mem_24g_ms_ch_number + call g24_ch_temp_incre_size4 //map size =4 + arg offset_24g_ms_ch_number,rega + call g24_set_contw_with_regb2 + istoret 1,contw + //storet 1,mem_24g_ms_ch_number +g24_store_mem_ms_last_ch: + //store 1,mem_24g_ms_last_ch + arg offset_24g_ms_last_ch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_ms_config_ch_once: + setarg 1 + arg offset_24g_ms_config_ch_once,rega + call g24_set_contw_with_regb_store_1byte + //jam 1,mem_24g_ms_config_ch_once + arg 0,temp + call g24_ch_calc + //store 1,mem_24g_ms_last_ch + //rtn + branch g24_store_mem_ms_last_ch + +g24_rx_auto_bind_config_kb: + call g24_dongle_bind_kb_payload_cfg + setarg offset_24g_kb_addr + call g24_set_rega_ifetch_4byte + //fetch 4,mem_24g_kb_addr + branch g24_rx_auto_addr_ch_search,blank + call g24_store_mem_addr + //store 4,mem_24g_addr + setarg offset_24g_kb_config_ch_once + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_config_ch_once + call g24_kb_config_ch_once,blank + setarg offset_24g_kb_last_ch + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_last_ch + call g24_store_mem_ch + //store 1,mem_24g_ch + add regc,offset_rssi_noise_kb_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_kb_index + arg mem_rssi_noise_kb_buffer,rega + call rssi_noise_store + add regc,offset_rssi_noise_kb_index,contw + istoret 1,contw + //storet 1,mem_rssi_noise_kb_index + call g24_noise_rssi_average + add regc,offset_rssi_noise_kb_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_kb_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + setarg offset_24g_kb_ch_number + call g24_set_rega_ifetcht_1byte + //fetcht 1,mem_24g_kb_ch_number + call g24_ch_temp_incre_size4 //map size =4 + arg offset_24g_kb_ch_number,rega + call g24_set_contw_with_regb2 + istoret 1,contw + //storet 1,mem_24g_kb_ch_number +g24_store_mem_kb_last_ch: + //store 1,mem_24g_kb_last_ch + arg offset_24g_kb_last_ch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_kb_config_ch_once: + setarg 1 + arg offset_24g_kb_config_ch_once,rega + call g24_set_contw_with_regb_store_1byte + //jam 1,mem_24g_kb_config_ch_once + arg 0,temp + call g24_ch_calc + //store 1,mem_24g_kb_last_ch + //rtn + branch g24_store_mem_kb_last_ch + +g24_rx_auto_bind_config_dongle: + call g24_dongle_bind_ms_payload_cfg + call g24_fetch_mem_rx_addr + //fetch 4,mem_24g_rx_addr + call g24_store_mem_addr + //store 4,mem_24g_addr + setarg offset_24g_dg_config_ch_once + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_dg_config_ch_once + call g24_dg_config_ch_once,blank + call g24_dg_store_config_ch + add regc,offset_rssi_noise_dg_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_dg_index + arg mem_rssi_noise_dg_buffer,rega + call rssi_noise_store + add regc,offset_rssi_noise_dg_index,contw + istoret 1,contw + //storet 1,mem_rssi_noise_dg_index + call g24_noise_rssi_average + add regc,offset_rssi_noise_dg_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_dg_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + setarg offset_24g_dg_ch_number + call g24_set_rega_ifetcht_1byte + //fetcht 1,mem_24g_dg_ch_number + call g24_ch_temp_incre_size4 //map size =4 + arg offset_24g_dg_ch_number,rega + call g24_set_contw_with_regb2 + istoret 1,contw + //storet 1,mem_24g_dg_ch_number +g24_store_mem_dg_last_ch: + //store 1,mem_24g_dg_last_ch + //rtn + arg offset_24g_dg_last_ch,rega + branch g24_set_contw_with_regb_store_1byte + + +g24_dg_config_ch_once: + //jam 1,mem_24g_dg_config_ch_once + //fetch 1,mem_24g_dg_last_ch + //store 1,mem_24g_ch + //rtn + setarg 1 + arg offset_24g_dg_config_ch_once,rega + call g24_set_contw_with_regb_store_1byte +g24_dg_store_config_ch: + setarg offset_24g_dg_last_ch + call g24_set_rega_ifetch_1byte + branch g24_store_mem_ch + + +g24_transmit_ack: +//data type + add regc,offset_24g_rxbuf,rega + ifetch 1,rega + //fetch 1,mem_24g_rxbuf + call g24_store_mem_data_type + //store 1,mem_24g_data_type +//read len pid crc + call g24_read_len_pid_crc +//read ack + call g24_fetch_mem_rxbuf_add1 + //fetch 1,mem_24g_rxbuf+1 + isolate1 bit_ack_24g,pdata + branch g24tx_no_ack,true +g24tx_with_ack: + call g24_ackpayload_prep + call g24_transmit_prep + call g24_transmit +g24tx_no_ack: + branch g24_end_of_packet + +g24_ackpayload_prep: + bpatch patch18_2,mem_patch18 + add regc,offset_24g_datalen,contw + call g24_mem_set0 + //jam 0,mem_24g_datalen + setarg offset_24g_ackpayload_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ackpayload_enable + rtn blank + setarg 0x06 + add regc,offset_24g_datalen,contw + istore 1,contw + //jam 0x06,mem_24g_datalen + arg 0x06,loopcnt + setarg offset_24g_bind_payload + iadd regc,contr + //arg mem_24g_bind_payload,contr + add regc,offset_24g_txbuf,contw + //arg mem_24g_txbuf,contw + branch memcpy + + +g24_receive_packet_start: + call g24_receive_transmit_ack + nbranch g24_rx_interrupt_clear,user3 + branch g24_receive_packet_parse + +g24_receive_transmit_ack: + call g24_rx_interrupt_clear + call g24_receive_packet + nrtn user3 + branch g24_transmit_ack + +g24_receive_packet_parse: + bpatch patch18_3,mem_patch18 + call g24_receive_packet_parse_pid_crc + nbranch g24_rx_interrupt_clear,user + add regc,offset_24g_rxdata_length,rega + ifetch 1,rega + //fetch 1,mem_24g_rxdata_length + branch g24_rx_interrupt_clear,blank + increase 2,pdata + iforce loopcnt + add regc,offset_24g_rxbuf,contr + //arg mem_24g_rxbuf,contr + setarg offset_24g_rxdata_temp + iadd regc,contw + //arg mem_24g_rxdata_temp,contw + call memcpy + call g24_set0_mem_mode_switch + //jam 0,mem_24g_mode_switch + call g24_fetch_mem_pair_mode + //fetch 1,mem_24g_pair_mode + call g24_enable_nodata_timer,blank + setarg offset_24g_rxdata_temp_add2 + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_rxdata_temp+2 + beq 0x01,g24_data_type1 + beq 0x02,g24_data_type2 + beq 0x03,g24_data_type3 + beq 0xff,g24_data_attemp + branch g24_rx_interrupt_clear + +g24_receive_packet_parse_pid_crc: + call g24_head_ptr2regc + call disable_user + add regc,offset_24g_sta_pid,rega + ifetch 1,rega + //fetch 1,mem_24g_sta_pid + add regc,offset_24g_last_pid,rega + ifetcht 1,rega + //fetcht 1,mem_24g_last_pid + isub temp,null + ncall enable_user,zero + add regc,offset_24g_sta_pid,rega + ifetch 1,rega + //fetch 1,mem_24g_sta_pid + add regc,offset_24g_last_pid,contw + istore 1,contw + //store 1,mem_24g_last_pid + add regc,offset_24g_sta_crc,rega + ifetch 3,rega + //fetch 3,mem_24g_sta_crc + add regc,offset_24g_last_crc,rega + ifetcht 3,rega + //fetcht 3,mem_24g_last_crc + isub temp,null + ncall enable_user,zero + add regc,offset_24g_sta_crc,rega + ifetch 3,rega + //fetch 3,mem_24g_sta_crc + add regc,offset_24g_last_crc,contw + //store 3,mem_24g_last_crc + branch g24_contw_istore_3byte + +g24_data_type1: + call g24_ch_timer_reinit + call g24_fetch_mem_abort_pac + store 1,mem_temp + //fetch 1,mem_24g_abort_pac + call g24_fetcht_mem_rxdata_temp + fetch 1,mem_temp + //fetcht 1,mem_24g_rxdata_temp + isolate1 bit_abort,temp + setflag true,0,pdata + add regc,offset_24g_abort_pac,contw + istore 1,contw + //store 1,mem_24g_abort_pac + beq 1,g24_data_attemp_mouse + call g24_fetch_mem_hop_pac + //fetch 1,mem_24g_hop_pac + call g24_fetcht_mem_rxdata_temp + //fetcht 1,mem_24g_rxdata_temp + isolate1 bit_hop,temp + setflag true,0,pdata + call g24_store_mem_hop_pac + //store 1,mem_24g_hop_pac + add regc,offset_24g_cb_rxdata_type1,rega + ifetch 2,rega + //fetch 2,mem_24g_cb_rxdata_type1 + branch callback_func + +dongle_rxdata_type1: + setarg MS_REPORT_ID + store 1,mem_usb_mouse_data //report id + call g24_fetch_mem_rxdata_temp_add3_7byte + //fetch 7,mem_24g_rxdata_temp+3 //key + istore 7,contw + call g24_fetch_mem_rxdata_temp_add3_7byte + //fetch 7,mem_24g_rxdata_temp+3 //key + ncall g24_ms_enable_blank_data_forcibly,blank//get kb data + call g24_fetch_mem_rxdata_temp_add3_7byte + //fetch 7,mem_24g_rxdata_temp+3 //key + call g24_ms_disable_blank_data_forcibly,blank +g24_data_type1_usbtx_enable: + jam USB_EP2_MS,mem_usb_ep2_data +g24_data_type1_usbtx_enable_ep2: + fetch 1,mem_usb_tx_enable + set1 2,pdata + store 1,mem_usb_tx_enable + rtn + +g24_ms_enable_blank_data_forcibly: + setarg 1 + call g24_store_mem_ms_blank_data_enable + //jam 1,mem_24g_ms_blank_data_enable + setarg TIMER_MS_BLANK_DELAY + arg TIMER_MS_BLANK,queue + branch timer_init +g24_ms_disable_blank_data_forcibly: + call g24_set0_mem_ms_blank_data_enable + //jam 0,mem_24g_ms_blank_data_enable + setarg 0 + arg TIMER_MS_BLANK,queue + branch timer_init + +g24_data_type2: + call g24_fetcht_mem_rxdata_temp + //fetcht 1,mem_24g_rxdata_temp + isolate1 bit_abort,temp + branch g24_data_attemp_kbd,true + arg mem_usb_kb_data,contw + call g24_data_type2_reverse_data + fetch 8,mem_usb_kb_data + ncall g24_kb_enable_blank_data_forcibly,blank//get kb data + fetch 8,mem_usb_kb_data + call g24_kb_disable_blank_data_forcibly,blank + call g24_head_ptr2regc + fetch 8,mem_usb_kb_data + arg offset_24g_kb_data_sta_data,rega + call g24_set_contw_with_temp + istore 8,contw + //store 8,mem_24g_kb_data_sta_data + setarg offset_24g_kb_data_last_data + iadd regc,rega + ifetcht 8,rega + //fetcht 8,mem_24g_kb_data_last_data + isub temp,null + ncall g24_kb_data_dispose,zero + setarg offset_24g_kb_data_sta_data + iadd regc,rega + ifetch 8,rega + //fetch 8,mem_24g_kb_data_sta_data + arg offset_24g_kb_data_last_data,rega + call g24_set_contw_with_temp + istore 8,contw + //store 8,mem_24g_kb_data_last_data + branch g24_rx_interrupt_clear + +g24_data_type2_reverse_data: + setarg offset_24g_rxdata_temp_add2 + iadd regc,contr + //arg mem_24g_rxdata_temp+2,contr + arg 9,loopcnt + branch reverse_byte + +g24_kb_enable_blank_data_forcibly: + setarg 1 + call g24_store_mem_kb_blank_data_enable + //jam 1,mem_24g_kb_blank_data_enable + setarg TIMER_KB_BLANK_DELAY + arg TIMER_KB_BLANK,queue + branch timer_init + +g24_kb_disable_blank_data_forcibly: + call g24_set0_mem_kb_blank_data_enable + //jam 0,mem_24g_kb_blank_data_enable + setarg 0 + arg TIMER_KB_BLANK,queue + branch timer_init + +g24_kb_data_dispose: +g24_kb_data_into_ep1_fifo: + jam USB_EP1_KB,mem_usb_ep1_data + fetch 1,mem_usb_tx_enable + set1 1,pdata + store 1,mem_usb_tx_enable + rtn + +g24_data_type3: + arg mem_usb_kb_multikey,contw + call g24_data_type2_reverse_data + fetch 2,mem_usb_kb_multikey+1 + ncall g24_kb_mul_enable_blank_data_forcibly,blank//get multikey data + fetch 2,mem_usb_kb_multikey+1 + call g24_kb_mul_disable_blank_data_forcibly,blank + call g24_head_ptr2regc + fetch 3,mem_usb_kb_multikey + arg offset_24g_kb_multikey_sta_data,rega + call g24_set_contw_with_temp_store_3byte + //store 3,mem_24g_kb_multikey_sta_data + setarg offset_24g_kb_multikey_last_data + iadd regc,rega + ifetcht 3,rega + //fetcht 3,mem_24g_kb_multikey_last_data + isub temp,null + ncall g24_kb_mul_data_into_ep2_fifo,zero + setarg offset_24g_kb_multikey_sta_data + iadd regc,rega + ifetch 3,rega + //fetch 3,mem_24g_kb_multikey_sta_data + arg offset_24g_kb_multikey_last_data,rega + call g24_set_contw_with_temp_store_3byte + //store 3,mem_24g_kb_multikey_last_data + branch g24_rx_interrupt_clear + +g24_kb_mul_data_into_ep2_fifo: + jam USB_EP2_MULTIKEY,mem_usb_ep2_data + branch g24_data_type1_usbtx_enable_ep2 + +g24_kb_mul_enable_blank_data_forcibly: + setarg 1 + call g24_store_mem_kb_mul_blank_data_enable + //jam 1,mem_24g_kb_mul_blank_data_enable + setarg TIMER_KB_MUL_BLANK_DELAY + arg TIMER_KB_MUL_BLANK,queue + branch timer_init + +g24_kb_mul_disable_blank_data_forcibly: + call g24_set0_mem_kb_mul_blank_data_enable + //jam 0,mem_24g_kb_mul_blank_data_enable + setarg 0 + arg TIMER_KB_MUL_BLANK,queue + branch timer_init + +g24_data_attemp: + call g24_fetch_mem_rxdata_temp_add3_1byte + //fetch 1,mem_24g_rxdata_temp+3 + beq DATATYPE_MOUSE,g24_data_attemp_mouse + beq DATATYPE_KEYBOARD,g24_data_attemp_kbd + rtn +g24_data_attemp_mouse: + setarg offset_24g_rxdata_temp_add4 + call g24_set_rega_ifetch_4byte + arg offset_24g_mouse_addr,rega + call g24_set_contw_with_temp + //fetch 4,mem_24g_rxdata_temp+4 + //store 4,mem_24g_mouse_addr + branch g24_contw_istore_4byte + +g24_data_attemp_kbd: + setarg offset_24g_rxdata_temp_add4 + call g24_set_rega_ifetch_4byte + arg offset_24g_kb_addr,rega + call g24_set_contw_with_temp + //fetch 4,mem_24g_rxdata_temp+4 + //store 4,mem_24g_kb_addr + branch g24_contw_istore_4byte + +g24_store_mem_24g_mode: + call g24_head_ptr2regc + add regc,offset_24g_mode,contw + istore 1,contw + rtn + +g24_fetch_mem_device_addr: + call g24_head_ptr2regc + add regc,offset_24g_device_addr,rega + branch g24_rega_ifetch_4byte +g24_store_mem_device_addr: + call g24_head_ptr2regc + add regc,offset_24g_device_addr,contw + branch g24_contw_istore_4byte + +g24_fetch_mem_addr: + add regc,offset_24g_addr,rega + branch g24_rega_ifetch_4byte +g24_store_mem_addr: + add regc,offset_24g_addr,contw +g24_contw_istore_4byte: + istore 4,contw + rtn + +g24_store_mem_ch: + add regc,offset_24g_ch,contw + branch g24_contw_istore_1byte + +g24_set0_mem_pid: + setarg 0 +g24_store_mem_pid: + call g24_head_ptr2regc + add regc,offset_24g_pid,contw + branch g24_contw_istore_1byte + +g24_store_mem_txpayload: + add regc,offset_24g_txpayload,contw + branch g24_contw_istore_1byte + +g24_set4_mem_max_retry: + setarg 4 +g24_store_mem_max_retry: + add regc,offset_24g_max_retry,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_data_type: + add regc,offset_24g_data_type,rega + branch g24_rega_ifetch_1byte +g24_store_mem_data_type: + add regc,offset_24g_data_type,contw + branch g24_contw_istore_1byte + +g24_set2_mem_sync_cnt: + setarg 2 +g24_store_mem_sync_cnt: + add regc,offset_24g_sync_cnt,contw + branch g24_contw_istore_1byte + +g24_set1_mem_rf_last_sta: + setarg 1 +g24_store_mem_rf_last_sta: + call g24_head_ptr2regc + add regc,offset_24g_rf_last_sta,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_hop_pac: + call g24_head_ptr2regc + add regc,offset_24g_hop_pac,rega + branch g24_rega_ifetch_1byte +g24_set1_mem_hop_pac: + setarg 1 +g24_store_mem_hop_pac: + call g24_head_ptr2regc + add regc,offset_24g_hop_pac,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_abort_pac: + call g24_head_ptr2regc + add regc,offset_24g_abort_pac,rega + branch g24_rega_ifetch_1byte +g24_set1_mem_abort_pac: + setarg 1 +g24_store_mem_abort_pac: + call g24_head_ptr2regc + add regc,offset_24g_abort_pac,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_pairing_sm: + call g24_head_ptr2regc + add regc,offset_24g_pairing_sm,rega + branch g24_rega_ifetch_1byte +g24_store_mem_pairing_sm: + add regc,offset_24g_pairing_sm,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_rf_hop_ch: + add regc,offset_24g_rf_hop_ch,rega + branch g24_rega_ifetch_1byte +g24_set0_mem_rf_hop_ch: + setarg 0 +g24_store_mem_rf_hop_ch: + add regc,offset_24g_rf_hop_ch,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_rf_work_stage: + add regc,offset_24g_rf_work_stage,rega + branch g24_rega_ifetch_1byte + +g24_fetch_mem_rxbuf_add1: + add regc,offset_24g_rxbuf_add1,rega + branch g24_rega_ifetch_1byte + +g24_fetch_mem_check_dongle_times: + add regc,offset_24g_check_dongle_times,rega + branch g24_rega_ifetch_1byte +g24_set0_mem_check_dongle_times: + setarg 0 +g24_store_mem_check_dongle_times: + call g24_head_ptr2regc + add regc,offset_24g_check_dongle_times,contw + branch g24_contw_istore_1byte + +g24_store_mem_tx_power: + call g24_head_ptr2regc + add regc,offset_tx_power_temp,rega + ifetch 1,rega +g24_store_mem_txpower: + store 1,mem_tx_power + rtn + +g24_store_mem_tx_power_temp: + call g24_head_ptr2regc + fetch 1,mem_tx_power + //store 1,mem_tx_power_temp + add regc,offset_tx_power_temp,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_power_ctrl_pac: + add regc,offset_power_ctrl_packet_cnt,rega + branch g24_rega_ifetch_1byte + +g24_store_mem_power_ctrl_level: + add regc,offset_power_ctrl_level,contw + branch g24_contw_istore_1byte + +g24_fetcht_mem_rxdata_temp: + setarg offset_24g_rxdata_temp +g24_set_rega_ifetcht_1byte: + iadd regc,rega + ifetcht 1,rega + rtn + +g24_fetch_mem_rf_laststa: + setarg offset_24g_rf_laststa + branch g24_set_rega_ifetch_1byte +g24_set0_mem_rf_laststa: + setarg 0 +g24_store_mem_rf_laststa: + arg offset_24g_rf_laststa,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_rx_addr: + setarg offset_24g_rx_addr +g24_set_rega_ifetch_4byte: + call g24_set_rega +g24_rega_ifetch_4byte: + ifetch 4,rega + rtn + +g24_fetch_mem_time_slice: + setarg offset_24g_time_slice + branch g24_set_rega_ifetch_1byte +g24_set0_mem_time_slice: + setarg 0 +g24_store_mem_time_slice: + arg offset_24g_time_slice,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_mode_switch: + setarg 0 +g24_store_mem_mode_switch: + arg offset_24g_mode_switch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_bind_payload: + arg offset_24g_bind_payload,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_bind_device_status: + setarg offset_dongle_bind_device_status + branch g24_set_rega_ifetch_1byte +g24_store_mem_bind_device_status: + arg offset_dongle_bind_device_status,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_work_mode: + setarg offset_dongle_work_mode + branch g24_set_rega_ifetch_1byte +g24_set_work_mem_dongle_work_mode: + setarg DONGLE_WORK +g24_store_mem_dongle_work_mode: + arg offset_dongle_work_mode,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_mode_init: + setarg offset_dongle_mode_init + branch g24_set_rega_ifetch_1byte +g24_set0_mem_dongle_mode_init: + setarg CLEAR_INIT +g24_store_mem_dongle_mode_init: + arg offset_dongle_mode_init,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ackpayload_enable: + setarg 0 +g24_store_mem_ackpayload_enable: + arg offset_24g_ackpayload_enable,rega + branch g24_set_contw_with_regb_store_1byte +g24_set1_mem_ackpayload_enable: + setarg 1 + branch g24_store_mem_ackpayload_enable + +g24_fetch_mem_rxdata_temp_add3_7byte: + setarg offset_24g_rxdata_temp_add3 + call g24_set_rega + ifetch 7,rega + rtn + +g24_fetch_mem_nodata_timer_enable: + setarg offset_24g_nodata_timer_enable + branch g24_set_rega_ifetch_1byte +g24_set0_mem_nodata_timer_enable: + setarg 0 +g24_store_mem_nodata_timer_enable: + arg offset_24g_nodata_timer_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ms_blank_data_enable: + setarg 0 +g24_store_mem_ms_blank_data_enable: + arg offset_24g_ms_blank_data_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_blank_data_enable: + setarg 0 +g24_store_mem_kb_blank_data_enable: + arg offset_24g_kb_blank_data_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_mul_blank_data_enable: + setarg 0 +g24_store_mem_kb_mul_blank_data_enable: + arg offset_24g_kb_mul_blank_data_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_up: + arg offset_power_ctrl_threshold_up,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_down: + arg offset_power_ctrl_threshold_down,rega +g24_set_contw_with_regb_store_1byte: + call g24_set_contw_with_regb +g24_contw_istore_1byte: + istore 1,contw + rtn + +g24_fetch_mem_pair_mode: + setarg offset_24g_pair_mode + branch g24_set_rega_ifetch_1byte + +g24_store_mem_pair_mode: + arg offset_24g_pair_mode,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_pair_txpower: + setarg offset_24g_pair_txpower + call g24_set_rega_ifetch_1byte + branch g24_store_mem_txpower + +g24_fetch_mem_rxdata_temp_add3_1byte: + setarg offset_24g_rxdata_temp_add3 + branch g24_set_rega_ifetch_1byte + +g24_set_contw_with_temp: + copy pdata,temp + copy rega,pdata + iadd regc,contw + copy temp,pdata + rtn + +g24_set_contw_with_temp_store_3byte: + call g24_set_contw_with_temp +g24_contw_istore_3byte: + istore 3,contw + rtn + +g24_set_contw_with_regb: + call g24_head_ptr2regc +g24_set_contw_with_regb2: + copy pdata,regb + copy rega,pdata + iadd regc,contw + copy regb,pdata + rtn + +g24_set_rega: + call g24_head_ptr2regc + iadd regc,rega + rtn + +g24_set_rega_ifetch_1byte: + call g24_set_rega +g24_rega_ifetch_1byte: + ifetch 1,rega + rtn + +g24_set_rega_ifetcht_4byte: + call g24_set_rega + ifetcht 4,rega + rtn + +g24_mem_set0: + setarg 0 + branch g24_contw_istore_1byte + + + +app_init: + bpatch patch18_4,mem_patch18 + fetch 1,mem_device_option + branch app_init,blank /* wait ram to be initialized */ +// beq dvc_op_ukey,le_ukey_init + beq dvc_op_dongle,dongle_init + beq dvc_op_AntiLost,antilost_init + beq dvc_op_shutter,shutter_init + beq dvc_op_module,module_init + beq dvc_op_car,car_init + beq dvc_op_remote_car,remote_car_init + bbit1 dvc_op_mouse,mouse_init + rtn + +app_lpm_init: + bpatch patch18_5,mem_patch18 + jam 0,mem_tester_emulate + jam 0,mem_debug_config + jam 0, mem_lch_code + setarg 0 + store 5,mem_sp_state_start + fetch 1,mem_device_option + branch app_lpm_init,blank /* wait ram to be initialized */ + beq dvc_op_module,module_lpm_init +app_lpm_init0: + rtn + + +app_process_idle: + call ui_dispatch + call check_51cmd + call app_process_bb_event + fetch 2,mem_cb_idle_process + branch callback_func + +app_process_bt: + fetch 2,mem_cb_bt_process + branch callback_func + +app_process_ble: + fetch 2,mem_cb_le_process + branch callback_func + +app_process_bb_event: + bpatch patch18_6,mem_patch18 + //return if c51 need to process bb event + arg mem_ipc_fifo_bt2c51,rega + call fifo_out + rtn blank + //reaching here mains c51 cannot get bb event. + copy pdata,regc + call app_event_normal_process + branch app_process_bb_event_priority + +app_discard_event: + arg 0,regc + rtn + +//************************************************// +//*APP BB EVENT NORMAL PROCESS**// +//************************************************// +app_event_normal_process: + beq BT_EVT_BB_CONNECTED,app_evt_bt_conn + beq BT_EVT_BUTTON_LONG_PRESSED,app_evt_button_long_pressed + beq BT_EVT_SETUP_COMPLETE,app_evt_setup_complete + beq BT_EVT_HID_HANDSHAKE,app_evt_hid_handshake + beq BT_EVT_HID_CONNECTED,app_bb_event_hid_connected + beq BT_EVT_RECONN_FAILED,app_bb_event_reconn_failed + beq BT_EVT_BB_DISCONNECTED,app_bb_event_bb_disconn + beq BT_EVT_RECONN_PAGE_TIMEOUT,app_bb_event_reconn_failed + beq BT_EVT_LE_CONNECTED,app_le_event_bb_connected + beq BT_EVT_LE_DISCONNECTED,app_le_event_bb_disconn + beq BT_EVT_RECONN_STARTED,app_event_reconn_start + beq BT_EVT_ENTER_SNIFF,app_event_enter_sniff + beq BT_EVT_EXIT_SNIFF,app_event_exit_sniff + + beq BT_EVT_ML2CAP_CONN_REFUSED,app_event_ml2cap_conn_refused + beq BT_EVT_LINKKEY_GENERATE,app_event_linkkey_generate + beq BT_EVT_SWITCH_FAIL_MASTER,app_event_switch_fail_master + beq BT_EVT_SWITCH_SUCCESS_MASTER,app_event_switch_success + rtn + + +app_evt_bt_conn: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_CONNECTED,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set0 APP_DISC_BY_BUTTON ,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_event_switch_success: + jam 0,mem_switch_fail_master_count + rtn + +app_event_switch_fail_master: + fetch 1,mem_switch_fail_master_count + increase 1,pdata + store 1,mem_switch_fail_master_count + sub pdata,1,null + branch app_bt_role_switch,positive + jam 0,mem_switch_fail_master_count + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_SWITCH_FAIL,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + branch app_bt_disconnect + +app_process_bb_event_priority: + fetch 2,mem_cb_bb_event_process + branch callback_func + +app_check_wake_lock: + fetch 2,mem_cb_check_wakelock + branch callback_func + +app_will_enter_lpm: + fetch 2,mem_cb_before_lpm + branch callback_func + +app_event_linkkey_generate: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_PAIRING ,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + branch app_bt_store_reconn_info + +app_event_reconn_start: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_RECONNECT,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_RECONN,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_evt_setup_complete: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_SETUP_COMPLETE,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_SETUP_DONE,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_evt_hid_handshake: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_HID_HANDSHAKE,pdata + store 2,mem_ui_state_map + rtn + +app_event_enter_sniff: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_SNIFF,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_SNIFF,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_event_exit_sniff: + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_SNIFF,pdata + store 2,mem_ui_state_map + rtn + +app_le_event_bb_connected: + fetch 2,mem_ui_state_map + set1 UI_STATE_BLE_CONNECTED,pdata + store 2,mem_ui_state_map + rtn + +app_le_event_bb_disconn: + fetch 2,mem_ui_state_map + set0 UI_STATE_BLE_CONNECTED,pdata + store 2,mem_ui_state_map + branch app_lpm_mult_disable + +app_bb_event_hid_connected: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_HID_CONN,pdata + store 2,mem_ui_state_map + rtn + +app_evt_button_long_pressed: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_BY_BUTTON,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_event_ml2cap_conn_refused: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_L2CAP_REFUSED,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + branch app_bt_disconnect + + +app_evt_timer: + bpatch patch18_7,mem_patch18 + store 1,mem_app_evt_timer_count +app_evt_100ms_loop: + fetch 1,mem_app_evt_timer_count + rtn blank + increase -1,pdata + store 1,mem_app_evt_timer_count + call ui_button_polling + call app_lpm_wake_auto_lock_timer + call app_unsniff_delay_timer + call app_discovery_timer + call flash_write_spi_sm_timer + fetch 2,mem_cb_event_timer + call callback_func + branch app_evt_100ms_loop + + +//regc:timer addr +//regb:timer up call back fuction +timer_single_step: + ifetch 1,regc + rtn blank + pincrease -1 + istore 1,regc + nrtn blank + copy regb,pdata + branch callback_func + +//regc:timer addr +//regb:timer up call back fuction +timer_single_step_2B: + ifetch 2,regc + rtn blank + pincrease -1 + istore 2,regc + nrtn blank + copy regb,pdata + branch callback_func + +app_power_timer: + fetcht 2,mem_power_param_ptr + add temp,power_timer_offset,regc + arg app_power_timer_timeout,regb + branch timer_single_step + +app_power_timer_timeout: + call app_got_power_state_common + beq POWER_STARTING,app_enter_power_stanby_state +app_enter_power_off_state: + branch app_enter_hibernate +app_enter_power_stanby_state: + setarg POWER_STANDBY + istore 1,regc + add temp,power_standby_cb_offset,regb +app_power_cb_common: + ifetch 2,regb + branch callback_func + +app_unsniff_delay_timer: + arg mem_unsniff2sniff_timer_count,regc + arg app_unsniff_delay_timeout,regb + branch timer_single_step + +app_unsniff_delay_timeout: + call context_check_idle + branch app_bt_enter_sniff,zero + rtn + + +app_discovery_timer: + arg mem_discovery_timeout_timer_count,regc + arg app_discovery_timeout,regb + branch timer_single_step_2B + +app_discovery_timeout: + call app_bt_stop_discovery + call app_led_off + fetch 2,mem_cb_discovry_timeout + branch callback_func + + +app_bb_event_reconn_failed: + call app_disconn_reason_flag_clear +app_clear_reconnect_flag: + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_RECONNECT,pdata + store 2,mem_ui_state_map + rtn + +app_bb_event_bb_disconn: + jam 0,mem_unsniff2sniff_timer_count + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_RECONNECT,app_bb_event_bb_reconn_disconn + isolate0 UI_STATE_BT_SETUP_COMPLETE,pdata + call app_discard_event,true +app_bb_event_bb_reconn_disconn: + bpatch patch19_0,mem_patch19 + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_CONNECTED,pdata + set0 UI_STATE_BT_SETUP_COMPLETE,pdata + set0 UI_STATE_BT_HID_CONN,pdata + set0 UI_STATE_BT_HID_HANDSHAKE,pdata + set0 UI_STATE_BT_RECONNECT,pdata + store 2,mem_ui_state_map + branch app_lpm_mult_disable + +app_bb_hibernate: + call app_disconn_reason_clear + branch app_enter_hibernate + + +app_disconn_reason_clear: + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason + rtn +app_disconn_reason_flag_clear: + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_disconn_reason_collect_bt: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + store APP_DISC_RSN_SIZE,mem_app_disconn_reason + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_disconn_reason_collect_ble: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_BLE,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + + +//************************************************// +//********APP SHARED FUNCSIONS*******// +//************************************************// + + +app_check_sniff: + fetch 1,mem_ui_state_map + isolate1 UI_STATE_BT_SNIFF,pdata + rtn + +//*****************************************// +//*****************API********************// +//*****************************************// +//app_clearflag_store: +// setarg 0 +// branch app_flag_store +app_initflag_store: + setarg EEPROM_INIT_FLAG +app_flag_store: + store 2,mem_timeup + bpatch patch19_1,mem_patch19 + arg 2,temp + arg mem_timeup,rega + arg eeprom_module_init_flag,regb + branch iicd_write_eep_data + +//initflag is in eeprom to sure is eeprom nead to init +app_initflag_check: + bpatch patch19_2,mem_patch19 + arg 2,temp + arg mem_pdatatemp,rega + arg eeprom_module_init_flag,regb + call iicd_read_eep_data + fetch 2,mem_pdatatemp + arg EEPROM_INIT_FLAG,temp + isub temp,null + rtn + + +app_start_auto_sniff: + fetch 1,mem_unsniff2sniff_timer + store 1,mem_unsniff2sniff_timer_count + rtn + +app_get_lpm_wake_lock: + arg wake_lock_app,queue + branch lpm_get_wake_lock + +app_put_lpm_wake_lock: + arg wake_lock_app,queue + branch lpm_put_wake_lock + +app_lpm_wake_auto_lock: + jam LPM_WAKE_UP_DELAY_TIMER,mem_wake_up_delay_timer + branch app_get_lpm_wake_lock + +app_lpm_wake_auto_lock_timer: + arg mem_wake_up_delay_timer,regc + arg app_put_lpm_wake_lock,regb + branch timer_single_step + +app_l2cap_flow_control_enable: + jam L2CAP_FLOW_CTRL_ENABLE,mem_l2cap_flow_ctrl_flag + rtn + +app_l2cap_flow_control_disable: + jam L2CAP_FLOW_CTRL_DISABLE,mem_l2cap_flow_ctrl_flag + rtn + +app_bt_set_pincode: + jam BT_CMD_SET_PIN_CODE,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_role_switch: + jam BT_CMD_ROLE_SWITCH,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_start_reconnect: + bpatch patch19_3,mem_patch19 + fetch 1,mem_app_connection_options + store 1,mem_connection_options + jam APP_FLAG_RECONNECT,mem_reconnect_flag + jam BT_CMD_RECONNECT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_reconnect_cancel: + jam BT_CMD_BB_RECONN_CANCEL,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_disconnect: + jam BT_CMD_DISCONNECT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_start_discovery_short: + fetch 2,mem_discovery_timeout + store 2,mem_discovery_timeout_timer_count +app_bt_start_discovery_led_blink: + call app_led_start_blink +app_bt_start_discovery: + jam BT_CMD_START_DISCOVERY,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_stop_discovery: + setarg 0 + store 2,mem_discovery_timeout_timer_count + jam BT_CMD_STOP_DISCOVERY,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_direct_adv: + jam BT_CMD_START_DIRECT_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_stop_direct_adv: + jam BT_CMD_STOP_DIRECT_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_stop_adv: + jam BT_CMD_STOP_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_adv: + jam BT_CMD_START_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_scan: + jam BT_CMD_LE_START_SCAN,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_stop_scan: + jam BT_CMD_LE_STOP_SCAN,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_conn: + jam BT_CMD_LE_START_CONN,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_disconnect: + jam BT_CMD_LE_DISCONNECT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_led_start_blink: + jam BT_CMD_LED_BLINK,mem_fifo_temp + branch ui_ipc_send_cmd + +app_led_on: + jam BT_CMD_LED_ON,mem_fifo_temp + branch ui_ipc_send_cmd + +app_led_stop_blink: +app_led_off: + jam BT_CMD_LED_OFF,mem_fifo_temp + branch ui_ipc_send_cmd + +app_enter_hibernate: + jam BT_CMD_ENTER_HIBERNATE,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_sniff_exit: + jam BT_CMD_EXIT_SNIFF,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_enter_sniff: + jam BT_CMD_ENTER_SNIFF,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_store_reconn_info: + jam BT_CMD_STORE_RECONN_INFO_LE,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_store_reconn_info: + jam BT_CMD_STORE_RECONN_INFO_BT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_store_reconn_info: + jam BT_CMD_STORE_RECONN_INFO,mem_fifo_temp + branch ui_ipc_send_cmd + +app_lpm_mult_enable: + set1 mark_lpm_mult_enable,mark + rtn + +app_lpm_mult_disable: + set0 mark_lpm_mult_enable,mark + rtn + + +/* + +mem_power_param struct +{ + usigned char mem_power_state + usigned char mem_power_timer + usigned char mem_power_off_timeout + usigned char mem_power_starting_timeout + usigned long mem_power_off_cb + usigned long mem_power_starting_cb + usigned long mem_power_standby_cb + usigned long mem_ui_butten_up_cb +} + functions:power state switching by mem_app_power_timer timeout or by button_long_pressed event + (power off -> power starting->power standby->power off) and power timer initialization + input parameters:mem_power_param_ptr should be point to the variable(mem_power_param) address where the input parameters stored in with its format +output parameters:switched power state will be stored in variable mem_power_state*/ +app_button_long_pressed: + call app_got_power_state_common + beq POWER_STANDBY,app_power_shutting_down +app_power_starting: + setarg POWER_STARTING + istore 1,regc + add temp,power_starting_timeout_offset,rega + add temp,power_starting_cb_offset,regb +app_power_common: + ifetcht 1,rega + increase 1,regc + istoret 1,regc + branch app_power_cb_common + +app_power_shutting_down: + setarg POWER_OFF + istore 1,regc + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,app_power_off_end + call app_ble_disconnect +app_power_off_end: + fetcht 2,mem_power_param_ptr + add temp,power_off_timeout_offset,rega + add temp,power_off_cb_offset,regb + branch app_power_common + +app_got_power_state_common: + fetcht 2,mem_power_param_ptr + add temp,power_state_offset,regc + ifetch 1,regc + rtn + +app_event_button_up: + call app_got_power_state_common + bne POWER_OFF,app_power_release + branch app_enter_hibernate +app_power_release: + add temp,ui_butten_up_cb_offset,regb + branch app_power_cb_common + +antilost_init: + rtn wake + hjam 0x00,core_gpio_sel1//1: GPIO[26:25] is two wire SPI, 2: GPIO[26:23] is SPI, 3: GPIO[26:23] is PCM + setarg antilost_le_before_hibernate + store 2,mem_cb_before_hibernate + setarg keyscan_process_lpm_before + store 2,mem_cb_before_lpm + setarg antilost_idle_process // + store 2,mem_cb_idle_process + setarg antilost_le_conn_process // + store 2,mem_cb_le_process + setarg antilost_bb_event_process + store 2,mem_cb_bb_event_process + setarg antilost_le_bb_event_timer + store 2,mem_cb_event_timer + setarg antilost_le_notification + store 2,mem_cb_ble_transmit + setarg antilost_lpm_lock_process + store 2,mem_cb_check_wakelock + setarg antilost_le_receive_data_process + store 2,mem_cb_att_write + bpatch patch19_4,mem_patch19 + call antilost_buzzer_pwm_init + call keyscan_key_init + call antilost_adc_init + call ui_led_init_global + call ui_button_init + setarg antilost_key_up_down + store 2,mem_cb_antl_key + setarg antilost_power_off_cb + store 2,mem_antl_power_off_cb + setarg antilost_power_starting_cb + store 2,mem_antl_power_starting_cb + setarg antilost_power_standby_cb + store 2,mem_antl_power_standby_cb + setarg antilost_led_on_cb + store 2,mem_antl_led_cb_on + setarg antilost_led_off_cb + store 2,mem_antl_led_cb_off + setarg antilost_buzzer_on + store 2,mem_antl_buzzer_cb_on + setarg antilost_buzzer_off + store 2,mem_antl_buzzer_cb_off + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + +antilost_le_before_hibernate: + call antilost_led_buzzer_stop_blink + branch app_enter_hibernate + +antilost_le_notification: + call le_fifo_check_nearly_full + nrtn blank + arg mem_temp_block5,rega + call queue_pop + nrtn user + arg mem_temp_block5,contr + branch le_send_notify_from_list + +antilost_power_standby_cb: + fetch 2,mem_antl_le_sleep_timeout + store 2,mem_antl_le_sleep_timer + jam 1,mem_antl_key_scan_enable + branch antilost_fast_adv_start + +antilost_lpm_lock_process: + fetch 1,mem_antl_key_state + beq 1,antilost_lpm_ctrl_for_led_buzzer + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,antilost_lpm_ctrl_for_led_buzzer + fetch 1,mem_antl_lost_mode + beq 1,app_get_lpm_wake_lock + fetch 1, mem_antl_queue_curr_num + nbranch app_get_lpm_wake_lock,blank + branch app_put_lpm_wake_lock + +antilost_lpm_ctrl_for_led_buzzer: + fetch 1,mem_antl_led_state + fetcht 1,mem_antl_buzzer_state + ior temp,pdata + beq 1,app_get_lpm_wake_lock + branch app_put_lpm_wake_lock + +antilost_bb_event_process: + copy regc,pdata + beq BT_EVT_BUTTON_UP,app_event_button_up + beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed + beq BT_EVT_LE_CONNECTED,antilost_le_process_conn + beq BT_EVT_LE_DISCONNECTED,antilost_le_process_discon + beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,antilost_le_conn_param_update_rsp_recieved + rtn +antilost_le_conn_param_update_rsp_recieved: + fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + beq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED,antilost_le_conn_param_rejected +antilost_le_conn_param_accepted: + fetch 2,mem_le_new_connslavelatency + branch antilost_master_nonsupport_latency,blank +antilost_le_conn_param_updata_procedure_sucsess: + jam CONN_PARAM_UPDATA_PROCEDURE_COMPLETE,mem_antl_conn_updata_procedure_state + jam 60,mem_antl_conn_update_timer + rtn + +antilost_le_conn_param_rejected: + fetch 2,mem_le_latency + branch antilost_conn_param_updata_procedure_faild,blank +antilost_conn_param_retransimiting: + jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state + fetcht 2,mem_interval_increment + fetch 2,mem_le_interval_min + iadd temp,pdata + store 2,mem_le_interval_min + copy pdata,rega + fetch 2,mem_le_interval_max + iadd temp,pdata + store 2,mem_le_interval_max + iadd rega,pdata + rshift pdata,temp + fetch 2,mem_antl_le_unnormal_interval_max + idiv temp + call wait_div_end + quotient pdata + store 2,mem_le_latency + jam 1,mem_antl_send_updata_le_param_timer + rtn +antilost_conn_param_updata_procedure_faild: + jam CONN_PARAM_UPDATA_PROCEDURE_FAILD,mem_antl_conn_updata_procedure_state + rtn + +antilost_master_nonsupport_latency: + jam 0,mem_lpm_mult + jam 0,mem_antl_send_updata_le_param_timer + fetch 2,mem_le_new_conninterval //interval from master + fetcht 2,mem_antl_le_unnormal_interval_min + isub temp,null + setflag positive,0,rega + fetch 2,mem_antl_le_unnormal_interval_max //local intervalmax + fetcht 2,mem_le_new_conninterval//interval form master + isub temp,pdata + setflag positive,1,rega + compare 0x03,rega,0x03 + rtn true //return if the new conn_interval in range through conn_interval_min to conn_interval_max already + fetch 8,mem_antl_le_unnormal_interval_min + store 8,mem_le_interval_min + jam 1,mem_antl_send_updata_le_param_timer + rtn + + +antilost_le_bb_event_timer: + //call ui_button_check_long_press + call app_power_timer + call antilost_double_click_timer + call antilost_le_fast_adv_timer + call antilost_le_sleep_timer + call antilost_app_updata_le_param_timer + call antilost_conn_update_timer + branch antilost_adc_check_timer + + +antilost_double_click_timer: + arg mem_double_click_timer,regc + arg antilost_double_click_timeout,regb + branch timer_single_step +antilost_double_click_timeout: + jam 0,mem_butten_click_cnt + rtn +antilost_le_fast_adv_timer: + arg mem_antl_fast_adv_timer,regc + arg antilost_le_fast_adv_timeout,regb + branch timer_single_step_2B +antilost_le_fast_adv_timeout: + arg mem_antl_slow_adv_led_style,regc + arg mem_antl_slow_adv_lpm_interval,regb + branch antilost_adv_start_common + + +antilost_conn_update_timer: + arg mem_antl_conn_update_timer,regc + arg antilost_conn_update_timer_time_out,regb + branch timer_single_step + +antilost_conn_update_timer_time_out: + fetch 2,mem_le_latency + store 1,mem_lpm_mult + rtn +antilost_app_updata_le_param_timer: + arg mem_antl_send_updata_le_param_timer,regc + arg antilost_app_updata_le_param_timeout,regb + branch timer_single_step +antilost_app_updata_le_param_timeout: + fetch 1,mem_le_state + compare 0,pdata,0x60 + nbranch antilost_wait_for_updata_param_instant_expire,true + jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state + call app_lpm_mult_enable + branch le_l2cap_tx_update_req +antilost_wait_for_updata_param_instant_expire: + jam 1,mem_antl_send_updata_le_param_timer + rtn + +antilost_le_sleep_timer: + arg mem_antl_le_sleep_timer,regc + arg antilost_le_sleep_timer_timeout,regb + branch timer_single_step_2B + + +antilost_le_sleep_timer_timeout: + branch app_button_long_pressed + +antilost_adc_check_timer: + //fetch 1,mem_antl_power_timer + //rtneq SHUTTER_POWER_OFF + arg mem_adc_timer,regc + arg antilost_adc_check_timer_timeout,regb + branch timer_single_step_2B +antilost_adc_check_timer_timeout: + fetch 2,mem_adc_timeout + store 2,mem_adc_timer + branch antilost_battery_process + + +antilost_le_process_conn: + fetch 2,mem_adc_timeout + store 2,mem_adc_timer + setarg 0 + store 2,mem_antl_fast_adv_timer + store 2,mem_antl_le_sleep_timer + call antilost_alert_off + call antilost_led_buzzer_stop_blink + jam 0,mem_lpm_mult + branch app_ble_stop_adv + + +antilost_le_process_discon: + //setarg 0 + //store 1,mem_hci_curr_len + setarg 0 + store 4,mem_adc_timer + store 3,mem_antl_conn_updata_procedure_state + store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + + jam 1,mem_alarm_config_notfy_cnt + fetch 2,mem_antl_le_sleep_timeout + store 2,mem_antl_le_sleep_timer + call queue_init + fetch 1,mem_antl_power_state + rtneq POWER_OFF + call antilost_fast_adv_start + branch antilost_on_off_alarm_after_disconn + + +antilost_le_conn_process: +//bpatch + branch antilost_key_process + +antilost_idle_process: + + fetch 1,mem_antl_power_state + rtnne POWER_STANDBY + branch antilost_key_process + + +////////////////////////////////////////////////////////////////////////////////////////// +/////SOFT WTICH//////// +antilost_power_starting_cb: + arg mem_antl_power_starting_buzzer_style,regc + call antilost_buzzer_configuration + arg mem_antl_power_starting_led_style,regc +antilost_power_common: + branch antilost_led_configuration + +antilost_power_off_cb: + jam OFF,mem_le_adv_enable + arg mem_antl_power_off_buzzer_style,regc + call antilost_buzzer_configuration + arg mem_antl_power_off_led_style,regc + branch antilost_power_common + +antilost_le_receive_data_process: + fetch 1,mem_le_att_opcode + beq ATTOP_WRITE_REQUEST,antilost_le_parse_att_write_request + rtn +antilost_le_parse_att_write_request: + fetch 2,mem_le_att_handle +// beq ATT_WRITE_REQUEST_HANDLE,antilost_key_data_send + beq NEW_SPEC_WRITE_HANDLE,antilost_cmd_parse_for_application + beq NEW_SPEC_NOTIFICATION_ENABLE_HANDLE,antilost_notify_alarm_config_first_time + rtn +///////////////////////////////////////////////////////// + + +/////////key scan +antilost_key_process: + fetch 1,mem_antl_key_scan_enable + rtn blank + branch keyscan_key_process + + //queue = key index + //rega =1 press, =0 release +antilost_key_up_down: + copy rega,pdata + branch antilost_key_is_up,blank +antilost_key_is_down: + copy queue,pdata + beq 0,antilost_key0_down + rtn +antilost_key_is_up: + copy queue,pdata + beq 0,antilost_key0_up + rtn + +antilost_key0_down: + jam 1,mem_antl_key_state + arg mem_antl_key_buzzer_style,regc + call antilost_buzzer_configuration + arg mem_antl_key_led_style,regc + call antilost_led_configuration + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,antilost_butten_down_while_disconn + branch antilost_butten_down_after_conn + +antilost_key0_up: + jam 0,mem_antl_key_state + branch antilost_double_click_timer_init + +//////////////process for double-click + +antilost_double_click_timer_init: + fetch 1,mem_butten_click_cnt + rtnne 1 + jam 5,mem_double_click_timer + rtn + +antilost_butten_down_after_conn: + fetch 1,mem_butten_click_cnt + pincrease 1 + store 1,mem_butten_click_cnt + beq 1,antilost_click_once + beq 2,antilost_click_twice + rtn +antilost_click_once: + call antilost_alert_off + jam OPCODE1_BUTTEN_CLICK_ONCE,mem_antl_key0_press+5//5 represent opcode offset + arg mem_antl_key0_press,regc + branch antilost_prepare_data_and_send +antilost_click_twice: + jam 0,mem_butten_click_cnt + jam OPCODE2_BUTTEN_DOUBLE_CLICK,mem_antl_key0_press+5 + arg mem_antl_key0_press,regc + call antilost_prepare_data_and_send + fetch 1,mem_antl_lost_mode + beq 1,antilost_alert_on + rtn //rtn should be retaind + +antilost_butten_down_while_disconn: + fetch 2,mem_antl_le_sleep_timeout + store 2,mem_antl_le_sleep_timer + call antilost_alert_off + branch antilost_fast_adv_start + +///////////////////////NEW App Spcecific/////// +antilost_cmd_parse_for_application: + bpatch patch19_5,mem_patch19 + call le_app_receive_data + ifetch 1,rega + beq OPCODE3_ANTL_START_ALRAM,antilost_on_of_alram + beq OPCODE7_ANTL_CONFIG_ALRAM,antilost_configuration_for_alram + rtn + +antilost_on_of_alram: + fetch 1,mem_antl_lost_mode + beq ANTI_LE_ALARM_OFF,antilost_alert_on + beq ANTI_LE_ALARM_ON,antilost_alert_off + rtn + +antilost_configuration_for_alram: + ifetch 1,regb + beq 1,antilost_set_start_alarm_after_disconn + beq 0,antilost_set_no_alarm_after_disconn + rtn +/////////////////check//////////////////////// + +/*input: 1)package data addr in regc +output:no +function:calculate check_out value and send data*/ +//mem_temp_block5 +antilost_prepare_data_and_send: + bpatch patch19_6,mem_patch19 + fetch 1,mem_client_characteristic_configuration_descriptor + isolate1 NOTIFICATION_ENABLE_BIT,pdata + nrtn true + add regc,6,contr + ifetch 2,contr + byteswap pdata,pdata + add pdata,5,loopcnt + add regc,3,contr + call calc_check_sum_start + istore 1,contr + copy regc,rega + branch queue_push + +/////////////////NEW APP SPECIFIC check end//////////////////// + + +/////////alarm////////////////////////////// +antilost_alert_on: + fetch 1,mem_antl_power_state + rtn blank + jam 1,mem_antl_lost_mode + arg mem_antl_alert_buzzer_stlye,regc + call antilost_buzzer_configuration + arg mem_antl_alert_led_stlye,regc + call antilost_led_configuration + jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset + jam 1,mem_antl_key0_release+8 //8 represent data offset,digit 1 represent alarm is on at present + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_alert_off: + fetch 1,mem_antl_lost_mode + rtn blank + jam 0,mem_antl_lost_mode + call antilost_led_buzzer_stop_blink + jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset + jam 0,mem_antl_key0_release+8 //8 represent data offset,digit 0 represent alarm is off at present + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send + +antilost_set_start_alarm_after_disconn: + jam 1,mem_alarm_config + jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5 + jam 1,mem_antl_key0_release+8 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_set_no_alarm_after_disconn: + jam 0,mem_alarm_config + jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5 + jam 0,mem_antl_key0_release+8 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_on_off_alarm_after_disconn: + fetch 1,mem_alarm_config + rtn blank + branch antilost_alert_on + +antilost_notify_alarm_config_first_time: + ifetch 2,rega + store 2,mem_client_characteristic_configuration_descriptor + isolate1 NOTIFICATION_ENABLE_BIT,pdata + nrtn true + fetch 1,mem_alarm_config_notfy_cnt + rtn blank + jam 0,mem_alarm_config_notfy_cnt + fetch 8,mem_antl_le_interval_min + store 8,mem_le_interval_min + jam 2,mem_antl_send_updata_le_param_timer + call antilost_battery_process + call antilost_battery_calculate_end //send twice to combat the failure of reception first time + jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5 + fetch 1,mem_alarm_config + store 1,mem_antl_key0_release+8 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send + +//////////////alarm end////////////////////////// +//sytle address in regc +antilost_buzzer_configuration: + arg 1,rega + branch antilost_configuration_common +antilost_led_configuration: + arg 0,rega +antilost_configuration_common: + branch antilost_led_buzzer_style_configuration + +antilost_led_buzzer_stop_blink: + arg 0,rega + call ui_led_blink_stop_global + arg 1,rega + call ui_led_blink_stop_global + fetch 1,mem_buzzer_pwm_conf + branch pwm_disable + +antilost_led_buzzer_style_configuration: + call calc_curr_struct_prt + arg 7,loopcnt + branch ui_led_set_style_global+2 + + + +antilost_fast_adv_start: + arg mem_antl_fast_adv_led_style,regc + arg mem_antl_lpm_interval,regb +antilost_adv_start_common: + call antilost_adv_interval_lpm_interval_set + call antilost_led_configuration + fetch 2,mem_antl_fast_adv_timeout + store 2,mem_antl_fast_adv_timer + branch app_ble_start_adv + +antilost_adv_interval_lpm_interval_set: + ifetch 2,regb + store 2,mem_lpm_interval + ifetch 2,contr + store 2,mem_le_adv_interval + rtn +///////////////beep//////////// +antilost_buzzer_pwm_init: + arg 0,rega //sys clk 12mhz + call pwm_init + fetch 6,mem_buzzer_pwm_conf + store 6,mem_pdatatemp + call pwm_out_set + fetch 1,mem_buzzer_pwm_conf + branch pwm_disable + +antilost_led_on_cb: + jam 1,mem_antl_led_state + rtn +antilost_led_off_cb: + jam 0,mem_antl_led_state + rtn + + + +antilost_buzzer_off: + jam 0,mem_antl_buzzer_state + fetch 1,mem_buzzer_pwm_conf + branch pwm_disable + +antilost_buzzer_on: + jam 1,mem_antl_buzzer_state + fetch 6,mem_buzzer_pwm_conf + store 6,mem_pdatatemp + branch pwm_out_set + +////////////////beep end/////////////////////////// +/////////////adc start//////////////////////// +antilost_adc_init: + jam 0,mem_adc_config_flag + branch adc_init_data + +antilost_battery_process: + call adc_set_mode + call vdd_calculate_by_mode + store 2,mem_battery_current_voltage + arg mem_battery_calculate_set,rega + call adc_bat_percent_lowpower_out + store 1,mem_voltage_remain_percent //for debug + beq 0,antilost_low_battery + sub pdata,0x64,null + nbranch antilost_full_battery,positive + store 1,mem_antl_key0_release+8 +antilost_battery_calculate_end: + jam OPCODE5_BATTER_INFORMATION,mem_antl_key0_release+5 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_full_battery: + jam 100,mem_antl_key0_release+8 + branch antilost_battery_calculate_end + +antilost_low_battery: + branch app_button_long_pressed + + + +car_init: + rtn wake + hfetch 1,core_gpio_sel1 + and_into 0xf0,pdata + hstore 1,core_gpio_sel1 + setarg car_le_before_hibernate + store 2,mem_cb_before_hibernate + + setarg car_le_process_lpm_before + store 2,mem_cb_before_lpm + + setarg app_enter_hibernate + store 2,mem_cb_discovry_timeout + + setarg car_scale_process_idle + store 2,mem_cb_idle_process + + setarg car_scale_process_bb_event + store 2,mem_cb_bb_event_process + + setarg app_get_lpm_wake_lock + store 2,mem_cb_check_wakelock + + setarg car_le_receive_data + store 2,mem_cb_att_write + + setarg car_le_bb_event_timer + store 2,mem_cb_event_timer + + call g24_head_ptr2regc + setarg car_24g_receive_data + add regc,offset_24g_cb_rxdata_type1,contw + istore 2,contw + + setarg car_power_off_signal + store 2,mem_remote_car_power_off_cb + + setarg car_soft_switch_power_on_signal + store 2,mem_remote_car_power_standby_cb + + bpatch patch19_7,mem_patch19 + call car_init_environment + call queue_init + jam 2,mem_lpm_mult + jam POWER_ON,mem_car_24g_received_pac + fetch 1,mem_car_config_soft_switch_enable + store 1,mem_car_hard_soft_switch + beq HARD_SWITCH, car_hard_switch_power_on_signal + fetch 1,mem_car_config_soft_switch_gpio + store 1,mem_ui_button_gpio + jam OFF,mem_le_adv_enable +car_soft_switch_power_on_init: + call car_ui_led_init + call ui_button_init + call ui_button_polling + jam POWER_STARTING,mem_car_power_state + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + +car_power_off_signal: + branch car_ui_led_init + +car_hard_switch_power_on_signal: + jam POWER_STANDBY,mem_car_power_state +car_soft_switch_power_on_signal: + jam ON,mem_le_adv_enable + call car_ui_led_init + arg 0,rega + call ui_led_blink_start_global + + setarg FAST_ADV_INTERVAL_VALUE_CAR + call shutter_ble_adv_interval_set +car_le_modified_name_adv: + arg mem_le_name+7,contw + fetch 1,mem_le_lap +car_name_loop: + and pdata,0xF0,temp + rshift4 temp,temp + call car_hex_to_ascii + istoret 1, contw + and pdata,0x0F,temp + call car_hex_to_ascii + istoret 1, contw + call le_modified_name_att_list + fetcht 1,mem_le_name_len + copy temp,loopcnt + arg mem_le_adv_data+2,contw + arg mem_le_name,contr + call memcpy +car_le_modified_name_scan: + fetcht 1,mem_le_name_len + copy temp,loopcnt + arg mem_le_scan_data+2,contw + arg mem_le_name,contr + branch memcpy +car_hex_to_ascii: + sub temp,9,null + branch car_hex_num,positive + add temp,55,temp + rtn +car_hex_num: + add temp,48,temp + rtn + +car_ui_led_init: + fetch 1,mem_car_config_blood_led1_gpio + bne INVALID_PIN_NUM,car_blood_led_gpio_set +car_ui_led_init_1: + fetch 1,mem_car_config_pairing_led_gpio + bne INVALID_PIN_NUM,car_pairing_led_gpio_set +car_ui_led_init_2: + fetch 1,mem_car_config_low_voltage_led_gpio + bne INVALID_PIN_NUM,car_low_voltage_led_gpio_set +car_ui_led_init_3: + fetch 1, mem_car_led_num + copy pdata,loopcnt + setarg mem_car_led_map + copy pdata,rega +car_in_lp1: + copy rega,contr + ifetch 1,contr + copy contr,rega + beq INVALID_PIN_NUM,car_in_lp1_end + copy pdata,temp + call gpio_config_output +car_in_lp1_end: + loop car_in_lp1 +car_ui_led_init_end: + rtn +car_blood_led_gpio_set: + fetch 8,mem_car_config_blood_led1_gpio + store 8,mem_car_led_map+2 + branch car_ui_led_init_1 +car_pairing_led_gpio_set: + store 1,mem_car_led_map + branch car_ui_led_init_2 +car_low_voltage_led_gpio_set: + store 1,mem_car_led_map+1 + branch car_ui_led_init_3 + + +car_init_environment: + arg 0,rega + call pwm_init + call car_ir_rx_init + call g24_receive_process_init + branch car_init_adc_hvin + +car_init_adc_hvin: + jam 100,mem_car_notify_vdd_value_last + fetch 1,mem_car_config_low_voltage_led_gpio + store 1,mem_car_style2_struct_led_gpio + branch adc_init_data + +car_le_before_hibernate: + call gpio_set_before_lpm_common + branch keyscan_process_lpm_before + +car_le_process_lpm_before: + branch keyscan_process_lpm_before + +car_key_scan_process: +// fetch 1,mem_enable_key_scan +// rtn blank + branch keyscan_key_process + +car_scale_process_idle: + call car_le_send_packet + call car_ir_receive_process + call car_g24_status_process + branch car_key_scan_process + +car_g24_status_process: + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + fetch 1,mem_car_24g_received_pac + beq WORK_PAIRED,car_g24_connected_event + rtn +car_g24_connected_event: + fetch 1,mem_car_24g_status + rtneq WORK_PAIRED + jam WORK_PAIRED,mem_car_24g_status + branch car_g24_connected + +car_le_send_packet: + fetch 2,mem_ui_state_map + rtnbit0 UI_STATE_BLE_CONNECTED + call le_fifo_check_nearly_full + nrtn blank + arg mem_car_pop_queue_buff,rega + call queue_pop + nrtn user + arg mem_car_pop_queue_buff,contr + branch le_send_notify_from_list + +car_scale_process_bb_event: + copy regc,pdata + beq BT_EVT_BUTTON_UP,app_event_button_up + beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed + beq BT_EVT_LE_CONNECTED,car_scale_event_le_conn + beq BT_EVT_LE_DISCONNECTED,car_scale_event_le_discon + rtn + +car_scale_event_le_conn: + setarg disable_24g + call g24_store_mem_24g_mode + branch car_scale_process_conn +car_g24_connected: + fetch 2,mem_car_24g_no_data_timeout_count + store 2,mem_car_24g_no_data_timeout_timer +car_scale_process_conn: + jam 0x14,mem_car_notify_vdd_timer + jam 0,mem_lpm_mode + call app_ble_stop_adv + call app_lpm_mult_enable + fetch 1,mem_car_config_pairing_led_conn_status + beq 0x01,car_pairing_led_conn_status_setting +car_scale_process_conn_next: + arg 0,rega + branch ui_led_on_global +car_pairing_led_conn_status_setting: + arg 0,rega + branch ui_led_blink_stop_global + +car_scale_event_le_discon: + setarg rx_24g + call g24_store_mem_24g_mode +car_g24_disconnect: + setarg 0 + store 5,mem_car_led_control + setarg 4 + call pwm_disable + setarg 5 + call pwm_disable + setarg 20 + call pwm_disable + setarg 21 + call pwm_disable + setarg 22 + call pwm_disable + setarg 7 + call pwm_disable + call queue_init + jam 10,mem_motor1_speed + jam 10,mem_motor2_speed + jam 10,mem_motor3_speed +// jam 1,mem_lpm_mode + jam 2,mem_lpm_mult + arg 0,rega + call ui_led_blink_start_global + + setarg FAST_ADV_INTERVAL_VALUE_CAR + call shutter_ble_adv_interval_set + branch app_ble_start_adv + +car_le_bb_event_timer: +// call car_ui_power_timeout_timer + call car_moto1_blank_data_timer + call car_moto2_blank_data_timer + call car_moto3_blank_data_timer + call app_power_timer + call car_led_control_timer + call car_notify_vdd_timer + call car_24g_no_data_timeout_timer + call car_ir_breakdown_timer + branch car_attack_shake_timer + +car_ir_breakdown_timer: + arg mem_car_ir_breakdown_check_timer,regc + arg car_ir_breakdown_timeout,regb + branch timer_single_step +car_ir_breakdown_timeout: + call car_ir_gpio_get_status + nrtn true + jam 1,mem_car_ir_breakdown_flag + rtn + +car_24g_no_data_timeout_timer: + arg mem_car_24g_no_data_timeout_timer,regc + arg car_24g_no_data_timer_timeout,regb + branch timer_single_step_2B +car_24g_no_data_timer_timeout: + jam WORK_SEARCH,mem_car_24g_status + branch car_g24_disconnect + +car_attack_shake_timer: + arg mem_car_attack_shake_timer,regc + arg car_attack_shake,regb + branch timer_single_step +car_attack_shake: + fetch 1, mem_car_attack_shake_flag + branch car_attack_shake_stop,blank + jam 2,mem_car_attack_shake_timer + jam 0, mem_car_attack_shake_flag + setarg 0x0a02 + store 2,mem_le_receive_payload + fetch 1,mem_car_config_device_select + beq DEVICE_BATTLE_TANK,car_attack_shake_front_battle_tank +car_attack_shake_front_battle_car: + branch car_motor_control +car_attack_shake_front_battle_tank: + setarg 0x0a02 + store 2,mem_le_receive_payload+2 + branch car_motor_control +car_attack_shake_stop: + setarg 0 + store 4,mem_le_receive_payload + branch car_motor_control + +car_notify_vdd_timer: + fetch 1,mem_car_config_bat_notify_enable + rtn blank + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,car_low_bat_led_off + arg mem_car_notify_vdd_timer,regc + arg car_notify_vdd,regb + branch timer_single_step +car_notify_vdd: + fetch 1,mem_car_notify_vdd_count + store 1,mem_car_notify_vdd_timer + fetch 1,mem_car_working_flag + nrtn blank +car_read_hvin: + call adc_set_mode + call vdd_calculate_by_mode + store 2,mem_vdd_now_vol + arg mem_vdd_calculate_set,rega + call adc_bat_percent_lowpower_out + fetcht 1,mem_car_notify_vdd_value_last + isub temp,null + branch car_notify_vdd_next2,positive + store 1,mem_car_notify_vdd_value_last + copy pdata,temp +car_notify_vdd_next2: + storet 1,mem_car_notify_vdd_percent + fetch 1,mem_car_config_low_voltage_percent + isub temp,null + call car_enter_low_bat,positive + storet 1,mem_notify_bat_payload + arg 6,loopcnt + arg mem_notify_bat_head,contr + call calc_check_sum_start + store 1,mem_notify_bat_check_sum + arg mem_notify_bat_packet,rega + branch queue_push +car_enter_low_bat: + fetch 1,mem_low_bat_flag + nrtn blank + jam 1,mem_low_bat_flag + arg 1,rega + branch ui_led_blink_start_global +car_low_bat_led_off: + arg 1,rega + branch ui_led_blink_stop_global + +car_led_control_timer: + arg mem_car_led_control_timer,regc + arg car_led_control,regb + branch timer_single_step +car_led_control: + jam 5,mem_car_led_control_timer + jam 0,mem_car_led_no + fetch 1,mem_car_led_blink_status + beq LED_ON,car_led_control_blink_off + beq LED_OFF,car_led_control_blink_on +car_led_control_set: + arg mem_car_led_control,contr + copy contr,rega + arg 8,loopcnt +car_led_control_timer_next: + copy rega,contr + ifetch 1,contr + copy contr,rega + beq LED_OFF,car_led_control_off + beq LED_ON,car_led_control_on + beq LED_BLINK,car_led_control_blink +car_led_control_timer_next_2: + fetch 1,mem_car_led_no + increase 1,pdata + store 1,mem_car_led_no + loop car_led_control_timer_next + rtn +car_led_switch: + fetch 1,mem_car_led_no + arg mem_car_config_blood_led_gpio,regb + iadd regb,regb + ifetcht 1,regb + rtn +car_led_control_off: + call car_led_switch + call gpio_out_inactive + branch car_led_control_timer_next_2 +car_led_control_on: + call car_led_switch + call gpio_out_active + branch car_led_control_timer_next_2 +car_led_control_blink: + fetch 1,mem_car_led_blink_status + beq LED_ON,car_led_control_off + branch car_led_control_on +car_led_control_blink_on: + jam LED_ON,mem_car_led_blink_status + branch car_led_control_set +car_led_control_blink_off: + jam LED_OFF,mem_car_led_blink_status + branch car_led_control_set + +////////////////////////check sum//////////////////////// +//loopcnt = sum number,contr = ptr +calc_check_sum_start: + arg 0,rega +calc_check_sum_loop: + ifetch 1,contr + iadd rega,rega + loop calc_check_sum_loop +calc_check_sum_and: + and rega,0xff,pdata + rtn + +car_le_receive_data: + fetch 1,mem_le_att_opcode + beq ATTOP_WRITE_REQUEST,car_le_parse_att_write_request + rtn +car_le_parse_att_write_request: + fetch 2,mem_le_att_handle + beq ATT_CAR_CONTROL_HANDLE,car_control_le_receive + rtn + +/* +* typedef struct +* { +* 2byte packet_head (mem_app_receive_temp) +* 1byte packet_cmd (mem_app_receive_temp+2) +* 2byte packet_payload_length (mem_app_receive_temp+3) +* 10byte packet_payload (mem_app_receive_temp+5) +* 1byte packet_check_sum (mem_app_receive_temp+15) +* } +*/ +le_app_receive_data: + bpatch patch1a_0,mem_patch1a + ifetch 5,rega + store 5,mem_app_receive_temp + fetch 2,mem_app_receive_temp + arg LE_RECEIVE_PACKET_HEAD,temp + isub temp,null + nrtn zero + fetch 2,mem_app_receive_temp+3 + byteswap pdata,pdata + store 2,mem_app_receive_temp+3 + copy pdata,loopcnt + increase 5,rega + copy rega,contr + arg mem_app_receive_temp+5,contw + call memcpy + ifetch 1,contr + store 1,mem_app_receive_temp+15 + arg mem_app_receive_temp+2,rega + arg mem_app_receive_temp+5,regb + rtn + +car_control_le_receive: + setarg 0 + store 5,mem_le_receive_payload + store 5,mem_le_receive_payload+5 + call le_app_receive_data + copy regb,contr + arg mem_le_receive_payload,contw + arg 10,loopcnt + call memcpy +car_receive_cmd_select: + bpatch patch1a_1,mem_patch1a + ifetch 1,rega + beq CAR_CMD_OLD_CAR_CONTROL,car_drive_old + beq CAR_CMD_OLD_SPEED_CONTROL,car_speed_set_old + beq CAR_CMD_L_R_MOTOR_CONTROL,car_motor_control + beq CAR_CMD_F_B_MOTOR_CONTROL,car_motor_control + beq CAR_CMD_IR_CONTROL,car_ir_data_rx_from_app + beq CAR_CMD_LED_CONTROL,car_led_control_receive + beq CAR_CMD_DEVICE_INFO,car_info_request + rtn + +car_24g_receive_data: + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + + fetch 2,mem_car_24g_no_data_timeout_count + store 2,mem_car_24g_no_data_timeout_timer + + jam WORK_PAIRED,mem_car_24g_received_pac + + setarg offset_24g_rxdata_temp_add3 + call g24_set_rega + call car_control_le_receive + + fetch 1,mem_app_receive_temp+2 //cmd + beq CAR_CMD_L_R_MOTOR_CONTROL,car_24g_receive_data_next + beq CAR_CMD_F_B_MOTOR_CONTROL,car_24g_receive_data_next + rtn +car_24g_receive_data_next: + fetch 1,mem_le_receive_payload //moto1 + ncall car_moto1_enable_blank_data_timer,blank + fetch 1,mem_le_receive_payload+2 //moto2 + ncall car_moto2_enable_blank_data_timer,blank + fetch 1,mem_le_receive_payload+4 //moto3 + ncall car_moto3_enable_blank_data_timer,blank + rtn + +car_moto1_enable_blank_data_timer: + jam 5,mem_car_moto1_blank_timer + rtn +car_moto2_enable_blank_data_timer: + jam 5,mem_car_moto2_blank_timer + rtn +car_moto3_enable_blank_data_timer: + jam 5,mem_car_moto3_blank_timer + rtn + +car_moto1_blank_data_timer: + arg mem_car_moto1_blank_timer,regc + arg car_moto1_blank_data,regb + branch timer_single_step +car_moto2_blank_data_timer: + arg mem_car_moto2_blank_timer,regc + arg car_moto2_blank_data,regb + branch timer_single_step +car_moto3_blank_data_timer: + arg mem_car_moto3_blank_timer,regc + arg car_moto3_blank_data,regb + branch timer_single_step + +car_moto1_blank_data: + jam 0,mem_le_receive_payload + branch car_motor_control +car_moto2_blank_data: + jam 0,mem_le_receive_payload+2 + branch car_motor_control +car_moto3_blank_data: + jam 0,mem_le_receive_payload+4 + branch car_motor_control + + +///////////////////////Motor////////////////////////////////////////// + +car_drive_old: + call car_left_right_control_old + branch car_front_back_control_old +car_left_right_control_old: + fetch 1,mem_le_receive_payload + store 1,mem_motor2_status + branch car_motor2_control +car_front_back_control_old: + fetch 1,mem_motor1_speed + call car_reset_old_speed + fetch 1,mem_le_receive_payload+1 + store 1,mem_motor1_status + branch car_motor1_control +car_reset_old_speed: + beq SPEED_LEVEL_2,car_reset_old_speed2 + beq SPEED_LEVEL_3,car_reset_old_speed3 + store 1,mem_motor1_speed + rtn +car_reset_old_speed2: + jam SPEED_LEVEL_5,mem_motor1_speed + rtn +car_reset_old_speed3: + jam SPEED_LEVEL_10,mem_motor1_speed + rtn +car_speed_set_old: + fetch 1,mem_le_receive_payload + call car_reset_old_speed + fetch 1,mem_motor1_speed + call car_motor_speed_duty_setting + call car_motor_speed_duty_transform + branch pwm_pwm0_duty_set + +car_motor_control: + fetch 1,mem_car_24g_go_die_flag + nrtn blank + fetch 6,mem_le_receive_payload + store 6,mem_motor1_status + fetch 1,mem_motor1_speed + fetcht 1,mem_motor2_speed + iand temp,pdata + fetcht 1,mem_motor3_speed + iand temp,pdata + call car_motor_working_flag,blank + bpatch patch1a_2,mem_patch1a + call car_motor1_control + call car_motor2_control + branch car_motor3_control +car_motor1_control: + arg mem_motor1_pwm_set,regb + arg mem_motor1_status,contr + branch car_motor_status_select +car_motor2_control: + arg mem_motor2_pwm_set,regb + arg mem_motor2_status,contr + branch car_motor_status_select +car_motor3_control: + arg mem_motor3_pwm_set,regb + arg mem_motor3_status,contr + branch car_motor_status_select +car_motor_working_flag: + jam 0,mem_car_working_flag + rtn + +car_motor_status_select: + ifetch 1,contr + beq MOTOR_STOP,car_motor_stop + beq GO_FRONT,car_motor_positive + beq GO_BACK,car_motor_negative + rtn +car_motor_positive: + jam 0,mem_motor_select_p_n + branch car_motor_negative+1 +car_motor_negative: + jam 1,mem_motor_select_p_n + ifetch 1,contr + store 1,mem_car_motor_speed + ifetch 8,regb + branch car_motor_work + +car_motor_stop: + ifetch 1,regb + call pwm_disable + increase 1,regb + ifetch 1,regb + branch pwm_disable +car_motor_work: + store 8,mem_motor_pwm_pin1_set + jam 1,mem_car_working_flag + fetch 1,mem_motor_select_p_n + beq 0,car_motor_select_positive +car_motor_select_negative: + fetch 1,mem_motor_pwm_pin2_set + store 1,mem_motor_pwm_pin_set + fetch 1,mem_motor_pwm_pin1_set +car_motor_work_next: + call pwm_disable + fetch 1,mem_car_motor_speed + call car_motor_speed_duty_setting + store 1,mem_motor_pwm_dute_set + fetch 6,mem_motor_pwm_pin_set + store 6,mem_pdatatemp + branch pwm_out_set +car_motor_select_positive: + fetch 1,mem_motor_pwm_pin1_set + store 1,mem_motor_pwm_pin_set + fetch 1,mem_motor_pwm_pin2_set + branch car_motor_work_next + +car_motor_speed_duty_setting: + mul32 pdata,5,pdata + add pdata,50,pdata + rtn +car_motor_speed_duty_transform: + arg 12000,temp + imul32 temp,pdata + div pdata,100 + call wait_div_end + quotient temp + copy temp,rega + setarg 12000 + isub temp,regb + rtn + +/////////////////////IR PROCESS///////////////////// +car_ir_init: + hfetch 1,core_gpio_sel2 // select GPIO3 as pwm4 + set1 2,pdata + hstore 1,core_gpio_sel2 + setarg 158 + hstore 2,core_pwm_pcnt4 + hstore 2,core_pwm_ncnt4 + rtn + +car_ir_data_rx_from_app: + fetch 1,mem_car_24g_go_die_flag + nrtn blank + fetch 2,mem_le_receive_payload + store 2,mem_ir_data + fetch 1,mem_car_24g_status + bne WORK_PAIRED,car_ir_data_tx + fetch 2,mem_le_lap + store 2,mem_ir_data +car_ir_data_tx: + bpatch patch1a_3,mem_patch1a + call car_ir_init + call car_ir_enable + setarg 48000 + call sleep + call car_ir_disable + setarg 7200 + call sleep + arg 16,loopcnt +car_ir_send_loop: + call car_ir_enable + fetch 2,mem_ir_data + bbit1 0,car_ir_is_bit1 + setarg 7200 + call sleep + call car_ir_disable + branch car_ir_wait_finish + +car_ir_is_bit1: + setarg 14400 + call sleep + call car_ir_disable +car_ir_wait_finish: + setarg 7200 + call sleep + fetch 2,mem_ir_data + rshift pdata,pdata + store 2,mem_ir_data + loop car_ir_send_loop + + jam 2,mem_car_attack_shake_timer + jam 1, mem_car_attack_shake_flag + setarg 0x0a01 + store 2,mem_le_receive_payload + fetch 1,mem_car_config_device_select + beq DEVICE_BATTLE_TANK,car_attack_shake_back_battle_tank +car_attack_shake_back_battle_car: + branch car_motor_control +car_attack_shake_back_battle_tank: + setarg 0x0a01 + store 2,mem_le_receive_payload+2 + branch car_motor_control + +car_ir_enable: + hfetch 1,core_gpio_key2 // PWM4_enable + or_into 0x40,pdata + hstore 1,core_gpio_key2 + rtn +car_ir_disable: + hfetch 1,core_gpio_key2 // PWM4_disable + and_into 0xbf,pdata + hstore 1,core_gpio_key2 + rtn + +car_ir_rx_init: + fetch 1,mem_car_config_ir_enable + rtneq 0x00 + call lpm_disable_exen_output + fetcht 1,mem_car_config_ir_rx_gpio + storet 1,mem_ir_rx_gpio + call gpio_config_input + call car_ir_gpio_get_status + nrtn true + jam 1,mem_car_ir_breakdown_check_timer + rtn + +car_ir_receive_process: + fetch 1,mem_car_config_ir_enable + rtneq FLAG_IR_DISABLE + fetch 1,mem_car_ir_breakdown_flag + nrtn blank + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,car_ir_receive_process_next + fetch 1,mem_car_24g_status + rtnne WORK_PAIRED +car_ir_receive_process_next: + bpatch patch1a_4,mem_patch1a + call car_ir_gpio_get_status + nrtn true + setarg 36000 + call sleep + call car_ir_gpio_get_status + nrtn true + call car_ir_clk_get +car_ir_packet_head_wait_end: + call car_ir_clk_check + nrtn positive + call car_ir_gpio_get_status + branch car_ir_packet_head_wait_end,true + arg 0,rega + arg 16,loopcnt + call car_ir_clk_get +car_ir_receive_process_loop: + call car_ir_clk_check + nrtn positive + call car_ir_gpio_get_status + nbranch car_ir_receive_process_loop,true + setarg 10800 + call sleep + call car_ir_gpio_get_status + branch car_ir_get_bit1,true +car_ir_get_bit0: + setarg 0 + rshift rega,rega + ior rega,rega + loop car_ir_receive_process_loop + branch car_ir_receive_process_end +car_ir_get_bit1: + setarg 0x8000 + rshift rega,rega + ior rega,rega + call car_ir_clk_get +car_ir_get_bit1_wait_low_end: + call car_ir_clk_check + nrtn positive + call car_ir_gpio_get_status + branch car_ir_get_bit1_wait_low_end,true + loop car_ir_receive_process_loop +car_ir_receive_process_end: + bpatch patch1a_5,mem_patch1a + copy rega,pdata + store 2,mem_ir_rx_buf + store 2,mem_ir_notify_data+8 + fetch 1,mem_car_24g_status + beq WORK_PAIRED,car_ir_24g_receive_attack +car_ir_data_notify: + arg 0x07,loopcnt + arg mem_ir_notify_data_head,contr + call calc_check_sum_start + store 1,mem_ir_notify_data_check_sum + arg mem_ir_notify_data,rega + branch queue_push + +car_ir_24g_receive_attack: + fetch 1,mem_car_24g_ir_receive_attack_count + increase 1,pdata + store 1,mem_car_24g_ir_receive_attack_count + div pdata,2 + call wait_div_end + quotient temp + remainder pdata + nbranch car_ir_24g_receive_attack_blink,blank +car_ir_24g_receive_attack_off: + fetch 1,mem_car_config_led_num + isub temp,null + call car_ir_24g_go_die,zero + arg mem_car_led_control,pdata + increase -1,temp + iadd temp,rega + arg 0,pdata + istore 1,rega + rtn +car_ir_24g_receive_attack_blink: + arg mem_car_led_control,pdata + iadd temp,rega + arg 2,pdata + istore 1,rega + rtn +car_ir_24g_go_die: + jam 1,mem_car_24g_go_die_flag + rtn +car_ir_clk_get: + copy clkn_bt,pdata + store 4,mem_ir_receive_clkn + rtn +car_ir_clk_check: + copy clkn_bt,pdata + fetcht 4,mem_ir_receive_clkn + isub temp,pdata + sub pdata,200,null + rtn + +car_ir_gpio_get_status: + fetcht 1,mem_ir_rx_gpio + branch gpio_get_bit + +car_led_control_receive: + fetch 8,mem_le_receive_payload + store 8,mem_car_led_control + rtn + +car_info_request: + fetch 1,mem_car_config_device_select + store 1,mem_car_info_request_payload + fetch 1,mem_car_config_motor_layout + store 1,mem_car_info_request_payload+1 + fetch 1,mem_car_config_ir_enable + store 1,mem_car_info_request_payload+2 + arg 13,loopcnt + arg mem_car_info_request_head,contr + call calc_check_sum_start + store 1,mem_car_info_request_checksum + arg mem_car_info_request,rega + branch queue_push + + + + + +light_init: + call clear_eeprom_size_2k + jam 0x7a,mem_curr_packet_num + call light_load_controler_list + call light_init_crr_cmd_count + setarg light_pairing_timer + store 2,mem_cb_event_timer + arg 0,rega + branch pwm_init + +light_pairing_timer: + fetch 2,mem_light_pairing_timer + rtn blank + increase -1,pdata + store 2,mem_light_pairing_timer + rtnne 0 + jam 0,mem_light_pairing_enable + rtn + +light_init_crr_cmd_count: + bpatch patch1a_6,mem_patch1a + fetch 1,mem_light_next_record + sub pdata,40,null + rtn positive + jam 0,mem_light_next_record + rtn + +light_load_controler_list: + arg mem_light_next_record,rega + arg 0,regb + arg 81,temp + branch iicd_read_eep_data + +//output user:group record find +light_find_controler_pairing: + disable user + fetch 1,mem_light_cnum + copy pdata,loopcnt + + arg mem_light_clist,rega + copy regc,regb +light_find_controler_pairing_loop: + bpatch patch1a_7,mem_patch1a + call light_compare_addr_record + branch enable_user,zero +light_find_single_pairing_diff: + increase 4,rega + loop light_find_controler_pairing_loop + rtn + +//rega: regb: +light_compare_addr_record: + bpatch patch1b_0,mem_patch1b + ifetch 3,rega + ifetcht 3,regb + isub temp,null + rtn +//rega: regb: +light_compare_single_record: + bpatch patch1b_1,mem_patch1b + ifetch 3,rega + ifetcht 3,regb + isub temp,null + nrtn zero + ifetch 1,contr + sub pdata,0,null //0 zero + rtn zero + add rega,3,contr + ifetcht 1,contr + isub temp,null + rtn + +//output:find single controler +light_find_controler_cmd: + bpatch patch1b_2,mem_patch1b + disable user + fetch 1,mem_light_cnum + copy pdata,loopcnt + + arg mem_light_clist,rega + copy regc,regb +light_find_controler_cmd_loop: + call light_compare_single_record + branch enable_user,zero + increase 4,rega + loop light_find_controler_cmd_loop + rtn + +//regc +light_recv_adv: + fetch 1,mem_le_scanrsp_rcv + increase 1,pdata + store 1,mem_le_scanrsp_rcv + arg mem_le_rxbuf+12,regc + +light_anylize_command: + ifetch 2,regc + arg 0x55aa,temp + isub temp,null + nrtn zero + copy contr,regc + ifetcht 3,regc + setarg 0xffffff + isub temp,null + branch light_parse_cmd,zero + call light_find_controler_cmd + branch light_parse_cmd,user + rtn + +light_parse_cmd: + bpatch patch1b_3,mem_patch1b + increase 4,regc + ifetch 1,regc + fetcht 1,mem_curr_packet_num + isub temp,null + rtn zero + store 1,mem_curr_packet_num + fetch 1,mem_le_req_rcv + increase 1,pdata + store 1,mem_le_req_rcv + + increase 1,regc + ifetch 1,regc + store 1,mem_light_crr_cmd_count + copy pdata,loopcnt + rtn blank +light_parse_cmd_loop: + ifetch 1,contr + beq LIGHT_CMD_PWM0,light_parse_cmd_pwm0 + beq LIGHT_CMD_PWM1,light_parse_cmd_pwm1 + beq LIGHT_CMD_PWM2,light_parse_cmd_pwm2 + beq LIGHT_CMD_PWM3,light_parse_cmd_pwm3 + beq LIGHT_CMD_PWM4,light_parse_cmd_pwm4 + beq LIGHT_CMD_PWM5,light_parse_cmd_pwm5 + beq LIGHT_CMD_AUTO_MODE,light_parse_auto_mode + beq LIGHT_CMD_PAIRING,light_parse_pairing + loop light_parse_cmd_loop + rtn + +light_parse_cmd_pwm0: + copy contr,regc + fetch 1,mem_light_pwm0 + store 1,mem_pdatatemp + arg 0,temp +light_parse_cmd_pwm_common: + storet 1,mem_pdatatemp+1 + setarg 10000 + store 3,mem_pdatatemp+2 + ifetch 1,regc + store 1,mem_pdatatemp+5 + call pwm_out_set + and regc,1,contr + loop light_parse_cmd_loop + rtn +light_parse_cmd_pwm1: + copy regc,contr + fetch 1,mem_light_pwm1 + store 1,mem_pdatatemp + arg 1,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm2: + copy regc,contr + fetch 1,mem_light_pwm2 + store 1,mem_pdatatemp + arg 2,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm3: + copy regc,contr + fetch 1,mem_light_pwm3 + store 1,mem_pdatatemp + arg 3,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm4: + copy regc,contr + fetch 1,mem_light_pwm4 + store 1,mem_pdatatemp + arg 4,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm5: + copy regc,contr + fetch 1,mem_light_pwm5 + store 1,mem_pdatatemp + arg 5,temp + branch light_parse_cmd_pwm_common + +light_parse_auto_mode: + ifetch 1,contr + rtn + +light_parse_pairing: + copy contr,regc + fetch 1,mem_light_pairing_enable + bne 1,light_parse_pairing_abandon + call update_controler_list +light_parse_pairing_abandon: + and regc,4,contr + rtn +update_controler_list: + bpatch patch1b_4,mem_patch1b + call light_find_controler_pairing + branch update_conrtoler_list_found,user + fetch 1,mem_light_next_record + copy pdata,temp + increase 1,pdata + store 1,mem_light_next_record + call light_init_crr_cmd_count + lshift2 temp,temp + setarg mem_light_clist + iadd temp,contw + ifetch 4,regc + istore 4,contw + branch update_conrtoler_store_list +update_conrtoler_list_found: + add regc,3,contr + ifetch 1,contr + rtn blank + ifetch 4,regc + istore 4,rega +update_conrtoler_store_list: + arg mem_light_next_record,rega + arg 0,regb + arg 81,temp + branch iicd_write_eep_data + + + +lightc_init: + //key scan init + + //gpio init + fetcht 1,mem_lightc_led_gpio + call gpio_out_inactive + rtn + + +lightc_dispatch: + //key scan + + fetcht 1,mem_lightc_led_gpio + call gpio_out_active + + + fetcht 1,mem_lightc_led_gpio + call gpio_out_inactive + + // + call lightc_start_adv + + fetch 1,mem_adv_time + nrtn blank + //sleep + call lpm_write_gpio_wakeup + hfetch 4,core_lpm_ctrl + set0 15,pdata /* lowest lpo */ + hstore 4,core_lpm_reg + call lpm_write_ctrl + arg param_hibernate_clks,temp + branch lpm_sleep + +lightc_adv: + fetch 1,mem_adv_time + branch le_adv_loop_tx,blank + increase -1,pdata + store 1,mem_adv_time + branch le_adv_loop_tx + +lightc_start_adv: + mul32 pdata,20,pdata + arg mem_cmd0_string,contr + iadd contr,contr + ifetch 1,contr + rtn blank + copy pdata,rega + copy rega,loopcnt + arg mem_le_adv_data+2,contw + call memcpy + copy rega,pdata + increase 2,pdata + store 1,mem_le_adv_data_len + rtn + + + + + + +module_init: + + rtn wake + call le_modified_name + call adc_init_data + setarg module_process_idle + store 2,mem_cb_idle_process + setarg module_bt_conn_process + store 2,mem_cb_bt_process + setarg module_process_bb_event + store 2,mem_cb_bb_event_process + setarg module_le_conn_process + store 2,mem_cb_le_process + setarg module_lpm_lock + store 2,mem_cb_check_wakelock + setarg module_hci_cmd_transmit_le_notify + store 2,mem_cb_ble_transmit + setarg module_hci_event_receive_spp_data + store 2,mem_cb_receive_spp_data + setarg module_le_receive_data + store 2,mem_cb_att_write + setarg module_bb_event_timer + store 2,mem_cb_event_timer + + call module_spp_clear_last_transmite_clock + bpatch patch1b_5,mem_patch1b + call module_lpm_uart_init + call module_gpio_init + call check_module_disabled + branch module_hci_event_enter_standby_mode + + +module_lpm_uart_init: + fetch 4,mem_module_uart_rx_buffer + hstore 4,core_uart_rsaddr + + fetch 4,mem_module_uart_tx_buffer + hstore 4,core_uart_tsaddr + + hfetch 1,core_gpio_sel1 + or_into 0x04,pdata + and_into 0xfc,pdata + hstore 1,core_gpio_sel1 + hjam 0x00,core_uart_ctrl + + fetch 2,mem_module_uart_rx_buffer + hstore 2,core_uart_rrptr + fetch 2,mem_module_uart_tx_buffer + hstore 2,core_uart_twptr + hstore 2,core_uart_trptrp + + hfetch 4,core_gpio_pu0 + set1 7,pdata + hstore 4,core_gpio_pu0 + + hfetch 2,core_clkoff + set0 CLOCK_OFF_UART,pdata + hstore 2,core_clkoff + call uart_set_baud_by_mem + hjam uartclk_crystal,core_uart_clksel + hjam uart_ctrl_h4,core_uart_ctrl + + fetch 1,mem_module_flag + isolate1 MODULE_FLAG_UART_FLOW_CONTROL,pdata + hfetcht 1,core_uart_ctrl + setflag true,4,temp + hstoret 1,core_uart_ctrl + rtn + + + +module_lpm_init: + call module_spp_clear_last_transmite_clock + branch module_lpm_uart_init +// branch module_gpio_init + +module_gpio_init: + //module state pin +// call ui_led_init +// call app_led_start_blink + //module conn state pin + fetcht 1,mem_module_connect_state_gpio + call gpio_config_output + call module_set_conn_pin_low + + fetcht 1,mem_module_wake_up_gpio + branch gpio_config_input + +module_lpm_lock: + fetcht 1,mem_module_wake_up_gpio + call gpio_get_bit + nbranch app_put_lpm_wake_lock,true + branch app_get_lpm_wake_lock + + +module_le_conn_process: + rtn + +module_bt_conn_process: + call module_spp_enter_sniff + branch module_control_air_flow + +module_spp_enter_sniff: + fetch 1,mem_ui_state_map + bbit0 UI_STATE_BT_SPP_CONN,module_spp_clear_last_transmite_clock + bpatch patch1b_6,mem_patch1b + setarg 0x3eff + fetcht 4,mem_last_transmite_clock + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_SNIFF,module_spp_clear_last_transmite_clock + fetch 1,mem_module_flag + rtnbit1 MOUDLE_TASK_SNIFF + call module_set_sniff_task_flag + call app_bt_enter_sniff +module_spp_clear_last_transmite_clock: + copy clkn_bt,pdata + store 4,mem_last_transmite_clock + rtn + + +module_process_idle: + call module_control_air_flow + call l2cap_malloc_is_fifo_full + nrtn blank + branch module_process + + +module_process_bb_event: + copy regc,pdata + beq BT_EVT_BB_CONNECTED,module_process_bb_conn + beq BT_EVT_BB_DISCONNECTED,module_process_bb_event_disconned + beq BT_EVT_RECONN_FAILED,module_process_reconn_fail + beq BT_EVT_SETUP_COMPLETE,module_process_setup_complete + beq BT_EVT_SPP_CONNECTED,module_process_spp_connected + beq BT_EVT_SPP_DISCONNECTED,module_process_spp_disconnected + beq BT_EVT_PINCODE_REQ,module_process_evt_pincode_req + beq BT_EVT_ENTER_SNIFF,module_process_enter_sniff + beq BT_EVT_EXIT_SNIFF,module_process_exit_sniff + beq BT_EVT_RECONN_PAGE_TIMEOUT,module_process_page_time_out + beq BT_EVT_LE_CONNECTED,module_process_le_conn + beq BT_EVT_LE_DISCONNECTED,module_process_bb_even_le_disconn + beq BT_EVT_SNIFF_NOT_ACCEPT,module_process_sniff_not_accept + beq BT_EVT_UNSNIFF_ACCEPT,module_process_unsniff_accept + beq BT_EVT_UNSNIFF_NOT_ACCEPT,module_process_unsniff_not_accept + beq BT_EVT_LE_PAIRING_FAIL,module_hci_event_le_pairing_fail + beq BT_EVT_LE_PAIRING_SUCCESS,module_hci_event_le_pairing_success + beq BT_EVT_LE_START_ENC,module_hci_event_start_enc + beq BT_EVT_LE_PAUSE_ENC,module_hci_event_pause_enc + beq BT_EVT_LE_TK_GENERATE,module_hci_event_le_tk + beq BT_EVT_BT_GKEY_GENERATE,module_hci_event_gkey_generate + beq BT_EVT_BT_GET_PASSKEY,module_hci_event_passkey_entry_mode + beq BT_EVT_BT_PAIRING_FAIL,module_hci_event_bt_pairing_fail + beq BT_EVT_BT_PAIRING_SUCCESS,module_hci_event_bt_pairing_success + beq BT_EVT_LE_GKEY_GENERATE,module_hci_event_le_gkey + beq BT_EVT_STORE_NVRAM,module_hci_event_store_device + beq BT_EVT_LE_LTK_LOST,module_process_ble_ltk_lost + rtn + + +module_process_bb_event_disconned: + call module_spp_clear_last_transmite_clock + fetch 1,mem_flag_pairing_state + ncall module_hci_event_bt_pairing_fail,blank + call module_disconn_start + fetch 2,mem_ui_state_map + rtnbit0 UI_STATE_BT_SPP_CONN + branch module_spp_disconnected + +module_process_spp_connected: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_SPP_CONN,pdata + store 2,mem_ui_state_map + fetch 1,mem_module_spp_lpm_mult + store 1,mem_lpm_mult + call module_set_conn_pin_low + branch module_hci_event_spp_connect + +module_process_spp_disconnected: +// branch module_spp_disconnected +module_spp_disconnected: + fetch 2,mem_ui_state_map + rtnbit0 UI_STATE_BT_SPP_CONN + set0 UI_STATE_BT_SPP_CONN ,pdata + store 2,mem_ui_state_map + branch module_hci_event_spp_disconnect + + +module_process_enter_sniff: + +module_sniff_param_check: + call module_spp_clear_last_transmite_clock + //fetch 1,mem_context + //rtnbit0 state_insniff + fetch 2,mem_context+coffset_tsniff + rshift pdata,pdata + fetcht 2,mem_sniff_param_interval + isub temp,null + nbranch module_sniff_param_check_unsniff,zero + branch app_lpm_mult_enable +module_sniff_param_check_unsniff: + fetch 1,mem_module_flag + rtnbit1 MOUDLE_TASK_UNSNIFF + hfetch 2,core_uart_rxitems //* + ncall module_set_unsniff_task_flag,blank //*加这两句话 + branch app_bt_sniff_exit + +module_process_exit_sniff: + call module_clear_sniff_task_flag + branch app_lpm_mult_disable + +module_process_setup_complete: + call module_spp_clear_last_transmite_clock + branch module_conn_start + +module_process_bb_even_le_disconn: + call le_clr_config_more_data + call module_disconn_start + branch module_hci_event_le_disconnect + +module_process_evt_pincode_req: + branch app_bt_set_pincode + + +module_process_sniff_not_accept: + branch module_clear_sniff_task_flag + + +module_process_unsniff_accept: + fetch 1,mem_module_flag + bbit0 MOUDLE_TASK_UNSNIFF,app_bt_enter_sniff + branch module_clear_unsniff_task_flag + + +module_process_unsniff_not_accept: + branch module_clear_unsniff_task_flag + + +module_process_le_conn: + call le_send_att_exchange_mtu_requset + call module_conn_start + fetch 1,mem_module_le_lpm_mult + store 1,mem_lpm_mult + branch module_hci_event_le_connect + + +module_process_bb_conn: + jam 0,mem_flag_mode_ssp_pin + call module_clear_sniff_task_flag + branch module_clear_unsniff_task_flag + +module_process_page_time_out: +module_process_reconn_fail: +module_disconn_start: + call module_start_adv_discovery_by_command + branch module_set_conn_pin_high + + +module_process_ble_ltk_lost: + call le_send_reject_ind + branch le_send_smp_security_request + + +module_set_conn_pin_high: + fetcht 1,mem_module_connect_state_gpio + branch gpio_out_active + +module_conn_start: + call module_stop_adv_discovery + branch module_set_conn_pin_low + +module_stop_adv_discovery: + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BT_BIT,pdata + call app_bt_stop_discovery,true + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BLE_BIT,pdata + call app_ble_stop_adv,true + rtn +module_set_conn_pin_low: + fetcht 1,mem_module_connect_state_gpio + branch gpio_out_inactive + +module_process_with_credit: + fetch 1,mem_credit_flag + rtneq CREDIT_DISABLE + branch rfcomm_send_uih_without_payload + +module_process: + hfetch 1,core_uart_status + bbit1 uart_status_rx_fifo_empty,module_process_with_credit //rx no data + call uartd_prepare_rx + ifetch 1,contru + bne 0x01,module_hci_in_excp + hfetch 2,core_uart_rxitems + sub pdata,2,null + rtn positive + ifetch 1,contru + store 1,mem_module_uart_opcode + ifetcht 1,contru + copy contru,rega + storet 1,mem_module_uart_len + add temp,3,temp + hfetch 2,core_uart_rxitems + isub temp,temp + nrtn positive + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + call module_hci_cmd_control + fetch 1,mem_module_temp_nl_discard_packet + rtneq HCI_NOT_DISCARD_PACKET + branch module_hci_dicard_packet //discard this packet + +module_hci_in_excp: + call delay_10ms + call module_hci_event_invalid_packet + branch module_hci_release_except + + +module_hci_release_except: + bpatch patch1b_7,mem_patch1b + hfetch 2,core_uart_rxitems + rtn blank + call uartd_prepare_rx + ifetch 1,contru + sub pdata,0x01,null + ncall module_hci_dicard_bytes,zero + nbranch module_hci_release_except,zero + ifetch 1,contru + rtneq HCI_CMD_SPP_DATA_REQ + rtneq HCI_CMD_SET_CREDIT_GIVEN + increase -1,contru + call module_hci_dicard_bytes + branch module_hci_release_except + +module_hci_dicard_packet: + call uartd_prepare_rx + increase 2,contru + ifetch 1,contru + iadd contru,contru +module_hci_dicard_bytes: + branch uartd_rxdone + +/*********************HCI CONTROL*********************/ +module_hci_cmd_control: + bpatch patch1c_0,mem_patch1c + fetch 1,mem_module_uart_opcode + beq HCI_CMD_SET_BT_ADDR_REQ,module_hci_cmd_set_bt_addr + beq HCI_CMD_SET_LE_ADDR_REQ,module_hci_cmd_set_le_addr + beq HCI_CMD_SET_VISIBILITY_REQ,module_hci_cmd_set_visibility + beq HCI_CMD_SET_BT_NAME_REQ,module_hci_cmd_set_bt_name + beq HCI_CMD_SET_LE_NAME_REQ,module_hci_cmd_set_le_name + beq HCI_CMD_SPP_DATA_REQ,module_hci_cmd_receive_spp_data + beq HCI_CMD_LE_DATA_REQ,module_hci_cmd_receive_le_data + beq HCI_CMD_STATUS_IRQ,module_hci_cmd_inquire_status + beq HCI_CMD_SET_PAIRING_REQ,module_hci_cmd_set_pairing_mode + beq HCI_CMD_SET_PINCODE_REQ,module_hci_cmd_set_pincode + beq HCI_CMD_SET_UARTCONTROL_REQ,module_hci_cmd_set_uart_control_mode + beq HCI_CMD_SET_UART_BAUD_REQ,module_hci_cmd_set_uart_baud + beq HCI_CMD_VERSION_REQ,module_hci_cmd_version_request + beq HCI_CMD_BT_DISCONNECT,module_hci_cmd_bt_disconnect + beq HCI_CMD_BLE_DISCONNECT,module_hci_cmd_ble_disconnect + beq HCI_CMD_SET_NVRAM_REQ,module_hci_cmd_set_nvram + beq HCI_CMD_CONFIRM_GKEY,module_hci_cmd_confirm_gkey + beq HCI_CMD_SET_CREDIT_GIVEN,module_hci_cmd_set_credit_given + beq HCI_CMD_AUTO_ADV_SCAN,module_hci_cmd_auto_adv + beq HCI_CMD_POWER_REQ,module_hci_cmd_power_request + beq HCI_CMD_POWER_SET,module_hci_cmd_power_set + beq HCI_CMD_PASSKEY_ENTRY,module_hci_cmd_passkey_entry + beq HCI_CMD_SET_GPIO,module_hci_cmd_set_gpio + beq HCI_CMD_READ_GPIO,module_hci_cmd_read_gpio + beq HCI_CMD_LE_SET_PAIRING,module_hci_cmd_le_set_pairing_mode + beq HCI_CMD_LE_SET_ADV_DATA,module_hci_cmd_le_set_adv_data + beq HCI_CMD_LE_SET_SCAN_DATA,module_hci_cmd_le_set_scan_data + beq HCI_CMD_LE_SEND_CONN_UPDATE_REQ,module_hci_cmd_le_send_conn_update_req + beq HCI_CMD_LE_SET_ADV_PARM,module_hci_cmd_set_le_adv_parameter + beq HCI_CMD_LE_START_PAIRING,module_hci_cmd_le_start_pairing + beq HCI_CMD_SET_WAKE_GPIO,module_hci_cmd_set_wake_gpio + beq HCI_CMD_SET_TX_POWER,module_hci_cmd_set_tx_power + beq HCI_CMD_LE_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey + beq HCI_CMD_REJECT_JUSTWORK,module_hci_cmd_set_reject_justwork_flag + beq HCI_CMD_RESET_CHIP_REQ,module_hci_cmd_reset_chip + beq HCI_CMD_LE_SET_FIXED_PASSKEY,module_hci_cmd_le_set_fixed_passkey + beq HCI_TEST_CMD_CLOSE_LPM,module_hci_test_cmde_close_lpm + branch module_hci_event_receive_invalid_cmd + +/*********************HCI COMMAND*********************/ + +//command opcode 0x00 +module_hci_cmd_set_bt_addr: + fetch 1,mem_module_uart_len + bne 6,module_hci_event_receive_invalid_cmd + ifetch 6,contru + store 6,mem_lap + branch module_hci_event_receive_valid_cmd + +//command opcode 0x01 +module_hci_cmd_set_le_addr: + fetch 1,mem_module_uart_len + bne 6,module_hci_event_receive_invalid_cmd + ifetch 6,contru + store 6,mem_le_lap + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x02 +module_hci_cmd_set_visibility: + fetch 1,mem_module_uart_len + bne 1,module_hci_event_receive_invalid_cmd + copy rega,contru + call module_hci_event_receive_valid_cmd + ifetcht 1,contru + storet 1,mem_module_bluetooth_stauts_by_command + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + rtnbit1 UI_STATE_BT_CONNECTED +module_start_adv_discovery_by_command: + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BT_BIT,pdata + nbranch moudle_start_adv_by_command,true + fetcht 1,mem_module_bluetooth_stauts_by_command + and temp,0x03,pdata + store 1,mem_scan_mode +moudle_start_adv_by_command: + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BLE_BIT,pdata + nrtn true + fetcht 1,mem_module_bluetooth_stauts_by_command + isolate1 2,temp + branch app_ble_start_adv,true + branch app_ble_stop_adv + + +//command opcode 0x03 +module_hci_cmd_set_bt_name: + fetch 1,mem_module_uart_len + sub pdata,67,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_local_name_length + arg 8,loopcnt + call memset0 + fetch 1,mem_module_uart_len + copy pdata,loopcnt + copy rega,contru + arg mem_local_name,contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x04 +module_hci_cmd_set_le_name: + fetch 1,mem_module_uart_len + sub pdata,29,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_le_name_len + copy pdata,loopcnt + copy rega,contru + arg mem_le_name,contw + call uart_copy_rx_bytes_fast + call le_modified_name + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x05 +module_hci_cmd_receive_spp_data: + fetch 1,mem_ui_state_map + bbit0 UI_STATE_BT_SPP_CONN,module_hci_event_receive_invalid_cmd + call app_check_sniff + branch module_hci_cmd_spp_exit_sniff,true + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet +// call p_nl_clear_last_transmite_clock + call module_spp_clear_last_transmite_clock + fetch 1,mem_remote_credits + rtn blank + fetch 2,mem_nl_rx_len_all + bne 0,module_hci_cmd_pass_init_ng_rx_len_all + fetch 1,mem_module_uart_len + store 2,mem_nl_rx_len_all + + copy rega,contru +// ifetch 2,contru +// store 2,mem_nl_rx_handle + copy contru,pdata + store 2,mem_nl_rx_data_src +module_hci_cmd_pass_init_ng_rx_len_all: + call module_hci_cmd_get_current_packet_len_and_remain_len + branch spp_tx_rfcomm_packet + +module_hci_cmd_spp_exit_sniff: + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + branch module_exit_sniff + +module_hci_cmd_get_current_packet_len_and_remain_len: + call module_hci_cmd_get_current_patcket_len + fetch 2,mem_nl_rx_len_all + fetcht 2,mem_current_packet_length + isub temp,pdata + store 2,mem_nl_rx_len_all + rtn + +module_hci_cmd_get_current_patcket_len: + fetch 2,mem_nl_rx_len_all + arg DM_REFCOM_BUFF_LEN,temp + call not_greater_than + fetcht 2,mem_rfcomm_max_frame_size + call not_greater_than + fetcht 2,mem_pn_max_frame_size + call not_greater_than + store 2,mem_current_packet_length + rtn + +module_hci_command_tx_spp_tx_complete: + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + jam HCI_CMD_SPP_DATA_REQ,mem_module_uart_opcode + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x09 +module_hci_cmd_receive_le_data: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd + call module_check_ble_encrypt_state + branch module_hci_event_receive_invalid_cmd,user + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + fetch 1,mem_module_flag + bbit1 MODULE_FLAG_BLE_DATA_FINISH,module_hci_cmd_receive_le_data_finish + fetch 1,mem_module_hci_notify_len + nrtn blank + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + ifetch 2,contru //handle + store 2,mem_module_hci_notify_handle + copy contru,pdata + store 2,mem_module_hci_nofiy_addr + fetch 1,mem_module_uart_len + pincrease -2 + nbranch module_hci_event_receive_invalid_cmd,positive + branch module_hci_event_receive_invalid_cmd,zero + store 1,mem_module_hci_notify_len + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + call le_set_config_more_data + call module_hci_cmd_transmit_le_notify + call module_hci_cmd_transmit_le_notify + call module_hci_cmd_transmit_le_notify + fetch 1,mem_module_flag + rtnbit0 MODULE_FLAG_BLE_DATA_FINISH +module_hci_cmd_receive_le_data_finish: + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + call module_clear_le_tx_data_flag + branch module_hci_event_receive_valid_cmd + +module_hci_cmd_transmit_le_notify: + fetch 1,mem_module_hci_notify_len + rtn blank + call le_fifo_check_nearly_full + nrtn blank //no fifo + call module_get_le_remote_mtu + bpatch patch1c_1,mem_patch1c + add temp,-3,pdata //sub handle and opcode + fetcht 1,mem_module_hci_notify_len + call not_greater_than + copy pdata,rega + copy temp,pdata + isub rega,pdata + store 1,mem_module_hci_notify_len + fetcht 2,mem_module_hci_notify_handle + call le_att_malloc_tx_notify + fetch 2,mem_module_hci_nofiy_addr + copy pdata,contru + copy rega,loopcnt + call uart_copy_rx_bytes_fast + copy contru,pdata + store 2,mem_module_hci_nofiy_addr + fetch 1,mem_module_hci_notify_len + nrtn blank + branch module_set_le_tx_data_flag + + +//output: temp is master mtu +module_get_le_remote_mtu: + arg 0x17,temp + fetch 1,mem_module_flag + rtnbit1 MODULE_FLAG_BLE_SEND_MTU23 + fetcht 2,mem_le_remote_mtu + rtn + +module_check_ble_encrypt_state: + fetch 1,mem_module_flag + bbit1 MODULE_FLAG_BLE_DATA_ENCRYPT,le_check_encrypt_state + branch disable_user + + +//command opcode 0x0b +module_hci_cmd_inquire_status: + branch module_hci_event_status_res + + +//command opcode 0x0c +module_hci_cmd_set_pairing_mode: + copy rega,contru + ifetch 1,contru + beq PAIRING_PINCODE,module_hci_pairing_pincode_mode + beq PAIRING_JUSTWORK,module_hci_pairing_just_work_mode + beq PAIRING_PASSKEY,module_hci_pairing_passkey + beq PAIRING_CONFIRM,module_hci_pairing_numeric_comparison + branch module_hci_event_receive_invalid_cmd +module_hci_pairing_pincode_mode: + call ssp_disable + jam 0,mem_ssp_enable + branch module_hci_event_receive_valid_cmd +module_hci_pairing_just_work_mode: + setarg SSP_MODE_JUST_WORK_IO_CAP_DATA +module_hci_sspairing_mode: + store 3,mem_sp_iocap_local + store 1,mem_ssp_mode_flag + call ssp_enable + jam 1,mem_ssp_enable + branch module_hci_event_receive_valid_cmd +module_hci_pairing_passkey: + setarg SSP_MODE_PASSKEY_IO_CAP_DATA + branch module_hci_sspairing_mode + +module_hci_pairing_numeric_comparison: + setarg SSP_MODE_SSP_PIN_IO_CAP_DATA + branch module_hci_sspairing_mode + +//command opcode 0x0d +module_hci_cmd_set_pincode: + fetch 1,mem_module_uart_len + sub pdata,16,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_pin_length + copy pdata,loopcnt + arg mem_pin,contw + call uart_copy_rx_bytes + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x0e +module_hci_cmd_set_uart_control_mode: + copy rega,contru + ifetch 1,contru + hfetcht 1,core_uart_ctrl + nsetflag blank,4,temp + hstoret 1,core_uart_ctrl + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x0f +module_hci_cmd_set_uart_baud: + fetch 1,mem_module_uart_len + copy pdata,loopcnt + copy rega,contru + call string2dec_from_uart + setarg uart_clk_24 + idiv temp + call wait_div_end + quotient pdata +module_hci_cmd_set_uart_baud_ok: + store uart_baud_len,mem_baud + call module_hci_event_receive_valid_cmd + call wait_uarttx + branch uart_set_baud_by_mem + + +//command opcode 0x10 +module_hci_cmd_version_request: + arg 2,rega + arg mem_soft_version_num,regb + arg 0,temp + branch module_hci_event_set_cmd +module_hci_event_set_cmd_send_response: + store 2,mem_event_cmd_response_content + arg mem_event_cmd_response_content,regb + arg 0,temp + branch module_hci_event_set_cmd + + +//command opcode 0x11 +module_hci_cmd_bt_disconnect: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd +module_hci_cmd_bt_disconnect_doing: + call module_hci_event_receive_valid_cmd + branch app_bt_disconnect + + +//command opcode 0x12 +module_hci_cmd_ble_disconnect: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd +module_hci_cmd_ble_disconnect_doing: + call module_hci_event_receive_valid_cmd + branch app_ble_disconnect + + + + +//command opcode 0x26 +module_hci_cmd_set_nvram: + fetch 1,mem_module_uart_len + copy pdata,loopcnt + copy rega,contru + fetch 2,mem_nv_data_ptr + icopy contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x28 +module_hci_cmd_confirm_gkey: + fetch 1,mem_ui_state_map + bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd + ifetch 1,contru + fetcht 1,mem_flag_mode_ssp_pin + setflag blank,FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,temp + set1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,temp + storet 1,mem_flag_mode_ssp_pin + + call module_hci_event_receive_valid_cmd + + fetch 1,mem_flag_mode_ssp_pin + bbit1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,module_hci_cmd_spp_number_comparison_result_is1 + rtn + +dhkey_not_accept: + jam 0,mem_flag_mode_ssp_pin + jam BT_CMD_DHKEY_NOT_ACCEPT,mem_fifo_temp + branch ui_ipc_send_cmd + + +module_hci_cmd_spp_number_comparison_result_is1: + bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed + branch dhkey_not_accept + + +//command opcode 0x29 +module_hci_cmd_set_credit_given: + fetch 1,mem_ui_state_map + rtnbit0 UI_STATE_BT_SPP_CONN + fetch 1,mem_credit_flag + rtneq CREDIT_DISABLE + ifetch 1,contru + fetcht 1,mem_credit_given + iadd temp,temp + storet 1,mem_credit_given + rtn + + +//command opcode 0x2a +module_hci_cmd_auto_adv: + arg 0x40,loopcnt + arg mem_le_adv_data_len,contw + call clear_mem + setarg 0 + store 1,mem_regb + copy rega,contru +module_hci_cmd_auto_adv_loop: + copy contru,pdata + store 2,mem_regc + call module_hci_cmd_auto_adv_adv_analys + + fetch 1,mem_regb + fetcht 1,mem_temp + increase 1,temp + iadd temp,pdata + store 1,mem_regb + + sub pdata,31,null + nbranch module_hci_cmd_auto_adv_store_scan,positive +module_hci_cmd_auto_adv_store_adv: + fetcht 1,mem_le_adv_data_len + setarg mem_le_adv_data + iadd temp,pdata + store 2,mem_contw + fetcht 1,mem_temp + increase 1,temp + fetch 1,mem_le_adv_data_len + iadd temp,pdata + store 1,mem_le_adv_data_len + branch module_hci_cmd_auto_adv_store_common +module_hci_cmd_auto_adv_store_scan: + fetcht 1,mem_le_scan_data_len + setarg mem_le_scan_data + iadd temp,pdata + store 2,mem_contw + fetcht 1,mem_temp + increase 1,temp + fetch 1,mem_le_scan_data_len + iadd temp,pdata + store 1,mem_le_scan_data_len +module_hci_cmd_auto_adv_store_common: + fetch 2,mem_contw + copy pdata,contw + fetch 2,mem_regc + copy pdata,contru + + copy temp,loopcnt + call uart_copy_rx_bytes_fast + + fetch 1,mem_module_uart_len + fetcht 1,mem_regb + isub temp,null + nbranch module_hci_cmd_auto_adv_loop,zero + branch module_hci_event_receive_valid_cmd + +//block of adv len in mem_temp +module_hci_cmd_auto_adv_adv_analys: + ifetch 1,contru + store 1,mem_temp + ifetch 1,contru + store 1,mem_rega + rtn + + +//command opcode 0x2b +module_hci_cmd_power_request: + arg 0,temp + arg 2,rega + fetch 2,mem_module_vdd_quotient + store 2,mem_event_cmd_response_content + arg mem_event_cmd_response_content,regb + branch module_hci_event_set_cmd + + +//command opcode 0x2c +module_hci_cmd_power_set: + fetch 1,mem_module_uart_len + bne 1,module_hci_event_receive_invalid_cmd + ifetch 1,contru + store 1,mem_module_read_vdd_flag + setarg 0x00 + store 2,mem_module_vdd_quotient + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x30 +module_hci_cmd_passkey_entry: + ifetch 4,contru + store 4,mem_pin + jam 4,mem_pin_length + jam 0,mem_authentication_passkey_times + call module_hci_event_receive_valid_cmd + branch authentication_passkey + + +//command opcode 0x31 +module_hci_cmd_set_gpio: + fetch 1,mem_module_uart_len + bne 3,module_hci_event_receive_invalid_cmd + ifetch 1,contru + beq HCI_CMD_CONFIG_GPIO_INPUT,module_set_gpio_input + beq HCI_CMD_CONFIG_GPIO_OUTPUT,module_set_gpio_output + branch module_hci_event_receive_invalid_cmd + +module_set_gpio_input: + ifetcht 1,contru + ifetch 1,contru + beq GPIO_INPUT_HIGH_IMPEDANCE,module_set_gpio_high_impedance + nsetflag blank,7,temp + call gpio_config_input + branch module_hci_event_receive_valid_cmd + +module_set_gpio_high_impedance: + call gpio_set_high_impedance + branch module_hci_event_receive_valid_cmd + +module_set_gpio_output: + ifetcht 1,contru + call gpio_config_output0 + ifetch 1,contru + isolate1 0,pdata + call gpio_out_flag + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x32 +module_hci_cmd_read_gpio: + fetch 1,mem_module_uart_len + bne 1,module_hci_event_receive_invalid_cmd + ifetcht 1,contru + call gpio_get_bit + setarg 0x0 + nsetflag true,0,pdata + arg 1,rega + branch module_hci_event_set_cmd_send_response + + +//command opcode 0x33 +module_hci_cmd_le_set_pairing_mode: + copy rega,contru + ifetch 1,contru + copy pdata,temp + beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,module_le_set_pairing_mode_secure_justwork + beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,module_le_set_pairing_mode_secure_numeric + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,module_le_set_pairing_mode_secure_passkey + store 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_NONE, module_le_set_no_pairing + beq LE_PAIRING_MODE_LAGACY_JUSTWORK,module_le_set_pairing_mode_lagacy_just_work + beq LE_PAIRING_MODE_LAGACY_PASSKEY,module_le_set_pairing_mode_lagacy_passkey + branch module_hci_event_receive_invalid_cmd + +module_le_set_pairing_mode_secure_justwork: + fetch 1,mem_le_secure_connect_enable + branch module_hci_event_receive_invalid_cmd,blank + storet 1,mem_le_pairing_mode + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch module_le_set_noinputnooutput +module_le_set_pairing_mode_secure_numeric: + fetch 1,mem_le_secure_connect_enable + branch module_hci_event_receive_invalid_cmd,blank + storet 1,mem_le_pairing_mode + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap + branch module_hci_event_receive_valid_cmd +module_le_set_pairing_mode_secure_passkey: + fetch 1,mem_le_secure_connect_enable + branch module_hci_event_receive_invalid_cmd,blank + storet 1,mem_le_pairing_mode + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch module_le_set_displayonly +module_le_set_no_pairing: + jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth +module_le_set_noinputnooutput: + jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap + branch module_hci_event_receive_valid_cmd +module_le_set_pairing_mode_lagacy_just_work: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth + branch module_le_set_noinputnooutput +module_le_set_pairing_mode_lagacy_passkey: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth +module_le_set_displayonly: + jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x34 +module_hci_cmd_le_set_adv_data: + fetch 1,mem_module_uart_len + sub pdata,31,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_le_adv_data_len + copy pdata,loopcnt + copy rega,contru + arg mem_le_adv_data,contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x35 +module_hci_cmd_le_set_scan_data: + fetch 1,mem_module_uart_len + sub pdata,31,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_le_scan_data_len + copy pdata,loopcnt + copy rega,contru + arg mem_le_scan_data,contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x36 +module_hci_cmd_le_send_conn_update_req: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd + fetch 1,mem_module_uart_len + bne 0x08,module_hci_event_receive_invalid_cmd + copy rega,contru + ifetch 8,contru + store 8,mem_le_interval_min + jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp + call ui_ipc_send_cmd + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x37 +module_hci_cmd_set_le_adv_parameter: + ifetch 2,contru + store 2,mem_le_adv_interval + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x38 +module_hci_cmd_le_start_pairing: + fetch 1,mem_le_pairing_mode + branch module_hci_event_receive_invalid_cmd,blank + fetch 1,mem_le_pairing_state + bne FLAG_LE_PAIRING_NULL,module_hci_event_receive_invalid_cmd + fetch 1,mem_le_enc_state + bne FLAG_LE_ENC_NULL,module_hci_event_receive_invalid_cmd + call check_51cmd_le_smp_sec_req + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x40 +module_hci_cmd_set_wake_gpio: + fetch 1,mem_module_uart_len + bne 5,module_hci_event_receive_invalid_cmd + ifetch 1,contru + store 1,mem_module_mcu_wake_pin + ifetch 4,contru + store 4, mem_module_mcu_wake_delay_us + fetcht 1,mem_module_mcu_wake_pin + call gpio_config_output + call module_set_mcu_wake_pin_low + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x42 +module_hci_cmd_set_tx_power: + fetch 1,mem_module_uart_len + bne 0x01,module_hci_event_receive_invalid_cmd + ifetch 1,contru + store 1,mem_tx_power + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x48 +module_hci_cmd_le_confirm_gkey: + ifetch 1,contru + beq 0x01,module_hci_cmd_le_confirm_gkey_fail + fetch 1,mem_le_secure_connect_state + beq LE_SC_STAT_SEND_PUBLIC_KEY,module_hci_cmd_le_confirm_gkey_ok + beq LE_SC_STAT_RECEIVE_DHKEY,module_hci_cmd_le_confirm_gkey_ok + beq LE_SC_STAT_WAIT_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey_ok + branch module_hci_event_receive_invalid_cmd +module_hci_cmd_le_confirm_gkey_ok: + jam FLAG_LE_SC_CONFRIM_GKEY_OK,mem_le_sc_confirm_gkey_flag + branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey_fail: + call le_send_pairing_confirm_value_failed + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x49 +module_hci_cmd_set_reject_justwork_flag: + fetch 1,mem_module_uart_len + bne 0x01,module_hci_event_receive_invalid_cmd + call module_hci_event_receive_valid_cmd + ifetch 1,contru + branch classic_bt_clr_reject_justwork_flag,blank + branch classic_bt_set_reject_justwork_flag + + +//command opcode 0x51 +module_hci_cmd_reset_chip: + call module_hci_event_receive_valid_cmd + call wait_uarttx + hjam 0x01,core_reset // rest YC1021 + branch loop + + +//command opcode 0x61 +module_hci_cmd_le_set_fixed_passkey: + fetch 1,mem_module_uart_len + beq 0,module_hci_event_receive_invalid_cmd + ifetch 1,contru + branch module_hci_cmd_le_set_random_passkey,blank + fetch 1,mem_module_uart_len + bne 5,module_hci_event_receive_invalid_cmd + ifetch 4,contru + arg 1000000,temp + isub temp,null + branch module_hci_event_receive_invalid_cmd,positive + store 4,mem_le_tk + call le_set_config_fixed_tk + branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_random_passkey: + call le_clr_config_fixed_tk + branch module_hci_event_receive_valid_cmd + + +//command opcode 0xff +module_hci_test_cmde_close_lpm: + jam 0,mem_lpm_mode + branch module_hci_event_receive_valid_cmd + + +/*********************HCI EVENT*********************/ + +module_hci_event_receive_invalid_cmd: + arg 1,temp + arg 0,rega + branch module_hci_event_set_cmd + + +module_hci_event_receive_valid_cmd: + arg 0,temp + arg 0,rega + branch module_hci_event_set_cmd + + +//event opcode 0x00 +module_hci_event_spp_connect: + jam HCI_EVENT_SPP_CONN_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x02 +module_hci_event_le_connect: + jam HCI_EVENT_LE_CONN_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x03 +module_hci_event_spp_disconnect: + jam HCI_EVENT_SPP_DIS_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x05 +module_hci_event_le_disconnect: + jam HCI_EVENT_LE_DIS_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x06 +//input: +// temp: success 0; fail 1 +// rega:Response Content length +// regb:Response Content address +module_hci_event_set_cmd: + fetch 1,mem_module_uart_opcode + copy pdata,regc + jam HCI_EVENT_CMD_RES,mem_module_uart_opcode + setarg 2 + iadd rega,pdata + call module_hci_prepare_tx + copy regc,pdata + istore 1,contwu + istoret 1,contwu + copy rega,loopcnt + copy regb,contr + call uart_copy_tx_bytes + branch uartd_send + + +//event opcode 0x07 +module_hci_event_receive_spp_data: +// call p_nl_clear_last_transmite_clock + call module_spp_clear_last_transmite_clock + jam HCI_EVENT_SPP_DATA_REP,mem_module_uart_opcode + fetch 1,mem_current_length + rtn blank + call module_hci_prepare_tx + fetch 1,mem_current_length + copy pdata,loopcnt + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + call uart_copy_tx_bytes_fast + branch uartd_send + + +//event opcode 0x08 +module_hci_event_receive_le_data: + jam HCI_EVENT_LE_DATA_REP,mem_module_uart_opcode + fetch 1,mem_module_le_rx_data_len + icopy loopcnt + increase 2,pdata + call module_hci_prepare_tx + fetch 2,mem_module_le_rx_data_handle // Attribute handle + istore 2,contwu + fetch 2,mem_module_le_rx_data_address + icopy contr + call uart_copy_tx_bytes_fast + branch uartd_send + + +//event opcode 0x09 +module_hci_event_enter_standby_mode: + jam HCI_EVENT_STANDBY_REP,mem_module_uart_opcode +module_hci_event_enter_standby_mode_len0: + setarg 0 + call module_hci_prepare_tx + branch uartd_send + + +//event opcode 0x0a +module_hci_event_status_res: + jam HCI_EVENT_STATUS_RES,mem_module_uart_opcode + setarg 1 + call module_hci_prepare_tx + + call module_hci_read_bt_status + + fetch 2,mem_ui_state_map + arg UI_STATE_BT_HID_CONN,queue + qisolate1 pdata + setflag true,3,temp + + arg UI_STATE_BLE_CONNECTED,queue + qisolate1 pdata + setflag true,5,temp + + fetch 1,mem_ui_state_map + arg UI_STATE_BT_SPP_CONN,queue + qisolate1 pdata + setflag true,4,temp + + istoret 1,contwu + branch uartd_send + +// temp: bit0 3.0 inquiry;bit1 3.0 scan;bit2 ble adv; + +module_hci_read_bt_status: + arg 0,temp + fetch 1,mem_scan_mode + arg inq_scan_mode,queue + qisolate1 pdata + setflag true,0,temp + arg page_scan_mode,queue + qisolate1 pdata + setflag true,1,temp + + fetch 1,mem_le_adv_enable + arg 0,queue + qisolate1 pdata + setflag true,2,temp + rtn + + +//event opcode 0x0d +module_hci_event_store_device: + jam HCI_EVENT_NVRAM_REP,mem_module_uart_opcode + fetch 1,mem_nv_data_number + mul32 pdata,34,pdata + icopy loopcnt + call module_hci_prepare_tx + fetch 2,mem_nv_data_ptr + icopy contr + call uart_copy_tx_bytes_fast + branch uartd_send + + +//event opcode 0x0e +module_hci_event_gkey_generate: + jam HCI_EVENT_GKEY,mem_module_uart_opcode + setarg 4 + call module_hci_prepare_tx + fetch 4,mem_gkey + istore 4,contwu + branch uartd_send + + +//event opcode 0x0f +module_hci_event_invalid_packet: + jam HCI_EVENT_INVALID_PACKET,mem_module_uart_opcode + hfetch 2,core_uart_rxitems + arg 0xff,temp + call not_greater_than + copy pdata,loopcnt + call module_hci_prepare_tx + call uartd_prepare_rx + call uart_copy_rx2tx + branch uartd_send + + +//event opcode 0x10 +module_hci_event_passkey_entry_mode: + jam HCI_EVENT_GET_PASSKEY,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x11 +module_hci_event_le_tk: + jam HCI_EVENT_LE_TK,mem_module_uart_opcode + setarg 4 + call module_hci_prepare_tx + fetch 4,mem_le_tk + istore 4,contwu + branch uartd_send + + +//event opcode 0x14 +module_hci_event_le_pairing_fail: + arg FLAG_BLE_PAIRING_FAIL,rega + branch module_hci_event_pairing_completed + +module_hci_event_le_pairing_success: + arg FLAG_BLE_PAIRING_SUCCESS,rega + branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_fail: + arg FLAG_BT_PAIRING_FAIL,rega + branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_success: + arg FLAG_BT_PAIRING_SUCCESS,rega + +module_hci_event_pairing_completed: + jam 0,mem_flag_mode_ssp_pin + jam HCI_EVENT_LE_PAIRING_STATE,mem_module_uart_opcode + setarg 2 + call module_hci_prepare_tx + copy rega,pdata + istore 2,contwu + branch uartd_send + + +//event opcode 0x15 +module_hci_event_pause_enc: + arg FLAG_EVENT_PAUSE_ENC,regc + branch module_hci_event_enc + +module_hci_event_start_enc: + arg FLAG_EVENT_START_ENC,regc + +module_hci_event_enc: + jam HCI_EVENT_LE_ENCRYPTION_STATE,mem_module_uart_opcode + setarg 1 + call module_hci_prepare_tx + copy regc,pdata + istore 1,contwu + branch uartd_send + + +//event opcode 0x1d +module_hci_event_le_gkey: + jam HCI_EVENT_LE_GKEY,mem_module_uart_opcode + setarg 4 + call module_hci_prepare_tx + fetch 4,mem_gkey + istore 4,contwu + branch uartd_send + + +//****************************************************************// + //module_hci_prepare_tx + //function:write hci packet header + //input: pdata-----packet length (1byte) + //input: mem_uart_opcode------opcode (1byte) + //output:contwu --- pointer to packet payload + //use reg: contwu,pdata +//****************************************************************// +module_hci_prepare_tx: + jam 0x02,mem_module_uart_cmd + store 1,mem_module_uart_len + storet 8,mem_temp + bpatch patch1c_2,mem_patch1c + call module_set_mcu_wake_pin_high_delay + fetcht 8,mem_temp + call uartd_prepare_tx + fetch 3,mem_module_uart_cmd + istore 3,contwu + rtn + + +module_set_mcu_wake_pin_high_delay: + call module_check_mcu_wake_pin_high + rtn true +module_set_mcu_wake_pin_h_delay: + call module_set_mcu_wake_pin_high + fetch 4,mem_module_mcu_wake_delay_us + rshift2 pdata,pdata + rtn blank + branch delay + +module_set_mcu_wake_pin_high: + //call ice_break + fetcht 1,mem_module_mcu_wake_pin + branch gpio_out_active + +module_check_mcu_wake_pin_high: + fetcht 1,mem_module_mcu_wake_pin + branch gpio_check_active + +module_set_mcu_wake_pin_low: + fetcht 1,mem_module_mcu_wake_pin + branch gpio_out_inactive + + +delay: + increase -1,pdata + nop 38 + nbranch delay,blank + rtn + +/*********************hci command end*********************/ + +/*********************hci ble receive data start*********************/ + +//rega is le rx data address +//regb is le rx data length +//mem_le_att_handle is write handle +module_le_receive_data: + call module_check_ble_encrypt_state + rtn user + copy rega,pdata + store 2,mem_module_le_rx_data_address + copy regb,pdata + store 1,mem_module_le_rx_data_len + fetch 2,mem_le_att_handle + fetcht 2,mem_module_data_write_handle + isub temp,null + branch module_le_receive_data_ok,zero + fetcht 2,mem_module_data_write_handle2 + isub temp,null + nrtn zero +module_le_receive_data_ok: + store 2,mem_module_le_rx_data_handle + branch module_hci_event_receive_le_data + + +/*********************hci ble receive data end*********************/ + +module_exit_sniff: + fetch 1,mem_module_flag + rtnbit1 MOUDLE_TASK_UNSNIFF + call module_set_unsniff_task_flag + branch app_bt_sniff_exit + + +module_set_lpm_mult_2: + jam 2,mem_lpm_mult + rtn + + + +module_bb_event_timer: + branch module_read_vdd_timer + +module_read_vdd_timer: + fetch 1,mem_module_read_vdd_flag + rtn blank + fetch 1,mem_module_read_vdd_count + rtn blank + increase -1,pdata + store 1,mem_module_read_vdd_count + nrtn blank + jam FLAG_MODULE_READ_VDD_COUNT,mem_module_read_vdd_count + call adc_set_mode + call vdd_calculate_by_mode + div pdata,0x64 + call wait_div_end + quotient pdata + remainder temp + store 1,mem_module_vdd_quotient + storet 1,mem_module_vdd_remainder + rtn + + +module_control_air_flow: + call check_uart_tx_buff + branch app_l2cap_flow_control_enable,positive + branch app_l2cap_flow_control_disable + + +/**************module state *******************/ +module_set_sniff_task_flag: + arg MOUDLE_TASK_SNIFF,queue + branch module_set_state + +module_clear_sniff_task_flag: + arg MOUDLE_TASK_SNIFF,queue + branch module_clr_state + +module_set_unsniff_task_flag: + arg MOUDLE_TASK_UNSNIFF,queue + branch module_set_state + +module_clear_unsniff_task_flag: + arg MOUDLE_TASK_UNSNIFF,queue + branch module_clr_state + +module_set_le_tx_data_flag: + arg MODULE_FLAG_BLE_DATA_FINISH,queue + branch module_set_state + +module_clear_le_tx_data_flag: + arg MODULE_FLAG_BLE_DATA_FINISH,queue + branch module_clr_state + +module_clr_state: + fetch 1,mem_module_flag + qset0 pdata + store 1,mem_module_flag + rtn + +module_set_state: + fetch 1,mem_module_flag + qset1 pdata + store 1,mem_module_flag + rtn + +/**************module state end*******************/ + + + + +//define FPGA_DEBUG + + +mouse_init: + call mouse_setting_config + call spi_ncs_enable + call mouse_init_sunt + call mouse_dpi_config + call spi_ncs_disable + rtn wake + call mouse_cheak_enable_usb + call mouse_cb_fuction +// fetch 1,mem_wakup_from_power_flag +// isolate0 gpio_latch,pdata + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit1 MOUSE_ENABLE_USB + call mouse_wakeup_from_power//,true // enter + rtnmark1 mark_24g + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery + branch mouse_check_reconn_target + + +mouse_delay_4s: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_INIT_DELAY + arg 20,loopcnt +mouse_delay_20ms: + setarg 200000 + call sleep + loop delay_10ms + rtn + + +mouse_cheak_enable_usb: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_USB + branch usb_init + + +mouse_cb_fuction: + setarg mouse_le + store 2,mem_cb_le_process + setarg mouse_send_process + store 2,mem_cb_bt_process + setarg mouse_process_lpm_before + store 2,mem_cb_before_lpm + setarg mouse_priority_bb_event + store 2,mem_cb_bb_event_process + setarg mouse_idle + store 2,mem_cb_idle_process + setarg mouse_before_hibernate + store 2,mem_cb_before_hibernate + setarg le_mouse_bb_event_connect_complete + store 2,mem_cb_att_write + + call g24_head_ptr2regc + setarg mouse_g24_package_data + add regc,offset_24g_cb_data,contw + istore 2,contw + setarg mouse_g24_enter_lpm + add regc,offset_24g_cb_lpm_prepare,contw + istore 2,contw + setarg mouse_lpm_before_common + add regc,offset_24g_cb_lpm_before,contw + istore 2,contw + + setarg mouse_bb_event_timer + store 2,mem_cb_event_timer + setarg mouse_spi_write_flash_cb + store 2,mem_cb_spi_flash_write_complate + rtn +mouse_spi_write_flash_cb: +mouse_spi_init: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit0 MOUSE_ENABLE_SPI2,spid_init + branch spid_init2 + +mouse_setting_config: + rtn wake + call g24_set_device_addr + call mouse_gpio_init + call mouse_param_init + call mouse_adc_init + call le_set_config_fixed_ltk + call le_set_justwork + call le_set_fixed_ltk + call le_set_config_read_authentication + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_EEPROM,mouse_init_iic + bbit1 MOUSE_ENABLE_FLASH,mouse_load_flash_info_cheak + rtn + +mouse_init_iic: + call iic_init_390k + fetch MOUSE_FLAG_LEN,mem_mouse_flag + isolate1 MOUSE_ENABLE_2K_EEPROM,pdata + ncall clear_eeprom_size_2k,true + call mouse_load_eeprom_dpi + call mouse_init_environment + call mouse_set_24g_addr_eeprom + branch iicd_read_eep_data + +mouse_wakeup_from_power: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,mouse_wakeup_no_from_power + fetch 1,mem_wakup_from_power_flag + isolate0 gpio_latch,pdata + nrtn true +mouse_wakeup_no_from_power: + fetch 1,mem_reconn_times_init + store 1,mem_reconn_times + fetch 1,mem_config_function_enable + rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH +mouse_start_24g_mode: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_24G + bbit1 MOUSE_ENABLE_AUTO_24G_PARING,g24_auto_pair_start + branch g24_check_51cmd_start_24g +le_mouse_bb_event_connect_complete: + fetch 1,mem_le_att_handle + sub pdata,26,pdata + nrtn zero + jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp + call ui_ipc_send_cmd + arg WRITE_REQ_ENABLE_FLAG,queue + branch mouse_le_enable_connect_flag + +mouse_dpi_up: + fetch 1,mem_mouse_dpi_button_state + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_mouse_dpi_button_state + rtn +mouse_dpi_config: + fetch 1,mem_config_sensor_motion + and pdata,0x0f,pdata + store 1,mem_mouse_dpi + branch mouse_seting_dpi+2 + + +mouse_dpi_cheak: + fetcht 1,mem_dpi_button_gpio + call gpio_get_bit + nbranch mouse_dpi_up,true +mouse_dpi_down: + fetch 1,mem_mouse_dpi_button_state + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state + fetch 1,mem_mouse_dpi + increase 1,pdata + and pdata,0x03,pdata + store 1,mem_mouse_dpi + call mouse_seting_dpi + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eerpom_dpi + bbit1 MOUSE_ENABLE_FLASH,mouse_before_store_flash_cpi + rtn +mouse_before_store_flash_cpi: + arg MOUSE_SPI2_CLK_GPIO,temp + call gpio_config_output //hold high + arg MOUSE_SPI2_SDIO_GPIO,temp + call gpio_config_output //hold high + branch mouse_store_flash_device_info + +mouse_seting_dpi: + bpatch patch1c_3,mem_patch1c + call mosue_dpi_led_blink_init + fetch 1,mem_config_sensor_type + beq P3610,mouse_seting_3610_dpi + beq P3212,mouse_seting_3212_dpi + fetch 1,mem_mouse_dpi + beq MOUSE_DPI_LEVEL1,mouse_set_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_cpi3 + beq MOUSE_DPI_LEVEL4,mouse_set_cpi4 +mouse_set_cpi2: + fetch 1,mem_320x_dpi_2 + branch mouse_p3205_dpi +mouse_set_cpi1: + fetch 1,mem_320x_dpi_1 + branch mouse_p3205_dpi +mouse_set_cpi3: + fetch 1,mem_320x_dpi_3 + branch mouse_p3205_dpi +mouse_set_cpi4: + fetch 1,mem_320x_dpi_4 + branch mouse_p3205_dpi +moue_seting_cpi_count: + fetch 1,mem_config_sensor_type + rtneq P3065_XY + fetch 1 ,mem_mouse_cpi_count + increase 1,pdata + store 1,mem_mouse_cpi_count + rtn + +mouse_seting_3212_dpi: + fetch 1,mem_mouse_dpi + beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3 + beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4 +mouse_set_p3212_cpi2: + fetch 1,mem_3212_dpi_2 + branch mouse_p3212_dpi +mouse_set_p3212_cpi1: + fetch 1,mem_3212_dpi_1 + branch mouse_p3212_dpi +mouse_set_p3212_cpi3: + fetch 1,mem_3212_dpi_3 + branch mouse_p3212_dpi +mouse_set_p3212_cpi4: + fetch 1,mem_3212_dpi_4 +mouse_p3212_dpi: + store 1,mem_mouse_cpi_count + lshift8 pdata,pdata + copy pdata,rega + add pdata,MOUSE_P3212_DPI_XADDRESS,pdata + call twspi_write + copy rega,pdata + add pdata,MOUSE_P3212_DPI_YADDRESS,pdata + branch twspi_write + +mouse_seting_3610_dpi: + fetch 1,mem_mouse_dpi + beq MOUSE_DPI_LEVEL1,mouse_set_p3610_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_p3610_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_p3610_cpi3 + beq MOUSE_DPI_LEVEL4,mouse_set_p3610_cpi4 +mouse_set_p3610_cpi2: + fetch 1,mem_3610_dpi_2 + branch mouse_p3610_dpi +mouse_set_p3610_cpi1: + fetch 1,mem_3610_dpi_1 + branch mouse_p3610_dpi +mouse_set_p3610_cpi3: + fetch 1,mem_3610_dpi_3 + branch mouse_p3610_dpi +mouse_set_p3610_cpi4: + fetch 1,mem_3610_dpi_4 +mouse_p3610_dpi: + store 1,mem_mouse_cpi_count + call mouse_spi_sdio_gpio_pollup + fetch 1,mem_mouse_cpi_count +mouse_reset_p3610_dpi: + add pdata,0x80,pdata + lshift8 pdata,pdata + add pdata,MOUSE_P3610_DPI_ADDRESS,pdata + copy pdata,rega + branch mouse_set_sensor_reg + +mouse_p3205_dpi: + store 1,mem_mouse_cpi_count + call moue_seting_cpi_count + fetch 1,mem_mouse_cpi_count + setarg MOUSE_DPI_ADDRESS + call twspi_read + and pdata,0xf8,temp + fetch 1,mem_mouse_cpi_count + iadd temp,pdata + lshift8 pdata,pdata + add pdata,MOUSE_DPI_ADDRESS,pdata + branch twspi_write + + +mouse_init_environment: + call app_initflag_check + branch mouse_eeprom_load_recon_info,zero + call mouse_ble_init_address + call mouse_store_eeprom_device_info + branch app_initflag_store + + +mouse_24g_pairing_button: + fetch 2,mem_24g_pairing_timer_count + rtn blank + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_24G + rtnbit1 MOSUE_24G_PAIRING_FLAG + rtnmark1 mark_24g + call mouse_check_key_gpio + rtnne MOUSE_LMR_BUTTON + call mouse_devce_led_off + arg MOSUE_24G_PAIRING_FLAG,queue + call mouse_enable_function_flag + setarg 0 + store 2,mem_mouse_direct_timer + store 1,mem_mouse_send_blank_timer + call g24_set0_mem_check_dongle_times + + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + call mouse_stop_discovery + branch g24_start_pairing_sm1 + + +mouse_idle: + call mouse_24g_pairing_button + call ui_check_paring_button + call mouse_dpi_cheak + call mouse_usb_isr + call mouse_wheel_check + branch mouse_usb_mode +mouse_usb_isr: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_USB + call usb_isr + branch usb_offline_state + +mouse_cheak_usb: + hfetch 1,core_usb_addr + bbit0 7,mouse_usb_no_exsit + bbit1 7,mouse_usb_exsit + rtn +mouse_usb_no_exsit: + fetch 1,mem_usb_addr + rtnbit0 7 + branch soft_reset_chip +mouse_usb_exsit: + fetch 1,mem_usb_addr + rtnbit1 7 + branch mouse_stop_bluetooth_mode + +mouse_usb_mode: + call mouse_cheak_usb + hfetch 1,core_usb_addr + store 1,mem_usb_addr + rtnbit0 7 + call mouse_clkn_check + fetch 4,mem_btclk_sensor + fetcht 1,mem_wire_usb_interval + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + store 4,mem_btclk_sensor + call mouse_motion + nrtn user + jam 4,mem_usb_tx_enable + branch mouse_wired_to_usb + +mouse_clkn_check: + fetcht 4,mem_btclk_sensor + copy clkn_bt,pdata + isub temp,null + ncall mouse_clkn_timeout,positive + rtn +mouse_clkn_timeout: + setarg 0 + store 4,mem_btclk_sensor + rtn + + + +mouse_wired_to_usb: + fetch 1,mem_usb_tx_enable + rtnbit0 2 + branch mouse_data_push +mouse_data_push: + hfetch 1,core_usb_addr + rtnbit0 7 + jam USB_EP2_MS,mem_usb_ep2_data + setarg MS_REPORT_ID + store 1,mem_usb_mouse_data + fetch 7,mem_mouse_key + istore 7,contw + rtn + + +mouse_enable_clock_qdecoder: + hfetch 2,core_clkoff + set0 CLOCK_OFF_QDECODER,pdata + hstore 2,core_clkoff + rtn + +mouse_param_init: + setarg 0x8c00 //bt sdp start address + store 2,mem_ui_uuid_table + setarg 0x8e7a //ble attlist start address + store 2,mem_ui_le_uuid_table + setarg 0x2402 + store 2,mem_fcomp_mul + setarg 0x2580 + store 3,mem_class + jam 3,mem_lpm_mult_timeout + jam 8,mem_lpm_overhead + jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue + setarg 0x0200 + store 2,mem_lpm_interval + jam 0x17,mem_le_local_mtu + jam 0x17,mem_le_remote_mtu +//===========init spi param============================== + setarg 0x0a77 + store 2,mem_spi_init_clk +//===========default bt reconnect address=================== +// jam 1,mem_device_flag +// setarg 0x332211 +// store 3,mem_device1_addr +// store 3,mem_device2_addr +// store 3,mem_device3_addr +// setarg 0x665544 +// store 3,mem_device1_addr+3 +// store 3,mem_device2_addr+3 +// store 3,mem_device3_addr+3 +// setarg 0x34 +// store 1,mem_device1_type +// store 1,mem_device2_type +// store 1,mem_device3_type +//===========all 16bit uuid================================== + setsect 0,0x306 + setsect 1,0x4440 + setsect 2,0x10000 + setsect 3,0x4408 + store 9,mem_all_uuid_16bits + setsect 0,0x1224 + setsect 1,0x4000 + setsect 2,0x0 + istore 5,contw +//===========features===================================== + setsect 0,0x3ffff + setsect 1,0x2fe23 + setsect 2,0x199d9 + setsect 3,0x20d + store 8,mem_features +//====================================================== + setarg 0x012c //24g ban pairing timer init + store 2,mem_24g_pairing_timer_count + call le_modified_name + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR + call mouse_sensor_set_angle + branch mouse_select_adc + +mouse_sensor_set_angle: + fetcht 1,mem_select_sensor_angle_gpio + call gpio_config_input + fetcht 1,mem_select_sensor_angle_gpio + call gpio_get_bit + jam MOUSE_3CLK_ANGLE,mem_config_sensor_angle + rtn true + jam MOUSE_12CLK_ANGLE,mem_config_sensor_angle + rtn + +mouse_select_adc: + fetcht 1,mem_select_adc_gpio + call gpio_config_input + fetcht 1,mem_select_adc_gpio + call gpio_get_bit + jam ADC_CONFIG_VINLPM,mem_adc_config_flag + rtn true + jam ADC_CONFIG_GPIO,mem_adc_config_flag + rtn + + +mouse_adc_init: + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,mouse_adc_init_data_vinlpm + beq ADC_CONFIG_HVIN,mouse_adc_init_data_hvin + beq ADC_CONFIG_GPIO,mouse_adc_init_data_io + branch mouse_adc_init_data_vinlpm + +mouse_adc_init_data_vinlpm: + fetcht 2,mem_2v_adc_vinlpm_data + fetch 2,mem_3v_adc_vinlpm_data + isub temp,pdata + mul32 pdata,20,pdata + div pdata,100 + call wait_div_end + quotient pdata + store 2,mem_adc_reference_voltage //vinlpm :2v2 low alter + rtn +mouse_adc_init_data_hvin: + fetcht 2,mem_1v_adc_hvin_data + fetch 2,mem_5v_adc_hvin_data + isub temp,pdata + mul32 pdata,230,pdata + div pdata,400 + call wait_div_end + quotient pdata + store 2,mem_adc_reference_voltage //hvin :3v3 low alter + rtn +mouse_adc_init_data_io: + fetch 2,mem_1v_adc_io_data + store 2,mem_adc_reference_voltage //vio :1v low alter + rtn +mouse_gpio_init: + fetcht 1,mem_eeprom_wp_gpio + call gpio_config_output + call usb_offline_check_init + fetcht 1,mem_lbutton_gpio + call gpio_config_input + fetcht 1,mem_rbutton_gpio + call gpio_config_input + fetcht 1,mem_mbutton_gpio + call gpio_config_input + fetcht 1,mem_sensor_data_gpio + call gpio_config_input + + fetcht 1,mem_sensor_reset_gpio + call gpio_config_output + + fetcht 1,mem_whee_a_data_gpio + call gpio_config_input + + fetcht 1,mem_whee_b_data_gpio + call gpio_config_input + + fetcht 1,mem_whee_ta_data_gpio + call gpio_config_input + fetcht 1,mem_whee_tb_data_gpio + call gpio_config_input + + fetcht 1,mem_bk_button_gpio + call gpio_config_input + fetcht 1,mem_fw_button_gpio + call gpio_config_input + + fetcht 1,mem_config_low_voltage_alarm_gpio + call gpio_config_output + + fetcht 1,mem_config_device1_led_gpio + call gpio_config_output + + fetcht 1,mem_config_device2_led_gpio + call gpio_config_output + + fetcht 1,mem_config_device3_led_gpio + call gpio_config_output + + fetcht 1,mem_dpi_led_gpio + call gpio_config_output + + fetcht 1,mem_config_select_device_button_gpio + call gpio_config_input + + fetcht 1,mem_config_bt_button_gpio + call gpio_config_input + + fetcht 1,mem_dpi_button_gpio + branch gpio_config_input + +mouse_wheel_gpio_set_wake: + fetcht 1,mem_whee_a_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_b_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_ta_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_tb_data_gpio + branch gpio_set_wake_by_current_state + +mouse_before_hibernate_wheel_gpio_set: + fetcht 1,mem_whee_a_data_gpio + call mouse_gpio_set_pupd_by_input + fetcht 1,mem_whee_b_data_gpio + call mouse_gpio_set_pupd_by_input + fetcht 1,mem_whee_ta_data_gpio + call mouse_gpio_set_pupd_by_input + fetcht 1,mem_whee_tb_data_gpio + branch mouse_gpio_set_pupd_by_input + +mouse_gpio_set_pupd_by_input: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + and temp,0x7f,queue + hfetch 4,core_gpio_in + qisolate1 pdata + hfetch 4,core_gpio_pu0 + qsetflag true,pdata + hstore 4,core_gpio_pu0 + hfetch 4,core_gpio_pd0 + nqsetflag true,pdata + hstore 4,core_gpio_pd0 + rtn + +mouse_before_hibernate: + enable user + hfetch 4,0x8138 + setflag user,26,pdata + hstore 4,core_lpm_reg + call lpm_write_ctrl + call mouse_devce_led_off + call mouse_before_hibernate_wheel_gpio_set +// call gpio_set_before_lpm_common + branch mouse_lpm_before_common + + + +mouse_process_lpm_before: + call mouse_lpm_before_common + fetch 1,mem_lpm_current_mult + nrtn blank // 7.5ms, no gpio wakeup + branch gpio_clr_wake + +mouse_lpm_before_common: + call mouse_wheel_check + arg MOUSE_SPI1_CLK_GPIO,temp // set sclk high + fetch MOUSE_FLAG_LEN,mem_mouse_flag + isolate1 MOUSE_ENABLE_SPI2,pdata + call mouse_spi_clk_gpio,true + call gpio_config_output + call twspi_disable + + + + fetcht 1,mem_lbutton_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_rbutton_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_mbutton_gpio + call gpio_set_wake_by_current_state + + fetcht 1,mem_bk_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_fw_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_dpi_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_config_select_device_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_a_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_b_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_ta_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_tb_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_sensor_data_gpio + branch gpio_set_wake + + + +mouse_spi_clk_gpio: + arg MOUSE_SPI2_CLK_GPIO,temp + rtn + +mouse_wheel_check: + bpatch patch1c_4,mem_patch1c + call mouse_t_wheel_scan + call mouse_wheel_scan + fetch 1,mem_wheel_tb_new_pinlevel + fetcht 1,mem_wheel_tb_old_pinlevel + store 1,mem_wheel_tb_old_pinlevel + isub temp,null + nbranch app_lpm_wake_auto_lock,zero + fetch 1,mem_mwheel_b_new_pinlevel + fetcht 1,mem_mwheel_b_old_pinlevel + store 1,mem_mwheel_b_old_pinlevel + isub temp,null + nbranch app_lpm_wake_auto_lock,zero + rtn +mouse_t_wheel_scan: + fetch 1,mem_whee_ta_data_gpio + rtneq GPIO_DISABLE + arg 0,rega + fetcht 1,mem_whee_ta_data_gpio + call gpio_get_bit + setflag true,0,rega + fetcht 1,mem_whee_tb_data_gpio + call gpio_get_bit + setflag true,1,rega + copy rega,pdata + store 1,mem_wheel_tb_new_pinlevel + beq 0x01,mouse_t_wheel_scan_judge1 + beq 0x02,mouse_t_wheel_scan_judge2 + fetch 1,mem_wheel_tog + bbit1 7,mouse_t_wheel_scan_judge3 + rtn + +mouse_t_wheel_scan_judge1: + fetch 1,mem_wheel_tb_old_pinlevel + beq 0,mouse_t_wheel_scan_judge11 + beq 3,mouse_t_wheel_scan_judge12 + rtn +mouse_t_wheel_scan_judge2: + fetch 1,mem_wheel_tb_old_pinlevel + beq 0,mouse_t_wheel_scan_judge21 + beq 3,mouse_t_wheel_scan_judge22 + rtn +mouse_t_wheel_scan_judge11: + jam 0x82,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge12: + jam 0x81,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge21: + jam 0x80,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge22: + jam 0x83,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge3: + fetch 1,mem_wheel_tog + set0 7,pdata + store 1,mem_wheel_tog + beq 0,mouse_t_wheel_scan_judge30 + beq 1,mouse_t_wheel_scan_judge31 + beq 2,mouse_t_wheel_scan_judge32 + beq 3,mouse_t_wheel_scan_judge33 + rtn +mouse_t_wheel_scan_judge30: + fetch 1,mem_wheel_tb_new_pinlevel + beq 3,mouse_wheel_t_forward + rtn +mouse_t_wheel_scan_judge31: + fetch 1,mem_wheel_tb_new_pinlevel + beq 0,mouse_wheel_t_forward + rtn +mouse_t_wheel_scan_judge32: + fetch 1,mem_wheel_tb_new_pinlevel + beq 3,mouse_wheel_t_back + rtn +mouse_t_wheel_scan_judge33: + fetch 1,mem_wheel_tb_new_pinlevel + beq 0,mouse_wheel_t_back + rtn +mouse_wheel_t_forward: + fetch 1,mem_mouse_tz_data_count1 + increase 1,pdata + store 1,mem_mouse_tz_data_count1 + sub pdata,1,null + rtn positive + jam 0,mem_mouse_tz_data_count1 + fetch 1,mem_mouse_tz_data + increase 1,pdata + store 1,mem_mouse_tz_data + rtn +mouse_wheel_t_back: + fetch 1,mem_mouse_tz_data_count + increase 1,pdata + store 1,mem_mouse_tz_data_count + sub pdata,1,null + rtn positive + jam 0,mem_mouse_tz_data_count + fetch 1,mem_mouse_tz_data + increase -1,pdata + store 1,mem_mouse_tz_data + rtn + + +mouse_wheel_scan: + fetch 1,mem_whee_a_data_gpio + rtneq GPIO_DISABLE + arg 0,rega + fetcht 1,mem_whee_a_data_gpio + call gpio_get_bit + setflag true,0,rega + fetcht 1,mem_whee_b_data_gpio + call gpio_get_bit + setflag true,1,rega + copy rega,pdata + store 1,mem_mwheel_b_new_pinlevel + beq 0x01,mouse_wheel_scan_judge1 + beq 0x02,mouse_wheel_scan_judge2 + fetch 1,mem_mwheel_tog + bbit1 7,mouse_wheel_scan_judge3 + rtn + +mouse_wheel_scan_judge1: + fetch 1,mem_mwheel_b_old_pinlevel + beq 0,mouse_wheel_scan_judge11 + beq 3,mouse_wheel_scan_judge12 + rtn +mouse_wheel_scan_judge2: + fetch 1,mem_mwheel_b_old_pinlevel + beq 0,mouse_wheel_scan_judge21 + beq 3,mouse_wheel_scan_judge22 + rtn +mouse_wheel_scan_judge11: + jam 0x82,mem_mwheel_tog + rtn +mouse_wheel_scan_judge12: + jam 0x81,mem_mwheel_tog + rtn +mouse_wheel_scan_judge21: + jam 0x80,mem_mwheel_tog + rtn +mouse_wheel_scan_judge22: + jam 0x83,mem_mwheel_tog + rtn +mouse_wheel_scan_judge3: + fetch 1,mem_mwheel_tog + set0 7,pdata + store 1,mem_mwheel_tog + beq 0,mouse_wheel_scan_judge30 + beq 1,mouse_wheel_scan_judge31 + beq 2,mouse_wheel_scan_judge32 + beq 3,mouse_wheel_scan_judge33 + rtn +mouse_wheel_scan_judge30: + fetch 1,mem_mwheel_b_new_pinlevel + beq 3,mouse_wheel_forward + rtn +mouse_wheel_scan_judge31: + fetch 1,mem_mwheel_b_new_pinlevel + beq 0,mouse_wheel_forward + rtn +mouse_wheel_scan_judge32: + fetch 1,mem_mwheel_b_new_pinlevel + beq 3,mouse_wheel_back + rtn +mouse_wheel_scan_judge33: + fetch 1,mem_mwheel_b_new_pinlevel + beq 0,mouse_wheel_back + rtn +mouse_wheel_forward: + jam 0,mem_mouse_z_data_count1 + fetch 1,mem_mouse_z_data + increase 1,pdata + store 1,mem_mouse_z_data + rtn +mouse_wheel_back: + jam 0,mem_mouse_z_data_count + fetch 1,mem_mouse_z_data + increase -1,pdata + store 1,mem_mouse_z_data + rtn + + +mouse_hid_connected: + setarg HID_HANDSHAKE_TIMEOUT + store 1,mem_hid_handshake_timer_count + rtn + +mouse_send_process: + fetch 1,mem_app_handshake_flag + rtn blank + call l2cap_malloc_is_fifo_nearly_full + nrtn blank + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOSUE_24G_PAIRING_FLAG,mouse_send_empty_data + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_send_empty_data + bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data + call mouse_motion + nrtn user +mouse_send_data: + arg 9,rega + call hid_malloc_tx_buff + fetch 2,mem_hid_int_remote_cid + istore 2,contw + setarg 0x02a1 + istore 2,contw + fetch 7,mem_mouse_key + istore 7,contw + rtn + + +mouse_send_empty_data: + setarg 0 + store 7,mem_mouse_key + branch mouse_send_data + + +mouse_no_data_timer_init: + fetch 2,mem_mouse_no_data_timeout + store 2,mem_mouse_no_data_timer + rtn + + +mouse_fill_data_le: + bpatch patch1c_5,mem_patch1c + arg 7,rega //len + fetcht 2,mem_le_notify_handle + call le_att_malloc_tx_notify + fetch 7,mem_mouse_key + istore 7,contw + rtn + +mouse_motion: + bpatch patch1c_6,mem_patch1c + disable user + setarg 0 + store 6,mem_mouse_x + call mouse_cheak_sensor_data + call mouse_zwheel + call mouse_t_zwheel + call mouse_key + nrtn user + call mouse_no_data_timer_init + arg MOUSE_STATUE_UP_FLAG,queue + branch mouse_enable_function_flag + +motion_6clk_direction_dispose: + fetch 2,mem_mouse_x + sub pdata,0,pdata + store 2,mem_mouse_x + branch enable_user +motion_12clk_direction_dispose: + fetch 2,mem_mouse_y + sub pdata,0,pdata + store 2,mem_mouse_y + branch enable_user +motion_9clk_direction_dispose: + fetch 2,mem_mouse_y + sub pdata,0,pdata + store 2,mem_mouse_y + fetch 2,mem_mouse_x + sub pdata,0,pdata + store 2,mem_mouse_x + call mouse_sensor_data_swap_places + branch enable_user +motion_3clk_direction_dispose: + call mouse_sensor_data_swap_places + branch enable_user +mouse_cheak_sensor_data: + fetch 1,mem_spi_write_flash_sm + rtnne FLASH_SM_NO_BUYS + fetch 1,mem_config_sensor_type + beq P3205,mouse_p32xx_sensor_motion + beq P3065,mouse_p32xx_sensor_motion + beq KA8,mouse_p32xx_sensor_motion + beq P3204,mouse_p32xx_sensor_motion + beq P3212,mouse_p3212_sensor_motion + beq P3610,mouse_p3610_sensor_motion + beq P3065_xy,mouse_p32xx_sensor_motion + branch mouse_p32xx_sensor_motion + +mouse_clear_sensor_data: + fetch 1,mem_mouse_move_flag + call mouse_read_sensor_common,blank + jam 1,mem_mouse_move_flag + rtn + + +mouse_p3212_sensor_motion: + call mouse_clear_sensor_data + fetcht 1,mem_sensor_data_gpio + call gpio_get_bit + nrtn true + setarg PAN_REG_PID_L + call twspi_read + bne P32XX_ID1,mouse_twspi_reset + setarg PAN_REG_MOTION_STAUS + call twspi_read + rtnbit0 7 + call mouse_read_sensor_common + call mouse_read_3212sensor_xy_high + store 1,mem_mouse_xy_h + rshift4 pdata,pdata + call extsign_bit3 + store 1,mem_mouse_x+1 + fetch 1,mem_mouse_xy_h + and pdata,0x0f,pdata + call extsign_bit3 + store 1,mem_mouse_y+1 + fetch 1,mem_config_sensor_angle + beq MOUSE_6CLK_ANGLE,motion_6clk_direction_dispose + beq MOUSE_9CLK_ANGLE,motion_9clk_direction_dispose + beq MOUSE_12CLK_ANGLE,motion_12clk_direction_dispose + beq MOUSE_3CLK_ANGLE,motion_3clk_direction_dispose + rtn + +mouse_read_3212sensor_xy_high: + setarg 0x12 + branch twspi_read + +mouse_p3065_judge: + beq P3065_ID1,mouse_p32xx_sensor_motion_1 + branch mouse_twspi_reset + +mouse_p32xx_sensor_motion: + call mouse_clear_sensor_data + disable user + fetcht 1,mem_sensor_data_gpio + call gpio_get_bit + nrtn true + setarg PAN_REG_PID_L + call twspi_read + bne P32XX_ID1,mouse_p3065_judge +mouse_p32xx_sensor_motion_1: + setarg PAN_REG_MOTION_STAUS + call twspi_read + rtnbit0 7 + call mouse_read_sensor_common + fetch 1,mem_mouse_x + call extsign + store 2,mem_mouse_x + fetch 1,mem_mouse_y + call extsign + store 2,mem_mouse_y + fetch 1,mem_config_sensor_angle + beq MOUSE_6CLK_ANGLE,motion32xx_6clk_direction_selection + beq MOUSE_9CLK_ANGLE,motion32xx_9clk_direction_selection + beq MOUSE_12CLK_ANGLE,motion32xx_12clk_direction_selection + beq MOUSE_3CLK_ANGLE,motion32xx_3clk_direction_selection + rtn + +motion32xx_6clk_direction_selection: + call motion_6clk_direction_dispose + branch mouse_sensor_sdio_low +motion32xx_9clk_direction_selection: + call motion_9clk_direction_dispose + branch mouse_sensor_sdio_low +motion32xx_12clk_direction_selection: + call motion_12clk_direction_dispose + branch mouse_sensor_sdio_low +motion32xx_3clk_direction_selection: + call motion_3clk_direction_dispose + branch mouse_sensor_sdio_low + +mouse_sensor_data_swap_places: + fetch 2, mem_mouse_y + fetcht 2,mem_mouse_x + store 2,mem_mouse_x + storet 2,mem_mouse_y + rtn +//input regb output:pdata +mouse_p3610sensor_read: + call spi_ncs_enable + nop 100 + copy regb,pdata + call twspi_read + copy pdata,regb + call spi_ncs_disable + nop 100 + copy regb,pdata + rtn +mouse_p3610_sensor_motion: + disable user + fetcht 1,mem_sensor_data_gpio + call gpio_get_bit + nrtn true + arg PAN_REG_MOTION_STAUS,regb + call mouse_p3610sensor_read + rtnbit0 7 + arg PAN_REG_PID_L,regb + call mouse_p3610sensor_read + store 1,mem_sensor_id1 + bne P3610_ID1,mouse_init_3610sensor_reset + fetch 1,mem_mouse_move_flag + call mouse_read_sensor3610_data,blank + jam 1,mem_mouse_move_flag + call mouse_read_sensor3610_data + fetch 1,mem_mouse_xy_h + rshift4 pdata,pdata + call extsign_bit3 + store 1,mem_mouse_x+1 + fetch 1,mem_mouse_xy_h + and pdata,0x0f,pdata + call extsign_bit3 + store 1,mem_mouse_y+1 + fetch 1,mem_config_sensor_angle + beq 0,motion3610_6clk_direction_selection + beq 1,motion3610_9clk_direction_selection + beq 2,motion3610_12clk_direction_selection + beq 3,motion3610_3clk_direction_selection + rtn + +mouse_3610_smart_select: + fetch 1,mem_sensor_smart_flag + beq P3610_SMART_ENABLE,mouse_3610_smart_disable + beq P3610_SMART_DISABLE,mouse_3610_smart_enable + rtn + + +motion3610_6clk_direction_selection: + call motion_6clk_direction_dispose + branch mouse_3610_smart_select + +motion3610_12clk_direction_selection: + call motion_12clk_direction_dispose + branch mouse_3610_smart_select + +motion3610_9clk_direction_selection: + call motion_9clk_direction_dispose + branch mouse_3610_smart_select + +motion3610_3clk_direction_selection: + call motion_3clk_direction_dispose + branch mouse_3610_smart_select + +mouse_read_sensor3610_data: + call spi_ncs_enable + call mouse_read_sensor_common + arg 5,pdata + call twspi_read + store 1,mem_mouse_xy_h + arg 7,pdata + call twspi_read + store 1,mem_sensor_shutter_hi + arg 8,pdata + call twspi_read + store 1,mem_sensor_shutter_lo + branch spi_ncs_disable + + +mouse_3610_smart_enable: + fetch 1,mem_sensor_shutter_hi + rtnne 0 + fetch 1,mem_sensor_shutter_lo + sub pdata,45,null + rtn positive + jam P3610_SMART_ENABLE,mem_sensor_smart_flag + setarg 0xba41 + call sensor_write + setarg 0x0032 + call sensor_write + setarg 0xb541 + branch sensor_write +mouse_3610_smart_disable: + fetch 1,mem_sensor_shutter_hi + rtnne 0 + fetch 1,mem_sensor_shutter_lo + sub pdata,45,null + nrtn positive + jam P3610_SMART_DISABLE,mem_sensor_smart_flag + setarg 0xba41 + call sensor_write + setarg 0x8032 + call sensor_write + setarg 0xb541 + branch sensor_write + + + +mouse_read_sensor_common: + arg PAN_REG_DELTA_X,pdata + call twspi_read + store 2,mem_mouse_x + arg PAN_REG_DELTA_Y,pdata + call twspi_read + store 2,mem_mouse_y + rtn + +mouse_set_qdecoder_x: + arg MOUSE_DEFAULT_XA_GPIO,temp + call gpio_config_input + arg MOUSE_DEFAULT_XA_GPIO,temp + call gpio_get_bit + rtn true + hfetch 1,core_qdec_cntx + set1 4,pdata + hstore 1,core_qdec_cntx + rtn + +mouse_hardware_zwheel: + fetcht 1,mem_mouse_z_data + hfetch 1,core_qdec_cntx + iadd temp,pdata + rtn blank + store 1,mem_mouse_z + jam 0,mem_mouse_z_data + branch enable_user +mouse_hardware_zwheel_beforelpm: + fetcht 1,mem_mouse_z_data + hfetch 1,core_qdec_cntx + iadd temp,pdata + store 1,mem_mouse_z_data + rtn +mouse_zwheel: + fetch 1,mem_mouse_z_data + rtn blank + store 1,mem_mouse_z + jam 0,mem_mouse_z_data + branch enable_user + +mouse_t_zwheel: + fetch 1,mem_mouse_tz_data + rtn blank + store 1,mem_mouse_tz + jam 0,mem_mouse_tz_data + branch enable_user + +mouse_check_key_gpio: + arg 0,rega + fetcht 1,mem_lbutton_gpio + call gpio_get_bit + setflag true,0,rega + fetcht 1,mem_rbutton_gpio + call gpio_get_bit + setflag true,1,rega + fetcht 1,mem_mbutton_gpio + call gpio_get_bit + setflag true,2,rega + call mouse_check_s_key_gpio + copy rega,pdata + rtn +mouse_check_s_key_gpio: + fetch 1,mem_bk_button_gpio + rtneq GPIO_DISABLE + fetcht 1,mem_bk_button_gpio + call gpio_get_bit + setflag true,3,rega + fetcht 1,mem_fw_button_gpio + call gpio_get_bit + setflag true,4,rega + rtn + +mouse_key: + call mouse_check_key_gpio + call mouse_set_mult + call mouse_24g_key + copy rega,pdata + fetcht 1,mem_mouse_key + store 1,mem_mouse_key + ixor temp,pdata + sub pdata,0,null + rtn zero + branch enable_user + +mouse_24g_key: + rtnmark0 mark_24g + copy rega,pdata + rtn blank + store 1,mem_mouse_key + branch enable_user + +//short mult: no key +mouse_set_mult: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,mouse_set_ble_mult + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,mouse_set_bt_mult + rtn +mouse_set_ble_mult: + copy rega,pdata + nbranch le_set_config_short_mult,blank + branch le_clr_config_short_mult +mouse_set_bt_mult: + copy rega,pdata + nbranch classic_bt_set_mult_short_flag,blank + branch classic_bt_clr_mult_short_flag + + /* sdio high will cost extra 9mA */ +mouse_sensor_sdio_low: + bpatch patch1c_7,mem_patch1c + arg MOUSE_SPI1_SDIO_GPIO,temp + fetch MOUSE_FLAG_LEN,mem_mouse_flag + isolate1 MOUSE_ENABLE_SPI2,pdata + call mouse_sensor_sdio_low2,true + call gpio_get_bit + rtn true + setarg 0x0a + call twspi_read + nop 1000 + branch mouse_sensor_sdio_low +mouse_sensor_sdio_low2: + arg MOUSE_SPI2_SDIO_GPIO,temp + rtn + +mouse_spi_sdio_gpio_pollup: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_SPI2,mouse_spi2_sdio_gpio_pollup +mouse_spi1_sdio_gpio_pollup: + arg MOUSE_SPI1_SDIO_GPIO,temp + branch gpio_config_input_without_wake +mouse_spi2_sdio_gpio_pollup: + arg MOUSE_SPI2_SDIO_GPIO,temp + branch gpio_config_input_without_wake + + +mouse_init_sunt: + call mouse_spi_init + rtn wake + call mouse_spi_sdio_gpio_pollup + fetch 1,mem_config_sensor_type + beq P3610,mouse_init_3610sensor +mouse_init_sensor: + call mouse_read_sensor_id + beq P32XX_ID1,mouse_init_p32xx_id2_judge + beq P3065_ID1,mouse_p3065_init_param + call mouse_twspi_reset + nop 1000 + branch mouse_init_sensor +mouse_twspi_reset: + bpatch patch1d_0,mem_patch1d + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_SPI2,twspi_reset2 + branch twspi_reset + +mouse_init_3610sensor: + call mouse_read_sensor_id + beq P3610_ID1,mouse_init_p3610 + call mouse_init_3610sensor_reset + branch mouse_init_3610sensor + +mouse_read_sensor_id: + setarg PAN_REG_PID_H + call twspi_read + store 1,mem_sensor_id2 + setarg PAN_REG_PID_L + call twspi_read + store 1,mem_sensor_id1 + rtn +mouse_init_p32xx_id2_judge: + fetch 1,mem_sensor_id2 + beq P3205_TJ3T_ID2,mouse_3205_3t_init_param + beq P3204_TJ3L_ID2,mouse_3204_3l_init_param + beq P3212_ID2,mouse_3212_init_param + beq PKA8_ID2,mouse_ka8_init_param + rtn +mouse_ka8_init_param: + jam KA8,mem_config_sensor_type + rtn +mouse_p3065xy_init_param: + jam P3065_XY,mem_config_sensor_type + rtn +mouse_p3065_init_param: + fetch 1,mem_sensor_id2 + beq P3065_XY_ID2,mouse_p3065xy_init_param + jam P3065,mem_config_sensor_type + rtn +mouse_3212_init_param: + jam P3212,mem_config_sensor_type + call mouse_sensor_disable_wp + setarg 0x3426 + call twspi_write + setarg 0x0419 + call twspi_write +mouse_sensor_enable_wp: + setarg 0x0009 + branch twspi_write +mouse_sensor_disable_wp: + setarg 0x5a09 + branch twspi_write + +mouse_3204_3l_init_param: + jam P3204,mem_config_sensor_type + call mouse_sensor_disable_wp + setarg 0x0f0d// + call twspi_write + setarg 0xe31d// + call twspi_write + setarg 0xd27d + call twspi_write + call mouse_32xx_init_param + branch mouse_32xx_init_param_1 + +mouse_32xx_init_param: + setarg 0x351b + call twspi_write + setarg 0xb428 + call twspi_write + setarg 0x4629 + call twspi_write + setarg 0x962a + call twspi_write + setarg 0x8c2b + call twspi_write + setarg 0x6e2c + call twspi_write + setarg 0x642d + call twspi_write + setarg 0x5f38 + call twspi_write + setarg 0x0f39 + call twspi_write + setarg 0x323a + call twspi_write + setarg 0x473b + call twspi_write + setarg 0x1042 + branch twspi_write +mouse_32xx_init_param_1: + setarg 0x2e54 + call twspi_write + setarg 0xf255 + call twspi_write + setarg 0xf461 + call twspi_write + setarg 0x7063 + call twspi_write + setarg 0x5275 + call twspi_write + setarg 0x4176 + call twspi_write + setarg 0xed77 + call twspi_write + setarg 0x2378 + call twspi_write + setarg 0x4679 + call twspi_write + setarg 0xe57a + call twspi_write + setarg 0x487c + call twspi_write + setarg 0x777e + call twspi_write + setarg 0x017f + call twspi_write + setarg 0x000b + call twspi_write + setarg 0x007f + call twspi_write + branch mouse_sensor_enable_wp + + +mouse_3205_3t_init_param: + jam P3205,mem_config_sensor_type + call mouse_sensor_disable_wp + setarg 0x100d// + call twspi_write + setarg 0xed1d// + call twspi_write + setarg 0x807d + call twspi_write + call mouse_32xx_init_param + setarg 0x0943 + call twspi_write + branch mouse_32xx_init_param_1 + + +mouse_init_3610sensor_reset: + fetcht 1,mem_sensor_reset_gpio + call gpio_out_active + call delay_10ms + fetcht 1,mem_sensor_reset_gpio + call gpio_out_inactive + branch delay_10ms + +mouse_init_p3610: + jam P3610,mem_config_sensor_type + setarg 0xba41 + call sensor_write + setarg 0x0d11 + call sensor_write + setarg 0x041b + call sensor_write + setarg 0x041c + call sensor_write + setarg 0x0f1d + call sensor_write + setarg 0x0032 + call sensor_write + setarg 0xb541 + branch sensor_write + + +//input-rega +mouse_set_sensor_reg: + setarg 0xba41 + call sensor_write + nop 4000 + setarg 0xff7f + call sensor_write + copy rega,pdata + call sensor_write + setarg 0x007f + call sensor_write + setarg 0xb541 + branch sensor_write + +extsign: + rtnbit0 7 + arg 0xff00,temp + ior temp,pdata + rtn + +extsign_bit3: + rtnbit0 3 + arg 0xf0,temp + ior temp,pdata + rtn + + +mouse_le: + call le_fifo_check_nearly_full + nrtn blank + fetch 1,mem_le_connect_statue_flag + and pdata,0x03,pdata + rtnne 0x03 + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOSUE_24G_PAIRING_FLAG,mouse_le_send_empty_packet + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_le_send_empty_packet + bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet + call mouse_motion + nrtn user + branch mouse_fill_data_le + +mouse_le_send_empty_packet: + setarg 0 + store 7,mem_mouse_key + branch mouse_fill_data_le + +mouse_priority_bb_event: + copy regc,pdata + beq BT_EVT_LE_CONNECTED,mouse_le_bb_event_connected + beq BT_EVT_BB_CONNECTED,mouse_stop_discovery + beq BT_EVT_LE_DISCONNECTED,mouse_bb_disconnected + beq BT_EVT_BB_DISCONNECTED,mouse_bb_disconnected + beq BT_EVT_SETUP_COMPLETE,mouse_bt_event_setup_complete + beq BT_EVT_BUTTON_LONG_PRESSED,mouse_bb_event_discovery_btn + beq BT_EVT_HID_HANDSHAKE,mouse_bt_hid_handshake + beq BT_EVT_HID_CONNECTED,mouse_bt_hid_connected + beq BT_EVT_RECONN_FAILED,mouse_bb_event_reconn_failed + beq BT_EVT_RECONN_PAGE_TIMEOUT,mouse_bb_event_reconn_timeout + beq BT_EVT_PINCODE_REQ,mouse_bb_event_pincode + beq BT_EVT_REMOTE_UNSNIFF,app_start_auto_sniff + beq BT_EVT_LE_PAIRING_SUCCESS,mouse_le_pairing_success + beq BT_EVT_LE_START_ENC,mouse_le_ll_start_encryt + beq BT_EVT_LE_PAIRING_COMPLETE,mouse_le_pairing_complete + beq BT_EVT_VIRTUAL_CABLE_UNPLUG,mouse_irtual_cable_unplug + beq BT_EVT_24G_PAIRING_COMPLETE,mouse_24g_pairing_complete + beq BT_EVT_24G_ATTEMPT_FAIL,mouse_24g_attempt_fail + beq BT_EVT_24G_ATTEMPT_SUCCESS,mouse_24g_attempt_success + rtn + + +mouse_le_pairing_complete: + branch app_ble_store_reconn_info + +mouse_24g_attempt_fail: + jam 1,mem_mouse_24g_enter_lpm_enable + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + fetch 1,mem_device_flag + fetcht 1,mem_24g_device_number + isub temp,null + branch app_enter_hibernate,zero + rtn +mouse_24g_attempt_success: + jam 1,mem_mouse_24g_enter_lpm_enable + rtn +mouse_24g_pairing_complete: + jam 1,mem_mouse_24g_enter_lpm_enable + arg MOSUE_24G_PAIRING_FLAG,queue + call mouse_disable_function_flag + setarg 0 + store 2,mem_24g_pairing_timer_count + jam 0,mem_mouse_move_flag + + fetch 1,mem_config_sensor_type + sub pdata,P3610,null + call mouse_read_sensor3610_data,zero + ncall mouse_read_sensor_common,zero + + fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_24g_address + call mouse_set_24g_addr_eeprom //store rx dongle addr to eeprom + branch iicd_write_protect_eep_data + +mouse_set_24g_addr_eeprom: + call g24_head_ptr2regc + add regc,offset_24g_addr,rega + arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb + arg 4,temp + rtn + +mouse_store_flash_24g_address: + call g24_head_ptr2regc + add regc,offset_24g_addr,regb + ifetch 1,regb + store 1,mem_mouse_24g_addr + branch mouse_store_flash_device_info + + +mouse_le_pairing_success: + arg LL_PAIRING_SUCCESS_FLAG,queue + branch mouse_le_enable_connect_flag +mouse_le_ll_start_encryt: + jam 2,mem_le_start_encrypt_timer + arg LL_START_ENC_FLAG,queue + branch mouse_le_enable_connect_flag + + +mouse_le_enable_connect_flag: + fetch 1,mem_le_connect_statue_flag + qset1 pdata + store 1,mem_le_connect_statue_flag + rtn + +mouse_le_disable_connect_flag: + fetch 1,mem_le_connect_statue_flag + qset0 pdata + store 1,mem_le_connect_statue_flag + rtn +mouse_le_clean_connect_flag: + jam 0,mem_le_connect_statue_flag + rtn + +mouse_le_bb_event_connected: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set0 APP_DISC_BY_BUTTON ,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + setarg 0 + store 2,mem_mouse_direct_timer + call mouse_no_data_timer_init + branch mouse_stop_discovery + +mouse_bb_event_pincode: + call pincode_reinit + branch app_bt_set_pincode +mouse_bb_event_reconn_timeout: +mouse_bb_event_reconn_failed: + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset + bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_start_discovery + bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1 + branch app_bb_hibernate + + +mouse_bt_hid_connected: + branch mouse_hid_connected + +mouse_bt_event_setup_complete: + rtn + +mouse_soft_reset: + call mouse_select_device_enable + branch soft_reset_chip + +mouse_bb_disconnected: + bpatch patch1d_1,mem_patch1d + call mouse_bb_discon_clear_stack + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset + bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1 + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason + bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn + bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear + bbit1 APP_DISC_AFTER_PAIRING,mouse_event_light_state_pairing + bbit1 APP_DISC_AFTER_RECONN,mouse_event_light_state_hibernate + bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate + branch mouse_start_discovery +mouse_bb_discon_clear_stack: + setarg 0 + store 8,mem_wheel_tb_old_pinlevel + istore 4,contw //clean wheel statue + jam 0,mem_mouse_send_blank_timer + jam 0,mem_mouse_move_flag + jam APP_HANDSHAKE_NULL,mem_app_handshake_flag + jam 0,mem_ltk_exists + rtn + +mouse_event_light_state_pairing: + bbit1 APP_DISC_AFTER_HANDSHAKE,mouse_event_light_state_hibernate + bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate + branch mouse_start_discovery +mouse_event_light_state_hibernate: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery + branch app_bb_hibernate + +mouse4_0_event_bb_disconn: + call mouse_le_clean_connect_flag + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason + bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear + branch app_bb_hibernate + +mouse_bb_event_timer: + call mouse_adc_read + call mouse_24g_delay_timer + call mouse_ban_24g_pairing_timer + call mouse_dpi_led_blink_delay_timer + call mouse_statue_up_timer + //poll + call mouse_statue_cheak_timer + call mouse_select_device + call mouse_bt_discovery_cheak + call mouse_low_voltage_led_timer + call mouse_sensor_led_contrl_timer + call mouse_check_hid_handshake_timer + call mouse_check_discovery_timeout_timer + call mouse_check_direct_timeout_timer + call mouse_check_no_data_timeout_timer + call mouse_check_mouse_state_timer + branch mouse_le_enable_att_list_timer + + + +mouse_sensor_led_contrl_timer: + fetch 1,mem_mouse_sensor_timer_count + rtn blank + increase -1,pdata + store 1,mem_mouse_sensor_timer_count + nrtn blank + branch mouse_sensor_led_contrl +mouse_sensor_led_contrl: + fetch 1,mem_sensor_led_style + rtneq UI_LED_STATE_BLINK_STOP + beq UI_LED_STATE_BLINK_DARKING,mouse_sensor_led_blink_state_darking +mouse_sensor_led_blink_state_lighting: + call mouse_sensor_led_on + jam UI_LED_STATE_BLINK_DARKING,mem_sensor_led_style + jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count + rtn +mouse_sensor_led_blink_state_darking: + call mouse_sensor_led_off + jam UI_LED_STATE_BLINK_LIGHTING,mem_sensor_led_style + jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count + rtn + +mouse_sensor_led_blink_stop: +mouse_sensor_reset: + setarg 0x8006 + call twspi_write + nop 1000 + jam 0x00,mem_mouse_sensor_timer_count + jam UI_LED_STATE_BLINK_STOP,mem_sensor_led_style + branch mouse_init_p32xx_id2_judge + +mouse_p3212sensor_led_on: + setarg 0xa006 + call twspi_write + setarg 0xa005 + branch twspi_write +mouse_sensor_led_on_global: + jam 0,mem_mouse_sensor_timer_count +mouse_sensor_led_on: + fetch 1,mem_config_sensor_type + beq P3212,mouse_p3212sensor_led_on + setarg 0x0106 + call twspi_write + setarg 0xa105 + branch twspi_write + +mouse_sensor_led_off_global: + jam 0,mem_mouse_sensor_timer_count +mouse_sensor_led_off: + setarg 0x0906 + branch twspi_write +mouse_sensor_start_blink: + jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count + jam UI_LED_STATE_BLINK_START,mem_sensor_led_style + rtn + +mouse_check_hid_handshake_timer: + arg mem_hid_handshake_timer_count,regc + arg mouse_bt_hid_handshake,regb + branch timer_single_step + +mouse_check_discovery_timeout_timer: + arg mem_mouse_discovery_timer,regc + arg mouse_check_discovery_timeout,regb + branch timer_single_step_2B + +mouse_check_direct_timeout_timer: + arg mem_mouse_direct_timer,regc + arg mouse_check_direct_timeout,regb + branch timer_single_step_2B + +mouse_check_no_data_timeout_timer: + arg mem_mouse_no_data_timer,regc + arg mouse_check_no_data_timeout,regb + branch timer_single_step_2B + +mouse_check_mouse_state_timer: + arg mem_mouse_statue_led_timer,regc + arg mouse_statue_led_off,regb + branch timer_single_step + + + +mouse_le_enable_att_list_timer: + arg mem_le_start_encrypt_timer,regc + arg mouse_le_enable_att_list,regb + branch timer_single_step + +mouse_24g_delay_timer: + arg mem_24g_enter_lpm_timer,regc + arg mouse_24g_delay,regb + branch timer_single_step + +mouse_ban_24g_pairing_timer: + arg mem_24g_pairing_timer_count,regc + arg mouse_ban_24g_pairing,regb + branch timer_single_step_2B +mouse_ban_24g_pairing: +mouse_24g_delay: + rtn + + +mosue_dpi_led_blink_init: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_DPI_LED_BLINK + jam 10,mem_mouse_dpi_led_delay_count //delay 1s led blink + fetch 1,mem_dpi_led_gpio + store 1,mem_mouse_struct_led_gpio + rtn + + +mouse_dpi_led_blink_delay_timer: + arg mem_mouse_dpi_led_delay_count,regc + arg mouse_dpi_led_setting,regb + branch timer_single_step +mouse_dpi_led_setting: + fetch 1,mem_dpi_led_gpio + store 1,mem_mouse_struct_led_gpio + setarg LED_DPI_BLINK + store 2,mem_mouse_on_time + store 2,mem_mouse_off_time + arg 0,rega + fetcht 1,mem_mouse_dpi + increase 1,temp + storet 1,mem_mouse_blink_count + jam UI_LED_STATE_BLINK_START,mem_mouse_led_type + rtn + +mouse_le_enable_att_list: + fetch 1,mem_le_connect_statue_flag + rtnbit1 LL_PAIRING_SUCCESS_FLAG + jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp + call ui_ipc_send_cmd + arg WRITE_REQ_ENABLE_FLAG,queue + branch mouse_le_enable_connect_flag + + +mouse_check_discovery_timeout: + call mouse_stop_discovery + branch app_enter_hibernate + +mouse_check_direct_timeout: + call app_ble_stop_direct_adv + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + branch app_enter_hibernate + +mouse_check_no_data_timeout: + bmark1 mark_24g,check_51cmd_hibernate + branch mouse_disconnect + + + +mouse_bb_event_discovery_btn: + bpatch patch1d_2,mem_patch1d + jam 0,mem_mouse_send_blank_timer + call mouse_disconnect + call mouse_le_clean_connect_flag + branch mouse_start_discovery + + + +mouse3_0_check_reconn_target: + fetch 6,mem_hci_plap + branch app_bt_start_discovery_short,blank + call mouse_reconn_setting_led_gpio + jam 0x17,mem_connection_options //ssp + fetch 1,mem_ssp_enable + nbranch app_bt_start_reconnect,blank + jam 0x04,mem_connection_options //no ssp + branch app_bt_start_reconnect + +mouse4_0_check_reconn_target: + fetch 2,mem_mouse_direct_timeout + store 2,mem_mouse_direct_timer + call mouse_reconn_setting_led_gpio + call app_lpm_mult_disable + branch check_51cmd_adv + +mouse_reconn_setting_led_gpio: + setarg LED_RECONNECT_BLINK + store 2,mem_mouse_on_time + store 2,mem_mouse_off_time + branch mouse_setting_led_gpio_comman + +mouse_discover_setting_led_gpio: + setarg LED_DISCOVERY_BLINK + store 2,mem_mouse_on_time + store 2,mem_mouse_off_time +mouse_setting_led_gpio_comman: + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_device_led1 + beq MODE_BT_DEVICE2,mouse_device_led2 + beq MODE_BT_DEVICE3,mouse_device_led3 + rtn +mouse_device_led1: + fetch 1,mem_config_device1_led_gpio + branch mouse_led_blink +mouse_device_led2: + fetch 1,mem_config_device2_led_gpio + branch mouse_led_blink +mouse_device_led3: + fetch 1,mem_config_device3_led_gpio +mouse_led_blink: + store 1,mem_temp + call mouse_devce_led_off + fetch 1,mem_temp + store 1,mem_mouse_struct_led_gpio + arg 0,rega + jam UI_LED_STATE_BLINK_START,mem_mouse_led_type + branch ui_led_blink_start_global + +mouse_led_off: + arg 0,rega + branch ui_led_off_global +mouse_led_on: + arg 0,rega + branch ui_led_on_global + +mouse4_0_bb_event_discovery_btn: + branch mouse_le_clean_connect_flag + +mouse_bt_hid_handshake: + jam APP_HANDSHAKE_DONE,mem_app_handshake_flag + call app_lpm_mult_enable + call app_bt_store_reconn_info + setarg 0 + store 2,mem_discovery_timeout_timer_count + store 1,mem_hid_handshake_timer_count + branch app_bt_enter_sniff + +mouse_check_reconn_target: + call mouse_cheak_select_device_by_switch + fetch 1,mem_device_flag + fetcht 1,mem_24g_device_number + isub temp,null + branch mouse_connect_24g_mode,zero + fetch 1,mem_xrecord_mode + beq REC_3_MODE,mouse3_0_check_reconn_target + beq REC_4_MODE,mouse4_0_check_reconn_target + branch mouse_start_discovery +mouse_connect_24g_mode: + call mouse_start_24g_mode + rtnmark1 mark_24g + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + rtn + +mouse_start_discovery: + bpatch patch1d_3,mem_patch1d + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_ADV,mouse_start_discovery_norandom + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,mouse_start_discovery_norandom + random pdata //random ble addr + store 1,mem_le_lap+1 +mouse_start_discovery_norandom: + call app_lpm_mult_disable + fetch 2,mem_discovery_timeout + store 2,mem_mouse_discovery_timer + jam 6,mem_connection_options + setarg 0 + store 2,mem_mouse_no_data_timer + store 2,mem_mouse_direct_timer + arg MOUSE_STORE_EEPROM_FLAG,queue + call mouse_enable_function_flag + call mouse_bt_discovery_button_down_disable + fetch 1,mem_device_option + isolate1 MODE_4_MOUSE,pdata + call check_51cmd_adv,true + fetch 1,mem_device_option + isolate1 MODE_3_MOUSE,pdata + call check_51cmd_start_discovery,true + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_start_blink + branch mouse_discover_setting_led_gpio + +mouse_stop_discovery: + bpatch patch1d_4,mem_patch1d + fetch 1,mem_device_option + isolate1 MODE_4_MOUSE,pdata + call mouse_stop_le_adv,true + fetch 1,mem_device_option + isolate1 MODE_3_MOUSE,pdata + call mouse_stop_bt3_discovery,true + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_led_blink_stop + branch mouse_devce_led_off +mouse_stop_le_adv: + setarg 0 + store 2,mem_mouse_direct_timer + branch check_51cmd_stop_adv +mouse_stop_bt3_discovery: + setarg 0 + store 2,mem_mouse_discovery_timer + branch check_51cmd_stop_discovery + + + + + +mouse_store_remote_bdaddr: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_STORE_EEPROM_FLAG + arg MOUSE_STORE_EEPROM_FLAG,queue + call mouse_disable_function_flag + call mouse_check_device_addr +mouse_unplug_clean_bdaddr: + call mouse_before_store_reconn_info + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_device_info + bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eeprom_device_info + rtn +mouse_store_eeprom_device_info: + arg 88,temp + arg mem_device_flag,rega + arg MOUSE_INFO_EEPROM_OFFECT,regb + branch iicd_write_protect_eep_data + +mouse_check_device_addr: + fetch 1,mem_record_bt_mode + beq REC_4_MODE,mouse_check_le_device_addr + beq REC_3_MODE,mouse_check_bt_device_addr + rtn +mouse_check_le_device_addr: + store 1,mem_device_addr_temp + fetch 6,mem_le_plap + branch mouse_check_bt_device_addr_common +mouse_check_bt_device_addr: + store 1,mem_device_addr_temp + fetch 6,mem_plap +mouse_check_bt_device_addr_common: + store 6,mem_device_addr_temp+1 + fetch 7,mem_device_addr_temp + arg mem_device1_type,contr + arg 3,loopcnt +mouse_check_device_addr_end: + ifetcht 7,contr + isub temp,null + branch mouse_clean_addr,zero + increase 22,contr + loop mouse_check_device_addr_end + rtn +mouse_before_store_reconn_info: + arg mem_device1_type,rega + fetch 1,mem_device_flag + increase -1,pdata + mul32 pdata,29,pdata + iadd rega,rega + fetch 1,mem_record_bt_mode + istore 1,rega + beq REC_4_MODE,mouse_store_le_device + beq REC_3_MODE,mouse_store_bt_device + rtn + +mouse_store_le_device: + fetch 6,mem_le_plap + istore 6,contw + arg mem_le_ltk,contr + call memcpy16 + fetch 6,mem_le_lap + istore 6,contw + rtn +mouse_store_bt_device: + fetch 6,mem_plap + istore 6,contw + arg mem_link_key,contr + branch memcpy16 + +mouse_clean_addr: + increase -6,contr + copy contr,contw + fetcht 6,mem_device_addr_temp+1 + increase 3,temp + istoret 6,contw + rtn + + + +mouse_eeprom_load_recon_info: + arg 88,temp + arg mem_device_flag,rega + arg MOUSE_INFO_EEPROM_OFFECT,regb + call iicd_read_eep_data +mouse_select_reconn_device: + arg mem_device1_type,rega + fetch 1,mem_device_flag + fetcht 1,mem_24g_device_number + isub temp,null + rtn zero + increase -1,pdata + mul32 pdata,29,pdata + iadd rega,rega + ifetch 1,rega + store 1,mem_xrecord_mode + beq REC_3_MODE,mouse_load_bt_device + beq REC_4_MODE,mouse_load_le_device + rtn + +mouse_load_bt_device: + ifetch 6,contr +mouse_load_bt_device_end: + store 6,mem_hci_plap + arg mem_link_key,contw + call memcpy16 + branch check_link_key_load + +mouse_load_le_device: + ifetch 6,contr +mouse_load_le_device_end: + store 6,mem_hci_plap + arg mem_le_ltk,contw + call memcpy16 + ifetch 6,contr + store 6,mem_le_lap + rtn + + +mouse_select_device: + fetch 1,mem_config_function_enable + bbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON,mouse_select_device_by_button + bbit1 ENABLE_SELECT_DEVICE_BY_SWITCH,mouse_select_device_by_switch + branch mouse_select_device_by_combination_key + +mouse_select_device_by_combination_key: + call mouse_check_key_gpio + beq MOUSE_RM_BUTTON,mouse_select_device_commbination_key_down +mouse_select_device_commbination_key_up: + jam 30,mem_combination_select_device_count //combination key timer init + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue + rtn + +mouse_select_device_commbination_key_down: + call mouse_combination_select_device_timer + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue + branch mouse_select_device_enable + +mouse_combination_select_device_timer: + fetch 1,mem_combination_select_device_count + rtn blank + pincrease -1 + store 1,mem_combination_select_device_count + nrtn blank + branch mouse_ready_reconnection_by_button + +mouse_select_device_by_button: + fetch 1,mem_config_select_device_button_gpio + rtneq GPIO_DISABLE + fetcht 1,mem_config_select_device_button_gpio + call gpio_get_bit + branch mouse_select_device_button_down,true +mouse_select_device_button_up: + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit1 MOUSE_LONG_BT_BUTTON_FLAG + branch mouse_ready_reconnection_by_button + +mouse_select_device_button_down: + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue + arg MOUSE_LONG_BT_BUTTON_FLAG,queue + branch mouse_disable_function_flag + + + +mouse_select_device_by_switch: + fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_select1_device + beq MODE_24G_DEVICE,mouse_select2_device + rtn +mouse_cheak_select_device_by_switch: + fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH + fetcht 1,mem_config_select_device_button_gpio + call gpio_get_bit + branch mouse_cheak_select_24gdevice,true +mouse_select_btdevice: + jam MODE_BT_DEVICE1,mem_device_flag + rtn +mouse_cheak_select_24gdevice: + fetch 1,mem_24g_device_number + store 1,mem_device_flag + rtn +mouse_select1_device: + fetcht 1,mem_config_select_device_button_gpio + nbranch mouse_ready_reconnection_by_button,true + rtn +mouse_select2_device: + fetcht 1,mem_config_select_device_button_gpio + call gpio_get_bit + branch mouse_select_device_button_down,true + rtn + + + + +mouse_ready_reconnection_by_button: + fetcht 1,mem_device_flag + increase 1,temp + fetch 1,mem_device_number + isub temp,null + ncall mouse_select_device_count_clean,positive + storet 1,mem_device_flag + jam 0,mem_link_key_exists + call mouse_store_device_number2eeprom + call mouse_select_device_enable +// call p_select_reconn_device + branch mouse_set_reconnection + +mouse_store_device_number2eeprom: + arg 1,temp + arg mem_device_flag,rega + arg 0,regb + branch iicd_write_eep_data + +mouse_set_reconnection: + call mouse_stop_bluetooth_mode + call mouse_select_device_disable + branch mouse_soft_reset +mouse_stop_bluetooth_mode: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + branch mouse_stop_discovery + +mouse_disconnect: + bpatch patch1d_5,mem_patch1d + setarg 0 + store 2,mem_mouse_no_data_timer + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + rtn + +mouse_irtual_cable_unplug: + setarg 0x01 + store 6,mem_plap + jam REC_3_MODE,mem_record_bt_mode + branch mouse_unplug_clean_bdaddr + + +mouse_cancel_reconnect: + call mouse_bt_cannel_reconn_enable + branch check_51cmd_bb_reconn_cancel + +mouse_bt_discovery_by_button: + fetch 1,mem_config_bt_button_gpio + rtneq GPIO_DISABLE + fetcht 1,mem_config_bt_button_gpio + call gpio_get_bit + branch mouse_bt_discovery_button_down,true +mouse_bt_discovery_button_up: + fetch 1,mem_ui_button_timeout + store 1,mem_combination_ui_button_count //combination key timer init + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue + branch mouse_bt_discovery_button_down_disable +mouse_bt_discovery_button_down: + call mouse_bt_discovry_timer + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue + call check_51cmd_bb_reconn_cancel + branch mouse_bt_discovery_button_down_enable + + +mouse_bt_discovery_cheak: + fetch 1,mem_config_function_enable + bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button +mouse_bt_discovery_commbination_key: + call mouse_check_key_gpio + beq MOUSE_LMR_BUTTON,mouse_bt_discovery_commbination_key_down +mouse_bt_discovery_commbination_key_up: + fetch 1,mem_ui_button_timeout + store 1,mem_combination_ui_button_count //combination key timer init + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue + branch mouse_bt_discovery_button_down_disable + + +mouse_bt_discovery_commbination_key_down: + call mouse_bt_discovry_timer + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue + call check_51cmd_bb_reconn_cancel + branch mouse_bt_discovery_button_down_enable + +mouse_bt_discovry_timer: + arg mem_combination_ui_button_count,regc + arg mouse_long_button_bt_discovry,regb + branch timer_single_step + +mouse_long_button_bt_discovry: + arg MOUSE_LONG_BT_BUTTON_FLAG,queue + call mouse_enable_function_flag + call app_evt_button_long_pressed + branch mouse_bb_event_discovery_btn + + +mouse_cpi_enable: + arg MOUSE_CPI_FLAG,queue + branch mouse_enable_function_flag +mouse_cpi_disable: + arg MOUSE_CPI_FLAG,queue + branch mouse_disable_function_flag +mouse_select_device_enable: + arg MOUSE_SELECT_DEVICE_FLAG,queue + branch mouse_enable_function_flag +mouse_select_device_disable: + arg MOUSE_SELECT_DEVICE_FLAG,queue + branch mouse_disable_function_flag +mouse_bt_cannel_reconn_enable: + arg MOUSE_BT_CANNEL_RECONN_FLAG,queue + branch mouse_enable_function_flag +mouse_bt_cannel_reconn_disable: + arg MOUSE_BT_CANNEL_RECONN_FLAG,queue + branch mouse_disable_function_flag +mouse_bt_discovery_button_down_enable: + arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue + branch mouse_enable_function_flag +mouse_bt_discovery_button_down_disable: + arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue + branch mouse_disable_function_flag + + + +mouse_select_device_count_clean: + arg 1,temp + rtn + +mouse_enable_function_flag: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + qset1 pdata + store MOUSE_FLAG_LEN,mem_mouse_flag + rtn + +mouse_disable_function_flag: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + qset0 pdata + store MOUSE_FLAG_LEN,mem_mouse_flag + rtn + +mouse_adc_read: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_ADC + fetch 1,mem_adc_read_timer + increase 1,pdata + store 1,mem_adc_read_timer + sub pdata,10,null //1s read adc + rtn positive + jam 0,mem_adc_read_timer + call adc_set_mode + call vdd_calculate_by_mode + store 2,mem_mouse_vdd_now_vol + arg mem_mouse_vdd_calculate_set,rega + call adc_bat_percent_lowpower_out + fetch 1,mem_adc_power_flag + bbit1 1,mouse_power_down + bbit0 0,mouse_adc_no_low_voltage + branch mouse_adc_low_voltage +mouse_adc_low_voltage: + arg MOUSE_LOW_VOLTAGE_FLAG,queue + branch mouse_enable_function_flag +mouse_adc_no_low_voltage: + arg MOUSE_LOW_VOLTAGE_FLAG,queue + branch mouse_disable_function_flag + +mouse_low_voltage_led_timer: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_LOW_VOLTAGE_FLAG + fetch 1,mem_config_low_voltage_alarm_gpio + store 1,mem_mouse_struct_led_gpio + fetch 1,mem_adc_low_volatage_led_timer_count + pincrease 1 + store 1,mem_adc_low_volatage_led_timer_count + sub pdata,20,null + ncall mouse_adc_low_volatage_led_timer_count_clean,positive + beq 2,mouse_low_voltage_led_on + beq 4,mouse_low_voltage_led_off + beq 6,mouse_low_voltage_led_on + beq 8,mouse_low_voltage_led_off + rtn +mouse_adc_low_volatage_led_timer_count_clean: + jam 1,mem_adc_low_volatage_led_timer_count + branch mouse_low_voltage_led_off +mouse_low_voltage_led_on: + arg 0,rega + jam UI_LED_STATE_LIGHTING,mem_mouse_led_type + branch ui_led_on_global +mouse_low_voltage_led_off: + arg 0,rega + jam UI_LED_STATE_LIGHTING,mem_mouse_led_type + branch ui_led_off_global + +mouse_g24_package_data: + call mouse_motion + nrtn user + arg 7,rega //length + arg mem_mouse_key,regb //tx buff + rtn + +mouse_g24_enter_lpm: + fetch 1,mem_mouse_24g_enter_lpm_enable + rtn blank + //do not enter lpm when condition is unallowed + fetcht 1,mem_dpi_button_gpio + call gpio_get_bit + call mouse_24g_dpi_delay_init,true + fetch 1,mem_24g_enter_lpm_timer + nrtn blank + call mouse_check_key_gpio + nrtn blank + branch g24_lpm_long_sleep + +mouse_24g_dpi_delay_init: + fetch 1,mem_dpi_button_gpio + rtneq UI_BUTTON_GPIO_DISABLE + jam 10,mem_24g_enter_lpm_timer + rtn + + +mouse_load_flash_info_cheak: + call mouse_load_flash_flag + fetch 2,mem_store_flag + arg EEPROM_INIT_FLAG,temp + isub temp,null + branch mouse_load_flash_device_info,zero + storet 2,mem_store_flag + call mouse_ble_init_address + branch mouse_store_flash_device_info +mouse_ble_init_address: + fetch 6,mem_le_lap + store 6,mem_device1_locall_addr + add pdata,0x0100,pdata + store 6,mem_device2_locall_addr + add pdata,0x0100,pdata + store 6,mem_device3_locall_addr + rtn + + +mouse_load_flash_flag: + setarg mem_store_flag + arg mem_mouse_information_start,temp + isub temp,temp + fetch 3,mem_flash_base + iadd temp,pdata + arg 2,temp + arg mem_store_flag,rega + branch spid_read_flash + + +mouse_load_flash_device_info: + setarg mem_mouse_information_end + arg mem_mouse_information_start,temp + isub temp,temp + fetch 3,mem_flash_base + arg mem_mouse_information_start,rega + call spid_read_flash + call mouse_select_reconn_device + fetch 4,mem_mouse_24g_addr + call g24_head_ptr2regc + branch g24_store_mem_addr + +mouse_store_flash_device_info: + setarg mem_mouse_information_end + arg mem_mouse_information_start,temp + isub temp,temp + arg mem_mouse_information_start,rega + fetch 3,mem_flash_base + branch flash_write + +mouse_store_eerpom_dpi: + arg 1,temp + arg mem_mouse_dpi,rega + arg MOUSE_DPI_EEPROM_OFFECT,regb + branch iicd_write_protect_eep_data + +mouse_load_eeprom_dpi: + arg 1,temp + arg mem_mouse_dpi,rega + arg MOUSE_DPI_EEPROM_OFFECT,regb + branch iicd_read_eep_data + +mouse_statue_cheak_timer: + rtnmark1 mark_24g + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_STATUE_UP + fetch 1,mem_mouse_1step_up_count + pincrease 1 + and pdata,0x07,pdata + store 1,mem_mouse_1step_up_count + rtnne 0x07 //800ms read sensor + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,mouse_check_statue_up + bbit1 UI_STATE_BLE_CONNECTED,mouse_check_statue_up + rtn + + + +//mosue +mouse_check_statue_up: + bpatch patch1d_6,mem_patch1d + fetch 1,mem_mouse_2step_up_count + nrtn blank + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_STATUE_UP_FLAG + fetch 1,mem_sensor_squal_reg + call sensor_read + store 1,mem_sensor_iqc + sub pdata,0x10,null + branch mouse_statue_up_timer_init,positive + jam 0,mem_mouse_2step_up_count + rtn + +mouse_statue_up_timer_init: + jam 30,mem_mouse_2step_up_count + rtn +mouse_statue_up_timer: + arg mem_mouse_2step_up_count,regc + arg mouse_statue_up,regb + branch timer_single_step + +mouse_statue_up: + fetch 1,mem_sensor_squal_reg + call twspi_read + sub pdata,0x10,null + nrtn positive + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_STATUE_UP_FLAG + arg MOUSE_STATUE_UP_FLAG,queue + call mouse_disable_function_flag + jam 0,mem_lpm_mult + jam 30,mem_mouse_statue_led_timer // led on3s + call mouse_devce_led_off + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_STATUE_UP_THREE_LED,mouse_three_device_statue_up +mouse_two_device_statue_up: + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_device1_led_on //device_1 + beq MODE_BT_DEVICE2,mouse_device_blink_led_init //device_2 + rtn +mouse_three_device_statue_up: + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_device1_led_on //device_1 + beq MODE_BT_DEVICE2,mouse_device2_led_on //device_2 + beq MODE_BT_DEVICE3,mouse_device3_led_on //device_3 + rtn + +mouse_device_blink_led_init: + fetch 1,mem_config_device1_led_gpio + branch mouse_led_blink + + + +mouse_statue_led_off: + jam 0x20,mem_lpm_mult + branch mouse_devce_led_off + + + +mouse_devce1_led_off: + fetch 1,mem_config_device1_led_gpio + rtneq GPIO_DISABLE + store 1,mem_mouse_struct_led_gpio + branch mouse_led_off + +mouse_devce2_led_off: + fetch 1,mem_config_device2_led_gpio + rtneq GPIO_DISABLE + store 1,mem_mouse_struct_led_gpio + branch mouse_led_off + +mouse_devce_led_off: + call mouse_led_off + call mouse_devce1_led_off + call mouse_devce2_led_off +mouse_devce3_led_off: + fetch 1,mem_config_device3_led_gpio + rtneq GPIO_DISABLE + store 1,mem_mouse_struct_led_gpio + branch mouse_led_off + +mouse_device1_led_on: + fetch 1,mem_config_device1_led_gpio + store 1,mem_mouse_struct_led_gpio + branch mouse_led_on +mouse_device2_led_on: + fetch 1,mem_config_device2_led_gpio + store 1,mem_mouse_struct_led_gpio + branch mouse_led_on +mouse_device3_led_on: + fetch 1,mem_config_device3_led_gpio + store 1,mem_mouse_struct_led_gpio + branch mouse_led_on + + + +mouse_polling_device: + bpatch patch1d_7,mem_patch1d + fetch 1,mem_reconn_times + increase -1,pdata + store 1,mem_reconn_times + fetcht 1,mem_device_flag + increase 1,temp + fetch 1,mem_device_number + isub temp,null + ncall mouse_select_device_count_clean,positive + storet 1,mem_device_flag + jam 0,mem_link_key_exists + call mouse_store_device_number2eeprom + call mouse_before_store_reconn_info + branch mouse_check_reconn_target + +mouse_power_down: + call mouse_devce_led_off + setarg 0 + store 8,mem_gpio_wakeup_low + branch lpm_hibernate + + + + + + + + + + +remote_car_init: + rtn wake + hfetch 1,core_gpio_sel1 + and_into 0xf0,pdata + hstore 1,core_gpio_sel1 + call keyscan_key_init + setarg remote_car_le_before_hibernate + store 2,mem_cb_before_hibernate + + setarg remote_car_process_lpm_before + store 2,mem_cb_before_lpm + + setarg remote_car_scale_process_idle + store 2,mem_cb_idle_process + + setarg remote_car_scale_process_bb_event + store 2,mem_cb_bb_event_process + + setarg app_get_lpm_wake_lock + store 2,mem_cb_check_wakelock + + call g24_head_ptr2regc + setarg remote_car_g24_package_data + add regc,offset_24g_cb_data,contw + istore 2,contw + + setarg remote_car_g24_enter_lpm + add regc,offset_24g_cb_lpm_prepare,contw + istore 2,contw + + setarg remote_car_process_lpm_before + add regc,offset_24g_cb_lpm_before,contw + istore 2,contw + + setarg remote_car_event_timer + store 2,mem_cb_event_timer + + setarg remote_car_power_off_signal + store 2,mem_remote_car_power_off_cb + + setarg remote_car_soft_switch_power_on_signal + store 2,mem_remote_car_power_standby_cb + + setarg remote_car_send_key_data + store 2,mem_cb_remote_car_keyscan + + bpatch patch1e_0,mem_patch1e + call remote_car_init_environment + call queue_init + jam 2,mem_lpm_mult + fetch 1,mem_remote_car_config_soft_switch_enable + store 1,mem_remote_car_hard_soft_switch + beq HARD_SWITCH, remote_car_hard_switch_power_on_signal + fetch 1,mem_remote_car_config_soft_switch_gpio + store 1,mem_ui_button_gpio +remote_car_soft_switch_power_on_init: + call remote_car_ui_led_init + call ui_button_init + call ui_button_polling + jam POWER_STARTING,mem_remote_car_power_state + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + + + +remote_car_hard_switch_power_on_signal: + jam POWER_STANDBY,mem_remote_car_power_state +remote_car_soft_switch_power_on_signal: + call remote_car_ui_led_init +// fetch 1,mem_remote_car_led_map + arg 0,rega + call ui_led_blink_start_global +remote_car_connect_24g_mode: + branch g24_auto_pair_start + +remote_car_power_off_signal: + branch remote_car_ui_led_init + +remote_car_ui_led_init: + bpatch patch1e_1,mem_patch1e + fetch 1,mem_remote_car_config_connect_led_gpio + bne INVALID_PIN_NUM,remote_car_pairing_led_gpio_set +remote_car_ui_led_init_1: + fetcht 1, mem_remote_car_led_map + branch gpio_config_output +remote_car_pairing_led_gpio_set: + store 1,mem_remote_car_led_map + branch remote_car_ui_led_init_1 + + +remote_car_init_environment: + call g24_set_device_addr + fetch 2,mem_remote_car_no_data_timeout + store 2,mem_remote_car_no_data_timer + branch remote_car_get_adc_default_data + +remote_car_le_before_hibernate: +// call keyscan_scan_key +// fetch 2, mem_key_value_temp +// branch remote_car_in_enter_hibernate,blank +// branch app_enter_hibernate +remote_car_in_enter_hibernate: + call gpio_set_before_lpm_common + call remote_car_process_lpm_before + branch app_enter_hibernate + +remote_car_process_lpm_before: + branch keyscan_process_lpm_before + +remote_car_g24_enter_lpm: + fetch 1,mem_remote_car_24g_enter_lpm_enable + rtn blank + //do not enter lpm when condition is unallowed + branch g24_lpm_long_sleep + +remote_car_process_auto_pair_exit: + rtn + +remote_car_key_scan_process: + branch keyscan_key_process + +remote_car_scale_process_idle: + call remote_car_rocker_process + call remote_car_24g_status_process + branch remote_car_key_scan_process + +remote_car_scale_process_bb_event: + copy regc,pdata + beq BT_EVT_BUTTON_UP,app_event_button_up + beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed + beq BT_EVT_24G_PAIRING_COMPLETE,remote_car_24g_pairing_complete + beq BT_EVT_24G_ATTEMPT_SUCCESS,remote_car_24g_attempt_success + beq BT_EVT_24G_ATTEMPT_FAIL,remote_car_24g_attempt_fail + rtn + +remote_car_24g_attempt_fail: + jam 1,mem_remote_car_24g_enter_lpm_enable + rtn + +remote_car_24g_pairing_complete: + jam 1,mem_remote_car_24g_enter_lpm_enable + jam WORK_PAIRED,mem_remote_car_24g_auto_work_step + jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag + rtn + +remote_car_24g_attempt_success: + jam 1,mem_remote_car_24g_enter_lpm_enable + jam WORK_PAIRED,mem_remote_car_24g_auto_work_step + jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag + rtn + +remote_car_24g_status_process: + fetch 1,mem_remote_car_24g_auto_work_step + rtneq POWER_ON + fetch 1,mem_remote_car_24g_status + rtneq WORK_PAIRED + jam WORK_PAIRED,mem_remote_car_24g_status +remote_car_scale_process_paired: + arg 0,rega + branch ui_led_off_global +remote_car_scale_process_shutdown: + arg 0,rega + call ui_led_off_global + call remote_car_ui_led_init + branch app_enter_hibernate + +remote_car_event_timer: + call app_power_timer + branch remote_car_no_data_timer + +remote_car_no_data_timer: + fetch 1,mem_remote_car_config_timeout_shutdown_enable + rtn blank + arg mem_remote_car_no_data_timer,regc + arg remote_car_scale_process_shutdown,regb + branch timer_single_step_2B + +////////////////////////////////////rocker///////////////////////////// +remote_car_get_adc_default_data: + call remote_car_rocker_get_x + storet 2,mem_current_vdd_value_default_mid_x + call remote_car_rocker_get_y + storet 2,mem_current_vdd_value_default_mid_y + rtn +remote_car_rocker_data_get: +remote_car_rocker_get_x: + fetch 2,mem_current_vdd_value_default_mid_x + store 2,mem_current_vdd_value_default_mid_temp + call remote_car_get_adc_from_gpio6 + call remote_car_rocker_get_value + store 1,mem_rocker_status +remote_car_rocker_get_y: + fetch 2,mem_current_vdd_value_default_mid_y + store 2,mem_current_vdd_value_default_mid_temp + call remote_car_get_adc_from_gpio7 + call remote_car_rocker_get_value + store 1,mem_rocker_status+1 + rtn +remote_car_rocker_get_value: + fetch 2,mem_current_vdd_default_range + copy pdata,rega + fetch 2,mem_current_vdd_value_default_mid_temp + call remote_car_rocker_mid_value_adjust + fetch 1,mem_rocker_work_status + nbranch remote_car_rocker_translate_key,blank + nrtn positive + fetcht 2,mem_current_vdd_value_default_mid_temp + rtn +remote_car_rocker_mid_value_adjust: + isub temp,pdata + branch remote_car_rocker_mid_adjust_positive,positive + sub pdata,0,pdata //negative adjust + jam 1,mem_rocker_negative_flag + isub rega,null + rtn +remote_car_rocker_mid_adjust_positive: + jam 0,mem_rocker_negative_flag + isub rega,null + rtn +remote_car_rocker_translate_key: + nbranch remote_car_rocker_middle_key,positive + fetch 1,mem_rocker_negative_flag + nbranch remote_car_rocker_negative_key,blank +remote_car_rocker_positive_key: + setarg ROCKER_POSITIVE_KEY + rtn +remote_car_rocker_negative_key: + setarg ROCKER_NEGATIVE_KEY + rtn +remote_car_rocker_middle_key: + setarg ROCKER_MIDDLE_KEY + rtn +remote_car_get_adc_from_gpio6: + jam 0x33,mem_adc_channel + branch adc_set_mode +remote_car_get_adc_from_gpio7: + jam 0x34,mem_adc_channel + branch adc_set_mode + + +remote_car_rocker_process: + fetch 1,mem_remote_car_config_check_way + rtnne CAR_REMOTE_CHECK_ROCKER +remote_car_read_rocker_check_start: + bpatch patch1e_2,mem_patch1e + jam 1,mem_rocker_work_status + call remote_car_rocker_data_get + fetch 2,mem_rocker_status + fetcht 2,mem_rocker_last_status + isub temp,null + rtn zero + store 2,mem_rocker_last_status + call remote_car_rocker_x_to_key + branch remote_car_rocker_y_to_key + +remote_car_rocker_x_to_key: + fetch 1,mem_rocker_x_status + branch rocker_to_queue_set_0,blank + increase -1,pdata + branch remote_car_rocker_to_key +remote_car_rocker_y_to_key: + fetch 1,mem_rocker_y_status + branch rocker_to_queue_set_2,blank + increase 1,pdata +remote_car_rocker_to_key: + copy pdata,queue + arg 1,rega + branch remote_car_send_key_data + +rocker_to_queue_set_0: + arg 0,queue + arg 0,rega + branch remote_car_send_key_data +rocker_to_queue_set_2: + arg 2,queue + arg 0,rega + branch remote_car_send_key_data + +remote_car_send_key_data: + copy rega,pdata + store 1,mem_remote_key_status + fetch 1,mem_remote_car_24g_auto_work_step + beq POWER_ON,g24_auto_pair_start + fetch 2,mem_remote_car_no_data_timeout + store 2,mem_remote_car_no_data_timer + fetch 1,mem_remote_key_status + branch remote_car_key_is_release,blank +remote_car_key_is_press: + bpatch patch1e_3,mem_patch1e + arg 0,rega + call ui_led_on_global +remote_car_attack_key_press: + copy queue,pdata + beq 4,remote_car_send_attack_key4_press + beq 5,remote_car_send_attack_key5_press + beq 6,remote_car_send_fire_key6_press +// fetch 1,mem_remote_car_config_check_way +// rtneq CAR_REMOTE_CHECK_ROCKER +remote_car_motor_key_press: + call remote_car_device_layout_select + beq CONTROL_F_B_TEN,remote_car_single_motor_key_is_press + beq CONTROL_L_R_TEN,remote_car_double_motor_key_press + beq CONTROL_L_R_LR,remote_car_single_motor_key_is_press + rtn + +remote_car_single_motor_key_is_press: + copy queue,pdata + beq 0,remote_car_send_motor1_key0_press + beq 1,remote_car_send_motor1_key1_press + beq 2,remote_car_send_motor2_key2_press + beq 3,remote_car_send_motor2_key3_press + rtn + +remote_car_double_motor_key_press: + copy queue,pdata + beq 0,remote_car_send_double_motor_key0_press + beq 1,remote_car_send_double_motor_key1_press + beq 2,remote_car_send_double_motor_key2_press + beq 3,remote_car_send_double_motor_key3_press + rtn + +remote_car_key_is_release: + bpatch patch1e_4,mem_patch1e + arg 0,rega + call ui_led_off_global +remote_car_attack_key_release: + copy queue,pdata + beq 4,remote_car_send_attack_key4_rel + beq 5,remote_car_send_attack_key5_rel +// fetch 1,mem_remote_car_config_check_way +// rtneq CAR_REMOTE_CHECK_ROCKER +remote_car_motor_key_release: + call remote_car_device_layout_select + beq CONTROL_F_B_TEN,remote_car_single_motor_key_rel + beq CONTROL_L_R_TEN,remote_car_double_motor_key_rel + beq CONTROL_L_R_LR,remote_car_single_motor_key_rel + rtn + +remote_car_device_layout_select: + fetch 1,mem_remote_car_config_layout + fetcht 1,mem_remote_car_config_key_map + ior temp,pdata + rtn + +//cross key,control front-back motor layout +remote_car_send_motor1_key0_press: //front + jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload + branch remote_car_send_key +remote_car_send_motor1_key1_press: //back + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload + branch remote_car_send_key +remote_car_send_motor2_key2_press: //left + jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_motor2_key3_press: //right + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +//cross key,control left-right motor layout +remote_car_send_double_motor_key0_press: //front + jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_double_motor_key1_press: //back + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_double_motor_key2_press: //left + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_double_motor_key3_press: //right + jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +//attack motor control +remote_car_send_attack_key4_press: //attack left + jam MOTOR_POSITIVE,mem_remote_car_24g_motor3_payload + branch remote_car_send_key +remote_car_send_attack_key5_press: //attack right + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor3_payload + branch remote_car_send_key + +remote_car_send_fire_key6_press: + jam 0x01,mem_remote_car_24g_fire_send_payload + branch remote_car_send_attack + +remote_car_single_motor_key_rel: + copy queue,pdata + beq 0,remote_car_send_motor1_key0_rel + beq 1,remote_car_send_motor1_key1_rel + beq 2,remote_car_send_motor2_key2_rel + beq 3,remote_car_send_motor2_key3_rel + rtn + +remote_car_double_motor_key_rel: + copy queue,pdata + beq 0,remote_car_send_double_motor_key0_rel + beq 1,remote_car_send_double_motor_key1_rel + beq 2,remote_car_send_double_motor_key2_rel + beq 3,remote_car_send_double_motor_key3_rel + rtn + +remote_car_send_motor1_key0_rel: +remote_car_send_motor1_key1_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor1_payload + branch remote_car_send_key +remote_car_send_motor2_key2_rel: +remote_car_send_motor2_key3_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +remote_car_send_double_motor_key0_rel: +remote_car_send_double_motor_key1_rel: +remote_car_send_double_motor_key2_rel: +remote_car_send_double_motor_key3_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor1_payload + jam MOTOR_STOP,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +remote_car_send_attack_key4_rel: +remote_car_send_attack_key5_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor3_payload + branch remote_car_send_key + +remote_car_send_key: + arg mem_remote_car_24g_motor_packet,rega + branch queue_push +remote_car_send_attack: + arg mem_remote_car_24g_fire_packet,rega + branch queue_push + +remote_car_g24_package_data: + fetch 1,mem_remote_car_24g_pair_success_flag + beq WORK_PAIRED,remote_car_g24_send_empty + arg mem_remote_car_24g_tx_temp,rega + call queue_pop + nbranch remote_car_moto_data,user +remote_car_g24_package_data_continue: + arg mem_remote_car_24g_tx_temp,contr + ifetch 1,contr + copy pdata,rega + arg mem_remote_car_24g_tx_temp+1,regb + //rega: length + //regb: tx buffer + rtn + +remote_car_g24_send_empty: + jam 0,mem_remote_car_24g_pair_success_flag + enable user + arg 1,rega + arg mem_remote_car_empty_packet,regb + rtn + +remote_car_moto_data: + fetch 1,mem_remote_car_24g_tx_temp+3 //cmd + beq CAR_CMD_L_R_MOTOR_CONTROL,remote_car_moto_data_next + beq CAR_CMD_F_B_MOTOR_CONTROL,remote_car_moto_data_next + rtn +remote_car_moto_data_next: + fetch 1,mem_remote_car_24g_tx_temp+6 //data moto1 + nbranch remote_car_moto_data_enable_user,blank + fetch 1,mem_remote_car_24g_tx_temp+8 //data moto2 + nbranch remote_car_moto_data_enable_user,blank + fetch 1,mem_remote_car_24g_tx_temp+10 //data moto3 + nbranch remote_car_moto_data_enable_user,blank + rtn +remote_car_moto_data_enable_user: + enable user + branch remote_car_g24_package_data_continue + + + + + + + +shutter_init: + rtn wake + hfetch 1,core_gpio_sel1 + and_into 0xfc,pdata + hstore 1,core_gpio_sel1 + setarg shutter_le_before_hibernate + store 2,mem_cb_before_hibernate + + setarg shutter_process_lpm_before + store 2,mem_cb_before_lpm + + setarg app_enter_hibernate + store 2,mem_cb_discovry_timeout + + setarg shutter_process_idle + store 2,mem_cb_idle_process + + setarg shutter_process_bb_event + store 2,mem_cb_bb_event_process + + setarg shutter_le_scale_lpm_lock + store 2,mem_cb_check_wakelock + + setarg ble_shutter_receive_data + store 2,mem_cb_att_write + + setarg shutter_le_bb_event_timer + store 2,mem_cb_event_timer + + setarg shutter_key_change + store 2,mem_cb_shutter_keycan + + setarg shutter_soft_swtich_power_on + store 2,mem_shutter_soft_switch_poweron_callback_function + setarg shutter_soft_swtich_power_off + store 2,mem_shutter_soft_switch_poweroff_callback_function + + call le_modified_name + call shutter_load_bluetooth_config_by_user_config + call shutter_init_bluetooth_config + call shutter_init_param + call keyscan_key_init + call shutter_load_buffer_config_form_DataRom + call queue_init + call ui_led_init_global + call shutter_load_bluetooth_config + call shutter_load_bluetooth_config_by_eeprom + + bpatch patch1e_5,mem_patch1e + call classic_shutter_load_reconn_info + fetch 1, mem_shutter_hard_soft_switch_case + beq HARD_SWITCH, shutter_hart_swtich_power_on + fetch 1,mem_shutter_soft_switch_button_gpio + store 1,mem_ui_button_gpio + branch ui_soft_swtich_init + +/**************hard swtich function**************/ +shutter_hart_swtich_power_on: + jam UI_BUTTON_GPIO_DISABLE,mem_ui_button_gpio + jam SS_STATE_POWER_ON,mem_shutter_soft_switch_power_state + branch shutter_start_reconnect +/****************************/ + +/**************lpm lock callback function**************/ +shutter_le_scale_lpm_lock: + fetch 1,mem_shutter_soft_switch_power_state + beq SS_STATE_POWER_OFF,app_get_lpm_wake_lock + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + nbranch app_get_lpm_wake_lock,blank + branch app_put_lpm_wake_lock +/****************************/ + +/**************c512bt event callback function*************/ +shutter_process_bb_event: + copy regc,pdata +/**************classic shutter event*****************/ + beq BT_EVT_BB_CONNECTED,classic_shutter_process_baseband_connect + beq BT_EVT_BB_DISCONNECTED,classic_shutter_process_baseband_disconnect + beq BT_EVT_RECONN_FAILED,classic_shutter_process_reconnect_failed + beq BT_EVT_SETUP_COMPLETE,classic_shutter_process_setup_complete + beq BT_EVT_HID_CONNECTED,classic_shutter_process_hid_connect + beq BT_EVT_HID_DISCONNECTED,classic_shutter_process_hid_disconnect + beq BT_EVT_HID_HANDSHAKE,classic_shutter_process_hid_handshake + beq BT_EVT_RECONN_PAGE_TIMEOUT,classic_shutter_process_reconnect_page_timeout + beq BT_EVT_VIRTUAL_CABLE_UNPLUG,classic_shutter_process_virtual_cable_unplug + beq BT_EVT_REMOTE_UNSNIFF,classic_shutter_process_remote_unsniff + beq BT_EVT_STORE_NVRAM,classic_shutter_process_store_reconnect_information +/**************ble shutter event*****************/ + beq BT_EVT_LE_CONNECTED,ble_shutter_process_baseband_connect + beq BT_EVT_LE_DISCONNECTED,ble_shutter_process_baseband_disconnect + beq BT_EVT_LE_RECONNECT_COMPLETE,ble_shutter_process_reconnect_complete + beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,ble_shutter_process_parse_connect_parameter_update_response +/***************soft swtich event****************/ + beq BT_EVT_BUTTON_LONG_PRESSED,shutter_process_soft_swtich_button_long_press + beq BT_EVT_BUTTON_DOWN,shutter_process_soft_swtich_button_down + beq BT_EVT_BUTTON_UP,shutter_process_soft_swtich_button_up + rtn +/****************************/ + + +/******************classic shutter event**********************/ +classic_shutter_process_baseband_connect: + jam 0,mem_classic_shutter_hid_disconn_count + jam 0,mem_classic_shutter_cable_unplug_conut + rtn + + +classic_shutter_process_baseband_disconnect: + call classic_shutter_disconnect_clear_flag + branch classic_shutter_process_reconnect_failed + +classic_shutter_disconnect_clear_flag: + jam APP_HANDSHAKE_NULL,mem_app_handshake_flag + jam 0,mem_hid_handshake_timer_count + jam 0,mem_unsniff2sniff_timer_count + jam 0,mem_classic_shutter_cable_unplug_conut + jam 0,mem_classic_shutter_hid_disconn_count + branch queue_init + + +classic_shutter_process_reconnect_failed: + call app_disconn_reason_clear + branch shutter_start_bluetooth_discovery + + +classic_shutter_process_setup_complete: + call shutter_stop_bluetooth_discovery + branch app_led_stop_blink + + +classic_shutter_process_hid_connect: + setarg HID_HANDSHAKE_TIMEOUT + store 1,mem_hid_handshake_timer_count + rtn + + +classic_shutter_process_hid_disconnect: + jam 0,mem_classic_shutter_cable_unplug_conut + setarg FLAG_SHUTTER_HID_DISCONN_TIMEOUT + store 1,mem_classic_shutter_hid_disconn_count + rtn + + +classic_shutter_process_hid_handshake: + fetch 1,mem_app_handshake_flag + rtneq APP_HANDSHAKE_DONE + jam APP_HANDSHAKE_DONE,mem_app_handshake_flag + call app_lpm_mult_enable + call app_store_reconn_info + call shutter_stop_bluetooth_discovery + call app_led_off + branch app_bt_enter_sniff + + +classic_shutter_process_reconnect_page_timeout: + branch classic_shutter_process_reconnect_failed + + +classic_shutter_process_virtual_cable_unplug: + setarg FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT + store 1,mem_classic_shutter_cable_unplug_conut + rtn + + +classic_shutter_process_remote_unsniff: + branch app_start_auto_sniff + + +/***************classic shutter store reconn info***********************/ +classic_shutter_process_store_reconnect_information: + arg NVRAM_EEPROM_OFFSET,regb + fetch 1,mem_nv_data_number + mul32 pdata,34,temp + fetch 2,mem_nv_data_ptr + copy pdata,rega + branch iicd_write_eep_data + +classic_shutter_load_reconn_info: + arg NVRAM_EEPROM_OFFSET,regb + fetch 1,mem_shutter_bluetooth_type + rtnbit0 CLASSIC_SHUTTER + fetch 1,mem_nv_data_number + rtn blank + mul32 pdata,34,temp + fetch 2,mem_nv_data_ptr + copy pdata,rega + branch iicd_read_eep_data +/**************************************/ + +/******************ble shutter event**********************/ +ble_shutter_process_baseband_connect: + call shutter_stop_bluetooth_discovery + setarg 0 + store 2,mem_ble_shutter_reconn_timer + branch app_led_off + + +ble_shutter_process_baseband_disconnect: + call queue_init + jam 0,mem_ble_shutter_enable_notify + branch shutter_start_reconnect + + +ble_shutter_process_reconnect_complete: + call queue_init + jam 1,mem_ble_shutter_enable_notify + fetch 8,mem_ble_shutter_interval_min + store 8,mem_le_interval_min + call app_lpm_mult_enable + branch le_l2cap_tx_update_req + + +ble_shutter_process_parse_connect_parameter_update_response: + fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED + fetch 8,mem_ble_shutter_interval_min_new + rtn blank + store 8,mem_le_interval_min + branch le_l2cap_tx_update_req +/**************************************/ + +/******************soft swtich event**********************/ +shutter_process_soft_swtich_button_long_press: + branch ui_soft_switch_botton_long_press + +shutter_process_soft_swtich_button_down: + fetch 1,mem_shutter_hard_soft_switch_case + rtneq HARD_SWITCH + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + call shutter_store_currenct_led_state + branch app_led_on + +shutter_store_currenct_led_state: + jam 1,mem_shutter_soft_swtich_botton_down + arg 11,loopcnt + arg mem_shutter_soft_swtich_led_struct_temp,contw + arg mem_shutter_led_struct_app_led,contr + branch memcpy + +shutter_process_soft_swtich_button_up: + fetch 1,mem_shutter_hard_soft_switch_case + rtneq HARD_SWITCH + fetch 1,mem_shutter_soft_switch_power_state + beq SS_STATE_POWER_ON,shutter_load_currenct_led_state + branch ui_soft_switch_botton_up + +shutter_load_currenct_led_state: + fetch 1,mem_shutter_soft_swtich_botton_down + rtnne 1 + jam 0,mem_shutter_soft_swtich_botton_down + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,app_led_off + bbit1 UI_STATE_BLE_CONNECTED,app_led_off + arg 11,loopcnt + arg mem_shutter_soft_swtich_led_struct_temp,contr + arg mem_shutter_led_struct_app_led,contw + branch memcpy + +/**************************************/ + + +shutter_le_bb_event_timer: +/**************shutter check sleep timer**********************/ + call shutter_check_sleep_timer +/************************************/ +/**************soft reset power off timer**********************/ + call shutter_check_power_off_timer +/************************************/ +/**************classic shutter timer**********************/ + call classic_shutter_check_unplug_timer + call classic_shutter_hid_handshake_timer + call classic_shutter_hid_disconn_timer +/************************************/ +/**************ble shutter timer**********************/ + branch ble_shutter_reconn_timer +/************************************/ + +/**************shutter check sleep timer**********************/ +shutter_check_sleep_timer: + arg mem_shutter_sleep_timer,regc + arg shutter_sleep_timeout,regb + branch timer_single_step_2B +shutter_sleep_timeout: + jam SS_STATE_POWER_OFF,mem_shutter_soft_switch_power_state + call app_led_off + call shutter_disconnect_current_connection + branch shutter_wait_power_off + +/**************soft reset power off timer**********************/ +shutter_check_power_off_timer: + arg mem_shutter_power_off_timer,regc + arg shutter_check_power_off_timeout,regb + branch timer_single_step + +shutter_check_power_off_timeout: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,shutter_wait_power_off + bbit1 UI_STATE_BT_CONNECTED,shutter_wait_power_off + fetch 1,mem_shutter_led_struct_app_led_type + beq UI_LED_STATE_BLINK_START,shutter_wait_power_off + beq UI_LED_STATE_BLINK_LIGHTING,shutter_wait_power_off + beq UI_LED_STATE_BLINK_DARKING,shutter_wait_power_off + branch app_enter_hibernate +/************************************/ + +/**************classic shutter timer**********************/ +classic_shutter_check_unplug_timer: + arg mem_classic_shutter_cable_unplug_conut,regc + arg classic_shutter_unplug_timeout,regb + branch timer_single_step + +classic_shutter_unplug_timeout: + fetch 1,mem_CONTROL_tasks + set1 L2CAP_DISCONNECT_INTERRUPT, pdata + set1 L2CAP_DISCONNECT_CONTROL, pdata + store 1,mem_CONTROL_tasks + rtn + +classic_shutter_hid_handshake_timer: + arg mem_hid_handshake_timer_count,regc + arg classic_shutter_process_hid_handshake,regb + branch timer_single_step + +classic_shutter_hid_disconn_timer: + arg mem_classic_shutter_hid_disconn_count,regc + arg app_bt_disconnect,regb + branch timer_single_step + +/************************************/ + +/**************ble shutter timer**********************/ +ble_shutter_reconn_timer: + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + arg mem_ble_shutter_reconn_timer,regc + arg shutter_start_bluetooth_discovery,regb + branch timer_single_step_2B +/************************************/ + +shutter_process_idle: + call shutter_send_data_to_master + branch keyscan_key_process + + +shutter_process_lpm_before: + branch keyscan_process_lpm_before + +shutter_le_before_hibernate: + call gpio_set_before_lpm_common + branch shutter_process_lpm_before + +////////////////////////////////////////////////////////////////////////////////////////// + + +/****************shutter bluetooth control**********************/ +shutter_stop_bluetooth_discovery: + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_stop_bluetooth_discovery + bbit1 BLE_SHUTTER,ble_shutter_stop_bluetooth_discovery + rtn + +ble_shutter_stop_bluetooth_discovery: + fetch 2,mem_ble_shutter_connect_timeout + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + branch app_ble_stop_adv + +classic_shutter_stop_bluetooth_discovery: + fetch 2,mem_classic_shutter_connect_timeout + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + branch app_bt_stop_discovery + +shutter_start_bluetooth_discovery: + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_start_discovery + bbit1 BLE_SHUTTER,ble_shutter_start_discovery + rtn + +classic_shutter_start_discovery: + fetch 2,mem_classic_shutter_discovery_timeout, + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + branch app_bt_start_discovery_short + +ble_shutter_start_discovery: + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + fetch 2,mem_ble_shutter_discovery_timeout + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + fetch 2,mem_ble_shutter_discovery_adv_interval + call shutter_ble_adv_interval_set + call app_led_start_blink + fetch 4,mem_ble_shutter_discovery_blink_on_time + store 4,mem_shutter_led_struct_app_led_on_time + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_ADV + branch app_ble_start_adv + + +shutter_start_reconnect: + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_start_reconnect + bbit1 BLE_SHUTTER,ble_shutter_start_reconnect + rtn + +classic_shutter_start_reconnect: + call app_check_reconn_target + branch shutter_start_bluetooth_discovery,blank + call app_led_on + call app_bt_stop_discovery + branch app_bt_start_reconnect + +ble_shutter_start_reconnect: + fetch 2,mem_ble_shutter_reconn_timer + fetcht 2,mem_ble_shutter_reconn_timeout + storet 2,mem_ble_shutter_reconn_timer + nrtn blank + fetch 2,mem_ble_shutter_reconn_dav_interval + call shutter_ble_adv_interval_set + call app_led_start_blink + fetch 4,mem_ble_shutter_reconn_blink_on_time + store 4,mem_shutter_led_struct_app_led_on_time + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_ADV + branch app_ble_start_adv + +//pdata:adv interval value +shutter_ble_adv_interval_set: + store 2,mem_lpm_interval + increase -4,pdata + store 2,mem_le_adv_interval + rtn + + +shutter_disconnect_current_connection: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + branch shutter_stop_bluetooth_discovery +/**************************************/ + +/******************classic shutter load reconnect*********************/ +app_check_reconn_target: + fetch 1,mem_nv_data_number + copy pdata,loopcnt + fetch 2,mem_nv_data_ptr + copy pdata,rega +app_check_reconn_target_loop: + ifetch 2,rega + beq 0,found_reconn_device + increase NV_DATA_LEN,rega + loop app_check_reconn_target_loop + branch enable_blank + +found_reconn_device: + ifetch 6,contr + store 6,mem_hci_plap + increase 10,contr + arg mem_link_key,contw + call memcpy16 + call check_link_key_load + branch disable_blank + +/**************************************/ + +///////////////////////////////////////////////////////////////////////// +//output:if user is enable,mean,can send data +shutter_check_data_enable: + call disable_user + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,shutter_check_bt_data_enable + bbit1 UI_STATE_BLE_CONNECTED,shutter_check_ble_data_enable + rtn + +shutter_check_bt_data_enable: + fetch 1,mem_hid_interrupt_state + rtnne 0x3f + branch enable_user + +shutter_check_ble_data_enable: + fetch 1,mem_ble_shutter_enable_notify + rtn blank + branch enable_user +///////////////////////////////////////////////////////////////////////// + +///////////////////////////////////////////////////////////////////////// +//output:if user is enable,mean,bluetooth disconnect +shutter_check_bluetooth_conn: + call disable_user + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BT_CONNECTED + rtnbit1 UI_STATE_BLE_CONNECTED + branch enable_user +///////////////////////////////////////////////////////////////////////// + +///////////////////////////////////////////////////////////////////////// +shutter_change_bluetooth_status_bt_disconn: + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_change_bluetooth_status_bt_disconn + bbit1 BLE_SHUTTER,ble_shutter_change_bluetooth_status_bt_disconn + rtn + +classic_shutter_change_bluetooth_status_bt_disconn: + fetch 1,mem_scan_mode + rtnne 0x03 + branch shutter_start_reconnect + +ble_shutter_change_bluetooth_status_bt_disconn: + branch shutter_start_reconnect + +///////////////////////////////////////////////////////////////////////// +shutter_check_send_data: + disable user2 + fetch 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + + call shutter_check_bluetooth_conn + branch shutter_change_bluetooth_status_bt_disconn,user + + call shutter_check_data_enable + nrtn user + enable user2 + rtn + +//queue = key index +//rega =1 press, =0 release +shutter_key_change: + call shutter_check_send_data + nrtn user2 + deposit rega + branch shutter_key_release,blank +shutter_key_press: + call app_led_on + arg mem_key0_press,regc + branch push_queue_press_or_release + +shutter_key_release: + call app_led_off + arg mem_key0_release,regc + +push_queue_press_or_release: + arg MAX_QUEUE_NUM,pdata + imul32 queue,pdata + iadd regc,regc + +//input:regc the address that want push to queue buffer +push_buffer_in_queue: + ifetch 1,regc + rtn blank + call queue_push_one_byte + increase 1,regc + branch push_buffer_in_queue + + +shutter_send_data_to_master: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,pop_queue_to_ble_data + bbit1 UI_STATE_BT_CONNECTED,pop_queue_to_classic_data + rtn + +pop_queue_to_ble_data: + call le_fifo_check_nearly_full + nrtn blank + call queue_pop_one_byte + nrtn user + pincrease -1 + mul32 pdata,SHUTTER_BLE_DATA_BUFFER,pdata + arg mem_ble_data_buffer1,temp + iadd temp,contr +le_send_notify_from_list: + ifetch 1,contr //length + copy pdata,rega + ifetcht 2,contr //handle + call store_contr + call le_att_malloc_tx_notify + copy rega,loopcnt + call get_contr + branch memcpy + + +pop_queue_to_classic_data: + call l2cap_malloc_is_fifo_nearly_full + nrtn blank + call queue_pop_one_byte + nrtn user + pincrease -1 + mul32 pdata,SHUTTER_CLASSIC_DATA_BUFFER,pdata + arg mem_classic_data_buffer1,temp + iadd temp,contr + ifetch 5,contr + store 5,mem_classic_data_buffer +classic_send_hid_data: + fetch 1,mem_classic_data_buffer + copy pdata,rega + call hid_malloc_tx_buff + fetch 2,mem_hid_int_remote_cid + istore 2,contw + setarg 0xa1 + istore 1,contw + fetch 4,mem_classic_data_buffer + 1 + istore 9,contw + rtn + +///////////queue function//////////// +//input:pdata is data that want push +queue_push_one_byte: + store 1,mem_pdatatemp + arg mem_pdatatemp,rega + branch queue_push + +queue_pop_one_byte: + arg mem_pdatatemp,rega + call queue_pop + nrtn user + fetch 1,mem_pdatatemp + rtn + +///////////queue function ending//////////// +ble_shutter_receive_data: + fetch 2,mem_le_att_handle + beq GATT_KEYBOARD_WRITE_HANDLE,ble_shutter_process_reconnect_complete + rtn + +shutter_init_param: + setarg 0x02 + store 1,mem_shutter_power_off_timeout +/////////////ble connect interval////////////// + setarg 0x00200008 + store 4,mem_ble_shutter_interval_min //set min interval is 10ms,set max interval is 40ms + setarg 0x012c0005 + istore 4,contw +/////////////////////////////////////// +//////////////////MTU///////////// + jam 0x17,mem_le_local_mtu +/////////////////////////////////////// +////////////////justwork///////// + setarg 0x1b + store 2,mem_le_pairing_handle + call le_set_config_fixed_ltk + call le_set_fixed_ltk + call le_set_justwork + branch le_set_config_read_authentication +/////////////////////////////////////// + +shutter_load_buffer_config_form_DataRom: +///////load data Rom///////// + arg BLE_KEY_VALUE_LIST_SIZE,loopcnt + arg mem_ble_data_buffer1,contw + arg BLE_SHUTTER_KEY_VALUE_LIST,contr + call memcpy_fast + arg BT_KEY_VALUE_LIST_SIZE,loopcnt + arg mem_classic_data_buffer1,contw + arg CLASSIC_SHUTTER_KEY_VALUE_LIST,contr + branch memcpy_fast + + +shutter_load_ble_gatt_form_DataRom: + arg BLE_GATT_LIST_SIZE,loopcnt + arg BLE_SHUTTER_GATT_LIST,contr + branch memcpy_fast + + +shutter_load_bt_sdp_form_DataRom: + arg BT_SDP_LIST_SIZE,loopcnt + arg CLASSIC_SHUTTER_SDP_LIST,contr + branch memcpy_fast + + +///////////////////////////////gpio config//////////////////////////////////// +shutter_init_bluetooth_config: + call shutter_check_load_config_flag + nrtn user + fetch 1,mem_shutter_config_select_gpio1 + call shutter_init_bluetooth_config_gpio_input + fetch 1,mem_shutter_config_select_gpio2 + call shutter_init_bluetooth_config_gpio_input + fetch 1,mem_shutter_config_select_gpio3 + branch shutter_init_bluetooth_config_gpio_input + +shutter_init_bluetooth_config_gpio_input: + rtn blank + or pdata,0x80,temp + branch gpio_config_input_nowake + + +shutter_load_bluetooth_config: + call shutter_check_load_config_flag + nrtn user + call shutter_load_bluetooth_config_label + branch shutter_load_bluetooth_config_by_otp + +shutter_load_bluetooth_config_label: + arg 0,rega + fetch 1,mem_shutter_config_select_gpio1 + call shutter_load_bluetooth_config_read_gpio_input + nsetflag blank,0,rega + fetch 1,mem_shutter_config_select_gpio2 + call shutter_load_bluetooth_config_read_gpio_input + nsetflag blank,1,rega + fetch 1,mem_shutter_config_select_gpio3 + call shutter_load_bluetooth_config_read_gpio_input + nsetflag blank,2,rega + copy rega,pdata + store 1,mem_shutter_config_label + fetch 1,mem_shutter_config_size + imul32 rega,pdata + fetcht 2,mem_shutter_config_otp_base_address //base address + iadd temp,pdata + store 2,mem_shutter_config_otp_addr + rtn + +shutter_load_bluetooth_config_read_gpio_input: + rtn blank + or pdata,0x80,temp + call gpio_get_bit + nbranch enable_blank,true + branch disable_blank + + +shutter_check_load_config_flag: + call disable_user + fetch 1,mem_shutter_config_user_size + nrtn blank + fetch 1,mem_shutter_config_enable + rtn blank + branch enable_user + + +shutter_load_bluetooth_config_by_otp: + call otp_enable_chgpump + fetch 2,mem_shutter_config_otp_addr + arg mem_shutter_config_data_temp,rega + fetcht 1,mem_shutter_config_size + call otpd_read_data + call otp_disable_chgpump +shutter_load_bluetooth_config_store_name: + fetch 1,mem_shutter_config_data_temp + copy pdata,loopcnt + store 1,mem_le_name_len + call memcpy_fast + fetch 1,mem_shutter_config_data_temp + copy pdata,loopcnt + store 1,mem_local_name_length + call memcpy_fast + ifetch 1,contr + store 1,mem_shutter_key_num + ifetch 1,contr + store 1,mem_shutter_hard_soft_switch_case + rtn + + +shutter_load_bluetooth_config_by_eeprom: + fetch 1,mem_shutter_bluetooth_type + rtnbit0 CLASSIC_SHUTTER + arg 3,temp + fetch 2,mem_shutter_config_eeprom_offset_addr + copy pdata,regb + arg mem_shutter_config_eeprom_start_flag,rega + call iicd_read_eep_data + fetcht 2,mem_shutter_config_eeprom_start_flag + setarg SHUTTER_EEPROM_CONFIG_CRC + isub temp,null + nrtn zero + fetch 1,mem_shutter_config_user_size + rtn blank + copy pdata,temp + fetch 2,mem_shutter_config_eeprom_offset_addr + add pdata,3,regb + arg mem_shutter_config_data_temp,rega + call iicd_read_eep_data + branch shutter_store_config + +shutter_load_bluetooth_config_by_user_config: + fetch 2,mem_shutter_config_user_otp_address + rtn blank + call otp_enable_chgpump + arg 1,temp + arg mem_shutter_config_user_size,rega + call otpd_read_data + + fetch 1,mem_shutter_config_user_size + rtn blank + + fetch 2,mem_shutter_config_user_otp_address + pincrease 1 + arg mem_shutter_config_data_temp,rega + fetcht 1,mem_shutter_config_user_size + call otpd_read_data + call otp_disable_chgpump +shutter_store_config: + call shutter_load_bluetooth_config_store_name +shutter_load_bluetooth_config_custom: + ifetch 2,contr + rtn blank + copy pdata,contw + ifetcht 1,contr + copy temp,loopcnt + call memcpy + branch shutter_load_bluetooth_config_custom +/////////////////////////////////////////////////////////////////// + +//////////////////////////random mac address////////////////////////////// +shutter_random_mac_addr: + fetch 1,mem_shutter_bluetooth_type + rtnbit0 CLASSIC_SHUTTER + fetch 2,mem_classic_shutter_random_mac_offset_addr + copy pdata,regb + arg 4,temp + arg mem_shutter_random_mac_data_temp,rega + call iicd_read_eep_data + fetch 1,mem_shutter_random_mac_data_temp + bne 1,shutter_write_random_mac_addr_to_eeprom +shutter_write_random_mac_addr_to_eeprom: + setarg 1 + store 1,mem_shutter_random_mac_data_temp + force 3,loopcnt + call generate_random_loop + fetch 2,mem_classic_shutter_random_mac_offset_addr + copy pdata,regb + arg 4,temp + arg mem_shutter_random_mac_data_temp,rega + call iicd_write_eep_data +shutter_write_random_mac_addr: + fetch 3,mem_shutter_random_mac_data_temp + 1 + store 3,mem_lap + store 3,mem_le_lap + rtn + +///////////////////////////////////////////////////////////////// +shutter_soft_swtich_power_on: + branch shutter_start_reconnect + + +shutter_soft_swtich_power_off: + arg 0,rega + arg mem_shutter_power_off_led_style,regc + call ui_led_set_style_global + call shutter_disconnect_current_connection +shutter_wait_power_off: + fetch 1,mem_shutter_power_off_timeout + store 1,mem_shutter_power_off_timer + rtn + + +/*************soft swtich ui config*********************/ +ui_soft_swtich_init: + setarg SS_STATE_POWER_UP + call ui_soft_swtich_init_power_on_time + jam UI_BUTTON_STATE_UP,mem_ui_button_last_state + call ui_button_init + call ui_button_polling + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + +ui_soft_swtich_init_power_on_time: + fetcht 2,mem_power_param_ptr + istore 1,temp //init power state + ifetch 1,contw //power on time + store 1,mem_ui_button_timeout + rtn + + +ui_soft_switch_botton_up: + fetch 2,mem_power_param_ptr + ifetch 1,pdata + rtnne SS_STATE_POWER_UP + branch app_enter_hibernate + + +ui_soft_switch_botton_long_press: + fetcht 2,mem_power_param_ptr + ifetch 1,temp + beq SS_STATE_POWER_ON,ui_soft_switch_power_off +ui_soft_switch_power_on: + setarg SS_STATE_POWER_ON + fetcht 2,mem_power_param_ptr + istore 1,temp //init power state + add temp,SS_POWER_OFF_TIME,contr + ifetch 1,contr + istore 1,mem_ui_button_timeout + ifetch 2,contr + branch callback_func + +ui_soft_switch_power_off: + setarg SS_STATE_POWER_OFF + call ui_soft_swtich_init_power_on_time + add temp,SS_POWER_OFF_CB,contr + ifetch 2,contr + branch app_enter_hibernate,blank //no call back function , just enter hibernate + branch callback_func + +/*************soft swtich ui config ending*********************/ + + +/*************unkown function*********************/ +shutter_byteswap: + store 6,mem_tmp_buffer + fetch 1,mem_tmp_buffer + store 1,mem_tmp_buffer+11 + ifetch 1,contr + store 1,mem_tmp_buffer+10 + ifetch 1,contr + store 1,mem_tmp_buffer+9 + ifetch 1,contr + store 1,mem_tmp_buffer+8 + ifetch 1,contr + store 1,mem_tmp_buffer+7 + ifetch 1,contr + store 1,mem_tmp_buffer+6 + fetch 6,mem_tmp_buffer+6 + rtn + +shutter_random_addr_by_otp: + call load_adc_init + fetch 1,mem_1v_adc_io_data + store 1,mem_le_lap + fetch 1,mem_5v_adc_hvin_data + istore 1,contw + fetch 1,mem_3v_adc_vinlpm_data + istore 1,contw + fetch 3,mem_le_lap + store 3,mem_lap + rtn + + + +//iic read function +//function name:sim_iic_read_eep_data +//input: +//temp:the length that simulation iic want to read eeprom data +//rega:the memmory point that simulation iic read data store +//regb:the eeprom address offset +//mark_eeprom_size:select 02 or other +//output:nc +sim_iic_read_eep_data: + fetch 2,mem_eeprom_base + iadd regb,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + copy temp,regb + + call sim_iic_start + setarg 0xa0 + call sim_iic_send_byte + fetch 1,mem_addr_mi + call sim_iic_send_byte + bmark1 mark_eeprom_size,sim_iic_read_eep_data_2k + fetch 1,mem_addr_mi + 1 + call sim_iic_send_byte +sim_iic_read_eep_data_2k: + call sim_iic_stop + + call sim_iic_start + setarg 0xa1 + call sim_iic_send_byte + +sim_iic_read_eep_data_loop: + call sim_iic_read_byte + istore 1,rega + increase 1,rega + increase -1,regb + nbranch sim_iic_read_eep_data_loop,zero + branch sim_iic_stop + + +//iic write data function +//function name:sim_iic_write_eep_data +//input: +//temp:the length that simulation iic want to write eeprom data +//rega:the memmory point that simulation iic write data read +//regb:the eeprom address +//mark_eeprom_size:select 02 or other +//output:nc +sim_iic_write_eep_data: + byteswap regb,pdata + store 2,mem_addr_mi + copy temp,regb + + call sim_iic_start + setarg 0xa0 + call sim_iic_send_byte + + fetch 1,mem_addr_mi + call sim_iic_send_byte + bmark1 mark_eeprom_size,sim_iic_write_eep_data_loop + fetch 1,mem_addr_mi + 1 + call sim_iic_send_byte +sim_iic_write_eep_data_loop: + ifetch 1,rega + call sim_iic_send_byte + increase 1,rega + increase -1,regb + nbranch sim_iic_write_eep_data_loop,zero + branch sim_iic_stop +// bmark1 mark_eeprom_size + +//use reg:pdata,contr,contw,loopcnt +sim_iic_wait_ack: + arg 10,loopcnt + call sim_iic_release_sda + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us +sim_iic_wait_ack_loop: + call sim_iic_read_sda_level + branch sim_iic_scl_output_low,blank //scl = 0 + loop sim_iic_wait_ack_loop + branch sim_iic_scl_output_low //scl = 0 + + +//use reg:pdata,contr,contw,rega,queue +sim_iic_ack_slave: + call sim_iic_scl_output_low //scl = 0 + call sim_iic_sda_output_low //sda = 0 + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + branch sim_iic_scl_output_low //scl = 0 + + +//output:pdata receive byte data +//use reg:pdata,contr,contw,loopcnt,regc,rega +sim_iic_read_byte: + arg 8,loopcnt + arg 0,regc + call sim_iic_release_sda +sim_iic_read_byte_loop: + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + lshift regc,regc + call sim_iic_read_sda_level + iadd regc,regc + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_low //scl = 0 + loop sim_iic_read_byte_loop + call sim_iic_ack_slave + copy regc,pdata + rtn + +//input:pdata send byte data +//use reg:pdata,contr,contw,loopcnt,regc,rega +sim_iic_send_byte: + arg 8,loopcnt + copy pdata,regc + call sim_iic_scl_output_low //scl = 0 +sim_iic_send_byte_loop: + isolate1 7,regc + call sim_iic_sda_output_high,true //sda = 1 + ncall sim_iic_sda_output_low,true //sda = 0 + lshift regc,regc + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_low //scl = 0 + call sim_iic_delay //delay 2.5us + loop sim_iic_send_byte_loop + branch sim_iic_wait_ack + + +//use reg:pdata,contr,contw,rega +sim_iic_start: + call sim_iic_sda_output_high //sda = 1 + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + call sim_iic_sda_output_low //sda = 0 + call sim_iic_delay //delay 2.5us + branch sim_iic_scl_output_low //scl = 0 + + +//use reg:pdata,contr,contw,rega +sim_iic_stop: + call sim_iic_sda_output_low //sda = 0 + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + call sim_iic_sda_output_high //sda = 1 + branch sim_iic_delay //delay 2.5us + + +//scl = 1 +sim_iic_scl_output_high: + enable user + fetch 1,SIM_IIC_SCL_GPIO_NUM + branch sim_iic_config_gpio + +//scl = 0 +sim_iic_scl_output_low: + disable user + fetch 1,SIM_IIC_SCL_GPIO_NUM + branch sim_iic_config_gpio + +//sda = 1 +sim_iic_sda_output_high: + enable user + fetch 1,SIM_IIC_SDA_GPIO_NUM + branch sim_iic_config_gpio + +//sda = 0 +sim_iic_sda_output_low: + disable user + fetch 1,SIM_IIC_SDA_GPIO_NUM + branch sim_iic_config_gpio + +//input:pdata the gpio number +//input:user flag, if enable user,config gpio output high level; if disable user, config gpio output low level +//use reg:pdata,contr,contw,queue,rega +sim_iic_config_gpio: + and pdata,0x07,queue + rshift3 pdata,pdata + arg core_gpio_oe0,temp + iadd temp,temp + ifetch 1,temp + qset1 pdata + istore 1,temp + increase 4,temp + ifetch 1,temp + qsetflag user,pdata + istore 1,temp + rtn + + +sim_iic_release_sda: + fetch 1,SIM_IIC_SDA_GPIO_NUM + and pdata,0x07,queue + rshift3 pdata,pdata + arg core_gpio_oe0,temp + iadd temp,temp + ifetch 1,temp + qset0 pdata + istore 1,temp + rtn + +//get sda level +//output:if sda high level ,pdata is 1;if sda low level ,pdata is 0 +//use reg:pdata,contr,contw,queue,rega,temp +sim_iic_read_sda_level: + nop 4 + fetch 1,SIM_IIC_SDA_GPIO_NUM + and pdata,0x07,queue + rshift3 pdata,pdata + arg core_gpio_in,temp + iadd temp,temp + setarg 0 + ifetcht 1,temp + qisolate1 temp + setflag true,0,pdata + rtn + +//delay 2.5us +sim_iic_delay: +// nop 1 + rtn + +/**********************************/ + + + +usb_isr: + bpatch patch1e_6,mem_patch1e + hfetch 1,core_usb_status + isolate1 7,pdata + call usb_init,true + call usb_nak_state_judge + hfetch 1,core_usb_status + store 1,mem_usb_status + hfetch 1,core_usb_fifo_empty + store 1,mem_usb_fifo_empty + hstore 1,core_usb_fifo_empty + pinvert + fetcht 1,mem_usb_tx_wait + iand temp,pdata + store 1,mem_usb_tx_wait + hjam 0xe0,core_usb_status + fetch 1,mem_usb_fifo_empty + compare 0x1,pdata,0x1 + call usb0_fifo_empty,true + fetch 1,mem_usb_status + compare 0x1,pdata,0x1 + call usb_status1,true + call usb_tx + branch usb_nak_state + +usb_init: + bpatch patch1e_7,mem_patch1e + call usb_init_param + hjam 0x00,core_usb_config + nop 10000 + hjam 0xc0,core_usb_trig + hfetch 2,core_clkoff + set0 CLOCK_OFF_USB,pdata + hstore 2,core_clkoff + hjam 0x3c,core_usb_config + hjam 0xff,core_usb_status + hjam 0xff,core_usb_fifo_empty + hjam 0,core_usb_addr + jam DEV_DEFAULT,mem_usb0_state + setarg mem_usb_clear_mem_end + arg mem_usb_clear_mem_start,contw + isub contw,loopcnt + branch clear_mem + +usb_offline_check_init: + fetcht 1,mem_usb_offline_check_gpio + branch gpio_config_input +usb_offline_state: + fetch 1,mem_usb_device_enumeration_endflag + rtn blank + fetcht 1,mem_usb_offline_check_gpio + call gpio_get_bit + branch usb_init,true + rtn + + +usb_nak_state: + arg TIMER_NAK,queue + call timer_check + nrtn blank + fetch 1 ,mem_usb_wakestate_onetime_flag + nrtn blank + fetch 1,mem_usb_device_enumeration_endflag + ncall usb_mac_wakeup_judge,blank + rtn + +usb_mem_devicedesc_init: + arg mem_devicedesc,contw + setsect 0,0x11212 + setsect 1,0x8000 + setsect 2,0x0 + setsect 3,0x10000 + istore 9,contw + setsect 0,0x22412 + setsect 1,0x8604 + setsect 2,0x1000 + setsect 3,0x8 + istore 9,contw + setsect 0,0x1 + istore 1,contw + rtn + +usb_init_param: + jam 2,mem_usb0_state + setarg 0x0 + store 1,mem_remain + store 2,mem_usb_zero_packet + pincrease 1 + store 2,mem_usb_ones_packet + pincrease 1 + store 2,mem_usb_two_packet + setarg HID_KBDATA_ADDR + store 2,mem_hidreportdesc_kb + setarg HID_MSDATA_ADDR + store 2,mem_hidreportdesc_m + arg mem_confdesc,contw + arg HID_CONFDATA_ADDR,contr + call memcpy64 + fetch 1,mem_usb_tx_interval + ncall usb_tx_interval_config,blank + branch usb_mem_devicedesc_init + +usb_tx_interval_config: + store 1,mem_confdesc+34 + store 1,mem_confdesc+59 + rtn +usb_nak_state_judge: + hfetch 1,core_usb_status + bbit1 USB_STATUS_NAK,usb_nak_state_timer_init + rtn + +usb_nak_state_timer_init: + call usb0_attached_state_judge + call timer_reinit + setarg TIMER_NAK_DELAY + arg TIMER_NAK,queue + branch timer_init + +usb0_attached_state_judge: + fetch 1,mem_usb_state + bne USB_CONNECTED,usb_clear_halt_dispose + jam 0,mem_usb_wakestate_onetime_flag + jam 0,mem_usb_mac_wakeup_trig + rtn +usb_clear_halt_dispose: + fetch 1,mem_usb_clear_halt + rtn blank + jam 0,mem_usb_clear_halt + jam USB_CONNECTED,mem_usb_state + jam 1,mem_usb_device_enumeration_endflag + rtn + +usb0_fifo_empty: + hjam 0x1,core_usb_fifo_empty + branch usb0_tx + +usb_rx_no_data: + fetch 1,mem_usb_status + bbit1 USB_STATUS_SETUP,usb_class_type + rtn + +usb_rx_read: + hfetch 1,core_usb_ep + istore 1,contw + loop usb_rx_read + rtn + +usb_status1: + bpatch patch1f_0,mem_patch1f + hjam 0x11,core_usb_status + hfetch 1,core_usb_ep_len + store 1,mem_usb_read_len + copy pdata,loopcnt + branch usb_rx_no_data,blank + arg mem_usb_setup,contw + call usb_rx_read + fetch 1,mem_usb_read_len + sub pdata,7,null + rtn positive +usb_class_type: + fetch 1,mem_usb_setup_bmRequestType + and_into 0x80,pdata + beq IN_DEVICE,usb_in_device + beq OUT_DEVICE,usb_out_device + branch assert + +usb_in_device: + fetch 1,mem_usb_setup_bmRequestType + rshift4 pdata,pdata + rshift pdata,pdata + and_into 0x03,pdata + beq STANDARD_REQ,usb_in_standard_req + beq CLASS_REQ,usb_in_class_req + beq MANUFACTURER_REQ,usb_in_manufacturer_req + branch assert + +usb_out_device: + fetch 1,mem_usb_setup_bmRequestType + rshift4 pdata,pdata + rshift pdata,pdata + and_into 0x03,pdata + beq STANDARD_REQ,usb_out_standard_req + beq CLASS_REQ,usb_out_class_req + beq MANUFACTURER_REQ,usb_out_manufacturer_req + branch assert + +usb_in_standard_req: + fetch 1,mem_usb_setup_bRequest + beq GET_CONFIGURATION,usb0_request_get_configuration + beq GET_DESCRIPTOR,usb0_request_get_descriptor + beq GET_INTERFACE,usb0_request_get_interface + beq GET_STATUS,usb0_request_get_status + branch usb0_force_stall + +usb_in_class_req: + fetch 1,mem_usb_setup_bRequest + beq GET_IDLE,usb_get_idle + beq GET_REPORT,usb_get_report + beq GET_PROTOCOL,usb_get_protocol_req + branch usb0_force_stall + +usb_in_manufacturer_req: + branch usb0_force_stall + +usb_out_standard_req: + fetch 1,mem_usb_setup_bRequest + beq CLEAR_FEATURE,usb0_request_clear_feature + beq SET_FEATURE,usb0_request_set_feature + beq SET_ADDRESS,usb0_request_set_address + beq SET_CONFIGURATION,usb0_request_set_configuration + beq SET_INTERFACE,usb0_request_set_interface + beq SET_DESCRIPTOR,usb0_force_stall + branch usb0_force_stall + +usb_out_class_req: + fetch 1,mem_usb_setup_bRequest + beq SET_IDLE,usb_set_idle + beq SET_REPORT,usb_set_report + beq SET_PROTOCOL,usb_set_protocol_req + branch usb0_force_stall + +usb_out_manufacturer_req: + branch usb0_force_stall + +usb0_force_stall: + hfetch 1,core_usb_stall + set1 0,pdata + hstore 1,core_usb_stall + branch usb0_reply_zerolen + +usb0_reply_zerolen: + hjam 0x40,core_usb_clear + rtn + +usb0_request_get_configuration: + fetch 1,mem_usb_setup_bmRequestType + bne IN_DEVICE,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 1,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue+1 + bne 0,usb0_force_stall + fetch 1,mem_usb0_state + beq DEV_CONFIGURED,usb0_request_get_cfg_dev_cfg + beq DEV_ADDRESS,usb0_request_get_cfg_dev_addr + branch usb0_force_stall +//Return current config : 1 +usb0_request_get_cfg_dev_cfg: + arg 1,regb + branch usb_send_ones_packet +//Config do not work, return default config : 0 +usb0_request_get_cfg_dev_addr: + arg 1,regb + branch usb_send_zero_packet + +usb0_request_get_descriptor: + bpatch patch1f_1,mem_patch1f + set0 mark_isstr,mark + fetch 1,mem_usb_setup_bValueH + beq DSC_DEVICE,dsc_device_info + beq DSC_CONFIG,dsc_config_info + beq DSC_STRING,dsc_string_info + beq DSC_HID,dsc_hid_info + beq DSC_HID_REPORT,dsc_hid_report_info + branch usb0_force_stall + +dsc_hid_info: + jam 0,mem_usb_get_protocol_flag + fetch 1,mem_usb_setup_wIndex + beq 0,dsc_hid_info_interface0 + beq 1,dsc_hid_info_interface1 + branch usb0_force_stall +//class_descriptor hid_descriptor--keyboard +dsc_hid_info_interface0: + arg mem_confdesc+19,rega + ifetch 1,rega + iforce regb + branch usb0_respond +//class_descriptor hid_descriptor--mouse +dsc_hid_info_interface1: + arg mem_confdesc+44,rega + ifetch 1,rega + iforce regb + branch usb0_respond + +dsc_device_info: +//input : pdata : data poniter +//input : temp: data len +//sets the data pointer and len to correct descriptor + fetch 1,mem_usb_set_high_addr_flag + ncall usb_set_high_addr,blank + setarg mem_devicedesc + fetcht 1,mem_devicedesc +dsc_info_set_data_len: + store 2,mem_dsc_info_data_pointer + storet 1,mem_dsc_info_len + fetch 1,mem_usb_setup_bLength + isub temp,null + nbranch dsc_info_set_current_data_len,positive +dsc_info_set_initial_data_len: + fetch 1,mem_dsc_info_len +dsc_info_set_data_size_completed: + iforce regb + fetch 2,mem_dsc_info_data_pointer + add pdata,1,pdata + iforce rega + branch usb0_respond +dsc_info_set_current_data_len: + fetch 1,mem_usb_setup_bLength + branch dsc_info_set_data_size_completed + +usb_set_high_addr: + hfetch 1,core_usb_addr + ncall usb0_set_addr,blank + jam 0,mem_usb_set_high_addr_flag + rtn +usb0_set_addr: + hfetch 1,core_usb_addr + set1 7,pdata + hstore 1,core_usb_addr + rtn + +dsc_config_info: + setarg mem_confdesc + fetcht 1,mem_confdesc + branch dsc_info_set_data_len + +dsc_string_info: + fetch 1,mem_usb_setup_bValue + sub pdata,3,null + nbranch usb0_force_stall,positive + fetch 1,mem_usb_setup_bValue + arg mem_string0,rega + beq 0,usb0_respond_length + set1 mark_isstr,mark + arg mem_string1,rega + beq 1,usb0_respond_length + arg mem_string2,rega + beq 2,usb0_respond_length + arg mem_string3,rega + beq 3,usb0_respond_length + rtn + +dsc_hid_report_info: + fetch 2,mem_usb_setup_wIndex + beq 1,dsc_hid_report_info0 + fetch 2,mem_hidreportdesc_kb + copy pdata,rega +// arg mem_hidreportdesc_kb,rega + branch usb0_respond_length +dsc_hid_report_info0: + jam 1,mem_usb_device_enumeration_endflag + jam USB_GOT_REPORT_REQ,mem_usb_state + fetch 2,mem_hidreportdesc_m + copy pdata,rega +// arg mem_hidreportdesc_m,rega + branch usb0_respond_length + + +usb0_request_get_interface: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + bne IN_INTERFACE,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 1,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + arg 1,regb + branch usb_send_zero_packet + + +usb0_request_get_status: + fetch 1,mem_usb0_state + beq DEV_DEFAULT,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 2,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + beq IN_DEVICE,usb0_get_status_in_device + beq IN_INTERFACE,usb0_get_status_in_interface + beq IN_ENDPOINT,usb0_get_status_in_endpoint + branch usb0_force_stall + +usb0_get_status_in_device: + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + arg 2,regb + fetch 1,mem_usb_remote_wakeup + beq 0x01,usb_send_two_packet +//regb:length +usb_send_zero_packet: + arg mem_usb_zero_packet,rega + branch usb0_respond +usb_send_ones_packet: + arg mem_usb_ones_packet,rega + branch usb0_respond +usb_send_two_packet: + arg mem_usb_two_packet,rega + branch usb0_respond + +usb0_get_status_in_interface: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + arg 2,regb + branch usb_send_zero_packet + +usb0_get_status_in_endpoint: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + beq IN_EP1,usb0_get_status_in_ep_in_ep1 + beq IN_EP2,usb0_get_status_in_ep_in_ep2 + beq IN_EP3,usb0_get_status_in_ep_in_ep3 + and_into 0x7f,pdata + beq 0x00,usb0_get_status_in_ep_in_ep0 + branch usb0_force_stall + +usb0_get_status_in_ep_in_ep0: + fetch 1,mem_usb_ep0_stall_status +usb0_get_status_in_ep_in_ack: + arg 2,regb + beq 1,usb_send_ones_packet + branch usb_send_zero_packet +usb0_get_status_in_ep_in_ep1: + fetch 1,mem_usb_ep1_stall_status + branch usb0_get_status_in_ep_in_ack +usb0_get_status_in_ep_in_ep2: + fetch 1,mem_usb_ep2_stall_status + branch usb0_get_status_in_ep_in_ack +usb0_get_status_in_ep_in_ep3: + fetch 1,mem_usb_ep3_stall_status + branch usb0_get_status_in_ep_in_ack + +usb_get_idle: + jam 1,mem_usb_idle_flag + arg mem_usb_idle_rate,rega + arg 1,regb + branch usb0_respond + +usb_get_report: + fetch 2,mem_usb_setup_bValue + arg PC_GET_REPORT,temp + isub temp,null + nbranch usb0_force_stall,zero + set0 mark_isstr,mark +usb_get_report_dispose: + fetch 1,mem_usb0_data_ready_report + nbranch usb_get_report_data_success,blank + jam PC_GET_NONDATA,mem_usb0_get_report_data +usb_get_report_send_data: + fetch 1,mem_usb_setup_bLength + iforce regb + arg mem_usb0_get_report_data,rega + call usb0_respond +usb_get_report_data_release: + arg mem_usb0_get_report_data,contw + arg 8,loopcnt + branch memset0 +usb_get_report_data_success: + jam 0,mem_usb0_data_ready_report + jam PC_GET_DATA,mem_usb0_get_report_data + branch usb_get_report_send_data + +usb_get_protocol_req: + fetch 1,mem_usb_setup_bLength + bne 1,usb0_force_stall + jam 1,mem_usb_get_protocol_flag + arg 1,regb //length + fetch 1,mem_usb_set_protocol_value + beq 0,usb_get_report_protocol + beq 1,usb_get_boot_protocol + branch usb_send_zero_packet +usb_get_report_protocol: + branch usb_send_ones_packet +usb_get_boot_protocol: + branch usb_send_zero_packet + + + +//in device +usb0_request_clear_feature: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + beq OUT_DEVICE,usb0_request_clear_feature_out_device + beq OUT_INTERFACE,usb0_request_clear_feature_out_interface + beq OUT_ENDPOINT,usb0_request_clear_feature_out_endpoint + branch usb0_force_stall + +usb0_request_clear_feature_out_device: + fetch 1,mem_usb_setup_bValue + bne DEVICE_REMOTE_WAKEUP,usb0_force_stall + hfetch 1,core_usb_config + set0 7,pdata + hstore 1,core_usb_config + jam 0,mem_usb_remote_wakeup + jam 1,mem_usb_clear_remote_wakeup + branch usb0_reply_zerolen + +usb0_request_clear_feature_out_interface: + branch usb0_force_stall + +usb0_request_clear_feature_out_endpoint: + fetch 1,mem_usb_setup_bValue + bne ENDPOINT_HALT,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + beq IN_EP1,usb0_force_stall_ep1_in_off + beq IN_EP2,usb0_force_stall_ep2_in_off + beq IN_EP3,usb0_force_stall_ep3_in_off + and_into 0x7f,pdata + beq 0x00,usb0_force_stall_ep0_in_off + branch usb0_force_stall + +usb0_force_stall_ep0_in_off: + jam 0,mem_usb_ep0_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep1_in_off: + jam 0,mem_usb_ep1_stall_status +usb0_force_stall_ep1_in_off_reply: + jam 1,mem_usb_clear_halt + branch usb0_reply_zerolen +usb0_force_stall_ep2_in_off: + jam 0,mem_usb_ep2_stall_status + branch usb0_force_stall_ep1_in_off_reply +usb0_force_stall_ep3_in_off: + jam 0,mem_usb_ep3_stall_status + branch usb0_force_stall_ep1_in_off_reply + + +usb0_request_set_feature: + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + beq OUT_DEVICE,usb0_request_set_feature_out_device + beq OUT_INTERFACE,usb0_request_set_feature_out_interface + beq OUT_ENDPOINT,usb0_request_set_feature_out_endpoint + branch usb0_force_stall + +usb0_request_set_feature_out_device: + fetch 1,mem_usb_setup_bValue + bne DEVICE_REMOTE_WAKEUP,usb0_force_stall + hfetch 1,core_usb_config + set1 7,pdata + hstore 1,core_usb_config + jam 1,mem_usb_remote_wakeup + jam USB_SLEEP,mem_usb_state + jam 0,mem_usb_tx_win_enable + call usb0_reply_zerolen +usb_wakeup_timer_reinit: + call timer_reinit + setarg TIMER_WAKEUP_DELAY + arg TIMER_WAKEUP,queue + branch timer_init + +usb0_request_set_feature_out_interface: + branch usb0_force_stall + +usb0_request_set_feature_out_endpoint: + fetch 1,mem_usb_setup_bValue + bne ENDPOINT_HALT,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + beq IN_EP1,usb0_force_stall_ep1_in_on + beq IN_EP2,usb0_force_stall_ep2_in_on + beq IN_EP3,usb0_force_stall_ep3_in_on + and_into 0x7f,pdata + beq 0x00,usb0_force_stall_ep0_in_on + branch usb0_force_stall + +usb0_force_stall_ep0_in_on: + jam 1,mem_usb_ep0_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep1_in_on: + jam 1,mem_usb_ep1_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep2_in_on: + jam 1,mem_usb_ep2_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep3_in_on: + jam 1,mem_usb_ep3_stall_status + branch usb0_reply_zerolen + + +usb0_request_set_address: + fetch 1,mem_usb_setup_bmRequestType + bne OUT_DEVICE,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + and_into 0x80,pdata + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb_usb0_state_set_dev_addr +usb_usb0_state_set_dev_default: + jam DEV_DEFAULT,mem_usb0_state +usb0_request_set_wait_address: + fetch 1,mem_usb_setup_bValue + hstore 1,core_usb_addr + call usb0_reply_zerolen + jam 1,mem_usb_set_high_addr_flag + rtn +usb_usb0_state_set_dev_addr: + jam DEV_ADDRESS,mem_usb0_state + branch usb0_request_set_wait_address + + +usb0_request_set_configuration: + fetch 1,mem_usb0_state + beq DEV_DEFAULT,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + bne OUT_DEVICE,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + sub pdata,USB_MAX_NUM_CFG,null + nbranch usb0_force_stall,positive + fetch 1,mem_usb0_state + beq DEV_ADDRESS,usb0_request_set_cfg_addr_state + beq DEV_CONFIGURED,usb0_request_set_cfg_cfg_state + branch usb0_force_stall + // This software only supports config = 0,1 +usb0_request_set_cfg_addr_state: +usb0_request_set_cfg_cfg_state: + fetch 1,mem_usb_setup_bValue //1:Configured state 0:Address state + beq 0,usb0_request_set_cfg_stay_addr_state + jam DEV_CONFIGURED,mem_usb0_state + branch usb0_reply_zerolen +usb0_request_set_cfg_stay_addr_state: + jam DEV_ADDRESS,mem_usb0_state + branch usb0_reply_zerolen + + +usb0_request_set_interface: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + bne OUT_INTERFACE,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + branch usb0_reply_zerolen + + +usb_set_idle: + jam 1,mem_usb_idle_flag + fetch 1,mem_usb_setup_bValueH + store 1,mem_usb_idle_rate + fetch 1,mem_usb_setup_wIndex + sub pdata,1,null + call usb_clear_remote_wakeup_set0,zero + fetch 1,mem_usb_state + bne USB_RESUME,usb0_reply_zerolen + jam USB_CONNECTED,mem_usb_state + call usb0_reply_zerolen + nop 30000 + nop 30000 + rtn +usb_clear_remote_wakeup_set0: + jam 1,mem_usb_device_enumeration_endflag + jam 0,mem_usb_clear_remote_wakeup + jam USB_RESUME,mem_usb_state + rtn + + +usb_set_report: + jam 1,mem_usb0_get_set_report + call usb_set_report_resume_judge + fetch 2,mem_usb_setup_bValue + store 2,mem_usb_setup_bValue_temp + fetch 1,mem_usb_setup_bLength //max 0x40 + iforce loopcnt + arg mem_usb0_setup,contr + arg mem_usb0_set_report_data,contw + call memcpy + branch usb0_reply_zerolen + +usb_set_report_resume_judge: + fetch 2,mem_usb_setup_bValue + arg PC_SET_REPORT_bValue,temp + isub temp,null + nrtn zero + fetch 2,mem_usb_setup_wIndex + arg PC_SET_REPORT_wIndex,temp + isub temp,null + nrtn zero + fetch 2,mem_usb_setup_bLength + arg PC_SET_REPORT_bLength,temp + isub temp,null + nrtn zero + jam 1,mem_usb_tx_win_enable + rtn + + +usb_set_protocol_req: + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + beq BOOT_PROTOCOL,usb_set_boot_protocol + beq REPORT_PROTOCOL,usb_set_report_protocol + branch usb0_force_stall +usb_set_boot_protocol: + jam 0,mem_usb_set_protocol_status + jam 1,mem_usb_set_protocol_value + branch usb0_reply_zerolen +usb_set_report_protocol: + jam 1,mem_usb_tx_mac_enable + jam 1,mem_usb_set_protocol_status + jam 0,mem_usb_set_protocol_value + branch usb0_reply_zerolen + + +usb0_respond_length: + ifetch 1,rega + iforce regb + increase 1,rega +//rega=*buff,reb=size +usb0_respond: + bpatch patch1f_2,mem_patch1f + bmark0 mark_isstr,usb0_respond0 + add regb,1,pdata + lshift pdata,pdata + hstore 1,core_usb_dfifo0 + hjam 3,core_usb_dfifo0 + fetch 1,mem_usb_setup_bLength + increase -2,pdata + rshift pdata,pdata + store 1,mem_usb_setup_bLength + beq 0,usb_no_respond_data +usb0_respond0: + fetch 2,mem_usb_setup_bLength + isub regb,null + branch usb0_respond1,positive + copy pdata,regb +usb0_respond1: + deposit rega + store 2,mem_bufptr + deposit regb + store 1,mem_remain + branch usb0_tx + +usb_no_respond_data: + arg 0,queue + branch usb_trig + +//mem_bufptr=*buff,mem_remain=size,loopcnt=i,rega=len +usb0_tx: + bpatch patch1f_3,mem_patch1f + fetch 1,mem_remain + rtn blank + copy pdata,loopcnt + sub pdata,EP0_PACKET_SIZE,null + branch usb0_tx_info,positive + arg EP0_PACKET_SIZE,loopcnt +usb0_tx_info: + fetch 1,mem_remain + isub loopcnt,pdata + store 1,mem_remain//mem_remain -= len + fetch 2,mem_bufptr + copy pdata,contr +usb0_tx0: + ifetch 1,contr + hstore 1,core_usb_dfifo0 + bmark0 mark_isstr,usb0_tx1 + hjam 0,core_usb_dfifo0 +usb0_tx1: + loop usb0_tx0 + copy contr,pdata + store 2,mem_bufptr//mem_bufptr += len + arg 0,queue + call usb_trig + fetch 1,mem_remain + nrtn blank + fetch 1,mem_usb_state + rtnne USB_GOT_REPORT_REQ + jam USB_CONNECTED,mem_usb_state + rtn + + +usb_tx_ep1: + arg core_usb_dfifo1,rega + arg 1,queue +usb_tx_loop: + ifetch 1,contr + istore 1,rega + loop usb_tx_loop +usb_trig: + setarg 0 + qset1 pdata + hstore 1,core_usb_trig + fetcht 1,mem_usb_tx_wait + ior temp,pdata + store 1,mem_usb_tx_wait + rtn + +usb_tx_ep2: + arg 2,queue + arg core_usb_dfifo2,rega + branch usb_tx_loop + +usb_tx: + bpatch patch1f_4,mem_patch1f + fetch 1,mem_usb_tx_enable + rtn blank + fetch 1,mem_usb_tx_wait + nbranch usb_inwake_state_tx_dispose,blank + fetch 1,mem_usb_device_enumeration_endflag + branch usb_tx_fifo_release,blank + fetch 1,mem_usb_state + beq USB_SLEEP,usb_windows_wakeup + bne USB_CONNECTED,usb_tx_fifo_release + fetch 1,mem_usb_clear_remote_wakeup + nbranch usb_tx_fifo_release,blank + call usb_tx_data_ep1 + branch usb_tx_data_ep2 + +usb_tx_data_ep1: + fetch 1,mem_usb_tx_enable + rtnbit0 1 + fetch 1,mem_usb_tx_wait + rtnbit1 1 + fetch 1,mem_usb_tx_enable + set0 1,pdata + store 1,mem_usb_tx_enable + fetch 1,mem_usb_ep1_data + rtn blank + beq USB_EP1_KB,usb_tx_kb_normal_data + branch assert + +usb_tx_data_ep2: + fetch 1,mem_usb_tx_enable + rtnbit0 2 + fetch 1,mem_usb_tx_wait + rtnbit1 2 + fetch 1,mem_usb_tx_enable + set0 2,pdata + store 1,mem_usb_tx_enable + fetch 1,mem_usb_ep2_data + rtn blank + beq USB_EP2_MS,usb_tx_ms_data + beq USB_EP2_MULTIKEY,usb_tx_kb_multikey_data + branch assert + +usb_tx_fifo_release: + //clear mem_usb_mouse_data/mem_usb_kb_data/mem_usb_kb_multikey + arg mem_usb_mouse_data,contw + arg 6,loopcnt + branch memset0 + +usb_tx_ms_data: + fetch 1,mem_usb_idle_flag + fetcht 1,mem_usb_get_protocol_flag + iand temp,pdata + branch usb_tx_ms_data_normal_mode,blank + fetcht 1,mem_usb_set_protocol_status + iadd temp,pdata + beq MAC_BOOT_MODE,usb_tx_ms_data_mac_boot_mode + branch usb_tx_ms_data_normal_mode + +usb_tx_ms_data_mac_boot_mode: + jam 0,mem_usb_ep2_data +usb_tx_ms_data_mac_boot_regroup: + fetch 1,mem_usb_mouse_data+1 //key + beq R_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey + beq LR_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey + fetch 1,mem_usb_mouse_data+1 //key + store 1,mem_usb_mouse_data + fetch 1,mem_usb_mouse_data+2 //x low + istore 1,contw + fetch 1,mem_usb_mouse_data+4 //y low + istore 1,contw + fetch 1,mem_usb_mouse_data+6 //wheel + istore 1,contw + arg 4,loopcnt + arg mem_usb_mouse_data,contr + branch usb_tx_ep2 + +usb_tx_ms_data_normal_mode: + jam 0,mem_usb_ep2_data +usb_tx_mac_boot_ms_regroup_r_or_lrkey: + arg 8,loopcnt + arg mem_usb_mouse_data,contr + branch usb_tx_ep2 + +usb_tx_kb_multikey_data: + jam 0,mem_usb_ep2_data + arg 3,loopcnt + arg mem_usb_kb_multikey,contr + branch usb_tx_ep2 + +usb_tx_kb_normal_data: + jam 0,mem_usb_ep1_data + arg 8,loopcnt + arg mem_usb_kb_data,contr + branch usb_tx_ep1 + +usb_inwake_state_tx_dispose: + fetch 1,mem_usb_state + beq USB_SLEEP,usb_clear_tx_wait + beq USB_CONNECTED, usb_mac_wakeup_trig + rtn +usb_clear_tx_wait: + jam 0,mem_usb_tx_wait + rtn +usb_mac_wakeup_trig: + hfetch 1,core_usb_config + set1 7,pdata + hstore 1,core_usb_config + jam 1,mem_usb_mac_wakeup_trig + rtn + +usb_mac_wakeup_judge: + fetch 1,mem_usb_state + rtneq USB_SLEEP + beq USB_CONNECTED,usb_mac_wakeup + rtn +usb_mac_wakeup: + fetch 1,mem_usb_mac_wakeup_trig + rtn blank + jam 1,mem_usb_wakestate_onetime_flag + branch usb_wakeup + +usb_windows_wakeup: + arg TIMER_WAKEUP,queue + call timer_check + nrtn blank +usb_wakeup: + hfetch 1,core_usb_config + rtnbit0 7 //endpoint wakeup enable + hjam 0xfc,core_usb_config + nop 30000 + hjam 0x3c,core_usb_config + rtn + + + + + + +hci_rx_h4: + bpatch patch1f_5,mem_patch1f + fetch 1,mem_hci_cmd + nrtn blank +hci_rx_h4_1: + call hci_h4_parse_packet + ncall h4_rx_discard_packet,user + rtn + +hci_h4_parse_packet: + bpatch patch1f_6,mem_patch1f + copy contru,rega + arg 4,temp + ifetch 1,contru //type + beq HCI_H4_TYPE_CMD,hci_h4_parse_packet_wait_len + increase 1,temp //acl packet has 2 bytes for length + beq HCI_H4_TYPE_ACL,hci_h4_parse_packet_wait_len + copy contru,pdata + hstore 2,core_uart_rrptr + rtn +hci_h4_parse_packet_wait_len: + hfetch 2,core_uart_rxitems + isub temp,null + nbranch hci_h4_parse_packet_wait_len,positive // while(rxitems >= 4 or 5); + //Make sure length has been recieved. + disable user + copy rega,contru + call h4_get_rx_payload_len + iadd temp,temp +hci_h4_parse_packet_wait: + hfetch 2,core_uart_rxitems + isub temp,null + nbranch hci_h4_parse_packet_wait,positive//wait for rcv a complete packet + copy rega,contru + ifetch 1,contru //HCI packet type + beq HCI_H4_TYPE_CMD,process_hci_cmd + branch assert + +h4_rx_discard_packet: + bpatch patch1f_7,mem_patch1f + hfetch 2,core_uart_rrptr + iforce contru + call h4_get_rx_payload_len + iadd contru,contru + deposit contru + hstore 2,core_uart_rrptr + rtn + + +//contru = pointer to packet start +//return len via pdata +h4_get_rx_payload_len: + ifetch 1,contru + increase 2,contru + beq HCI_H4_TYPE_ACL,h4_get_rx_payload_len_acl + ifetch 1,contru + rtn +h4_get_rx_payload_len_acl: + ifetch 2,contru + rtn + +h4_get_tx_ptr: + hfetch 2,core_uart_twptr + increase -5,contwu + iadd contwu,contwu + rtn + +h4_send_packet_event: + arg HCI_H4_TYPE_EVENT,temp //type + branch h4_send_packet +h4_send_packet_acl: //upgoing ACL + arg HCI_H4_TYPE_ACL,temp //type +h4_send_packet: + bpatchx patch20_0,mem_patch20 + increase 1,loopcnt + hfetch 2,core_uart_twptr + copy pdata,contwu + copy loopcnt,pdata //length + istoret 1,contwu //packet type in temp + increase -1,pdata + iadd contwu,contwu + copy contwu,pdata + store 2,mem_hci_acl_tx_trigger_wptr + copy temp,pdata + rtneq HCI_H4_TYPE_ACL //not send acl packet immediately + fetch 2,mem_hci_acl_tx_trigger_wptr + hstore 2,core_uart_twptr + branch h4_send_acl_trigger_clear + + +h4_send_acl_trigger_clear: + setarg 0 + store 2,mem_hci_acl_tx_trigger_wptr + rtn + + +/*********************************/ +/********** HCI *****************/ +/*********************************/ + +hci_init: + rtn wake + setarg hci_idle_dispatch + store 2,mem_cb_idle_process + + setarg uart_baud_115200 + store uart_baud_len,mem_baud +hci_lpm_init: + setarg mem_h5rx_buf + hstore 2,core_uart_rsaddr + setarg mem_h5rx_buf_end + hstore 2,core_uart_readdr + setarg mem_h5tx_buf + hstore 2,core_uart_tsaddr + call hci_sel_init +hci_reinit: + hjam 0x0,core_uart_ctrl + setarg mem_h5tx_buf + hstore 2,core_uart_twptr + hstore 2,core_uart_trptrp + setarg mem_h5rx_buf + hstore 2,core_uart_rrptr + store 2,mem_h5rx_rptr +hci_init_common: + hfetch 2,core_clkoff + set0 CLOCK_OFF_UART,pdata + hstore 2,core_clkoff + call uart_set_baud_by_mem + hjam uartclk_dpll,core_uart_clksel + hjam uart_ctrl_h4,core_uart_ctrl + rtn + +hci_sel_init: + setarg mem_h5tx_buf_end + hstore 2,core_uart_teaddr + hfetch 1,core_gpio_sel1 + or_into 0x07,pdata + hstore 1,core_gpio_sel1 + rtn + + +hci_rx_packet: + bpatchx patch20_1,mem_patch20 + hfetch 1,core_uart_status + iforce regb + bbit0 uart_status_rx_fifo_empty,hci_rx_packet_cont + hfetch 2,core_uart_rxitems + iforce regc + arg 0x44f,temp + isub temp,null + nrtn zero +hci_rx_packet_cont: + hfetch 2,core_uart_rrptr + iforce contru + branch hci_rx_h4 + +uart_send_byte: + hfetcht 1,core_uart_status + isolate1 6,temp + branch uart_send_byte,true + hstore 1,core_uart_txd + rtn + +process_hci_cmd: + bpatchx patch20_2,mem_patch20 + fetch 1,mem_hci_cmd + branch process_hci_cmd_cont,blank + enable user /* last command still there */ + rtn +process_hci_cmd_cont: + ifetch 2,contru + iforce alarm /* alarm is used for sending */ + iforce queue /* queue is OCF */ + ifetch 1,contru /* skip hci length */ + iforce temp /* temp has the length */ + rshift2 alarm,pdata + rshift8 pdata,pdata + beq HCI_OGF_VENDOR_SPECIFIC,phci_grp_vendor_specific + rtn + + +phci_grp_vendor_specific: + bpatchx patch20_3,mem_patch20 + deposit queue + beq HCI_VENDOR_CMD_RESET,hci_normal_reply + beq HCI_VENDOR_CMD_CHIPID,phci_grp_vendor_chipid + beq HCI_VENDOR_CMD_BAUD,phci_grp_vendor_baud + beq HCI_VENDOR_CMD_PATCH,phci_grp_vendor_patch + beq HCI_VENDOR_CMD_PATCH_DONE,phci_grp_vendor_done + beq HCI_VENDOR_CMD_ECHO,hci_normal_reply + beq HCI_VENDOR_CMD_BDADDR,phci_grp_vendor_bdaddr + beq HCI_VENDOR_CMD_ENTER_LPM,phci_grp_vendor_enter_lpm + + beq HCI_VENDOR_CMD_MEM,phci_grp_vendor_mem + beq HCI_VENDOR_CMD_EEP,phci_grp_vendor_eep + beq HCI_VENDOR_CMD_PATCH_SEC_INIT,phci_grp_vendor_patch_sec_init + beq HCI_VENDOR_CMD_PATCH_SEC,phci_grp_vendor_patch_sec + branch hci_normal_reply + +phci_grp_vendor_enter_lpm: + call hci_normal_reply + call wait_uarttx + call gpio_pu_uart_tx +hci_enter_lpm: + call app_put_lpm_wake_lock + call app_l2cap_flow_control_enable + branch gpio_rx_config_input_with_pu + +hci_exit_lpm: + jam HCI_RX_READY,mem_hci_lt_rx_state + call app_get_lpm_wake_lock + call hci_lpm_init + branch app_l2cap_flow_control_disable + +phci_grp_vendor_chipid: + call hci_get_cmd_complete_ptr + hfetch 2,core_chipid + istore 2,contwu + force 6,loopcnt + branch hci_command_complete + +phci_grp_vendor_baud: + ifetch 2,contru + store 2,mem_baud + hstore 2,core_uart_baud + rtn + + +phci_grp_vendor_patch_common: + //hjam 0x80,core_ucode_ctrl + ifetch 1,contru + copy pdata,temp //check sum via temp + hstore 1,core_ucode_low + ifetch 1,contru + iadd temp,temp + set1 7,pdata + hstore 1,core_ucode_ctrl + ifetch 1,contru + iadd temp,temp + copy pdata,loopcnt + rtn + +phci_grp_vendor_patch: + bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad + call phci_grp_vendor_patch_common +phci_grp_vendor_patch_loop: + ifetch 1,contru + hstore 1,core_ucode_data + iadd temp,temp + loop phci_grp_vendor_patch_loop +phci_grp_vendor_patch_check_sum: + and temp,0xff,temp + ifetch 1,contru + isub temp,null + nbranch phci_grp_vendor_patch_bad,zero + branch hci_normal_reply + + +phci_grp_vendor_patch_sec: + bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad + call phci_grp_vendor_patch_common + store 8,mem_pdatatemp +phci_grp_vendor_patch_sec_loop: + call do_aes_cbc + arg 16,loopcnt + arg mem_temp_block0,contw + call load_uart_sum_loop + storet 8,mem_temp + arg mem_temp_block2,contw + call store_aes_result + arg mem_temp_block2,rega + arg mem_temp_block0,regb + arg mem_temp_block3,contw + call xor16 + arg 16,loopcnt + arg mem_temp_block3,contr + call load_ucode_only_loop + fetcht 8,mem_temp + fetch 8,mem_pdatatemp + increase -16,pdata + store 8,mem_pdatatemp + nbranch phci_grp_vendor_patch_sec_loop,blank + branch phci_grp_vendor_patch_check_sum + +load_ucode_only_loop: + ifetch 1,contr + hstore 1,core_ucode_data + loop load_ucode_only_loop + rtn + +load_uart_sum_loop: + ifetch 1,contru + istore 1,contw + iadd temp,temp + loop load_uart_sum_loop + rtn + +phci_grp_vendor_patch_sec_init: + bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad + arg 0,temp + arg 16,loopcnt + arg mem_temp_block0,contw + call load_uart_sum_loop + hfetch 1,core_gpio_key2 + and_into 0xfd,pdata // disable aes for iv + hstore 1,core_gpio_key2 + arg mem_temp_block0,contr + arg 16,loopcnt + call aes_load_data + call aes_init + call aes_clear_data + branch phci_grp_vendor_patch_check_sum + + +phci_grp_vendor_done: + arg 0x20,loopcnt //patch switch length + arg mem_patch00,contw + arg 0,temp //checksum +phci_grp_vendor_done_loop: + ifetch 1,contru + istore 1,contw + iadd temp,temp + loop phci_grp_vendor_done_loop + and temp,0xff,temp + ifetch 1,contru + isub temp,null + nbranch phci_grp_vendor_patch_bad,zero + hjam 0,core_ucode_ctrl + call hci_normal_reply + call h4_rx_discard_packet + call clear_key_buf + call wait_uarttx + branch soft_reset + +phci_grp_vendor_patch_bad: + hjam 0,core_ucode_ctrl + branch start + +phci_grp_vendor_bdaddr: + ifetch 6,contru + store 6,mem_lap + branch hci_normal_reply + + +phci_grp_vendor_mem: + ifetch 1,contru + store 1,mem_hci_curr_len + copy pdata,loopcnt + ifetch 2,contru + store 2,mem_hci_curr_target + copy pdata,contw + call uart_copy_rx_bytes + branch hci_normal_reply + + +phci_grp_vendor_eep: + ifetch 1,contru + store 1,mem_hci_curr_len + copy pdata,loopcnt + ifetch 2,contru + store 2,mem_hci_curr_target + arg mem_l2cap_rxbuff1,contw + call uart_copy_rx_bytes + fetcht 1,mem_hci_curr_len + arg mem_l2cap_rxbuff1,rega + fetch 2,mem_hci_curr_target + branch iicd_write_ota_data + + + + +hci_normal_reply: + force 4,loopcnt +hci_command_complete: /* loopcnt is hci length */ + call hci_get_payload_ptr + force 0x1,pdata + istore 1,contwu + deposit alarm + istore 3,contwu + force HCI_EVENT_COMMAND_COMPLETE,queue +hci_send_event: /* queue:event code, loopcnt: length */ + bpatchx patch20_4,mem_patch20 + call hci_get_packet_ptr + deposit queue + istore 1,contwu + deposit loopcnt + istore 1,contwu +hci_send_event_raw: + force 5,queue + increase 2,loopcnt +hci_send_packet: + branch h4_send_packet_event + +hci_send_commu_ready_event: + force HCI_EVENT_VENDOR_SPECIFIC,queue + call hci_get_payload_ptr + setarg HCI_VENDOR_EVENT_COMMU_READY + istore 1,contwu + force 1,loopcnt + branch hci_send_event + +hci_get_cmd_complete_ptr: + force 12,contwu + branch hci_get_tx_ptr + +hci_get_payload_ptr: + force 8,contwu + branch hci_get_tx_ptr + +hci_get_packet_ptr: + force 6,contwu +hci_get_tx_ptr: + branch h4_get_tx_ptr + + + +calc_tx_crc16: + pulse crc16 + enable enable_crc +crcloop: + ifetch 1,contwu + inject bucket,8 + loop crcloop + enable enable_parity + inject bucket,16 + disable enable_parity + disable enable_crc + disable crc16 + byteswap pdata,pdata + rtn + + + +cmd_exit: + jam 0,mem_hci_cmd + rtn +cmd_check_plap: + fetch 6,mem_hci_plap + fetcht 6,mem_plap + isub temp,null + rtn + + + +//enable ssp master sm +cmd_pair: + fetch 1,mem_op + bbit1 op_inrand_req,cmd_pair_passive + call tid_initiate + jam LMP_IN_RAND,mem_lmo_opcode2 + branch cmd_exit +cmd_pair_passive: + set0 op_inrand_req,pdata + store 1,mem_op + call lmp_accept_inrand + setarg 0 + setflag master,smap_lmptid,pdata + store 1,mem_lmo_tid2 + branch cmd_exit + rtn +cmd_in_sniff: + jam LMP_SNIFF_REQ,mem_lmo_opcode2 + arg mem_sniff_payload,contw + setarg 0 + isolate1 27,clke_bt + setflag true,1,pdata /* use init 2 if bit27 of clke is 1 */ + istore 1,contw + setarg 0 /* dsniff */ + istore 2,contw + fetch 2,mem_sniff_param_interval /* tsniff */ + istore 2,contw + fetch 1,mem_sniff_param_attempt /* attempt */ + istore 2,contw + fetch 1,mem_sniff_param_timeout /* timeout */ + istore 2,contw + branch cmd_exit + +cmd_exit_sniff: + jam LMP_UNSNIFF_REQ,mem_lmo_opcode2 + branch cmd_exit + +hci_idle_dispatch: + call gpio_check_uart_state + rtn true + arg UART_WAKEUP_RX,temp + call gpio_get_bit + nbranch uart_wake_up,true + jam HCI_RX_WAKE,mem_hci_lt_rx_state + rtn +uart_wake_up: + fetch 1,mem_hci_lt_rx_state + rtnne HCI_RX_WAKE + call hci_exit_lpm + branch hci_send_commu_ready_event + + +/** +* the following API is to send the HID data +* +*/ + +/** +* the following API is to process the hid rx data +* +*/ +//handle the hid data + +hid_rx_process: + bpatchx patch20_5,mem_patch20 + fetch 2,mem_l2cap_payload_ptr + copy pdata,contr + ifetch 1,contr + and pdata,0x0f,temp + rshift4 pdata,pdata //hidtype + beq hid_type_set_idle,hid_rx_process_handshake + beq hid_type_set_protocol,hid_rx_process_handshake + beq hid_type_data,hid_rx_process_data + beq HID_TYPE_SET_REPORT,hid_rx_process_set_report + beq HID_TYPE_CONTROL,hid_rx_process_hid_control + rtn + +hid_rx_process_hid_control: + copy temp,pdata + beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,hid_rx_process_virtual_cable_unplug + beq HID_CONTROL_P_SUSPEND,hid_rx_process_suspend + rtn + +hid_rx_process_virtual_cable_unplug: + jam BT_EVT_VIRTUAL_CABLE_UNPLUG,mem_fifo_temp + call ui_ipc_send_event + fetch 1,mem_device_option + rtnbit0 dvc_op_mouse + copy temp,pdata + beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,mouse_irtual_cable_unplug + rtn +hid_rx_process_suspend: + rtn + +hid_rx_process_set_report: + call hid_rx_process_data + arg 0x01,rega + call hid_malloc_tx_buff + fetch 2,mem_hid_ctrl_remote_cid + istore 2,contw + setarg 0x00 + istore 1,contw + rtn + +hid_rx_process_handshake: + arg 1,regA//payload length + call hid_malloc_tx_buff + fetch 2,mem_hid_ctrl_remote_cid + istore 2,contw + setarg 0 + istore 1,contw + jam 1,mem_ui_data_txbuff_length + fetch 1,mem_hid_control_state + set1 l2cap_channel_hid_handshake_done + store 1,mem_hid_control_state + jam BT_EVT_HID_HANDSHAKE,mem_fifo_temp + branch ui_ipc_send_event + +hid_rx_process_data: + ifetch 1,contr + beq HID_REPORT_ID_KB,hid_rx_process_data_hid_kb + rtn + +hid_rx_process_data_hid_kb: + rtn + + +hid_malloc_tx_buff: + call l2cap_malloc + copy rega,temp + storet 1,mem_ui_data_txbuff_length + copy pdata,contw + copy rega,pdata + istore 2,contw //hid payload length + rtn + + + + + + + + + + + + + +/************************************/ +/*initialize L2CAP related variables*/ +/************************************/ +l2cap_init: + branch l2cap_init_wake,wake +l2cap_init_work: + setarg mem_l2cap_xmem_end + arg mem_l2cap_xmem_start,contw + isub contw,loopcnt + call clear_mem +l2cap_init_wake: + bpatchx patch20_6,mem_patch20 + setarg mem_sdp_mem_end + arg mem_sdp_mem_start,contw + isub contw,loopcnt + call clear_mem + setarg mem_l2cap_mem_end + arg mem_l2cap_mem_start,contw + isub contw,loopcnt + call clear_mem + branch l2cap_lpm_load_txbuf + +process_rx_l2cap_pkt: + bpatchx patch20_7,mem_patch20 + copy contr,temp + //call l2cap_malloc_is_fifo_full + //nrtn blank + copy temp,contr + ifetch 2,contr + store 2,mem_l2cap_rx_pkt_length + ifetch 2,contr + store 2,mem_l2cap_rx_cid + deposit contr + store 2,mem_l2cap_payload_ptr + fetch 1,memui_reconnect_mode + beq NO_RECONNECTION,l2cap_rx_multiplexing + branch ml2cap_rx_multiplexing + +l2cap_rx_multiplexing: + fetch 2, mem_l2cap_rx_pkt_length + branch l2cap_rx_reset_state,blank + bpatchx patch21_0,mem_patch21 + fetch 1,mem_l2cap_rx_cid + beq L2CAP_signal_channel,l2cap_call_proc_signal +l2cap_rx_multiplexing0: + beq L2CAP_SDP_channel,l2cap_call_proc_sdp + beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm + beq L2CAP_HID_Control_channel,l2cap_call_proc_hid + beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid + branch l2cap_rx_reset_state + +l2cap_check_map: +// call l2cap_malloc_is_fifo_full +// nrtn blank + bpatchx patch21_1,mem_patch21 + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + beq 0,set_pdata_0 + beq 1,set_pdata_0 + beq 2,set_pdata_0 + beq 3,set_pdata_0 + beq 0x81,set_pdata_0 + beq 0xc0,set_pdata_0 + beq 0x80,set_pdata_0 + beq 0x40,set_pdata_0 + rtn + +set_pdata_0: + setarg 0 + rtn + + +l2cap_call_proc_signal: + call l2cap_check_map + nrtn blank +l2cap_call_proc_signal0: + call l2cap_malloc_signal_channel + call l2cap_process_signal_pkt + fetcht 2,mem_l2cap_signal_tx_length + branch l2cap_call_proc_no_reply,blank + call l2cap_get_signal_tx_buff + fetch 2,mem_l2cap_signal_tx_length + istore 2,contw + force L2CAP_signal_channel,pdata + istore 2,contw + branch l2cap_rx_reset_state + +l2cap_call_proc_sigal_pending: + fetch 1,mem_l2cap_pending_item + rtn blank + copy pdata,rega + bpatchx patch21_2,mem_patch21 + fetch 4,mem_l2cap_sdpres_delay_time + arg 0x100,temp + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + jam 0,mem_l2cap_pending_item + copy rega,pdata + beq L2CAP_SDP_channel,l2cap_sdp_conn_succ + branch assert +l2cap_sdp_conn_succ: + arg 0,debug + call l2cap_malloc_signal_channel + call restore_l2cap_req_param + call l2cap_get_signal_tx_payload + call save_cont_pointers + call send_connection_sdp_res + call l2cap_get_signal_tx_buff + //fetch 2,mem_l2cap_signal_tx_length + setarg 0x000c + istore 2,contw + force L2CAP_signal_channel,pdata + istore 2,contw + branch l2cap_rx_reset_state + + + +l2cap_reset_sdp_map: + bpatchx patch21_3,mem_patch21 + fetch 2,mem_sdp_tx_pkt_length + increase 4,pdata + rshift4 pdata,pdata + rshift3 pdata,pdata + add pdata,1,temp ///temp: how many128 + arg mem_tx_fifo3,contr + ifetch 3,contr + rtn blank + store 3,mem_tx_fifo_map_temp + fetch 1,mem_tx_fifo_map_temp + copy pdata,rega + call check_l2cap_map + copy regb,pdata + store 1,mem_tx_fifo3 + rtn + +check_l2cap_map: + arg 0,queue + arg 0,regb + +check_l2cap_map_loop: + sub queue,7,null + nrtn positive + qisolate1 rega + branch check_l2cap_map_used,true + branch check_l2cap_map_used2 + +check_l2cap_map_used: + copy temp,pdata + branch check_l2cap_map_used2,blank + qset1 regb + increase -1,temp + +check_l2cap_map_used2: + increase 1,queue + branch check_l2cap_map_loop + +l2cap_call_proc_sdp: + call l2cap_malloc_is_fifo_empty + nrtn blank// not process this packet until fifo empty + call l2cap_check_map + nrtn blank + call l2cap_malloc_sdp_channel + call sdp_process + call l2cap_reset_sdp_map + branch l2cap_call_proc_sdp_common + + +ml2cap_call_proc_sdp: + call l2cap_malloc_is_fifo_empty + nrtn blank// not process this packet until fifo empty + call l2cap_malloc_sdp_channel + call sdp_process +l2cap_call_proc_sdp_common: + call l2cap_get_sdp_tx_buff + fetch 2,mem_sdp_tx_pkt_length + branch l2cap_call_proc_no_reply,blank + istore 2,contw + fetch 2,mem_sdp_remote_cid + istore 2,contw + branch l2cap_rx_reset_state + +l2cap_call_proc_hid: + call hid_rx_process + branch l2cap_rx_reset_state + +l2cap_call_proc_rfcomm: + bpatchx patch21_4,mem_patch21 + jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag + call rfcomm_rx_process + fetch 1,mem_rfcomm_malloc_fail_flag + rtneq RFCOMM_MALLOC_FAIL + branch l2cap_rx_reset_state +l2cap_call_proc_no_reply: + call l2cap_malloc_discard + //fall through +l2cap_rx_reset_state: + setarg 0 + store 2,mem_l2cap_rx_pkt_length + store 2,mem_l2cap_rx_cid + jam L2CAP_RX_DONE,mem_l2cap_rx_done + rtn +/* To process one L2CAP signalling pkt consisting of 1 or more signalling commands. */ +l2cap_process_signal_pkt: + bpatchx patch21_5,mem_patch21 + call l2cap_get_signal_tx_payload + force 0,regB + fetch 2,mem_l2cap_rx_pkt_length + copy pdata,regC + fetch 2,mem_l2cap_payload_ptr + iforce contr +l2cap_process_signal_pkt_loop: + call l2cap_process_one_signal + deposit regC + increase -4,regC + increase -4,pdata + nbranch l2cap_process_signal_pkt_loop,blank + copy regB,pdata + store 2,mem_l2cap_signal_tx_length + rtn + +l2cap_process_one_signal: + bpatchx patch21_6,mem_patch21 + ifetch 1,contr + beq signal_cmd_reject,l2cap_proc_signal_cmd_reject + beq signal_connect_req,l2cap_proc_signal_connect_req + beq signal_connect_rsp,l2cap_proc_signal_connect_rsp + beq signal_config_req,l2cap_proc_signal_config_req + beq signal_config_rsp,l2cap_proc_signal_config_rsp + beq signal_disconnect_req,l2cap_proc_signal_disconnect_req + beq signal_disconnect_rsp,l2cap_proc_signal_disconnect_rsp + beq signal_echo_req,l2cap_proc_signal_echo_req + beq signal_echo_rsp,l2cap_proc_signal_echo_rsp + beq signal_info_req,l2cap_proc_signal_info_req + beq signal_info_rsp,l2cap_proc_signal_info_rsp + call l2cap_reject_command +l2cap_process_one_signal_rtn: + rtn + +l2cap_proc_signal_info_req: + ifetch 1,contr //IDs + copy pdata,queue + ifetch 2,contr //length + copy pdata,rega + copy regc,pdata + isub rega,regc + setarg signal_info_rsp + istore 1,contw + copy queue,pdata + istore 1, contw + ifetch 2,contr +l2cap_proc_signal_info_req_reply: + beq L2CAP_SIG_EXT_FEATRUE,l2cap_proc_signal_info_req_ext + beq L2CAP_SIG_FIX_FEATRUE,l2cap_proc_signal_info_req_fix + rtn +l2cap_proc_signal_info_req_ext: + setarg 0x020008 + istore 6, contw + setarg 0x0280 + istore 4, contw + force 12,pdata + branch l2cap_proc_signal_info_req_common +l2cap_proc_signal_info_req_fix: + setarg 0x3000c + istore 6, contw + setarg 0x0006 + istore 8, contw + force 16,pdata +l2cap_proc_signal_info_req_common: + iadd regb,regb + branch l2cap_process_one_signal_rtn + +ml2cap_proc_signal_info_req: + ifetch 1,contr //IDs + copy pdata,queue + ifetch 2,contr //length + copy pdata,rega + ifetch 2,contr + store 2,mem_temp + copy regc,pdata + isub rega,regc + call l2cap_get_signal_tx_payload + setarg signal_info_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + fetch 2,mem_temp + branch l2cap_proc_signal_info_req_reply + + +/* Respond to the command reject signal sent from the remote BD. */ +l2cap_proc_signal_cmd_reject: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + iadd contr,contr + copy regC,pdata + isub regA,regC +l2cap_proc_signal_cmd_reject_rtn: + branch l2cap_process_one_signal_rtn +/* Respond to an L2CAP connection request from remote BD. (generate a connection_rsp) */ +l2cap_proc_signal_connect_req: + call save_cont_pointers + //fetch 6,mem_inquiry_bd_addr + //store 6,mem_master_paged_bd_addr + call load_cont_pointers + arg 0,debug + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,temp //PSM + ifetch 2,contr + copy pdata,timeup + bpatchx patch21_7,mem_patch21 + copy temp,pdata + beq PSM_SDP,l2cap_proc_signal_connect_req_sdp + beq PSM_RFCOMM,l2cap_proc_signal_connect_req_rfcomm + beq PSM_HID_control,l2cap_proc_signal_connect_req_hid_ctrl + beq PSM_HID_interrupt,l2cap_proc_signal_connect_req_hid_int + call l2cap_reject_command + branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_sdp: + call save_cont_pointers + arg L2CAP_SDP_channel,temp + fetch 2,mem_sdp_remote_cid + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_sdp_remote_cid + copy clkn_bt,pdata + store 4,mem_l2cap_sdpres_delay_time + call store_l2cap_req_param + branch send_connection_pending + +store_l2cap_req_param: + storet 2,mem_psm + deposit timeup + store 2,mem_scid + deposit rega + store 2,mem_cmd_length + deposit regb + store 2,mem_tt2 + deposit regc + store 2,mem_tt3 + deposit queue + store 2,mem_id + rtn + +restore_l2cap_req_param: + fetcht 2,mem_psm + fetch 2,mem_scid + copy pdata,timeup + fetch 2,mem_cmd_length + copy pdata,rega + fetch 2,mem_tt2 + copy pdata,regb + fetch 2,mem_tt3 + copy pdata,regc + fetch 2,mem_id + copy pdata,queue + rtn + +l2cap_proc_signal_connect_req_rfcomm: + call save_cont_pointers + setarg L2CAP_RFCOMM_channel + arg L2CAP_RFCOMM_channel,temp + fetch 2,mem_RFCOMM_remote_CID + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_RFCOMM_remote_CID + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_rfcomm_state + branch send_connection_res +l2cap_proc_signal_connect_req_hid_ctrl: + call save_cont_pointers + arg L2CAP_HID_Control_channel,temp + fetch 2,mem_hid_ctrl_remote_cid + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_hid_ctrl_remote_cid + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_control_state + branch send_connection_res +l2cap_proc_signal_connect_req_hid_int: + call save_cont_pointers + deposit clke + arg L2CAP_HID_Interrupt_channel,temp + fetch 2,mem_hid_int_remote_cid + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_hid_int_remote_cid + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_interrupt_state + branch send_connection_res + +send_connection_pending: + setarg L2CAP_connect_pending + store 2,memL2CAP_T1 + jam L2CAP_SDP_channel,mem_l2cap_pending_item + branch send_connection_res0 +send_connection_sdp_res: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_sdp_state +send_connection_res: + setarg L2CAP_connect_successful + store 2,memL2CAP_T1 +send_connection_res0: + bpatchx patch22_0,mem_patch22 + call load_cont_pointers + setarg signal_connect_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0008 + istore 2,contw + copy temp,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + fetch 2,memL2CAP_T1 + beq L2CAP_connect_pending,connect_pending + isolate0 0,debug + branch connect_suc,true + setarg L2CAP_connect_refused_no_resources +connect_suc: + istore 2,contw + force 0x0000,pdata + istore 2,contw + setarg 12 + branch connect_req_update_byte_counts +connect_pending: + istore 2,contw + force 0x0002,pdata + istore 2,contw + setarg 12 + branch connect_req_update_byte_counts + +already_connected: + set1 0,debug + branch send_connection_res +connect_req_update_byte_counts: + iadd regB,regB + copy regC,pdata + isub regA,regC + branch l2cap_proc_signal_connect_req_rtn +l2cap_proc_signal_connect_req_rtn: + branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp: + ifetch 1,contr //identifier + copy pdata,queue + ifetch 2,contr //length + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr //remote cid + copy pdata,timeup + ifetch 2,contr //local cid + copy pdata,temp + bpatchx patch22_1,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_hid_int,zero + rtn + +l2cap_proc_signal_connect_rsp_sdp: + copy timeup,pdata + store 2,mem_sdp_remote_cid + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_sdp_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_connect_rsp_rfcomm: + copy timeup,pdata + store 2,mem_rfcomm_remote_CID + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_rfcomm_state + rtn +l2cap_proc_signal_connect_rsp_hid_int: + copy timeup,pdata + store 2,mem_hid_ctrl_remote_cid + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_interrupt_state + rtn +l2cap_proc_signal_connect_rsp_hid_ctrl: + copy timeup,pdata + store 2,mem_hid_int_remote_cid + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_control_state + rtn + +l2cap_proc_signal_config_req: + ifetch 1,contr//identifier + copy pdata,queue + ifetch 2,contr//length + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr//dest cid + copy pdata,temp + copy temp,regA + bpatchx patch22_2,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_config_req_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_config_req_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_config_req_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_config_req_hid_int,zero + branch l2cap_reject_command + //branch L2CAP_proc_signal_config_req_rtn +l2cap_proc_signal_config_req_sdp: + copy contw, timeup + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_sdp_state + copy timeup,contw + arg L2CAP_SDP_channel,timeup + fetch 2,mem_sdp_remote_cid + copy pdata,temp + branch l2cap_send_config_rsp +l2cap_proc_signal_config_req_hid_ctrl: + copy contw, timeup + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_control_state + copy timeup,contw + arg L2CAP_HID_Control_channel,timeup + fetch 2,mem_hid_ctrl_remote_cid + copy pdata,temp + branch l2cap_send_config_rsp +l2cap_proc_signal_config_req_hid_int: + copy contw, timeup + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_interrupt_state + copy timeup,contw + arg L2CAP_HID_Interrupt_channel,timeup + fetch 2,mem_hid_int_remote_cid + copy pdata,temp + branch l2cap_send_config_rsp +l2cap_proc_signal_config_req_rfcomm: + copy contw, timeup + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_rfcomm_state +// jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page + copy timeup,contw + arg L2CAP_RFCOMM_channel,timeup + fetch 2,mem_RFCOMM_remote_CID + copy pdata,temp +l2cap_send_config_rsp: + bpatchx patch22_3,mem_patch22 + setarg signal_config_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0006 + istore 2,contw + copy temp,pdata + istore 2,contw + force 0x00,pdata + istore 2,contw + force L2CAP_config_success,pdata + istore 2,contw + force 10,pdata + iadd regB,regB + //copy temp,pdata + storet 2,mem_config_req_dest_CID + copy queue,pdata + store 1,mem_config_identifier + force L2CAP_SDP_channel,pdata + icompare 0xff,timeup + branch l2cap_send_config_rsp_is_sdp,true + increase 1,pdata +l2cap_send_config_rsp_is_sdp: + //store 1,mem_send_config_req + rtn +l2cap_check_channel_state: + disable user + rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + rtnbit0 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + copy contr,contw + increase -1,contw + istore 1,contw + enable user + rtn +l2cap_send_config_req: +l2cap_send_config_req_sdp: + fetch 1,mem_sdp_state + call l2cap_check_channel_state + nbranch l2cap_send_config_req_rfcomm,user + jam L2CAP_SDP_channel,mem_send_config_req + fetch 2,mem_sdp_remote_cid + store 2,mem_config_req_dest_CID + branch l2cap_generate_config_req +l2cap_send_config_req_rfcomm: + fetch 1,mem_rfcomm_state + call l2cap_check_channel_state + nbranch l2cap_send_config_req_hid_ctrl,user + jam L2CAP_RFCOMM_channel,mem_send_config_req + fetch 2,mem_RFCOMM_remote_CID + store 2,mem_config_req_dest_CID + branch l2cap_generate_config_req +l2cap_send_config_req_hid_ctrl: + fetch 1,mem_hid_control_state + call l2cap_check_channel_state + nbranch l2cap_send_config_req_hid_int,user + jam L2CAP_HID_Control_channel,mem_send_config_req + fetch 2,mem_hid_ctrl_remote_cid + store 2,mem_config_req_dest_CID + branch l2cap_generate_config_req +l2cap_send_config_req_hid_int: + fetch 1,mem_hid_interrupt_state + call l2cap_check_channel_state + nrtn user//End of sending config req + jam L2CAP_HID_Interrupt_channel,mem_send_config_req + fetch 2,mem_hid_int_remote_cid + store 2,mem_config_req_dest_CID + //branch L2CAP_generate_config_req + +l2cap_generate_config_req: + bpatchx patch22_4,mem_patch22 + call l2cap_get_req_id + call l2cap_malloc_signal_channel + force 0,regB + call l2cap_get_signal_tx_payload + force signal_config_req,pdata + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0008 + istore 2,contw + fetch 2,mem_config_req_dest_CID + istore 2,contw + setarg 0x0000 + istore 2,contw + force 1,pdata + istore 1,contw + force 2,pdata + istore 1,contw + fetch 1,mem_send_config_req + beq L2CAP_RFCOMM_channel,l2cap_generate_config_req_rfcomm + setarg L2CAP_config_MTU_SDP + istore 2,contw + branch l2cap_generate_config_req_done +l2cap_generate_config_req_rfcomm: + setarg L2CAP_config_MTU_RFCOMM + istore 2,contw +l2cap_generate_config_req_done: + arg 0x0c,temp + storet 2,mem_l2cap_signal_tx_length + call l2cap_get_signal_tx_buff + fetch 2,mem_l2cap_signal_tx_length + istore 2,contw + force L2CAP_signal_channel,pdata + istore 2,contw + jam 0,mem_send_config_req +l2cap_proc_signal_config_req_rtn: + branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp: + increase 1,contr + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr //source cid + copy pdata,regA + bpatchx patch22_5,mem_patch22 + setarg L2CAP_SDP_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_hid_int,zero + increase 2,contr + ifetch 2,contr + iforce null + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_sdp: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_sdp_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_rfcomm: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_rfcomm_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_hid_ctrl: + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_hid_control_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_hid_int: + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_hid_interrupt_state + jam BT_EVT_HID_CONNECTED,mem_fifo_temp + branch ui_ipc_send_event + + + +l2cap_proc_signal_disconnect_req: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,timeup + copy regA,temp + call save_cont_pointers + bpatchx patch22_6,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_hid_int,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_proc_signal_disconnect_req_hid_ctrl: + copy timeup,temp + fetch 2,mem_hid_ctrl_remote_cid + isub temp,null + branch l2cap_disconnect_hid_control_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_proc_signal_disconnect_req_hid_int: + copy timeup,temp + fetch 2,mem_hid_int_remote_cid + isub temp,null + branch l2cap_disconnect_hid_interrupt_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_sdp: + copy timeup,temp + fetch 2,mem_sdp_remote_cid + isub temp,null + branch l2cap_disconnect_sdp_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_disconnect_hid_control_now: + call l2cap_reset_hid_ctrl_state + branch l2cap_send_disconnect_rsp_pkt +l2cap_disconnect_hid_interrupt_now: + call l2cap_reset_hid_int_state + fetch 2, mem_hid_ctrl_remote_cid + branch l2cap_send_disconnect_rsp_pkt, blank + //set the flag,hid channel close + //should we set here? + //call HID_mem_lock + //fetch 1, mem_hid_cb1 + //set1 HID_CB_APP_HID_DISCONNECTED,pdata + //store 1, mem_hid_cb1 + //call HID_mem_unlock + branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_sdp_now: + call l2cap_reset_sdp_channel_state + fetch 1,mem_upper_sm_ss + nbranch l2cap_send_disconnect_rsp_pkt,blank + //jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2 + //jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page + branch l2cap_send_disconnect_rsp_pkt +l2cap_proc_signal_disconnect_req_rfcomm: + copy timeup,temp + fetch 2, mem_RFCOMM_remote_CID + isub temp,null + branch l2cap_disconnect_rfcomm_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_disconnect_rfcomm_now: + call l2cap_reset_rfcomm_channel_state + branch l2cap_send_disconnect_rsp_pkt +l2cap_send_disconnect_rsp_pkt: + call load_cont_pointers + setarg signal_disconnect_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0004 + istore 2,contw + copy regA,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + force 8,pdata + branch l2cap_proc_signal_disconnect_req_rtn +l2cap_proc_signal_disconnect_req_err_rtn: + call load_cont_pointers + branch l2cap_proc_signal_disconnect_req_rtn +l2cap_proc_signal_disconnect_req_rtn: + iadd regB,regB + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_disconnect_rsp: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr + copy pdata,timeup + ifetch 2,contr + copy pdata,temp + call save_cont_pointers + bpatchx patch22_7,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_hid_int,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_rsp_err_rtn +l2cap_proc_signal_disconnect_rsp_sdp: + copy temp,regA + copy timeup,temp + fetch 2,mem_sdp_remote_cid + isub temp,null + call l2cap_reset_sdp_channel_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_rfcomm: + copy temp,regA + copy timeup,temp + fetch 2,mem_rfcomm_remote_CID + isub temp,null + call l2cap_reset_rfcomm_channel_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_hid_ctrl: + copy temp,regA + copy timeup,temp + fetch 2,mem_hid_ctrl_remote_cid + isub temp,null + call l2cap_reset_hid_ctrl_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_hid_int: + copy temp,regA + copy timeup,temp + fetch 2,mem_hid_int_remote_cid + isub temp,null + call l2cap_reset_hid_int_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_rtn: + call load_cont_pointers + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_disconnect_rsp_err_rtn: + branch l2cap_process_one_signal_rtn + +/* received an echo request from remote BD. Will echo the 1st 1 byte back, */ +l2cap_proc_signal_echo_req: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + iadd contr,contr + setarg 9 + istore 1,contw + copy queue,pdata + istore 1,contw + force 0x0000,pdata + istore 2,contw + force 4,pdata + iadd regB,regB + copy regC,pdata + isub regA,regC + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_echo_rsp: + branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_info_rsp: + branch l2cap_process_one_signal_rtn +l2cap_reject_command: + force 0,regB + call l2cap_get_signal_tx_payload + setarg signal_cmd_reject + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 2 + istore 2,contw + setarg cmd_not_understood + istore 2,contw + increase 6,regB + arg 4,regC + branch l2cap_process_one_signal_rtn + + + +l2cap_reset_rfcomm_channel_state: + setarg 0 + store 2,mem_RFCOMM_Tx_pkt_length + store 2,mem_RFCOMM_remote_CID + jam 0,mem_rfcomm_state + rtn +l2cap_reset_sdp_channel_state: + setarg 0 + store 2,mem_sdp_tx_pkt_length + store 2,mem_sdp_remote_cid + jam 0,mem_sdp_state + rtn +l2cap_reset_hid_ctrl_state: + setarg 0 + store 2,mem_hid_ctrl_remote_cid + jam 0,mem_hid_control_state + fetch 1,mem_hid_interrupt_state + beq 0,l2cap_reset_hid_disconnected + rtn + +l2cap_reset_hid_int_state: + setarg 0 + store 2,mem_hid_int_remote_cid + jam 0,mem_hid_interrupt_state + fetch 1,mem_hid_control_state + beq 0,l2cap_reset_hid_disconnected + rtn + +l2cap_reset_hid_disconnected: + jam BT_EVT_HID_DISCONNECTED,mem_fifo_temp + branch ui_ipc_send_event + +l2cap_disconnect_interrupt_req: + fetch 1,mem_CONTROL_tasks + set0 L2CAP_DISCONNECT_INTERRUPT, pdata + store 1,mem_CONTROL_tasks + fetch 2, mem_hid_int_remote_cid + rtn blank + call l2cap_malloc_signal_channel + fetch 2, mem_hid_int_remote_cid + copy pdata,regA + force L2CAP_HID_Interrupt_channel,regB + branch l2cap_generate_disconnect_req +l2cap_disconnect_control_req: + fetch 1,mem_CONTROL_tasks + set0 L2CAP_DISCONNECT_CONTROL, pdata + store 1,mem_CONTROL_tasks + fetch 2, mem_hid_ctrl_remote_cid + rtn blank + call l2cap_malloc_signal_channel + fetch 2, mem_hid_ctrl_remote_cid + copy pdata,regA + force L2CAP_HID_Control_channel,regB +l2cap_generate_disconnect_req: + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + force signal_disconnect_req,pdata + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0004 + istore 2,contw + copy regA,pdata + istore 2,contw + copy regB,pdata + istore 2,contw + force 0x08,temp //signal tx length in temp + branch ml2cap_send_signal + +ml2cap_send_signal_connect_req: + bpatchx patch23_0,mem_patch23 + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + setarg signal_connect_req + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0004 + istore 2,contw + copy temp,pdata //PSM + istore 2,contw + copy timeup,pdata + istore 2,contw + arg 8,temp + branch ml2cap_send_signal +ml2cap_send_signal_config_req: + bpatchx patch23_1,mem_patch23 + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + setarg signal_config_req + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0008 + istore 2,contw + /****modigy for nokia*****/ + copy temp,pdata + /*setarg 0x0040*/ + istore 2,contw + setarg 0x0000 + istore 2,contw + setarg 0x01 + istore 1,contw + setarg 0x02 + istore 1,contw + setarg L2CAP_config_MTU_RFCOMM + istore 2,contw + arg 0xc,temp + branch ml2cap_send_signal +ml2cap_send_signal_disconn_req: + bpatchx patch23_2,mem_patch23 + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + setarg signal_disconnect_req + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + increase 1,pdata + copy contw,regA + store 1,mem_ML2CAP_comm_id + copy regA,contw + istore 1,contw + setarg 0x0004 + istore 2,contw + copy temp,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + arg 0x8,temp + //branch ml2cap_send_signal + //Fall through +ml2cap_send_signal: + storet 2,mem_l2cap_signal_tx_length + copy temp,pdata + branch l2cap_malloc_discard,blank + call l2cap_get_signal_tx_buff + fetch 2,mem_l2cap_signal_tx_length + istore 2,contw //make sure that length is still in temp! + force L2CAP_signal_channel,pdata + istore 2,contw + rtn + +msdp_send_req_done: + fetch 2,mem_sdp_tx_pkt_length + branch assert,blank + call l2cap_get_sdp_tx_buff + fetch 2,mem_sdp_tx_pkt_length + istore 2,contw + fetch 2,mem_sdp_remote_cid + istore 2,contw + rtn +ml2cap_rx_multiplexing: + fetch 2, mem_l2cap_rx_pkt_length + branch l2cap_rx_reset_state,blank + bpatchx patch23_3,mem_patch23 + fetch 1,mem_l2cap_rx_cid + beq L2CAP_signal_channel,ml2cap_call_proc_signal + beq L2CAP_SDP_channel,ml2cap_call_proc_sdp + beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm + beq L2CAP_HID_Control_channel,l2cap_call_proc_hid + beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid + branch l2cap_rx_reset_state + +ml2cap_call_proc_signal: + bpatchx patch23_4,mem_patch23 + call l2cap_malloc_signal_channel + force 0,regB + call l2cap_get_signal_tx_payload + copy pdata,contw + fetch 2,mem_l2cap_rx_pkt_length + copy pdata,regC + fetch 2,mem_l2cap_payload_ptr + iforce contr +ml2cap_proc_one_comm_loop: + call ml2cap_proc_one_comm + increase -4,regC + nbranch ml2cap_proc_one_comm_loop,zero + copy regB,temp + call ml2cap_send_signal + branch l2cap_rx_reset_state + +ml2cap_proc_one_comm: + ifetch 1,contr + beq signal_connect_req,ml2cap_proc_signal_connect_req + beq signal_cmd_reject,ml2cap_proc_signal_cmd_reject + beq signal_connect_rsp,ml2cap_proc_signal_connect_rsp + beq signal_config_rsp,ml2cap_proc_signal_config_rsp + beq signal_config_req,ml2cap_proc_signal_config_req + beq signal_disconnect_rsp,ml2cap_proc_signal_disconn_rsp + beq signal_disconnect_req,ml2cap_proc_signal_disconn_req + beq signal_echo_req,l2cap_proc_signal_echo_req + beq signal_info_req,ml2cap_proc_signal_info_req + branch ml2cap_proc_send_reject + +ml2cap_proc_signal_connect_req: + call save_cont_pointers + //jam NO_RECONNECTION,memui_reconnect_mode + call load_cont_pointers + branch l2cap_proc_signal_connect_req +ml2cap_proc_signal_cmd_reject: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC +mvptr: + ifetch 1,contr + increase -1,regA + nbranch mvptr,zero + rtn +ml2cap_proc_signal_connect_rsp: + ifetch 1,contr //id + copy pdata,queue + ifetch 2,contr + copy pdata,regA //length + ifetch 2,contr + copy pdata,timeup //destination cid + ifetch 2,contr + copy pdata,temp //source cid + ifetch 2,contr // result + sub pdata,0,null + branch ml2cap_proc_signal_connect_rsp_sucessful,zero + beq L2CAP_connect_refused_PSM_unsupported,ml2cap_proc_signal_connect_refused_result + beq L2CAP_connect_refused_no_resources,ml2cap_proc_signal_connect_refused_result + branch ml2cap_proc_signal_connect_rsp_mnosucc +ml2cap_proc_signal_connect_refused_result: + jam BT_EVT_ML2CAP_CONN_REFUSED,mem_fifo_temp + call ui_ipc_send_event +ml2cap_proc_signal_connect_rsp_mnosucc: + ifetch 2,contr //reason + branch mnosucc +ml2cap_proc_signal_connect_rsp_sucessful: + call save_cont_pointers + //fetch 1,mem_ML2CAP_comm_id + //icompare 0xff,queue + //nbranch mnosucc1,true + bpatchx patch23_5,mem_patch23 + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_rfcomm,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_hid_int,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_hid_ctrl,zero + branch mnosucc +ml2cap_proc_signal_connect_rsp_sdp: + copy timeup,pdata + store 2,mem_sdp_remote_cid + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_sdp_state + branch mnosucc1 +ml2cap_proc_signal_connect_rsp_rfcomm: + copy timeup,pdata + store 2,mem_RFCOMM_remote_CID + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_rfcomm_state + branch mnosucc1 +ml2cap_proc_signal_connect_rsp_hid_ctrl: + copy timeup,pdata + store 2,mem_hid_ctrl_remote_cid + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_hid_control_state + branch mnosucc1 +ml2cap_proc_signal_connect_rsp_hid_int: + copy timeup,pdata + store 2,mem_hid_int_remote_cid + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_hid_interrupt_state + //branch mnosucc1 + +mnosucc1: + call load_cont_pointers +mnosucc: + copy regC,pdata + isub regA,regC + rtn + +ml2cap_proc_signal_config_rsp: + ifetch 1,contr // Ident + copy pdata,queue + ifetch 2,contr // SigLen + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr // DestnCID + copy pdata,timeup + ifetch 2,contr + ifetch 2,contr // Get the result value, check success + nbranch mcrsdone1,blank + call save_cont_pointers + //fetch 1,mem_ML2CAP_comm_id + //icompare 0xff,queue + //nbranch mcfrsdone,true + copy timeup,temp + bpatchx patch23_6,mem_patch23 + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_hid_int,zero +ml2cap_proc_signal_config_rsp_sdp: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_sdp_state + rtn +ml2cap_proc_signal_config_rsp_rfcomm: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_rfcomm_state + rtn +ml2cap_proc_signal_config_rsp_hid_ctrl: + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_hid_control_state + rtn +ml2cap_proc_signal_config_rsp_hid_int: + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_hid_interrupt_state + jam BT_EVT_HID_CONNECTED,mem_fifo_temp + branch ui_ipc_send_event + + +mcfrsdone: + call load_cont_pointers +mcrsdone1: + increase -6,regA +mloop2: + branch mcrsdone,zero + increase 1,contr + increase -1,regA + branch mloop2 +mcrsdone: + rtn +ml2cap_proc_signal_config_req: + ifetch 1,contr // Ident + copy pdata,queue + ifetch 2,contr // SigLen + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr // DestnCID + increase 2,contr + copy pdata,temp + setarg signal_config_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + increase 2,regA + copy regA,pdata + istore 2,contw + call save_cont_pointers + bpatchx patch23_7,mem_patch23 + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_config_req_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_config_req_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch ml2cap_proc_signal_config_req_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch ml2cap_proc_signal_config_req_hid_int,zero + branch mcfgrq_done +ml2cap_proc_signal_config_req_sdp: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_sdp_state + bbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,ml2cap_proc_signal_config_req_sdp_nsndreq + fetcht 1,mem_CONTROL_tasks + set1 L2CAP_init_Config_Req,temp + storet 1,mem_CONTROL_tasks + copy queue,pdata + increase 1,pdata + store 1,mem_config_identifier + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_sdp_state +ml2cap_proc_signal_config_req_sdp_nsndreq: + fetch 2,mem_sdp_remote_cid + store 2,mem_config_req_dest_CID + branch mcfgrq_done +ml2cap_proc_signal_config_req_rfcomm: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_rfcomm_state + fetch 2,mem_RFCOMM_remote_CID + branch mcfgrq_done +ml2cap_proc_signal_config_req_hid_ctrl: + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_hid_control_state + fetch 2,mem_hid_ctrl_remote_cid + branch mcfgrq_done +ml2cap_proc_signal_config_req_hid_int: + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_hid_interrupt_state + fetch 2,mem_hid_int_remote_cid + //branch mcfgrq_done + +mcfgrq_done: + copy pdata,timeup + call load_cont_pointers +/*******for Nokia**************/ + copy timeup,pdata + /*setarg 0x0040*/ + istore 2,contw + force 0x0000,pdata + istore 2,contw + force 0x0000,pdata + istore 2,contw + force 10,pdata + iadd regB,regB + increase -6,regA +mloop1: + branch mcrqdone,zero + ifetch 1,contr + istore 1,contw + increase 1,regB + increase -1,regA + branch mloop1 +mcrqdone: + rtn +ml2cap_proc_signal_disconn_req: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,timeup + call save_cont_pointers + bpatchx patch24_0,mem_patch24 + setarg L2CAP_SDP_channel + copy regA,temp + isub temp,null + branch ml2cap_proc_signal_disconn_sdp,zero + setarg L2CAP_HID_Control_channel + copy regA,temp + isub temp,null + branch ml2cap_proc_signal_disconn_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + copy regA,temp + isub temp,null + branch ml2cap_proc_signal_disconn_hid_int,zero + branch mclsrfc +ml2cap_proc_signal_disconn_sdp: + setarg 0x0000 + store 2,mem_sdp_tx_pkt_length + store 2,mem_sdp_remote_cid + store 1,mem_sdp_state + branch mclssdp +ml2cap_proc_signal_disconn_hid_ctrl: + call l2cap_reset_hid_ctrl_state + branch mclssdp +ml2cap_proc_signal_disconn_hid_int: + call l2cap_reset_hid_int_state + //call HID_mem_lock + //fetch 1, mem_hid_cb1 + //set1 HID_CB_APP_HID_DISCONNECTED,pdata + //store 1, mem_hid_cb1 + //call HID_mem_unlock + branch mclssdp +mclsrfc: + setarg 0x0000 + store 2,mem_RFCOMM_Tx_pkt_length +mclssdp: + call load_cont_pointers + setarg signal_disconnect_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0004 + istore 2,contw + copy regA,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + force 8,pdata + iadd regB,regB + rtn + +ml2cap_proc_signal_disconn_rsp: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,timeup + ifetch 2,contr + copy pdata,temp + call save_cont_pointers + bpatchx patch24_1,mem_patch24 + fetch 1,mem_ML2CAP_comm_id + icompare 0xff,queue + nbranch mdisdone,true + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_disconn_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_disconn_rsp_rfcomm,zero + branch mdisdone +ml2cap_proc_signal_disconn_rsp_sdp: + jam 0,mem_sdp_remote_cid + jam 0,mem_sdp_state + branch mdisdone +ml2cap_proc_signal_disconn_rsp_rfcomm: + // + // +mdisdone: + call load_cont_pointers + copy regC,pdata + isub regA,regC + rtn + +ml2cap_proc_send_reject: + setarg signal_cmd_reject + istore 1,contw + ifetch 1,contr + istore 1,contw + setarg 0x0002 + istore 2,contw + setarg 0x0000 + istore 2,contw + setarg 0x0006 + iadd regB,regB + force 4,regC + rtn + +//l2cap command id, 0 is not allowed +l2cap_get_req_id: + fetch 1,mem_ML2CAP_comm_id + increase 1,pdata + bne 0,l2cap_get_req_id_ok + increase 1,pdata +l2cap_get_req_id_ok: + store 1,mem_ML2CAP_comm_id + rtn + + +/*********************************************************/ +//char* malloc(short len) +//input: regA -> len +//rtn: regB -> pbuff;return from pdata +//val: queue -> i +//val: timeup -> buff_cnt +/*********************************************************/ +l2cap_malloc: + bpatchx patch24_2,mem_patch24 + arg 0,regb + call l2cap_malloc_is_fifo_full + nbranch assert,blank//assert when fifo full + call l2cap_malloc_get_full_map + arg mem_tx_buff0,regB//pbuff = buff0; + arg 0,queue // i = 0; +l2cap_malloc_loop: + fetcht 1,mem_used_map + qisolate1 temp + branch l2cap_malloc_next,true//if(1 == (used_map & (1 << i)))goto next; + call l2cap_malloc_enough + sub timeup,0,null// (0 - timeup) + branch l2cap_malloc_next,positive//if(buff_cnt <= 0)goto next; + call l2cap_malloc_into_fifo + branch l2cap_malloc_rtn//return (pbuff); +l2cap_malloc_next: + increase 128,regB//pbuff += BUFF_SIZE;//point to next buff + increase 1,queue + setarg 8//BUFF_MAX_COUNT + isub queue,null //BUFF_MAX_COUNT - i + branch l2cap_malloc_loop,positive//while(i < buff_max_count) + arg 0,regB//return NULL +l2cap_malloc_rtn: + copy regB,pdata + branch assert,blank + rtn//return pointer via pdata + +/*********************************************************/ +//void* l2cap_malloc_fifo_out(void) +//output:len -> temp +//output:ptr ->pdata +//only get ptr,not free +/*********************************************************/ +l2cap_malloc_fifo_out: + bpatchx patch24_3,mem_patch24 + call l2cap_malloc_fifo_get_first_ptr + increase 1,contr + ifetch 2,contr //ptr ->pdata + rtn + +/*********************************************************/ +//void free_first_buff_in_fifo(void) +//only free the first one +/*********************************************************/ +l2cap_malloc_free: + bpatchx patch24_4,mem_patch24 + call l2cap_malloc_fifo_get_first_ptr + copy contr,contw + copy contr,temp + setarg 0 + istore 3,contw + rtn +/*********************************************************/ +//void l2cap_malloc_discard(void) +//discard the latest malloc +/*********************************************************/ +l2cap_malloc_discard: + bpatchx patch24_5,mem_patch24 + call l2cap_malloc_is_fifo_empty + branch assert,blank + fetch 3,mem_tx_fifo2 + store 3,mem_tx_fifo3 + fetch 3,mem_tx_fifo1 + store 3,mem_tx_fifo2 + fetch 3,mem_tx_fifo0 + store 3,mem_tx_fifo1 + rtn +/*********************************************************/ +//bool fifo_is_full(void) +//blank == 1: not full +//blank == 0: full +/*********************************************************/ +l2cap_malloc_is_fifo_full: + bpatchx patch24_6,mem_patch24 + fetch 3,mem_tx_fifo0 + rtn +/*********************************************************/ +//bool fifo_nearly_full(void) +//blank == 1: nearly full +//blank == 0: not nearly full +/*********************************************************/ +l2cap_malloc_is_fifo_nearly_full: + bpatchx patch24_7,mem_patch24 + fetch 3,mem_tx_fifo1 + rtn +/*********************************************************/ +//bool fifo_is_empty(void) +//blank == 1: empty +//blank == 0: not empty +/*********************************************************/ +l2cap_malloc_is_fifo_empty: + bpatchx patch25_0,mem_patch25 + fetch 3,mem_tx_fifo3 + rtn +/*********************************************************/ +//char* l2cap_malloc_fifo_get_first_ptr(void) +//output:contr -->ptr +/*********************************************************/ +l2cap_malloc_fifo_get_first_ptr: + call l2cap_malloc_is_fifo_empty + branch assert,blank // fifo is empty + arg mem_tx_fifo0,contr +l2cap_malloc_free_loop: + ifetch 3,contr + branch l2cap_malloc_free_loop,blank + increase -3,contr + rtn + +/*********************************************************/ +//char* l2cap_malloc_get_full_map(void) +//output:mem_used_map -->full_map +//add all maps into one +/*********************************************************/ +l2cap_malloc_get_full_map: + bpatchx patch25_1,mem_patch25 + arg 4,loopcnt + arg mem_tx_fifo0_map,contr + arg 0,temp +l2cap_malloc_get_full_map_loop: + ifetch 3,contr + and pdata,0xff,pdata + ior temp,temp + loop l2cap_malloc_get_full_map_loop + storet 1,mem_used_map + rtn +/*********************************************************/ +//void buff_into_fifo(char buff_index, char buff_cnt, short len) +//input: regA -> len +//input: regC -> buff_index +//input: timeup -> buff_cnt +//val:temp -> (fifo->map) +/*********************************************************/ +l2cap_malloc_into_fifo: + bpatchx patch25_2,mem_patch25 + call l2cap_malloc_is_fifo_full + nbranch assert,blank //fifo full + call l2cap_malloc_is_fifo_empty + branch l2cap_malloc_into_fifo_no_push,blank//fifo empty, no need to push + fetch 3,mem_tx_fifo1 + store 3,mem_tx_fifo0 + ifetch 3,contr//mem_tx_fifo2 + istore 3,contw//mem_tx_fifo1 + ifetch 3,contr//mem_tx_fifo3 + istore 3,contw//mem_tx_fifo2 + setarg 0 + istore 3,contw//mem_tx_fifo3 +l2cap_malloc_into_fifo_no_push: + arg 0,temp + copy timeup,pdata + iadd queue,pdata +l2cap_malloc_into_fifo_loop: + qset1 temp//fifo->map |= 1 << i; + increase 1,queue + isub queue,null + nbranch l2cap_malloc_into_fifo_loop,zero + //map in temp + lshift8 regB,pdata + ior temp,pdata + store 3,mem_tx_fifo3 + rtn + +/*********************************************************/ +//char is_size_enough(char buff_index, short len) +//input: regA -> len +//input: queue -> buff_index +//rtn: timeup -> buff_cnt +//val: max_size_fom_buff_index -> temp +//val: i -> loopcnt +/*********************************************************/ +l2cap_malloc_enough: + bpatchx patch25_3,mem_patch25 + call l2cap_malloc_get_full_map + copy queue,regC//restore buff_index to regC + arg 0,temp + arg 0,timeup//default return val + //increase 1,queue +l2cap_malloc_enough_loop: + copy queue,pdata + beq 8,l2cap_malloc_enough_end + fetch 1,mem_used_map + qisolate1 pdata + branch l2cap_malloc_enough_end,true + increase 128,temp + increase 1,queue + copy regA,pdata + isub temp,null + branch l2cap_malloc_enough_end,zero//(max_size_fom_buff_index == len) + branch l2cap_malloc_enough_loop,positive//(max_size_fom_buff_index < len) +l2cap_malloc_enough_end: + copy temp,pdata + isub regA,null + nbranch l2cap_malloc_enough_rtn,positive// max_size_fom_buff_index - len > 0 + copy queue,pdata//i + copy regC,temp//buff_index + isub temp,timeup//return (i - buff_index) +l2cap_malloc_enough_rtn: + copy regC,queue//restore buff_index to queue + rtn + + +l2cap_malloc_signal_channel: + bpatchx patch25_4,mem_patch25 + arg L2CAP_SIGNAL_MALLOC_SIZE,regA + call l2cap_malloc + store 2,mem_l2cap_signal_tx_buff_ptr + increase 4,pdata + store 2,mem_l2cap_signal_tx_payload_ptr + setarg 0 + store 2,mem_l2cap_signal_tx_length + rtn + +l2cap_get_signal_tx_buff: + fetch 2,mem_l2cap_signal_tx_buff_ptr + branch l2cap_util_pdata_to_contw + +l2cap_get_signal_tx_payload: + fetch 2,mem_l2cap_signal_tx_payload_ptr + branch l2cap_util_pdata_to_contw + + +l2cap_malloc_sdp_channel: + bpatchx patch25_5,mem_patch25 + arg SDP_MALLOC_SIZE,regA + call l2cap_malloc + store 2,mem_sdp_tx_buff_ptr + increase 4,pdata + store 2,mem_sdp_tx_payload_ptr + setarg 0 + store 2,mem_sdp_tx_pkt_length + rtn + +l2cap_get_sdp_tx_buff: + fetch 2,mem_sdp_tx_buff_ptr + branch l2cap_util_pdata_to_contw + +l2cap_get_sdp_tx_payload: + fetch 2,mem_sdp_tx_payload_ptr + branch l2cap_util_pdata_to_contw + + +l2cap_malloc_rfcomm_channel: + bpatchx patch25_6,mem_patch25 + call push_stack + jam RFCOMM_MALLOC_FAIL,mem_rfcomm_malloc_fail_flag + call l2cap_malloc_is_fifo_full + nrtn blank + arg RFCOMM_MALLOC_SIZE,regA + call l2cap_malloc + store 2,mem_rfcomm_tx_buff_ptr + increase 4,pdata + store 2,mem_rfcomm_tx_payload_ptr + setarg 0 + store 2,mem_rfcomm_tx_pkt_length + jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag + branch pop_stack + +l2cap_get_rfcomm_tx_buff: + fetch 2,mem_rfcomm_tx_buff_ptr + branch l2cap_util_pdata_to_contw + +l2cap_util_pdata_to_contw: + branch assert,blank + copy pdata,contw + rtn + + +l2cap_lpm_save_calc_len: + bpatchx patch25_7,mem_patch25 + arg 0,regb + arg mem_tx_fifo0_map,rega + increase -2,rega +l2cap_lpm_save_calc_len_loop: + increase 2,rega + setarg mem_tx_fifo_end + isub rega,null + branch l2cap_lpm_save_calc_len_end,zero //end of 2lcap tx fifo + ifetch 1,rega + increase 1,rega + branch l2cap_lpm_save_calc_len_loop,blank + ifetcht 2,rega + ifetch 2,temp + iadd regb,regb + increase 4,regb //l2cap header len + branch l2cap_lpm_save_calc_len_loop +l2cap_lpm_save_calc_len_end: + copy regb,pdata + rtn + + +l2cap_lpm_get_wake_lock: + arg wake_lock_l2cap_tx,queue + branch lpm_get_wake_lock + +l2cap_lpm_put_wake_lock: + arg wake_lock_l2cap_tx,queue + branch lpm_put_wake_lock + +l2cap_lpm_save_txbuf: + bpatchx patch26_0,mem_patch26 + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + rtn blank + call l2cap_lpm_save_calc_len + arg l2cap_lpm_txbuf_len,temp + isub temp,null + branch l2cap_lpm_get_wake_lock,positive //no enougth space to save l2cap tx data + call l2cap_lpm_put_wake_lock + arg mem_l2cap_lpm_txbuf,contw + arg mem_tx_fifo0,rega +l2cap_lpm_save_txbuf_loop: + setarg mem_tx_fifo_end + isub rega,null + rtn zero //end of 2lcap tx fifo + ifetch 1,rega //mem_tx_fifoX_map + increase 1,rega + nbranch l2cap_lpm_save_txbuf_nempty,blank + istore 2,contw // length = 0 + increase 2,rega + branch l2cap_lpm_save_txbuf_loop +l2cap_lpm_save_txbuf_nempty: + ifetch 2,rega //ptr + increase 2,rega + copy pdata,contr + ifetch 2,contr //l2cap len + istore 2,contw + copy pdata,loopcnt + increase 2,loopcnt //add CID len + call memcpy + branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_load_txbuf: + bpatchx patch26_1,mem_patch26 + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + rtn blank + arg mem_tx_fifo0_ptr,rega + increase -3,rega //mem_tx_fifo0_ptr -3 + arg mem_l2cap_lpm_txbuf,contr +l2cap_lpm_load_txbuf_loop: + increase 3,rega //mem_tx_fifoX_ptr + setarg mem_tx_fifo_end+1 + isub rega,null + rtn zero //end of 2lcap tx fifo + ifetch 2,contr + branch l2cap_lpm_load_txbuf_loop,blank + increase 4,pdata //l2cap header len + copy pdata,loopcnt + copy contr,regb + ifetch 2,rega //ptr + copy pdata,contw + copy regb,contr + increase -2,contr + call memcpy + branch l2cap_lpm_load_txbuf_loop + + + + +//******************************************// +//*************LE INIT ****************// +//******************************************// + + +le_init_conn: + bpatchx patch26_2,mem_patch26 + disable wake + jam 1,mem_le_conn_handle + jam 3,mem_le_state + jam 1,mem_le_arq + setarg -1 + store 2,mem_le_event_count + force 0,pdata + store 1,mem_le_ch + store 1,mem_le_op + store 3,mem_sniff_rcv + store 3,mem_sniff_lost + store 5,mem_le_pcnt_tx + set1 39,pdata + store 5,mem_le_pcnt_rx + jam 1,mem_le_txheader + jam 0,mem_le_txlen + branch le_supervision_flush + +le_init_master: + bpatchx patch26_3,mem_patch26 + enable master + jam lemode_master,mem_le_mode + jam 1,mem_le_att_handle + jam 1,mem_le_search_handle_start + setarg 0xffff + store 2,mem_le_search_handle_end + force 0,pdata + store 5,mem_le_pcnt_rx + set1 39,pdata + store 5,mem_le_pcnt_tx + branch le_init_conn + + +le_init_slave: + bpatchx patch26_4,mem_patch26 + disable master + setarg 0x17 + store 2,mem_le_remote_mtu + jam lemode_slave,mem_le_mode + jam 0,mem_le_adv_enable + jam 0,mem_lpm_current_mult + jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state + jam FLAG_LE_ENC_NULL,mem_le_enc_state + fetch 2,mem_le_superto + store 2,mem_le_init_superto + fetch 2,mem_le_tsniff + mul32 pdata,5,pdata + rshift4 pdata,pdata + store 2,mem_le_superto // vol.6 part B 4.5.2 only 6*conninterval before establish + branch le_init_conn + + +//******************************************// +//*************LE main process*********// +//******************************************// +le_dispatch: + call le_enable + call le_scan + call le_adv + branch le_disable + +le_conn_dispatch: + bpatchx patch26_5,mem_patch26 + call le_enable + call app_process_ble + fetch 1,mem_le_mode + beq lemode_master,le_master_dispatch + branch le_slave_dispatch + +//******************************************// +//***********LE master process*********// +//******************************************// + +le_master_dispatch: + bpatchx patch26_6,mem_patch26 + enable master + call le_supervision_update + branch le_master_disconn,positive + call check_ble_disabled + call le_setup + call le_prepare_tx + disable match + call le_transmit_receive_sifs + nrtn match + bpatchx patch26_7,mem_patch26 + fetch 1,mem_le_conn_rcv + increase 1,pdata + store 1,mem_le_conn_rcv + call le_acknowledge + disable master + rtn + +le_master_disconn: + call le_disconnect + disable master + rtn + +//******************************************// +//***********LE slave process***********// +//******************************************// +le_slave_dispatch: + bpatchx patch27_0,mem_patch27 + jam 0,mem_le_md_count + call sp_calc_sequence_256 + call le_secure_connect_sm + disable attempt + call le_supervision_update + branch le_slave_disconn,positive + call check_ble_disabled + call le_setup + call le_receive_slave + nbranch le_slave_unsync,sync // vol.6 part B 4.5.1 respond even crc error + call le_got_first_packet + branch le_slave_match,match + branch le_slave_cont + + +le_slave_match: + bpatchx patch27_1,mem_patch27 + fetch 1,mem_le_md_count + pincrease 1 + store 1,mem_le_md_count + beq LE_MD_MAX_COUNT,le_slave_cont + call le_acknowledge + call le_prepare_tx + call le_transmit_norx + call le_parse + fetch 2,mem_cb_ble_transmit + call callback_func + call le_check_md + branch le_slave_more_data,user +le_slave_cont: + bpatchx patch27_2,mem_patch27 + call le_pairing_sm + call le_check_paring_time + call check_51cmd + fetch 1,mem_le_op + bbit1 op_disconn,le_slave_disconn +le_slave_unsync: + bpatchx patch27_3,mem_patch27 + call le_lpm_set_mult + call le_update_channel_map + call le_update_param + branch calc_clke_offset + + +le_check_md: + disable user + bmark1 mark_ble_rx_md,enable_user + bmark1 mark_ble_tx_md,enable_user + rtn + + +le_slave_more_data: + bpatchx patch27_4,mem_patch27 + enable attempt + call le_transmit_receive_sifs_notx + branch le_slave_match,match + branch le_slave_cont + +le_slave_disconn: + + //fall through +le_disconnect: + bpatchx patch27_5,mem_patch27 + call le_clear_connection_info + call app_disconn_reason_collect_ble + call sp_initialize_256 + jam BT_EVT_LE_DISCONNECTED,mem_fifo_temp + branch ui_ipc_send_event + +le_clear_connection_info: + setarg 0 + store 9,mem_le_tx_buff_used + jam 0,mem_le_conn_handle + jam lemode_idle,mem_le_mode + jam 0,mem_le_state + jam FLAG_LE_ENC_NULL,mem_le_enc_state + jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state + rtn + +le_got_first_packet: + bpatchx patch27_6,mem_patch27 + fetch 1,mem_le_conn_rcv + increase 1,pdata + store 1,mem_le_conn_rcv + fetch 1,mem_le_state + rtnbit1 lestate_got_first_packet + set1 lestate_got_first_packet + store 1,mem_le_state + fetch 2,mem_le_init_superto + store 2,mem_le_superto + setarg 0 + store 4,mem_le_transmit_window + rtn + + +le_enable: + bpatchx patch27_7,mem_patch27 + hjam 0x36,0x90f /*For BLE, tune AGC_gain_offset, Max added*/ + hjam 0x5f,0x90b //for BLE + enable le + hjam 7,rfen_ulp /* enable ulp */ + call check_ble_disabled + fetch 1,mem_250k_freq_enable //default: 0 + rtn blank + hjam 0xb8,0x90a + rtn + +le_disable: + bpatchx patch28_0,mem_patch28 + hjam 0x2e,0x90f /*For BR/EDR, tune AGC_gain_offset, Max added*/ + hjam 0xff,0x90b //for EDR&BR + disable le + hjam 3,rfen_ulp + arg 0,stop_watch + rtn + +le_prep: + disable enable_crc + disable enable_white + fetch 3,mem_le_crcinit + iforce crc24_init + fetch 1,mem_le_ch_mapped + reverse pdata,temp + set1 1,temp + rshift temp,white_init + rtn + + +lerx_setfreq: + call le_setfreq + call set_freq_rx + setarg param_pll_setup + call sleep + branch rf_rx_enable + +letx_setfreq: + branch txon,match +letx_setfreq0: + call le_setfreq + branch set_freq_tx +le_setfreq: + bpatchx patch28_1,mem_patch28 + call set_sync_on + fetch 1, mem_le_testtype + nbranch le_ctf_test,blank + fetch 1,mem_le_ch_mapped + sub pdata,36,null + branch le_ctf_normal,positive + force 0,temp + rtneq 37 + force 24,temp + rtneq 38 + force 78,temp + rtn + +le_ctf_normal: + sub pdata,10,null + branch le_ctf_low,positive + increase 1,pdata + +le_ctf_low: + lshift pdata,pdata + add pdata,2,temp + rtn + +le_ctf_test: + fetch 1,mem_le_ch_mapped + lshift pdata,temp + rtn + +le_sca_map: + arg 500,temp + rtn blank + arg 250,temp + rtneq 1 + arg 150,temp + rtneq 2 + arg 100,temp + rtneq 3 + arg 75,temp + rtneq 4 + arg 50,temp + rtneq 5 + arg 40,temp + rtneq 6 + arg 20,temp + rtn + + + +le_adv_access: + setarg 0x8e89be + lshift8 pdata,pdata + or_into 0xd6,pdata + iforce access + setarg 0x555555 + store 3,mem_le_crcinit + rtn + +le_setup: + bpatchx patch28_2,mem_patch28 + enable swfine + fetch 4,mem_le_access + iforce access + call le_map_channel + setarg 0x200 + branch le_setup_master,master + fetch 2,mem_le_receive_window + rshift pdata,pdata +le_setup_master: + arg param_pll_setup,temp + iadd temp,pdata + call ahead_window + deposit clke + store 6,mem_le_rxon_ts + rtn + +le_next_adv_channel: + bpatchx patch28_3,mem_patch28 + fetch 1,mem_le_ch_mapped + beq 37,le_next_adv_channel_curr_channel_37 + beq 38,le_next_adv_channel_curr_channel_38 + beq 39,le_next_adv_channel_curr_channel_39 + branch le_next_adv_channel_curr_channel_39 + +le_next_adv_channel_curr_channel_37: + fetcht 1,mem_le_adv_channel_map + isolate1 BIT_ADV_CHANNEL_MAP_38,temp //check 38 channel enable + branch set_le_next_adv_channel_38,true + isolate1 BIT_ADV_CHANNEL_MAP_39,temp //check 39 channel enable + branch set_le_next_adv_channel_39,true + branch set_le_next_adv_channel_37 + + +le_next_adv_channel_curr_channel_38: + fetcht 1,mem_le_adv_channel_map + isolate1 BIT_ADV_CHANNEL_MAP_39,temp //check 39 channel enable + branch set_le_next_adv_channel_39,true + isolate1 BIT_ADV_CHANNEL_MAP_37,temp //check 37 channel enable + branch set_le_next_adv_channel_37,true + branch set_le_next_adv_channel_38 + + +le_next_adv_channel_curr_channel_39: + fetcht 1,mem_le_adv_channel_map + isolate1 BIT_ADV_CHANNEL_MAP_37,temp //check 37 channel enable + branch set_le_next_adv_channel_37,true + isolate1 BIT_ADV_CHANNEL_MAP_38,temp //check 38 channel enable + branch set_le_next_adv_channel_38,true + branch set_le_next_adv_channel_39 + + + +set_le_next_adv_channel_37: + jam 37,mem_le_ch_mapped + fetch 1,mem_le_adv_channel_map_temp + set1 BIT_ADV_CHANNEL_MAP_37,pdata + store 1,mem_le_adv_channel_map_temp + rtn + +set_le_next_adv_channel_38: + jam 38,mem_le_ch_mapped + fetch 1,mem_le_adv_channel_map_temp + set1 BIT_ADV_CHANNEL_MAP_38,pdata + store 1,mem_le_adv_channel_map_temp + rtn + +set_le_next_adv_channel_39: + jam 39,mem_le_ch_mapped + fetch 1,mem_le_adv_channel_map_temp + set1 BIT_ADV_CHANNEL_MAP_39,pdata + store 1,mem_le_adv_channel_map_temp + rtn + + + +le_context_nexthop: + bpatchx patch28_4,mem_patch28 + add rega,coffset_mode,contr + ifetch 1,contr + rtnbit0 mode_le + add rega,coffset_le_event_cnt,contw + ifetch 2,contw + increase 1,pdata + istore 2,contw + add rega,coffset_le_hop,contr + ifetch 1,contr + add rega,coffset_le_ch,contw + ifetcht 1,contw + iadd temp,pdata + sub pdata,36,null + branch le_nexthop_nowrap,positive + increase -37,pdata +le_nexthop_nowrap: + istore 1,contw + rtn + + +le_calc_channel_map: + bpatchx patch28_5,mem_patch28 + fetch 5,mem_le_channel_map + force 0,temp + force 37,loopcnt +le_count_channels_loop: + bbit0 0,le_count_channels_notused + increase 1,temp +le_count_channels_notused: + rshift pdata,pdata + loop le_count_channels_loop + add temp,-1,pdata + store 1,mem_le_channels + rtn + +le_map_channel: + bpatchx patch28_6,mem_patch28 + fetch 1,mem_le_ch + iforce queue + fetcht 5,mem_le_channel_map + qisolate1 temp + branch le_map_channel_end,true +le_map_channel_next: + bpatchx patch28_7,mem_patch28 + fetch 1,mem_le_channels + isub queue,pdata + branch le_map_channel_cont,positive + sub pdata,-1,queue + branch le_map_channel_next +le_map_channel_cont: + copy queue,loopcnt + force 0,queue +le_map_channel_loop: + qisolate1 temp + branch le_map_channel_skip,true + increase 1,loopcnt +le_map_channel_skip: + deposit loopcnt + branch le_map_channel_end,blank + increase 1,queue + increase -1,loopcnt + branch le_map_channel_loop +le_map_channel_end: + deposit queue + store 1,mem_le_ch_mapped + rtn + + +le_wait_tx: + branch le_wait_master,master + until null,timeout + rtn + +le_wait_master: + arg 0xea0,timeup + until clkn_rt,meet + rtn + +le_receive_adv: + disable swfine + fetch 2,mem_le_scan_window + copy pdata,timeup + branch le_receive_packet + + +le_receive_slave: + bpatchx patch29_0,mem_patch29 + enable swfine + fetch 2,mem_le_receive_window + fetcht 4,mem_le_transmit_window + iadd temp,timeup +le_receive_packet: + call lerx_setfreq +le_receive_rxon: + bpatchx patch29_1,mem_patch29 + call le_prep + disable match + enable decode_fec0 + enable is_rx + disable is_tx + copy timeup,stop_watch + correlate null,timeout + branch le_receive_on_attempt,attempt + copy clke,temp + storet 6,mem_sync_clke +le_receive_on_attempt: + nbranch end_of_packet,sync + branch le_receive_skip,attempt + arg param_clke_cal_le,clke_rt + copy bt_clk,clke_bt + fetch 1,mem_le_state + bbit0 lestate_got_first_packet,le_receive_skip + call lpm_adjust_clk,wake +le_receive_skip: + bpatchx patch29_2,mem_patch29 + call save_rssi + enable enable_white + enable enable_crc + parse demod,bucket,8 + rshift3 pwindow,pdata + store 1,mem_le_rxbuf + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + and pdata,0x3f,loopcnt + branch lerx_nopayload,zero + +lerx_loop: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop lerx_loop + +lerx_nopayload: + bpatchx patch29_3,mem_patch29 + parse demod,bucket,24 + enable swfine + arg param_sifs,stop_watch // start SIFS timer after last bit of crc + rshift32 pdata,pdata + rshift16 pdata,pdata + istore 3,contw + branch end_of_packet,crc_failed + enable match + fetch 1,mem_last_freq + add pdata,0,rega // ble 2M Medium Frequency + call rf_write_freq /* set frequency to tx mode freq */ + disable decode_fec0 + branch set_sync_on + +le_transmit_receive_sifs: + bpatchx patch29_4,mem_patch29 + call le_transmit +le_transmit_receive_sifs_notx: + fetcht 1,mem_last_freq + call set_freq_rx + call rf_rx_enable + enable swfine + arg 5500,timeup + branch le_receive_rxon + +le_transmit_norx: + call le_transmit + branch end_of_packet + +le_transmit: + bpatchx patch29_5,mem_patch29 + call le_prep + call letx_setfreq + branch le_transmit0 + +le_transmit0: + set1 TXGFSK,radio_ctrl + enable encode_fec0 + enable is_tx + disable is_rx + call le_wait_tx + rshift16 access,pdata + rshift8 pdata,pdata + rshift4 pdata,pdata + inject mod,40 + enable enable_white + enable enable_crc + bpatchx patch29_6,mem_patch29 + fetch 1,mem_le_txheader + inject mod,8 + ifetch 1,contr + and pdata,0x3f,loopcnt + inject mod,8 + branch letr_nopayload,zero +letr_loop: + ifetch 1,contr + inject mod,8 + loop letr_loop + +letr_nopayload: + enable enable_parity + inject mod,24 + disable enable_parity + until null,tx_clear + nop 100 /* flush out the last bit */ + disable encode_fec0 + rtn + +le_send_adv_ind: + bpatchx patch29_7,mem_patch29 + fetch 1,mem_le_adv_type + beq ADV_DIRECT_IND,le_send_adv_direct_ind + fetch 1,mem_le_adv_own_addr_type + lshift4 pdata,pdata + lshift2 pdata,pdata + store 1,mem_le_txheader + fetcht 1,mem_le_adv_data_len + add temp,6,pdata + store 1,mem_le_txlen + fetch 6,mem_le_lap + store 6,mem_le_txpayload + copy temp,loopcnt + arg mem_le_adv_data,contr + call memcpy_fast + branch le_send_adv_transmit +le_send_adv_direct_ind: + fetch 1,mem_le_adv_direct_addr_type + lshift4 pdata,pdata + lshift2 pdata,pdata + increase 1,pdata + store 1,mem_le_txheader + setarg 12 + store 1,mem_le_txlen + fetch 6,mem_le_lap + store 6,mem_le_txpayload + fetch 6,mem_hci_plap + istore 6,contw +le_send_adv_transmit: + bpatchx patch2a_0,mem_patch2a + fetch 1,mem_le_adv_transmit + increase 1,pdata + store 1,mem_le_adv_transmit + arg 1800,stop_watch + disable match + branch le_transmit_receive_sifs + +le_send_scan_request: + bpatchx patch2a_1,mem_patch2a + fetch 1,mem_le_scan_type + rtnne LE_SCAN_TYPE_ACTIVE + fetch 1,mem_le_adv_transmit + increase 1,pdata + store 1,mem_le_adv_transmit + arg 0x0c03,temp// length + SCAN_REQ PDU + fetch 1,mem_le_scan_own_addr_type + nsetflag blank,LE_SENDER_ADDR_BIT,temp + copy regA,pdata + nsetflag blank,LE_RECEIVER_ADDR_BIT,temp + storet 2,mem_le_txheader + fetch 6,mem_le_lap + istore 6,contw + fetch 6,mem_le_plap + istore 6,contw + branch le_transmit_receive_sifs + + +le_send_scan_response: + bpatchx patch2a_2,mem_patch2a + arg SCAN_RSP,temp + fetch 1,mem_le_adv_own_addr_type + nsetflag blank,LE_SENDER_ADDR_BIT,temp + storet 1,mem_le_txheader + fetcht 1,mem_le_scan_data_len + add temp,6,pdata + store 1,mem_le_txlen + fetch 6,mem_le_lap + store 6,mem_le_txpayload + arg mem_le_scan_data,contr + copy temp,loopcnt + call memcpy_fast + call le_transmit_norx + branch le_adv_not_match + +le_connect_request: + bpatchx patch2a_3,mem_patch2a + force -1,pdata + setsect 2,1 + store 5,mem_le_channel_map + call le_calc_channel_map + force 4,loopcnt + arg mem_le_access,contw + call generate_random_loop + fetch 2,mem_le_timeout + store 2,mem_le_superto +le_con_req_hop_retry: + random pdata + and_into 0xf,pdata + sub pdata,4,null + branch le_con_req_hop_retry,positive + store 1,mem_le_hop + store 1,mem_tmp1 + bpatchx patch2a_4,mem_patch2a + fetcht 2,mem_le_conn_interval + storet 2,mem_le_tsniff + copy temp,regc // tsniff in regc + add clkn_bt,7,pdata // leave space for offset + idiv regc + call wait_div_end + remainder rega + isub rega,pdata + iadd regc,pdata + fetcht 2,mem_le_dsniff + iadd temp,pdata + store 4,mem_le_anchor + isub clkn_bt,rega + increase -6,rega // window offset + arg 0x2205,regb // length & CONN_REQ PDU + fetch 1,mem_le_conn_own_addr_type + nsetflag blank,LE_SENDER_ADDR_BIT,regb + fetch 1,mem_le_conn_peer_addr_type + nsetflag blank,LE_RECEIVER_ADDR_BIT,regb + copy regb,pdata + store 2,mem_le_txheader + fetch 6,mem_le_lap + istore 6,contw//own addr + fetch 6,mem_le_plap + istore 6,contw// peer addr + fetch 4,mem_le_access + istore 4,contw + random pdata + istore 2,contw /* crc init */ + random pdata + istore 1,contw + force 2,pdata /* window size */ + istore 1,contw + rshift2 rega,pdata + istore 2,contw /* window offset */ + rshift2 regc,pdata + istore 2,contw /* conn Interval */ + bpatchx patch2a_5,mem_patch2a + setarg 0 /* slave latency */ + istore 2,contw + fetch 2,mem_le_timeout + istore 2,contw + fetch 5,mem_le_channel_map + istore 5,contw /* channel map */ + fetch 1,mem_le_hop + arg param_le_sca,temp + ior temp,pdata + istore 1,contw + call le_transmit_norx + setarg mem_le_txheader + add pdata,18,contr + ifetch 3,contr + store 3,mem_le_crcinit + rtn + +le_init_adv: + bpatchx patch2a_6,mem_patch2a + disable master + branch le_adv_access + + + +le_update_param: + fetch 1,mem_le_state + rtnbit0 lestate_update_param + fetch 2,mem_le_event_count + fetcht 2,mem_le_instant + isub temp,pdata + nrtn positive + store 2,mem_pdatatemp + bpatchx patch2a_7,mem_patch2a + fetch 1,mem_le_state + set0 lestate_update_param,pdata + set0 lestate_got_first_packet,pdata + store 1,mem_le_state + fetch 4,mem_le_anchor + fetcht 2,mem_le_tsniff + storet 2,mem_temp + isub temp,rega + bpatchx patch2b_0,mem_patch2b + fetch 1,mem_le_new_param + store 1,mem_le_window_size + ifetcht 2,contr + ifetch 2,contr + lshift2 pdata,pdata + store 2,mem_le_tsniff + lshift2 temp,temp + iadd temp,pdata + ifetcht 4,contr + storet 4,mem_le_slave_latency // and superTO + iadd rega,pdata + copy pdata,regab + fetch 2,mem_le_tsniff + fetcht 2,mem_temp //last sniff + isub temp,pdata //last sniff - new sniff + fetcht 2,mem_pdatatemp + imul32 temp,pdata + iadd regab,pdata + store 4,mem_le_anchor + call le_receive_window_size + fetch 2,mem_le_superto + store 2,mem_le_init_superto + rtn + + +le_update_channel_map: + bpatchx patch2b_1,mem_patch2b + fetch 1,mem_le_state + rtnbit0 lestate_update_map + fetch 2,mem_le_event_count + fetcht 2,mem_le_instant + isub temp,pdata + nrtn positive + fetch 1,mem_le_state + set0 lestate_update_map,pdata + store 1,mem_le_state + fetch 5,mem_le_new_map + store 5,mem_le_channel_map + branch le_calc_channel_map + + +le_acknowledge: + bpatchx patch2b_2,mem_patch2b + call le_supervision_flush + call le_check_wak + fetch 1,mem_le_rxbuf + isolate1 md,pdata + setflag true,mark_ble_rx_md,mark + rshift pdata,pdata + ixor temp,pdata + isolate1 nesn,pdata + setflag true,mark_old_packet,mark /* retransmit */ + rtnmark1 mark_old_packet + fetch 1,mem_le_rxbuf+1 + branch le_ack_unenc,blank /* empty packet, no decryption */ + fetch 1,mem_le_state + bbit0 lestate_encryption,le_ack_unenc + call load_sk + call le_decrypt + nrtn blank +le_ack_unenc: + fetcht 1,mem_le_arq + setflip nesn,temp + storet 1,mem_le_arq + rtn + + +le_check_wak: + bpatchx patch2b_3,mem_patch2b + fetcht 1,mem_le_arq + isolate0 wak,temp + rtn true + fetch 1,mem_le_rxbuf + lshift pdata,pdata + ixor temp,pdata + rtnbit0 sn /* received NESN is same as SN, NAK */ + set0 wak,temp + setflip sn,temp + storet 1,mem_le_arq + compare 3,temp,3 + nrtn true + fetch 1,mem_le_txpayload + beq LL_START_ENC_REQ,le_set_enc + fetch 1,mem_le_enc_state + beq FLAG_LE_ENC_PAUSE,le_clear_enc + rtn + + +le_set_enc: + fetch 1,mem_le_state + set1 lestate_encryption,pdata + store 1,mem_le_state + rtn + +le_clear_enc: + bpatchx patch2b_4,mem_patch2b + jam FLAG_LE_ENC_NULL,mem_le_enc_state + arg 0,pdata + store 4,mem_le_last_mic + store 5,mem_le_pcnt_tx + set1 39,pdata + store 5,mem_le_pcnt_rx + fetch 1,mem_le_state + set0 lestate_encryption,pdata + store 1,mem_le_state + rtn + + +le_wait_adv: + bpatchx patch2b_5,mem_patch2b + call le_next_adv_channel + call le_receive_adv + fetch 1,mem_le_adv_waitcnt + increase 1,pdata + store 1,mem_le_adv_waitcnt + rtn + + +le_scan: + bpatchx patch2b_6,mem_patch2b + fetch 1,mem_le_scan_enable + rtnne LE_SCAN_ENABLE + arg le_scan_interval_timer,queue + call timer_check + nrtn blank + fetch 2,mem_le_scan_interval + fetcht 2,mem_le_scan_window + isub temp,pdata + arg le_scan_interval_timer,queue + call timer_init + disable master + call le_init_adv + call le_wait_adv + nrtn match + bpatchx patch2b_7,mem_patch2b + fetch 6,mem_le_rxbuf+2 + store 6,mem_le_plap +// call le_scan_dongle + + fetch 1,mem_le_adv_rcv + increase 1,pdata + store 1,mem_le_adv_rcv + call le_create_conn + rtn master + call le_send_scan_request + nrtn match + bpatchx patch2c_0,mem_patch2c + fetch 1,mem_le_scanrsp_rcv + increase 1,pdata + store 1,mem_le_scanrsp_rcv + fetch 9,mem_le_rxbuf+8 + store 9,mem_tmp_buffer + rtn + +le_create_conn: + bpatchx patch2c_1,mem_patch2c + fetch 1,mem_cmd_le_create_conn + rtnne hci_cmd_le_create_conn + fetch 6,mem_le_plap + fetcht 6,mem_le_conn_peer_addr + isub temp,null + nrtn zero + call context_new + nrtn zero + call le_connect_request + call le_init_master + bpatchx patch2c_2,mem_patch2c + jam 0,mem_hci_cmd + jam 0,mem_le_peer_sca + jam 0,mem_le_scan_enable + jam 0,mem_cmd_le_create_conn + branch context_save + +le_scan_check_sender_addr_type: + arg 1,rega// sender_addr_type + fetch 1,mem_le_rxbuf + rtnbit1 LE_SENDER_ADDR_BIT + arg 0,rega + rtn + + + +le_prepare_tx: + bpatchx patch2c_3,mem_patch2c + fetch 1,mem_le_arq + rtnbit1 wak + call le_check_tx_md + call le_fifo_get_first_tx_ptr //no packet to send + branch le_send_empty,blank + ifetch 1,contr + ifetcht 1,contr + copy temp,rega + isub rega,pdata + arg LE_MAX_PAKET_LEN,temp + call not_greater_than + copy pdata,temp + ifetch 1,contr + copy pdata,type + copy rega,pdata + iadd contr,contr + arg mem_le_txpayload,contw + copy temp,loopcnt + call memcpy + call le_update_tx_type + call le_send_packet + + call le_fifo_get_first_tx_ptr + ifetch 1,contr + copy pdata,rega + copy contr,regc + ifetcht 1,contr + copy temp,regb + isub regb,pdata + arg LE_MAX_PAKET_LEN,temp + call not_greater_than + iadd regb,pdata + istore 1,regc + isub rega,null + nrtn zero + branch le_fifo_release_first_node + + +le_check_tx_md: + call le_check_continue + rtnmark1 mark_ble_tx_md + fetch 1,mem_le_configuration + bbit0 BIT_BLE_TRANSMIT_PACKET_BY_MD,le_clear_md + call le_fifo_get_second_tx_ptr //no packet to send + branch le_clear_md,blank + branch le_set_md + + +le_check_continue: + call le_fifo_get_first_tx_ptr //no packet to send + branch le_clear_md,blank + ifetch 1,contr //pdata:length + ifetcht 1,contr //temp:offest + isub temp,pdata //pdata:length - offset + sub pdata,LE_MAX_PAKET_LEN,null + branch le_clear_md,positive //27 > length -offset +le_set_md: + set1 mark_ble_tx_md,mark + rtn + +le_clear_md: + set0 mark_ble_tx_md,mark + rtn + +le_update_tx_type: + copy rega,pdata + rtn blank + arg LLID_CONTINUE,type + rtn + + +le_att_check_notification_enable: // temp ->handle,output-> pdata,output :contr->rega + bpatchx patch2c_4,mem_patch2c + increase 1,temp + call le_att_get_handle_ptr + increase -2,contr + ifetch 2,contr + arg CLIENT_CHARACTERTIC_CONFIGURATION,temp + isub temp,null + nrtn zero + increase 1,contr + copy contr,rega + ifetch 1,contr + rtn + + +le_send_empty: + force 0,temp + force 1,type + +le_send_packet: + bpatchx patch2c_5,mem_patch2c + storet 1,mem_le_txlen + fetcht 1,mem_le_arq + set1 wak,temp + and temp,0xfc,pdata + ior type,pdata + store 1,mem_le_arq + and_into 0x1f,pdata + isolate1 mark_ble_tx_md,mark + setflag true,md,pdata + store 1,mem_le_txheader + + fetch 1,mem_le_txheader + compare 1,type,3 + nbranch le_send_no_txlen,true + fetch 1,mem_le_txlen + rtn blank +le_send_no_txlen: + fetch 1,mem_le_state + rtnbit0 lestate_encryption + call load_sk + branch le_encrypt + + +get_lpm_wake_ble_rx_lock: + arg wake_lock_ble_rx,queue + branch lpm_get_wake_lock + +put_lpm_wake_ble_rx_lock: + arg wake_lock_ble_rx,queue + branch lpm_put_wake_lock + + +le_parse: + bpatchx patch2c_6,mem_patch2c + rtnmark1 mark_old_packet + call le_fifo_check_full + nrtn blank + fetch 1,mem_le_rxbuf + and pdata,0x3,pdata + store 1,mem_le_packet_llid + ifetch 1,contr + and pdata,0x1f,pdata + store 1,mem_le_packet_size + rtn blank //empty rtn + copy contr,pdata + store 2,mem_le_payload_ptr + fetch 1,mem_le_packet_llid + beq LLID_LE_LL,le_parse_ll +le_parse_l2cap: + call le_check_l2cap_complete + nbranch get_lpm_wake_ble_rx_lock,user + call put_lpm_wake_ble_rx_lock + fetch 2,mem_le_payload_ptr + copy pdata,contr + ifetch 2,contr //l2cap len + store 2,mem_le_l2cap_size + bpatchx patch2c_7,mem_patch2c + ifetch 2,contr + beq LE_L2CAP_CID_ATT,le_parse_att + beq LE_L2CAP_CID_SMP,le_parse_smp + beq LE_L2CAP_CID_SIGNAL,le_parse_signaling + rtn + + +le_check_l2cap_complete: + fetch 1,mem_le_packet_llid + beq LLID_START,le_check_l2cap_llid_start + beq LLID_CONTINUE,le_check_l2cap_llid_continue + rtn + +//input: pdata is CID number +//output: if CID is legal ,enable user +// if ICD is illegal,disable user +le_check_l2cap_CID_legal: + call enable_user + arg LE_L2CAP_CID_ATT,temp + isub pdata,null + rtn zero + arg LE_L2CAP_CID_SIGNAL,temp + isub pdata,null + rtn zero + arg LE_L2CAP_CID_SMP,temp + isub pdata,null + rtn zero + branch disable_user + + +le_check_l2cap_llid_start: + fetch 2,mem_le_payload_ptr + copy pdata,contr + ifetch 2,contr + store 2,mem_le_l2cap_size + ifetch 2,contr //CID + call le_check_l2cap_CID_legal + nrtn user + fetcht 1,mem_le_packet_size + storet 1,mem_le_packet_len_recved + fetch 2,mem_le_l2cap_size + increase 4,pdata + isub temp,null + branch enable_user,zero + fetch 1,mem_le_packet_size + copy pdata,loopcnt + arg mem_le_l2capbuf,contw + fetch 2,mem_le_payload_ptr + copy pdata,contr + call memcpy + branch disable_user + +//no input +//output: if CID is legal ,enable user +// if ICD is illegal,disable user +le_check_l2cap_continue_legal: + call enable_user + fetch 1,mem_le_packet_len_recved + nrtn blank + branch disable_user + +le_check_l2cap_llid_continue: + call le_check_l2cap_continue_legal + nrtn user + fetch 1,mem_le_packet_len_recved + arg mem_le_l2capbuf,contw + iadd contw,rega + fetcht 1,mem_le_packet_size + iadd temp,pdata + store 1,mem_le_packet_len_recved + fetch 1,mem_le_packet_size + copy pdata,loopcnt + copy rega,contw + fetch 2,mem_le_payload_ptr + copy pdata,contr + call memcpy_fast + setarg mem_le_l2capbuf + store 2,mem_le_payload_ptr //update ptr->mem_le_l2capbuff + fetch 2,mem_le_l2cap_size + increase 4,pdata + fetcht 1,mem_le_packet_len_recved + isub temp,null + branch enable_user,zero + branch disable_user + + + + + +le_get_search_att_type: + call store_contr + arg mem_le_search_att_type_length,contw +le_get_search_common: + fetch 2,mem_le_l2cap_size + increase -5,pdata +le_get_search_common2: + istore 1,contw + copy pdata,loopcnt + call get_contr + branch memcpy_fast + +le_get_search_att_uuid: + call store_contr + arg mem_le_search_uuid_length,contw + branch le_get_search_common + + + /* rega pointers to data, regb is length */ +le_writeatt_cb: + fetch 2,mem_cb_att_write + branch callback_func + +le_supervision_update: + fetcht 4,mem_le_supervision_timer + call get_clkbt + isub temp,timeup /* and to 28 bits */ + deposit timeup + fetcht 2,mem_le_superto + lshift4 temp,temp + lshift temp,temp + isub temp,pdata + rtn + +le_supervision_flush: + call get_clkbt + store 4,mem_le_supervision_timer + rtn + + +le_adv: + jam 36,mem_le_ch_mapped + jam 0,mem_le_adv_channel_map_temp +le_adv_loop: + bpatchx patch2d_0,mem_patch2d + fetch 1,mem_le_adv_enable + rtn blank + arg le_adv_interval_timer,queue + call timer_check + nrtn blank + bpatchx patch2d_1,mem_patch2d +le_adv_loop_tx: + disable master + enable swfine + call le_init_adv + call le_next_adv_channel + call le_send_adv_ind + nbranch le_adv_not_match,match + fetch 1,mem_le_req_rcv + increase 1,pdata + store 1,mem_le_req_rcv + fetch 1,mem_le_rxbuf + and pdata,0x0f,pdata + beq SCAN_REQ,le_send_scan_response + beq CONNECT_REQ,le_parse_connect_req +le_adv_not_match: + bpatchx patch2d_2,mem_patch2d + random pdata + arg 0x1ff,temp + iand temp,pdata + add pdata,250,pdata + call delay + fetch 1,mem_le_adv_channel_map_temp + fetcht 1,mem_le_adv_channel_map + isub temp,null + nbranch le_adv_loop,zero + arg le_adv_interval_timer,queue + fetch 2,mem_le_adv_interval + branch timer_init + + +le_receive_window_size: + bpatchx patch2d_3,mem_patch2d + fetch 1,mem_le_peer_sca + call le_sca_map + fetch 2,mem_le_tsniff + imul32 temp,pdata + arg 375,temp + imul32 temp,pdata + arg 100000,temp + idiv temp + fetch 1,mem_le_window_size + arg 20000,temp + imul32 temp,pdata + iadd temp,pdata + store 4,mem_le_transmit_window + bpatchx patch2d_4,mem_patch2d + fetch 2,mem_rx_window_sniff + call wait_div_end + quotient temp + iadd temp,pdata + store 2,mem_le_receive_window + rtn + +le_parse_connect_req: + bpatchx patch2d_5,mem_patch2d + fetch 6,mem_le_rxbuf+8 + fetcht 6,mem_le_lap + isub temp,null + nrtn zero + call le_scan_check_sender_addr_type + copy rega,pdata + store 1,mem_le_conn_peer_addr_type + fetch 7,mem_le_rxbuf+21 + store 7,mem_tmp_buffer + ifetch 8,contr + istore 8,contw + fetch 6,mem_le_rxbuf+2 + store 6,mem_le_plap + increase 6,contr + ifetch 8,contr + store 8,mem_le_access // and crcinit & window size + ifetcht 2,contr // transmit offset + bpatchx patch2d_6,mem_patch2d +// increase 1,temp + lshift2 temp,temp + ifetch 2,contr // connInterval + lshift2 pdata,pdata + store 2,mem_le_tsniff + store 4,mem_le_anchor + isub temp,pdata + add pdata,-2,clke_bt + ifetch 9,contr + store 9,mem_le_slave_latency// and super to & channel map + bpatchx patch2d_7,mem_patch2d + ifetch 1,contr + rshift4 pdata,temp + rshift temp,temp + storet 1,mem_le_peer_sca + and_into 0x1f,pdata + store 1,mem_le_hop + call le_receive_window_size + call le_calc_channel_map + call le_init_slave + call context_new + nrtn zero + bpatchx patch2e_0,mem_patch2e + call calc_clke_offset + call le_l2cap_reset_signaling_identifier + jam BT_EVT_LE_CONNECTED,mem_fifo_temp + call ui_ipc_send_event +// call app_get_lpm_wake_lock + branch context_save + + +le_init_attlist_search: + bpatchx patch2e_1,mem_patch2e + fetch 2,mem_le_search_handle_start + iforce regb + fetch 2,mem_le_search_handle_end + iforce regc + fetch 2,mem_ui_le_uuid_table + iforce contr + enable user + rtn + + /* return handle in pdata, blank:end of list, positive:in range */ +le_att_handle_inrange: + ifetch 2,contr + rtn blank + isub regb,null /* less than start ? */ + nrtn positive + isub regc,null /* greater than end ? */ + rtn zero + branch le_att_handle_blank,positive + force 1,null + rtn +le_att_handle_blank: + force 0,pdata + rtn + + + /* handle in temp, return pointer in contr to length, blank not found */ +le_att_get_handle_ptr: + call le_att_get_handle_ptr2 + branch le_att_get_handle_ptr_found,zero + rtn + +le_att_get_handle_ptr2: + bpatchx patch2e_2,mem_patch2e + fetch 2,mem_ui_le_uuid_table + iforce contr +le_att_get_handle_loop1: + ifetch 2,contr + rtn blank + isub temp,null + rtn zero + ifetch 1,contr + iadd contr,contr + ifetch 1,contr // length + iadd contr,contr + branch le_att_get_handle_loop1 +le_att_get_handle_ptr_found: + ifetch 1,contr + iadd contr,contr + rtn + + + +le_att_get_short_uuid_ptr: + bpatchx patch2e_3,mem_patch2e + fetch 2,mem_ui_le_uuid_table + iforce contr +le_att_get_short_uuid_loop: + ifetch 2,contr + rtn blank + ifetch 1,contr + iadd contr,contr + increase -2,contr + ifetch 2,contr + isub temp,null + rtn zero + ifetch 1,contr + iadd contr,contr + branch le_att_get_short_uuid_loop + + + +le_att_get_handle_info_from_ptr: + fetch 2, mem_le_cur_attlist_start_ptr + branch le_att_get_handle_info_fast + +le_att_get_handle_info: + bpatchx patch2e_4,mem_patch2e + fetch 2,mem_ui_le_uuid_table +le_att_get_handle_info_fast: + iforce contr + copy temp,rega +le_att_get_handle_loop: + ifetch 2,contr + branch le_att_unfind_handle,blank + isub rega,null + branch le_att_finded_handle, zero + ifetch 1,contr // length + iadd contr,contr + ifetch 1,contr //length + iadd contr,contr + branch le_att_get_handle_loop +le_att_unfind_handle: + branch disable_blank + +le_att_finded_handle: + ifetch 1,contr + store 1,mem_le_cur_uuid_length + copy pdata,loopcnt + arg mem_le_cur_uuid,contw + call memcpy_fast + ifetch 1,contr + store 1,mem_le_curr_att_len + call store_contr + branch enable_blank + + +le_modified_name: + bpatchx patch2e_5,mem_patch2e + call le_modified_name_att_list + branch le_modified_name_adv + +le_modified_name_att_list: + arg UUID_CHRCTR_DEVICE_NAME,temp + call le_att_get_short_uuid_ptr + rtn blank + ifetch 1,contr // attribute length + copy contr,contw + fetcht 1,mem_le_name_len + copy temp,loopcnt + isub temp,null + nbranch le_name_length_longer_than_att,positive + isub temp,temp + arg mem_le_name,contr + call memcpy + copy temp,loopcnt + ncall memcpy_empty,zero + rtn +le_name_length_longer_than_att: + copy pdata,loopcnt + arg mem_le_name,contr + branch memcpy_fast + + +le_modified_name_adv: + arg mem_le_adv_data_len+32,regc + arg mem_le_adv_data,rega + call le_modified_name_adv_and_scan + setarg 0 + setflag user,0,pdata + store 1,mem_pdatatemp + arg mem_le_scan_data_len+32,regc + arg mem_le_scan_data,rega + call le_modified_name_adv_and_scan + rtn user + fetch 1,mem_pdatatemp + branch assert,blank + rtn + + +le_modified_name_adv_and_scan: + bpatchx patch2e_6,mem_patch2e + call enable_user + call clear_temp_block + arg 0,regb //current length + arg mem_le_data_temp,contw + call le_modified_name_adv_loop + fetch 1,mem_le_name_len + add pdata,1,temp + iadd regb,rega + increase 2,rega + sub rega,0x1f,null + nbranch le_modified_name_adv_and_scan_name_overflow,positive + istoret 1,contw //store ble name length + arg GAP_ADTYPE_LOCAL_NAME_COMPLETE,temp + istoret 1,contw //store ble name type + iforce loopcnt + call memcpy_fast + copy rega,regb +le_modified_name_adv_and_scan_store_data: + deposit regb + store 1,mem_le_data_len_temp + arg mem_le_data_len_temp,contr + setarg -32 + iadd regc,contw + branch memcpy32 + +le_modified_name_adv_and_scan_name_overflow: + call disable_user + branch le_modified_name_adv_and_scan_store_data + +le_modified_name_adv_loop: + ifetch 1,rega //pdata:length + rtn blank //length is zero,ending find + pincrease 1 //length += 1 + ifetcht 1,contr //pdata:type + sub temp,GAP_ADTYPE_LOCAL_NAME_COMPLETE,null + branch le_modified_name_adv_found_name,zero + iadd regb,regb + copy rega,contr + iforce loopcnt + call memcpy_fast + copy contr,rega +le_modified_name_adv_loop2: + deposit rega + isub regc,null + rtn positive + branch le_modified_name_adv_loop + +le_modified_name_adv_found_name: + iadd rega,rega + branch le_modified_name_adv_loop2 + + +memcpy_empty: + setarg SPACE + istore 1,contw + loop memcpy_empty + rtn + + +le_lpm_set_mult: + bpatchx patch2e_7,mem_patch2e + disable wake + branch le_lpm_set_mult_attempt,attempt + nbranch le_lpm_lost,match +le_lpm_set_mult_attempt: + call lpm_match + fetch 2,mem_rx_window_sniff + store 2,mem_le_receive_window + + nbranch lpm_mult_short,match + bmark1 mark_old_packet,lpm_mult_short + + fetch 1,mem_le_packet_size + nbranch lpm_mult_short,blank // rx not empty, short interval + fetch 1,mem_le_txlen + nbranch lpm_mult_short,blank // tx not empty, short interval + + fetch 1,mem_le_configuration + bbit1 BIT_BLE_SHORT_MULT,lpm_mult_short //check flag,if flag is 1,always short mult + + fetch 1,mem_le_state + bbit1 lestate_update_param,lpm_mult_short + branch lpm_mult_wait_timeout + +le_lpm_lost: + fetcht 2,mem_rx_window_sniff + rshift temp,temp + fetch 2,mem_le_receive_window + iadd temp,pdata + store 2,mem_le_receive_window + branch lpm_lost + +///////////////////////////////BLE CONFIG////////////////////////////////////////// +le_set_config_fixed_tk: + arg BIT_BLE_PASSKEY_FIXED_KEY,queue + branch le_set_config + +le_clr_config_fixed_tk: + arg BIT_BLE_PASSKEY_FIXED_KEY,queue + branch le_clr_config + +le_set_config_fixed_ltk: + arg BIT_BLE_PAIRING_FIXED_LTK,queue + branch le_set_config + +le_clr_config_fixed_ltk: + arg BIT_BLE_PAIRING_FIXED_LTK,queue + branch le_clr_config + +le_set_config_more_data: + arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue + branch le_set_config + +le_clr_config_more_data: + arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue + branch le_clr_config + +le_set_config_read_authentication: + arg BIT_BLE_READ_AUTH,queue + branch le_set_config + +le_clr_config_read_authentication: + arg BIT_BLE_READ_AUTH,queue + branch le_clr_config + +le_set_config_write_authentication: + arg BIT_BLE_WRITE_AUTH,queue + branch le_set_config + +le_clr_config_write_authentication: + arg BIT_BLE_WRITE_AUTH,queue + branch le_clr_config + +le_set_config_short_mult: + arg BIT_BLE_SHORT_MULT,queue + branch le_set_config + +le_clr_config_short_mult: + arg BIT_BLE_SHORT_MULT,queue + branch le_clr_config + + +le_set_config: + fetch 1,mem_le_configuration + qset1 pdata + store 1,mem_le_configuration + rtn + +le_clr_config: + fetch 1,mem_le_configuration + qset0 pdata + store 1,mem_le_configuration + rtn + +le_set_fixed_ltk: + setarg 0x112233 + store 3,mem_le_fixed_ltk + setarg 0x445566 + istore 3,contw + setarg 0x778899 + istore 3,contw + setarg 0x001122 + istore 3,contw + setarg 0x334455 + istore 3,contw + setarg 0x66 + istore 1,contw + rtn + + +le_set_justwork: + setarg 0x01000302 + store 4,mem_le_pres + setarg 0x010010 + store 3,mem_le_pres_max_keysize + jam 1,mem_le_pairing_mode + rtn + +///////////////////////////////////////////////////////////////////////// + +le_fifo_malloc_tx_empty: + arg 0,rega + arg LLID_EMPTY,type + branch le_fifo_malloc_tx + + +//rega:len regb:ll opcode +le_fifo_malloc_tx_ll: + arg LLID_LE_LL,type + call le_fifo_malloc_tx + copy regb,pdata + istore 1,contw + rtn + + +//rega:len regb:cid +le_fifo_malloc_tx_l2cap: + force LLID_L2CAP_START,type + increase 4,rega + call le_fifo_malloc_tx + increase -4,rega + copy rega,pdata + istore 2,contw + copy regb,pdata + istore 2,contw + rtn + + +//rega:len type:llid +le_fifo_malloc_tx: + sub rega,240,null //check max len + nbranch assert,positive + fetch 1,mem_le_tx_buff_used + arg 1,temp + arg LE_TX_BUFF_COUNT,loopcnt +le_fifo_malloc_tx_loop: + iand temp,null + branch le_fifo_malloc_tx_got_empty,zero + lshift temp,temp + loop le_fifo_malloc_tx_loop + branch assert //no empty buff +le_fifo_malloc_tx_got_empty: + ixor temp,pdata + store 1,mem_le_tx_buff_used + sub loopcnt,LE_TX_BUFF_COUNT,pdata + lshift4 pdata,pdata + lshift4 pdata,pdata + arg mem_le_tx_buffer0,temp + iadd temp,temp +le_fifo_tx_find_empty_ptr: + arg 0,loopcnt + arg mem_le_tx_ptr0,contr +le_fifo_tx_find_empty_ptr_loop: + ifetch 2,contr + branch le_fifo_tx_found_empty_ptr,blank + copy loopcnt,pdata + increase 1,loopcnt + bne LE_TX_BUFF_COUNT,le_fifo_tx_find_empty_ptr_loop + branch assert + + +le_fifo_tx_found_empty_ptr: + increase -2,contr + istoret 2,contr + copy temp,contw + copy rega,pdata + istore 1,contw //lengh + setarg 0 + istore 1,contw //offset + copy type,pdata + istore 1,contw //LLID + rtn + + + +le_fifo_get_first_tx_ptr: + fetch 2,mem_le_tx_ptr0 + copy pdata,contr + rtn + +le_fifo_get_second_tx_ptr: + fetch 2,mem_le_tx_ptr1 + copy pdata,contr + rtn + +le_fifo_get_last_tx_ptr: + call le_fifo_get_last_tx_ptr0 + copy pdata,contr + rtn +le_fifo_get_last_tx_ptr0: + fetch 2,mem_le_tx_ptr3 + nrtn blank + fetch 2,mem_le_tx_ptr2 + nrtn blank + fetch 2,mem_le_tx_ptr1 + nrtn blank + fetch 2,mem_le_tx_ptr0 + rtn + +le_fifo_get_first_l2cap_ptr: + call le_fifo_get_first_tx_ptr + increase 3,contr + rtn + +le_fifo_get_first_att_ptr: + call le_fifo_get_first_tx_ptr + increase 7,contr + rtn + +le_fifo_get_last_att_ptr: + call le_fifo_get_last_tx_ptr + increase 7,contr + rtn + +le_fifo_get_last_l2cap_ptr: + call le_fifo_get_last_tx_ptr + increase 3,contr + rtn + + + +le_fifo_check_full: + fetch 2,mem_le_tx_ptr3 + rtn + + +le_fifo_check_nearly_full: + fetch 2,mem_le_tx_ptr2 + rtn + + +le_fifo_check_empty: + fetch 2,mem_le_tx_ptr0 + rtn + + +le_fifo_release_first_node: + fetch 2,mem_le_tx_ptr0 + arg mem_le_tx_buffer0,temp + isub temp,pdata + rshift4 pdata,pdata + rshift4 pdata,queue + fetch 1,mem_le_tx_buff_used + qset0 pdata + store 1,mem_le_tx_buff_used + arg 0,loopcnt +le_fifo_release_first_node_loop: + lshift loopcnt,pdata + arg mem_le_tx_ptr1,temp + iadd temp,temp + ifetch 2,temp + increase -2,temp + istore 2,temp + copy loopcnt,pdata + increase 1,loopcnt + bne LE_TX_BUFF_UPDATE_LOOPCNT,le_fifo_release_first_node_loop + setarg 0 + istore 2,temp + rtn + + + + + +le_parse_att: + ifetch 3,contr + store 3,mem_le_att_opcode + beq ATTOP_EXCHANGE_MTU_REQUEST,le_parse_att_exchange_mtu_request + beq ATTOP_EXCHANGE_MTU_RESPONSE,le_parse_att_exchange_mtu_response + beq ATTOP_FIND_INFORMATION_REQUEST,le_parse_att_find_information_request + beq ATTOP_FIND_BY_TYPE_VALUE_REQUEST,le_parse_att_find_by_type_value_request + beq ATTOP_READ_BY_TYPE_REQUEST,le_parse_att_read_by_type_request + beq ATTOP_READ_REQUEST,le_parse_att_read_request + beq ATTOP_READ_BLOB_REQUEST,le_parse_att_read_blob_request + beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,le_parse_att_read_by_group_type_request + beq ATTOP_WRITE_REQUEST,le_parse_att_write_request + beq ATTOP_PREPARE_WRITE_REQUEST,le_parse_att_prepare_write_request + beq ATTOP_EXECUTE_WRITE_REQUEST,le_parse_att_execute_write_request + beq ATTOP_WRITE_COMMAND,le_parse_att_write_command + rtn + + +le_send_att_exchange_mtu_requset: + force 3,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_EXCHANGE_MTU_REQUEST + istore 1,contw + fetch 2,mem_le_local_mtu + istore 2,contw + rtn + + +le_parse_att_exchange_mtu_request: + call le_parse_att_exchange_mtu_response +le_send_att_exchange_mtu_response: + force 3,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_EXCHANGE_MTU_RESPONSE + istore 1,contw + fetch 2,mem_le_local_mtu + istore 2,contw + rtn + +le_parse_att_exchange_mtu_response: + rshift8 pdata,pdata + store 2,mem_le_remote_mtu + rtn + +le_parse_att_find_information_request: + call le_get_search_handle_start_end_common + call enable_user + branch le_send_att_find_information_response + +le_send_att_find_information_response: + arg 3,timeup + call le_init_attlist_search +le_send_att_find_information_res_loop: + call le_att_handle_inrange + branch le_send_att_find_information_res_end,blank + nbranch le_send_att_find_information_res_next,positive + increase -2,contr + call store_contr + call get_contw + nbranch le_send_att_find_information_res_store_info,user + call push_stack_rega_b_c + call disable_user + force 20,rega + call le_fifo_malloc_tx_l2cap_gatt + call pop_stack_rega_b_c + setarg ATTOP_FIND_INFORMATION_RESPONSE + istore 1,contw + setarg UUID_SIZE_16BIT + istore 1,contw +le_send_att_find_information_res_store_info: + call get_contr + ifetch 2,contr + istore 2,contw + ifetch 1,contr + copy pdata,loopcnt + call memcpy + call store_contw + increase -1,timeup + branch le_send_att_find_information_res_end,zero +le_send_att_find_information_res_cont: + ifetch 1,contr + iadd contr,contr + branch le_send_att_find_information_res_loop +le_send_att_find_information_res_next: + ifetch 1,contr + iadd contr,contr + branch le_send_att_find_information_res_cont +le_send_att_find_information_res_end: + branch le_send_att_error_response_notfound,user + branch le_send_auto_len_by_mem + + +le_parse_att_find_by_type_value_request: + call le_get_search_handle_start_end_common + ifetch 2,contr + store 2,mem_le_search_uuid + call store_contr + arg mem_le_search_att_type_length,contw + fetch 2,mem_le_l2cap_size + increase -7,pdata + call le_get_search_common2 + branch le_send_att_find_by_type_value_response + + +le_start_end_handle_check_1: + disable user + fetcht 2,mem_le_search_handle_start + fetch 2,mem_le_search_handle_end + isub temp,null + nbranch le_start_end_handle_check_1_fail,positive + deposit temp + rtnne 0 +le_start_end_handle_check_1_fail: + enable user + jam ATT_ERR_INVALID_HANDLE,mem_le_err_code + branch le_send_att_error_response + + +le_send_att_find_by_type_value_response: + call le_start_end_handle_check_1 + rtn user + fetcht 2,mem_le_search_uuid + setarg UUID_GATT_PRIMARY_SERVICE + isub temp,null + branch le_send_att_find_by_type_value_res_primary,zero + branch le_send_att_error_response_notfound + + +le_send_att_find_by_type_value_res_primary: + jam LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,mem_le_search_res + fetcht 2,mem_le_search_handle_start + storet 2,mem_temp + call le_att_get_handle_info + nbranch le_send_att_error_response_notfound,blank +le_send_att_find_primary_search_loop: + fetcht 2,mem_temp + call le_att_get_handle_info + nbranch le_send_att_error_response_notfound2,blank + copy contr,rega + fetch 1,mem_le_curr_att_len + copy pdata,loopcnt + fetcht 1,mem_le_search_att_type_length + isub temp,null + nbranch le_send_att_find_primary_search_loop1,zero + arg mem_le_search_att_type,regb + call string_compare + + branch le_send_att_find_primary_search_end_start_handle_found,zero + + fetch 2,mem_le_cur_uuid + fetcht 2,mem_le_search_uuid + isub temp,null + branch le_send_att_find_primary_search_end_ending_handle_found,zero +le_send_att_find_primary_search_loop1: + fetch 2,mem_temp + increase 1,pdata + store 2,mem_temp + branch le_send_att_find_primary_search_loop + +le_send_att_error_response_notfound2: + fetch 1,mem_le_search_res + beq LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,le_send_att_find_primary_search_end_ending_handle_found + branch le_send_att_error_response_notfound + + +le_send_att_find_primary_search_end_start_handle_found: + fetch 2,mem_le_cur_uuid + fetcht 2,mem_le_search_uuid + isub temp,null + nbranch le_send_att_find_primary_search_loop1,zero + jam LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,mem_le_search_res +// copy rega,temp + fetcht 2,mem_temp + storet 2,mem_le_cur_handle_start + branch le_send_att_find_primary_search_loop1 + +le_send_att_find_primary_search_end_ending_handle_found: + fetch 1,mem_le_search_res + beq LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,le_send_att_find_primary_search_loop1 + jam LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE,mem_le_search_res + fetcht 2,mem_temp + increase -1,temp + storet 2,mem_le_cur_handle_end + +le_send_att_find_primary_search_end: + arg 5,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_FIND_BY_TYPE_VALUE_RESPONSE + istore 1,contw + fetch 2,mem_le_cur_handle_start + istore 2,contw + fetch 2,mem_le_cur_handle_end + istore 2,contw + rtn + + + +le_parse_att_read_by_type_request: + call le_get_search_handle_start_end_common + call le_get_search_att_uuid + branch le_send_att_read_by_type_response + +le_send_att_read_by_type_response: + fetcht 2,mem_le_search_handle_start + storet 2,mem_temp + call le_init_attlist_search + call le_att_get_handle_ptr2 + increase -2,contr + copy contr,pdata + store 2,mem_le_cur_attlist_start_ptr + + fetcht 2,mem_le_search_uuid + setarg UUID_CHRCTR_DEVICE_NAME + isub temp,null + branch le_send_att_read_by_type_res_device_name,zero + setarg UUID_GATT_CHARACTERISTIC + isub temp,null + nbranch le_send_att_read_by_type_res_not_characteristic,zero + arg 2,timeup +le_send_att_read_by_type_response_loop: + call le_att_check_handle_end + nbranch le_send_att_read_by_type_response_end,positive + fetcht 2,mem_temp + call le_att_get_handle_info_from_ptr + beq 1,le_send_att_read_by_type_response_end + call le_att_same_uuid + nbranch le_send_att_read_by_type_response_next_handle,zero + nbranch le_send_att_read_by_type_res_found_next,user + disable user + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_TYPE_RESPONSE + istore 1,contw + copy contw,alarm + increase 1,contw + + call le_send_att_read_by_type_write_properties + call le_att_next_handle + call le_att_get_handle_info_from_ptr + call le_send_att_read_by_type_write_uuid + fetch 1,mem_le_cur_uuid_length + increase 5,pdata + istore 1,alarm + fetch 1,mem_le_cur_uuid_length + beq 16,le_send_att_read_by_type_response_end + increase -1,timeup + branch le_send_att_read_by_type_response_end,zero +le_send_att_read_by_type_response_next_handle: + call le_att_next_handle + branch le_send_att_read_by_type_response_loop +le_send_att_read_by_type_response_end: + branch le_send_att_error_response_notfound,user + branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_found_next: + call le_store_att_record + call le_att_next_handle + call le_att_get_handle_info_from_ptr + fetch 1,mem_le_cur_uuid_length + beq 16,le_send_att_read_by_type_response_end + + call get_contw + fetch 2,mem_temp + increase -1,pdata + istore 2,contw + call le_write_att_record_common + call le_send_att_read_by_type_write_uuid + increase -1,timeup + branch le_send_att_read_by_type_response_end,zero + branch le_send_att_read_by_type_response_next_handle + + +le_send_att_read_by_type_write_properties: + fetch 2,mem_temp + istore 2,contw + + fetch 1,mem_le_curr_att_len + copy pdata,loopcnt + call get_contr + call memcpy_fast + branch store_contw +le_send_att_read_by_type_write_uuid: + call get_contw + fetch 2,mem_temp + istore 2,contw + call store_contw + fetch 1,mem_le_cur_uuid_length + copy pdata,loopcnt + call get_contw + call get_contr + isub loopcnt,contr + increase -1,contr + call memcpy_fast + branch store_contw + + + +le_send_att_read_by_type_res_not_characteristic: + fetcht 2,mem_le_search_handle_start + storet 2,mem_temp +le_send_att_read_by_type_res_not_char_loop: + call le_att_check_handle_end + nbranch le_send_att_error_response_notfound,positive + call le_att_get_handle_info_from_ptr + beq 1,le_send_att_error_response_notfound + call le_att_same_uuid + nbranch le_send_att_read_by_type_res_not_char_next,zero + +le_send_att_read_by_type_res_not_char_common: + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_TYPE_RESPONSE + istore 1,contw + fetch 1,mem_le_curr_att_len + copy pdata,loopcnt + increase 2,pdata + istore 1,contw + fetch 2,mem_temp + istore 2,contw + call get_contr + call memcpy_fast + call store_contw + branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_not_char_next: + call le_att_next_handle + branch le_send_att_read_by_type_res_not_char_loop + + +le_send_att_read_by_type_res_device_name: + arg UUID_CHRCTR_DEVICE_NAME,temp + call le_att_get_short_uuid_ptr + rtn blank + increase -5,contr // point to handle + ifetch 2,contr + store 2,mem_temp + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_TYPE_RESPONSE + istore 1,contw + fetch 1,mem_le_name_len + copy pdata,loopcnt + increase 2,pdata + istore 1,contw + fetch 2,mem_temp + istore 2,contw + arg mem_le_name,contr + call memcpy_fast + call store_contw + branch le_send_auto_len_by_mem + + + +le_parse_att_read_request: + fetcht 2,mem_le_att_handle + fetch 1,mem_le_configuration + bbit1 BIT_BLE_READ_AUTH,le_send_att_read_response_check_auth + +le_send_att_read_response: + call le_att_get_handle_ptr + branch le_send_att_error_response_notfound,blank + increase -2,contr + ifetch 2,contr + arg UUID_CHRCTR_DEVICE_NAME,temp + isub temp,null + branch le_send_device_name,zero + ifetch 1,contr + sub pdata,22,null + branch le_send_att_read_response_less,positive + force 22,pdata +le_send_att_read_response_less: + copy pdata,regc + call store_contr + add regc,1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_RESPONSE + istore 1,contw + copy regc,loopcnt + call get_contr + branch memcpy + +le_send_device_name: + call store_contr + fetch 1,mem_le_name_len + add pdata,1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_RESPONSE + istore 1,contw + fetch 1,mem_le_name_len + copy pdata,loopcnt + arg mem_le_name,contr + branch memcpy + + +le_send_att_read_response_check_auth: + fetch 2,mem_le_pairing_handle + isub temp,null + nbranch le_send_att_read_response,zero +//le_send_att_read_response_error_insufficient_auth: + call le_check_encrypt_state + nbranch le_send_att_read_response,user + jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code + branch le_send_att_error_response + + +le_parse_att_read_blob_request: + ifetch 2,contr + store 2,mem_le_att_offset +le_send_att_read_blob_response: + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BLOB_RESPONSE + istore 1,contw + fetch 2,mem_le_att_offset + iforce rega + fetcht 2,mem_le_att_handle + call le_att_get_handle_ptr + branch le_send_att_error_response_notfound,blank + ifetch 1,contr + isub rega,loopcnt + nbranch le_send_att_error_response_notfound,positive + sub loopcnt,22,null + branch le_send_att_read_blob_response_less,positive + force 22,loopcnt +le_send_att_read_blob_response_less: + deposit rega + iadd contr,contr + call memcpy_fast + call store_contw + branch le_send_auto_len_by_mem + + +le_parse_att_read_by_group_type_request: + call le_get_search_handle_start_end_common + call le_get_search_att_type + branch le_send_att_read_by_group_type_response + +//mem_le_search_att_type +//mem_le_search_handle_start +//mem_le_search_handle_end +le_send_att_read_by_group_type_response: + arg 2,timeup + fetcht 2,mem_le_search_handle_start +// arg 23,pdata +// isub temp,null +// call ice_break,zero + storet 2,mem_temp + call le_init_attlist_search + call le_att_get_handle_ptr2 + increase -2,contr + copy contr,pdata + store 2,mem_le_cur_attlist_start_ptr +le_send_att_read_by_group_type_response_loop: + call le_att_check_handle_end + nbranch le_send_att_read_by_group_type_end0,positive + fetcht 2,mem_temp + call le_att_get_handle_info_from_ptr + beq 1,le_send_att_read_by_group_type_end1 + + call le_att_same_type + nbranch le_send_att_read_by_group_type_next_handle,zero + copy timeup,pdata + beq 0,le_send_att_read_by_group_type_end1 + nbranch le_send_att_read_by_group_type_store_write_record,user //un first + disable user + //first att uuid + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_GROUP_TYPE_RESPONSE + istore 1,contw + fetch 1,mem_le_curr_att_len + increase 4,pdata + istore 1,contw + call store_contw + branch le_send_att_read_by_group_type_store_record +le_send_att_read_by_group_type_store_write_record: + fetch 1,mem_le_curr_att_len + beq 16,le_send_att_read_by_group_type_end1 + fetch 2,mem_temp + increase -1,pdata + store 2,mem_le_cur_handle_end + call le_write_att_record +le_send_att_read_by_group_type_store_record: + fetch 2,mem_temp + store 2,mem_le_cur_handle_start + call le_store_att_record + increase -1,timeup +// branch le_send_att_read_by_group_type_last_find,zero +le_send_att_read_by_group_type_next_handle: + call le_att_next_handle + branch le_send_att_read_by_group_type_response_loop + +le_send_att_read_by_group_type_end0: //> att handle end + fetch 2,mem_temp + store 2,mem_le_cur_handle_end + branch le_send_att_read_by_group_type_end_common +le_send_att_read_by_group_type_end1: //>att max list handle or diff len + fetch 2,mem_temp + increase -1,pdata + store 2,mem_le_cur_handle_end + branch le_send_att_read_by_group_type_end_common +le_send_att_read_by_group_type_end_common: + branch le_send_att_error_response_notfound,user + call le_write_att_record + branch le_send_auto_len_by_mem + + + + +le_parse_att_write_request: + copy contr,rega + fetch 2,mem_le_l2cap_size + add pdata,-3,regb + call le_writeatt_cb +le_send_att_write_response_check_auth: + fetch 1,mem_le_configuration + bbit0 BIT_BLE_WRITE_AUTH,le_send_att_write_response + + fetcht 2,mem_le_att_handle + fetch 2,mem_le_pairing_handle + isub temp,null + nbranch le_send_att_write_response,zero + call le_check_encrypt_state + nbranch le_send_att_write_response,user + jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code + branch le_send_att_error_response + +le_send_att_write_response: + force 1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_WRITE_RESPONSE + istore 1,contw + rtn + +le_check_encrypt_state: + call disable_user + fetch 1,mem_le_pairing_mode + rtneq LE_PAIRING_MODE_NONE + fetch 1,mem_context + rtnbit1 lestate_encryption + branch enable_user + + +le_parse_att_prepare_write_request: + add contr,2,rega + fetch 2,mem_le_l2cap_size + add pdata,-5,regb + call le_writeatt_cb + branch le_send_att_prepare_write_response + + +le_send_att_prepare_write_response: + fetch 2,mem_le_l2cap_size + copy pdata,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_PREPARE_WRITE_RESPONSE + istore 1,contw + fetch 2,mem_le_att_handle + istore 2,contw + fetch 2,mem_le_l2cap_size + add pdata,-5,loopcnt + fetch 2,mem_le_payload_ptr + add pdata,7,contr + ifetch 2,contr //offset + istore 2,contw + branch memcpy_fast + + + +le_parse_att_execute_write_request: + +le_send_att_execute_write_response: + force 1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_EXECUTE_WRITE_RESPONSE + istore 1,contw + rtn + + + +le_parse_att_write_command: + copy contr,rega + fetch 2,mem_le_l2cap_size + add pdata,-3,regb + branch le_writeatt_cb + + + +//rga:len temp:handle;rgea,regb,regc already used +le_att_malloc_tx_notify: + copy temp,regc + increase 3,rega + call le_fifo_malloc_tx_l2cap_gatt + increase -3,rega + setarg ATTOP_HANDLE_VALUE_NOTIFICATION + istore 1,contw + copy regc,temp + istoret 2,contw + rtn + +//rga:len temp:handle;rgea,regb,regc already used +le_att_malloc_tx_indication: + copy temp,regc + increase 3,rega + call le_fifo_malloc_tx_l2cap_gatt + increase -3,rega + setarg ATTOP_HANDLE_VALUE_INDICATION + istore 1,contw + copy regc,temp + istoret 2,contw + rtn + + +///////////////////////////ATT common function//////////////////////////////////// + +le_send_att_error_response_notfound: + jam ATT_ERR_ATTRIBUTE_NOT_FOUND,mem_le_err_code +le_send_att_error_response: + force 5,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_ERROR_RESPONSE + istore 1,contw + fetch 1,mem_le_att_opcode + istore 1,contw + fetch 2,mem_le_att_handle + istore 2,contw + fetch 1,mem_le_err_code + istore 1,contw + rtn + + +le_fifo_malloc_tx_l2cap_gatt: + force LE_L2CAP_CID_ATT,regb + branch le_fifo_malloc_tx_l2cap + + +le_att_next_handle: + fetcht 2,mem_temp + increase 1,temp + storet 2,mem_temp + rtn + +le_att_check_handle_end: + fetcht 2,mem_temp + fetch 2,mem_le_search_handle_end + isub temp,null + rtn + + +le_att_same_type: + fetcht 1,mem_le_search_att_type_length + arg mem_le_search_att_type,rega +le_att_check_same_common: + fetch 1,mem_le_cur_uuid_length + copy pdata,loopcnt + isub temp,null + nrtn zero + arg mem_le_cur_uuid ,regb + branch string_compare + +le_att_same_uuid: + fetcht 1,mem_le_search_uuid_length + arg mem_le_search_uuid,rega + branch le_att_check_same_common + + +le_store_att_record: + fetch 1,mem_le_curr_att_len + store 1, mem_tmp_buffer + copy pdata,loopcnt + call get_contr + branch memcpy_fast + + +le_write_att_record: + call get_contw + fetch 2,mem_le_cur_handle_start + istore 2,contw + fetch 2,mem_le_cur_handle_end + istore 2,contw +le_write_att_record_common: + fetch 1,mem_tmp_buffer + copy pdata,loopcnt + call memcpy_fast + branch store_contw + + + +le_send_auto_len_by_mem: + call get_contw + call le_fifo_get_last_att_ptr + copy contw,pdata + isub contr,rega + call le_fifo_get_last_l2cap_ptr + copy rega,pdata + istore 2,contr + increase 4,rega + call le_fifo_get_last_tx_ptr + copy rega,pdata + istore 1,contr + rtn + + +le_get_search_handle_start_end_common: + rshift8 pdata,pdata + store 2,mem_le_search_handle_start + ifetch 2,contr + store 2,mem_le_search_handle_end + rtn + + + + +le_parse_signaling: + ifetch 1,contr + ifetcht 1,contr //id + ifetcht 2,contr //length + beq L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE,le_l2cap_parse_conn_parameter_update_rsp + rtn +le_l2cap_parse_conn_parameter_update_rsp: + ifetch 2,contr //result + store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + jam BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,mem_fifo_temp + branch ui_ipc_send_event + + +//mem_le_interval_min:the ptr that connection parameter, +//include ConnIntervalMin,ConnIntervalMax, +// ConnSlaveLatency,ConnSupervisionTimeout +le_l2cap_tx_update_req: + arg 0x0c,rega + arg L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST,regc + call le_fifo_malloc_tx_l2cap_signaling + setarg 0x08 + istore 2,contw + fetch 8,mem_le_interval_min + istore 8,contw + rtn + + +//rega:len regc:signaling opcode +le_fifo_malloc_tx_l2cap_signaling: + call le_l2cap_update_signaling_identifier + arg LE_L2CAP_CID_SIGNAL,regb + call le_fifo_malloc_tx_l2cap + copy regc,pdata + istore 1,contw + fetch 1,mem_le_signaling_identifier + istore 1,contw + rtn + + +le_l2cap_update_signaling_identifier: + fetch 1,mem_le_signaling_identifier + //beq 0xff,le_l2cap_signaling_identifier_set_1 + pincrease 1 + store 1,mem_le_signaling_identifier + rtnne 0 + +le_l2cap_reset_signaling_identifier: + jam 1,mem_le_signaling_identifier + rtn + + + + +le_pairing_mode_init: + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_NONE, le_set_no_pairing + beq LE_PAIRING_MODE_LAGACY_JUSTWORK,le_set_pairing_mode_lagacy_just_work + beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_set_pairing_mode_lagacy_passkey + beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_set_pairing_mode_secure_justwork + beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,le_set_pairing_mode_secure_numeric + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_set_pairing_mode_secure_passkey + rtn + +le_set_pairing_mode_secure_justwork: + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch le_set_noinputnooutput +le_set_pairing_mode_secure_numeric: + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap + rtn +le_set_pairing_mode_secure_passkey: + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch le_set_displayonly +le_set_no_pairing: + jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth +le_set_noinputnooutput: + jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap + rtn +le_set_pairing_mode_lagacy_just_work: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth + branch le_set_noinputnooutput +le_set_pairing_mode_lagacy_passkey: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth +le_set_displayonly: + jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap + rtn + + +le_secure_connection_enable: + fetch 1,mem_le_pres_auth + set1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata + store 1,mem_le_pres_auth + rtn +le_secure_connection_disable: + fetch 1,mem_le_pres_auth + set0 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata + store 1,mem_le_pres_auth + rtn + +le_parse_smp: + ifetch 1,contr + beq SMP_PAIRING_REQUEST,le_parse_smp_pairing_request +// beq SMP_PAIRING_RESPONSE,le_parse_smp_pairing_response + beq SMP_PAIRING_CONFIRM,le_parse_smp_pairing_confirm + beq SMP_PAIRING_RANDOM,le_parse_smp_pairing_random + beq SMP_PAIRING_FAILED,le_parse_smp_pairing_failed + beq SMP_ENCRYPTION_INFORMATION,le_parse_smp_encryption_information + beq SMP_MASTER_IDENTIFICATION,le_parse_smp_master_identification + beq SMP_IDENTITY_INFORMATION,le_parse_smp_identity_information + beq SMP_IDENTITY_ADDRESS_INFORMATION,le_parse_smp_identity_address_information + beq SMP_SIGNING_INFORMATION,le_parse_smp_signing_information + beq SMP_SECURITY_REQUEST,le_parse_smp_security_request + beq SMP_PAIRING_PUBLIC_KEY,le_parse_smp_public_key + beq SMP_PAIRING_DHKEY_CHECK,le_parse_smp_dhkey_check + rtn + + + +le_send_smp_security_request: + force 2,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_SECURITY_REQUEST + istore 1,contw + fetch 1,mem_le_pres_auth + istore 1,contw + rtn + +le_parse_smp_pairing_request: + store 1,mem_le_preq + ifetch 6,contr + istore 6,contw + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_NONE,le_smp_pairing_fail_reason_not_support_pairing + call le_send_smp_pairing_response + call le_check_master_support_secure_connect + jam FLAG_LE_PAIRING_RCV_PAIRING_REQ,mem_le_pairing_state + fetch 1,mem_le_preq_iocap + beq FLAG_IOCAP_DISPlAYONLY,le_set_tk_0 + beq FLAG_IOCAP_DISPLAYYESNO,le_set_tk_0 + beq FLAG_IOCAP_NOINPUTNOOUTPUT,le_set_tk_0 + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_parse_smp_pairing_req_passkey + rtneq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY +le_set_tk_0: + arg 0,pdata + store 4,mem_le_tk + rtn + +le_parse_smp_pairing_req_passkey: + fetch 1,mem_le_configuration + bbit1 BIT_BLE_PASSKEY_FIXED_KEY,le_parse_smp_pairing_req_fixed_passkey +le_genernate_tk: + arg mem_le_tk,rega + copy rega,contw + arg 3,loopcnt + call generate_random_loop + fetch 2,mem_le_tk + 2 + and_into 0x7,pdata + store 2,mem_le_tk + 2 +le_parse_smp_pairing_req_fixed_passkey: + jam BT_EVT_LE_TK_GENERATE,mem_fifo_temp + branch ui_ipc_send_event + +le_check_master_support_secure_connect: + fetch 1,mem_le_preq_auth + rtnbit1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT + fetch 1,mem_le_pairing_mode + rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT + branch app_ble_disconnect + +le_send_smp_pairing_response: + force 7,rega + call le_fifo_malloc_tx_l2cap_smp + fetch 7,mem_le_pres + istore 7,contw + rtn + + +le_parse_smp_pairing_confirm: + copy contr,rega + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_confirm_secure_passkey + copy rega,contr + arg mem_le_rconfirm,contw + call memcpy16 + branch le_send_smp_pairing_confirm +le_parse_smp_pairing_confirm_secure_passkey: + copy rega,contr + arg mem_le_rconfirm,contw + call memcpy16 + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state + rtn + + +le_send_smp_pairing_confirm: + fetch 1,mem_le_pairing_mode + bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_send_smp_pairing_confirm_sc + call generate_confirm + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_CONFIRM + istore 1,contw + branch store_aes_result + + +le_send_smp_pairing_confirm_sc: + arg mem_le_srand,contw + call generate_random + call function_f4_cb + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_CONFIRM + istore 1,contw + branch load_inverse_result + + + +le_parse_smp_pairing_random: + copy contr,rega + fetch 1,mem_le_pairing_mode + bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_parse_smp_pairing_random_sc + copy rega,contr + call authenticate_rconfirm + branch le_parse_smp_pairing_random_success,zero +le_send_pairing_confirm_value_failed: + jam PAIRING_FAILED_CONFIRM_VALUE_FAILED,mem_le_ll_pairing_fail_reason +le_send_pairing_failed: + force 2,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_FAILED + istore 1,contw + fetch 1,mem_le_ll_pairing_fail_reason + istore 1,contw +le_parse_smp_pairing_failed: + force smp_pairing_timer,queue + call timer_stop + jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state + jam BT_EVT_LE_PAIRING_FAIL,mem_fifo_temp + branch ui_ipc_send_event + +le_smp_pairing_fail_reason_not_support_pairing: + jam PAIRING_FAILED_PAIRING_NOT_SUPPORTED,mem_le_ll_pairing_fail_reason + branch le_send_pairing_failed + + +le_parse_smp_pairing_random_sc: + arg mem_le_mrand,contw + copy rega,contr + call memcpy16 + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_random_sc_passkey + call function_g2 +// jam LE_SC_STAT_RECEIVE_RANDOM,mem_le_secure_connect_state +// jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + call le_send_smp_pairing_random + fetch 1,mem_le_pairing_mode + rtnne LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC + jam BT_EVT_LE_GKEY_GENERATE,mem_fifo_temp + branch ui_ipc_send_event + +le_parse_smp_pairing_random_sc_passkey: + call function_f4_ca + arg mem_AES_CMAC_temp,contw + call load_inverse_result + arg mem_AES_CMAC_temp,rega + arg mem_le_rconfirm ,regb + arg 16,loopcnt + call string_compare + nbranch le_send_pairing_confirm_value_failed,zero + branch le_send_smp_pairing_random + +le_parse_smp_pairing_random_success: + call generate_stk + jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp + call ui_ipc_send_event + jam 1,mem_ltk_exists + jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state + +le_send_smp_pairing_random: + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_RANDOM + istore 1,contw + arg mem_le_srand,contr + branch memcpy16 + +le_parse_smp_encryption_information: + arg mem_le_peer_ltk,contw + branch memcpy16 + +le_send_smp_encryption_information: + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_ENCRYPTION_INFORMATION + istore 1,contw + fetch 1,mem_le_configuration + bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_send_fixed_ltk + arg mem_le_ltk,contr + branch memcpy16 + +le_send_fixed_ltk: + arg mem_le_fixed_ltk,contr + branch memcpy16 + + +le_send_smp_master_identification: + arg mem_le_ediv,contw + force 10,loopcnt + call generate_random_loop + force 11,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_MASTER_IDENTIFICATION + istore 1,contw + fetch 2,mem_le_ediv + istore 2,contw + fetch 8,mem_le_rand + istore 8,contw + rtn + +le_send_smp_identity_information: + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_IDENTITY_INFORMATION + istore 1,contw + setarg 0 + istore 8,contw + istore 8,contw + rtn + + +le_send_smp_identity_address_information: + force 8,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_IDENTITY_ADDRESS_INFORMATION + istore 1,contw + fetch 1,mem_le_conn_own_addr_type + istore 1,contw + fetch 6,mem_le_lap + istore 6,contw + rtn + + +le_send_pairing_fail_unspecified_reason: + jam PAIRING_FAILED_UNSPECIFIED_REASON,mem_le_ll_pairing_fail_reason + branch le_send_pairing_failed + +le_check_init_key_distribution: + fetch 1,mem_le_pres_init_key_distribution + fetcht 1,mem_le_pres_init_key_distribution + iand temp,pdata + rtn + +le_parse_smp_identity_information: + arg mem_le_irk,contw + call memcpy16 + call le_check_init_key_distribution + isolate0 LE_INITATOR_IRK_BIT,pdata + branch le_send_pairing_fail_unspecified_reason,true + fetch 1,mem_device_option + rtnne dvc_op_module + call le_check_master_addr_type + nrtn user + branch app_ble_store_reconn_info + +//output:user is enable ,random addr type +le_check_master_addr_type: + call disable_user + fetch 1,mem_le_conn_peer_addr_type + rtneq MASTER_PUBLIC_ADDR + fetch 1,mem_le_plap+5 + compare 0xc0,pdata,0xc0 + rtn true + branch enable_user + +le_parse_smp_identity_address_information: + call le_check_init_key_distribution + isolate0 LE_INITATOR_IRK_BIT,pdata + branch le_send_pairing_fail_unspecified_reason,true + rtn + +le_parse_smp_master_identification: +le_parse_smp_signing_information: +le_parse_smp_security_request: + rtn + +le_parse_smp_public_key: + arg mem_le_pubkey_remote_x_256,contw + call memcpy64 + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_RECEIVE_PUBLIC_KEY,mem_le_secure_connect_state + rtn + +le_parse_smp_dhkey_check: + arg mem_sp_confirm_remote,contw + call memcpy16 + jam LE_SC_STAT_RECEIVE_DHKEY,mem_le_secure_connect_state + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_send_smp_pairing_public_key: + force 65,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_PUBLIC_KEY + istore 1,contw + arg mem_le_pubkey_local_x_256,contr + branch memcpy64 + +le_send_smp_pairing_dhkey_check: + call function_f6_eb + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_DHKEY_CHECK + istore 1,contw + branch load_inverse_result + + +le_check_paring_time: + fetch 1,mem_le_pairing_state + rtneq FLAG_LE_PAIRING_END + arg FLAG_LE_PAIRING_RCV_PAIRING_REQ,temp + isub temp,null + nrtn positive + arg smp_pairing_timer,queue + call timer_check + nrtn blank + branch le_send_pairing_fail_unspecified_reason + +le_pairing_sm: + bpatchx patch2f_0,mem_patch2f + fetch 1,mem_le_pairing_state + beq FLAG_LE_PAIRING_NULL,le_pairing_sm_null + beq FLAG_LE_PAIRING_START,le_pairing_sm_start + beq FLAG_LE_PAIRING_SEND_RECURITY_REQ,le_pairing_sm_send_sec_req + beq FLAG_LE_PAIRING_RCV_PAIRING_REQ,le_pairing_sm_rcv_pairing_req + beq FLAG_LE_PAIRING_AFTER_AUTH,le_pairing_sm_after_auth + beq FLAG_LE_PARING_SEND_ENC_INFORMATION,le_pairng_sm_send_enc_information + beq FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,le_pairng_sm_send_master_indentification + beq FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,le_pairng_sm_send_indentity_information + rtn + +le_pairing_sm_null: +le_pairing_sm_send_sec_req: + fetch 1,mem_le_enc_state + rtnne FLAG_LE_SEND_START_ENC_RSP + jam FLAG_LE_ENC_END,mem_le_enc_state + jam FLAG_LE_PAIRING_END,mem_le_pairing_state + jam BT_EVT_LE_RECONNECT_COMPLETE ,mem_fifo_temp + branch ui_ipc_send_event + + +le_pairing_sm_start: + jam FLAG_LE_PAIRING_SEND_RECURITY_REQ,mem_le_pairing_state + branch le_send_smp_security_request + +le_pairing_sm_rcv_pairing_req: + jam FLAG_LE_PAIRING_AUTH,mem_le_pairing_state + setarg TIMER_SMP_PAIRING_TIMEOUT + arg smp_pairing_timer,queue + branch timer_init + +le_pairing_sm_after_auth: + fetch 1,mem_le_enc_state + beq FLAG_LE_SEND_START_ENC_RSP,le_pairing_sm_after_auth_start_enc + rtn + +le_pairing_sm_after_auth_start_enc: + jam FLAG_LE_PARING_SEND_ENC_INFORMATION,mem_le_pairing_state + jam BT_EVT_LE_ENC_INFO,mem_fifo_temp + call ui_ipc_send_event + call le_send_smp_encryption_information + fetch 1,mem_device_option + rtnne dvc_op_module + call le_check_master_addr_type + rtn user + branch app_ble_store_reconn_info + + +le_pairng_sm_send_enc_information: + jam FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,mem_le_pairing_state + branch le_send_smp_master_identification + +le_pairng_sm_send_master_indentification: + fetch 1,mem_le_preq_resp_key_distribution + fetcht 1,mem_le_pres_resp_key_distribution + iand temp,pdata + isolate0 LE_INITATOR_IRK_BIT,pdata + branch le_parse_start_enc_rsp_after_auth_end,true + jam FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,mem_le_pairing_state + branch le_send_smp_identity_information + +le_pairng_sm_send_indentity_information: + call le_send_smp_identity_address_information + branch le_parse_start_enc_rsp_after_auth_end + + +le_parse_start_enc_rsp_after_auth_end: + force smp_pairing_timer,queue + call timer_stop + jam FLAG_LE_ENC_END,mem_le_enc_state + jam FLAG_LE_PAIRING_END,mem_le_pairing_state + jam BT_EVT_LE_PAIRING_COMPLETE ,mem_fifo_temp + branch ui_ipc_send_event + + + +le_secure_connect_sm: + bpatchx patch2f_1,mem_patch2f + fetch 1,mem_le_pairing_mode + rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT + fetch 1,mem_le_secure_connect_flag + rtnne LE_SP_FLAG_COMMIT_256 + jam SP_FLAG_STANDBY,mem_le_secure_connect_flag + fetch 1,mem_le_secure_connect_state + beq LE_SC_STAT_RECEIVE_PUBLIC_KEY,le_sc_sm_receive_public_key + beq LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,le_sc_sm_wait_send_public_key + beq LE_SC_STAT_SEND_PUBLIC_KEY,le_sc_sm_send_public_key + beq LE_SC_STAT_RECEIVE_DHKEY,le_sc_sm_receive_dhkey + beq LE_SC_STAT_WAIT_CONFIRM_GKEY,le_sc_sm_wait_confirm_gkey + beq LE_SC_STAT_PASSKEY_WAIT_CONFIRM,le_sc_sm_passkey_wait_confirm + rtn + + +le_sc_sm_passkey_wait_confirm: + fetch 1,mem_authentication_passkey_times + copy pdata,queue + increase 1,pdata + store 1,mem_authentication_passkey_times + fetch 4,mem_le_tk + qisolate1 pdata + setarg 0x80 + setflag true,0,pdata + store 1,mem_passkey_1bit + branch le_sc_sm_ready_send_pairing_confirm + +le_sc_sm_wait_confirm_gkey: + fetch 1,mem_le_sc_confirm_gkey_flag + jam FLAG_LE_SC_CONFRIM_NULL,mem_le_sc_confirm_gkey_flag + beq FLAG_LE_SC_CONFRIM_GKEY_OK,le_sc_confirm_gkey_ok + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_sc_confirm_gkey_ok: + jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp + call ui_ipc_send_event + jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state + branch le_send_smp_pairing_dhkey_check + +le_sc_sm_receive_dhkey: + fetch 1,mem_sp_dhkey_invalid + beq SP_KEY_VALID_256,le_dhkey_ready + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_dhkey_ready: + call function_f5 +// arg mem_le_r,contw +// force 2,loopcnt +// call memset0 + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_dhkey_ready_common + call le_set_tk_0 +le_dhkey_ready_common: + call function_f6_ea + arg mem_AES_CMAC_temp,rega + arg mem_sp_confirm_remote ,regb + arg 16,loopcnt + call string_compare + branch le_dhkey_check_ok,zero +le_dhkey_check_fail: + jam PAIRING_FAILED_DHKEY_CHECK_FAILED,mem_le_ll_pairing_fail_reason + branch le_send_pairing_failed + + +le_dhkey_check_ok: + call sp_calc_check_publickey_256 + nbranch le_dhkey_check_fail,zero + jam 1,mem_ltk_exists + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_sc_confirm_gkey_ok + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_sc_confirm_gkey_ok + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_WAIT_CONFIRM_GKEY,mem_le_secure_connect_state + rtn + +le_sc_sm_send_public_key: + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_sc_sm_send_public_key_passkey + jam 0,mem_passkey_1bit +le_sc_sm_ready_send_pairing_confirm: + branch le_send_smp_pairing_confirm + +le_sc_sm_send_public_key_passkey: +// jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag +// jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state +// branch p_ng_event_le_get_passkey + jam 0,mem_authentication_passkey_times + branch le_parse_smp_pairing_req_passkey + + +le_sc_sm_receive_public_key: + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + fetch 1,mem_le_sc_local_key_invalid + beq SP_KEY_VALID_256,le_public_key_ready +// jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_public_key_ready: + jam LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,mem_le_secure_connect_state + jam SP_KEY_INVALID,mem_sp_dhkey_invalid + branch sp_dhkey_calc_256 + +le_sc_sm_wait_send_public_key: + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_SEND_PUBLIC_KEY,mem_le_secure_connect_state + branch le_send_smp_pairing_public_key + + + +le_fifo_malloc_tx_l2cap_smp: + force LE_L2CAP_CID_SMP,regb + branch le_fifo_malloc_tx_l2cap + + + +le_parse_ll: + fetch 1,mem_le_rxbuf+2 + beq LL_CONNECTION_UPDATE_REQ,le_parse_connection_update_req + beq LL_CHANNEL_MAP_REQ,le_parse_channel_map_req + beq LL_TERMINATE_IND,le_parse_terminate_ind + beq LL_ENC_REQ,le_parse_enc_req + beq LL_ENC_RSP,le_parse_enc_rsp + beq LL_START_ENC_REQ,le_parse_start_enc_req + beq LL_START_ENC_RSP,le_parse_start_enc_rsp + beq LL_UNKNOWN_RSP,le_parse_unknown_rsp + beq LL_FEATURE_REQ,le_parse_feature_req + beq LL_FEATURE_RSP,le_parse_feature_rsp + beq LL_PAUSE_ENC_REQ,le_parse_pause_enc_req + beq LL_PAUSE_ENC_RSP,le_parse_pause_enc_rsp + beq LL_VERSION_IND,le_parse_version_ind + beq LL_REJECT_IND,le_parse_reject_ind + beq LL_PING_REQ,le_parse_ping_req + beq LL_PING_RSP,le_parse_ping_rsp + arg 2,rega + arg LL_UNKNOWN_RSP,regb + call le_fifo_malloc_tx_ll + fetch 1,mem_le_rxbuf+2 + istore 1,contw + rtn + + +le_parse_connection_update_req: + ifetch 9,contr + store 9,mem_le_new_param + ifetch 2,contr + store 2,mem_le_instant + fetch 1,mem_le_state + set1 lestate_update_param,pdata + store 1,mem_le_state + rtn + +le_parse_channel_map_req: + ifetch 5,contr + store 5,mem_le_new_map + ifetch 2,contr + store 2,mem_le_instant + fetcht 2,mem_le_event_count + isub temp,null + nbranch le_parse_terminate_ind,positive + fetch 1,mem_le_state + set1 lestate_update_map,pdata + store 1,mem_le_state + rtn + + +le_parse_terminate_ind: + setarg 20 // 200ms + store 2,mem_le_superto + store 2,mem_le_init_superto + rtn + +le_send_terminate_ind_user_terminated: + arg ERROR_REMOTE_USER_TERMINATED_CONNECTION,regc + +//regc:The ErrorCode field shall be set to inform the remote device why the connection is about to be terminated. +le_send_terminate_ind: + arg 2,rega + arg LL_TERMINATE_IND,regb + call le_fifo_malloc_tx_ll + copy regc,pdata + istore 1,contw + rtn + +le_parse_feature_req: + +le_send_feature_rsp: + arg 9,rega + arg LL_FEATURE_RSP,regb + call le_fifo_malloc_tx_ll + setarg param_le_features + istore 8,contw + rtn + + +le_parse_version_ind: + rtn master +le_send_version_ind: + arg 6,rega + arg LL_VERSION_IND,regb + call le_fifo_malloc_tx_ll + fetch 5,mem_lmp_version + istore 5,contw + rtn + + +le_parse_ping_req: + arg LL_PING_RSP,regb + branch le_send_ll_one_lenth + +//regb:ll opcode +le_send_ll_one_lenth: + arg 1,rega + branch le_fifo_malloc_tx_ll + + +le_parse_enc_req: + ifetch 8,contr + store 8,mem_le_rand + ifetch 2,contr + store 2,mem_le_ediv + ifetch 8,contr + store 8,mem_le_skdm + ifetch 4,contr + store 4,mem_le_ivm + call le_send_enc_rsp + bpatchx patch2f_2,mem_patch2f + fetch 1,mem_le_pairing_state + beq FLAG_LE_PAIRING_AFTER_AUTH,le_parse_enc_req_after_auth + fetch 1,mem_le_configuration + bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_parse_enc_req_fixed_ltk + fetch 1,mem_nv_data_number + ncall load_device_list_mode_4,blank + fetch 1,mem_ltk_exists + beq 0,le_ltk_lost +le_parse_enc_req_after_auth: + jam FLAG_LE_RCV_ENC_START,mem_le_enc_state + call le_send_start_enc_req + branch generate_sk + +le_parse_enc_req_fixed_ltk: + jam 1,mem_ltk_exists + arg mem_le_fixed_ltk,contr + arg mem_le_ltk,contw + call memcpy16 + branch le_parse_enc_req_after_auth + + +le_ltk_lost: + bpatchx patch2f_3,mem_patch2f + jam FLAG_LE_ENC_NULL,mem_le_enc_state + jam FLAG_LE_ENC_NULL,mem_le_pairing_state + jam BT_EVT_LE_LTK_LOST,mem_fifo_temp + branch ui_ipc_send_event + +le_send_reject_ind: + arg 2,rega + arg LL_REJECT_IND,regb + call le_fifo_malloc_tx_ll + setarg LE_ERR_PIN_OR_KEY_MISSING + istore 1,contw + rtn + +le_send_enc_rsp: + arg mem_le_skds,contw + force 8,loopcnt + call generate_random_loop + arg mem_le_ivs,contw + force 4,loopcnt + call generate_random_loop + arg 13,rega + arg LL_ENC_RSP,regb + call le_fifo_malloc_tx_ll + fetch 8,mem_le_skds + istore 8,contw + fetch 4,mem_le_ivs + istore 4,contw + rtn + +le_send_start_enc_req: + arg LL_START_ENC_REQ,regb + branch le_send_ll_one_lenth + +le_send_start_enc_rsp: + arg LL_START_ENC_RSP,regb + branch le_send_ll_one_lenth + + +le_parse_enc_rsp: + ifetch 8,contr + store 8,mem_le_skds + ifetch 4,contr + store 4,mem_le_ivs + branch generate_sk + +le_parse_start_enc_req: + fetch 1,mem_le_state + set1 lestate_encryption,pdata + store 1,mem_le_state + rtn + +le_parse_start_enc_rsp: + rtn master + jam BT_EVT_LE_START_ENC,mem_fifo_temp + call ui_ipc_send_event + jam FLAG_LE_SEND_START_ENC_RSP,mem_le_enc_state + branch le_send_start_enc_rsp + +le_parse_pause_enc_req: + jam FLAG_LE_ENC_PAUSE,mem_le_enc_state + call le_send_pause_enc_rsp + jam BT_EVT_LE_PAUSE_ENC,mem_fifo_temp + branch ui_ipc_send_event + +le_send_pause_enc_rsp: + arg LL_PAUSE_ENC_RSP,regb + branch le_send_ll_one_lenth + + +le_parse_feature_rsp: +le_parse_unknown_rsp: +le_parse_pause_enc_rsp: +le_parse_reject_ind: +le_parse_ping_rsp: + rtn + + + +/******************************************/ +/************* LMP Parse **************/ +/******************************************/ +init_lmp: + rtn wake +init_lmp_work: + bpatchx patch2f_4,mem_patch2f + setarg 0 + store 1,mem_lmp_to_send + store 1,mem_conn_sm + store 1,mem_lmo_opcode1 + store 1,mem_lmo_opcode2 + store 1,mem_esco_addr + store 1,mem_auth_enable + store 1,mem_connection_options + store 1,mem_pairing_auth + jam SWITCH_FLAG_INIT,mem_switch_flag + jam 0,mem_switch_fail_master_count + jam NULL_ENCRYP,mem_wait_encryption +init_lmp_reinit: + jam 0,mem_pairing_auth + jam 0,mem_sp_localsm + jam 0,mem_lmp_conn_state + //fall through +parse_rx_done: + rtn + +parse_lmp: + bpatchx patch2f_5,mem_patch2f + call setlocalsm_master,master //use this flag in hci + ncall setlocalsm_slave,master + call lmo_fifo_check + nrtn blank + fetch 1,mem_state_map + rtnbit0 smap_rxlmp + set0 smap_rxlmp,pdata + set0 mark_rxbuf_inuse,mark + store 1,mem_state_map + fetch 1,mem_rxbuf + fetcht 1,mem_state_map + isolate1 smap_lmptidinit,pdata + setflag true,smap_lmptid,temp + storet 1,mem_state_map + and_into 0x2,temp //smap_lmptid only + storet 1,mem_lmo_tid2 + fetcht 1,mem_state_map + rshift pdata,pdata /* align lmp_opcode */ + store 1,mem_lmi_opcode2 + bpatchx patch2f_6,mem_patch2f + fetch 1,mem_lmi_opcode2 + beq LMP_ESCAPE,parse_lmp_escape//multi + beq LMP_ACCEPTED,parse_lmp_accepted//multi + beq LMP_NOT_ACCEPTED,parse_lmp_not_accepted//multi + beq LMP_SET_AFH, parse_lmp_set_afh + beq LMP_CLKOFFSET_REQ, parse_lmp_clkoffset_req + beq LMP_ENCRYPTION_MODE_REQ, parse_lmp_encryption_mode_req + beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_crypt_key + beq LMP_AUTO_RATE,parse_lmp_auto_rate + beq LMP_TEST_CONTROL,parse_lmp_test_control//multi + beq LMP_TEST_ACTIVATE,parse_lmp_test_activate + beq LMP_SETUP_COMPLETE,parse_lmp_setup_complete + beq LMP_SUPERVISION_TIMEOUT,parse_lmp_supervision_timeout + beq LMP_FEATURES_REQ,parse_lmp_features_req + beq LMP_HOST_CONNECTION_REQ,parse_lmp_conn_req + beq LMP_VERSION_REQ,parse_lmp_version_req + beq LMP_VERSION_RES,parse_lmp_version_res + beq LMP_DETACH,parse_lmp_detach + beq LMP_MAX_SLOT,parse_lmp_max_slot + beq LMP_MAX_SLOT_REQ,parse_lmp_max_slot_req + beq LMP_NAME_REQ,parse_lmp_name_req + beq LMP_NAME_RES,parse_lmp_name_res + beq LMP_FEATURES_RES,parse_lmp_features_res + beq LMP_COMB_KEY,parse_lmp_comb_key + beq LMP_AU_RAND, parse_lmp_au_rand + beq LMP_IN_RAND,parse_lmp_in_rand + beq LMP_SRES,parse_lmp_sres + beq LMP_INCR_POWER_REQ,parse_lmp_incr_power + beq LMP_DECR_POWER_REQ,parse_lmp_decr_power + beq LMP_MAX_POWER, parse_lmp_max_power + beq LMP_MIN_POWER, parse_lmp_min_power + beq LMP_PAGE_MODE_REQ, parse_lmp_page_mode_req + beq LMP_PAGE_SCAN_MODE_REQ, parse_lmp_page_scan_mode_req + beq LMP_PREFERRED_RATE, parse_lmp_preferred_rate + beq LMP_SLOT_OFFSET, parse_lmp_slot_offset + beq LMP_SNIFF_REQ, parse_lmp_sniff_req + beq LMP_START_ENCRYPTION_REQ, parse_lmp_start_encryption_req + beq LMP_STOP_ENCRYPTION_REQ, parse_lmp_stop_encryption_req + beq LMP_SWITCH_REQ, parse_lmp_switch_req + beq LMP_TEMP_RAND, parse_lmp_temp_rand + beq LMP_TEMP_KEY, parse_lmp_temp_key + beq LMP_TIMING_ACCURACY_REQ, parse_lmp_timing_accuracy_req + beq LMP_TIMING_ACCURACY_RES, parse_lmp_timing_accuracy_res + beq LMP_UNIT_KEY, parse_lmp_unit_key + beq LMP_UNSNIFF_REQ, parse_lmp_unsniff_req + beq LMP_USE_SEMI_PERMANENT_KEY, parse_lmp_use_semi_permanend_key + beq LMP_ENCAPSULATED_HEADER,parse_lmp_encapsulated_header + beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_encapsulated_payload + beq LMP_SIMPLE_PAIRING_CONFIRM,parse_simple_pairing_confirm + beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_simple_pairing_number + beq LMP_DHKEY_CHECK,parse_dhkey_check + beq LMP_CLKOFFSET_RES, parse_lmp_clkoffset_res + beq LMP_ENC_KEY_SIZE_MASK_REQ,parse_enc_key_size_mask_req +/* lmp is not recognized, check to see if we respond to all messages */ +/* rejecting the unrecognized message with PDU not recognized */ +reject_unknown_packet: + jam UNKNOWN_LMP_PDU,mem_lmo_reason2 +reject_lmp_packet: + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + rtn + +parse_lmp_clkoffset_req: + jam LMP_CLKOFFSET_RES,mem_lmo_opcode2 + rtn + +parse_enc_key_size_mask_req: + jam LMP_ENC_KEY_SIZE_MASK_RES,mem_lmo_opcode2 + rtn + +parse_lmp_set_afh: + fetch 4,mem_rxbuf+1 + lshift pdata,pdata + store 4,mem_afh_instant + fetch 1,mem_rxbuf+5 + store 1,mem_afh_new_mod + fetch 5,mem_rxbuf+6 + store 5,mem_afh_map_new + fetch 5,mem_rxbuf+11 + istore 5,contw + fetch 1,mem_mode + set1 afh_change,pdata + store 1,mem_mode + rtn +parse_lmp_escape: + bpatchx patch2f_7,mem_patch2f + fetch 1,mem_rxbuf+1 + set1 7,pdata + store 1,mem_lmi_opcode2 + beq LMP_EXT_ACCEPTED,parse_lmpext_accepted + beq LMP_NOT_ACCEPTED_EXT,parse_lmpext_not_accepted + beq LMP_SNIFF_SUBRATING_REQ, parse_lmp_sniff_subrating_req + beq LMP_SNIFF_SUBRATING_RES, parse_lmp_sniff_subrating_res + beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_packet_type_table_req + beq LMP_EXT_FEATURES_REQ,parse_lmpext_features_req + beq LMP_EXT_FEATURES_RES,parse_lmpext_features_res + beq LMP_EXT_CHN_CLASSIFICATION_REQ,parse_lmpext_chn_classification_req + beq LMP_PAUSE_ENCRYPTION_REQ,parse_lmpext_pause_encrypt + beq LMP_RESUME_ENCRYPTION_REQ,parse_lmpext_resume_encrypt + beq LMP_IO_CAP_REQ,parse_lmpext_iocap_req + beq LMP_IO_CAP_RES,parse_lmpext_iocap_res + rtneq LMP_EXT_FEATURES_RES + + +reject_unknown_ext_packet: + jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2 + jam UNKNOWN_LMP_PDU,mem_lmo_reason2 + + rtn +parse_lmpext_chn_classification_req: + jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2 + jam NOT_SUPPORT_CHN_CLASSIFICATION,mem_lmo_reason2 + rtn + +parse_lmpext_iocap_req: + call iocap_lmpext_load + jam LMP_IO_CAP_RES,mem_lmo_opcode2 + rtn + +parse_lmpext_iocap_res: + call iocap_lmpext_load + branch iocap_lmpext_common + +iocap_lmpext_load: + arg mem_sp_iocap_remote,contw + fetch 3, mem_rxbuf+2 + istore 3,contw + rtn + +iocap_lmpext_common: + branch master_set_mem_master_sp_flag,true//is un very ok to use master flag,but we have to add many codes if wo don't + rtn +parse_lmpext_accepted: + fetch 1,mem_rxbuf+3 + set1 7,pdata + store 1,mem_lmi_accepted_opcode + beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_accepted_ptt + rtn + + +parse_lmpext_not_accepted: + fetch 1,mem_rxbuf+3 + set1 7,pdata + store 1,mem_lmi_accepted_opcode + beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_not_accepted_ptt + rtn + +parse_lmpext_accepted_ptt: + fetch 1,mem_ptt + fetcht 1,mem_state_map + nsetflag blank,smap_edr,temp + storet 1,mem_state_map +parse_lmpext_not_accepted_ptt: + fetch 1,mem_state + rtnbit0 state_init_seq + set0 state_init_seq,pdata + store 1,mem_state + fetch 1,mem_auth_enable + nrtn blank + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + rtn + +parse_lmpext_pause_encrypt: + nbranch parse_lmpext_pause_encrypt_slave, master + jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2 + branch tid_reply + +parse_lmpext_pause_encrypt_slave: + jam LMP_PAUSE_ENCRYPTION_REQ, mem_lmo_opcode2 + rtn + +parse_lmpext_resume_encrypt: +//trans file to pc may cause pause/resume encrypt +//if ms is conn_sm_wait_end the controllor won't send ack after recieved start_encypt_accept + call tid_reply + branch lmp_start_encryption + +parse_lmpext_features_req: + jam LMP_EXT_FEATURES_RES,mem_lmo_opcode2 + rtn + +parse_lmpext_features_res: + fetcht 1,mem_rxbuf+4 + and temp,0x1,temp + storet 1,mem_remote_sppcap + fetch 1,mem_hci_cmd + bne hci_cmd_wait_remote_ext_feature,parse_lmpext_features_res_not_hci + jam 0,mem_hci_cmd +parse_lmpext_features_res_not_hci: + fetch 1,mem_conn_sm + rtnne CONN_SM_WAIT_FEATURES_EXT + jam CONN_SM_SEND_CONN_REQ,mem_conn_sm + branch process_conn_sm + +parse_lmp_accepted: + bpatchx patch30_0,mem_patch30 + fetch 1,mem_rxbuf+1 + store 1,mem_lmi_accepted_opcode + beq LMP_HOST_CONNECTION_REQ,parse_lmp_accepted_hostconn//ok + beq LMP_IN_RAND,parse_lmp_accepted_inrand//ok + beq LMP_ENCRYPTION_MODE_REQ,parse_lmp_accepted_enc_mode//ok + beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_accepted_enc_keysize//ok + beq LMP_START_ENCRYPTION_REQ,parse_lmp_accepted_start_enc//ok + beq LMP_STOP_ENCRYPTION_REQ,parse_lmp_accepted_stop_enc//ok + beq LMP_UNSNIFF_REQ,parse_lmp_accepted_unsniff_req//ok + beq LMP_SNIFF_REQ,parse_lmp_accepted_sniff_req//ok + beq LMP_SWITCH_REQ,parse_lmp_accepted_switch + // simple pairing + beq LMP_ENCAPSULATED_HEADER,parse_lmp_accepted_encapsulated_header//ok + beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_accepted_encapsulated_payload//ok + beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_accepted_simple_pairing_number//ok + beq LMP_DHKEY_CHECK,parse_lmp_accepted_dhkey_check//ok + rtn + +parse_lmp_not_accepted: + bpatchx patch30_1,mem_patch30 + fetch 1,mem_rxbuf+1 + store 1,mem_lmi_accepted_opcode + beq LMP_NAME_REQ,parse_lmp_not_accepted_name_req//ok + beq LMP_HOST_CONNECTION_REQ,parse_lmp_not_accepted_hostconn//ok + beq LMP_AU_RAND,parse_lmp_not_accepted_aurand//ok + beq LMP_IN_RAND,parse_lmp_not_accepted_inrand//ok + beq LMP_SWITCH_REQ,parse_lmp_not_accepted_switch//ok + /* simple pairing support */ + beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_not_accepted_simple_pairing_number//ok + beq LMP_DHKEY_CHECK,parse_lmp_not_accepted_dhkey_check//ok + beq LMP_UNSNIFF_REQ,parse_lmp_not_accepted_unsniff_req + beq LMP_SNIFF_REQ,parse_lmp_not_acdcept_sniff_req + rtn + +parse_lmp_accepted_switch: + jam BT_EVT_SWITCH_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + branch role_switch_prepare0 +parse_lmp_not_accepted_switch: + jam BT_EVT_SWITCH_NOT_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + jam SWITCH_FLAG_NOT_ACCEPT,mem_switch_flag + setarg TIMER_SWITCH_WAITE + arg switch_wait_timer,queue + branch timer_init + + +parse_lmp_accepted_hostconn: + //fetch 1,mem_state + //rtnbit0 state_init_seq + fetch 1,mem_lmp_conn_state + set1 RECEIVED_CONN_REQ,pdata + store 1,mem_lmp_conn_state + jam BT_EVT_BB_CONNECTED,mem_fifo_temp + call ui_ipc_send_event + jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2 + //nbranch parse_lmp_accepted_hostconn_ctn,master +parse_lmp_accepted_hostconn_ctn: + /* checking to see if we requested host connection */ + fetch 1,mem_conn_sm + bne CONN_SM_WAIT_CONN_ACCEPT, parse_rx_done + //branch parse_lmp_accepted_hostconn_master,master + /* continuing on with host connection state machine */ + jam CONN_SM_AUTH_PAIR,mem_conn_sm + rtn + //branch host_create_conn_auth_pair + + /* we need to move fast and send au_rand...jumping to next part of state machine for conn */ +//parse_lmp_accepted_hostconn_master: + //jam CONN_SM_AUTH_PAIR ,mem_conn_sm +// rtn + +parse_lmp_not_accepted_hostconn: + jam ACL_CONNECTION_ALREADY_EXISTS,mem_disconn_reason_send + jam LMP_DETACH,mem_lmo_opcode2 + /* clearing connection state machine */ + jam CONN_SM_STANDBY,mem_conn_sm + /* sending error message to host */ + branch parse_rx_done,true + rtn + +parse_lmp_accepted_inrand: + fetch 1,mem_link_key_exists + nrtn blank + call clear_linkkey + call lmp_generate_key + rtn master + set1 mark_slave_in_rand_accepted,mark + rtn + +parse_lmp_accepted_enc_mode: + nrtn master + jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2 + fetch 1,mem_state_map + rtnbit0 smap_encryption + jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2 + rtn + +parse_lmp_accepted_enc_keysize: + branch lmp_start_encryption + +parse_lmp_accepted_start_enc: + call send_create_conn_start_l2cap_timer_sm + fetch 1,mem_state + rtnbit1 state_conn_comp + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + fetch 1,mem_conn_sm + rtnne CONN_SM_ENCRYPT_WAIT + jam CONN_SM_ENCRYPT_WAIT_CLEAR,mem_conn_sm + rtn + +parse_lmp_accepted_stop_enc: + /* again this won't work with multipoint. keep track of anyone else encrypting */ + //jam HOST_STOP_ENCRYPTION,message_queue_B0 + //jam 1,message_queue_B1 + //jam HOST_RETURN_SUCCESS,message_queue_B2 + //fetch 1,mem_lmp_state2 + //set1 MESSAGE_QUEUE,pdata + //store 1,mem_lmp_state2 + rtn + +parse_lmp_not_accepted_aurand: +parse_lmp_not_accepted_aurand_send_detach: + jam LMP_DETACH,mem_lmo_opcode2 + jam OTHER_END_TERMINATED,mem_disconn_reason_send + rtn +/*in pair remote cancel the pair*/ +parse_lmp_not_accepted_inrand: + fetch 1,mem_rxbuf+2 + beq KEY_MISSING,parse_lmp_inrand_key_missing + rtnne PAIRING_NOT_ALLOWED + jam PAIRING_NOT_ALLOWED,mem_disconn_reason_send + jam LMP_DETACH,mem_lmo_opcode2 + rtn +parse_lmp_inrand_key_missing: + jam KEY_MISSING,mem_disconn_reason_send + jam LMP_DETACH,mem_lmo_opcode2 + rtn + +parse_lmp_not_accepted_name_req: + rtn + +parse_lmp_not_accepted_simple_pairing_number: + jam SP_STAT_NULL,mem_sp_state + jam LMP_DETACH,mem_lmo_opcode2 + branch parse_rx_done + +parse_lmp_not_accepted_dhkey_check: + jam SP_STAT_NULL,mem_sp_state + jam LMP_DETACH,mem_lmo_opcode2 + branch parse_rx_done +parse_lmp_not_accepted_unsniff_req: + jam BT_EVT_UNSNIFF_NOT_ACCEPT,mem_fifo_temp + branch ui_ipc_send_event + +parse_lmp_accepted_unsniff_req: + jam BT_EVT_UNSNIFF_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + branch sniff_exit + +parse_lmp_accepted_sniff_req: + jam BT_EVT_SNIFF_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + setarg 0 + store 2,mem_dsniff + fetch 2,mem_sniff_param_interval + lshift pdata,pdata + store 2,mem_tsniff + fetch 1,mem_sniff_param_attempt + store 1,mem_sniff_attempt + fetch 1,mem_sniff_param_timeout + store 1,mem_sniff_timeout + branch sniff_init + +parse_lmp_not_acdcept_sniff_req: + jam BT_EVT_SNIFF_NOT_ACCEPT,mem_fifo_temp + branch ui_ipc_send_event + +parse_lmp_crypt_key: + fetcht 1,mem_rxbuf+1 + storet 1,mem_key_size + branch accept_lmp_msg + +parse_lmp_setup_complete: + fetch 1,mem_lmp_conn_state + set1 RECEIVED_SETUP_COMPLETE,pdata + store 1,mem_lmp_conn_state + rtnbit1 SENT_SETUP_COMPLETE + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + branch parse_rx_done + +parse_lmp_max_slot: + //jam LMP_MAX_SLOT,mem_lmi_opcode2 + //branch accept_lmp_msg + rtn + +parse_lmp_max_slot_req: + fetch 1,mem_max_slot + fetcht 1,mem_rxbuf+1 + isub temp,null + //jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2 + branch accept_lmp_msg,positive + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam UNSPECIFIED_ERROR,mem_lmo_reason2 + jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2 + rtn + +parse_lmp_detach: + call prepare_disconnect + branch accept_lmp_msg + +accept_lmp_msg: + jam LMP_ACCEPTED,mem_lmo_opcode2 + rtn + +parse_lmp_incr_power: + jam LMP_MAX_POWER,mem_lmo_opcode2 + rtn + +parse_lmp_decr_power: + jam LMP_MIN_POWER,mem_lmo_opcode2 + rtn + +parse_lmp_version_res: + fetch 1,mem_conn_sm + rtneq CONN_SM_WAIT_VERSION + /* continuing on with host connection state machine */ + jam CONN_SM_SEND_FEATURES ,mem_conn_sm + /* we need to move fast and send au_rand...jumping to next part of state machine for conn */ + rtn + + +parse_lmp_auto_rate: + rtn + +parse_lmp_in_rand: + call lmp_copy_rand + jam pincode_state_wait_pincode,mem_pincode_state + jam BT_EVT_PINCODE_REQ,mem_fifo_temp + call ui_ipc_send_event + + call tid_check + nbranch lmp_accept_inrand,true + //fetch 1,mem_auth_enable + nbranch parse_lmp_inrand_res,master // ignore this because of not ssp temporary + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam LMP_IN_RAND,mem_lmi_opcode2 + jam TRANSACTION_COLLISION,mem_lmo_reason2 + rtn +parse_lmp_inrand_res: + fetch 1,mem_op + set1 op_inrand_req,pdata + store 1,mem_op + rtn + +//store current tid +pop_tid_follow: + fetcht 1,mem_state_map + nsetflag blank,smap_lmptid,temp + storet 1,mem_state_map + rtn + +//restore current tid +push_tid_follow: + fetch 1,mem_lmo_tid2 + rshift pdata,pdata + and_into 1,pdata + rtn + +parse_lmp_au_rand_moudle: + fetch 1,mem_nv_data_number + rtn blank + fetch 1,mem_pairing_auth + call load_device_list,blank + rtn + +parse_lmp_au_rand: + call parse_lmp_au_rand_moudle + call push_tid_follow + store 1,mem_sres_tid + call lmp_copy_rand + jam LMP_SRES,mem_lmo_opcode2 + fetch 1,mem_link_key_exists + nrtn blank + fetch 1,mem_state + rtnbit1 state_combkey /* we have comb key, but not verified */ + jam KEY_MISSING,mem_lmo_reason2 + branch reject_lmp_packet + +parse_lmp_sres: + arg mem_plap,rega + call function_e1 + fetch 4,mem_rxbuf+1 + fetcht 4,mem_input_store + isub temp,null + branch authentication_ok,zero + jam LMP_DETACH,mem_lmo_opcode2 + jam AUTHENTICATION_FAILURE_ERROR,mem_disconn_reason_send + rtn +authentication_ok: + call authentication_ok_common + fetch 1,mem_ssp_enable + branch pairing_success,blank + rtn + + +authentication_ok_common: + call copy_aco + call linkkey_ready///save link key + fetch 1,mem_op + isolate1 op_auth_req,pdata + set0 op_auth_req,pdata + store 1,mem_op + fetch 1,mem_conn_sm + beq CONN_SM_AUTH_WAIT,authentication_ok_conn_sm + beq CONN_SM_PAIRING_WAIT,authentication_ok_conn_sm + rtn +authentication_ok_conn_sm: + fetch 1,mem_pairing_auth + rtnne DEFALT_PAIRING_AUTH + fetch 1,mem_state_map + rtnbit1 smap_encryption + branch host_create_conn_encrypt + +parse_lmp_comb_key: + arg mem_rxbuf+1,rega + arg mem_kinit,regb + arg mem_random_number,contw + call xor16 + arg mem_plap,rega + call generate_linkkey + jam LMP_AU_RAND,mem_lmo_opcode2 + fetch 1,mem_state + bbit0 state_combkey,lmp_generate_key + rtn + +parse_lmp_name_res: + fetch 2,mem_len + add pdata,-3,loopcnt //for remote name length error + fetcht 1,mem_rxbuf+1 + setarg mem_tmp_buffer + iadd temp,contw + arg mem_rxbuf+3,contr + call memcpy + fetcht 1,mem_name_offset + fetch 1,mem_rxbuf+2 + isub temp,pdata + sub pdata,14,null + branch parse_lmp_name_res_end,positive + add temp,14,pdata + store 1,mem_name_offset + jam LMP_NAME_REQ,mem_lmo_opcode2 + rtn +parse_lmp_name_res_end: + fetch 1,mem_state_map + set1 smap_name_res,pdata + store 1,mem_state_map + bbit1 smap_name_req,lmp_disconnect + rtn +parse_lmp_name_req: + fetch 1,mem_rxbuf+1 + store 1,mem_lmi_opcode2 //offset + jam LMP_NAME_RES,mem_lmo_opcode2 + rtn + +parse_lmp_conn_req: + branch accept_lmp_msg + +parse_lmp_timing_accuracy_req: + jam LMP_TIMING_ACCURACY_RES,mem_lmo_opcode2 + rtn + +parse_lmp_features_req: + jam LMP_FEATURES_RES,mem_lmo_opcode2 + rtn + +parse_lmp_version_req: + jam LMP_VERSION_RES,mem_lmo_opcode2 + rtn + +parse_lmp_supervision_timeout: +// fetch 2,mem_rxbuf+1 +// store 2,mem_supervision_to + rtn + + + +parse_lmp_sniff_subrating_req: + fetch 2,mem_tsniff + iforce temp + fetch 1,mem_rxbuf+2 + store 1,mem_subsniff_rate + imul32 temp,temp + fetch 2,mem_rxbuf+3 + lshift pdata,pdata + store 2,mem_subsniff_tcmax + fetch 4,mem_rxbuf+5 + lshift pdata,pdata + store 4,mem_subsniff_instant + //product pdata + deposit temp + store 2,mem_subsniff_tsniff + rtn +parse_lmpext_packet_type_table_req: + fetcht 1,mem_ptt + fetch 1,mem_rxbuf+2 + ixor temp,null + nbranch reject_unknown_ext_packet,zero + isolate1 0,pdata + fetch 1,mem_state_map + setflag true,smap_edr,pdata + store 1,mem_state_map + jam LMP_EXT_ACCEPTED,mem_lmo_opcode2 + jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmi_opcode2 + rtn + + +parse_lmp_sniff_subrating_res: +parse_lmp_preferred_rate: +parse_lmp_max_power: +parse_lmp_min_power: + rtn +parse_lmp_page_mode_req: + //jam LMP_PAGE_MODE_REQ,mem_lmi_opcode2 + branch accept_lmp_msg +parse_lmp_page_scan_mode_req: + //this can influence connection. need accepted + //jam LMP_PAGE_SCAN_MODE_REQ,mem_lmi_opcode2 + branch accept_lmp_msg + + + +parse_lmp_slot_offset: + fetch 2,mem_rxbuf+1 + store 2,mem_slot_offset + rtn + +parse_lmp_sniff_req_check_sniff_para: + fetch 2,mem_rxbuf+4 /* tsniff */ + fetcht 1,mem_lpm_mult + imul32 temp,pdata + arg 0x640,temp + isub temp,null +// branch lmp_reject_sniff,positive + rtn + +parse_lmp_sniff_req: + fetch 2,mem_rxbuf+6 + branch lmp_reject_sniff,blank + call parse_lmp_sniff_req_check_sniff_para + branch lmp_reject_sniff,positive + fetch 1,mem_device_option + sub pdata,dvc_op_module,null + call module_set_lpm_mult_2,zero + fetch 1,mem_state + bbit1 state_insniff,lmp_reject_sniff + fetch 2,mem_rxbuf+2 /* dsniff */ + lshift pdata,pdata + store 2,mem_dsniff + fetch 2,mem_rxbuf+4 /* tsniff */ + lshift pdata,pdata + store 2,mem_tsniff + fetch 2,mem_rxbuf+6 /* sniff attempt */ + store 1,mem_sniff_attempt + iforce temp + fetch 2,mem_rxbuf+8 /* sniff timeout */ + store 1,mem_sniff_timeout + isub temp,null + nbranch set_big_value_to_attempt,positive + store 1,mem_sniff_attempt +set_big_value_to_attempt: + //call sniff_init + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_SNIFF_REQ,mem_lmi_opcode2 + rtn + +lmp_reject_sniff: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +parse_lmp_start_encryption_req: + call accept_lmp_msg + call lmp_copy_rand + call function_e3 + branch start_encryption + +parse_lmp_stop_encryption_req: + call accept_lmp_msg + branch stop_encryption + + +parse_lmp_switch_req: + fetch 4,mem_rxbuf+1 + lshift pdata,pdata + //branch parse_lmp_switch_req_not_accept + branch parse_lmp_switch_accept,master + fetcht 1,mem_link_key_exists + nbranch parse_lmp_switch_req_clear_mark,blank +parse_lmp_switch_req_not_accept: + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam LMP_SWITCH_REQ,mem_lmi_opcode2 + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + rtn +parse_lmp_switch_req_clear_mark: + jam LMP_SLOT_OFFSET,mem_lmo_opcode2 + jam 0,mem_conn_sm + branch role_switch_prepare + +parse_lmp_switch_accept: + call role_switch_prepare + set1 mark_reconn_recieve_switch,mark + fetch 1,mem_connection_options + set0 CONNECTION_SWITCH,pdata + store 1,mem_connection_options + branch accept_lmp_msg + + + +parse_lmp_temp_rand: +parse_lmp_temp_key: +parse_lmp_timing_accuracy_res: +parse_lmp_unit_key: +parse_lmp_use_semi_permanend_key: + rtn + + +parse_lmp_unsniff_req: + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_UNSNIFF_REQ,mem_lmi_opcode2 + jam BT_EVT_REMOTE_UNSNIFF,mem_fifo_temp + call ui_ipc_send_event + branch sniff_exit + +parse_lmp_encapsulated_header: + fetch 1,mem_rxbuf+1 + bne ENCAPSULATED_MAJOR_TYPE_P192,parse_lmp_encapsulated_header_reject + fetch 1,mem_rxbuf+2 + bne ENCAPSULATED_MINOR_TYPE_P192,parse_lmp_encapsulated_header_reject + fetch 1,mem_rxbuf+3 + bne ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_header_reject + call check_localsm + branch parse_lmp_encapsulated_header_master,true + jam SP_STAT_KEY_RECV,mem_sp_state +parse_lmp_encapsulated_header_master: + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_ENCAPSULATED_HEADER,mem_lmi_opcode2 + branch parse_rx_done + +parse_lmp_encapsulated_header_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +parse_lmp_accepted_encapsulated_header: + //jam LMP_ENCAPSULATED_PAYLOAD,mem_lmi_opcode2 + //branch accept_lmp_msg + jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2 + // branch accept_lmp_msg + rtn +parse_lmp_accepted_simple_pairing_number: + fetch 1,mem_ssp_mode_flag + beq SSP_MODE_SSP_PIN_FLAG,parse_lmp_accepted_simple_pairing_number_ssp_pin + beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_accepted_simple_pairing_number_passkey +parse_lmp_accepted_simple_pairing_number_common: + call check_localsm + rtn true + jam SP_STAT_CONFIRM_RECV,mem_sp_state + rtn + +parse_lmp_accepted_simple_pairing_number_ssp_pin: + call g_noninit_number_confirm + jam BT_EVT_BT_GKEY_GENERATE,mem_fifo_temp + call ui_ipc_send_event + branch parse_lmp_accepted_simple_pairing_number_common + + +parse_lmp_accepted_simple_pairing_number_passkey: + call check_localsm + rtn true + fetch 1,mem_authentication_passkey_times + beq 19,authentication_passkey_end + increase 1,pdata + store 1,mem_authentication_passkey_times +// branch p_authentication_passkey + +authentication_passkey: + jam SP_FLAG_COMMIT,mem_sp_flag + jam SP_STAT_COMMIT_CALC,mem_sp_state + fetch 1,mem_authentication_passkey_times + copy pdata,queue + fetch 6,mem_pin + qisolate1 pdata + setarg 0x80 + setflag true,0,pdata + store 1,mem_passkey_1bit + rtn + +authentication_passkey_end: + jam SP_STAT_CONFIRM_RECV,mem_sp_state + rtn + +parse_lmp_accepted_dhkey_check: + call parse_lmp_accepted_dhkey_check_common +pairing_success: + fetch 1,mem_flag_pairing_state + rtn blank + jam FLAG_PAIRING_STATE_NOT_PAIRING,mem_flag_pairing_state + jam BT_EVT_BT_PAIRING_SUCCESS,mem_fifo_temp + branch ui_ipc_send_event + + +parse_lmp_accepted_dhkey_check_common: + //here must be change*** shyd + call check_localsm + ncall g_noninit,true //when be master call g_init + call g_init,true + call check_localsm + rtn true + jam SP_STAT_LINK_KEY_CALC,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + rtn + +parse_simple_pairing_confirm: + arg mem_sp_confirm_remote,contw + arg mem_rxbuf+1,contr + call memcpy16 + fetch 1,mem_ssp_mode_flag + rtneq SSP_MODE_PASSKEY_ENTRY_FLAG + branch master_set_mem_master_sp_flag + +parse_lmp_encapsulated_payload: + fetch 1,mem_master_sp_state + beq SP_STAT_RANDOM_SEND,parse_encapsulated_payload_master + fetch 1,mem_sp_state + bne SP_STAT_KEY_RECV,parse_lmp_encapsulated_payload_reject +parse_encapsulated_payload_master: + fetch 1,mem_sp_remote_key_recv_count + sub pdata,0x20,contw + nbranch parse_lmp_encapsulated_payload_reject,positive + arg mem_sp_pubkey_remote,contw + iadd contw,contw + fetch 8,mem_rxbuf+1 + istore 8,contw + fetch 8,mem_rxbuf+9 + istore 8,contw + fetch 1,mem_sp_remote_key_recv_count + increase 16,pdata + store 1,mem_sp_remote_key_recv_count + bne ENCAPSULATED_LEN_P192,accept_lmp_msg +parse_lmp_encapsulated_payload_completed: + call check_localsm + branch accept_lmp_msg,true + jam SP_KEY_VALID,mem_sp_remote_key_invalid + jam SP_STAT_KEY_GENERATE,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + branch accept_lmp_msg +parse_lmp_encapsulated_payload_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet +parse_lmp_accepted_encapsulated_payload: + fetch 1,mem_sp_local_key_send_count + beq ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_payload_all_accepted + jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2 + branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted: + call check_localsm + branch parse_lmp_encapsulated_payload_all_accepted_master,true + fetch 1,mem_ssp_mode_flag + beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_encapsulated_payload_all_accepted_get_passkey + jam SP_FLAG_COMMIT,mem_sp_flag + jam SP_STAT_COMMIT_CALC,mem_sp_state + branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted_get_passkey: + jam BT_EVT_BT_GET_PASSKEY,mem_fifo_temp + branch ui_ipc_send_event + + +parse_lmp_encapsulated_payload_all_accepted_master: + //call sp_master_generate_local_key + branch parse_rx_done + +parse_lmp_simple_pairing_number: + fetch 1,mem_master_sp_state + beq SP_STAT_RANDOM_SEND,parse_lmp_simple_pairing_number_master + fetch 1,mem_sp_state + bne SP_STAT_RANDOM_RECV,parse_lmp_simple_pairing_number_reject +parse_lmp_simple_pairing_number_master: + arg mem_sp_random_remote,contw + fetch 8,mem_rxbuf+1 + istore 8,contw + fetch 8,mem_rxbuf+9 + istore 8,contw + call check_localsm + branch parse_lmp_simple_pairing_number_master0,true + jam SP_STAT_RANDOM_SEND,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + branch accept_lmp_msg +parse_lmp_simple_pairing_number_master0: + jam SP_STAT_COMMIT_CALC,mem_master_sp_state + branch master_set_mem_master_sp_flag + //jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 + //branch accept_lmp_msg +parse_lmp_simple_pairing_number_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +parse_dhkey_check: + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_SEND,parse_dhkey_check_master + fetch 1,mem_sp_state + bne SP_STAT_CONFIRM_RECV,parse_lmp_dhkey_check_reject +parse_dhkey_check_master: + arg mem_sp_check_result,contw + arg mem_rxbuf+1,contr + call memcpy16 + call check_localsm + branch parse_dhkey_check_master0,true + fetch 1,mem_ssp_mode_flag + beq SSP_MODE_SSP_PIN_FLAG,number_comparison_mode +number_comparison_successed: + jam 0,mem_flag_mode_ssp_pin + jam SP_STAT_CONFIRM_CHECK,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + jam LMP_DHKey_Check,mem_lmi_opcode2 + branch parse_rx_done + +parse_dhkey_check_master0: + jam SP_STAT_CONFIRM_CHECK,mem_master_sp_state + jam SP_FLAG_COMMIT,mem_master_sp_flag + branch parse_rx_done +parse_lmp_dhkey_check_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +number_comparison_mode: + fetch 1,mem_flag_mode_ssp_pin + bbit1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,comparison_result + set1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,pdata + store 1,mem_flag_mode_ssp_pin + rtn + +comparison_result: + bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed + jam 0,mem_flag_mode_ssp_pin + branch parse_lmp_dhkey_check_reject + + +parse_lmp_clkoffset_res: + branch parse_rx_done + +parse_lmp_encryption_mode_req: + fetch 1,mem_connection_options + set0 CONNECTION_ENCRYPT + store 1,mem_connection_options + call accept_lmp_msg + nrtn master /* do sth only if we're master */ + fetch 1,mem_rxbuf+1 + fetcht 1,mem_op + setflag blank,op_stop_enc,temp + nsetflag blank,op_start_enc,temp + storet 1,mem_op + rtn + +parse_lmp_features_res: + fetcht 8,mem_rxbuf+1 /*fix bcp(baoshijie) err*/ +parse_lmp_features_res_not_hci: + fetch 1,mem_conn_sm + rtnne CONN_SM_WAIT_FEATURES_RES + + fetch 1,mem_connection_options + bbit0 CONNECTION_FEATURE_EXT,parse_lmp_send_conn + + jam CONN_SM_SEND_FEATURES_EXT,mem_conn_sm + rtn +parse_lmp_send_conn: + jam CONN_SM_SEND_CONN_REQ,mem_conn_sm + rtn +parse_lmp_test_activate: + fetch 1,mem_debug_config + store 1,mem_test_mode_old_debug_config + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_TEST_ACTIVATE,mem_lmi_opcode2 + rtn +parse_lmp_test_control: + /* the 9 test control parameters are XORed with 0x55 */ + /* doing the XOR here and storing in mem_temp_payload */ + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_TEST_CONTROL,mem_lmi_opcode2 + force 9,loopcnt + arg mem_rxbuf+1,contr + arg mem_temp_payload,contw +parse_lmp_test_xor: + ifetch 1,contr + xor_into 0x55,pdata + istore 1,contw + loop parse_lmp_test_xor + fetch 1,test_mode_scenario + fetcht 1,mem_tester_emulate + set0 tester_no_whitening,temp + set0 tester_pattern_test,temp + beq EXIT_TEST_MODE, parse_lmp_test_control_exit + beq PAUSE_TEST_MODE, parse_lmp_test_control_pause + beq CLOSED_LOOP_BACK_ACL, parse_lmp_test_control_loopback + beq ACL_WITHOUT_WHITENING, parse_lmp_test_control_loopback_nowhite + beq CLOSED_LOOP_BACK_SCO, parse_lmp_test_control_loopback + beq SCO_WITHOUT_WHITENING, parse_lmp_test_control_loopback_nowhite + beq ZERO_PATTERN, parse_lmp_test_control_pattern + beq ONE_PATTERN, parse_lmp_test_control_pattern + beq ALT_PATTERN, parse_lmp_test_control_pattern + beq ALT2_PATTERN, parse_lmp_test_control_pattern + beq PSEUDORANDOM, parse_lmp_test_control_pattern + rtn +parse_lmp_test_control_exit: + /* restoring old parameters */ + fetch 1,mem_tester_emulate + set1 tester_exit,pdata + set1 tester_change,pdata + store 1,mem_tester_emulate + rtn +parse_lmp_test_control_pattern: + set1 tester_pattern_test,temp + jam 5,mem_lch_code + fetch 2,test_mode_data_length + iforce loopcnt + store 2,mem_len + arg mem_rxbuf,contw + call pn9 +parse_lmp_test_control_loopback_nowhite: + set1 tester_no_whitening,temp +parse_lmp_test_control_loopback: + set1 tester_change,temp + force 0,pdata + store 1,mem_slave_rcvcnt + store 2,mem_tst_pktcnt_crc + store 2,mem_tst_pktcnt_dmh + store 2,mem_tst_pktcnt_hec + store 2,mem_tst_pktcnt_sync + fetch 1,test_mode_hopping_mode + compare FIXED_FREQ,pdata,0xff + setflag true,tester_fixed_freq,temp + storet 1,mem_tester_emulate + rtn + +parse_lmp_test_control_pause: + set0 mark_testmode,mark + jam 0,mem_tester_emulate + fetch 1,mem_debug_config + set0 debug_tx_pattern,pdata + store 1,mem_debug_config + rtn + + + + + +lmp_copy_rand: + arg mem_rxbuf+1,contr + arg mem_random_number,contw + branch memcpy16 + +lmp_generate_key: + jam LMP_COMB_KEY,mem_lmo_opcode2 + rtn + +lmp_start_encryption: + nrtn master + jam LMP_START_ENCRYPTION_REQ,mem_lmo_opcode2 + rtn + +lmp_accept_inrand: + arg mem_lap,rega + call generate_kinit + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_IN_RAND,mem_lmi_opcode2 + rtn + +lmp_disconnect: + jam 10,mem_conn_timer + jam LMP_DETACH,mem_lmo_opcode2 + jam LOCAL_HOST,mem_disconn_reason_send + rtn + +/*********************************/ +/*********lmp send*************/ +/********************************/ + /* enable user if a lmp packet is to send */ +send_lmp: + bpatchx patch30_2,mem_patch30 + disable user + call lmo_fifo_process + fetch 1,mem_lmp_to_send + rtn blank +/* lmp message to be processed. this will either be because host??? */ +/* wants to send a lmp message or because one resulted from the LMP */ +/* processing section */ +/********* outgoing lmp lookup table *************/ + bbit1 7,send_lmp_escape +send_lmp0: + beq LMP_NAME_REQ, send_lmp_name_req + beq LMP_NAME_RES, send_lmp_name_res + beq LMP_ACCEPTED, send_lmp_accepted + beq LMP_NOT_ACCEPTED, send_lmp_not_accepted + beq LMP_FEATURES_REQ, send_lmp_features_req + beq LMP_FEATURES_RES, send_lmp_features_res + beq LMP_TIMING_ACCURACY_RES, send_lmp_timing_accuracy_res + beq LMP_VERSION_REQ, send_lmp_version_req + beq LMP_VERSION_RES, send_lmp_version_res + beq LMP_SETUP_COMPLETE, send_lmp_setup_complete + beq LMP_SUPERVISION_TIMEOUT, send_lmp_superto + beq LMP_HOST_CONNECTION_REQ,send_lmp_no_payload + beq LMP_IN_RAND,send_lmp_inrand + beq LMP_COMB_KEY,send_lmp_comb_key + beq LMP_AU_RAND,send_lmp_aurand + beq LMP_SRES,send_lmp_sres + beq LMP_ENCRYPTION_MODE_REQ,send_lmp_encryption_mode_req + beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_encryption_key_size_req + beq LMP_START_ENCRYPTION_REQ,send_lmp_start_encryption + beq LMP_DETACH,send_lmp_detach + beq LMP_QUALITY_OF_SERVICE_REQ, send_lmp_quality_of_service_req + beq LMP_UNIT_KEY,send_lmp_unit_key + //Optional (O) + beq LMP_INCR_POWER_REQ,send_lmp_inc_power + beq LMP_CLKOFFSET_RES, send_lmp_clkoffset_res + beq LMP_MAX_POWER,send_lmp_nopayload_reply + beq LMP_MAX_SLOT, send_lmp_max_slot + beq LMP_MAX_SLOT_REQ, send_lmp_max_slot_req + beq LMP_MIN_POWER,send_lmp_nopayload_reply + beq LMP_SLOT_OFFSET, send_lmp_slot_offset + beq LMP_SWITCH_REQ, send_lmp_switch_req + beq LMP_SNIFF_REQ, send_lmp_sniff_req + beq LMP_STOP_ENCRYPTION_REQ, send_lmp_stop_encryption_req + beq LMP_TIMING_ACCURACY_REQ, send_lmp_timing_accuracy_req + beq LMP_UNSNIFF_REQ, send_lmp_unsniff_req + beq LMP_ENCAPSULATED_HEADER,send_lmp_encapsulated_header + beq LMP_ENCAPSULATED_PAYLOAD,send_lmp_encapsulated_payload + beq LMP_SIMPLE_PAIRING_CONFIRM,send_lmp_simple_pairing_comfirm + beq LMP_SIMPLE_PAIRING_NUMBER,send_lmp_simple_pairing_number + beq LMP_DHKEY_CHECK,send_lmp_dhkey_check + beq LMP_AUTO_RATE,send_lmp_auto_rate + beq LMP_ENC_KEY_SIZE_MASK_RES,send_lmp_enc_key_size_mask_res + //master only must(M) + beq LMP_CLKOFFSET_REQ, send_lmp_clkoffset_req + beq LMP_QUALITY_OF_SERVICE, send_lmp_quality_of_service + beq LMP_TEST_ACTIVATE, send_lmp_test_activate + beq LMP_TEST_CONTROL, send_lmp_test_control +send_lmp_error: + branch assert + rtn +send_lmp_escape: + beq LMP_EXT_ACCEPTED,send_lmpext_accepted + beq LMP_EXT_FEATURES_RES,send_lmpext_features_res + beq LMP_NOT_ACCEPTED_EXT,send_lmpext_not_accepted + beq LMP_EXT_FEATURES_REQ,send_lmpext_features_req + beq LMP_PACKET_TYPE_TABLE_REQ,send_lmpext_packet_type_table_req + beq LMP_PAUSE_ENCRYPTION_REQ,send_lmpext_pause_encryption_req + beq LMP_IO_CAP_REQ,send_lmp_io_cap_req + beq LMP_IO_CAP_RES,send_lmpext_io_cap_res + beq LMP_SNIFF_SUBRATING_REQ,send_lmpext_sniff_subrating_req + beq LMP_SNIFF_SUBRATING_RES,send_lmpext_sniff_subrating_res + branch assert + + +/******** LMP follow messages **********/ +/****** TID follow received packet *******/ + +send_lmp_accepted: + force 2,pdata + call msg_send_lmp + fetch 1,mem_lmi_opcode + istore 1,contw + call send_lmp_follow + bpatchx patch30_3,mem_patch30 + fetch 1,mem_lmi_opcode + beq LMP_IN_RAND,send_lmp_accepted_inrand + beq LMP_ENCRYPTION_MODE_REQ,send_lmp_accepted_enc_mode + beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_accepted_enc_key + beq LMP_SNIFF_REQ,send_lmp_accept_sniff_req + beq LMP_HOST_CONNECTION_REQ,send_lmp_accepted_connection + beq LMP_DHKEY_CHECK,send_lmp_accept_dhkey_check + beq LMP_START_ENCRYPTION_REQ,send_create_conn_start_l2cap_timer_sm + rtn + +send_create_conn_start_l2cap_timer_sm: + fetch 1,mem_conn_sm + rtn blank + jam CONN_SM_WAIT_DONE,mem_conn_sm + setarg TIMER_ENPT_WAITE + arg enpt_delay_timer,queue + branch timer_init + +send_lmp_accept_sniff_req: + branch sniff_init +send_lmp_not_accepted: + force 3,pdata + call msg_send_lmp + fetch 1,mem_lmi_opcode + beq LMP_AU_RAND,send_not_accept_aurand + istore 1,contw + fetch 1,mem_lmo_reason + istore 1,contw + branch send_lmp_follow + +send_not_accept_aurand: + istore 1,contw + fetch 1,mem_lmo_reason + istore 1,contw + arg mem_sres_tid,temp + branch special_tid_store + +send_lmpext_accepted: + force 4,queue + call send_lmpext + setarg LMP_ESCAPE + istore 1,contw + fetch 1,mem_lmi_opcode + set0 7,pdata + istore 1,contw + fetch 1,mem_lmi_opcode + branch send_lmp_follow + +send_lmpext_not_accepted: + force 5,queue + call send_lmpext + setarg LMP_ESCAPE + istore 1,contw + fetch 1,mem_lmi_opcode + set0 7,pdata + istore 1,contw + fetch 1,mem_lmo_reason + istore 1,contw + branch send_lmp_follow + + +send_lmp_accepted_inrand: + call clear_linkkey + call tid_check + rtn true + branch lmp_generate_key + +send_lmp_accepted_enc_mode: + fetch 1,mem_op + bbit1 op_start_enc,send_lmp_accepted_enc_start + rtnbit0 op_stop_enc + jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2 + set0 op_stop_enc,pdata + call tid_reply + branch send_lmp_accepted_enc_exit +send_lmp_accepted_enc_start: + jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2 + set0 op_start_enc,pdata +send_lmp_accepted_enc_exit: + store 1,mem_op + rtn + +send_lmp_accepted_enc_key: + call check_localsm + branch lmp_start_encryption,true + rtn + +send_lmp_accepted_connection: + jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2 + //jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + fetch 1,mem_lmp_conn_state + set1 RECEIVED_CONN_REQ,pdata + store 1,mem_lmp_conn_state + jam BT_EVT_BB_CONNECTED,mem_fifo_temp + branch ui_ipc_send_event + + +send_lmp_accept_dhkey_check: + rtn +/******** LMP reply messages **********/ +/****** TID always set to remote *******/ + +send_lmpext_features_res: + force 12,queue + call send_lmpext + setarg 0x01 + istore 1,contw + fetch 2,mem_lmpext_ssp_enable + istore 2,contw + setarg 0 + istore 3,contw + setarg 0x00 + istore 4,contw + branch send_lmp_reply +send_lmpext_io_cap_res: + force 5,queue + call send_lmpext + fetch 3,mem_sp_iocap_local + istore 3,contw + call send_lmp_reply + jam FLAG_PAIRING_STATE_PAIRING,mem_flag_pairing_state + fetch 1,mem_sp_iocap_local + beq DISPLAY_YESNO,responder_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output + rtn + +responder_iocap_keyboard_only: + fetch 1,mem_sp_iocap_remote + beq DISPLAY_ONLY,responder_iocap_keyboard_only_initiator_iocap_display_only + beq DISPLAY_YESNO,responder_iocap_keyboard_only_initiator_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_keyboard_only_initiator_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output + rtn + + +responder_iocap_display_yesno: + fetch 1,mem_sp_iocap_remote + beq DISPLAY_ONLY,responder_iocap_display_yesno_initiator_iocap_display_only + beq DISPLAY_YESNO,responder_iocap_display_yesno_initiator_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_display_yesno_initiator_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_display_yesno_initiator_iocap_no_input_no_output + rtn + + +responder_iocap_no_input_no_output: + fetch 1,mem_sp_iocap_remote + beq DISPLAY_ONLY,responder_iocap_no_input_no_output_initiator_iocap_display_only + beq DISPLAY_YESNO,responder_iocap_no_input_no_output_initiator_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output + rtn + +responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: +responder_iocap_display_yesno_initiator_iocap_no_input_no_output: +responder_iocap_display_yesno_initiator_iocap_display_only: +responder_iocap_no_input_no_output_initiator_iocap_display_only: +responder_iocap_no_input_no_output_initiator_iocap_display_yesno: +responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: +responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: +set_ssp_mode_justwork: + jam SSP_MODE_JUST_WORK_FLAG,mem_ssp_mode_flag + fetch 1,mem_classic_bt_flag + bbit1 FLAG_SSP_REJECT_JUSTWORK,app_bt_disconnect + rtn + +responder_iocap_display_yesno_initiator_iocap_display_yesno: +set_ssp_mode_numeric_comparison: + jam SSP_MODE_SSP_PIN_FLAG,mem_ssp_mode_flag + rtn + +responder_iocap_keyboard_only_initiator_iocap_display_yesno: +responder_iocap_keyboard_only_initiator_iocap_keyboard_only: +responder_iocap_keyboard_only_initiator_iocap_display_only: +responder_iocap_display_yesno_initiator_iocap_keyboard_only: +set_ssp_mode_passkey: + jam SSP_MODE_PASSKEY_ENTRY_FLAG,mem_ssp_mode_flag + rtn + + +classic_bt_set_reject_justwork_flag: + arg FLAG_SSP_REJECT_JUSTWORK,queue + branch classic_bluetooth_set_flag + +classic_bt_clr_reject_justwork_flag: + arg FLAG_SSP_REJECT_JUSTWORK,queue + branch classic_bluetooth_clr_flag + +classic_bluetooth_set_flag: + fetch 1,mem_classic_bt_flag + qset1 pdata + store 1,mem_classic_bt_flag + rtn + +classic_bluetooth_clr_flag: + fetch 1,mem_classic_bt_flag + qset0 pdata + store 1,mem_classic_bt_flag + rtn + + +send_lmp_io_cap_req: + force 5,queue + call send_lmpext + fetch 3,mem_sp_iocap_local + istore 3,contw + branch send_lmp_request + + +send_lmpext_sniff_subrating_req: + + rtn +send_lmpext_sniff_subrating_res: + force 9,queue + call send_lmpext + fetch 1,mem_subsniff_rate + istore 1,contw + fetch 2,mem_subsniff_tcmax + istore 2,contw + fetch 4,mem_subsniff_instant + istore 4,contw + branch send_lmp_reply + +send_lmp_name_res: + force 17,pdata + call msg_send_lmp + fetch 1,mem_lmi_opcode /* loading name offset */ + copy pdata,temp + beq 0x00,send_lmp_name_res_offset_ok + beq 0x0e,send_lmp_name_res_offset_ok + beq 0x1c,send_lmp_name_res_offset_ok + rtn +send_lmp_name_res_offset_ok: + istore 1,contw /* writing name offset */ + fetch 1,mem_local_name_length + istore 1,contw /* writing name length */ + arg 14,loopcnt + setarg mem_local_name + iadd temp,contr /* setting read location */ + call memcpy + branch send_lmp_reply + + +send_lmp_timing_accuracy_res: + force 3,pdata + call msg_send_lmp + setarg 0x0114 + istore 2,contw + branch send_lmp_reply + +send_lmp_clkoffset_res: + // dopod s505 must wait for this res + force 3,pdata + call msg_send_lmp + fetch 4,mem_clke_bt + isub clkn_bt,pdata + branch send_lmp_clkoffset_res_master,master + sub pdata,0,pdata /* our role is slave */ +send_lmp_clkoffset_res_master: + // bit 16-2 of clkslave-clkmaster + rshift2 pdata,pdata + set0 15,pdata + istore 2,contw + branch send_lmp_reply + +send_lmp_version_res: + force 6,pdata + call msg_send_lmp + fetch 5,mem_lmp_version + istore 5,contw + branch send_lmp_reply + +send_lmp_features_res: + force 9,pdata + call msg_send_lmp + fetch 8,mem_features + istore 8,contw + branch send_lmp_reply + + +/******** LMP request messages **********/ +/****** TID always set to local initiated *******/ + + +send_lmpext_features_req: + force 12,queue + call send_lmpext + setarg 0x01 + istore 1,contw + fetch 2,mem_lmpext_ssp_enable + istore 2,contw + setarg 0 + istore 3,contw + setarg 0x00 + istore 4,contw + branch send_lmp_request + +send_lmpext_packet_type_table_req: + force 3,queue + call send_lmpext + fetch 1,mem_ptt + istore 1,contw + disable user + call send_lmp_request + nrtn user + nrtn master + fetch 1,mem_afh_cfg + rtnbit0 AFH_CFG_ON + call afh_init + branch afh_open_all_channels + +//default:featrue is enable,extfeature is disable +ssp_enable: + bpatchx patch30_4,mem_patch30 + fetch 1,mem_features+6 + set1 param_featrue_ssp,pdata + store 1,mem_features+6 + setarg param_lmpext_ssp_enable + store 2,mem_lmpext_ssp_enable + rtn + +ssp_disable: + bpatchx patch30_5,mem_patch30 + fetch 1,mem_features+6 + set0 param_featrue_ssp,pdata + store 1,mem_features+6 + setarg 0 + store 2,mem_lmpext_ssp_enable + rtn + +afh_init: + jam 0x3,mem_afh_cfg + setarg 0 + store 4,mem_afh_timer + arg mem_afh_map_lo,contw + call afh_reset_map + arg mem_afh_map_new,contw + call afh_reset_map + arg mem_afh_classify_channel_map,contw + call afh_reset_map + branch afh_clear_error_counter +afh_open_all_channels: + arg mem_afh_map_new,contw + call afh_reset_map + call afh_clear_error_counter + branch afh_set_send_flag + + +afh_reset_map: + setarg 0xffffff + istore 3,contw + istore 3,contw + istore 3,contw + setarg 0x7f + istore 1,contw + rtn +afh_clear_error_counter: + setarg 0 + store 2,mem_afh_error_total + rtn +afh_set_send_flag: + fetch 1,mem_afh_cfg + set1 send_lmp_set_afh,pdata + store 1,mem_afh_cfg + rtn + + +send_lmpext_pause_encryption_req: + force 2,queue + call send_lmpext + nbranch send_lmp_reply,master + // assume slave will not send pause req firstly??? + branch send_lmp_request + + + +send_lmp_detach: + force 2,pdata + call msg_send_lmp + fetch 1,mem_disconn_reason_send + istore 1,contw + call send_lmp_request +prepare_disconnect: + fetch 1,mem_op + set1 op_disconn,pdata + store 1,mem_op + jam 50,mem_conn_timer + rtn + + +send_lmp_no_payload: + force 1,pdata + call msg_send_lmp + branch send_lmp_request +send_lmp_nopayload_reply: + force 1,pdata + call msg_send_lmp + branch send_lmp_reply + + +send_lmp_encryption_mode_req: + force 2,pdata + call msg_send_lmp + fetch 1,mem_state_map + isolate0 smap_encryption,pdata + setflag true,0,pdata + and_into 1,pdata + istore 1,contw + branch send_lmp_request + + +send_lmp_superto: + force 3,pdata + call msg_send_lmp + fetch 2,mem_supervision_to + istore 2,contw + branch send_lmp_request + +send_lmp_name_req: + jam 250,mem_conn_timer + force 2,pdata + call msg_send_lmp + fetch 1,mem_name_offset + istore 1,contw + branch send_lmp_request + +send_lmp_test_control: + force 10,pdata + call msg_send_lmp + arg mem_temp_payload,contr + force 9,loopcnt +send_lmp_test_control_loop: + ifetch 1,contr + xor_into 0x55,pdata + istore 1,contw + loop send_lmp_test_control_loop + branch send_lmp_request + +send_lmp_quality_of_service_req: + branch send_lmp_request +send_lmp_unit_key: + branch send_lmp_request + +send_lmp_slot_offset: + rtn master + call calc_slot_offset + force 9,pdata + call msg_send_lmp + fetch 2,mem_slot_offset + istore 2,contw + fetch 3,mem_lap + istore 3,contw + fetch 1,mem_uap + istore 1,contw + fetch 2,mem_nap + istore 2,contw + bmark0 mark_switch_initiated,send_lmp_slot_offset_reply + set0 mark_switch_initiated,mark + call send_lmp_request + jam LMP_SWITCH_REQ,mem_lmo_opcode2 + rtn +send_lmp_slot_offset_reply: + call send_lmp_reply + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_SWITCH_REQ,mem_lmi_opcode2 + rtn + +send_lmp_switch_req: + arg 0x200,temp + branch switch_on_native,master + deposit clke_bt + branch switch_slack +switch_on_native: + deposit clkn_bt +switch_slack: + deposit bt_clk + iadd temp,pdata + and_into 0x1fc,pdata + store 4,mem_sniff_anchor + force 5,pdata + call msg_send_lmp + fetch 4,mem_sniff_anchor /* reused as switch instant */ + rshift pdata,pdata + istore 4,contw + branch send_lmp_request + +send_lmp_sniff_req: + force 10,pdata + call msg_send_lmp + arg mem_sniff_payload,contr + ifetch 9,contr + istore 9,contw + branch send_lmp_request + + +send_lmp_timing_accuracy_req: +/* default to TID_NORM_SEND */ + force 3,pdata + call msg_send_lmp + setarg 0x0114 + istore 2,contw + branch send_lmp_request + +send_lmp_unsniff_req: +//--------------------need to completa + force 1,pdata + call msg_send_lmp + //fetch 1,mem_unsniff_pending + //nbranch send_msg_done,blank + //jam 1,mem_unsniff_pending + //fetch 2,mem_sniff_attempt + //fetch 2,mem_nsniff_attempt + //lshift3 pdata,pdata + //lshift pdata,pdata + //store 1,mem_unsniff_cnt + branch send_lmp_request + + +send_lmp_max_slot: + force 2,pdata + call msg_send_lmp + fetch 1,mem_max_slot + istore 1,contw + branch send_lmp_request + + +send_lmp_max_slot_req: + force 2,pdata + call msg_send_lmp + setarg 0x05 /*5 slot*/ + istore 1,contw + branch send_lmp_request + + +send_lmp_inc_power: + force 2,pdata + call msg_send_lmp + setarg 0x00 /*5 slot*/ + istore 1,contw + branch send_lmp_request + + +send_lmp_setup_complete_by_module: + jam LMP_MAX_SLOT_REQ,mem_lmo_opcode2 + rtn +send_lmp_setup_complete: + fetch 1,mem_device_option + sub pdata,dvc_op_module,null + call send_lmp_setup_complete_by_module,zero + fetch 1,mem_state + set1 state_conn_comp,pdata + store 1,mem_state + copy clkn_bt,pdata + store 4,mem_aurand_send_delay_time + fetch 1,mem_lmp_conn_state + bbit1 SENT_SETUP_COMPLETE,send_lmp_setup_complete_has_sent + set1 SENT_SETUP_COMPLETE,pdata + store 1,mem_lmp_conn_state + jam BT_EVT_SETUP_COMPLETE,mem_fifo_temp + call ui_ipc_send_event + force 1,pdata + call msg_send_lmp + branch send_lmp_request +send_lmp_setup_complete_has_sent: + jam 0,mem_lmp_to_send + rtn + +send_lmp_version_req: + force 6,pdata + call msg_send_lmp + fetch 5,mem_lmp_version + istore 5,contw + branch send_lmp_request + +send_lmp_features_req: + force 9,pdata + call msg_send_lmp + fetch 8,mem_features + istore 8,contw + branch send_lmp_request + +sp_master_send_io_cap_get: + jam SP_FLAG_COMMIT,mem_master_sp_flag + fetch 1,mem_sp_local_key_invalid + rtnne SP_KEY_VALID + jam SP_MASTER_STAT_START_DONE,mem_master_sp_state + rtn + +sp_master_send_io_cap_send: + call tid_initiate + jam LMP_IO_CAP_REQ,mem_lmo_opcode2 + jam SP_STAT_KEY_SEND,mem_master_sp_state + rtn + + +sp_master_send_LMP_ENCAPSULATED_HEADER: + call tid_initiate + jam LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2 + jam SP_STAT_RANDOM_SEND,mem_master_sp_state + rtn + +sp_master_commitment_compare: + arg mem_sp_calc_result_high,rega + arg mem_sp_confirm_remote,regb + arg 16,loopcnt + call string_compare + branch sp_master_commitment_compare_success,zero + jam SP_STAT_NULL,mem_master_sp_state + call master_clear_mem_master_sp_flag + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 + branch reject_lmp_packet +sp_master_commitment_compare_success: + jam SP_STAT_CONFIRM_CALC,mem_master_sp_state + call master_set_mem_master_sp_flag + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 + branch accept_lmp_msg + + + +sp_master_send_lmp_simple_pairing_number: + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2 + rtn + + + +sp_send_lmp_encapsulated_header: + // calculate the private & public key here + //jam LMP_ENCAPSULATED_HEADER,mem_lmp_to_send + jam LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2 + //jam TID_PAIRING,mem_lmp_tid + rtn + //fetch 1,mem_tid_table + //set1 TID_PAIRING,pdata + //store 1,mem_tid_table + + +send_lmp_encapsulated_header: + jam 0,mem_sp_local_key_send_count + force 4,pdata + call msg_send_lmp + force ENCAPSULATED_MAJOR_TYPE_P192,pdata + istore 1,contw + force ENCAPSULATED_MINOR_TYPE_P192,pdata + istore 1,contw + force ENCAPSULATED_LEN_P192,pdata + istore 1,contw + call check_localsm + branch send_lmp_request,true + branch send_lmp_reply + +send_lmp_encapsulated_payload: + //jam TID_PAIRING,mem_lmp_tid + force 17,pdata + call msg_send_lmp + fetch 1,mem_sp_local_key_send_count + arg mem_sp_pubkey_local,contr + iadd contr,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + fetch 1,mem_sp_local_key_send_count + increase 16,pdata + store 1,mem_sp_local_key_send_count + call check_localsm + branch send_lmp_request,true + branch send_lmp_reply + //branch send_lmp_request + +sp_send_lmp_simple_pairing_comfirm: + jam SP_STAT_RANDOM_RECV,mem_sp_state + jam LMP_SIMPLE_PAIRING_CONFIRM,mem_lmo_opcode2 + rtn +send_lmp_simple_pairing_comfirm: + //jam SP_STAT_RANDOM_RECV,mem_sp_state + //jam TID_PAIRING,mem_lmp_tid + force 17,pdata + call msg_send_lmp + arg mem_sp_calc_result_high,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + branch send_lmp_reply + +sp_send_lmp_simple_pairing_number: + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2 + rtn + +send_lmp_simple_pairing_number: + //jam TID_PAIRING,mem_lmp_tid + call check_localsm + call sp_local_random_key_generator,true + force 17,pdata + call msg_send_lmp + arg mem_sp_random_local,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + call check_localsm + nbranch send_lmp_reply,true + branch send_lmp_request,true + +master_sp_sm_end: + //jam DEFAULT_STATEMACHINE,mem_sp_localsm + jam SP_STAT_DONE,mem_master_sp_state +sp_aurand_send: + call tid_initiate + jam LMP_AU_RAND,mem_lmo_opcode2 + call check_localsm_master + branch sp_master_key_prarm_push,true + branch sp_link_key_prarm_push +master_sp_send_lmp_dhkey_check: + call tid_reply +sp_send_lmp_dhkey_check: + jam LMP_DHKEY_CHECK,mem_lmo_opcode2 + rtn +send_lmp_dhkey_check: + //jam TID_PAIRING,mem_lmp_tid + force 17,pdata + call msg_send_lmp + arg mem_sp_calc_result_high,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + call check_localsm + nbranch send_lmp_reply,true + branch send_lmp_request,true + +send_lmp_enc_key_size_mask_res: + force 3,pdata + call msg_send_lmp + setarg 0xfffe //enc key size mask + istore 2,contw + branch send_lmp_reply + +send_lmp_auto_rate: + branch send_lmp_request +send_lmp_clkoffset_req: + branch send_lmp_request +send_lmp_quality_of_service: + branch send_lmp_request +send_lmp_test_activate: + branch send_lmp_request + +/******** LMP request/reply messages **********/ +/****** TID transaction specific *******/ + +send_lmp_comb_key: + call generate_random_number + arg mem_lap,rega + call generate_linkkey + force 17,pdata + call msg_send_lmp + arg mem_kinit,rega + arg mem_random_number,regb + call xor16 + nbranch send_lmp_follow,master + branch send_lmp_tid + +send_lmp_inrand: + call generate_random_number + arg mem_plap,rega + call generate_kinit +send_lmp_rand: /* used by in_rand,au_rand,start_encrypt */ + force 17,pdata + call msg_send_lmp + arg mem_random_number,contr + call memcpy16 + fetch 1,mem_conn_sm + beq CONN_SM_AUTH_WAIT,send_lmp_request + beq CONN_SM_PAIRING_WAIT,send_lmp_request + branch send_lmp_tid + +send_lmp_aurand: + fetch 1,mem_pairing_auth + branch send_lmp_aurand_notpairing,blank + call check_localsm + call tid_initiate,true + ncall tid_reply,true + branch send_lmp_aurand_common +send_lmp_aurand_notpairing: + call tid_initiate +send_lmp_aurand_common: + call generate_random_number + branch send_lmp_rand + +send_lmp_sres: + arg mem_lap,rega + call function_e1 + force 5,pdata + call msg_send_lmp + fetch 4,mem_input_store + istore 4,contw + arg mem_sres_tid,temp + call special_tid_store + call copy_aco + call check_localsm + branch send_lmp_sres_master,true + jam DONE_ENCRYP,mem_wait_encryption + fetch 1,mem_pairing_auth + rtn blank + jam LMP_AU_RAND,mem_lmo_opcode2 +send_lmp_sres_master: + fetch 1,mem_link_key_exists + rtn blank +send_lmp_sres_startenc: + call check_localsm + nbranch send_lmp_sres_startenc_slave,true + fetch 1,mem_auth_enable + rtn blank + jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2 + rtn +send_lmp_sres_startenc_slave: + rtnmark0 mark_slave_in_rand_accepted + set0 mark_slave_in_rand_accepted,mark + jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2 + rtn + + + +send_lmp_start_encryption: + call generate_random_number + call function_e3 + force 17,pdata + call msg_send_lmp + arg mem_random_number,contr + call memcpy16 + branch send_lmp_tid + +send_lmp_stop_encryption_req: + force 1,pdata + call msg_send_lmp + branch send_lmp_tid + +send_lmp_encryption_key_size_req: + force 2,pdata + call msg_send_lmp + force 16,pdata + istore 1,contw + store 1,mem_key_size + branch send_lmp_tid + +msg_send_lmp: +/* FLOW is set high and LMP is indicated */ + lshift3 pdata,pdata + or_into 0x07,pdata + store 1,mem_lmo_header_length + arg 17,loopcnt + arg mem_lmo_payload,contw + call clear_mem + arg mem_lmo_payload,contw + rtn + +send_lmpext: + and pdata,0x7f,rega + jam LMP_ESCAPE,mem_lmp_to_send + deposit queue + call msg_send_lmp + deposit rega + istore 1,contw + rtn + +send_lmp_follow: + fetch 1,mem_lmp_to_send + lshift pdata,pdata + fetcht 1,mem_state_map + isolate1 smap_lmptid,temp + setflag true,0,pdata + branch send_lmp_exit + + +send_lmp_tid: + fetcht 1,mem_state_map + and_into 1,temp + branch send_lmp_end + +send_lmp_reply: + force 0,temp + branch send_lmp_end + +send_lmp_request: + force 1,temp +send_lmp_end: + fetch 1,mem_lmp_to_send + lshift pdata,pdata + setflag master,0,pdata + ixor temp,pdata +send_lmp_exit: + store 1,mem_lmo_header_opcode + jam 0,mem_lmp_to_send + call lmo_fifo_process_lmo0empty + enable user + rtn + +//blank : not full +lmo_fifo_check: + fetch 1,mem_lmo_opcode2 + rtn blank + call lmo_fifo_process + fetch 1,mem_lmo_opcode2 + rtn + +lmo_fifo_process: + bpatchx patch30_6,mem_patch30 + fetch 1,mem_lmp_to_send + branch lmo_fifo_process_lmo0empty,blank + fetch 1,mem_lmo_opcode1 + nrtn blank + branch lmo_fifo_process_lmo2to1 +lmo_fifo_process_lmo0empty: + fetch 1,mem_lmo_opcode1 + branch lmo_fifo_process_lmo1_empty,blank + fetch 3,mem_lmo_opcode1 + store 3,mem_lmp_to_send//1=>0 + fetcht 1,mem_lmo_tid1 + fetch 1,mem_state_map + set0 smap_lmptid,pdata + ior temp,pdata + store 1,mem_state_map + jam 0,mem_lmo_opcode1 +lmo_fifo_process_lmo2to1: + fetch 1,mem_lmo_opcode2 + rtn blank + fetch 4,mem_lmo_opcode2 + store 4,mem_lmo_opcode1//2=>1 + jam 0,mem_lmo_opcode2 + rtn +lmo_fifo_process_lmo1_empty: + fetch 1,mem_lmo_opcode2 + rtn blank + fetch 3,mem_lmo_opcode2 + store 3,mem_lmp_to_send//2=>0 + fetcht 1,mem_lmo_tid2 + fetch 1,mem_state_map + set0 smap_lmptid,pdata + ior temp,pdata + store 1,mem_state_map + jam 0,mem_lmo_opcode2 + rtn + +//input:temp +special_tid_store: + bpatchx patch30_7,mem_patch30 + fetch 1,mem_state_map + copy pdata,regc + ifetch 1,temp + call pop_tid_follow + call send_lmp_follow + copy regc,pdata + store 1,mem_state_map + rtn + +tid_reply: + fetcht 1,mem_state_map + set0 smap_lmptidinit,temp + storet 1,mem_state_map + rtn + +tid_initiate: + fetcht 1,mem_state_map + set1 smap_lmptidinit,temp + storet 1,mem_state_map + rtn + + /* true if transaction from remote */ +tid_check: + nsetflag master,smap_lmptid,pdata //it is ok + fetcht 1,mem_state_map + ixor temp,pdata + isolate1 smap_lmptid,pdata + rtn + + /* set to remote */ +tid_set_reply: + fetch 1,mem_state_map + setflag master,smap_lmptid,pdata //it is ok + store 1,mem_state_map + rtn + + /*rtn true when we lead lmp*/ +check_localsm: + fetch 1,mem_sp_localsm + compare LOCAL_STATEMACHINE,pdata,0x7f + rtn +setlocalsm_master: + fetch 1,mem_sp_localsm + set1 7,pdata + store 1,mem_sp_localsm + rtn +setlocalsm_slave: + fetch 1,mem_sp_localsm + set0 7,pdata + store 1,mem_sp_localsm + rtn +check_localsm_master: + fetch 1,mem_sp_localsm + isolate1 7,pdata + store 1,mem_sp_localsm + rtn + +generate_random_number: + /* generating a 16 byte random number,storing in ape_random_number */ + arg mem_random_number,contw +generate_random: + force 16,loopcnt +generate_random_another: +generate_random_loop: + random pdata + istore 1,contw + loop generate_random_another + rtn + +generate_linkkey: + call function_e21 + arg mem_link_key,rega + arg mem_input_store,regb + ifetch 8,rega /* check if already got comb key */ + fetcht 1,mem_state + nsetflag blank,state_combkey,temp + storet 1,mem_state + copy rega,contw + call xor16 + branch generate_linkkey_continue + +/*********************************/ +/*********lmp send*************/ +/********************************/ + +process_conn_sm: + //nrtn master + bpatchx patch31_0,mem_patch31 + + call lmo_fifo_check + nrtn blank +process_conn_sm_continue: + fetch 1,mem_conn_sm + rtn blank + /* state machine begins in standby */ + //beq CONN_SM_STANDBY, host_create_conn_begin + //beq CONN_SM_WAIT_PAGE, host_create_conn_wait_page + beq CONN_SM_SEND_CONN_REQ, host_create_conn_send_conn_req + beq CONN_SM_WAIT_CONN_ACCEPT, host_create_conn_wait_accept + beq CONN_SM_SEND_FEATURES, host_create_conn_send_features + beq CONN_SM_WAIT_FEATURES_RES, host_create_conn_waiting + beq CONN_SM_SEND_SWITCH,host_create_conn_send_switch + beq CONN_SM_AUTH_PAIR, host_create_conn_auth_pair + beq CONN_SM_AUTH_PAIR_WAIT, host_create_conn_auth_pair_wait + beq CONN_SM_ENCRYPT, host_create_conn_encrypt + beq CONN_SM_ENCRYPT_WAIT, host_create_conn_encrypt_wait + beq CONN_SM_ENCRYPT_WAIT_CLEAR, host_create_conn_encrypt_wait_clear + beq CONN_SM_SEND_SETUP_COMPLETE, host_create_conn_send_setup_complete + beq CONN_SM_WAIT_SETUP_COMPLETE, host_create_conn_wait_setup_complete + beq CONN_SM_DETACH_DELAY,host_create_conn_master_detach + beq CONN_SM_SEND_VERSION, host_create_conn_send_version + beq CONN_SM_WAIT_VERSION, host_create_conn_waiting + beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION, host_creat_conn_wait_switch + beq CONN_SM_SEND_FEATURES_EXT,host_creat_conn_send_feat_ext + beq CONN_SM_WAIT_FEATURES_EXT,host_create_conn_waiting + beq CONN_SM_PAIRING,host_create_conn_pairing + beq CONN_SM_PAIRING_WAIT,host_create_conn_pairing_wait + beq CONN_SM_AUTH,host_create_conn_auth + beq CONN_SM_AUTH_WAIT,host_create_conn_auth_wait + beq CONN_SM_DONE,host_create_conn_done + beq CONN_SM_WAIT_DONE,host_create_conn_done_wait + jam CONN_SM_STANDBY,mem_conn_sm + /* sending error message to host */ + rtn +host_create_conn_done: + fetch 1,mem_lmp_conn_state + rtnbit0 RECEIVED_SETUP_COMPLETE + rtnbit0 SENT_SETUP_COMPLETE + jam CONN_SM_STANDBY,mem_conn_sm + call host_conn_judge_encrypt + branch scheduler_start_upper_sm + +host_conn_judge_encrypt: + fetch 1,mem_connection_options + rtnbit0 CONNECTION_ENCRYPT + jam CONN_SM_ENCRYPT_WAIT,mem_conn_sm + rtn + +host_create_conn_done_wait: + arg enpt_delay_timer,queue + call timer_check + nrtn blank + jam CONN_SM_DONE,mem_conn_sm + rtn + +host_create_conn_auth: + fetch 1,mem_connection_options + set0 CONNECTION_AUTH,pdata + store 1,mem_connection_options + jam CONN_SM_AUTH_WAIT,mem_conn_sm + jam LMP_AU_RAND,mem_lmo_opcode2 + rtn +host_create_conn_auth_wait: + rtn +host_create_conn_pairing: + fetch 1,mem_pincode_state + rtnne pincode_state_pincode_ready //wait for pincode + call host_auth + jam CONN_SM_PAIRING_WAIT,mem_conn_sm + rtn + +host_create_conn_pairing_wait: + rtn +host_creat_conn_send_feat_ext: + jam CONN_SM_WAIT_FEATURES_EXT,mem_conn_sm + jam LMP_EXT_FEATURES_REQ,mem_lmo_opcode2 + rtn +host_create_conn_send_version: + jam CONN_SM_WAIT_VERSION,mem_conn_sm + jam LMP_VERSION_REQ,mem_lmo_opcode2 + rtn + +host_creat_conn_wait_switch: + fetch 1,mem_switch_flag + rtneq SWITCH_FLAG_INIT + beq SWITCH_FLAG_ACCEPT,host_create_conn_switch_accept + arg switch_wait_timer,queue + call timer_check + nrtn blank + jam SWITCH_FLAG_INIT,mem_switch_flag + branch host_create_conn_switch +host_create_conn_switch_accept: + rtn master + branch host_create_conn_auth_pair + +host_create_conn_send_features: + jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm + jam LMP_FEATURES_REQ,mem_lmo_opcode2 + rtn +host_create_conn_send_switch: + jam LMP_SWITCH_REQ,mem_lmo_opcode2 + set1 mark_switch_initiated,mark + jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm + setarg 0x1ff + store 2, mem_soft_timer + rtn +host_create_conn_send_conn_req: + jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm + jam 0xff,mem_soft_timer + set0 mark_reconn_recieve_switch,mark + jam LMP_HOST_CONNECTION_REQ,mem_lmo_opcode2 + branch init_lmp_reinit +host_create_conn_wait_accept: + rtnmark1 mark_reconn_recieve_switch + fetch 2,mem_soft_timer + sub pdata,1,pdata + branch host_create_conn_resend,zero + store 2, mem_soft_timer + rtn +host_create_conn_resend: + jam CONN_SM_SEND_SWITCH,mem_conn_sm + rtn +host_create_conn_waiting: + /* we will exit waiting for connection request accepted, features res, or other commands to finish */ + rtn + +host_create_conn_switch: + fetch 1,mem_lmp_conn_state + rtnbit0 SENT_SETUP_COMPLETE + rtnbit0 RECEIVED_SETUP_COMPLETE + fetch 1,mem_connection_options + set0 CONNECTION_SWITCH,pdata + store 1,mem_connection_options + jam LMP_SWITCH_REQ,mem_lmo_opcode2 + jam CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,mem_conn_sm + rtn + +host_create_conn_send_setup_complete: + jam CONN_SM_WAIT_SETUP_COMPLETE,mem_conn_sm + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + rtn + +host_create_conn_wait_setup_complete: + fetch 1,mem_lmp_conn_state + rtnbit0 RECEIVED_SETUP_COMPLETE + jam CONN_SM_STANDBY,mem_conn_sm + + rtn +host_create_conn_wait_setup_complete_rtn: + jam CONN_SM_AUTH_PAIR ,mem_conn_sm + rtn + +host_create_conn_master_detach: + fetch 1, mem_soft_timer + increase -1,pdata + branch host_create_conn_send_detach,blank//detach + store 1, mem_soft_timer + rtn +host_create_conn_send_detach: + jam LMP_DETACH,mem_lmo_opcode2 + jam LOCAL_HOST,mem_disconn_reason_send + jam 0,mem_conn_sm + rtn +host_create_conn_auth_pair: + /* checking whether or not to do m/s switch */ + fetch 1,mem_connection_options + bbit1 CONNECTION_SWITCH,host_create_conn_switch + bbit1 CONNECTION_AUTH,host_create_conn_auth_pair_true +host_create_conn_sm_done: + jam CONN_SM_DONE,mem_conn_sm + rtn +host_create_conn_auth_pair_true: + fetch 1,mem_link_key_exists + branch host_create_conn_auth_pair_nokey,blank + fetch 1,mem_lmp_conn_state + rtnbit0 SENT_SETUP_COMPLETE + rtnbit0 RECEIVED_SETUP_COMPLETE + fetch 4,mem_aurand_send_delay_time + arg 100,temp + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + branch host_create_conn_auth + + + +host_create_conn_auth_pair_nokey: + jam CONN_SM_PAIRING,mem_conn_sm + jam 4,mem_pin_length + setarg 0x3030 + store 2,mem_pin + istore 2,contw + jam pincode_state_pincode_ready,mem_pincode_state + branch host_create_conn_pairing + +host_create_conn_auth_pair_wait: + rtn +host_create_conn_encrypt: + fetch 1,mem_connection_options + bbit1 CONNECTION_ENCRYPT,host_create_conn_encrypt_start + jam CONN_SM_DONE,mem_conn_sm + rtn + +host_create_conn_encrypt_start: + fetch 1,mem_connection_options + set0 CONNECTION_ENCRYPT,pdata + store 1,mem_connection_options + jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2 + rtn + +host_create_conn_encrypt_wait: + fetch 1, mem_wait_encryption + rtn blank + jam CONN_SM_STANDBY,mem_conn_sm + branch host_create_conn_encrypt_start + +host_create_conn_encrypt_wait_clear: + jam CONN_SM_SEND_SETUP_COMPLETE,mem_conn_sm + rtn + +host_auth: + fetch 1,mem_op + bbit1 op_inrand_req,remote_auth + call tid_initiate + jam LMP_IN_RAND,mem_lmo_opcode2 + branch cmd_exit +remote_auth: + fetch 1,mem_op + set0 op_inrand_req,pdata + store 1,mem_op + call lmp_accept_inrand + call tid_set_reply + branch cmd_exit + +pincode_reinit: + setarg 4 + store 1,mem_pin_length + setarg 0x3030 + istore 2,contw + istore 2,contw + rtn + + + +/* ===================== two wire SPI gpio ======================= */ + +twspi_reset: + bpatchx patch31_4,mem_patch31 + hfetch 1,core_gpio_oe3 + arg 0x06,temp + ior temp,pdata + hstore 1,core_gpio_oe3 + hfetch 1,core_gpio_out3 + ior temp,pdata + hstore 1,core_gpio_out3 + call twspi_disable + hfetch 1,core_gpio_out3 + set0 1,pdata + set0 2,pdata + hstore 1,core_gpio_out3 + nop 30 + branch twspi_enable + +twspi_reset2: + hfetch 1,core_gpio_oe3 + arg 0xc0,temp + ior temp,pdata + hstore 1,core_gpio_oe3 + hfetch 1,core_gpio_out3 + ior temp,pdata + hstore 1,core_gpio_out3 + call twspi_disable + hfetch 1,core_gpio_out3 + set0 6,pdata + set0 7,pdata + hstore 1,core_gpio_out3 + nop 30 + branch twspi_enable2 + +twspi_disable: + hfetch 1,core_gpio_sel1 + and pdata,0xfc,pdata + hstore 1,core_gpio_sel1 //disable spi + rtn +twspi_enable: + hfetch 1,core_gpio_sel1 + or pdata,0x01,pdata + hstore 1,core_gpio_sel1 //enable spi + rtn +twspi_enable2: + hfetch 1,core_gpio_sel1 + or pdata,0x03,pdata + set0 4,pdata + hstore 1,core_gpio_sel1 //enable spi2 + rtn + +// input read reg number: pdata +//output reg data: pdata +sensor_read: + copy pdata,regb + call spi_ncs_enable + nop 100 + copy regb,pdata + call twspi_read + copy pdata,regb + call spi_ncs_disable + nop 100 + copy regb,pdata + rtn +// input write reg number: pdata +sensor_write: + copy pdata,regb + call spi_ncs_enable + nop 100 + copy regb,pdata + call twspi_write + call spi_ncs_disable + nop 100 + rtn +//spi gpio init . +//0xff :disable spi ncs gpio init +spi_ncs_gpio_init: + fetcht 1,mem_spi_ncs_gpio + branch gpio_config_output + +//nsc gpio ouput low +spi_ncs_enable: + fetcht 1,mem_spi_ncs_gpio + branch gpio_out_active + +//ncs gpio output high +spi_ncs_disable: + fetcht 1,mem_spi_ncs_gpio + branch gpio_out_inactive + + +twspi_write: + branch spid_write_reg + +twspi_read: + branch spid_read_reg + + + +/* ===================== code loading ======================= */ + + +read_function_aes: + nbranch read_function,user + hfetch 1,core_gpio_key2 + or_into 0x2,pdata // enable aes + hstore 1,core_gpio_key2 +read_function: + copy temp,null + branch read_fuction_zero,zero + copy regc,pc +read_fuction_zero: + isolate0 0,null + branch set_ucode_status + +/* return temp = block length */ +get_block_header: + force 4,temp +get_block_header0: + arg mem_ucode_buf,rega + hfetch 1,core_gpio_key2 + and_into 0xfd,pdata // disable aes for header + hstore 1,core_gpio_key2 + call read_function + arg 0x55aa,rega + fetch 2,mem_ucode_buf + ifetcht 2,contr + isub rega,null + rtn + +read_first_block: + arg 2,temp + arg mem_ucode_ptr,rega + call read_function + fetch 2,mem_ucode_ptr + store 2,mem_addr_mi + call get_iv,user + rtn + +get_iv: + arg 16,temp + arg mem_ucode_keybuf,rega + hfetch 1,core_gpio_key2 + and_into 0xfd,pdata // disable aes for iv + hstore 1,core_gpio_key2 + call read_function + arg mem_ucode_keybuf,contr + arg 16,loopcnt + call aes_load_data + call aes_init + call aes_clear_data + branch do_aes_cbc /* generate first IV */ + +load_storage: + disable match + call get_block_header + nrtn zero + enable match + hjam 0x80, core_ucode_ctrl + hjam 0,core_ucode_hi + hjam 0,core_ucode_low + arg core_ucode_data,rega + call read_function_aes + hjam 0x0, core_ucode_ctrl +load_storage_loop: + arg 6,temp + call get_block_header0 + nrtn zero + ifetch 2,contr + iforce rega + call read_function + branch load_storage_loop + + + /* only load memory data from eeprom */ +reload_eeprom: + call clean_mem + setarg 0x1000 + store 2,mem_addr_mi + arg iicd_read_eep,regc + arg 2,loopcnt +reload_eeprom_loop: + call get_block_header + nrtn zero + fetch 2,mem_addr_mi + byteswap pdata,pdata + iadd temp,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + loop reload_eeprom_loop + branch load_storage_loop + +loadcode: + call clean_mem + disable user + call otp_enable_chgpump + setarg otp_ucode_flag + arg mem_otp_ucode_flag,rega + arg 2,temp + call otpd_read_data + fetch 2,mem_otp_ucode_flag + bbit0 otp_uflag_aes, loadcode_otp + hjam 0x25,core_clkoff // disable debug uart + setarg otp_ucode_aeskey + arg mem_ucode_keybuf,rega + arg 16,temp + call otpd_read_data + hjam lock_otp,core_misc_ctrl // disable further read/write of key + set1 mark_otp_encrypt,mark + arg mem_ucode_keybuf,contr + call load_key + enable user // set user for aes +loadcode_otp: + jam 0,mem_loadcode_times +loadcode_otp_2: + call loadcode_check_times + fetch 2,mem_otp_ucode_flag + byteswap pdata,pdata + arg 0x7ff,temp + iand temp,pdata + branch loadcode_iic, zero + call otp_set_addr + arg otpd_read_code,regc + call get_iv,user + call load_storage + fetch 1,mem_ucode_status + bbit0 0,loadcode_otp_2 // crc error, try again + +loadcode_iic: + call otp_disable_chgpump + jam 0,mem_loadcode_times +loadcode_iic_2: + call loadcode_check_times + call clear_eeprom_size_2k + fetch 1,mem_otp_ucode_flag + bbit1 otp_uflag_skip_eep,loadcode_spi + call loadcode_iic_by_eeprom + nbranch loadcode_iic_eeprom_2k,match + fetch 1,mem_ucode_status + bbit0 0,loadcode_iic_2 // crc error, try again + branch loadcode_hci +loadcode_iic_eeprom_2k: + call set_eeprom_size_2k + fetch 1,mem_otp_ucode_flag + bbit1 otp_uflag_skip_eep,loadcode_spi + call loadcode_iic_by_eeprom + nbranch loadcode_spi,match + fetch 1,mem_ucode_status + bbit0 0,loadcode_iic_2 // crc error, try again + branch loadcode_hci + +loadcode_spi: + jam 0,mem_loadcode_times +loadcode_spi_2: + call loadcode_check_times + fetch 1,mem_otp_ucode_flag + bbit1 otp_uflag_skip_flash, loadcode_hci + setarg 0x0 + store 3,mem_addr_hi + call spid_init_flash + arg spid_load_flash,regc + call read_first_block + call load_storage + nbranch loadcode_hci,match + fetch 1,mem_ucode_status + bbit0 0,loadcode_spi_2 // crc error, try again + +loadcode_hci: + bmark1 mark_otp_encrypt,loadcode_hci_enc + call clear_key_buf +loadcode_hci_enc: + fetch 1,mem_otp_ucode_flag + bbit0 otp_uflag_hci,clear_key_buf + hjam 0x21,core_clkoff // enable debug uart + call hci_init +loadcode_hci_loop: + call hci_rx_packet + branch loadcode_hci_loop + +clear_key_buf: + setarg 0 + store 8,mem_ucode_keybuf + store 8,mem_ucode_keybuf+8 + force regidx_key,regext_index + call aes_clear + hjam 0x21,core_clkoff // enable debug uart + rtn + + +loadcode_iic_by_eeprom: + setarg 0x0 + store 2,mem_addr_mi + arg iicd_read_eep,regc + call iicd_init_12m + call read_first_block + branch load_storage + + +loadcode_check_times: + fetch 1,mem_loadcode_times + increase 1,pdata + sub pdata,3,null + nbranch loadcode_error,positive + store 1,mem_loadcode_times + rtn + +loadcode_error: + call clear_key_buf + call ice_break + rtn + + +/* true flag is set into status */ +set_ucode_status: + fetch 1,mem_ucode_status + lshift pdata,pdata + setflag true,0,pdata + isolate0 15,rega + rtn true + store 1,mem_ucode_status + rtn + + /* queue is bit position of hw done status */ +decrypt_code: + hfetch 1,core_gpio_key2 + rtnbit0 1 + branch decrypt_code_skip /* skip to key generation at first for speed */ +decrypt_code_loop: + hfetch 1,core_dma_status + qisolate1 pdata + rtn true +decrypt_code_skip: + hfetch 1,core_misc_status + bbit0 1,decrypt_code_loop + call do_aes_cbc + branch decrypt_code_loop + + + +load_ucode: + fetch 2,mem_patch_ptr + rtn blank + hjam 0x80, core_ucode_ctrl + hjam 0,core_ucode_hi + hjam 0,core_ucode_low + fetcht 2,mem_patch_len + lshift2 temp,loopcnt + iforce contr +load_ucode_loop: + ifetch 1,contr + hstore 1,core_ucode_data + loop load_ucode_loop + hjam 0x0, core_ucode_ctrl + rtn + + +/* ===================== SPI dma ======================= */ + +spid_init: + bpatchx patch31_5,mem_patch31 + call spid_init_common + branch twspi_enable + +spid_init2: + call spid_init_common + call twspi_disable + branch twspi_enable2 + +spid_init_common: + fetch 1,mem_spi_init_clk + hstore 1,core_spid_ctrl // A7530 should at least 34, or write fail + fetch 1,mem_spi_init_delay_time + hstore 1,core_spid_delay // 4us delay + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + setarg mem_spid_rbuf + hstore 2,core_spid_rxaddr + branch twspi_disable + +spid_reset: + hfetch 1,core_spid_ctrl + set1 7,pdata + hstore 1,core_spid_ctrl + set0 7,pdata + hstore 1,core_spid_ctrl + rtn + + +/* pdata 6:0 is reg address, 15:8 is data to write */ +spid_write_reg: + set1 7,pdata + store 2,mem_spid_tbuf + bpatchx patch31_6,mem_patch31 + hjam 2,core_spid_txlen + hjam 0,core_spid_rxlen + hjam spid_start,core_misc_ctrl + branch wait_spid_done + +/* pdata 6:0 is reg address */ +spid_read_reg: + force 1,temp +/* pdata 6:0 is burst reg address, temp is bytes to read */ +spid_read_regs: +// nop 100 + store 1,mem_spid_tbuf + bpatchx patch31_7,mem_patch31 + hjam 1,core_spid_txlen + hstoret 2,core_spid_rxlen + hjam spid_start,core_misc_ctrl + call wait_spid_done + fetch 1,mem_spid_rbuf + rtn + +wait_spid_done: + fetch 2,mem_afh_error_total + increase 1,pdata + store 2,mem_afh_error_total + hfetch 1,core_dma_status + bbit0 spid_done,wait_spid_done + rtn + +spid_init_flash: + hjam 0x40,core_spid_ctrl + hjam 0x0,core_spid_delay + hfetch 1,core_gpio_sel1 + set0 0,pdata + set1 1,pdata + hstore 1,core_gpio_sel1 + setarg 0 + store 4,mem_spid_tbuf + rtn + + +spid_unlock_flash: + setarg 0 + hstore 2,core_spid_rxlen + setarg 1 + hstore 2,core_spid_txlen + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + jam 6,mem_spid_tbuf + hjam spid_start,core_misc_ctrl + branch wait_spid_done + + +/** + ****************************************************************************** + ** \brief write flash + ** + ** \param [in] rega: 2byte write ptr + ** pdata:3byte flash address + ** temp:2byte write data length + ** + ** \retval user 0: flash buys 1:write flash setting complate + ** + ******************************************************************************/ + +flash_write: + disable user + copy pdata,regb + fetch 1,mem_spi_write_flash_sm + rtnne FLASH_SM_NO_BUYS + enable user + copy regb,pdata + branch flash_write_start + + +flash_write_spi_sm_timer: + fetch 1,mem_spi_write_flash_sm + beq FLASH_SM_START,flash_write_start + beq FLASH_SM_ERASE_SECTOR,flash_erase_sector + beq FLASH_SM_WAIT_ERASE_SECTOR,flash_wait_erase_sector + beq FLASH_SM_WRITE_DATA,flash_write_data + beq FLASH_SM_WAIT_WRITE_DATA,flash_wait_write_data + rtn + +flash_write_start: + store 3,mem_spi_write_addr + copy rega,pdata + store 2,mem_spi_write_ptr + storet 2,mem_spi_write_len + jam FLASH_SM_ERASE_SECTOR,mem_spi_write_flash_sm + branch spid_init_flash +flash_erase_sector: + call spid_init_flash + jam FLASH_SM_WAIT_ERASE_SECTOR,mem_spi_write_flash_sm + call spid_unlock_flash + arg mem_spid_tbuf,rega + fetch 3,mem_spi_write_addr + hjam 4,core_spid_txlen + arg FLASH_COMMAND_SECTOR_ERASE,temp + branch spid_write_flash_common + +flash_wait_erase_sector: + call spid_init_flash + call spid_unlock_flash + setarg FLASH_READ_SATUS + call spid_read_reg + rtnbit1 FLASH_STATUS_WIP + jam FLASH_SM_WRITE_DATA,mem_spi_write_flash_sm + rtn +flash_write_data: + call spid_init_flash + jam FLASH_SM_WAIT_WRITE_DATA,mem_spi_write_flash_sm + call spid_unlock_flash + call flash_data_preserve + call spid_write_flash + branch flash_data_recover +flash_wait_write_data: + call spid_init_flash + call spid_unlock_flash + setarg FLASH_READ_SATUS + call spid_read_reg + rtnbit1 FLASH_STATUS_WIP + jam FLASH_SM_NO_BUYS,mem_spi_write_flash_sm + fetch 2,mem_cb_spi_flash_write_complate + branch callback_func +flash_data_recover: + fetch 4,mem_temp + fetcht 2,mem_spi_write_ptr + increase -4,temp + istore 4,temp + rtn +flash_data_preserve: + fetcht 2,mem_spi_write_ptr + copy temp,rega + increase -4,temp + ifetch 4,temp + store 4,mem_temp + fetcht 2,mem_spi_write_len + fetch 3,mem_spi_write_addr + rtn + + +/* pdata is flash address, rega pointers to txdata(4 ahead bytes should be left), temp is length */ +spid_write_flash: + increase 4,temp + hstoret 2,core_spid_txlen + arg FLASH_COMMAND_WRITE_DATA,temp + increase -4,rega +spid_write_flash_common: + + istoret 1,rega + rshift16 pdata,temp + istoret 1,contw + rshift8 pdata,temp + istoret 1,contw + istore 1,contw + deposit rega + hstore 2,core_spid_txaddr + setarg 0 + hstore 2,core_spid_rxlen + hjam spid_start,core_misc_ctrl + branch wait_spid_done + + +/* temp is length, rega pointers to buf */ +spid_read_flash: + hstoret 2,core_spid_rxlen + rshift16 pdata,temp + storet 1,mem_addr_hi + rshift8 pdata,temp + storet 1,mem_addr_mi + store 1,mem_addr_lo + setarg 4 + hstore 2,core_spid_txlen + jam FLASH_COMMAND_READ_DATA,mem_spid_tbuf + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + deposit rega + hstore 2,core_spid_rxaddr + hfetch 1,core_spid_ctrl + isolate0 15,rega + setflag true,6,pdata + hstore 1,core_spid_ctrl + hjam spid_start,core_misc_ctrl +spi_read_flash_wait: + hfetch 1,core_dma_status + bbit1 7,spi_read_flash_wait // waiting for spid write + arg spid_done,queue + branch wait_spid_done + + +/* temp is length, rega pointers to buf */ +spid_load_flash: + hstoret 2,core_spid_rxlen + setarg 4 + hstore 2,core_spid_txlen + jam 3,mem_spid_tbuf + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + deposit rega + hstore 2,core_spid_rxaddr + hfetch 1,core_spid_ctrl + isolate0 15,rega + setflag true,6,pdata + hstore 1,core_spid_ctrl + hjam spid_start,core_misc_ctrl +spi_load_flash_wait: + hfetch 1,core_dma_status + bbit1 7,spi_load_flash_wait // waiting for spid write + arg spid_done,queue + call decrypt_code + call wait_spid_done + isolate1 spid_crcok,pdata + call set_ucode_status + fetch 1,mem_addr_hi + lshift16 pdata,regb + fetch 1,mem_addr_mi + lshift8 pdata,pdata + ior regb,regb + fetch 1,mem_addr_lo + ior regb,pdata + iadd temp,pdata + store 1,mem_addr_lo + rshift8 pdata,pdata + store 1,mem_addr_mi + rshift8 pdata,pdata + store 1,mem_addr_hi + rtn + +/***************************************************************************** +*soft reset chip +*****************************************************************************/ +soft_reset_chip: + hjam 1,core_reset + rtn + + + +/* ===================== I2C dma ======================= */ + +iic_init_390k: //390khz + hjam 12,core_iicd_scl_low + hjam 13,core_iicd_scl_high + hjam 13,core_iicd_start_setup + hjam 13,core_iicd_start_hold + hjam 13,core_iicd_stop_setup + hjam 12,core_iicd_data_setup + branch iicd_init_gpio + + +iicd_init_12m: + hjam 5,core_iicd_scl_low + hjam 7,core_iicd_scl_high + hjam 7,core_iicd_start_setup + hjam 7,core_iicd_start_hold + hjam 7,core_iicd_stop_setup + hjam 5,core_iicd_data_setup +iicd_init_gpio: + hfetch 1,core_gpio_pu3 + or_into 0xc0,pdata + hstore 1,core_gpio_pu3 + hfetch 1,core_gpio_sel1 + or_into 0x10,pdata + hstore 1,core_gpio_sel1 + rtn + + + +wait_iicd_done: + hfetch 1,core_dma_status + bbit0 iicd_done,wait_iicd_done + rtn + +/* +pdata is tx length +rega is points to tx buffer +regb is points to rx buffer +temp is rx length +*/ +iicd_read_data: + hstore 2,core_iicd_txlen + deposit rega + hstore 2,core_iicd_txaddr + deposit regb + hstore 2,core_iicd_rxaddr + deposit temp + hstore 2,core_iicd_rxlen + arg 1,temp + nsetflag blank,1,temp + hstore 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + branch wait_iicd_done + + +set_eeprom_size_2k: + set1 mark_eeprom_size,mark + jam 0x08,mem_eeprom_block_size + rtn + +clear_eeprom_size_2k: + set0 mark_eeprom_size,mark + jam 0x20,mem_eeprom_block_size + rtn + + +iicd_read_eep_data_size_2k: + fetch 1,mem_eeprom_base + iadd regb,pdata + store 1,mem_addr_mi + branch iicd_read_eep_size_2k + +iicd_read_eep_size_2k_lcadcode: + fetch 2,mem_addr_mi + byteswap pdata,pdata + store 1,mem_addr_mi + +//length:temp +//mem ptr:rega +//eeprom addr:pdata +iicd_read_eep_size_2k: + setarg 3 + hstore 2,core_iicd_txlen + jam 0xa0,mem_iicd_tbuf + jam 0xa1,mem_iicd_tbuf+2 + branch iicd_read_eep_common + + +//length:temp +//mem ptr:rega +//eeprom addr:regb +iicd_write_protect_eep_data: + storet 2,mem_temp + call iicd_eeprom_write_enable + fetcht 2,mem_temp + call iicd_write_eep_data + branch iicd_eeprom_write_disable + +iicd_eeprom_write_enable: + fetch 1,mem_eeprom_wp_gpio + rtneq GPIO_DISABLE + bbit0 6,iicd_wp_gpio_output_low + setarg 150000 + call sleep +iicd_wp_gpio_output_low: + fetcht 1,mem_eeprom_wp_gpio + branch gpio_out_active + +iicd_eeprom_write_disable: + fetcht 1,mem_eeprom_wp_gpio + branch gpio_out_inactive + +//length:temp +//mem ptr:rega +//eeprom addr offset:regb +iicd_read_eep_data: + bpatchx patch32_0,mem_patch32 + bmark1 mark_eeprom_size,iicd_read_eep_data_size_2k + fetch 2,mem_eeprom_base + iadd regb,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + +/* rega pointers to buf, temp is length */ +iicd_read_eep: + bpatchx patch32_1,mem_patch32 + bmark1 mark_eeprom_size,iicd_read_eep_size_2k_lcadcode + setarg 4 + hstore 2,core_iicd_txlen + jam 0xa0,mem_iicd_tbuf + jam 0xa1,mem_iicd_tbuf+3 +iicd_read_eep_common: + setarg mem_iicd_tbuf + hstore 2,core_iicd_txaddr + hstoret 2,core_iicd_rxlen + deposit rega + hstore 2,core_iicd_rxaddr + setarg 2 + isolate0 15,rega + setflag true,0,pdata + hstore 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + arg iicd_done,queue + call decrypt_code + call wait_iicd_done + isolate1 iicd_crcok,pdata + call set_ucode_status + bmark1 mark_eeprom_size,iicd_read_eep_load_code_size_2k + fetch 2,mem_addr_mi + byteswap pdata,pdata + iadd temp,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + rtn + +iicd_read_eep_load_code_size_2k: + fetch 1,mem_addr_mi + iadd temp,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + rtn + + +//length:temp +//mem ptr:rega +//eeprom addr offset:regb +iicd_write_eep_data: + fetch 2,mem_eeprom_base + iadd regb,pdata + +//cuur ptr:pdata length:temp buf:rega +iicd_write_ota_data: + store 2,mem_pdatatemp //curr ptr + bpatchx patch32_2,mem_patch32 + storet 2,mem_temp //len + copy rega,pdata + store 2,mem_contr +iicd_write_eep_loop: + call iicd_eep_transparency + + fetcht 2,mem_regb + fetch 2,mem_contr + copy pdata,rega + fetch 2,mem_pdatatemp + + call iicd_write_eep + + fetch 2,mem_regb + fetcht 2,mem_contr + iadd temp,temp + storet 2,mem_contr + fetcht 2,mem_pdatatemp + iadd temp,temp + storet 2,mem_pdatatemp + fetch 2,mem_temp + nbranch iicd_write_eep_loop,blank + rtn + +//in: +//1.size 2.len 3.src 4.des +//mem_regc page's area +//mem_pdatatemp curr ptr +//mem_temp all len +//mem_regb curr len +iicd_eep_transparency: + bpatchx patch32_3,mem_patch32 + fetch 1,mem_eeprom_block_size + increase -1,pdata + fetcht 2,mem_pdatatemp + ior temp,pdata + increase 1,pdata + store 3,mem_regc + + fetch 2,mem_temp + iadd temp,pdata + + fetcht 3,mem_regc + isub temp,pdata + nbranch iicd_eep_deal_short_packet,positive + store 2,mem_temp + fetch 3,mem_regc + fetcht 2,mem_pdatatemp + isub temp,pdata + store 2,mem_regb + rtn +iicd_eep_deal_short_packet: + fetch 2,mem_temp + store 2,mem_regb + setarg 0 + store 2,mem_temp + rtn + +iicd_write_eep_size_2k: + increase 2,temp + hstoret 2,core_iicd_txlen + increase -2,rega + ifetcht 3,rega + copy temp,regb + arg 0xa0,temp + istoret 1,rega +// byteswap pdata,pdata + istore 1,contw + branch iicd_write_eep_common + + /* pdata is eeprom address, rega pointers to txdata(3 ahead bytes should be left), temp is length */ +iicd_write_eep: + copy pdata,regb + bpatchx patch32_4,mem_patch32 + bmark1 mark_eeprom_size,iicd_write_eep_size_2k + copy regb,pdata + increase 3,temp + hstoret 2,core_iicd_txlen + increase -3,rega + ifetcht 3,rega + copy temp,regb + arg 0xa0,temp + istoret 1,rega + byteswap pdata,pdata + istore 2,contw +iicd_write_eep_common: + deposit rega + hstore 2,core_iicd_txaddr + setarg 0 + hstore 2,core_iicd_rxlen + hjam 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + call wait_iicd_done + copy regb,pdata + istore 3,rega + +iic_check_eeprom_standby: + bpatchx patch32_5,mem_patch32 + jam 0,mem_iicd_tbuf+3 +iic_check_eeprom_standby_wait: + setarg 1 + hstore 2,core_iicd_txlen + jam 0xa0,mem_iicd_tbuf + setarg mem_iicd_tbuf + hstore 2,core_iicd_txaddr + setarg 0 + hstore 2,core_iicd_rxlen + hstore 2,core_iicd_rxaddr + setarg 3 + hstore 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + call wait_iicd_done + hfetch 1,core_dma_status + rtnbit0 iicd_ack + nop 1500 + fetch 1,mem_iicd_tbuf+3 + increase 1,pdata + store 1,mem_iicd_tbuf+3 + sub pdata,40,null + nrtn positive//polling timeout 6ms + branch iic_check_eeprom_standby_wait + +/* ===================== OTP ======================= */ + +otp_enable_chgpump: + hjam 0x70,rfen_chgpump + nop param_chgpump_delay + rtn + +otp_disable_chgpump: + hjam 0x30,rfen_chgpump + rtn + +otp_set_addr: + lshift3 pdata,pdata + hstore 2,core_otp_addr + hjam 0,core_otpd_ctrl + rtn + +/* pdata = otp address, rega pointers data, loopcnt is count */ +otp_write: + call otp_set_addr + call otp_ce +otp_program: + ifetcht 1,rega + increase 1,rega + force 0,queue +otp_program_bit: + qisolate0 temp + branch otp_skip_0,true + hfetch 1,core_otp_din + set1 6,pdata /* din */ + set1 7,pdata /* dle */ + hstore 1,core_otp_din + hjam 0x02,core_otp_ctrl /* web */ + hjam 0x82,core_otp_ctrl + set0 7,pdata /* dle */ + hstore 1,core_otp_din + hjam 0x8a,core_otp_ctrl /* pgmen */ + nop 11 + hjam 0xca,core_otp_ctrl /* vppen */ + nop 33 + hjam 0x4a,core_otp_ctrl /* web 2nd */ + nop 44 + hjam 0xca,core_otp_ctrl /* release web */ + nop 22 + hjam 0x8a,core_otp_ctrl /* release vppen */ + nop 33 + hjam 0x82,core_otp_ctrl /* release pgmen */ + nop 1 + hjam 0x92,core_otp_ctrl /* pgmvfy */ + nop 10 + hjam 0xb2,core_otp_ctrl /* readen */ + hfetch 1,core_otp_rdata + hjam 0x92,core_otp_ctrl /* release readen */ + nop 1 + hjam 0x82,core_otp_ctrl /* release pgmvfy */ + qisolate0 pdata + branch otp_program_bit,true /* program error */ +otp_skip_0: + hfetch 2,core_otp_addr + increase 1,pdata + hstore 2,core_otp_addr + increase 1,queue + compare 8,queue,0xf + nbranch otp_program_bit,true + loop otp_program + hjam 0x83,core_otp_ctrl + rtn + +otp_ce: + hjam 0x82,core_otp_ctrl /* ceb */ + nop 12 + hjam 0x80,core_otp_ctrl /* rstn */ + hjam 0x82,core_otp_ctrl /* release rstn */ + nop 150 /* waiting for vdd25 stable */ + rtn + + /* rega points to data, temp is count */ +otpd_read_init: + call otp_ce + hjam 0xa2,core_otp_ctrl /* readen */ + deposit rega + hstore 2,core_otpd_addr + set1 11,temp + isolate0 15,pdata + setflag true,15,temp + hstoret 2,core_otpd_len + hjam otpd_start,core_misc_ctrl + rtn + +otpd_wait_end: + hfetch 1,core_dma_status + bbit0 otpd_done,otpd_wait_end + rtn + + /* pdata=otp address, rega points to data, temp is count */ +otpd_read_data: + call otp_set_addr + call otpd_read_init + call otpd_wait_end + hjam 0x83,core_otp_ctrl /* release ceb */ + rtn + + + +/* rega pointers to buf, temp is length */ +otpd_read_code: + hfetch 2,core_current_otp_addr + hstore 2,core_otp_addr + call otpd_read_init + arg otpd_done,queue + call decrypt_code + call otpd_wait_end + isolate1 otpd_crcok,pdata + call set_ucode_status + hjam 0x83,core_otp_ctrl /* release ceb */ + rtn + +/* ===================== uart dma ======================= */ +uartd_prepare_tx: + hfetch 2,core_uart_twptr + iforce contwu + rtn + +uartd_send: + deposit contwu + hstore 2,core_uart_twptr + rtn + +uartd_rxdone: + deposit contru + hstore 2,core_uart_rrptr + rtn + +uartd_prepare_rx: + hfetch 2,core_uart_rrptr + copy pdata,contru + rtn + +uart_set_baud_by_mem: + fetch uart_baud_len,mem_baud + hstore uart_baud_len,core_uart_baud + rtn + +uart_copy_tx_bytes_fast: + deposit loopcnt + rtn blank +uart_copy_tx_bytes_fast_loop: + increase -8,loopcnt + call uart_tx_8_bytes,positive + rtn zero + branch uart_copy_tx_bytes_fast_loop,positive + increase 8,loopcnt +uart_copy_tx_bytes_fast_loop_four: + increase -4,loopcnt + call uart_tx_4_bytes,positive + rtn zero + branch uart_copy_tx_bytes_fast_loop_four,positive + increase 4,loopcnt + branch uart_copy_tx_bytes + +uart_tx_8_bytes: + ifetch 8,contr + istore 8,contwu + rtn + +uart_tx_4_bytes: + ifetch 4,contr + istore 4,contwu + rtn + +uart_copy_tx_bytes: + deposit loopcnt + rtn blank +uart_copy_tx_bytes_loop: + ifetch 1,contr + istore 1,contwu + loop uart_copy_tx_bytes_loop + rtn + +uart_copy_rx_bytes_fast: + deposit loopcnt + rtn blank +uart_copy_rx_bytes_fast_loop: + increase -8,loopcnt + call uart_rx_8_bytes,positive + rtn zero + branch uart_copy_rx_bytes_fast_loop,positive + increase 8,loopcnt +uart_copy_rx_bytes_fast_loop_four: + increase -4,loopcnt + call uart_rx_4_bytes,positive + rtn zero + branch uart_copy_rx_bytes_fast_loop_four,positive + increase 4,loopcnt + branch uart_copy_rx_bytes + +uart_rx_8_bytes: + ifetch 8,contru + istore 8,contw + rtn + +uart_rx_4_bytes: + ifetch 4,contru + istore 4,contw + rtn + + +uart_copy_rx_bytes: + deposit loopcnt + rtn blank +uart_copy_rx_bytes_loop: + ifetch 1,contru + istore 1,contw + loop uart_copy_rx_bytes_loop + rtn + + +uart_copy_rx2tx: + deposit loopcnt + rtn blank +uart_copy_rx2tx_loop: + ifetch 1,contru + istore 1,contwu + loop uart_copy_rx2tx_loop + rtn + + +/* ===================== eeprom data ======================= */ + +app_store_nvram_event: + jam BT_EVT_STORE_NVRAM,mem_fifo_temp + branch ui_ipc_send_event + +check_51cmd_store_reconn_info: +check_51cmd_update_device_record: + bpatchx patch32_6,mem_patch32 + fetch 1,mem_nv_data_number + rtn blank // not nv data + call check_nvram + call init_device_list,zero + call nvram_find_addr_from_bd_list +write_device_record: + fetch 1,mem_nv_data_number + icopy regc + fetcht 2,mem_nv_data_ptr + storet 2,mem_list_item_ptr +write_device_loop_find: + copy regc,pdata + branch app_store_nvram_event,blank //EEPROM + increase -1,regc + copy temp,rega + ifetch 1,rega + fetcht 1,mem_select_list_item + isub temp,null + call set_index_finded_device,zero + branch write_device_loop_find0,positive + ifetch 1,rega + increase 1,pdata + istore 1,rega +write_device_loop_find0: + fetcht 2,mem_list_item_ptr + increase NV_DATA_LEN,temp + storet 2,mem_list_item_ptr + branch write_device_loop_find + +set_index_finded_device: + setarg 0 + istore 1,rega + fetch 1,mem_temp_reconn_record + istore 1,contw + bne REC_3_MODE,set_index_finded_device_ble_mode + arg mem_link_key,regb +set_index_find_device_MASTER_ADDR: + ifetch 6,contr + istore 8,contw + setarg 0 + istore 8,contw + copy regb,contr +store_rec_data_common: + call memcpy16 + force 1,null + rtn + +set_index_finded_device_ble_mode: + beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_IRK + beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_EDIV + arg mem_le_ltk,regb + branch set_index_find_device_MASTER_ADDR + +set_index_finded_device_IRK: + arg mem_le_irk,contr + call memcpy16 +store_ble_rec_data_common: + arg mem_le_ltk,contr + branch store_rec_data_common + +set_index_finded_device_EDIV: + arg mem_le_rand,contr + call memcpy16 + branch store_ble_rec_data_common + + +nvram_find_addr_from_bd_list: + call disable_user + fetch 1,mem_nv_data_number + rtn blank // not nv data + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,find_addr_from_bd_list_SPP_mode +find_addr_from_bd_list_ble_mode: + bpatchx patch32_7,mem_patch32 + fetch 1,mem_le_conn_peer_addr_type + beq MASTER_PUBLIC_ADDR,find_addr_from_bd_list_static_addr + fetch 1,mem_le_plap+5 + compare 0xc0,pdata,0xc0 + branch find_addr_from_bd_list_static_addr,true + compare 0x40,pdata,0xc0 + branch find_addr_from_bd_list_random_addr,true + compare 0x00,pdata,0xc0 + branch find_addr_from_bd_list_random_non_resolvable_private_address,true +find_addr_from_bd_list_static_addr: + jam REC_4_MODE_STATIC_ADDRESS,mem_temp_reconn_record + fetch 6,mem_le_plap + branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_non_resolvable_private_address: + jam REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record + branch find_addr_from_bd_list_common + +//input :pdata EDIV and rands +find_addr_from_bd_list_random_addr: + jam REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record + branch find_addr_from_bd_list_common + +//input :pdata EDIV and rands +find_addr_from_bd_list_SPP_mode: + bpatchx patch33_0,mem_patch33 + jam REC_3_MODE,mem_temp_reconn_record + fetch 6,mem_plap +find_addr_from_bd_list_common: + store 6,mem_temp_reconn_record+1 + fetch 2,mem_nv_data_ptr + ifetcht 1,pdata + pincrease 1 + store 2,mem_list_item_ptr + storet 1,mem_select_list_item + fetch 1,mem_nv_data_number + icopy regc +nvram_find_addr_from_list: + fetch 2,mem_list_item_ptr + copy pdata,rega + call nvram_find_addr_from_list_compare + rtn user + fetcht 2,mem_list_item_ptr + increase NV_DATA_LEN,temp + storet 2,mem_list_item_ptr + increase -1,temp + ifetch 1,temp + store 1,mem_select_list_item + increase -1,regc + nbranch nvram_find_addr_from_list,zero + fetch 1,mem_nv_data_number + pincrease DECREASED_ONE + store 1,mem_select_list_item + rtn +nvram_find_addr_from_list_compare: + fetch 1,mem_temp_reconn_record + bne REC_3_MODE,find_addr_from_list_compare_ble_mode +find_master_addr_from_list_compare: + arg mem_temp_reconn_record,regb + arg 7,loopcnt + call string_compare + branch enable_user,zero + rtn + +find_addr_from_list_compare_ble_mode: + beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,find_irk_form_list_compare + beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,find_ediv_form_list_compare + branch find_master_addr_from_list_compare + +find_irk_form_list_compare: + ifetcht 1,rega + isub temp,null + nrtn zero + arg mem_le_prand,contw + arg 16,loopcnt + call clear_mem + fetch 3,mem_le_plap+3 + store 3,mem_le_prand + call genernate_master_MacAddress + fetch 2,mem_le_aes_128+13 + byteswap pdata,pdata + lshift8 pdata,temp + ifetch 1,contr + iadd temp,pdata + fetcht 3,mem_le_plap + isub temp,null + branch enable_user,zero + rtn + + +genernate_master_MacAddress: + arg mem_le_prand ,contr + call load_data128 +// arg mem_le_irk,contr + ifetch 1,rega + call load_regext + force 0x38,aes_ctrl + force 0x0,aes_ctrl + call wait_aes + arg mem_le_aes_128,contw + branch store_aes_result + +find_ediv_form_list_compare: + ifetcht 1,rega + isub temp,null + nrtn zero + copy contr,rega + add contr,8,regc + arg mem_le_rand,regb + arg 8,loopcnt + call string_compare + branch enable_user,zero + copy regc,rega + arg mem_le_irk,regb + arg 8,loopcnt + call string_compare + branch enable_user,zero + rtn + +check_nvram: + fetch 2,mem_nv_data_ptr + ifetcht 1,pdata + pincrease NV_DATA_LEN + ifetch 1,pdata + isub temp,null + rtn + +init_device_list: + fetch 1,mem_nv_data_number + icopy loopcnt + fetcht 2,mem_nv_data_ptr + setarg 0 +init_device_list_loop: + istore 1,temp + increase NV_DATA_LEN,temp + pincrease 1 + loop init_device_list_loop + rtn + +load_device_list: + bpatchx patch33_1,mem_patch33 + call nvram_find_addr_from_bd_list + fetch 1,mem_state + setflag user,state_combkey,pdata /* we have link key */ + store 1,mem_state + nbranch clear_key_exists,user + add rega,10,contr +// copy rega,contr + arg mem_link_key,contw + call memcpy16 + branch check_link_key_load +clear_key_exists: + jam 0,mem_link_key_exists + rtn + +load_device_list_mode_4: + fetch 9,mem_le_ediv + branch clear_ltk_exists,blank + call nvram_find_addr_from_bd_list + nbranch clear_ltk_exists,user + fetch 2,mem_list_item_ptr + add pdata,1,contr + arg mem_le_irk,contw + call memcpy16 + arg mem_le_ltk,contw + call memcpy16 + jam 1,mem_ltk_exists + rtn + +clear_ltk_exists: + jam 0,mem_ltk_exists + rtn + + +eeprom_store_le_reconn_info: + fetch 6,mem_le_plap + store 6,mem_temp_lap + jam REC_4_MODE,mem_record_bt_mode + branch eeprom_store_reconn_info +eeprom_store_bd_reconn_info: + fetch 6,mem_plap + store 6,mem_temp_lap + jam REC_3_MODE,mem_record_bt_mode +eeprom_store_reconn_info: + fetch 1,mem_device_option + beq dvc_op_module,check_51cmd_update_device_record + bbit1 dvc_op_mouse,mouse_store_remote_bdaddr + rtn + + +check_link_key_load: + fetch 8,mem_link_key + fetcht 8,mem_link_key+8 + ior temp,pdata + rtn blank + jam 1,mem_link_key_exists + rtn + + +/* =============== GPIO CONTROL ================= */ + + + //temp [4:0]=GPIO number, 0-31, +gpio_set_wake_by_current_state: + bpatchx patch33_2,mem_patch33 + set1 7,temp + call gpio_get_bit + nsetflag true,7,temp + //branch gpio_set_wake + //fall through + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active +gpio_set_wake: + bpatchx patch33_3,mem_patch33 + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate0 7,temp + and temp,0x1f,queue + fetch 4,mem_gpio_wakeup_low + qsetflag true,pdata + store 4,mem_gpio_wakeup_low + fetch 4,mem_gpio_wakeup_high + nqsetflag true,pdata + store 4,mem_gpio_wakeup_high + rtn + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active +gpio_clr_wake: + bpatchx patch33_4,mem_patch33 + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate0 7,temp + and temp,0x1f,queue + fetch 4,mem_gpio_wakeup_low + qset0 pdata + store 4,mem_gpio_wakeup_low + fetch 4,mem_gpio_wakeup_high + qset0 pdata + store 4,mem_gpio_wakeup_high + rtn + + +gpio_config_input_nowake: + call gpio_clr_wake + branch gpio_config_input_without_wake + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active +gpio_config_input: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + ncall gpio_set_wake,wake + +gpio_config_input_without_wake: + arg core_gpio_pd0,contw + call gpio_set_bit + setflip gpio_active_bit,temp + arg core_gpio_pu0,contw + call gpio_set_bit + set0 gpio_active_bit,temp + arg core_gpio_oe0,contw + branch gpio_set_bit + + +gpio_set_high_impedance: + arg core_gpio_pd0,contw + call gpio_set_bit + set0 gpio_active_bit,temp + arg core_gpio_pu0,contw + call gpio_set_bit + set0 gpio_active_bit,temp + arg core_gpio_oe0,contw + branch gpio_set_bit + + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active. set gpio to inactive state +gpio_config_output: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + setflip gpio_active_bit,temp + call gpio_out +gpio_config_output0: + set1 gpio_active_bit,temp + arg core_gpio_oe0,contw + branch gpio_set_bit + +gpio_common: + and temp,0x07,queue + rshift3 temp,pdata + and_into 3,pdata + iadd contw,contw + ifetch 1,contw + rtn + +gpio_check_active: + arg core_gpio_out0,contw + branch get_bit_common + + + /* temp is gpio number, return true if gpio active */ +gpio_get_bit: + arg core_gpio_in,contw +get_bit_common: + call gpio_common + isolate1 gpio_active_bit,temp + branch gpio_get_bit_reverse,true + qisolate0 pdata + rtn +gpio_get_bit_reverse: + qisolate1 pdata + rtn + +gpio_out_inactive: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate1 7,null + branch gpio_out_flag + +gpio_out_active: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate0 7,null + + /* temp is gpio number, [7]=1,set out equa true flag if gpio active */ +gpio_out_flag: + setarg 0 + nsetflag true,gpio_active_bit,pdata + ixor temp,temp + + /* temp is gpio number,0-31, [7]=out bit value */ +gpio_out: + arg core_gpio_out0,contw + + //temp [4:0]=GPIO number, 0-31, [7]=bit value; contw is gpio reg base +gpio_set_bit: + call gpio_common + isolate1 gpio_active_bit,temp + qsetflag true,pdata + istore 1,contw + rtn + +gpio_set_before_lpm_common: + arg -1,rega + hfetch 1,core_gpio_sel1 + compare 0x02,pdata,0x03 + call neglact4_from_23_pin,true //spi + + compare 0x01,pdata,0x03 + call neglact2_form_25_pin,true //two spi gpio25 26 + + compare 0x03,pdata,0x03 + call neglact2_form_25_pin,true //two spi gpio30 31 + + isolate1 2,pdata + call neglect2_from_6_pin,true //uart + + isolate1 3,pdata + call neglect4_from_9_pin,true //spi + + isolate1 4,pdata + call neglact2_form_30_pin,true //IIC GPIO30 31 + + isolate1 6,pdata + nsetflag true,04,rega //pwm0 gpio4 + + isolate1 7,pdata + nsetflag true,05,rega //pwm1 gpio5 + + hfetch 1,core_gpio_sel2 + isolate1 0,pdata + nsetflag true,27,rega //pwm2 gpio27 + isolate1 1,pdata + nsetflag true,28,rega //pwm3 gpio28 + isolate1 2,pdata + nsetflag true,03,rega //pwm4 gpio03 + isolate1 3,pdata + nsetflag true,08,rega //pwm5 gpio08 + isolate1 4,pdata + nsetflag true,20,rega //pwm0 gpio20 + isolate1 5,pdata + nsetflag true,21,rega //pwm1 gpio21 + isolate1 6,pdata + nsetflag true,22,rega //pwm2 gpio22 + isolate1 7,pdata + nsetflag true,23,rega //pwm3 gpio23 + + hfetch 1,core_gpio_sel + isolate1 0,pdata + nsetflag true,05,rega //ADC GPIO05 + isolate1 1,pdata + nsetflag true,06,rega //ADC GPIO06 + isolate1 2,pdata + nsetflag true,07,rega //ADC GPIO07 + isolate1 3,pdata + nsetflag true,18,rega //ADC GPIO18 + isolate1 4,pdata + nsetflag true,19,rega //ADC GPIO19 + isolate1 5,pdata + nsetflag true,20,rega //ADC GPIO20 + isolate1 6,pdata + nsetflag true,21,rega //ADC GPIO21 + isolate1 7,pdata + nsetflag true,22,rega //ADC GPIO22 + + hfetch 1,core_uart_ctrl + isolate1 4,pdata + call neglact2_form_2_pin,true + bpatchx patch33_5,mem_patch33 + + hfetch 4,core_gpio_pu0 + hfetcht 4,core_gpio_pd0 + ior temp,pdata + invert pdata,pdata + iand rega,pdata + //set0 4,pdata //revc + hstore 4,core_gpio_oe0 + rtn + + +neglect2_from_6_pin: //uart + arg 6,queue + branch neglect_2_pin +neglect4_from_9_pin: + arg 9,queue + branch neglact_4_pin +neglact4_from_23_pin: + arg 23,queue + branch neglact_4_pin +neglact2_form_25_pin: + arg 25,queue + branch neglect_2_pin +neglact2_form_30_pin: + arg 30,queue + branch neglect_2_pin +neglact2_form_2_pin: + arg 2,queue + branch neglect_2_pin +neglact_1_pin: + arg 1,loopcnt + branch neglect_pin_loop +neglact_4_pin: + arg 4,loopcnt + branch neglect_pin_loop +neglect_2_pin: + arg 2,loopcnt +neglect_pin_loop: + qset0 rega + increase 1,queue + loop neglect_pin_loop + rtn + + + + + + +/* ===================== sniff GPIO CONTROL ======================= */ +gpio_cfg_uart_tx_output: + call gpio_uart2gpio + arg UART_WAKEUP_TX,temp + branch gpio_config_output + +gpio_pu_uart_tx: + call gpio_cfg_uart_tx_output + arg UART_WAKEUP_TX,temp + branch gpio_out_inactive + + + +gpio_rx_config_input_with_pu: + call gpio_uart2gpio + hfetch 1, core_gpio_pu0 + set1 UART_WAKEUP_RX,pdata + hstore 1,core_gpio_pu0 + arg UART_WAKEUP_RX,temp + branch gpio_config_input + +gpio_uart2gpio: + hfetch 1,core_gpio_sel1 + and_into 0xfb,pdata + hstore 1,core_gpio_sel1 + rtn + +gpio_check_uart_state: + hfetch 1,core_gpio_sel1 + isolate1 2,pdata + rtn + +load_chip_option: + call otp_enable_chgpump + setarg OTP_CHIP_FUNCTIONS + arg mem_chip_functions,rega + arg 0x02,temp + call otpd_read_data + branch otp_disable_chgpump + + +load_adc_init: + call otp_enable_chgpump + setarg otp_adc_io_0_5V_addr + arg mem_0_5_adc_io_data,rega + arg 14,temp + call otpd_read_data + branch otp_disable_chgpump + + +//mem_adc_config_flag 0:vinlpm 1:Hvin 2: GPIO +adc_init_data: + bpatchx patch33_6,mem_patch33 + + call load_adc_init + + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,adc_init_data_vinlpm + beq ADC_CONFIG_HVIN,adc_init_data_hvin + beq ADC_CONFIG_GPIO,adc_init_data_io + rtn + +adc_init_data_vinlpm: + fetcht 2,mem_otp_adc_flag + setarg OTP_ADC_FLAG + isub temp,null + branch adc_check_data_vinlpm,zero + setarg 0x4dfa + store 2,mem_3v_adc_vinlpm_data + setarg 0x4894 + store 2,mem_2v_adc_vinlpm_data + branch set_vdd_reference_voltage_1v + +adc_check_data_vinlpm: + fetch 2,mem_3v_adc_vinlpm_data + nbranch adc_check_2v_vinlpm,blank + setarg 0x4dfa + store 2,mem_3v_adc_vinlpm_data +adc_check_2v_vinlpm: + fetch 2,mem_2v_adc_vinlpm_data + nbranch set_vdd_reference_voltage_1v,blank + setarg 0x4894 + store 2,mem_2v_adc_vinlpm_data +set_vdd_reference_voltage_1v: + setarg 100 + store 2,mem_reference_voltage //set reference voltage = 1V + rtn + +adc_init_data_hvin: + fetcht 2,mem_otp_adc_flag + setarg OTP_ADC_FLAG + isub temp,null + branch adc_check_data_hvin,zero + setarg 0x5932 + store 2,mem_5v_adc_hvin_data + setarg 0x4323 + store 2,mem_1v_adc_hvin_data + branch set_vdd_reference_voltage_4v + +adc_check_data_hvin: + fetch 2,mem_5v_adc_hvin_data + nbranch adc_check_1v_hvin,blank + setarg 0x5932 + store 2,mem_5v_adc_hvin_data +adc_check_1v_hvin: + fetch 2,mem_1v_adc_hvin_data + nbranch set_vdd_reference_voltage_4v,blank + setarg 0x4323 + store 2,mem_1v_adc_hvin_data +set_vdd_reference_voltage_4v: + setarg 400 + store 2,mem_reference_voltage //set reference voltage = 4V + rtn + +adc_init_data_io: + fetcht 2,mem_otp_adc_flag + setarg OTP_ADC_FLAG + isub temp,null + branch adc_check_data_io,zero + setarg 0x6946 + store 2,mem_1v_adc_io_data + setarg 0x5377 + store 2,mem_0_5_adc_io_data + branch set_vdd_reference_voltage_0_5v + +adc_check_data_io: + fetch 2,mem_1v_adc_io_data + nbranch adc_check_0_5v_io,blank + setarg 0x6946 + store 2,mem_1v_adc_io_data +adc_check_0_5v_io: + fetch 2,mem_0_5_adc_io_data + nbranch set_vdd_reference_voltage_0_5v,blank + setarg 0x5377 + store 2,mem_0_5_adc_io_data +set_vdd_reference_voltage_0_5v: + setarg 50 + store 2,mem_reference_voltage //set reference voltage = 0.5V + rtn + + +adc_set_mode: + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,adc_check_vinlpm + beq ADC_CONFIG_HVIN,adc_check_hvin + beq ADC_CONFIG_GPIO,adc_check_gpio + rtn +adc_check_vinlpm: + hjam 0xbf,rf_adc_mode //read VINLPM voltage directly + branch read_adc +adc_check_hvin: + hjam 0xaf,rf_adc_mode //read HVIN voltage directly + branch read_adc +adc_check_gpio: + hjam 0x8f,rf_adc_mode + fetch 1,mem_adc_channel + hstore 1,rf_adc_ch + branch read_adc +read_adc: + bpatchx patch33_7,mem_patch33 + hfetch 1,core_uart_baud + 1 + set1 7,pdata + hstore 1,core_uart_baud + 1 + hfetch 1,rf_adc_ch + or_into 0x30,pdata + hstore 1,rf_adc_ch + hjam 0x7c,rfen_adc + hjam 0xaa,rf_adc_gc + nop 5000 + hfetcht 2,core_adc_sum + hfetch 1,core_uart_baud + 1 + set0 7,pdata + hstore 1,core_uart_baud + 1 + storet 2,mem_adc_current_value + rtn + +vdd_calculate_by_mode: + bpatchx patch34_0,mem_patch34 + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,vdd_calculate_vinlpm + beq ADC_CONFIG_HVIN,vdd_calculate_hvin + beq ADC_CONFIG_GPIO,vdd_calculate_io + rtn + +vdd_calculate_vinlpm: + fetch 2,mem_3v_adc_vinlpm_data + fetcht 2,mem_2v_adc_vinlpm_data + arg 200,regc + branch vdd_calculate + +vdd_calculate_hvin: + fetch 2,mem_5v_adc_hvin_data + fetcht 2,mem_1v_adc_hvin_data + arg 100,regc + branch vdd_calculate + +vdd_calculate_io: + fetch 2,mem_1v_adc_io_data + fetcht 2,mem_0_5_adc_io_data + arg 50,regc + branch vdd_calculate + +vdd_calculate: + isub temp,rega + fetch 2,mem_adc_current_value + isub temp,pdata + nbranch vdd_calculate1,positive + fetcht 2,mem_reference_voltage + imul32 temp,regb + copy regc,pdata + imul32 rega,pdata + iadd regb,pdata +vdd_calculate2: + idiv rega + call wait_div_end + quotient pdata + rtn + +vdd_calculate1: + copy temp,pdata + fetcht 2,mem_adc_current_value + isub temp,pdata + fetcht 2,mem_reference_voltage + imul32 temp,regb + copy regc,pdata + imul32 rega,pdata + isub regb,pdata + branch vdd_calculate2 + +/* typedef struct +* { +* uint16 full_vol +* uint16 empty_vol +* uint16 low_vol +* uint16 now_vol +* }bat_calculate; +*/ +//out: pdata->bat percent +adc_bat_percent_lowpower_out: + ifetch 8,rega + store 8,mem_pdatatemp + fetch 2,mem_pdatatemp + fetcht 2,mem_pdatatemp+2 + isub temp,rega + fetch 2,mem_pdatatemp+6 + isub temp,regb + fetcht 2,mem_pdatatemp+4 + isub temp,null + ncall adc_set_low_power_flag,positive + mul32 regb,100,pdata + idiv rega + call wait_div_end + quotient pdata + call adc_set_no_power_flag,blank + rtn +adc_set_low_power_flag: + fetch 1,mem_adc_power_flag + set1 0,pdata + store 1,mem_adc_power_flag + rtn +adc_set_no_power_flag: + fetcht 1,mem_adc_power_flag + set1 1,temp + storet 1,mem_adc_power_flag + rtn + + + +/****************************************key scan***************************************/ +keyscan_key_init: + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_key_init_next: + rtn blank + copy pdata,loopcnt +// copy contr,rega + fetch 2,mem_keyscan_ptr + increase 3,pdata //mem_key_conf0_pin + copy pdata,rega +keyscan_key_init_lp1: + ifetcht 1, rega + call gpio_config_input + increase KEY_CONF_STRUCT_LEN,rega + loop keyscan_key_init_lp1 +keyscan_key_init_end: + rtn + +keyscan_scan_key: + fetch 2,mem_keyscan_ptr + increase 3,pdata //mem_key_conf0_pin + copy pdata,rega +// arg mem_key_conf0_pin,rega + force 0,regb + jam 0,mem_key_value_temp +keyscan_scan_key_lp1: + ifetcht 1, rega + call gpio_get_bit + bpatchx patch34_1,mem_patch34 + fetch 2, mem_key_value_temp + copy regb,queue + qsetflag true,pdata + store 2, mem_key_value_temp + increase KEY_CONF_STRUCT_LEN,rega + increase 1,regb + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_scan_key_lp1_next: + ixor regb,null + nbranch keyscan_scan_key_lp1,zero + fetch 2,mem_key_value_temp + fetcht 2,mem_key_value + ixor temp,null + rtn zero + enable user + rtn + +keyscan_process_lpm_before: + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_process_lpm_before_next: + rtn blank + copy pdata,loopcnt + fetch 2,mem_keyscan_ptr + increase 3,pdata //mem_key_conf0_pin + copy pdata,rega +keyscan_process_lpm_before_lp1: + ifetcht 1, rega + call gpio_set_wake_by_current_state + increase KEY_CONF_STRUCT_LEN,rega + loop keyscan_process_lpm_before_lp1 +keyscan_process_lpm_before_end: + rtn + +keyscan_key_process: + arg key_scan_timer,queue + call timer_check + nrtn blank + setarg 0x20 + arg key_scan_timer,queue + call timer_init + disable user + call keyscan_process_lpm_before + bpatchx patch34_2,mem_patch34 + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_key_process_next: + rtn blank + call keyscan_scan_key + nbranch lpm_button_clean_wake_lock,user + call lpm_button_get_wake_lock + disable user + fetch 2, mem_key_value_temp + store 2,mem_key_value_temp4 + jam 0,mem_key_value_temp6 + force 0,queue +keyscan_key_lp1: + fetch 2, mem_key_value + rshift pdata,temp + storet 2,mem_key_value + and pdata,0x01,pdata + fetcht 2, mem_key_value_temp4 + and temp,0x01,rega + rshift temp,temp + storet 2,mem_key_value_temp4 + ixor rega,null + ncall keyscan_send_key_data,zero + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_key_lp1_next: + fetcht 1, mem_key_value_temp6 + increase 1,temp + storet 1, mem_key_value_temp6 + copy temp,queue + ixor queue,null + nbranch keyscan_key_lp1,zero + fetch 2,mem_key_value_temp + store 2, mem_key_value + rtn +keyscan_send_key_data: + bpatchx patch34_3,mem_patch34 + fetch 2,mem_keyscan_ptr + increase 1,pdata + ifetch 2,pdata + branch callback_func + + +/*************************************pwm*************************************/ + +//rega:clk select(0:system clk; 1:system clk undivied; 2:lpo) +/*rega:clk select + 0x00:select system clock 12M; + 0x40:select undivied system clock 24M/48M; + 0x80:select lpo clock:33K +*/ +pwm_init: + hfetch 1,core_clksel + ior rega,pdata + hstore 1,core_clksel + hfetch 2,core_clkoff + set0 CLOCK_OFF_PWM,pdata + hstore 2,core_clkoff + nop 100 + rtn + +/* typedef struct +* { +* uint8 gpio_num +* uint8 pwm_channel +* uint24 frequency +* uint8 duty_cycle //0-100 +* }PWM_Style; + addr: mem_pdatatemp +*/ +pwm_out_set: + fetcht 3,mem_pdatatemp+2 + setarg PWM_12MHZ + idiv temp + call wait_div_end + quotient temp + fetch 1,mem_pdatatemp+5 + imul32 temp,pdata + div pdata,100 + call wait_div_end + quotient rega + copy temp,pdata + isub rega,regb + fetch 1,mem_pdatatemp+1 + call pwm_duty_cycle_set + fetch 1,mem_pdatatemp + branch pwm_enable + +//rega:pcnt ;regb:ncnt ;pdata:pwm channel select +pwm_duty_cycle_set: + beq 0,pwm_pwm0_duty_set + beq 1,pwm_pwm1_duty_set + beq 2,pwm_pwm2_duty_set + beq 3,pwm_pwm3_duty_set + beq 4,pwm_pwm4_duty_set + beq 5,pwm_pwm5_duty_set +pwm_pwm0_duty_set: + arg core_pwm_pcnt0,contw + branch pwm_set_pncnt +pwm_pwm1_duty_set: + arg core_pwm_pcnt1,contw + branch pwm_set_pncnt +pwm_pwm2_duty_set: + arg core_pwm_pcnt2,contw + branch pwm_set_pncnt +pwm_pwm3_duty_set: + arg core_pwm_pcnt3,contw + branch pwm_set_pncnt +pwm_pwm4_duty_set: + arg core_pwm_pcnt4,contw + branch pwm_set_pncnt +pwm_pwm5_duty_set: + arg core_pwm_pcnt5,contw + branch pwm_set_pncnt +pwm_set_pncnt: + copy rega,pdata + istore 2,contw + copy regb,pdata + istore 2,contw + rtn + + +//pdata:gpio select +pwm_enable: + enable user + branch pwm_gpio_set +pwm_disable: + disable user +pwm_gpio_set: + beq 4,pwm_gpio4_set + beq 5,pwm_gpio5_set + beq 27,pwm_gpio27_set + beq 28,pwm_gpio28_set + beq 3,pwm_gpio3_set + beq 8,pwm_gpio8_set + beq 20,pwm_gpio20_set + beq 21,pwm_gpio21_set + beq 22,pwm_gpio22_set + beq 23,pwm_gpio23_set + rtn + + +pwm_gpio4_set: //pwm 0 + arg 6,queue + branch pwm_one_set_select +pwm_gpio5_set: //pwm 1 + arg 7,queue + branch pwm_one_set_select +pwm_gpio27_set: //pwm 2 + arg 8,queue + branch pwm_one_set_select +pwm_gpio28_set: //pwm 3 + arg 9,queue + branch pwm_one_set_select +pwm_gpio3_set: //pwm 4 + arg 10,queue + branch pwm_one_set_select +pwm_gpio8_set: //pwm 5 + arg 11,queue + branch pwm_one_set_select +pwm_gpio20_set: //pwm 0 + arg 12,queue + branch pwm_tw0_set_select +pwm_gpio21_set: //pwm 1 + arg 13,queue + branch pwm_tw0_set_select +pwm_gpio22_set: //pwm 2 + arg 14,queue + branch pwm_tw0_set_select +pwm_gpio23_set: //pwm 3 + arg 15,queue + branch pwm_tw0_set_select + +pwm_set_select: + hfetch 2,core_gpio_sel1 + qsetflag user,pdata + hstore 2,core_gpio_sel1 + copy rega,queue + hfetch 1,core_gpio_key2 + qsetflag user,pdata + hstore 1,core_gpio_key2 + rtn + +pwm_one_set_select: + add queue,-4,rega + branch pwm_set_select + +pwm_tw0_set_select: + add queue,-10,rega + branch pwm_set_select + + + + +rfcomm_init: + rtn wake + jam 0,mem_rfcomm_send_more_pkt + jam BITS9600,memRemoteRPNBitRate + jam DATABITS8,memRemotePRNDataBits + jam 0x11,memRemotePRNXon + jam 0x13,memRemotePRNXoff + setarg 0 + store 3,memRemotePRNStopBit + store 1,mem_spp_state + jam 0,memui_reconnect_mode + //branch rfcomm_init_spp +rfcomm_init_spp: + bpatchx patch34_4,mem_patch34 + setarg 0 + store 1,mem_spp_state + store 1,mem_remote_spp_channel + store 1,mem_pn_dlci + fetch 1,mem_credit_flag + beq CREDIT_ENABLE,rfcomm_init_spp_with_credit + jam 0x50,mem_credit_given + rtn + +rfcomm_init_spp_with_credit: + jam 0x00,mem_credit_given + rtn + +set_CR_bit: + or_into 0x02,temp + rtn + + +/*below added by koufan*/ + +/*rfcomm_send */ + + + + /*rfcomm_calculate_FCS_sabm*/ + /*input: address in temp*/ + /*output: FCS in pdata */ +rfcomm_calculate_FCS_sabm: + copy temp,pdata + reverse pdata,pdata //address + store 1,memFCStemp3 + force INI_TX_SABM,pdata + reverse pdata,pdata + store 1,memFCStemp2 + force 0x01,pdata + reverse pdata,pdata + store 1,memFCStemp1 + call caculate_fcs + copy temp,pdata + rtn +rfcomm_calculate_FCS_ua: + reverse pdata,pdata //address + store 1,memFCStemp3 + force RSP_TX_UA, pdata + reverse pdata, pdata + store 1, memFCStemp2 + force 0x01, pdata + reverse pdata, pdata + store 1, memFCStemp1 + branch caculate_fcs + /* FCS return from temp */ +rfcomm_calculate_FCS_dlci0: + fetch 1,mem_rfcomm_initiator + branch rfcomm_calculate_FCS_dlci0_res,blank + setarg 0x70 //FCS of initiator + rtn +rfcomm_calculate_FCS_dlci0_res: + setarg 0xaa//FCS of responder + rtn + +rfcomm_save_FCS_uih: + reverse pdata, pdata //address + store 1,memFCStemp3 /* contw distroided */ + force RSP_RX_UIH,pdata + call caculate_UIHdata_fcs + fetcht 2,mem_contw_temp + copy temp,contw + istore 1,contw /* save FCS for later use */ + copy contw,temp + storet 2,mem_contw_temp + force RSP_RX_UIH_WDATA,pdata /* P/F =1 + RSP_RX_UIH */ + call caculate_UIHdata_fcs + fetcht 2,mem_contw_temp + copy temp,contw + istore 1,contw /* save FCS for later use */ + rtn +/**********************************************************************/ +/* This subroutine caculates the FCS for UIH data */ +/* Input: */ +/* the address byte at memFCStemp3(bit reversed), control byte */ +/* at pdata (not bit reversed) */ +/* Output: */ +/* pdata: the FCS */ +/**********************************************************************/ +caculate_UIHdata_fcs: + reverse pdata,pdata + store 1,memFCStemp2 + fetch 2, memFCStemp2 + lshift8 pdata,pdata + store 3,mem_mod2div_temp + arg 0x107,regA + arg 0xf,regB + call mod2div + xor_into 0xd7, pdata + invert pdata,pdata + reverse pdata,pdata + rtn + +/**********************************************************************/ +/* This subroutine caculates the FCS */ +/* Input: */ +/* the address byte at memFCStemp3, control byte at memFCStemp2*/ +/* lenght at memFCStemp1 (all above data are bit reversed) */ +/* Output: */ +/* temp: the FCS */ +/**********************************************************************/ +caculate_fcs: + fetch 3, memFCStemp1 /* load 3 bytes start at memFCStemp1 */ + store 3,mem_mod2div_temp + arg 0x107,regA + arg 0xf,regB //24bit(memFCStemp1+..+memFCStemp3) - 9bit(regA) = 15bit + call mod2div + lshift8 pdata,pdata + arg 0x7, regB //16bit(lshift8 pdata,pdata ) - 9bit(regA) = 7bit + call mod2div + xor_into 0x2b, pdata //0x3d + invert pdata, pdata + reverse pdata, pdata /* FCS at pdata */ + copy pdata, temp + rtn + +mod2div: + arg 0,regC + copy regB,loopcnt + call right_shift_n // right shift pdata (regB)bit + icopy temp +mod2div_loop: + //jam 1,0x1fff +//mod2div_loop1: + //fetch 1,0x1fff + //nbranch mod2div_loop1,blank + copy temp,pdata + lshift regC,regC//quotient + bbit0 8, mod2div_not_enough_reduction//the high bit of 0x107 + ixor regA,temp// temp----remainer + increase 1,regC// quotient +mod2div_not_enough_reduction: //Minuend smaller than Subtrahend + lshift temp,temp + fetch 3,mem_mod2div_temp + increase -1,regB + compare 0xff,regB,0xff + branch mod2div_end,true + copy regB,loopcnt + call right_shift_n // right shift pdata (regB)bit + isolate1 0,pdata + setflag true,0,temp //move a new bit from Dividend(queue) into Minuend(pdata) + branch mod2div_loop +mod2div_end: + //output:remainer in pdata + rshift temp,pdata + rtn + +get_rfcomm_snd_adss: + fetcht 1,mem_pn_dlci +dlci_to_address_cmd: + //input DLCI from temp + lshift2 temp,temp + set1 RFCOMM_ADDRESS_EXT_LEN,temp + fetch 1,mem_rfcomm_initiator + ncall set_CR_bit,blank + storet 1,mem_rfcomm_send_adss + rtn + +channel_to_dlci: + //input channel from temp + lshift temp,temp + fetch 1,mem_rfcomm_initiator + setflag blank,0,temp //direction in dlci + //output dlci to temp + rtn +rfcomm_rx_process_DLCI0_sabm: + fetcht 1,mem_current_channel //address + jam 0xd7,mem_current_fcs //FCS + call rfcomm_send_ua + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata + set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata + store 1,mem_rfcomm_state + jam 0,mem_rfcomm_initiator + branch rfcomm_rx_process_end +rfcomm_rx_process_DLCI0_ua: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata + store 1,mem_rfcomm_state + branch rfcomm_rx_process_end + + +rfcomm_rx_process: + bpatchx patch34_5,mem_patch34 + fetch 1,memui_reconnect_mode + beq NO_RECONNECTION,rfcomm_rx_process_remote_page + branch rfcomm_rx_process_reconn + +rfcomm_rx_process_remote_page: + fetch 2,mem_l2cap_payload_ptr + copy pdata,contr + call get_rfcomm_head_struct + fetch 1,mem_current_channel + beq 0,parse_dlci0_rp + branch parse_uih_rp +parse_dlci0_rp: + bpatchx patch34_6,mem_patch34 + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm + beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua + beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_rp_uih + beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn_send_event + rtn + + +parse_DLCI0_rp_uih: + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + call get_rfcomm_uih_head_struct + fetch 1,mem_uih_cmd_type + beq UIH_PARAM_NEG_CMD,parse_DLCI0_rp_uih_pn_cmd + beq UIH_PARAM_NEG_RES,parse_DLCI0_rp_uih_pn_res + beq UIH_MODEM_STATUS_CMD,parse_DLCI0_rp_uih_ms_cmd + beq UIH_MODEM_STATUS_RES,parse_DLCI0_rp_uih_ms_res + beq UIH_PARAM_CMD_REMOVE_PORT,parse_DLCI0_rp_uih_cmd_port + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_pn_cmd: + call parse_DLCI0_rp_uih_pn_res_common + + branch parse_DLCI0_rp_uih_pn_cmd_spp + +parse_DLCI0_rp_uih_pn_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_PN_CMD,pdata + set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata + store 1,mem_spp_state + call rfcomm_send_param_neg_res + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_pn_res: + call parse_DLCI0_rp_uih_pn_res_common + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_pn_res_common: + call get_param_payload_ptr + branch get_rfcomm_prarmer_negotiation + +get_rfcomm_param_modem_status: + call get_param_payload_ptr + ifetch 1,contr + rshift3 pdata,pdata + store 1,mem_ms_channel + ifetch 1,contr + store 1,mem_ms_param + rtn + + +get_rfcomm_head_struct: + ifetch 1,contr + store 1,mem_current_adss + rshift3 pdata,pdata + store 1,mem_current_channel + ifetch 1,contr + store 1,mem_current_frame_type +get_rfcomm_current_length: + call get_rfcomm_length_common + storet 2,mem_current_length + copy contr,pdata + store 2,mem_rfcomm_uih_payload_ptr + rtn + +get_rfcomm_uih_head_struct: + ifetch 1,contr + rshift pdata,pdata + store 1,mem_uih_cmd_type + call get_rfcomm_length_common + storet 2,mem_uih_length + copy contr,pdata + store 2,mem_param_payload_ptr + rtn + + +get_param_payload_ptr: + fetch 2,mem_param_payload_ptr + copy pdata,contr + rtn + +get_rfcomm_length_common: + ifetch 1,contr + copy pdata,temp + rshift temp,temp + rtnbit1 0 + ifetch 1,contr + lshift3 pdata,pdata + lshift4 pdata,pdata + iadd temp,temp + rtn + +get_rfcomm_prarmer_negotiation: + ifetch 1,contr + store 1,mem_pn_dlci + ifetch 1,contr + store 1,mem_pn_credit_flow_type_info + ifetch 1,contr + store 1,mem_pn_priority + ifetch 1,contr + store 1,mem_pn_acknowledg_timer + ifetch 2,contr + store 2,mem_pn_max_frame_size + ifetch 1,contr + store 1,mem_pn_max_retrans + ifetch 1,contr + store 1,mem_remote_credits + rtn + + +parse_DLCI0_rp_uih_ms_cmd: + call get_rfcomm_param_modem_status + + branch parse_DLCI0_rp_uih_ms_cmd_spp + +parse_DLCI0_rp_uih_ms_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata + set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata + store 1,mem_spp_state + fetcht 1,mem_pn_dlci + lshift2 temp,temp + or_into 3,temp + call rfcomm_send_modem_status_res + jam MORE_PKT_MSC_CMD_SPP,mem_rfcomm_send_more_pkt + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_ms_res: + jam BT_EVT_SPP_CONNECTED,mem_fifo_temp + call ui_ipc_send_event + call get_rfcomm_param_modem_status + fetch 1,mem_ms_channel + sub pdata,1,null + branch parse_DLCI0_rp_uih_MS_RES_spp,zero + branch assert +parse_DLCI0_rp_uih_ms_res_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_cmd_port: + call get_param_payload_ptr + ifetch 1,contr + store 1,mem_rpn_dlci + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x000e + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + //setarg 5 + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch34_7,mem_patch34 + setarg 0x15ef + istore 2,contw + setarg 0x1191 + istore 2,contw + //fetch 1,mem_pn_dlci + //setarg 0x0b + fetch 1,mem_rpn_dlci + istore 1,contw //DLCI + setarg 0x000007 + istore 5,contw +// setarg 0 //max frame size +// istore 2,contw + setarg 0x01 //max retrans + istore 2,contw +// setarg 0x00 +// istore 1,contw // init credits + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn + + + +parse_uih_rp: + branch parse_uih_rp_spp + +parse_uih_rp_spp: + bpatchx patch35_0,mem_patch35 + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_UA,parse_uih_rp_spp_ua + beq RFCOMM_FRAME_TYPE_SABM,parse_uih_rp_spp_sabm + beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih + beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits + beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn + rtn +parse_uih_rp_spp_ua: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_UA,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end +parse_uih_rp_spp_sabm: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_UA,pdata + set1 RFCOMM_CHANNEL_STATE_SABM,pdata + store 1,mem_spp_state + fetch 1,mem_current_adss + call rfcomm_calculate_FCS_ua + store 1,mem_current_fcs + call rfcomm_send_ua + fetch 1,mem_current_adss + rshift2 pdata,pdata + store 1,mem_pn_dlci + lshift2 pdata,pdata + set0 RFCOMM_ADDRESS_CR,pdata + set1 RFCOMM_ADDRESS_EXT_LEN,pdata + arg mem_HIUfcs_spp,temp // mem_HIUfcs_HF_WCredits in regB++ + storet 2,mem_contw_temp + call rfcomm_save_FCS_uih + branch rfcomm_rx_process_end + +parse_uih_spp_uih_credits: + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + increase 1,pdata + store 2,mem_rfcomm_uih_payload_ptr + ifetch 1,contr //remote credits + fetcht 1,mem_remote_credits + iadd temp,pdata + store 1,mem_remote_credits +parse_uih_spp_uih: + call rfcomm_increase_credit_given +parse_uih_spp_uih_cont: + call get_rfcomm_snd_adss + call rfcomm_send_uih_without_payload + call spp_process_rx_data + branch rfcomm_rx_process_end + +parse_uih_rp_spp_disconn_send_event: + jam BT_EVT_SPP_DISCONNECTED,mem_fifo_temp + call ui_ipc_send_event +parse_uih_rp_spp_disconn: + call rfcomm_init_spp + fetch 1,mem_current_adss + call rfcomm_calculate_FCS_ua + store 1,mem_current_fcs + call rfcomm_send_ua + branch rfcomm_rx_process_end + +/////////////////////////////////////////// +/////////////////////////////////////////// +/////////////////////////////////////////// +rfcomm_rx_process_reconn: + fetch 2,mem_l2cap_payload_ptr + copy pdata,contr + call get_rfcomm_head_struct + fetch 1,mem_current_channel + beq 0,parse_DLCI0_reconn + branch parse_uih_reconn + +parse_DLCI0_reconn: + bpatchx patch35_1,mem_patch35 + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm + beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua + beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_reconn_uih + branch rfcomm_rx_process_end +parse_DLCI0_reconn_uih: + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + call get_rfcomm_uih_head_struct + fetch 1,mem_uih_cmd_type + beq UIH_PARAM_NEG_CMD,parse_DLCI0_reconn_uih_pn_cmd + beq UIH_PARAM_NEG_RES,parse_DLCI0_reconn_uih_pn_cmd + beq UIH_MODEM_STATUS_CMD,parse_DLCI0_reconn_uih_ms_cmd + beq UIH_MODEM_STATUS_RES,parse_DLCI0_reconn_uih_ms_res + branch rfcomm_rx_process_end + +parse_DLCI0_reconn_uih_pn_cmd: + call parse_DLCI0_rp_uih_pn_res_common + fetch 1,mem_pn_dlci + rshift pdata,pdata + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_DLCI0_reconn_uih_pn_cmd_spp,zero + branch assert +parse_DLCI0_reconn_uih_pn_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end + +parse_DLCI0_reconn_uih_ms_cmd: + call get_rfcomm_param_modem_status + fetch 1,mem_ms_channel + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_DLCI0_reconn_uih_ms_cmd_spp,zero + branch assert + branch rfcomm_rx_process_end +parse_DLCI0_reconn_uih_ms_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata + set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata + store 1,mem_spp_state + fetcht 1,mem_pn_dlci + lshift2 temp,temp + or_into 3,temp + call rfcomm_send_modem_status_res + branch rfcomm_rx_process_end + +parse_DLCI0_reconn_uih_ms_res: + call get_rfcomm_param_modem_status + fetch 1,mem_ms_channel + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_DLCI0_reconn_uih_ms_res_spp,zero + branch assert +parse_DLCI0_reconn_uih_ms_res_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end + +parse_uih_reconn: + fetch 1,mem_current_channel + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_uih_reconn_spp,zero + branch assert + branch rfcomm_rx_process_end + +parse_uih_reconn_spp: + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_UA,parse_uih_reconn_spp_ua + beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih + beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits + beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_reconn_spp_disconn +parse_uih_reconn_spp_ua: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_UA,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end +parse_uih_reconn_spp_sabm: + branch parse_uih_reconn_spp_sabm//loop +parse_uih_reconn_spp_disconn: + branch parse_uih_rp_spp_disconn +rfcomm_rx_process_end: + rtn + +rfcomm_send_more_pkt: + fetch 1,mem_rfcomm_send_more_pkt + rtn blank + beq MORE_PKT_MSC_CMD_SPP,rfcomm_send_more_pkt_msc_cmd_spp + branch assert + +rfcomm_send_more_pkt_msc_cmd_spp: + jam 0,mem_rfcomm_send_more_pkt + call l2cap_malloc_rfcomm_channel + arg SPP_SLAVE_CHANNEL,temp + fetcht 1,mem_pn_dlci + lshift2 temp,temp +rfcomm_send_more_pkt_msc_cmd_spp0: + or_into 0x03,temp + arg 0xaa,regA + call rfcomm_send_modem_status_cmd + call l2cap_get_rfcomm_tx_buff + copy contw,contr + ifetch 2, contr + branch assert,blank + rtn + +rfcomm_send_sabm: + call l2cap_get_rfcomm_tx_buff + setarg 0x0004 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_current_adss + istore 1,contw //address + bpatchx patch35_2,mem_patch35 + setarg 0x013f + istore 2,contw + fetch 1,mem_current_fcs + istore 1,contw + rtn +rfcomm_send_ua: + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x0004 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_current_adss + istore 1,contw //address + bpatchx patch35_3,mem_patch35 + setarg 0x0173 + istore 2,contw + fetch 1,mem_current_fcs + istore 1,contw + rtn +rfcomm_send_param_neg_cmd: + call l2cap_get_rfcomm_tx_buff + setarg 0x000e + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_4,mem_patch35 + setarg 0x15ef + istore 2,contw + setarg 0x1183 + istore 2,contw + copy temp,pdata //DLCI in temp + istore 1,contw + setarg 0x0000f0 + istore 3,contw + setarg RFCOMM_MAX_FRAME_SIZE + istore 2,contw + setarg 0 + istore 1,contw + setarg 0x01 //change here later + istore 1,contw + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + jam 0x10,mem_credit_given + rtn +rfcomm_send_param_neg_res: + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x000e + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_5,mem_patch35 + setarg 0x15ef + istore 2,contw + setarg 0x1181 + istore 2,contw + fetch 1,mem_pn_dlci + istore 1,contw //DLCI + setarg 0x0000e0 + istore 3,contw + fetch 2,mem_rfcomm_max_frame_size + istore 2,contw + setarg 0x00 //max retrans + istore 1,contw + fetch 1,mem_rfcomm_credit_init_data + istore 1,contw // init credits + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn +rfcomm_send_modem_status_cmd: + call l2cap_get_rfcomm_tx_buff + setarg 0x0008 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_6,mem_patch35 + setarg 0x09ef + istore 2,contw + setarg 0x05e3 + istore 2,contw + copy temp,pdata //DLCI adress + istore 1,contw + setarg 0x8d + istore 1,contw + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn + +rfcomm_send_modem_status_res: + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x0008 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + copy temp,timeup + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_7,mem_patch35 + setarg 0x09ef + istore 2,contw + setarg 0x05e1 + istore 2,contw + copy timeup,pdata //DLCI address in temp + istore 1,contw + setarg 0x8d + istore 1,contw + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn + +rfcomm_send_uih_without_payload: + bpatchx patch36_0,mem_patch36 + fetch 1,mem_credit_given + rtn blank + hfetch 2,core_uart_rxitems + nrtn blank + copy rega,pdata + store 1,mem_pdatatemp+1 + storet 1,mem_pdatatemp + call l2cap_malloc_is_fifo_full + nrtn blank + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x05 + istore 2,contw + fetch 2,mem_RFCOMM_remote_CID + istore 2,contw + fetch 1,mem_rfcomm_send_adss + istore 1,contw + setarg 0x01ff + istore 2,contw + fetch 1,mem_credit_given + istore 1,contw + fetch 1,mem_HIUfcs_SPP_WCredits + istore 1,contw + jam 0,mem_credit_given + rtn + +rfcomm_increase_credit_given: + bpatchx patch36_1,mem_patch36 + fetch 1,mem_credit_flag + rtneq CREDIT_ENABLE + fetch 2,mem_current_length + rtn blank + fetch 1,mem_credit_given + increase 1,pdata + store 1,mem_credit_given + rtn + +spp_process_rx_data: + fetch 2,mem_cb_receive_spp_data + branch callback_func + +spp_tx_rfcomm_packet: + bpatchx patch36_2,mem_patch36 + //credit + fetch 1,mem_remote_credits + rtn blank + increase -1,pdata + store 1,mem_remote_credits + fetch 2,mem_pn_max_frame_size + fetcht 2,mem_current_packet_length + isub temp,null + branch ssp_tx_rfcomm_from_uart,positive + store 2,mem_current_packet_length +ssp_tx_rfcomm_from_uart: + fetch 1,mem_credit_given + branch ssp_tx_rfcomm_from_uart_without_credit,blank + jam 1,mem_rfcomm_send_offset + fetch 1,mem_HIUfcs_SPP_WCredits + store 1,mem_rfcomm_send_fcs + setarg RSP_RX_UIH_WDATA + store 1,mem_rfcomm_send_frame_type + branch ssp_tx_rfcomm_from_uart_common +ssp_tx_rfcomm_from_uart_without_credit: + jam 0,mem_rfcomm_send_offset + fetch 1,mem_HIUfcs_SPP + store 1,mem_rfcomm_send_fcs + setarg RSP_TX_UIH + store 1,mem_rfcomm_send_frame_type +ssp_tx_rfcomm_from_uart_common: + bpatchx patch36_3,mem_patch36 + fetch 2,mem_current_packet_length + sub pdata,127,null + branch ssp_tx_rfcomm_from_uart_common0,positive + fetch 1,mem_rfcomm_send_offset + increase 1,pdata + store 1,mem_rfcomm_send_offset +ssp_tx_rfcomm_from_uart_common0: + call get_rfcomm_snd_adss + fetch 2,mem_current_packet_length + increase 8,pdata //fcs + rfcommhead + l2caphead == 8 + fetcht 1,mem_rfcomm_send_offset + iadd temp,rega + //rfcomm payload + call l2cap_malloc + store 2,mem_rfcomm_tx_buff_ptr + increase 4,pdata + store 2,mem_rfcomm_tx_payload_ptr + copy pdata,contw + fetch 1,mem_rfcomm_send_adss + istore 1,contw + fetch 1,mem_rfcomm_send_frame_type + istore 1,contw + call ssp_tx_write_length + call ssp_tx_write_given_credit + bpatchx patch36_4,mem_patch36 + fetch 2,mem_nl_rx_data_src //src + copy pdata,contru + fetch 2,mem_current_packet_length + copy pdata,loopcnt + call uart_copy_rx_bytes_fast + copy contw,temp + copy contru,pdata + store 2,mem_nl_rx_data_src + copy temp,contw + fetch 1,mem_rfcomm_send_fcs + istore 1,contw + fetch 2,mem_rfcomm_tx_buff_ptr + copy pdata,contw + fetch 2,mem_current_packet_length + fetcht 1,mem_rfcomm_send_offset + iadd temp,pdata + increase 4,pdata + istore 2,contw + fetch 2,mem_rfcomm_remote_cid + istore 2,contw + jam 0,mem_credit_given //whatever mem_credit_given is set to 0 + fetch 2,mem_nl_rx_len_all + beq 0,module_hci_command_tx_spp_tx_complete + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + rtn + +ssp_tx_write_length: + bpatchx patch36_5,mem_patch36 + fetch 2,mem_current_packet_length + sub pdata,0x7f,null + nbranch ssp_tx_write_long_packet,positive + lshift pdata,pdata + set1 0,pdata + istore 1,contw + rtn +ssp_tx_write_long_packet: + fetch 2,mem_current_packet_length + rshift3 pdata,pdata + rshift4 pdata,temp + and_into 0x7f,pdata + lshift pdata,pdata + set0 0,pdata + istore 1,contw + istoret 1,contw + rtn +ssp_tx_write_given_credit: + fetch 1,mem_credit_given + rtn blank + istore 1,contw + rtn + + + + +scheduler_process: + bpatchx patch36_6,mem_patch36 + call check_51cmd + call app_process_bb_event + call process_conn_sm +/* check the connection state sequence byte */ + bpatchx patch36_7,mem_patch36 + call sp_calc_sequence + call simple_pairing_sequence + call master_simple_paring_sequence +//return if it is hci mode. 'cause the following is host part. +//notify BB to tx a l2cap packet + call l2cap_malloc_is_fifo_full + nrtn blank + //for conn to MTK + call l2cap_call_proc_sigal_pending + call l2cap_malloc_is_fifo_full + nrtn blank + bpatchx patch37_0,mem_patch37 +//to generat a new l2cap packet + call process_upper_sm + call l2cap_send_config_req + call rfcomm_send_more_pkt//use this function to send msc_cmd after msc_rep sent +scheduler_process0: + call scheduler_tx_disconnect_hid //may not used + bpatchx patch37_1,mem_patch37 +// call l2cap_malloc_is_fifo_full +// nrtn blank + branch app_process_bt + +scheduler_tx_disconnect_hid: + fetch 1,mem_CONTROL_tasks + bbit1 L2CAP_DISCONNECT_INTERRUPT,L2CAP_disconnect_interrupt_req + bbit1 L2CAP_DISCONNECT_CONTROL,L2CAP_disconnect_control_req + rtn + +scheduler_tx_l2cap_pkt: + bpatchx patch37_2,mem_patch37 + call l2cap_malloc_is_fifo_empty + rtn blank //empty + fetch 1,mem_op + rtnbit1 op_txl2cap + call l2cap_malloc_fifo_out + store 2,mem_txptr + copy pdata,contr + ifetch 2,contr + increase 4,pdata + store 2,mem_tx_len + jam 6,mem_tx_lch//start pkt + bpatchx patch37_3,mem_patch37 + fetch 2,mem_l2cap_tx_multi_offset + branch scheduler_tx_l2cap_start_pkt,blank + fetch 1,mem_op + rtnbit0 op_pkt_comp + set0 op_pkt_comp,pdata + store 1,mem_op + jam 5,mem_tx_lch//continue pkt + fetcht 2,mem_l2cap_tx_multi_offset + fetch 2,mem_txptr + iadd temp,pdata + store 2,mem_txptr + fetch 2,mem_tx_len + isub temp,pdata + store 2,mem_tx_len +scheduler_tx_l2cap_start_pkt: + bpatchx patch37_4,mem_patch37 + fetch 2,mem_tx_len + branch assert,blank + arg l2cap_max_pkt_len,temp //max len of dh3 pkt + isub temp,pdata + nbranch scheduler_Tx_l2cap_last_pkt,positive + bpatchx patch37_5,mem_patch37 + storet 2,mem_tx_len //l2cap_max_pkt_len + fetch 2,mem_l2cap_tx_multi_offset + iadd temp,pdata + store 2,mem_l2cap_tx_multi_offset + branch scheduler_Tx_l2cap_pkt_end +scheduler_Tx_l2cap_last_pkt: + setarg 0 + store 2,mem_l2cap_tx_multi_offset +scheduler_Tx_l2cap_pkt_end: + fetch 1,mem_op + set1 op_txl2cap,pdata + store 1,mem_op + rtn + +scheduler_start_upper_sm: + fetch 1,mem_UI_profile_supported + bbit1 support_HID,scheduler_start_upper_sm_hid + jam UPPERSM_RECONN_SDP_CONN,mem_upper_sm_reconn + rtn +scheduler_start_upper_sm_hid: + jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn + rtn + +process_upper_sm: + fetch 1,memui_reconnect_mode + nbranch process_upper_sm_reconn,blank +process_upper_sm_remote_page: + fetch 1,mem_upper_sm_remote_page + //beq UPPERSM_RP_IDLE,process_upper_sm_rp_idle + rtn blank + //nothing to do when remote page to create a connection. + jam 0,mem_upper_sm_remote_page +process_upper_sm_rp_wait: + rtn + + +process_upper_sm_reconn: + bpatchx patch37_6,mem_patch37 + fetch 1,mem_upper_sm_reconn + rtn blank + beq UPPERSM_RECONN_SDP_CONN,process_upper_sm_reconn_sdp_conn + beq UPPERSM_RECONN_SDP_CONN_WAIT,process_upper_sm_reconn_sdp_conn_wait + beq UPPERSM_RECONN_SDP_CFG,process_upper_sm_reconn_sdp_cfg + beq UPPERSM_RECONN_SDP_CFG_WAIT,process_upper_sm_reconn_sdp_cfg_wait + beq UPPERSM_RECONN_SS_SPP,process_upper_sm_reconn_ss_spp + beq UPPERSM_RECONN_SS_SPP_WAIT,process_upper_sm_reconn_ss_spp_wait + beq UPPERSM_RECONN_SDP_DISCONN,process_upper_sm_reconn_sdp_disconn + beq UPPERSM_RECONN_SDP_DISCONN_WAIT,process_upper_sm_reconn_sdp_disconn_wait + beq UPPERSM_RECONN_HID_CTRL_CONN,process_upper_sm_reconn_hid_ctrl_conn + beq UPPERSM_RECONN_HID_CTRL_CONN_WAIT,process_upper_sm_reconn_hid_ctrl_conn_wait + beq UPPERSM_RECONN_HID_CTRL_CFG,process_upper_sm_reconn_hid_ctrl_cfg + beq UPPERSM_RECONN_HID_CTRL_CFG_WAIT,process_upper_sm_reconn_hid_ctrl_cfg_wait + beq UPPERSM_RECONN_HID_INT_CONN,process_upper_sm_reconn_hid_int_conn + beq UPPERSM_RECONN_HID_INT_CONN_WAIT,process_upper_sm_reconn_hid_int_conn_wait + beq UPPERSM_RECONN_HID_INT_CFG,process_upper_sm_reconn_hid_int_cfg + beq UPPERSM_RECONN_HID_INT_CFG_WAIT,process_upper_sm_reconn_hid_int_cfg_wait + beq UPPERSM_RECONN_RFCOMM_CONN,process_upper_sm_reconn_rfcomm_conn + beq UPPERSM_RECONN_RFCOMM_CONN_WAIT,process_upper_sm_reconn_rfcomm_conn_wait + beq UPPERSM_RECONN_RFCOMM_CFG,process_upper_sm_reconn_rfcomm_cfg + beq UPPERSM_RECONN_RFCOMM_CFG_WAIT,process_upper_sm_reconn_rfcomm_cfg_wait + beq UPPERSM_RECONN_RFCOMM_SABM,process_upper_sm_reconn_rfcomm_sabm + beq UPPERSM_RECONN_RFCOMM_SABM_WAIT,process_upper_sm_reconn_rfcomm_sabm_wait + beq UPPERSM_RECONN_SPP_CMD_PN,process_upper_sm_reconn_spp_cmd_pn + beq UPPERSM_RECONN_SPP_CMD_PN_WAIT,process_upper_sm_reconn_spp_cmd_pn_wait + beq UPPERSM_RECONN_SPP_SABM,process_upper_sm_reconn_spp_sabm + beq UPPERSM_RECONN_SPP_SABM_WAIT,process_upper_sm_reconn_spp_sabm_wait + beq UPPERSM_RECONN_SPP_CMD_MS,process_upper_sm_reconn_spp_cmd_ms + beq UPPERSM_RECONN_SPP_CMD_MS_WAIT,process_upper_sm_reconn_spp_cmd_ms_wait +process_upper_sm_reconn_wait: + rtn +process_upper_sm_reconn_sdp_conn: + call upper_sm_send_sdp_conn //return n-user if sending failed + jam UPPERSM_RECONN_SDP_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_sdp_state + rtn +process_upper_sm_reconn_sdp_cfg: + jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_sdp_state + rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ + jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn + call upper_sm_send_sdp_cfg //return n-user if sending failed + jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_sdp_state + rtn +process_upper_sm_reconn_ss_spp: + call l2cap_malloc_is_fifo_empty + nrtn blank + call upper_sm_send_ss_spp + jam UPPERSM_RECONN_SS_SPP_WAIT,mem_upper_sm_reconn + rtn +process_upper_sm_reconn_sdp_disconn: + call upper_sm_send_sdp_disconn + jam UPPERSM_RECONN_SDP_DISCONN_WAIT,mem_upper_sm_reconn + rtn +process_upper_sm_reconn_hid_ctrl_conn: + call upper_sm_send_hid_ctrl_conn + jam UPPERSM_RECONN_HID_CTRL_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_hid_control_state + rtn +process_upper_sm_reconn_hid_ctrl_cfg: + call upper_sm_send_hid_ctrl_cfg + jam UPPERSM_RECONN_HID_CTRL_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_control_state + rtn +process_upper_sm_reconn_hid_int_conn: + call upper_sm_send_hid_int_conn + jam UPPERSM_RECONN_HID_INT_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_hid_interrupt_state + rtn +process_upper_sm_reconn_hid_int_cfg: + call upper_sm_send_hid_int_cfg + jam UPPERSM_RECONN_HID_INT_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_interrupt_state + rtn +process_upper_sm_reconn_rfcomm_conn: + call upper_sm_send_rfcomm_conn + jam UPPERSM_RECONN_RFCOMM_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_rfcomm_state + rtn +process_upper_sm_reconn_rfcomm_cfg: + call upper_sm_send_rfcomm_cfg + jam UPPERSM_RECONN_RFCOMM_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_rfcomm_state + rtn +process_upper_sm_reconn_rfcomm_sabm: + call upper_sm_send_rfcomm_sabm + jam UPPERSM_RECONN_RFCOMM_SABM_WAIT,mem_upper_sm_reconn + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata + store 1,mem_rfcomm_state + rtn +process_upper_sm_reconn_spp_cmd_pn: + call upper_sm_send_spp_cmd_pn + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_PN_CMD + store 1,mem_spp_state + jam UPPERSM_RECONN_SPP_CMD_PN_WAIT,mem_upper_sm_reconn + rtn +process_upper_sm_reconn_spp_sabm: + call upper_sm_send_spp_sabm + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_SABM + store 1,mem_spp_state + jam UPPERSM_RECONN_SPP_SABM_WAIT,mem_upper_sm_reconn + fetch 1,mem_remote_spp_channel //address in pdata + lshift3 pdata,pdata + or_into 3,pdata + arg mem_HIUfcs_SPP,temp // mem_HIUfcs_spp_WCredits in regB++ + storet 2,mem_contw_temp + branch rfcomm_save_FCS_uih +process_upper_sm_reconn_spp_cmd_ms: + call upper_sm_send_spp_cmd_ms + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_SND_MS_CMD + store 1,mem_spp_state + jam UPPERSM_RECONN_SPP_CMD_MS_WAIT,mem_upper_sm_reconn + rtn + +process_upper_sm_reconn_sdp_conn_wait: + fetch 1,mem_sdp_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_sdp_cfg_wait: + fetch 1,mem_sdp_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + jam UPPERSM_RECONN_SS_SPP ,mem_upper_sm_reconn +process_upper_sm_reconn_ss_spp_wait: + fetch 1,mem_message_to_uppersm + rtnne RECIEVE_SS_REASULT_HF + jam 0,mem_message_to_uppersm + jam UPPERSM_RECONN_SDP_DISCONN,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_sdp_disconn_wait: + fetch 1,mem_sdp_state + nrtn blank + fetch 1,mem_UI_profile_supported + bbit1 support_HID,process_upper_sm_reconn_setup_hid + bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm + branch process_upper_sm_reconn_termination +process_upper_sm_reconn_hid_ctrl_conn_wait: + fetch 1,mem_hid_control_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_HID_CTRL_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_hid_ctrl_cfg_wait: + fetch 1,mem_hid_control_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + jam UPPERSM_RECONN_HID_INT_CONN,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_hid_int_conn_wait: + fetch 1,mem_hid_interrupt_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_HID_INT_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_hid_int_cfg_wait: + fetch 1,mem_hid_interrupt_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + fetch 1,mem_UI_profile_supported + bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm + branch process_upper_sm_reconn_termination +process_upper_sm_reconn_rfcomm_conn_wait: + fetch 1,mem_rfcomm_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_RFCOMM_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_rfcomm_cfg_wait: + fetch 1,mem_rfcomm_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + jam UPPERSM_RECONN_RFCOMM_SABM,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_rfcomm_sabm_wait: + fetch 1,mem_rfcomm_state + rtnne L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED + fetch 1,mem_UI_profile_supported + bbit1 support_SPP,process_upper_sm_reconn_setup_spp + branch process_upper_sm_reconn_termination +process_upper_sm_reconn_spp_cmd_pn_wait: + fetch 1,mem_spp_state + rtnbit0 RFCOMM_CHANNEL_STATE_PN_RES + jam UPPERSM_RECONN_SPP_SABM,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_spp_sabm_wait: + fetch 1,mem_spp_state + rtnbit0 RFCOMM_CHANNEL_STATE_UA + jam UPPERSM_RECONN_SPP_CMD_MS ,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_spp_cmd_ms_wait: + fetch 1,mem_spp_state + rtnne RFCOMM_CHANNEL_SETUP_COMPLETE + branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_setup_hid: + jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn + branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_rfcomm: + jam UPPERSM_RECONN_RFCOMM_CONN,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_setup_spp: + jam UPPERSM_RECONN_SPP_CMD_PN,mem_upper_sm_reconn + branch process_upper_sm_reconn + + + +process_upper_sm_reconn_termination: + jam 0,mem_upper_sm_reconn + rtn +upper_sm_send_sdp_conn: + bpatchx patch37_7,mem_patch37 + call l2cap_malloc_signal_channel + setarg PSM_SDP + copy pdata,temp + setarg L2CAP_SDP_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_sdp_cfg: + bpatchx patch38_0,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_SDP_remote_CID + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_sdp_disconn: + bpatchx patch38_1,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_SDP_remote_CID + copy pdata,temp + arg L2CAP_SDP_channel,timeup + call ML2CAP_send_signal_disconn_req + fetch 1,mem_sdp_state + set0 L2CAP_CHANNEL_STATE_RCV_CFG_RES ,pdata + store 1,mem_sdp_state + rtn +//service search +upper_sm_send_ss_spp: + bpatchx patch38_2,mem_patch38 + call l2cap_malloc_sdp_channel + call sdp_send_spp_request + branch MSDP_send_req_done + +upper_sm_send_rfcomm_conn: + bpatchx patch38_3,mem_patch38 + call l2cap_malloc_signal_channel + setarg PSM_RFCOMM + copy pdata,temp + setarg L2CAP_RFCOMM_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_rfcomm_cfg: + bpatchx patch38_4,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_rfcomm_remote_cid + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_hid_ctrl_conn: + bpatchx patch38_5,mem_patch38 + call l2cap_malloc_signal_channel + setarg PSM_HID_control + copy pdata,temp + setarg L2CAP_HID_Control_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_hid_ctrl_cfg: + bpatchx patch38_6,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_hid_ctrl_remote_cid + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_hid_int_conn: + bpatchx patch38_7,mem_patch38 + call l2cap_malloc_signal_channel + setarg PSM_HID_interrupt + copy pdata,temp + setarg L2CAP_HID_interrupt_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_hid_int_cfg: + bpatchx patch39_0,mem_patch39 + call l2cap_malloc_signal_channel + fetch 2,mem_hid_int_remote_cid + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_rfcomm_sabm: + bpatchx patch39_1,mem_patch39 + call l2cap_malloc_rfcomm_channel + //force 3,temp //address + jam 3,mem_current_adss + jam 0x1c,mem_current_fcs + call rfcomm_send_sabm + jam 1,mem_rfcomm_initiator + rtn + +upper_sm_send_spp_cmd_pn: + bpatchx patch39_2,mem_patch39 + call l2cap_malloc_rfcomm_channel + fetcht 1,mem_remote_spp_channel + call channel_to_dlci + storet 1,mem_pn_dlci + branch rfcomm_send_param_neg_cmd + +upper_sm_send_spp_sabm: + bpatchx patch39_3,mem_patch39 + call l2cap_malloc_rfcomm_channel + fetcht 1,mem_pn_dlci + call dlci_to_address_cmd + call rfcomm_calculate_FCS_sabm //sabm fcs use once only,not need to save + store 1,mem_current_fcs + fetcht 1,mem_pn_dlci + call dlci_to_address_cmd + storet 1,mem_current_adss + branch rfcomm_send_sabm + +upper_sm_send_spp_cmd_ms: + bpatchx patch39_4,mem_patch39 + call l2cap_malloc_rfcomm_channel + fetcht 1,mem_pn_dlci + call dlci_to_address_cmd //address in temp + branch rfcomm_send_modem_status_cmd + + + +/**********************************************************************/ +/* Subroutine: sdp_process */ +/* Process Service Discovery Request */ +/* Called from L2CAP, check PDUID, branch to different req processings*/ +/* */ +/* Input: mem_L2CAP_Rx_payload */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process: + bpatchx patch39_5,mem_patch39 + fetch 2,mem_l2cap_payload_ptr + iforce contr +// ifetchr regb,1,contr /* PDUID */ +// storer regb,1,mem_sdp_pduid + ifetch 1,contr + copy pdata,regb + store 1,mem_sdp_pduid + ifetch 2,contr + store 2,mem_sdp_transactionid /* save transaction id */ + ifetch 1,contr /* higher byte of parameter length */ + lshift8 pdata,timeup + ifetch 1,contr /* lower byte of parameter length */ + iadd timeup,timeup /* parameter length stored in "timeup" */ + bpatchx patch39_6,mem_patch39 + copy contr,temp + arg 4,loopcnt + arg mem_sdp_handle_list,contw + call memset0 + copy temp,contr + deposit regb /* PDUID */ + beq SDP_ERROR_RES,sdp_process_error_res + beq SDP_SEARCH_REQ,sdp_process_ss_req + beq SDP_SEARCH_RES,sdp_process_ss_res + beq SDP_ATTRIBUTE_REQ,sdp_process_sa_req + beq SDP_ATTRIBUTE_RES,sdp_process_sa_res + beq SDP_SEARCHATTRIB_REQ,sdp_process_ssa_req + beq SDP_SEARCHATTRIB_RES,sdp_process_ssa_res + branch sdp_insufficient_resource + +/**********************************************************************/ +/* ss_req */ +/* Processing Service Search Request */ +/* Call: ask_serviceclassid, empty_response */ +/* */ +/* Input: mem_L2CAP_Rx_payload pointer in contr */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process_ss_req: + bpatchx patch39_7,mem_patch39 + call ask_serviceclassid + compare 1,temp,0xff + branch ss_empty_rsp,true + compare 0xff,temp,0xff + branch sdp_invalid_request_syntax,true + + ifetch 2,contr /* max aservice record count */ + store 2,mem_sdp_record_maxcnt + increase -2,timeup + + increase -1,timeup /* continuation state 1 byte (0) */ + nbranch sdp_invalid_pdu_size,zero /* invalid pdu size */ + arg mem_sdp_uuid_search_ptr,timeup + ifetch 2,timeup + rtn blank + call search_all_uuid + call l2cap_get_sdp_tx_payload /* put the pointer to Tx buffer */ + force 3,pdata /* PDUID 3, Service Search Response */ + istore 1,contw + fetch 2,mem_sdp_transactionid /* write transaction id */ + istore 2,contw + lshift2 queue,pdata + add pdata,5,pdata + add pdata,5,regc + byteswap pdata,pdata + istore 2,contw /* write parLength */ + deposit queue + byteswap pdata,pdata + istore 2,contw /* write TotSrvRecCount */ + istore 2,contw /* write CurSrvRecCount */ + arg mem_sdp_handle_list,contr + copy queue,loopcnt + branch ss_req_blank,zero +ss_req_loop: + ifetch 4,contr + istore 4,contw + loop ss_req_loop +ss_req_blank: + force 0,pdata + istore 1,contw /* continuation state */ + deposit regc + store 2,mem_sdp_tx_pkt_length +// branch assert,blank + rtn + +/**********************************************************************/ +/* sa_req */ +/* Processing Service Attribute Request */ +/* Call: ask_attributeid, empty_response (if 3 stored attr. */ +/* not asked) or answer_attributelist */ +/* Input: mem_L2CAP_Rx_payload pointer in contr */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process_sa_req: + bpatchx patch3a_0,mem_patch3a + ifetch 4,contr /* service record handle */ + store 4,mem_sdp_record_handle + increase -4,timeup + call sdp_store_maxbyte + store 2,mem_sdp_attribute_maxbyte + increase -2,timeup + call dataelementtype6 /* result: data size stored in rega */ + branch sdp_invalid_request_syntax,zero + compare 5,rega,0xff // length + //branch sa_req_all,true + branch sa_judge_wholerange,true +sa_isnot_wholerange: + arg mem_sdp_attrib_list,contw + force 0,queue + branch sa_req_loop +sa_judge_wholerange: + ifetch 1,contr + bne SDP_ATTRIBUTE_RANGE,sdp_invalid_request_syntax + ifetch 2,contr + nbranch sa_judge_wholerange_false1,blank + ifetch 1,contr + bne 0xff,sa_judge_wholerange_false2 + ifetch 1,contr + bne 0xff,sa_judge_wholerange_false3 //also exist potential bug because mem_sdp_attrib_list length is only 7f + branch sa_req_all +sa_judge_wholerange_false3: + increase -5,contr + branch sa_isnot_wholerange +sa_judge_wholerange_false2: + increase -4,contr + branch sa_isnot_wholerange +sa_judge_wholerange_false1: + increase -3,contr + branch sa_isnot_wholerange +sa_req_loop: + ifetch 1,contr + beq SDP_ATTRIBUTE_ID, sa_req_one_id + beq SDP_ATTRIBUTE_RANGE, sa_req_range +sa_req_range: + ifetch 2, contr + istore 2, contw + increase 1,queue + byteswap pdata,regb + ifetch 2, contr + byteswap pdata,pdata +sa_req_range_id_increase: + increase 1, regb + isub regb, null + nbranch sa_req_range_id_finish,positive + copy pdata, regc + byteswap regb,pdata + istore 2, contw + increase 1,queue + copy regc, pdata + branch sa_req_range_id_increase +sa_req_range_id_finish: + increase -5,timeup + increase -5,rega + branch sa_req_check_next_id +sa_req_one_id: + ifetch 2,contr + istore 2,contw //save the attribute id in mem_sdp_attrib_list + increase 1,queue + increase -3,timeup + increase -3,rega +sa_req_check_next_id: + nbranch sdp_invalid_request_syntax,positive + nbranch sa_req_loop,zero //another attribute + increase -1,timeup + nbranch sdp_invalid_request_syntax,zero + + call l2cap_get_sdp_tx_payload + increase 10,contw + arg mem_sdp_attrib_list,rega +sa_req_handle_attributelist_next: + copy queue,pdata + branch sa_req_handle_attributelist_end,blank + ifetch 2,rega + branch sa_req_handle_attributelist_end,blank + iforce regb /* regb is the attribute ID */ + fetch 4,mem_sdp_record_handle + iforce temp + call search_handle_attrib + copy contr,pdata + branch sa_req_handle_attributelist_notfound,blank + increase -3,contr + ifetch 3,contr + istore 3,contw + call sdp_data_len + iforce loopcnt + call memcpy +sa_req_handle_attributelist_notfound: + increase 2,rega + increase -1, queue + branch sa_req_handle_attributelist_next + +sa_req_handle_attributelist_end: + arg SDP_ATTRIBUTE_RES,rega + call ssa_req_range_lastfreg_common + fetch 2,mem_sdp_tx_pkt_length + beq 11,sa_empty_rsp + branch ssa_req_range_attrbutes_length_no_continue + + +sdp_store_continue_common: + ifetch 1, contr + beq 0, sdp_store_continue_0byte + beq 1,sdp_store_continue_1byte + beq 2, sdp_store_continue_2byte +sdp_store_continue_0byte: + increase -1,timeup /* continuation state byte (0) */ + branch sdp_store_continue_end +sdp_store_continue_1byte: + ifetch 1, contr + increase -2,timeup /* continuation state byte (1) */ + branch sdp_store_continue_end +sdp_store_continue_2byte: + ifetch 2, contr + byteswap pdata,pdata + increase -3,timeup /* continuation state byte (2) */ +sdp_store_continue_end: + store 2, mem_sdp_continue_byte + rtn + +sa_req_all: + increase -5,timeup + call sdp_store_continue_common + nbranch sdp_invalid_pdu_size,zero + fetcht 4,mem_sdp_record_handle + call search_handle + nbranch sdp_invalid_service_record_handle,zero + copy contr,rega + call l2cap_get_sdp_tx_payload + copy rega,contr + increase 3,contw//arg mem_SDP_Tx_payload+3,contw + copy contr,timeup //sdp start pointer + call sdp_get_data + copy pdata, rega //sdp total length +// fetchr regb,2,mem_sdp_continue_byte + fetch 2,mem_sdp_continue_byte + copy pdata,regb + copy rega,pdata + isub regb,regb //total_length - continue_byte in regb + fetch 2, mem_sdp_attribute_maxbyte + isub regb, null + nbranch sa_req_all_fragment_sdp, positive + // the last fragment + disable user + fetch 2, mem_sdp_continue_byte + branch sa_req_all_fisrt_fragment,blank + iadd timeup, contr //set the read pointer + increase 3,regb //include the total length field, 3 bytes + copy regb, loopcnt + copy loopcnt, pdata + increase 3, pdata + byteswap pdata,pdata + istore 2, contw + copy loopcnt, pdata + byteswap pdata,pdata + istore 2, contw + branch sa_req_all_answer_attributelist_full_loop +sa_req_all_fisrt_fragment: + add rega,6,loopcnt + branch sa_req_all_parlength_continue_byte, user + byteswap loopcnt,pdata + branch sa_req_all_parlength_continue_byte_end +sa_req_all_parlength_continue_byte: + copy loopcnt, pdata + increase 2, pdata + byteswap pdata,pdata +sa_req_all_parlength_continue_byte_end: + istore 2,contw /* ParLength */ + increase -3,loopcnt + byteswap loopcnt,pdata + istore 2,contw /* AttrListByteCount */ + copy timeup,contr + branch sa_req_all_answer_attributelist_full_loop +sa_req_all_fragment_sdp: + enable user +// fetchr rega,2,mem_sdp_attribute_maxbyte + fetch 2,mem_sdp_attribute_maxbyte + copy pdata,rega + copy rega,loopcnt + fetch 2, mem_sdp_continue_byte + branch sa_req_all_fisrt_fragment,blank + iadd timeup, contr + copy rega,pdata + increase 5,pdata + byteswap pdata,pdata + istore 2, contw + copy rega,pdata + byteswap pdata,pdata + istore 2, contw +sa_req_all_answer_attributelist_full_loop: + call memcpy + nbranch sa_req_all_last_frag_continue, user + force 2,pdata + istore 1,contw + copy contr, pdata + isub timeup, pdata + byteswap pdata,pdata + istore 2, contw // continuation length + branch sa_req_all_frag_end +sa_req_all_last_frag_continue: + force 0,pdata + istore 1,contw +sa_req_all_frag_end: + arg SDP_ATTRIBUTE_RES,rega + branch ssa_req_range_common + +/**********************************************************************/ +/* ssa_req */ +/* Processing Service Search Attribute Request */ +/* Call: ask_serviceclassid, ask_attributeid, empty_response */ +/* or answer_attributelist */ +/* Input: contr */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process_ssa_req: + bpatchx patch3a_1,mem_patch3a + call ask_serviceclassid + compare 0xff,temp,0xff + branch sdp_invalid_request_syntax,true + call sdp_store_maxbyte + store 2,mem_sdp_attribute_maxbyte + increase -2,timeup + call dataelementtype6 + arg mem_sdp_attrib_list,contw + force 0,queue +ssa_req_loop: + ifetch 1,contr + beq SDP_ATTRIBUTE_RANGE,ssa_req_range + ifetch 2,contr + istore 2,contw //save the attribute id in mem_sdp_attrib_list + increase 1,queue + increase -3,timeup + increase -3,rega + nbranch sdp_invalid_request_syntax,positive + nbranch ssa_req_loop,zero + increase -1,timeup + nbranch sdp_invalid_request_syntax,zero + call l2cap_get_sdp_tx_payload + increase 13,contw//arg mem_SDP_Tx_payload+13,contw + fetch 2,mem_sdp_uuid_search_ptr + iforce regc + arg mem_sdp_attrib_list,rega +ssa_req_attributelist_next: + ifetch 2,rega + branch ssa_req_attributelist_end,blank + iforce regb /* regb is the attribute ID */ + call search_attrib + branch ssa_req_attributelist_notfound,blank + increase -3,contr + ifetch 3,contr + istore 3,contw + call sdp_data_len + iforce loopcnt + call memcpy +ssa_req_attributelist_notfound: + increase 2,rega + branch ssa_req_attributelist_next + +ssa_req_attributelist_end: + call ssa_req_range_lastfreg + fetch 2,mem_sdp_tx_pkt_length + beq 14,ssa_empty_rsp + call ssa_req_range_attrbutes_length_no_continue + branch ssa_req_range_attrbutes_length_no_continue + + +sdp_store_maxbyte: + ifetch 2,contr + byteswap pdata,pdata + increase -3,pdata + arg 200,temp + isub temp,null + nrtn positive + setarg 200 + rtn + + +ssa_req_range: + increase 4,contr + increase -5,timeup + increase -5,rega + nbranch sdp_invalid_request_syntax,zero + call sdp_store_continue_common + nbranch sdp_invalid_pdu_size,zero + arg mem_sdp_uuid_search_ptr,timeup + call search_all_uuid + deposit queue + branch ssa_empty_rsp,blank + store 1,mem_handle_humber +// storer regb,2,mem_sdp_all_length + copy regb,pdata + store 2,mem_sdp_all_length + arg 0,queue + arg 0,rega + call l2cap_get_sdp_tx_payload + increase 10,contw +ssa_req_range_find_handle: + call ssa_req_range_get_length + nbranch assert,user + copy contr,timeup + copy pdata,regc + iadd rega,rega +// copy pdata,rega +// fetch 2,mem_sdp_all_length + fetch 2,mem_sdp_continue_byte + copy pdata,regb + branch ssa_req_range_first_freg,blank +ssa_req_range_later_freg_with_continue: + copy rega,pdata + isub regb,regb //total_length - continue_byte in rega + branch ssa_req_range_next_handle,zero + nbranch ssa_req_range_next_handle,positive + fetch 2, mem_sdp_attribute_maxbyte + isub regb, null + branch ssa_req_range_maxbyte_with_continue,zero + nbranch ssa_req_range_maxbyte_with_continue, positive + + // data length < =maxbyte +ssa_req_range_send_not_maxbyte: + copy regb,loopcnt + call ssa_req_range_maxbyte_with_continue_cpy + fetch 1,mem_handle_humber + increase 1,queue + isub queue,null + branch ssa_req_range_lastfreg,zero + branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue: + copy pdata,loopcnt + call ssa_req_range_maxbyte_with_continue_cpy + branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue_cpy: + increase -3,contw + copy loopcnt,temp + copy regc,pdata + isub regb,pdata + iadd timeup,contr + branch memcpy + +ssa_req_range_next_handle: + fetch 1,mem_handle_humber + increase 1,queue + isub queue,null + rtn zero // + branch ssa_req_range_find_handle + +ssa_req_range_get_length: + call disable_user + arg mem_sdp_handle_list,contr + lshift2 queue,pdata + iadd contr,contr + ifetcht 4, contr + call search_handle + nrtn zero + call sdp_data_len + branch enable_user + +ssa_req_range_first_freg: + fetch 2, mem_sdp_attribute_maxbyte + isub rega, null + nbranch ssa_req_range_firstfreg_maxbyte_with_continue,positive + copy rega,loopcnt + copy loopcnt,temp + copy timeup,contr + call memcpy + fetch 2,mem_sdp_all_length + isub rega,null + branch ssa_req_range_freg_no_continue,zero +ssa_req_range_firstfreg_not_maxbyte_with_continue: + call ssa_req_range_freg_with_continue + branch ssa_req_range_attrbutes_length + +ssa_req_range_freg_no_continue: + call ssa_req_range_lastfreg + branch ssa_req_range_attrbutes_length + +ssa_req_range_lastfreg: + arg SDP_SEARCHATTRIB_RES,rega //PUD ID +ssa_req_range_lastfreg_common: + force 0,pdata + istore 1,contw + call ssa_req_range_common + fetcht 2,mem_sdp_tx_pkt_length + increase -5,temp + byteswap temp,pdata + istore 2, contw + increase -3,temp + byteswap temp,pdata + istore 2, contw //attribute length + rtn + +ssa_req_range_firstfreg_maxbyte_with_continue: + copy pdata,loopcnt + copy loopcnt,temp + copy timeup,contr + call memcpy + call ssa_req_range_freg_with_continue +ssa_req_range_attrbutes_length: + setarg 0x36 + istore 1,contw + fetch 2,mem_sdp_all_length + byteswap pdata,pdata + istore 2, contw + rtn + +ssa_req_range_attrbutes_length_no_continue: + setarg 0x36 + istore 1,contw + increase -3,temp + byteswap temp,pdata + istore 2, contw + rtn + +ssa_req_range_freg_with_continue: + arg SDP_SEARCHATTRIB_RES,rega //PUD ID + setarg 2 + istore 1,contw + fetch 2,mem_sdp_continue_byte + iadd temp,temp + byteswap temp,pdata + istore 2,contw + call ssa_req_range_common + fetcht 2,mem_sdp_tx_pkt_length + increase -5,temp + byteswap temp,pdata + istore 2, contw + increase -5,temp + byteswap temp,pdata + istore 2, contw + rtn + +ssa_req_range_common: + fetch 2,mem_sdp_tx_payload_ptr + isub contw,pdata + sub pdata,0,pdata + store 2,mem_sdp_tx_pkt_length + call l2cap_get_sdp_tx_payload + copy rega,pdata //PUD ID + istore 1,contw + fetch 2,mem_sdp_transactionid + istore 2,contw + rtn + + + + +/**********************************************************************/ +/* ssa_res */ +/* Processing Service Search Attribute Response */ +/* Call: dataelementtype6, attribute_reading */ +/* Input: contr */ +/* Output: mem_sdp_record_handle,mem_sdp_search_failed */ +/* */ +/**********************************************************************/ +sdp_process_ssa_res: +sdp_process_ss_res: +sdp_process_sa_res: +sdp_process_error_res: + rtn +/* +sdp_process_ss_res: + bpatchx patch3a_2,mem_patch3a + ifetch 2,contr + ifetch 2,contr + byteswap pdata,pdata + bne 1,assert + ifetch 4,contr + store 4,mem_sdp_record_handle + fetchr regc,2,mem_sdp_l2capch_ptr + add regc,offset_lc_state,regc + ifetch 1,regc + set1 L2CAP_CHANNEL_STATE_RECV_SEARCH_RES,pdata + istore 1,regc + rtn + +sdp_process_sa_res: + bpatchx patch3a_3,mem_patch3a + fetchr regc,2,mem_sdp_l2capch_ptr + add regc,offset_lc_state,regc + ifetch 1,regc + set1 L2CAP_CHANNEL_STATE_RECV_ATTRIB_RES,pdata + istore 1,regc + copy temp,contr + ifetch 2,contr + call search_rfcomm_cn + store 1,mem_profile_channel + rtn +*/ + + + +sdp_invalid_service_record_handle: + setarg 0x0200 + store 2,mem_sdp_error_code + branch sdp_error_response +sdp_invalid_pdu_size: + setarg 0x0400 + store 2,mem_sdp_error_code + branch sdp_error_response +sdp_insufficient_resource: + setarg 0x0600 + store 2,mem_sdp_error_code + branch sdp_error_response +sdp_invalid_request_syntax: + setarg 0x0300 + store 2,mem_sdp_error_code +sdp_error_response: + call l2cap_get_sdp_tx_payload + istore 1,contw + fetch 2,mem_sdp_transactionid + istore 2,contw + setarg 0x0200 + istore 2,contw + fetch 2,mem_sdp_error_code + istore 2,contw + jam 7,mem_sdp_tx_pkt_length + rtn + + +//store uuid in mem_sdp_uuid_search_ptr, +//return temp 0xff if wrong +ask_serviceclassid: + arg 0,regb + force 0,temp /* use "temp" to mark syntax error or to mark 128 bit uuid */ + arg mem_sdp_uuid_search_ptr,contw + call dataelementtype6 + branch asksrv_error,zero +classidloop: + increase 1,regb + ifetch 1,contr + increase -1,rega + increase -1,timeup + compare 0x18,pdata,0xf8 /* 5 MSB: b00011: uuid */ + nbranch asksrv_error,true + compare 0x04,pdata,0x07 /* 3 LSB: b100 128 bits uuid */ + nbranch cmp032,true + force 1,temp /* mark it as 128 bit uuid */ +skip2bytes: + ifetch 1,contr + increase -1,rega + increase -1,timeup + bne 0x00, frstbwrong + ifetch 1,contr + increase -1,rega + increase -1,timeup + beq 0x00, cmpuuid + branch scndbwrong +frstbwrong: + increase 1,contr + increase -1,rega + increase -1,timeup +scndbwrong: + increase 2,contr /* skip 2 bytes, first 2 bytes already wrong */ + increase -2,rega + increase -2,timeup + compare 0x00,temp,0xff /* 128 bits or 32 bits ? */ + branch loopornot,true + increase 12,contr /* skip 12 bytes, first 2 bytes already wrong */ + increase -12,rega + increase -12,timeup + branch loopornot +cmp032: + compare 0x02,pdata,0x07 /* 3 LSB: b010 32 bits uuid */ + nbranch cmp016,true + branch skip2bytes +cmp016: + compare 0x01,pdata,0x07 /* 3 LSB: b001 16 bit uuid */ + nbranch asksrv_error,true +cmpuuid: + increase -2,rega + increase -2,timeup + ifetch 2,contr /* higher order byte */ + sub regb,4,null + branch uuidsize,zero //max store uuids =3 + istore 2,contw +uuidsize: + compare 0x00,temp,0xff /* is this 128 bits uuid */ + branch loopornot,true + copy contr,temp + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x10, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x80, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x80, wrong12b + ifetch 1,contr + bne 0x5f, wrong12b + ifetch 1,contr + bne 0x9b, wrong12b + ifetch 1,contr + bne 0x34, wrong12b + ifetch 1,contr + beq 0xfb, chck12dn +wrong12b: + copy temp,contr +wrong12b1: + increase 12,contr /* skip 12 bytes */ + force 0x00,queue + force 0x00,temp + branch chck12dn + +chck12dn: + increase -12,timeup + increase -12,rega +loopornot: + force 0x00,temp + compare 0x00,rega,0xff + nbranch classidloop,true + force 0,pdata + istore 2,contw /* end list with null */ + rtn +asksrv_error: + arg 0xff,temp + rtn + +/**********************************************************************/ +/* Subroutine: dataelementtype6 */ +/* Parse Data Element Sequence, obtain the data size */ +/* Input: SDP Rx Buf Pointer in contr, parameter count in timeup */ +/* Output: data length in rega, data pointer in contr */ +/* and parameter count in timeup, return with zero flag set: */ +/* syntax error */ +/**********************************************************************/ +dataelementtype6: + bpatchx patch3a_4,mem_patch3a + ifetch 1,contr + increase -1,timeup + compare 0x30,pdata,0xf8 /* 5 MSB: b00110: type 6 */ + nbranch dsize_error,true + compare 0x07,pdata,0x07 /* 3 LSB: b111: 32 bits */ + branch dsize32,true + compare 0x06,pdata,0x07 /* 3 LSB: b110: 16 bits */ + branch dsize16,true + compare 0x05,pdata,0x07 /* 3 LSB: b101: 8 bits */ + nbranch dsize_error,true +// ifetchr rega,1,contr /* data length in reg A */ + ifetch 1,contr + copy pdata,rega + increase -1,timeup + branch dsize +dsize32: + increase 2,contr + increase -2,timeup +dsize16: + ifetch 2,contr + byteswap pdata,rega + increase -2,timeup +dsize: + force 0x01,pdata + rtn +dsize_error: + force 0x00,pdata + rtn + +/**********************************************************************/ +/* Subroutine: sa_empty_rsp */ +/* Send empty response */ +/* */ +/* Input: mem_sdp_pduid, mem_sdp_transactionid */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +ss_empty_rsp: + setarg SDP_SEARCH_RES + store 1, mem_sdp_pduid + branch empty_response +sa_empty_rsp: + setarg SDP_ATTRIBUTE_RES + store 1, mem_sdp_pduid + branch empty_response +ssa_empty_rsp: + setarg SDP_SEARCHATTRIB_RES + store 1, mem_sdp_pduid +empty_response: + call l2cap_get_sdp_tx_payload /* empty attribute list */ +// fetchr regb,1,mem_sdp_pduid /* PDUID */ +// istorer regb,1,contw + fetch 1,mem_sdp_pduid + copy pdata,regb + istore 1,contw + fetch 2,mem_sdp_transactionid /* copy back transaction id */ + istore 2,contw + setarg 0x0500 + istore 2, contw + compare SDP_ATTRIBUTE_RES,regb,0xff + branch fullsearch,true + compare SDP_SEARCHATTRIB_RES,regb,0xff + branch fullsearch,true + setarg 0x000000 + istore 5,contw + branch outempty + +fullsearch: /* pduid must be 5 or 7 */ + setarg 0x350200 + istore 5,contw +outempty: + jam 10,mem_sdp_tx_pkt_length + rtn + +//return length in pdata(whole element ,include header and data ), contr not change +sdp_data_len: + call store_contw + call store_contr + call sdp_get_data + call get_contw + call get_contr + copy temp,pdata + rtn + +//return data length in pdata, contr is data pionter,return length in temp(whole element ,include header and data ) +sdp_get_data: + ifetch 1,contr + and pdata,0x7,loopcnt + rshift3 pdata,pdata + bne 0,sdp_get_data_type_not0 +sdp_get_data_type0: + force 1,pdata + force 1,temp + rtn + +sdp_get_data_type_not0_sizeindex01234: + call left_shift_n + add pdata,1,temp //add header length + rtn +sdp_get_data_type_not0: + deposit loopcnt + sub pdata,4,null + branch sdp_get_data_type_not0_sizeindex01234,positive + beq 5,sdp_get_data_type_not0_sizeindex5 + beq 6,sdp_get_data_type_not0_sizeindex6 + beq 7,sdp_get_data_type_not0_sizeindex7 + rtn + +sdp_get_data_type_not0_sizeindex5: + ifetch 1,contr + add pdata,2,temp //add header length + rtn +sdp_get_data_type_not0_sizeindex6: + ifetch 2,contr + byteswap pdata,pdata + add pdata,3,temp //add header length + rtn +sdp_get_data_type_not0_sizeindex7: + ifetch 2,contr + byteswap pdata,pdata + ifetcht 2,contr + byteswap temp,temp + lshift16 temp,temp + iadd temp,pdata + add pdata,5,temp //add header length + rtn + +/* find with uuids +input uuids pionter in timeup +return handles in mem_sdp_handle_list; handles number in queue if found +return regb all length*/ +search_all_uuid: + bpatchx patch3a_5,mem_patch3a + force 0,queue + arg 0,regb + arg mem_sdp_handle_list,contw +search_all_uuid_llop: + ifetch 2,timeup + rtn blank + call search_uuid + copy queue,pdata + rtneq SDP_MAX_HANDLE_NUMBER + increase 2,timeup + branch search_all_uuid_llop + +search_uuid: +// arg 0,regb + iforce regc +// force 0,queue + fetch 2, mem_ui_uuid_table + iforce contr +search_uuid_next: + copy queue,pdata + rtneq SDP_MAX_HANDLE_NUMBER + disable user + ifetch 1,contr + rtn blank + iforce loopcnt +search_uuid_loop: + ifetch 2,contr + isub regc,null + nbranch search_uuid_not_found,zero + enable user // uuid match +search_uuid_not_found: + loop search_uuid_loop + ifetcht 4,contr // get handle + copy contr,rega + nbranch search_uuid_nomatch,user + arg mem_sdp_handle_list,contr + arg SDP_MAX_HANDLE_NUMBER,loopcnt +search_uuid_check_same_handle: + ifetch 4,contr + branch search_uuid_store_handle,blank + isub temp,null + branch search_uuid_nomatch,zero + loop search_uuid_check_same_handle + rtn +search_uuid_store_handle: + istoret 4,contw + increase 1,queue + copy rega,contr + call sdp_data_len + iadd regb,regb + iadd contr,contr + branch search_uuid_next +search_uuid_nomatch: + copy rega,contr + call sdp_get_data + iadd contr,contr // next paragraph + branch search_uuid_next + +/* temp is handle, +return zero if found +return data pointer in contr +*/ +search_handle: + bpatchx patch3a_6,mem_patch3a + fetch 2,mem_ui_uuid_table + iforce contr +search_handle_loop: + ifetch 1,contr + branch disable_zero,blank + lshift pdata,pdata + iadd contr,contr + ifetch 4,contr + isub temp,null + rtn zero + deposit contw + store 2,mem_contw + storet 8,mem_temp + call sdp_get_data + iadd contr,contr + copy contr,pdata + fetcht 2,mem_contw + copy temp,contw + fetcht 8,mem_temp + copy pdata,contr + branch search_handle_loop + +/** +* input regb and regc.regb is the attribute ID and regc is UUID. +* set contr if find attribute or 0 if not +*/ +search_attrib: + bpatchx patch3a_7,mem_patch3a + fetch 2,mem_ui_uuid_table + iforce contr +search_attrib_next: + ifetch 1,contr + branch search_attrib_end, blank + iforce loopcnt +search_attrib_loop: + ifetch 2,contr + isub regc,null /* regc is UUID, compare it */ + branch search_attrib_found_uuid,zero + loop search_attrib_loop + increase 4,contr + call sdp_get_data + iadd contr,contr /* next paragraph */ + branch search_attrib_next +search_attrib_found_uuid: + increase -1,loopcnt + lshift loopcnt,pdata + iadd contr,contr + increase 4,contr + call sdp_get_data + iadd contr,timeup /* attribute list end */ +search_attrib_loop_attribs: + increase 1,contr + ifetch 2,contr + isub regb,null + //force 0x1,pdata,zero +// setflag zero, 0,pdata +// copy timeup, timeup + branch disable_blank,zero /* attribute found */ + call sdp_data_len + iadd contr,contr + deposit timeup + isub contr,null + branch search_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/ + branch search_attrib_loop_attribs +search_attrib_end: + force 0,contr + force 0,pdata + rtn + + +//search the attribute according the record handle +//record handle in temp, attribute in regb +//set the contr to zero if not found +search_handle_attrib: + bpatchx patch3b_0,mem_patch3b + fetch 2,mem_ui_uuid_table + iforce contr +search_handle_attrib_next: + ifetch 1,contr + branch search_handle_attrib_end, blank + lshift pdata,pdata + iadd contr, contr + ifetch 4,contr + isub temp,null /* regc is UUID, compare it */ + branch search_handl_attrib_found_handle,zero + call sdp_get_data + iadd contr,contr /* next paragraph */ + branch search_handle_attrib_next +search_handl_attrib_found_handle: + call sdp_get_data + iadd contr,timeup /* attribute list end */ +search_handle_attrib_loop_attribs: + increase 1,contr + ifetch 2,contr + isub regb,null + rtn zero /* attribute found */ + call sdp_data_len + iadd contr,contr + deposit timeup + isub contr,null + branch search_handle_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/ + branch search_handle_attrib_loop_attribs +search_handle_attrib_end: + force 0,contr + rtn + + +//enable user if find rfcomm channel number, pdata is channel number +search_rfcomm_cn: + arg 0x0400,regb // attribute protocol edscriptor list + call search_handl_attrib_found_handle + arg 0x0300,regb // uuid rfcomm + call search_uuid_in_data + nrtn user + sub rega,3,null + branch disable_user,positive + ifetch 1,contr + bne 0x08,disable_user + ifetch 1,contr + rtn + + //input timeup is lenth + //input contr is data ptr + //return contr is end of uuid; enable user if found uuid +search_uuid_in_data: + bpatchx patch3b_1,mem_patch3b + call sdp_get_data + copy pdata,rega +search_uuid_in_data_loop: + ifetch 1,contr + and pdata,0x7,loopcnt + rshift3 pdata,pdata + sub pdata,3,null + branch search_uuid_in_data_found_uuid,zero + copy loopcnt,pdata + beq 5,search_uuid_in_data_found_element_index5 + beq 6,search_uuid_in_data_found_element_index6 + beq 7,search_uuid_in_data_found_element_index7 + increase -1,contr + call sdp_get_data + iadd contr,contr + copy rega,pdata + isub temp,rega + branch disable_user,zero + branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index5: + increase -2,rega + increase 1,contr + branch search_uuid_in_data_loop +search_uuid_in_data_found_element_index6: + increase -3,rega + increase 2,contr + branch search_uuid_in_data_loop +search_uuid_in_data_found_element_index7: + increase -5,rega + increase 4,contr + branch search_uuid_in_data_loop + +search_uuid_in_data_found_uuid: + increase -1,rega + copy loopcnt,pdata + beq 1,search_uuid_in_data_type_uuid_16 + beq 2,search_uuid_in_data_type_uuid_32 + beq 4,search_uuid_in_data_type_uuid_128 + branch disable_user +search_uuid_in_data_type_uuid_128: + increase -12,rega +search_uuid_in_data_type_uuid_32: + ifetch 2,contr + increase -2,rega +search_uuid_in_data_type_uuid_16: + ifetch 2,contr + isub regb,null + branch enable_user,zero + increase -2,rega + branch disable_user,zero + branch search_uuid_in_data_loop + +/* +//rega:l2cap len ,mem_search_uuid:uuid to search +sdp_send_search_req: + call l2cap_malloc_sdp_req + setarg SDP_SEARCH_REQ + istore 1,contw + fetch 2,mem_sdp_transactionid_local + byteswap pdata,pdata + istore 2,contw + increase -5,rega + byteswap rega,rega + //istorer rega,2,contw + copy rega,pdata + istore 2,contw + setarg 0x0335 + istore 2,contw + setarg 0x19 + istore 1,contw + fetch 2,mem_search_uuid + istore 2,contw + setarg 0x0008 + istore 2,contw + setarg 0 + istore 1,contw + rtn + +//rega:l2cap len +sdp_send_attribute_req: + call l2cap_malloc_sdp_req + setarg SDP_ATTRIBUTE_REQ + istore 1,contw + fetch 2,mem_sdp_transactionid_local + byteswap pdata,pdata + istore 2,contw + increase -5,rega + byteswap rega,rega +// istorer rega,2,contw + copy rega,pdata + istore 2,contw + fetch 4,mem_sdp_record_handle + istore 4,contw + setarg 0x2c01 + istore 2,contw + setarg 0x0535 + istore 2,contw + setarg 0x0a + istore 1,contw + setarg 0 + istore 2,contw + setarg -1 + istore 2,contw + setarg 0 + istore 1,contw + rtn +*/ + + +sdp_send_spp_request: + call l2cap_get_sdp_tx_payload + copy pdata,contw + setarg 6//Search Attr Req + istore 1,contw + setarg sdp_tid_spp + istore 2,contw + setarg 0x0f00 //length15 + istore 2,contw + setarg 0x1a0535 + istore 3,contw + setarg 0x0111 + lshift16 pdata,pdata //UUID + istore 4,contw + setarg 0x2600 //max return len + istore 2,contw + setarg 0x0335 + istore 2,contw + setarg 0x0009 + istore 2,contw + setarg 0x0004 + istore 2,contw + jam 0x14,mem_sdp_tx_pkt_length + rtn + + + +function_g2: + bpatchx patch3b_2,mem_patch3b + jam 80,mem_AES_CMAC_data_length + arg memdat,contw + arg mem_le_srand,contr + call memcpy16 + arg mem_le_pubkey_local_x_256,contr + call memcpy32 + arg mem_le_pubkey_remote_x_256,contr + call memcpy32 + call inverse_memdat + arg mem_le_mrand,contr + call store_inverse_k + call function_AES_CMAC + + arg mem_AES_CMAC_temp,contw + call load_inverse_result + setarg 1000000 + copy pdata,rega + fetch 4,mem_AES_CMAC_temp + idiv rega + call wait_div_end + remainder pdata + store 4,mem_gkey +//call ice_break + rtn + +function_f6_eb: + jam 65,mem_AES_CMAC_data_length + arg memdat,contw + call store_addr_common_a + call store_addr_common_b + fetch 3,mem_le_pres+1 + istore 3,contw +// arg mem_le_r,contr +// call memcpy16 + call get_r + + arg mem_le_mrand,contr + call memcpy16 + arg mem_le_srand,contr + call memcpy16 + call inverse_memdat + arg mem_le_mackey ,contr + arg mem_AES_CMAC_k,contw + call memcpy16 +// call p_store_inverse_k + branch function_AES_CMAC +// arg mem_AES_CMAC_temp,contw +// branch p_load_inverse_result + +get_r: + fetch 4,mem_le_tk + istore 4,contw + call memset0_4 + branch memset0_8 + +function_f6_ea: + bpatchx patch3b_3,mem_patch3b + jam 65,mem_AES_CMAC_data_length + arg memdat,contw + call store_addr_common_b + call store_addr_common_a + fetch 3,mem_le_preq+1 + istore 3,contw +// arg mem_le_r,contr +// call memcpy16 + call get_r + arg mem_le_srand,contr + call memcpy16 + arg mem_le_mrand,contr + call memcpy16 + call inverse_memdat + arg mem_le_mackey ,contr + arg mem_AES_CMAC_k,contw + call memcpy16 +// call p_store_inverse_k + call function_AES_CMAC + arg mem_AES_CMAC_temp,contw + branch load_inverse_result + +function_f5: + jam 32,mem_AES_CMAC_data_length + arg mem_le_dhkey_256 ,contr + arg memdat,contw + call memcpy32 + call inverse_memdat + arg mem_le_slat,contr + call store_inverse_k + call function_AES_CMAC + arg mem_AES_CMAC_k,contw + call store_aes_result + arg 1,temp + call function_f5_common + arg mem_le_ltk,contw + call load_inverse_result + arg 0,temp + call function_f5_common + arg mem_le_mackey,contw +// branch p_load_inverse_result + branch store_aes_result + + +function_f5_common: + bpatchx patch3b_4,mem_patch3b + jam 53,mem_AES_CMAC_data_length + setarg 0x100 + store 2,memdat + call store_addr_common_b + call store_addr_common_a + arg mem_le_srand,contr + call memcpy16 + arg mem_le_mrand,contr + call memcpy16 +// fetch 4,mem_le_keyid 0x62746c65 + setarg 0x6c65 + istore 2,contw + setarg 0x6274 + istore 2,contw + istoret 1,contw //counter + call inverse_memdat + branch function_AES_CMAC + +store_addr_common_b: + fetch 6,mem_le_lap + istore 6,contw + fetch 1,mem_le_conn_own_addr_type + istore 1,contw + rtn + +store_addr_common_a: + fetch 6,mem_le_plap + istore 6,contw +// setarg 0x2dcfc1 +// istore 3,contw +// setarg 0xa71370 +// istore 3,contw + fetch 1,mem_le_conn_peer_addr_type + istore 1,contw + rtn + +function_f4_ca: + jam 65,mem_AES_CMAC_data_length + fetch 1,mem_passkey_1bit + store 1,memdat + arg mem_le_pubkey_local_x_256,contr + call memcpy32 + arg mem_le_pubkey_remote_x_256,contr + call memcpy32 + call inverse_memdat + arg mem_le_mrand,contr + call store_inverse_k + branch function_AES_CMAC + + +function_f4_cb: + jam 65,mem_AES_CMAC_data_length + fetch 1,mem_passkey_1bit + store 1,memdat + arg mem_le_pubkey_remote_x_256,contr + call memcpy32 + arg mem_le_pubkey_local_x_256,contr + call memcpy32 + call inverse_memdat + arg mem_le_srand,contr + call store_inverse_k + branch function_AES_CMAC + +function_AES_CMAC: + bpatchx patch3b_5,mem_patch3b + call function_AES_CMAC_Generate_Subkey +//call ice_break +// jam 65,mem_AES_CMAC_data_length +//call ice_break + fetch 1,mem_AES_CMAC_data_length + copy pdata,temp +function_ceil16: + increase 15,pdata + rshift4 pdata,pdata + copy pdata,regb + branch function_AES_CMAC_set_flag_0_balnk,blank + and temp,0x0f,pdata + nbranch function_AES_CMAC_set_flag_0,blank +// flag =1; + arg mem_AES_CMAC_k1,regc + arg memdat,pdata + increase -16,pdata +// iadd temp,pdata +// isub rega,rega + iadd temp,rega + arg mem_AES_CMAC_M_last,contw + arg 4,loopcnt + call xor_loop +//call ice_break +// arg mem_f4_k1,contr +// call load_key + branch function_AES_CMAC_aes + +function_AES_CMAC_set_flag_0_balnk: + arg 1,regb + arg 0,rega +// arg mem_f4_test_data,pdata + branch function_AES_CMAC_set_flag_0_common +//call ice_break + +function_AES_CMAC_set_flag_0: +// flag = 0; + and temp,0x0f,rega +function_AES_CMAC_set_flag_0_common: + arg memdat,pdata + iadd temp,pdata + isub rega,contr +//call ice_break + arg mem_AES_CMAC_temp,contw + call function_AES_CMAC_padding +//call ice_break + arg mem_AES_CMAC_k2,regc + arg mem_AES_CMAC_temp,rega + arg mem_AES_CMAC_M_last,contw + arg 4,loopcnt + call xor_loop +//call ice_break + +// arg mem_f4_k2,contr +// call load_key + +// branch p_function_f4_aes +function_AES_CMAC_aes: +// arg mem_f4_k,contr +// call load_key +// arg mem_AES_CMAC_xor,contr +// call load_data128 + call aes_clear_data + call aes_init +// arg mem_f4_k,contr +// call load_key + arg memdat,contr +function_AES_CMAC_aes_loop: +//generate_mic_loop: + increase -1,regb + deposit regb + branch function_AES_CMAC_aes_loop_end,blank + call load_data128 + call do_aes_cbc + branch function_AES_CMAC_aes_loop +//generate_mic_end: +function_AES_CMAC_aes_loop_end: + arg mem_AES_CMAC_temp,contw + call store_aes_result + arg mem_AES_CMAC_M_last,contr + call load_data128 + call aes_init + arg mem_AES_CMAC_temp,contr + call load_data128 + branch do_aes_cbc + + + +load_inverse_result: +// arg mem_AES_CMAC_temp,contw + copy contw,rega + call store_aes_result +// arg mem_AES_CMAC_temp,rega + arg 16,loopcnt + branch inverse_data + +store_inverse_k: + arg mem_AES_CMAC_k,contw + call memcpy16 +inverse_k: + arg 16,loopcnt + arg mem_AES_CMAC_k,rega + branch inverse_data + +inverse_memdat: + fetch 1,mem_AES_CMAC_data_length + copy pdata,loopcnt + arg memdat,rega + branch inverse_data + +bn_lshift_0_inverse: + ifetch 1,regA + lshift pdata,pdata + isolate1 0,regC + setflag true,0,pdata + isolate1 8,pdata + setflag true,0,regC + istore 1,rega + increase -1,rega + loop bn_lshift_0_inverse + rtn + +function_AES_CMAC_k1_inverse: + arg mem_AES_CMAC_k1,regA +function_AES_CMAC_inverse_common: + increase 15,rega + force 16,loopcnt + force 0,regC + branch bn_lshift_0_inverse + +function_AES_CMAC_k2_inverse: + arg mem_AES_CMAC_k2,regA + branch function_AES_CMAC_inverse_common + + +function_AES_CMAC_Generate_Subkey: + arg mem_AES_CMAC_k,contr + call load_key +// arg mem_AES_CMAC_xor,contr +// call aes_load_xor + force regidx_xor,regext_index + call aes_clear + call aes_clear_data + call do_aes_ocb + +// force 0x38,aes_ctrl +// force 0x0,aes_ctrl +// call wait_aes + arg mem_AES_CMAC_k1,contw + call store_aes_result +function_AES_CMAC_k1: + bpatchx patch3b_6,mem_patch3b + fetch 1,mem_AES_CMAC_k1 + isolate1 7,pdata + nbranch function_AES_CMAC_k1_0,true + call function_AES_CMAC_k1_inverse + +//p_function_f4_k1_xor: + arg mem_AES_CMAC_k1,regc +// arg mem_AES_CMAC_rb,rega + arg mem_AES_CMAC_k1,contw +// arg 3,loopcnt +// call xor_loop + call function_AES_CMAC_xor_rb + branch function_AES_CMAC_k2 +function_AES_CMAC_k1_0: + call function_AES_CMAC_k1_inverse +function_AES_CMAC_k2: +//call ice_break + arg mem_AES_CMAC_k1,contr + arg mem_AES_CMAC_k2,contw + call memcpy16 + fetch 1,mem_AES_CMAC_k2 + isolate1 7,pdata + nbranch function_AES_CMAC_k2_inverse,true + call function_AES_CMAC_k2_inverse +//p_function_f4_k2_xor: + arg mem_AES_CMAC_k2,regc +// arg mem_AES_CMAC_rb,rega + arg mem_AES_CMAC_k2,contw +// arg 3,loopcnt +// branch xor_loop + + +//rb:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 +function_AES_CMAC_xor_rb: + arg 3,loopcnt +function_AES_CMAC_xor_rb_loop: + arg 0,temp + call function_AES_CMAC_xor_loop_common + increase 4,regc + loop function_AES_CMAC_xor_rb_loop + arg 0x8700,temp + lshift16 temp,temp +function_AES_CMAC_xor_loop_common: + ifetch 4,regc + ixor temp,pdata + istore 4,contw + rtn + + + + +//input rega :length <16 contr,contw +function_AES_CMAC_padding: + bpatchx patch3b_7,mem_patch3b + arg 16,loopcnt + arg 0,pdata +function_AES_CMAC_padding_loop: + isub rega,null + branch function_AES_CMAC_padding_beq_length,zero + branch function_AES_CMAC_padding_big_length,positive + ifetcht 1,contr + istoret 1,contw +function_AES_CMAC_padding_loop2: + increase 1,pdata + loop function_AES_CMAC_padding_loop + rtn +function_AES_CMAC_padding_beq_length: + arg 0x80,temp +function_AES_CMAC_padding_common: + istoret 1,contw + branch function_AES_CMAC_padding_loop2 + +function_AES_CMAC_padding_big_length: + arg 0,temp + branch function_AES_CMAC_padding_common + + +generate_kinit: + call function_e22 + arg mem_input_store,contr + arg mem_kinit,contw /* Kinit is ready */ + branch memcpy16 + + +function_e21: /* rega pointers to bdaddr */ + disable user + call function_expand + arg mem_random_number,contr + arg mem_x,contw + force 15,loopcnt + call memcpy + ifetch 1,contr + xor_into 6,pdata + istore 1,contw + setarg mem_y + store 2,memp_ar_input + setarg mem_x + store 2,memp_ar_key + set1 mark_ar2,mark + branch function_ar + + + +function_e22: /* rega pointers to bdaddr */ + fetcht 1,mem_pin_length + force 16,regb /* total 16 bytes */ + add temp,6,regc /* regc is l' */ + sub regc,16,null + branch function_e22_pin_init,positive + force 16,regc +function_e22_pin_init: /* generate x from pin and bdaddr */ + arg mem_x,contw +function_e22_genx_pin: + arg mem_pin,contr + copy temp,loopcnt + disable user +function_e22_genx_loop: + ifetch 1,contr + istore 1,contw + increase -1,regb + branch function_e22_genx_end,zero + loop function_e22_genx_loop + branch function_e22_genx_pin,user + enable user + force 6,loopcnt + copy rega,contr + branch function_e22_genx_loop +function_e22_genx_end: + arg mem_random_number,contr + arg mem_y,contw + call memcpy16 + fetch 1,mem_y15 + ixor regc,pdata + store 1,mem_y15 /* inpy[15] = rand_num[15]^l'; */ + setarg mem_y + store 2,memp_ar_input + setarg mem_x + store 2,memp_ar_key + set1 mark_ar2,mark + branch function_ar + + + + +function_e1: /* rega pointers to bdaddr */ + disable user + call function_expand + branch function_hash + +function_e3: + arg mem_aco,rega + enable user + call function_expand + call function_hash + arg mem_input_store,contr + arg mem_kc,contw + branch memcpy16 + + /* costs 41769 clocks */ +function_hash: + setarg mem_random_number + store 2,memp_ar_input + setarg mem_link_key + store 2,memp_ar_key + set0 mark_ar2,mark + call function_ar + arg mem_input_store,rega + arg mem_random_number,regb + arg mem_x,contw + call xor16 + arg mem_x,rega + arg mem_y,regb + copy regb,contw + enable user + call add16 + call key_offset + setarg mem_y + store 2,memp_ar_input + setarg mem_x + store 2,memp_ar_key + set1 mark_ar2,mark + branch function_ar + + + /* totally costs 20700 clocks */ +function_ar: + jam 0,mem_ar_hround + fetch 2,memp_ar_key + iforce contr + arg mem_key_store,contw + call memcpy16 + fetch 2,memp_ar_input + iforce contr + arg mem_input_store,contw + call memcpy16 + +function_ar_loop: + call key_scheduling + disable user + bmark0 mark_ar2,function_ar_original + fetch 1,mem_ar_hround + bne 4,function_ar_original + fetch 2,memp_ar_input + iforce regb + call xor_mod32_ar2 +function_ar_original: + call xor_mod32 + call el_boxes + fetch 1,mem_ar_hround + increase 1,pdata + store 1,mem_ar_hround + + call key_scheduling + enable user + call xor_mod32 + call pht + call permute + call pht + call permute + call pht + call permute + call pht + fetch 1,mem_ar_hround + increase 1,pdata + store 1,mem_ar_hround + bne 16,function_ar_loop + call key_scheduling + disable user + branch xor_mod32 + +/* input round number and temp key in mem_key_store, and output the next temp key in mem_key_store */ +/* round key is generated and store in mem_round_key */ +key_scheduling: + fetch 1,mem_ar_hround + arg mem_key_store,contr + branch key_sched_zero,blank + iforce regb /* regb is half round */ + force 17,loopcnt + copy contr,contw +key_rotateloop: + ifetch 1,contr + lshift3 pdata,temp + rshift2 pdata,pdata + rshift3 pdata,pdata + ior temp,pdata + istore 1,contw + loop key_rotateloop + setarg mem_key_store + iadd regb,contr + force 16,loopcnt + arg mem_round_key,contw +key_select_octet_loop: + ifetch 1,contr + istore 1,contw + compare mem_key_store_end,contr,0xff + nbranch key_select_octet_nwrap,true + increase -17,contr +key_select_octet_nwrap: + loop key_select_octet_loop + force 0,rega /* rega is index of octet within row */ + add regb,-1,regc /* this is the row index, half_round#1 is 0 */ + lshift2 regc,regc + lshift2 regc,regc + call enable_authrom + setarg mem_b_box + iadd regc,regc /* regc hold the starting address of the row */ + arg mem_round_key,contw + force 16,loopcnt +bias_round_key_loop: + ifetcht 1,regc + ifetch 1,contw + iadd temp,pdata + istore 1,contw + increase 1,regc + loop bias_round_key_loop + branch disable_authrom + +key_sched_zero: /* round 0, key1 */ + force 16,loopcnt + force 0,temp +create_byte_16_loop: + ifetch 1,contr + ixor temp,temp + loop create_byte_16_loop + deposit temp + istore 1,contr /* store the byte #16 */ + arg mem_key_store,contr + arg mem_round_key,contw + branch memcpy16 + +xor_mod32: /* xor on 0,3, add on 1,2. if user is set, invert. x in rega and y in regb, out in contw */ + arg mem_round_key,regb +xor_mod32_ar2: + force 16,loopcnt + arg mem_input_store,rega + copy rega,contw +xor_mod32_loop: + ifetcht 1,rega + ifetch 1,regb + ixor temp,alarm + and loopcnt,3,regc + nbranch xor_mod32_invert,user + xor_into 3,regc +xor_mod32_invert: + sub regc,1,regc + branch xor_even,positive + iadd temp,alarm +xor_even: + deposit alarm + istore 1,contw + increase 1,rega + increase 1,regb + loop xor_mod32_loop + rtn + +el_boxes: + call enable_authrom + force 16,loopcnt + arg mem_input_store,rega +el_box_loop: + ifetch 1,rega + arg mem_e_box,contr + and loopcnt,3,regc + sub regc,1,null + branch e_boxes,positive + arg mem_l_box,contr +e_boxes: + iadd contr,contr + ifetch 1,contr + istore 1,rega + increase 1,rega + loop el_box_loop + branch disable_authrom + +pht: + force 8,loopcnt + arg mem_input_store,contr + copy contr,contw +pht_loop: + ifetch 1,contr + iforce rega + ifetch 1,contr + iforce regb + lshift rega,pdata + iadd regb,pdata + istore 1,contw + deposit rega + iadd regb,pdata + istore 1,contw + loop pht_loop + rtn + +/* 8 11 12 15 2 1 6 5 10 9 14 13 0 7 4 3 */ +permute: + setarg 0x8ae42c + iforce temp + force 7,loopcnt + call permute_exchange + setarg 0xd751b + iforce temp + force 5,loopcnt + call permute_exchange + fetch 1,mem_input_store+15 + iforce rega + fetch 1,mem_input_store+3 + store 1,mem_input_store+15 + deposit rega + store 1,mem_input_store+3 + rtn + +permute_exchange: + and temp,0xf,regb +permute_loop: + and temp,0xf,pdata + arg mem_input_store,contw + iadd contw,contw + ifetch 1,contw + iforce regc + deposit rega + istore 1,contw + copy regc,rega + rshift4 temp,temp + loop permute_loop + setarg mem_input_store + iadd regb,contw + deposit rega + istore 1,contw + rtn + +add16: + enable user + branch xor_add16 + +xor16: + disable user +xor_add16: /* if user is set, do add, else do xor */ + force 16,loopcnt /* rega and regb pointers to src, contw is result */ +xoradd_loop: + ifetcht 1,rega + ifetch 1,regb + branch xoradd_add,user + ixor temp,pdata + branch xoradd_store +xoradd_add: + iadd temp,pdata +xoradd_store: + istore 1,contw + increase 1,rega + increase 1,regb + loop xoradd_loop + rtn + + +function_expand: /* rega pointers to bdaddr, or aco and user is set */ + arg mem_y,contw + ifetch 6,rega + istore 6,contw + branch expand_12,user + ifetch 6,rega + branch expand_cont +expand_12: + ifetch 6,contr +expand_cont: + istore 6,contw + ifetch 4,rega + istore 4,contw + rtn + +key_offset: + arg mem_link_key,contr + arg mem_x,contw + arg 0,temp + setarg 0x8395a7 + call concatenate_temp24 + setarg 0xb3c1df + call concatenate_temp24 + setarg 0xe5e9 + call concatenate_temp16 + copy temp,regab + disable user + call key_addxor + copy regab,temp + enable user + branch key_addxor + +key_addxor: + force 8,loopcnt +key_addxor_loop: + ifetch 1,contr + compare 1,loopcnt,1 + branch key_high,user + branch key_xor,true +key_add: + iadd temp,pdata + branch key_store +key_high: + branch key_add,true +key_xor: + ixor temp,pdata +key_store: + istore 1,contw + rshift8 temp,temp + loop key_addxor_loop + rtn + +copy_aco: + fetch 6,mem_input_store+4 + store 6,mem_aco + ifetch 6,contr + istore 6,contw + rtn + +concatenate_temp24: + lshift8 temp,temp +concatenate_temp16: + lshift16 temp,temp + ior temp,temp + rtn + + + +loop1: + branch loop1 + +/* ==================== LE security ================= */ + +generate_stk: + bpatchx patch3c_0,mem_patch3c + call function_s1 + arg mem_le_ltk,contw + branch store_aes_result + + /* contr = rand pointer */ +authenticate_rconfirm: + arg mem_le_srand,contw + branch authenticate_mconfirm,master + arg mem_le_mrand,contw +authenticate_mconfirm: + copy contr,rega + call memcpy16 + call function_c1 + arg mem_le_rconfirm,contr + branch compare_res + +generate_confirm: + arg mem_le_mrand,rega + branch generate_mrand,master + arg mem_le_srand,rega +generate_mrand: + copy rega,contw + call generate_random + branch function_c1 + +generate_sk: + arg mem_le_skdm,contr + call load_data128 + arg mem_le_ltk,contr + call load_regext + force 0x38,aes_ctrl + force 0x0,aes_ctrl + call wait_aes + arg mem_le_sk,contw + branch store_aes_result + + /* temp=packet counter, rega = length or block counter*/ +first_block_counter: + force 0x49,pdata + branch first_block +first_block_data: + force 1,pdata +first_block: + force regidx_data,regext_index /* B0 */ + lshift8 temp,regext + ior regext,regext + increase 1,regext_index + rshift8 temp,regext + rshift16 regext,regext + fetch 2,mem_le_ivm + lshift16,pdata,pdata + ior regext,regext /* octet3&octet4 of counter and low 16 bit of IV */ + increase 1,regext_index + ifetch 4,contr /* IV2-IV5 */ + iforce regext + increase 1,regext_index + ifetch 2,contr /* IV6-IV7 */ + byteswap rega,regext + lshift16 regext,regext + ior regext,regext + increase 1,regext_index + rtn + + + /* temp=packet counter, regc pointers to data */ +generate_mic: + add regc,1,contr + ifetch 1,contr + iforce rega + call first_block_counter + call do_aes_ocb + + force regidx_data,regext_index /* B1 */ + ifetch 1,regc + and_into 0x3,pdata + lshift16 pdata,regext + set1 8,regext + call clear_hidata + call do_aes_cbc + + copy rega,loopcnt + add regc,2,contr + call padding_data +generate_mic_loop: + call aes_load_data + call do_aes_cbc + deposit loopcnt + branch generate_mic_end,blank + branch generate_mic_loop +generate_mic_end: + force regidx_result,regext_index + deposit regext + store 4,mem_le_mic + rtn + +aes_crypt_data: + increase 1,rega + call first_block_data + copy regc,contr + call aes_load_xor + call do_aes_ctr + call store_enc_data + increase 16,regc + increase -16,regb + branch aes_crypt_data,positive + rtn + +le_encrypt: + bpatchx patch3c_1,mem_patch3c + arg mem_le_txheader,regc + fetcht 5,mem_le_pcnt_tx + call generate_mic + force regidx_xor,regext_index + iforce regext + force 0,rega /* rega is block counter */ + call first_block_data + call do_aes_ctr + arg mem_le_txpayload,regc + fetch 1,mem_le_txlen + add pdata,-1,regb + iadd regc,contw + force regidx_result,regext_index + deposit regext + istore 4,contw + call aes_crypt_data + fetch 1,mem_le_txlen + increase 4,pdata + store 1,mem_le_txlen + fetcht 5,mem_le_pcnt_tx + increase 1,temp + storet 5,mem_le_pcnt_tx + rtn + +le_decrypt: + bpatchx patch3c_2,mem_patch3c + fetch 1,mem_le_rxbuf+1 + sub pdata,20,null + branch le_dec_cont,positive +le_dec_cont: + arg mem_le_rxbuf+2,regc + add pdata,-1,regb + increase -4,pdata /* mic will be discarded */ + store 1,mem_le_rxbuf+1 + iadd regc,contr + ifetch 4,contr + force regidx_xor,regext_index + iforce regext + force 0,rega /* rega is block counter */ + fetcht 5,mem_le_pcnt_rx + call first_block_data + call do_aes_ctr + force regidx_result,regext_index + deposit regext + store 4,mem_le_peer_mic + call aes_crypt_data + arg mem_le_rxbuf,regc + call generate_mic + fetcht 4,mem_le_peer_mic + isub temp,pdata /* MIC ok? */ + nrtn blank + fetch 4,mem_le_last_mic /* reduntdant packet? */ + isub temp,pdata + rtn blank + storet 4,mem_le_last_mic + fetch 5,mem_le_pcnt_rx + increase 1,pdata + store 5,mem_le_pcnt_rx + force 0,pdata + rtn + +wait_aes: + nbranch wait_aes,aes_ready + rtn + +do_aes_ocb: + force 0x30,aes_ctrl + force 0x0,aes_ctrl + branch wait_aes + +do_aes_cbc: + force 0x32,aes_ctrl + force 0x2,aes_ctrl + branch wait_aes + +do_aes_ctr: + force 0x34,aes_ctrl + force 0x4,aes_ctrl + branch wait_aes + + +aes_init: + force 1,aes_ctrl + force 0,aes_ctrl + rtn +function_s1: + force regidx_data,regext_index + fetch 4,mem_le_mrand + iforce regext + increase 1,regext_index + ifetch 4,contr + iforce regext + increase 1,regext_index + fetch 4,mem_le_srand + iforce regext + increase 1,regext_index + ifetch 4,contr + iforce regext + increase 1,regext_index + call aes_clear + increase -4,regext_index + fetch 4,mem_le_tk + copy pdata,regext + increase 4,regext_index + force 0x38,aes_ctrl + force 0x8,aes_ctrl + branch wait_aes + + /* rega pointers to random number */ +function_c1: + bpatchx patch3c_3,mem_patch3c + fetch 6,mem_le_lap + fetcht 6,mem_le_plap + branch function_c1_master,master + fetch 6,mem_le_plap + fetcht 6,mem_le_lap +function_c1_master: + force regidx_xor,regext_index + copy temp,regext + increase 1,regext_index + rshift32 temp,regext + lshift16 pdata,pdata + ior regext,regext + increase 1,regext_index + rshift32 pdata,regext + increase 1,regext_index + force 0,regext /* p2 = ia || ra */ + force 0,pdata + fetch 1,mem_le_conn_peer_addr_type + fetcht 1,mem_le_adv_own_addr_type + nbranch function_c1_irat,master + //conn as master + fetch 1,mem_le_conn_own_addr_type + fetcht 1,mem_le_conn_peer_addr_type +function_c1_irat: + store 1,mem_le_iat + storet 1,mem_le_rat + force regidx_data,regext_index + arg mem_le_iat,regb + force 4,loopcnt +function_c1_loop1: + ifetch 4,rega + ifetcht 4,regb + ixor temp,regext + increase 1,regext_index + increase 4,rega + increase 4,regb + loop function_c1_loop1 /* p1 ^ r */ + call aes_clear /* k = 0 */ + increase -4,regext_index + fetch 4,mem_le_tk + copy pdata,regext + increase 4,regext_index + force 0x38,aes_ctrl + force 0xc,aes_ctrl + call wait_aes + + call aes_clear_data + force 0x3a,aes_ctrl + force 0x8,aes_ctrl + branch wait_aes + +padding_data: + compare 0,loopcnt,3 + rtn true + deposit contr + iadd loopcnt,contw + force 0,pdata +padding_loop: + istore 1,contw + increase 1,loopcnt + compare 0,loopcnt,3 + rtn true + branch padding_loop + +aes_load_data: + force regidx_data,regext_index +load_data_loop: + deposit loopcnt + branch load_data_padding,blank + ifetch 4,contr + increase -4,loopcnt +load_data_padding: + iforce regext + increase 1,regext_index + compare regidx_key,regext_index,0xf + rtn true + branch load_data_loop + +aes_load_xor: + force regidx_xor,regext_index + branch load_regext +load_key: + force regidx_key,regext_index + branch load_regext +load_data128: + force regidx_data,regext_index +load_regext: + force 4,loopcnt +load_regext_loop: + ifetch 4,contr + iforce regext + increase 1,regext_index + loop load_regext_loop + rtn + +load_sk: + arg mem_le_sk,contr + branch load_key + +clear_hidata: + force 4,loopcnt + branch clear_data_rest + +aes_clear_data: + force regidx_data,regext_index +aes_clear: + force 4,loopcnt +clear_loop: + force 0,regext +clear_data_rest: + increase 1,regext_index + loop clear_loop + rtn + +store_aes_result: + force regidx_result,regext_index + force 4,loopcnt +send_aes_result_loop: + deposit regext + istore 4,contw + increase 1,regext_index + loop send_aes_result_loop + rtn + +store_enc_data: + force regidx_result,regext_index + copy regc,contw + add regb,1,loopcnt + sub loopcnt,15,null + branch store_enc_loop,positive + force 16,loopcnt +store_enc_loop: + deposit regext + sub loopcnt,3,null + branch store_enc_byte,positive + istore 4,contw + increase -4,loopcnt + rtn zero + increase 1,regext_index + branch store_enc_loop +store_enc_byte: + istore 1,contw + rshift8 pdata,pdata + loop store_enc_byte + rtn + + /* contr pointers to value to be compared */ +compare_res: + force regidx_result,regext_index + force 4,loopcnt +compare_res_loop: + ifetch 4,contr + isub regext,null + nrtn zero + increase 1,regext_index + loop compare_res_loop + force 0,null + rtn + +enable_authrom: + hfetch 1,core_clkoff + set0 CLOCK_OFF_AUTH_ROM,pdata + hstore 1,core_clkoff + rtn + +disable_authrom: + hfetch 1,core_clkoff + set1 CLOCK_OFF_AUTH_ROM,pdata + hstore 1,core_clkoff + rtn + +init_memp: + arg mem_p,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3fbff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3cfff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffef + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x26c7f + setsect 2,0x146b + setsect 3,0x37bb3 + istore 9,contw + setsect 0,0x1feb8 + setsect 1,0x10c12 + setsect 2,0x2b722 + setsect 3,0x29fa6 + istore 9,contw + setsect 0,0xe70f + setsect 1,0x16720 + setsect 2,0x519e + setsect 3,0x19084 + istore 9,contw + setsect 0,0x31012 + setsect 1,0x360bf + setsect 2,0x3f0af + setsect 3,0x3d3 + istore 9,contw + setsect 0,0x3a188 + setsect 1,0x3ad0 + setsect 2,0x3cbf2 + setsect 3,0x243d9 + istore 9,contw + setsect 0,0x2b030 + setsect 1,0x36a03 + setsect 2,0x11188 + setsect 3,0x1e520 + istore 9,contw + setsect 0,0x3a11e + setsect 1,0xfe5d + setsect 2,0xdd57 + setsect 3,0x1ac93 + istore 9,contw + setsect 0,0x11ed + setsect 1,0x218c4 + setsect 2,0x8da7 + setsect 3,0x257ff + istore 9,contw + setsect 0,0x3192b + setsect 1,0x34641 + setsect 2,0x1be0c + setsect 3,0x366ad + istore 9,contw + setsect 0,0x1f83 + setsect 1,0x15a23 + setsect 2,0x3f9b0 + setsect 3,0x3949 + istore 9,contw + setsect 0,0x13a51 + setsect 1,0x153fd + setsect 2,0x3372a + setsect 3,0xf1bb + istore 9,contw + setsect 0,0x3ae85 + setsect 1,0x1eed9 + setsect 2,0x9e66 + setsect 3,0x1a8 + istore 8,contw + rtn + + + +init_memp_256: + arg mem_p_256,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3f + setsect 2,0x0 + setsect 3,0x0 + istore 9,contw + setsect 0,0x0 + setsect 1,0x0 + setsect 2,0x1000 + setsect 3,0x0 + istore 9,contw + setsect 0,0x3ff00 + setsect 1,0x3ffff + setsect 2,0x3ffcf + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ff + istore 9,contw + setsect 0,0x0 + setsect 1,0x0 + setsect 2,0x0 + setsect 3,0x0 + istore 9,contw + setsect 0,0x10000 + setsect 1,0x0 + setsect 2,0x3f000 + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x296ff + setsect 1,0x22630 + setsect 2,0x3945d + setsect 3,0x3d284 + istore 9,contw + setsect 0,0x333a0 + setsect 1,0x4b7a + setsect 2,0x37d8 + setsect 3,0x3c9dc + istore 9,contw + setsect 0,0x3a440 + setsect 1,0x1b958 + setsect 2,0x38bce + setsect 3,0x1091f + istore 9,contw + setsect 0,0x2e12c + setsect 1,0x1f47c + setsect 2,0x356b1 + setsect 3,0x2fd47 + istore 9,contw + setsect 0,0x6837 + setsect 1,0x2ed90 + setsect 2,0x1ecec + setsect 3,0x1acc5 + istore 9,contw + setsect 0,0x23357 + setsect 1,0x18af3 + setsect 2,0xf9e1 + setsect 3,0x129f0 + istore 9,contw + setsect 0,0x2e7eb + setsect 1,0x3e6e3 + setsect 2,0x3e1a7 + setsect 3,0x10b8b + istore 9,contw + setsect 0,0x24fe3 + setsect 1,0x20ef + setsect 2,0x1b5a6 + setsect 3,0xdc2f + istore 9,contw + setsect 0,0x13860 + setsect 1,0x2bd69 + setsect 2,0x391a + setsect 3,0x1b222 + istore 9,contw + rtn + + +publickey_init: + fetch 1,mem_ssp_enable + nbranch sp_initialize,blank + branch sp_initialize_256 + +sp_calc_sequence_256_check: + bpatchx patch3c_4,mem_patch3c + fetch 1,mem_ssp_enable + rtn blank + fetch 1,mem_sp_local_key_invalid + rtnne SP_KEY_VALID + fetch 1,mem_le_secure_connect_enable + rtn blank + fetch 1,mem_le_sc_local_key_invalid + rtneq SP_KEY_VALID_256 + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,stop_publickey_calc_256 + fetch 1,mem_le_sc_calc + beq SP_CALC_STANDBY,sp_initialize_256 + rtn +stop_publickey_calc_256: + jam SP_CALC_STANDBY,mem_le_sc_calc + rtn + + +sp_initialize: + bpatchx patch3c_5,mem_patch3c + fetch 1,mem_ssp_enable + branch ssp_disable, blank + call ssp_enable + call sp_clear_flags + branch sp_pubkey_calc + +sp_clear_flags: + setarg 0 + store 8,mem_sp_state_start + store 4,mem_sp_flag_start + store 7,mem_sp_iocap_remote + rtn + +sp_generate_local_key: + jam SP_FLAG_COMMIT,mem_sp_flag + branch sp_generate_local_key0 +sp_master_generate_local_key: + fetch 1,mem_sp_local_key_invalid + beq SP_KEY_VALID,sp_dhkey_calc + branch assert +sp_generate_local_key0: + fetch 1,mem_sp_local_key_invalid + beq SP_KEY_VALID,sp_start_send_pubkey + branch sp_pubkey_calc + +sp_start_send_pubkey: + call sp_dhkey_calc + fetch 1,mem_master_sp_state + nrtn blank + jam SP_STAT_KEY_SEND,mem_sp_state + rtn + + +sp_calc_check_publickey_256: + call sp_calc_b256 + arg mem_le_pubkey_remote_y_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 + arg mem_le_pubkey_remote_x_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 + arg mem_t2_256,regA + arg mem_le_pubkey_remote_x_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 + arg mem_a_256,regA + arg mem_le_pubkey_remote_x_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod_256 + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + call bn_addmod_256 + arg 32,loopcnt + arg mem_t7_256,regA + arg mem_t0_256,regB + branch string_compare + +sp_calc_b256: + arg mem_gy_256,regA + arg mem_t0_256,contw + call bn_sqrmod_256 + arg mem_gx_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 + arg mem_t2_256,regA + arg mem_gx_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 + arg mem_a_256,regA + arg mem_gx_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod_256 + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + branch bn_submod_256 + +sp_calc_check_publickey: + call sp_calc_b + arg mem_sp_pubkey_remote_y,regA + arg mem_t7_256,contw + call bn_sqrmod + arg mem_sp_pubkey_remote_x,regA + arg mem_t2_256,contw + call bn_sqrmod + arg mem_t2_256,regA + arg mem_sp_pubkey_remote_x,regB + arg mem_t2_256,contw + call bn_mulmod + arg mem_a,regA + arg mem_sp_pubkey_remote_x,regB + arg mem_t3_256,contw + call bn_mulmod + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + call bn_addmod + arg 24,loopcnt + arg mem_t7_256,regA + arg mem_t0_256,regB + branch string_compare + +sp_calc_b: + arg mem_gy,regA + arg mem_t0_256,contw + call bn_sqrmod + arg mem_gx,regA + arg mem_t2_256,contw + call bn_sqrmod + arg mem_t2_256,regA + arg mem_gx,regB + arg mem_t2_256,contw + call bn_mulmod + arg mem_a,regA + arg mem_gx,regB + arg mem_t3_256,contw + call bn_mulmod + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + branch bn_submod + + +sp_calculate_commitment: + fetch 1,mem_sp_calc + bne SP_CALC_STANDBY,sp_calculate_commitment_wait_dhkey_calc + call sp_local_random_key_generator + arg mem_sp_prarm_stack,contw + setarg mem_sp_random_local_end + istore 2,contw + setarg mem_sp_pubkey_local_x_end + istore 2,contw + setarg mem_sp_pubkey_remote_x_end + istore 2,contw + branch sp_calculate_commitment0 +master_sp_calculate_commitment: + arg mem_sp_prarm_stack,contw + setarg mem_sp_random_remote_end + istore 2,contw + setarg mem_sp_pubkey_remote_x_end + istore 2,contw + setarg mem_sp_pubkey_local_x_end + istore 2,contw +sp_calculate_commitment0: + call function_f1 + fetch 1,mem_master_sp_state + beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment0 + jam SP_FLAG_COMMIT,mem_sp_flag + jam SP_STAT_COMMIT_SEND,mem_sp_state + rtn +master_sp_calculate_commitment0: + jam SP_STAT_COMMITMENT_COMPARE,mem_master_sp_state + call sp_master_generate_local_key + branch master_set_mem_master_sp_flag + +sp_local_random_key_generator: + arg mem_sp_random_local,contw + force 8,queue + branch random_generator + +sp_calculate_commitment_wait_dhkey_calc: + jam SP_FLAG_COMMIT,mem_sp_flag + rtn + +sp_confirm_check: + /* calculate Ea here */ + bpatchx patch3c_6,mem_patch3c + arg mem_addr_value,contw + fetch 6,mem_lap + istore 6,contw + fetch 6,mem_plap + istore 6,contw + fetch 3,mem_sp_iocap_remote + istore 3,contw + + call function_f3a + + arg mem_sp_calc_result_high,regA + arg mem_sp_check_result,regB + force 4,queue + call compare4 + nbranch sp_confirm_check_failed,true + + call sp_confirm_check_success + jam LMP_DHKey_Check,mem_lmi_opcode2 + branch tid_set_reply + +sp_confirm_check_success: + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_success_master + jam SP_STAT_CONFIRM_CALC,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + jam LMP_ACCEPTED,mem_lmo_opcode2 + rtn +sp_confirm_check_success_master: + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam SP_STATE_END,mem_master_sp_state + branch master_set_mem_master_sp_flag + //accept opcode? + +sp_confirm_check_failed: + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_failed_master + jam SP_STAT_NULL,mem_sp_state + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + //accept opcode? + jam AUTHENTICATION_FAILURE_ERROR,mem_lmo_reason2 + rtn +sp_confirm_check_failed_master: + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam SP_STAT_NULL,mem_master_sp_state + rtn + +sp_confirm_calc: + fetch 1,mem_sp_dh_ready + beq SP_FLAG_COMMIT, sp_confirm_calc_ready + jam SP_STAT_CONFIRM_CALC,mem_master_sp_state + branch master_set_mem_master_sp_flag +sp_confirm_calc_ready: + arg mem_addr_value,contw + fetch 6,mem_plap + istore 6,contw + fetch 6,mem_lap + istore 6,contw + fetch 3,mem_sp_iocap_local + istore 3,contw + + call function_f3b + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_CALC,sp_confirm_calc_master + jam SP_STAT_CONFIRM_SEND,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + rtn +sp_confirm_calc_master: + jam SP_STAT_CONFIRM_SEND,mem_master_sp_state + jam SP_FLAG_COMMIT,mem_master_sp_flag + rtn + +sp_master_key_prarm_push: + arg mem_sp_prarm_stack,contw + fetch 6,mem_plap + istore 6,contw + fetch 6,mem_lap + istore 6,contw + setarg mem_sp_random_local_end + istore 2,contw + setarg mem_sp_random_remote_end + istore 2,contw + branch sp_link_key_calc +sp_link_key_prarm_push: + jam SP_STAT_DONE,mem_sp_state + arg mem_sp_prarm_stack,contw + fetch 6,mem_lap + istore 6,contw + fetch 6,mem_plap + istore 6,contw + setarg mem_sp_random_remote_end + istore 2,contw + setarg mem_sp_random_local_end + istore 2,contw +sp_link_key_calc: + /*calculate Link key here */ + arg mem_addr_value,contw + fetch 6,mem_sp_prarm_stack + istore 6,contw + fetch 6,mem_sp_prarm_stack+6 + istore 6,contw + + call function_f2 + + /*handle linkkey */ + jam 1,mem_link_key_exists + arg mem_link_key,contw + arg mem_sp_calc_result_high,contr + call memcpy16 + branch generate_linkkey_continue + + +sp_pubkey_calc: + bpatchx patch3c_7,mem_patch3c + fetch 1,mem_sp_local_key_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_sp_calc + rtnne SP_CALC_STANDBY + arg mem_sp_private_key,contw + force 11,queue + call random_generator + random pdata + rshift pdata,pdata + istore 2,contw +/* we don't need fixed private key,generate random key instead */ + arg mem_k,contw + arg mem_sp_private_key,contr + call memcpy24 //mem_sp_private_key=>mem_k 24BYTES + + arg mem_ax,contw + arg mem_gx,contr + call memcpy48 //mem_gx=>mem_ax 48bytes + + arg mem_az,contw + call bn_zero + jam 1,mem_az //0=>mem_az 24bytes + + call eckp_calc_init + jam SP_CALC_PUBKEY,mem_sp_calc + rtn + +sp_pubkey_generated: + arg mem_sp_pubkey_local,contw + arg mem_bx,contr + call memcpy48 + jam SP_KEY_VALID,mem_sp_local_key_invalid + jam SP_CALC_STANDBY,mem_sp_calc + rtn + +sp_dhkey_calc: + bpatchx patch3d_0,mem_patch3d + fetch 1,mem_sp_dhkey_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_sp_calc + rtnne SP_CALC_STANDBY + + arg mem_k,contw + arg mem_sp_private_key,contr + call memcpy24 + + arg mem_ax,contw + arg mem_sp_pubkey_remote,contr + call memcpy48 + + arg mem_az,contw + call bn_zero + jam 1,mem_az + + call eckp_calc_init + jam SP_CALC_DHKEY,mem_sp_calc + rtn + +sp_dhkey_generated: + jam SP_FLAG_COMMIT,mem_sp_dh_ready + arg mem_sp_dhkey,contw + arg mem_bx,contr + call memcpy24 + jam SP_KEY_VALID,mem_sp_dhkey_invalid + jam SP_CALC_STANDBY,mem_sp_calc + rtn + +random_generator: + increase -1,queue + nrtn positive + random pdata + istore 2,contw + branch random_generator +compare4: + increase -1,queue + nbranch compare4_success,positive + ifetch 4,regA + copy pdata,temp + ifetch 4,regB + iflip temp,pdata + nbranch compare4_failed,zero + increase 4,regA + increase 4,regB + branch compare4 +compare4_failed: + disable true + rtn +compare4_success: + enable true + rtn + +/*************************************************/ +/** Message state machine routines ***************/ +/*************************************************/ +// simple pairing support + +simple_pairing_sequence: + bpatchx patch3d_1,mem_patch3d + fetch 1,mem_sp_flag + rtn blank + call lmo_fifo_check + nrtn blank + jam SP_FLAG_STANDBY,mem_sp_flag + fetch 1,mem_sp_state + beq SP_STAT_KEY_SEND,sp_send_LMP_ENCAPSULATED_HEADER + beq SP_STAT_COMMIT_SEND,sp_send_LMP_SIMPLE_PAIRING_COMFIRM + beq SP_STAT_RANDOM_SEND,sp_send_LMP_SIMPLE_PAIRING_NUMBER + beq SP_STAT_CONFIRM_SEND,sp_send_LMP_DHKEY_CHECK + beq SP_STAT_KEY_GENERATE,sp_generate_local_key + beq SP_STAT_COMMIT_CALC,sp_calculate_commitment + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check + beq SP_STAT_CONFIRM_CALC,sp_confirm_calc + beq SP_STAT_LINK_KEY_CALC,sp_link_key_prarm_push + //beq SP_STAT_FEATURE_EXT_SEND,send_LMP_FEATURES_REQ_EXT + rtn + +master_simple_paring_sequence: + bpatchx patch3d_2,mem_patch3d + fetch 1,mem_master_sp_flag + rtn blank + call lmo_fifo_check + nrtn blank + jam SP_FLAG_STANDBY,mem_master_sp_flag + fetch 1,mem_master_sp_state + beq SP_MASTER_STAT_START_SKIP,sp_master_send_io_cap_get + beq SP_MASTER_STAT_START_DONE,sp_master_send_io_cap_send + beq SP_STAT_KEY_SEND,sp_master_send_LMP_ENCAPSULATED_HEADER + beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment + beq SP_STAT_COMMITMENT_COMPARE,sp_master_commitment_compare + beq SP_STAT_RANDOM_SEND,sp_master_send_LMP_SIMPLE_PAIRING_NUMBER + beq SP_STAT_CONFIRM_CALC,sp_confirm_calc + beq SP_STAT_CONFIRM_SEND,master_sp_send_lmp_dhkey_check + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check + beq SP_STATE_END,master_sp_sm_end + rtn + +master_set_mem_master_sp_flag: + jam SP_FLAG_COMMIT,mem_master_sp_flag + rtn + +master_clear_mem_master_sp_flag: + jam SP_FLAG_STANDBY,mem_master_sp_flag + rtn +sp_calc_sequence: + bpatchx patch3d_3,mem_patch3d + fetch 1,mem_ssp_enable + rtn blank + fetch 1,mem_sp_calc + rtn blank + increase 0x80,pdata + store 1,mem_sp_calc + rtnbit1 7 + fetch 1,mem_ec_loopc + branch sp_calc_sequence_done,blank + branch eckp_calc + +sp_calc_sequence_done: + call ecunmapz + fetch 1,mem_sp_calc + beq SP_CALC_PUBKEY,sp_pubkey_generated + beq SP_CALC_DHKEY,sp_dhkey_generated + rtn + + +bn_testbit: + and pdata,7,queue + rshift3 pdata,pdata + iadd contr,contr + ifetch 1,contr + qisolate0 pdata + rtn + + +ec_copy: + call memcpy24 + call memcpy24 + branch memcpy24 + + +bn_eq_zero: + ifetch 8,contr + nrtn blank + ifetch 8,contr + nrtn blank + ifetch 8,contr + rtn + + + /* return zero if eq */ + +bn_eq_0: + ifetch 4,regA + iforce temp + ifetch 4,regB + isub temp,null + nrtn zero + increase 4,regA + increase 4,regB + loop bn_eq_0 + rtn + + /* return positive if A >= B */ +bn_bigeq: + force 6,loopcnt + increase 20,regA + increase 20,regB +bn_bigeq_0: + ifetch 4,regB + iforce temp + ifetch 4,regA + isub temp,pdata + nrtn positive + nrtn blank + increase -4,regA + increase -4,regB + loop bn_bigeq_0 + rtn + +bn_add: + force 6,loopcnt + force 0,regC +bn_add_0: + ifetch 4,regA + iforce temp + ifetch 4,regB + iadd temp,pdata + iadd regC,pdata + istore 4,contw + isolate1 32,pdata + setflag true,0,regC + increase 4,regA + increase 4,regB + loop bn_add_0 + rtn + +bn_sub: + force 6,loopcnt + force 0,regC +bn_sub_0: + ifetch 4,regB + iforce temp + ifetch 4,regA + isub temp,pdata + isub regC,pdata + istore 4,contw + isolate1 32,pdata + setflag true,0,regC + increase 4,regA + increase 4,regB + loop bn_sub_0 + rtn + +bn_rshift6: + force 6,loopcnt + increase 20,regA +bn_rshift: + force 0,regC +bn_rshift_0: + ifetch 4,regA + isolate1 0,pdata + setflag true,1,regC + rshift pdata,pdata + isolate1 0,regC + setflag true,31,pdata + istore 4,regA + increase -4,regA + rshift regC,regC + loop bn_rshift_0 + rtn + +bn_lshift: + force 6,loopcnt + force 0,regC +bn_lshift_0: + ifetch 4,regA + isolate1 31,pdata + setflag true,1,regC + lshift pdata,pdata + isolate1 0,regC + setflag true,0,pdata + istore 4,regA + increase 4,regA + rshift regC,regC + loop bn_lshift_0 + rtn + +bn_lshiftmod: + call bn_lshift +bn_lshiftmod_ismod: + isolate1 0,regC + branch bn_lshiftmod_0,true + arg mem_p,regB + copy regA,regC + increase -24,regA + call bn_bigeq + nrtn positive + copy regC,regA +bn_lshiftmod_0: + increase -24,regA + arg mem_p,regB + copy regA,contw + branch bn_sub + + +bn_addmod: + call bn_add + copy contw,regA + branch bn_lshiftmod_ismod + +bn_submod: + call bn_sub + isolate0 0,regC + rtn true + arg mem_p,regB + add contw,-24,regA + copy regA,contw + branch bn_add + + +bn_p192mod: + copy contw,timeup /* save result ptr */ + copy regA,alarm /* temp save regA */ + arg mem_tmp2,regB + copy regB,contw + add regA,24,contr + ifetch 8,contr + istore 8,contw + istore 8,contw + force 0,pdata + istore 8,contw + copy timeup,contw + call bn_addmod + arg mem_tmp2,regB + copy regB,contw + force 0,pdata + istore 8,contw + add alarm,32,contr + ifetch 8,contr + istore 8,contw + istore 8,contw + copy timeup,regA + copy regA,contw + call bn_addmod + arg mem_tmp2,regB + copy regB,contw + add alarm,40,contr + ifetch 8,contr + istore 8,contw + istore 8,contw + istore 8,contw + copy timeup,regA + copy regA,contw + branch bn_addmod + + +bn_load: + force 6,loopcnt +bn_load_0: + ifetch 4,contr + iforce regext + increase 1,regext_index + loop bn_load_0 + rtn + + + /* cost 1562 clks */ +bn_mulmod: + copy contw,timeup /* save result ptr */ + arg mem_tmp1,contw + call bn_zero + arg mem_tmp1,contw + copy regA,contr + force 0,regext_index + call bn_load + copy regB,contr + call bn_load + force 0,regB +bn_mulmod_1: + force 0,temp + force 6,regC +bn_mulmod_0: + ifetch 4,contw /* d[i+j] */ + iforce regA + copy regB,regext_index + deposit regext + copy regC,regext_index + imul32 regext,pdata + iadd regA,pdata /* uv = a[i]*b[j] + d[i+j] */ + iadd temp,pdata /* uv += u */ + istore 4,contw /* ->d[i+j] */ + rshift32 pdata,temp /* temp = u = uv >> 32 */ + increase 1,regC + compare 12,regC,0xff + nbranch bn_mulmod_0,true + deposit temp + istore 4,contw /* d[i + 12] = u */ + increase -24,contw + increase 1,regB + compare 6,regB,0xff + nbranch bn_mulmod_1,true + arg mem_tmp1,regA + copy timeup,contw + branch bn_p192mod + + +bn_sqrmod: + copy regA,regB + branch bn_mulmod + +bn_rshifteven: + copy regA,alarm +bn_rshifteven_1: + copy alarm,regA + ifetch 1,regA + isolate1 0,pdata + rtn true + call bn_rshift6 + ifetch 1,regB + isolate0 0,pdata + branch bn_rshifteven_0,true + arg mem_p,regA + copy regB,contw + call bn_add + ifetch 1,regB + iadd regC,pdata + istore 1,regB /* [6] */ + increase -24,regB +bn_rshifteven_0: + add regB,24,regA + force 7,loopcnt + call bn_rshift + branch bn_rshifteven_1 + + /* cost 141910 clks */ +bn_invmod: + copy contw,timeup /* save result ptr */ + arg mem_tmp0,contw /* x */ + call bn_zero + force 0,pdata + store 4,mem_tmp5 + store 4,mem_t2 + jam 1,mem_tmp0 + arg mem_tmp1,contw /* y */ + call bn_zero + arg mem_p,contr + arg mem_tmp2,contw /* a */ + call memcpy24 + copy regA,contr + arg mem_tmp3,contw /* b */ + call memcpy24 +bn_invmod_2: + arg mem_tmp3,contr + call bn_eq_zero + branch bn_invmod_0,blank + arg mem_tmp3,regA + arg mem_tmp0,regB + call bn_rshifteven + + arg mem_tmp2,regA + arg mem_tmp1,regB + call bn_rshifteven + arg mem_tmp3,regA + arg mem_tmp2,regB + call bn_bigeq + branch bn_invmod_1,positive + arg mem_tmp2,regA + arg mem_tmp3,regB + copy regA,contw + call bn_sub + arg mem_tmp0,regA + arg mem_tmp1,regB + copy regB,contw + call bn_add + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_2 +bn_invmod_1: + arg mem_tmp3,regA + arg mem_tmp2,regB + copy regA,contw + call bn_sub + arg mem_tmp1,regA + arg mem_tmp0,regB + copy regB,contw + call bn_add + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_2 +bn_invmod_0: + arg mem_tmp0,contw + call bn_zero + fetch 1,mem_tmp5 + store 1,mem_tmp0 + store 1,mem_tmp0a + arg mem_tmp0,regA + arg mem_tmp1,regB + copy regB,contw + call bn_addmod + arg mem_p,regA + arg mem_tmp1,regB + copy timeup,contw + branch bn_submod + + + + /* cost 64742 clks */ +ecdbl: + arg mem_cz,regA + arg mem_t2,contw + call bn_sqrmod + arg mem_t2,regA + arg mem_t3,contw + call bn_sqrmod + arg mem_a,regA + arg mem_t3,regB + arg mem_t3,contw + call bn_mulmod /* t3=a*z4 */ + arg mem_cx,regA + arg mem_t2,contw + call bn_sqrmod + arg mem_t2,contr + arg mem_t1,contw + call memcpy24 + arg mem_t1,regA + call bn_lshiftmod + arg mem_t2,regA + arg mem_t1,regB + arg mem_t2,contw + call bn_addmod + arg mem_t2,regA + arg mem_t3,regB + arg mem_t2,contw + call bn_addmod /* t2=3*x2 + z*z4 D */ + arg mem_cx,contr + arg mem_t1,contw + call memcpy24 + arg mem_cy,regA + arg mem_t3,contw + call bn_sqrmod + arg mem_t1,regA + call bn_lshiftmod + arg mem_t1,regA + call bn_lshiftmod + arg mem_t1,regA + arg mem_t3,regB + arg mem_t1,contw + call bn_mulmod /* t1=4x*y2 B */ + arg mem_t3,regA + arg mem_t0,contw + call bn_sqrmod + arg mem_t0,regA + call bn_lshiftmod + arg mem_t0,regA + call bn_lshiftmod + arg mem_t0,regA + call bn_lshiftmod /* t0=8*y4 C */ + arg mem_cy,contr + arg mem_t3,contw + call memcpy24 + arg mem_t3,regA + call bn_lshiftmod + arg mem_t3,regA + arg mem_cz,regB + arg mem_cz,contw + call bn_mulmod + arg mem_t2,regA + arg mem_t3,contw + call bn_sqrmod + arg mem_t3,regA + arg mem_t1,regB + arg mem_t3,contw + call bn_submod + arg mem_t3,regA + arg mem_t1,regB + arg mem_cx,contw + call bn_submod + arg mem_t1,regA + arg mem_cx,regB + arg mem_t3,contw + call bn_submod + arg mem_t3,regA + arg mem_t2,regB + arg mem_t3,contw + call bn_mulmod + arg mem_t3,regA + arg mem_t0,regB + arg mem_cy,contw + branch bn_submod + + + /* cost 104904 clks */ +ecadd: + arg mem_az,regA + arg mem_t7,contw + call bn_sqrmod + arg mem_cx,regA + arg mem_t7,regB + arg mem_t0,contw + call bn_mulmod /* n1=t0=xa*zb2 */ + arg mem_az,regA + arg mem_t7,regB + arg mem_t7,contw + call bn_mulmod + arg mem_cy,regA + arg mem_t7,regB + arg mem_t1,contw + call bn_mulmod /* n2=t1=ya*zb3 */ + arg mem_cz,regA + arg mem_t7,contw + call bn_sqrmod + arg mem_ax,regA + arg mem_t7,regB + arg mem_t2,contw + call bn_mulmod /* n3=t2=xb*za2 */ + arg mem_cz,regA + arg mem_t7,regB + arg mem_t7,contw + call bn_mulmod + arg mem_ay,regA + arg mem_t7,regB + arg mem_t3,contw + call bn_mulmod /* n4=t3=yb*za3 */ + arg mem_t0,regA + arg mem_t2,regB + arg mem_t7,contw + call bn_submod /* n5=t7=n1-n3=t0-t2 */ + arg mem_t0,regA + arg mem_t2,regB + arg mem_t0,contw + call bn_addmod /* n7=t0=n1+n3=t0+t2 */ + arg mem_t1,regA + arg mem_t3,regB + arg mem_t2,contw + call bn_submod /* n6=t2=n2-n4=t1-t3 */ + arg mem_t1,regA + arg mem_t3,regB + arg mem_t1,contw + call bn_addmod /* n8=t1=n2+n4=t1+t3 */ + arg mem_t1,regA + arg mem_t7,regB + arg mem_t1,contw + call bn_mulmod /* t1=n8*n5 */ + arg mem_cz,regA + arg mem_az,regB + arg mem_t3,contw + call bn_mulmod + arg mem_t3,regA + arg mem_t7,regB + arg mem_cz,contw + call bn_mulmod /* z=za*zb*n5 */ + arg mem_t7,regA + arg mem_t7,contw + call bn_sqrmod /* t7=n5^2 */ + arg mem_t7,regA + arg mem_t0,regB + arg mem_t3,contw + call bn_mulmod /* t3=n5^2*n7 */ + arg mem_t7,regA + arg mem_t1,regB + arg mem_t1,contw + call bn_mulmod /* t1=n8*n5^3 */ + arg mem_t2,regA + arg mem_cx,contw + call bn_sqrmod + arg mem_cx,regA + arg mem_t3,regB + arg mem_cx,contw + call bn_submod /* x=n6^2-n5^2*n7 */ + arg mem_cx,contr + arg mem_t7,contw + call memcpy24 + arg mem_t7,regA + call bn_lshiftmod /* t7=2*x */ + arg mem_t3,regA + arg mem_t7,regB + arg mem_t3,contw + call bn_submod /* t3=n9 */ + arg mem_t3,regA + arg mem_t2,regB + arg mem_t2,contw + call bn_mulmod /* t2=n9*n6 */ + arg mem_t2,regA + arg mem_t1,regB + arg mem_cy,contw + call bn_submod + arg mem_cy,regA + arg mem_p,regB + arg mem_cy,contw + force 0,regC + fetch 1,mem_cy + isolate1 0,pdata + call bn_add,true + copy regC,alarm + arg mem_cy,regA + call bn_rshift6 + fetch 1,mem_cy5 + isolate1 0,alarm + setflag true,7,pdata + store 1,mem_cy5 + rtn + + /* cost 22276983 clks */ + +eckp_0: + fetch 1,mem_ec_loopc + increase -1,pdata + nrtn positive + store 1,mem_ec_loopc + fetch 1,mem_ec_infinite + call ecdbl,blank + fetch 1,mem_ec_loopc + arg mem_k,contr + call bn_testbit + branch eckp_0,true + fetch 1,mem_ec_infinite + nbranch eckp_1,blank + call ecadd + branch eckp_0 +eckp_1: + jam 0,mem_ec_infinite + arg mem_ax,contr + arg mem_cx,contw + call ec_copy + branch eckp_0 + + /* cost 162522 clks */ +ecunmapz: + arg mem_cz,regA + arg mem_t3,contw + call bn_invmod /* t3 = 1/z */ + arg mem_t3,regA + arg mem_t1,contw + call bn_sqrmod /* t1 = 1/z2 */ + arg mem_cx,regA + arg mem_t1,regB + arg mem_bx,contw + call bn_mulmod + arg mem_t3,regA + arg mem_t1,regB + arg mem_t2,contw + call bn_mulmod /* t2 = 1/z3 */ + arg mem_cy,regA + arg mem_t2,regB + arg mem_by,contw + branch bn_mulmod + + + +sha_endian_swap2: + ifetch 4,contr + force 4,regA + increase 3,contw +sha_endian_loop: + istore 1,contw + rshift8 pdata,pdata + increase -2,contw + increase -1,regA + nbranch sha_endian_loop,zero + increase 5,contw + loop sha_endian_swap2 + rtn + + +sha_getw: + lshift2 queue,pdata + iadd timeup,contr + ifetch 4,contr + rtn + +sha_r: + force 16,alarm + arg memdat,timeup +sha_r_loop: + add alarm,-7,queue + call sha_getw + iforce temp /* W[t - 7] */ + add alarm,-16,queue + call sha_getw + iadd temp,temp /* W[t-7] + W[t-16] */ + add alarm,-2,queue + call sha_getw + shasx pdata,1,pdata + iadd temp,temp /* S1(W[t - 2]) + W[t-7] + W[t-16] */ + add alarm,-15,queue + call sha_getw + shasx pdata,0,pdata + iadd temp,temp /* S0(W[t - 15]) + S1(W[t - 2]) + W[t-7] + W[t-16] */ + lshift2 alarm,pdata + iadd timeup,contw + istoret 4,contw + increase 1,alarm + compare 64,alarm,0xff + nbranch sha_r_loop,true + rtn + + +sha_init: + arg memh0,contr + force 7,regext_index +sha_init_0: + ifetch 4,contr + iforce regext + increase -1,regext_index + branch sha_init_0,positive + rtn + +sha: + bpatchx patch3d_4,mem_patch3d + call sha_r /* preprocessing data into R() */ + arg memahbak,contw + force 0,regext_index +sha_0: + deposit regext + istore 4,contw + increase 1,regext_index + compare 8,regext_index,0xff + nbranch sha_0,true + call enable_authrom + arg memk,timeup + arg memdat,alarm + force 64,loopcnt +sha_loop: + ifetcht 4,alarm + ifetch 4,timeup + increase 4,timeup + increase 4,alarm + iadd temp,pdata /* x+K */ + force 7,regext_index + iadd regext,temp /* x+K+h */ + force 4,regext_index + shasx regext,3,pdata + iadd temp,temp /* temp = s3(e)+x+K+h */ + force 5,regext_index + deposit regext + force 6,regext_index + ixor regext,pdata + force 4,regext_index + iand regext,pdata /* (e & (f ^ g)) */ + force 6,regext_index + ixor regext,pdata /* F1(e, f, g) = g ^ (e & (f ^ g)) */ + iadd temp,temp /* temp1 = h + S3(e) + F1(e,f,g) + K + x */ + force 7,regext_index + copy temp,regext /* save to H */ + force 3,regext_index + deposit regext + iadd temp,regext /* save to D */ + force 0,regext_index + deposit regext + force 1,regext_index + iand regext,temp /* a & b */ + ior regext,pdata /* a | b */ + force 2,regext_index + iand regext,pdata /* (c & (a | b)) */ + ior temp,temp /* F0:(a & b) | (c & (a | b)) */ + force 0,regext_index + shasx regext,2,pdata + iadd temp,pdata /* temp2 = S2(a) + F0(a,b,c) */ + force 7,regext_index + iadd regext,regext /* h = temp1 + temp2 */ + regexrot /* rotate move h,a-g => a-h */ + loop sha_loop + arg memahbak,contr + force 0,regext_index +sha_1: + ifetch 4,contr + iadd regext,regext + increase 1,regext_index + compare 8,regext_index,0xff + nbranch sha_1,true + branch disable_authrom + + +sha_result: + arg memresult,contw + force 7,regext_index +sha_regext_save: + deposit regext + istore 4,contw + increase -1,regext_index + branch sha_regext_save,positive + rtn + +pad_xor: +// arg memx_end,contr + arg memdat,contw + increase -4,contr + sub loopcnt,16,regA +pad_xor_0: + ifetch 4,contr + ixor temp,pdata + istore 4,contw + increase -8,contr + loop pad_xor_0 + copy regA,loopcnt + deposit temp +pad_xor_1: + istore 4,contw + loop pad_xor_1 + rtn + +g_noninit_number_confirm: + call g_noninit0 + call sha_result + branch g_common0 + +g_noninit: + call g_noninit0 + branch g_common0 + +g_noninit0: + arg mem_sp_pubkey_remote_x_end,contr + arg memdat,contw + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_pubkey_local_x_end,contr + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_random_remote_end,contr + call memcpy_dword_swap4 + call sha_init + call sha + arg mem_sp_random_local_end,contr + arg memdat,contw + branch g_common + +g_init: + arg mem_sp_pubkey_local_x_end,contr + arg memdat,contw + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_pubkey_remote_x_end,contr + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_random_local_end,contr + call memcpy_dword_swap4 + call sha_init + call sha + arg mem_sp_random_remote_end,contr + arg memdat,contw + call g_common + branch g_common0 + +g_common: + call memcpy_dword_swap4 + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + force 5,loopcnt + call memset0 + setarg 640 + istore 4,contw + branch sha +g_common0: + fetch 4,memresult +// store 4,mem_gkey + arg 1000,rega + idiv rega + call wait_div_end + remainder pdata + store 4,mem_gkey + quotient pdata + arg 1000,rega + idiv rega + call wait_div_end + remainder pdata + arg 1000,rega + imul32 rega,pdata + fetcht 4,mem_gkey + iadd temp,pdata + store 4,mem_gkey + rtn + +function_f1_no_key: + jam 0,mem_passkey_1bit + branch function_f1_common + +function_f1: + fetch 1,mem_ssp_mode_flag + bne SSP_MODE_PASSKEY_ENTRY_FLAG,function_f1_no_key +function_f1_common: + bpatchx patch3d_5,mem_patch3d + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + fetch 2,mem_sp_prarm_stack + copy pdata,contr + force 4,loopcnt + call pad_xor + call sha_init + call sha + fetch 2,mem_sp_prarm_stack+2 + copy pdata,contr + arg memdat,contw + force 6,loopcnt + call memcpy_dword_swap + fetch 2,mem_sp_prarm_stack+4 + copy pdata,contr + force 6,loopcnt + call memcpy_dword_swap + setarg 0x800000 + istore 3,contw + + fetch 1,mem_passkey_1bit + + istore 1,contw + force 0,pdata + istore 8,contw + setarg 0x0388 + istore 4,contw + call sha + call sha_result + arg memresult,contr + arg memahsave,contw + call memcpy32 + + setarg 0x5c5c5c + lshift8 pdata,temp + or_into 0x5c,temp + fetch 2,mem_sp_prarm_stack + copy pdata,contr + force 4,loopcnt + call pad_xor + call sha_init + call sha + arg memahsave_end,contr + arg memdat,contw + force 8,loopcnt + call memcpy_dword_swap + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + call bn_zero + setarg 0x0300 + istore 4,contw + call sha + branch sha_result + + +function_f2: + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + fetch 2,mem_sp_prarm_stack+12 + copy pdata,contr + arg memdat,contw + call memcpy_dword_swap4 + fetch 2,mem_sp_prarm_stack+14 + copy pdata,contr + call memcpy_dword_swap4 + + setarg 0x62746c + lshift8 pdata,pdata + or_into 0x6b,pdata + istore 4,contw + arg mem_addr_value_end,contr + force 3,loopcnt + call memcpy_dword_swap + + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + force 0,pdata + istore 8,contw + setarg 0x0380 + istore 4,contw + call sha + + call sha_result + arg memresult,contr + arg memahsave,contw + call memcpy32 + + setarg 0x5c5c5c + lshift8 pdata,temp + or_into 0x5c,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + arg memahsave_end,contr + arg memdat,contw + force 8,loopcnt + call memcpy_dword_swap + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + call bn_zero + setarg 0x0300 + istore 4,contw + call sha + branch sha_result + + +function_f3a: + fetch 1,mem_ssp_mode_flag + bne SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3a_no_pin +function_f3a_common: + bpatchx patch3d_6,mem_patch3d + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + arg mem_sp_random_remote_end,contr + arg memdat,contw + call memcpy_dword_swap4 + arg mem_sp_random_local_end,contr + call memcpy_dword_swap4 + branch function_f3_common + +function_f3a_no_pin: + setarg 0 + store 4,mem_pin + branch function_f3a_common + +function_f3b_no_pin: + setarg 0 + store 4,mem_pin + branch function_f3b_common + + +function_f3b: + fetch 1,mem_ssp_mode_flag + bne SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3b_no_pin +function_f3b_common: + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + + arg mem_sp_random_local_end,contr + arg memdat,contw + call memcpy_dword_swap4 + arg mem_sp_random_remote_end,contr + call memcpy_dword_swap4 +function_f3_common: + setarg 0x0 + istore 8,contw + istore 4,contw + fetch 4,mem_pin + istore 4,contw + + copy contw,temp + jam 0x80,mem_addr_padding + copy temp,contw + arg mem_addr_iocap_end,contr + call memcpy_dword_swap4 + + call sha + + arg memdat,contw + force 7,loopcnt + call memset0 + istore 4,contw + setarg 0x03F8 + istore 4,contw + call sha + call sha_result + + arg memresult,contr + arg memahsave,contw + call memcpy32 + + setarg 0x5c5c5c + lshift8 pdata,temp + or_into 0x5c,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + arg memahsave_end,contr + arg memdat,contw + force 8,loopcnt + call memcpy_dword_swap + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + call bn_zero + setarg 0x0300 + istore 4,contw + call sha + branch sha_result + +/* +eckp: + jam 192,mem_ec_loopc + jam 1,mem_ec_infinite +*/ +eckp_calc_init: + jam 192,mem_ec_loopc +eckp_calc_init_1: + fetch 1,mem_ec_loopc + rtn blank + increase -1,pdata + store 1,mem_ec_loopc + arg mem_k,contr + call bn_testbit + branch eckp_calc_init_1,true + arg mem_ax,contr + arg mem_cx,contw + branch ec_copy + +eckp_calc: + call ecdbl + fetch 1,mem_ec_loopc + increase -1,pdata + store 1,mem_ec_loopc + arg mem_k,contr + call bn_testbit + rtn true + branch ecadd + +memcpy_dword_swap4: + force 4,loopcnt +memcpy_dword_swap: + increase -4,contr +memcpy_dword_swap_loop: + ifetch 4,contr + istore 4,contw + increase -8,contr + loop memcpy_dword_swap_loop + rtn + + + + +sp_initialize_256: + bpatchx patch3d_7,mem_patch3d + fetch 1,mem_le_secure_connect_enable + branch le_secure_connection_disable,blank + call le_secure_connection_enable + call sp_clear_flags +// jam SP_KEY_INVALID_256,mem_le_sc_local_key_invalid + branch sp_pubkey_calc_256 + + + + +sp_pubkey_calc_256: + fetch 1,mem_le_sc_local_key_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_le_sc_calc + rtnne SP_CALC_STANDBY + + arg mem_le_private_key_256,contw + force 15,queue + call random_generator + random pdata + rshift pdata,pdata + istore 2,contw + + arg mem_k_256,contw + arg mem_le_private_key_256,contr + call memcpy32 //mem_sp_private_key=>mem_k + + arg mem_ax_256,contw + arg mem_gx_256,contr + call memcpy64 //mem_gx=>mem_ax + + arg mem_az_256,contw + call clear_mem_256 + jam 1,mem_az_256 //0=>mem_az + + call eckp_calc_init_256 + jam SP_CALC_PUBKEY_256,mem_le_sc_calc + rtn + +sp_pubkey_generated_256: + arg mem_le_pubkey_local_x_256,contw + arg mem_bx_256,contr + call memcpy64 + jam SP_KEY_VALID_256,mem_le_sc_local_key_invalid + jam SP_CALC_STANDBY,mem_le_sc_calc + rtn + + + +sp_dhkey_calc_256: + fetch 1,mem_sp_dhkey_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_le_sc_calc + rtnne SP_CALC_STANDBY + + arg mem_k_256,contw + arg mem_le_private_key_256,contr + call memcpy32 + + arg mem_ax_256,contw + arg mem_le_pubkey_remote_x_256,contr + call memcpy64 + + arg mem_az_256,contw + call clear_mem_256 + jam 1,mem_az_256 //0=>mem_az + + call eckp_calc_init_256 + jam SP_CALC_DHKEY_256,mem_le_sc_calc + rtn + + +sp_dhkey_generated_256: +// jam SP_FLAG_COMMIT,mem_sp_dh_ready + arg mem_le_dhkey_256,contw + arg mem_bx_256,contr + call memcpy32 + jam SP_KEY_VALID_256,mem_sp_dhkey_invalid + jam SP_CALC_STANDBY,mem_le_sc_calc + rtn + + + +sp_calc_sequence_256: + fetch 1,mem_le_secure_connect_enable + rtn blank + fetch 1,mem_le_sc_calc + rtn blank + increase 0x80,pdata + store 1,mem_le_sc_calc + rtnbit1 7 + fetch 2,mem_ec_loopc + branch sp_calc_sequence_done_256,blank + branch eckp_calc_256 + +sp_calc_sequence_done_256: + bpatchx patch3e_0,mem_patch3e + call ecunmapz_256 + fetch 1,mem_le_sc_calc + beq SP_CALC_PUBKEY_256,sp_pubkey_generated_256 + beq SP_CALC_DHKEY_256,sp_dhkey_generated_256 + rtn + + +eckp_calc_256: + call ecdbl_256 + fetch 2,mem_ec_loopc + increase -1,pdata + store 2,mem_ec_loopc + arg mem_k_256,contr + call bn_testbit + rtn true + branch ecadd_256 + +eckp_calc_init_256: + bpatchx patch3e_1,mem_patch3e + setarg 256,pdata + store 2,mem_ec_loopc +eckp_calc_init_256_1: + fetch 2,mem_ec_loopc + rtn blank + increase -1,pdata + store 2,mem_ec_loopc + arg mem_k_256,contr + call bn_testbit + branch eckp_calc_init_256_1,true + arg mem_ax_256,contr + arg mem_cx_256,contw + branch memcpy96 + + +ecunmapz_256: + arg mem_cz_256,regA + arg mem_t3_256,contw + call bn_invmod_256 /* t3 = 1/z */ + arg mem_t3_256,regA + arg mem_t1_256,contw + call bn_sqrmod_256 /* t1 = 1/z2 */ + arg mem_cx_256,regA + arg mem_t1_256,regB + arg mem_bx_256,contw + call bn_mulmod_256 + arg mem_t3_256,regA + arg mem_t1_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 /* t2 = 1/z3 */ + arg mem_cy_256,regA + arg mem_t2_256,regB + arg mem_by_256,contw + branch bn_mulmod_256 + +ecdbl_256: + arg mem_cz_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 + arg mem_t2_256,regA + arg mem_t3_256,contw + call bn_sqrmod_256 +//call ice_break + arg mem_a_256,regA + arg mem_t3_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 /* t3=a*z4 */ + arg mem_cx_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 +//call ice_break + arg mem_t2_256,contr + arg mem_t1_256,contw + call memcpy32 + arg mem_t1_256,regA + call bn_lshiftmod_256 + arg mem_t2_256,regA + arg mem_t1_256,regB + arg mem_t2_256,contw + call bn_addmod_256 +//call ice_break + arg mem_t2_256,regA + arg mem_t3_256,regB + arg mem_t2_256,contw + call bn_addmod_256 /* t2=3*x2 + z*z4 D */ +//call ice_break + arg mem_cx_256,contr + arg mem_t1_256,contw + call memcpy32 + arg mem_cy_256,regA + arg mem_t3_256,contw + call bn_sqrmod_256 + arg mem_t1_256,regA + call bn_lshiftmod_256 + arg mem_t1_256,regA + call bn_lshiftmod_256 + arg mem_t1_256,regA + arg mem_t3_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 //S = 4X1Y1^2/* t1=4x*y2 B */ + arg mem_t3_256,regA + arg mem_t0_256,contw + call bn_sqrmod_256 + arg mem_t0_256,regA + call bn_lshiftmod_256 + arg mem_t0_256,regA + call bn_lshiftmod_256 + arg mem_t0_256,regA + call bn_lshiftmod_256 //T = 8Y1^4 /* t0=8*y4 C */ + arg mem_cy_256,contr + arg mem_t3_256,contw + call memcpy32 + arg mem_t3_256,regA + call bn_lshiftmod_256 + arg mem_t3_256,regA + arg mem_cz_256,regB + arg mem_cz_256,contw + call bn_mulmod_256 //z = 2Y1Z1 + + + arg mem_t2_256,regA + arg mem_t3_256,contw + call bn_sqrmod_256 // M ^2 +//call ice_break + arg mem_t3_256,regA + arg mem_t1_256,regB + arg mem_t3_256,contw + call bn_submod_256 // t2^2 - 4*cx *cy^2 + arg mem_t3_256,regA + arg mem_t1_256,regB + arg mem_cx_256,contw + call bn_submod_256 //X2 + arg mem_t1_256,regA + arg mem_cx_256,regB + arg mem_t3_256,contw + call bn_submod_256 //S-X2 + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 //M(S-X2) + arg mem_t3_256,regA + arg mem_t0_256,regB + arg mem_cy_256,contw + branch bn_submod_256 //M(S-X2)-T Y2 + +ecadd_256: + + arg mem_az_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 + arg mem_cx_256,regA + arg mem_t7_256,regB + arg mem_t0_256,contw + call bn_mulmod_256 /* n1=t0=xa*zb2 U1 = X1Z0^2*/ + + + arg mem_az_256,regA + arg mem_t7_256,regB + arg mem_t7_256,contw + call bn_mulmod_256 + arg mem_cy_256,regA + arg mem_t7_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 /* n2=t1=ya*zb3 S1 = Y1Z0^3*/ + + + arg mem_cz_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 + arg mem_ax_256,regA + arg mem_t7_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 /* n3=t2=xb*za2 U0 = X0Z1^2*/ + + arg mem_cz_256,regA + arg mem_t7_256,regB + arg mem_t7_256,contw + call bn_mulmod_256 + arg mem_ay_256,regA + arg mem_t7_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 /* n4=t3=yb*za3 S0 = Y0Z1^3*/ + + +// arg mem_t0_256,regA +// arg mem_t2_256,regB + arg mem_t0_256,regb + arg mem_t2_256,rega + arg mem_t7_256,contw + call bn_submod_256 /* n5=t7=n1-n3=t0-t2 W=U1-U0*/ + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + call bn_addmod_256 /* n7=t0=n1+n3=t0+t2 T=U1+U0 */ +// arg mem_t1_256,regA +// arg mem_t3_256,regB + arg mem_t1_256,regb + arg mem_t3_256,rega + arg mem_t2_256,contw + call bn_submod_256 /* n6=t2=n2-n4=t1-t3 S1-S0 */ + arg mem_t1_256,regA + arg mem_t3_256,regB + arg mem_t1_256,contw + call bn_addmod_256 /* n8=t1=n2+n4=t1+t3 M=S1+S0*/ + arg mem_t1_256,regA + arg mem_t7_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 /* t1=n8*n5 MW */ + arg mem_cz_256,regA + arg mem_az_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 //Z0Z1 + arg mem_t3_256,regA + arg mem_t7_256,regB + arg mem_cz_256,contw + call bn_mulmod_256 /* z=za*zb*n5 Z0Z1W */ + + arg mem_t7_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 /* t7=n5^2 */ + arg mem_t7_256,regA + arg mem_t0_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 /* t3=n5^2*n7 */ + arg mem_t7_256,regA + arg mem_t1_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 /* t1=n8*n5^3 */ + arg mem_t2_256,regA + arg mem_cx_256,contw + call bn_sqrmod_256 + arg mem_cx_256,regA + arg mem_t3_256,regB + arg mem_cx_256,contw + call bn_submod_256 /* x=n6^2-n5^2*n7 */ + arg mem_cx_256,contr + arg mem_t7_256,contw + call memcpy32 + arg mem_t7_256,regA + call bn_lshiftmod_256 /* t7=2*x */ + arg mem_t3_256,regA + arg mem_t7_256,regB + arg mem_t3_256,contw + call bn_submod_256 /* t3=n9 */ + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 /* t2=n9*n6 */ + arg mem_t2_256,regA + arg mem_t1_256,regB + arg mem_cy_256,contw + call bn_submod_256 + arg mem_cy_256,regA + arg mem_p_256,regB + arg mem_cy_256,contw + force 0,regC + fetch 1,mem_cy_256 + isolate1 0,pdata + call bn_add_256,true + copy regC,alarm + arg mem_cy_256,regA + call bn_rshift_256 + fetch 1,mem_cy5_256 + isolate1 0,alarm + setflag true,7,pdata + store 1,mem_cy5_256 + rtn + +bn_invmod_256: + copy contw,timeup + arg mem_tmp0_256,contw + call clear_mem_256 + force 0,pdata +// store 4,mem_tmp52 + store 4,mem_t2_256 + jam 1,mem_tmp0_256 //y1 + arg mem_tmp1_256,contw //y2 + call clear_mem_512 + arg mem_p_256,contr + arg mem_tmp2_256,contw //j + call memcpy32 + copy regA,contr + arg mem_tmp3_256,contw //i + call memcpy32 + +// arg mem_tmp22,regA +// arg mem_tmp32,regB +// call p_bn_bigeq_256 +// branch assert,positive +bn_invmod_256_2: + arg mem_tmp3_256,contr + call bn_eq_zero_256 + branch bn_invmod_256_0,blank +//call ice_break +//fetch 1,0x4ffe +//increase 1,pdata +//store 1,0x4ffe + arg mem_tmp3_256,regA + arg mem_tmp0_256,regB + call bn_rshifteven_256 + arg mem_tmp2_256,regA + arg mem_tmp1_256,regB + call bn_rshifteven_256 + + arg mem_tmp3_256,regA + arg mem_tmp2_256,regB + call bn_bigeq_256 + branch bn_invmod_256_1,positive + arg mem_tmp2_256,regA + arg mem_tmp3_256,regB + copy regA,contw + call bn_sub_256 + arg mem_tmp0_256,regA + arg mem_tmp1_256,regB + copy regB,contw + call bn_add_256 + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_256_2 +bn_invmod_256_1: + arg mem_tmp3_256,regA + arg mem_tmp2_256,regB + copy regA,contw + call bn_sub_256 + arg mem_tmp1_256,regA + arg mem_tmp0_256,regB + copy regB,contw + call bn_add_256 + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_256_2 +bn_invmod_256_0: +//call ice_break + arg mem_tmp1_256,regA + copy timeup,contw + call bn_p256mod +//call ice_break + arg mem_p_256,regA + copy timeup,regB + copy timeup,contw + branch bn_submod_256 + + +bn_mulmod_256: + copy contw,timeup /* save result ptr */ + + force 0,regext_index + + arg mem_tmp1_256,contw + call clear_mem_512 + arg mem_regext,contw + call clear_mem_512 +// jam 0,mem_regext_index + +// arg mem_tmp12,contw + copy regA,contr +// force 0,regext_index + jam 0,mem_regext + setarg 0 + call bn_load_mem + copy regB,contr + call bn_load_256 +// force 0,regB +// jam 0,mem_regb + force 0,queue + arg mem_tmp1_256,contw +bn_mulmod_256_1: +// copy regb,pdata +// store 1, + arg mem_regext,temp + copy queue,regb + lshift2 regb,pdata +// lshift4 pdata,pdata + iadd temp,regb + force 0,temp + force 0,regC +bn_mulmod_256_0: +// copy contw,pdata +// store 2,mem_contw +//call ice_break +// copy pdata,contw + ifetch 4,contw /* d[i+j] */ + iforce regA +// copy regB,regext_index +// deposit regext + ifetch 4,regb + copy regC,regext_index + imul32 regext,pdata + iadd regA,pdata /* uv = a[i]*b[j] + d[i+j] */ + iadd temp,pdata /* uv += u */ + istore 4,contw /* ->d[i+j] */ + rshift32 pdata,temp /* temp = u = uv >> 32 */ + increase 1,regC + compare 8,regC,0xff + nbranch bn_mulmod_256_0,true +//call ice_break + deposit temp + istore 4,contw /* d[i + 12] = u */ + increase -32,contw +// fetch 1,mem_regb +// copy pdata,regb + increase 1,queue + compare 8,queue,0xff + nbranch bn_mulmod_256_1,true + arg mem_tmp1_256,regA + copy timeup,contw + branch bn_p256mod + +bn_p256mod: + bpatchx patch3e_2,mem_patch3e + copy contw,timeup /* save result ptr */ + copy regA,alarm /* temp save regA */ + arg mem_tmp2_256,regB + copy regB,contw + call memset0_4 + istore 8,contw + add regA,44,contr + call memcpy8 + call memcpy12 + copy regb,rega + call bn_lshiftmod_256 //2S1 + arg mem_tmp2_256,regB + copy alarm,rega + copy timeup,contw + call bn_addmod_256 //T+2S1 +//call ice_break + arg mem_tmp2_256,regB + copy regB,contw + call memset0_4 + istore 8,contw + add alarm,48,contr + call memcpy16 + call memset0_4 + copy regb,rega + call bn_lshiftmod_256 //2S2 +//call ice_break +// arg 0,regB + + arg mem_tmp2_256,regB + copy timeup,rega + copy regA,contw + call bn_addmod_256 //+2S2 +//call ice_break +// arg 0,regB + + arg mem_tmp2_256,regB + copy regB,contw + add alarm,32,contr + call memcpy12 + call memset0_4 + istore 8,contw + add alarm,56,contr + call memcpy8 + copy timeup,regA + copy regA,contw + call bn_addmod_256 //+S3 +//call ice_break +// arg 0,regB + + arg mem_tmp2_256,regB + copy regB,contw + add alarm,36,contr + call memcpy12 + add alarm,52,contr + call memcpy12 + add alarm,52,contr + call memcpy4 + add alarm,32,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_addmod_256 //+S4 +//call ice_break +// arg 1,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,44,contr + call memcpy12 + call memset0_4 + istore 8,contw + add alarm,32,contr + call memcpy4 + add alarm,40,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_submod_256 //-D1 +//call ice_break +// arg 2,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,48,contr + call memcpy8 + call memcpy8 + force 0,pdata + istore 8,contw + add alarm,36,contr + call memcpy4 + add alarm,44,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_submod_256 //-D2 +//call ice_break +// arg 3,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,52,contr + call memcpy12 + add alarm,32,contr + call memcpy12 + call memset0_4 + add alarm,48,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_submod_256 //-D3 +//call ice_break +// arg 4,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,56,contr + call memcpy8 + call memset0_4 + add alarm,36,contr + call memcpy12 + call memset0_4 + add alarm,52,contr + call memcpy4 + copy timeup,regA + copy regA,contw + branch bn_submod_256 //-D4 + + +bn_load_mem: + force 32,loopcnt + arg mem_regext,contw + iadd contw,contw + branch memcpy + +bn_load_256: + force 8,loopcnt + branch bn_load_0 + +bn_sqrmod_256: + copy regA,regB + branch bn_mulmod_256 + +bn_add_256: + force 8,loopcnt + branch bn_add+1 + +bn_addmod_256: + call bn_add_256 + copy contw,regA + branch bn_lshiftmod_ismod_256 + +bn_lshiftmod_256: + call bn_lshift_256 +bn_lshiftmod_ismod_256: + isolate1 0,regC + branch bn_lshiftmod_p_256,true + arg mem_p_256,regB + copy regA,regC + increase -32,regA + call bn_bigeq_256 + nrtn positive + copy regC,regA + branch sub_p2_256 + +bn_lshiftmod_p_256: + call sub_p2_256 +// nrtn true + copy regA,regC + increase -32,regA + arg mem_p_256,regB + call bn_bigeq_256 + nrtn positive + copy regC,regA + branch sub_p2_256 + + +sub_p2_256: + increase -32,regA + arg mem_p_256,regB + copy regA,contw + branch bn_sub_256 + + + + +bn_submod_256: + call bn_sub_256 +// isolate1 0,regC + branch bn_submod_256_np,true +// copy regA,regC +// increase -32,regA + add contw,-32,regA + arg mem_p_256,regB + call bn_bigeq_256 + nrtn positive + arg mem_p_256,regB + add contw,-32,regA +// copy regC,regA + copy rega,contw + branch bn_sub_256 +bn_submod_256_np: + add contw,-32,regA + arg mem_p_256,regB + copy regA,contw + call bn_add_256 +// isolate1 0,regC + rtn true + add contw,-32,regA + arg mem_p_256,regB + copy regA,contw + branch bn_add_256 + + + +bn_sub_256: + force 8,loopcnt + branch bn_sub+1 + +bn_rshift_256: + force 8,loopcnt + increase 28,regA + branch bn_rshift + +bn_lshift_256: + force 8,loopcnt + force 0,regC + branch bn_lshift_0 + +bn_bigeq_256: + force 8,loopcnt + increase 28,regA + increase 28,regB + branch bn_bigeq_0 + + +bn_eq_zero_256: + ifetch 8,contr + nrtn blank + branch bn_eq_zero + + + + +bn_rshifteven_256: + copy regA,alarm +bn_rshifteven_256_1: + copy alarm,regA + ifetch 1,regA + isolate1 0,pdata + rtn true + call bn_rshift_256 + ifetch 1,regB + isolate0 0,pdata + branch bn_rshifteven_256_0,true + arg mem_p_256,regA + copy regB,contw + call bn_add_256 + ifetch 1,regB + iadd regC,pdata + istore 1,regB + increase -32,regB +bn_rshifteven_256_0: + add regB,32,regA + force 9,loopcnt + call bn_rshift + branch bn_rshifteven_256_1 + + + +ui_init: + call lpm_disable_exen_output + rtn wake + call ui_button_init + call ui_timer_init + branch ui_led_init_global + +ui_dispatch: + call ui_led_dispatch + + branch ui_timer_check + +ui_button_init: + fetch 1,mem_ui_button_gpio + rtneq UI_BUTTON_GPIO_DISABLE + iforce temp + call gpio_config_output + fetcht 1,mem_ui_button_gpio + call gpio_out_inactive + nop 100 + fetcht 1,mem_ui_button_gpio + call gpio_config_input + branch ui_button_polling + + + +ui_button_polling: + bpatchx patch3e_3,mem_patch3e + fetch 1,mem_ui_button_gpio + rtneq UI_BUTTON_GPIO_DISABLE + copy pdata,temp + call gpio_get_bit + nbranch ui_button_up,true + //fall through +ui_button_down: + call ui_button_check_long_press + fetch 2,mem_ui_state_map + set1 UI_STATE_BTN_DOWN + store 2,mem_ui_state_map + fetch 1,mem_ui_button_last_state + rtneq UI_BUTTON_STATE_DOWN + jam UI_BUTTON_STATE_DOWN,mem_ui_button_last_state + //Down Edge + fetch 1,mem_ui_button_timeout + store 1,mem_ui_button_timer //start long press timer + call lpm_button_get_wake_lock + jam BT_EVT_BUTTON_DOWN,mem_fifo_temp + branch ui_ipc_send_event +ui_button_up: + fetch 2,mem_ui_state_map + set0 UI_STATE_BTN_DOWN + store 2,mem_ui_state_map + fetch 1,mem_ui_button_last_state + rtneq UI_BUTTON_STATE_UP + jam UI_BUTTON_STATE_UP,mem_ui_button_last_state + //Up Edge + jam 0,mem_ui_button_timer//stop long press timer + call lpm_button_clean_wake_lock + jam BT_EVT_BUTTON_UP,mem_fifo_temp + branch ui_ipc_send_event + +ui_button_check_long_press: + fetch 1,mem_ui_button_timer + rtn blank + increase -1,pdata + store 1,mem_ui_button_timer + nrtn blank + //Long Press + jam BT_EVT_BUTTON_LONG_PRESSED,mem_fifo_temp + branch ui_ipc_send_event + +lpm_button_get_wake_lock: + arg wake_lock_button,queue + branch lpm_get_wake_lock + +lpm_button_clean_wake_lock: + arg wake_lock_button,queue + branch lpm_put_wake_lock + + + +/***********************ui led function****************************/ +/****************** +led function + +ui_led_init_global +ui_led_on_global + +ui_led_off_global +//input:rega :struct number +ui_led_blink_start_global + +//input:rega :struct number +//contr: the point that want to set led style address +ui_led_set_style_global + +******************/ +//input:rega :struct number +//output:regb :current strutct starting pointer +calc_curr_struct_prt: + fetch 2,mem_ui_led_struct_ptr + mul32 rega,LED_OFFSET_LENGTH,regb + iadd regb,regb + rtn + + +ui_led_init_global: + fetch 1,mem_ui_led_struct_num + rtn blank + copy pdata,loopcnt + fetch 2,mem_ui_led_struct_ptr + copy pdata,regb +ui_led_init_loop: + add regb,LED_OFFSET_LED_GPIO,regc + ifetcht 1,regc + call gpio_config_output + call ui_led_off_static + increase LED_OFFSET_LENGTH,regb + loop ui_led_init_loop + rtn + + +//input:rega :struct number +ui_led_on_global: + call calc_curr_struct_prt + setarg UI_LED_STATE_LIGHTING + istore 1,regb + call ui_led_stop_timer + branch ui_led_on_static + + +//input:rega :struct number +ui_led_blink_stop_global: +ui_led_off_global: + call calc_curr_struct_prt + setarg UI_LED_STATE_DARKING + istore 1,regb + call ui_led_stop_timer + branch ui_led_off_static + + +//input:rega :struct number +ui_led_blink_start_global: + call calc_curr_struct_prt + setarg UI_LED_STATE_BLINK_START + istore 1,regb + setarg LED_INFINITE_FLASH_NUM + istore 1,contw + branch ui_led_off_static + + +//input:rega :struct number +//REGC: the point that want to set led style address +ui_led_set_style_global: + call calc_curr_struct_prt + arg LED_OFFSET_LENGTH,loopcnt + copy regc,contr + copy regb,contw + branch memcpy_fast + + + +ui_led_dispatch: + fetch 1,mem_ui_led_struct_num + rtn blank + arg 0,rega +ui_led_blink_polling: + call ui_led_change_style_by_type + increase 1,rega + fetch 1,mem_ui_led_struct_num + isub rega,null + rtn zero + branch ui_led_blink_polling + + +ui_led_off_static: + add regb,LED_OFFSET_LED_GPIO,regc + ifetcht 1,regc + branch gpio_out_inactive + + +ui_led_on_static: + add regb,LED_OFFSET_LED_GPIO,regc + ifetcht 1,regc + branch gpio_out_active + + +//input:rega :struct number +ui_led_change_style_by_type: + add rega,ui_led_blink,queue + call timer_check + nrtn blank //timer out + + call calc_curr_struct_prt + + ifetch 1,regb //led type + + beq UI_LED_STATE_LIGHTING,ui_led_on_static + beq UI_LED_STATE_DARKING,ui_led_off_static + beq UI_LED_STATE_BLINK_STOP,ui_led_off_static + beq UI_LED_STATE_BLINK_DARKING,ui_led_blink_state_darking +ui_led_blink_state_lighting: + call ui_led_on_static + add regb,LED_OFFSET_CB_LEDON,regc + call push_stack + ifetch 2,regc + call callback_func + call pop_stack + setarg UI_LED_STATE_BLINK_DARKING + istore 1,regb + add regb,LED_OFFSET_ON_TIME,regc + ifetch 2,regc + branch ui_led_blink_timer_start + + +ui_led_blink_state_darking: + call ui_led_off_static + add regb,LED_OFFSET_CB_LEDOFF,regc + call push_stack + ifetch 2,regc + call callback_func + call pop_stack + + add regb,LED_OFFSET_BLINK_COUNT,regc + ifetch 1,regc + beq LED_INFINITE_FLASH_NUM,ui_led_blink_infinite + increase -1,pdata + istore 1,regc + branch ui_led_blink_stop_global,blank //End of flicker +ui_led_blink_infinite: + setarg UI_LED_STATE_BLINK_LIGHTING + istore 1,regb + add regb,LED_OFFSET_OFF_TIME,regc + ifetch 2,regc +ui_led_blink_timer_start: + add rega,ui_led_blink,queue + branch timer_init + +ui_led_stop_timer: + setarg 0 + branch ui_led_blink_timer_start + +/***********************ui led function ending****************************/ + + + +ui_timer_timeout: + setarg 0x1000 + lshift16 pdata,pdata + iadd regb,regb + rtn + +ui_timer_check: + bpatchx patch3e_4,mem_patch3e + arg 0,rega + fetcht 4,mem_ui_timer_last_btclk + copy clkn_bt,regb + copy regb,pdata + isub temp,null + ncall ui_timer_timeout,positive + //call ice_break +ui_timer_check_loop: + copy regb,pdata + increase 160,temp //320btclk = 100ms + increase 160,temp + isub temp,null + nbranch ui_timer_check_end,positive + increase 1,rega //increase 1 every 100ms count + and rega,0x0f,pdata + nbranch ui_timer_check_loop,blank + arg 0,rega //reset timer if it's longer than 1.5s between 2 checks + call ui_timer_check_send_evt +ui_timer_init: + copy clkn_bt,pdata + store 4,mem_ui_timer_last_btclk + rtn +ui_timer_check_end: + bpatchx patch3e_5,mem_patch3e + copy rega,pdata + rtn blank + increase -160,temp //320btclk = 100ms + increase -160,temp + set0 28,temp + storet 4,mem_ui_timer_last_btclk +ui_timer_check_send_evt: + branch app_evt_timer + + + +//**********************************************************// +//************UI Inter-Processor Communication*******// +//**********************************************************// +ui_ipc_get_lock: + jam 1,mem_ipc_lock_bt +ui_ipc_get_lock_wait: + fetch 1,mem_ipc_lock_c51 + nbranch ui_ipc_get_lock_wait,blank + rtn + +ui_ipc_put_lock: + jam 0,mem_ipc_lock_bt + rtn + + + +ui_ipc_send_event: + bpatchx patch3e_6,mem_patch3e + call ui_ipc_get_lock + copy rega,pdata + store 4,mem_ipc_rega_temp + arg mem_ipc_fifo_bt2c51,rega + call fifo_in + fetch 4,mem_ipc_rega_temp + copy pdata,rega + branch ui_ipc_put_lock + +ui_ipc_send_cmd: + bpatchx patch3e_7,mem_patch3e + call ui_ipc_get_lock + copy rega,pdata + store 4,mem_ipc_rega_temp + arg mem_ipc_fifo_c512bt,rega + call fifo_in + fetch 4,mem_ipc_rega_temp + copy pdata,rega + branch ui_ipc_put_lock + +ui_ipc_clean_all_fifo: + setarg 0 + store UTIL_FIFO_LEN,mem_ipc_fifo_c512bt + store UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51 + rtn + +check_51cmd: + bpatchx patch3f_0,mem_patch3f + fetch 1,mem_hci_cmd + nrtn blank + arg mem_ipc_fifo_c512bt,rega + call fifo_is_empty + rtn blank + jam IPC_CONTINUE_PROCESS,mem_ipc_skip_continue_proc + call check_51cmd_once + fetch 1,mem_ipc_skip_continue_proc + branch check_51cmd,blank + rtn + +check_51cmd_once: + call ui_ipc_get_lock + arg mem_ipc_fifo_c512bt,rega + call fifo_out + copy pdata,temp + call ui_ipc_put_lock + bpatchx patch3f_1,mem_patch3f + copy temp,pdata + rtn blank + beq BT_CMD_START_DISCOVERY,check_51cmd_start_discovery + beq BT_CMD_STOP_DISCOVERY,check_51cmd_stop_discovery + beq BT_CMD_RECONNECT,check_51cmd_reconnect + beq BT_CMD_ENTER_SNIFF_SUBRATING,check_51cmd_enter_sniff_subrating + beq BT_CMD_EXIT_SNIFF_SUBRATING,check_51cmd_exit_sniff_subrating + beq BT_CMD_SNIFF_TEST,check_51cmd_sniff_test + beq BT_CMD_START_INQUIRY,check_51cmd_inq + beq BT_CMD_STOP_INQUIRY,check_51cmd_stop_inq + beq BT_CMD_START_ADV,check_51cmd_adv + beq BT_CMD_STOP_ADV,check_51cmd_stop_adv + beq BT_CMD_START_DIRECT_ADV,check_51cmd_direct_adv + beq BT_CMD_STOP_DIRECT_ADV,check_51cmd_stop_direct_adv + beq BT_CMD_LED_OFF,check_51cmd_led_off + beq BT_CMD_LED_ON,check_51cmd_led_on + beq BT_CMD_LED_BLINK,check_51cmd_led_start_blink + beq BT_CMD_LE_START_CONN,check_51cmd_le_start_con + beq BT_CMD_LE_START_SCAN,check_51cmd_start_scan + beq BT_CMD_LE_STOP_SCAN,check_51cmd_stop_scan + beq BT_CMD_ENTER_HIBERNATE,check_51cmd_hibernate + beq BT_CMD_LE_SMP_SECURITY_REQUEST,check_51cmd_le_smp_sec_req + beq BT_CMD_BB_RECONN_CANCEL,check_51cmd_bb_reconn_cancel + //context related, process in context + store 1,mem_fifo_temp + bpatchx patch3f_2,mem_patch3f + call lmo_fifo_check + nbranch check_51cmd_restore,blank //process this cmd next time while lmo fifo is full +check_51cmd_once_continue: + fetch 1,mem_fifo_temp + bmark0 mark_context,check_51cmd_check_idle + beq BT_CMD_DISCONNECT,check_51cmd_disconnect + beq BT_CMD_ENTER_SNIFF,cmd_in_sniff + beq BT_CMD_EXIT_SNIFF,cmd_exit_sniff + beq BT_CMD_SET_PIN_CODE,check_51cmd_pincode + beq BT_CMD_LE_DISCONNECT,check_51cmd_le_disconnect + beq BT_CMD_LE_UPDATE_CONN,check_51cmd_ble_update_connect_param + beq BT_CMD_ROLE_SWITCH,check_51cmd_role_switch + beq BT_CMD_STORE_RECONN_INFO_LE,eeprom_store_le_reconn_info + beq BT_CMD_STORE_RECONN_INFO_BT,eeprom_store_bd_reconn_info + beq BT_CMD_DHKEY_NOT_ACCEPT,check_51cmd_dhkey_not_accept + beq BT_CMD_STORE_RECONN_INFO,check_51cmd_store_reconn_info + rtn + +check_51cmd_check_idle: + store 1,mem_fifo_temp + call context_check_idle + branch check_51cmd_restore,zero + call context_search_plap + nrtn zero +check_51cmd_restore: + jam IPC_SKIP_CONTINUE_PROCESS,mem_ipc_skip_continue_proc + branch ui_ipc_send_cmd + + /******************** 51COMMAND*********************/ + +//command opcode 0x01 +check_51cmd_start_discovery: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_DISCOVERY + store 2,mem_ui_state_map + jam 3,mem_scan_mode + rtn + + +//command opcode 0x02 +check_51cmd_stop_discovery: + jam 0,mem_hid_handshake_timer_count + jam 0,mem_scan_mode + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_DISCOVERY + store 2,mem_ui_state_map + rtn + + +//command opcode 0x03 +check_51cmd_reconnect: + jam hci_cmd_create_conn,mem_hci_cmd + rtn + + +//command opcode 0x04 +check_51cmd_disconnect: + jam LMP_DETACH,mem_lmo_opcode2 + jam OTHER_END_TERMINATED,mem_disconn_reason_send + rtn + + +//command opcode 0x07 +check_51cmd_enter_sniff_subrating: + rtn + + +//command opcode 0x08 +check_51cmd_exit_sniff_subrating: + rtn + + +//command opcode 0x09 +check_51cmd_sniff_test: + rtn + + +//command opcode 0x10 +check_51cmd_pincode: + jam pincode_state_pincode_ready,mem_pincode_state + branch cmd_pair + + +//command opcode 0x11 +check_51cmd_inq: + rtn + + +//command opcode 0x12 +check_51cmd_stop_inq: + rtn + + +//command opcode 0x13 +check_51cmd_adv: + jam ON,mem_le_adv_enable + jam ADV_IND,mem_le_adv_type + fetch 2,mem_ui_state_map + set1 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + rtn + + +//command opcode 0x14 +check_51cmd_stop_adv: + fetch 2,mem_ui_state_map + set0 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + jam OFF,mem_le_adv_enable + rtn + + +//command opcode 0x15 +check_51cmd_direct_adv: + jam ON,mem_le_adv_enable + jam ADV_DIRECT_IND,mem_le_adv_type + fetch 2,mem_ui_state_map + set1 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + rtn + + +//command opcode 0x16 +check_51cmd_stop_direct_adv: + fetch 2,mem_ui_state_map + set0 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + jam OFF,mem_le_adv_enable + rtn + + +//command opcode 0x17 +check_51cmd_le_disconnect: + setarg 20 // 100ms + store 2,mem_le_superto + store 2,mem_le_init_superto + branch le_send_terminate_ind_user_terminated + + +//command opcode 0x18 +check_51cmd_ble_update_connect_param: + branch le_l2cap_tx_update_req + + +//command opcode 19 +check_51cmd_led_off: + arg 0,rega + branch ui_led_off_global + + +//command opcode 20 +check_51cmd_led_on: + arg 0,rega + branch ui_led_on_global + + +//command opcode 21 +check_51cmd_led_start_blink: + arg 0,rega + branch ui_led_blink_start_global + + +//command opcode 0x22 +check_51cmd_le_start_con: + jam ON,mem_le_scan_enable + jam hci_cmd_le_create_conn,mem_hci_cmd +// fetch 6,mem_app_peer_addr +// store 6,mem_le_conn_peer_addr + rtn + + +//command opcode 0x23 +check_51cmd_start_scan: + jam ON,mem_le_scan_enable + rtn + + +//command opcode 0x24 +check_51cmd_stop_scan: + jam OFF,mem_le_scan_enable + jam 0,mem_hci_cmd + rtn + + +//command opcode 0x25 +check_51cmd_hibernate: + fetch 2,mem_cb_before_hibernate + call callback_func + fetch 1,mem_ui_button_gpio + beq UI_BUTTON_GPIO_DISABLE,check_51cmd_hibernate_btn_disabled + copy pdata,temp + call gpio_config_input +check_51cmd_hibernate_btn_disabled: + call ui_ipc_clean_all_fifo + branch lpm_hibernate + + +//command opcode 0x27 +check_51cmd_le_smp_sec_req: + branch le_send_smp_security_request + + +//command opcode 0x29 +check_51cmd_role_switch: + jam LMP_SLOT_OFFSET,mem_lmo_opcode2 + set1 mark_switch_initiated,mark + nrtn master + jam SWITCH_FLAG_INIT,mem_switch_flag + jam LMP_SWITCH_REQ ,mem_lmo_opcode2 + fetch 1,mem_connection_options + set0 CONNECTION_SWITCH,pdata + store 1,mem_connection_options + rtn + + +//command opcode 0x30 +check_51cmd_bb_reconn_cancel: + force page_length_timer,queue + branch timer_stop + + +//command opcode 0x33 +check_51cmd_dhkey_not_accept: + call tid_set_reply + jam LMP_DHKey_Check,mem_lmi_opcode2 + branch parse_lmp_dhkey_check_reject + + +ui_check_paring_button: + fetch 1,mem_ui_state_map + rtnbit0 UI_STATE_BTN_DOWN + rtnbit0 UI_STATE_BT_RECONNECT + branch check_51cmd_bb_reconn_cancel + + + +///////////queue function//////////// +queue_init: + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,contw + setarg 0 + istore 3,contw + rtn + +//input:rega:the address of the data to which you want to input queue +//output:if user is disable,mean queue no have space +queue_push: + call disable_user + call queue_full + rtn blank + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,regb + ifetcht 1,regb + increase 1,temp + istoret 1,regb //number add + + ifetcht 1,pdata //temp:each length + copy temp,loopcnt + add pdata,QUEUE_OFFSET_WRITE_PTR,regb + ifetch 1,regb + imul32 temp,pdata //offset + iadd contr,contw + copy rega,contr +calc_queue_next_ptr: + call memcpy + call queue_get_size + pincrease -1 + ifetcht 1,regb + increase 1,temp + iand temp,temp + istoret 1,regb + branch enable_user + + +//input:rega:the address of the data to which you want to output queue +//output:if user is disable,mean queue no have data +queue_pop: + call disable_user + call queue_empty + rtn blank + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,regb + ifetcht 1,regb + increase -1,temp + istoret 1,regb + ifetcht 1,pdata //each size + copy temp,loopcnt + add pdata,QUEUE_OFFSET_READ_PTR,regb + ifetch 1,regb + imul32 temp,pdata //offset + iadd contr,contr + increase 1,contr + copy rega,contw + branch calc_queue_next_ptr + + +//output:if blank is 1,mean queue is empty +queue_empty: + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,contr + ifetch 1,contr + rtn + +//output:if blank is 1,mean queue is full +queue_full: + call queue_get_size + ifetcht 1,contr + isub temp,pdata + rtn + +//output:pdata is queue size +queue_get_size: + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_LENGTH,contr + ifetch 1,contr + rtn + +///////////queue function end//////////// + + + + + +right_shift_n: //rshiftN pdata,pdata + sub loopcnt,0,null + rtn zero +right_shift_n_loop: + rshift pdata,pdata + loop right_shift_n_loop + rtn + +/* lshift. 0:1 byte; 1:2byte; 2:4byte; 3:8byte; 4:16byte*/ +left_shift_n: + force 1,pdata + sub loopcnt,0,null + rtn zero +left_shift_n_loop: + lshift pdata,pdata + loop left_shift_n_loop + rtn +push_stack: + deposit contw + store 2, mem_contw + storet 8,mem_temp + deposit timeup + store 4,mem_timeup + call push_stack_rega_b_c + deposit contr + store 2, mem_contr + rtn + +push_stack_rega_b_c: + deposit rega + store 4, mem_rega + deposit regb + store 4, mem_regb + deposit regc + store 3, mem_regc + rtn + +pop_stack: + fetcht 8,mem_temp + fetch 4,mem_timeup + iforce timeup + call pop_stack_rega_b_c + fetch 2, mem_contw + iforce contw + fetch 2, mem_contr + iforce contr + rtn + +pop_stack_rega_b_c: + fetch 4, mem_rega + iforce rega + fetch 4, mem_regb + iforce regb + fetch 3,mem_regc + iforce regc + rtn + +get_contw: + fetch 2,mem_contw + copy pdata,contw + rtn +get_contr: + fetch 2,mem_contr + copy pdata,contr + rtn +store_contw: + copy contw,pdata + store 2,mem_contw + rtn +store_contr: + copy contr,pdata + store 2,mem_contr + rtn + + +// +save_cont_pointers: + copy contw,pdata + store 2,mem_hold_contw + copy contr,pdata + store 2,mem_hold_contr + rtn +load_cont_pointers: + fetch 2,mem_hold_contw + copy pdata,contw + fetch 2,mem_hold_contr + copy pdata,contr + rtn + +memcpy96: + call memcpy32 +memcpy64: + call memcpy32 + branch memcpy32 +memcpy12: + call memcpy8 +memcpy4: + ifetch 4,contr + istore 4,contw + rtn +memcpy8: + ifetch 8,contr + istore 8,contw + rtn + +memcpy48: + call memcpy16 +memcpy32: + call memcpy8 +memcpy24: + call memcpy8 +memcpy16: + call memcpy8 + branch memcpy8 + + + +delay_10ms: + arg 10,loopcnt +delay_ms_wait: + nop 12000 + loop delay_ms_wait + rtn + +bn_zero: + force 3,loopcnt +memset0: + force 0,pdata +memset8: + istore 8,contw + loop memset8 + rtn + +memset0_8: + force 0,pdata + istore 8,contw + rtn +memset0_4: + force 0,pdata + istore 4,contw + rtn + +clear_mem_256: + force 4,loopcnt + branch memset0 +clear_mem_512: + force 8,loopcnt + branch memset0 + +clear_mem: + deposit loopcnt + rtn blank + setarg 0 +clear_mem_loop: + istore 1,contw + loop clear_mem_loop + rtn + + +clear_temp_block: + arg 32,loopcnt + arg mem_temp_block0,contw + branch clear_mem + +xor_loop: + ifetch 4,regc + ifetcht 4,rega + ixor temp,pdata + istore 4,contw + increase 4,rega + increase 4,regc + loop xor_loop + rtn + +// 11 22 -> 22 11; 11 22 33 -> 33 22 11 +// rega:data addr ;loopnct:length +inverse_data: + bpatchx patch3f_3,mem_patch3f + copy loopcnt,pdata + sub pdata,1,null + rtn positive + iadd rega,regb + increase -1,regb + rshift loopcnt,loopcnt +inverse_loop: + ifetcht 1,rega + ifetch 1,regb + istore 1,rega + istoret 1,regb + increase -1,regb + increase 1,rega + loop inverse_loop + rtn + + +memcpy_fast: + deposit loopcnt + rtn blank +memcpy_fast_loop: + increase -8,loopcnt + call memcpy8,positive + rtn zero + branch memcpy_fast_loop,positive + increase 8,loopcnt +memcpy_fast_loop_four: + increase -4,loopcnt + call memcpy4,positive + rtn zero + branch memcpy_fast_loop_four,positive + increase 4,loopcnt + branch memcpy + +memcpy: + deposit loopcnt + rtn blank +memcpy_loop: + ifetch 1,contr + istore 1,contw + loop memcpy_loop + rtn + +timer_stop: + setarg 0 +timer_init: + rshift clkn_bt,temp + storet 4,mem_last_clkn + arg mem_timers,contw + iforce temp + lshift queue,pdata + iadd contw,contw + istoret 2,contw + bpatchx patch3f_4,mem_patch3f + rtn + +timer_check_timeout: + arg 0x800,timeup + lshift16 timeup,timeup + iadd timeup,pdata + rtn + + +timer_reinit: + arg 0,queue +timer_check: + bpatchx patch3f_5,mem_patch3f + fetcht 4,mem_last_clkn + rshift clkn_bt,pdata + store 4,mem_last_clkn + isub temp,null + ncall timer_check_timeout,positive + isub temp,timeup + copy timeup,temp + arg mem_timers,contr + copy contr,contw + arg 16,loopcnt +timer_loop: + ifetch 2,contr + isub temp,pdata + branch timer_counting,positive + force 0,pdata +timer_counting: + istore 2,contw + loop timer_loop + arg mem_timers,contr + lshift queue,pdata + iadd contr,contr + ifetch 2,contr + rtn + + + + /* pdata 28+16 bit add temp 26+16 bit, result in temp */ +clk_add: + iadd temp,temp + copy temp, loopcnt + setarg 3750 + isub loopcnt,pdata + rtn positive + sub pdata,0,pdata + rshift16 temp,temp + increase 1,temp + lshift16 temp,temp + ior temp,temp + rtn + +clk_diff_rt: + call clk_diff + branch clk2rt + +/* pdata -temp -> pdata, all are 28+16 bits, set user if negative */ +clk_diff: + disable user + isub temp,pdata + branch clk_diff_pos,positive + enable user + sub pdata,0,pdata +clk_diff_pos: + rtnbit0 15 + arg -61786,temp + iadd temp,pdata + set0 64,pdata + rtn + +clk2rt: + iforce contr + rshift16 pdata,pdata + arg 3750,temp + imul32 temp,pdata + iadd contr,pdata + rtn + + /* pdata = clks in, temp = lpo out */ +clk2lpo: + lshift8 pdata,pdata + lshift4 pdata,pdata + fetcht 3,mem_clks_per_lpo + idiv temp + call wait_div_end + quotient temp + rtn + + /* rt clk -> bt+rt clk */ +clk2bt: + arg 3750,temp + idiv temp + call wait_div_end + quotient pdata + lshift16 pdata,pdata + remainder temp + ior temp,temp + rtn + + + +//input:contru +//output:temp +//used register: temp regc +string2dec_from_uart: + arg 0,temp +string2dec_from_uart_done: + copy temp,regc + ifetch 1,contru + call uchar2dialog + copy regc,temp + call swap + arg 10,regb + imul32 regb,pdata + iadd temp,pdata + copy pdata,temp + loop string2dec_from_uart_done + rtn + + + +uchar2dialog: + arg 0x3a,temp + isub temp,null + nbranch uchar2dialog_number,positive + arg 0x61,temp + isub temp,null + branch uchar2dialog_a2f,positive + arg 0x37,temp + isub temp,pdata + rtn +uchar2dialog_number: + arg 0x30,temp + isub temp,pdata + rtn +uchar2dialog_a2f: + arg 0x57,temp + isub temp,pdata + rtn + +pn9: + copy temp,alarm + setarg 0x1ff + force 0,regb +pn9_loop: + rshift3 pdata,rega + rshift rega,rega + ixor rega,rega + isolate1 0,rega + setflag true,9,pdata + rshift temp,temp + isolate1 0,pdata + setflag true,7,temp + rshift pdata,pdata + increase 1,regb + compare 0,regb,0x7 + nbranch pn9_loop,true + istoret 1,contw + loop pn9_loop + copy alarm,temp + rtn + + +wait_div_end: + rtn modone + branch wait_div_end + + + +//input: +// count:loopcnt str1:rega str2:regb +//output: +// same:set falg true ,diff set falg false +// using: +// reg:temp null flag:zero +compare_loop: +string_compare: + ifetch 1,rega + ifetcht 1,regb + isub temp,null + nrtn zero + increase 1,rega + increase 1,regb + loop string_compare + force 0,null + rtn + + /* pdata = temp if pdata > temp */ +ceiling: + isub temp,null + nrtn positive + deposit temp + rtn + +swap: + iadd temp,pdata + isub temp,temp + isub temp,pdata + rtn + +clean_mem: + arg 0x200,loopcnt + arg 0x4000,contw + branch memset0 // clear xram at boot + + //cb function ptr in pdata +callback_func: + rtn blank + copy pdata,pc //rtn through cb functon. + //branch assert + +wait_uarttx: + hfetch 2,core_uart_txitems + nbranch wait_uarttx,blank + rtn + +ice_break: + hjam 0x1,core_ice_ctrl + rtn + +ice_setbp: + hstore 2,core_ice_break0 + hfetch 1,core_ice_ctrl + set1 4,pdata + hstore 1,core_ice_ctrl + rtn +ice_setbp2: + hstore 2,core_ice_break1 + hfetch 1,core_ice_ctrl + set1 6,pdata + hstore 1,core_ice_ctrl + rtn + +ice_set_write_bp: + hstore 2,core_ice_break0 + hjam 0x30,core_ice_ctrl + rtn + + + +test_enable_white: + hfetch 1,core_config + set0 whiteoff_bit,pdata + hstore 1,core_config /* whitening on */ + rtn + +check_uart_tx_buff: + hfetch 2,core_uart_txitems + arg UART_AIR_CONTROL_THRESHOLD,temp +pdata_sub_temp: + isub temp,null + rtn + + //fuction fifo_in + //rega pointer to fifo memory , *(rega+len) is the end of fifo + //mem_fifo_temp data into fifo + //assert if fifo was full +fifo_in: + bpatchx patch3f_6,mem_patch3f + ifetcht UTIL_FIFO_LEN,rega + and temp,0xff,pdata + nbranch fifo_in_push,blank + rshift8 temp,pdata + istore UTIL_FIFO_LEN,rega +fifo_in_push: + increase UTIL_FIFO_LEN+UTIL_FIFO_OFFSET,rega + ifetch 1,rega + nbranch assert,blank //fifo full + fetch 1,mem_fifo_temp + istore 1,rega + rtn + + //fuction fifo_out + //rega pointer to fifo memory + //pdata data from fifo, blank mains fifo empty +fifo_out: + bpatchx patch3f_7,mem_patch3f + arg UTIL_FIFO_LEN,loopcnt + ifetch UTIL_FIFO_LEN,rega + rtn blank +fifo_out_loop: + ifetch 1,rega + nbranch fifo_out_end,blank + increase 1,rega + loop fifo_out_loop + branch assert +fifo_out_end: + arg 0,temp + istoret 1,rega + rtn + + //fuction fifo_is_empty + //rega pointer to fifo memory + //blank--- fifo is empty +fifo_is_empty: + ifetch UTIL_FIFO_LEN,rega + rtn + + //fuction fifo_is_full + //rega pointer to fifo memory + //blank--- fifo is NOT full +fifo_is_full: + ifetch 1,rega + rtn + //rega pointer to fifo memory + //blank--- fifo is NOT near full +fifo_is_near_full: + ifetch 2,rega + rtn + + //rega pointer to fifo memory + //count output via pdata +fifo_content_count: + arg 0,temp +fifo_content_count_loop: + fetch 1,contr + loop fifo_content_count_loop,blank + increase 1,temp + loop fifo_content_count_loop + copy temp,pdata + rtn + +not_greater_than: + isub temp,null + nrtn positive + copy temp,pdata + rtn + + +disable_positive: + force -1,null + rtn +enable_positive: +disable_zero: + force 1,null + rtn +enable_zero: + force 0,null + rtn + +enable_user: + enable user + rtn + +disable_user: + disable user + rtn + +enable_user2: + enable user2 + rtn + +disable_user2: + disable user2 + rtn + +disable_blank: + setarg 1 + rtn + +enable_blank: + setarg 0 + rtn + + +reverse_byte: + copy loopcnt,pdata + rtn blank + copy contr,pdata + iadd loopcnt,pdata + increase -1,pdata + copy pdata,contr +reverse_loop: + ifetch 1,contr + increase -2,contr + istore 1,contw + loop reverse_loop + rtn + + Index: 1066_OTP_FLASH/output/bt_program23.rom =================================================================== Cannot display: file marked as a binary type. svn:mime-type = application/octet-stream Property changes on: 1066_OTP_FLASH/output/bt_program23.rom ___________________________________________________________________ Added: svn:mime-type ## -0,0 +1 ## +application/octet-stream \ No newline at end of property Index: 1066_OTP_FLASH/output/eeprom.dat =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/eeprom.dat (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/eeprom.dat (working copy) @@ -0,0 +1,121 @@ +00 +02 +aa +55 +52 +00 +20 +40 +29 +78 +58 +00 +00 +00 +60 +01 +81 +f6 +20 +40 +00 +0a +20 +40 +65 +0b +d8 +40 +00 +ab +20 +40 +65 +56 +da +60 +65 +78 +20 +40 +64 +29 +20 +20 +64 +3c +70 +80 +86 +40 +70 +80 +87 +00 +68 +10 +80 +81 +79 +3f +fe +00 +79 +3f +fe +01 +79 +20 +7e +03 +60 +10 +80 +81 +58 +00 +00 +00 +60 +02 +01 +f5 +20 +60 +00 +00 +aa +c6 +aa +55 +01 +00 +11 +40 +04 +aa +55 +03 +00 +75 +41 +8f +10 +ca +aa +55 +01 +00 +e1 +41 +ff +aa +55 +02 +00 +c3 +40 +e1 +41 +8d +a5 Index: 1066_OTP_FLASH/output/memmap.format =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/memmap.format (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/memmap.format (working copy) @@ -0,0 +1,1731 @@ +0x0000 mem_le_adv_transmit +0x0001 mem_le_adv_waitcnt +0x0002 mem_le_adv_rcv +0x0003 mem_le_req_rcv +0x0004 mem_le_scanrsp_rcv +0x0005 mem_le_conn_rcv +0x0006 mem_inquiryscan_waitcnt +0x0007 mem_inquiryscan_rcvcnt +0x0008 mem_pagescan_waitcnt +0x0009 mem_pagescan_rcvcnt +0x000a mem_pagescan_rcvfhscnt +0x000b mem_slave_rcvcnt +0x000c mem_page_transmit +0x000d mem_page_rcv +0x000e mem_page_rcv_fhs +0x000f mem_master_rcvcnt +0x0010 mem_fhs_wait_counter +0x0011 mem_newconnto_counter +0x0012 mem_inquiry_transmit +0x0013 mem_inquiry_rcv +0x0014 mem_fw_ver +0x0015 mem_current_context +0x0016 mem_le_ch_mapped +0x0017 mem_last_freq +0x0018 mem_rssi +0x0019 mem_rx_type +0x001a mem_rx_hec_err +0x001c mem_rx_crc_err +0x001e mem_context_ptr +0x0020 mem_display +0x0028 mem_bcd +0x0030 mem_state +0x0031 mem_mode +0x0032 mem_tsniff +0x0034 mem_sniff_anchor +0x0038 mem_clk_offset +0x003e mem_rx_window +0x0040 mem_plap +0x0043 mem_puap +0x0044 mem_pnap +0x0046 mem_conn_handle +0x0047 mem_arq +0x0048 mem_lmp_to_send +0x0049 mem_lmi_opcode +0x004a mem_lmo_reason +0x004b mem_op +0x004c mem_state_map +0x004d mem_supervision_timer +0x0051 mem_supervision_to +0x0053 mem_name_offset +0x0054 mem_key_size +0x0055 mem_conn_sm +0x0056 mem_aco +0x0062 mem_kc +0x0072 mem_conn_timer +0x0073 mem_sniff_attempt +0x0074 mem_sniff_timeout +0x0075 mem_dsniff +0x0077 mem_amaddr +0x0078 mem_lmo_opcode1 +0x0079 mem_lmi_opcode1 +0x007a mem_lmo_reason1 +0x007b mem_lmo_tid1 +0x007c mem_lmo_opcode2 +0x007d mem_lmi_opcode2 +0x007e mem_lmo_reason2 +0x007f mem_lmo_tid2 +0x0080 mem_hci_version +0x0083 mem_acl_pktlen +0x0085 mem_sco_pktlen +0x0086 mem_acl_pktcnt +0x0088 mem_sco_pktcnt +0x008a mem_current_sniff_attempt +0x008b mem_current_sniff_timeout +0x008c mem_sniff_timeout_temp +0x008d mem_nfreq_index_inq +0x008e mem_nfreq_index_page +0x008f mem_ninqy_index +0x0090 mem_fhs_misc +0x0091 mem_subsniff_instant +0x0095 mem_subsniff_rate +0x0096 mem_subsniff_tcmax +0x0098 mem_subsniff_tsniff +0x0099 mem_lpm_adjust +0x009a mem_sync_clke +0x00a0 mem_lpm_current_mult +0x00a1 mem_gpio_wakeup_low +0x00a5 mem_gpio_wakeup_high +0x00a9 mem_air_mode +0x00aa mem_sco_asso_handle +0x00ab mem_sco_handle +0x00ad mem_esco_desco +0x00ae mem_esco_type +0x00af mem_neogotiation_state +0x00b0 mem_saved_amaddr +0x00b1 mem_esco_arq +0x00b2 mem_esco_saved_arq +0x00b3 mem_sco_obuf +0x00d1 mem_sco_ibuf +0x00ef mem_sco_poll +0x00f0 mem_npage_index +0x00f1 mem_page_mode +0x00f2 mem_page_clk +0x00f6 mem_tst_pktcnt_sync +0x00f8 mem_tst_pktcnt_hec +0x00fa mem_tst_pktcnt_crc +0x00fc mem_tst_pktcnt_dmh +0x00fe mem_tmp_buffer_head +0x0101 mem_tmp_buffer +0x0151 mem_tester_emulate +0x0152 mem_temp_payload +0x0152 test_mode_scenario +0x0153 test_mode_hopping_mode +0x0154 test_mode_tx_freq +0x0155 test_mode_rx_freq +0x0156 test_mode_power_mode +0x0157 test_mode_poll_period +0x0158 test_mode_packet_type +0x0159 test_mode_data_length +0x015b mem_test_mode_old_debug_config +0x015c mem_tester_cnt +0x015d mem_temp_am_addr +0x015e mem_temp_arq +0x015f mem_len +0x0161 mem_clkn_bt +0x0165 mem_clke_bt +0x0169 mem_dpll_clkn +0x016d mem_connection_options +0x016e mem_nameres_cnt +0x016f mem_txptr +0x0171 mem_slot_offset +0x0173 extm_fhs_misc +0x0174 extm_newconn_am_addr +0x0175 extm_class +0x0178 extm_lap +0x017b extm_uap +0x017c extm_nap +0x017f mem_debug_config +0x0180 mem_lch_code +0x0181 mem_fhs_am_addr +0x0182 mem_dpll_error +0x0184 mem_select_list_item +0x0185 mem_temp_reconn_record +0x0185 mem_record_bt_mode +0x0186 mem_temp_lap +0x018c mem_list_item_ptr +0x018e mem_eir +0x01f2 mem_ucode_status +0x01f3 mem_otp_ucode_flag +0x01f5 mem_spid_tbuf/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */ +0x01f6 mem_iicd_tbuf/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */ +0x01f6 mem_addr_hi +0x01f7 mem_addr_mi +0x01f8 mem_addr_lo +0x01f9 mem_iicd_addr +0x01fa mem_spid_rbuf +0x01fe mem_ucode_buf +0x0200 mem_ucode_len +0x0202 mem_sched_addr +0x0204 mem_ucode_ptr +0x0206 mem_ucode_keybuf +0x0216 mem_check_plap_temp +0x0228 mem_reconnect_flag +0x0229 mem_switch_fail_master_count +0x022a mem_app_evt_timer_count +0x022b mem_init_cnt +0x022d mem_h5rx_ackcnt +0x022e mem_check_err_acl_cont +0x022f mem_rp_packets +0x0230 mem_packet_type +0x0232 mem_hci_sniff_conn_handle +0x0234 mem_hci_sniff_max_interval +0x0236 mem_hci_sniff_min_interval +0x0238 mem_hci_sniff_attempt +0x023a mem_hci_sniff_timeout +0x023c mem_voice_setting +0x023e mem_retransmission_effort +0x023f mem_sco_ptype +0x0241 mem_extm_uap_restore +0x0244 mem_h5rx_rptr +0x0246 mem_h5rx_ack +0x0247 mem_h5tx_ack +0x0248 mem_h5tx_rptr +0x024a mem_h5tx_wptr +0x024c mem_h5tx_free +0x024e mem_h5rx_tmp +0x024f mem_h5tx_seq +0x0250 mem_hci_acl_queue_wptr +0x0252 mem_hci_acl_queue_rptr +0x0254 mem_hci_acl_queue_end +0x0256 mem_hci_acl_queue_wcnt +0x0257 mem_hci_acl_cnt +0x0258 mem_hci_acl_tx_trigger_wptr//tx via uart +0x025a mem_hci_curr_len +0x025b mem_hci_curr_target +0x025d mem_l2cap_mem_start +0x025d mem_l2cap_rxbuff1_len +0x025f mem_l2cap_rxbuff2_len +0x0261 mem_l2cap_rxbuff_new +0x0263 mem_l2cap_rxbuff_inuse +0x0264 mem_l2cap_payload_ptr +0x0266 mem_l2cap_rx_pkt_length +0x0268 mem_l2cap_rx_cid +0x026a mem_l2cap_rx_done +0x026b mem_l2cap_signal_tx_buff_ptr +0x026d mem_l2cap_signal_tx_payload_ptr +0x026f mem_l2cap_signal_tx_length +0x0271 mem_sdp_tx_buff_ptr +0x0273 mem_sdp_tx_payload_ptr +0x0275 mem_sdp_tx_pkt_length +0x0277 mem_rfcomm_tx_buff_ptr +0x0279 mem_rfcomm_tx_payload_ptr +0x027b mem_rfcomm_tx_pkt_length +0x027d memL2CAP_T1 +0x027f mem_CONTROL_tasks +0x0280 mem_send_config_req +0x0281 mem_config_identifier +0x0282 mem_config_req_dest_CID +0x0284 mem_rfcomm_malloc_fail_flag +0x0285 mem_message_to_uppersm +0x0286 mem_upper_sm_remote_page +0x0287 mem_upper_sm_reconn +0x0288 mem_upper_sm_ss +0x0289 mem_tx_malloc_log +0x02c9 mem_l2cap_mem_end +0x02c9 mem_scid +0x02cb mem_cmd_length +0x02cd mem_tt2 +0x02cf mem_tt3 +0x02d1 mem_id +0x02d3 mem_psm +0x02d5 mem_l2cap_sdpres_delay_time +0x02d9 mem_le_rxbuf +0x0311 mem_le_l2capbuf +0x0417 mem_le_mic +0x041b mem_le_peer_mic +0x041f mem_le_peer_ltk +0x042f mem_le_mrand +0x043f mem_le_state +0x0440 mem_le_mode +0x0441 mem_le_tsniff +0x0443 mem_le_anchor +0x0447 mem_le_clk_offset +0x044d mem_le_receive_window +0x044f mem_le_plap +0x0455 mem_le_conn_handle +0x0456 mem_le_arq +0x0457 mem_le_ch +0x0458 mem_le_hop +0x0459 mem_le_event_count +0x045b mem_le_supervision_timer +0x045f mem_le_instant +0x0461 mem_le_channels +0x0462 mem_le_op +0x0463 mem_le_access +0x0467 mem_le_crcinit +0x046a mem_le_window_size +0x046b mem_le_slave_latency +0x046d mem_le_superto +0x046f mem_le_channel_map +0x0474 mem_le_no_using +0x0476 mem_le_peer_sca +0x0477 mem_le_att_opcode +0x0478 mem_le_att_handle +0x047a mem_le_err_code +0x047b mem_le_ll_pairing_fail_reason +0x047c mem_le_sk +0x048c mem_le_testtype +0x048d mem_le_test_sync +0x048f mem_le_test_pcnt +0x0491 mem_le_rxon_ts +0x0497 mem_le_rx_ll_opcode +0x0498 mem_le_notify_attr_start +0x049a mem_le_notify_len +0x049b mem_cmd_le_create_conn +0x049c mem_le_cur_attlist_start_ptr +0x049e mem_le_cur_handle_start +0x04a0 mem_le_cur_handle_end +0x04a2 mem_le_cur_uuid_length +0x04a3 mem_le_cur_uuid +0x04b3 mem_le_curr_att_len +0x04b4 mem_le_search_res +0x04b5 mem_le_continue_type +0x04b6 mem_lmo_header_length +0x04b7 mem_lmo_header_opcode +0x04b8 mem_lmo_payload +0x04c9 mem_lmi_accepted_opcode +0x04ca mem_disconn_reason_send +0x04cb mem_tx_fixed_freq +0x04cc mem_rx_fixed_freq +0x04cd mem_ext_features_page +0x04ce mem_lmpext_ssp_enable +0x04d0 mem_remote_sppcap +0x04d1 mem_lmp_conn_state +0x04d2 mem_soft_timer +0x04d4 mem_pincode_state +0x04d5 mem_sres_tid +0x04d6 mem_accptsco_tid +0x04d7 mem_auth_enable +0x04d8 mem_wait_encryption +0x04d9 mem_sniff_payload +0x04e9 mem_aurand_send_delay_time +0x04ed memRemoteRPNBitRate +0x04ee memRemotePRNDataBits +0x04ef memRemotePRNStopBit +0x04f0 memRemotePRNParity +0x04f1 memRemotePRNFlowControl +0x04f2 memRemotePRNXon +0x04f3 memRemotePRNXoff +0x04f4 mem_mod2div_temp +0x04f7 mem_contw_temp +0x04f9 mem_attrib_list +0x04fb mem_current_adss +0x04fc mem_current_channel +0x04fd mem_current_frame_type +0x04fe mem_current_fcs +0x04ff mem_current_length +0x0501 mem_rfcomm_uih_payload_ptr +0x0503 mem_uih_cmd_type +0x0504 mem_uih_length +0x0506 mem_param_payload_ptr +0x0508 mem_ms_param +0x0509 mem_pn_credit_flow_type_info +0x050a mem_pn_priority +0x050b mem_pn_acknowledg_timer +0x050c mem_pn_max_retrans +0x050d mem_rfcomm_send_adss +0x050e mem_rfcomm_send_frame_type +0x050f mem_rfcomm_send_fcs +0x0510 mem_rfcomm_send_offset +0x0511 mem_sdp_mem_start +0x0511 mem_sdp_uuid_search_ptr +0x0519 mem_sdp_continue_byte +0x051b mem_sdp_pduid +0x051c mem_sdp_transactionid +0x051e mem_sdp_transactionid_local +0x0520 mem_sdp_attribute_maxbyte +0x0522 mem_sdp_record_maxcnt +0x0524 mem_sdp_record_handle +0x0528 mem_sdp_LACAP_found +0x0529 mem_sdp_RFCOMM_found +0x052a mem_sdp_handle_list +0x052a mem_sdp_attrib_list +0x054a mem_sdp_error_code +0x054c mem_sdp_all_length +0x054e mem_handle_humber +0x054f mem_search_uuid +0x0551 mem_sdp_mem_end +0x0551 mem_rxbuf +0x0562 mem_random_number +0x0572 mem_round_key +0x0582 mem_kinit +0x0592 mem_input_store +0x05a2 mem_x +0x05b2 mem_y +0x05c1 mem_y15 +0x05c2 mem_key_store +0x05d3 mem_key_store_end +0x05d4 memp_ar_key +0x05d6 memp_ar_input +0x05d8 mem_ar_hround +0x05e2 mem_ec_infinite +0x05e3 mem_ec_loopc +0x05e5 mem_aes_cmac_data_length +0x05e6 memdat +0x05e6 mem_ax +0x05fe mem_ay +0x0616 mem_az +0x062e mem_bx +0x0646 mem_ax_256//32 bytes +0x0646 mem_by +0x065e mem_bz +0x0666 mem_ay_256// 32 bytes +0x0676 mem_cx +0x0686 mem_az_256// 32 bytes +0x068e mem_cy +0x06a5 mem_cy5 +0x06a6 mem_bx_256// 32 bytes +0x06a6 mem_cz +0x06be mem_k +0x06c6 mem_by_256// 31 bytes +0x06d6 mem_align +0x06e6 mem_bz_256//32 bytes +0x06e6 mem_tmp1 +0x06e6 memahbak +0x06fe mem_tmp5 +0x0706 mem_cx_256//32 bytes +0x0706 memahsave +0x0716 mem_tmp2 +0x0726 mem_cy_256// 32 bytes +0x0726 memahsave_end +0x0726 mem_addr_padding +0x0727 mem_addr_value/* 12 bytes */ +0x072e mem_tmp3 +0x072e mem_t1 +0x0733 mem_addr_value_end +0x0736 mem_addr_iocap_end +0x0745 mem_cy5_256// 1 byte +0x0746 mem_cz_256// 32 bytes +0x0746 mem_tmp0 +0x0746 mem_t0 +0x074e mem_tmp0a +0x075e mem_t2 +0x0766 mem_k_256//32 bytes +0x0776 mem_t3 +0x0786 mem_tmp1_256//32 bytes +0x078e mem_t7 +0x07a6 mem_tmp5_256 +0x07c6 mem_tmp2_256 +0x07e6 mem_tmp3_256 +0x07e6 mem_t1_256 +0x0806 mem_tmp0_256 +0x0806 mem_t0_256 +0x0826 mem_t2_256 +0x0846 mem_t3_256 +0x0866 mem_t7_256 +0x0886 mem_p +0x089e mem_a +0x08b6 mem_b +0x08ce mem_gx +0x08e6 mem_gy +0x08fe memh0 +0x091e mem_p_256 +0x093e mem_a_256 +0x095e mem_gx_256 +0x097e mem_gy_256 +0x099e mem_le_slat +0x09ae mem_sp_state_start +0x09ae mem_sp_state +0x09af mem_master_sp_state +0x09b0 mem_sp_flag +0x09b1 mem_master_sp_flag +0x09b2 mem_sp_calc +0x09b3 mem_sp_dh_ready +0x09b4 mem_sp_localsm +0x09b5 mem_pairing_auth +0x09b6 mem_sp_flag_start +0x09b6 mem_sp_local_key_send_count +0x09b7 mem_sp_remote_key_recv_count +0x09b8 mem_sp_remote_key_invalid +0x09b9 mem_sp_dhkey_invalid +0x09ba mem_gkey +0x09be mem_le_pubkey_remote_x_256 +0x09c6 mem_sp_pubkey_remote +0x09c6 mem_sp_pubkey_remote_x +0x09de mem_sp_pubkey_remote_x_end +0x09de mem_le_pubkey_remote_y_256 +0x09e6 mem_sp_pubkey_remote_y +0x09fe mem_le_dhkey_256 +0x0a06 mem_sp_dhkey +0x0a1e mem_sp_dhkey_end +0x0a1e mem_sp_random_local +0x0a2e mem_sp_random_local_end +0x0a2e mem_sp_random_remote +0x0a3e mem_sp_random_remote_end +0x0a3e memresult +0x0a3e mem_sp_calc_result +0x0a3e memh +0x0a42 memg +0x0a46 memf +0x0a4a meme +0x0a4e mem_sp_calc_result_high +0x0a4e memd +0x0a52 memc +0x0a56 memb +0x0a5a mema +0x0a5e mem_sp_check_result +0x0a6e mem_sp_confirm_remote +0x0a7e mem_sp_prarm_stack +0x0a8e mem_UI_data_txbuff_length +0x0a90 mem_ipc_skip_continue_proc +0x0a91 mem_ui_timer_temp//length 4 +0x0a91 mem_ipc_rega_temp +0x0a95 mem_hold_contr +0x0a97 mem_hold_contw +0x0a99 mem_fifo_temp +0x0a9a mem_pdatatemp +0x0aa2 mem_temp//8 bytes +0x0aaa mem_timeup// 4 bytes +0x0aae mem_rega//4 bytes +0x0ab2 mem_regb//4 bytes +0x0ab6 mem_regc//3 bytes +0x0ab9 mem_contr//2 bytes +0x0abb mem_contw//2 bytes +0x0abd mem_wakup_from_power_flag +0x0abe mem_saved_gpio_in +0x0ac2 mem_shutter_random_mac_data_temp +0x0ac2 mem_shutter_config_data_temp +0x0ac2 mem_le_adv_channel_map_temp +0x0ac2 mem_le_data_len_temp//1byte +0x0ac2 mem_tx_fifo_map_temp +0x0ac2 mem_rpn_dlci//1byte +0x0ac2 mem_event_cmd_response_content//2byte +0x0ac2 mem_le_prand//16byte +0x0ac2 mem_AES_CMAC_k//16 bytes +0x0ac2 mem_regext_index//1 bytes +0x0ac2 mem_temp_block0 +0x0ac3 mem_le_data_temp//15bytes +0x0ac3 mem_temp_block1 +0x0ad2 mem_le_aes_128//16byte +0x0ad2 mem_regext//64 bytes +0x0ad2 mem_AES_CMAC_k1//16 bytes +0x0ad2 mem_temp_block2 +0x0ae2 mem_AES_CMAC_k2//16 bytes +0x0ae2 mem_temp_block3 +0x0af2 mem_AES_CMAC_temp// 16 bytes +0x0af2 mem_temp_block4 +0x0b02 mem_AES_CMAC_M_last// 16 bytes +0x0b02 mem_module_uart_cmd +0x0b03 mem_module_uart_opcode +0x0b04 mem_module_uart_len +0x0b05 mem_module_temp_nl_discard_packet +0x0b06 mem_temp_block5 +0x0b12 mem_le_mackey//16 bytes +0x0b12 mem_app_receive_temp +0x0b12 mem_key_value_temp +0x0b14 mem_key_value +0x0b16 mem_key_value_temp1 +0x0b17 mem_key_value_temp2 +0x0b18 mem_key_value_temp3 +0x0b19 mem_key_value_temp4 +0x0b1a mem_key_value_temp5 +0x0b1b mem_key_value_temp6 +0x0b1c mem_temp_block6 +0x0b22 mem_usb_status +0x0b23 mem_usb_fifo_empty +0x0b24 mem_usb_read_len +0x0b25 mem_usb_rxbuf +0x0b65 mem_bufptr +0x0b67 mem_remain +0x0b68 mem_devicedesc +0x0b7c mem_hidreportdesc_kb +0x0b7e mem_hidreportdesc_m +0x0b80 mem_confdesc +0x0be4 mem_string0 +0x0be9 mem_string1 +0x0c07 mem_string2 +0x0c47 mem_string3 +0x0c65 mem_usb_zero_packet +0x0c67 mem_usb_ones_packet +0x0c69 mem_usb_two_packet +0x0c6b mem_usb0_state +0x0c6c mem_usb_offline_check_gpio +0x0c6d mem_usb_tx_interval +0x0c6e mem_usb_clear_mem_start +0x0c6e mem_usb_setup +0x0c6e mem_usb_setup_bmRequestType +0x0c6f mem_usb_setup_bRequest +0x0c70 mem_usb_setup_bValue +0x0c71 mem_usb_setup_bValueH +0x0c72 mem_usb_setup_wIndex +0x0c74 mem_usb_setup_bLength +0x0c75 mem_usb_setup_bLengthH +0x0c76 mem_usb0_setup +0x0cb6 mem_usb0_set_report_data +0x0cf6 mem_usb0_get_report_data +0x0d36 mem_usb_state +0x0d37 mem_usb_tx_wait +0x0d38 mem_usb_tx_enable +0x0d39 mem_usb_remote_wakeup +0x0d3a mem_usb_clear_remote_wakeup +0x0d3b mem_usb_ep0_stall_status +0x0d3c mem_usb_ep1_stall_status +0x0d3d mem_usb_ep2_stall_status +0x0d3e mem_usb_ep3_stall_status +0x0d3f mem_dsc_info_data_pointer +0x0d41 mem_dsc_info_len +0x0d42 mem_usb0_data_ready_report +0x0d43 mem_usb_tx_win_enable +0x0d44 mem_usb_tx_mac_enable +0x0d45 mem_usb_device_enumeration_endflag +0x0d46 mem_usb_wakestate_onetime_flag +0x0d47 mem_usb_mac_wakeup_trig +0x0d48 mem_usb_set_high_addr_flag +0x0d49 mem_usb_set_protocol_value +0x0d4a mem_usb_set_protocol_status +0x0d4b mem_usb_get_protocol_flag +0x0d4c mem_usb_idle_flag +0x0d4d mem_usb_idle_rate +0x0d4e mem_usb_setup_bValue_temp +0x0d50 mem_usb0_get_set_report +0x0d51 mem_usb_ep1_data +0x0d52 mem_usb_ep2_data +0x0d53 mem_usb_clear_halt +0x0d54 mem_usb_mouse_data +0x0d64 mem_usb_kb_data +0x0d74 mem_usb_kb_multikey +0x0d84 mem_usb_kb_data_sta_data +0x0d8c mem_usb_kb_data_last_data +0x0d94 mem_usb_kb_multikey_sta_data +0x0d97 mem_usb_kb_multikey_last_data +0x0d9a mem_usb_kb_blank_data_enable +0x0d9b mem_usb_kb_mul_blank_data_enable +0x0d9c mem_usb_test_cnt +0x0d9d mem_usb_clear_mem_end +0x0d9d mem_usb_test_kb +0x0d9e mem_rssi_noise_buffer +0x0e9e mem_rssi_noise_dg_buffer +0x0f9e mem_rssi_noise_ms_buffer +0x109e mem_rssi_noise_kb_buffer +0x119e mem_24g_common_temp +0x4000 mem_patch00 +0x4001 mem_patch01 +0x4002 mem_patch02 +0x4003 mem_patch03 +0x4004 mem_patch04 +0x4005 mem_patch05 +0x4006 mem_patch06 +0x4007 mem_patch07 +0x4008 mem_patch08 +0x4009 mem_patch09 +0x400a mem_patch0a +0x400b mem_patch0b +0x400c mem_patch0c +0x400d mem_patch0d +0x400e mem_patch0e +0x400f mem_patch0f +0x4010 mem_patch10 +0x4011 mem_patch11 +0x4012 mem_patch12 +0x4013 mem_patch13 +0x4014 mem_patch14 +0x4015 mem_patch15 +0x4016 mem_patch16 +0x4017 mem_patch17 +0x4018 mem_patch18 +0x4019 mem_patch19 +0x401a mem_patch1a +0x401b mem_patch1b +0x401c mem_patch1c +0x401d mem_patch1d +0x401e mem_patch1e +0x401f mem_patch1f +0x4020 mem_patch20 +0x4021 mem_patch21 +0x4022 mem_patch22 +0x4023 mem_patch23 +0x4024 mem_patch24 +0x4025 mem_patch25 +0x4026 mem_patch26 +0x4027 mem_patch27 +0x4028 mem_patch28 +0x4029 mem_patch29 +0x402a mem_patch2a +0x402b mem_patch2b +0x402c mem_patch2c +0x402d mem_patch2d +0x402e mem_patch2e +0x402f mem_patch2f +0x4030 mem_patch30 +0x4031 mem_patch31 +0x4032 mem_patch32 +0x4033 mem_patch33 +0x4034 mem_patch34 +0x4035 mem_patch35 +0x4036 mem_patch36 +0x4037 mem_patch37 +0x4038 mem_patch38 +0x4039 mem_patch39 +0x403a mem_patch3a +0x403b mem_patch3b +0x403c mem_patch3c +0x403d mem_patch3d +0x403e mem_patch3e +0x403f mem_patch3f +0x4040 mem_context +0x4090 mem_current_amaddr +0x4091 mem_lpm_mode +0x4092 mem_device_option +0x4093 mem_scan_mode +0x4094 mem_last_clkn +0x4098 mem_features +0x40a0 mem_lap +0x40a3 mem_uap +0x40a4 mem_nap +0x40a6 mem_npage +0x40a7 mem_glap +0x40aa mem_class +0x40ad mem_iscan_window +0x40af mem_iscan_interval +0x40b1 mem_pscan_window +0x40b3 mem_pscan_interval +0x40b5 mem_page_interval +0x40b7 mem_page_window +0x40b9 mem_page_to +0x40bb mem_inq_window +0x40bd mem_fcomp_mul +0x40be mem_fcomp_div +0x40bf mem_rx_window_init +0x40c1 mem_rx_window_sniff +0x40c3 mem_rf_init_ptr +0x40c5 mem_last_type +0x40c6 mem_last_type_esco +0x40c7 mem_last_type_saved +0x40c8 mem_retransmission_cnt +0x40ca mem_next_btclk +0x40ce mem_rf_rccal +0x40cf mem_handle_num +0x40d0 mem_max_slot +0x40d1 mem_eir_enable +0x40d2 mem_afh_instant +0x40d6 mem_afh_error_total +0x40d8 mem_afh_cfg +0x40d9 mem_afh_new_mod +0x40da mem_afh_map_lo +0x40df mem_afh_map_hi +0x40e4 mem_afh_used +0x40e5 mem_afh_index +0x40e7 mem_afh_map_new +0x40f2 mem_afh_map +0x4142 mem_afh_timer +0x4146 mem_afh_classify_channel_map +0x4150 mem_chip_functions +0x4152 mem_lpm_wake_lock +0x4154 mem_lpm_interval +0x4156 mem_lpm_overhead +0x4157 mem_lpm_hibernate_switch +0x4158 mem_esco_addr +0x4159 mem_sniff_unint_lost +0x415a mem_ptt +0x415b mem_sleep_counter//should be 0x41fc in REVC +0x415f mem_sleep_counter_all +0x4163 mem_sleep_clkn +0x4169 mem_sniff_rcv +0x416c mem_sniff_lost +0x416f mem_clks_per_lpo +0x4172 mem_lpm_mult +0x4173 mem_lpm_mult_timeout +0x4174 mem_lpm_mult_cnt +0x4175 mem_lpm_config +0x4178 mem_lpm_xtalcnt +0x4179 mem_lpm_buckcnt +0x417a mem_lpm_ldocnt +0x417b mem_lpm_isogate +0x417c mem_lpm_isogate_final +0x417d mem_saved_gpio// should be 0x421e in REVC +0x418d mem_saved_gsel +0x4190 mem_saved_mark +0x4198 mem_saved_spidctrl +0x4199 mem_patch_ptr +0x419b mem_patch_len +0x419d mem_timers +0x41bd mem_link_key_exists +0x41be mem_link_key +0x41ce mem_hci_cmd +0x41cf mem_hci_conn_handle +0x41d0 mem_hci_plap +0x41d3 mem_hci_puap +0x41d4 mem_hci_pnap +0x41d6 mem_uartd_rxitems_got_data +0x41d7 mem_uartd_rxitems_threshold +0x41d8 mem_uartd_rx_timeout +0x41da mem_loadcode_times +0x41db mem_tx_lch +0x41dc mem_tx_len +0x41de mem_tx_power +0x41df mem_context_number +0x41e0 mem_250k_freq_enable +0x41e1 mem_rf_init_data +0x41e2 mem_app_handshake_flag +0x41e3 mem_sniff_param_interval +0x41e5 mem_sniff_param_attempt +0x41e7 mem_sniff_param_timeout +0x41e9 mem_cb_check_wakelock +0x41eb mem_cb_before_hibernate +0x41ed mem_cb_before_lpm +0x41ef mem_cb_le_process +0x41f1 mem_cb_bt_process +0x41f3 mem_cb_idle_process +0x41f5 mem_cb_bb_event_process +0x41f7 mem_cb_discovry_timeout +0x41f9 mem_cb_att_write +0x41fb mem_cb_ble_transmit +0x41fd mem_cb_event_timer +0x41ff mem_cb_bt_set_mult +0x4201 mem_cb_spi_flash_write_complate +0x4203 mem_eeprom_base +0x4205 mem_unsniff2sniff_timer_count +0x4206 mem_wake_up_delay_timer +0x4207 mem_app_connection_options +0x4208 mem_app_disconn_reason +0x420a mem_app_disconn_reason_flag +0x420c mem_lpm_delay_after_sniff +0x4210 mem_xrecord_mode +0x4211 mem_eeprom_block_size +0x4212 mem_spi_init_clk +0x4213 mem_spi_init_delay_time +0x4214 mem_spi_ncs_gpio +0x4215 mem_nv_data_ptr +0x4217 mem_nv_data_number +0x4218 mem_queue_ptr +0x421a mem_ui_led_struct_num +0x421b mem_ui_led_struct_ptr +0x421d mem_0_5_adc_io_data +0x421f mem_1v_adc_hvin_data +0x4221 mem_2v_adc_vinlpm_data +0x4223 mem_1v_adc_io_data +0x4225 mem_5v_adc_hvin_data +0x4227 mem_3v_adc_vinlpm_data +0x4229 mem_otp_adc_flag +0x422b mem_reference_voltage +0x422d mem_adc_config_flag +0x422e mem_adc_channel +0x422f mem_adc_current_value +0x4231 mem_adc_power_flag//bit0:low power falg ; bit1:no power flag +0x4232 mem_spi_write_addr +0x4235 mem_spi_write_ptr +0x4237 mem_spi_write_len +0x4239 mem_spi_write_flash_sm +0x423a mem_eeprom_wp_gpio +0x423b mem_kscan_ptr +0x423d mem_key_num_ptr +0x423d mem_keyscan_ptr +0x423f mem_power_param_ptr +0x4241 mem_24g_head_ptr +0x4243 mem_baud +0x4245 mem_hci_lt_rx_state +0x4246 mem_l2cap_xmem_start +0x4246 mem_l2cap_tx_multi_offset//0 means single packet +0x4248 mem_sdp_remote_cid +0x424a mem_rfcomm_remote_cid +0x424c mem_hid_ctrl_remote_cid +0x424e mem_hid_int_remote_cid +0x4250 mem_sdp_state +0x4251 mem_rfcomm_state +0x4252 mem_hid_control_state +0x4253 mem_hid_interrupt_state +0x4254 mem_spp_state +0x4255 mem_ML2CAP_comm_id +0x4256 mem_used_map +0x4257 mem_tx_fifo0 +0x4257 mem_tx_fifo0_map +0x4258 mem_tx_fifo0_ptr +0x425a mem_tx_fifo1 +0x425a mem_tx_fifo1_map +0x425b mem_tx_fifo1_ptr +0x425d mem_tx_fifo2 +0x425d mem_tx_fifo2_map +0x425e mem_tx_fifo2_ptr +0x4260 mem_tx_fifo3 +0x4260 mem_tx_fifo3_map +0x4261 mem_tx_fifo3_ptr +0x4263 mem_tx_fifo_end +0x4263 mem_l2cap_lpm_txbuf +0x4363 mem_l2cap_flow_ctrl_flag +0x4364 mem_l2cap_pending_item +0x4365 mem_l2cap_xmem_end +0x4365 mem_le_dsniff +0x4367 mem_le_conn_interval +0x4369 mem_le_scan_enable +0x436a mem_le_scan_interval +0x436c mem_le_scan_window +0x436e mem_le_adv_enable +0x436f mem_le_adv_data_len +0x4370 mem_le_adv_data +0x438f mem_le_scan_data_len +0x4390 mem_le_scan_data +0x43af mem_le_name_len +0x43b0 mem_le_name +0x43ce mem_le_new_map +0x43d3 mem_le_new_param +0x43d3 mem_le_new_transmitwindowsize +0x43d4 mem_le_new_transmitwindowoffset +0x43d6 mem_le_new_conninterval +0x43d8 mem_le_new_connslavelatency +0x43da mem_le_new_connsupervisiontimeout +0x43dc mem_le_txheader +0x43dd mem_le_txlen +0x43de mem_le_txpayload +0x43e0 mem_le_txcid +0x43e2 mem_le_l2cap +0x43e3 mem_le_l2cap_response +0x43e4 mem_le_txbdy +0x4403 mem_le_pcnt_tx +0x4408 mem_le_pcnt_rx +0x440d mem_le_last_mic +0x4411 mem_le_ivm +0x4415 mem_le_ivs +0x4419 mem_le_ltk +0x4429 mem_ltk_exists +0x442a mem_le_rconfirm +0x443a mem_le_srand +0x444a mem_le_iat +0x444b mem_le_rat +0x444c mem_le_preq +0x444d mem_le_preq_iocap +0x444e mem_le_preq_oob +0x444f mem_le_preq_auth +0x4450 mem_le_preq_max_keysize +0x4451 mem_le_preq_init_key_distribution +0x4452 mem_le_preq_resp_key_distribution +0x4453 mem_le_pres +0x4454 mem_le_pres_iocap +0x4455 mem_le_pres_oob +0x4456 mem_le_pres_auth +0x4457 mem_le_pres_max_keysize +0x4458 mem_le_pres_init_key_distribution +0x4459 mem_le_pres_resp_key_distribution +0x445a mem_le_search_handle_start +0x445c mem_le_search_handle_end +0x445e mem_le_att_offset +0x445e mem_le_search_att_type_length +0x445f mem_le_search_att_type +0x446f mem_le_notify_handle +0x4471 mem_le_search_uuid_length +0x4472 mem_le_search_uuid +0x4482 mem_le_adv_param +0x4482 mem_le_adv_interval +0x4484 mem_le_adv_type +0x4485 mem_le_adv_own_addr_type +0x4486 mem_le_adv_direct_addr_type +0x4487 mem_le_adv_direct_addr +0x448d mem_le_adv_channel_map +0x448e mem_le_conn_param +0x448e mem_le_conn_peer_addr_type +0x448f mem_le_conn_peer_addr +0x4495 mem_le_conn_own_addr_type +0x4496 mem_le_interval_min +0x4498 mem_le_interval_max +0x449a mem_le_latency +0x449c mem_le_timeout +0x449e mem_le_scan_params +0x449e mem_le_scan_type +0x449f mem_le_scan_own_addr_type +0x44a0 mem_le_lap +0x44a3 mem_le_uap +0x44a4 mem_le_nap +0x44a6 mem_le_local_mtu +0x44a8 mem_le_remote_mtu +0x44aa mem_le_skdm +0x44b2 mem_le_skds +0x44ba mem_le_init_superto +0x44bc mem_ui_le_uuid_table +0x44be mem_le_secure_connect_enable +0x44bf mem_le_secure_connect_flag +0x44c0 mem_le_sc_calc +0x44c1 mem_le_secure_connect_state +0x44c2 mem_le_sc_confirm_gkey_flag +0x44c3 mem_le_sc_local_key_invalid +0x44c4 mem_le_pairing_state +0x44c5 mem_le_enc_state +0x44c6 mem_le_pairing_mode +0x44c7 mem_le_tk +0x44cb mem_le_ediv +0x44cd mem_le_rand +0x44d5 mem_le_irk +0x44e5 mem_le_transmit_window +0x44e9 mem_le_configuration +0x44ea mem_le_fixed_ltk +0x44fa mem_le_pairing_handle +0x44fc mem_le_l2cap_size +0x44fe mem_le_packet_len_recved +0x44ff mem_le_tx_buff_used +0x4500 mem_le_tx_ptr0 +0x4502 mem_le_tx_ptr1 +0x4504 mem_le_tx_ptr2 +0x4506 mem_le_tx_ptr3 +0x4508 mem_le_signaling_identifier +0x4509 mem_le_l2cap_signaling_conn_param_update_rsp_result +0x450b mem_le_packet_size +0x450c mem_le_packet_llid +0x450d mem_le_payload_ptr +0x450f mem_le_md_count +0x4510 mem_lmp_version +0x4513 mem_lmp_subversion +0x4515 mem_local_name_length +0x4516 mem_local_name +0x4519 mem_local_name2 +0x4559 mem_local_name_end +0x455a mem_unsniff2sniff_timer +0x455b mem_switch_flag +0x455c mem_classic_bt_flag +0x455d mem_pn_dlci +0x455e mem_pn_max_frame_size +0x4560 memFCStemp1 +0x4561 memFCStemp2 +0x4562 memFCStemp3 +0x4563 mem_rfcomm_initiator +0x4564 mem_remote_spp_channel +0x4565 mem_HIUfcs_SPP +0x4566 mem_HIUfcs_SPP_WCredits +0x4567 mem_rfcomm_send_more_pkt +0x4568 mem_remote_credits +0x4569 mem_credit_given +0x456a mem_ms_channel +0x456b mem_credit_flag +0x456c mem_rfcomm_max_frame_size +0x456e mem_rfcomm_credit_init_data +0x456f mem_cb_receive_spp_data +0x4571 mem_nl_rx_data_src +0x4573 mem_nl_rx_len_all +0x4575 mem_ui_uuid_table +0x4577 mem_all_uuid_16bits +0x458d mem_all_uuid_128bits +0x45af mem_sdp_l2capch_ptr +0x45b1 mem_sp_local_key_invalid +0x45b2 mem_le_private_key_256 +0x45d2 mem_le_pubkey_local_x_256 +0x45f2 mem_le_pubkey_local_y_256 +0x4612 mem_sp_private_key +0x462a mem_sp_pubkey_local +0x462a mem_sp_pubkey_local_x +0x4642 mem_sp_pubkey_local_x_end +0x4642 mem_sp_pubkey_local_y +0x465a mem_ssp_enable +0x465b mem_sp_iocap_local +0x465e mem_sp_iocap_remote +0x4661 mem_flag_mode_ssp_pin +0x4662 mem_ssp_mode_flag +0x4663 mem_authentication_passkey_times +0x4664 mem_passkey_1bit +0x4665 mem_flag_pairing_state +0x4666 mem_ipc_lock_bt +0x4667 mem_ipc_lock_c51 +0x4668 mem_ipc_fifo_bt2c51 +0x4670 mem_ipc_fifo_c512bt +0x4678 mem_ui_button_timer +0x4679 mem_ui_button_last_state +0x467a mem_ui_timer_last_btclk +0x467e mem_discovery_timeout_timer_count +0x4680 mem_hid_handshake_timer_count +0x4681 memui_reconnect_mode +0x4682 mem_ui_state_map +0x4684 mem_ui_profile_supported +0x4685 mem_ui_button_timeout +0x4686 mem_ui_button_gpio +0x4687 mem_discovery_timeout +0x4689 mem_pin_length +0x468a mem_pin +0x469a mem_antl_lpm_interval +0x469c mem_antl_adv_interval +0x469e mem_antl_slow_adv_lpm_interval +0x46a0 mem_antl_slow_adv_adv_interval +0x46a2 mem_antl_led_style +0x46a2 mem_antl_led_type +0x46a3 mem_antl_led_blink_count +0x46a4 mem_antl_led_gpio +0x46a5 mem_antl_led_on_time +0x46a7 mem_antl_led_off_time +0x46a9 mem_antl_led_cb_on +0x46ab mem_antl_led_cb_off +0x46ad mem_antl_buzzer_style +0x46ad mem_antl_buzzer_type +0x46ae mem_antl_buzzer_blink_count +0x46af mem_antl_buzzer_gpio +0x46b0 mem_antl_buzzer_on_time +0x46b2 mem_antl_buzzer_off_time +0x46b4 mem_antl_buzzer_cb_on +0x46b6 mem_antl_buzzer_cb_off +0x46b8 mem_antl_fast_adv_led_style +0x46b8 mem_antl_fast_adv_led_type +0x46b9 mem_antl_fast_adv_led_blink_count +0x46ba mem_antl_fast_adv_led_gpio +0x46bb mem_antl_fast_adv_led_on_time +0x46bd mem_antl_fast_adv_led_off_time +0x46bf mem_antl_slow_adv_led_style +0x46bf mem_antl_slow_adv_led_type +0x46c0 mem_antl_slow_adv_led_blink_count +0x46c1 mem_antl_slow_adv_led_gpio +0x46c2 mem_antl_slow_adv_led_on_time +0x46c4 mem_antl_slow_adv_led_off_time +0x46c6 mem_antl_power_starting_led_style +0x46c6 mem_antl_power_starting_led_type +0x46c7 mem_antl_power_starting_led_blink_count +0x46c8 mem_antl_power_starting_led_gpio +0x46c9 mem_antl_power_starting_led_on_time +0x46cb mem_antl_power_starting_led_off_time +0x46cd mem_antl_power_starting_buzzer_style +0x46d4 mem_antl_power_off_led_style +0x46d4 mem_antl_power_off_led_type +0x46d5 mem_antl_power_off_led_link_count +0x46d6 mem_antl_power_off_led_gpio +0x46d7 mem_antl_power_off_led_on_time +0x46d9 mem_antl_power_off_led_off_time +0x46db mem_antl_power_off_buzzer_style +0x46db mem_antl_power_off_buzzer_type +0x46dc mem_antl_power_off_buzzer_link_count +0x46dd mem_antl_power_off_buzzer_gpio +0x46de mem_antl_power_off_buzzer_on_time +0x46e0 mem_antl_power_off_buzzer_off_time +0x46e2 mem_antl_alert_led_stlye +0x46e9 mem_antl_alert_buzzer_stlye +0x46e9 mem_antl_alert_buzzer_type +0x46ea mem_antl_alert_buzzer_blink_count +0x46eb mem_antl_alert_buzzer_gpio +0x46ec mem_antl_alert_buzzer_on_time +0x46ee mem_antl_alert_buzzer_off_time +0x46f0 mem_antl_key_led_style +0x46f0 mem_antl_key_led_type +0x46f1 mem_antl_key_led_blink_count +0x46f2 mem_antl_key_led_gpio +0x46f3 mem_antl_key_led_on_time +0x46f5 mem_antl_key_led_off_time +0x46f7 mem_antl_key_buzzer_style +0x46fe mem_antl_queue_width +0x46ff mem_antl_queue_depth +0x4700 mem_antl_queue_curr_num +0x4701 mem_antl_queue_read_ptr +0x4702 mem_antl_queue_write_ptr +0x4703 mem_antl_queue_buff +0x4753 mem_antl_key_scan_enable +0x4754 mem_antl_led_num +0x4755 mem_antl_led_gpio_map +0x4759 mem_antl_power_param +0x4759 mem_antl_power_state +0x475a mem_antl_power_timer +0x475b mem_antl_power_off_timeout +0x475c mem_antl_power_starting_timeout +0x475d mem_antl_power_off_cb +0x475f mem_antl_power_starting_cb +0x4761 mem_antl_power_standby_cb +0x4763 mem_event_button_up_cb +0x4765 mem_antl_key_num +0x4766 mem_cb_antl_key +0x4768 mem_antl_key_conf0 +0x476c mem_antl_key0_press +0x477b mem_antl_key0_release +0x478a mem_antl_conn_updata_procedure_state +0x478b mem_client_characteristic_configuration_descriptor +0x478d mem_adc_timer +0x478f mem_antl_conn_update_timer +0x4790 mem_antl_send_updata_le_param_timer +0x4791 mem_antl_le_sleep_timer +0x4793 mem_antl_fast_adv_timer +0x4795 mem_antl_fast_adv_timeout +0x4797 mem_antl_le_sleep_timeout +0x4799 mem_double_click_timer +0x479a mem_butten_click_cnt +0x479b mem_antl_led_state +0x479c mem_antl_buzzer_state +0x479d mem_antl_key_state +0x479e mem_antl_lost_mode +0x479f mem_alarm_config +0x47a0 mem_alarm_config_notfy_cnt +0x47a1 mem_buzzer_pwm_conf +0x47a7 mem_adc_timeout +0x47a9 mem_voltage_remain_percent +0x47aa mem_battery_calculate_set +0x47aa mem_battery_full_voltage +0x47ac mem_battery_empty_voltage +0x47ae mem_battery_low_voltage +0x47b0 mem_battery_current_voltage +0x47b2 mem_rx_window_sniff_inc +0x47b4 mem_interval_increment +0x47b6 mem_antl_le_interval_min +0x47b8 mem_antl_le_interval_max +0x47ba mem_antl_le_latency +0x47bc mem_antl_le_timeout +0x47be mem_antl_le_unnormal_interval_min +0x47c0 mem_antl_le_unnormal_interval_max +0x47c2 mem_antl_le_unnormal_latency +0x47c4 mem_antl_le_unnormal_timeout +0x47c6 mem_AntiLost_le_att_list +0x469a mem_car_hard_soft_switch +0x469b mem_car_queue_each_size +0x469c mem_car__queue_length +0x469d mem_car_queue_curr_num +0x469e mem_car_queue_read_ptr +0x469f mem_car_queue_write_ptr +0x46a0 mem_car_queue_ele +0x4718 mem_car_pop_queue_buff +0x472c mem_car_led_num +0x472d mem_car_led_map +0x4737 mem_car_style1_led_type +0x4738 mem_car_style1_blink_count +0x4739 mem_car_style1_struct_led_gpio +0x473a mem_car_style1_on_time +0x473c mem_car_style1_off_time +0x473e mem_car_style1_cb_ledon +0x4740 mem_car_style1_cb_ledoff +0x4742 mem_car_style2_led_type +0x4743 mem_car_style2_blink_count +0x4744 mem_car_style2_struct_led_gpio +0x4745 mem_car_style2_on_time +0x4747 mem_car_style2_off_time +0x4749 mem_car_style2_cb_ledon +0x474b mem_car_style2_cb_ledoff +0x474d mem_le_receive_data +0x474d mem_le_receive_packet_head +0x474f mem_le_receive_cmd +0x4750 mem_le_receive_length +0x4752 mem_le_receive_payload +0x475c mem_le_receive_checksum +0x475d mem_motor1_status +0x475e mem_motor1_speed +0x475f mem_motor2_status +0x4760 mem_motor2_speed +0x4761 mem_motor3_status +0x4762 mem_motor3_speed +0x4763 mem_motor1_pwm_set +0x4763 mem_motor1_pwm_pin1_set +0x4764 mem_motor1_pwm_pin2_set +0x4765 mem_motor1_pwm_pin_set +0x4766 mem_motor1_pwm_channel_set +0x4767 mem_motor1_pwm_freq_set +0x476a mem_motor1_pwm_dute_set +0x476b mem_motor2_pwm_set +0x476b mem_motor2_pwm_pin1_set +0x476c mem_motor2_pwm_pin2_set +0x476d mem_motor2_pwm_pin_set +0x476e mem_motor2_pwm_channel_set +0x476f mem_motor2_pwm_freq_set +0x4772 mem_motor2_pwm_dute_set +0x4773 mem_motor3_pwm_set +0x4773 mem_motor3_pwm_pin1_set +0x4774 mem_motor3_pwm_pin2_set +0x4775 mem_motor3_pwm_pin_set +0x4776 mem_motor3_pwm_channel_set +0x4777 mem_motor3_pwm_freq_set +0x477a mem_motor3_pwm_dute_set +0x477b mem_motor_select_p_n +0x477c mem_car_motor_status +0x477d mem_car_motor_speed +0x477e mem_motor_pwm_set +0x477e mem_motor_pwm_pin1_set +0x477f mem_motor_pwm_pin2_set +0x4780 mem_motor_pwm_pin_set +0x4781 mem_motor_pwm_channel_set +0x4782 mem_motor_pwm_freq_set +0x4785 mem_motor_pwm_dute_set +0x4786 mem_ir_rx_gpio +0x4787 mem_ir_data +0x4789 mem_ir_rx_buf +0x478b mem_ir_receive_clkn +0x478f mem_ir_notify_data +0x4792 mem_ir_notify_data_head +0x4797 mem_ir_notify_data_payload +0x4799 mem_ir_notify_data_check_sum +0x479a mem_car_ir_breakdown_check_timer +0x479b mem_car_ir_breakdown_flag +0x479c mem_car_led_control +0x479c mem_car_led1_status +0x479d mem_car_led2_status +0x479e mem_car_led3_status +0x479f mem_car_led4_status +0x47a0 mem_car_led5_status +0x47a1 mem_car_led6_status +0x47a2 mem_car_led7_status +0x47a3 mem_car_led8_status +0x47a4 mem_car_led_control_timer +0x47a5 mem_car_led_blink_status +0x47a6 mem_car_led_no +0x47a7 mem_car_info_request +0x47aa mem_car_info_request_head +0x47af mem_car_info_request_payload +0x47b7 mem_car_info_request_checksum +0x47b8 mem_car_config_param +0x47b8 mem_car_config_setting_flag +0x47b9 mem_car_config_device_select +0x47ba mem_car_config_motor_layout +0x47bb mem_car_config_ir_enable +0x47bc mem_car_config_ir_rx_gpio +0x47bd mem_car_config_pairing_led_conn_status +0x47be mem_car_config_pairing_led_gpio +0x47bf mem_car_config_led_num +0x47c0 mem_car_config_blood_led_gpio +0x47c0 mem_car_config_blood_led1_gpio +0x47c1 mem_car_config_blood_led2_gpio +0x47c2 mem_car_config_blood_led3_gpio +0x47c3 mem_car_config_blood_led4_gpio +0x47c4 mem_car_config_blood_led5_gpio +0x47c5 mem_car_config_blood_led6_gpio +0x47c6 mem_car_config_blood_led7_gpio +0x47c7 mem_car_config_blood_led8_gpio +0x47c8 mem_car_config_bat_notify_enable +0x47c9 mem_car_config_low_voltage_led_gpio +0x47ca mem_car_config_low_voltage_percent +0x47cb mem_car_config_soft_switch_enable +0x47cc mem_car_config_soft_switch_gpio +0x47cd mem_car_notify_vdd_count +0x47ce mem_car_notify_vdd_timer +0x47cf mem_car_notify_vdd_value_last +0x47d0 mem_car_notify_vdd_percent +0x47d1 mem_car_working_flag +0x47d2 mem_low_bat_flag +0x47d3 mem_notify_bat_packet +0x47d6 mem_notify_bat_head +0x47db mem_notify_bat_payload +0x47dc mem_notify_bat_check_sum +0x47dd mem_vdd_notify_flag +0x47de mem_car_current_vdd_value_temp +0x47e0 mem_car_last_vdd_value +0x47e2 mem_vdd_calculate_set +0x47e2 mem_vdd_full_vol +0x47e4 mem_vdd_empty_vol +0x47e6 mem_vdd_low_vol +0x47e8 mem_vdd_now_vol +0x47ea mem_car_24g_status +0x47eb mem_car_24g_no_data_timeout_count +0x47ed mem_car_24g_no_data_timeout_timer +0x47ef mem_car_24g_ir_receive_attack_count +0x47f0 mem_car_24g_go_die_flag +0x47f1 mem_car_attack_shake_timer +0x47f2 mem_car_attack_shake_flag +0x47f3 mem_car_soft_power +0x47f3 mem_car_power_state +0x47f4 mem_car_power_timer +0x47f5 mem_car_power_off_timeout +0x47f6 mem_car_power_starting_timeout +0x47f7 mem_car_power_off_cb +0x47f9 mem_car_power_starting_cb +0x47fb mem_car_power_standby_cb +0x47fd mem_car_ui_button_up_cb +0x47ff mem_car_le_att_list +0x49f3 mem_car_moto1_blank_timer +0x49f4 mem_car_moto2_blank_timer +0x49f5 mem_car_moto3_blank_timer +0x49f6 mem_car_24g_received_pac +0x49f7 mem_24g_car_head_ptr +0x469a mem_light_pwm0 +0x469b mem_light_pwm1 +0x469c mem_light_pwm2 +0x469d mem_light_pwm3 +0x469e mem_light_pwm4 +0x469f mem_light_pwm5 +0x46a0 mem_light_pairing_enable +0x46a1 mem_light_pairing_timer +0x46a3 mem_light_cnum +0x46a4 mem_light_next_record +0x46a5 mem_light_clist +0x46f5 mem_light_crr_cmd_count +0x46f6 mem_curr_packet_num +0x469a mem_lightc_led_gpio +0x469b mem_lightc_row +0x46a1 mem_lightc_col +0x46a7 mem_adv_time +0x46a8 mem_cmd0_string +0x46bc mem_cmd1_string +0x46d0 mem_cmd2_string +0x46e4 mem_cmd3_string +0x46f8 mem_cmd4_string +0x470c mem_cmd5_string +0x4720 mem_cmd6_string +0x4734 mem_cmd7_string +0x4748 mem_cmd8_string +0x475c mem_cmd9_string +0x4770 mem_cmd10_string +0x4784 mem_cmd11_string +0x4798 mem_cmd12_string +0x47ac mem_cmd13_string +0x47c0 mem_cmd14_string +0x47d4 mem_cmd15_string +0x47e8 mem_cmd16_string +0x47fc mem_cmd17_string +0x4810 mem_cmd18_string +0x4824 mem_cmd19_string +0x4838 mem_cmd20_string +0x469a mem_soft_version_num +0x469c mem_module_wake_up_gpio +0x469d mem_module_state_gpio +0x469e mem_module_connect_state_gpio +0x469f mem_current_packet_length +0x46a1 mem_module_state +0x46a2 mem_module_mcu_wake_pin +0x46a3 mem_module_mcu_wake_delay_us +0x46a7 mem_module_spp_lpm_mult +0x46a8 mem_module_le_lpm_mult +0x46a9 mem_module_bluetooth_stauts_by_command +0x46aa mem_module_uart_rx_buffer +0x46ac mem_module_uart_rx_buffer_end +0x46ae mem_module_uart_tx_buffer +0x46b0 mem_module_uart_tx_buffer_end +0x46b2 mem_module_read_vdd_flag +0x46b3 mem_module_read_vdd_count +0x46b4 mem_module_vdd_quotient +0x46b5 mem_module_vdd_remainder +0x46b6 mem_module_le_rx_data_len +0x46b7 mem_module_le_rx_data_address +0x46b9 mem_module_le_rx_data_handle +0x46bb mem_module_data_write_handle +0x46bd mem_module_data_write_handle2 +0x46bf mem_module_flag +0x46c0 mem_module_hci_notify_len +0x46c1 mem_module_hci_notify_handle +0x46c3 mem_module_hci_nofiy_addr +0x46c5 mem_last_transmite_clock +0x46c9 mem_module_uuid_list +0x47f5 mem_module_uuid_list_end +0x47f5 mem_module_le_att_list +0x4a4d mem_module_le_att_list_end +0x4a4d mem_module_nv_data +0x4a4d mem_module_nv_data0 +0x4a6f mem_module_nv_data1 +0x4a91 mem_module_nv_data2 +0x4ab3 mem_module_nv_data3 +0x4ad5 mem_module_nv_data4 +0x469a mem_mouse_key +0x469b mem_mouse_x +0x469d mem_mouse_y +0x469f mem_mouse_z +0x46a0 mem_mouse_tz +0x46a1 mem_mouse_xy_h +0x46a2 mem_sensor_shutter_hi +0x46a3 mem_sensor_shutter_lo +0x46a4 mem_sensor_smart_flag +0x46a5 mem_sensor_squal_reg +0x46a6 mem_sensor_iqc +0x46a7 mem_mouse_move_flag +0x46a8 mem_mouse_direct_timeout +0x46aa mem_mouse_no_data_timeout +0x46ac mem_mouse_discovery_timer +0x46ae mem_mouse_direct_timer +0x46b0 mem_mouse_no_data_timer +0x46b2 mem_mouse_blank_data_timer +0x46b4 mem_mouse_send_blank_timer +0x46b5 mem_mouse_cpi_count +0x46b6 mem_mouse_dpi_button_state +0x46b7 mem_wheel_tb_old_pinlevel +0x46b8 mem_wheel_tb_new_pinlevel +0x46b9 mem_wheel_tog +0x46ba mem_mouse_tz_data +0x46bb mem_mouse_tz_data_count +0x46bc mem_mouse_tz_data_count1 +0x46bd mem_mwheel_b_old_pinlevel +0x46be mem_mwheel_b_new_pinlevel +0x46bf mem_mwheel_tog +0x46c0 mem_mouse_z_data +0x46c1 mem_mouse_z_data_count +0x46c2 mem_mouse_z_data_count1 +0x46c3 mem_reconn_mode +0x46c4 mem_mouse_statue_led_timer +0x46c5 mem_le_connect_statue_flag +0x46c6 mem_le_start_encrypt_timer +0x46c7 mem_device_addr_temp +0x46ce mem_adc_read_timer +0x46cf mem_adc_low_volatage_led_timer_count +0x46d0 mem_adc_reference_voltage +0x46d2 mem_device_number +0x46d3 mem_mouse_flag +0x46d5 mem_mouse_function_enable +0x46d7 mem_combination_select_device_timer_init +0x46d8 mem_combination_select_device_count +0x46d9 mem_select_device_button_statue +0x46da mem_combination_ui_button_count +0x46db mem_bt_discovey_button_statue +0x46dc mem_sensor_reset_gpio +0x46dd mem_sensor_id1 +0x46de mem_sensor_id2 +0x46df mem_mouse_dpi_led_delay_count +0x46e0 mem_config_sensor_type +0x46e1 mem_config_sensor_motion +0x46e2 mem_lbutton_gpio +0x46e3 mem_rbutton_gpio +0x46e4 mem_mbutton_gpio +0x46e5 mem_bk_button_gpio +0x46e6 mem_fw_button_gpio +0x46e7 mem_dpi_button_gpio +0x46e8 mem_whee_a_data_gpio +0x46e9 mem_whee_b_data_gpio +0x46ea mem_whee_ta_data_gpio +0x46eb mem_whee_tb_data_gpio +0x46ec mem_config_bt_button_gpio +0x46ed mem_config_select_device_button_gpio +0x46ee mem_config_paraing_led_gpio +0x46ef mem_config_low_voltage_alarm_gpio +0x46f0 mem_config_device1_led_gpio +0x46f1 mem_config_device2_led_gpio +0x46f2 mem_config_device3_led_gpio +0x46f3 mem_sensor_data_gpio +0x46f4 mem_dpi_led_gpio +0x46f5 mem_config_function_enable +0x46f6 mem_config_sensor_angle +0x46f7 mem_select_sensor_angle_gpio +0x46f8 mem_select_adc_gpio +0x46f9 mem_config_end +0x46f9 mem_btclk_sensor +0x46fd mem_wire_usb_interval +0x46fe mem_mouse_mode_flag +0x46ff mem_usb_addr +0x4700 mem_flash_base +0x4703 mem_24g_device_number +0x4704 mem_24g_enter_lpm_timer +0x4705 mem_mouse_1step_up_count +0x4706 mem_mouse_2step_up_count +0x4707 mem_24g_pairing_timer_count +0x4709 mem_mouse_vdd_calculate_set +0x4709 mem_mouse_vdd_full_vol +0x470b mem_mouse_vdd_empty_vol +0x470d mem_mouse_vdd_low_vol +0x470f mem_mouse_vdd_now_vol +0x4711 mem_mouse_sensor_timer_count +0x4712 mem_sensor_led_style +0x4713 mem_mouse_led_type +0x4714 mem_mouse_blink_count +0x4715 mem_mouse_struct_led_gpio +0x4716 mem_mouse_on_time +0x4718 mem_mouse_off_time +0x471a mem_mouse_cb_ledon +0x471c mem_mouse_cb_ledoff +0x471e mem_reconn_times +0x471f mem_reconn_times_init +0x4720 mem_mouse_information_start +0x4720 mem_device_flag +0x4721 mem_device1_type +0x4722 mem_device1_addr +0x4728 mem_device1_link_key +0x4738 mem_device1_locall_addr +0x473e mem_device2_type +0x473f mem_device2_addr +0x4745 mem_device2_link_key +0x4755 mem_device2_locall_addr +0x475b mem_device3_type +0x475c mem_device3_addr +0x4762 mem_device3_link_key +0x4772 mem_device3_locall_addr +0x4778 mem_store_flag +0x477a mem_mouse_dpi +0x477b mem_mouse_24g_addr +0x477f mem_mouse_information_end +0x477f mem_mouse_dpi_seting +0x477f mem_320x_dpi_1 +0x4780 mem_320x_dpi_2 +0x4781 mem_320x_dpi_3 +0x4782 mem_320x_dpi_4 +0x4783 mem_3212_dpi_1 +0x4784 mem_3212_dpi_2 +0x4785 mem_3212_dpi_3 +0x4786 mem_3212_dpi_4 +0x4787 mem_3610_dpi_1 +0x4788 mem_3610_dpi_2 +0x4789 mem_3610_dpi_3 +0x478a mem_3610_dpi_4 +0x478b mem_mouse_24g_enter_lpm_enable +0x478c mem_24g_ms_head_ptr +0x469a mem_remote_car_hard_soft_switch +0x469b mem_remote_car_queue_each_size +0x469c mem_remote_car_queue_length +0x469d mem_remote_car_queue_curr_num +0x469e mem_remote_car_queue_read_ptr +0x469f mem_remote_car_queue_write_ptr +0x46a0 mem_remote_car_queue_ele +0x46fa mem_remote_style_led_type +0x46fb mem_remote_style_blink_count +0x46fc mem_remote_style_struct_led_gpio +0x46fd mem_remote_style_on_time +0x46ff mem_remote_style_off_time +0x4701 mem_remote_style_cb_ledon +0x4703 mem_remote_style_cb_ledoff +0x4705 mem_remote_car_led_num +0x4706 mem_remote_car_led_map +0x470e mem_remote_car_keyscan +0x470e mem_remote_car_key_num +0x470f mem_cb_remote_car_keyscan +0x4711 mem_remote_car_key_conf0 +0x4711 mem_remote_car_key_conf0_pin +0x4712 mem_remote_car_key_conf1 +0x4712 mem_remote_car_key_conf1_pin +0x4713 mem_remote_car_key_conf2 +0x4713 mem_remote_car_key_conf2_pin +0x4714 mem_remote_car_key_conf3 +0x4714 mem_remote_car_key_conf3_pin +0x4715 mem_remote_car_key_conf4 +0x4715 mem_remote_car_key_conf4_pin +0x4716 mem_remote_car_key_conf5 +0x4716 mem_remote_car_key_conf5_pin +0x4717 mem_remote_car_key_conf6 +0x4717 mem_remote_car_key_conf6_pin +0x4718 mem_rocker_negative_flag +0x4719 mem_rocker_work_status +0x471a mem_current_vdd_value_default_mid_x +0x471c mem_current_vdd_value_default_mid_y +0x471e mem_current_vdd_value_default_mid_temp +0x4720 mem_current_vdd_default_range +0x4722 mem_rocker_last_status +0x4724 mem_rocker_status +0x4724 mem_rocker_x_status +0x4725 mem_rocker_y_status +0x4726 mem_remote_car_config_param +0x4726 mem_remote_car_config_setting_flag +0x4727 mem_remote_car_config_key_map +0x4728 mem_remote_car_config_layout +0x4729 mem_remote_car_config_connect_led_gpio +0x472a mem_remote_car_config_check_way +0x472b mem_remote_car_config_soft_switch_enable +0x472c mem_remote_car_config_soft_switch_gpio +0x472d mem_remote_car_config_timeout_shutdown_enable +0x472e mem_remote_car_24g_motor_packet +0x472e mem_remote_car_24g_motor_packet_lenght +0x472f mem_remote_car_24g_motor_send_packet_head +0x4731 mem_remote_car_24g_motor_send_cmd +0x4732 mem_remote_car_24g_motor_send_length +0x4734 mem_remote_car_24g_motor_send_payload +0x4734 mem_remote_car_24g_motor1_payload +0x4736 mem_remote_car_24g_motor2_payload +0x4738 mem_remote_car_24g_motor3_payload +0x473a mem_remote_car_24g_motor_send_checksum +0x473b mem_remote_car_24g_fire_packet +0x473b mem_remote_car_24g_fire_packet_lenght +0x473c mem_remote_car_24g_fire_send_packet_head +0x473e mem_remote_car_24g_fire_send_cmd +0x473f mem_remote_car_24g_fire_send_length +0x4741 mem_remote_car_24g_fire_send_payload +0x4743 mem_remote_car_24g_fire_send_checksum +0x4744 mem_remote_car_24g_tx_temp +0x4753 mem_remote_car_no_data_timeout +0x4755 mem_remote_car_no_data_timer +0x4757 mem_remote_car_soft_power +0x4757 mem_remote_car_power_state +0x4758 mem_remote_car_power_timer +0x4759 mem_remote_car_power_off_timeout +0x475a mem_remote_car_power_starting_timeout +0x475b mem_remote_car_power_off_cb +0x475d mem_remote_car_power_starting_cb +0x475f mem_remote_car_power_standby_cb +0x4761 mem_remote_key_status +0x4762 mem_remote_car_24g_status +0x4763 mem_remote_car_24g_auto_work_step +0x4764 mem_remote_car_24g_pair_success_flag +0x4765 mem_remote_car_24g_enter_lpm_enable +0x4766 mem_remote_car_empty_packet +0x4767 mem_24g_RC_head_ptr +0x469a mem_shutter_bluetooth_type +0x469b mem_shutter_config_enable +0x469c mem_shutter_config_otp_base_address +0x469e mem_shutter_config_size +0x469f mem_shutter_config_select_gpio1 +0x46a0 mem_shutter_config_select_gpio2 +0x46a1 mem_shutter_config_select_gpio3 +0x46a2 mem_shutter_config_user_otp_address +0x46a4 mem_shutter_config_eeprom_offset_addr +0x46a6 mem_shutter_config_eeprom_start_flag +0x46a8 mem_shutter_config_user_size +0x46a9 mem_shutter_config_label +0x46aa mem_shutter_config_otp_addr +0x46ac mem_classic_shutter_cable_unplug_conut +0x46ad mem_classic_shutter_hid_disconn_count +0x46ae mem_classic_shutter_random_mac_offset_addr +0x46b0 mem_ble_shutter_enable_notify +0x46b1 mem_ble_shutter_reconn_dav_interval +0x46b3 mem_ble_shutter_discovery_adv_interval +0x46b5 mem_ble_shutter_reconn_timeout +0x46b7 mem_ble_shutter_reconn_timer +0x46b9 mem_ble_shutter_reconn_blink_on_time +0x46bb mem_ble_shutter_reconn_blink_off_time +0x46bd mem_ble_shutter_discovery_blink_on_time +0x46bf mem_ble_shutter_discovery_blink_off_time +0x46c1 mem_ble_shutter_interval_min +0x46c3 mem_ble_shutter_interval_max +0x46c5 mem_ble_shutter_latency +0x46c7 mem_ble_shutter_timeout +0x46c9 mem_ble_shutter_interval_min_new +0x46cb mem_ble_shutter_interval_max_new +0x46cd mem_ble_shutter_latency_new +0x46cf mem_ble_shutter_timeout_new +0x46d1 mem_classic_shutter_discovery_timeout +0x46d3 mem_classic_shutter_connect_timeout +0x46d5 mem_ble_shutter_discovery_timeout +0x46d7 mem_ble_shutter_connect_timeout +0x46d9 mem_shutter_sleep_timeout +0x46db mem_shutter_sleep_timer +0x46dd mem_shutter_hard_soft_switch_case +0x46de mem_shutter_soft_switch_button_gpio +0x46df mem_shutter_soft_switch_power_state +0x46e0 mem_shutter_soft_switch_poweron_time +0x46e1 mem_shutter_soft_switch_poweroff_time +0x46e2 mem_shutter_soft_switch_poweron_callback_function +0x46e4 mem_shutter_soft_switch_poweroff_callback_function +0x46e6 mem_shutter_keyscan +0x46e6 mem_shutter_key_num +0x46e7 mem_cb_shutter_keycan +0x46e9 mem_shutter_key_conf0 +0x46ea mem_shutter_key_conf1 +0x46eb mem_shutter_key_conf2 +0x46ec mem_shutter_key_conf3 +0x46ed mem_shutter_key_conf4 +0x46ee mem_shutter_key_conf5 +0x46ef mem_shutter_key_conf6 +0x46f0 mem_shutter_key_conf7 +0x46f1 mem_key0_press +0x46f6 mem_key1_press +0x46fb mem_key2_press +0x4700 mem_key3_press +0x4705 mem_key4_press +0x470a mem_key5_press +0x470f mem_key6_press +0x4714 mem_key7_press +0x4719 mem_key0_release +0x471e mem_key1_release +0x4723 mem_key2_release +0x4728 mem_key3_release +0x472d mem_key4_release +0x4732 mem_key5_release +0x4737 mem_key6_release +0x473c mem_key7_release +0x4741 mem_ble_data_buffer1 +0x4746 mem_ble_data_buffer2 +0x474b mem_ble_data_buffer3 +0x4750 mem_ble_data_buffer4 +0x4755 mem_ble_data_buffer5 +0x475a mem_ble_data_buffer6 +0x475f mem_ble_data_buffer7 +0x4764 mem_ble_data_buffer8 +0x4769 mem_ble_data_buffer9_58 +0x479b mem_classic_data_buffer +0x47a0 mem_classic_data_buffer1 +0x47a5 mem_classic_data_buffer2 +0x47aa mem_classic_data_buffer3 +0x47af mem_classic_data_buffer4 +0x47b4 mem_classic_data_buffer5 +0x47b9 mem_classic_data_buffer6 +0x47be mem_classic_data_buffer7 +0x47c3 mem_classic_data_buffer8 +0x47c8 mem_classic_data_buffer9_58 +0x47fa mem_queue_each_size +0x47fb mem_queue_length +0x47fc mem_queue_curr_num +0x47fd mem_queue_read_ptr +0x47fe mem_queue_write_ptr +0x47ff mem_queue_ele +0x481f mem_shutter_nv_data +0x48c9 mem_shutter_led_struct_app_led +0x48c9 mem_shutter_led_struct_app_led_type +0x48ca mem_shutter_led_struct_app_led_blink_count +0x48cb mem_shutter_led_struct_app_led_gpio +0x48cc mem_shutter_led_struct_app_led_on_time +0x48ce mem_shutter_led_struct_app_led_off_time +0x48d0 mem_shutter_led_struct_app_led_on_callback +0x48d2 mem_shutter_led_struct_app_led_off_callback +0x48d4 mem_shutter_power_off_led_style +0x48d4 mem_shutter_power_off_led_style_type +0x48d5 mem_shutter_power_off_led_style_blink_count +0x48d6 mem_shutter_power_off_led_style_gpio +0x48d7 mem_shutter_power_off_led_style_on_time +0x48d9 mem_shutter_power_off_led_style_off_time +0x48db mem_shutter_power_off_led_style_on_callback +0x48dd mem_shutter_power_off_led_style_off_callback +0x48df mem_shutter_soft_swtich_botton_down +0x48e0 mem_shutter_soft_swtich_led_struct_temp +0x48eb mem_shutter_power_off_timeout +0x48ec mem_shutter_power_off_timer +0x469a mem_24g_dongle_head_ptr Index: 1066_OTP_FLASH/output/otp.dat =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/otp.dat (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/otp.dat (working copy) @@ -0,0 +1,8 @@ +00 +02 +aa +55 +00 +00 +b3 +23 Index: 1066_OTP_FLASH/output/program.lis =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/program.lis (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/program.lis (working copy) @@ -0,0 +1,32600 @@ +include "bt_format " +org 0x0000 +0000 20402978 call initialize_radio_cont + 1 +0001 58000000 setarg 0x0 +0002 600181f6 store 3 ,mem_addr_hi +0003 2040000a call spid_b_init_flash +0004 2040650b call spid_unlock_flash +0005 d84000ab arg 0xab ,temp +0006 20406556 call spid_write_flash_common +0007 da606578 arg spid_load_flash ,regc +0008 20406429 call read_first_block +0009 2020643c branch load_storage + +spid_b_init_flash: +000a 70808640 hjam 0x40 ,core_spid_ctrl +000b 70808700 hjam 0x0 ,core_spid_delay +000c 68108081 hfetch 1 ,core_gpio_sel1 +000d 793ffe00 set0 0 ,pdata +000e 793ffe01 set0 1 ,pdata +000f 79207e03 set1 3 ,pdata +0010 60108081 hstore 1 ,core_gpio_sel1 +0011 58000000 setarg 0 +0012 600201f5 store 4 ,mem_spid_tbuf +0013 20600000 rtn +org 0x2000 + +start: +2000 20402abc call lpmstate + +soft_reset: +2001 44804000 bpatch patch00_0 ,mem_patch00 +2002 20800000 clear_stack +2003 2040640d call spi_ncs_gpio_init +2004 2040296c call initialize_radio +2005 204065a3 call iicd_init_12m +2006 20402a96 call init_param +2007 20404d6a call l2cap_init +2008 4480c000 bpatch patch00_1 ,mem_patch00 +2009 20406a03 call rfcomm_init +200a 20405cf6 call init_lmp +200b 20407ccc call ui_init +200c 204032d8 call app_init +200d 2455e89c ncall load_chip_option ,wake +200e 44814000 bpatch patch00_2 ,mem_patch00 +200f 2055b2e3 call app_lpm_init ,wake +2010 2040756a call publickey_init +2011 2055ab41 call lpm_recover_clk ,wake + +main_loop: +2012 4481c000 bpatch patch00_3 ,mem_patch00 +2013 204076dc call sp_calc_sequence +2014 20407aaf call sp_calc_sequence_256 +2015 2040756d call sp_calc_sequence_256_check +2016 2040535c call le_dispatch +2017 44824000 bpatch patch00_4 ,mem_patch00 +2018 20402038 call idle_dispatch +2019 204032ed call app_process_idle +201a 2040208f call inquiry_dispatch +201b 204022f8 call inquiry_scan_dispatch +201c 2040236a call page_scan_dispatch +201d 20402021 call connection_dispatch +201e 20402b6a call lpm_dispatch +201f 20402c72 call g24_dispatch +2020 20202012 branch main_loop + +connection_dispatch: +2021 20402026 call connection_incontext +2022 c6848000 rtnmark0 mark_context +2023 793f8009 set0 mark_context ,mark +2024 20402223 call context_save +2025 202053ce branch le_disable + +connection_incontext: +2026 4482c000 bpatch patch00_5 ,mem_patch00 +2027 2040225e call context_search_insniff +2028 2422a02f nbranch connection_nosniff ,zero +2029 2040220a call context_load +202a 1a208c01 add rega ,coffset_mode ,contr +202b e8c08000 ifetch 1 ,contr +202c c2805360 bbit1 mode_le ,le_conn_dispatch +202d c280a166 bbit1 mode_master ,master_dispatch +202e 202023cf branch slave_dispatch + +connection_nosniff: +202f 2040222b call context_get_next +2030 1f227c00 copy loopcnt ,null +2031 20628000 rtn zero +2032 2040220a call context_load +2033 68008030 fetch 1 ,mem_state +2034 c281a0d3 bbit1 state_inpage ,master_page +2035 68008031 fetch 1 ,mem_mode +2036 c280a166 bbit1 mode_master ,master_dispatch +2037 202023cf branch slave_dispatch + +idle_dispatch: +2038 6800c1ce fetch 1 ,mem_hci_cmd +2039 207a0000 rtn blank +203a c000a048 beq hci_cmd_inquiry ,idle_inquiry +203b c001204d beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +203c c001a050 beq hci_cmd_remote_name_req ,idle_remote_name_req +203d c002a055 beq hci_cmd_create_conn ,idle_create_conn +203e c00da045 beq hci_cmd_le_create_conn ,idle_le_create_conn +203f 20402257 call context_search_conn_handle +2040 20628000 rtn zero +2041 2040225a call context_search_plap +2042 20628000 rtn zero + +idle_exit: +2043 7041ce00 jam 0 ,mem_hci_cmd +2044 20600000 rtn + +idle_le_create_conn: +2045 70049b1b jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +2046 7041ce00 jam 0 ,mem_hci_cmd +2047 20600000 rtn + +idle_inquiry: +2048 7920001c set1 mark_inquiry_on ,mark +2049 793f801e set0 mark_inquiry_trainb ,mark +204a 70008fff jam param_ninquiry ,mem_ninqy_index +204b 70008d1f jam 31 ,mem_nfreq_index_inq +204c 20202043 branch idle_exit + +idle_inquiry_cancel: +204d 793f801c set0 mark_inquiry_on ,mark +204e 18003600 force 0 ,stop_watch +204f 20202043 branch idle_exit + +idle_remote_name_req: +2050 2040225a call context_search_plap +2051 20628000 rtn zero +2052 18000401 force lmp_name_req ,temp +2053 70016e05 jam 5 ,mem_nameres_cnt +2054 2020205c branch idle_start_page + +idle_create_conn: +2055 44834000 bpatch patch00_6 ,mem_patch00 + +idle_create_conn_device: +2056 680341d0 fetch 6 ,mem_hci_plap +2057 203a2043 branch idle_exit ,blank +2058 70468101 jam reconnect_hid ,memui_reconnect_mode +2059 70005503 jam conn_sm_wait_features_res ,mem_conn_sm +205a 2020205b branch idle_create_conn_cont + +idle_create_conn_cont: +205b 18000425 force lmp_version_req ,temp + +idle_start_page: +205c 4483c000 bpatch patch00_7 ,mem_patch00 +205d 680080f1 fetch 1 ,mem_page_mode +205e 203a2062 branch idle_page_mode_r0 ,blank +205f 1fe9fe00 lshift3 pdata ,pdata +2060 1ff27e00 lshift4 pdata ,pdata +2061 1fe0ffff increase -1 ,pdata + +idle_page_mode_r0: +2062 6000c0a6 store 1 ,mem_npage +2063 600080f0 store 1 ,mem_npage_index +2064 70008e1f jam 31 ,mem_nfreq_index_page +2065 793f800c set0 mark_page_trainb ,mark +2066 2040223b call context_new +2067 2422a083 nbranch idle_page_fail ,zero +2068 20402a6f call get_free_amaddr +2069 60008077 store 1 ,mem_amaddr +206a 6008807c storet 1 ,mem_lmo_opcode2 +206b 680341d0 fetch 6 ,mem_hci_plap +206c 60030040 store 6 ,mem_plap +206d 44844001 bpatch patch01_0 ,mem_patch01 +206e 20407f15 call timer_reinit +206f 18007e00 force 0 ,pdata +2070 2841fe01 compare lmp_name_req ,temp ,0xff +2071 7d20fe05 nsetflag true ,state_init_seq ,pdata +2072 79207e03 set1 state_inpage ,pdata +2073 60008030 store 1 ,mem_state +2074 700a9903 jam bt_evt_reconn_started ,mem_fifo_temp +2075 20407d86 call ui_ipc_send_event +2076 18007e00 force 0 ,pdata +2077 7920fe04 setflag true ,smap_name_req ,pdata +2078 6000804c store 1 ,mem_state_map +2079 58000000 setarg 0 +207a 79207e01 set1 mode_master ,pdata +207b 60008031 store 1 ,mem_mode +207c 7834fc00 enable master +207d 20402223 call context_save +207e 7854fc00 disable master +207f 18000e03 force page_length_timer ,queue +2080 680140b9 fetch 2 ,mem_page_to +2081 20407f08 call timer_init +2082 20202043 branch idle_exit + +idle_page_fail: +2083 4484c001 bpatch patch01_1 ,mem_patch01 +2084 680341d0 fetch 6 ,mem_hci_plap +2085 60030040 store 6 ,mem_plap +2086 2841fe01 compare lmp_name_req ,temp ,0xff +2087 2020a089 branch idle_name_fail ,true +2088 20202043 branch idle_exit + +idle_name_fail: +2089 d8a00101 arg mem_tmp_buffer ,contw +208a df200008 arg 8 ,loopcnt +208b 20407ec6 call memset0 +208c 700a9904 jam bt_evt_reconn_failed ,mem_fifo_temp +208d 20407d86 call ui_ipc_send_event +208e 20202043 branch idle_exit + +inquiry_dispatch: +208f c68e0000 rtnmark0 mark_inquiry_on +2090 18000e01 force inquiry_length_timer ,queue +2091 20407f16 call timer_check +2092 7d3a001c nsetflag blank ,mark_inquiry_on ,mark +2093 243a2095 nbranch inquiry_start ,blank +2094 20600000 rtn + +inquiry_start: +2095 44854001 bpatch patch01_2 ,mem_patch01 +2096 680940bb fetcht 2 ,mem_inq_window +2097 18000e04 force 4 ,queue +2098 2040271c call sniff_check_window +2099 20740000 rtn user +209a 204028a4 call afh_clear +209b 18004800 force 0 ,freq_mode + +inquiry_restart: +209c 20618000 rtn timeout +209d 793f800b set0 mark_fhs_already_good ,mark +209e 793f8000 set0 mark_fhs_eir ,mark + +inquiry_rx_restart: +209f 1c40c201 add clkn_bt ,1 ,bt_clk +20a0 280ffe1e isolate1 mark_inquiry_trainb ,mark +20a1 7920c802 setflag true ,2 ,freq_mode +20a2 2c200400 compare 0x00 ,bt_clk ,0x02 +20a3 2420a0be nbranch inquiry_receive ,true + +inquiry_transmit: +20a4 4485c001 bpatch patch01_3 ,mem_patch01 +20a5 68008012 fetch 1 ,mem_inquiry_transmit +20a6 1fe0fe01 increase 1 ,pdata +20a7 60008012 store 1 ,mem_inquiry_transmit +20a8 204028d8 call fetch_giac +20a9 204028d2 call tx_radio_freq +20aa 204028f2 call fetch_diac +20ab 20402a51 call start_transmitter +20ac 20402a56 call start_tx_native +20ad 20402a64 call send_access_word +20ae 2040264d call end_of_packet +20af 204020b1 call inquiry_check_train +20b0 2020209c branch inquiry_restart + +inquiry_check_train: +20b1 44864001 bpatch patch01_4 ,mem_patch01 +20b2 6800808d fetch 1 ,mem_nfreq_index_inq +20b3 1fe0ffff increase -1 ,pdata +20b4 6000808d store 1 ,mem_nfreq_index_inq +20b5 20610000 rtn positive +20b6 70008d1f jam 31 ,mem_nfreq_index_inq +20b7 6800808f fetch 1 ,mem_ninqy_index +20b8 1fe0ffff increase -1 ,pdata +20b9 6000808f store 1 ,mem_ninqy_index +20ba 20610000 rtn positive +20bb 7940001e setflip mark_inquiry_trainb ,mark +20bc 70008fff jam param_ninquiry ,mem_ninqy_index +20bd 20600000 rtn + +inquiry_receive: +20be 4486c001 bpatch patch01_5 ,mem_patch01 +20bf 204028d8 call fetch_giac +20c0 204028cc call rx_radio_freq +20c1 204028f2 call fetch_diac +20c2 20402a5b call start_rx_native +20c3 204029eb call start_receiver +20c4 20402a0d call wait_access_clkn_rt +20c5 202c20c8 branch inquiry_sync ,sync +20c6 204020b1 call inquiry_check_train +20c7 2020209f branch inquiry_rx_restart + +inquiry_sync: +20c8 44874001 bpatch patch01_6 ,mem_patch01 +20c9 204029bb call save_rssi +20ca 20402a6b call scan_mode_whiten +20cb 2040251e call receive_packet_whitened +20cc 793f8001 set0 mark_rxbuf_inuse ,mark +20cd c6858000 rtnmark0 mark_fhs_already_good + +inquiry_receive_rtn: +20ce 4487c001 bpatch patch01_7 ,mem_patch01 + +inquiry_receive_eir_rtn: +20cf 68008013 fetch 1 ,mem_inquiry_rcv +20d0 1fe0fe01 increase 1 ,pdata +20d1 60008013 store 1 ,mem_inquiry_rcv +20d2 20600000 rtn + +master_page: +20d3 44884002 bpatch patch02_0 ,mem_patch02 +20d4 7834fc00 enable master +20d5 78387c00 enable clknt +20d6 680140b5 fetch 2 ,mem_page_interval +20d7 203a20db branch master_page_no_interval ,blank +20d8 18000e08 force page_interval_timer ,queue +20d9 20407f16 call timer_check +20da 247a0000 nrtn blank + +master_page_no_interval: +20db 4488c002 bpatch patch02_1 ,mem_patch02 +20dc 680940b7 fetcht 2 ,mem_page_window +20dd 18000e28 force 40 ,queue +20de 2040271c call sniff_check_window +20df 20342114 branch page_exit ,user +20e0 18000e03 force page_length_timer ,queue +20e1 20407f16 call timer_check +20e2 243a20f0 nbranch page_start ,blank +20e3 6800804c fetch 1 ,mem_state_map +20e4 c28220e6 bbit1 smap_name_req ,master_npage_timeout +20e5 202020e9 branch master_page_timeout + +master_npage_timeout: +20e6 d8a00101 arg mem_tmp_buffer ,contw +20e7 df200008 arg 8 ,loopcnt +20e8 20407ec6 call memset0 + +master_page_timeout: +20e9 44894002 bpatch patch02_2 ,mem_patch02 +20ea 70003000 jam 0 ,mem_state +20eb 20405cf7 call init_lmp_work +20ec 70468100 jam 0 ,memui_reconnect_mode +20ed 700a9913 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +20ee 20407d86 call ui_ipc_send_event +20ef 20202114 branch page_exit + +page_start: +20f0 4489c002 bpatch patch02_3 ,mem_patch02 +20f1 18001600 force 0 ,timeup +20f2 34730200 until clkn_rt ,meet +20f3 680080f2 fetch 1 ,mem_page_clk +20f4 1fe0ffff increase -1 ,pdata +20f5 9c42fe00 ixor clkn_bt ,pdata +20f6 2fe00600 compare 0 ,pdata ,3 +20f7 2420a0f0 nbranch page_start ,true +20f8 18827e00 deposit am_addr +20f9 60008181 store 1 ,mem_fhs_am_addr +20fa 18004c00 force 0 ,n_tx_slot +20fb 18004800 force 0 ,freq_mode + +page_restart: +20fc 448a4002 bpatch patch02_4 ,mem_patch02 +20fd 2021a114 branch page_exit ,timeout +20fe 204028dc call fetch_page_bt_adr +20ff d9600600 arg param_rf_setup ,timeup +2100 34730200 until clkn_rt ,meet + +page_rx_restart: +2101 448ac002 bpatch patch02_5 ,mem_patch02 +2102 680200f2 fetch 4 ,mem_page_clk +2103 98004200 iforce bt_clk +2104 1fe0fe01 increase 1 ,pdata +2105 600200f2 store 4 ,mem_page_clk +2106 280ffe0c isolate1 mark_page_trainb ,mark +2107 7920c802 setflag true ,2 ,freq_mode +2108 2c200400 compare 0x00 ,bt_clk ,0x02 +2109 2420a128 nbranch page_receive ,true +210a 6800800c fetch 1 ,mem_page_transmit +210b 1fe0fe01 increase 1 ,pdata +210c 6000800c store 1 ,mem_page_transmit +210d 204028d2 call tx_radio_freq +210e 20402a51 call start_transmitter +210f 20402a56 call start_tx_native +2110 20402a64 call send_access_word +2111 2040264d call end_of_packet +2112 2040211a call page_check_train +2113 202020fc branch page_restart + +page_exit: +2114 448b4002 bpatch patch02_6 ,mem_patch02 +2115 7854fc00 disable master +2116 680140b5 fetch 2 ,mem_page_interval +2117 207a0000 rtn blank +2118 18000e08 force page_interval_timer ,queue +2119 20207f08 branch timer_init + +page_check_train: +211a 448bc002 bpatch patch02_7 ,mem_patch02 +211b 6800808e fetch 1 ,mem_nfreq_index_page +211c 1fe0ffff increase -1 ,pdata +211d 6000808e store 1 ,mem_nfreq_index_page +211e 20610000 rtn positive +211f 70008e1f jam 31 ,mem_nfreq_index_page +2120 680080f0 fetch 1 ,mem_npage_index +2121 1fe0ffff increase -1 ,pdata +2122 600080f0 store 1 ,mem_npage_index +2123 20610000 rtn positive +2124 7940000c setflip mark_page_trainb ,mark +2125 6800c0a6 fetch 1 ,mem_npage +2126 600080f0 store 1 ,mem_npage_index +2127 20600000 rtn + +page_receive: +2128 448c4003 bpatch patch03_0 ,mem_patch03 +2129 204028cc call rx_radio_freq +212a 20402a5b call start_rx_native +212b 204029eb call start_receiver +212c 20402a0d call wait_access_clkn_rt +212d 202c2130 branch page_sync ,sync +212e 2040211a call page_check_train +212f 20202101 branch page_rx_restart + +page_sync: +2130 2040264d call end_of_packet +2131 6800800d fetch 1 ,mem_page_rcv +2132 1fe0fe01 increase 1 ,pdata +2133 6000800d store 1 ,mem_page_rcv +2134 18003600 force 0 ,stop_watch +2135 680200f2 fetch 4 ,mem_page_clk + +page_send_fhs: +2136 448cc003 bpatch patch03_1 ,mem_patch03 +2137 20402a4f call rf_setup_time_master_slot +2138 204028dc call fetch_page_bt_adr +2139 1cc0cc01 increase 1 ,n_tx_slot + +page_send_fhs_continue: +213a 1c2143fd and_into 0x1fd ,bt_clk +213b 1c8149fc and_into 0x1fc ,freq_mode +213c 204028d2 call tx_radio_freq +213d 20402a51 call start_transmitter +213e 20402a56 call start_tx_native +213f 20402a64 call send_access_word +2140 1c427e00 deposit clkn_bt +2141 60020161 store 4 ,mem_clkn_bt +2142 18000800 force 0 ,am_addr +2143 18000202 force type_fhs ,type +2144 20402a6b call scan_mode_whiten +2145 20402766 call transmit_packet_whitened + +page_wait_fhs_reply: +2146 448d4003 bpatch patch03_2 ,mem_patch03 +2147 20402a4d call rf_setup_time_slave_slot +2148 1c21c202 or_into 0x02 ,bt_clk +2149 1c8149fc and_into 0x1fc ,freq_mode +214a 204028cc call rx_radio_freq +214b 20402a5b call start_rx_native +214c 204029eb call start_receiver +214d 20402a0d call wait_access_clkn_rt +214e 204c264d call end_of_packet ,sync +214f 202c2155 branch page_wait_fhs_reply_ok ,sync +2150 68008010 fetch 1 ,mem_fhs_wait_counter +2151 203a20fc branch page_restart ,blank +2152 1fe0ffff increase -1 ,pdata +2153 60008010 store 1 ,mem_fhs_wait_counter +2154 20202136 branch page_send_fhs + +page_wait_fhs_reply_ok: +2155 448dc003 bpatch patch03_3 ,mem_patch03 +2156 6800800e fetch 1 ,mem_page_rcv_fhs +2157 1fe0fe01 increase 1 ,pdata +2158 6000800e store 1 ,mem_page_rcv_fhs +2159 20402435 call prepare_newconn + +master_newconn_loop: +215a 204022f2 call master_newconn_once +215b 202c215f branch newconn_poll_responded ,sync +215c 20402455 call new_conn_timeout +215d 243a215a nbranch master_newconn_loop ,blank +215e 202020fc branch page_restart + +newconn_poll_responded: +215f 448e4003 bpatch patch03_4 ,mem_patch03 +2160 68008030 fetch 1 ,mem_state +2161 793ffe03 set0 state_inpage ,pdata +2162 60008030 store 1 ,mem_state +2163 20402440 call newconn_init +2164 7854fc00 disable master +2165 20600000 rtn + +master_dispatch: +2166 448ec003 bpatch patch03_5 ,mem_patch03 +2167 7834fc00 enable master +2168 78387c00 enable clknt +2169 204021e1 call role_switch_master +216a 20740000 rtn user +216b 20402c69 call check_bt_disabled +216c 20402a4f call rf_setup_time_master_slot +216d 1c40c201 add clkn_bt ,1 ,bt_clk +216e 204028e2 call fetch_self_bt_adr +216f 18004803 force 0x03 ,freq_mode +2170 20406cc2 call scheduler_tx_l2cap_pkt +2171 20402489 call prepare_tx +2172 204028d2 call tx_radio_freq +2173 20402a51 call start_transmitter +2174 20402a56 call start_tx_native +2175 20402a64 call send_access_word +2176 20402762 call transmit_packet + +master_loop: +2177 448f4003 bpatch patch03_6 ,mem_patch03 +2178 20405d08 call parse_lmp +2179 204022e4 call master_conn_recv_packet +217a 2436a180 nbranch master_notmatch ,match +217b 20402a88 call supervision_flush +217c 20402728 call parse_l2cap +217d 6800800f fetch 1 ,mem_master_rcvcnt +217e 1fe0fe01 increase 1 ,pdata +217f 6000800f store 1 ,mem_master_rcvcnt + +master_notmatch: +2180 448fc003 bpatch patch03_7 ,mem_patch03 +2181 20406caa call scheduler_process +2182 2040218b call check_master_disconnect +2183 24748000 nrtn master +2184 204026f3 call check_attempt +2185 243a2188 nbranch master_attempt ,blank + +master_exit: +2186 7854fc00 disable master +2187 20600000 rtn + +master_attempt: +2188 20402489 call prepare_tx +2189 204022da call master_conn_send_packet +218a 20202177 branch master_loop + +check_master_disconnect: +218b 2036a18e branch check_master_match ,match +218c 20402a7f call supervision_update +218d 2021219c branch master_disconnect ,positive + +check_master_match: +218e 204021a7 call check_disconnect_timeout +218f 2434219c nbranch master_disconnect ,user +2190 6800804c fetch 1 ,mem_state_map +2191 c4020000 rtnbit0 smap_name_req +2192 c3818000 rtnbit1 smap_name_res +2193 6800804b fetch 1 ,mem_op +2194 c3818000 rtnbit1 op_disconn +2195 204021ae call conn_timer_expired +2196 247a0000 nrtn blank +2197 6800816e fetch 1 ,mem_nameres_cnt +2198 1fe0ffff increase -1 ,pdata +2199 6000816e store 1 ,mem_nameres_cnt +219a 247a0000 nrtn blank +219b 20206006 branch lmp_disconnect + +master_disconnect: +219c 44904004 bpatch patch04_0 ,mem_patch04 +219d 2040245d call quit_connection +219e 7854fc00 disable master +219f 6800804c fetch 1 ,mem_state_map +21a0 c28221a2 bbit1 smap_name_req ,master_name_disconnect +21a1 20600000 rtn + +master_name_disconnect: +21a2 6800804c fetch 1 ,mem_state_map +21a3 c3818000 rtnbit1 smap_name_res + +master_name_error: +21a4 d8a00101 arg mem_tmp_buffer ,contw +21a5 df200008 arg 8 ,loopcnt +21a6 20207ec6 branch memset0 + +check_disconnect_timeout: +21a7 4490c004 bpatch patch04_1 ,mem_patch04 +21a8 78347c00 enable user +21a9 6800804b fetch 1 ,mem_op +21aa c4018000 rtnbit0 op_disconn +21ab 204021ae call conn_timer_expired +21ac 247a0000 nrtn blank +21ad 20207fe9 branch disable_user + +conn_timer_expired: +21ae 68008072 fetch 1 ,mem_conn_timer +21af 1fe0ffff increase -1 ,pdata +21b0 60008072 store 1 ,mem_conn_timer +21b1 20600000 rtn + +linkkey_ready: +21b2 44914004 bpatch patch04_2 ,mem_patch04 +21b3 68008030 fetch 1 ,mem_state +21b4 c283a1bb bbit1 state_linkkey ,linkkey_set +21b5 680089b5 fetch 1 ,mem_pairing_auth +21b6 203a21bb branch linkkey_set ,blank +21b7 7009b500 jam defalt_pairing_auth ,mem_pairing_auth +21b8 700a9918 jam bt_evt_linkkey_generate ,mem_fifo_temp +21b9 20407d86 call ui_ipc_send_event +21ba 202021bb branch linkkey_set + +linkkey_set: +21bb 4491c004 bpatch patch04_3 ,mem_patch04 +21bc 20402254 call context_traverse_linkkey +21bd 68008030 fetch 1 ,mem_state +21be 79207e07 set1 state_linkkey ,pdata +21bf 60008030 store 1 ,mem_state +21c0 7041bd01 jam 1 ,mem_link_key_exists +21c1 68008055 fetch 1 ,mem_conn_sm +21c2 c08b21c3 bne conn_sm_pairing ,linkkey_set_continue + +linkkey_set_continue: +21c3 20600000 rtn + +generate_linkkey_continue: +21c4 7009b501 jam pairing_auth ,mem_pairing_auth + +clear_linkstate: +21c5 68008030 fetch 1 ,mem_state +21c6 793ffe07 set0 state_linkkey ,pdata +21c7 60008030 store 1 ,mem_state +21c8 20600000 rtn + +role_switch_check: +21c9 44924004 bpatch patch04_4 ,mem_patch04 +21ca 78547c00 disable user +21cb 68010032 fetch 2 ,mem_tsniff +21cc d840ffff arg 0xffff ,temp +21cd 98467c00 isub temp ,null +21ce 24628000 nrtn zero +21cf 68020034 fetch 4 ,mem_sniff_anchor +21d0 203821d3 branch role_switch_clkn ,clknt +21d1 9d067e00 isub clke_bt ,pdata +21d2 202021d4 branch role_switch_clke + +role_switch_clkn: +21d3 9c467e00 isub clkn_bt ,pdata + +role_switch_clke: +21d4 1fe67c04 sub pdata ,4 ,null +21d5 24610000 nrtn positive +21d6 18007e00 force 0 ,pdata +21d7 60010032 store 2 ,mem_tsniff +21d8 20207fe7 branch enable_user + +role_switch_prepare: +21d9 1fe20400 copy pdata ,temp +21da 4492c004 bpatch patch04_5 ,mem_patch04 +21db 600a0034 storet 4 ,mem_sniff_anchor + +role_switch_prepare0: +21dc 70455b01 jam switch_flag_accept ,mem_switch_flag +21dd 5800ffff setarg 0xffff +21de 60010032 store 2 ,mem_tsniff +21df 70007301 jam 1 ,mem_sniff_attempt +21e0 20600000 rtn + +role_switch_master: +21e1 44934004 bpatch patch04_6 ,mem_patch04 +21e2 204021c9 call role_switch_check +21e3 24740000 nrtn user +21e4 78547c00 disable user +21e5 70001120 jam param_newconnto ,mem_newconnto_counter +21e6 793f800b set0 mark_fhs_already_good ,mark + +roles_waitfhs_loop: +21e7 20402a4f call rf_setup_time_master_slot +21e8 204022e6 call master_recv_packet +21e9 c505a1f4 bmark1 mark_fhs_already_good ,roles_replyto_fhs +21ea 20402455 call new_conn_timeout +21eb 243a21e7 nbranch roles_waitfhs_loop ,blank + +role_switch_fail_master: +21ec 4493c004 bpatch patch04_7 ,mem_patch04 +21ed 78547c00 disable user +21ee 1c427e00 deposit clkn_bt +21ef 600240ca store 4 ,mem_next_btclk +21f0 78387c00 enable clknt +21f1 7834fc00 enable master +21f2 700a992a jam bt_evt_switch_fail_master ,mem_fifo_temp +21f3 20207d86 branch ui_ipc_send_event + +roles_replyto_fhs: +21f4 44944005 bpatch patch05_0 ,mem_patch05 +21f5 20402a4d call rf_setup_time_slave_slot +21f6 d8200010 arg type_id ,type +21f7 204022dc call master_send_packet +21f8 78587c00 disable clknt +21f9 7854fc00 disable master +21fa 20402818 call apply_switch_clke +21fb 20402435 call prepare_newconn + +roles_newconns_loop: +21fc 4494c005 bpatch patch05_1 ,mem_patch05 +21fd 2040247c call slave_newconn_once +21fe 2036a202 branch roles_newconns_responded ,match +21ff 20402455 call new_conn_timeout +2200 243a21fc nbranch roles_newconns_loop ,blank +2201 202021ec branch role_switch_fail_master + +roles_newconns_responded: +2202 68008031 fetch 1 ,mem_mode +2203 793ffe01 set0 mode_master ,pdata +2204 60008031 store 1 ,mem_mode +2205 20402a88 call supervision_flush +2206 20402841 call calc_clke_offset +2207 78347c00 enable user +2208 700a992b jam bt_evt_switch_success_master ,mem_fifo_temp +2209 20207d86 branch ui_ipc_send_event + +context_load: +220a 44954005 bpatch patch05_2 ,mem_patch05 +220b 79200009 set1 mark_context ,mark +220c 1a227e00 deposit rega +220d 6001001e store 2 ,mem_context_ptr +220e 18007250 force context_size ,loopcnt +220f d8a0043f arg mem_le_state ,contw +2210 1a208c01 add rega ,coffset_mode ,contr +2211 e8c08000 ifetch 1 ,contr +2212 1a220c00 copy rega ,contr +2213 c2807f01 bbit1 mode_le ,memcpy +2214 d8a00030 arg mem_state ,contw +2215 20407f01 call memcpy +2216 78577c00 disable attempt +2217 68008077 fetch 1 ,mem_amaddr +2218 98000800 iforce am_addr +2219 70008a01 jam 1 ,mem_current_sniff_attempt +221a 2034a21c branch context_load_master ,master +221b 70008a01 jam 1 ,mem_current_sniff_attempt + +context_load_master: +221c 68008030 fetch 1 ,mem_state +221d c4008000 rtnbit0 state_insniff +221e 68008073 fetch 1 ,mem_sniff_attempt +221f 6000808a store 1 ,mem_current_sniff_attempt +2220 68008074 fetch 1 ,mem_sniff_timeout +2221 6000808b store 1 ,mem_current_sniff_timeout +2222 20600000 rtn + +context_save: +2223 4495c005 bpatch patch05_3 ,mem_patch05 +2224 6801001e fetch 2 ,mem_context_ptr +2225 98000a00 iforce contw +2226 18007250 force context_size ,loopcnt +2227 d8c0043f arg mem_le_state ,contr +2228 203b7f01 branch memcpy ,le +2229 d8c00030 arg mem_state ,contr +222a 20207f01 branch memcpy + +context_get_next: +222b df200001 arg context_num ,loopcnt +222c 68088015 fetcht 1 ,mem_current_context + +context_get_next_loop: +222d 18408401 increase 1 ,temp +222e 2841fe01 compare context_num ,temp ,0xff +222f 2420a231 nbranch context_get_next_cont ,true +2230 d8400000 arg 0 ,temp + +context_get_next_cont: +2231 60088015 storet 1 ,mem_current_context +2232 184ffe50 mul32 temp ,context_size ,pdata +2233 da204040 arg mem_context ,rega +2234 9a20a200 iadd rega ,rega +2235 ea208000 ifetch 1 ,rega +2236 c280a239 bbit1 state_insniff ,context_get_next_sniff +2237 c3800000 rtnbit1 state_inconn +2238 c3818000 rtnbit1 state_inpage + +context_get_next_sniff: +2239 c200222d loop context_get_next_loop +223a 20600000 rtn + +context_new: +223b 44964005 bpatch patch05_4 ,mem_patch05 +223c da60226a arg context_search_empty ,regc +223d 20402261 call context_search +223e 24628000 nrtn zero +223f 1a227e00 deposit rega +2240 6001001e store 2 ,mem_context_ptr +2241 18007c00 force 0 ,null +2242 20600000 rtn + +context_check_all_wack: +2243 20402725 call check_esco_amaddr +2244 2020a24b branch context_check_esco_wack ,true +2245 6801001e fetch 2 ,mem_context_ptr +2246 1fe08a17 add pdata ,coffset_arq ,contw +2247 68008047 fetch 1 ,mem_arq +2248 e0a08000 istore 1 ,contw +2249 da6022aa arg context_check_a_wack ,regc +224a 20202261 branch context_search + +context_check_esco_wack: +224b 68008047 fetch 1 ,mem_arq +224c 2feffe03 isolate1 wack ,pdata +224d 2020a250 branch context_esco_wack ,true +224e 18007c01 force 1 ,null +224f 20600000 rtn + +context_esco_wack: +2250 18007c00 force 0 ,null +2251 20600000 rtn + +context_check_idle: +2252 da6022a7 arg context_check_inconn ,regc +2253 20202261 branch context_search + +context_traverse_linkkey: +2254 6809001e fetcht 2 ,mem_context_ptr +2255 da6022cf arg context_traverse_clearkey ,regc +2256 20202261 branch context_search + +context_search_conn_handle: +2257 6808c1cf fetcht 1 ,mem_hci_conn_handle + +context_search_conn_handle2: +2258 da602275 arg context_search_handle ,regc +2259 20202261 branch context_search + +context_search_plap: +225a 4496c005 bpatch patch05_5 ,mem_patch05 +225b 680b41d0 fetcht 6 ,mem_hci_plap + +context_search_plap2: +225c da60226e arg context_search_lap ,regc +225d 20202261 branch context_search + +context_search_insniff: +225e da60227b arg context_search_sniff ,regc +225f 20202261 branch context_search + +context_search_sniff_window: +2260 da6022c6 arg context_search_window ,regc + +context_search: +2261 44974005 bpatch patch05_6 ,mem_patch05 +2262 da204040 arg mem_context ,rega +2263 df200001 arg context_num ,loopcnt + +context_search_loop: +2264 ea208000 ifetch 1 ,rega +2265 1a627a00 copy regc ,pc + +context_search_next: +2266 1a20a250 increase context_size ,rega +2267 c2002264 loop context_search_loop +2268 18007c01 force 1 ,null +2269 20600000 rtn + +context_search_empty: +226a c2802266 bbit1 state_inconn ,context_search_next +226b c281a266 bbit1 state_inpage ,context_search_next +226c 18007c00 force 0 ,null +226d 20600000 rtn + +context_search_lap: +226e c281a270 bbit1 state_inpage ,context_search_lap_cont +226f c3002266 bbit0 state_inconn ,context_search_next + +context_search_lap_cont: +2270 1a208c10 add rega ,coffset_plap ,contr +2271 e8c30000 ifetch 6 ,contr +2272 98467c00 isub temp ,null +2273 20628000 rtn zero +2274 20202266 branch context_search_next + +context_search_handle: +2275 c3002266 bbit0 state_inconn ,context_search_next +2276 1a208c16 add rega ,coffset_conn_handle ,contr +2277 e8c08000 ifetch 1 ,contr +2278 98467c00 isub temp ,null +2279 20628000 rtn zero +227a 20202266 branch context_search_next + +context_search_sniff: +227b c300a266 bbit0 state_insniff ,context_search_next + +context_search_sniff_loop: +227c 204022b3 call context_get_anchor +227d 20402297 call sign_pdata_temp +227e 98467e00 isub temp ,pdata +227f 1fe0fe01 increase 1 ,pdata +2280 20212291 branch context_search_sniff_miss ,positive +2281 18c22400 copy contr ,regb +2282 60048aa2 store 9 ,mem_temp +2283 6800c4c0 fetch 1 ,mem_le_sc_calc +2284 243a2289 nbranch context_search_sniff_sc ,blank +2285 68048aa2 fetch 9 ,mem_temp +2286 1a420c00 copy regb ,contr +2287 1fe0fe05 increase 5 ,pdata +2288 2020228c branch context_search_meet1 + +context_search_sniff_sc: +2289 68048aa2 fetch 9 ,mem_temp +228a 1a420c00 copy regb ,contr +228b 1fe0fe14 increase 20 ,pdata + +context_search_meet1: +228c 24212266 nbranch context_search_next ,positive + +context_search_meet: +228d 18424200 copy temp ,bt_clk +228e 204022bf call context_next_anchor +228f 18007c00 force 0 ,null +2290 20600000 rtn + +context_search_sniff_miss: +2291 98002400 iforce regb +2292 1a208c02 add rega ,coffset_tsniff ,contr +2293 e8c10000 ifetch 2 ,contr +2294 203a228d branch context_search_meet ,blank +2295 204022bf call context_next_anchor +2296 2020227c branch context_search_sniff_loop + +sign_pdata_temp: +2297 1ff11600 rshift16 pdata ,timeup +2298 196c9600 rshift8 timeup ,timeup +2299 2022a2a1 branch sign_pdata_temp_p0 ,zero +229a 29601e0f compare 0xf ,timeup ,0xf +229b 24608000 nrtn true +229c 18511600 rshift16 temp ,timeup +229d 196c9600 rshift8 timeup ,timeup +229e 24628000 nrtn zero +229f 7920041c set1 28 ,temp +22a0 20600000 rtn + +sign_pdata_temp_p0: +22a1 18511600 rshift16 temp ,timeup +22a2 196c9600 rshift8 timeup ,timeup +22a3 29601e0f compare 0xf ,timeup ,0xf +22a4 24608000 nrtn true +22a5 79207e1c set1 28 ,pdata +22a6 20600000 rtn + +context_check_inconn: +22a7 c3002266 bbit0 state_inconn ,context_search_next +22a8 18007c00 force 0 ,null +22a9 20600000 rtn + +context_check_a_wack: +22aa c3002266 bbit0 state_inconn ,context_search_next +22ab 1a208c01 add rega ,coffset_mode ,contr +22ac e8c08000 ifetch 1 ,contr +22ad c2802266 bbit1 mode_le ,context_search_next +22ae 1a208c17 add rega ,coffset_arq ,contr +22af e8c08000 ifetch 1 ,contr +22b0 c301a266 bbit0 wack ,context_search_next +22b1 18007c00 force 0 ,null +22b2 20600000 rtn + +context_get_anchor: +22b3 1a208c01 add rega ,coffset_mode ,contr +22b4 e8c88000 ifetcht 1 ,contr +22b5 1c427e00 deposit clkn_bt +22b6 284ffe01 isolate1 mode_master ,temp +22b7 1a208c04 add rega ,coffset_sniff_anchor ,contr +22b8 e8ca0000 ifetcht 4 ,contr +22b9 20608000 rtn true +22ba 1a208c08 add rega ,coffset_clk_offset ,contr +22bb e8c30000 ifetch 6 ,contr +22bc 20402854 call calc_clke2 +22bd 1d027e00 deposit clke_bt +22be 20600000 rtn + +context_next_anchor: +22bf 1a208c02 add rega ,coffset_tsniff ,contr +22c0 1a208a04 add rega ,coffset_sniff_anchor ,contw +22c1 e8c10000 ifetch 2 ,contr +22c2 98409600 iadd temp ,timeup +22c3 19627e00 deposit timeup +22c4 e0a20000 istore 4 ,contw +22c5 20205449 branch le_context_nexthop + +context_search_window: +22c6 c300a266 bbit0 state_insniff ,context_search_next +22c7 204022b3 call context_get_anchor +22c8 9b60fe00 iadd stop_watch ,pdata +22c9 9b60fe00 iadd stop_watch ,pdata +22ca 98e0fe00 iadd queue ,pdata +22cb 98467c00 isub temp ,null +22cc 24212266 nbranch context_search_next ,positive +22cd 18007c00 force 0 ,null +22ce 20600000 rtn + +context_traverse_clearkey: +22cf c3002266 bbit0 state_inconn ,context_search_next +22d0 18427e00 deposit temp +22d1 9a267c00 isub rega ,null +22d2 203f2266 branch context_search_next ,null +22d3 1a208c01 add rega ,coffset_mode ,contr +22d4 e8c08000 ifetch 1 ,contr +22d5 c2802266 bbit1 mode_le ,context_search_next +22d6 ea208000 ifetch 1 ,rega +22d7 793ffe07 set0 state_linkkey ,pdata +22d8 e2208000 istore 1 ,rega +22d9 20202266 branch context_search_next + +master_conn_send_packet: +22da 4497c005 bpatch patch05_7 ,mem_patch05 +22db 20402a4f call rf_setup_time_master_slot + +master_send_packet: +22dc 1c40c201 add clkn_bt ,1 ,bt_clk +22dd 204028e2 call fetch_self_bt_adr +22de 18004803 force 0x03 ,freq_mode +22df 204028d2 call tx_radio_freq +22e0 20402a51 call start_transmitter +22e1 20402a56 call start_tx_native +22e2 20402a64 call send_access_word +22e3 20202762 branch transmit_packet + +master_conn_recv_packet: +22e4 44984006 bpatch patch06_0 ,mem_patch06 +22e5 20402a4d call rf_setup_time_slave_slot + +master_recv_packet: +22e6 1c40c201 add clkn_bt ,1 ,bt_clk +22e7 204028e2 call fetch_self_bt_adr +22e8 18004803 force 0x03 ,freq_mode +22e9 204028cc call rx_radio_freq +22ea 2040242a call init_rx_packet_flags +22eb 204029f1 call prep_crypt +22ec 20402a5b call start_rx_native +22ed 204029eb call start_receiver + +master_rx_conn_finish_packet: +22ee 20402a0d call wait_access_clkn_rt +22ef 246c0000 nrtn sync +22f0 204029bb call save_rssi +22f1 2020251c branch receive_packet + +master_newconn_once: +22f2 4498c006 bpatch patch06_1 ,mem_patch06 +22f3 68008181 fetch 1 ,mem_fhs_am_addr +22f4 98000800 iforce am_addr +22f5 18000201 force type_poll ,type +22f6 204022da call master_conn_send_packet +22f7 202022e4 branch master_conn_recv_packet + +inquiry_scan_dispatch: +22f8 6800c093 fetch 1 ,mem_scan_mode +22f9 c4000000 rtnbit0 inq_scan_mode +22fa 18000e04 force iscan_interval_timer ,queue +22fb 20407f16 call timer_check +22fc 247a0000 nrtn blank +22fd 680940ad fetcht 2 ,mem_iscan_window +22fe 18000e04 force 4 ,queue +22ff 2040271c call sniff_check_window +2300 20740000 rtn user +2301 20402308 call inquiry_scan_start +2302 18000e04 force iscan_interval_timer ,queue +2303 680140af fetch 2 ,mem_iscan_interval +2304 242c7f08 nbranch timer_init ,sync +2305 180a7e00 random pdata +2306 9ea17e00 iand mask3ff ,pdata +2307 20207f08 branch timer_init + +inquiry_scan_start: +2308 44994006 bpatch patch06_2 ,mem_patch06 +2309 70018100 jam 0 ,mem_fhs_am_addr +230a 78587c00 disable clknt +230b 78577c00 disable attempt +230c 204028a4 call afh_clear +230d 1c4143fc and clkn_bt ,0x1fc ,bt_clk +230e 18004801 force 0x01 ,freq_mode +230f 204028d8 call fetch_giac +2310 204028cc call rx_radio_freq +2311 7940001d setflip mark_inquiry_state ,mark +2312 68008006 fetch 1 ,mem_inquiryscan_waitcnt +2313 1fe0fe01 increase 1 ,pdata +2314 60008006 store 1 ,mem_inquiryscan_waitcnt +2315 204028f2 call fetch_diac +2316 204029eb call start_receiver +2317 20402a14 call wait_access_forever +2318 246c0000 nrtn sync +2319 4499c006 bpatch patch06_3 ,mem_patch06 +231a 18003600 force 0 ,stop_watch +231b 204028f9 call shutdown_radio +231c 68008007 fetch 1 ,mem_inquiryscan_rcvcnt +231d 1fe0fe01 increase 1 ,pdata +231e 60008007 store 1 ,mem_inquiryscan_rcvcnt +231f 204028d8 call fetch_giac +2320 20402a4d call rf_setup_time_slave_slot +2321 1c21c202 or_into 0x002 ,bt_clk +2322 18004801 force 0x01 ,freq_mode +2323 204028d2 call tx_radio_freq +2324 204028f2 call fetch_diac +2325 20402a51 call start_transmitter +2326 20402a5f call start_tx_external +2327 1c427e00 deposit clkn_bt +2328 60020161 store 4 ,mem_clkn_bt +2329 20402a64 call send_access_word +232a 18000202 force type_fhs ,type +232b 18000800 force 0 ,am_addr +232c 20402a6b call scan_mode_whiten +232d 20402766 call transmit_packet_whitened +232e 20402332 call send_eir +232f 1c2143fd and_into 0x1fd ,bt_clk +2330 1cc0cc01 increase 1 ,n_tx_slot +2331 20600000 rtn + +send_eir: +2332 449a4006 bpatch patch06_4 ,mem_patch06 +2333 6800c0d1 fetch 1 ,mem_eir_enable +2334 207a0000 rtn blank +2335 d8a0018e arg mem_eir ,contw +2336 6800c515 fetch 1 ,mem_local_name_length +2337 1fe27200 copy pdata ,loopcnt +2338 1fe0fe01 increase 1 ,pdata +2339 e0a08000 istore 1 ,contw +233a 18a20400 copy contw ,temp +233b 1fe0fe01 increase 1 ,pdata +233c 600141dc store 2 ,mem_tx_len +233d 18420a00 copy temp ,contw +233e 58000009 setarg 0x09 +233f e0a08000 istore 1 ,contw +2340 d8c04516 arg mem_local_name ,contr +2341 20407f01 call memcpy +2342 da60458d arg mem_all_uuid_128bits ,regc +2343 df200004 arg 4 ,loopcnt +2344 20402354 call get_all_uuid +2345 da604577 arg mem_all_uuid_16bits ,regc +2346 df200001 arg 1 ,loopcnt +2347 20402354 call get_all_uuid +2348 1800020a force type_dm3 ,type +2349 7041db02 jam 2 ,mem_tx_lch +234a 5800018e setarg mem_eir +234b 6001016f store 2 ,mem_txptr +234c 20402a4d call rf_setup_time_slave_slot +234d 204028d2 call tx_radio_freq +234e 20402a51 call start_transmitter +234f 20402a5f call start_tx_external +2350 20402a64 call send_access_word +2351 20402a6b call scan_mode_whiten +2352 20402766 call transmit_packet_whitened +2353 20600000 rtn + +get_all_uuid: +2354 18a20400 copy contw ,temp +2355 1a620c00 copy regc ,contr +2356 e8c08000 ifetch 1 ,contr +2357 207a0000 rtn blank + +lshift_loop: +2358 1fe3fe00 lshift pdata ,pdata +2359 c2002358 loop lshift_loop +235a 1fe22200 copy pdata ,rega +235b 1fe0fe02 increase 2 ,pdata +235c 1fe20e00 copy pdata ,queue +235d 680141dc fetch 2 ,mem_tx_len +235e 98e0fe00 iadd queue ,pdata +235f 600141dc store 2 ,mem_tx_len +2360 18420a00 copy temp ,contw +2361 1a227e00 copy rega ,pdata +2362 1fe0fe01 increase 1 ,pdata +2363 e0a08000 istore 1 ,contw +2364 1a620c00 copy regc ,contr +2365 e8c08000 ifetch 1 ,contr +2366 e8c08000 ifetch 1 ,contr +2367 e0a08000 istore 1 ,contw +2368 1a227200 copy rega ,loopcnt +2369 20207f01 branch memcpy + +page_scan_dispatch: +236a 6800c093 fetch 1 ,mem_scan_mode +236b c4008000 rtnbit0 page_scan_mode +236c 18000e05 force pscan_interval_timer ,queue +236d 20407f16 call timer_check +236e 247a0000 nrtn blank +236f 680940b1 fetcht 2 ,mem_pscan_window +2370 18000e28 force 40 ,queue +2371 2040271c call sniff_check_window +2372 20740000 rtn user +2373 18000800 force 0 ,am_addr +2374 70001008 jam param_pagerespto ,mem_fhs_wait_counter +2375 793f800b set0 mark_fhs_already_good ,mark +2376 2040237a call page_scan_start +2377 18000e05 force pscan_interval_timer ,queue +2378 680140b3 fetch 2 ,mem_pscan_interval +2379 20207f08 branch timer_init + +page_scan_start: +237a 449ac006 bpatch patch06_5 ,mem_patch06 +237b 78587c00 disable clknt +237c 204028a4 call afh_clear +237d 68008008 fetch 1 ,mem_pagescan_waitcnt +237e 1fe0fe01 increase 1 ,pdata +237f 60008008 store 1 ,mem_pagescan_waitcnt +2380 18004c00 force 0 ,n_tx_slot +2381 204028e2 call fetch_self_bt_adr +2382 1c40c201 add clkn_bt ,1 ,bt_clk +2383 18004802 force 0x02 ,freq_mode +2384 449b4006 bpatch patch06_6 ,mem_patch06 +2385 204028cc call rx_radio_freq +2386 204029eb call start_receiver +2387 20402a14 call wait_access_forever +2388 246c0000 nrtn sync +2389 204028f9 call shutdown_radio +238a 68008009 fetch 1 ,mem_pagescan_rcvcnt +238b 1fe0fe01 increase 1 ,pdata +238c 60008009 store 1 ,mem_pagescan_rcvcnt +238d 18003600 force 0 ,stop_watch +238e 20402a4d call rf_setup_time_slave_slot +238f 1c21c202 or_into 0x002 ,bt_clk +2390 18004801 force 0x01 ,freq_mode +2391 204028d2 call tx_radio_freq +2392 20402a51 call start_transmitter +2393 20402a5f call start_tx_external +2394 20402a64 call send_access_word +2395 2040264d call end_of_packet +2396 18000800 force 0 ,am_addr +2397 d9600600 arg param_rf_setup ,timeup +2398 35330200 until clke_rt ,meet +2399 1d01d003 or_into 0x03 ,clke_bt +239a 1c2143fd and_into 0x1fd ,bt_clk + +page_scan_wait_fhs_restart: +239b 449bc006 bpatch patch06_7 ,mem_patch06 +239c 1cc0cc01 increase 1 ,n_tx_slot +239d 204028cc call rx_radio_freq +239e 204029eb call start_receiver +239f 20402a07 call wait_access_mhalfbnd +23a0 242c23a4 nbranch page_scan_wait_fhs_again ,sync +23a1 20402a6b call scan_mode_whiten +23a2 2040251e call receive_packet_whitened +23a3 c505a3ab bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs + +page_scan_wait_fhs_again: +23a4 449c4007 bpatch patch07_0 ,mem_patch07 +23a5 68008010 fetch 1 ,mem_fhs_wait_counter +23a6 207a0000 rtn blank +23a7 1fe0ffff increase -1 ,pdata +23a8 60008010 store 1 ,mem_fhs_wait_counter +23a9 20402a4f call rf_setup_time_master_slot +23aa 2020239b branch page_scan_wait_fhs_restart + +page_scan_reply_to_fhs: +23ab 449cc007 bpatch patch07_1 ,mem_patch07 +23ac 793fd001 set0 1 ,clke_bt +23ad 79205000 set1 0 ,clke_bt +23ae 6800800a fetch 1 ,mem_pagescan_rcvfhscnt +23af 1fe0fe01 increase 1 ,pdata +23b0 6000800a store 1 ,mem_pagescan_rcvfhscnt +23b1 20402a4d call rf_setup_time_slave_slot +23b2 1c21c202 or_into 0x02 ,bt_clk +23b3 204028d2 call tx_radio_freq +23b4 20402a51 call start_transmitter +23b5 20402a5f call start_tx_external +23b6 20402a64 call send_access_word +23b7 2040264d call end_of_packet + +slave_apply_clke_bt: +23b8 2d000603 compare 0x03 ,clke_bt ,0x03 +23b9 2020a3bc branch slave_apply_clke_bt_now ,true +23ba 37cb8200 until null ,mhalfbnd +23bb 202023b8 branch slave_apply_clke_bt + +slave_apply_clke_bt_now: +23bc 68020165 fetch 4 ,mem_clke_bt +23bd 1fe1fe03 or_into 0x03 ,pdata +23be 1fe25000 icopy clke_bt + +start_slave_connection: +23bf 449d4007 bpatch patch07_2 ,mem_patch07 +23c0 68030178 fetch 6 ,extm_lap +23c1 60030040 store 6 ,mem_plap +23c2 20402435 call prepare_newconn + +slave_newconn_loop: +23c3 2040247c call slave_newconn_once +23c4 2036a3c8 branch sconn_successful ,match +23c5 20402455 call new_conn_timeout +23c6 243a23c3 nbranch slave_newconn_loop ,blank +23c7 20600000 rtn + +sconn_successful: +23c8 449dc007 bpatch patch07_3 ,mem_patch07 +23c9 20402440 call newconn_init +23ca 2040223b call context_new +23cb 24628000 nrtn zero +23cc 70003100 jam 0 ,mem_mode +23cd 20402841 call calc_clke_offset +23ce 20202223 branch context_save + +slave_dispatch: +23cf 449e4007 bpatch patch07_4 ,mem_patch07 +23d0 20402850 call calc_clke +23d1 204023f3 call role_switch_slave +23d2 20740000 rtn user + +slave_loop: +23d3 449ec007 bpatch patch07_5 ,mem_patch07 +23d4 20402c69 call check_bt_disabled +23d5 20406caa call scheduler_process +23d6 20402514 call slave_conn_recv_packet +23d7 2436a3e2 nbranch slave_notmatch ,match +23d8 20402a88 call supervision_flush +23d9 20406cc2 call scheduler_tx_l2cap_pkt +23da 20402489 call prepare_tx +23db 20402757 call slave_conn_send_packet +23dc 20402728 call parse_l2cap +23dd 20405d08 call parse_lmp +23de 6800800b fetch 1 ,mem_slave_rcvcnt +23df 1fe0fe01 increase 1 ,pdata +23e0 6000800b store 1 ,mem_slave_rcvcnt +23e1 20402841 call calc_clke_offset + +slave_notmatch: +23e2 449f4007 bpatch patch07_6 ,mem_patch07 +23e3 20402bb1 call lpm_set_mult +23e4 20402a7f call supervision_update +23e5 202123eb branch slave_disconnect ,positive +23e6 204021a7 call check_disconnect_timeout +23e7 243423eb nbranch slave_disconnect ,user +23e8 204026f3 call check_attempt +23e9 243a23d3 nbranch slave_loop ,blank +23ea 20600000 rtn + +slave_disconnect: +23eb 449fc007 bpatch patch07_7 ,mem_patch07 +23ec 70015100 jam 0 ,mem_tester_emulate +23ed 70017f00 jam 0 ,mem_debug_config +23ee 2040245d call quit_connection +23ef 793f8011 set0 mark_testmode ,mark +23f0 20407fb0 call test_enable_white +23f1 68008030 fetch 1 ,mem_state +23f2 20600000 rtn + +role_switch_slave: +23f3 44a04008 bpatch patch08_0 ,mem_patch08 +23f4 204021c9 call role_switch_check +23f5 24740000 nrtn user +23f6 18820400 copy am_addr ,temp +23f7 20402a6f call get_free_amaddr +23f8 60008181 store 1 ,mem_fhs_am_addr +23f9 18420800 copy temp ,am_addr +23fa 70001120 jam param_newconnto ,mem_newconnto_counter + +roles_sendfhs_loop: +23fb 44a0c008 bpatch patch08_1 ,mem_patch08 +23fc 20402a4f call rf_setup_time_master_slot +23fd 18000202 force type_fhs ,type +23fe 2040274f call slave_send_access +23ff 1c427e00 deposit clkn_bt +2400 60020161 store 4 ,mem_clkn_bt +2401 20402762 call transmit_packet +2402 20402a4d call rf_setup_time_slave_slot +2403 7837fc00 enable user3 +2404 204024f6 call slave_receive_access +2405 202c240d branch roles_got_fhs_reply ,sync +2406 204028f9 call shutdown_radio +2407 20402455 call new_conn_timeout +2408 243a23fb nbranch roles_sendfhs_loop ,blank +2409 c6820000 rtnmark0 mark_accept_switch +240a 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 +240b 79200003 set1 mark_switch_initiated ,mark +240c 20600000 rtn + +roles_got_fhs_reply: +240d 78387c00 enable clknt +240e 20402435 call prepare_newconn +240f 204028a4 call afh_clear + +roles_newconn_loop: +2410 44a14008 bpatch patch08_2 ,mem_patch08 +2411 204022f2 call master_newconn_once +2412 202c2419 branch roles_newconn_responded ,sync +2413 20402455 call new_conn_timeout +2414 243a2410 nbranch roles_newconn_loop ,blank +2415 78587c00 disable clknt +2416 1d027e00 deposit clke_bt +2417 600240ca store 4 ,mem_next_btclk +2418 20600000 rtn + +roles_newconn_responded: +2419 7834fc00 enable master +241a c582241f bmark0 mark_accept_switch ,roles_newconn_nolmp +241b 793f8004 set0 mark_accept_switch ,mark +241c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +241d 70007d33 jam lmp_host_connection_req ,mem_lmi_opcode2 +241e 204062f8 call tid_set_reply + +roles_newconn_nolmp: +241f 18827e00 deposit am_addr +2420 60008077 store 1 ,mem_amaddr +2421 18007e00 force 0 ,pdata +2422 60030038 store 6 ,mem_clk_offset +2423 68008031 fetch 1 ,mem_mode +2424 79207e01 set1 mode_master ,pdata +2425 60008031 store 1 ,mem_mode +2426 20402a88 call supervision_flush +2427 7854fc00 disable master +2428 78347c00 enable user +2429 20600000 rtn + +init_rx_packet_flags: +242a 44a1c008 bpatch patch08_3 ,mem_patch08 +242b 7856fc00 disable match +242c 793f8005 set0 mark_loopback ,mark +242d 793f800a set0 mark_am_addr_broadcast ,mark +242e 793f8010 set0 mark_longpacket ,mark +242f 793f800f set0 mark_old_packet ,mark +2430 68008047 fetch 1 ,mem_arq +2431 793ffe05 set0 arqnx ,pdata +2432 79207e04 set1 flowx ,pdata +2433 60008047 store 1 ,mem_arq +2434 20600000 rtn + +prepare_newconn: +2435 44a24008 bpatch patch08_4 ,mem_patch08 +2436 70001120 jam param_newconnto ,mem_newconnto_counter +2437 70004750 jam param_newconn_arq ,mem_arq +2438 680140bf fetch 2 ,mem_rx_window_init +2439 6001003e store 2 ,mem_rx_window +243a 1c427e00 deposit clkn_bt +243b 600240ca store 4 ,mem_next_btclk +243c 20780000 rtn clknt +243d 1d027e00 deposit clke_bt +243e 600240ca store 4 ,mem_next_btclk +243f 20600000 rtn + +newconn_init: +2440 44a2c008 bpatch patch08_5 ,mem_patch08 +2441 20405d04 call init_lmp_reinit +2442 20402459 call new_conn_handle +2443 60008046 store 1 ,mem_conn_handle +2444 58000000 setarg 0 +2445 6001025d store 2 ,mem_l2cap_rxbuff1_len +2446 58001c80 setarg param_supervision_to +2447 60010051 store 2 ,mem_supervision_to +2448 68008030 fetch 1 ,mem_state +2449 79207e00 set1 state_inconn ,pdata +244a 60008030 store 1 ,mem_state +244b 70004b00 jam 0 ,mem_op +244c 70004c00 jam 0 ,mem_state_map +244d 7000a000 jam 0 ,mem_lpm_current_mult +244e 20202a88 branch supervision_flush + +clear_linkkey: +244f 44a34008 bpatch patch08_6 ,mem_patch08 +2450 18007e00 force 0 ,pdata +2451 600441be store 8 ,mem_link_key +2452 e0a40000 istore 8 ,contw +2453 204021c5 call clear_linkstate +2454 20202254 branch context_traverse_linkkey + +new_conn_timeout: +2455 68008011 fetch 1 ,mem_newconnto_counter +2456 1fe0ffff increase -1 ,pdata +2457 60008011 store 1 ,mem_newconnto_counter +2458 20600000 rtn + +new_conn_handle: +2459 6800c0cf fetch 1 ,mem_handle_num +245a 1fe0fe01 increase 1 ,pdata +245b 6000c0cf store 1 ,mem_handle_num +245c 20600000 rtn + +quit_connection: +245d 44a3c008 bpatch patch08_7 ,mem_patch08 +245e 6800c1ce fetch 1 ,mem_hci_cmd +245f c001a462 beq hci_cmd_remote_name_req ,quit_connection_name +2460 68008048 fetch 1 ,mem_lmp_to_send +2461 c080a466 bne lmp_name_req ,quit_connection_cont + +quit_connection_name: +2462 20404d06 call cmd_check_plap +2463 2422a466 nbranch quit_connection_cont ,zero +2464 204021a4 call master_name_error +2465 7041ce00 jam 0 ,mem_hci_cmd + +quit_connection_cont: +2466 44a44009 bpatch patch09_0 ,mem_patch09 +2467 204033af call app_disconn_reason_collect_bt +2468 204026e9 call sniff_exit +2469 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp +246a 20407d86 call ui_ipc_send_event +246b 20405cf7 call init_lmp_work +246c 20404d6b call l2cap_init_work +246d 2040757d call sp_initialize +246e 68008030 fetch 1 ,mem_state +246f 793ffe00 set0 state_inconn +2470 60008030 store 1 ,mem_state +2471 70468100 jam 0 ,memui_reconnect_mode +2472 6800804c fetch 1 ,mem_state_map +2473 2fe18000 compare 0x0 ,pdata ,0xc0 +2474 2020a476 branch quit_connection_not_clear_mark ,true +2475 793f8001 set0 mark_rxbuf_inuse ,mark + +quit_connection_not_clear_mark: +2476 68008047 fetch 1 ,mem_arq +2477 c301a478 bbit0 wack ,quit_connection_not_clear_tx + +quit_connection_not_clear_tx: +2478 6800804b fetch 1 ,mem_op +2479 c4030000 rtnbit0 op_txl2cap +247a 793f8002 set0 mark_tx_l2cap ,mark +247b 20600000 rtn + +slave_newconn_once: +247c 44a4c009 bpatch patch09_1 ,mem_patch09 +247d 68008174 fetch 1 ,extm_newconn_am_addr +247e 207a0000 rtn blank +247f 1fe20800 icopy am_addr +2480 20402514 call slave_conn_recv_packet +2481 24768000 nrtn match +2482 18000200 force type_null ,type +2483 20402757 call slave_conn_send_packet +2484 18827e00 deposit am_addr +2485 60008077 store 1 ,mem_amaddr +2486 18007e00 force 0 ,pdata +2487 60008174 store 1 ,extm_newconn_am_addr +2488 20600000 rtn + +prepare_tx: +2489 44a54009 bpatch patch09_2 ,mem_patch09 +248a 68008030 fetch 1 ,mem_state +248b c3012496 bbit0 state_insco ,prepare_tx_not_sco +248c 18000207 force type_hv3 ,type +248d c583a495 bmark0 mark_esco ,prepare_tx_not_esco +248e 20402725 call check_esco_amaddr +248f 2420a496 nbranch prepare_tx_not_sco ,true +2490 20372496 branch prepare_tx_not_sco ,attempt +2491 204024c1 call set_wait_ack +2492 58000002 setarg 2 +2493 600140c8 store 2 ,mem_retransmission_cnt +2494 20600000 rtn + +prepare_tx_not_esco: +2495 24770000 nrtn attempt + +prepare_tx_not_sco: +2496 44a5c009 bpatch patch09_3 ,mem_patch09 +2497 20402243 call context_check_all_wack +2498 2422a4a7 nbranch prepare_tx_no_retransmit ,zero +2499 68008047 fetch 1 ,mem_arq +249a c301a4b0 bbit0 wack ,prepare_tx_pollnull + +prepare_tx_retransmit: +249b c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback +249c 6800817f fetch 1 ,mem_debug_config +249d c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat +249e 680140c8 fetch 2 ,mem_retransmission_cnt +249f 1fe0ffff increase -1 ,pdata +24a0 600140c8 store 2 ,mem_retransmission_cnt +24a1 203a24a5 branch prepare_tx_nomore_retransmit ,blank +24a2 6800c0c5 fetch 1 ,mem_last_type +24a3 98000200 iforce type +24a4 20600000 rtn + +prepare_tx_nomore_retransmit: +24a5 44a64009 bpatch patch09_4 ,mem_patch09 +24a6 20402687 call clear_got_tx + +prepare_tx_no_retransmit: +24a7 20402725 call check_esco_amaddr +24a8 2020a4b0 branch prepare_tx_pollnull ,true +24a9 2040600a call send_lmp +24aa 203424be branch prepare_tx_sendlmp ,user +24ab 6800804b fetch 1 ,mem_op +24ac c28324c0 bbit1 op_txl2cap ,prepare_tx_sendl2cap +24ad c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback +24ae 6800817f fetch 1 ,mem_debug_config +24af c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat + +prepare_tx_pollnull: +24b0 18000201 force type_poll ,type +24b1 20748000 rtn master +24b2 18000200 force type_null ,type +24b3 20600000 rtn + +prepare_tx_loopback: +24b4 44a6c009 bpatch patch09_5 ,mem_patch09 +24b5 68008019 fetch 1 ,mem_rx_type +24b6 98000200 iforce type +24b7 c1808000 rtnne 1 +24b8 18000200 force type_null ,type +24b9 20600000 rtn + +prepare_tx_txpat: +24ba 68008158 fetch 1 ,test_mode_packet_type +24bb 1fe1020f and pdata ,0xf ,type +24bc 79200005 set1 mark_loopback ,mark +24bd 20600000 rtn + +prepare_tx_sendlmp: +24be 18000213 force type_lmp ,type +24bf 202024c1 branch set_wait_ack + +prepare_tx_sendl2cap: +24c0 204024ca call tx_l2cap_type + +set_wait_ack: +24c1 44a74009 bpatch patch09_6 ,mem_patch09 +24c2 68088047 fetcht 1 ,mem_arq +24c3 79200403 set1 wack ,temp +24c4 60088047 storet 1 ,mem_arq +24c5 18227e00 deposit type +24c6 6000c0c5 store 1 ,mem_last_type +24c7 5800ffff setarg 0xffff +24c8 600140c8 store 2 ,mem_retransmission_cnt +24c9 20600000 rtn + +tx_l2cap_type: +24ca 44a7c009 bpatch patch09_7 ,mem_patch09 +24cb 6800804c fetch 1 ,mem_state_map +24cc 2feffe05 isolate1 smap_edr ,pdata +24cd 680141dc fetch 2 ,mem_tx_len +24ce 2020a4e0 branch tx_l2cap_type_edr ,true +24cf 18000203 force type_dm1 ,type +24d0 1fe67c11 sub pdata ,17 ,null +24d1 20610000 rtn positive +24d2 18000204 force type_dh1 ,type +24d3 1fe67c1b sub pdata ,27 ,null +24d4 20610000 rtn positive +24d5 1800020a force type_dm3 ,type +24d6 1fe67c79 sub pdata ,121 ,null +24d7 20610000 rtn positive +24d8 1800020b force type_dh3 ,type +24d9 1fe67cb7 sub pdata ,183 ,null +24da 20610000 rtn positive +24db 1800020e force type_dm5 ,type +24dc 1fe67ce0 sub pdata ,224 ,null +24dd 20610000 rtn positive +24de 1800020f force type_dh5 ,type +24df 20600000 rtn + +tx_l2cap_type_edr: +24e0 18000203 force type_dm1 ,type +24e1 1fe67c11 sub pdata ,17 ,null +24e2 20610000 rtn positive +24e3 18000204 force type_dh1 ,type +24e4 1fe67c36 sub pdata ,54 ,null +24e5 20610000 rtn positive +24e6 1800020a force type_dm3 ,type +24e7 d840016f arg 367 ,temp +24e8 98467c00 isub temp ,null +24e9 24610000 nrtn positive +24ea 1800020e force type_dm5 ,type +24eb d84002a7 arg 679 ,temp +24ec 98467c00 isub temp ,null +24ed 24610000 nrtn positive +24ee 1800020f force type_dh5 ,type +24ef 20600000 rtn + +slave_receive_master_slot: +24f0 68008030 fetch 1 ,mem_state +24f1 c300a4f5 bbit0 state_insniff ,slave_receive_notsniff +24f2 68010032 fetch 2 ,mem_tsniff +24f3 203a24f5 branch slave_receive_notsniff ,blank +24f4 243724f7 nbranch slave_receive_sniff ,attempt + +slave_receive_notsniff: +24f5 20402a4f call rf_setup_time_master_slot + +slave_receive_access: +24f6 1d00c201 add clke_bt ,1 ,bt_clk + +slave_receive_sniff: +24f7 78287c00 enable swfine +24f8 6801003e fetch 2 ,mem_rx_window +24f9 1fe37e00 rshift pdata ,pdata +24fa d8400500 arg param_pll_setup ,temp +24fb 9840fe00 iadd temp ,pdata +24fc 20402a24 call ahead_window +24fd 204028ea call fetch_extm_bt_adr +24fe 18004803 force 0x03 ,freq_mode +24ff 204028cc call rx_radio_freq +2500 2040242a call init_rx_packet_flags +2501 204029f1 call prep_crypt +2502 44a8400a bpatch patch0a_0 ,mem_patch0a +2503 6801003e fetch 2 ,mem_rx_window +2504 1fe37e00 rshift pdata ,pdata +2505 20402a24 call ahead_window +2506 204029eb call start_receiver +2507 7826fc00 enable decode_fec0 +2508 6801003e fetch 2 ,mem_rx_window +2509 d84003bb arg param_clke_cal ,temp +250a 9840b600 iadd temp ,stop_watch +250b 37c18400 correlate null ,timeout +250c 1b420400 copy clke ,temp +250d 600b009a storet 6 ,mem_sync_clke +250e 7846fc00 disable decode_fec0 +250f 246c0000 nrtn sync +2510 dd2003bb arg param_clke_cal ,clke_rt +2511 1c225000 copy bt_clk ,clke_bt +2512 2035ab05 branch lpm_adjust_clk ,wake +2513 20600000 rtn + +slave_conn_recv_packet: +2514 44a8c00a bpatch patch0a_1 ,mem_patch0a +2515 204024f0 call slave_receive_master_slot +2516 242c28f9 nbranch shutdown_radio ,sync +2517 204029bb call save_rssi +2518 c588a51c bmark0 mark_testmode ,receive_packet +2519 680100f6 fetch 2 ,mem_tst_pktcnt_sync +251a 1fe0fe01 increase 1 ,pdata +251b 600100f6 store 2 ,mem_tst_pktcnt_sync + +receive_packet: +251c 1c230400 rshift bt_clk ,temp +251d 18419c40 or temp ,0x40 ,white_init + +receive_packet_whitened: +251e 44a9400a bpatch patch0a_2 ,mem_patch0a +251f 7823fc00 enable enable_white +2520 78257c00 enable enable_hec +2521 7825fc00 enable decode_fec1 +2522 09800003 parse demod ,bucket ,3 +2523 198cfe00 rshift8 pwindow ,pdata +2524 6000815d store 1 ,mem_temp_am_addr +2525 09800004 parse demod ,bucket ,4 +2526 08008007 inject bucket ,7 +2527 19827e00 copy pwindow ,pdata +2528 60008019 store 1 ,mem_rx_type +2529 09800003 parse demod ,bucket ,3 +252a 198cfe00 rshift8 pwindow ,pdata +252b 6000815e store 1 ,mem_temp_arq +252c 68008019 fetch 1 ,mem_rx_type +252d 1fe67c03 sub pdata ,3 ,null +252e 20212533 branch receive_packet_noedr ,positive +252f c003a533 beq 7 ,receive_packet_noedr +2530 6800804c fetch 1 ,mem_state_map +2531 2feffe05 isolate1 smap_edr ,pdata +2532 7920aa01 setflag true ,psk ,radio_ctrl + +receive_packet_noedr: +2533 44a9c00a bpatch patch0a_3 ,mem_patch0a +2534 09800008 parse demod ,bucket ,8 +2535 7845fc00 disable decode_fec1 +2536 78457c00 disable enable_hec +2537 20232631 branch error_header ,crc_failed +2538 c588a53c bmark0 mark_testmode ,receive_packet_amchk +2539 680100f8 fetch 2 ,mem_tst_pktcnt_hec +253a 1fe0fe01 increase 1 ,pdata +253b 600100f8 store 2 ,mem_tst_pktcnt_hec + +receive_packet_amchk: +253c 44aa400a bpatch patch0a_4 ,mem_patch0a +253d 6800815d fetch 1 ,mem_temp_am_addr +253e 2fe00e00 compare 0 ,pdata ,0x07 +253f 7920800a setflag true ,mark_am_addr_broadcast ,mark +2540 2020a54c branch am_addr_ok ,true +2541 a8800e00 icompare 0x07 ,am_addr +2542 2020a54b branch am_addr_match ,true +2543 c583a64d bmark0 mark_esco ,end_of_packet +2544 680880b0 fetcht 1 ,mem_saved_amaddr +2545 a8400e00 icompare 0x7 ,temp +2546 2420a64d nbranch end_of_packet ,true +2547 68008047 fetch 1 ,mem_arq +2548 793ffe05 set0 arqnx ,pdata +2549 79207e04 set1 flowx ,pdata +254a 60008047 store 1 ,mem_arq + +am_addr_match: +254b 7836fc00 enable match + +am_addr_ok: +254c 44aac00a bpatch patch0a_5 ,mem_patch0a +254d 68008019 fetch 1 ,mem_rx_type +254e 1fe20200 icopy type +254f c505255b bmark1 mark_am_addr_broadcast ,arqn_bypass +2550 6808815e fetcht 1 ,mem_temp_arq +2551 68008047 fetch 1 ,mem_arq +2552 793ffe00 set0 flow ,pdata +2553 284ffe00 isolate1 flow ,temp +2554 7920fe00 setflag true ,flow ,pdata +2555 284ffe01 isolate1 arqn ,temp +2556 7920fe01 setflag true ,arqn ,pdata +2557 60008047 store 1 ,mem_arq +2558 284c0001 isolate0 arqn ,temp +2559 2020a55b branch arqn_bypass ,true +255a 20402687 call clear_got_tx + +arqn_bypass: +255b 44ab400a bpatch patch0a_6 ,mem_patch0a +255c d8400000 arg 0 ,temp +255d 20402a1c call reserve_slot +255e 18217e0f and type ,0xf ,pdata +255f c000a587 beq type_poll ,process_poll +2560 c000264d beq type_null ,end_of_packet +2561 c0012659 beq type_fhs ,process_fhs +2562 6808815e fetcht 1 ,mem_temp_arq +2563 68008047 fetch 1 ,mem_arq +2564 a8400800 icompare 0x04 ,temp +2565 2420a569 nbranch rx_type_dispatch ,true +2566 c5852568 bmark0 mark_am_addr_broadcast ,failed_seqn +2567 c303a569 bbit0 bcast1 ,rx_type_dispatch + +failed_seqn: +2568 7920000f set1 mark_old_packet ,mark + +rx_type_dispatch: +2569 44abc00a bpatch patch0a_7 ,mem_patch0a +256a 18227e00 deposit type +256b c001a589 beq type_dm1 ,process_dm1 +256c c002258d beq type_dh1 ,process_dh1 +256d c003a578 beq type_hv3 ,process_hev +256e c004258c beq type_3dh1 ,process_3dh1 +256f d8400004 arg 4 ,temp +2570 20402a1c call reserve_slot +2571 c0052588 beq type_dm3 ,process_dm3 +2572 c005a58b beq type_dh3 ,process_dh3 +2573 d8400008 arg 8 ,temp +2574 20402a1c call reserve_slot +2575 c0072588 beq type_dm5 ,process_dm5 +2576 c007a58b beq type_dh5 ,process_dh5 +2577 20600000 rtn + +process_hev: +2578 44ac400b bpatch patch0b_0 ,mem_patch0b +2579 7826fc00 enable decode_fec0 +257a 7824fc00 enable enable_crc +257b 78277c00 enable encrypt +257c d8a000d1 arg mem_sco_ibuf ,contw +257d 1800721e force 30 ,loopcnt + +process_hev_loop: +257e 09800008 parse demod ,bucket ,8 +257f 19897e00 rshift3 pwindow ,pdata +2580 e0a08000 istore 1 ,contw +2581 c200257e loop process_hev_loop +2582 c583a64d bmark0 mark_esco ,end_of_packet +2583 09800010 parse demod ,bucket ,16 +2584 7d230008 nsetflag crc_failed ,mark_esco_rxok ,mark +2585 2023263d branch error_payload ,crc_failed +2586 20202620 branch ack_payload + +process_poll: +2587 2020264d branch end_of_packet + +process_dm3: + +process_dm5: +2588 79200010 set1 mark_longpacket ,mark + +process_dm1: +2589 78267c00 enable decode_fec2 +258a 2020258e branch process_dmh + +process_dh3: + +process_dh5: +258b 79200010 set1 mark_longpacket ,mark + +process_3dh1: +258c 79202a02 set1 psk3m ,radio_ctrl + +process_dh1: +258d 7826fc00 enable decode_fec0 + +process_dmh: +258e 44acc00b bpatch patch0b_1 ,mem_patch0b +258f c500a64d bmark1 mark_rxbuf_inuse ,end_of_packet +2590 2aac0001 isolate0 psk ,radio_ctrl +2591 2020a59a branch process_dmh_noedr ,true +2592 7843fc00 disable enable_white +2593 7826fc00 enable decode_fec0 +2594 78467c00 disable decode_fec2 +2595 1c409602 add clkn_bt ,2 ,timeup +2596 34530400 correlate clkn_bt ,meet +2597 242c263d nbranch error_payload ,sync +2598 79200010 set1 mark_longpacket ,mark +2599 7823fc00 enable enable_white + +process_dmh_noedr: +259a 44ad400b bpatch patch0b_2 ,mem_patch0b +259b 78277c00 enable encrypt +259c 7824fc00 enable enable_crc +259d 09800003 parse demod ,bucket ,3 +259e 198cfe00 rshift8 pwindow ,pdata +259f 60008180 store 1 ,mem_lch_code +25a0 09800005 parse demod ,bucket ,5 +25a1 c50825a5 bmark1 mark_longpacket ,process_dmh_long +25a2 19897200 rshift3 pwindow ,loopcnt +25a3 1f297200 rshift3 loopcnt ,loopcnt +25a4 202025a8 branch process_dmh_common + +process_dmh_long: +25a5 09800005 parse demod ,bucket ,5 +25a6 19837200 rshift pwindow ,loopcnt +25a7 09800003 parse demod ,bucket ,3 + +process_dmh_common: +25a8 44adc00b bpatch patch0b_3 ,mem_patch0b +25a9 1f227e00 deposit loopcnt +25aa 6001015f store 2 ,mem_len +25ab 203a25e8 branch process_dmh_data_end ,blank +25ac 9ea67c00 isub mask3ff ,null +25ad 2021263d branch error_payload ,positive +25ae 44ae400b bpatch patch0b_4 ,mem_patch0b +25af 793f8000 set0 mark_fhs_eir ,mark +25b0 68008180 fetch 1 ,mem_lch_code +25b1 1fe17e03 and_into 0x03 ,pdata +25b2 d8a00551 arg mem_rxbuf ,contw +25b3 c001a5ba beq llid_lmp ,process_lmp +25b4 c508a5e4 bmark1 mark_testmode ,process_dmh_data +25b5 68008180 fetch 1 ,mem_lch_code +25b6 1fe17e03 and_into 0x03 ,pdata +25b7 c00125bf beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +25b8 c000a5d3 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +25b9 2020263d branch error_payload + +process_lmp: +25ba 6801015f fetch 2 ,mem_len +25bb 1fe67c70 sub pdata ,0x70 ,null +25bc 2421263d nbranch error_payload ,positive +25bd c507a620 bmark1 mark_old_packet ,ack_payload +25be 202025e4 branch process_dmh_data + +process_dmh_data_l2cap_start_pkt: +25bf 44aec00b bpatch patch0b_5 ,mem_patch0b +25c0 c507a620 bmark1 mark_old_packet ,ack_payload +25c1 6801015f fetch 2 ,mem_len +25c2 d84002e0 arg 0x2e0 ,temp +25c3 98467c00 isub temp ,null +25c4 2021263d branch error_payload ,positive +25c5 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +25c6 c30025c9 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +25c7 c300a5ce bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +25c8 2020264d branch end_of_packet + +process_dmh_data_into_buff1: +25c9 70026101 jam 1 ,mem_l2cap_rxbuff_new +25ca 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +25cb c080264d bne 0 ,end_of_packet +25cc d8a01000 arg mem_l2cap_rxbuff1 ,contw +25cd 202025e4 branch process_dmh_data + +process_dmh_data_into_buff2: +25ce 70026102 jam 2 ,mem_l2cap_rxbuff_new +25cf 6801025f fetch 2 ,mem_l2cap_rxbuff2_len +25d0 c080264d bne 0 ,end_of_packet +25d1 d8a01400 arg mem_l2cap_rxbuff2 ,contw +25d2 202025e4 branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt: +25d3 44af400b bpatch patch0b_6 ,mem_patch0b +25d4 c507a620 bmark1 mark_old_packet ,ack_payload +25d5 6801015f fetch 2 ,mem_len +25d6 d84002e0 arg 0x2e0 ,temp +25d7 98467c00 isub temp ,null +25d8 2021263d branch error_payload ,positive +25d9 68008261 fetch 1 ,mem_l2cap_rxbuff_new +25da c000a5dd beq 1 ,process_dmh_data_l2cap_continue_pkt1 +25db c00125e1 beq 2 ,process_dmh_data_l2cap_continue_pkt2 +25dc 2020264d branch end_of_packet + +process_dmh_data_l2cap_continue_pkt1: +25dd d8a01000 arg mem_l2cap_rxbuff1 ,contw +25de 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +25df 98a08a00 iadd contw ,contw +25e0 202025e4 branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt2: +25e1 d8a01400 arg mem_l2cap_rxbuff2 ,contw +25e2 6801025f fetch 2 ,mem_l2cap_rxbuff2_len +25e3 98a08a00 iadd contw ,contw + +process_dmh_data: +25e4 09800008 parse demod ,bucket ,8 +25e5 19897e00 rshift3 pwindow ,pdata +25e6 e0a08000 istore 1 ,contw +25e7 c20025e4 loop process_dmh_data + +process_dmh_data_end: +25e8 44afc00b bpatch patch0b_7 ,mem_patch0b +25e9 09800010 parse demod ,bucket ,16 +25ea 20232637 branch error_payload_crc ,crc_failed +25eb 6800c363 fetch 1 ,mem_l2cap_flow_ctrl_flag +25ec c000a64d beq l2cap_flow_ctrl_enable ,end_of_packet +25ed c508a60d bmark1 mark_testmode ,process_dmh_cont +25ee c507a64a bmark1 mark_old_packet ,redundant_payload +25ef 68008180 fetch 1 ,mem_lch_code +25f0 2fe00603 compare 3 ,pdata ,3 +25f1 2020a60d branch process_dmh_cont ,true +25f2 6801015f fetch 2 ,mem_len +25f3 203a260d branch process_dmh_cont ,blank +25f4 44b0400c bpatch patch0c_0 ,mem_patch0c +25f5 68008261 fetch 1 ,mem_l2cap_rxbuff_new +25f6 c000a5f9 beq 1 ,process_l2cap_pass_crc_buff1 +25f7 c0012603 beq 2 ,process_l2cap_pass_crc_buff2 +25f8 20202a8c branch assert + +process_l2cap_pass_crc_buff1: +25f9 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +25fa 6809015f fetcht 2 ,mem_len +25fb 9840fe00 iadd temp ,pdata +25fc 6001025d store 2 ,mem_l2cap_rxbuff1_len +25fd c0002a8c beq 0 ,assert +25fe 68091000 fetcht 2 ,mem_l2cap_rxbuff1 +25ff 18408404 increase 4 ,temp +2600 98467c00 isub temp ,null +2601 2042a747 call l2cap_buff1_inuse ,zero +2602 2020260d branch process_dmh_cont + +process_l2cap_pass_crc_buff2: +2603 6801025f fetch 2 ,mem_l2cap_rxbuff2_len +2604 6809015f fetcht 2 ,mem_len +2605 9840fe00 iadd temp ,pdata +2606 6001025f store 2 ,mem_l2cap_rxbuff2_len +2607 c0002a8c beq 0 ,assert +2608 68091400 fetcht 2 ,mem_l2cap_rxbuff2 +2609 18408404 add temp ,4 ,temp +260a 98467c00 isub temp ,null +260b 2042a74b call l2cap_buff2_inuse ,zero +260c 2020260d branch process_dmh_cont + +process_dmh_cont: +260d 44b0c00c bpatch patch0c_1 ,mem_patch0c +260e 6808804c fetcht 1 ,mem_state_map +260f 68008180 fetch 1 ,mem_lch_code +2610 2fe00603 compare 3 ,pdata ,0x03 +2611 79208406 setflag true ,smap_rxlmp ,temp +2612 7d208407 nsetflag true ,smap_rxl2cap ,temp +2613 6008804c storet 1 ,mem_state_map +2614 2420a616 nbranch process_dmh_cont_rxbuf_not_use ,true +2615 79200001 set1 mark_rxbuf_inuse ,mark + +process_dmh_cont_rxbuf_not_use: +2616 c588a620 bmark0 mark_testmode ,ack_payload +2617 284ffe06 isolate1 smap_rxlmp ,temp +2618 2020a620 branch ack_payload ,true +2619 680100fa fetch 2 ,mem_tst_pktcnt_crc +261a 1fe0fe01 increase 1 ,pdata +261b 600100fa store 2 ,mem_tst_pktcnt_crc +261c 79200005 set1 mark_loopback ,mark +261d 793f8407 set0 smap_rxl2cap ,temp +261e 793f8001 set0 mark_rxbuf_inuse ,mark +261f 6008804c storet 1 ,mem_state_map + +ack_payload: +2620 44b1400c bpatch patch0c_2 ,mem_patch0c +2621 6808815e fetcht 1 ,mem_temp_arq +2622 68008047 fetch 1 ,mem_arq +2623 79207e05 set1 arqnx ,pdata +2624 284ffe02 isolate1 seqn ,temp +2625 7920fe02 setflag true ,seqn ,pdata +2626 280ffe0a isolate1 mark_am_addr_broadcast ,mark +2627 7920fe07 setflag true ,bcast1 ,pdata +2628 60008047 store 1 ,mem_arq +2629 6801015f fetch 2 ,mem_len +262a 243a264d nbranch end_of_packet ,blank +262b 6800804c fetch 1 ,mem_state_map +262c 793ffe07 set0 smap_rxl2cap ,pdata +262d 6000804c store 1 ,mem_state_map +262e 68008180 fetch 1 ,mem_lch_code +262f 2fe00e01 compare 0x01 ,pdata ,0x07 +2630 2020264d branch end_of_packet + +error_header: +2631 44b1c00c bpatch patch0c_3 ,mem_patch0c +2632 7856fc00 disable match +2633 6801001a fetch 2 ,mem_rx_hec_err +2634 1fe0fe01 increase 1 ,pdata +2635 6001001a store 2 ,mem_rx_hec_err +2636 2020264d branch end_of_packet + +error_payload_crc: +2637 6801001c fetch 2 ,mem_rx_crc_err +2638 1fe0fe01 increase 1 ,pdata +2639 6001001c store 2 ,mem_rx_crc_err +263a 2040263e call discard_pkt +263b c588a63d bmark0 mark_testmode ,error_payload +263c 79200005 set1 mark_loopback ,mark + +error_payload: +263d 2020264d branch end_of_packet + +discard_pkt: +263e 44b2400c bpatch patch0c_4 ,mem_patch0c +263f 68008180 fetch 1 ,mem_lch_code +2640 2fe00603 compare 3 ,pdata ,0x03 +2641 2420a646 nbranch discard_pkt_l2cap ,true + +discard_pkt_lmp: +2642 6808804c fetcht 1 ,mem_state_map +2643 793f8406 set0 smap_rxlmp ,temp +2644 6008804c storet 1 ,mem_state_map +2645 20600000 rtn + +discard_pkt_l2cap: +2646 6808804c fetcht 1 ,mem_state_map +2647 793f8407 set0 smap_rxl2cap ,temp +2648 6008804c storet 1 ,mem_state_map +2649 20204c0b branch h4_send_acl_trigger_clear + +redundant_payload: +264a 68008047 fetch 1 ,mem_arq +264b 79207e05 set1 arqnx ,pdata +264c 60008047 store 1 ,mem_arq + +end_of_packet: +264d 44b2c00c bpatch patch0c_5 ,mem_patch0c +264e 784efc00 disable encode_fec0 +264f 784e7c00 disable encode_fec2 +2650 7846fc00 disable decode_fec0 +2651 78467c00 disable decode_fec2 +2652 7844fc00 disable enable_crc +2653 78477c00 disable encrypt +2654 7843fc00 disable enable_white +2655 2030a8f9 branch shutdown_radio ,is_rx +2656 37d38200 until null ,tx_clear +2657 20000064 nop 100 +2658 202028f9 branch shutdown_radio + +process_fhs: +2659 44b3400c bpatch patch0c_6 ,mem_patch0c +265a 7824fc00 enable enable_crc +265b 78267c00 enable decode_fec2 +265c 09800048 parse demod ,bucket ,72 +265d 2feffe3a isolate1 58 ,pdata +265e 79208000 setflag true ,mark_fhs_eir ,mark +265f 1c020400 copy bt_adr ,temp +2660 57e04000 ialigned bt_adr +2661 57e03c00 ialigned fhs0 +2662 782afc00 pulse recalc +2663 380bffff setsect 2 ,0xfffff +2664 380cffff setsect 3 ,0x0ffff +2665 20000020 nop 32 +2666 29a80000 iverify fhs_parity +2667 1d827e00 deposit lap +2668 60018178 store 3 ,extm_lap +2669 1da27e00 deposit uap +266a 6000817b store 1 ,extm_uap +266b 18424000 copy temp ,bt_adr +266c 2020a66e branch fhs_parity_ok ,true +266d 2020263d branch error_payload + +fhs_parity_ok: +266e 44b3c00c bpatch patch0c_7 ,mem_patch0c +266f 09800048 parse demod ,bucket ,72 +2670 57e03e00 ialigned fhs1 +2671 57e00800 ialigned am_addr +2672 57e05c00 ialigned nap +2673 57e02400 ialigned regb +2674 18007e00 force 0 ,pdata +2675 09800010 parse demod ,bucket ,16 +2676 2023263d branch error_payload ,crc_failed +2677 5ffffffc setarg 0x0ffffffc +2678 9a417e00 iand regb ,pdata +2679 60020165 store 4 ,mem_clke_bt +267a 1ba27e00 deposit fhs_class +267b 60018175 store 3 ,extm_class +267c 1b827e00 deposit fhs_misc +267d 60008173 store 1 ,extm_fhs_misc +267e 18827e00 deposit am_addr +267f 60008174 store 1 ,extm_newconn_am_addr +2680 1dc27e00 deposit nap +2681 6001017c store 2 ,extm_nap +2682 1c227e00 deposit bt_clk +2683 08008220 inject rxf ,32 +2684 28201e02 compare type_fhs ,type ,0x0f +2685 7920800b setflag true ,mark_fhs_already_good ,mark +2686 2020264d branch end_of_packet + +clear_got_tx: +2687 44b4400d bpatch patch0d_0 ,mem_patch0d +2688 68008047 fetch 1 ,mem_arq +2689 c4018000 rtnbit0 wack +268a 793ffe03 set0 wack ,pdata +268b 79407e06 setflip seqnx ,pdata +268c 60008047 store 1 ,mem_arq +268d 6800c0c5 fetch 1 ,mem_last_type +268e c009a69c beq type_lmp ,clear_got_txlmp +268f c1038000 rtneq type_hv3 +2690 6800804b fetch 1 ,mem_op +2691 c4030000 rtnbit0 op_txl2cap ,pdata +2692 793ffe06 set0 op_txl2cap ,pdata +2693 79207e07 set1 op_pkt_comp ,pdata +2694 6000804b store 1 ,mem_op +2695 793f8002 set0 mark_tx_l2cap ,mark +2696 68014246 fetch 2 ,mem_l2cap_tx_multi_offset +2697 247a0000 nrtn blank +2698 6800804b fetch 1 ,mem_op +2699 793ffe07 set0 op_pkt_comp ,pdata +269a 6000804b store 1 ,mem_op +269b 2020525d branch l2cap_malloc_free + +clear_got_txlmp: +269c 44b4c00d bpatch patch0d_1 ,mem_patch0d +269d 680084b7 fetch 1 ,mem_lmo_header_opcode +269e 1fe37e00 rshift pdata ,pdata +269f c008a6b8 beq lmp_start_encryption_req ,start_encryption +26a0 c00926c0 beq lmp_stop_encryption_req ,stop_encryption +26a1 c00c26e9 beq lmp_unsniff_req ,sniff_exit +26a2 c03fa6a8 beq lmp_escape ,clear_lmp_escape +26a3 c1818000 rtnne lmp_accepted +26a4 680084b8 fetch 1 ,mem_lmo_payload +26a5 c015a6b0 beq lmp_sco_link_req ,sco_link_req_by_slave +26a6 c008a6ab beq lmp_start_encryption_req ,clear_send_setup_complete +26a7 20600000 rtn + +clear_lmp_escape: +26a8 680084b8 fetch 1 ,mem_lmo_payload +26a9 79207e07 set1 7 ,pdata +26aa 20600000 rtn + +clear_send_setup_complete: +26ab 20748000 rtn master +26ac 68008030 fetch 1 ,mem_state +26ad c3820000 rtnbit1 state_conn_comp +26ae 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +26af 20600000 rtn + +sco_link_req_by_slave: +26b0 20748000 rtn master +26b1 68008031 fetch 1 ,mem_mode +26b2 2feffe04 isolate1 send_sco_when_slave ,pdata +26b3 2020a6b5 branch clean_mem_mode ,true +26b4 20600000 rtn + +clean_mem_mode: +26b5 793ffe04 set0 send_sco_when_slave ,pdata +26b6 60008031 store 1 ,mem_mode +26b7 20600000 rtn + +start_encryption: +26b8 44b5400d bpatch patch0d_2 ,mem_patch0d +26b9 6800804c fetch 1 ,mem_state_map +26ba 79207e02 set1 smap_encryption ,pdata +26bb 6000804c store 1 ,mem_state_map +26bc 70801101 hjam 1 ,core_encrypt +26bd 68008030 fetch 1 ,mem_state +26be 2feffe04 isolate1 state_conn_comp ,pdata +26bf 20600000 rtn + +stop_encryption: +26c0 44b5c00d bpatch patch0d_3 ,mem_patch0d +26c1 6800804c fetch 1 ,mem_state_map +26c2 793ffe02 set0 smap_encryption ,pdata +26c3 6000804c store 1 ,mem_state_map +26c4 70801100 hjam 0 ,core_encrypt +26c5 20600000 rtn + +sniff_init: +26c6 44b6400d bpatch patch0d_4 ,mem_patch0d +26c7 1c427e00 copy clkn_bt ,pdata +26c8 6002420c store 4 ,mem_lpm_delay_after_sniff +26c9 1c40a203 add clkn_bt ,3 ,rega +26ca 2034a6cc branch sniff_init_master ,master +26cb 1d00a203 add clke_bt ,3 ,rega + +sniff_init_master: +26cc 68090032 fetcht 2 ,mem_tsniff +26cd 1a227e00 deposit rega +26ce 793ffe1b set0 27 ,pdata +26cf 9846fc00 idiv temp +26d0 68010075 fetch 2 ,mem_dsniff +26d1 20407f86 call wait_div_end +26d2 18072600 remainder regc +26d3 9a667e00 isub regc ,pdata +26d4 202126d6 branch sniff_init_nowrap ,positive +26d5 9840fe00 iadd temp ,pdata + +sniff_init_nowrap: +26d6 9a20fe00 iadd rega ,pdata +26d7 60020034 store 4 ,mem_sniff_anchor +26d8 70455b00 jam switch_flag_init ,mem_switch_flag +26d9 68008030 fetch 1 ,mem_state +26da 79207e01 set1 state_insniff ,pdata +26db 60008030 store 1 ,mem_state +26dc 68008073 fetch 1 ,mem_sniff_attempt +26dd 6000808a store 1 ,mem_current_sniff_attempt +26de 58000000 setarg 0 +26df 6001c169 store 3 ,mem_sniff_rcv +26e0 6001c16c store 3 ,mem_sniff_lost +26e1 6000c159 store 1 ,mem_sniff_unint_lost +26e2 700a990b jam bt_evt_enter_sniff ,mem_fifo_temp +26e3 20407d86 call ui_ipc_send_event +26e4 680140c1 fetch 2 ,mem_rx_window_sniff +26e5 6001003e store 2 ,mem_rx_window +26e6 24748000 nrtn master +26e7 18808fff add am_addr ,-1 ,queue +26e8 20600000 rtn + +sniff_exit: +26e9 44b6c00d bpatch patch0d_5 ,mem_patch0d +26ea 68008030 fetch 1 ,mem_state +26eb c4008000 rtnbit0 state_insniff +26ec 793ffe01 set0 state_insniff ,pdata +26ed 60008030 store 1 ,mem_state +26ee 680140bf fetch 2 ,mem_rx_window_init +26ef 6001003e store 2 ,mem_rx_window +26f0 7855fc00 disable wake +26f1 700a990c jam bt_evt_exit_sniff ,mem_fifo_temp +26f2 20207d86 branch ui_ipc_send_event + +check_attempt: +26f3 44b7400d bpatch patch0d_6 ,mem_patch0d +26f4 78377c00 enable attempt +26f5 68008030 fetch 1 ,mem_state +26f6 c280a700 bbit1 state_insniff ,check_attempt_sniff +26f7 c6088000 rtnmark1 mark_testmode +26f8 68008047 fetch 1 ,mem_arq +26f9 c3818000 rtnbit1 wack +26fa 68008048 fetch 1 ,mem_lmp_to_send +26fb 247a0000 nrtn blank +26fc 6800804b fetch 1 ,mem_op +26fd c3830000 rtnbit1 op_txl2cap + +check_attempt_nomore: +26fe 18007e00 force 0 ,pdata +26ff 20600000 rtn + +check_attempt_sniff: +2700 c301270f bbit0 state_insco ,check_attempt_not_sco +2701 6800808a fetch 1 ,mem_current_sniff_attempt +2702 c0012706 beq 2 ,check_attempt_sniff_restore_sco +2703 68008047 fetch 1 ,mem_arq +2704 c281a718 bbit1 wack ,check_attempt_notimeout +2705 c5842718 bmark0 mark_esco_rxok ,check_attempt_notimeout + +check_attempt_sniff_restore_sco: +2706 2434a718 nbranch check_attempt_notimeout ,master +2707 68008048 fetch 1 ,mem_lmp_to_send +2708 243a2718 nbranch check_attempt_notimeout ,blank + +check_attempt_sco_master: +2709 680080ef fetch 1 ,mem_sco_poll +270a 1fe0ffff increase -1 ,pdata +270b 600080ef store 1 ,mem_sco_poll +270c 243a26fe nbranch check_attempt_nomore ,blank +270d 7000ef10 jam param_sco_poll ,mem_sco_poll +270e 20202718 branch check_attempt_notimeout + +check_attempt_not_sco: +270f 6800808a fetch 1 ,mem_current_sniff_attempt +2710 c080a718 bne 1 ,check_attempt_notimeout +2711 6800808b fetch 1 ,mem_current_sniff_timeout +2712 203a2718 branch check_attempt_notimeout ,blank +2713 1fe0ffff increase -1 ,pdata +2714 6000808b store 1 ,mem_current_sniff_timeout +2715 68008047 fetch 1 ,mem_arq +2716 c3818000 rtnbit1 wack +2717 24768000 nrtn match + +check_attempt_notimeout: +2718 6800808a fetch 1 ,mem_current_sniff_attempt +2719 1fe0ffff increase -1 ,pdata +271a 6000808a store 1 ,mem_current_sniff_attempt +271b 20600000 rtn + +sniff_check_window: +271c 44b7c00d bpatch patch0d_7 ,mem_patch0d +271d 78487c00 disable swfine +271e 18423600 copy temp ,stop_watch +271f 20402260 call context_search_sniff_window +2720 78547c00 disable user +2721 24628000 nrtn zero +2722 18003600 force 0 ,stop_watch +2723 78347c00 enable user +2724 20600000 rtn + +check_esco_amaddr: +2725 6800c158 fetch 1 ,mem_esco_addr +2726 a881fe00 icompare 0xff ,am_addr +2727 20600000 rtn + +parse_l2cap: +2728 44b8400e bpatch patch0e_0 ,mem_patch0e +2729 793f8001 set0 mark_rxbuf_inuse ,mark + +parse_l2cap_cont: +272a 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done +272b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +272c 207a0000 rtn blank +272d 2feffe00 isolate1 l2cap_inuse_buff1 ,pdata +272e d8c01000 arg mem_l2cap_rxbuff1 ,contr +272f 2040cd79 call process_rx_l2cap_pkt ,true +2730 44b8c00e bpatch patch0e_1 ,mem_patch0e +2731 6800826a fetch 1 ,mem_l2cap_rx_done +2732 c000a73b beq l2cap_rx_done ,parse_l2cap_release_buff1 +2733 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done +2734 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +2735 c4008000 rtnbit0 l2cap_inuse_buff2 +2736 d8c01400 arg mem_l2cap_rxbuff2 ,contr +2737 20404d79 call process_rx_l2cap_pkt +2738 6800826a fetch 1 ,mem_l2cap_rx_done +2739 c000a741 beq l2cap_rx_done ,parse_l2cap_release_buff2 +273a 20600000 rtn + +parse_l2cap_release_buff1: +273b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +273c 793ffe00 set0 l2cap_inuse_buff1 ,pdata +273d 60008263 store 1 ,mem_l2cap_rxbuff_inuse +273e 58000000 setarg 0 +273f 6001025d store 2 ,mem_l2cap_rxbuff1_len +2740 20600000 rtn + +parse_l2cap_release_buff2: +2741 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +2742 793ffe01 set0 l2cap_inuse_buff2 ,pdata +2743 60008263 store 1 ,mem_l2cap_rxbuff_inuse +2744 58000000 setarg 0 +2745 6001025f store 2 ,mem_l2cap_rxbuff2_len +2746 20600000 rtn + +l2cap_buff1_inuse: +2747 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +2748 79207e00 set1 l2cap_inuse_buff1 ,pdata +2749 60008263 store 1 ,mem_l2cap_rxbuff_inuse +274a 20600000 rtn + +l2cap_buff2_inuse: +274b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +274c 79207e01 set1 l2cap_inuse_buff2 ,pdata +274d 60008263 store 1 ,mem_l2cap_rxbuff_inuse +274e 20600000 rtn + +slave_send_access: +274f 44b9400e bpatch patch0e_2 ,mem_patch0e +2750 1d00c201 add clke_bt ,1 ,bt_clk +2751 204028ea call fetch_extm_bt_adr +2752 18004803 force 0x03 ,freq_mode +2753 204028d2 call tx_radio_freq +2754 20402a51 call start_transmitter +2755 20402a5f call start_tx_external +2756 20202a64 branch send_access_word + +slave_conn_send_packet: +2757 44b9c00e bpatch patch0e_3 ,mem_patch0e +2758 20402a4d call rf_setup_time_slave_slot +2759 1d027e00 deposit clke_bt +275a 680a40ca fetcht 4 ,mem_next_btclk +275b 98467e00 isub temp ,pdata +275c c1808000 rtnne 1 +275d 28203e00 compare type_null ,type ,0x1f +275e 2420a761 nbranch slave_conn_send_access ,true +275f 68008019 fetch 1 ,mem_rx_type +2760 207a0000 rtn blank + +slave_conn_send_access: +2761 2040274f call slave_send_access + +transmit_packet: +2762 28203e10 compare type_id ,type ,0x1f +2763 2020a64d branch end_of_packet ,true +2764 1c230400 rshift bt_clk ,temp +2765 18419c40 or temp ,0x40 ,white_init + +transmit_packet_whitened: +2766 44ba400e bpatch patch0e_4 ,mem_patch0e +2767 7823fc00 enable enable_white +2768 78257c00 enable enable_hec +2769 782dfc00 enable encode_fec1 +276a 793f8010 set0 mark_longpacket ,mark +276b 18827e00 deposit am_addr +276c 08008603 inject mod ,3 +276d 18227e00 deposit type +276e 08008604 inject mod ,4 +276f 68008047 fetch 1 ,mem_arq +2770 08008004 inject bucket ,4 +2771 08008603 inject mod ,3 +2772 78247c00 enable enable_parity +2773 08008608 inject mod ,8 +2774 784dfc00 disable encode_fec1 +2775 78447c00 disable enable_parity +2776 78457c00 disable enable_hec +2777 793faa02 set0 psk3m ,radio_ctrl +2778 d8400000 arg 0 ,temp +2779 20402a1c call reserve_slot +277a 44bac00e bpatch patch0e_5 ,mem_patch0e +277b 18217e1f and type ,0x1f ,pdata +277c c009a7b4 beq type_lmp ,transmit_lmp +277d c000264d beq type_null ,end_of_packet +277e c000a64d beq type_poll ,end_of_packet +277f c0012797 beq type_fhs ,transmit_fhs +2780 c001a7c5 beq type_dm1 ,transmit_dm1 +2781 c00227cb beq type_dh1 ,transmit_dh1 +2782 c003a78c beq type_hv3 ,transmit_hev +2783 c00427ca beq type_3dh1 ,transmit_3dh1 +2784 d8400004 arg 4 ,temp +2785 20402a1c call reserve_slot +2786 c00527c7 beq type_dm3 ,transmit_dm3 +2787 c005a7cd beq type_dh3 ,transmit_dh3 +2788 d8400008 arg 8 ,temp +2789 20402a1c call reserve_slot +278a c007a7cd beq type_dh5 ,transmit_dh5 +278b 202027c7 branch transmit_dm5 + +transmit_hev: +278c 44bb400e bpatch patch0e_6 ,mem_patch0e +278d 782efc00 enable encode_fec0 +278e 7824fc00 enable enable_crc +278f 78277c00 enable encrypt +2790 1800721e force 30 ,loopcnt +2791 d8c000b3 arg mem_sco_obuf ,contr + +transmit_ev_loop: +2792 e8c08000 ifetch 1 ,contr +2793 08008608 inject mod ,8 +2794 c2002792 loop transmit_ev_loop +2795 c503a7f7 bmark1 mark_esco ,transmit_end +2796 2020264d branch end_of_packet + +transmit_fhs: +2797 44bbc00e bpatch patch0e_7 ,mem_patch0e +2798 68008181 fetch 1 ,mem_fhs_am_addr +2799 1fe20800 icopy am_addr +279a 68008090 fetch 1 ,mem_fhs_misc +279b 1fe23800 icopy fhs_misc +279c 6801c0aa fetch 3 ,mem_class +279d 1fe23a00 icopy fhs_class +279e 680140a4 fetch 2 ,mem_nap +279f 1fe25c00 icopy nap +27a0 7824fc00 enable enable_crc +27a1 782e7c00 enable encode_fec2 +27a2 1c022200 copy bt_adr ,rega +27a3 204028e2 call fetch_self_bt_adr +27a4 782afc00 pulse recalc +27a5 20000020 nop 32 +27a6 1c221600 copy bt_clk ,timeup +27a7 68020161 fetch 4 ,mem_clkn_bt +27a8 1fe24200 icopy bt_clk +27a9 53c07e00 preload fhs0 +27aa 79207e3a set1 58 ,pdata +27ab 08008648 inject mod ,72 +27ac 53e07e00 preload fhs1 +27ad 08008648 inject mod ,72 +27ae 19624200 copy timeup ,bt_clk +27af 1a224000 copy rega ,bt_adr +27b0 78247c00 enable enable_parity +27b1 08008610 inject mod ,16 +27b2 78447c00 disable enable_parity +27b3 2020264d branch end_of_packet + +transmit_lmp: +27b4 44bc400f bpatch patch0f_0 ,mem_patch0f +27b5 78277c00 enable encrypt +27b6 7824fc00 enable enable_crc +27b7 782e7c00 enable encode_fec2 +27b8 680084b6 fetch 1 ,mem_lmo_header_length +27b9 1fe105f8 and pdata ,0x1f8 ,temp +27ba d8c004b6 arg mem_lmo_header_length ,contr +27bb 18408408 increase 8 ,temp + +transmit_lmp_loop: +27bc 1840a7b8 add temp ,-72 ,regc +27bd 242127c2 nbranch transmit_lmp_finish ,positive +27be e8c48000 ifetch 9 ,contr +27bf 08008648 inject mod ,72 +27c0 1a620400 copy regc ,temp +27c1 202027bc branch transmit_lmp_loop + +transmit_lmp_finish: +27c2 e8c48000 ifetch 9 ,contr +27c3 08418600 iinject mod ,temp +27c4 202027f7 branch transmit_end + +transmit_dm1: +27c5 782e7c00 enable encode_fec2 +27c6 202027d0 branch transmit_dmh + +transmit_dm3: + +transmit_dm5: +27c7 782e7c00 enable encode_fec2 +27c8 79200010 set1 mark_longpacket ,mark +27c9 202027d0 branch transmit_dmh + +transmit_3dh1: +27ca 79202a02 set1 psk3m ,radio_ctrl + +transmit_dh1: +27cb 782efc00 enable encode_fec0 +27cc 202027d0 branch transmit_dmh + +transmit_dh3: + +transmit_dh5: +27cd 79202a02 set1 psk3m ,radio_ctrl +27ce 782efc00 enable encode_fec0 +27cf 79200010 set1 mark_longpacket ,mark + +transmit_dmh: +27d0 44bcc00f bpatch patch0f_1 ,mem_patch0f +27d1 6800804c fetch 1 ,mem_state_map +27d2 c302a7e5 bbit0 smap_edr ,transmit_noedr +27d3 18267c03 sub type ,3 ,null +27d4 202127e5 branch transmit_noedr ,positive +27d5 78477c00 disable encrypt +27d6 784e7c00 disable encode_fec2 +27d7 782efc00 enable encode_fec0 +27d8 7843fc00 disable enable_white +27d9 79202a01 set1 psk ,radio_ctrl +27da 2aaffe02 isolate1 psk3m ,radio_ctrl +27db 2020a7df branch transmit_edr3m ,true +27dc 580abeee setarg 0xabeee +27dd 08008614 inject mod ,20 +27de 202027e3 branch transmit_edr_sync_end + +transmit_edr3m: +27df 585faeba setarg 0x5faeba +27e0 08008618 inject mod ,24 +27e1 58000012 setarg 0x12 +27e2 08008606 inject mod ,6 + +transmit_edr_sync_end: +27e3 7823fc00 enable enable_white +27e4 79200010 set1 mark_longpacket ,mark + +transmit_noedr: +27e5 78277c00 enable encrypt +27e6 7824fc00 enable enable_crc +27e7 c502a800 bmark1 mark_loopback ,transmit_loopback +27e8 6800c1db fetch 1 ,mem_tx_lch +27e9 08008603 inject mod ,3 +27ea 680141dc fetch 2 ,mem_tx_len +27eb 98007200 iforce loopcnt +27ec c50827ef bmark1 mark_longpacket ,transmit_long +27ed 08008605 inject mod ,5 +27ee 202027f0 branch transmit_stuff + +transmit_long: +27ef 0800860d inject mod ,13 + +transmit_stuff: +27f0 1f227e00 deposit loopcnt +27f1 203a27f7 branch transmit_end ,blank +27f2 6801016f fetch 2 ,mem_txptr +27f3 98000c00 iforce contr + +transmit_stuff_loop: +27f4 e8c08000 ifetch 1 ,contr +27f5 08008608 inject mod ,8 +27f6 c20027f4 loop transmit_stuff_loop + +transmit_end: +27f7 78247c00 enable enable_parity +27f8 08008610 inject mod ,16 +27f9 78447c00 disable enable_parity +27fa 204024c1 call set_wait_ack +27fb 6800804c fetch 1 ,mem_state_map +27fc c302a64d bbit0 smap_edr ,end_of_packet +27fd 18007e00 force 0 ,pdata +27fe 08008606 inject mod ,6 +27ff 2020264d branch end_of_packet + +transmit_loopback: +2800 44bd400f bpatch patch0f_2 ,mem_patch0f +2801 c5082808 bmark1 mark_longpacket ,transmit_loopback_long + +transmit_loopback_short: +2802 68008180 fetch 1 ,mem_lch_code +2803 08008603 inject mod ,3 +2804 6800815f fetch 1 ,mem_len +2805 98002600 iforce regc +2806 08008605 inject mod ,5 +2807 2020280d branch transmit_loopback_cont + +transmit_loopback_long: +2808 68008180 fetch 1 ,mem_lch_code +2809 08008603 inject mod ,3 +280a 6801015f fetch 2 ,mem_len +280b 98002600 iforce regc +280c 0800860d inject mod ,13 + +transmit_loopback_cont: +280d d8c00551 arg mem_rxbuf ,contr + +transmit_loopback_loop: +280e 1a627c00 copy regc ,null +280f 2022a814 branch transmit_loopback_end ,zero +2810 e8c08000 ifetch 1 ,contr +2811 08008608 inject mod ,8 +2812 1a60a7ff increase -1 ,regc +2813 2020280e branch transmit_loopback_loop + +transmit_loopback_end: +2814 680100fc fetch 2 ,mem_tst_pktcnt_dmh +2815 1fe0fe01 increase 1 ,pdata +2816 600100fc store 2 ,mem_tst_pktcnt_dmh +2817 202027f7 branch transmit_end + +apply_switch_clke: +2818 68020165 fetch 4 ,mem_clke_bt +2819 1fe0a207 add pdata ,7 ,rega +281a 68010171 fetch 2 ,mem_slot_offset +281b 243a281e nbranch apply_switch_nozero ,blank +281c 1a20a3fd increase -3 ,rega +281d 20202826 branch apply_switch_wait_loop + +apply_switch_nozero: +281e 1feffe0c mul32 pdata ,12 ,pdata +281f 68190040 hfetcht 2 ,core_halfslot +2820 18408401 increase 1 ,temp + +apply_switch_loop: +2821 98467e00 isub temp ,pdata +2822 24212825 nbranch apply_switch_bt ,positive +2823 1a20a3ff increase -1 ,rega +2824 20202821 branch apply_switch_loop + +apply_switch_bt: +2825 1fe67e00 sub pdata ,0 ,pdata + +apply_switch_wait_loop: +2826 37d18200 until null ,oneslot +2827 2c400600 compare 0 ,clkn_bt ,3 +2828 2420a826 nbranch apply_switch_wait_loop ,true +2829 98005200 iforce clke_rt +282a 1a225000 copy rega ,clke_bt +282b 98005200 iforce clke_rt +282c 20600000 rtn + +calc_slot_offset: +282d 44bdc00f bpatch patch0f_3 ,mem_patch0f +282e 37d10200 until null ,halfslot +282f 1b427e00 deposit clke +2830 98000c00 iforce contr +2831 1ff17e00 rshift16 ,pdata ,pdata +2832 9c467200 isub clkn_bt ,loopcnt +2833 1f217203 and_into 3 ,loopcnt +2834 2422a837 nbranch calc_bt_portion ,zero +2835 18007e00 force 0 ,pdata +2836 2020283b branch calc_skip_bt + +calc_bt_portion: +2837 d8400ea6 arg 3750 ,temp +2838 18007e00 force 0 ,pdata + +calc_slot_offset_loop: +2839 9840fe00 iadd temp ,pdata +283a c2002839 loop calc_slot_offset_loop + +calc_skip_bt: +283b 98c0fe00 iadd contr ,pdata +283c 1fe6fc0c div pdata ,12 +283d 20407f86 call wait_div_end +283e 1807fe00 quotient pdata +283f 60010171 store 2 ,mem_slot_offset +2840 20600000 rtn + +calc_clke_offset: +2841 44be400f bpatch patch0f_4 ,mem_patch0f +2842 1b427e00 deposit clke +2843 1b220400 copy clkn ,temp +2844 98467c00 isub temp ,null +2845 7d217e2c nsetflag positive ,44 ,pdata +2846 98460400 isub temp ,temp +2847 58000ea6 setarg 3750 +2848 284c000f isolate0 15 ,temp +2849 2020a84c branch calc_clke_pos ,true +284a 5fff0ea6 setarg -61786 +284b 98408400 iadd temp ,temp + +calc_clke_pos: +284c 600b0447 storet 6 ,mem_le_clk_offset +284d 207b0000 rtn le +284e 600b0038 storet 6 ,mem_clk_offset +284f 20600000 rtn + +calc_clke: +2850 78587c00 disable clknt +2851 68030447 fetch 6 ,mem_le_clk_offset +2852 203b2854 branch calc_clke2 ,le +2853 68030038 fetch 6 ,mem_clk_offset + +calc_clke2: +2854 9b20e000 iadd clkn ,alarm +2855 1e00e00a increase 10 ,alarm +2856 58000ea6 setarg 3750 +2857 9e067e00 isub alarm ,pdata +2858 2fec000f isolate0 15 ,pdata +2859 2020a85e branch calc_clke_pos_adj ,true +285a 5800f15a setarg 0xf15a +285b 9e00e000 iadd alarm ,alarm + +calc_clke_pos2: +285c 1e023400 copy alarm ,clke +285d 20600000 rtn + +calc_clke_pos_adj: +285e 18007c00 force 0 ,null +285f 2020285c branch calc_clke_pos2 + +calc_radio_freq: +2860 44bec00f bpatch patch0f_5 ,mem_patch0f +2861 20402918 call set_sync_on +2862 1c227e00 copy bt_clk ,pdata +2863 1fe17f80 and_into 0x180 ,pdata +2864 2c800e03 compare 3 ,freq_mode ,0x07 +2865 2420a869 nbranch freq_not_connection ,true +2866 1fe97e00 rshift3 pdata ,pdata +2867 9ae0fe00 iadd freq_index ,pdata +2868 2020286a branch do_hop_mod_now + +freq_not_connection: +2869 1ae27e00 copy freq_index ,pdata + +do_hop_mod_now: +286a 1fe6fc4f div pdata ,79 +286b 782afc00 pulse recalc +286c 20407f86 call wait_div_end +286d 18072200 remainder rega +286e 1a2085d8 add rega ,-40 ,temp +286f 20212872 branch odd_half ,positive +2870 1a238400 lshift rega ,temp +2871 20202874 branch freq_result + +odd_half: +2872 18438400 lshift temp ,temp +2873 18408401 increase 1 ,temp + +freq_result: +2874 44bf400f bpatch patch0f_6 ,mem_patch0f +2875 68008031 fetch 1 ,mem_mode +2876 c301a885 bbit0 afh_change ,afh_process_con + +afh_process_0: +2877 680240d2 fetch 4 ,mem_afh_instant +2878 9c267c00 isub bt_clk ,null +2879 20212885 branch afh_process_con ,positive +287a 204028a4 call afh_clear +287b 6800c0d9 fetch 1 ,mem_afh_new_mod +287c 207a0000 rtn blank +287d 68008031 fetch 1 ,mem_mode +287e 79207e02 set1 afh_enable ,pdata +287f 60008031 store 1 ,mem_mode +2880 6802c0e7 fetch 5 ,mem_afh_map_new +2881 6002c0da store 5 ,mem_afh_map_lo +2882 e8c28000 ifetch 5 ,contr +2883 6002c0df store 5 ,mem_afh_map_hi +2884 204028a9 call afh_process_freq_map + +afh_process_con: +2885 68008031 fetch 1 ,mem_mode +2886 c4010000 rtnbit0 afh_enable +2887 2c2ffe01 isolate1 1 ,bt_clk +2888 2020a8a1 branch afh_same_channel ,true +2889 18492200 rshift3 temp ,rega +288a 18410e07 and temp ,7 ,queue +288b 580040da setarg mem_afh_map_lo +288c 9a20a200 iadd rega ,rega +288d ea208000 ifetch 1 ,rega +288e afec0000 qisolate0 pdata +288f 2020a892 branch afh_process_1 ,true +2890 18427e00 deposit temp +2891 2020289e branch afh_process_end + +afh_process_1: +2892 6800c0e4 fetch 1 ,mem_afh_used +2893 98002400 iforce regb +2894 1c227e00 deposit bt_clk +2895 1fe17f80 and_into 0x180 ,pdata +2896 1fe97e00 rshift3 pdata ,pdata +2897 9ae0fe00 iadd freq_index ,pdata +2898 9a46fc00 idiv regb +2899 580040f2 setarg mem_afh_map +289a 20407f86 call wait_div_end +289b 18072200 remainder rega +289c 9a208c00 iadd rega ,contr +289d e8c08000 ifetch 1 ,contr + +afh_process_end: +289e 6000c0e5 store 1 ,mem_afh_index +289f 98000400 iforce temp +28a0 20600000 rtn + +afh_same_channel: +28a1 6800c0e5 fetch 1 ,mem_afh_index +28a2 98000400 iforce temp +28a3 20600000 rtn + +afh_clear: +28a4 68008031 fetch 1 ,mem_mode +28a5 793ffe02 set0 afh_enable ,pdata +28a6 793ffe03 set0 afh_change ,pdata +28a7 60008031 store 1 ,mem_mode +28a8 20600000 rtn + +afh_process_freq_map: +28a9 44bfc00f bpatch patch0f_7 ,mem_patch0f +28aa d8a040f2 arg mem_afh_map ,contw +28ab 1800720a force 10 ,loopcnt +28ac 20407ec6 call memset0 +28ad d8a040f2 arg mem_afh_map ,contw +28ae 18002600 force 0 ,regc +28af 18000e02 force 2 ,queue + +process_freq_3: +28b0 6802c0da fetch 5 ,mem_afh_map_lo +28b1 98000400 iforce temp +28b2 28e1fe02 compare 2 ,queue ,0xff +28b3 2020a8b5 branch process_freq_1 ,true +28b4 18430400 rshift temp ,temp + +process_freq_1: +28b5 284c0000 isolate0 0 ,temp +28b6 2020a8b9 branch process_freq_0 ,true +28b7 1a627e00 deposit regc +28b8 e0a08000 istore 1 ,contw + +process_freq_0: +28b9 184b0400 rshift2 temp ,temp +28ba 1a60a602 increase 2 ,regc +28bb 2a61fc28 compare 40 ,regc ,0xfe +28bc 2420a8c2 nbranch process_freq_2 ,true +28bd 6802c0df fetch 5 ,mem_afh_map_hi +28be 98000400 iforce temp +28bf 28e1fe02 compare 2 ,queue ,0xff +28c0 2020a8c2 branch process_freq_2 ,true +28c1 18430400 rshift temp ,temp + +process_freq_2: +28c2 1a667c4e sub regc ,78 ,null +28c3 202128b5 branch process_freq_1 ,positive +28c4 18002601 force 1 ,regc +28c5 18e08fff increase -1 ,queue +28c6 2422a8b0 nbranch process_freq_3 ,zero +28c7 da2040f2 arg mem_afh_map ,rega +28c8 18a27e00 deposit contw +28c9 9a267e00 isub rega ,pdata +28ca 6000c0e4 store 1 ,mem_afh_used +28cb 20600000 rtn + +rx_radio_freq: +28cc 44c04010 bpatch patch10_0 ,mem_patch10 +28cd 20402860 call calc_radio_freq +28ce 6800817f fetch 1 ,mem_debug_config +28cf c302a8d1 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +28d0 680884cc fetcht 1 ,mem_rx_fixed_freq + +rx_radio_freq_now: +28d1 2020291f branch set_freq_rx + +tx_radio_freq: +28d2 44c0c010 bpatch patch10_1 ,mem_patch10 +28d3 20402860 call calc_radio_freq +28d4 6800817f fetch 1 ,mem_debug_config +28d5 c30228d7 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +28d6 680884cb fetcht 1 ,mem_tx_fixed_freq + +tx_radio_freq_now: +28d7 20202933 branch set_freq_tx + +fetch_giac: +28d8 18005a00 force 0 ,uap +28d9 6801c0a7 fetch 3 ,mem_glap +28da 98005800 iforce lap +28db 20600000 rtn + +fetch_page_bt_adr: +28dc 44c14010 bpatch patch10_2 ,mem_patch10 +28dd 6800c1d3 fetch 1 ,mem_hci_puap +28de 1fe25a00 icopy uap +28df 6801c1d0 fetch 3 ,mem_hci_plap +28e0 1fe25800 icopy lap +28e1 20600000 rtn + +fetch_self_bt_adr: +28e2 44c1c010 bpatch patch10_3 ,mem_patch10 +28e3 680140a4 fetch 2 ,mem_nap +28e4 1fe25c00 icopy nap +28e5 6800c0a3 fetch 1 ,mem_uap +28e6 1fe25a00 icopy uap +28e7 6801c0a0 fetch 3 ,mem_lap +28e8 1fe25800 icopy lap +28e9 20600000 rtn + +fetch_extm_bt_adr: +28ea 44c24010 bpatch patch10_4 ,mem_patch10 +28eb 68010044 fetch 2 ,mem_pnap +28ec 1fe25c00 icopy nap +28ed 68008043 fetch 1 ,mem_puap +28ee 1fe25a00 icopy uap +28ef 68018040 fetch 3 ,mem_plap +28f0 1fe25800 icopy lap +28f1 20600000 rtn + +fetch_diac: +28f2 c51028f5 bmark1 mark_all_diac ,fetch_diac_do +28f3 c68e8000 rtnmark0 mark_inquiry_state +28f4 c68f8000 rtnmark0 mark_periodical_diac + +fetch_diac_do: +28f5 1d815900 and_into -256 ,lap +28f6 782afc00 pulse recalc +28f7 20000020 nop 32 +28f8 20600000 rtn + +shutdown_radio: +28f9 44c2c010 bpatch patch10_5 ,mem_patch10 +28fa 2030a90a branch shutdown_radio0 ,is_rx +28fb 708955d4 hjam 0xd4 ,0x955 +28fc 20000004 nop 4 +28fd 708955d2 hjam 0xd2 ,0x955 +28fe 20000004 nop 4 +28ff 708955d1 hjam 0xd1 ,0x955 +2900 20000004 nop 4 +2901 6800c1de fetch 1 ,mem_tx_power +2902 c0002908 beq tx_power_0db ,shutdown_radio_0db +2903 c000a915 beq tx_power_3db ,shutdown_radio_3db +2904 c0012908 beq tx_power_5db ,shutdown_radio_5db +2905 c001a915 beq tx_power_f3db ,shutdown_radio_f3db +2906 c0022915 beq tx_power_f5db ,shutdown_radio_f5db +2907 c0102915 beq tx_power_pair ,shutdown_radio_pair + +shutdown_radio_5db: + +shutdown_radio_0db: +2908 708955d0 hjam 0xd0 ,0x955 +2909 708956e0 hjam 0xe0 ,0x956 + +shutdown_radio0: +290a 18002a00 force 0 ,radio_ctrl +290b 7850fc00 disable is_rx +290c 78507c00 disable is_tx +290d 782f7c00 pulse packet_end +290e 70890200 hjam 0x0 ,rfen_mdm +290f 70890100 hjam 0x0 ,rfen_tx +2910 70890000 hjam 0x0 ,rfen_rx +2911 70890300 hjam 0 ,rfen_sn +2912 70890470 hjam 0x70 ,rfen_msc +2913 70890600 hjam 0x0 ,rfen_adc +2914 20600000 rtn + +shutdown_radio_pair: + +shutdown_radio_f5db: + +shutdown_radio_f3db: + +shutdown_radio_3db: +2915 708955d0 hjam 0xd0 ,0x955 +2916 708956c0 hjam 0xc0 ,0x956 +2917 2020290a branch shutdown_radio0 + +set_sync_on: +2918 44c34010 bpatch patch10_6 ,mem_patch10 +2919 70890200 hjam 0x0 ,rfen_mdm +291a 70890100 hjam 0x0 ,rfen_tx +291b 70890018 hjam 0x18 ,rfen_rx +291c 708903a7 hjam 0xa7 ,rfen_sn +291d 7089047f hjam 0x7f ,rfen_msc +291e 20600000 rtn + +set_freq_rx: +291f 44c3c010 bpatch patch10_7 ,mem_patch10 +2920 60088017 storet 1 ,mem_last_freq +2921 1840a204 add temp ,rx_freq_offset ,rega +2922 70896d07 hjam 0x07 ,0x96d +2923 20202981 branch rf_write_freq + +rf_rx_enable: +2924 44c44011 bpatch patch11_0 ,mem_patch11 +2925 708901cf hjam 0xcf ,rfen_tx +2926 2000000a nop 10 +2927 708900ff hjam 0xff ,rfen_rx +2928 708903af hjam 0xaf ,rfen_sn +2929 708904ff hjam 0xff ,rfen_msc +292a 2000000a nop 10 +292b 708902a0 hjam 0xa0 ,rfen_mdm +292c 20600000 rtn + +set_freq_tx_offset: +292d 6800c1e0 fetch 1 ,mem_250k_freq_enable +292e 203a2931 branch set_freq_tx_2m_offset ,blank + +set_freq_tx_0m_offset: +292f 1840a202 add temp ,2 ,rega +2930 20600000 rtn + +set_freq_tx_2m_offset: +2931 1840a200 add temp ,0 ,rega +2932 20600000 rtn + +set_freq_tx: +2933 44c4c011 bpatch patch11_1 ,mem_patch11 +2934 60088017 storet 1 ,mem_last_freq +2935 2040292d call set_freq_tx_offset +2936 20402981 call rf_write_freq +2937 58000500 setarg param_pll_setup +2938 20402a8f call sleep + +txon: +2939 70890601 hjam 0x1 ,rfen_adc +293a 7089003c hjam 0x3c ,rfen_rx +293b 708901e0 hjam 0xe0 ,rfen_tx +293c 70896d12 hjam 0x12 ,0x96d +293d 2000000a nop 10 +293e 70890201 hjam 0x01 ,rfen_mdm +293f 7089023d hjam 0x3d ,rfen_mdm +2940 2000000a nop 10 +2941 708903b7 hjam 0xb7 ,rfen_sn +2942 2000000a nop 10 +2943 7089027f hjam 0x7f ,rfen_mdm +2944 6800c1de fetch 1 ,mem_tx_power +2945 c000294b beq tx_power_0db ,set_tx_power_0db +2946 c000a94f beq tx_power_3db ,set_tx_power_3db +2947 c0012953 beq tx_power_5db ,set_tx_power_5db +2948 c001a957 beq tx_power_f3db ,set_tx_power_f3db +2949 c002295b beq tx_power_f5db ,set_tx_power_f5db +294a c010295f beq tx_power_pair ,set_tx_power_pair + +set_tx_power_0db: +294b 708956f0 hjam 0xf0 ,0x956 +294c 20402965 call txon_common +294d 708955d8 hjam 0xd8 ,0x955 +294e 20600000 rtn + +set_tx_power_3db: +294f 708956df hjam 0xdf ,0x956 +2950 20402965 call txon_common +2951 708955df hjam 0xdf ,0x955 +2952 20600000 rtn + +set_tx_power_5db: +2953 708956ff hjam 0xff ,0x956 +2954 20402965 call txon_common +2955 708955df hjam 0xdf ,0x955 +2956 20600000 rtn + +set_tx_power_f3db: +2957 708956ce hjam 0xce ,0x956 +2958 20402965 call txon_common +2959 708955d8 hjam 0xd8 ,0x955 +295a 20600000 rtn + +set_tx_power_f5db: +295b 708956cb hjam 0xcb ,0x956 +295c 20402965 call txon_common +295d 708955d8 hjam 0xd8 ,0x955 +295e 20600000 rtn + +set_tx_power_pair: +295f 708955d0 hjam 0xd0 ,0x955 +2960 708956c0 hjam 0xc0 ,0x956 +2961 7089574c hjam 0x4c ,0x957 +2962 7089586c hjam 0x6c ,0x958 +2963 70895950 hjam 0x50 ,0x959 +2964 20600000 rtn + +txon_common: +2965 20000004 nop 4 +2966 708955d1 hjam 0xd1 ,0x955 +2967 20000004 nop 4 +2968 708955d2 hjam 0xd2 ,0x955 +2969 20000004 nop 4 +296a 708955d4 hjam 0xd4 ,0x955 +296b 20600000 rtn + +initialize_radio: +296c 70804206 hjam clksel_rc ,core_clksel + +initialize_radio_wait: +296d 680140c3 fetch 2 ,mem_rf_init_ptr +296e c307296d bbit0 14 ,initialize_radio_wait +296f 98000c00 iforce contr +2970 d8408900 arg 0x8900 ,temp + +initialize_radio_loop: +2971 e8c08000 ifetch 1 ,contr +2972 c07fa977 beq 0xff ,initialize_radio_cont +2973 98418a00 ior temp ,contw +2974 e8c08000 ifetch 1 ,contr +2975 e0a08000 istore 1 ,contw +2976 20202971 branch initialize_radio_loop + +initialize_radio_cont: +2977 44c54011 bpatch patch11_2 ,mem_patch11 +2978 20402be5 call lpm_cal_xtal_startup +2979 204029c9 call switchto_dpllclk +297a 580007d0 setarg param_dpll_start_delay +297b 9c40fe00 iadd clkn_bt ,pdata +297c 60020169 store 4 ,mem_dpll_clkn +297d 79202a03 set1 reset ,radio_ctrl +297e 18002a00 force 0 ,radio_ctrl +297f 2455a998 ncall do_rccal ,wake +2980 202029ab branch set_rccal + +rf_write_freq: +2981 44c5c011 bpatch patch11_3 ,mem_patch11 +2982 58000960 setarg 2400 +2983 9a208400 iadd rega ,temp +2984 6800c0bd fetch 1 ,mem_fcomp_mul +2985 70895f04 hjam 0x04 ,rf_pll_rstn +2986 984ffe00 imul32 temp ,pdata +2987 6808c0be fetcht 1 ,mem_fcomp_div +2988 9846fc00 idiv temp +2989 20407f86 call wait_div_end +298a 1807a200 quotient rega +298b 18077e00 remainder pdata +298c 1ff07e00 lshift16 pdata ,pdata +298d 1ff27e00 lshift4 pdata ,pdata +298e 9846fc00 idiv temp +298f 20407f86 call wait_div_end +2990 1807fe00 quotient pdata +2991 1fed7e00 lshift8 pdata ,pdata +2992 1fe3fe00 lshift pdata ,pdata +2993 9a21fe00 ior rega ,pdata +2994 60120960 hstore 4 ,rf_pll_intg +2995 70895f44 hjam 0x44 ,rf_pll_rstn +2996 70895fc4 hjam 0xc4 ,rf_pll_rstn +2997 20600000 rtn + +do_rccal: +2998 44c64011 bpatch patch11_4 ,mem_patch11 +2999 70890602 hjam 0x02 ,rfen_adc +299a 5803d090 setarg 250000 +299b 20402a8f call sleep +299c 7089007f hjam 0x7f ,rfen_rx +299d 20000082 nop 130 +299e 70895230 hjam 0x30 ,rf_rccal_ctrl +299f 708901d0 hjam 0xd0 ,rfen_tx +29a0 70895270 hjam 0x70 ,rf_rccal_ctrl +29a1 708952f0 hjam 0xf0 ,rf_rccal_ctrl +29a2 18007232 force 50 ,loopcnt + +do_rccal_loop: +29a3 68108980 hfetch 1 ,rf_rccal_result +29a4 c282a9a6 bbit1 5 ,do_rccal_end +29a5 c20029a3 loop do_rccal_loop + +do_rccal_end: +29a6 6000c0ce store 1 ,mem_rf_rccal +29a7 70890100 hjam 0 ,rfen_tx +29a8 70890000 hjam 0 ,rfen_rx +29a9 70890600 hjam 0x00 ,rfen_adc +29aa 20600000 rtn + +set_rccal: +29ab 44c6c011 bpatch patch11_5 ,mem_patch11 +29ac 6800c0ce fetch 1 ,mem_rf_rccal +29ad 79207e05 set1 5 ,pdata +29ae 60108952 hstore 1 ,rf_rccal_ctrl +29af 68188950 hfetcht 1 ,rf_bpf_ctrim +29b0 18410407 and_into 7 ,temp +29b1 1fe9fe00 lshift3 pdata ,pdata +29b2 9841fe00 ior temp ,pdata +29b3 60108950 hstore 1 ,rf_bpf_ctrim +29b4 68108951 hfetch 1 ,rf_bpf_ib +29b5 793ffe00 set0 bpf_rccal ,pdata +29b6 60108951 hstore 1 ,rf_bpf_ib +29b7 68108952 hfetch 1 ,rf_adc_rccal +29b8 793ffe05 set0 adc_rccal ,pdata +29b9 60108952 hstore 1 ,rf_adc_rccal +29ba 20600000 rtn + +save_rssi: +29bb 44c74011 bpatch patch11_6 ,mem_patch11 +29bc 68110981 hfetch 2 ,rf_afc_d2a +29bd 1ff1fe00 rshift4 pdata ,pdata +29be 1fe97e00 rshift3 pdata ,pdata +29bf 1fe67e00 sub pdata ,0 ,pdata +29c0 1fe17eff and_into 0xff ,pdata +29c1 1fe6fc0a div pdata ,10 +29c2 20407f86 call wait_div_end +29c3 1807fe00 quotient pdata +29c4 1ff27e00 lshift4 pdata ,pdata +29c5 18070400 remainder temp +29c6 9841fe00 ior temp ,pdata +29c7 60008018 store 1 ,mem_rssi +29c8 20600000 rtn + +switchto_dpllclk: +29c9 70804206 hjam clksel_rc ,core_clksel +29ca 6810896b hfetch 1 ,rf_clkpll_frac + 2 +29cb 793ffe04 set0 4 ,pdata +29cc 793ffe05 set0 5 ,pdata +29cd 6010896b hstore 1 ,rf_clkpll_frac + 2 +29ce 70890500 hjam 0x00 ,rfen_ck +29cf 70890400 hjam 0x00 ,rfen_msc +29d0 70890470 hjam 0x70 ,rfen_msc +29d1 708905ff hjam 0xff ,rfen_ck +29d2 6810896b hfetch 1 ,rf_clkpll_frac + 2 +29d3 79207e04 set1 4 ,pdata +29d4 79207e05 set1 5 ,pdata +29d5 6010896b hstore 1 ,rf_clkpll_frac + 2 +29d6 204029e9 call init_lpm_ctrl +29d7 68108968 hfetch 1 ,rf_clkpll_int +29d8 79207e07 set1 7 ,pdata +29d9 60108968 hstore 1 ,rf_clkpll_int +29da 793ffe07 set0 7 ,pdata +29db 60108968 hstore 1 ,rf_clkpll_int +29dc 79207e07 set1 7 ,pdata +29dd 60108968 hstore 1 ,rf_clkpll_int +29de 70804205 hjam clksel_dpll ,core_clksel +29df 20000001 nop 1 +29e0 70804204 hjam clksel_xtal ,core_clksel +29e1 6810896b hfetch 1 ,rf_clkpll_frac + 2 +29e2 1fe17ecf and_into 0xcf ,pdata +29e3 6010896b hstore 1 ,rf_clkpll_frac + 2 +29e4 1fe1fe30 or_into 0x30 ,pdata +29e5 6010896b hstore 1 ,rf_clkpll_frac + 2 +29e6 20600000 rtn + +xtal_fast_wake: +29e7 58000f0f setarg 0xf0f +29e8 20202c18 branch lpm_write_config + +init_lpm_ctrl: +29e9 5800080f setarg 0x80f +29ea 20202c18 branch lpm_write_config + +start_receiver: +29eb 44c7c011 bpatch patch11_7 ,mem_patch11 +29ec 20402924 call rf_rx_enable +29ed 78507c00 disable is_tx +29ee 7830fc00 enable is_rx +29ef 782b7c00 pulse init_encrypt +29f0 20600000 rtn + +prep_crypt: +29f1 44c84012 bpatch patch12_0 ,mem_patch12 +29f2 6800804c fetch 1 ,mem_state_map +29f3 2feffe02 isolate1 smap_encryption ,pdata +29f4 7920fe00 setflag true ,0 ,pdata +29f5 60108011 hstore 1 ,core_encrypt +29f6 d8c00062 arg mem_kc ,contr +29f7 e8c48000 ifetch 9 ,contr +29f8 98006400 iforce kc_ls +29f9 e8c38000 ifetch 7 ,contr +29fa 98006600 iforce kc_ms +29fb 68008054 fetch 1 ,mem_key_size +29fc 1fe0e9ff add pdata ,-1 ,g1l +29fd 782d7c00 pulse kc_p_activate +29fe 20600000 rtn + +wait_access_end: +29ff 1b427e00 deposit clke +2a00 6003009a store 6 ,mem_sync_clke +2a01 7846fc00 disable decode_fec0 +2a02 242c28f9 nbranch shutdown_radio ,sync +2a03 dd2003bb arg param_clke_cal ,clke_rt +2a04 1d00d001 increase 1 ,clke_bt +2a05 1d0151fc and_into 0x1fc ,clke_bt +2a06 20600000 rtn + +wait_access_mhalfbnd: +2a07 7826fc00 enable decode_fec0 + +wait_access_mhalfbnd_correlate: +2a08 37cb8400 correlate null ,mhalfbnd +2a09 202c29ff branch wait_access_end ,sync +2a0a 2d000402 compare 0x02 ,clke_bt ,0x02 +2a0b 2420aa08 nbranch wait_access_mhalfbnd_correlate ,true +2a0c 202029ff branch wait_access_end + +wait_access_clkn_rt: +2a0d 44c8c012 bpatch patch12_1 ,mem_patch12 +2a0e d9600600 arg param_conn_access ,timeup +2a0f 7826fc00 enable decode_fec0 +2a10 34730400 correlate clkn_rt ,meet +2a11 7846fc00 disable decode_fec0 +2a12 242c28f9 nbranch shutdown_radio ,sync +2a13 20600000 rtn + +wait_access_forever: +2a14 44c94012 bpatch patch12_2 ,mem_patch12 +2a15 7826fc00 enable decode_fec0 +2a16 37c18400 correlate null ,timeout +2a17 7846fc00 disable decode_fec0 +2a18 242c28f9 nbranch shutdown_radio ,sync +2a19 dd2003bb arg param_clke_cal ,clke_rt +2a1a 1d0151fc and_into 0x1fc ,clke_bt +2a1b 20600000 rtn + +reserve_slot: +2a1c 44c9c012 bpatch patch12_3 ,mem_patch12 +2a1d 98002200 iforce rega +2a1e 1c227e00 deposit bt_clk +2a1f 98409600 iadd temp ,timeup +2a20 19627e00 copy timeup ,pdata +2a21 600240ca store 4 ,mem_next_btclk +2a22 1a227e00 deposit rega +2a23 20600000 rtn + +ahead_window: +2a24 1fe20400 copy pdata ,temp +2a25 44ca4012 bpatch patch12_4 ,mem_patch12 +2a26 18427e00 copy temp ,pdata +2a27 20407f50 call clk2bt +2a28 1c307e00 lshift16 bt_clk ,pdata +2a29 79207e2c set1 44 ,pdata +2a2a 20407f39 call clk_diff +2a2b 793ffe2c set0 44 ,pdata +2a2c 20402a77 call get_clk +2a2d 20407f39 call clk_diff +2a2e 20740000 rtn user +2a2f 20407f43 call clk2rt +2a30 98003600 iforce stop_watch +2a31 37c18200 until null ,timeout +2a32 20600000 rtn + +setup_clk: +2a33 44cac012 bpatch patch12_5 ,mem_patch12 +2a34 20382a38 branch setup_clkn ,clknt +2a35 35330200 until clke_rt ,meet + +skip_setup_clke: +2a36 1d020400 copy clke_bt ,temp +2a37 20202a3b branch setup_clknbt + +setup_clkn: +2a38 20372a3a branch skip_setup_clkn ,attempt +2a39 34730200 until clkn_rt ,meet + +skip_setup_clkn: +2a3a 1c420400 copy clkn_bt ,temp + +setup_clknbt: +2a3b 20342a47 branch setup_clk11 ,user +2a3c 28400601 compare 1 ,temp ,3 +2a3d 2420aa33 nbranch setup_clk ,true + +setup_complete: +2a3e 44cb4012 bpatch patch12_6 ,mem_patch12 +2a3f 68008030 fetch 1 ,mem_state +2a40 c4000000 rtnbit0 state_inconn +2a41 680240ca fetch 4 ,mem_next_btclk +2a42 98467e00 isub temp ,pdata +2a43 24610000 nrtn positive +2a44 1fe67cff sub pdata ,0xff ,null +2a45 20212a33 branch setup_clk ,positive +2a46 20600000 rtn + +setup_clk11: +2a47 28400603 compare 3 ,temp ,3 +2a48 2420aa33 nbranch setup_clk ,true +2a49 20202a3e branch setup_complete + +rf_setup_time: +2a4a 44cbc012 bpatch patch12_7 ,mem_patch12 +2a4b d9600600 arg param_rf_setup ,timeup +2a4c 20202a33 branch setup_clk + +rf_setup_time_slave_slot: +2a4d 78547c00 disable user +2a4e 20202a4a branch rf_setup_time + +rf_setup_time_master_slot: +2a4f 78347c00 enable user +2a50 20202a4a branch rf_setup_time + +start_transmitter: +2a51 44cc4013 bpatch patch13_0 ,mem_patch13 +2a52 204029f1 call prep_crypt +2a53 7850fc00 disable is_rx +2a54 78307c00 enable is_tx +2a55 20600000 rtn + +start_tx_native: +2a56 44ccc013 bpatch patch13_1 ,mem_patch13 +2a57 d9600e43 arg param_tx_setup ,timeup +2a58 34730200 until clkn_rt ,meet +2a59 782b7c00 pulse init_encrypt +2a5a 20600000 rtn + +start_rx_native: +2a5b 44cd4013 bpatch patch13_2 ,mem_patch13 +2a5c d9600d00 arg param_rx_setup ,timeup +2a5d 34730200 until clkn_rt ,meet +2a5e 20600000 rtn + +start_tx_external: +2a5f 44cdc013 bpatch patch13_3 ,mem_patch13 +2a60 d9600e43 arg param_tx_setup ,timeup +2a61 35330200 until clke_rt ,meet +2a62 782b7c00 pulse init_encrypt +2a63 20600000 rtn + +send_access_word: +2a64 44ce4013 bpatch patch13_4 ,mem_patch13 +2a65 51207e00 preload access +2a66 782efc00 enable encode_fec0 +2a67 79202a00 set1 txgfsk ,radio_ctrl +2a68 08008648 inject mod ,72 +2a69 784efc00 disable encode_fec0 +2a6a 20600000 rtn + +scan_mode_whiten: +2a6b 1ca20400 copy xin ,temp +2a6c 18418460 or_into 0x60 ,temp +2a6d 18421c00 copy temp ,white_init +2a6e 20600000 rtn + +get_free_amaddr: +2a6f 44cec013 bpatch patch13_5 ,mem_patch13 +2a70 6800c090 fetch 1 ,mem_current_amaddr +2a71 1fe0fe01 increase 1 ,pdata +2a72 c083aa74 bne param_esco_addr ,get_free_amaddr_cont +2a73 18007e01 force 1 ,pdata + +get_free_amaddr_cont: +2a74 6000c090 store 1 ,mem_current_amaddr +2a75 98000800 iforce am_addr +2a76 20600000 rtn + +get_clk: +2a77 1b220400 copy clkn ,temp +2a78 20748000 rtn master +2a79 1b420400 copy clke ,temp +2a7a 20600000 rtn + +get_clkbt: +2a7b 1c427e00 deposit clkn_bt +2a7c 20748000 rtn master +2a7d 1d027e00 deposit clke_bt +2a7e 20600000 rtn + +supervision_update: +2a7f 44cf4013 bpatch patch13_6 ,mem_patch13 +2a80 680a004d fetcht 4 ,mem_supervision_timer +2a81 20402a7b call get_clkbt +2a82 98461600 isub temp ,timeup +2a83 19627e00 deposit timeup +2a84 68090051 fetcht 2 ,mem_supervision_to +2a85 18438400 lshift temp ,temp +2a86 98467e00 isub temp ,pdata +2a87 20600000 rtn + +supervision_flush: +2a88 44cfc013 bpatch patch13_7 ,mem_patch13 +2a89 20402a7b call get_clkbt +2a8a 6002004d store 4 ,mem_supervision_timer +2a8b 20600000 rtn + +assert: +2a8c 44d04014 bpatch patch14_0 ,mem_patch14 +2a8d 20202a8c branch assert + +loop: +2a8e 20202a8e branch loop + +sleep: +2a8f 207a0000 rtn blank +2a90 1fe37e00 rshift pdata ,pdata +2a91 1fe0fffd increase -3 ,pdata + +sleep_loop: +2a92 1fe0ffff increase -1 ,pdata +2a93 2422aa92 nbranch sleep_loop ,zero +2a94 18007e00 force 0 ,pdata +2a95 20600000 rtn + +init_param: +2a96 df200010 arg 0x10 ,loopcnt +2a97 d8a00000 arg 0 ,contw +2a98 20407ec6 call memset0 +2a99 d8a0043f arg mem_le_state ,contw +2a9a df20000a arg 10 ,loopcnt +2a9b 20407ec6 call memset0 +2a9c 7009b200 jam 0 ,mem_sp_calc +2a9d 700a9900 jam 0 ,mem_fifo_temp +2a9e 70048c00 jam 0 ,mem_le_testtype +2a9f 70017f00 jam 0 ,mem_debug_config +2aa0 7004d100 jam 0 ,mem_lmp_conn_state +2aa1 44d0c014 bpatch patch14_1 ,mem_patch14 +2aa2 70016d00 jam 0 ,mem_connection_options +2aa3 70015100 jam 0 ,mem_tester_emulate +2aa4 70015c00 jam 0 ,mem_tester_cnt +2aa5 589e8b33 setarg param_glap +2aa6 6001c0a7 store 3 ,mem_glap +2aa7 58000153 setarg param_acl_pktlen +2aa8 60010083 store 2 ,mem_acl_pktlen +2aa9 7000851e jam param_sco_pktlen ,mem_sco_pktlen +2aaa 70008601 jam param_acl_pktcnt ,mem_acl_pktcnt +2aab 70008807 jam param_sco_pktcnt ,mem_sco_pktcnt +2aac 5812e904 setarg param_hci_version +2aad 60018080 store 3 ,mem_hci_version +2aae 70009060 jam 0x60 ,mem_fhs_misc +2aaf 7040d005 jam param_max_slot ,mem_max_slot +2ab0 70001402 jam 0x02 ,mem_fw_ver +2ab1 6800c65a fetch 1 ,mem_ssp_enable +2ab2 245a74c1 ncall init_memp ,blank +2ab3 6800c4be fetch 1 ,mem_le_secure_connect_enable +2ab4 245a7518 ncall init_memp_256 ,blank +2ab5 44d14014 bpatch patch14_2 ,mem_patch14 +2ab6 20758000 rtn wake +2ab7 58000000 setarg 0 +2ab8 600141dc store 2 ,mem_tx_len +2ab9 1c437e00 rshift clkn_bt ,pdata +2aba 60024094 store 4 ,mem_last_clkn +2abb 20600000 rtn + +lpmstate: +2abc 5800ee21 setarg 0xee21 +2abd 60110050 hstore 2 ,core_clkoff +2abe 6812011c hfetch 4 ,core_gpio_in +2abf 60020abe store 4 ,mem_saved_gpio_in +2ac0 6810813e hfetch 1 ,core_lpm_ldocnt +2ac1 60008abd store 1 ,mem_wakup_from_power_flag +2ac2 c301e45b bbit0 gpio_latch ,loadcode +2ac3 7835fc00 enable wake +2ac4 c303aacc bbit0 cold_wake ,lpmwake +2ac5 7855fc00 disable wake +2ac6 1ce27e00 deposit auxcnt +2ac7 243a2acc nbranch lpmwake ,blank +2ac8 6810813b hfetch 1 ,core_lpm_ctrl + 3 +2ac9 c2812acc bbit1 reload_code ,lpmwake +2aca d85fffff arg param_hibernate_clks ,temp +2acb 20202b3c branch lpm_enter_sleep + +lpmwake: +2acc 6811813c hfetch 3 ,core_lpm_xtalcnt +2acd 6011804c hstore 3 ,core_lpm_reg +2ace e8c08000 ifetch 1 ,contr +2acf 1fe1feef or_into isogate_mask ,pdata +2ad0 e0a08000 istore 1 ,contw +2ad1 20402c23 call lpm_write_ctrl2 +2ad2 6810804f hfetch 1 ,core_lpm_isogate +2ad3 79207e04 set1 enable_retmem ,pdata +2ad4 6010804f hstore 1 ,core_lpm_isogate +2ad5 20402c23 call lpm_write_ctrl2 +2ad6 2055aadf call lpm_load_context ,wake +2ad7 6810804e hfetch 1 ,core_lpm_reg + 2 +2ad8 793ffe03 set0 gpio_latch ,pdata +2ad9 6010804e hstore 1 ,core_lpm_reg + 2 +2ada 20402c23 call lpm_write_ctrl2 +2adb 2435e45b nbranch loadcode ,wake +2adc c6958000 rtnmark0 mark_otp_encrypt +2add 70800608 hjam lock_otp ,core_misc_ctrl +2ade 20600000 rtn + +lpm_load_context: +2adf 6800c198 fetch 1 ,mem_saved_spidctrl +2ae0 60108086 hstore 1 ,core_spid_ctrl +2ae1 6801c18d fetch 3 ,mem_saved_gsel +2ae2 60118080 hstore 3 ,core_gpio_sel +2ae3 68024181 fetch 4 ,mem_saved_gpio + 4 +2ae4 60120074 hstore 4 ,core_gpio_out0 +2ae5 6802417d fetch 4 ,mem_saved_gpio +2ae6 60120070 hstore 4 ,core_gpio_oe0 +2ae7 68044185 fetch 8 ,mem_saved_gpio + 8 +2ae8 60140078 hstore 8 ,core_gpio_pu0 +2ae9 68044190 fetch 8 ,mem_saved_mark +2aea 98000000 iforce mark +2aeb 68140140 hfetch 8 ,core_gpio_wakeup_low +2aec 600400a1 store 8 ,mem_gpio_wakeup_low +2aed 204064ca call load_ucode +2aee 20600000 rtn + +lpm_save_context: +2aef 18027e00 deposit mark +2af0 60044190 store 8 ,mem_saved_mark +2af1 68140070 hfetch 8 ,core_gpio_oe0 +2af2 6004417d store 8 ,mem_saved_gpio +2af3 e8c40000 ifetch 8 ,contr +2af4 e0a40000 istore 8 ,contw +2af5 68118080 hfetch 3 ,core_gpio_sel +2af6 6001c18d store 3 ,mem_saved_gsel +2af7 68108086 hfetch 1 ,core_spid_ctrl +2af8 6000c198 store 1 ,mem_saved_spidctrl +2af9 20202c29 branch lpm_write_gpio_wakeup + +lpo_calibration: +2afa 68108063 hfetch 1 ,core_bist_ctrl +2afb 243a2b00 nbranch lpo_cal_inited ,blank +2afc 6801c16f fetch 3 ,mem_clks_per_lpo +2afd 247a0000 nrtn blank +2afe 708063c0 hjam 0xc0 ,core_bist_ctrl +2aff 70800680 hjam ccnt_start ,core_misc_ctrl + +lpo_cal_inited: +2b00 6810812d hfetch 1 ,core_perf_status +2b01 c4008000 rtnbit0 1 +2b02 68118149 hfetch 3 ,core_clk_counter +2b03 6001c16f store 3 ,mem_clks_per_lpo +2b04 20600000 rtn + +lpm_adjust_clk: +2b05 44d1c014 bpatch patch14_3 ,mem_patch14 +2b06 1b427e00 deposit clke +2b07 20407f37 call clk_diff_rt +2b08 680a415f fetcht 4 ,mem_sleep_counter_all +2b09 18467cff sub temp ,0xff ,null +2b0a 20610000 rtn positive +2b0b 1fed7e00 lshift8 pdata ,pdata +2b0c 1ff27e00 lshift4 pdata ,pdata +2b0d 9846fc00 idiv temp +2b0e 20407f86 call wait_div_end +2b0f 1807fe00 quotient pdata +2b10 d84000c8 arg param_lpm_adjmax ,temp +2b11 20407f91 call ceiling +2b12 60008099 store 1 ,mem_lpm_adjust +2b13 24342b15 nbranch lpm_adjust_positive ,user +2b14 1fe67e00 sub pdata ,0 ,pdata + +lpm_adjust_positive: +2b15 6809c16f fetcht 3 ,mem_clks_per_lpo +2b16 9840fe00 iadd temp ,pdata +2b17 6001c16f store 3 ,mem_clks_per_lpo + +lpm_clear_counter: +2b18 58000000 setarg 0 +2b19 6002415f store 4 ,mem_sleep_counter_all +2b1a 20600000 rtn + +lpm_doze: +2b1b 6800c177 fetch 1 ,mem_lpm_config + 2 +2b1c 79207e02 set1 reload_code ,pdata +2b1d 6000c177 store 1 ,mem_lpm_config + 2 +2b1e 20202b23 branch lpm_hibernate_normal + +lpm_hibernate: +2b1f d85fffff arg param_hibernate_clks ,temp +2b20 6800c176 fetch 1 ,mem_lpm_config + 1 +2b21 793ffe07 set0 7 ,pdata +2b22 6000c176 store 1 ,mem_lpm_config + 1 + +lpm_hibernate_normal: +2b23 44d24014 bpatch patch14_4 ,mem_patch14 +2b24 20402c29 call lpm_write_gpio_wakeup +2b25 6800c157 fetch 1 ,mem_lpm_hibernate_switch +2b26 6000c17c store 1 ,mem_lpm_xtalcnt + 4 +2b27 6800c17a fetch 1 ,mem_lpm_xtalcnt + 2 +2b28 79207e07 set1 cold_wake ,pdata +2b29 6000c17a store 1 ,mem_lpm_xtalcnt + 2 + +lpm_sleep: +2b2a 44d2c014 bpatch patch14_5 ,mem_patch14 +2b2b 204029e7 call xtal_fast_wake +2b2c 6802415f fetch 4 ,mem_sleep_counter_all +2b2d 9840fe00 iadd temp ,pdata +2b2e 6002415f store 4 ,mem_sleep_counter_all +2b2f 20402aef call lpm_save_context +2b30 6802c178 fetch 5 ,mem_lpm_xtalcnt +2b31 6012004c hstore 4 ,core_lpm_reg +2b32 1fef2200 rshift32 pdata ,rega +2b33 37d98200 until null ,lpo_edge +2b34 1b227e00 deposit clkn +2b35 60034163 store 6 ,mem_sleep_clkn +2b36 70800502 hjam lpmreg_sel_ctrl2 ,core_lpm_wr +2b37 37d98200 until null ,lpo_edge +2b38 37d98200 until null ,lpo_edge +2b39 1a227e00 deposit rega +2b3a 6010804f hstore 1 ,core_lpm_isogate +2b3b 70800502 hjam lpmreg_sel_ctrl2 ,core_lpm_wr + +lpm_enter_sleep: +2b3c 37d98200 until null ,lpo_edge +2b3d 37d98200 until null ,lpo_edge +2b3e 601a004c hstoret 4 ,core_lpm_reg +2b3f 70800510 hjam lpmreg_sel_counter ,core_lpm_wr +2b40 37df8200 until null ,never + +lpm_recover_clk: +2b41 44d34014 bpatch patch14_6 ,mem_patch14 +2b42 58000000 setarg 0 +2b43 1ce27c00 copy auxcnt ,null +2b44 2022ab4c branch lpm_recover_timeout ,zero +2b45 6810813c hfetch 1 ,core_lpm_xtalcnt +2b46 6818813d hfetcht 1 ,core_lpm_buckcnt +2b47 98467c00 isub temp ,null +2b48 20212b4a branch lpm_recover_xtal ,positive +2b49 18427e00 deposit temp + +lpm_recover_xtal: +2b4a 9ce67e00 isub auxcnt ,pdata +2b4b 1fe0fe01 increase 1 ,pdata + +lpm_recover_timeout: +2b4c 1fe0fe08 increase 8 ,pdata +2b4d 37d98200 until null ,lpo_edge +2b4e 9e20fe00 iadd lpo_time ,pdata +2b4f 680a415b fetcht 4 ,mem_sleep_counter +2b50 9840fe00 iadd temp ,pdata +2b51 6809c16f fetcht 3 ,mem_clks_per_lpo +2b52 984ffe00 imul32 temp ,pdata +2b53 1fecfe00 rshift8 pdata ,pdata +2b54 1ff1fe00 rshift4 pdata ,pdata +2b55 1fe0fe6e increase param_lpm_fix ,pdata +2b56 d8400ea6 arg 3750 ,temp +2b57 9846fc00 idiv temp +2b58 20407f86 call wait_div_end +2b59 1807fe00 quotient pdata +2b5a 1ff07e00 lshift16 pdata ,pdata +2b5b 18070400 remainder temp +2b5c 9841fe00 ior temp ,pdata +2b5d 680b4163 fetcht 6 ,mem_sleep_clkn +2b5e 20407f2c call clk_add +2b5f 18423200 copy temp ,clkn +2b60 68034048 fetch 6 ,mem_context + coffset_clk_offset +2b61 20402854 call calc_clke2 +2b62 1b427e00 deposit clke +2b63 60030a9a store 6 ,mem_pdatatemp +2b64 1ce27e00 deposit auxcnt +2b65 e0a08000 istore 1 ,contw +2b66 6810811d hfetch 1 ,core_gpio_in1 +2b67 1fe1fef0 or_into 0xf0 ,pdata +2b68 e0a08000 istore 1 ,contw +2b69 20600000 rtn + +lpm_dispatch: +2b6a 44d3c014 bpatch patch14_7 ,mem_patch14 +2b6b 20402afa call lpo_calibration +2b6c 6801c16f fetch 3 ,mem_clks_per_lpo +2b6d 207a0000 rtn blank +2b6e 6800c091 fetch 1 ,mem_lpm_mode +2b6f 207a0000 rtn blank +2b70 6800c65a fetch 1 ,mem_ssp_enable +2b71 203a2b74 branch lpm_dispatch_next ,blank +2b72 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +2b73 207a0000 rtn blank + +lpm_dispatch_next: +2b74 6800c4c0 fetch 1 ,mem_le_sc_calc +2b75 247a0000 nrtn blank +2b76 20402c3a call lpm_check_wake_lock +2b77 247a0000 nrtn blank +2b78 6800c040 fetch 1 ,mem_context +2b79 2fe00e03 compare 3 ,pdata ,0x7 +2b7a 2420ab9d nbranch lpm_dispatch_unconn ,true +2b7b 68014042 fetch 2 ,mem_context + coffset_tsniff +2b7c 207a0000 rtn blank +2b7d 20758000 rtn wake +2b7e 44d44015 bpatch patch15_0 ,mem_patch15 +2b7f 680880a0 fetcht 1 ,mem_lpm_current_mult +2b80 68014042 fetch 2 ,mem_context + coffset_tsniff +2b81 984ffe00 imul32 temp ,pdata +2b82 18518400 rshift4 temp ,temp +2b83 184b0400 rshift2 temp ,temp +2b84 98467e00 isub temp ,pdata +2b85 680a4044 fetcht 4 ,mem_context + coffset_sniff_anchor +2b86 9840fe00 iadd temp ,pdata +2b87 6808c156 fetcht 1 ,mem_lpm_overhead +2b88 98467e00 isub temp ,pdata +2b89 1ff06000 lshift16 pdata ,alarm +2b8a 44d4c015 bpatch patch15_1 ,mem_patch15 +2b8b 6801404e fetch 2 ,mem_context + coffset_rx_window +2b8c 1fe37e00 rshift pdata ,pdata +2b8d 20407f50 call clk2bt +2b8e 1e027e00 deposit alarm +2b8f 20407f39 call clk_diff +2b90 1b420400 copy clke ,temp +2b91 20407f37 call clk_diff_rt +2b92 20740000 rtn user + +lpm_dispatch_sleep: +2b93 20407f49 call clk2lpo + +lpm_dispatch_lpo: +2b94 44d54015 bpatch patch15_2 ,mem_patch15 +2b95 6800c178 fetch 1 ,mem_lpm_xtalcnt +2b96 98467c00 isub temp ,null +2b97 20212b18 branch lpm_clear_counter ,positive +2b98 600a415b storet 4 ,mem_sleep_counter +2b99 20403328 call app_will_enter_lpm +2b9a 204052fb call l2cap_lpm_save_txbuf +2b9b 680a415b fetcht 4 ,mem_sleep_counter +2b9c 20202b2a branch lpm_sleep + +lpm_dispatch_unconn: +2b9d 44d5c015 bpatch patch15_3 ,mem_patch15 +2b9e 6800c040 fetch 1 ,mem_context +2b9f c3800000 rtnbit1 state_inconn +2ba0 c3818000 rtnbit1 state_inpage +2ba1 6800c65a fetch 1 ,mem_ssp_enable +2ba2 203a2ba5 branch lpm_unconn_nossp ,blank +2ba3 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +2ba4 207a0000 rtn blank + +lpm_unconn_nossp: +2ba5 44d64015 bpatch patch15_4 ,mem_patch15 +2ba6 6800c36e fetch 1 ,mem_le_adv_enable +2ba7 243a2baa nbranch lpm_unconn_cont ,blank +2ba8 6800c093 fetch 1 ,mem_scan_mode +2ba9 207a0000 rtn blank + +lpm_unconn_cont: +2baa 68014154 fetch 2 ,mem_lpm_interval +2bab 207a0000 rtn blank + +lpm_sleep_btclk: +2bac 6808c156 fetcht 1 ,mem_lpm_overhead +2bad 98467e00 isub temp ,pdata +2bae d8401d4c arg 7500 ,temp +2baf 984ffe00 imul32 temp ,pdata +2bb0 20202b93 branch lpm_dispatch_sleep + +lpm_set_mult: +2bb1 44d6c015 bpatch patch15_5 ,mem_patch15 +2bb2 7855fc00 disable wake +2bb3 68008030 fetch 1 ,mem_state +2bb4 c4008000 rtnbit0 state_insniff +2bb5 2436abd0 nbranch lpm_not_match ,match +2bb6 20402bcb call lpm_match +2bb7 680140c1 fetch 2 ,mem_rx_window_sniff +2bb8 6001003e store 2 ,mem_rx_window +2bb9 68008047 fetch 1 ,mem_arq +2bba c281abde bbit1 wack ,lpm_mult_short +2bbb c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +2bbc 20405274 call l2cap_malloc_is_fifo_empty +2bbd 243a2bde nbranch lpm_mult_short ,blank +2bbe 6800c55c fetch 1 ,mem_classic_bt_flag +2bbf c280abde bbit1 short_mult_flag ,lpm_mult_short + +lpm_mult_wait_timeout: +2bc0 7000a000 jam 0 ,mem_lpm_current_mult +2bc1 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +2bc2 6800c174 fetch 1 ,mem_lpm_mult_cnt +2bc3 203a2be2 branch lpm_mult_long ,blank +2bc4 1fe0ffff increase -1 ,pdata +2bc5 6000c174 store 1 ,mem_lpm_mult_cnt +2bc6 20600000 rtn + +classic_bt_set_mult_short_flag: +2bc7 d8e00001 arg short_mult_flag ,queue +2bc8 202060cd branch classic_bluetooth_set_flag + +classic_bt_clr_mult_short_flag: +2bc9 d8e00001 arg short_mult_flag ,queue +2bca 202060d1 branch classic_bluetooth_clr_flag + +lpm_match: +2bcb 70415900 jam 0 ,mem_sniff_unint_lost +2bcc 6801c169 fetch 3 ,mem_sniff_rcv +2bcd 1fe0fe01 increase 1 ,pdata +2bce 6001c169 store 3 ,mem_sniff_rcv +2bcf 20600000 rtn + +lpm_not_match: +2bd0 44d74015 bpatch patch15_6 ,mem_patch15 +2bd1 680940c1 fetcht 2 ,mem_rx_window_sniff +2bd2 18430400 rshift temp ,temp +2bd3 6801003e fetch 2 ,mem_rx_window +2bd4 9840fe00 iadd temp ,pdata +2bd5 6001003e store 2 ,mem_rx_window + +lpm_lost: +2bd6 7000a000 jam 0 ,mem_lpm_current_mult +2bd7 6801c16c fetch 3 ,mem_sniff_lost +2bd8 1fe0fe01 increase 1 ,pdata +2bd9 6001c16c store 3 ,mem_sniff_lost +2bda 6800c159 fetch 1 ,mem_sniff_unint_lost +2bdb 1fe0fe01 increase 1 ,pdata +2bdc 6000c159 store 1 ,mem_sniff_unint_lost +2bdd 20600000 rtn + +lpm_mult_short: +2bde 7000a000 jam 0 ,mem_lpm_current_mult +2bdf 6800c173 fetch 1 ,mem_lpm_mult_timeout +2be0 6000c174 store 1 ,mem_lpm_mult_cnt +2be1 20600000 rtn + +lpm_mult_long: +2be2 6808c172 fetcht 1 ,mem_lpm_mult +2be3 600880a0 storet 1 ,mem_lpm_current_mult +2be4 20600000 rtn + +lpm_cal_xtal_startup: +2be5 44d7c015 bpatch patch15_7 ,mem_patch15 +2be6 6800c178 fetch 1 ,mem_lpm_xtalcnt +2be7 247a0000 nrtn blank +2be8 70804206 hjam clksel_rc ,core_clksel +2be9 58000f0c setarg 0xf0c +2bea 20402c18 call lpm_write_config +2beb 58030d40 setarg 200000 +2bec 20402a8f call sleep +2bed 37d98200 until null ,lpo_edge +2bee 1e226000 copy lpo_time ,alarm +2bef 204029e7 call xtal_fast_wake +2bf0 70804204 hjam clksel_xtal ,core_clksel +2bf1 2000000a nop 10 +2bf2 37d98200 until null ,lpo_edge +2bf3 1e227e00 deposit lpo_time +2bf4 9e067e00 isub alarm ,pdata +2bf5 1fe0fe30 increase 0x30 ,pdata +2bf6 d84000ff arg 0xff ,temp +2bf7 20407f91 call ceiling +2bf8 6000c178 store 1 ,mem_lpm_xtalcnt +2bf9 20007530 nop 30000 +2bfa 20007530 nop 30000 +2bfb 20007530 nop 30000 +2bfc 20600000 rtn + +lpm_cal_xtal_startup_by_snooze: +2bfd 6800c178 fetch 1 ,mem_lpm_xtalcnt +2bfe 247a0000 nrtn blank +2bff 708044ff hjam 0xff ,core_xtal_stable_time +2c00 70804206 hjam clksel_rc ,core_clksel +2c01 204029e7 call xtal_fast_wake +2c02 580003e8 setarg 1000 +2c03 9e20e000 iadd lpo_time ,alarm +2c04 07e00000 snooze +2c05 1e227e00 deposit lpo_time +2c06 20002ee0 nop 12000 +2c07 20002ee0 nop 12000 +2c08 20002ee0 nop 12000 +2c09 20002ee0 nop 12000 +2c0a 20002ee0 nop 12000 +2c0b 20002ee0 nop 12000 +2c0c 20002ee0 nop 12000 +2c0d 20002ee0 nop 12000 +2c0e 20002ee0 nop 12000 +2c0f 9e067e00 isub alarm ,pdata +2c10 1fe0fe30 add pdata ,0x30 ,pdata +2c11 d84000ff arg 0xff ,temp +2c12 20407f91 call ceiling +2c13 6000c178 store 1 ,mem_lpm_xtalcnt +2c14 20007530 nop 30000 +2c15 20007530 nop 30000 +2c16 20007530 nop 30000 +2c17 20600000 rtn + +lpm_write_config: +2c18 d8a00fff arg 0xfff ,contw +2c19 98a10a00 iand contw ,contw +2c1a 6800c175 fetch 1 ,mem_lpm_config +2c1b 1fe17ef0 and_into 0xf0 ,pdata +2c1c 1fed7e00 lshift8 pdata ,pdata +2c1d 98a1fe00 ior contw ,pdata +2c1e 6011004c hstore 2 ,core_lpm_reg +2c1f e8c10000 ifetch 2 ,contr +2c20 e0a10000 istore 2 ,contw + +lpm_write_ctrl: +2c21 58000001 setarg lpmreg_sel_ctrl +2c22 20202c24 branch lpm_write + +lpm_write_ctrl2: +2c23 58000002 setarg lpmreg_sel_ctrl2 + +lpm_write: +2c24 37d98200 until null ,lpo_edge +2c25 60108005 hstore 1 ,core_lpm_wr +2c26 37d98200 until null ,lpo_edge +2c27 37d98200 until null ,lpo_edge +2c28 20600000 rtn + +lpm_write_gpio_wakeup: +2c29 44d84016 bpatch patch16_0 ,mem_patch16 +2c2a 680200a1 fetch 4 ,mem_gpio_wakeup_low +2c2b 6012004c hstore 4 ,core_lpm_reg +2c2c 58000004 setarg lpmreg_sel_gpiolow +2c2d 20402c24 call lpm_write +2c2e 680200a5 fetch 4 ,mem_gpio_wakeup_high +2c2f 6012004c hstore 4 ,core_lpm_reg +2c30 58000008 setarg lpmreg_sel_gpiohigh +2c31 20202c24 branch lpm_write + +lpm_get_wake_lock: +2c32 68014152 fetch 2 ,mem_lpm_wake_lock +2c33 f9207e00 qset1 pdata +2c34 60014152 store 2 ,mem_lpm_wake_lock +2c35 20600000 rtn + +lpm_put_wake_lock: +2c36 68014152 fetch 2 ,mem_lpm_wake_lock +2c37 f93ffe00 qset0 pdata +2c38 60014152 store 2 ,mem_lpm_wake_lock +2c39 20600000 rtn + +lpm_check_wake_lock: +2c3a 44d8c016 bpatch patch16_1 ,mem_patch16 +2c3b 20403326 call app_check_wake_lock +2c3c 68014152 fetch 2 ,mem_lpm_wake_lock +2c3d 1fe22200 copy pdata ,rega +2c3e 6800804c fetch 1 ,mem_state_map +2c3f 2feffe06 isolate1 smap_rxlmp ,pdata +2c40 7920a20b setflag true ,wake_lock_lmp_rx ,rega +2c41 68008078 fetch 1 ,mem_lmo_opcode1 +2c42 6808807c fetcht 1 ,mem_lmo_opcode2 +2c43 9840fe00 iadd temp ,pdata +2c44 68088048 fetcht 1 ,mem_lmp_to_send +2c45 9840fe00 iadd temp ,pdata +2c46 7d3a220a nsetflag blank ,wake_lock_lmp_tx ,rega +2c47 6800c4ff fetch 1 ,mem_le_tx_buff_used +2c48 7d3a2201 nsetflag blank ,wake_lock_ble_tx ,rega +2c49 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +2c4a 6809025f fetcht 2 ,mem_l2cap_rxbuff2_len +2c4b 9840fe00 iadd temp ,pdata +2c4c 7d3a220d nsetflag blank ,wake_lock_l2cap_rx ,rega +2c4d 68044668 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +2c4e 7d3a220f nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +2c4f 68044670 fetch util_fifo_len ,mem_ipc_fifo_c512bt +2c50 7d3a220e nsetflag blank ,wake_lock_ipc_c512bt ,rega +2c51 6800c1ce fetch 1 ,mem_hci_cmd +2c52 7d3a2208 nsetflag blank ,wake_lock_cmd ,rega +2c53 6800c092 fetch 1 ,mem_device_option +2c54 2fe1fe0a compare dvc_op_module ,pdata ,0xff +2c55 2040ac5b call lpm_uart_wake_lock ,true +2c56 5ffffff8 setarg -8 +2c57 9a212200 iand rega ,rega +2c58 1a227e00 copy rega ,pdata +2c59 60014152 store 2 ,mem_lpm_wake_lock +2c5a 20600000 rtn + +lpm_uart_wake_lock: +2c5b 68110112 hfetch 2 ,core_uart_rxitems +2c5c 7d3a2206 nsetflag blank ,wake_lock_uart_rx ,rega +2c5d 6811010e hfetch 2 ,core_uart_txitems +2c5e 7d3a2205 nsetflag blank ,wake_lock_uart_tx ,rega +2c5f 20600000 rtn + +lpm_shut_down: +2c60 68120138 hfetch 4 ,core_lpm_ctrl +2c61 793ffe1b set0 27 ,pdata +2c62 6012004c hstore 4 ,core_lpm_reg +2c63 20402c21 call lpm_write_ctrl +2c64 20202a8c branch assert + +lpm_disable_exen_output: +2c65 6812013c hfetch 4 ,core_lpm_xtalcnt +2c66 793ffe14 set0 20 ,pdata +2c67 6012004c hstore 4 ,core_lpm_reg +2c68 20202c23 branch lpm_write_ctrl2 + +check_bt_disabled: +2c69 68014150 fetch 2 ,mem_chip_functions +2c6a c2802a8c bbit1 bt_disabled ,assert +2c6b 20600000 rtn + +check_ble_disabled: +2c6c 68014150 fetch 2 ,mem_chip_functions +2c6d c280aa8c bbit1 ble_disabled ,assert +2c6e 20600000 rtn + +check_module_disabled: +2c6f 68014150 fetch 2 ,mem_chip_functions +2c70 c2812a8c bbit1 module_disable ,assert +2c71 20600000 rtn + +g24_dispatch: +2c72 44d94016 bpatch patch16_2 ,mem_patch16 +2c73 20402c7a call g24_head_ptr2regc +2c74 1a60a4cd add regc ,offset_24g_mode ,regb +2c75 ea408000 ifetch 1 ,regb +2c76 c1000000 rtneq disable_24g +2c77 c000ad06 beq tx_24g ,g24_transmit_process +2c78 c0012c7f beq rx_24g ,g24_receive_process +2c79 20600000 rtn + +g24_head_ptr2regc: +2c7a 68094241 fetcht 2 ,mem_24g_head_ptr +2c7b 18422600 copy temp ,regc +2c7c 20600000 rtn + +g24_receive_process_init: +2c7d 20402f3d call g24_receive_init +2c7e 2020307d branch g24_mode_switch_init + +g24_receive_process: +2c7f 20403084 call g24_mode_switch +2c80 2040305a call g24_dongle_work_mode_auto +2c81 2040305e call g24_dongle_bind_mode_auto +2c82 202030a2 branch g24_dongle_search_mode_auto + +g24_pair_init: +2c83 20403231 call g24_set0_mem_pid +2c84 5800004e setarg g24_pair_ch +2c85 2040322f call g24_store_mem_ch +2c86 204032ba call g24_store_mem_pair_txpower +2c87 1a60a292 add regc ,offset_24g_paring_addr ,rega +2c88 ea220000 ifetch 4 ,rega +2c89 2020322c branch g24_store_mem_addr + +g24_ch: +2c8a 20402c7a call g24_head_ptr2regc +2c8b 1a60a491 add regc ,offset_24g_current_ch_number ,regb +2c8c ea488000 ifetcht 1 ,regb +2c8d 20402c90 call g24_ch_temp_incre_size4 +2c8e 1a608a91 add regc ,offset_24g_current_ch_number ,contw +2c8f 20202e56 branch g24_contw_istoret_1byte + +g24_ch_temp_incre_size4: +2c90 20402c94 call g24_ch_calc +2c91 18408401 increase 1 ,temp +2c92 18410403 and_into 3 ,temp +2c93 20600000 rtn + +g24_ch_calc: +2c94 1a60a4ae add regc ,offset_24g_addr ,regb +2c95 ea408000 ifetch 1 ,regb +2c96 1fe17e03 and_into 0x03 ,pdata +2c97 1fefa204 mul32 pdata ,4 ,rega +2c98 1a60fe97 add regc ,offset_24g_ch_map1 ,pdata +2c99 9a20fe00 iadd rega ,pdata +2c9a 98408c00 iadd temp ,contr +2c9b e8c08000 ifetch 1 ,contr +2c9c 2020322f branch g24_store_mem_ch + +g24_set_device_addr: +2c9d 2040326c call g24_store_mem_tx_power_temp +2c9e 2040666a call otp_enable_chgpump +2c9f 580007e2 setarg 0x7e2 +2ca0 da200aa2 arg mem_temp ,rega +2ca1 d8400004 arg 4 ,temp +2ca2 204066b3 call otpd_read_data +2ca3 2040666d call otp_disable_chgpump +2ca4 68020aa2 fetch 4 ,mem_temp +2ca5 20403227 call g24_store_mem_device_addr +2ca6 247a0000 nrtn blank +2ca7 680240a0 fetch 4 ,mem_lap +2ca8 20203227 branch g24_store_mem_device_addr + +g24_transmit_rf_sta_init: +2ca9 20403241 call g24_set1_mem_rf_last_sta +2caa 58000000 setarg 0 +2cab 2040323f call g24_store_mem_sync_cnt + +g24_transmit_rf_ctrl_clear: +2cac 2040323a call g24_fetch_mem_data_type +2cad 1fe17e07 and_into bits_data ,pdata +2cae 2020323c branch g24_store_mem_data_type + +g24_hop_ch_enable: +2caf 2040323a call g24_fetch_mem_data_type +2cb0 79207e04 set1 bit_hop ,pdata +2cb1 2040323c call g24_store_mem_data_type +2cb2 20203235 branch g24_store_mem_txpayload + +g24_transmit_hop_pac_fail: +2cb3 2040325d call g24_fetch_mem_rf_work_stage +2cb4 c000acb7 beq 1 ,g24_transmit_hop_pac_fail_wo_hop +2cb5 c0012cbc beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 +2cb6 20600000 rtn + +g24_transmit_hop_pac_fail_wo_hop: +2cb7 2040323e call g24_set2_mem_sync_cnt + +g24_transmit_hop_pac_fail_stage1: +2cb8 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw +2cb9 204032d6 call g24_mem_set0 +2cba 20403242 call g24_store_mem_rf_last_sta +2cbb 20202cac branch g24_transmit_rf_ctrl_clear + +g24_transmit_hop_pac_fail_hop_stage2: +2cbc 2040325a call g24_set0_mem_rf_hop_ch +2cbd 20202cb8 branch g24_transmit_hop_pac_fail_stage1 + +g24_transmit_pac_fail_hop_stage3: +2cbe 1a60a28c add regc ,offset_24g_txfail_cnt ,rega +2cbf ea208000 ifetch 1 ,rega +2cc0 1fe0fe01 increase 1 ,pdata +2cc1 1a608a8c add regc ,offset_24g_txfail_cnt ,contw +2cc2 e0a08000 istore 1 ,contw +2cc3 c0102dd2 beq 0x20 ,g24_tx_attempt_fail +2cc4 20403258 call g24_fetch_mem_rf_hop_ch +2cc5 c000acca beq 1 ,g24_rf_hop_fastly +2cc6 58000001 setarg 1 +2cc7 2040325b call g24_store_mem_rf_hop_ch + +g24_rf_hop_attemp_again: +2cc8 20403258 call g24_fetch_mem_rf_hop_ch +2cc9 c080acac bne 1 ,g24_transmit_rf_ctrl_clear + +g24_rf_hop_fastly: +2cca 1a60a2d3 add regc ,offset_24g_hop_fastly_cnt ,rega +2ccb ea208000 ifetch 1 ,rega +2ccc 1fe0fe01 increase 1 ,pdata +2ccd 20402cd5 call g24_store_mem_hop_fastly_cnt +2cce c0022cd2 beq 4 ,g24_rf_hop_fastly_exit +2ccf 20402c8a call g24_ch +2cd0 20402d04 call g24_set2_mem_max_retry +2cd1 20202d8f branch g24_transmit_packet + +g24_rf_hop_fastly_exit: +2cd2 20402cd4 call g24_set0_mem_hop_fastly_cnt +2cd3 20202cac branch g24_transmit_rf_ctrl_clear + +g24_set0_mem_hop_fastly_cnt: +2cd4 58000000 setarg 0 + +g24_store_mem_hop_fastly_cnt: +2cd5 1a608ad3 add regc ,offset_24g_hop_fastly_cnt ,contw +2cd6 202032b4 branch g24_contw_istore_1byte + +g24_transmit_hop_pac_succ_wo_hop: +2cd7 2040323e call g24_set2_mem_sync_cnt + +g24_transmit_hop_pac_succ: +2cd8 2040325a call g24_set0_mem_rf_hop_ch +2cd9 20403241 call g24_set1_mem_rf_last_sta +2cda 20202cac branch g24_transmit_rf_ctrl_clear + +g24_transmit_succ_rf_config: +2cdb 2040325d call g24_fetch_mem_rf_work_stage +2cdc c001acd8 beq 3 ,g24_transmit_hop_pac_succ +2cdd 2040323a call g24_fetch_mem_data_type +2cde 2fec0004 isolate0 bit_hop ,pdata +2cdf 2020aca9 branch g24_transmit_rf_sta_init ,true +2ce0 2040325d call g24_fetch_mem_rf_work_stage +2ce1 c000acd7 beq 1 ,g24_transmit_hop_pac_succ_wo_hop +2ce2 c0012cd8 beq 2 ,g24_transmit_hop_pac_succ +2ce3 20600000 rtn + +g24_rf_sta_check: +2ce4 20403253 call g24_fetch_mem_pairing_sm +2ce5 c1ff8000 rtnne state_24g_pairing_success +2ce6 20402ce9 call g24_rf_laststa_synccnt_check +2ce7 24562cf4 ncall g24_rf_sync_cnt_check ,user2 +2ce8 20600000 rtn + +g24_rf_laststa_synccnt_check: +2ce9 78567c00 disable user2 +2cea 1a60a2ce add regc ,offset_24g_rf_last_sta ,rega +2ceb ea208000 ifetch 1 ,rega +2cec c1808000 rtnne 1 +2ced 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega +2cee ea208000 ifetch 1 ,rega +2cef c1800000 rtnne 0 +2cf0 58000001 setarg 1 +2cf1 20402cfd call g24_store_mem_rf_work_stage +2cf2 20403237 call g24_set4_mem_max_retry +2cf3 20207feb branch enable_user2 + +g24_rf_sync_cnt_check: +2cf4 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega +2cf5 ea208000 ifetch 1 ,rega +2cf6 203a2cff branch g24_rf_hop_attemp ,blank +2cf7 1fe0ffff increase -1 ,pdata +2cf8 2040323f call g24_store_mem_sync_cnt +2cf9 58000002 setarg 2 +2cfa 20402cfd call g24_store_mem_rf_work_stage +2cfb 20402c8a call g24_ch +2cfc 20203237 branch g24_set4_mem_max_retry + +g24_store_mem_rf_work_stage: +2cfd 1a608ad2 add regc ,offset_24g_rf_work_stage ,contw +2cfe 202032b4 branch g24_contw_istore_1byte + +g24_rf_hop_attemp: +2cff 58000003 setarg 3 +2d00 20402cfd call g24_store_mem_rf_work_stage +2d01 20403258 call g24_fetch_mem_rf_hop_ch +2d02 243a2cc8 nbranch g24_rf_hop_attemp_again ,blank +2d03 20402c8a call g24_ch + +g24_set2_mem_max_retry: +2d04 58000002 setarg 2 +2d05 20203238 branch g24_store_mem_max_retry + +g24_transmit_process: +2d06 c6930000 rtnmark0 mark_24g +2d07 79200027 set1 mark_24g_conext ,mark +2d08 44d9c016 bpatch patch16_3 ,mem_patch16 +2d09 1a60a28e add regc ,offset_24g_tx_without_int ,rega +2d0a ea208000 ifetch 1 ,rega +2d0b c000ad0f beq 1 ,g24_transmit_without_int +2d0c 2040306a call g24_timer_check +2d0d 24342d16 nbranch g24_transmit_exit ,user +2d0e 20402d1b call g24_interval_calibrate + +g24_transmit_without_int: +2d0f 1a608a8e add regc ,offset_24g_tx_without_int ,contw +2d10 204032d6 call g24_mem_set0 +2d11 20402d2c call g24_txdata_prep +2d12 24342d7d nbranch g24_enter_lpm ,user +2d13 20402ce4 call g24_rf_sta_check + +g24_transmit_start: +2d14 20402d8f call g24_transmit_packet +2d15 20402e7a call g24_power_ctrl + +g24_transmit_exit: +2d16 793f8027 set0 mark_24g_conext ,mark +2d17 20600000 rtn + +g24_timer_timeout: +2d18 20628000 rtn zero +2d19 79207e1c set1 28 ,pdata +2d1a 20600000 rtn + +g24_interval_calibrate: +2d1b 1a60a2c2 add regc ,offset_24g_pac_index ,rega +2d1c ea208000 ifetch 1 ,rega +2d1d 1fe0fe01 increase 1 ,pdata +2d1e 1a608ac2 add regc ,offset_24g_pac_index ,contw +2d1f e0a08000 istore 1 ,contw +2d20 c0022d23 beq 4 ,g24_interval_max +2d21 c002ad27 beq 5 ,g24_interval_min +2d22 20600000 rtn + +g24_interval_max: +2d23 1a60a2ad add regc ,offset_24g_interval_max ,rega +2d24 ea208000 ifetch 1 ,rega + +g24_interval_update: +2d25 1a608aab add regc ,offset_24g_interval ,contw +2d26 202032b4 branch g24_contw_istore_1byte + +g24_interval_min: +2d27 1a608ac2 add regc ,offset_24g_pac_index ,contw +2d28 204032d6 call g24_mem_set0 +2d29 1a60a2ac add regc ,offset_24g_interval_min ,rega +2d2a ea208000 ifetch 1 ,rega +2d2b 20202d25 branch g24_interval_update + +g24_txdata_prep: +2d2c 20403253 call g24_fetch_mem_pairing_sm +2d2d c0ffaeb1 bne state_24g_pairing_success ,g24_pairing_sm +2d2e 44da4016 bpatch patch16_4 ,mem_patch16 +2d2f 20402d3a call g24_package_data +2d30 24342d36 nbranch g24_txdata_last_pac ,user +2d31 20402d53 call g24_transmit_prep +2d32 20402e71 call g24_power_ctrl_pac_incrs + +g24_txdata_enable_tx: +2d33 58000001 setarg ensure_on_24g + +g24_store_mem_ensure: +2d34 1a608a8b add regc ,offset_24g_ensure ,contw +2d35 202032b4 branch g24_contw_istore_1byte + +g24_txdata_last_pac: +2d36 1a60a28b add regc ,offset_24g_ensure ,rega +2d37 ea208000 ifetch 1 ,rega +2d38 c000ffe7 beq ensure_on_24g ,enable_user +2d39 20600000 rtn + +g24_package_data: +2d3a 1a6084d8 add regc ,offset_24g_cb_data ,temp +2d3b e8410000 ifetch 2 ,temp +2d3c 20407f9c call callback_func +2d3d 24740000 nrtn user +2d3e 1a227e00 copy rega ,pdata +2d3f 60008aae store 1 ,mem_rega +2d40 1a608ab2 add regc ,offset_24g_abort_pac ,contw +2d41 204032d6 call g24_mem_set0 +2d42 20402cac call g24_transmit_rf_ctrl_clear +2d43 6000919e store 1 ,mem_24g_common_temp +2d44 68008aae fetch 1 ,mem_rega +2d45 1fe22200 copy pdata ,rega +2d46 1a208401 add rega ,1 ,temp +2d47 d8a0119f arg mem_24g_common_temp + 1 ,contw +2d48 1a227200 copy rega ,loopcnt +2d49 1a420c00 copy regb ,contr +2d4a 20407f01 call memcpy +2d4b da20119e arg mem_24g_common_temp ,rega + +g24_put_data_in_buff: +2d4c c6938000 rtnmark0 mark_24g_conext +2d4d 1a608a86 add regc ,offset_24g_datalen ,contw +2d4e e0a88000 istoret 1 ,contw +2d4f 18427200 copy temp ,loopcnt +2d50 1a608a22 add regc ,offset_24g_txbuf ,contw +2d51 1a220c00 copy rega ,contr +2d52 20207f01 branch memcpy + +g24_transmit_prep: +2d53 1a60a286 add regc ,offset_24g_datalen ,rega +2d54 ea208000 ifetch 1 ,rega +2d55 1fe0fe02 increase 2 ,pdata +2d56 1a608a88 add regc ,offset_24g_txlen ,contw +2d57 e0a08000 istore 1 ,contw +2d58 2040323a call g24_fetch_mem_data_type +2d59 20403235 call g24_store_mem_txpayload +2d5a 1a60a286 add regc ,offset_24g_datalen ,rega +2d5b ea208000 ifetch 1 ,rega +2d5c 1fe9fe00 lshift3 pdata ,pdata +2d5d 1a60a285 add regc ,offset_24g_pid ,rega +2d5e ea288000 ifetcht 1 ,rega +2d5f 18410403 and temp ,0x03 ,temp +2d60 18438400 lshift temp ,temp +2d61 9841fe00 ior temp ,pdata +2d62 1a60a2c3 add regc ,offset_24g_no_ack ,rega +2d63 ea288000 ifetcht 1 ,rega +2d64 9840fe00 iadd temp ,pdata +2d65 e0a08000 istore 1 ,contw +2d66 1a60a286 add regc ,offset_24g_datalen ,rega +2d67 ea208000 ifetch 1 ,rega +2d68 98007200 iforce loopcnt +2d69 1a608c22 add regc ,offset_24g_txbuf ,contr +2d6a 20207f01 branch memcpy + +g24_send_abort_packet: +2d6b 2040324f call g24_set1_mem_abort_pac +2d6c 2040325a call g24_set0_mem_rf_hop_ch +2d6d 20402e6d call g24_power_ctrl_reinit +2d6e 20402cac call g24_transmit_rf_ctrl_clear +2d6f 6000919e store 1 ,mem_24g_common_temp +2d70 20402d77 call g24_put_data_in_buff_pre +2d71 2040323a call g24_fetch_mem_data_type +2d72 79207e03 set1 bit_abort ,pdata +2d73 2040323c call g24_store_mem_data_type +2d74 20402d53 call g24_transmit_prep +2d75 20402d33 call g24_txdata_enable_tx +2d76 20202d14 branch g24_transmit_start + +g24_put_data_in_buff_pre: +2d77 6000919f store 1 ,mem_24g_common_temp + 1 +2d78 20403224 call g24_fetch_mem_device_addr +2d79 600211a0 store 4 ,mem_24g_common_temp + 2 +2d7a d8400006 arg 6 ,temp +2d7b da20119e arg mem_24g_common_temp ,rega +2d7c 20202d4c branch g24_put_data_in_buff + +g24_enter_lpm: +2d7d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega +2d7e ea208000 ifetch 1 ,rega +2d7f 203a2d6b branch g24_send_abort_packet ,blank + +g24_enter_lpm_prepare: +2d80 1a60a2da add regc ,offset_24g_cb_lpm_prepare ,rega +2d81 ea210000 ifetch 2 ,rega +2d82 20207f9c branch callback_func + +g24_lpm_long_sleep: +2d83 20402c7a call g24_head_ptr2regc +2d84 20402afa call lpo_calibration +2d85 6801c16f fetch 3 ,mem_clks_per_lpo +2d86 207a0000 rtn blank +2d87 1a6084dc add regc ,offset_24g_cb_lpm_before ,temp +2d88 e8410000 ifetch 2 ,temp +2d89 20407f9c call callback_func +2d8a 1a6084b6 add regc ,offset_24g_enter_hibernate ,temp +2d8b e8440000 ifetch 8 ,temp +2d8c 20407f49 call clk2lpo +2d8d 600a415b storet 4 ,mem_sleep_counter +2d8e 20202b2a branch lpm_sleep + +g24_transmit_packet: +2d8f 20402c7a call g24_head_ptr2regc +2d90 1a608a8f add regc ,offset_24g_retry ,contw +2d91 204032d6 call g24_mem_set0 + +g24_transmit_loop: +2d92 20402da4 call g24_transmit_receive_ack +2d93 242c2dae nbranch g24_retransmit ,sync +2d94 2437adae nbranch g24_retransmit ,user3 +2d95 20402dd6 call g24_ackpayload_parse +2d96 20402e75 call g24_power_ctrl_ack_incrs + +g24_transmit_next_packet: +2d97 20402c7a call g24_head_ptr2regc +2d98 1a60a285 add regc ,offset_24g_pid ,rega +2d99 ea208000 ifetch 1 ,rega +2d9a 1fe0fe01 increase 1 ,pdata +2d9b 20403232 call g24_store_mem_pid +2d9c 20403253 call g24_fetch_mem_pairing_sm +2d9d c0ffaed0 bne state_24g_pairing_success ,g24_paring_mode +2d9e 20402cdb call g24_transmit_succ_rf_config + +g24_transmit_abandon: +2d9f 58000000 setarg 0 +2da0 1a608a8c add regc ,offset_24g_txfail_cnt ,contw +2da1 e0a10000 istore 2 ,contw +2da2 58000000 setarg ensure_off_24g +2da3 20202d34 branch g24_store_mem_ensure + +g24_transmit_receive_ack: +2da4 7857fc00 disable user3 +2da5 20402df7 call g24_transmit +2da6 20402c7a call g24_head_ptr2regc +2da7 1a60a2c3 add regc ,offset_24g_no_ack ,rega +2da8 ea208000 ifetch 1 ,rega +2da9 c000adac beq no_ack_24g ,g24_transmit_no_ack +2daa 20402e11 call g24_receive_packet +2dab 20202e45 branch g24_end_of_packet + +g24_transmit_no_ack: +2dac 20402e45 call g24_end_of_packet +2dad 20202d97 branch g24_transmit_next_packet + +g24_retransmit: +2dae 44dac016 bpatch patch16_5 ,mem_patch16 +2daf 1a60a28d add regc ,offset_24g_get_ack_fail ,rega +2db0 ea208000 ifetch 1 ,rega +2db1 1fe0fe01 increase 1 ,pdata +2db2 1a608a8d add regc ,offset_24g_get_ack_fail ,contw +2db3 e0a08000 istore 1 ,contw +2db4 20403253 call g24_fetch_mem_pairing_sm +2db5 c0ffadcc bne state_24g_pairing_success ,g24_tx_paring_retry +2db6 1a60a28f add regc ,offset_24g_retry ,rega +2db7 ea288000 ifetcht 1 ,rega +2db8 18408401 increase 1 ,temp +2db9 1a608a8f add regc ,offset_24g_retry ,contw +2dba e0a88000 istoret 1 ,contw +2dbb 1a60a2cc add regc ,offset_24g_max_retry ,rega +2dbc ea208000 ifetch 1 ,rega +2dbd 98467e00 isub temp ,pdata +2dbe 243a2d92 nbranch g24_transmit_loop ,blank +2dbf 44db4016 bpatch patch16_6 ,mem_patch16 +2dc0 2040325d call g24_fetch_mem_rf_work_stage +2dc1 c001acbe beq 3 ,g24_transmit_pac_fail_hop_stage3 +2dc2 1a60a2d1 add regc ,offset_24g_hop_pac_retry ,rega +2dc3 ea208000 ifetch 1 ,rega +2dc4 1fe0fe01 increase 1 ,pdata +2dc5 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw +2dc6 e0a08000 istore 1 ,contw +2dc7 c0012cb3 beq 2 ,g24_transmit_hop_pac_fail +2dc8 20402caf call g24_hop_ch_enable +2dc9 58000001 setarg 1 +2dca 20403238 call g24_store_mem_max_retry +2dcb 20202d8f branch g24_transmit_packet + +g24_tx_paring_retry: +2dcc 1a60a28d add regc ,offset_24g_get_ack_fail ,rega +2dcd ea208000 ifetch 1 ,rega +2dce c1ff8000 rtnne 0xff +2dcf 1a608a8d add regc ,offset_24g_get_ack_fail ,contw +2dd0 204032d6 call g24_mem_set0 +2dd1 20202dd4 branch g24_stop_24g_mode + +g24_tx_attempt_fail: +2dd2 1a608a8c add regc ,offset_24g_txfail_cnt ,contw +2dd3 204032d6 call g24_mem_set0 + +g24_stop_24g_mode: +2dd4 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp +2dd5 20207d86 branch ui_ipc_send_event + +g24_ackpayload_parse: +2dd6 20402dde call g24_read_len_pid_crc +2dd7 1a60a284 add regc ,offset_24g_rxdata_length ,rega +2dd8 ea208000 ifetch 1 ,rega +2dd9 207a0000 rtn blank +2dda 98007200 iforce loopcnt +2ddb 1a608c02 add regc ,offset_24g_rxbuf_add2 ,contr +2ddc 1a608a64 add regc ,offset_24g_rxpayload ,contw +2ddd 20207f01 branch memcpy + +g24_read_len_pid_crc: +2dde 2040325f call g24_fetch_mem_rxbuf_add1 +2ddf 1fe97e00 rshift3 pdata ,pdata +2de0 1a608a84 add regc ,offset_24g_rxdata_length ,contw +2de1 e0a08000 istore 1 ,contw +2de2 1fe0fe01 increase 1 ,pdata +2de3 1a608c01 add regc ,offset_24g_rxbuf_add1 ,contr +2de4 98c08c00 iadd contr ,contr +2de5 e8c18000 ifetch 3 ,contr +2de6 1a608ac4 add regc ,offset_24g_sta_crc ,contw +2de7 e0a18000 istore 3 ,contw +2de8 2040325f call g24_fetch_mem_rxbuf_add1 +2de9 1fe37e00 rshift pdata ,pdata +2dea 1fe17e03 and pdata ,0x03 ,pdata +2deb 1a608aca add regc ,offset_24g_sta_pid ,contw +2dec e0a08000 istore 1 ,contw +2ded 20600000 rtn + +g24_prep: +2dee 7844fc00 disable enable_crc +2def 7843fc00 disable enable_white +2df0 58555555 setarg 0x555555 +2df1 98001e00 iforce crc24_init +2df2 20600000 rtn + +g24_set_freq_tx: +2df3 20402918 call set_sync_on +2df4 1a60a290 add regc ,offset_24g_ch ,rega +2df5 ea288000 ifetcht 1 ,rega +2df6 20202933 branch set_freq_tx + +g24_transmit: +2df7 20402dee call g24_prep +2df8 20402df3 call g24_set_freq_tx +2df9 79202a00 set1 txgfsk ,radio_ctrl +2dfa 782efc00 enable encode_fec0 +2dfb 78307c00 enable is_tx +2dfc 7850fc00 disable is_rx +2dfd 204053c4 call le_enable +2dfe 2040322a call g24_fetch_mem_addr +2dff 98001200 iforce access +2e00 08008620 inject mod ,32 +2e01 7824fc00 enable enable_crc +2e02 1a60a288 add regc ,offset_24g_txlen ,rega +2e03 ea208000 ifetch 1 ,rega +2e04 98007200 iforce loopcnt +2e05 1a608c42 add regc ,offset_24g_txpayload ,contr + +g24tr_loop: +2e06 e8c08000 ifetch 1 ,contr +2e07 08008608 inject mod ,8 +2e08 c2002e06 loop g24tr_loop +2e09 78247c00 enable enable_parity +2e0a 08008618 inject mod ,24 +2e0b 78447c00 disable enable_parity +2e0c 37d38200 until null ,tx_clear +2e0d 44dbc016 bpatch patch16_7 ,mem_patch16 +2e0e 20000064 nop 100 +2e0f 784efc00 disable encode_fec0 +2e10 20600000 rtn + +g24_receive_packet: +2e11 7857fc00 disable user3 +2e12 18002a00 force 0 ,radio_ctrl +2e13 1a60a290 add regc ,offset_24g_ch ,rega +2e14 ea288000 ifetcht 1 ,rega +2e15 2040291f call set_freq_rx +2e16 20402924 call rf_rx_enable + +g24_receive_rxon: +2e17 20402dee call g24_prep +2e18 7826fc00 enable decode_fec0 +2e19 7830fc00 enable is_rx +2e1a 78507c00 disable is_tx +2e1b 204053c4 call le_enable +2e1c 2040322a call g24_fetch_mem_addr +2e1d 98001200 iforce access +2e1e 78287c00 enable swfine +2e1f 1a60a289 add regc ,offset_24g_rx_window ,rega +2e20 ea210000 ifetch 2 ,rega +2e21 98003600 iforce stop_watch +2e22 37c18400 correlate null ,timeout +2e23 242c2e4d nbranch g24_sync_timeout ,sync +2e24 7824fc00 enable enable_crc +2e25 09800008 parse demod ,bucket ,8 +2e26 19897e00 rshift3 pwindow ,pdata +2e27 1a608a00 add regc ,offset_24g_rxbuf ,contw +2e28 e0a08000 istore 1 ,contw +2e29 1a60a2cd add regc ,offset_24g_mode ,rega +2e2a ea208000 ifetch 1 ,rega +2e2b c0012e33 beq rx_24g ,g24_receive_skip +2e2c 44dc4017 bpatch patch17_0 ,mem_patch17 +2e2d 1a60a200 add regc ,offset_24g_rxbuf ,rega +2e2e ea208000 ifetch 1 ,rega +2e2f 1a60a287 add regc ,offset_24g_data_type ,rega +2e30 ea288000 ifetcht 1 ,rega +2e31 a8400e00 icompare bits_data ,temp +2e32 2420ae45 nbranch g24_end_of_packet ,true + +g24_receive_skip: +2e33 09800008 parse demod ,bucket ,8 +2e34 19897e00 rshift3 pwindow ,pdata +2e35 e0a08000 istore 1 ,contw +2e36 1fe97e00 rshift3 pdata ,pdata +2e37 1fe1721f and pdata ,0x1f ,loopcnt +2e38 2022ae3d branch g24rx_nopayload ,zero + +g24rx_loop: +2e39 09800008 parse demod ,bucket ,8 +2e3a 19897e00 rshift3 pwindow ,pdata +2e3b e0a08000 istore 1 ,contw +2e3c c2002e39 loop g24rx_loop + +g24rx_nopayload: +2e3d 09800018 parse demod ,bucket ,24 +2e3e 1fef7e00 rshift32 pdata ,pdata +2e3f 1ff17e00 rshift16 pdata ,pdata +2e40 e0a18000 istore 3 ,contw +2e41 20232e45 branch g24_end_of_packet ,crc_failed +2e42 7837fc00 enable user3 +2e43 7846fc00 disable decode_fec0 +2e44 20600000 rtn + +g24_end_of_packet: +2e45 784efc00 disable encode_fec0 +2e46 7846fc00 disable decode_fec0 +2e47 7844fc00 disable enable_crc +2e48 7843fc00 disable enable_white +2e49 2030a8f9 branch shutdown_radio ,is_rx +2e4a 37d38200 until null ,tx_clear +2e4b 20000064 nop 100 +2e4c 202028f9 branch shutdown_radio + +g24_sync_timeout: +2e4d 20402e4f call rssi_noise +2e4e 20202e45 branch g24_end_of_packet + +rssi_noise: +2e4f 204029bb call save_rssi +2e50 207a0000 rtn blank +2e51 1a60a2ea add regc ,offset_rssi_noise_index ,rega +2e52 ea288000 ifetcht 1 ,rega +2e53 da200d9e arg mem_rssi_noise_buffer ,rega +2e54 20402e58 call rssi_noise_store +2e55 1a608aea add regc ,offset_rssi_noise_index ,contw + +g24_contw_istoret_1byte: +2e56 e0a88000 istoret 1 ,contw +2e57 20600000 rtn + +rssi_noise_store: +2e58 da4000ff arg rssi_buf_len_noise ,regb +2e59 20202e5a branch rssi_store + +rssi_store: +2e5a 1a227e00 copy rega ,pdata +2e5b 98408a00 iadd temp ,contw +2e5c 68008018 fetch 1 ,mem_rssi +2e5d e0a08000 istore 1 ,contw +2e5e 18408401 increase 1 ,temp +2e5f 1a427e00 copy regb ,pdata +2e60 98410400 iand_into temp +2e61 20600000 rtn + +rssi_average: +2e62 d8400000 arg 0 ,temp +2e63 1a220c00 copy rega ,contr + +rssi_average_loop: +2e64 e8c08000 ifetch 1 ,contr +2e65 98408400 iadd temp ,temp +2e66 c2002e64 loop rssi_average_loop +2e67 184c8400 rshift8 temp ,temp +2e68 20600000 rtn + +g24_power_ctrl_init: +2e69 20402c7a call g24_head_ptr2regc +2e6a 20402e9f call g24_power_ctrl_incrs_level1 +2e6b 58000001 setarg 1 +2e6c 20403272 call g24_store_mem_power_ctrl_level + +g24_power_ctrl_reinit: +2e6d 58000000 setarg 0 +2e6e 20402e73 call g24_store_mem_power_ctrl_pac +2e6f e0a08000 istore 1 ,contw +2e70 20600000 rtn + +g24_power_ctrl_pac_incrs: +2e71 20403270 call g24_fetch_mem_power_ctrl_pac +2e72 1fe0fe01 increase 1 ,pdata + +g24_store_mem_power_ctrl_pac: +2e73 1a608afc add regc ,offset_power_ctrl_packet_cnt ,contw +2e74 202032b4 branch g24_contw_istore_1byte + +g24_power_ctrl_ack_incrs: +2e75 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega +2e76 ea208000 ifetch 1 ,rega +2e77 1fe0fe01 increase 1 ,pdata +2e78 1a608afd add regc ,offset_power_ctrl_ack_cnt ,contw +2e79 202032b4 branch g24_contw_istore_1byte + +g24_power_ctrl: +2e7a 44dcc017 bpatch patch17_1 ,mem_patch17 +2e7b 20403270 call g24_fetch_mem_power_ctrl_pac +2e7c 1fe67c7c sub pdata ,power_ctrl_max_packet_cnt ,null +2e7d 20610000 rtn positive +2e7e 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega +2e7f ea288000 ifetcht 1 ,rega +2e80 98460400 isub temp ,temp +2e81 20402e6d call g24_power_ctrl_reinit +2e82 58000102 setarg offset_power_ctrl_threshold_up +2e83 9a60a200 iadd regc ,rega +2e84 ea208000 ifetch 1 ,rega +2e85 98467c00 isub temp ,null +2e86 24212e8d nbranch g24_power_ctrl_incrs ,positive +2e87 58000103 setarg offset_power_ctrl_threshold_down +2e88 9a60a200 iadd regc ,rega +2e89 ea208000 ifetch 1 ,rega +2e8a 98467c00 isub temp ,null +2e8b 20212e99 branch g24_power_ctrl_decrs ,positive +2e8c 20600000 rtn + +g24_power_ctrl_incrs: +2e8d 1a60a2fe add regc ,offset_power_ctrl_level ,rega +2e8e ea208000 ifetch 1 ,rega +2e8f c0012e93 beq 2 ,g24_power_ctrl_incrs_level2 +2e90 1fe0fe01 increase 1 ,pdata +2e91 20403272 call g24_store_mem_power_ctrl_level +2e92 c000ae9f beq 1 ,g24_power_ctrl_incrs_level1 + +g24_power_ctrl_incrs_level2: +2e93 5800000a setarg power_ctrl_losspac_thresh_up2 +2e94 204032b0 call g24_store_mem_power_ctrl_threshold_up +2e95 58000000 setarg power_ctrl_losspac_thresh_down2 +2e96 204032b2 call g24_store_mem_power_ctrl_threshold_down +2e97 1a60a2ff add regc ,offset_power_ctrl_txpwr_level2 ,rega +2e98 20202ea5 branch g24_ifetch_rega_store_mem_txpower + +g24_power_ctrl_decrs: +2e99 1a60a2fe add regc ,offset_power_ctrl_level ,rega +2e9a ea208000 ifetch 1 ,rega +2e9b c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 +2e9c 1fe0ffff increase -1 ,pdata +2e9d 20403272 call g24_store_mem_power_ctrl_level +2e9e c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 + +g24_power_ctrl_decrs_level1: + +g24_power_ctrl_incrs_level1: +2e9f 58000005 setarg power_ctrl_losspac_thresh_up1 +2ea0 204032b0 call g24_store_mem_power_ctrl_threshold_up +2ea1 58000000 setarg power_ctrl_losspac_thresh_down1 +2ea2 204032b2 call g24_store_mem_power_ctrl_threshold_down +2ea3 58000100 setarg offset_power_ctrl_txpwr_level1 + +g24_iadd_offset_mem_txpower: +2ea4 9a60a200 iadd regc ,rega + +g24_ifetch_rega_store_mem_txpower: +2ea5 ea208000 ifetch 1 ,rega +2ea6 2020326a branch g24_store_mem_txpower + +g24_power_ctrl_decrs_level0: +2ea7 58000002 setarg power_ctrl_losspac_thresh_up0 +2ea8 204032b0 call g24_store_mem_power_ctrl_threshold_up +2ea9 58000000 setarg power_ctrl_losspac_thresh_down0 +2eaa 204032b2 call g24_store_mem_power_ctrl_threshold_down +2eab 58000101 setarg offset_power_ctrl_txpwr_level0 +2eac 20202ea4 branch g24_iadd_offset_mem_txpower + +g24_start_pairing_sm1: +2ead 79200026 set1 mark_24g ,mark +2eae 20402c83 call g24_pair_init + +g24_set_pairing_sm_1: +2eaf 58000001 setarg state_24g_pairing_1 +2eb0 20203256 branch g24_store_mem_pairing_sm + +g24_pairing_sm: +2eb1 1a60a28b add regc ,offset_24g_ensure ,rega +2eb2 ea208000 ifetch 1 ,rega +2eb3 c000ffe7 beq ensure_on_24g ,enable_user +2eb4 20403253 call g24_fetch_mem_pairing_sm +2eb5 c000aeb9 beq state_24g_pairing_1 ,g24_pairing_sm_1 +2eb6 c0012ebd beq state_24g_pairing_2 ,g24_pairing_sm_2 +2eb7 c001aec1 beq state_24g_pairing_3 ,g24_pairing_sm_3 +2eb8 20202a8c branch assert + +g24_pairing_sm_1: +2eb9 58000011 setarg state_24g_pairing_1_waiting_ack +2eba 20403256 call g24_store_mem_pairing_sm +2ebb 70119eaa jam 0xaa ,mem_24g_common_temp +2ebc 20202ec4 branch g24_pairing_sm_common + +g24_pairing_sm_2: +2ebd 58000012 setarg state_24g_pairing_2_waiting_ack +2ebe 20403256 call g24_store_mem_pairing_sm +2ebf 70119e55 jam 0x55 ,mem_24g_common_temp +2ec0 20202ec4 branch g24_pairing_sm_common + +g24_pairing_sm_3: +2ec1 58000013 setarg state_24g_pairing_3_waiting_ack +2ec2 20403256 call g24_store_mem_pairing_sm +2ec3 70119e22 jam 0x22 ,mem_24g_common_temp + +g24_pairing_sm_common: +2ec4 2040323a call g24_fetch_mem_data_type +2ec5 1fe17e07 and_into bits_data ,pdata +2ec6 6000919f store 1 ,mem_24g_common_temp + 1 +2ec7 20403224 call g24_fetch_mem_device_addr +2ec8 600211a0 store 4 ,mem_24g_common_temp + 2 + +g24_put_pairing_data_in_buff: +2ec9 7011a400 jam 0 ,mem_24g_common_temp + 6 +2eca da20119e arg mem_24g_common_temp ,rega +2ecb d8400007 arg 7 ,temp +2ecc 20402d4c call g24_put_data_in_buff +2ecd 20402d53 call g24_transmit_prep +2ece 20402d33 call g24_txdata_enable_tx +2ecf 20207fe7 branch enable_user + +g24_paring_mode: +2ed0 20403253 call g24_fetch_mem_pairing_sm +2ed1 c17f8000 rtneq state_24g_pairing_success +2ed2 c008aed6 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack +2ed3 c0092ed9 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack +2ed4 c009aedc beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack +2ed5 20600000 rtn + +g24_pairing_sm_1_waiting_ack: +2ed6 58000002 setarg state_24g_pairing_2 +2ed7 20403256 call g24_store_mem_pairing_sm +2ed8 20202d9f branch g24_transmit_abandon + +g24_pairing_sm_2_waiting_ack: +2ed9 58000003 setarg state_24g_pairing_3 +2eda 20403256 call g24_store_mem_pairing_sm +2edb 20202d9f branch g24_transmit_abandon + +g24_pairing_sm_3_waiting_ack: +2edc 580000ff setarg state_24g_pairing_success +2edd 20403256 call g24_store_mem_pairing_sm +2ede 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +2edf 20407d86 call ui_ipc_send_event +2ee0 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega +2ee1 ea220000 ifetch 4 ,rega +2ee2 2040322c call g24_store_mem_addr +2ee3 20202d9f branch g24_transmit_abandon + +g24_auto_pair_start: +2ee4 793f8026 set0 mark_24g ,mark +2ee5 20402f08 call g24_auto_pair_set_device_info +2ee6 20402f22 call g24_tx_attemp_data_prep + +g24_auto_pair_restart: +2ee7 20403263 call g24_set0_mem_check_dongle_times + +g24_auto_pair_start_loop: +2ee8 200007d0 nop 2000 +2ee9 20403261 call g24_fetch_mem_check_dongle_times +2eea c07fadd4 beq 0xff ,g24_stop_24g_mode +2eeb 20402da4 call g24_transmit_receive_ack +2eec 242c2efa nbranch g24_auto_pair_retry ,sync +2eed 2437aefa nbranch g24_auto_pair_retry ,user3 +2eee 20402dd6 call g24_ackpayload_parse +2eef 20402c7a call g24_head_ptr2regc +2ef0 1a60a292 add regc ,offset_24g_paring_addr ,rega +2ef1 ea2a0000 ifetcht 4 ,rega +2ef2 204030be call g24_fetch_mem_addr_isub_temp +2ef3 2022aead branch g24_start_pairing_sm1 ,zero +2ef4 20402c7a call g24_head_ptr2regc +2ef5 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega +2ef6 ea220000 ifetch 4 ,rega +2ef7 c0002ee7 beq 0 ,g24_auto_pair_restart +2ef8 2040322c call g24_store_mem_addr +2ef9 20202f1c branch g24_tx_attemp_dongle_succ + +g24_auto_pair_retry: +2efa 20403261 call g24_fetch_mem_check_dongle_times +2efb 1fe0fe01 increase 1 ,pdata +2efc 20403264 call g24_store_mem_check_dongle_times +2efd 20402f04 call g24_fetch_mem_auto_paring_switch +2efe 1fe0fe01 increase 1 ,pdata +2eff 1fe17e01 and_into 1 ,pdata +2f00 20402f06 call g24_store_mem_auto_paring_switch +2f01 c0002f0c beq 0 ,g24_auto_pair_device_attemp +2f02 c000af0e beq 1 ,g24_auto_pair_pair_attemp +2f03 20600000 rtn + +g24_fetch_mem_auto_paring_switch: +2f04 5800018b setarg offset_24g_auto_pair_switch +2f05 202032d0 branch g24_set_rega_ifetch_1byte + +g24_store_mem_auto_paring_switch: +2f06 da20018b arg offset_24g_auto_pair_switch ,rega +2f07 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_auto_pair_set_device_info: +2f08 20403267 call g24_store_mem_tx_power +2f09 20403224 call g24_fetch_mem_device_addr +2f0a 2040322c call g24_store_mem_addr +2f0b 20202c8a branch g24_ch + +g24_auto_pair_device_attemp: +2f0c 20402f08 call g24_auto_pair_set_device_info +2f0d 20202ee8 branch g24_auto_pair_start_loop + +g24_auto_pair_pair_attemp: +2f0e 20402c83 call g24_pair_init +2f0f 20202ee8 branch g24_auto_pair_start_loop + +g24_start_24g_mode: +2f10 793f8026 set0 mark_24g ,mark +2f11 20402c8a call g24_ch +2f12 20403253 call g24_fetch_mem_pairing_sm +2f13 c1ff8000 rtnne state_24g_pairing_success +2f14 20402f22 call g24_tx_attemp_data_prep +2f15 20403263 call g24_set0_mem_check_dongle_times + +g24_tx_attemp_dongle_loop: +2f16 200007d0 nop 2000 +2f17 20403261 call g24_fetch_mem_check_dongle_times +2f18 c07fadd4 beq 0xff ,g24_stop_24g_mode +2f19 20402da4 call g24_transmit_receive_ack +2f1a 242c2f27 nbranch g24_attemp_txdata_retry ,sync +2f1b 2437af27 nbranch g24_attemp_txdata_retry ,user3 + +g24_tx_attemp_dongle_succ: +2f1c 79200026 set1 mark_24g ,mark +2f1d 20403263 call g24_set0_mem_check_dongle_times +2f1e 580000ff setarg state_24g_pairing_success +2f1f 20403256 call g24_store_mem_pairing_sm +2f20 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp +2f21 20207d86 branch ui_ipc_send_event + +g24_tx_attemp_data_prep: +2f22 79200027 set1 mark_24g_conext ,mark +2f23 70119eff jam 0xff ,mem_24g_common_temp +2f24 2040323a call g24_fetch_mem_data_type +2f25 20402d77 call g24_put_data_in_buff_pre +2f26 20202d53 branch g24_transmit_prep + +g24_attemp_txdata_retry: +2f27 20403261 call g24_fetch_mem_check_dongle_times +2f28 1fe0fe01 increase 1 ,pdata +2f29 20403264 call g24_store_mem_check_dongle_times +2f2a 20402c8a call g24_ch +2f2b 20202f16 branch g24_tx_attemp_dongle_loop + +g24_check_51cmd_start_24g: +2f2c 20403267 call g24_store_mem_tx_power +2f2d 580000ff setarg state_24g_pairing_success +2f2e 20403256 call g24_store_mem_pairing_sm +2f2f 20202f10 branch g24_start_24g_mode + +dongle_init: +2f30 44dd4017 bpatch patch17_2 ,mem_patch17 +2f31 20402c7a call g24_head_ptr2regc +2f32 580031b0 setarg dongle_rxdata_type1 +2f33 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw +2f34 e0a10000 istore 2 ,contw +2f35 20402f3d call g24_receive_init +2f36 204048ea call usb_init +2f37 204032b6 call g24_fetch_mem_pair_mode +2f38 44ddc017 bpatch patch17_3 ,mem_patch17 +2f39 c0003055 beq 0x00 ,dongle_auto_bind +2f3a c000af45 beq 0x01 ,dongle_pc_bind +2f3b c007af41 beq 0x0f ,dongle_all_powerful +2f3c 20202a8c branch assert + +g24_receive_init: +2f3d 2040326c call g24_store_mem_tx_power_temp +2f3e df200080 arg 0x80 ,loopcnt +2f3f d8a00d9e arg mem_rssi_noise_buffer ,contw +2f40 20207ec6 branch memset0 + +dongle_all_powerful: +2f41 20402f4c call dongle_check_mode + +dongle_all_powerful_loop: +2f42 20402f4f call g24_dongle_work_mode +2f43 204048d3 call usb_isr +2f44 20202f42 branch dongle_all_powerful_loop + +dongle_pc_bind: +2f45 44de4017 bpatch patch17_4 ,mem_patch17 +2f46 20402f4c call dongle_check_mode + +dongle_pc_bind_loop: +2f47 20402f4f call g24_dongle_work_mode +2f48 20402fbd call g24_dongle_bind_mode +2f49 204048d3 call usb_isr +2f4a 20403019 call dongle_usb_dispatch +2f4b 20202f47 branch dongle_pc_bind_loop + +dongle_check_mode: +2f4c 20403291 call g24_set_work_mem_dongle_work_mode +2f4d 20403296 call g24_set0_mem_dongle_mode_init +2f4e 20203299 branch g24_set0_mem_ackpayload_enable + +g24_dongle_work_mode: +2f4f 2040328f call g24_fetch_mem_dongle_work_mode +2f50 c1800000 rtnne dongle_work + +g24_dongle_work_mode_start: +2f51 20402f55 call g24_dongle_work_init +2f52 20402f65 call g24_ch_process +2f53 2040316b call g24_receive_packet_start +2f54 20202f96 branch g24_blank_data_process + +g24_dongle_work_init: +2f55 20403294 call g24_fetch_mem_dongle_mode_init +2f56 c3800000 rtnbit1 dongle_work +2f57 79207e00 set1 dongle_work ,pdata +2f58 20403297 call g24_store_mem_dongle_mode_init +2f59 20403267 call g24_store_mem_tx_power +2f5a 20403299 call g24_set0_mem_ackpayload_enable +2f5b 700d3800 jam 0 ,mem_usb_tx_enable +2f5c 2040324f call g24_set1_mem_abort_pac +2f5d 20402f61 call g24_dongle_init + +g24_rx_interrupt_clear: +2f5e 1a608a00 add regc ,offset_24g_rxbuf ,contw +2f5f df200042 arg 66 ,loopcnt +2f60 20207ed4 branch clear_mem + +g24_dongle_init: +2f61 20403231 call g24_set0_mem_pid +2f62 2040327d call g24_fetch_mem_rx_addr +2f63 2040322c call g24_store_mem_addr +2f64 20202c8a branch g24_ch + +g24_ch_process: +2f65 44dec017 bpatch patch17_5 ,mem_patch17 +2f66 2040324c call g24_fetch_mem_abort_pac +2f67 c000af8d beq 1 ,g24_noise_rssi +2f68 20403245 call g24_fetch_mem_hop_pac +2f69 c000ac8a beq 1 ,g24_ch +2f6a 58000136 setarg offset_24g_hop_btclk +2f6b 9a60a200 iadd regc ,rega +2f6c ea2a0000 ifetcht 4 ,rega +2f6d 1c427e00 copy clkn_bt ,pdata +2f6e 98467c00 isub temp ,null +2f6f 24412d18 ncall g24_timer_timeout ,positive +2f70 1fe22400 copy pdata ,regb +2f71 58000136 setarg offset_24g_hop_btclk +2f72 9a60a200 iadd regc ,rega +2f73 ea220000 ifetch 4 ,rega +2f74 1fe20400 copy pdata ,temp +2f75 5800013a setarg offset_24g_hop_interval +2f76 9a60a200 iadd regc ,rega +2f77 18427e00 copy temp ,pdata +2f78 ea288000 ifetcht 1 ,rega +2f79 98408400 iadd temp ,temp +2f7a 1a427e00 copy regb ,pdata +2f7b 98467c00 isub temp ,null +2f7c 24610000 nrtn positive +2f7d 793ffe1c set0 28 ,pdata +2f7e 58000136 setarg offset_24g_hop_btclk +2f7f 9a608a00 iadd regc ,contw +2f80 e0a20000 istore 4 ,contw + +g24_ch_update: +2f81 20402c8a call g24_ch +2f82 20403278 call g24_fetch_mem_rf_laststa +2f83 1fe0fe01 increase 1 ,pdata +2f84 2040327b call g24_store_mem_rf_laststa +2f85 c1810000 rtnne 2 +2f86 2040327a call g24_set0_mem_rf_laststa +2f87 2020324f branch g24_set1_mem_abort_pac + +g24_ch_timer_reinit: +2f88 1c427e00 copy clkn_bt ,pdata +2f89 da200136 arg offset_24g_hop_btclk ,rega +2f8a 204032bf call g24_set_contw_with_temp +2f8b e0a20000 istore 4 ,contw +2f8c 2020327a branch g24_set0_mem_rf_laststa + +g24_noise_rssi: +2f8d da200d9e arg mem_rssi_noise_buffer ,rega +2f8e 20402f94 call g24_noise_rssi_average +2f8f 1a608aeb add regc ,offset_rssi_noise_avg ,contw +2f90 e0a88000 istoret 1 ,contw +2f91 18467c50 sub temp ,rssi_thresh_noise ,null +2f92 24610000 nrtn positive +2f93 20202c8a branch g24_ch + +g24_noise_rssi_average: +2f94 df200100 arg rssi_buf_len_noise + 1 ,loopcnt +2f95 20202e62 branch rssi_average + +g24_blank_data_process: +2f96 20402f99 call g24_ms_blank_data +2f97 20402fa5 call g24_kb_blank_data +2f98 20202fb1 branch g24_kb_mul_blank_data + +g24_ms_blank_data: +2f99 58000180 setarg offset_24g_ms_blank_data_enable +2f9a 204032d0 call g24_set_rega_ifetch_1byte +2f9b 207a0000 rtn blank +2f9c d8e0000b arg timer_ms_blank ,queue +2f9d 20407f16 call timer_check +2f9e 247a0000 nrtn blank +2f9f 204032a7 call g24_set0_mem_ms_blank_data_enable +2fa0 58000001 setarg ms_report_id +2fa1 60008d54 store 1 ,mem_usb_mouse_data +2fa2 58000000 setarg 0 +2fa3 e0a38000 istore 7 ,contw +2fa4 202031b8 branch g24_data_type1_usbtx_enable + +g24_kb_blank_data: +2fa5 5800017e setarg offset_24g_kb_blank_data_enable +2fa6 204032d0 call g24_set_rega_ifetch_1byte +2fa7 207a0000 rtn blank +2fa8 d8e0000e arg timer_kb_blank ,queue +2fa9 20407f16 call timer_check +2faa 247a0000 nrtn blank +2fab 204032aa call g24_set0_mem_kb_blank_data_enable +2fac d8a00d64 arg mem_usb_kb_data ,contw +2fad df200002 arg 2 ,loopcnt +2fae 20407ec6 call memset0 +2faf 700d6400 jam kb_normal_report_id ,mem_usb_kb_data +2fb0 202031ed branch g24_kb_data_into_ep1_fifo + +g24_kb_mul_blank_data: +2fb1 5800017f setarg offset_24g_kb_mul_blank_data_enable +2fb2 204032d0 call g24_set_rega_ifetch_1byte +2fb3 207a0000 rtn blank +2fb4 d8e0000c arg timer_kb_mul_blank ,queue +2fb5 20407f16 call timer_check +2fb6 247a0000 nrtn blank +2fb7 204032ad call g24_set0_mem_kb_mul_blank_data_enable +2fb8 d8a00d74 arg mem_usb_kb_multikey ,contw +2fb9 df200002 arg 2 ,loopcnt +2fba 20407ec6 call memset0 +2fbb 700d7403 jam kb_multikey_report_id ,mem_usb_kb_multikey +2fbc 20203207 branch g24_kb_mul_data_into_ep2_fifo + +g24_dongle_bind_mode: +2fbd 2040328f call g24_fetch_mem_dongle_work_mode +2fbe c1808000 rtnne dongle_bind +2fbf 20402fc1 call g24_dongle_bind_init +2fc0 20202fcb branch g24_dongle_bind_data_process + +g24_dongle_bind_init: +2fc1 20403294 call g24_fetch_mem_dongle_mode_init +2fc2 c3808000 rtnbit1 dongle_bind +2fc3 79207e01 set1 dongle_bind ,pdata +2fc4 20403297 call g24_store_mem_dongle_mode_init +2fc5 2040329c call g24_set1_mem_ackpayload_enable +2fc6 20402c83 call g24_pair_init +2fc7 58000000 setarg 0 +2fc8 da200106 arg offset_dongle_ms_bind_step ,rega +2fc9 204032bf call g24_set_contw_with_temp +2fca 202032c5 branch g24_contw_istore_3byte + +g24_dongle_bind_data_process: +2fcb 2040316e call g24_receive_transmit_ack +2fcc 2437af5e nbranch g24_rx_interrupt_clear ,user3 +2fcd 1a608c00 add regc ,offset_24g_rxbuf ,contr +2fce 58000109 setarg offset_24g_rxdata_temp +2fcf 9a608a00 iadd regc ,contw +2fd0 df200008 arg 8 ,loopcnt +2fd1 20407f01 call memcpy +2fd2 5800010b setarg offset_24g_rxdata_temp_add2 +2fd3 204032d0 call g24_set_rega_ifetch_1byte +2fd4 c0552fd9 beq datatype_bind ,g24_dongle_bind_first_step +2fd5 c02aafed beq datatype_config ,g24_dongle_bind_second_step +2fd6 c0113001 beq datatype_ok ,g24_dongle_bind_third_step +2fd7 c07fb212 beq 0xff ,g24_data_attemp +2fd8 20202f5e branch g24_rx_interrupt_clear + +g24_dongle_bind_first_step: +2fd9 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +2fda c000afdd beq bind_mouse ,g24_dongle_bind_first_step_mouse +2fdb c0012fe8 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard +2fdc 20600000 rtn + +g24_dongle_bind_first_step_mouse: +2fdd 58000001 setarg 1 +2fde 20402ff7 call g24_store_mem_ms_bind_step + +g24_dongle_bind_ms_payload_cfg: +2fdf 58000001 setarg datatype_mouse +2fe0 20403289 call g24_store_mem_bind_payload + +g24_dongle_bind_payload_cfg: +2fe1 58000080 setarg 0x80 +2fe2 da200130 arg offset_24g_bind_payload_add1 ,rega +2fe3 204032b3 call g24_set_contw_with_regb_store_1byte +2fe4 2040327d call g24_fetch_mem_rx_addr +2fe5 da200131 arg offset_24g_bind_payload_add2 ,rega +2fe6 204032bf call g24_set_contw_with_temp +2fe7 2020322d branch g24_contw_istore_4byte + +g24_dongle_bind_first_step_keyboard: +2fe8 58000001 setarg 1 +2fe9 20402fff call g24_store_mem_kb_bind_step + +g24_dongle_bind_kb_payload_cfg: +2fea 58000002 setarg datatype_keyboard +2feb 20403289 call g24_store_mem_bind_payload +2fec 20202fe1 branch g24_dongle_bind_payload_cfg + +g24_dongle_bind_second_step: +2fed 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +2fee c000aff1 beq bind_mouse ,g24_dongle_bind_second_step_mouse +2fef c0012ff9 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard +2ff0 20600000 rtn + +g24_dongle_bind_second_step_mouse: +2ff1 20402fdf call g24_dongle_bind_ms_payload_cfg +2ff2 58000106 setarg offset_dongle_ms_bind_step +2ff3 204032d0 call g24_set_rega_ifetch_1byte +2ff4 c000aff6 beq 1 ,g24_dongle_ms_bind_step_set2 +2ff5 20600000 rtn + +g24_dongle_ms_bind_step_set2: +2ff6 58000002 setarg 2 + +g24_store_mem_ms_bind_step: +2ff7 da200106 arg offset_dongle_ms_bind_step ,rega +2ff8 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_second_step_keyboard: +2ff9 20402fea call g24_dongle_bind_kb_payload_cfg +2ffa 58000107 setarg offset_dongle_kb_bind_step +2ffb 204032d0 call g24_set_rega_ifetch_1byte +2ffc c000affe beq 1 ,g24_dongle_kb_bind_step_set2 +2ffd 20600000 rtn + +g24_dongle_kb_bind_step_set2: +2ffe 58000002 setarg 2 + +g24_store_mem_kb_bind_step: +2fff da200107 arg offset_dongle_kb_bind_step ,rega +3000 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_third_step: +3001 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +3002 c000b005 beq bind_mouse ,g24_dongle_bind_third_step_mouse +3003 c0013011 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard +3004 20600000 rtn + +g24_dongle_bind_third_step_mouse: +3005 58000106 setarg offset_dongle_ms_bind_step +3006 204032d0 call g24_set_rega_ifetch_1byte +3007 c0013009 beq 2 ,g24_dongle_ms_bind_step_success +3008 20600000 rtn + +g24_dongle_ms_bind_step_success: +3009 2040328b call g24_fetch_mem_bind_device_status +300a 1fe1fe01 or_into 0x01 ,pdata +300b 2040328d call g24_store_mem_bind_device_status + +g24_dongle_bind_exit: +300c 58000000 setarg 0 +300d 58000106 setarg offset_dongle_ms_bind_step +300e 9a608a00 iadd regc ,contw +300f e0a10000 istore 2 ,contw +3010 20202f5e branch g24_rx_interrupt_clear + +g24_dongle_bind_third_step_keyboard: +3011 58000107 setarg offset_dongle_kb_bind_step +3012 204032d0 call g24_set_rega_ifetch_1byte +3013 c0803015 bne 0 ,g24_dongle_kb_bind_step_success +3014 20600000 rtn + +g24_dongle_kb_bind_step_success: +3015 2040328b call g24_fetch_mem_bind_device_status +3016 1fe1fe02 or_into 0x02 ,pdata +3017 2040328d call g24_store_mem_bind_device_status +3018 2020300c branch g24_dongle_bind_exit + +dongle_usb_dispatch: +3019 68008d50 fetch 1 ,mem_usb0_get_set_report +301a 207a0000 rtn blank +301b 700d5000 jam 0 ,mem_usb0_get_set_report +301c 68010d4e fetch 2 ,mem_usb_setup_bvalue_temp +301d d84002ba arg pc_set_report ,temp +301e 98467c00 isub temp ,null +301f 24628000 nrtn zero +3020 68008cb6 fetch 1 ,mem_usb0_set_report_data +3021 c1dd0000 rtnne pc_report_id +3022 68008cb7 fetch 1 ,mem_usb0_set_report_data + 1 +3023 44df4017 bpatch patch17_6 ,mem_patch17 +3024 c050303b beq command_mode ,dongle_dispose_cmd_mode +3025 c050b02c beq command_bind ,dongle_dispose_cmd_bind +3026 c0533041 beq command_current_project ,dongle_dispose_cmd_current_project +3027 c053b043 beq command_current_mode ,dongle_dispose_cmd_current_mode +3028 c054b049 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version +3029 c058304d beq command_user_defined ,dongle_dispose_cmd_user_defined + +usb0_data_ready_report_set0: +302a 700d4200 jam 0 ,mem_usb0_data_ready_report +302b 20600000 rtn + +dongle_dispose_cmd_bind: +302c 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 +302d c000b031 beq com_bind_get ,dongle_dispose_cmd_get_bind +302e c0423034 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +302f c053b039 beq com_read_mode ,dongle_dispose_cmd_read_mode +3030 2020302a branch usb0_data_ready_report_set0 + +dongle_dispose_cmd_get_bind: +3031 2040328b call g24_fetch_mem_bind_device_status +3032 60008cf7 store 1 ,mem_usb0_get_report_data + 1 +3033 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_exit_bind: +3034 20403291 call g24_set_work_mem_dongle_work_mode +3035 20403296 call g24_set0_mem_dongle_mode_init +3036 2040328b call g24_fetch_mem_bind_device_status +3037 60008cf7 store 1 ,mem_usb0_get_report_data + 1 +3038 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_read_mode: + +dongle_dispose_in_bind_mode: +3039 700cf7a1 jam command_bind ,mem_usb0_get_report_data + 1 +303a 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_mode: +303b 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 +303c c040b03e beq com_mode_bind ,dongle_enter_bind_mode +303d 2020302a branch usb0_data_ready_report_set0 + +dongle_enter_bind_mode: +303e 20403090 call g24_bind_mode_enable + +usb0_data_ready_report_set1: +303f 700d4201 jam 1 ,mem_usb0_data_ready_report +3040 20600000 rtn + +dongle_dispose_cmd_current_project: +3041 700cf715 jam product_id ,mem_usb0_get_report_data + 1 +3042 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_mode: +3043 2040328f call g24_fetch_mem_dongle_work_mode +3044 c0003047 beq dongle_work ,dongle_dispose_in_work_mode +3045 c000b039 beq dongle_bind ,dongle_dispose_in_bind_mode +3046 20600000 rtn + +dongle_dispose_in_work_mode: +3047 700cf7a0 jam command_mode ,mem_usb0_get_report_data + 1 +3048 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_fw_version: +3049 700cf700 jam fw_version0 ,mem_usb0_get_report_data + 1 +304a 700cf800 jam fw_version1 ,mem_usb0_get_report_data + 2 +304b 700cf901 jam fw_version2 ,mem_usb0_get_report_data + 3 +304c 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_user_defined: +304d 2040329c call g24_set1_mem_ackpayload_enable +304e 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 +304f 1fe0fe02 increase 2 ,pdata +3050 1fe27200 copy pdata ,loopcnt +3051 d8c00cb6 arg mem_usb0_set_report_data ,contr +3052 5800013c setarg offset_24g_ackpayload +3053 9a608a00 iadd regc ,contw +3054 20207f01 branch memcpy + +dongle_auto_bind: +3055 44dfc017 bpatch patch17_7 ,mem_patch17 +3056 2040307d call g24_mode_switch_init + +dongle_auto_bind_loop: +3057 20402c7f call g24_receive_process +3058 204048d3 call usb_isr +3059 20203057 branch dongle_auto_bind_loop + +g24_dongle_work_mode_auto: +305a 2040328f call g24_fetch_mem_dongle_work_mode +305b c1800000 rtnne dongle_work +305c 20402f51 call g24_dongle_work_mode_start +305d 20203098 branch g24_rx_nodata_process + +g24_dongle_bind_mode_auto: +305e 2040328f call g24_fetch_mem_dongle_work_mode +305f c1808000 rtnne dongle_bind +3060 20402fc1 call g24_dongle_bind_init +3061 20402fcb call g24_dongle_bind_data_process +3062 2040328b call g24_fetch_mem_bind_device_status +3063 207a0000 rtn blank +3064 20403286 call g24_set0_mem_mode_switch +3065 20402f4c call dongle_check_mode +3066 20403093 call g24_enable_nodata_timer + +g24_timer_init: +3067 58000000 setarg 0 +3068 1a608aa7 add regc ,offset_24g_tx_btclk ,contw +3069 2020322d branch g24_contw_istore_4byte + +g24_timer_check: +306a 20407fe9 call disable_user +306b 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega +306c ea2a0000 ifetcht 4 ,rega +306d 1c427e00 copy clkn_bt ,pdata +306e 98467c00 isub temp ,null +306f 24412d18 ncall g24_timer_timeout ,positive +3070 1fe22400 copy pdata ,regb +3071 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega +3072 ea220000 ifetch 4 ,rega +3073 1a60a2ab add regc ,offset_24g_interval ,rega +3074 ea288000 ifetcht 1 ,rega +3075 98408400 iadd temp ,temp +3076 1a427e00 copy regb ,pdata +3077 98467c00 isub temp ,null +3078 24610000 nrtn positive +3079 793ffe1c set0 28 ,pdata +307a 1a608aa7 add regc ,offset_24g_tx_btclk ,contw +307b e0a20000 istore 4 ,contw +307c 20207fe7 branch enable_user + +g24_mode_switch_init: +307d 58000001 setarg 1 +307e 20403287 call g24_store_mem_mode_switch +307f 20403283 call g24_set0_mem_time_slice +3080 580000ff setarg 0xff +3081 1a608aab add regc ,offset_24g_interval ,contw +3082 e0a08000 istore 1 ,contw +3083 20203067 branch g24_timer_init + +g24_mode_switch: +3084 5800015c setarg offset_24g_mode_switch +3085 204032d0 call g24_set_rega_ifetch_1byte +3086 207a0000 rtn blank +3087 2040306a call g24_timer_check +3088 24740000 nrtn user +3089 20403281 call g24_fetch_mem_time_slice +308a 1fe0fe01 increase 1 ,pdata +308b 1fe17e01 and_into 1 ,pdata +308c 20403284 call g24_store_mem_time_slice +308d c0002f4c beq 0 ,dongle_check_mode +308e c000b090 beq 1 ,g24_bind_mode_enable +308f 20600000 rtn + +g24_bind_mode_enable: +3090 58000001 setarg dongle_bind +3091 20403292 call g24_store_mem_dongle_work_mode +3092 20203296 branch g24_set0_mem_dongle_mode_init + +g24_enable_nodata_timer: +3093 58000001 setarg 1 +3094 204032a5 call g24_store_mem_nodata_timer_enable +3095 58000280 setarg timer_nodata_delay +3096 d8e00008 arg timer_nodata ,queue +3097 20207f08 branch timer_init + +g24_rx_nodata_process: +3098 204032a2 call g24_fetch_mem_nodata_timer_enable +3099 207a0000 rtn blank +309a d8e00008 arg timer_nodata ,queue +309b 20407f16 call timer_check +309c 247a0000 nrtn blank +309d 204032a4 call g24_set0_mem_nodata_timer_enable +309e 58000007 setarg dongle_search +309f 20403292 call g24_store_mem_dongle_work_mode +30a0 20403296 call g24_set0_mem_dongle_mode_init +30a1 20202f5e branch g24_rx_interrupt_clear + +g24_dongle_search_mode_auto: +30a2 44e04018 bpatch patch18_0 ,mem_patch18 +30a3 2040328f call g24_fetch_mem_dongle_work_mode +30a4 c1838000 rtnne dongle_search +30a5 204030cb call g24_dongle_search_mode_init +30a6 204030e0 call g24_rx_auto_addr_ch_search +30a7 2040316e call g24_receive_transmit_ack +30a8 2437af5e nbranch g24_rx_interrupt_clear ,user3 +30a9 204030bc call g24_dongle_search_addr_check +30aa 2042b172 call g24_receive_packet_parse ,zero +30ab 20402f4c call dongle_check_mode +30ac 20403294 call g24_fetch_mem_dongle_mode_init +30ad 79207e00 set1 dongle_work ,pdata +30ae 20403297 call g24_store_mem_dongle_mode_init +30af 20402f5e call g24_rx_interrupt_clear +30b0 20403093 call g24_enable_nodata_timer +30b1 204030bc call g24_dongle_search_addr_check +30b2 2022b0c1 branch g24_dg_ch_num_reinit ,zero +30b3 58000164 setarg offset_24g_kb_addr +30b4 204032d3 call g24_set_rega_ifetcht_4byte +30b5 204030be call g24_fetch_mem_addr_isub_temp +30b6 2022b0c5 branch g24_kb_ch_num_reinit ,zero +30b7 58000160 setarg offset_24g_mouse_addr +30b8 204032d3 call g24_set_rega_ifetcht_4byte +30b9 204030be call g24_fetch_mem_addr_isub_temp +30ba 2022b0c8 branch g24_ms_ch_num_reinit ,zero +30bb 20600000 rtn + +g24_dongle_search_addr_check: +30bc 5800012b setarg offset_24g_rx_addr +30bd 204032d3 call g24_set_rega_ifetcht_4byte + +g24_fetch_mem_addr_isub_temp: +30be 2040322a call g24_fetch_mem_addr +30bf 98467c00 isub temp ,null +30c0 20600000 rtn + +g24_dg_ch_num_reinit: +30c1 58000182 setarg offset_24g_dg_ch_number +30c2 204032d0 call g24_set_rega_ifetch_1byte + +g24_current_ch_num_reinit: +30c3 1a608a91 add regc ,offset_24g_current_ch_number ,contw +30c4 202032b4 branch g24_contw_istore_1byte + +g24_kb_ch_num_reinit: +30c5 58000185 setarg offset_24g_kb_ch_number +30c6 204032d0 call g24_set_rega_ifetch_1byte +30c7 202030c3 branch g24_current_ch_num_reinit + +g24_ms_ch_num_reinit: +30c8 58000188 setarg offset_24g_ms_ch_number +30c9 204032d0 call g24_set_rega_ifetch_1byte +30ca 202030c3 branch g24_current_ch_num_reinit + +g24_dongle_search_mode_init: +30cb 20403294 call g24_fetch_mem_dongle_mode_init +30cc c3838000 rtnbit1 dongle_search +30cd 79207e07 set1 dongle_search ,pdata +30ce 20403297 call g24_store_mem_dongle_mode_init +30cf 20403283 call g24_set0_mem_time_slice +30d0 2040329c call g24_set1_mem_ackpayload_enable +30d1 58000000 setarg 0 +30d2 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw +30d3 e0a18000 istore 3 ,contw +30d4 da200183 arg offset_24g_dg_config_ch_once ,rega +30d5 204032bf call g24_set_contw_with_temp +30d6 e0a38000 istore 7 ,contw +30d7 204030bc call g24_dongle_search_addr_check +30d8 24628000 nrtn zero +30d9 1a60a291 add regc ,offset_24g_current_ch_number ,rega +30da ea208000 ifetch 1 ,rega +30db da200182 arg offset_24g_dg_ch_number ,rega +30dc 204032b3 call g24_set_contw_with_regb_store_1byte +30dd 1a60a290 add regc ,offset_24g_ch ,rega +30de ea208000 ifetch 1 ,rega +30df 2020314a branch g24_store_mem_dg_last_ch + +g24_rx_auto_addr_ch_search: +30e0 44e0c018 bpatch patch18_1 ,mem_patch18 +30e1 20403281 call g24_fetch_mem_time_slice +30e2 1fe0fe01 increase 1 ,pdata +30e3 1fe17e03 and_into 3 ,pdata +30e4 20403284 call g24_store_mem_time_slice +30e5 c000310e beq 0 ,g24_rx_auto_bind_config_kb +30e6 c000b132 beq 1 ,g24_rx_auto_bind_config_dongle +30e7 c00130ea beq 2 ,g24_rx_auto_bind_config_mouse +30e8 c001b132 beq 3 ,g24_rx_auto_bind_config_dongle +30e9 20600000 rtn + +g24_rx_auto_bind_config_mouse: +30ea 20402fdf call g24_dongle_bind_ms_payload_cfg +30eb 58000160 setarg offset_24g_mouse_addr +30ec 2040327e call g24_set_rega_ifetch_4byte +30ed 203a30e0 branch g24_rx_auto_addr_ch_search ,blank +30ee 2040322c call g24_store_mem_addr +30ef 58000189 setarg offset_24g_ms_config_ch_once +30f0 204032d0 call g24_set_rega_ifetch_1byte +30f1 205a3108 call g24_ms_config_ch_once ,blank +30f2 58000187 setarg offset_24g_ms_last_ch +30f3 204032d0 call g24_set_rega_ifetch_1byte +30f4 2040322f call g24_store_mem_ch +30f5 1a60a2f7 add regc ,offset_rssi_noise_ms_index ,rega +30f6 ea288000 ifetcht 1 ,rega +30f7 da200f9e arg mem_rssi_noise_ms_buffer ,rega +30f8 20402e58 call rssi_noise_store +30f9 1a608af7 add regc ,offset_rssi_noise_ms_index ,contw +30fa e0a88000 istoret 1 ,contw +30fb 20402f94 call g24_noise_rssi_average +30fc 1a608afa add regc ,offset_rssi_noise_ms_avg ,contw +30fd e0a88000 istoret 1 ,contw +30fe 18467c50 sub temp ,rssi_thresh_noise ,null +30ff 24610000 nrtn positive +3100 58000188 setarg offset_24g_ms_ch_number +3101 20403275 call g24_set_rega_ifetcht_1byte +3102 20402c90 call g24_ch_temp_incre_size4 +3103 da200188 arg offset_24g_ms_ch_number ,rega +3104 204032c8 call g24_set_contw_with_regb2 +3105 e0a88000 istoret 1 ,contw + +g24_store_mem_ms_last_ch: +3106 da200187 arg offset_24g_ms_last_ch ,rega +3107 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_ms_config_ch_once: +3108 58000001 setarg 1 +3109 da200189 arg offset_24g_ms_config_ch_once ,rega +310a 204032b3 call g24_set_contw_with_regb_store_1byte +310b d8400000 arg 0 ,temp +310c 20402c94 call g24_ch_calc +310d 20203106 branch g24_store_mem_ms_last_ch + +g24_rx_auto_bind_config_kb: +310e 20402fea call g24_dongle_bind_kb_payload_cfg +310f 58000164 setarg offset_24g_kb_addr +3110 2040327e call g24_set_rega_ifetch_4byte +3111 203a30e0 branch g24_rx_auto_addr_ch_search ,blank +3112 2040322c call g24_store_mem_addr +3113 58000186 setarg offset_24g_kb_config_ch_once +3114 204032d0 call g24_set_rega_ifetch_1byte +3115 205a312c call g24_kb_config_ch_once ,blank +3116 58000184 setarg offset_24g_kb_last_ch +3117 204032d0 call g24_set_rega_ifetch_1byte +3118 2040322f call g24_store_mem_ch +3119 1a60a2f6 add regc ,offset_rssi_noise_kb_index ,rega +311a ea288000 ifetcht 1 ,rega +311b da20109e arg mem_rssi_noise_kb_buffer ,rega +311c 20402e58 call rssi_noise_store +311d 1a608af6 add regc ,offset_rssi_noise_kb_index ,contw +311e e0a88000 istoret 1 ,contw +311f 20402f94 call g24_noise_rssi_average +3120 1a608af9 add regc ,offset_rssi_noise_kb_avg ,contw +3121 e0a88000 istoret 1 ,contw +3122 18467c50 sub temp ,rssi_thresh_noise ,null +3123 24610000 nrtn positive +3124 58000185 setarg offset_24g_kb_ch_number +3125 20403275 call g24_set_rega_ifetcht_1byte +3126 20402c90 call g24_ch_temp_incre_size4 +3127 da200185 arg offset_24g_kb_ch_number ,rega +3128 204032c8 call g24_set_contw_with_regb2 +3129 e0a88000 istoret 1 ,contw + +g24_store_mem_kb_last_ch: +312a da200184 arg offset_24g_kb_last_ch ,rega +312b 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_kb_config_ch_once: +312c 58000001 setarg 1 +312d da200186 arg offset_24g_kb_config_ch_once ,rega +312e 204032b3 call g24_set_contw_with_regb_store_1byte +312f d8400000 arg 0 ,temp +3130 20402c94 call g24_ch_calc +3131 2020312a branch g24_store_mem_kb_last_ch + +g24_rx_auto_bind_config_dongle: +3132 20402fdf call g24_dongle_bind_ms_payload_cfg +3133 2040327d call g24_fetch_mem_rx_addr +3134 2040322c call g24_store_mem_addr +3135 58000183 setarg offset_24g_dg_config_ch_once +3136 204032d0 call g24_set_rega_ifetch_1byte +3137 205a314c call g24_dg_config_ch_once ,blank +3138 2040314f call g24_dg_store_config_ch +3139 1a60a2f5 add regc ,offset_rssi_noise_dg_index ,rega +313a ea288000 ifetcht 1 ,rega +313b da200e9e arg mem_rssi_noise_dg_buffer ,rega +313c 20402e58 call rssi_noise_store +313d 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw +313e e0a88000 istoret 1 ,contw +313f 20402f94 call g24_noise_rssi_average +3140 1a608af8 add regc ,offset_rssi_noise_dg_avg ,contw +3141 e0a88000 istoret 1 ,contw +3142 18467c50 sub temp ,rssi_thresh_noise ,null +3143 24610000 nrtn positive +3144 58000182 setarg offset_24g_dg_ch_number +3145 20403275 call g24_set_rega_ifetcht_1byte +3146 20402c90 call g24_ch_temp_incre_size4 +3147 da200182 arg offset_24g_dg_ch_number ,rega +3148 204032c8 call g24_set_contw_with_regb2 +3149 e0a88000 istoret 1 ,contw + +g24_store_mem_dg_last_ch: +314a da200181 arg offset_24g_dg_last_ch ,rega +314b 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_dg_config_ch_once: +314c 58000001 setarg 1 +314d da200183 arg offset_24g_dg_config_ch_once ,rega +314e 204032b3 call g24_set_contw_with_regb_store_1byte + +g24_dg_store_config_ch: +314f 58000181 setarg offset_24g_dg_last_ch +3150 204032d0 call g24_set_rega_ifetch_1byte +3151 2020322f branch g24_store_mem_ch + +g24_transmit_ack: +3152 1a60a200 add regc ,offset_24g_rxbuf ,rega +3153 ea208000 ifetch 1 ,rega +3154 2040323c call g24_store_mem_data_type +3155 20402dde call g24_read_len_pid_crc +3156 2040325f call g24_fetch_mem_rxbuf_add1 +3157 2feffe00 isolate1 bit_ack_24g ,pdata +3158 2020b15c branch g24tx_no_ack ,true + +g24tx_with_ack: +3159 2040315d call g24_ackpayload_prep +315a 20402d53 call g24_transmit_prep +315b 20402df7 call g24_transmit + +g24tx_no_ack: +315c 20202e45 branch g24_end_of_packet + +g24_ackpayload_prep: +315d 44e14018 bpatch patch18_2 ,mem_patch18 +315e 1a608a86 add regc ,offset_24g_datalen ,contw +315f 204032d6 call g24_mem_set0 +3160 5800013b setarg offset_24g_ackpayload_enable +3161 204032d0 call g24_set_rega_ifetch_1byte +3162 207a0000 rtn blank +3163 58000006 setarg 0x06 +3164 1a608a86 add regc ,offset_24g_datalen ,contw +3165 e0a08000 istore 1 ,contw +3166 df200006 arg 0x06 ,loopcnt +3167 5800012f setarg offset_24g_bind_payload +3168 9a608c00 iadd regc ,contr +3169 1a608a22 add regc ,offset_24g_txbuf ,contw +316a 20207f01 branch memcpy + +g24_receive_packet_start: +316b 2040316e call g24_receive_transmit_ack +316c 2437af5e nbranch g24_rx_interrupt_clear ,user3 +316d 20203172 branch g24_receive_packet_parse + +g24_receive_transmit_ack: +316e 20402f5e call g24_rx_interrupt_clear +316f 20402e11 call g24_receive_packet +3170 24778000 nrtn user3 +3171 20203152 branch g24_transmit_ack + +g24_receive_packet_parse: +3172 44e1c018 bpatch patch18_3 ,mem_patch18 +3173 20403188 call g24_receive_packet_parse_pid_crc +3174 24342f5e nbranch g24_rx_interrupt_clear ,user +3175 1a60a284 add regc ,offset_24g_rxdata_length ,rega +3176 ea208000 ifetch 1 ,rega +3177 203a2f5e branch g24_rx_interrupt_clear ,blank +3178 1fe0fe02 increase 2 ,pdata +3179 98007200 iforce loopcnt +317a 1a608c00 add regc ,offset_24g_rxbuf ,contr +317b 58000109 setarg offset_24g_rxdata_temp +317c 9a608a00 iadd regc ,contw +317d 20407f01 call memcpy +317e 20403286 call g24_set0_mem_mode_switch +317f 204032b6 call g24_fetch_mem_pair_mode +3180 205a3093 call g24_enable_nodata_timer ,blank +3181 5800010b setarg offset_24g_rxdata_temp_add2 +3182 204032d0 call g24_set_rega_ifetch_1byte +3183 c000b19e beq 0x01 ,g24_data_type1 +3184 c00131c6 beq 0x02 ,g24_data_type2 +3185 c001b1f2 beq 0x03 ,g24_data_type3 +3186 c07fb212 beq 0xff ,g24_data_attemp +3187 20202f5e branch g24_rx_interrupt_clear + +g24_receive_packet_parse_pid_crc: +3188 20402c7a call g24_head_ptr2regc +3189 20407fe9 call disable_user +318a 1a60a2ca add regc ,offset_24g_sta_pid ,rega +318b ea208000 ifetch 1 ,rega +318c 1a60a2cb add regc ,offset_24g_last_pid ,rega +318d ea288000 ifetcht 1 ,rega +318e 98467c00 isub temp ,null +318f 2442ffe7 ncall enable_user ,zero +3190 1a60a2ca add regc ,offset_24g_sta_pid ,rega +3191 ea208000 ifetch 1 ,rega +3192 1a608acb add regc ,offset_24g_last_pid ,contw +3193 e0a08000 istore 1 ,contw +3194 1a60a2c4 add regc ,offset_24g_sta_crc ,rega +3195 ea218000 ifetch 3 ,rega +3196 1a60a2c7 add regc ,offset_24g_last_crc ,rega +3197 ea298000 ifetcht 3 ,rega +3198 98467c00 isub temp ,null +3199 2442ffe7 ncall enable_user ,zero +319a 1a60a2c4 add regc ,offset_24g_sta_crc ,rega +319b ea218000 ifetch 3 ,rega +319c 1a608ac7 add regc ,offset_24g_last_crc ,contw +319d 202032c5 branch g24_contw_istore_3byte + +g24_data_type1: +319e 20402f88 call g24_ch_timer_reinit +319f 2040324c call g24_fetch_mem_abort_pac +31a0 60008aa2 store 1 ,mem_temp +31a1 20403274 call g24_fetcht_mem_rxdata_temp +31a2 68008aa2 fetch 1 ,mem_temp +31a3 284ffe03 isolate1 bit_abort ,temp +31a4 7920fe00 setflag true ,0 ,pdata +31a5 1a608ab2 add regc ,offset_24g_abort_pac ,contw +31a6 e0a08000 istore 1 ,contw +31a7 c000b216 beq 1 ,g24_data_attemp_mouse +31a8 20403245 call g24_fetch_mem_hop_pac +31a9 20403274 call g24_fetcht_mem_rxdata_temp +31aa 284ffe04 isolate1 bit_hop ,temp +31ab 7920fe00 setflag true ,0 ,pdata +31ac 20403249 call g24_store_mem_hop_pac +31ad 1a60a2de add regc ,offset_24g_cb_rxdata_type1 ,rega +31ae ea210000 ifetch 2 ,rega +31af 20207f9c branch callback_func + +dongle_rxdata_type1: +31b0 58000001 setarg ms_report_id +31b1 60008d54 store 1 ,mem_usb_mouse_data +31b2 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte +31b3 e0a38000 istore 7 ,contw +31b4 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte +31b5 245a31bd ncall g24_ms_enable_blank_data_forcibly ,blank +31b6 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte +31b7 205a31c2 call g24_ms_disable_blank_data_forcibly ,blank + +g24_data_type1_usbtx_enable: +31b8 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data + +g24_data_type1_usbtx_enable_ep2: +31b9 68008d38 fetch 1 ,mem_usb_tx_enable +31ba 79207e02 set1 2 ,pdata +31bb 60008d38 store 1 ,mem_usb_tx_enable +31bc 20600000 rtn + +g24_ms_enable_blank_data_forcibly: +31bd 58000001 setarg 1 +31be 204032a8 call g24_store_mem_ms_blank_data_enable +31bf 58000140 setarg timer_ms_blank_delay +31c0 d8e0000b arg timer_ms_blank ,queue +31c1 20207f08 branch timer_init + +g24_ms_disable_blank_data_forcibly: +31c2 204032a7 call g24_set0_mem_ms_blank_data_enable +31c3 58000000 setarg 0 +31c4 d8e0000b arg timer_ms_blank ,queue +31c5 20207f08 branch timer_init + +g24_data_type2: +31c6 20403274 call g24_fetcht_mem_rxdata_temp +31c7 284ffe03 isolate1 bit_abort ,temp +31c8 2020b21b branch g24_data_attemp_kbd ,true +31c9 d8a00d64 arg mem_usb_kb_data ,contw +31ca 204031e0 call g24_data_type2_reverse_data +31cb 68040d64 fetch 8 ,mem_usb_kb_data +31cc 245a31e4 ncall g24_kb_enable_blank_data_forcibly ,blank +31cd 68040d64 fetch 8 ,mem_usb_kb_data +31ce 205a31e9 call g24_kb_disable_blank_data_forcibly ,blank +31cf 20402c7a call g24_head_ptr2regc +31d0 68040d64 fetch 8 ,mem_usb_kb_data +31d1 da200168 arg offset_24g_kb_data_sta_data ,rega +31d2 204032bf call g24_set_contw_with_temp +31d3 e0a40000 istore 8 ,contw +31d4 58000170 setarg offset_24g_kb_data_last_data +31d5 9a60a200 iadd regc ,rega +31d6 ea2c0000 ifetcht 8 ,rega +31d7 98467c00 isub temp ,null +31d8 2442b1ed ncall g24_kb_data_dispose ,zero +31d9 58000168 setarg offset_24g_kb_data_sta_data +31da 9a60a200 iadd regc ,rega +31db ea240000 ifetch 8 ,rega +31dc da200170 arg offset_24g_kb_data_last_data ,rega +31dd 204032bf call g24_set_contw_with_temp +31de e0a40000 istore 8 ,contw +31df 20202f5e branch g24_rx_interrupt_clear + +g24_data_type2_reverse_data: +31e0 5800010b setarg offset_24g_rxdata_temp_add2 +31e1 9a608c00 iadd regc ,contr +31e2 df200009 arg 9 ,loopcnt +31e3 20207ff3 branch reverse_byte + +g24_kb_enable_blank_data_forcibly: +31e4 58000001 setarg 1 +31e5 204032ab call g24_store_mem_kb_blank_data_enable +31e6 58000140 setarg timer_kb_blank_delay +31e7 d8e0000e arg timer_kb_blank ,queue +31e8 20207f08 branch timer_init + +g24_kb_disable_blank_data_forcibly: +31e9 204032aa call g24_set0_mem_kb_blank_data_enable +31ea 58000000 setarg 0 +31eb d8e0000e arg timer_kb_blank ,queue +31ec 20207f08 branch timer_init + +g24_kb_data_dispose: + +g24_kb_data_into_ep1_fifo: +31ed 700d5110 jam usb_ep1_kb ,mem_usb_ep1_data +31ee 68008d38 fetch 1 ,mem_usb_tx_enable +31ef 79207e01 set1 1 ,pdata +31f0 60008d38 store 1 ,mem_usb_tx_enable +31f1 20600000 rtn + +g24_data_type3: +31f2 d8a00d74 arg mem_usb_kb_multikey ,contw +31f3 204031e0 call g24_data_type2_reverse_data +31f4 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 +31f5 245a3209 ncall g24_kb_mul_enable_blank_data_forcibly ,blank +31f6 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 +31f7 205a320e call g24_kb_mul_disable_blank_data_forcibly ,blank +31f8 20402c7a call g24_head_ptr2regc +31f9 68018d74 fetch 3 ,mem_usb_kb_multikey +31fa da200178 arg offset_24g_kb_multikey_sta_data ,rega +31fb 204032c4 call g24_set_contw_with_temp_store_3byte +31fc 5800017b setarg offset_24g_kb_multikey_last_data +31fd 9a60a200 iadd regc ,rega +31fe ea298000 ifetcht 3 ,rega +31ff 98467c00 isub temp ,null +3200 2442b207 ncall g24_kb_mul_data_into_ep2_fifo ,zero +3201 58000178 setarg offset_24g_kb_multikey_sta_data +3202 9a60a200 iadd regc ,rega +3203 ea218000 ifetch 3 ,rega +3204 da20017b arg offset_24g_kb_multikey_last_data ,rega +3205 204032c4 call g24_set_contw_with_temp_store_3byte +3206 20202f5e branch g24_rx_interrupt_clear + +g24_kb_mul_data_into_ep2_fifo: +3207 700d5221 jam usb_ep2_multikey ,mem_usb_ep2_data +3208 202031b9 branch g24_data_type1_usbtx_enable_ep2 + +g24_kb_mul_enable_blank_data_forcibly: +3209 58000001 setarg 1 +320a 204032ae call g24_store_mem_kb_mul_blank_data_enable +320b 58000140 setarg timer_kb_mul_blank_delay +320c d8e0000c arg timer_kb_mul_blank ,queue +320d 20207f08 branch timer_init + +g24_kb_mul_disable_blank_data_forcibly: +320e 204032ad call g24_set0_mem_kb_mul_blank_data_enable +320f 58000000 setarg 0 +3210 d8e0000c arg timer_kb_mul_blank ,queue +3211 20207f08 branch timer_init + +g24_data_attemp: +3212 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +3213 c000b216 beq datatype_mouse ,g24_data_attemp_mouse +3214 c001321b beq datatype_keyboard ,g24_data_attemp_kbd +3215 20600000 rtn + +g24_data_attemp_mouse: +3216 5800010d setarg offset_24g_rxdata_temp_add4 +3217 2040327e call g24_set_rega_ifetch_4byte +3218 da200160 arg offset_24g_mouse_addr ,rega +3219 204032bf call g24_set_contw_with_temp +321a 2020322d branch g24_contw_istore_4byte + +g24_data_attemp_kbd: +321b 5800010d setarg offset_24g_rxdata_temp_add4 +321c 2040327e call g24_set_rega_ifetch_4byte +321d da200164 arg offset_24g_kb_addr ,rega +321e 204032bf call g24_set_contw_with_temp +321f 2020322d branch g24_contw_istore_4byte + +g24_store_mem_24g_mode: +3220 20402c7a call g24_head_ptr2regc +3221 1a608acd add regc ,offset_24g_mode ,contw +3222 e0a08000 istore 1 ,contw +3223 20600000 rtn + +g24_fetch_mem_device_addr: +3224 20402c7a call g24_head_ptr2regc +3225 1a60a2be add regc ,offset_24g_device_addr ,rega +3226 2020327f branch g24_rega_ifetch_4byte + +g24_store_mem_device_addr: +3227 20402c7a call g24_head_ptr2regc +3228 1a608abe add regc ,offset_24g_device_addr ,contw +3229 2020322d branch g24_contw_istore_4byte + +g24_fetch_mem_addr: +322a 1a60a2ae add regc ,offset_24g_addr ,rega +322b 2020327f branch g24_rega_ifetch_4byte + +g24_store_mem_addr: +322c 1a608aae add regc ,offset_24g_addr ,contw + +g24_contw_istore_4byte: +322d e0a20000 istore 4 ,contw +322e 20600000 rtn + +g24_store_mem_ch: +322f 1a608a90 add regc ,offset_24g_ch ,contw +3230 202032b4 branch g24_contw_istore_1byte + +g24_set0_mem_pid: +3231 58000000 setarg 0 + +g24_store_mem_pid: +3232 20402c7a call g24_head_ptr2regc +3233 1a608a85 add regc ,offset_24g_pid ,contw +3234 202032b4 branch g24_contw_istore_1byte + +g24_store_mem_txpayload: +3235 1a608a42 add regc ,offset_24g_txpayload ,contw +3236 202032b4 branch g24_contw_istore_1byte + +g24_set4_mem_max_retry: +3237 58000004 setarg 4 + +g24_store_mem_max_retry: +3238 1a608acc add regc ,offset_24g_max_retry ,contw +3239 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_data_type: +323a 1a60a287 add regc ,offset_24g_data_type ,rega +323b 202032d1 branch g24_rega_ifetch_1byte + +g24_store_mem_data_type: +323c 1a608a87 add regc ,offset_24g_data_type ,contw +323d 202032b4 branch g24_contw_istore_1byte + +g24_set2_mem_sync_cnt: +323e 58000002 setarg 2 + +g24_store_mem_sync_cnt: +323f 1a608ad0 add regc ,offset_24g_sync_cnt ,contw +3240 202032b4 branch g24_contw_istore_1byte + +g24_set1_mem_rf_last_sta: +3241 58000001 setarg 1 + +g24_store_mem_rf_last_sta: +3242 20402c7a call g24_head_ptr2regc +3243 1a608ace add regc ,offset_24g_rf_last_sta ,contw +3244 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_hop_pac: +3245 20402c7a call g24_head_ptr2regc +3246 1a60a2b4 add regc ,offset_24g_hop_pac ,rega +3247 202032d1 branch g24_rega_ifetch_1byte + +g24_set1_mem_hop_pac: +3248 58000001 setarg 1 + +g24_store_mem_hop_pac: +3249 20402c7a call g24_head_ptr2regc +324a 1a608ab4 add regc ,offset_24g_hop_pac ,contw +324b 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_abort_pac: +324c 20402c7a call g24_head_ptr2regc +324d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega +324e 202032d1 branch g24_rega_ifetch_1byte + +g24_set1_mem_abort_pac: +324f 58000001 setarg 1 + +g24_store_mem_abort_pac: +3250 20402c7a call g24_head_ptr2regc +3251 1a608ab2 add regc ,offset_24g_abort_pac ,contw +3252 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_pairing_sm: +3253 20402c7a call g24_head_ptr2regc +3254 1a60a296 add regc ,offset_24g_pairing_sm ,rega +3255 202032d1 branch g24_rega_ifetch_1byte + +g24_store_mem_pairing_sm: +3256 1a608a96 add regc ,offset_24g_pairing_sm ,contw +3257 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_rf_hop_ch: +3258 1a60a2cf add regc ,offset_24g_rf_hop_ch ,rega +3259 202032d1 branch g24_rega_ifetch_1byte + +g24_set0_mem_rf_hop_ch: +325a 58000000 setarg 0 + +g24_store_mem_rf_hop_ch: +325b 1a608acf add regc ,offset_24g_rf_hop_ch ,contw +325c 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_rf_work_stage: +325d 1a60a2d2 add regc ,offset_24g_rf_work_stage ,rega +325e 202032d1 branch g24_rega_ifetch_1byte + +g24_fetch_mem_rxbuf_add1: +325f 1a60a201 add regc ,offset_24g_rxbuf_add1 ,rega +3260 202032d1 branch g24_rega_ifetch_1byte + +g24_fetch_mem_check_dongle_times: +3261 1a60a2b5 add regc ,offset_24g_check_dongle_times ,rega +3262 202032d1 branch g24_rega_ifetch_1byte + +g24_set0_mem_check_dongle_times: +3263 58000000 setarg 0 + +g24_store_mem_check_dongle_times: +3264 20402c7a call g24_head_ptr2regc +3265 1a608ab5 add regc ,offset_24g_check_dongle_times ,contw +3266 202032b4 branch g24_contw_istore_1byte + +g24_store_mem_tx_power: +3267 20402c7a call g24_head_ptr2regc +3268 1a60a2fb add regc ,offset_tx_power_temp ,rega +3269 ea208000 ifetch 1 ,rega + +g24_store_mem_txpower: +326a 6000c1de store 1 ,mem_tx_power +326b 20600000 rtn + +g24_store_mem_tx_power_temp: +326c 20402c7a call g24_head_ptr2regc +326d 6800c1de fetch 1 ,mem_tx_power +326e 1a608afb add regc ,offset_tx_power_temp ,contw +326f 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_power_ctrl_pac: +3270 1a60a2fc add regc ,offset_power_ctrl_packet_cnt ,rega +3271 202032d1 branch g24_rega_ifetch_1byte + +g24_store_mem_power_ctrl_level: +3272 1a608afe add regc ,offset_power_ctrl_level ,contw +3273 202032b4 branch g24_contw_istore_1byte + +g24_fetcht_mem_rxdata_temp: +3274 58000109 setarg offset_24g_rxdata_temp + +g24_set_rega_ifetcht_1byte: +3275 9a60a200 iadd regc ,rega +3276 ea288000 ifetcht 1 ,rega +3277 20600000 rtn + +g24_fetch_mem_rf_laststa: +3278 58000135 setarg offset_24g_rf_laststa +3279 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_rf_laststa: +327a 58000000 setarg 0 + +g24_store_mem_rf_laststa: +327b da200135 arg offset_24g_rf_laststa ,rega +327c 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_rx_addr: +327d 5800012b setarg offset_24g_rx_addr + +g24_set_rega_ifetch_4byte: +327e 204032cd call g24_set_rega + +g24_rega_ifetch_4byte: +327f ea220000 ifetch 4 ,rega +3280 20600000 rtn + +g24_fetch_mem_time_slice: +3281 5800015f setarg offset_24g_time_slice +3282 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_time_slice: +3283 58000000 setarg 0 + +g24_store_mem_time_slice: +3284 da20015f arg offset_24g_time_slice ,rega +3285 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_mode_switch: +3286 58000000 setarg 0 + +g24_store_mem_mode_switch: +3287 da20015c arg offset_24g_mode_switch ,rega +3288 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_bind_payload: +3289 da20012f arg offset_24g_bind_payload ,rega +328a 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_bind_device_status: +328b 58000108 setarg offset_dongle_bind_device_status +328c 202032d0 branch g24_set_rega_ifetch_1byte + +g24_store_mem_bind_device_status: +328d da200108 arg offset_dongle_bind_device_status ,rega +328e 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_work_mode: +328f 58000105 setarg offset_dongle_work_mode +3290 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set_work_mem_dongle_work_mode: +3291 58000000 setarg dongle_work + +g24_store_mem_dongle_work_mode: +3292 da200105 arg offset_dongle_work_mode ,rega +3293 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_mode_init: +3294 58000104 setarg offset_dongle_mode_init +3295 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_dongle_mode_init: +3296 58000000 setarg clear_init + +g24_store_mem_dongle_mode_init: +3297 da200104 arg offset_dongle_mode_init ,rega +3298 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ackpayload_enable: +3299 58000000 setarg 0 + +g24_store_mem_ackpayload_enable: +329a da20013b arg offset_24g_ackpayload_enable ,rega +329b 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set1_mem_ackpayload_enable: +329c 58000001 setarg 1 +329d 2020329a branch g24_store_mem_ackpayload_enable + +g24_fetch_mem_rxdata_temp_add3_7byte: +329e 5800010c setarg offset_24g_rxdata_temp_add3 +329f 204032cd call g24_set_rega +32a0 ea238000 ifetch 7 ,rega +32a1 20600000 rtn + +g24_fetch_mem_nodata_timer_enable: +32a2 5800015e setarg offset_24g_nodata_timer_enable +32a3 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_nodata_timer_enable: +32a4 58000000 setarg 0 + +g24_store_mem_nodata_timer_enable: +32a5 da20015e arg offset_24g_nodata_timer_enable ,rega +32a6 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ms_blank_data_enable: +32a7 58000000 setarg 0 + +g24_store_mem_ms_blank_data_enable: +32a8 da200180 arg offset_24g_ms_blank_data_enable ,rega +32a9 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_blank_data_enable: +32aa 58000000 setarg 0 + +g24_store_mem_kb_blank_data_enable: +32ab da20017e arg offset_24g_kb_blank_data_enable ,rega +32ac 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_mul_blank_data_enable: +32ad 58000000 setarg 0 + +g24_store_mem_kb_mul_blank_data_enable: +32ae da20017f arg offset_24g_kb_mul_blank_data_enable ,rega +32af 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_up: +32b0 da200102 arg offset_power_ctrl_threshold_up ,rega +32b1 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_down: +32b2 da200103 arg offset_power_ctrl_threshold_down ,rega + +g24_set_contw_with_regb_store_1byte: +32b3 204032c7 call g24_set_contw_with_regb + +g24_contw_istore_1byte: +32b4 e0a08000 istore 1 ,contw +32b5 20600000 rtn + +g24_fetch_mem_pair_mode: +32b6 5800015d setarg offset_24g_pair_mode +32b7 202032d0 branch g24_set_rega_ifetch_1byte + +g24_store_mem_pair_mode: +32b8 da20015d arg offset_24g_pair_mode ,rega +32b9 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_pair_txpower: +32ba 5800018a setarg offset_24g_pair_txpower +32bb 204032d0 call g24_set_rega_ifetch_1byte +32bc 2020326a branch g24_store_mem_txpower + +g24_fetch_mem_rxdata_temp_add3_1byte: +32bd 5800010c setarg offset_24g_rxdata_temp_add3 +32be 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set_contw_with_temp: +32bf 1fe20400 copy pdata ,temp +32c0 1a227e00 copy rega ,pdata +32c1 9a608a00 iadd regc ,contw +32c2 18427e00 copy temp ,pdata +32c3 20600000 rtn + +g24_set_contw_with_temp_store_3byte: +32c4 204032bf call g24_set_contw_with_temp + +g24_contw_istore_3byte: +32c5 e0a18000 istore 3 ,contw +32c6 20600000 rtn + +g24_set_contw_with_regb: +32c7 20402c7a call g24_head_ptr2regc + +g24_set_contw_with_regb2: +32c8 1fe22400 copy pdata ,regb +32c9 1a227e00 copy rega ,pdata +32ca 9a608a00 iadd regc ,contw +32cb 1a427e00 copy regb ,pdata +32cc 20600000 rtn + +g24_set_rega: +32cd 20402c7a call g24_head_ptr2regc +32ce 9a60a200 iadd regc ,rega +32cf 20600000 rtn + +g24_set_rega_ifetch_1byte: +32d0 204032cd call g24_set_rega + +g24_rega_ifetch_1byte: +32d1 ea208000 ifetch 1 ,rega +32d2 20600000 rtn + +g24_set_rega_ifetcht_4byte: +32d3 204032cd call g24_set_rega +32d4 ea2a0000 ifetcht 4 ,rega +32d5 20600000 rtn + +g24_mem_set0: +32d6 58000000 setarg 0 +32d7 202032b4 branch g24_contw_istore_1byte + +app_init: +32d8 44e24018 bpatch patch18_4 ,mem_patch18 +32d9 6800c092 fetch 1 ,mem_device_option +32da 203a32d8 branch app_init ,blank +32db c0022f30 beq dvc_op_dongle ,dongle_init +32dc c007b436 beq dvc_op_antilost ,antilost_init +32dd c004c5de beq dvc_op_shutter ,shutter_init +32de c005392a beq dvc_op_module ,module_init +32df c00735bf beq dvc_op_car ,car_init +32e0 c00844a4 beq dvc_op_remote_car ,remote_car_init +32e1 c2833d00 bbit1 dvc_op_mouse ,mouse_init +32e2 20600000 rtn + +app_lpm_init: +32e3 44e2c018 bpatch patch18_5 ,mem_patch18 +32e4 70015100 jam 0 ,mem_tester_emulate +32e5 70017f00 jam 0 ,mem_debug_config +32e6 70018000 jam 0 ,mem_lch_code +32e7 58000000 setarg 0 +32e8 600289ae store 5 ,mem_sp_state_start +32e9 6800c092 fetch 1 ,mem_device_option +32ea 203a32e3 branch app_lpm_init ,blank +32eb c0053962 beq dvc_op_module ,module_lpm_init + +app_lpm_init0: +32ec 20600000 rtn + +app_process_idle: +32ed 20407cd1 call ui_dispatch +32ee 20407d9c call check_51cmd +32ef 204032f6 call app_process_bb_event +32f0 680141f3 fetch 2 ,mem_cb_idle_process +32f1 20207f9c branch callback_func + +app_process_bt: +32f2 680141f1 fetch 2 ,mem_cb_bt_process +32f3 20207f9c branch callback_func + +app_process_ble: +32f4 680141ef fetch 2 ,mem_cb_le_process +32f5 20207f9c branch callback_func + +app_process_bb_event: +32f6 44e34018 bpatch patch18_6 ,mem_patch18 +32f7 da204668 arg mem_ipc_fifo_bt2c51 ,rega +32f8 20407fc4 call fifo_out +32f9 207a0000 rtn blank +32fa 1fe22600 copy pdata ,regc +32fb 204032ff call app_event_normal_process +32fc 20203324 branch app_process_bb_event_priority + +app_discard_event: +32fd da600000 arg 0 ,regc +32fe 20600000 rtn + +app_event_normal_process: +32ff c000b311 beq bt_evt_bb_connected ,app_evt_bt_conn +3300 c0083357 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +3301 c002b335 beq bt_evt_setup_complete ,app_evt_setup_complete +3302 c009333c beq bt_evt_hid_handshake ,app_evt_hid_handshake +3303 c0033353 beq bt_evt_hid_connected ,app_bb_event_hid_connected +3304 c0023394 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +3305 c0013399 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +3306 c009b394 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +3307 c00a334b beq bt_evt_le_connected ,app_le_event_bb_connected +3308 c00ab34f beq bt_evt_le_disconnected ,app_le_event_bb_disconn +3309 c001b32e beq bt_evt_reconn_started ,app_event_reconn_start +330a c005b340 beq bt_evt_enter_sniff ,app_event_enter_sniff +330b c0063347 beq bt_evt_exit_sniff ,app_event_exit_sniff +330c c00b335b beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +330d c00c332a beq bt_evt_linkkey_generate ,app_event_linkkey_generate +330e c015331a beq bt_evt_switch_fail_master ,app_event_switch_fail_master +330f c015b318 beq bt_evt_switch_success_master ,app_event_switch_success +3310 20600000 rtn + +app_evt_bt_conn: +3311 68014682 fetch 2 ,mem_ui_state_map +3312 79207e00 set1 ui_state_bt_connected ,pdata +3313 60014682 store 2 ,mem_ui_state_map +3314 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3315 793ffe00 set0 app_disc_by_button ,pdata +3316 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3317 20600000 rtn + +app_event_switch_success: +3318 70022900 jam 0 ,mem_switch_fail_master_count +3319 20600000 rtn + +app_event_switch_fail_master: +331a 68008229 fetch 1 ,mem_switch_fail_master_count +331b 1fe0fe01 increase 1 ,pdata +331c 60008229 store 1 ,mem_switch_fail_master_count +331d 1fe67c01 sub pdata ,1 ,null +331e 202133df branch app_bt_role_switch ,positive +331f 70022900 jam 0 ,mem_switch_fail_master_count +3320 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3321 79207e09 set1 app_disc_switch_fail ,pdata +3322 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3323 202033e9 branch app_bt_disconnect + +app_process_bb_event_priority: +3324 680141f5 fetch 2 ,mem_cb_bb_event_process +3325 20207f9c branch callback_func + +app_check_wake_lock: +3326 680141e9 fetch 2 ,mem_cb_check_wakelock +3327 20207f9c branch callback_func + +app_will_enter_lpm: +3328 680141ed fetch 2 ,mem_cb_before_lpm +3329 20207f9c branch callback_func + +app_event_linkkey_generate: +332a 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +332b 79207e01 set1 app_disc_after_pairing ,pdata +332c 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +332d 20203412 branch app_bt_store_reconn_info + +app_event_reconn_start: +332e 68014682 fetch 2 ,mem_ui_state_map +332f 79207e07 set1 ui_state_bt_reconnect ,pdata +3330 60014682 store 2 ,mem_ui_state_map +3331 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3332 79207e02 set1 app_disc_after_reconn ,pdata +3333 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3334 20600000 rtn + +app_evt_setup_complete: +3335 68014682 fetch 2 ,mem_ui_state_map +3336 79207e01 set1 ui_state_bt_setup_complete ,pdata +3337 60014682 store 2 ,mem_ui_state_map +3338 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3339 79207e04 set1 app_disc_after_setup_done ,pdata +333a 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +333b 20600000 rtn + +app_evt_hid_handshake: +333c 68014682 fetch 2 ,mem_ui_state_map +333d 79207e03 set1 ui_state_bt_hid_handshake ,pdata +333e 60014682 store 2 ,mem_ui_state_map +333f 20600000 rtn + +app_event_enter_sniff: +3340 68014682 fetch 2 ,mem_ui_state_map +3341 79207e05 set1 ui_state_bt_sniff ,pdata +3342 60014682 store 2 ,mem_ui_state_map +3343 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3344 79207e03 set1 app_disc_after_sniff ,pdata +3345 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3346 20600000 rtn + +app_event_exit_sniff: +3347 68014682 fetch 2 ,mem_ui_state_map +3348 793ffe05 set0 ui_state_bt_sniff ,pdata +3349 60014682 store 2 ,mem_ui_state_map +334a 20600000 rtn + +app_le_event_bb_connected: +334b 68014682 fetch 2 ,mem_ui_state_map +334c 79207e09 set1 ui_state_ble_connected ,pdata +334d 60014682 store 2 ,mem_ui_state_map +334e 20600000 rtn + +app_le_event_bb_disconn: +334f 68014682 fetch 2 ,mem_ui_state_map +3350 793ffe09 set0 ui_state_ble_connected ,pdata +3351 60014682 store 2 ,mem_ui_state_map +3352 20203418 branch app_lpm_mult_disable + +app_bb_event_hid_connected: +3353 68014682 fetch 2 ,mem_ui_state_map +3354 79207e02 set1 ui_state_bt_hid_conn ,pdata +3355 60014682 store 2 ,mem_ui_state_map +3356 20600000 rtn + +app_evt_button_long_pressed: +3357 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3358 79207e00 set1 app_disc_by_button ,pdata +3359 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +335a 20600000 rtn + +app_event_ml2cap_conn_refused: +335b 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +335c 79207e08 set1 app_disc_l2cap_refused ,pdata +335d 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +335e 202033e9 branch app_bt_disconnect + +app_evt_timer: +335f 44e3c018 bpatch patch18_7 ,mem_patch18 +3360 6000822a store 1 ,mem_app_evt_timer_count + +app_evt_100ms_loop: +3361 6800822a fetch 1 ,mem_app_evt_timer_count +3362 207a0000 rtn blank +3363 1fe0ffff increase -1 ,pdata +3364 6000822a store 1 ,mem_app_evt_timer_count +3365 20407cdd call ui_button_polling +3366 204033d6 call app_lpm_wake_auto_lock_timer +3367 20403387 call app_unsniff_delay_timer +3368 2040338d call app_discovery_timer +3369 2040651b call flash_write_spi_sm_timer +336a 680141fd fetch 2 ,mem_cb_event_timer +336b 20407f9c call callback_func +336c 20203361 branch app_evt_100ms_loop + +timer_single_step: +336d ea608000 ifetch 1 ,regc +336e 207a0000 rtn blank +336f 1fe0ffff pincrease -1 +3370 e2608000 istore 1 ,regc +3371 247a0000 nrtn blank +3372 1a427e00 copy regb ,pdata +3373 20207f9c branch callback_func + +timer_single_step_2b: +3374 ea610000 ifetch 2 ,regc +3375 207a0000 rtn blank +3376 1fe0ffff pincrease -1 +3377 e2610000 istore 2 ,regc +3378 247a0000 nrtn blank +3379 1a427e00 copy regb ,pdata +337a 20207f9c branch callback_func + +app_power_timer: +337b 6809423f fetcht 2 ,mem_power_param_ptr +337c 1840a601 add temp ,power_timer_offset ,regc +337d da40337f arg app_power_timer_timeout ,regb +337e 2020336d branch timer_single_step + +app_power_timer_timeout: +337f 2040342d call app_got_power_state_common +3380 c000b382 beq power_starting ,app_enter_power_stanby_state + +app_enter_power_off_state: +3381 2020340a branch app_enter_hibernate + +app_enter_power_stanby_state: +3382 58000002 setarg power_standby +3383 e2608000 istore 1 ,regc +3384 1840a408 add temp ,power_standby_cb_offset ,regb + +app_power_cb_common: +3385 ea410000 ifetch 2 ,regb +3386 20207f9c branch callback_func + +app_unsniff_delay_timer: +3387 da604205 arg mem_unsniff2sniff_timer_count ,regc +3388 da40338a arg app_unsniff_delay_timeout ,regb +3389 2020336d branch timer_single_step + +app_unsniff_delay_timeout: +338a 20402252 call context_check_idle +338b 2022b40e branch app_bt_enter_sniff ,zero +338c 20600000 rtn + +app_discovery_timer: +338d da60467e arg mem_discovery_timeout_timer_count ,regc +338e da403390 arg app_discovery_timeout ,regb +338f 20203374 branch timer_single_step_2b + +app_discovery_timeout: +3390 204033f0 call app_bt_stop_discovery +3391 20403408 call app_led_off +3392 680141f7 fetch 2 ,mem_cb_discovry_timeout +3393 20207f9c branch callback_func + +app_bb_event_reconn_failed: +3394 204033ac call app_disconn_reason_flag_clear + +app_clear_reconnect_flag: +3395 68014682 fetch 2 ,mem_ui_state_map +3396 793ffe07 set0 ui_state_bt_reconnect ,pdata +3397 60014682 store 2 ,mem_ui_state_map +3398 20600000 rtn + +app_bb_event_bb_disconn: +3399 70420500 jam 0 ,mem_unsniff2sniff_timer_count +339a 68014682 fetch 2 ,mem_ui_state_map +339b c283b39e bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +339c 2fec0001 isolate0 ui_state_bt_setup_complete ,pdata +339d 2040b2fd call app_discard_event ,true + +app_bb_event_bb_reconn_disconn: +339e 44e44019 bpatch patch19_0 ,mem_patch19 +339f 68014682 fetch 2 ,mem_ui_state_map +33a0 793ffe00 set0 ui_state_bt_connected ,pdata +33a1 793ffe01 set0 ui_state_bt_setup_complete ,pdata +33a2 793ffe02 set0 ui_state_bt_hid_conn ,pdata +33a3 793ffe03 set0 ui_state_bt_hid_handshake ,pdata +33a4 793ffe07 set0 ui_state_bt_reconnect ,pdata +33a5 60014682 store 2 ,mem_ui_state_map +33a6 20203418 branch app_lpm_mult_disable + +app_bb_hibernate: +33a7 204033a9 call app_disconn_reason_clear +33a8 2020340a branch app_enter_hibernate + +app_disconn_reason_clear: +33a9 58000000 setarg 0 +33aa 60014208 store app_disc_rsn_size ,mem_app_disconn_reason +33ab 20600000 rtn + +app_disconn_reason_flag_clear: +33ac 58000000 setarg 0 +33ad 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +33ae 20600000 rtn + +app_disconn_reason_collect_bt: +33af 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +33b0 60014208 store app_disc_rsn_size ,mem_app_disconn_reason +33b1 58000000 setarg 0 +33b2 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +33b3 20600000 rtn + +app_disconn_reason_collect_ble: +33b4 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +33b5 79207e07 set1 app_disc_ble ,pdata +33b6 60014208 store app_disc_rsn_size ,mem_app_disconn_reason +33b7 58000000 setarg 0 +33b8 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +33b9 20600000 rtn + +app_check_sniff: +33ba 6800c682 fetch 1 ,mem_ui_state_map +33bb 2feffe05 isolate1 ui_state_bt_sniff ,pdata +33bc 20600000 rtn + +app_initflag_store: +33bd 5800aa55 setarg eeprom_init_flag + +app_flag_store: +33be 60010aaa store 2 ,mem_timeup +33bf 44e4c019 bpatch patch19_1 ,mem_patch19 +33c0 d8400002 arg 2 ,temp +33c1 da200aaa arg mem_timeup ,rega +33c2 da4000c3 arg eeprom_module_init_flag ,regb +33c3 20206606 branch iicd_write_eep_data + +app_initflag_check: +33c4 44e54019 bpatch patch19_2 ,mem_patch19 +33c5 d8400002 arg 2 ,temp +33c6 da200a9a arg mem_pdatatemp ,rega +33c7 da4000c3 arg eeprom_module_init_flag ,regb +33c8 204065df call iicd_read_eep_data +33c9 68010a9a fetch 2 ,mem_pdatatemp +33ca d840aa55 arg eeprom_init_flag ,temp +33cb 98467c00 isub temp ,null +33cc 20600000 rtn + +app_start_auto_sniff: +33cd 6800c55a fetch 1 ,mem_unsniff2sniff_timer +33ce 6000c205 store 1 ,mem_unsniff2sniff_timer_count +33cf 20600000 rtn + +app_get_lpm_wake_lock: +33d0 d8e00009 arg wake_lock_app ,queue +33d1 20202c32 branch lpm_get_wake_lock + +app_put_lpm_wake_lock: +33d2 d8e00009 arg wake_lock_app ,queue +33d3 20202c36 branch lpm_put_wake_lock + +app_lpm_wake_auto_lock: +33d4 70420605 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +33d5 202033d0 branch app_get_lpm_wake_lock + +app_lpm_wake_auto_lock_timer: +33d6 da604206 arg mem_wake_up_delay_timer ,regc +33d7 da4033d2 arg app_put_lpm_wake_lock ,regb +33d8 2020336d branch timer_single_step + +app_l2cap_flow_control_enable: +33d9 70436301 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +33da 20600000 rtn + +app_l2cap_flow_control_disable: +33db 70436300 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +33dc 20600000 rtn + +app_bt_set_pincode: +33dd 700a990a jam bt_cmd_set_pin_code ,mem_fifo_temp +33de 20207d8f branch ui_ipc_send_cmd + +app_bt_role_switch: +33df 700a991d jam bt_cmd_role_switch ,mem_fifo_temp +33e0 20207d8f branch ui_ipc_send_cmd + +app_bt_start_reconnect: +33e1 44e5c019 bpatch patch19_3 ,mem_patch19 +33e2 6800c207 fetch 1 ,mem_app_connection_options +33e3 6000816d store 1 ,mem_connection_options +33e4 70022801 jam app_flag_reconnect ,mem_reconnect_flag +33e5 700a9903 jam bt_cmd_reconnect ,mem_fifo_temp +33e6 20207d8f branch ui_ipc_send_cmd + +app_bt_reconnect_cancel: +33e7 700a991e jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +33e8 20207d8f branch ui_ipc_send_cmd + +app_bt_disconnect: +33e9 700a9904 jam bt_cmd_disconnect ,mem_fifo_temp +33ea 20207d8f branch ui_ipc_send_cmd + +app_bt_start_discovery_short: +33eb 68014687 fetch 2 ,mem_discovery_timeout +33ec 6001467e store 2 ,mem_discovery_timeout_timer_count + +app_bt_start_discovery_led_blink: +33ed 20403404 call app_led_start_blink + +app_bt_start_discovery: +33ee 700a9901 jam bt_cmd_start_discovery ,mem_fifo_temp +33ef 20207d8f branch ui_ipc_send_cmd + +app_bt_stop_discovery: +33f0 58000000 setarg 0 +33f1 6001467e store 2 ,mem_discovery_timeout_timer_count +33f2 700a9902 jam bt_cmd_stop_discovery ,mem_fifo_temp +33f3 20207d8f branch ui_ipc_send_cmd + +app_ble_start_direct_adv: +33f4 700a990f jam bt_cmd_start_direct_adv ,mem_fifo_temp +33f5 20207d8f branch ui_ipc_send_cmd + +app_ble_stop_direct_adv: +33f6 700a9910 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +33f7 20207d8f branch ui_ipc_send_cmd + +app_ble_stop_adv: +33f8 700a990e jam bt_cmd_stop_adv ,mem_fifo_temp +33f9 20207d8f branch ui_ipc_send_cmd + +app_ble_start_adv: +33fa 700a990d jam bt_cmd_start_adv ,mem_fifo_temp +33fb 20207d8f branch ui_ipc_send_cmd + +app_ble_start_scan: +33fc 700a9917 jam bt_cmd_le_start_scan ,mem_fifo_temp +33fd 20207d8f branch ui_ipc_send_cmd + +app_ble_stop_scan: +33fe 700a9918 jam bt_cmd_le_stop_scan ,mem_fifo_temp +33ff 20207d8f branch ui_ipc_send_cmd + +app_ble_start_conn: +3400 700a9916 jam bt_cmd_le_start_conn ,mem_fifo_temp +3401 20207d8f branch ui_ipc_send_cmd + +app_ble_disconnect: +3402 700a9911 jam bt_cmd_le_disconnect ,mem_fifo_temp +3403 20207d8f branch ui_ipc_send_cmd + +app_led_start_blink: +3404 700a9915 jam bt_cmd_led_blink ,mem_fifo_temp +3405 20207d8f branch ui_ipc_send_cmd + +app_led_on: +3406 700a9914 jam bt_cmd_led_on ,mem_fifo_temp +3407 20207d8f branch ui_ipc_send_cmd + +app_led_stop_blink: + +app_led_off: +3408 700a9913 jam bt_cmd_led_off ,mem_fifo_temp +3409 20207d8f branch ui_ipc_send_cmd + +app_enter_hibernate: +340a 700a9919 jam bt_cmd_enter_hibernate ,mem_fifo_temp +340b 20207d8f branch ui_ipc_send_cmd + +app_bt_sniff_exit: +340c 700a9906 jam bt_cmd_exit_sniff ,mem_fifo_temp +340d 20207d8f branch ui_ipc_send_cmd + +app_bt_enter_sniff: +340e 700a9905 jam bt_cmd_enter_sniff ,mem_fifo_temp +340f 20207d8f branch ui_ipc_send_cmd + +app_ble_store_reconn_info: +3410 700a991f jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +3411 20207d8f branch ui_ipc_send_cmd + +app_bt_store_reconn_info: +3412 700a9920 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +3413 20207d8f branch ui_ipc_send_cmd + +app_store_reconn_info: +3414 700a9925 jam bt_cmd_store_reconn_info ,mem_fifo_temp +3415 20207d8f branch ui_ipc_send_cmd + +app_lpm_mult_enable: +3416 7920000d set1 mark_lpm_mult_enable ,mark +3417 20600000 rtn + +app_lpm_mult_disable: +3418 793f800d set0 mark_lpm_mult_enable ,mark +3419 20600000 rtn + +app_button_long_pressed: +341a 2040342d call app_got_power_state_common +341b c0013424 beq power_standby ,app_power_shutting_down + +app_power_starting: +341c 58000001 setarg power_starting +341d e2608000 istore 1 ,regc +341e 1840a203 add temp ,power_starting_timeout_offset ,rega +341f 1840a406 add temp ,power_starting_cb_offset ,regb + +app_power_common: +3420 ea288000 ifetcht 1 ,rega +3421 1a60a601 increase 1 ,regc +3422 e2688000 istoret 1 ,regc +3423 20203385 branch app_power_cb_common + +app_power_shutting_down: +3424 58000000 setarg power_off +3425 e2608000 istore 1 ,regc +3426 68014682 fetch 2 ,mem_ui_state_map +3427 c304b429 bbit0 ui_state_ble_connected ,app_power_off_end +3428 20403402 call app_ble_disconnect + +app_power_off_end: +3429 6809423f fetcht 2 ,mem_power_param_ptr +342a 1840a202 add temp ,power_off_timeout_offset ,rega +342b 1840a404 add temp ,power_off_cb_offset ,regb +342c 20203420 branch app_power_common + +app_got_power_state_common: +342d 6809423f fetcht 2 ,mem_power_param_ptr +342e 1840a600 add temp ,power_state_offset ,regc +342f ea608000 ifetch 1 ,regc +3430 20600000 rtn + +app_event_button_up: +3431 2040342d call app_got_power_state_common +3432 c0803434 bne power_off ,app_power_release +3433 2020340a branch app_enter_hibernate + +app_power_release: +3434 1840a40a add temp ,ui_butten_up_cb_offset ,regb +3435 20203385 branch app_power_cb_common + +antilost_init: +3436 20758000 rtn wake +3437 70808100 hjam 0x00 ,core_gpio_sel1 +3438 58003463 setarg antilost_le_before_hibernate +3439 600141eb store 2 ,mem_cb_before_hibernate +343a 5800696c setarg keyscan_process_lpm_before +343b 600141ed store 2 ,mem_cb_before_lpm +343c 580034f5 setarg antilost_idle_process +343d 600141f3 store 2 ,mem_cb_idle_process +343e 580034f4 setarg antilost_le_conn_process +343f 600141ef store 2 ,mem_cb_le_process +3440 5800347e setarg antilost_bb_event_process +3441 600141f5 store 2 ,mem_cb_bb_event_process +3442 580034b2 setarg antilost_le_bb_event_timer +3443 600141fd store 2 ,mem_cb_event_timer +3444 58003465 setarg antilost_le_notification +3445 600141fb store 2 ,mem_cb_ble_transmit +3446 58003470 setarg antilost_lpm_lock_process +3447 600141e9 store 2 ,mem_cb_check_wakelock +3448 58003501 setarg antilost_le_receive_data_process +3449 600141f9 store 2 ,mem_cb_att_write +344a 44e64019 bpatch patch19_4 ,mem_patch19 +344b 2040359b call antilost_buzzer_pwm_init +344c 20406948 call keyscan_key_init +344d 204035ad call antilost_adc_init +344e 20407d08 call ui_led_init_global +344f 20407cd3 call ui_button_init +3450 5800350b setarg antilost_key_up_down +3451 60014766 store 2 ,mem_cb_antl_key +3452 580034fc setarg antilost_power_off_cb +3453 6001475d store 2 ,mem_antl_power_off_cb +3454 580034f8 setarg antilost_power_starting_cb +3455 6001475f store 2 ,mem_antl_power_starting_cb +3456 5800346c setarg antilost_power_standby_cb +3457 60014761 store 2 ,mem_antl_power_standby_cb +3458 580035a2 setarg antilost_led_on_cb +3459 600146a9 store 2 ,mem_antl_led_cb_on +345a 580035a4 setarg antilost_led_off_cb +345b 600146ab store 2 ,mem_antl_led_cb_off +345c 580035a9 setarg antilost_buzzer_on +345d 600146b4 store 2 ,mem_antl_buzzer_cb_on +345e 580035a6 setarg antilost_buzzer_off +345f 600146b6 store 2 ,mem_antl_buzzer_cb_off +3460 68014682 fetch 2 ,mem_ui_state_map +3461 c3860000 rtnbit1 ui_state_btn_down +3462 2020340a branch app_enter_hibernate + +antilost_le_before_hibernate: +3463 20403586 call antilost_led_buzzer_stop_blink +3464 2020340a branch app_enter_hibernate + +antilost_le_notification: +3465 20405892 call le_fifo_check_nearly_full +3466 247a0000 nrtn blank +3467 da200b06 arg mem_temp_block5 ,rega +3468 20407e54 call queue_pop +3469 24740000 nrtn user +346a d8c00b06 arg mem_temp_block5 ,contr +346b 20204746 branch le_send_notify_from_list + +antilost_power_standby_cb: +346c 68014797 fetch 2 ,mem_antl_le_sleep_timeout +346d 60014791 store 2 ,mem_antl_le_sleep_timer +346e 70475301 jam 1 ,mem_antl_key_scan_enable +346f 2020358f branch antilost_fast_adv_start + +antilost_lpm_lock_process: +3470 6800c79d fetch 1 ,mem_antl_key_state +3471 c000b479 beq 1 ,antilost_lpm_ctrl_for_led_buzzer +3472 68014682 fetch 2 ,mem_ui_state_map +3473 c304b479 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +3474 6800c79e fetch 1 ,mem_antl_lost_mode +3475 c000b3d0 beq 1 ,app_get_lpm_wake_lock +3476 6800c700 fetch 1 ,mem_antl_queue_curr_num +3477 243a33d0 nbranch app_get_lpm_wake_lock ,blank +3478 202033d2 branch app_put_lpm_wake_lock + +antilost_lpm_ctrl_for_led_buzzer: +3479 6800c79b fetch 1 ,mem_antl_led_state +347a 6808c79c fetcht 1 ,mem_antl_buzzer_state +347b 9841fe00 ior temp ,pdata +347c c000b3d0 beq 1 ,app_get_lpm_wake_lock +347d 202033d2 branch app_put_lpm_wake_lock + +antilost_bb_event_process: +347e 1a627e00 copy regc ,pdata +347f c016b431 beq bt_evt_button_up ,app_event_button_up +3480 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed +3481 c00a34df beq bt_evt_le_connected ,antilost_le_process_conn +3482 c00ab4e8 beq bt_evt_le_disconnected ,antilost_le_process_discon +3483 c0203485 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +3484 20600000 rtn + +antilost_le_conn_param_update_rsp_recieved: +3485 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +3486 c000b48c beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected + +antilost_le_conn_param_accepted: +3487 680143d8 fetch 2 ,mem_le_new_connslavelatency +3488 203a34a2 branch antilost_master_nonsupport_latency ,blank + +antilost_le_conn_param_updata_procedure_sucsess: +3489 70478a02 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +348a 70478f3c jam 60 ,mem_antl_conn_update_timer +348b 20600000 rtn + +antilost_le_conn_param_rejected: +348c 6801449a fetch 2 ,mem_le_latency +348d 203a34a0 branch antilost_conn_param_updata_procedure_faild ,blank + +antilost_conn_param_retransimiting: +348e 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +348f 680947b4 fetcht 2 ,mem_interval_increment +3490 68014496 fetch 2 ,mem_le_interval_min +3491 9840fe00 iadd temp ,pdata +3492 60014496 store 2 ,mem_le_interval_min +3493 1fe22200 copy pdata ,rega +3494 68014498 fetch 2 ,mem_le_interval_max +3495 9840fe00 iadd temp ,pdata +3496 60014498 store 2 ,mem_le_interval_max +3497 9a20fe00 iadd rega ,pdata +3498 1fe30400 rshift pdata ,temp +3499 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max +349a 9846fc00 idiv temp +349b 20407f86 call wait_div_end +349c 1807fe00 quotient pdata +349d 6001449a store 2 ,mem_le_latency +349e 70479001 jam 1 ,mem_antl_send_updata_le_param_timer +349f 20600000 rtn + +antilost_conn_param_updata_procedure_faild: +34a0 70478a03 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +34a1 20600000 rtn + +antilost_master_nonsupport_latency: +34a2 70417200 jam 0 ,mem_lpm_mult +34a3 70479000 jam 0 ,mem_antl_send_updata_le_param_timer +34a4 680143d6 fetch 2 ,mem_le_new_conninterval +34a5 680947be fetcht 2 ,mem_antl_le_unnormal_interval_min +34a6 98467c00 isub temp ,null +34a7 79212200 setflag positive ,0 ,rega +34a8 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max +34a9 680943d6 fetcht 2 ,mem_le_new_conninterval +34aa 98467e00 isub temp ,pdata +34ab 79212201 setflag positive ,1 ,rega +34ac 2a200603 compare 0x03 ,rega ,0x03 +34ad 20608000 rtn true +34ae 680447be fetch 8 ,mem_antl_le_unnormal_interval_min +34af 60044496 store 8 ,mem_le_interval_min +34b0 70479001 jam 1 ,mem_antl_send_updata_le_param_timer +34b1 20600000 rtn + +antilost_le_bb_event_timer: +34b2 2040337b call app_power_timer +34b3 204034b9 call antilost_double_click_timer +34b4 204034be call antilost_le_fast_adv_timer +34b5 204034d5 call antilost_le_sleep_timer +34b6 204034ca call antilost_app_updata_le_param_timer +34b7 204034c4 call antilost_conn_update_timer +34b8 202034d9 branch antilost_adc_check_timer + +antilost_double_click_timer: +34b9 da604799 arg mem_double_click_timer ,regc +34ba da4034bc arg antilost_double_click_timeout ,regb +34bb 2020336d branch timer_single_step + +antilost_double_click_timeout: +34bc 70479a00 jam 0 ,mem_butten_click_cnt +34bd 20600000 rtn + +antilost_le_fast_adv_timer: +34be da604793 arg mem_antl_fast_adv_timer ,regc +34bf da4034c1 arg antilost_le_fast_adv_timeout ,regb +34c0 20203374 branch timer_single_step_2b + +antilost_le_fast_adv_timeout: +34c1 da6046bf arg mem_antl_slow_adv_led_style ,regc +34c2 da40469e arg mem_antl_slow_adv_lpm_interval ,regb +34c3 20203591 branch antilost_adv_start_common + +antilost_conn_update_timer: +34c4 da60478f arg mem_antl_conn_update_timer ,regc +34c5 da4034c7 arg antilost_conn_update_timer_time_out ,regb +34c6 2020336d branch timer_single_step + +antilost_conn_update_timer_time_out: +34c7 6801449a fetch 2 ,mem_le_latency +34c8 6000c172 store 1 ,mem_lpm_mult +34c9 20600000 rtn + +antilost_app_updata_le_param_timer: +34ca da604790 arg mem_antl_send_updata_le_param_timer ,regc +34cb da4034cd arg antilost_app_updata_le_param_timeout ,regb +34cc 2020336d branch timer_single_step + +antilost_app_updata_le_param_timeout: +34cd 6800843f fetch 1 ,mem_le_state +34ce 2fe0c000 compare 0 ,pdata ,0x60 +34cf 2420b4d3 nbranch antilost_wait_for_updata_param_instant_expire ,true +34d0 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +34d1 20403416 call app_lpm_mult_enable +34d2 20205abf branch le_l2cap_tx_update_req + +antilost_wait_for_updata_param_instant_expire: +34d3 70479001 jam 1 ,mem_antl_send_updata_le_param_timer +34d4 20600000 rtn + +antilost_le_sleep_timer: +34d5 da604791 arg mem_antl_le_sleep_timer ,regc +34d6 da4034d8 arg antilost_le_sleep_timer_timeout ,regb +34d7 20203374 branch timer_single_step_2b + +antilost_le_sleep_timer_timeout: +34d8 2020341a branch app_button_long_pressed + +antilost_adc_check_timer: +34d9 da60478d arg mem_adc_timer ,regc +34da da4034dc arg antilost_adc_check_timer_timeout ,regb +34db 20203374 branch timer_single_step_2b + +antilost_adc_check_timer_timeout: +34dc 680147a7 fetch 2 ,mem_adc_timeout +34dd 6001478d store 2 ,mem_adc_timer +34de 202035af branch antilost_battery_process + +antilost_le_process_conn: +34df 680147a7 fetch 2 ,mem_adc_timeout +34e0 6001478d store 2 ,mem_adc_timer +34e1 58000000 setarg 0 +34e2 60014793 store 2 ,mem_antl_fast_adv_timer +34e3 60014791 store 2 ,mem_antl_le_sleep_timer +34e4 2040355c call antilost_alert_off +34e5 20403586 call antilost_led_buzzer_stop_blink +34e6 70417200 jam 0 ,mem_lpm_mult +34e7 202033f8 branch app_ble_stop_adv + +antilost_le_process_discon: +34e8 58000000 setarg 0 +34e9 6002478d store 4 ,mem_adc_timer +34ea 6001c78a store 3 ,mem_antl_conn_updata_procedure_state +34eb 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +34ec 7047a001 jam 1 ,mem_alarm_config_notfy_cnt +34ed 68014797 fetch 2 ,mem_antl_le_sleep_timeout +34ee 60014791 store 2 ,mem_antl_le_sleep_timer +34ef 20407e38 call queue_init +34f0 6800c759 fetch 1 ,mem_antl_power_state +34f1 c1000000 rtneq power_off +34f2 2040358f call antilost_fast_adv_start +34f3 2020356e branch antilost_on_off_alarm_after_disconn + +antilost_le_conn_process: +34f4 20203508 branch antilost_key_process + +antilost_idle_process: +34f5 6800c759 fetch 1 ,mem_antl_power_state +34f6 c1810000 rtnne power_standby +34f7 20203508 branch antilost_key_process + +antilost_power_starting_cb: +34f8 da6046cd arg mem_antl_power_starting_buzzer_style ,regc +34f9 20403582 call antilost_buzzer_configuration +34fa da6046c6 arg mem_antl_power_starting_led_style ,regc + +antilost_power_common: +34fb 20203584 branch antilost_led_configuration + +antilost_power_off_cb: +34fc 70436e00 jam off ,mem_le_adv_enable +34fd da6046db arg mem_antl_power_off_buzzer_style ,regc +34fe 20403582 call antilost_buzzer_configuration +34ff da6046d4 arg mem_antl_power_off_led_style ,regc +3500 202034fb branch antilost_power_common + +antilost_le_receive_data_process: +3501 68008477 fetch 1 ,mem_le_att_opcode +3502 c0093504 beq attop_write_request ,antilost_le_parse_att_write_request +3503 20600000 rtn + +antilost_le_parse_att_write_request: +3504 68010478 fetch 2 ,mem_le_att_handle +3505 c006b536 beq new_spec_write_handle ,antilost_cmd_parse_for_application +3506 c005b571 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +3507 20600000 rtn + +antilost_key_process: +3508 6800c753 fetch 1 ,mem_antl_key_scan_enable +3509 207a0000 rtn blank +350a 20206978 branch keyscan_key_process + +antilost_key_up_down: +350b 1a227e00 copy rega ,pdata +350c 203a3510 branch antilost_key_is_up ,blank + +antilost_key_is_down: +350d 18e27e00 copy queue ,pdata +350e c0003513 beq 0 ,antilost_key0_down +350f 20600000 rtn + +antilost_key_is_up: +3510 18e27e00 copy queue ,pdata +3511 c000351b beq 0 ,antilost_key0_up +3512 20600000 rtn + +antilost_key0_down: +3513 70479d01 jam 1 ,mem_antl_key_state +3514 da6046f7 arg mem_antl_key_buzzer_style ,regc +3515 20403582 call antilost_buzzer_configuration +3516 da6046f0 arg mem_antl_key_led_style ,regc +3517 20403584 call antilost_led_configuration +3518 68014682 fetch 2 ,mem_ui_state_map +3519 c304b532 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +351a 20203521 branch antilost_butten_down_after_conn + +antilost_key0_up: +351b 70479d00 jam 0 ,mem_antl_key_state +351c 2020351d branch antilost_double_click_timer_init + +antilost_double_click_timer_init: +351d 6800c79a fetch 1 ,mem_butten_click_cnt +351e c1808000 rtnne 1 +351f 70479905 jam 5 ,mem_double_click_timer +3520 20600000 rtn + +antilost_butten_down_after_conn: +3521 6800c79a fetch 1 ,mem_butten_click_cnt +3522 1fe0fe01 pincrease 1 +3523 6000c79a store 1 ,mem_butten_click_cnt +3524 c000b527 beq 1 ,antilost_click_once +3525 c001352b beq 2 ,antilost_click_twice +3526 20600000 rtn + +antilost_click_once: +3527 2040355c call antilost_alert_off +3528 70477101 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +3529 da60476c arg mem_antl_key0_press ,regc +352a 20203544 branch antilost_prepare_data_and_send + +antilost_click_twice: +352b 70479a00 jam 0 ,mem_butten_click_cnt +352c 70477102 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +352d da60476c arg mem_antl_key0_press ,regc +352e 20403544 call antilost_prepare_data_and_send +352f 6800c79e fetch 1 ,mem_antl_lost_mode +3530 c000b551 beq 1 ,antilost_alert_on +3531 20600000 rtn + +antilost_butten_down_while_disconn: +3532 68014797 fetch 2 ,mem_antl_le_sleep_timeout +3533 60014791 store 2 ,mem_antl_le_sleep_timer +3534 2040355c call antilost_alert_off +3535 2020358f branch antilost_fast_adv_start + +antilost_cmd_parse_for_application: +3536 44e6c019 bpatch patch19_5 ,mem_patch19 +3537 204036fc call le_app_receive_data +3538 ea208000 ifetch 1 ,rega +3539 c001b53c beq opcode3_antl_start_alram ,antilost_on_of_alram +353a c003b540 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +353b 20600000 rtn + +antilost_on_of_alram: +353c 6800c79e fetch 1 ,mem_antl_lost_mode +353d c0003551 beq anti_le_alarm_off ,antilost_alert_on +353e c000b55c beq anti_le_alarm_on ,antilost_alert_off +353f 20600000 rtn + +antilost_configuration_for_alram: +3540 ea408000 ifetch 1 ,regb +3541 c000b564 beq 1 ,antilost_set_start_alarm_after_disconn +3542 c0003569 beq 0 ,antilost_set_no_alarm_after_disconn +3543 20600000 rtn + +antilost_prepare_data_and_send: +3544 44e74019 bpatch patch19_6 ,mem_patch19 +3545 6800c78b fetch 1 ,mem_client_characteristic_configuration_descriptor +3546 2feffe00 isolate1 notification_enable_bit ,pdata +3547 24608000 nrtn true +3548 1a608c06 add regc ,6 ,contr +3549 e8c10000 ifetch 2 ,contr +354a 1ff0fe00 byteswap pdata ,pdata +354b 1fe0f205 add pdata ,5 ,loopcnt +354c 1a608c03 add regc ,3 ,contr +354d 204036f0 call calc_check_sum_start +354e e0c08000 istore 1 ,contr +354f 1a622200 copy regc ,rega +3550 20207e3d branch queue_push + +antilost_alert_on: +3551 6800c759 fetch 1 ,mem_antl_power_state +3552 207a0000 rtn blank +3553 70479e01 jam 1 ,mem_antl_lost_mode +3554 da6046e9 arg mem_antl_alert_buzzer_stlye ,regc +3555 20403582 call antilost_buzzer_configuration +3556 da6046e2 arg mem_antl_alert_led_stlye ,regc +3557 20403584 call antilost_led_configuration +3558 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +3559 70478301 jam 1 ,mem_antl_key0_release + 8 +355a da60477b arg mem_antl_key0_release ,regc +355b 20203544 branch antilost_prepare_data_and_send + +antilost_alert_off: +355c 6800c79e fetch 1 ,mem_antl_lost_mode +355d 207a0000 rtn blank +355e 70479e00 jam 0 ,mem_antl_lost_mode +355f 20403586 call antilost_led_buzzer_stop_blink +3560 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +3561 70478300 jam 0 ,mem_antl_key0_release + 8 +3562 da60477b arg mem_antl_key0_release ,regc +3563 20203544 branch antilost_prepare_data_and_send + +antilost_set_start_alarm_after_disconn: +3564 70479f01 jam 1 ,mem_alarm_config +3565 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +3566 70478301 jam 1 ,mem_antl_key0_release + 8 +3567 da60477b arg mem_antl_key0_release ,regc +3568 20203544 branch antilost_prepare_data_and_send + +antilost_set_no_alarm_after_disconn: +3569 70479f00 jam 0 ,mem_alarm_config +356a 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +356b 70478300 jam 0 ,mem_antl_key0_release + 8 +356c da60477b arg mem_antl_key0_release ,regc +356d 20203544 branch antilost_prepare_data_and_send + +antilost_on_off_alarm_after_disconn: +356e 6800c79f fetch 1 ,mem_alarm_config +356f 207a0000 rtn blank +3570 20203551 branch antilost_alert_on + +antilost_notify_alarm_config_first_time: +3571 ea210000 ifetch 2 ,rega +3572 6001478b store 2 ,mem_client_characteristic_configuration_descriptor +3573 2feffe00 isolate1 notification_enable_bit ,pdata +3574 24608000 nrtn true +3575 6800c7a0 fetch 1 ,mem_alarm_config_notfy_cnt +3576 207a0000 rtn blank +3577 7047a000 jam 0 ,mem_alarm_config_notfy_cnt +3578 680447b6 fetch 8 ,mem_antl_le_interval_min +3579 60044496 store 8 ,mem_le_interval_min +357a 70479002 jam 2 ,mem_antl_send_updata_le_param_timer +357b 204035af call antilost_battery_process +357c 204035b9 call antilost_battery_calculate_end +357d 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +357e 6800c79f fetch 1 ,mem_alarm_config +357f 6000c783 store 1 ,mem_antl_key0_release + 8 +3580 da60477b arg mem_antl_key0_release ,regc +3581 20203544 branch antilost_prepare_data_and_send + +antilost_buzzer_configuration: +3582 da200001 arg 1 ,rega +3583 20203585 branch antilost_configuration_common + +antilost_led_configuration: +3584 da200000 arg 0 ,rega + +antilost_configuration_common: +3585 2020358c branch antilost_led_buzzer_style_configuration + +antilost_led_buzzer_stop_blink: +3586 da200000 arg 0 ,rega +3587 20407d19 call ui_led_blink_stop_global +3588 da200001 arg 1 ,rega +3589 20407d19 call ui_led_blink_stop_global +358a 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf +358b 202069d7 branch pwm_disable + +antilost_led_buzzer_style_configuration: +358c 20407d04 call calc_curr_struct_prt +358d df200007 arg 7 ,loopcnt +358e 20207d26 branch ui_led_set_style_global + 2 + +antilost_fast_adv_start: +358f da6046b8 arg mem_antl_fast_adv_led_style ,regc +3590 da40469a arg mem_antl_lpm_interval ,regb + +antilost_adv_start_common: +3591 20403596 call antilost_adv_interval_lpm_interval_set +3592 20403584 call antilost_led_configuration +3593 68014795 fetch 2 ,mem_antl_fast_adv_timeout +3594 60014793 store 2 ,mem_antl_fast_adv_timer +3595 202033fa branch app_ble_start_adv + +antilost_adv_interval_lpm_interval_set: +3596 ea410000 ifetch 2 ,regb +3597 60014154 store 2 ,mem_lpm_interval +3598 e8c10000 ifetch 2 ,contr +3599 60014482 store 2 ,mem_le_adv_interval +359a 20600000 rtn + +antilost_buzzer_pwm_init: +359b da200000 arg 0 ,rega +359c 204069a6 call pwm_init +359d 680347a1 fetch 6 ,mem_buzzer_pwm_conf +359e 60030a9a store 6 ,mem_pdatatemp +359f 204069ae call pwm_out_set +35a0 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf +35a1 202069d7 branch pwm_disable + +antilost_led_on_cb: +35a2 70479b01 jam 1 ,mem_antl_led_state +35a3 20600000 rtn + +antilost_led_off_cb: +35a4 70479b00 jam 0 ,mem_antl_led_state +35a5 20600000 rtn + +antilost_buzzer_off: +35a6 70479c00 jam 0 ,mem_antl_buzzer_state +35a7 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf +35a8 202069d7 branch pwm_disable + +antilost_buzzer_on: +35a9 70479c01 jam 1 ,mem_antl_buzzer_state +35aa 680347a1 fetch 6 ,mem_buzzer_pwm_conf +35ab 60030a9a store 6 ,mem_pdatatemp +35ac 202069ae branch pwm_out_set + +antilost_adc_init: +35ad 70422d00 jam 0 ,mem_adc_config_flag +35ae 202068a8 branch adc_init_data + +antilost_battery_process: +35af 204068eb call adc_set_mode +35b0 20406908 call vdd_calculate_by_mode +35b1 600147b0 store 2 ,mem_battery_current_voltage +35b2 da2047aa arg mem_battery_calculate_set ,rega +35b3 20406930 call adc_bat_percent_lowpower_out +35b4 6000c7a9 store 1 ,mem_voltage_remain_percent +35b5 c00035be beq 0 ,antilost_low_battery +35b6 1fe67c64 sub pdata ,0x64 ,null +35b7 242135bc nbranch antilost_full_battery ,positive +35b8 6000c783 store 1 ,mem_antl_key0_release + 8 + +antilost_battery_calculate_end: +35b9 70478005 jam opcode5_batter_information ,mem_antl_key0_release + 5 +35ba da60477b arg mem_antl_key0_release ,regc +35bb 20203544 branch antilost_prepare_data_and_send + +antilost_full_battery: +35bc 70478364 jam 100 ,mem_antl_key0_release + 8 +35bd 202035b9 branch antilost_battery_calculate_end + +antilost_low_battery: +35be 2020341a branch app_button_long_pressed + +car_init: +35bf 20758000 rtn wake +35c0 68108081 hfetch 1 ,core_gpio_sel1 +35c1 1fe17ef0 and_into 0xf0 ,pdata +35c2 60108081 hstore 1 ,core_gpio_sel1 +35c3 58003631 setarg car_le_before_hibernate +35c4 600141eb store 2 ,mem_cb_before_hibernate +35c5 58003633 setarg car_le_process_lpm_before +35c6 600141ed store 2 ,mem_cb_before_lpm +35c7 5800340a setarg app_enter_hibernate +35c8 600141f7 store 2 ,mem_cb_discovry_timeout +35c9 58003635 setarg car_scale_process_idle +35ca 600141f3 store 2 ,mem_cb_idle_process +35cb 5800364b setarg car_scale_process_bb_event +35cc 600141f5 store 2 ,mem_cb_bb_event_process +35cd 580033d0 setarg app_get_lpm_wake_lock +35ce 600141e9 store 2 ,mem_cb_check_wakelock +35cf 580036f6 setarg car_le_receive_data +35d0 600141f9 store 2 ,mem_cb_att_write +35d1 5800367a setarg car_le_bb_event_timer +35d2 600141fd store 2 ,mem_cb_event_timer +35d3 20402c7a call g24_head_ptr2regc +35d4 58003722 setarg car_24g_receive_data +35d5 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw +35d6 e0a10000 istore 2 ,contw +35d7 580035ed setarg car_power_off_signal +35d8 6001475b store 2 ,mem_remote_car_power_off_cb +35d9 580035ef setarg car_soft_switch_power_on_signal +35da 6001475f store 2 ,mem_remote_car_power_standby_cb +35db 44e7c019 bpatch patch19_7 ,mem_patch19 +35dc 20403628 call car_init_environment +35dd 20407e38 call queue_init +35de 70417202 jam 2 ,mem_lpm_mult +35df 7049f600 jam power_on ,mem_car_24g_received_pac +35e0 6800c7cb fetch 1 ,mem_car_config_soft_switch_enable +35e1 6000c69a store 1 ,mem_car_hard_soft_switch +35e2 c00035ee beq hard_switch ,car_hard_switch_power_on_signal +35e3 6800c7cc fetch 1 ,mem_car_config_soft_switch_gpio +35e4 6000c686 store 1 ,mem_ui_button_gpio +35e5 70436e00 jam off ,mem_le_adv_enable + +car_soft_switch_power_on_init: +35e6 2040360f call car_ui_led_init +35e7 20407cd3 call ui_button_init +35e8 20407cdd call ui_button_polling +35e9 7047f301 jam power_starting ,mem_car_power_state +35ea 68014682 fetch 2 ,mem_ui_state_map +35eb c3860000 rtnbit1 ui_state_btn_down +35ec 2020340a branch app_enter_hibernate + +car_power_off_signal: +35ed 2020360f branch car_ui_led_init + +car_hard_switch_power_on_signal: +35ee 7047f302 jam power_standby ,mem_car_power_state + +car_soft_switch_power_on_signal: +35ef 70436e01 jam on ,mem_le_adv_enable +35f0 2040360f call car_ui_led_init +35f1 da200000 arg 0 ,rega +35f2 20407d1e call ui_led_blink_start_global +35f3 58000020 setarg fast_adv_interval_value_car +35f4 204046f0 call shutter_ble_adv_interval_set + +car_le_modified_name_adv: +35f5 d8a043b7 arg mem_le_name + 7 ,contw +35f6 6800c4a0 fetch 1 ,mem_le_lap + +car_name_loop: +35f7 1fe104f0 and pdata ,0xF0 ,temp +35f8 18518400 rshift4 temp ,temp +35f9 20403609 call car_hex_to_ascii +35fa e0a88000 istoret 1 ,contw +35fb 1fe1040f and pdata ,0x0F ,temp +35fc 20403609 call car_hex_to_ascii +35fd e0a88000 istoret 1 ,contw +35fe 204057a6 call le_modified_name_att_list +35ff 6808c3af fetcht 1 ,mem_le_name_len +3600 18427200 copy temp ,loopcnt +3601 d8a04372 arg mem_le_adv_data + 2 ,contw +3602 d8c043b0 arg mem_le_name ,contr +3603 20407f01 call memcpy + +car_le_modified_name_scan: +3604 6808c3af fetcht 1 ,mem_le_name_len +3605 18427200 copy temp ,loopcnt +3606 d8a04392 arg mem_le_scan_data + 2 ,contw +3607 d8c043b0 arg mem_le_name ,contr +3608 20207f01 branch memcpy + +car_hex_to_ascii: +3609 18467c09 sub temp ,9 ,null +360a 2021360d branch car_hex_num ,positive +360b 18408437 add temp ,55 ,temp +360c 20600000 rtn + +car_hex_num: +360d 18408430 add temp ,48 ,temp +360e 20600000 rtn + +car_ui_led_init: +360f 6800c7c0 fetch 1 ,mem_car_config_blood_led1_gpio +3610 c0ffb621 bne invalid_pin_num ,car_blood_led_gpio_set + +car_ui_led_init_1: +3611 6800c7be fetch 1 ,mem_car_config_pairing_led_gpio +3612 c0ffb624 bne invalid_pin_num ,car_pairing_led_gpio_set + +car_ui_led_init_2: +3613 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio +3614 c0ffb626 bne invalid_pin_num ,car_low_voltage_led_gpio_set + +car_ui_led_init_3: +3615 6800c72c fetch 1 ,mem_car_led_num +3616 1fe27200 copy pdata ,loopcnt +3617 5800472d setarg mem_car_led_map +3618 1fe22200 copy pdata ,rega + +car_in_lp1: +3619 1a220c00 copy rega ,contr +361a e8c08000 ifetch 1 ,contr +361b 18c22200 copy contr ,rega +361c c07fb61f beq invalid_pin_num ,car_in_lp1_end +361d 1fe20400 copy pdata ,temp +361e 2040680e call gpio_config_output + +car_in_lp1_end: +361f c2003619 loop car_in_lp1 + +car_ui_led_init_end: +3620 20600000 rtn + +car_blood_led_gpio_set: +3621 680447c0 fetch 8 ,mem_car_config_blood_led1_gpio +3622 6004472f store 8 ,mem_car_led_map + 2 +3623 20203611 branch car_ui_led_init_1 + +car_pairing_led_gpio_set: +3624 6000c72d store 1 ,mem_car_led_map +3625 20203613 branch car_ui_led_init_2 + +car_low_voltage_led_gpio_set: +3626 6000c72e store 1 ,mem_car_led_map + 1 +3627 20203615 branch car_ui_led_init_3 + +car_init_environment: +3628 da200000 arg 0 ,rega +3629 204069a6 call pwm_init +362a 204037e4 call car_ir_rx_init +362b 20402c7d call g24_receive_process_init +362c 2020362d branch car_init_adc_hvin + +car_init_adc_hvin: +362d 7047cf64 jam 100 ,mem_car_notify_vdd_value_last +362e 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio +362f 6000c744 store 1 ,mem_car_style2_struct_led_gpio +3630 202068a8 branch adc_init_data + +car_le_before_hibernate: +3631 20406835 call gpio_set_before_lpm_common +3632 2020696c branch keyscan_process_lpm_before + +car_le_process_lpm_before: +3633 2020696c branch keyscan_process_lpm_before + +car_key_scan_process: +3634 20206978 branch keyscan_key_process + +car_scale_process_idle: +3635 20403642 call car_le_send_packet +3636 204037ee call car_ir_receive_process +3637 20403639 call car_g24_status_process +3638 20203634 branch car_key_scan_process + +car_g24_status_process: +3639 68014682 fetch 2 ,mem_ui_state_map +363a c3848000 rtnbit1 ui_state_ble_connected +363b 6800c9f6 fetch 1 ,mem_car_24g_received_pac +363c c000b63e beq work_paired ,car_g24_connected_event +363d 20600000 rtn + +car_g24_connected_event: +363e 6800c7ea fetch 1 ,mem_car_24g_status +363f c1008000 rtneq work_paired +3640 7047ea01 jam work_paired ,mem_car_24g_status +3641 20203654 branch car_g24_connected + +car_le_send_packet: +3642 68014682 fetch 2 ,mem_ui_state_map +3643 c4048000 rtnbit0 ui_state_ble_connected +3644 20405892 call le_fifo_check_nearly_full +3645 247a0000 nrtn blank +3646 da204718 arg mem_car_pop_queue_buff ,rega +3647 20407e54 call queue_pop +3648 24740000 nrtn user +3649 d8c04718 arg mem_car_pop_queue_buff ,contr +364a 20204746 branch le_send_notify_from_list + +car_scale_process_bb_event: +364b 1a627e00 copy regc ,pdata +364c c016b431 beq bt_evt_button_up ,app_event_button_up +364d c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed +364e c00a3651 beq bt_evt_le_connected ,car_scale_event_le_conn +364f c00ab660 beq bt_evt_le_disconnected ,car_scale_event_le_discon +3650 20600000 rtn + +car_scale_event_le_conn: +3651 58000000 setarg disable_24g +3652 20403220 call g24_store_mem_24g_mode +3653 20203656 branch car_scale_process_conn + +car_g24_connected: +3654 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count +3655 600147ed store 2 ,mem_car_24g_no_data_timeout_timer + +car_scale_process_conn: +3656 7047ce14 jam 0x14 ,mem_car_notify_vdd_timer +3657 70409100 jam 0 ,mem_lpm_mode +3658 204033f8 call app_ble_stop_adv +3659 20403416 call app_lpm_mult_enable +365a 6800c7bd fetch 1 ,mem_car_config_pairing_led_conn_status +365b c000b65e beq 0x01 ,car_pairing_led_conn_status_setting + +car_scale_process_conn_next: +365c da200000 arg 0 ,rega +365d 20207d14 branch ui_led_on_global + +car_pairing_led_conn_status_setting: +365e da200000 arg 0 ,rega +365f 20207d19 branch ui_led_blink_stop_global + +car_scale_event_le_discon: +3660 58000002 setarg rx_24g +3661 20403220 call g24_store_mem_24g_mode + +car_g24_disconnect: +3662 58000000 setarg 0 +3663 6002c79c store 5 ,mem_car_led_control +3664 58000004 setarg 4 +3665 204069d7 call pwm_disable +3666 58000005 setarg 5 +3667 204069d7 call pwm_disable +3668 58000014 setarg 20 +3669 204069d7 call pwm_disable +366a 58000015 setarg 21 +366b 204069d7 call pwm_disable +366c 58000016 setarg 22 +366d 204069d7 call pwm_disable +366e 58000007 setarg 7 +366f 204069d7 call pwm_disable +3670 20407e38 call queue_init +3671 70475e0a jam 10 ,mem_motor1_speed +3672 7047600a jam 10 ,mem_motor2_speed +3673 7047620a jam 10 ,mem_motor3_speed +3674 70417202 jam 2 ,mem_lpm_mult +3675 da200000 arg 0 ,rega +3676 20407d1e call ui_led_blink_start_global +3677 58000020 setarg fast_adv_interval_value_car +3678 204046f0 call shutter_ble_adv_interval_set +3679 202033fa branch app_ble_start_adv + +car_le_bb_event_timer: +367a 2040373b call car_moto1_blank_data_timer +367b 2040373e call car_moto2_blank_data_timer +367c 20403741 call car_moto3_blank_data_timer +367d 2040337b call app_power_timer +367e 204036c8 call car_led_control_timer +367f 204036a1 call car_notify_vdd_timer +3680 2040368a call car_24g_no_data_timeout_timer +3681 20403683 call car_ir_breakdown_timer +3682 2020368f branch car_attack_shake_timer + +car_ir_breakdown_timer: +3683 da60479a arg mem_car_ir_breakdown_check_timer ,regc +3684 da403686 arg car_ir_breakdown_timeout ,regb +3685 2020336d branch timer_single_step + +car_ir_breakdown_timeout: +3686 20403847 call car_ir_gpio_get_status +3687 24608000 nrtn true +3688 70479b01 jam 1 ,mem_car_ir_breakdown_flag +3689 20600000 rtn + +car_24g_no_data_timeout_timer: +368a da6047ed arg mem_car_24g_no_data_timeout_timer ,regc +368b da40368d arg car_24g_no_data_timer_timeout ,regb +368c 20203374 branch timer_single_step_2b + +car_24g_no_data_timer_timeout: +368d 7047ea02 jam work_search ,mem_car_24g_status +368e 20203662 branch car_g24_disconnect + +car_attack_shake_timer: +368f da6047f1 arg mem_car_attack_shake_timer ,regc +3690 da403692 arg car_attack_shake ,regb +3691 2020336d branch timer_single_step + +car_attack_shake: +3692 6800c7f2 fetch 1 ,mem_car_attack_shake_flag +3693 203a369e branch car_attack_shake_stop ,blank +3694 7047f102 jam 2 ,mem_car_attack_shake_timer +3695 7047f200 jam 0 ,mem_car_attack_shake_flag +3696 58000a02 setarg 0x0a02 +3697 60014752 store 2 ,mem_le_receive_payload +3698 6800c7b9 fetch 1 ,mem_car_config_device_select +3699 c001b69b beq device_battle_tank ,car_attack_shake_front_battle_tank + +car_attack_shake_front_battle_car: +369a 20203762 branch car_motor_control + +car_attack_shake_front_battle_tank: +369b 58000a02 setarg 0x0a02 +369c 60014754 store 2 ,mem_le_receive_payload + 2 +369d 20203762 branch car_motor_control + +car_attack_shake_stop: +369e 58000000 setarg 0 +369f 60024752 store 4 ,mem_le_receive_payload +36a0 20203762 branch car_motor_control + +car_notify_vdd_timer: +36a1 6800c7c8 fetch 1 ,mem_car_config_bat_notify_enable +36a2 207a0000 rtn blank +36a3 68014682 fetch 2 ,mem_ui_state_map +36a4 c304b6c6 bbit0 ui_state_ble_connected ,car_low_bat_led_off +36a5 da6047ce arg mem_car_notify_vdd_timer ,regc +36a6 da4036a8 arg car_notify_vdd ,regb +36a7 2020336d branch timer_single_step + +car_notify_vdd: +36a8 6800c7cd fetch 1 ,mem_car_notify_vdd_count +36a9 6000c7ce store 1 ,mem_car_notify_vdd_timer +36aa 6800c7d1 fetch 1 ,mem_car_working_flag +36ab 247a0000 nrtn blank + +car_read_hvin: +36ac 204068eb call adc_set_mode +36ad 20406908 call vdd_calculate_by_mode +36ae 600147e8 store 2 ,mem_vdd_now_vol +36af da2047e2 arg mem_vdd_calculate_set ,rega +36b0 20406930 call adc_bat_percent_lowpower_out +36b1 6808c7cf fetcht 1 ,mem_car_notify_vdd_value_last +36b2 98467c00 isub temp ,null +36b3 202136b6 branch car_notify_vdd_next2 ,positive +36b4 6000c7cf store 1 ,mem_car_notify_vdd_value_last +36b5 1fe20400 copy pdata ,temp + +car_notify_vdd_next2: +36b6 6008c7d0 storet 1 ,mem_car_notify_vdd_percent +36b7 6800c7ca fetch 1 ,mem_car_config_low_voltage_percent +36b8 98467c00 isub temp ,null +36b9 204136c1 call car_enter_low_bat ,positive +36ba 6008c7db storet 1 ,mem_notify_bat_payload +36bb df200006 arg 6 ,loopcnt +36bc d8c047d6 arg mem_notify_bat_head ,contr +36bd 204036f0 call calc_check_sum_start +36be 6000c7dc store 1 ,mem_notify_bat_check_sum +36bf da2047d3 arg mem_notify_bat_packet ,rega +36c0 20207e3d branch queue_push + +car_enter_low_bat: +36c1 6800c7d2 fetch 1 ,mem_low_bat_flag +36c2 247a0000 nrtn blank +36c3 7047d201 jam 1 ,mem_low_bat_flag +36c4 da200001 arg 1 ,rega +36c5 20207d1e branch ui_led_blink_start_global + +car_low_bat_led_off: +36c6 da200001 arg 1 ,rega +36c7 20207d19 branch ui_led_blink_stop_global + +car_led_control_timer: +36c8 da6047a4 arg mem_car_led_control_timer ,regc +36c9 da4036cb arg car_led_control ,regb +36ca 2020336d branch timer_single_step + +car_led_control: +36cb 7047a405 jam 5 ,mem_car_led_control_timer +36cc 7047a600 jam 0 ,mem_car_led_no +36cd 6800c7a5 fetch 1 ,mem_car_led_blink_status +36ce c000b6ee beq led_on ,car_led_control_blink_off +36cf c00036ec beq led_off ,car_led_control_blink_on + +car_led_control_set: +36d0 d8c0479c arg mem_car_led_control ,contr +36d1 18c22200 copy contr ,rega +36d2 df200008 arg 8 ,loopcnt + +car_led_control_timer_next: +36d3 1a220c00 copy rega ,contr +36d4 e8c08000 ifetch 1 ,contr +36d5 18c22200 copy contr ,rega +36d6 c00036e3 beq led_off ,car_led_control_off +36d7 c000b6e6 beq led_on ,car_led_control_on +36d8 c00136e9 beq led_blink ,car_led_control_blink + +car_led_control_timer_next_2: +36d9 6800c7a6 fetch 1 ,mem_car_led_no +36da 1fe0fe01 increase 1 ,pdata +36db 6000c7a6 store 1 ,mem_car_led_no +36dc c20036d3 loop car_led_control_timer_next +36dd 20600000 rtn + +car_led_switch: +36de 6800c7a6 fetch 1 ,mem_car_led_no +36df da4047c0 arg mem_car_config_blood_led_gpio ,regb +36e0 9a40a400 iadd regb ,regb +36e1 ea488000 ifetcht 1 ,regb +36e2 20600000 rtn + +car_led_control_off: +36e3 204036de call car_led_switch +36e4 20406825 call gpio_out_inactive +36e5 202036d9 branch car_led_control_timer_next_2 + +car_led_control_on: +36e6 204036de call car_led_switch +36e7 20406829 call gpio_out_active +36e8 202036d9 branch car_led_control_timer_next_2 + +car_led_control_blink: +36e9 6800c7a5 fetch 1 ,mem_car_led_blink_status +36ea c000b6e3 beq led_on ,car_led_control_off +36eb 202036e6 branch car_led_control_on + +car_led_control_blink_on: +36ec 7047a501 jam led_on ,mem_car_led_blink_status +36ed 202036d0 branch car_led_control_set + +car_led_control_blink_off: +36ee 7047a500 jam led_off ,mem_car_led_blink_status +36ef 202036d0 branch car_led_control_set + +calc_check_sum_start: +36f0 da200000 arg 0 ,rega + +calc_check_sum_loop: +36f1 e8c08000 ifetch 1 ,contr +36f2 9a20a200 iadd rega ,rega +36f3 c20036f1 loop calc_check_sum_loop + +calc_check_sum_and: +36f4 1a217eff and rega ,0xff ,pdata +36f5 20600000 rtn + +car_le_receive_data: +36f6 68008477 fetch 1 ,mem_le_att_opcode +36f7 c00936f9 beq attop_write_request ,car_le_parse_att_write_request +36f8 20600000 rtn + +car_le_parse_att_write_request: +36f9 68010478 fetch 2 ,mem_le_att_handle +36fa c00a3710 beq att_car_control_handle ,car_control_le_receive +36fb 20600000 rtn + +le_app_receive_data: +36fc 44e8401a bpatch patch1a_0 ,mem_patch1a +36fd ea228000 ifetch 5 ,rega +36fe 60028b12 store 5 ,mem_app_receive_temp +36ff 68010b12 fetch 2 ,mem_app_receive_temp +3700 d8406b5a arg le_receive_packet_head ,temp +3701 98467c00 isub temp ,null +3702 24628000 nrtn zero +3703 68010b15 fetch 2 ,mem_app_receive_temp + 3 +3704 1ff0fe00 byteswap pdata ,pdata +3705 60010b15 store 2 ,mem_app_receive_temp + 3 +3706 1fe27200 copy pdata ,loopcnt +3707 1a20a205 increase 5 ,rega +3708 1a220c00 copy rega ,contr +3709 d8a00b17 arg mem_app_receive_temp + 5 ,contw +370a 20407f01 call memcpy +370b e8c08000 ifetch 1 ,contr +370c 60008b21 store 1 ,mem_app_receive_temp + 15 +370d da200b14 arg mem_app_receive_temp + 2 ,rega +370e da400b17 arg mem_app_receive_temp + 5 ,regb +370f 20600000 rtn + +car_control_le_receive: +3710 58000000 setarg 0 +3711 6002c752 store 5 ,mem_le_receive_payload +3712 6002c757 store 5 ,mem_le_receive_payload + 5 +3713 204036fc call le_app_receive_data +3714 1a420c00 copy regb ,contr +3715 d8a04752 arg mem_le_receive_payload ,contw +3716 df20000a arg 10 ,loopcnt +3717 20407f01 call memcpy + +car_receive_cmd_select: +3718 44e8c01a bpatch patch1a_1 ,mem_patch1a +3719 ea208000 ifetch 1 ,rega +371a c001374a beq car_cmd_old_car_control ,car_drive_old +371b c001b75c beq car_cmd_old_speed_control ,car_speed_set_old +371c c0023762 beq car_cmd_l_r_motor_control ,car_motor_control +371d c002b762 beq car_cmd_f_b_motor_control ,car_motor_control +371e c00337b1 beq car_cmd_ir_control ,car_ir_data_rx_from_app +371f c003b849 beq car_cmd_led_control ,car_led_control_receive +3720 c004384c beq car_cmd_device_info ,car_info_request +3721 20600000 rtn + +car_24g_receive_data: +3722 68014682 fetch 2 ,mem_ui_state_map +3723 c3848000 rtnbit1 ui_state_ble_connected +3724 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count +3725 600147ed store 2 ,mem_car_24g_no_data_timeout_timer +3726 7049f601 jam work_paired ,mem_car_24g_received_pac +3727 5800010c setarg offset_24g_rxdata_temp_add3 +3728 204032cd call g24_set_rega +3729 20403710 call car_control_le_receive +372a 68008b14 fetch 1 ,mem_app_receive_temp + 2 +372b c002372e beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +372c c002b72e beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +372d 20600000 rtn + +car_24g_receive_data_next: +372e 6800c752 fetch 1 ,mem_le_receive_payload +372f 245a3735 ncall car_moto1_enable_blank_data_timer ,blank +3730 6800c754 fetch 1 ,mem_le_receive_payload + 2 +3731 245a3737 ncall car_moto2_enable_blank_data_timer ,blank +3732 6800c756 fetch 1 ,mem_le_receive_payload + 4 +3733 245a3739 ncall car_moto3_enable_blank_data_timer ,blank +3734 20600000 rtn + +car_moto1_enable_blank_data_timer: +3735 7049f305 jam 5 ,mem_car_moto1_blank_timer +3736 20600000 rtn + +car_moto2_enable_blank_data_timer: +3737 7049f405 jam 5 ,mem_car_moto2_blank_timer +3738 20600000 rtn + +car_moto3_enable_blank_data_timer: +3739 7049f505 jam 5 ,mem_car_moto3_blank_timer +373a 20600000 rtn + +car_moto1_blank_data_timer: +373b da6049f3 arg mem_car_moto1_blank_timer ,regc +373c da403744 arg car_moto1_blank_data ,regb +373d 2020336d branch timer_single_step + +car_moto2_blank_data_timer: +373e da6049f4 arg mem_car_moto2_blank_timer ,regc +373f da403746 arg car_moto2_blank_data ,regb +3740 2020336d branch timer_single_step + +car_moto3_blank_data_timer: +3741 da6049f5 arg mem_car_moto3_blank_timer ,regc +3742 da403748 arg car_moto3_blank_data ,regb +3743 2020336d branch timer_single_step + +car_moto1_blank_data: +3744 70475200 jam 0 ,mem_le_receive_payload +3745 20203762 branch car_motor_control + +car_moto2_blank_data: +3746 70475400 jam 0 ,mem_le_receive_payload + 2 +3747 20203762 branch car_motor_control + +car_moto3_blank_data: +3748 70475600 jam 0 ,mem_le_receive_payload + 4 +3749 20203762 branch car_motor_control + +car_drive_old: +374a 2040374c call car_left_right_control_old +374b 2020374f branch car_front_back_control_old + +car_left_right_control_old: +374c 6800c752 fetch 1 ,mem_le_receive_payload +374d 6000c75f store 1 ,mem_motor2_status +374e 20203773 branch car_motor2_control + +car_front_back_control_old: +374f 6800c75e fetch 1 ,mem_motor1_speed +3750 20403754 call car_reset_old_speed +3751 6800c753 fetch 1 ,mem_le_receive_payload + 1 +3752 6000c75d store 1 ,mem_motor1_status +3753 20203770 branch car_motor1_control + +car_reset_old_speed: +3754 c0013758 beq speed_level_2 ,car_reset_old_speed2 +3755 c001b75a beq speed_level_3 ,car_reset_old_speed3 +3756 6000c75e store 1 ,mem_motor1_speed +3757 20600000 rtn + +car_reset_old_speed2: +3758 70475e05 jam speed_level_5 ,mem_motor1_speed +3759 20600000 rtn + +car_reset_old_speed3: +375a 70475e0a jam speed_level_10 ,mem_motor1_speed +375b 20600000 rtn + +car_speed_set_old: +375c 6800c752 fetch 1 ,mem_le_receive_payload +375d 20403754 call car_reset_old_speed +375e 6800c75e fetch 1 ,mem_motor1_speed +375f 2040379e call car_motor_speed_duty_setting +3760 204037a1 call car_motor_speed_duty_transform +3761 202069c4 branch pwm_pwm0_duty_set + +car_motor_control: +3762 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag +3763 247a0000 nrtn blank +3764 68034752 fetch 6 ,mem_le_receive_payload +3765 6003475d store 6 ,mem_motor1_status +3766 6800c75e fetch 1 ,mem_motor1_speed +3767 6808c760 fetcht 1 ,mem_motor2_speed +3768 98417e00 iand temp ,pdata +3769 6808c762 fetcht 1 ,mem_motor3_speed +376a 98417e00 iand temp ,pdata +376b 205a3779 call car_motor_working_flag ,blank +376c 44e9401a bpatch patch1a_2 ,mem_patch1a +376d 20403770 call car_motor1_control +376e 20403773 call car_motor2_control +376f 20203776 branch car_motor3_control + +car_motor1_control: +3770 da404763 arg mem_motor1_pwm_set ,regb +3771 d8c0475d arg mem_motor1_status ,contr +3772 2020377b branch car_motor_status_select + +car_motor2_control: +3773 da40476b arg mem_motor2_pwm_set ,regb +3774 d8c0475f arg mem_motor2_status ,contr +3775 2020377b branch car_motor_status_select + +car_motor3_control: +3776 da404773 arg mem_motor3_pwm_set ,regb +3777 d8c04761 arg mem_motor3_status ,contr +3778 2020377b branch car_motor_status_select + +car_motor_working_flag: +3779 7047d100 jam 0 ,mem_car_working_flag +377a 20600000 rtn + +car_motor_status_select: +377b e8c08000 ifetch 1 ,contr +377c c0003787 beq motor_stop ,car_motor_stop +377d c000b780 beq go_front ,car_motor_positive +377e c0013782 beq go_back ,car_motor_negative +377f 20600000 rtn + +car_motor_positive: +3780 70477b00 jam 0 ,mem_motor_select_p_n +3781 20203783 branch car_motor_negative + 1 + +car_motor_negative: +3782 70477b01 jam 1 ,mem_motor_select_p_n +3783 e8c08000 ifetch 1 ,contr +3784 6000c77d store 1 ,mem_car_motor_speed +3785 ea440000 ifetch 8 ,regb +3786 2020378c branch car_motor_work + +car_motor_stop: +3787 ea408000 ifetch 1 ,regb +3788 204069d7 call pwm_disable +3789 1a40a401 increase 1 ,regb +378a ea408000 ifetch 1 ,regb +378b 202069d7 branch pwm_disable + +car_motor_work: +378c 6004477e store 8 ,mem_motor_pwm_pin1_set +378d 7047d101 jam 1 ,mem_car_working_flag +378e 6800c77b fetch 1 ,mem_motor_select_p_n +378f c000379a beq 0 ,car_motor_select_positive + +car_motor_select_negative: +3790 6800c77f fetch 1 ,mem_motor_pwm_pin2_set +3791 6000c780 store 1 ,mem_motor_pwm_pin_set +3792 6800c77e fetch 1 ,mem_motor_pwm_pin1_set + +car_motor_work_next: +3793 204069d7 call pwm_disable +3794 6800c77d fetch 1 ,mem_car_motor_speed +3795 2040379e call car_motor_speed_duty_setting +3796 6000c785 store 1 ,mem_motor_pwm_dute_set +3797 68034780 fetch 6 ,mem_motor_pwm_pin_set +3798 60030a9a store 6 ,mem_pdatatemp +3799 202069ae branch pwm_out_set + +car_motor_select_positive: +379a 6800c77e fetch 1 ,mem_motor_pwm_pin1_set +379b 6000c780 store 1 ,mem_motor_pwm_pin_set +379c 6800c77f fetch 1 ,mem_motor_pwm_pin2_set +379d 20203793 branch car_motor_work_next + +car_motor_speed_duty_setting: +379e 1feffe05 mul32 pdata ,5 ,pdata +379f 1fe0fe32 add pdata ,50 ,pdata +37a0 20600000 rtn + +car_motor_speed_duty_transform: +37a1 d8402ee0 arg 12000 ,temp +37a2 984ffe00 imul32 temp ,pdata +37a3 1fe6fc64 div pdata ,100 +37a4 20407f86 call wait_div_end +37a5 18078400 quotient temp +37a6 18422200 copy temp ,rega +37a7 58002ee0 setarg 12000 +37a8 98462400 isub temp ,regb +37a9 20600000 rtn + +car_ir_init: +37aa 68108082 hfetch 1 ,core_gpio_sel2 +37ab 79207e02 set1 2 ,pdata +37ac 60108082 hstore 1 ,core_gpio_sel2 +37ad 5800009e setarg 158 +37ae 60110068 hstore 2 ,core_pwm_pcnt4 +37af 6011006a hstore 2 ,core_pwm_ncnt4 +37b0 20600000 rtn + +car_ir_data_rx_from_app: +37b1 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag +37b2 247a0000 nrtn blank +37b3 68014752 fetch 2 ,mem_le_receive_payload +37b4 60014787 store 2 ,mem_ir_data +37b5 6800c7ea fetch 1 ,mem_car_24g_status +37b6 c080b7b9 bne work_paired ,car_ir_data_tx +37b7 680144a0 fetch 2 ,mem_le_lap +37b8 60014787 store 2 ,mem_ir_data + +car_ir_data_tx: +37b9 44e9c01a bpatch patch1a_3 ,mem_patch1a +37ba 204037aa call car_ir_init +37bb 204037dc call car_ir_enable +37bc 5800bb80 setarg 48000 +37bd 20402a8f call sleep +37be 204037e0 call car_ir_disable +37bf 58001c20 setarg 7200 +37c0 20402a8f call sleep +37c1 df200010 arg 16 ,loopcnt + +car_ir_send_loop: +37c2 204037dc call car_ir_enable +37c3 68014787 fetch 2 ,mem_ir_data +37c4 c28037c9 bbit1 0 ,car_ir_is_bit1 +37c5 58001c20 setarg 7200 +37c6 20402a8f call sleep +37c7 204037e0 call car_ir_disable +37c8 202037cc branch car_ir_wait_finish + +car_ir_is_bit1: +37c9 58003840 setarg 14400 +37ca 20402a8f call sleep +37cb 204037e0 call car_ir_disable + +car_ir_wait_finish: +37cc 58001c20 setarg 7200 +37cd 20402a8f call sleep +37ce 68014787 fetch 2 ,mem_ir_data +37cf 1fe37e00 rshift pdata ,pdata +37d0 60014787 store 2 ,mem_ir_data +37d1 c20037c2 loop car_ir_send_loop +37d2 7047f102 jam 2 ,mem_car_attack_shake_timer +37d3 7047f201 jam 1 ,mem_car_attack_shake_flag +37d4 58000a01 setarg 0x0a01 +37d5 60014752 store 2 ,mem_le_receive_payload +37d6 6800c7b9 fetch 1 ,mem_car_config_device_select +37d7 c001b7d9 beq device_battle_tank ,car_attack_shake_back_battle_tank + +car_attack_shake_back_battle_car: +37d8 20203762 branch car_motor_control + +car_attack_shake_back_battle_tank: +37d9 58000a01 setarg 0x0a01 +37da 60014754 store 2 ,mem_le_receive_payload + 2 +37db 20203762 branch car_motor_control + +car_ir_enable: +37dc 68108085 hfetch 1 ,core_gpio_key2 +37dd 1fe1fe40 or_into 0x40 ,pdata +37de 60108085 hstore 1 ,core_gpio_key2 +37df 20600000 rtn + +car_ir_disable: +37e0 68108085 hfetch 1 ,core_gpio_key2 +37e1 1fe17ebf and_into 0xbf ,pdata +37e2 60108085 hstore 1 ,core_gpio_key2 +37e3 20600000 rtn + +car_ir_rx_init: +37e4 6800c7bb fetch 1 ,mem_car_config_ir_enable +37e5 c1000000 rtneq 0x00 +37e6 20402c65 call lpm_disable_exen_output +37e7 6808c7bc fetcht 1 ,mem_car_config_ir_rx_gpio +37e8 6008c786 storet 1 ,mem_ir_rx_gpio +37e9 204067fb call gpio_config_input +37ea 20403847 call car_ir_gpio_get_status +37eb 24608000 nrtn true +37ec 70479a01 jam 1 ,mem_car_ir_breakdown_check_timer +37ed 20600000 rtn + +car_ir_receive_process: +37ee 6800c7bb fetch 1 ,mem_car_config_ir_enable +37ef c1000000 rtneq flag_ir_disable +37f0 6800c79b fetch 1 ,mem_car_ir_breakdown_flag +37f1 247a0000 nrtn blank +37f2 68014682 fetch 2 ,mem_ui_state_map +37f3 c284b7f6 bbit1 ui_state_ble_connected ,car_ir_receive_process_next +37f4 6800c7ea fetch 1 ,mem_car_24g_status +37f5 c1808000 rtnne work_paired + +car_ir_receive_process_next: +37f6 44ea401a bpatch patch1a_4 ,mem_patch1a +37f7 20403847 call car_ir_gpio_get_status +37f8 24608000 nrtn true +37f9 58008ca0 setarg 36000 +37fa 20402a8f call sleep +37fb 20403847 call car_ir_gpio_get_status +37fc 24608000 nrtn true +37fd 2040383f call car_ir_clk_get + +car_ir_packet_head_wait_end: +37fe 20403842 call car_ir_clk_check +37ff 24610000 nrtn positive +3800 20403847 call car_ir_gpio_get_status +3801 2020b7fe branch car_ir_packet_head_wait_end ,true +3802 da200000 arg 0 ,rega +3803 df200010 arg 16 ,loopcnt +3804 2040383f call car_ir_clk_get + +car_ir_receive_process_loop: +3805 20403842 call car_ir_clk_check +3806 24610000 nrtn positive +3807 20403847 call car_ir_gpio_get_status +3808 2420b805 nbranch car_ir_receive_process_loop ,true +3809 58002a30 setarg 10800 +380a 20402a8f call sleep +380b 20403847 call car_ir_gpio_get_status +380c 2020b812 branch car_ir_get_bit1 ,true + +car_ir_get_bit0: +380d 58000000 setarg 0 +380e 1a232200 rshift rega ,rega +380f 9a21a200 ior rega ,rega +3810 c2003805 loop car_ir_receive_process_loop +3811 2020381b branch car_ir_receive_process_end + +car_ir_get_bit1: +3812 58008000 setarg 0x8000 +3813 1a232200 rshift rega ,rega +3814 9a21a200 ior rega ,rega +3815 2040383f call car_ir_clk_get + +car_ir_get_bit1_wait_low_end: +3816 20403842 call car_ir_clk_check +3817 24610000 nrtn positive +3818 20403847 call car_ir_gpio_get_status +3819 2020b816 branch car_ir_get_bit1_wait_low_end ,true +381a c2003805 loop car_ir_receive_process_loop + +car_ir_receive_process_end: +381b 44eac01a bpatch patch1a_5 ,mem_patch1a +381c 1a227e00 copy rega ,pdata +381d 60014789 store 2 ,mem_ir_rx_buf +381e 60014797 store 2 ,mem_ir_notify_data + 8 +381f 6800c7ea fetch 1 ,mem_car_24g_status +3820 c000b827 beq work_paired ,car_ir_24g_receive_attack + +car_ir_data_notify: +3821 df200007 arg 0x07 ,loopcnt +3822 d8c04792 arg mem_ir_notify_data_head ,contr +3823 204036f0 call calc_check_sum_start +3824 6000c799 store 1 ,mem_ir_notify_data_check_sum +3825 da20478f arg mem_ir_notify_data ,rega +3826 20207e3d branch queue_push + +car_ir_24g_receive_attack: +3827 6800c7ef fetch 1 ,mem_car_24g_ir_receive_attack_count +3828 1fe0fe01 increase 1 ,pdata +3829 6000c7ef store 1 ,mem_car_24g_ir_receive_attack_count +382a 1fe6fc02 div pdata ,2 +382b 20407f86 call wait_div_end +382c 18078400 quotient temp +382d 18077e00 remainder pdata +382e 243a3838 nbranch car_ir_24g_receive_attack_blink ,blank + +car_ir_24g_receive_attack_off: +382f 6800c7bf fetch 1 ,mem_car_config_led_num +3830 98467c00 isub temp ,null +3831 2042b83d call car_ir_24g_go_die ,zero +3832 dfe0479c arg mem_car_led_control ,pdata +3833 184085ff increase -1 ,temp +3834 9840a200 iadd temp ,rega +3835 dfe00000 arg 0 ,pdata +3836 e2208000 istore 1 ,rega +3837 20600000 rtn + +car_ir_24g_receive_attack_blink: +3838 dfe0479c arg mem_car_led_control ,pdata +3839 9840a200 iadd temp ,rega +383a dfe00002 arg 2 ,pdata +383b e2208000 istore 1 ,rega +383c 20600000 rtn + +car_ir_24g_go_die: +383d 7047f001 jam 1 ,mem_car_24g_go_die_flag +383e 20600000 rtn + +car_ir_clk_get: +383f 1c427e00 copy clkn_bt ,pdata +3840 6002478b store 4 ,mem_ir_receive_clkn +3841 20600000 rtn + +car_ir_clk_check: +3842 1c427e00 copy clkn_bt ,pdata +3843 680a478b fetcht 4 ,mem_ir_receive_clkn +3844 98467e00 isub temp ,pdata +3845 1fe67cc8 sub pdata ,200 ,null +3846 20600000 rtn + +car_ir_gpio_get_status: +3847 6808c786 fetcht 1 ,mem_ir_rx_gpio +3848 2020681d branch gpio_get_bit + +car_led_control_receive: +3849 68044752 fetch 8 ,mem_le_receive_payload +384a 6004479c store 8 ,mem_car_led_control +384b 20600000 rtn + +car_info_request: +384c 6800c7b9 fetch 1 ,mem_car_config_device_select +384d 6000c7af store 1 ,mem_car_info_request_payload +384e 6800c7ba fetch 1 ,mem_car_config_motor_layout +384f 6000c7b0 store 1 ,mem_car_info_request_payload + 1 +3850 6800c7bb fetch 1 ,mem_car_config_ir_enable +3851 6000c7b1 store 1 ,mem_car_info_request_payload + 2 +3852 df20000d arg 13 ,loopcnt +3853 d8c047aa arg mem_car_info_request_head ,contr +3854 204036f0 call calc_check_sum_start +3855 6000c7b7 store 1 ,mem_car_info_request_checksum +3856 da2047a7 arg mem_car_info_request ,rega +3857 20207e3d branch queue_push + +light_init: +3858 204065c2 call clear_eeprom_size_2k +3859 7046f67a jam 0x7a ,mem_curr_packet_num +385a 2040386d call light_load_controler_list +385b 20403867 call light_init_crr_cmd_count +385c 58003860 setarg light_pairing_timer +385d 600141fd store 2 ,mem_cb_event_timer +385e da200000 arg 0 ,rega +385f 202069a6 branch pwm_init + +light_pairing_timer: +3860 680146a1 fetch 2 ,mem_light_pairing_timer +3861 207a0000 rtn blank +3862 1fe0ffff increase -1 ,pdata +3863 600146a1 store 2 ,mem_light_pairing_timer +3864 c1800000 rtnne 0 +3865 7046a000 jam 0 ,mem_light_pairing_enable +3866 20600000 rtn + +light_init_crr_cmd_count: +3867 44eb401a bpatch patch1a_6 ,mem_patch1a +3868 6800c6a4 fetch 1 ,mem_light_next_record +3869 1fe67c28 sub pdata ,40 ,null +386a 20610000 rtn positive +386b 7046a400 jam 0 ,mem_light_next_record +386c 20600000 rtn + +light_load_controler_list: +386d da2046a4 arg mem_light_next_record ,rega +386e da400000 arg 0 ,regb +386f d8400051 arg 81 ,temp +3870 202065df branch iicd_read_eep_data + +light_find_controler_pairing: +3871 78547c00 disable user +3872 6800c6a3 fetch 1 ,mem_light_cnum +3873 1fe27200 copy pdata ,loopcnt +3874 da2046a5 arg mem_light_clist ,rega +3875 1a622400 copy regc ,regb + +light_find_controler_pairing_loop: +3876 44ebc01a bpatch patch1a_7 ,mem_patch1a +3877 2040387c call light_compare_addr_record +3878 2022ffe7 branch enable_user ,zero + +light_find_single_pairing_diff: +3879 1a20a204 increase 4 ,rega +387a c2003876 loop light_find_controler_pairing_loop +387b 20600000 rtn + +light_compare_addr_record: +387c 44ec401b bpatch patch1b_0 ,mem_patch1b +387d ea218000 ifetch 3 ,rega +387e ea498000 ifetcht 3 ,regb +387f 98467c00 isub temp ,null +3880 20600000 rtn + +light_compare_single_record: +3881 44ecc01b bpatch patch1b_1 ,mem_patch1b +3882 ea218000 ifetch 3 ,rega +3883 ea498000 ifetcht 3 ,regb +3884 98467c00 isub temp ,null +3885 24628000 nrtn zero +3886 e8c08000 ifetch 1 ,contr +3887 1fe67c00 sub pdata ,0 ,null +3888 20628000 rtn zero +3889 1a208c03 add rega ,3 ,contr +388a e8c88000 ifetcht 1 ,contr +388b 98467c00 isub temp ,null +388c 20600000 rtn + +light_find_controler_cmd: +388d 44ed401b bpatch patch1b_2 ,mem_patch1b +388e 78547c00 disable user +388f 6800c6a3 fetch 1 ,mem_light_cnum +3890 1fe27200 copy pdata ,loopcnt +3891 da2046a5 arg mem_light_clist ,rega +3892 1a622400 copy regc ,regb + +light_find_controler_cmd_loop: +3893 20403881 call light_compare_single_record +3894 2022ffe7 branch enable_user ,zero +3895 1a20a204 increase 4 ,rega +3896 c2003893 loop light_find_controler_cmd_loop +3897 20600000 rtn + +light_recv_adv: +3898 68008004 fetch 1 ,mem_le_scanrsp_rcv +3899 1fe0fe01 increase 1 ,pdata +389a 60008004 store 1 ,mem_le_scanrsp_rcv +389b da6002e5 arg mem_le_rxbuf + 12 ,regc + +light_anylize_command: +389c ea610000 ifetch 2 ,regc +389d d84055aa arg 0x55aa ,temp +389e 98467c00 isub temp ,null +389f 24628000 nrtn zero +38a0 18c22600 copy contr ,regc +38a1 ea698000 ifetcht 3 ,regc +38a2 58ffffff setarg 0xffffff +38a3 98467c00 isub temp ,null +38a4 2022b8a8 branch light_parse_cmd ,zero +38a5 2040388d call light_find_controler_cmd +38a6 203438a8 branch light_parse_cmd ,user +38a7 20600000 rtn + +light_parse_cmd: +38a8 44edc01b bpatch patch1b_3 ,mem_patch1b +38a9 1a60a604 increase 4 ,regc +38aa ea608000 ifetch 1 ,regc +38ab 6808c6f6 fetcht 1 ,mem_curr_packet_num +38ac 98467c00 isub temp ,null +38ad 20628000 rtn zero +38ae 6000c6f6 store 1 ,mem_curr_packet_num +38af 68008003 fetch 1 ,mem_le_req_rcv +38b0 1fe0fe01 increase 1 ,pdata +38b1 60008003 store 1 ,mem_le_req_rcv +38b2 1a60a601 increase 1 ,regc +38b3 ea608000 ifetch 1 ,regc +38b4 6000c6f5 store 1 ,mem_light_crr_cmd_count +38b5 1fe27200 copy pdata ,loopcnt +38b6 207a0000 rtn blank + +light_parse_cmd_loop: +38b7 e8c08000 ifetch 1 ,contr +38b8 c00038c2 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 +38b9 c000b8cf beq light_cmd_pwm1 ,light_parse_cmd_pwm1 +38ba c00138d4 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 +38bb c001b8d9 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 +38bc c00238de beq light_cmd_pwm4 ,light_parse_cmd_pwm4 +38bd c002b8e3 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 +38be c00338e8 beq light_cmd_auto_mode ,light_parse_auto_mode +38bf c07fb8ea beq light_cmd_pairing ,light_parse_pairing +38c0 c20038b7 loop light_parse_cmd_loop +38c1 20600000 rtn + +light_parse_cmd_pwm0: +38c2 18c22600 copy contr ,regc +38c3 6800c69a fetch 1 ,mem_light_pwm0 +38c4 60008a9a store 1 ,mem_pdatatemp +38c5 d8400000 arg 0 ,temp + +light_parse_cmd_pwm_common: +38c6 60088a9b storet 1 ,mem_pdatatemp + 1 +38c7 58002710 setarg 10000 +38c8 60018a9c store 3 ,mem_pdatatemp + 2 +38c9 ea608000 ifetch 1 ,regc +38ca 60008a9f store 1 ,mem_pdatatemp + 5 +38cb 204069ae call pwm_out_set +38cc 1a610c01 and regc ,1 ,contr +38cd c20038b7 loop light_parse_cmd_loop +38ce 20600000 rtn + +light_parse_cmd_pwm1: +38cf 1a620c00 copy regc ,contr +38d0 6800c69b fetch 1 ,mem_light_pwm1 +38d1 60008a9a store 1 ,mem_pdatatemp +38d2 d8400001 arg 1 ,temp +38d3 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm2: +38d4 1a620c00 copy regc ,contr +38d5 6800c69c fetch 1 ,mem_light_pwm2 +38d6 60008a9a store 1 ,mem_pdatatemp +38d7 d8400002 arg 2 ,temp +38d8 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm3: +38d9 1a620c00 copy regc ,contr +38da 6800c69d fetch 1 ,mem_light_pwm3 +38db 60008a9a store 1 ,mem_pdatatemp +38dc d8400003 arg 3 ,temp +38dd 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm4: +38de 1a620c00 copy regc ,contr +38df 6800c69e fetch 1 ,mem_light_pwm4 +38e0 60008a9a store 1 ,mem_pdatatemp +38e1 d8400004 arg 4 ,temp +38e2 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm5: +38e3 1a620c00 copy regc ,contr +38e4 6800c69f fetch 1 ,mem_light_pwm5 +38e5 60008a9a store 1 ,mem_pdatatemp +38e6 d8400005 arg 5 ,temp +38e7 202038c6 branch light_parse_cmd_pwm_common + +light_parse_auto_mode: +38e8 e8c08000 ifetch 1 ,contr +38e9 20600000 rtn + +light_parse_pairing: +38ea 18c22600 copy contr ,regc +38eb 6800c6a0 fetch 1 ,mem_light_pairing_enable +38ec c080b8ee bne 1 ,light_parse_pairing_abandon +38ed 204038f0 call update_controler_list + +light_parse_pairing_abandon: +38ee 1a610c04 and regc ,4 ,contr +38ef 20600000 rtn + +update_controler_list: +38f0 44ee401b bpatch patch1b_4 ,mem_patch1b +38f1 20403871 call light_find_controler_pairing +38f2 203438fe branch update_conrtoler_list_found ,user +38f3 6800c6a4 fetch 1 ,mem_light_next_record +38f4 1fe20400 copy pdata ,temp +38f5 1fe0fe01 increase 1 ,pdata +38f6 6000c6a4 store 1 ,mem_light_next_record +38f7 20403867 call light_init_crr_cmd_count +38f8 184b8400 lshift2 temp ,temp +38f9 580046a5 setarg mem_light_clist +38fa 98408a00 iadd temp ,contw +38fb ea620000 ifetch 4 ,regc +38fc e0a20000 istore 4 ,contw +38fd 20203903 branch update_conrtoler_store_list + +update_conrtoler_list_found: +38fe 1a608c03 add regc ,3 ,contr +38ff e8c08000 ifetch 1 ,contr +3900 207a0000 rtn blank +3901 ea620000 ifetch 4 ,regc +3902 e2220000 istore 4 ,rega + +update_conrtoler_store_list: +3903 da2046a4 arg mem_light_next_record ,rega +3904 da400000 arg 0 ,regb +3905 d8400051 arg 81 ,temp +3906 20206606 branch iicd_write_eep_data + +lightc_init: +3907 6808c69a fetcht 1 ,mem_lightc_led_gpio +3908 20406825 call gpio_out_inactive +3909 20600000 rtn + +lightc_dispatch: +390a 6808c69a fetcht 1 ,mem_lightc_led_gpio +390b 20406829 call gpio_out_active +390c 6808c69a fetcht 1 ,mem_lightc_led_gpio +390d 20406825 call gpio_out_inactive +390e 2040391d call lightc_start_adv +390f 6800c6a7 fetch 1 ,mem_adv_time +3910 247a0000 nrtn blank +3911 20402c29 call lpm_write_gpio_wakeup +3912 68120138 hfetch 4 ,core_lpm_ctrl +3913 793ffe0f set0 15 ,pdata +3914 6012004c hstore 4 ,core_lpm_reg +3915 20402c21 call lpm_write_ctrl +3916 d85fffff arg param_hibernate_clks ,temp +3917 20202b2a branch lpm_sleep + +lightc_adv: +3918 6800c6a7 fetch 1 ,mem_adv_time +3919 203a56f9 branch le_adv_loop_tx ,blank +391a 1fe0ffff increase -1 ,pdata +391b 6000c6a7 store 1 ,mem_adv_time +391c 202056f9 branch le_adv_loop_tx + +lightc_start_adv: +391d 1feffe14 mul32 pdata ,20 ,pdata +391e d8c046a8 arg mem_cmd0_string ,contr +391f 98c08c00 iadd contr ,contr +3920 e8c08000 ifetch 1 ,contr +3921 207a0000 rtn blank +3922 1fe22200 copy pdata ,rega +3923 1a227200 copy rega ,loopcnt +3924 d8a04372 arg mem_le_adv_data + 2 ,contw +3925 20407f01 call memcpy +3926 1a227e00 copy rega ,pdata +3927 1fe0fe02 increase 2 ,pdata +3928 6000c36f store 1 ,mem_le_adv_data_len +3929 20600000 rtn + +module_init: +392a 20758000 rtn wake +392b 204057a3 call le_modified_name +392c 204068a8 call adc_init_data +392d 58003982 setarg module_process_idle +392e 600141f3 store 2 ,mem_cb_idle_process +392f 5800396e setarg module_bt_conn_process +3930 600141f1 store 2 ,mem_cb_bt_process +3931 58003986 setarg module_process_bb_event +3932 600141f5 store 2 ,mem_cb_bb_event_process +3933 5800396d setarg module_le_conn_process +3934 600141ef store 2 ,mem_cb_le_process +3935 58003969 setarg module_lpm_lock +3936 600141e9 store 2 ,mem_cb_check_wakelock +3937 58003ab7 setarg module_hci_cmd_transmit_le_notify +3938 600141fb store 2 ,mem_cb_ble_transmit +3939 58003c32 setarg module_hci_event_receive_spp_data +393a 6001456f store 2 ,mem_cb_receive_spp_data +393b 58003cc2 setarg module_le_receive_data +393c 600141f9 store 2 ,mem_cb_att_write +393d 58003cd7 setarg module_bb_event_timer +393e 600141fd store 2 ,mem_cb_event_timer +393f 2040397f call module_spp_clear_last_transmite_clock +3940 44eec01b bpatch patch1b_5 ,mem_patch1b +3941 20403945 call module_lpm_uart_init +3942 20403964 call module_gpio_init +3943 20402c6f call check_module_disabled +3944 20203c48 branch module_hci_event_enter_standby_mode + +module_lpm_uart_init: +3945 680246aa fetch 4 ,mem_module_uart_rx_buffer +3946 60120054 hstore 4 ,core_uart_rsaddr +3947 680246ae fetch 4 ,mem_module_uart_tx_buffer +3948 6012005a hstore 4 ,core_uart_tsaddr +3949 68108081 hfetch 1 ,core_gpio_sel1 +394a 1fe1fe04 or_into 0x04 ,pdata +394b 1fe17efc and_into 0xfc ,pdata +394c 60108081 hstore 1 ,core_gpio_sel1 +394d 70806200 hjam 0x00 ,core_uart_ctrl +394e 680146aa fetch 2 ,mem_module_uart_rx_buffer +394f 60110058 hstore 2 ,core_uart_rrptr +3950 680146ae fetch 2 ,mem_module_uart_tx_buffer +3951 6011005e hstore 2 ,core_uart_twptr +3952 60110060 hstore 2 ,core_uart_trptrp +3953 68120078 hfetch 4 ,core_gpio_pu0 +3954 79207e07 set1 7 ,pdata +3955 60120078 hstore 4 ,core_gpio_pu0 +3956 68110050 hfetch 2 ,core_clkoff +3957 793ffe0f set0 clock_off_uart ,pdata +3958 60110050 hstore 2 ,core_clkoff +3959 204066ce call uart_set_baud_by_mem +395a 70804300 hjam uartclk_crystal ,core_uart_clksel +395b 70806281 hjam uart_ctrl_h4 ,core_uart_ctrl +395c 6800c6bf fetch 1 ,mem_module_flag +395d 2feffe00 isolate1 module_flag_uart_flow_control ,pdata +395e 68188062 hfetcht 1 ,core_uart_ctrl +395f 79208404 setflag true ,4 ,temp +3960 60188062 hstoret 1 ,core_uart_ctrl +3961 20600000 rtn + +module_lpm_init: +3962 2040397f call module_spp_clear_last_transmite_clock +3963 20203945 branch module_lpm_uart_init + +module_gpio_init: +3964 6808c69e fetcht 1 ,mem_module_connect_state_gpio +3965 2040680e call gpio_config_output +3966 204039e6 call module_set_conn_pin_low +3967 6808c69c fetcht 1 ,mem_module_wake_up_gpio +3968 202067fb branch gpio_config_input + +module_lpm_lock: +3969 6808c69c fetcht 1 ,mem_module_wake_up_gpio +396a 2040681d call gpio_get_bit +396b 2420b3d2 nbranch app_put_lpm_wake_lock ,true +396c 202033d0 branch app_get_lpm_wake_lock + +module_le_conn_process: +396d 20600000 rtn + +module_bt_conn_process: +396e 20403970 call module_spp_enter_sniff +396f 20203ce9 branch module_control_air_flow + +module_spp_enter_sniff: +3970 6800c682 fetch 1 ,mem_ui_state_map +3971 c302397f bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +3972 44ef401b bpatch patch1b_6 ,mem_patch1b +3973 58003eff setarg 0x3eff +3974 680a46c5 fetcht 4 ,mem_last_transmite_clock +3975 98408400 iadd temp ,temp +3976 1c427e00 copy clkn_bt ,pdata +3977 98467c00 isub temp ,null +3978 24610000 nrtn positive +3979 68014682 fetch 2 ,mem_ui_state_map +397a c282b97f bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +397b 6800c6bf fetch 1 ,mem_module_flag +397c c3830000 rtnbit1 moudle_task_sniff +397d 20403cec call module_set_sniff_task_flag +397e 2040340e call app_bt_enter_sniff + +module_spp_clear_last_transmite_clock: +397f 1c427e00 copy clkn_bt ,pdata +3980 600246c5 store 4 ,mem_last_transmite_clock +3981 20600000 rtn + +module_process_idle: +3982 20403ce9 call module_control_air_flow +3983 2040526e call l2cap_malloc_is_fifo_full +3984 247a0000 nrtn blank +3985 202039eb branch module_process + +module_process_bb_event: +3986 1a627e00 copy regc ,pdata +3987 c000b9d4 beq bt_evt_bb_connected ,module_process_bb_conn +3988 c00139a3 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +3989 c00239d7 beq bt_evt_reconn_failed ,module_process_reconn_fail +398a c002b9c4 beq bt_evt_setup_complete ,module_process_setup_complete +398b c00439aa beq bt_evt_spp_connected ,module_process_spp_connected +398c c004b9b1 beq bt_evt_spp_disconnected ,module_process_spp_disconnected +398d c00539c9 beq bt_evt_pincode_req ,module_process_evt_pincode_req +398e c005b9b6 beq bt_evt_enter_sniff ,module_process_enter_sniff +398f c00639c2 beq bt_evt_exit_sniff ,module_process_exit_sniff +3990 c009b9d7 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +3991 c00a39cf beq bt_evt_le_connected ,module_process_le_conn +3992 c00ab9c6 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +3993 c010b9ca beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +3994 c011b9cb beq bt_evt_unsniff_accept ,module_process_unsniff_accept +3995 c01239ce beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +3996 c0183c8a beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +3997 c018bc8c beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +3998 c0193c9a beq bt_evt_le_start_enc ,module_hci_event_start_enc +3999 c019bc98 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +399a c01a3c84 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +399b c01abc73 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +399c c01b3c82 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +399d c01bbc8e beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +399e c01c3c90 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +399f c01dbca1 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey +39a0 c01ebc6a beq bt_evt_store_nvram ,module_hci_event_store_device +39a1 c020b9d9 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +39a2 20600000 rtn + +module_process_bb_event_disconned: +39a3 2040397f call module_spp_clear_last_transmite_clock +39a4 6800c665 fetch 1 ,mem_flag_pairing_state +39a5 245a3c8e ncall module_hci_event_bt_pairing_fail ,blank +39a6 204039d7 call module_disconn_start +39a7 68014682 fetch 2 ,mem_ui_state_map +39a8 c4020000 rtnbit0 ui_state_bt_spp_conn +39a9 202039b1 branch module_spp_disconnected + +module_process_spp_connected: +39aa 68014682 fetch 2 ,mem_ui_state_map +39ab 79207e04 set1 ui_state_bt_spp_conn ,pdata +39ac 60014682 store 2 ,mem_ui_state_map +39ad 6800c6a7 fetch 1 ,mem_module_spp_lpm_mult +39ae 6000c172 store 1 ,mem_lpm_mult +39af 204039e6 call module_set_conn_pin_low +39b0 20203c1d branch module_hci_event_spp_connect + +module_process_spp_disconnected: + +module_spp_disconnected: +39b1 68014682 fetch 2 ,mem_ui_state_map +39b2 c4020000 rtnbit0 ui_state_bt_spp_conn +39b3 793ffe04 set0 ui_state_bt_spp_conn ,pdata +39b4 60014682 store 2 ,mem_ui_state_map +39b5 20203c21 branch module_hci_event_spp_disconnect + +module_process_enter_sniff: + +module_sniff_param_check: +39b6 2040397f call module_spp_clear_last_transmite_clock +39b7 68014042 fetch 2 ,mem_context + coffset_tsniff +39b8 1fe37e00 rshift pdata ,pdata +39b9 680941e3 fetcht 2 ,mem_sniff_param_interval +39ba 98467c00 isub temp ,null +39bb 2422b9bd nbranch module_sniff_param_check_unsniff ,zero +39bc 20203416 branch app_lpm_mult_enable + +module_sniff_param_check_unsniff: +39bd 6800c6bf fetch 1 ,mem_module_flag +39be c3828000 rtnbit1 moudle_task_unsniff +39bf 68110112 hfetch 2 ,core_uart_rxitems +39c0 245a3cf0 ncall module_set_unsniff_task_flag ,blank +39c1 2020340c branch app_bt_sniff_exit + +module_process_exit_sniff: +39c2 20403cee call module_clear_sniff_task_flag +39c3 20203418 branch app_lpm_mult_disable + +module_process_setup_complete: +39c4 2040397f call module_spp_clear_last_transmite_clock +39c5 202039dd branch module_conn_start + +module_process_bb_even_le_disconn: +39c6 20405816 call le_clr_config_more_data +39c7 204039d7 call module_disconn_start +39c8 20203c23 branch module_hci_event_le_disconnect + +module_process_evt_pincode_req: +39c9 202033dd branch app_bt_set_pincode + +module_process_sniff_not_accept: +39ca 20203cee branch module_clear_sniff_task_flag + +module_process_unsniff_accept: +39cb 6800c6bf fetch 1 ,mem_module_flag +39cc c302b40e bbit0 moudle_task_unsniff ,app_bt_enter_sniff +39cd 20203cf2 branch module_clear_unsniff_task_flag + +module_process_unsniff_not_accept: +39ce 20203cf2 branch module_clear_unsniff_task_flag + +module_process_le_conn: +39cf 204058ba call le_send_att_exchange_mtu_requset +39d0 204039dd call module_conn_start +39d1 6800c6a8 fetch 1 ,mem_module_le_lpm_mult +39d2 6000c172 store 1 ,mem_lpm_mult +39d3 20203c1f branch module_hci_event_le_connect + +module_process_bb_conn: +39d4 70466100 jam 0 ,mem_flag_mode_ssp_pin +39d5 20403cee call module_clear_sniff_task_flag +39d6 20203cf2 branch module_clear_unsniff_task_flag + +module_process_page_time_out: + +module_process_reconn_fail: + +module_disconn_start: +39d7 20403a52 call module_start_adv_discovery_by_command +39d8 202039db branch module_set_conn_pin_high + +module_process_ble_ltk_lost: +39d9 20405cc9 call le_send_reject_ind +39da 20205b02 branch le_send_smp_security_request + +module_set_conn_pin_high: +39db 6808c69e fetcht 1 ,mem_module_connect_state_gpio +39dc 20206829 branch gpio_out_active + +module_conn_start: +39dd 204039df call module_stop_adv_discovery +39de 202039e6 branch module_set_conn_pin_low + +module_stop_adv_discovery: +39df 6800c6a1 fetch 1 ,mem_module_state +39e0 2feffe00 isolate1 moudle_state_bt_bit ,pdata +39e1 2040b3f0 call app_bt_stop_discovery ,true +39e2 6800c6a1 fetch 1 ,mem_module_state +39e3 2feffe01 isolate1 moudle_state_ble_bit ,pdata +39e4 2040b3f8 call app_ble_stop_adv ,true +39e5 20600000 rtn + +module_set_conn_pin_low: +39e6 6808c69e fetcht 1 ,mem_module_connect_state_gpio +39e7 20206825 branch gpio_out_inactive + +module_process_with_credit: +39e8 6800c56b fetch 1 ,mem_credit_flag +39e9 c1000000 rtneq credit_disable +39ea 20206c28 branch rfcomm_send_uih_without_payload + +module_process: +39eb 6810810c hfetch 1 ,core_uart_status +39ec c281b9e8 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +39ed 204066cb call uartd_prepare_rx +39ee e8608000 ifetch 1 ,contru +39ef c080ba01 bne 0x01 ,module_hci_in_excp +39f0 68110112 hfetch 2 ,core_uart_rxitems +39f1 1fe67c02 sub pdata ,2 ,null +39f2 20610000 rtn positive +39f3 e8608000 ifetch 1 ,contru +39f4 60008b03 store 1 ,mem_module_uart_opcode +39f5 e8688000 ifetcht 1 ,contru +39f6 18622200 copy contru ,rega +39f7 60088b04 storet 1 ,mem_module_uart_len +39f8 18408403 add temp ,3 ,temp +39f9 68110112 hfetch 2 ,core_uart_rxitems +39fa 98460400 isub temp ,temp +39fb 24610000 nrtn positive +39fc 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +39fd 20403a17 call module_hci_cmd_control +39fe 68008b05 fetch 1 ,mem_module_temp_nl_discard_packet +39ff c1000000 rtneq hci_not_discard_packet +3a00 20203a12 branch module_hci_dicard_packet + +module_hci_in_excp: +3a01 20407ec1 call delay_10ms +3a02 20403c79 call module_hci_event_invalid_packet +3a03 20203a04 branch module_hci_release_except + +module_hci_release_except: +3a04 44efc01b bpatch patch1b_7 ,mem_patch1b +3a05 68110112 hfetch 2 ,core_uart_rxitems +3a06 207a0000 rtn blank +3a07 204066cb call uartd_prepare_rx +3a08 e8608000 ifetch 1 ,contru +3a09 1fe67c01 sub pdata ,0x01 ,null +3a0a 2442ba16 ncall module_hci_dicard_bytes ,zero +3a0b 2422ba04 nbranch module_hci_release_except ,zero +3a0c e8608000 ifetch 1 ,contru +3a0d c1028000 rtneq hci_cmd_spp_data_req +3a0e c1148000 rtneq hci_cmd_set_credit_given +3a0f 186087ff increase -1 ,contru +3a10 20403a16 call module_hci_dicard_bytes +3a11 20203a04 branch module_hci_release_except + +module_hci_dicard_packet: +3a12 204066cb call uartd_prepare_rx +3a13 18608602 increase 2 ,contru +3a14 e8608000 ifetch 1 ,contru +3a15 98608600 iadd contru ,contru + +module_hci_dicard_bytes: +3a16 202066c8 branch uartd_rxdone + +module_hci_cmd_control: +3a17 44f0401c bpatch patch1c_0 ,mem_patch1c +3a18 68008b03 fetch 1 ,mem_module_uart_opcode +3a19 c0003a3f beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +3a1a c000ba44 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +3a1b c0013a49 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +3a1c c001ba5f beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +3a1d c0023a6b beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +3a1e c002ba75 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +3a1f c004ba9a beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +3a20 c005bad7 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +3a21 c0063ad8 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +3a22 c006baec beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +3a23 c0073af4 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +3a24 c007bafa beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +3a25 c0083b06 beq hci_cmd_version_req ,module_hci_cmd_version_request +3a26 c008bb0e beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +3a27 c0093b12 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +3a28 c0133b16 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +3a29 c0143b1d beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +3a2a c014bb2d beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +3a2b c0153b36 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +3a2c c015bb69 beq hci_cmd_power_req ,module_hci_cmd_power_request +3a2d c0163b6f beq hci_cmd_power_set ,module_hci_cmd_power_set +3a2e c0183b76 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +3a2f c018bb7c beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +3a30 c0193b90 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +3a31 c019bb98 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +3a32 c01a3bbb beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +3a33 c01abbc4 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +3a34 c01b3bcd beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +3a35 c01bbbd7 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +3a36 c01c3bda beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +3a37 c0203be2 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +3a38 c0213bec beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +3a39 c0243bf1 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +3a3a c024bbfc beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +3a3b c028bc02 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +3a3c c030bc06 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +3a3d c07fbc15 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm +3a3e 20203c17 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_set_bt_addr: +3a3f 68008b04 fetch 1 ,mem_module_uart_len +3a40 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd +3a41 e8630000 ifetch 6 ,contru +3a42 600340a0 store 6 ,mem_lap +3a43 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_addr: +3a44 68008b04 fetch 1 ,mem_module_uart_len +3a45 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd +3a46 e8630000 ifetch 6 ,contru +3a47 600344a0 store 6 ,mem_le_lap +3a48 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_visibility: +3a49 68008b04 fetch 1 ,mem_module_uart_len +3a4a c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd +3a4b 1a220600 copy rega ,contru +3a4c 20403c1a call module_hci_event_receive_valid_cmd +3a4d e8688000 ifetcht 1 ,contru +3a4e 6008c6a9 storet 1 ,mem_module_bluetooth_stauts_by_command +3a4f 68014682 fetch 2 ,mem_ui_state_map +3a50 c3848000 rtnbit1 ui_state_ble_connected +3a51 c3800000 rtnbit1 ui_state_bt_connected + +module_start_adv_discovery_by_command: +3a52 6800c6a1 fetch 1 ,mem_module_state +3a53 2feffe00 isolate1 moudle_state_bt_bit ,pdata +3a54 2420ba58 nbranch moudle_start_adv_by_command ,true +3a55 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command +3a56 18417e03 and temp ,0x03 ,pdata +3a57 6000c093 store 1 ,mem_scan_mode + +moudle_start_adv_by_command: +3a58 6800c6a1 fetch 1 ,mem_module_state +3a59 2feffe01 isolate1 moudle_state_ble_bit ,pdata +3a5a 24608000 nrtn true +3a5b 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command +3a5c 284ffe02 isolate1 2 ,temp +3a5d 2020b3fa branch app_ble_start_adv ,true +3a5e 202033f8 branch app_ble_stop_adv + +module_hci_cmd_set_bt_name: +3a5f 68008b04 fetch 1 ,mem_module_uart_len +3a60 1fe67c43 sub pdata ,67 ,null +3a61 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3a62 6000c515 store 1 ,mem_local_name_length +3a63 df200008 arg 8 ,loopcnt +3a64 20407ec6 call memset0 +3a65 68008b04 fetch 1 ,mem_module_uart_len +3a66 1fe27200 copy pdata ,loopcnt +3a67 1a220600 copy rega ,contru +3a68 d8a04516 arg mem_local_name ,contw +3a69 204066ea call uart_copy_rx_bytes_fast +3a6a 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_name: +3a6b 68008b04 fetch 1 ,mem_module_uart_len +3a6c 1fe67c1d sub pdata ,29 ,null +3a6d 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3a6e 6000c3af store 1 ,mem_le_name_len +3a6f 1fe27200 copy pdata ,loopcnt +3a70 1a220600 copy rega ,contru +3a71 d8a043b0 arg mem_le_name ,contw +3a72 204066ea call uart_copy_rx_bytes_fast +3a73 204057a3 call le_modified_name +3a74 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_receive_spp_data: +3a75 6800c682 fetch 1 ,mem_ui_state_map +3a76 c3023c17 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +3a77 204033ba call app_check_sniff +3a78 2020ba86 branch module_hci_cmd_spp_exit_sniff ,true +3a79 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3a7a 2040397f call module_spp_clear_last_transmite_clock +3a7b 6800c568 fetch 1 ,mem_remote_credits +3a7c 207a0000 rtn blank +3a7d 68014573 fetch 2 ,mem_nl_rx_len_all +3a7e c0803a84 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all +3a7f 68008b04 fetch 1 ,mem_module_uart_len +3a80 60014573 store 2 ,mem_nl_rx_len_all +3a81 1a220600 copy rega ,contru +3a82 18627e00 copy contru ,pdata +3a83 60014571 store 2 ,mem_nl_rx_data_src + +module_hci_cmd_pass_init_ng_rx_len_all: +3a84 20403a88 call module_hci_cmd_get_current_packet_len_and_remain_len +3a85 20206c4d branch spp_tx_rfcomm_packet + +module_hci_cmd_spp_exit_sniff: +3a86 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3a87 20203cd1 branch module_exit_sniff + +module_hci_cmd_get_current_packet_len_and_remain_len: +3a88 20403a8e call module_hci_cmd_get_current_patcket_len +3a89 68014573 fetch 2 ,mem_nl_rx_len_all +3a8a 6809469f fetcht 2 ,mem_current_packet_length +3a8b 98467e00 isub temp ,pdata +3a8c 60014573 store 2 ,mem_nl_rx_len_all +3a8d 20600000 rtn + +module_hci_cmd_get_current_patcket_len: +3a8e 68014573 fetch 2 ,mem_nl_rx_len_all +3a8f d840006e arg dm_refcom_buff_len ,temp +3a90 20407fdd call not_greater_than +3a91 6809456c fetcht 2 ,mem_rfcomm_max_frame_size +3a92 20407fdd call not_greater_than +3a93 6809455e fetcht 2 ,mem_pn_max_frame_size +3a94 20407fdd call not_greater_than +3a95 6001469f store 2 ,mem_current_packet_length +3a96 20600000 rtn + +module_hci_command_tx_spp_tx_complete: +3a97 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3a98 700b0305 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +3a99 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_receive_le_data: +3a9a 68014682 fetch 2 ,mem_ui_state_map +3a9b c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +3a9c 20403ad4 call module_check_ble_encrypt_state +3a9d 20343c17 branch module_hci_event_receive_invalid_cmd ,user +3a9e 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3a9f 6800c6bf fetch 1 ,mem_module_flag +3aa0 c2823ab4 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +3aa1 6800c6c0 fetch 1 ,mem_module_hci_notify_len +3aa2 247a0000 nrtn blank +3aa3 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3aa4 e8610000 ifetch 2 ,contru +3aa5 600146c1 store 2 ,mem_module_hci_notify_handle +3aa6 18627e00 copy contru ,pdata +3aa7 600146c3 store 2 ,mem_module_hci_nofiy_addr +3aa8 68008b04 fetch 1 ,mem_module_uart_len +3aa9 1fe0fffe pincrease -2 +3aaa 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3aab 2022bc17 branch module_hci_event_receive_invalid_cmd ,zero +3aac 6000c6c0 store 1 ,mem_module_hci_notify_len +3aad 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3aae 20405814 call le_set_config_more_data +3aaf 20403ab7 call module_hci_cmd_transmit_le_notify +3ab0 20403ab7 call module_hci_cmd_transmit_le_notify +3ab1 20403ab7 call module_hci_cmd_transmit_le_notify +3ab2 6800c6bf fetch 1 ,mem_module_flag +3ab3 c4020000 rtnbit0 module_flag_ble_data_finish + +module_hci_cmd_receive_le_data_finish: +3ab4 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3ab5 20403cf6 call module_clear_le_tx_data_flag +3ab6 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_transmit_le_notify: +3ab7 6800c6c0 fetch 1 ,mem_module_hci_notify_len +3ab8 207a0000 rtn blank +3ab9 20405892 call le_fifo_check_nearly_full +3aba 247a0000 nrtn blank +3abb 20403acf call module_get_le_remote_mtu +3abc 44f0c01c bpatch patch1c_1 ,mem_patch1c +3abd 1840fffd add temp ,-3 ,pdata +3abe 6808c6c0 fetcht 1 ,mem_module_hci_notify_len +3abf 20407fdd call not_greater_than +3ac0 1fe22200 copy pdata ,rega +3ac1 18427e00 copy temp ,pdata +3ac2 9a267e00 isub rega ,pdata +3ac3 6000c6c0 store 1 ,mem_module_hci_notify_len +3ac4 680946c1 fetcht 2 ,mem_module_hci_notify_handle +3ac5 20405a64 call le_att_malloc_tx_notify +3ac6 680146c3 fetch 2 ,mem_module_hci_nofiy_addr +3ac7 1fe20600 copy pdata ,contru +3ac8 1a227200 copy rega ,loopcnt +3ac9 204066ea call uart_copy_rx_bytes_fast +3aca 18627e00 copy contru ,pdata +3acb 600146c3 store 2 ,mem_module_hci_nofiy_addr +3acc 6800c6c0 fetch 1 ,mem_module_hci_notify_len +3acd 247a0000 nrtn blank +3ace 20203cf4 branch module_set_le_tx_data_flag + +module_get_le_remote_mtu: +3acf d8400017 arg 0x17 ,temp +3ad0 6800c6bf fetch 1 ,mem_module_flag +3ad1 c3808000 rtnbit1 module_flag_ble_send_mtu23 +3ad2 680944a8 fetcht 2 ,mem_le_remote_mtu +3ad3 20600000 rtn + +module_check_ble_encrypt_state: +3ad4 6800c6bf fetch 1 ,mem_module_flag +3ad5 c2815a42 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +3ad6 20207fe9 branch disable_user + +module_hci_cmd_inquire_status: +3ad7 20203c4c branch module_hci_event_status_res + +module_hci_cmd_set_pairing_mode: +3ad8 1a220600 copy rega ,contru +3ad9 e8608000 ifetch 1 ,contru +3ada c0003adf beq pairing_pincode ,module_hci_pairing_pincode_mode +3adb c000bae2 beq pairing_justwork ,module_hci_pairing_just_work_mode +3adc c0013ae8 beq pairing_passkey ,module_hci_pairing_passkey +3add c001baea beq pairing_confirm ,module_hci_pairing_numeric_comparison +3ade 20203c17 branch module_hci_event_receive_invalid_cmd + +module_hci_pairing_pincode_mode: +3adf 2040612b call ssp_disable +3ae0 70465a00 jam 0 ,mem_ssp_enable +3ae1 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_pairing_just_work_mode: +3ae2 58040003 setarg ssp_mode_just_work_io_cap_data + +module_hci_sspairing_mode: +3ae3 6001c65b store 3 ,mem_sp_iocap_local +3ae4 6000c662 store 1 ,mem_ssp_mode_flag +3ae5 20406124 call ssp_enable +3ae6 70465a01 jam 1 ,mem_ssp_enable +3ae7 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_pairing_passkey: +3ae8 58040002 setarg ssp_mode_passkey_io_cap_data +3ae9 20203ae3 branch module_hci_sspairing_mode + +module_hci_pairing_numeric_comparison: +3aea 58040001 setarg ssp_mode_ssp_pin_io_cap_data +3aeb 20203ae3 branch module_hci_sspairing_mode + +module_hci_cmd_set_pincode: +3aec 68008b04 fetch 1 ,mem_module_uart_len +3aed 1fe67c10 sub pdata ,16 ,null +3aee 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3aef 6000c689 store 1 ,mem_pin_length +3af0 1fe27200 copy pdata ,loopcnt +3af1 d8a0468a arg mem_pin ,contw +3af2 204066fd call uart_copy_rx_bytes +3af3 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_uart_control_mode: +3af4 1a220600 copy rega ,contru +3af5 e8608000 ifetch 1 ,contru +3af6 68188062 hfetcht 1 ,core_uart_ctrl +3af7 7d3a0404 nsetflag blank ,4 ,temp +3af8 60188062 hstoret 1 ,core_uart_ctrl +3af9 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_uart_baud: +3afa 68008b04 fetch 1 ,mem_module_uart_len +3afb 1fe27200 copy pdata ,loopcnt +3afc 1a220600 copy rega ,contru +3afd 20407f58 call string2dec_from_uart +3afe 596e3600 setarg uart_clk_24 +3aff 9846fc00 idiv temp +3b00 20407f86 call wait_div_end +3b01 1807fe00 quotient pdata + +module_hci_cmd_set_uart_baud_ok: +3b02 60014243 store uart_baud_len ,mem_baud +3b03 20403c1a call module_hci_event_receive_valid_cmd +3b04 20407f9e call wait_uarttx +3b05 202066ce branch uart_set_baud_by_mem + +module_hci_cmd_version_request: +3b06 da200002 arg 2 ,rega +3b07 da40469a arg mem_soft_version_num ,regb +3b08 d8400000 arg 0 ,temp +3b09 20203c25 branch module_hci_event_set_cmd + +module_hci_event_set_cmd_send_response: +3b0a 60010ac2 store 2 ,mem_event_cmd_response_content +3b0b da400ac2 arg mem_event_cmd_response_content ,regb +3b0c d8400000 arg 0 ,temp +3b0d 20203c25 branch module_hci_event_set_cmd + +module_hci_cmd_bt_disconnect: +3b0e 68014682 fetch 2 ,mem_ui_state_map +3b0f c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd + +module_hci_cmd_bt_disconnect_doing: +3b10 20403c1a call module_hci_event_receive_valid_cmd +3b11 202033e9 branch app_bt_disconnect + +module_hci_cmd_ble_disconnect: +3b12 68014682 fetch 2 ,mem_ui_state_map +3b13 c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd + +module_hci_cmd_ble_disconnect_doing: +3b14 20403c1a call module_hci_event_receive_valid_cmd +3b15 20203402 branch app_ble_disconnect + +module_hci_cmd_set_nvram: +3b16 68008b04 fetch 1 ,mem_module_uart_len +3b17 1fe27200 copy pdata ,loopcnt +3b18 1a220600 copy rega ,contru +3b19 68014215 fetch 2 ,mem_nv_data_ptr +3b1a 1fe20a00 icopy contw +3b1b 204066ea call uart_copy_rx_bytes_fast +3b1c 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_confirm_gkey: +3b1d 6800c682 fetch 1 ,mem_ui_state_map +3b1e c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +3b1f e8608000 ifetch 1 ,contru +3b20 6808c661 fetcht 1 ,mem_flag_mode_ssp_pin +3b21 793a0400 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +3b22 79200407 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +3b23 6008c661 storet 1 ,mem_flag_mode_ssp_pin +3b24 20403c1a call module_hci_event_receive_valid_cmd +3b25 6800c661 fetch 1 ,mem_flag_mode_ssp_pin +3b26 c2833b2b bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +3b27 20600000 rtn + +dhkey_not_accept: +3b28 70466100 jam 0 ,mem_flag_mode_ssp_pin +3b29 700a9921 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +3b2a 20207d8f branch ui_ipc_send_cmd + +module_hci_cmd_spp_number_comparison_result_is1: +3b2b c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +3b2c 20203b28 branch dhkey_not_accept + +module_hci_cmd_set_credit_given: +3b2d 6800c682 fetch 1 ,mem_ui_state_map +3b2e c4020000 rtnbit0 ui_state_bt_spp_conn +3b2f 6800c56b fetch 1 ,mem_credit_flag +3b30 c1000000 rtneq credit_disable +3b31 e8608000 ifetch 1 ,contru +3b32 6808c569 fetcht 1 ,mem_credit_given +3b33 98408400 iadd temp ,temp +3b34 6008c569 storet 1 ,mem_credit_given +3b35 20600000 rtn + +module_hci_cmd_auto_adv: +3b36 df200040 arg 0x40 ,loopcnt +3b37 d8a0436f arg mem_le_adv_data_len ,contw +3b38 20407ed4 call clear_mem +3b39 58000000 setarg 0 +3b3a 60008ab2 store 1 ,mem_regb +3b3b 1a220600 copy rega ,contru + +module_hci_cmd_auto_adv_loop: +3b3c 18627e00 copy contru ,pdata +3b3d 60010ab6 store 2 ,mem_regc +3b3e 20403b64 call module_hci_cmd_auto_adv_adv_analys +3b3f 68008ab2 fetch 1 ,mem_regb +3b40 68088aa2 fetcht 1 ,mem_temp +3b41 18408401 increase 1 ,temp +3b42 9840fe00 iadd temp ,pdata +3b43 60008ab2 store 1 ,mem_regb +3b44 1fe67c1f sub pdata ,31 ,null +3b45 24213b50 nbranch module_hci_cmd_auto_adv_store_scan ,positive + +module_hci_cmd_auto_adv_store_adv: +3b46 6808c36f fetcht 1 ,mem_le_adv_data_len +3b47 58004370 setarg mem_le_adv_data +3b48 9840fe00 iadd temp ,pdata +3b49 60010abb store 2 ,mem_contw +3b4a 68088aa2 fetcht 1 ,mem_temp +3b4b 18408401 increase 1 ,temp +3b4c 6800c36f fetch 1 ,mem_le_adv_data_len +3b4d 9840fe00 iadd temp ,pdata +3b4e 6000c36f store 1 ,mem_le_adv_data_len +3b4f 20203b59 branch module_hci_cmd_auto_adv_store_common + +module_hci_cmd_auto_adv_store_scan: +3b50 6808c38f fetcht 1 ,mem_le_scan_data_len +3b51 58004390 setarg mem_le_scan_data +3b52 9840fe00 iadd temp ,pdata +3b53 60010abb store 2 ,mem_contw +3b54 68088aa2 fetcht 1 ,mem_temp +3b55 18408401 increase 1 ,temp +3b56 6800c38f fetch 1 ,mem_le_scan_data_len +3b57 9840fe00 iadd temp ,pdata +3b58 6000c38f store 1 ,mem_le_scan_data_len + +module_hci_cmd_auto_adv_store_common: +3b59 68010abb fetch 2 ,mem_contw +3b5a 1fe20a00 copy pdata ,contw +3b5b 68010ab6 fetch 2 ,mem_regc +3b5c 1fe20600 copy pdata ,contru +3b5d 18427200 copy temp ,loopcnt +3b5e 204066ea call uart_copy_rx_bytes_fast +3b5f 68008b04 fetch 1 ,mem_module_uart_len +3b60 68088ab2 fetcht 1 ,mem_regb +3b61 98467c00 isub temp ,null +3b62 2422bb3c nbranch module_hci_cmd_auto_adv_loop ,zero +3b63 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_auto_adv_adv_analys: +3b64 e8608000 ifetch 1 ,contru +3b65 60008aa2 store 1 ,mem_temp +3b66 e8608000 ifetch 1 ,contru +3b67 60008aae store 1 ,mem_rega +3b68 20600000 rtn + +module_hci_cmd_power_request: +3b69 d8400000 arg 0 ,temp +3b6a da200002 arg 2 ,rega +3b6b 680146b4 fetch 2 ,mem_module_vdd_quotient +3b6c 60010ac2 store 2 ,mem_event_cmd_response_content +3b6d da400ac2 arg mem_event_cmd_response_content ,regb +3b6e 20203c25 branch module_hci_event_set_cmd + +module_hci_cmd_power_set: +3b6f 68008b04 fetch 1 ,mem_module_uart_len +3b70 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd +3b71 e8608000 ifetch 1 ,contru +3b72 6000c6b2 store 1 ,mem_module_read_vdd_flag +3b73 58000000 setarg 0x00 +3b74 600146b4 store 2 ,mem_module_vdd_quotient +3b75 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_passkey_entry: +3b76 e8620000 ifetch 4 ,contru +3b77 6002468a store 4 ,mem_pin +3b78 70468904 jam 4 ,mem_pin_length +3b79 70466300 jam 0 ,mem_authentication_passkey_times +3b7a 20403c1a call module_hci_event_receive_valid_cmd +3b7b 20205f31 branch authentication_passkey + +module_hci_cmd_set_gpio: +3b7c 68008b04 fetch 1 ,mem_module_uart_len +3b7d c081bc17 bne 3 ,module_hci_event_receive_invalid_cmd +3b7e e8608000 ifetch 1 ,contru +3b7f c0003b82 beq hci_cmd_config_gpio_input ,module_set_gpio_input +3b80 c000bb8a beq hci_cmd_config_gpio_output ,module_set_gpio_output +3b81 20203c17 branch module_hci_event_receive_invalid_cmd + +module_set_gpio_input: +3b82 e8688000 ifetcht 1 ,contru +3b83 e8608000 ifetch 1 ,contru +3b84 c0013b88 beq gpio_input_high_impedance ,module_set_gpio_high_impedance +3b85 7d3a0407 nsetflag blank ,7 ,temp +3b86 204067fb call gpio_config_input +3b87 20203c1a branch module_hci_event_receive_valid_cmd + +module_set_gpio_high_impedance: +3b88 20406806 call gpio_set_high_impedance +3b89 20203c1a branch module_hci_event_receive_valid_cmd + +module_set_gpio_output: +3b8a e8688000 ifetcht 1 ,contru +3b8b 20406812 call gpio_config_output0 +3b8c e8608000 ifetch 1 ,contru +3b8d 2feffe00 isolate1 0 ,pdata +3b8e 2040682c call gpio_out_flag +3b8f 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_read_gpio: +3b90 68008b04 fetch 1 ,mem_module_uart_len +3b91 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd +3b92 e8688000 ifetcht 1 ,contru +3b93 2040681d call gpio_get_bit +3b94 58000000 setarg 0x0 +3b95 7d20fe00 nsetflag true ,0 ,pdata +3b96 da200001 arg 1 ,rega +3b97 20203b0a branch module_hci_event_set_cmd_send_response + +module_hci_cmd_le_set_pairing_mode: +3b98 1a220600 copy rega ,contru +3b99 e8608000 ifetch 1 ,contru +3b9a 1fe20400 copy pdata ,temp +3b9b c040bba3 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +3b9c c0413ba8 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +3b9d c041bbae beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +3b9e 6000c4c6 store 1 ,mem_le_pairing_mode +3b9f c0003bb3 beq le_pairing_mode_none ,module_le_set_no_pairing +3ba0 c000bbb6 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +3ba1 c0013bb8 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +3ba2 20203c17 branch module_hci_event_receive_invalid_cmd + +module_le_set_pairing_mode_secure_justwork: +3ba3 6800c4be fetch 1 ,mem_le_secure_connect_enable +3ba4 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3ba5 6008c4c6 storet 1 ,mem_le_pairing_mode +3ba6 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +3ba7 20203bb4 branch module_le_set_noinputnooutput + +module_le_set_pairing_mode_secure_numeric: +3ba8 6800c4be fetch 1 ,mem_le_secure_connect_enable +3ba9 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3baa 6008c4c6 storet 1 ,mem_le_pairing_mode +3bab 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +3bac 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap +3bad 20203c1a branch module_hci_event_receive_valid_cmd + +module_le_set_pairing_mode_secure_passkey: +3bae 6800c4be fetch 1 ,mem_le_secure_connect_enable +3baf 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3bb0 6008c4c6 storet 1 ,mem_le_pairing_mode +3bb1 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +3bb2 20203bb9 branch module_le_set_displayonly + +module_le_set_no_pairing: +3bb3 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth + +module_le_set_noinputnooutput: +3bb4 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +3bb5 20203c1a branch module_hci_event_receive_valid_cmd + +module_le_set_pairing_mode_lagacy_just_work: +3bb6 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth +3bb7 20203bb4 branch module_le_set_noinputnooutput + +module_le_set_pairing_mode_lagacy_passkey: +3bb8 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth + +module_le_set_displayonly: +3bb9 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap +3bba 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_adv_data: +3bbb 68008b04 fetch 1 ,mem_module_uart_len +3bbc 1fe67c1f sub pdata ,31 ,null +3bbd 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3bbe 6000c36f store 1 ,mem_le_adv_data_len +3bbf 1fe27200 copy pdata ,loopcnt +3bc0 1a220600 copy rega ,contru +3bc1 d8a04370 arg mem_le_adv_data ,contw +3bc2 204066ea call uart_copy_rx_bytes_fast +3bc3 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_scan_data: +3bc4 68008b04 fetch 1 ,mem_module_uart_len +3bc5 1fe67c1f sub pdata ,31 ,null +3bc6 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3bc7 6000c38f store 1 ,mem_le_scan_data_len +3bc8 1fe27200 copy pdata ,loopcnt +3bc9 1a220600 copy rega ,contru +3bca d8a04390 arg mem_le_scan_data ,contw +3bcb 204066ea call uart_copy_rx_bytes_fast +3bcc 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_send_conn_update_req: +3bcd 68014682 fetch 2 ,mem_ui_state_map +3bce c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +3bcf 68008b04 fetch 1 ,mem_module_uart_len +3bd0 c0843c17 bne 0x08 ,module_hci_event_receive_invalid_cmd +3bd1 1a220600 copy rega ,contru +3bd2 e8640000 ifetch 8 ,contru +3bd3 60044496 store 8 ,mem_le_interval_min +3bd4 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +3bd5 20407d8f call ui_ipc_send_cmd +3bd6 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_adv_parameter: +3bd7 e8610000 ifetch 2 ,contru +3bd8 60014482 store 2 ,mem_le_adv_interval +3bd9 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_start_pairing: +3bda 6800c4c6 fetch 1 ,mem_le_pairing_mode +3bdb 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3bdc 6800c4c4 fetch 1 ,mem_le_pairing_state +3bdd c0803c17 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +3bde 6800c4c5 fetch 1 ,mem_le_enc_state +3bdf c0803c17 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +3be0 20407e25 call check_51cmd_le_smp_sec_req +3be1 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_wake_gpio: +3be2 68008b04 fetch 1 ,mem_module_uart_len +3be3 c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd +3be4 e8608000 ifetch 1 ,contru +3be5 6000c6a2 store 1 ,mem_module_mcu_wake_pin +3be6 e8620000 ifetch 4 ,contru +3be7 600246a3 store 4 ,mem_module_mcu_wake_delay_us +3be8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3be9 2040680e call gpio_config_output +3bea 20403cbc call module_set_mcu_wake_pin_low +3beb 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_tx_power: +3bec 68008b04 fetch 1 ,mem_module_uart_len +3bed c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd +3bee e8608000 ifetch 1 ,contru +3bef 6000c1de store 1 ,mem_tx_power +3bf0 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey: +3bf1 e8608000 ifetch 1 ,contru +3bf2 c000bbfa beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +3bf3 6800c4c1 fetch 1 ,mem_le_secure_connect_state +3bf4 c001bbf8 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +3bf5 c0033bf8 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +3bf6 c003bbf8 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +3bf7 20203c17 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_le_confirm_gkey_ok: +3bf8 7044c201 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +3bf9 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey_fail: +3bfa 20405b53 call le_send_pairing_confirm_value_failed +3bfb 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_reject_justwork_flag: +3bfc 68008b04 fetch 1 ,mem_module_uart_len +3bfd c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd +3bfe 20403c1a call module_hci_event_receive_valid_cmd +3bff e8608000 ifetch 1 ,contru +3c00 203a60cb branch classic_bt_clr_reject_justwork_flag ,blank +3c01 202060c9 branch classic_bt_set_reject_justwork_flag + +module_hci_cmd_reset_chip: +3c02 20403c1a call module_hci_event_receive_valid_cmd +3c03 20407f9e call wait_uarttx +3c04 70801001 hjam 0x01 ,core_reset +3c05 20202a8e branch loop + +module_hci_cmd_le_set_fixed_passkey: +3c06 68008b04 fetch 1 ,mem_module_uart_len +3c07 c0003c17 beq 0 ,module_hci_event_receive_invalid_cmd +3c08 e8608000 ifetch 1 ,contru +3c09 203a3c13 branch module_hci_cmd_le_set_random_passkey ,blank +3c0a 68008b04 fetch 1 ,mem_module_uart_len +3c0b c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd +3c0c e8620000 ifetch 4 ,contru +3c0d d84f4240 arg 1000000 ,temp +3c0e 98467c00 isub temp ,null +3c0f 20213c17 branch module_hci_event_receive_invalid_cmd ,positive +3c10 600244c7 store 4 ,mem_le_tk +3c11 2040580c call le_set_config_fixed_tk +3c12 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_random_passkey: +3c13 2040580e call le_clr_config_fixed_tk +3c14 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_test_cmde_close_lpm: +3c15 70409100 jam 0 ,mem_lpm_mode +3c16 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_event_receive_invalid_cmd: +3c17 d8400001 arg 1 ,temp +3c18 da200000 arg 0 ,rega +3c19 20203c25 branch module_hci_event_set_cmd + +module_hci_event_receive_valid_cmd: +3c1a d8400000 arg 0 ,temp +3c1b da200000 arg 0 ,rega +3c1c 20203c25 branch module_hci_event_set_cmd + +module_hci_event_spp_connect: +3c1d 700b0300 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +3c1e 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_connect: +3c1f 700b0302 jam hci_event_le_conn_rep ,mem_module_uart_opcode +3c20 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_spp_disconnect: +3c21 700b0303 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +3c22 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_disconnect: +3c23 700b0305 jam hci_event_le_dis_rep ,mem_module_uart_opcode +3c24 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_set_cmd: +3c25 68008b03 fetch 1 ,mem_module_uart_opcode +3c26 1fe22600 copy pdata ,regc +3c27 700b0306 jam hci_event_cmd_res ,mem_module_uart_opcode +3c28 58000002 setarg 2 +3c29 9a20fe00 iadd rega ,pdata +3c2a 20403ca7 call module_hci_prepare_tx +3c2b 1a627e00 copy regc ,pdata +3c2c e1408000 istore 1 ,contwu +3c2d e1488000 istoret 1 ,contwu +3c2e 1a227200 copy rega ,loopcnt +3c2f 1a420c00 copy regb ,contr +3c30 204066e4 call uart_copy_tx_bytes +3c31 202066c5 branch uartd_send + +module_hci_event_receive_spp_data: +3c32 2040397f call module_spp_clear_last_transmite_clock +3c33 700b0307 jam hci_event_spp_data_rep ,mem_module_uart_opcode +3c34 680084ff fetch 1 ,mem_current_length +3c35 207a0000 rtn blank +3c36 20403ca7 call module_hci_prepare_tx +3c37 680084ff fetch 1 ,mem_current_length +3c38 1fe27200 copy pdata ,loopcnt +3c39 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +3c3a 1fe20c00 copy pdata ,contr +3c3b 204066d1 call uart_copy_tx_bytes_fast +3c3c 202066c5 branch uartd_send + +module_hci_event_receive_le_data: +3c3d 700b0308 jam hci_event_le_data_rep ,mem_module_uart_opcode +3c3e 6800c6b6 fetch 1 ,mem_module_le_rx_data_len +3c3f 1fe27200 icopy loopcnt +3c40 1fe0fe02 increase 2 ,pdata +3c41 20403ca7 call module_hci_prepare_tx +3c42 680146b9 fetch 2 ,mem_module_le_rx_data_handle +3c43 e1410000 istore 2 ,contwu +3c44 680146b7 fetch 2 ,mem_module_le_rx_data_address +3c45 1fe20c00 icopy contr +3c46 204066d1 call uart_copy_tx_bytes_fast +3c47 202066c5 branch uartd_send + +module_hci_event_enter_standby_mode: +3c48 700b0309 jam hci_event_standby_rep ,mem_module_uart_opcode + +module_hci_event_enter_standby_mode_len0: +3c49 58000000 setarg 0 +3c4a 20403ca7 call module_hci_prepare_tx +3c4b 202066c5 branch uartd_send + +module_hci_event_status_res: +3c4c 700b030a jam hci_event_status_res ,mem_module_uart_opcode +3c4d 58000001 setarg 1 +3c4e 20403ca7 call module_hci_prepare_tx +3c4f 20403c5d call module_hci_read_bt_status +3c50 68014682 fetch 2 ,mem_ui_state_map +3c51 d8e00002 arg ui_state_bt_hid_conn ,queue +3c52 afefffff qisolate1 pdata +3c53 79208403 setflag true ,3 ,temp +3c54 d8e00009 arg ui_state_ble_connected ,queue +3c55 afefffff qisolate1 pdata +3c56 79208405 setflag true ,5 ,temp +3c57 6800c682 fetch 1 ,mem_ui_state_map +3c58 d8e00004 arg ui_state_bt_spp_conn ,queue +3c59 afefffff qisolate1 pdata +3c5a 79208404 setflag true ,4 ,temp +3c5b e1488000 istoret 1 ,contwu +3c5c 202066c5 branch uartd_send + +module_hci_read_bt_status: +3c5d d8400000 arg 0 ,temp +3c5e 6800c093 fetch 1 ,mem_scan_mode +3c5f d8e00000 arg inq_scan_mode ,queue +3c60 afefffff qisolate1 pdata +3c61 79208400 setflag true ,0 ,temp +3c62 d8e00001 arg page_scan_mode ,queue +3c63 afefffff qisolate1 pdata +3c64 79208401 setflag true ,1 ,temp +3c65 6800c36e fetch 1 ,mem_le_adv_enable +3c66 d8e00000 arg 0 ,queue +3c67 afefffff qisolate1 pdata +3c68 79208402 setflag true ,2 ,temp +3c69 20600000 rtn + +module_hci_event_store_device: +3c6a 700b030d jam hci_event_nvram_rep ,mem_module_uart_opcode +3c6b 6800c217 fetch 1 ,mem_nv_data_number +3c6c 1feffe22 mul32 pdata ,34 ,pdata +3c6d 1fe27200 icopy loopcnt +3c6e 20403ca7 call module_hci_prepare_tx +3c6f 68014215 fetch 2 ,mem_nv_data_ptr +3c70 1fe20c00 icopy contr +3c71 204066d1 call uart_copy_tx_bytes_fast +3c72 202066c5 branch uartd_send + +module_hci_event_gkey_generate: +3c73 700b030e jam hci_event_gkey ,mem_module_uart_opcode +3c74 58000004 setarg 4 +3c75 20403ca7 call module_hci_prepare_tx +3c76 680209ba fetch 4 ,mem_gkey +3c77 e1420000 istore 4 ,contwu +3c78 202066c5 branch uartd_send + +module_hci_event_invalid_packet: +3c79 700b030f jam hci_event_invalid_packet ,mem_module_uart_opcode +3c7a 68110112 hfetch 2 ,core_uart_rxitems +3c7b d84000ff arg 0xff ,temp +3c7c 20407fdd call not_greater_than +3c7d 1fe27200 copy pdata ,loopcnt +3c7e 20403ca7 call module_hci_prepare_tx +3c7f 204066cb call uartd_prepare_rx +3c80 20406703 call uart_copy_rx2tx +3c81 202066c5 branch uartd_send + +module_hci_event_passkey_entry_mode: +3c82 700b0310 jam hci_event_get_passkey ,mem_module_uart_opcode +3c83 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_tk: +3c84 700b0311 jam hci_event_le_tk ,mem_module_uart_opcode +3c85 58000004 setarg 4 +3c86 20403ca7 call module_hci_prepare_tx +3c87 680244c7 fetch 4 ,mem_le_tk +3c88 e1420000 istore 4 ,contwu +3c89 202066c5 branch uartd_send + +module_hci_event_le_pairing_fail: +3c8a da200180 arg flag_ble_pairing_fail ,rega +3c8b 20203c91 branch module_hci_event_pairing_completed + +module_hci_event_le_pairing_success: +3c8c da200080 arg flag_ble_pairing_success ,rega +3c8d 20203c91 branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_fail: +3c8e da200101 arg flag_bt_pairing_fail ,rega +3c8f 20203c91 branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_success: +3c90 da200001 arg flag_bt_pairing_success ,rega + +module_hci_event_pairing_completed: +3c91 70466100 jam 0 ,mem_flag_mode_ssp_pin +3c92 700b0314 jam hci_event_le_pairing_state ,mem_module_uart_opcode +3c93 58000002 setarg 2 +3c94 20403ca7 call module_hci_prepare_tx +3c95 1a227e00 copy rega ,pdata +3c96 e1410000 istore 2 ,contwu +3c97 202066c5 branch uartd_send + +module_hci_event_pause_enc: +3c98 da600000 arg flag_event_pause_enc ,regc +3c99 20203c9b branch module_hci_event_enc + +module_hci_event_start_enc: +3c9a da600001 arg flag_event_start_enc ,regc + +module_hci_event_enc: +3c9b 700b0315 jam hci_event_le_encryption_state ,mem_module_uart_opcode +3c9c 58000001 setarg 1 +3c9d 20403ca7 call module_hci_prepare_tx +3c9e 1a627e00 copy regc ,pdata +3c9f e1408000 istore 1 ,contwu +3ca0 202066c5 branch uartd_send + +module_hci_event_le_gkey: +3ca1 700b031d jam hci_event_le_gkey ,mem_module_uart_opcode +3ca2 58000004 setarg 4 +3ca3 20403ca7 call module_hci_prepare_tx +3ca4 680209ba fetch 4 ,mem_gkey +3ca5 e1420000 istore 4 ,contwu +3ca6 202066c5 branch uartd_send + +module_hci_prepare_tx: +3ca7 700b0202 jam 0x02 ,mem_module_uart_cmd +3ca8 60008b04 store 1 ,mem_module_uart_len +3ca9 600c0aa2 storet 8 ,mem_temp +3caa 44f1401c bpatch patch1c_2 ,mem_patch1c +3cab 20403cb1 call module_set_mcu_wake_pin_high_delay +3cac 680c0aa2 fetcht 8 ,mem_temp +3cad 204066c2 call uartd_prepare_tx +3cae 68018b02 fetch 3 ,mem_module_uart_cmd +3caf e1418000 istore 3 ,contwu +3cb0 20600000 rtn + +module_set_mcu_wake_pin_high_delay: +3cb1 20403cba call module_check_mcu_wake_pin_high +3cb2 20608000 rtn true + +module_set_mcu_wake_pin_h_delay: +3cb3 20403cb8 call module_set_mcu_wake_pin_high +3cb4 680246a3 fetch 4 ,mem_module_mcu_wake_delay_us +3cb5 1feb7e00 rshift2 pdata ,pdata +3cb6 207a0000 rtn blank +3cb7 20203cbe branch delay + +module_set_mcu_wake_pin_high: +3cb8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3cb9 20206829 branch gpio_out_active + +module_check_mcu_wake_pin_high: +3cba 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3cbb 2020681b branch gpio_check_active + +module_set_mcu_wake_pin_low: +3cbc 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3cbd 20206825 branch gpio_out_inactive + +delay: +3cbe 1fe0ffff increase -1 ,pdata +3cbf 20000026 nop 38 +3cc0 243a3cbe nbranch delay ,blank +3cc1 20600000 rtn + +module_le_receive_data: +3cc2 20403ad4 call module_check_ble_encrypt_state +3cc3 20740000 rtn user +3cc4 1a227e00 copy rega ,pdata +3cc5 600146b7 store 2 ,mem_module_le_rx_data_address +3cc6 1a427e00 copy regb ,pdata +3cc7 6000c6b6 store 1 ,mem_module_le_rx_data_len +3cc8 68010478 fetch 2 ,mem_le_att_handle +3cc9 680946bb fetcht 2 ,mem_module_data_write_handle +3cca 98467c00 isub temp ,null +3ccb 2022bccf branch module_le_receive_data_ok ,zero +3ccc 680946bd fetcht 2 ,mem_module_data_write_handle2 +3ccd 98467c00 isub temp ,null +3cce 24628000 nrtn zero + +module_le_receive_data_ok: +3ccf 600146b9 store 2 ,mem_module_le_rx_data_handle +3cd0 20203c3d branch module_hci_event_receive_le_data + +module_exit_sniff: +3cd1 6800c6bf fetch 1 ,mem_module_flag +3cd2 c3828000 rtnbit1 moudle_task_unsniff +3cd3 20403cf0 call module_set_unsniff_task_flag +3cd4 2020340c branch app_bt_sniff_exit + +module_set_lpm_mult_2: +3cd5 70417202 jam 2 ,mem_lpm_mult +3cd6 20600000 rtn + +module_bb_event_timer: +3cd7 20203cd8 branch module_read_vdd_timer + +module_read_vdd_timer: +3cd8 6800c6b2 fetch 1 ,mem_module_read_vdd_flag +3cd9 207a0000 rtn blank +3cda 6800c6b3 fetch 1 ,mem_module_read_vdd_count +3cdb 207a0000 rtn blank +3cdc 1fe0ffff increase -1 ,pdata +3cdd 6000c6b3 store 1 ,mem_module_read_vdd_count +3cde 247a0000 nrtn blank +3cdf 7046b30a jam flag_module_read_vdd_count ,mem_module_read_vdd_count +3ce0 204068eb call adc_set_mode +3ce1 20406908 call vdd_calculate_by_mode +3ce2 1fe6fc64 div pdata ,0x64 +3ce3 20407f86 call wait_div_end +3ce4 1807fe00 quotient pdata +3ce5 18070400 remainder temp +3ce6 6000c6b4 store 1 ,mem_module_vdd_quotient +3ce7 6008c6b5 storet 1 ,mem_module_vdd_remainder +3ce8 20600000 rtn + +module_control_air_flow: +3ce9 20407fb4 call check_uart_tx_buff +3cea 202133d9 branch app_l2cap_flow_control_enable ,positive +3ceb 202033db branch app_l2cap_flow_control_disable + +module_set_sniff_task_flag: +3cec d8e00006 arg moudle_task_sniff ,queue +3ced 20203cfc branch module_set_state + +module_clear_sniff_task_flag: +3cee d8e00006 arg moudle_task_sniff ,queue +3cef 20203cf8 branch module_clr_state + +module_set_unsniff_task_flag: +3cf0 d8e00005 arg moudle_task_unsniff ,queue +3cf1 20203cfc branch module_set_state + +module_clear_unsniff_task_flag: +3cf2 d8e00005 arg moudle_task_unsniff ,queue +3cf3 20203cf8 branch module_clr_state + +module_set_le_tx_data_flag: +3cf4 d8e00004 arg module_flag_ble_data_finish ,queue +3cf5 20203cfc branch module_set_state + +module_clear_le_tx_data_flag: +3cf6 d8e00004 arg module_flag_ble_data_finish ,queue +3cf7 20203cf8 branch module_clr_state + +module_clr_state: +3cf8 6800c6bf fetch 1 ,mem_module_flag +3cf9 f93ffe00 qset0 pdata +3cfa 6000c6bf store 1 ,mem_module_flag +3cfb 20600000 rtn + +module_set_state: +3cfc 6800c6bf fetch 1 ,mem_module_flag +3cfd f9207e00 qset1 pdata +3cfe 6000c6bf store 1 ,mem_module_flag +3cff 20600000 rtn + +mouse_init: +3d00 20403d39 call mouse_setting_config +3d01 2040640f call spi_ncs_enable +3d02 204040c6 call mouse_init_sunt +3d03 20403d66 call mouse_dpi_config +3d04 20406411 call spi_ncs_disable +3d05 20758000 rtn wake +3d06 20403d16 call mouse_cheak_enable_usb +3d07 20403d19 call mouse_cb_fuction +3d08 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d09 c3880000 rtnbit1 mouse_enable_usb +3d0a 20403d4e call mouse_wakeup_from_power +3d0b c6130000 rtnmark1 mark_24g +3d0c 68014682 fetch 2 ,mem_ui_state_map +3d0d c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +3d0e 202042a2 branch mouse_check_reconn_target + +mouse_delay_4s: +3d0f 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d10 c40d8000 rtnbit0 mouse_enable_init_delay +3d11 df200014 arg 20 ,loopcnt + +mouse_delay_20ms: +3d12 58030d40 setarg 200000 +3d13 20402a8f call sleep +3d14 c2007ec1 loop delay_10ms +3d15 20600000 rtn + +mouse_cheak_enable_usb: +3d16 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d17 c4080000 rtnbit0 mouse_enable_usb +3d18 202048ea branch usb_init + +mouse_cb_fuction: +3d19 5800416d setarg mouse_le +3d1a 600141ef store 2 ,mem_cb_le_process +3d1b 58003f77 setarg mouse_send_process +3d1c 600141f1 store 2 ,mem_cb_bt_process +3d1d 58003ebb setarg mouse_process_lpm_before +3d1e 600141ed store 2 ,mem_cb_before_lpm +3d1f 5800417c setarg mouse_priority_bb_event +3d20 600141f5 store 2 ,mem_cb_bb_event_process +3d21 58003de3 setarg mouse_idle +3d22 600141f3 store 2 ,mem_cb_idle_process +3d23 58003eb3 setarg mouse_before_hibernate +3d24 600141eb store 2 ,mem_cb_before_hibernate +3d25 58003d5b setarg le_mouse_bb_event_connect_complete +3d26 600141f9 store 2 ,mem_cb_att_write +3d27 20402c7a call g24_head_ptr2regc +3d28 58004401 setarg mouse_g24_package_data +3d29 1a608ad8 add regc ,offset_24g_cb_data ,contw +3d2a e0a10000 istore 2 ,contw +3d2b 58004406 setarg mouse_g24_enter_lpm +3d2c 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw +3d2d e0a10000 istore 2 ,contw +3d2e 58003ebf setarg mouse_lpm_before_common +3d2f 1a608adc add regc ,offset_24g_cb_lpm_before ,contw +3d30 e0a10000 istore 2 ,contw +3d31 580041f9 setarg mouse_bb_event_timer +3d32 600141fd store 2 ,mem_cb_event_timer +3d33 58003d36 setarg mouse_spi_write_flash_cb +3d34 60014201 store 2 ,mem_cb_spi_flash_write_complate +3d35 20600000 rtn + +mouse_spi_write_flash_cb: + +mouse_spi_init: +3d36 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d37 c30964d7 bbit0 mouse_enable_spi2 ,spid_init +3d38 202064da branch spid_init2 + +mouse_setting_config: +3d39 20758000 rtn wake +3d3a 20402c9d call g24_set_device_addr +3d3b 20403e6e call mouse_gpio_init +3d3c 20403e1e call mouse_param_init +3d3d 20403e54 call mouse_adc_init +3d3e 20405810 call le_set_config_fixed_ltk +3d3f 20405839 call le_set_justwork +3d40 2040582c call le_set_fixed_ltk +3d41 20405818 call le_set_config_read_authentication +3d42 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d43 c28a3d46 bbit1 mouse_enable_eeprom ,mouse_init_iic +3d44 c289c414 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak +3d45 20600000 rtn + +mouse_init_iic: +3d46 2040659c call iic_init_390k +3d47 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d48 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata +3d49 2440e5c2 ncall clear_eeprom_size_2k ,true +3d4a 2040443f call mouse_load_eeprom_dpi +3d4b 20403dc9 call mouse_init_environment +3d4c 204041aa call mouse_set_24g_addr_eeprom +3d4d 202065df branch iicd_read_eep_data + +mouse_wakeup_from_power: +3d4e 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d4f c30f3d53 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power +3d50 68008abd fetch 1 ,mem_wakup_from_power_flag +3d51 2fec0003 isolate0 gpio_latch ,pdata +3d52 24608000 nrtn true + +mouse_wakeup_no_from_power: +3d53 6800c71f fetch 1 ,mem_reconn_times_init +3d54 6000c71e store 1 ,mem_reconn_times +3d55 6800c6f5 fetch 1 ,mem_config_function_enable +3d56 c3830000 rtnbit1 enable_select_device_by_switch + +mouse_start_24g_mode: +3d57 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d58 c4088000 rtnbit0 mouse_enable_24g +3d59 c28eaee4 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start +3d5a 20202f2c branch g24_check_51cmd_start_24g + +le_mouse_bb_event_connect_complete: +3d5b 68008478 fetch 1 ,mem_le_att_handle +3d5c 1fe67e1a sub pdata ,26 ,pdata +3d5d 24628000 nrtn zero +3d5e 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +3d5f 20407d8f call ui_ipc_send_cmd +3d60 d8e00000 arg write_req_enable_flag ,queue +3d61 202041b9 branch mouse_le_enable_connect_flag + +mouse_dpi_up: +3d62 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +3d63 c1008000 rtneq dpi_button_state_up +3d64 7046b601 jam dpi_button_state_up ,mem_mouse_dpi_button_state +3d65 20600000 rtn + +mouse_dpi_config: +3d66 6800c6e1 fetch 1 ,mem_config_sensor_motion +3d67 1fe17e0f and pdata ,0x0f ,pdata +3d68 6000c77a store 1 ,mem_mouse_dpi +3d69 20203d80 branch mouse_seting_dpi + 2 + +mouse_dpi_cheak: +3d6a 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +3d6b 2040681d call gpio_get_bit +3d6c 2420bd62 nbranch mouse_dpi_up ,true + +mouse_dpi_down: +3d6d 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +3d6e c1000000 rtneq dpi_button_state_down +3d6f 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state +3d70 6800c77a fetch 1 ,mem_mouse_dpi +3d71 1fe0fe01 increase 1 ,pdata +3d72 1fe17e03 and pdata ,0x03 ,pdata +3d73 6000c77a store 1 ,mem_mouse_dpi +3d74 20403d7e call mouse_seting_dpi +3d75 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d76 c28a443b bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi +3d77 c289bd79 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi +3d78 20600000 rtn + +mouse_before_store_flash_cpi: +3d79 d840001e arg mouse_spi2_clk_gpio ,temp +3d7a 2040680e call gpio_config_output +3d7b d840001f arg mouse_spi2_sdio_gpio ,temp +3d7c 2040680e call gpio_config_output +3d7d 20204435 branch mouse_store_flash_device_info + +mouse_seting_dpi: +3d7e 44f1c01c bpatch patch1c_3 ,mem_patch1c +3d7f 2040424a call mosue_dpi_led_blink_init +3d80 6800c6e0 fetch 1 ,mem_config_sensor_type +3d81 c002bdaa beq p3610 ,mouse_seting_3610_dpi +3d82 c0023d96 beq p3212 ,mouse_seting_3212_dpi +3d83 6800c77a fetch 1 ,mem_mouse_dpi +3d84 c0003d8a beq mouse_dpi_level1 ,mouse_set_cpi1 +3d85 c000bd88 beq mouse_dpi_level2 ,mouse_set_cpi2 +3d86 c0013d8c beq mouse_dpi_level3 ,mouse_set_cpi3 +3d87 c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 + +mouse_set_cpi2: +3d88 6800c780 fetch 1 ,mem_320x_dpi_2 +3d89 20203dbe branch mouse_p3205_dpi + +mouse_set_cpi1: +3d8a 6800c77f fetch 1 ,mem_320x_dpi_1 +3d8b 20203dbe branch mouse_p3205_dpi + +mouse_set_cpi3: +3d8c 6800c781 fetch 1 ,mem_320x_dpi_3 +3d8d 20203dbe branch mouse_p3205_dpi + +mouse_set_cpi4: +3d8e 6800c782 fetch 1 ,mem_320x_dpi_4 +3d8f 20203dbe branch mouse_p3205_dpi + +moue_seting_cpi_count: +3d90 6800c6e0 fetch 1 ,mem_config_sensor_type +3d91 c1030000 rtneq p3065_xy +3d92 6800c6b5 fetch 1 ,mem_mouse_cpi_count +3d93 1fe0fe01 increase 1 ,pdata +3d94 6000c6b5 store 1 ,mem_mouse_cpi_count +3d95 20600000 rtn + +mouse_seting_3212_dpi: +3d96 6800c77a fetch 1 ,mem_mouse_dpi +3d97 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +3d98 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +3d99 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +3d9a c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 + +mouse_set_p3212_cpi2: +3d9b 6800c784 fetch 1 ,mem_3212_dpi_2 +3d9c 20203da2 branch mouse_p3212_dpi + +mouse_set_p3212_cpi1: +3d9d 6800c783 fetch 1 ,mem_3212_dpi_1 +3d9e 20203da2 branch mouse_p3212_dpi + +mouse_set_p3212_cpi3: +3d9f 6800c785 fetch 1 ,mem_3212_dpi_3 +3da0 20203da2 branch mouse_p3212_dpi + +mouse_set_p3212_cpi4: +3da1 6800c786 fetch 1 ,mem_3212_dpi_4 + +mouse_p3212_dpi: +3da2 6000c6b5 store 1 ,mem_mouse_cpi_count +3da3 1fed7e00 lshift8 pdata ,pdata +3da4 1fe22200 copy pdata ,rega +3da5 1fe0fe0d add pdata ,mouse_p3212_dpi_xaddress ,pdata +3da6 20406413 call twspi_write +3da7 1a227e00 copy rega ,pdata +3da8 1fe0fe0e add pdata ,mouse_p3212_dpi_yaddress ,pdata +3da9 20206413 branch twspi_write + +mouse_seting_3610_dpi: +3daa 6800c77a fetch 1 ,mem_mouse_dpi +3dab c0003db1 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 +3dac c000bdaf beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 +3dad c0013db3 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 +3dae c001bdb5 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 + +mouse_set_p3610_cpi2: +3daf 6800c788 fetch 1 ,mem_3610_dpi_2 +3db0 20203db6 branch mouse_p3610_dpi + +mouse_set_p3610_cpi1: +3db1 6800c787 fetch 1 ,mem_3610_dpi_1 +3db2 20203db6 branch mouse_p3610_dpi + +mouse_set_p3610_cpi3: +3db3 6800c789 fetch 1 ,mem_3610_dpi_3 +3db4 20203db6 branch mouse_p3610_dpi + +mouse_set_p3610_cpi4: +3db5 6800c78a fetch 1 ,mem_3610_dpi_4 + +mouse_p3610_dpi: +3db6 6000c6b5 store 1 ,mem_mouse_cpi_count +3db7 204040c0 call mouse_spi_sdio_gpio_pollup +3db8 6800c6b5 fetch 1 ,mem_mouse_cpi_count + +mouse_reset_p3610_dpi: +3db9 1fe0fe80 add pdata ,0x80 ,pdata +3dba 1fed7e00 lshift8 pdata ,pdata +3dbb 1fe0fe05 add pdata ,mouse_p3610_dpi_address ,pdata +3dbc 1fe22200 copy pdata ,rega +3dbd 2020415a branch mouse_set_sensor_reg + +mouse_p3205_dpi: +3dbe 6000c6b5 store 1 ,mem_mouse_cpi_count +3dbf 20403d90 call moue_seting_cpi_count +3dc0 6800c6b5 fetch 1 ,mem_mouse_cpi_count +3dc1 58000006 setarg mouse_dpi_address +3dc2 20406414 call twspi_read +3dc3 1fe104f8 and pdata ,0xf8 ,temp +3dc4 6800c6b5 fetch 1 ,mem_mouse_cpi_count +3dc5 9840fe00 iadd temp ,pdata +3dc6 1fed7e00 lshift8 pdata ,pdata +3dc7 1fe0fe06 add pdata ,mouse_dpi_address ,pdata +3dc8 20206413 branch twspi_write + +mouse_init_environment: +3dc9 204033c4 call app_initflag_check +3dca 2022c316 branch mouse_eeprom_load_recon_info ,zero +3dcb 2040441c call mouse_ble_init_address +3dcc 204042e4 call mouse_store_eeprom_device_info +3dcd 202033bd branch app_initflag_store + +mouse_24g_pairing_button: +3dce 68014707 fetch 2 ,mem_24g_pairing_timer_count +3dcf 207a0000 rtn blank +3dd0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3dd1 c4088000 rtnbit0 mouse_enable_24g +3dd2 c3818000 rtnbit1 mosue_24g_pairing_flag +3dd3 c6130000 rtnmark1 mark_24g +3dd4 20404083 call mouse_check_key_gpio +3dd5 c1838000 rtnne mouse_lmr_button +3dd6 20404482 call mouse_devce_led_off +3dd7 d8e00003 arg mosue_24g_pairing_flag ,queue +3dd8 204043ce call mouse_enable_function_flag +3dd9 58000000 setarg 0 +3dda 600146ae store 2 ,mem_mouse_direct_timer +3ddb 6000c6b4 store 1 ,mem_mouse_send_blank_timer +3ddc 20403263 call g24_set0_mem_check_dongle_times +3ddd 68014682 fetch 2 ,mem_ui_state_map +3dde c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +3ddf c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +3de0 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +3de1 204042ca call mouse_stop_discovery +3de2 20202ead branch g24_start_pairing_sm1 + +mouse_idle: +3de3 20403dce call mouse_24g_pairing_button +3de4 20407e34 call ui_check_paring_button +3de5 20403d6a call mouse_dpi_cheak +3de6 20403de9 call mouse_usb_isr +3de7 20403ee0 call mouse_wheel_check +3de8 20203df7 branch mouse_usb_mode + +mouse_usb_isr: +3de9 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3dea c4080000 rtnbit0 mouse_enable_usb +3deb 204048d3 call usb_isr +3dec 202048fd branch usb_offline_state + +mouse_cheak_usb: +3ded 68108a04 hfetch 1 ,core_usb_addr +3dee c303bdf1 bbit0 7 ,mouse_usb_no_exsit +3def c283bdf4 bbit1 7 ,mouse_usb_exsit +3df0 20600000 rtn + +mouse_usb_no_exsit: +3df1 6800c6ff fetch 1 ,mem_usb_addr +3df2 c4038000 rtnbit0 7 +3df3 2020659a branch soft_reset_chip + +mouse_usb_exsit: +3df4 6800c6ff fetch 1 ,mem_usb_addr +3df5 c3838000 rtnbit1 7 +3df6 20204381 branch mouse_stop_bluetooth_mode + +mouse_usb_mode: +3df7 20403ded call mouse_cheak_usb +3df8 68108a04 hfetch 1 ,core_usb_addr +3df9 6000c6ff store 1 ,mem_usb_addr +3dfa c4038000 rtnbit0 7 +3dfb 20403e07 call mouse_clkn_check +3dfc 680246f9 fetch 4 ,mem_btclk_sensor +3dfd 6808c6fd fetcht 1 ,mem_wire_usb_interval +3dfe 98408400 iadd temp ,temp +3dff 1c427e00 copy clkn_bt ,pdata +3e00 98467c00 isub temp ,null +3e01 24610000 nrtn positive +3e02 600246f9 store 4 ,mem_btclk_sensor +3e03 20403f97 call mouse_motion +3e04 24740000 nrtn user +3e05 700d3804 jam 4 ,mem_usb_tx_enable +3e06 20203e0f branch mouse_wired_to_usb + +mouse_clkn_check: +3e07 680a46f9 fetcht 4 ,mem_btclk_sensor +3e08 1c427e00 copy clkn_bt ,pdata +3e09 98467c00 isub temp ,null +3e0a 24413e0c ncall mouse_clkn_timeout ,positive +3e0b 20600000 rtn + +mouse_clkn_timeout: +3e0c 58000000 setarg 0 +3e0d 600246f9 store 4 ,mem_btclk_sensor +3e0e 20600000 rtn + +mouse_wired_to_usb: +3e0f 68008d38 fetch 1 ,mem_usb_tx_enable +3e10 c4010000 rtnbit0 2 +3e11 20203e12 branch mouse_data_push + +mouse_data_push: +3e12 68108a04 hfetch 1 ,core_usb_addr +3e13 c4038000 rtnbit0 7 +3e14 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data +3e15 58000001 setarg ms_report_id +3e16 60008d54 store 1 ,mem_usb_mouse_data +3e17 6803c69a fetch 7 ,mem_mouse_key +3e18 e0a38000 istore 7 ,contw +3e19 20600000 rtn + +mouse_enable_clock_qdecoder: +3e1a 68110050 hfetch 2 ,core_clkoff +3e1b 793ffe0b set0 clock_off_qdecoder ,pdata +3e1c 60110050 hstore 2 ,core_clkoff +3e1d 20600000 rtn + +mouse_param_init: +3e1e 58008c00 setarg 0x8c00 +3e1f 60014575 store 2 ,mem_ui_uuid_table +3e20 58008e7a setarg 0x8e7a +3e21 600144bc store 2 ,mem_ui_le_uuid_table +3e22 58002402 setarg 0x2402 +3e23 600140bd store 2 ,mem_fcomp_mul +3e24 58002580 setarg 0x2580 +3e25 6001c0aa store 3 ,mem_class +3e26 70417303 jam 3 ,mem_lpm_mult_timeout +3e27 70415608 jam 8 ,mem_lpm_overhead +3e28 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +3e29 58000200 setarg 0x0200 +3e2a 60014154 store 2 ,mem_lpm_interval +3e2b 7044a617 jam 0x17 ,mem_le_local_mtu +3e2c 7044a817 jam 0x17 ,mem_le_remote_mtu +3e2d 58000a77 setarg 0x0a77 +3e2e 60014212 store 2 ,mem_spi_init_clk +3e2f 38000306 setsect 0 ,0x306 +3e30 38044440 setsect 1 ,0x4440 +3e31 38090000 setsect 2 ,0x10000 +3e32 380c4408 setsect 3 ,0x4408 +3e33 6004c577 store 9 ,mem_all_uuid_16bits +3e34 38001224 setsect 0 ,0x1224 +3e35 38044000 setsect 1 ,0x4000 +3e36 38080000 setsect 2 ,0x0 +3e37 e0a28000 istore 5 ,contw +3e38 3803ffff setsect 0 ,0x3ffff +3e39 3806fe23 setsect 1 ,0x2fe23 +3e3a 380999d9 setsect 2 ,0x199d9 +3e3b 380c020d setsect 3 ,0x20d +3e3c 60044098 store 8 ,mem_features +3e3d 5800012c setarg 0x012c +3e3e 60014707 store 2 ,mem_24g_pairing_timer_count +3e3f 204057a3 call le_modified_name +3e40 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3e41 c40f8000 rtnbit0 mouse_enable_gpio_control_adc_sensor +3e42 20403e44 call mouse_sensor_set_angle +3e43 20203e4c branch mouse_select_adc + +mouse_sensor_set_angle: +3e44 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio +3e45 204067fb call gpio_config_input +3e46 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio +3e47 2040681d call gpio_get_bit +3e48 7046f603 jam mouse_3clk_angle ,mem_config_sensor_angle +3e49 20608000 rtn true +3e4a 7046f602 jam mouse_12clk_angle ,mem_config_sensor_angle +3e4b 20600000 rtn + +mouse_select_adc: +3e4c 6808c6f8 fetcht 1 ,mem_select_adc_gpio +3e4d 204067fb call gpio_config_input +3e4e 6808c6f8 fetcht 1 ,mem_select_adc_gpio +3e4f 2040681d call gpio_get_bit +3e50 70422d00 jam adc_config_vinlpm ,mem_adc_config_flag +3e51 20608000 rtn true +3e52 70422d02 jam adc_config_gpio ,mem_adc_config_flag +3e53 20600000 rtn + +mouse_adc_init: +3e54 6800c22d fetch 1 ,mem_adc_config_flag +3e55 c0003e59 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm +3e56 c000be62 beq adc_config_hvin ,mouse_adc_init_data_hvin +3e57 c0013e6b beq adc_config_gpio ,mouse_adc_init_data_io +3e58 20203e59 branch mouse_adc_init_data_vinlpm + +mouse_adc_init_data_vinlpm: +3e59 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data +3e5a 68014227 fetch 2 ,mem_3v_adc_vinlpm_data +3e5b 98467e00 isub temp ,pdata +3e5c 1feffe14 mul32 pdata ,20 ,pdata +3e5d 1fe6fc64 div pdata ,100 +3e5e 20407f86 call wait_div_end +3e5f 1807fe00 quotient pdata +3e60 600146d0 store 2 ,mem_adc_reference_voltage +3e61 20600000 rtn + +mouse_adc_init_data_hvin: +3e62 6809421f fetcht 2 ,mem_1v_adc_hvin_data +3e63 68014225 fetch 2 ,mem_5v_adc_hvin_data +3e64 98467e00 isub temp ,pdata +3e65 1feffee6 mul32 pdata ,230 ,pdata +3e66 1fe6fd90 div pdata ,400 +3e67 20407f86 call wait_div_end +3e68 1807fe00 quotient pdata +3e69 600146d0 store 2 ,mem_adc_reference_voltage +3e6a 20600000 rtn + +mouse_adc_init_data_io: +3e6b 68014223 fetch 2 ,mem_1v_adc_io_data +3e6c 600146d0 store 2 ,mem_adc_reference_voltage +3e6d 20600000 rtn + +mouse_gpio_init: +3e6e 6808c23a fetcht 1 ,mem_eeprom_wp_gpio +3e6f 2040680e call gpio_config_output +3e70 204048fb call usb_offline_check_init +3e71 6808c6e2 fetcht 1 ,mem_lbutton_gpio +3e72 204067fb call gpio_config_input +3e73 6808c6e3 fetcht 1 ,mem_rbutton_gpio +3e74 204067fb call gpio_config_input +3e75 6808c6e4 fetcht 1 ,mem_mbutton_gpio +3e76 204067fb call gpio_config_input +3e77 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3e78 204067fb call gpio_config_input +3e79 6808c6dc fetcht 1 ,mem_sensor_reset_gpio +3e7a 2040680e call gpio_config_output +3e7b 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3e7c 204067fb call gpio_config_input +3e7d 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3e7e 204067fb call gpio_config_input +3e7f 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3e80 204067fb call gpio_config_input +3e81 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3e82 204067fb call gpio_config_input +3e83 6808c6e5 fetcht 1 ,mem_bk_button_gpio +3e84 204067fb call gpio_config_input +3e85 6808c6e6 fetcht 1 ,mem_fw_button_gpio +3e86 204067fb call gpio_config_input +3e87 6808c6ef fetcht 1 ,mem_config_low_voltage_alarm_gpio +3e88 2040680e call gpio_config_output +3e89 6808c6f0 fetcht 1 ,mem_config_device1_led_gpio +3e8a 2040680e call gpio_config_output +3e8b 6808c6f1 fetcht 1 ,mem_config_device2_led_gpio +3e8c 2040680e call gpio_config_output +3e8d 6808c6f2 fetcht 1 ,mem_config_device3_led_gpio +3e8e 2040680e call gpio_config_output +3e8f 6808c6f4 fetcht 1 ,mem_dpi_led_gpio +3e90 2040680e call gpio_config_output +3e91 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +3e92 204067fb call gpio_config_input +3e93 6808c6ec fetcht 1 ,mem_config_bt_button_gpio +3e94 204067fb call gpio_config_input +3e95 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +3e96 202067fb branch gpio_config_input + +mouse_wheel_gpio_set_wake: +3e97 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3e98 204067dd call gpio_set_wake_by_current_state +3e99 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3e9a 204067dd call gpio_set_wake_by_current_state +3e9b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3e9c 204067dd call gpio_set_wake_by_current_state +3e9d 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3e9e 202067dd branch gpio_set_wake_by_current_state + +mouse_before_hibernate_wheel_gpio_set: +3e9f 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3ea0 20403ea7 call mouse_gpio_set_pupd_by_input +3ea1 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3ea2 20403ea7 call mouse_gpio_set_pupd_by_input +3ea3 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3ea4 20403ea7 call mouse_gpio_set_pupd_by_input +3ea5 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3ea6 20203ea7 branch mouse_gpio_set_pupd_by_input + +mouse_gpio_set_pupd_by_input: +3ea7 18467cff sub temp ,ui_button_gpio_disable ,null +3ea8 20628000 rtn zero +3ea9 18410e7f and temp ,0x7f ,queue +3eaa 6812011c hfetch 4 ,core_gpio_in +3eab afefffff qisolate1 pdata +3eac 68120078 hfetch 4 ,core_gpio_pu0 +3ead f920fe00 qsetflag true ,pdata +3eae 60120078 hstore 4 ,core_gpio_pu0 +3eaf 6812007c hfetch 4 ,core_gpio_pd0 +3eb0 fd20fe00 nqsetflag true ,pdata +3eb1 6012007c hstore 4 ,core_gpio_pd0 +3eb2 20600000 rtn + +mouse_before_hibernate: +3eb3 78347c00 enable user +3eb4 68120138 hfetch 4 ,0x8138 +3eb5 79347e1a setflag user ,26 ,pdata +3eb6 6012004c hstore 4 ,core_lpm_reg +3eb7 20402c21 call lpm_write_ctrl +3eb8 20404482 call mouse_devce_led_off +3eb9 20403e9f call mouse_before_hibernate_wheel_gpio_set +3eba 20203ebf branch mouse_lpm_before_common + +mouse_process_lpm_before: +3ebb 20403ebf call mouse_lpm_before_common +3ebc 680080a0 fetch 1 ,mem_lpm_current_mult +3ebd 247a0000 nrtn blank +3ebe 202067ed branch gpio_clr_wake + +mouse_lpm_before_common: +3ebf 20403ee0 call mouse_wheel_check +3ec0 d8400019 arg mouse_spi1_clk_gpio ,temp +3ec1 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3ec2 2feffe12 isolate1 mouse_enable_spi2 ,pdata +3ec3 2040bede call mouse_spi_clk_gpio ,true +3ec4 2040680e call gpio_config_output +3ec5 204063ee call twspi_disable +3ec6 6808c6e2 fetcht 1 ,mem_lbutton_gpio +3ec7 204067dd call gpio_set_wake_by_current_state +3ec8 6808c6e3 fetcht 1 ,mem_rbutton_gpio +3ec9 204067dd call gpio_set_wake_by_current_state +3eca 6808c6e4 fetcht 1 ,mem_mbutton_gpio +3ecb 204067dd call gpio_set_wake_by_current_state +3ecc 6808c6e5 fetcht 1 ,mem_bk_button_gpio +3ecd 204067dd call gpio_set_wake_by_current_state +3ece 6808c6e6 fetcht 1 ,mem_fw_button_gpio +3ecf 204067dd call gpio_set_wake_by_current_state +3ed0 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +3ed1 204067dd call gpio_set_wake_by_current_state +3ed2 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +3ed3 204067dd call gpio_set_wake_by_current_state +3ed4 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3ed5 204067dd call gpio_set_wake_by_current_state +3ed6 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3ed7 204067dd call gpio_set_wake_by_current_state +3ed8 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3ed9 204067dd call gpio_set_wake_by_current_state +3eda 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3edb 204067dd call gpio_set_wake_by_current_state +3edc 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3edd 202067e1 branch gpio_set_wake + +mouse_spi_clk_gpio: +3ede d840001e arg mouse_spi2_clk_gpio ,temp +3edf 20600000 rtn + +mouse_wheel_check: +3ee0 44f2401c bpatch patch1c_4 ,mem_patch1c +3ee1 20403eee call mouse_t_wheel_scan +3ee2 20403f36 call mouse_wheel_scan +3ee3 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3ee4 6808c6b7 fetcht 1 ,mem_wheel_tb_old_pinlevel +3ee5 6000c6b7 store 1 ,mem_wheel_tb_old_pinlevel +3ee6 98467c00 isub temp ,null +3ee7 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero +3ee8 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3ee9 6808c6bd fetcht 1 ,mem_mwheel_b_old_pinlevel +3eea 6000c6bd store 1 ,mem_mwheel_b_old_pinlevel +3eeb 98467c00 isub temp ,null +3eec 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero +3eed 20600000 rtn + +mouse_t_wheel_scan: +3eee 6800c6ea fetch 1 ,mem_whee_ta_data_gpio +3eef c17f8000 rtneq gpio_disable +3ef0 da200000 arg 0 ,rega +3ef1 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3ef2 2040681d call gpio_get_bit +3ef3 7920a200 setflag true ,0 ,rega +3ef4 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3ef5 2040681d call gpio_get_bit +3ef6 7920a201 setflag true ,1 ,rega +3ef7 1a227e00 copy rega ,pdata +3ef8 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel +3ef9 c000befe beq 0x01 ,mouse_t_wheel_scan_judge1 +3efa c0013f02 beq 0x02 ,mouse_t_wheel_scan_judge2 +3efb 6800c6b9 fetch 1 ,mem_wheel_tog +3efc c283bf0e bbit1 7 ,mouse_t_wheel_scan_judge3 +3efd 20600000 rtn + +mouse_t_wheel_scan_judge1: +3efe 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +3eff c0003f06 beq 0 ,mouse_t_wheel_scan_judge11 +3f00 c001bf08 beq 3 ,mouse_t_wheel_scan_judge12 +3f01 20600000 rtn + +mouse_t_wheel_scan_judge2: +3f02 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +3f03 c0003f0a beq 0 ,mouse_t_wheel_scan_judge21 +3f04 c001bf0c beq 3 ,mouse_t_wheel_scan_judge22 +3f05 20600000 rtn + +mouse_t_wheel_scan_judge11: +3f06 7046b982 jam 0x82 ,mem_wheel_tog +3f07 20600000 rtn + +mouse_t_wheel_scan_judge12: +3f08 7046b981 jam 0x81 ,mem_wheel_tog +3f09 20600000 rtn + +mouse_t_wheel_scan_judge21: +3f0a 7046b980 jam 0x80 ,mem_wheel_tog +3f0b 20600000 rtn + +mouse_t_wheel_scan_judge22: +3f0c 7046b983 jam 0x83 ,mem_wheel_tog +3f0d 20600000 rtn + +mouse_t_wheel_scan_judge3: +3f0e 6800c6b9 fetch 1 ,mem_wheel_tog +3f0f 793ffe07 set0 7 ,pdata +3f10 6000c6b9 store 1 ,mem_wheel_tog +3f11 c0003f16 beq 0 ,mouse_t_wheel_scan_judge30 +3f12 c000bf19 beq 1 ,mouse_t_wheel_scan_judge31 +3f13 c0013f1c beq 2 ,mouse_t_wheel_scan_judge32 +3f14 c001bf1f beq 3 ,mouse_t_wheel_scan_judge33 +3f15 20600000 rtn + +mouse_t_wheel_scan_judge30: +3f16 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f17 c001bf22 beq 3 ,mouse_wheel_t_forward +3f18 20600000 rtn + +mouse_t_wheel_scan_judge31: +3f19 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f1a c0003f22 beq 0 ,mouse_wheel_t_forward +3f1b 20600000 rtn + +mouse_t_wheel_scan_judge32: +3f1c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f1d c001bf2c beq 3 ,mouse_wheel_t_back +3f1e 20600000 rtn + +mouse_t_wheel_scan_judge33: +3f1f 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f20 c0003f2c beq 0 ,mouse_wheel_t_back +3f21 20600000 rtn + +mouse_wheel_t_forward: +3f22 6800c6bc fetch 1 ,mem_mouse_tz_data_count1 +3f23 1fe0fe01 increase 1 ,pdata +3f24 6000c6bc store 1 ,mem_mouse_tz_data_count1 +3f25 1fe67c01 sub pdata ,1 ,null +3f26 20610000 rtn positive +3f27 7046bc00 jam 0 ,mem_mouse_tz_data_count1 +3f28 6800c6ba fetch 1 ,mem_mouse_tz_data +3f29 1fe0fe01 increase 1 ,pdata +3f2a 6000c6ba store 1 ,mem_mouse_tz_data +3f2b 20600000 rtn + +mouse_wheel_t_back: +3f2c 6800c6bb fetch 1 ,mem_mouse_tz_data_count +3f2d 1fe0fe01 increase 1 ,pdata +3f2e 6000c6bb store 1 ,mem_mouse_tz_data_count +3f2f 1fe67c01 sub pdata ,1 ,null +3f30 20610000 rtn positive +3f31 7046bb00 jam 0 ,mem_mouse_tz_data_count +3f32 6800c6ba fetch 1 ,mem_mouse_tz_data +3f33 1fe0ffff increase -1 ,pdata +3f34 6000c6ba store 1 ,mem_mouse_tz_data +3f35 20600000 rtn + +mouse_wheel_scan: +3f36 6800c6e8 fetch 1 ,mem_whee_a_data_gpio +3f37 c17f8000 rtneq gpio_disable +3f38 da200000 arg 0 ,rega +3f39 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3f3a 2040681d call gpio_get_bit +3f3b 7920a200 setflag true ,0 ,rega +3f3c 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3f3d 2040681d call gpio_get_bit +3f3e 7920a201 setflag true ,1 ,rega +3f3f 1a227e00 copy rega ,pdata +3f40 6000c6be store 1 ,mem_mwheel_b_new_pinlevel +3f41 c000bf46 beq 0x01 ,mouse_wheel_scan_judge1 +3f42 c0013f4a beq 0x02 ,mouse_wheel_scan_judge2 +3f43 6800c6bf fetch 1 ,mem_mwheel_tog +3f44 c283bf56 bbit1 7 ,mouse_wheel_scan_judge3 +3f45 20600000 rtn + +mouse_wheel_scan_judge1: +3f46 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel +3f47 c0003f4e beq 0 ,mouse_wheel_scan_judge11 +3f48 c001bf50 beq 3 ,mouse_wheel_scan_judge12 +3f49 20600000 rtn + +mouse_wheel_scan_judge2: +3f4a 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel +3f4b c0003f52 beq 0 ,mouse_wheel_scan_judge21 +3f4c c001bf54 beq 3 ,mouse_wheel_scan_judge22 +3f4d 20600000 rtn + +mouse_wheel_scan_judge11: +3f4e 7046bf82 jam 0x82 ,mem_mwheel_tog +3f4f 20600000 rtn + +mouse_wheel_scan_judge12: +3f50 7046bf81 jam 0x81 ,mem_mwheel_tog +3f51 20600000 rtn + +mouse_wheel_scan_judge21: +3f52 7046bf80 jam 0x80 ,mem_mwheel_tog +3f53 20600000 rtn + +mouse_wheel_scan_judge22: +3f54 7046bf83 jam 0x83 ,mem_mwheel_tog +3f55 20600000 rtn + +mouse_wheel_scan_judge3: +3f56 6800c6bf fetch 1 ,mem_mwheel_tog +3f57 793ffe07 set0 7 ,pdata +3f58 6000c6bf store 1 ,mem_mwheel_tog +3f59 c0003f5e beq 0 ,mouse_wheel_scan_judge30 +3f5a c000bf61 beq 1 ,mouse_wheel_scan_judge31 +3f5b c0013f64 beq 2 ,mouse_wheel_scan_judge32 +3f5c c001bf67 beq 3 ,mouse_wheel_scan_judge33 +3f5d 20600000 rtn + +mouse_wheel_scan_judge30: +3f5e 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f5f c001bf6a beq 3 ,mouse_wheel_forward +3f60 20600000 rtn + +mouse_wheel_scan_judge31: +3f61 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f62 c0003f6a beq 0 ,mouse_wheel_forward +3f63 20600000 rtn + +mouse_wheel_scan_judge32: +3f64 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f65 c001bf6f beq 3 ,mouse_wheel_back +3f66 20600000 rtn + +mouse_wheel_scan_judge33: +3f67 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f68 c0003f6f beq 0 ,mouse_wheel_back +3f69 20600000 rtn + +mouse_wheel_forward: +3f6a 7046c200 jam 0 ,mem_mouse_z_data_count1 +3f6b 6800c6c0 fetch 1 ,mem_mouse_z_data +3f6c 1fe0fe01 increase 1 ,pdata +3f6d 6000c6c0 store 1 ,mem_mouse_z_data +3f6e 20600000 rtn + +mouse_wheel_back: +3f6f 7046c100 jam 0 ,mem_mouse_z_data_count +3f70 6800c6c0 fetch 1 ,mem_mouse_z_data +3f71 1fe0ffff increase -1 ,pdata +3f72 6000c6c0 store 1 ,mem_mouse_z_data +3f73 20600000 rtn + +mouse_hid_connected: +3f74 58000002 setarg hid_handshake_timeout +3f75 6000c680 store 1 ,mem_hid_handshake_timer_count +3f76 20600000 rtn + +mouse_send_process: +3f77 6800c1e2 fetch 1 ,mem_app_handshake_flag +3f78 207a0000 rtn blank +3f79 20405271 call l2cap_malloc_is_fifo_nearly_full +3f7a 247a0000 nrtn blank +3f7b 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3f7c c281bf8a bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data +3f7d c2803f8a bbit1 mouse_select_device_flag ,mouse_send_empty_data +3f7e c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +3f7f 20403f97 call mouse_motion +3f80 24740000 nrtn user + +mouse_send_data: +3f81 da200009 arg 9 ,rega +3f82 20404d63 call hid_malloc_tx_buff +3f83 6801424e fetch 2 ,mem_hid_int_remote_cid +3f84 e0a10000 istore 2 ,contw +3f85 580002a1 setarg 0x02a1 +3f86 e0a10000 istore 2 ,contw +3f87 6803c69a fetch 7 ,mem_mouse_key +3f88 e0a38000 istore 7 ,contw +3f89 20600000 rtn + +mouse_send_empty_data: +3f8a 58000000 setarg 0 +3f8b 6003c69a store 7 ,mem_mouse_key +3f8c 20203f81 branch mouse_send_data + +mouse_no_data_timer_init: +3f8d 680146aa fetch 2 ,mem_mouse_no_data_timeout +3f8e 600146b0 store 2 ,mem_mouse_no_data_timer +3f8f 20600000 rtn + +mouse_fill_data_le: +3f90 44f2c01c bpatch patch1c_5 ,mem_patch1c +3f91 da200007 arg 7 ,rega +3f92 6809446f fetcht 2 ,mem_le_notify_handle +3f93 20405a64 call le_att_malloc_tx_notify +3f94 6803c69a fetch 7 ,mem_mouse_key +3f95 e0a38000 istore 7 ,contw +3f96 20600000 rtn + +mouse_motion: +3f97 44f3401c bpatch patch1c_6 ,mem_patch1c +3f98 78547c00 disable user +3f99 58000000 setarg 0 +3f9a 6003469b store 6 ,mem_mouse_x +3f9b 20403fb5 call mouse_cheak_sensor_data +3f9c 20404079 call mouse_zwheel +3f9d 2040407e call mouse_t_zwheel +3f9e 20404099 call mouse_key +3f9f 24740000 nrtn user +3fa0 20403f8d call mouse_no_data_timer_init +3fa1 d8e00008 arg mouse_statue_up_flag ,queue +3fa2 202043ce branch mouse_enable_function_flag + +motion_6clk_direction_dispose: +3fa3 6801469b fetch 2 ,mem_mouse_x +3fa4 1fe67e00 sub pdata ,0 ,pdata +3fa5 6001469b store 2 ,mem_mouse_x +3fa6 20207fe7 branch enable_user + +motion_12clk_direction_dispose: +3fa7 6801469d fetch 2 ,mem_mouse_y +3fa8 1fe67e00 sub pdata ,0 ,pdata +3fa9 6001469d store 2 ,mem_mouse_y +3faa 20207fe7 branch enable_user + +motion_9clk_direction_dispose: +3fab 6801469d fetch 2 ,mem_mouse_y +3fac 1fe67e00 sub pdata ,0 ,pdata +3fad 6001469d store 2 ,mem_mouse_y +3fae 6801469b fetch 2 ,mem_mouse_x +3faf 1fe67e00 sub pdata ,0 ,pdata +3fb0 6001469b store 2 ,mem_mouse_x +3fb1 20404002 call mouse_sensor_data_swap_places +3fb2 20207fe7 branch enable_user + +motion_3clk_direction_dispose: +3fb3 20404002 call mouse_sensor_data_swap_places +3fb4 20207fe7 branch enable_user + +mouse_cheak_sensor_data: +3fb5 6800c239 fetch 1 ,mem_spi_write_flash_sm +3fb6 c1800000 rtnne flash_sm_no_buys +3fb7 6800c6e0 fetch 1 ,mem_config_sensor_type +3fb8 c0003fe2 beq p3205 ,mouse_p32xx_sensor_motion +3fb9 c000bfe2 beq p3065 ,mouse_p32xx_sensor_motion +3fba c0013fe2 beq ka8 ,mouse_p32xx_sensor_motion +3fbb c001bfe2 beq p3204 ,mouse_p32xx_sensor_motion +3fbc c0023fc4 beq p3212 ,mouse_p3212_sensor_motion +3fbd c002c010 beq p3610 ,mouse_p3610_sensor_motion +3fbe c0033fe2 beq p3065_xy ,mouse_p32xx_sensor_motion +3fbf 20203fe2 branch mouse_p32xx_sensor_motion + +mouse_clear_sensor_data: +3fc0 6800c6a7 fetch 1 ,mem_mouse_move_flag +3fc1 205a405d call mouse_read_sensor_common ,blank +3fc2 7046a701 jam 1 ,mem_mouse_move_flag +3fc3 20600000 rtn + +mouse_p3212_sensor_motion: +3fc4 20403fc0 call mouse_clear_sensor_data +3fc5 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3fc6 2040681d call gpio_get_bit +3fc7 24608000 nrtn true +3fc8 58000000 setarg pan_reg_pid_l +3fc9 20406414 call twspi_read +3fca c09840d1 bne p32xx_id1 ,mouse_twspi_reset +3fcb 58000002 setarg pan_reg_motion_staus +3fcc 20406414 call twspi_read +3fcd c4038000 rtnbit0 7 +3fce 2040405d call mouse_read_sensor_common +3fcf 20403fde call mouse_read_3212sensor_xy_high +3fd0 6000c6a1 store 1 ,mem_mouse_xy_h +3fd1 1ff1fe00 rshift4 pdata ,pdata +3fd2 20404169 call extsign_bit3 +3fd3 6000c69c store 1 ,mem_mouse_x + 1 +3fd4 6800c6a1 fetch 1 ,mem_mouse_xy_h +3fd5 1fe17e0f and pdata ,0x0f ,pdata +3fd6 20404169 call extsign_bit3 +3fd7 6000c69e store 1 ,mem_mouse_y + 1 +3fd8 6800c6f6 fetch 1 ,mem_config_sensor_angle +3fd9 c0003fa3 beq mouse_6clk_angle ,motion_6clk_direction_dispose +3fda c000bfab beq mouse_9clk_angle ,motion_9clk_direction_dispose +3fdb c0013fa7 beq mouse_12clk_angle ,motion_12clk_direction_dispose +3fdc c001bfb3 beq mouse_3clk_angle ,motion_3clk_direction_dispose +3fdd 20600000 rtn + +mouse_read_3212sensor_xy_high: +3fde 58000012 setarg 0x12 +3fdf 20206414 branch twspi_read + +mouse_p3065_judge: +3fe0 c018bfea beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +3fe1 202040d1 branch mouse_twspi_reset + +mouse_p32xx_sensor_motion: +3fe2 20403fc0 call mouse_clear_sensor_data +3fe3 78547c00 disable user +3fe4 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3fe5 2040681d call gpio_get_bit +3fe6 24608000 nrtn true +3fe7 58000000 setarg pan_reg_pid_l +3fe8 20406414 call twspi_read +3fe9 c0983fe0 bne p32xx_id1 ,mouse_p3065_judge + +mouse_p32xx_sensor_motion_1: +3fea 58000002 setarg pan_reg_motion_staus +3feb 20406414 call twspi_read +3fec c4038000 rtnbit0 7 +3fed 2040405d call mouse_read_sensor_common +3fee 6800c69b fetch 1 ,mem_mouse_x +3fef 20404165 call extsign +3ff0 6001469b store 2 ,mem_mouse_x +3ff1 6800c69d fetch 1 ,mem_mouse_y +3ff2 20404165 call extsign +3ff3 6001469d store 2 ,mem_mouse_y +3ff4 6800c6f6 fetch 1 ,mem_config_sensor_angle +3ff5 c0003ffa beq mouse_6clk_angle ,motion32xx_6clk_direction_selection +3ff6 c000bffc beq mouse_9clk_angle ,motion32xx_9clk_direction_selection +3ff7 c0013ffe beq mouse_12clk_angle ,motion32xx_12clk_direction_selection +3ff8 c001c000 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection +3ff9 20600000 rtn + +motion32xx_6clk_direction_selection: +3ffa 20403fa3 call motion_6clk_direction_dispose +3ffb 202040b3 branch mouse_sensor_sdio_low + +motion32xx_9clk_direction_selection: +3ffc 20403fab call motion_9clk_direction_dispose +3ffd 202040b3 branch mouse_sensor_sdio_low + +motion32xx_12clk_direction_selection: +3ffe 20403fa7 call motion_12clk_direction_dispose +3fff 202040b3 branch mouse_sensor_sdio_low + +motion32xx_3clk_direction_selection: +4000 20403fb3 call motion_3clk_direction_dispose +4001 202040b3 branch mouse_sensor_sdio_low + +mouse_sensor_data_swap_places: +4002 6801469d fetch 2 ,mem_mouse_y +4003 6809469b fetcht 2 ,mem_mouse_x +4004 6001469b store 2 ,mem_mouse_x +4005 6009469d storet 2 ,mem_mouse_y +4006 20600000 rtn + +mouse_p3610sensor_read: +4007 2040640f call spi_ncs_enable +4008 20000064 nop 100 +4009 1a427e00 copy regb ,pdata +400a 20406414 call twspi_read +400b 1fe22400 copy pdata ,regb +400c 20406411 call spi_ncs_disable +400d 20000064 nop 100 +400e 1a427e00 copy regb ,pdata +400f 20600000 rtn + +mouse_p3610_sensor_motion: +4010 78547c00 disable user +4011 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +4012 2040681d call gpio_get_bit +4013 24608000 nrtn true +4014 da400002 arg pan_reg_motion_staus ,regb +4015 20404007 call mouse_p3610sensor_read +4016 c4038000 rtnbit0 7 +4017 da400000 arg pan_reg_pid_l ,regb +4018 20404007 call mouse_p3610sensor_read +4019 6000c6dd store 1 ,mem_sensor_id1 +401a c09f4145 bne p3610_id1 ,mouse_init_3610sensor_reset +401b 6800c6a7 fetch 1 ,mem_mouse_move_flag +401c 205a4039 call mouse_read_sensor3610_data ,blank +401d 7046a701 jam 1 ,mem_mouse_move_flag +401e 20404039 call mouse_read_sensor3610_data +401f 6800c6a1 fetch 1 ,mem_mouse_xy_h +4020 1ff1fe00 rshift4 pdata ,pdata +4021 20404169 call extsign_bit3 +4022 6000c69c store 1 ,mem_mouse_x + 1 +4023 6800c6a1 fetch 1 ,mem_mouse_xy_h +4024 1fe17e0f and pdata ,0x0f ,pdata +4025 20404169 call extsign_bit3 +4026 6000c69e store 1 ,mem_mouse_y + 1 +4027 6800c6f6 fetch 1 ,mem_config_sensor_angle +4028 c0004031 beq 0 ,motion3610_6clk_direction_selection +4029 c000c035 beq 1 ,motion3610_9clk_direction_selection +402a c0014033 beq 2 ,motion3610_12clk_direction_selection +402b c001c037 beq 3 ,motion3610_3clk_direction_selection +402c 20600000 rtn + +mouse_3610_smart_select: +402d 6800c6a4 fetch 1 ,mem_sensor_smart_flag +402e c0004051 beq p3610_smart_enable ,mouse_3610_smart_disable +402f c000c045 beq p3610_smart_disable ,mouse_3610_smart_enable +4030 20600000 rtn + +motion3610_6clk_direction_selection: +4031 20403fa3 call motion_6clk_direction_dispose +4032 2020402d branch mouse_3610_smart_select + +motion3610_12clk_direction_selection: +4033 20403fa7 call motion_12clk_direction_dispose +4034 2020402d branch mouse_3610_smart_select + +motion3610_9clk_direction_selection: +4035 20403fab call motion_9clk_direction_dispose +4036 2020402d branch mouse_3610_smart_select + +motion3610_3clk_direction_selection: +4037 20403fb3 call motion_3clk_direction_dispose +4038 2020402d branch mouse_3610_smart_select + +mouse_read_sensor3610_data: +4039 2040640f call spi_ncs_enable +403a 2040405d call mouse_read_sensor_common +403b dfe00005 arg 5 ,pdata +403c 20406414 call twspi_read +403d 6000c6a1 store 1 ,mem_mouse_xy_h +403e dfe00007 arg 7 ,pdata +403f 20406414 call twspi_read +4040 6000c6a2 store 1 ,mem_sensor_shutter_hi +4041 dfe00008 arg 8 ,pdata +4042 20406414 call twspi_read +4043 6000c6a3 store 1 ,mem_sensor_shutter_lo +4044 20206411 branch spi_ncs_disable + +mouse_3610_smart_enable: +4045 6800c6a2 fetch 1 ,mem_sensor_shutter_hi +4046 c1800000 rtnne 0 +4047 6800c6a3 fetch 1 ,mem_sensor_shutter_lo +4048 1fe67c2d sub pdata ,45 ,null +4049 20610000 rtn positive +404a 7046a400 jam p3610_smart_enable ,mem_sensor_smart_flag +404b 5800ba41 setarg 0xba41 +404c 20406405 call sensor_write +404d 58000032 setarg 0x0032 +404e 20406405 call sensor_write +404f 5800b541 setarg 0xb541 +4050 20206405 branch sensor_write + +mouse_3610_smart_disable: +4051 6800c6a2 fetch 1 ,mem_sensor_shutter_hi +4052 c1800000 rtnne 0 +4053 6800c6a3 fetch 1 ,mem_sensor_shutter_lo +4054 1fe67c2d sub pdata ,45 ,null +4055 24610000 nrtn positive +4056 7046a401 jam p3610_smart_disable ,mem_sensor_smart_flag +4057 5800ba41 setarg 0xba41 +4058 20406405 call sensor_write +4059 58008032 setarg 0x8032 +405a 20406405 call sensor_write +405b 5800b541 setarg 0xb541 +405c 20206405 branch sensor_write + +mouse_read_sensor_common: +405d dfe00003 arg pan_reg_delta_x ,pdata +405e 20406414 call twspi_read +405f 6001469b store 2 ,mem_mouse_x +4060 dfe00004 arg pan_reg_delta_y ,pdata +4061 20406414 call twspi_read +4062 6001469d store 2 ,mem_mouse_y +4063 20600000 rtn + +mouse_set_qdecoder_x: +4064 d840001b arg mouse_default_xa_gpio ,temp +4065 204067fb call gpio_config_input +4066 d840001b arg mouse_default_xa_gpio ,temp +4067 2040681d call gpio_get_bit +4068 20608000 rtn true +4069 68108109 hfetch 1 ,core_qdec_cntx +406a 79207e04 set1 4 ,pdata +406b 60108109 hstore 1 ,core_qdec_cntx +406c 20600000 rtn + +mouse_hardware_zwheel: +406d 6808c6c0 fetcht 1 ,mem_mouse_z_data +406e 68108109 hfetch 1 ,core_qdec_cntx +406f 9840fe00 iadd temp ,pdata +4070 207a0000 rtn blank +4071 6000c69f store 1 ,mem_mouse_z +4072 7046c000 jam 0 ,mem_mouse_z_data +4073 20207fe7 branch enable_user + +mouse_hardware_zwheel_beforelpm: +4074 6808c6c0 fetcht 1 ,mem_mouse_z_data +4075 68108109 hfetch 1 ,core_qdec_cntx +4076 9840fe00 iadd temp ,pdata +4077 6000c6c0 store 1 ,mem_mouse_z_data +4078 20600000 rtn + +mouse_zwheel: +4079 6800c6c0 fetch 1 ,mem_mouse_z_data +407a 207a0000 rtn blank +407b 6000c69f store 1 ,mem_mouse_z +407c 7046c000 jam 0 ,mem_mouse_z_data +407d 20207fe7 branch enable_user + +mouse_t_zwheel: +407e 6800c6ba fetch 1 ,mem_mouse_tz_data +407f 207a0000 rtn blank +4080 6000c6a0 store 1 ,mem_mouse_tz +4081 7046ba00 jam 0 ,mem_mouse_tz_data +4082 20207fe7 branch enable_user + +mouse_check_key_gpio: +4083 da200000 arg 0 ,rega +4084 6808c6e2 fetcht 1 ,mem_lbutton_gpio +4085 2040681d call gpio_get_bit +4086 7920a200 setflag true ,0 ,rega +4087 6808c6e3 fetcht 1 ,mem_rbutton_gpio +4088 2040681d call gpio_get_bit +4089 7920a201 setflag true ,1 ,rega +408a 6808c6e4 fetcht 1 ,mem_mbutton_gpio +408b 2040681d call gpio_get_bit +408c 7920a202 setflag true ,2 ,rega +408d 20404090 call mouse_check_s_key_gpio +408e 1a227e00 copy rega ,pdata +408f 20600000 rtn + +mouse_check_s_key_gpio: +4090 6800c6e5 fetch 1 ,mem_bk_button_gpio +4091 c17f8000 rtneq gpio_disable +4092 6808c6e5 fetcht 1 ,mem_bk_button_gpio +4093 2040681d call gpio_get_bit +4094 7920a203 setflag true ,3 ,rega +4095 6808c6e6 fetcht 1 ,mem_fw_button_gpio +4096 2040681d call gpio_get_bit +4097 7920a204 setflag true ,4 ,rega +4098 20600000 rtn + +mouse_key: +4099 20404083 call mouse_check_key_gpio +409a 204040a8 call mouse_set_mult +409b 204040a3 call mouse_24g_key +409c 1a227e00 copy rega ,pdata +409d 6808c69a fetcht 1 ,mem_mouse_key +409e 6000c69a store 1 ,mem_mouse_key +409f 9842fe00 ixor temp ,pdata +40a0 1fe67c00 sub pdata ,0 ,null +40a1 20628000 rtn zero +40a2 20207fe7 branch enable_user + +mouse_24g_key: +40a3 c6930000 rtnmark0 mark_24g +40a4 1a227e00 copy rega ,pdata +40a5 207a0000 rtn blank +40a6 6000c69a store 1 ,mem_mouse_key +40a7 20207fe7 branch enable_user + +mouse_set_mult: +40a8 68014682 fetch 2 ,mem_ui_state_map +40a9 c284c0ad bbit1 ui_state_ble_connected ,mouse_set_ble_mult +40aa 68014682 fetch 2 ,mem_ui_state_map +40ab c28040b0 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +40ac 20600000 rtn + +mouse_set_ble_mult: +40ad 1a227e00 copy rega ,pdata +40ae 243a5820 nbranch le_set_config_short_mult ,blank +40af 20205822 branch le_clr_config_short_mult + +mouse_set_bt_mult: +40b0 1a227e00 copy rega ,pdata +40b1 243a2bc7 nbranch classic_bt_set_mult_short_flag ,blank +40b2 20202bc9 branch classic_bt_clr_mult_short_flag + +mouse_sensor_sdio_low: +40b3 44f3c01c bpatch patch1c_7 ,mem_patch1c +40b4 d840001a arg mouse_spi1_sdio_gpio ,temp +40b5 680246d3 fetch mouse_flag_len ,mem_mouse_flag +40b6 2feffe12 isolate1 mouse_enable_spi2 ,pdata +40b7 2040c0be call mouse_sensor_sdio_low2 ,true +40b8 2040681d call gpio_get_bit +40b9 20608000 rtn true +40ba 5800000a setarg 0x0a +40bb 20406414 call twspi_read +40bc 200003e8 nop 1000 +40bd 202040b3 branch mouse_sensor_sdio_low + +mouse_sensor_sdio_low2: +40be d840001f arg mouse_spi2_sdio_gpio ,temp +40bf 20600000 rtn + +mouse_spi_sdio_gpio_pollup: +40c0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +40c1 c28940c4 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup + +mouse_spi1_sdio_gpio_pollup: +40c2 d840001a arg mouse_spi1_sdio_gpio ,temp +40c3 202067fe branch gpio_config_input_without_wake + +mouse_spi2_sdio_gpio_pollup: +40c4 d840001f arg mouse_spi2_sdio_gpio ,temp +40c5 202067fe branch gpio_config_input_without_wake + +mouse_init_sunt: +40c6 20403d36 call mouse_spi_init +40c7 20758000 rtn wake +40c8 204040c0 call mouse_spi_sdio_gpio_pollup +40c9 6800c6e0 fetch 1 ,mem_config_sensor_type +40ca c002c0d5 beq p3610 ,mouse_init_3610sensor + +mouse_init_sensor: +40cb 204040d9 call mouse_read_sensor_id +40cc c01840e0 beq p32xx_id1 ,mouse_init_p32xx_id2_judge +40cd c018c0ea beq p3065_id1 ,mouse_p3065_init_param +40ce 204040d1 call mouse_twspi_reset +40cf 200003e8 nop 1000 +40d0 202040cb branch mouse_init_sensor + +mouse_twspi_reset: +40d1 44f4401d bpatch patch1d_0 ,mem_patch1d +40d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag +40d3 c28963e0 bbit1 mouse_enable_spi2 ,twspi_reset2 +40d4 202063d1 branch twspi_reset + +mouse_init_3610sensor: +40d5 204040d9 call mouse_read_sensor_id +40d6 c01f414b beq p3610_id1 ,mouse_init_p3610 +40d7 20404145 call mouse_init_3610sensor_reset +40d8 202040d5 branch mouse_init_3610sensor + +mouse_read_sensor_id: +40d9 58000001 setarg pan_reg_pid_h +40da 20406414 call twspi_read +40db 6000c6de store 1 ,mem_sensor_id2 +40dc 58000000 setarg pan_reg_pid_l +40dd 20406414 call twspi_read +40de 6000c6dd store 1 ,mem_sensor_id1 +40df 20600000 rtn + +mouse_init_p32xx_id2_judge: +40e0 6800c6de fetch 1 ,mem_sensor_id2 +40e1 c068c139 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +40e2 c06940f8 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +40e3 c00140ee beq p3212_id2 ,mouse_3212_init_param +40e4 c02a40e6 beq pka8_id2 ,mouse_ka8_init_param +40e5 20600000 rtn + +mouse_ka8_init_param: +40e6 7046e002 jam ka8 ,mem_config_sensor_type +40e7 20600000 rtn + +mouse_p3065xy_init_param: +40e8 7046e006 jam p3065_xy ,mem_config_sensor_type +40e9 20600000 rtn + +mouse_p3065_init_param: +40ea 6800c6de fetch 1 ,mem_sensor_id2 +40eb c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param +40ec 7046e001 jam p3065 ,mem_config_sensor_type +40ed 20600000 rtn + +mouse_3212_init_param: +40ee 7046e004 jam p3212 ,mem_config_sensor_type +40ef 204040f6 call mouse_sensor_disable_wp +40f0 58003426 setarg 0x3426 +40f1 20406413 call twspi_write +40f2 58000419 setarg 0x0419 +40f3 20406413 call twspi_write + +mouse_sensor_enable_wp: +40f4 58000009 setarg 0x0009 +40f5 20206413 branch twspi_write + +mouse_sensor_disable_wp: +40f6 58005a09 setarg 0x5a09 +40f7 20206413 branch twspi_write + +mouse_3204_3l_init_param: +40f8 7046e003 jam p3204 ,mem_config_sensor_type +40f9 204040f6 call mouse_sensor_disable_wp +40fa 58000f0d setarg 0x0f0d +40fb 20406413 call twspi_write +40fc 5800e31d setarg 0xe31d +40fd 20406413 call twspi_write +40fe 5800d27d setarg 0xd27d +40ff 20406413 call twspi_write +4100 20404102 call mouse_32xx_init_param +4101 2020411a branch mouse_32xx_init_param_1 + +mouse_32xx_init_param: +4102 5800351b setarg 0x351b +4103 20406413 call twspi_write +4104 5800b428 setarg 0xb428 +4105 20406413 call twspi_write +4106 58004629 setarg 0x4629 +4107 20406413 call twspi_write +4108 5800962a setarg 0x962a +4109 20406413 call twspi_write +410a 58008c2b setarg 0x8c2b +410b 20406413 call twspi_write +410c 58006e2c setarg 0x6e2c +410d 20406413 call twspi_write +410e 5800642d setarg 0x642d +410f 20406413 call twspi_write +4110 58005f38 setarg 0x5f38 +4111 20406413 call twspi_write +4112 58000f39 setarg 0x0f39 +4113 20406413 call twspi_write +4114 5800323a setarg 0x323a +4115 20406413 call twspi_write +4116 5800473b setarg 0x473b +4117 20406413 call twspi_write +4118 58001042 setarg 0x1042 +4119 20206413 branch twspi_write + +mouse_32xx_init_param_1: +411a 58002e54 setarg 0x2e54 +411b 20406413 call twspi_write +411c 5800f255 setarg 0xf255 +411d 20406413 call twspi_write +411e 5800f461 setarg 0xf461 +411f 20406413 call twspi_write +4120 58007063 setarg 0x7063 +4121 20406413 call twspi_write +4122 58005275 setarg 0x5275 +4123 20406413 call twspi_write +4124 58004176 setarg 0x4176 +4125 20406413 call twspi_write +4126 5800ed77 setarg 0xed77 +4127 20406413 call twspi_write +4128 58002378 setarg 0x2378 +4129 20406413 call twspi_write +412a 58004679 setarg 0x4679 +412b 20406413 call twspi_write +412c 5800e57a setarg 0xe57a +412d 20406413 call twspi_write +412e 5800487c setarg 0x487c +412f 20406413 call twspi_write +4130 5800777e setarg 0x777e +4131 20406413 call twspi_write +4132 5800017f setarg 0x017f +4133 20406413 call twspi_write +4134 5800000b setarg 0x000b +4135 20406413 call twspi_write +4136 5800007f setarg 0x007f +4137 20406413 call twspi_write +4138 202040f4 branch mouse_sensor_enable_wp + +mouse_3205_3t_init_param: +4139 7046e000 jam p3205 ,mem_config_sensor_type +413a 204040f6 call mouse_sensor_disable_wp +413b 5800100d setarg 0x100d +413c 20406413 call twspi_write +413d 5800ed1d setarg 0xed1d +413e 20406413 call twspi_write +413f 5800807d setarg 0x807d +4140 20406413 call twspi_write +4141 20404102 call mouse_32xx_init_param +4142 58000943 setarg 0x0943 +4143 20406413 call twspi_write +4144 2020411a branch mouse_32xx_init_param_1 + +mouse_init_3610sensor_reset: +4145 6808c6dc fetcht 1 ,mem_sensor_reset_gpio +4146 20406829 call gpio_out_active +4147 20407ec1 call delay_10ms +4148 6808c6dc fetcht 1 ,mem_sensor_reset_gpio +4149 20406825 call gpio_out_inactive +414a 20207ec1 branch delay_10ms + +mouse_init_p3610: +414b 7046e005 jam p3610 ,mem_config_sensor_type +414c 5800ba41 setarg 0xba41 +414d 20406405 call sensor_write +414e 58000d11 setarg 0x0d11 +414f 20406405 call sensor_write +4150 5800041b setarg 0x041b +4151 20406405 call sensor_write +4152 5800041c setarg 0x041c +4153 20406405 call sensor_write +4154 58000f1d setarg 0x0f1d +4155 20406405 call sensor_write +4156 58000032 setarg 0x0032 +4157 20406405 call sensor_write +4158 5800b541 setarg 0xb541 +4159 20206405 branch sensor_write + +mouse_set_sensor_reg: +415a 5800ba41 setarg 0xba41 +415b 20406405 call sensor_write +415c 20000fa0 nop 4000 +415d 5800ff7f setarg 0xff7f +415e 20406405 call sensor_write +415f 1a227e00 copy rega ,pdata +4160 20406405 call sensor_write +4161 5800007f setarg 0x007f +4162 20406405 call sensor_write +4163 5800b541 setarg 0xb541 +4164 20206405 branch sensor_write + +extsign: +4165 c4038000 rtnbit0 7 +4166 d840ff00 arg 0xff00 ,temp +4167 9841fe00 ior temp ,pdata +4168 20600000 rtn + +extsign_bit3: +4169 c4018000 rtnbit0 3 +416a d84000f0 arg 0xf0 ,temp +416b 9841fe00 ior temp ,pdata +416c 20600000 rtn + +mouse_le: +416d 20405892 call le_fifo_check_nearly_full +416e 247a0000 nrtn blank +416f 6800c6c5 fetch 1 ,mem_le_connect_statue_flag +4170 1fe17e03 and pdata ,0x03 ,pdata +4171 c1818000 rtnne 0x03 +4172 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4173 c281c179 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet +4174 c2804179 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +4175 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +4176 20403f97 call mouse_motion +4177 24740000 nrtn user +4178 20203f90 branch mouse_fill_data_le + +mouse_le_send_empty_packet: +4179 58000000 setarg 0 +417a 6003c69a store 7 ,mem_mouse_key +417b 20203f90 branch mouse_fill_data_le + +mouse_priority_bb_event: +417c 1a627e00 copy regc ,pdata +417d c00a41c3 beq bt_evt_le_connected ,mouse_le_bb_event_connected +417e c000c2ca beq bt_evt_bb_connected ,mouse_stop_discovery +417f c00ac1d9 beq bt_evt_le_disconnected ,mouse_bb_disconnected +4180 c00141d9 beq bt_evt_bb_disconnected ,mouse_bb_disconnected +4181 c002c1d6 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +4182 c008426c beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +4183 c009429b beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +4184 c00341d5 beq bt_evt_hid_connected ,mouse_bt_hid_connected +4185 c00241cc beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +4186 c009c1cc beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +4187 c00541ca beq bt_evt_pincode_req ,mouse_bb_event_pincode +4188 c01733cd beq bt_evt_remote_unsniff ,app_start_auto_sniff +4189 c018c1b4 beq bt_evt_le_pairing_success ,mouse_le_pairing_success +418a c01941b6 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +418b c01f4191 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +418c c013c38e beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +418d c01cc19c beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +418e c01d4192 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +418f c01e419a beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +4190 20600000 rtn + +mouse_le_pairing_complete: +4191 20203410 branch app_ble_store_reconn_info + +mouse_24g_attempt_fail: +4192 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +4193 6800c71e fetch 1 ,mem_reconn_times +4194 243a4492 nbranch mouse_polling_device ,blank +4195 6800c720 fetch 1 ,mem_device_flag +4196 6808c703 fetcht 1 ,mem_24g_device_number +4197 98467c00 isub temp ,null +4198 2022b40a branch app_enter_hibernate ,zero +4199 20600000 rtn + +mouse_24g_attempt_success: +419a 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +419b 20600000 rtn + +mouse_24g_pairing_complete: +419c 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +419d d8e00003 arg mosue_24g_pairing_flag ,queue +419e 204043d2 call mouse_disable_function_flag +419f 58000000 setarg 0 +41a0 60014707 store 2 ,mem_24g_pairing_timer_count +41a1 7046a700 jam 0 ,mem_mouse_move_flag +41a2 6800c6e0 fetch 1 ,mem_config_sensor_type +41a3 1fe67c05 sub pdata ,p3610 ,null +41a4 2042c039 call mouse_read_sensor3610_data ,zero +41a5 2442c05d ncall mouse_read_sensor_common ,zero +41a6 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag +41a7 c289c1af bbit1 mouse_enable_flash ,mouse_store_flash_24g_address +41a8 204041aa call mouse_set_24g_addr_eeprom +41a9 202065d1 branch iicd_write_protect_eep_data + +mouse_set_24g_addr_eeprom: +41aa 20402c7a call g24_head_ptr2regc +41ab 1a60a2ae add regc ,offset_24g_addr ,rega +41ac da40005b arg mouse_g24_addr_eeprom_offect ,regb +41ad d8400004 arg 4 ,temp +41ae 20600000 rtn + +mouse_store_flash_24g_address: +41af 20402c7a call g24_head_ptr2regc +41b0 1a60a4ae add regc ,offset_24g_addr ,regb +41b1 ea408000 ifetch 1 ,regb +41b2 6000c77b store 1 ,mem_mouse_24g_addr +41b3 20204435 branch mouse_store_flash_device_info + +mouse_le_pairing_success: +41b4 d8e00002 arg ll_pairing_success_flag ,queue +41b5 202041b9 branch mouse_le_enable_connect_flag + +mouse_le_ll_start_encryt: +41b6 7046c602 jam 2 ,mem_le_start_encrypt_timer +41b7 d8e00001 arg ll_start_enc_flag ,queue +41b8 202041b9 branch mouse_le_enable_connect_flag + +mouse_le_enable_connect_flag: +41b9 6800c6c5 fetch 1 ,mem_le_connect_statue_flag +41ba f9207e00 qset1 pdata +41bb 6000c6c5 store 1 ,mem_le_connect_statue_flag +41bc 20600000 rtn + +mouse_le_disable_connect_flag: +41bd 6800c6c5 fetch 1 ,mem_le_connect_statue_flag +41be f93ffe00 qset0 pdata +41bf 6000c6c5 store 1 ,mem_le_connect_statue_flag +41c0 20600000 rtn + +mouse_le_clean_connect_flag: +41c1 7046c500 jam 0 ,mem_le_connect_statue_flag +41c2 20600000 rtn + +mouse_le_bb_event_connected: +41c3 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +41c4 793ffe00 set0 app_disc_by_button ,pdata +41c5 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +41c6 58000000 setarg 0 +41c7 600146ae store 2 ,mem_mouse_direct_timer +41c8 20403f8d call mouse_no_data_timer_init +41c9 202042ca branch mouse_stop_discovery + +mouse_bb_event_pincode: +41ca 204063cb call pincode_reinit +41cb 202033dd branch app_bt_set_pincode + +mouse_bb_event_reconn_timeout: + +mouse_bb_event_reconn_failed: +41cc 6800c71e fetch 1 ,mem_reconn_times +41cd 243a4492 nbranch mouse_polling_device ,blank +41ce 68014682 fetch 2 ,mem_ui_state_map +41cf c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +41d0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +41d1 c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset +41d2 c282c2b0 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery +41d3 c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +41d4 202033a7 branch app_bb_hibernate + +mouse_bt_hid_connected: +41d5 20203f74 branch mouse_hid_connected + +mouse_bt_event_setup_complete: +41d6 20600000 rtn + +mouse_soft_reset: +41d7 204043c0 call mouse_select_device_enable +41d8 2020659a branch soft_reset_chip + +mouse_bb_disconnected: +41d9 44f4c01d bpatch patch1d_1 ,mem_patch1d +41da 204041e7 call mouse_bb_discon_clear_stack +41db 680246d3 fetch mouse_flag_len ,mem_mouse_flag +41dc c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset +41dd c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +41de 6800c71e fetch 1 ,mem_reconn_times +41df 243a4492 nbranch mouse_polling_device ,blank +41e0 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +41e1 c283c1f5 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +41e2 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear +41e3 c280c1ef bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +41e4 c28141f2 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +41e5 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +41e6 202042b0 branch mouse_start_discovery + +mouse_bb_discon_clear_stack: +41e7 58000000 setarg 0 +41e8 600446b7 store 8 ,mem_wheel_tb_old_pinlevel +41e9 e0a20000 istore 4 ,contw +41ea 7046b400 jam 0 ,mem_mouse_send_blank_timer +41eb 7046a700 jam 0 ,mem_mouse_move_flag +41ec 7041e200 jam app_handshake_null ,mem_app_handshake_flag +41ed 70442900 jam 0 ,mem_ltk_exists +41ee 20600000 rtn + +mouse_event_light_state_pairing: +41ef c282c1f2 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +41f0 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +41f1 202042b0 branch mouse_start_discovery + +mouse_event_light_state_hibernate: +41f2 68014682 fetch 2 ,mem_ui_state_map +41f3 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +41f4 202033a7 branch app_bb_hibernate + +mouse4_0_event_bb_disconn: +41f5 204041c1 call mouse_le_clean_connect_flag +41f6 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +41f7 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear +41f8 202033a7 branch app_bb_hibernate + +mouse_bb_event_timer: +41f9 204043d6 call mouse_adc_read +41fa 20404243 call mouse_24g_delay_timer +41fb 20404246 call mouse_ban_24g_pairing_timer +41fc 20404250 call mouse_dpi_led_blink_delay_timer +41fd 2040445d call mouse_statue_up_timer +41fe 20404443 call mouse_statue_cheak_timer +41ff 20404333 call mouse_select_device +4200 204043a5 call mouse_bt_discovery_cheak +4201 204043eb call mouse_low_voltage_led_timer +4202 20404209 call mouse_sensor_led_contrl_timer +4203 20404231 call mouse_check_hid_handshake_timer +4204 20404234 call mouse_check_discovery_timeout_timer +4205 20404237 call mouse_check_direct_timeout_timer +4206 2040423a call mouse_check_no_data_timeout_timer +4207 2040423d call mouse_check_mouse_state_timer +4208 20204240 branch mouse_le_enable_att_list_timer + +mouse_sensor_led_contrl_timer: +4209 6800c711 fetch 1 ,mem_mouse_sensor_timer_count +420a 207a0000 rtn blank +420b 1fe0ffff increase -1 ,pdata +420c 6000c711 store 1 ,mem_mouse_sensor_timer_count +420d 247a0000 nrtn blank +420e 2020420f branch mouse_sensor_led_contrl + +mouse_sensor_led_contrl: +420f 6800c712 fetch 1 ,mem_sensor_led_style +4210 c1000000 rtneq ui_led_state_blink_stop +4211 c002c216 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking + +mouse_sensor_led_blink_state_lighting: +4212 20404225 call mouse_sensor_led_on +4213 70471205 jam ui_led_state_blink_darking ,mem_sensor_led_style +4214 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +4215 20600000 rtn + +mouse_sensor_led_blink_state_darking: +4216 2040422c call mouse_sensor_led_off +4217 70471204 jam ui_led_state_blink_lighting ,mem_sensor_led_style +4218 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +4219 20600000 rtn + +mouse_sensor_led_blink_stop: + +mouse_sensor_reset: +421a 58008006 setarg 0x8006 +421b 20406413 call twspi_write +421c 200003e8 nop 1000 +421d 70471100 jam 0x00 ,mem_mouse_sensor_timer_count +421e 70471200 jam ui_led_state_blink_stop ,mem_sensor_led_style +421f 202040e0 branch mouse_init_p32xx_id2_judge + +mouse_p3212sensor_led_on: +4220 5800a006 setarg 0xa006 +4221 20406413 call twspi_write +4222 5800a005 setarg 0xa005 +4223 20206413 branch twspi_write + +mouse_sensor_led_on_global: +4224 70471100 jam 0 ,mem_mouse_sensor_timer_count + +mouse_sensor_led_on: +4225 6800c6e0 fetch 1 ,mem_config_sensor_type +4226 c0024220 beq p3212 ,mouse_p3212sensor_led_on +4227 58000106 setarg 0x0106 +4228 20406413 call twspi_write +4229 5800a105 setarg 0xa105 +422a 20206413 branch twspi_write + +mouse_sensor_led_off_global: +422b 70471100 jam 0 ,mem_mouse_sensor_timer_count + +mouse_sensor_led_off: +422c 58000906 setarg 0x0906 +422d 20206413 branch twspi_write + +mouse_sensor_start_blink: +422e 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +422f 70471201 jam ui_led_state_blink_start ,mem_sensor_led_style +4230 20600000 rtn + +mouse_check_hid_handshake_timer: +4231 da604680 arg mem_hid_handshake_timer_count ,regc +4232 da40429b arg mouse_bt_hid_handshake ,regb +4233 2020336d branch timer_single_step + +mouse_check_discovery_timeout_timer: +4234 da6046ac arg mem_mouse_discovery_timer ,regc +4235 da404264 arg mouse_check_discovery_timeout ,regb +4236 20203374 branch timer_single_step_2b + +mouse_check_direct_timeout_timer: +4237 da6046ae arg mem_mouse_direct_timer ,regc +4238 da404266 arg mouse_check_direct_timeout ,regb +4239 20203374 branch timer_single_step_2b + +mouse_check_no_data_timeout_timer: +423a da6046b0 arg mem_mouse_no_data_timer ,regc +423b da40426a arg mouse_check_no_data_timeout ,regb +423c 20203374 branch timer_single_step_2b + +mouse_check_mouse_state_timer: +423d da6046c4 arg mem_mouse_statue_led_timer ,regc +423e da404478 arg mouse_statue_led_off ,regb +423f 2020336d branch timer_single_step + +mouse_le_enable_att_list_timer: +4240 da6046c6 arg mem_le_start_encrypt_timer ,regc +4241 da40425e arg mouse_le_enable_att_list ,regb +4242 2020336d branch timer_single_step + +mouse_24g_delay_timer: +4243 da604704 arg mem_24g_enter_lpm_timer ,regc +4244 da404249 arg mouse_24g_delay ,regb +4245 2020336d branch timer_single_step + +mouse_ban_24g_pairing_timer: +4246 da604707 arg mem_24g_pairing_timer_count ,regc +4247 da404249 arg mouse_ban_24g_pairing ,regb +4248 20203374 branch timer_single_step_2b + +mouse_ban_24g_pairing: + +mouse_24g_delay: +4249 20600000 rtn + +mosue_dpi_led_blink_init: +424a 680246d3 fetch mouse_flag_len ,mem_mouse_flag +424b c40b8000 rtnbit0 mouse_enable_dpi_led_blink +424c 7046df0a jam 10 ,mem_mouse_dpi_led_delay_count +424d 6800c6f4 fetch 1 ,mem_dpi_led_gpio +424e 6000c715 store 1 ,mem_mouse_struct_led_gpio +424f 20600000 rtn + +mouse_dpi_led_blink_delay_timer: +4250 da6046df arg mem_mouse_dpi_led_delay_count ,regc +4251 da404253 arg mouse_dpi_led_setting ,regb +4252 2020336d branch timer_single_step + +mouse_dpi_led_setting: +4253 6800c6f4 fetch 1 ,mem_dpi_led_gpio +4254 6000c715 store 1 ,mem_mouse_struct_led_gpio +4255 58000190 setarg led_dpi_blink +4256 60014716 store 2 ,mem_mouse_on_time +4257 60014718 store 2 ,mem_mouse_off_time +4258 da200000 arg 0 ,rega +4259 6808c77a fetcht 1 ,mem_mouse_dpi +425a 18408401 increase 1 ,temp +425b 6008c714 storet 1 ,mem_mouse_blink_count +425c 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type +425d 20600000 rtn + +mouse_le_enable_att_list: +425e 6800c6c5 fetch 1 ,mem_le_connect_statue_flag +425f c3810000 rtnbit1 ll_pairing_success_flag +4260 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +4261 20407d8f call ui_ipc_send_cmd +4262 d8e00000 arg write_req_enable_flag ,queue +4263 202041b9 branch mouse_le_enable_connect_flag + +mouse_check_discovery_timeout: +4264 204042ca call mouse_stop_discovery +4265 2020340a branch app_enter_hibernate + +mouse_check_direct_timeout: +4266 204033f6 call app_ble_stop_direct_adv +4267 6800c71e fetch 1 ,mem_reconn_times +4268 243a4492 nbranch mouse_polling_device ,blank +4269 2020340a branch app_enter_hibernate + +mouse_check_no_data_timeout: +426a c5137e1d bmark1 mark_24g ,check_51cmd_hibernate +426b 20204386 branch mouse_disconnect + +mouse_bb_event_discovery_btn: +426c 44f5401d bpatch patch1d_2 ,mem_patch1d +426d 7046b400 jam 0 ,mem_mouse_send_blank_timer +426e 20404386 call mouse_disconnect +426f 204041c1 call mouse_le_clean_connect_flag +4270 202042b0 branch mouse_start_discovery + +mouse3_0_check_reconn_target: +4271 680341d0 fetch 6 ,mem_hci_plap +4272 203a33eb branch app_bt_start_discovery_short ,blank +4273 2040427e call mouse_reconn_setting_led_gpio +4274 70016d17 jam 0x17 ,mem_connection_options +4275 6800c65a fetch 1 ,mem_ssp_enable +4276 243a33e1 nbranch app_bt_start_reconnect ,blank +4277 70016d04 jam 0x04 ,mem_connection_options +4278 202033e1 branch app_bt_start_reconnect + +mouse4_0_check_reconn_target: +4279 680146a8 fetch 2 ,mem_mouse_direct_timeout +427a 600146ae store 2 ,mem_mouse_direct_timer +427b 2040427e call mouse_reconn_setting_led_gpio +427c 20403418 call app_lpm_mult_disable +427d 20207df4 branch check_51cmd_adv + +mouse_reconn_setting_led_gpio: +427e 580000c8 setarg led_reconnect_blink +427f 60014716 store 2 ,mem_mouse_on_time +4280 60014718 store 2 ,mem_mouse_off_time +4281 20204285 branch mouse_setting_led_gpio_comman + +mouse_discover_setting_led_gpio: +4282 580003e8 setarg led_discovery_blink +4283 60014716 store 2 ,mem_mouse_on_time +4284 60014718 store 2 ,mem_mouse_off_time + +mouse_setting_led_gpio_comman: +4285 6800c720 fetch 1 ,mem_device_flag +4286 c000c28a beq mode_bt_device1 ,mouse_device_led1 +4287 c001428c beq mode_bt_device2 ,mouse_device_led2 +4288 c001c28e beq mode_bt_device3 ,mouse_device_led3 +4289 20600000 rtn + +mouse_device_led1: +428a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +428b 2020428f branch mouse_led_blink + +mouse_device_led2: +428c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio +428d 2020428f branch mouse_led_blink + +mouse_device_led3: +428e 6800c6f2 fetch 1 ,mem_config_device3_led_gpio + +mouse_led_blink: +428f 60008aa2 store 1 ,mem_temp +4290 20404482 call mouse_devce_led_off +4291 68008aa2 fetch 1 ,mem_temp +4292 6000c715 store 1 ,mem_mouse_struct_led_gpio +4293 da200000 arg 0 ,rega +4294 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type +4295 20207d1e branch ui_led_blink_start_global + +mouse_led_off: +4296 da200000 arg 0 ,rega +4297 20207d19 branch ui_led_off_global + +mouse_led_on: +4298 da200000 arg 0 ,rega +4299 20207d14 branch ui_led_on_global + +mouse4_0_bb_event_discovery_btn: +429a 202041c1 branch mouse_le_clean_connect_flag + +mouse_bt_hid_handshake: +429b 7041e201 jam app_handshake_done ,mem_app_handshake_flag +429c 20403416 call app_lpm_mult_enable +429d 20403412 call app_bt_store_reconn_info +429e 58000000 setarg 0 +429f 6001467e store 2 ,mem_discovery_timeout_timer_count +42a0 6000c680 store 1 ,mem_hid_handshake_timer_count +42a1 2020340e branch app_bt_enter_sniff + +mouse_check_reconn_target: +42a2 2040435f call mouse_cheak_select_device_by_switch +42a3 6800c720 fetch 1 ,mem_device_flag +42a4 6808c703 fetcht 1 ,mem_24g_device_number +42a5 98467c00 isub temp ,null +42a6 2022c2ab branch mouse_connect_24g_mode ,zero +42a7 6800c210 fetch 1 ,mem_xrecord_mode +42a8 c019c271 beq rec_3_mode ,mouse3_0_check_reconn_target +42a9 c01a4279 beq rec_4_mode ,mouse4_0_check_reconn_target +42aa 202042b0 branch mouse_start_discovery + +mouse_connect_24g_mode: +42ab 20403d57 call mouse_start_24g_mode +42ac c6130000 rtnmark1 mark_24g +42ad 6800c71e fetch 1 ,mem_reconn_times +42ae 243a4492 nbranch mouse_polling_device ,blank +42af 20600000 rtn + +mouse_start_discovery: +42b0 44f5c01d bpatch patch1d_3 ,mem_patch1d +42b1 68014682 fetch 2 ,mem_ui_state_map +42b2 c285c2b7 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +42b3 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42b4 c30c42b7 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +42b5 180a7e00 random pdata +42b6 6000c4a1 store 1 ,mem_le_lap + 1 + +mouse_start_discovery_norandom: +42b7 20403418 call app_lpm_mult_disable +42b8 68014687 fetch 2 ,mem_discovery_timeout +42b9 600146ac store 2 ,mem_mouse_discovery_timer +42ba 70016d06 jam 6 ,mem_connection_options +42bb 58000000 setarg 0 +42bc 600146b0 store 2 ,mem_mouse_no_data_timer +42bd 600146ae store 2 ,mem_mouse_direct_timer +42be d8e00007 arg mouse_store_eeprom_flag ,queue +42bf 204043ce call mouse_enable_function_flag +42c0 204043ca call mouse_bt_discovery_button_down_disable +42c1 6800c092 fetch 1 ,mem_device_option +42c2 2feffe01 isolate1 mode_4_mouse ,pdata +42c3 2040fdf4 call check_51cmd_adv ,true +42c4 6800c092 fetch 1 ,mem_device_option +42c5 2feffe00 isolate1 mode_3_mouse ,pdata +42c6 2040fddd call check_51cmd_start_discovery ,true +42c7 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42c8 c28e422e bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink +42c9 20204282 branch mouse_discover_setting_led_gpio + +mouse_stop_discovery: +42ca 44f6401d bpatch patch1d_4 ,mem_patch1d +42cb 6800c092 fetch 1 ,mem_device_option +42cc 2feffe01 isolate1 mode_4_mouse ,pdata +42cd 2040c2d4 call mouse_stop_le_adv ,true +42ce 6800c092 fetch 1 ,mem_device_option +42cf 2feffe00 isolate1 mode_3_mouse ,pdata +42d0 2040c2d7 call mouse_stop_bt3_discovery ,true +42d1 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42d2 c28e421a bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop +42d3 20204482 branch mouse_devce_led_off + +mouse_stop_le_adv: +42d4 58000000 setarg 0 +42d5 600146ae store 2 ,mem_mouse_direct_timer +42d6 20207dfa branch check_51cmd_stop_adv + +mouse_stop_bt3_discovery: +42d7 58000000 setarg 0 +42d8 600146ac store 2 ,mem_mouse_discovery_timer +42d9 20207de2 branch check_51cmd_stop_discovery + +mouse_store_remote_bdaddr: +42da 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42db c4038000 rtnbit0 mouse_store_eeprom_flag +42dc d8e00007 arg mouse_store_eeprom_flag ,queue +42dd 204043d2 call mouse_disable_function_flag +42de 204042e8 call mouse_check_device_addr + +mouse_unplug_clean_bdaddr: +42df 204042fb call mouse_before_store_reconn_info +42e0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42e1 c289c435 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +42e2 c28a42e4 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +42e3 20600000 rtn + +mouse_store_eeprom_device_info: +42e4 d8400058 arg 88 ,temp +42e5 da204720 arg mem_device_flag ,rega +42e6 da400000 arg mouse_info_eeprom_offect ,regb +42e7 202065d1 branch iicd_write_protect_eep_data + +mouse_check_device_addr: +42e8 68008185 fetch 1 ,mem_record_bt_mode +42e9 c01a42ec beq rec_4_mode ,mouse_check_le_device_addr +42ea c019c2ef beq rec_3_mode ,mouse_check_bt_device_addr +42eb 20600000 rtn + +mouse_check_le_device_addr: +42ec 6000c6c7 store 1 ,mem_device_addr_temp +42ed 6803044f fetch 6 ,mem_le_plap +42ee 202042f1 branch mouse_check_bt_device_addr_common + +mouse_check_bt_device_addr: +42ef 6000c6c7 store 1 ,mem_device_addr_temp +42f0 68030040 fetch 6 ,mem_plap + +mouse_check_bt_device_addr_common: +42f1 600346c8 store 6 ,mem_device_addr_temp + 1 +42f2 6803c6c7 fetch 7 ,mem_device_addr_temp +42f3 d8c04721 arg mem_device1_type ,contr +42f4 df200003 arg 3 ,loopcnt + +mouse_check_device_addr_end: +42f5 e8cb8000 ifetcht 7 ,contr +42f6 98467c00 isub temp ,null +42f7 2022c310 branch mouse_clean_addr ,zero +42f8 18c08c16 increase 22 ,contr +42f9 c20042f5 loop mouse_check_device_addr_end +42fa 20600000 rtn + +mouse_before_store_reconn_info: +42fb da204721 arg mem_device1_type ,rega +42fc 6800c720 fetch 1 ,mem_device_flag +42fd 1fe0ffff increase -1 ,pdata +42fe 1feffe1d mul32 pdata ,29 ,pdata +42ff 9a20a200 iadd rega ,rega +4300 68008185 fetch 1 ,mem_record_bt_mode +4301 e2208000 istore 1 ,rega +4302 c01a4305 beq rec_4_mode ,mouse_store_le_device +4303 c019c30c beq rec_3_mode ,mouse_store_bt_device +4304 20600000 rtn + +mouse_store_le_device: +4305 6803044f fetch 6 ,mem_le_plap +4306 e0a30000 istore 6 ,contw +4307 d8c04419 arg mem_le_ltk ,contr +4308 20407ebf call memcpy16 +4309 680344a0 fetch 6 ,mem_le_lap +430a e0a30000 istore 6 ,contw +430b 20600000 rtn + +mouse_store_bt_device: +430c 68030040 fetch 6 ,mem_plap +430d e0a30000 istore 6 ,contw +430e d8c041be arg mem_link_key ,contr +430f 20207ebf branch memcpy16 + +mouse_clean_addr: +4310 18c08dfa increase -6 ,contr +4311 18c20a00 copy contr ,contw +4312 680b46c8 fetcht 6 ,mem_device_addr_temp + 1 +4313 18408403 increase 3 ,temp +4314 e0ab0000 istoret 6 ,contw +4315 20600000 rtn + +mouse_eeprom_load_recon_info: +4316 d8400058 arg 88 ,temp +4317 da204720 arg mem_device_flag ,rega +4318 da400000 arg mouse_info_eeprom_offect ,regb +4319 204065df call iicd_read_eep_data + +mouse_select_reconn_device: +431a da204721 arg mem_device1_type ,rega +431b 6800c720 fetch 1 ,mem_device_flag +431c 6808c703 fetcht 1 ,mem_24g_device_number +431d 98467c00 isub temp ,null +431e 20628000 rtn zero +431f 1fe0ffff increase -1 ,pdata +4320 1feffe1d mul32 pdata ,29 ,pdata +4321 9a20a200 iadd rega ,rega +4322 ea208000 ifetch 1 ,rega +4323 6000c210 store 1 ,mem_xrecord_mode +4324 c019c327 beq rec_3_mode ,mouse_load_bt_device +4325 c01a432c beq rec_4_mode ,mouse_load_le_device +4326 20600000 rtn + +mouse_load_bt_device: +4327 e8c30000 ifetch 6 ,contr + +mouse_load_bt_device_end: +4328 600341d0 store 6 ,mem_hci_plap +4329 d8a041be arg mem_link_key ,contw +432a 20407ebf call memcpy16 +432b 202067d7 branch check_link_key_load + +mouse_load_le_device: +432c e8c30000 ifetch 6 ,contr + +mouse_load_le_device_end: +432d 600341d0 store 6 ,mem_hci_plap +432e d8a04419 arg mem_le_ltk ,contw +432f 20407ebf call memcpy16 +4330 e8c30000 ifetch 6 ,contr +4331 600344a0 store 6 ,mem_le_lap +4332 20600000 rtn + +mouse_select_device: +4333 6800c6f5 fetch 1 ,mem_config_function_enable +4334 c282c349 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button +4335 c2834359 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch +4336 20204337 branch mouse_select_device_by_combination_key + +mouse_select_device_by_combination_key: +4337 20404083 call mouse_check_key_gpio +4338 c003433e beq mouse_rm_button ,mouse_select_device_commbination_key_down + +mouse_select_device_commbination_key_up: +4339 7046d81e jam 30 ,mem_combination_select_device_count +433a 6800c6d9 fetch 1 ,mem_select_device_button_statue +433b c1008000 rtneq dpi_button_state_up +433c 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +433d 20600000 rtn + +mouse_select_device_commbination_key_down: +433e 20404343 call mouse_combination_select_device_timer +433f 6800c6d9 fetch 1 ,mem_select_device_button_statue +4340 c1000000 rtneq dpi_button_state_down +4341 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue +4342 202043c0 branch mouse_select_device_enable + +mouse_combination_select_device_timer: +4343 6800c6d8 fetch 1 ,mem_combination_select_device_count +4344 207a0000 rtn blank +4345 1fe0ffff pincrease -1 +4346 6000c6d8 store 1 ,mem_combination_select_device_count +4347 247a0000 nrtn blank +4348 20204370 branch mouse_ready_reconnection_by_button + +mouse_select_device_by_button: +4349 6800c6ed fetch 1 ,mem_config_select_device_button_gpio +434a c17f8000 rtneq gpio_disable +434b 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +434c 2040681d call gpio_get_bit +434d 2020c354 branch mouse_select_device_button_down ,true + +mouse_select_device_button_up: +434e 6800c6d9 fetch 1 ,mem_select_device_button_statue +434f c1008000 rtneq dpi_button_state_up +4350 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +4351 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4352 c3830000 rtnbit1 mouse_long_bt_button_flag +4353 20204370 branch mouse_ready_reconnection_by_button + +mouse_select_device_button_down: +4354 6800c6d9 fetch 1 ,mem_select_device_button_statue +4355 c1000000 rtneq dpi_button_state_down +4356 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue +4357 d8e00006 arg mouse_long_bt_button_flag ,queue +4358 202043d2 branch mouse_disable_function_flag + +mouse_select_device_by_switch: +4359 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag +435a c4030000 rtnbit0 enable_select_device_by_switch +435b 6800c720 fetch 1 ,mem_device_flag +435c c000c369 beq mode_bt_device1 ,mouse_select1_device +435d c001436c beq mode_24g_device ,mouse_select2_device +435e 20600000 rtn + +mouse_cheak_select_device_by_switch: +435f 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag +4360 c4030000 rtnbit0 enable_select_device_by_switch +4361 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +4362 2040681d call gpio_get_bit +4363 2020c366 branch mouse_cheak_select_24gdevice ,true + +mouse_select_btdevice: +4364 70472001 jam mode_bt_device1 ,mem_device_flag +4365 20600000 rtn + +mouse_cheak_select_24gdevice: +4366 6800c703 fetch 1 ,mem_24g_device_number +4367 6000c720 store 1 ,mem_device_flag +4368 20600000 rtn + +mouse_select1_device: +4369 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +436a 2420c370 nbranch mouse_ready_reconnection_by_button ,true +436b 20600000 rtn + +mouse_select2_device: +436c 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +436d 2040681d call gpio_get_bit +436e 2020c354 branch mouse_select_device_button_down ,true +436f 20600000 rtn + +mouse_ready_reconnection_by_button: +4370 6808c720 fetcht 1 ,mem_device_flag +4371 18408401 increase 1 ,temp +4372 6800c6d2 fetch 1 ,mem_device_number +4373 98467c00 isub temp ,null +4374 244143cc ncall mouse_select_device_count_clean ,positive +4375 6008c720 storet 1 ,mem_device_flag +4376 7041bd00 jam 0 ,mem_link_key_exists +4377 2040437a call mouse_store_device_number2eeprom +4378 204043c0 call mouse_select_device_enable +4379 2020437e branch mouse_set_reconnection + +mouse_store_device_number2eeprom: +437a d8400001 arg 1 ,temp +437b da204720 arg mem_device_flag ,rega +437c da400000 arg 0 ,regb +437d 20206606 branch iicd_write_eep_data + +mouse_set_reconnection: +437e 20404381 call mouse_stop_bluetooth_mode +437f 204043c2 call mouse_select_device_disable +4380 202041d7 branch mouse_soft_reset + +mouse_stop_bluetooth_mode: +4381 68014682 fetch 2 ,mem_ui_state_map +4382 c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +4383 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +4384 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +4385 202042ca branch mouse_stop_discovery + +mouse_disconnect: +4386 44f6c01d bpatch patch1d_5 ,mem_patch1d +4387 58000000 setarg 0 +4388 600146b0 store 2 ,mem_mouse_no_data_timer +4389 68014682 fetch 2 ,mem_ui_state_map +438a c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +438b 68014682 fetch 2 ,mem_ui_state_map +438c c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +438d 20600000 rtn + +mouse_irtual_cable_unplug: +438e 58000001 setarg 0x01 +438f 60030040 store 6 ,mem_plap +4390 70018533 jam rec_3_mode ,mem_record_bt_mode +4391 202042df branch mouse_unplug_clean_bdaddr + +mouse_cancel_reconnect: +4392 204043c4 call mouse_bt_cannel_reconn_enable +4393 20207e2f branch check_51cmd_bb_reconn_cancel + +mouse_bt_discovery_by_button: +4394 6800c6ec fetch 1 ,mem_config_bt_button_gpio +4395 c17f8000 rtneq gpio_disable +4396 6808c6ec fetcht 1 ,mem_config_bt_button_gpio +4397 2040681d call gpio_get_bit +4398 2020c39f branch mouse_bt_discovery_button_down ,true + +mouse_bt_discovery_button_up: +4399 6800c685 fetch 1 ,mem_ui_button_timeout +439a 6000c6da store 1 ,mem_combination_ui_button_count +439b 6800c6db fetch 1 ,mem_bt_discovey_button_statue +439c c1008000 rtneq dpi_button_state_up +439d 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue +439e 202043ca branch mouse_bt_discovery_button_down_disable + +mouse_bt_discovery_button_down: +439f 204043b5 call mouse_bt_discovry_timer +43a0 6800c6db fetch 1 ,mem_bt_discovey_button_statue +43a1 c1000000 rtneq dpi_button_state_down +43a2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue +43a3 20407e2f call check_51cmd_bb_reconn_cancel +43a4 202043c8 branch mouse_bt_discovery_button_down_enable + +mouse_bt_discovery_cheak: +43a5 6800c6f5 fetch 1 ,mem_config_function_enable +43a6 c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button + +mouse_bt_discovery_commbination_key: +43a7 20404083 call mouse_check_key_gpio +43a8 c003c3af beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down + +mouse_bt_discovery_commbination_key_up: +43a9 6800c685 fetch 1 ,mem_ui_button_timeout +43aa 6000c6da store 1 ,mem_combination_ui_button_count +43ab 6800c6db fetch 1 ,mem_bt_discovey_button_statue +43ac c1008000 rtneq dpi_button_state_up +43ad 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue +43ae 202043ca branch mouse_bt_discovery_button_down_disable + +mouse_bt_discovery_commbination_key_down: +43af 204043b5 call mouse_bt_discovry_timer +43b0 6800c6db fetch 1 ,mem_bt_discovey_button_statue +43b1 c1000000 rtneq dpi_button_state_down +43b2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue +43b3 20407e2f call check_51cmd_bb_reconn_cancel +43b4 202043c8 branch mouse_bt_discovery_button_down_enable + +mouse_bt_discovry_timer: +43b5 da6046da arg mem_combination_ui_button_count ,regc +43b6 da4043b8 arg mouse_long_button_bt_discovry ,regb +43b7 2020336d branch timer_single_step + +mouse_long_button_bt_discovry: +43b8 d8e00006 arg mouse_long_bt_button_flag ,queue +43b9 204043ce call mouse_enable_function_flag +43ba 20403357 call app_evt_button_long_pressed +43bb 2020426c branch mouse_bb_event_discovery_btn + +mouse_cpi_enable: +43bc d8e00001 arg mouse_cpi_flag ,queue +43bd 202043ce branch mouse_enable_function_flag + +mouse_cpi_disable: +43be d8e00001 arg mouse_cpi_flag ,queue +43bf 202043d2 branch mouse_disable_function_flag + +mouse_select_device_enable: +43c0 d8e00000 arg mouse_select_device_flag ,queue +43c1 202043ce branch mouse_enable_function_flag + +mouse_select_device_disable: +43c2 d8e00000 arg mouse_select_device_flag ,queue +43c3 202043d2 branch mouse_disable_function_flag + +mouse_bt_cannel_reconn_enable: +43c4 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue +43c5 202043ce branch mouse_enable_function_flag + +mouse_bt_cannel_reconn_disable: +43c6 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue +43c7 202043d2 branch mouse_disable_function_flag + +mouse_bt_discovery_button_down_enable: +43c8 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue +43c9 202043ce branch mouse_enable_function_flag + +mouse_bt_discovery_button_down_disable: +43ca d8e00005 arg mouse_bt_discovery_button_down_flag ,queue +43cb 202043d2 branch mouse_disable_function_flag + +mouse_select_device_count_clean: +43cc d8400001 arg 1 ,temp +43cd 20600000 rtn + +mouse_enable_function_flag: +43ce 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43cf f9207e00 qset1 pdata +43d0 600246d3 store mouse_flag_len ,mem_mouse_flag +43d1 20600000 rtn + +mouse_disable_function_flag: +43d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43d3 f93ffe00 qset0 pdata +43d4 600246d3 store mouse_flag_len ,mem_mouse_flag +43d5 20600000 rtn + +mouse_adc_read: +43d6 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43d7 c40d0000 rtnbit0 mouse_enable_adc +43d8 6800c6ce fetch 1 ,mem_adc_read_timer +43d9 1fe0fe01 increase 1 ,pdata +43da 6000c6ce store 1 ,mem_adc_read_timer +43db 1fe67c0a sub pdata ,10 ,null +43dc 20610000 rtn positive +43dd 7046ce00 jam 0 ,mem_adc_read_timer +43de 204068eb call adc_set_mode +43df 20406908 call vdd_calculate_by_mode +43e0 6001470f store 2 ,mem_mouse_vdd_now_vol +43e1 da204709 arg mem_mouse_vdd_calculate_set ,rega +43e2 20406930 call adc_bat_percent_lowpower_out +43e3 6800c231 fetch 1 ,mem_adc_power_flag +43e4 c280c4a0 bbit1 1 ,mouse_power_down +43e5 c30043e9 bbit0 0 ,mouse_adc_no_low_voltage +43e6 202043e7 branch mouse_adc_low_voltage + +mouse_adc_low_voltage: +43e7 d8e00004 arg mouse_low_voltage_flag ,queue +43e8 202043ce branch mouse_enable_function_flag + +mouse_adc_no_low_voltage: +43e9 d8e00004 arg mouse_low_voltage_flag ,queue +43ea 202043d2 branch mouse_disable_function_flag + +mouse_low_voltage_led_timer: +43eb 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43ec c4020000 rtnbit0 mouse_low_voltage_flag +43ed 6800c6ef fetch 1 ,mem_config_low_voltage_alarm_gpio +43ee 6000c715 store 1 ,mem_mouse_struct_led_gpio +43ef 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count +43f0 1fe0fe01 pincrease 1 +43f1 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count +43f2 1fe67c14 sub pdata ,20 ,null +43f3 244143f9 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +43f4 c00143fb beq 2 ,mouse_low_voltage_led_on +43f5 c00243fe beq 4 ,mouse_low_voltage_led_off +43f6 c00343fb beq 6 ,mouse_low_voltage_led_on +43f7 c00443fe beq 8 ,mouse_low_voltage_led_off +43f8 20600000 rtn + +mouse_adc_low_volatage_led_timer_count_clean: +43f9 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count +43fa 202043fe branch mouse_low_voltage_led_off + +mouse_low_voltage_led_on: +43fb da200000 arg 0 ,rega +43fc 70471302 jam ui_led_state_lighting ,mem_mouse_led_type +43fd 20207d14 branch ui_led_on_global + +mouse_low_voltage_led_off: +43fe da200000 arg 0 ,rega +43ff 70471302 jam ui_led_state_lighting ,mem_mouse_led_type +4400 20207d19 branch ui_led_off_global + +mouse_g24_package_data: +4401 20403f97 call mouse_motion +4402 24740000 nrtn user +4403 da200007 arg 7 ,rega +4404 da40469a arg mem_mouse_key ,regb +4405 20600000 rtn + +mouse_g24_enter_lpm: +4406 6800c78b fetch 1 ,mem_mouse_24g_enter_lpm_enable +4407 207a0000 rtn blank +4408 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +4409 2040681d call gpio_get_bit +440a 2040c410 call mouse_24g_dpi_delay_init ,true +440b 6800c704 fetch 1 ,mem_24g_enter_lpm_timer +440c 247a0000 nrtn blank +440d 20404083 call mouse_check_key_gpio +440e 247a0000 nrtn blank +440f 20202d83 branch g24_lpm_long_sleep + +mouse_24g_dpi_delay_init: +4410 6800c6e7 fetch 1 ,mem_dpi_button_gpio +4411 c17f8000 rtneq ui_button_gpio_disable +4412 7047040a jam 10 ,mem_24g_enter_lpm_timer +4413 20600000 rtn + +mouse_load_flash_info_cheak: +4414 20404423 call mouse_load_flash_flag +4415 68014778 fetch 2 ,mem_store_flag +4416 d840aa55 arg eeprom_init_flag ,temp +4417 98467c00 isub temp ,null +4418 2022c42b branch mouse_load_flash_device_info ,zero +4419 60094778 storet 2 ,mem_store_flag +441a 2040441c call mouse_ble_init_address +441b 20204435 branch mouse_store_flash_device_info + +mouse_ble_init_address: +441c 680344a0 fetch 6 ,mem_le_lap +441d 60034738 store 6 ,mem_device1_locall_addr +441e 1fe0ff00 add pdata ,0x0100 ,pdata +441f 60034755 store 6 ,mem_device2_locall_addr +4420 1fe0ff00 add pdata ,0x0100 ,pdata +4421 60034772 store 6 ,mem_device3_locall_addr +4422 20600000 rtn + +mouse_load_flash_flag: +4423 58004778 setarg mem_store_flag +4424 d8404720 arg mem_mouse_information_start ,temp +4425 98460400 isub temp ,temp +4426 6801c700 fetch 3 ,mem_flash_base +4427 9840fe00 iadd temp ,pdata +4428 d8400002 arg 2 ,temp +4429 da204778 arg mem_store_flag ,rega +442a 20206562 branch spid_read_flash + +mouse_load_flash_device_info: +442b 5800477f setarg mem_mouse_information_end +442c d8404720 arg mem_mouse_information_start ,temp +442d 98460400 isub temp ,temp +442e 6801c700 fetch 3 ,mem_flash_base +442f da204720 arg mem_mouse_information_start ,rega +4430 20406562 call spid_read_flash +4431 2040431a call mouse_select_reconn_device +4432 6802477b fetch 4 ,mem_mouse_24g_addr +4433 20402c7a call g24_head_ptr2regc +4434 2020322c branch g24_store_mem_addr + +mouse_store_flash_device_info: +4435 5800477f setarg mem_mouse_information_end +4436 d8404720 arg mem_mouse_information_start ,temp +4437 98460400 isub temp ,temp +4438 da204720 arg mem_mouse_information_start ,rega +4439 6801c700 fetch 3 ,mem_flash_base +443a 20206514 branch flash_write + +mouse_store_eerpom_dpi: +443b d8400001 arg 1 ,temp +443c da20477a arg mem_mouse_dpi ,rega +443d da40005a arg mouse_dpi_eeprom_offect ,regb +443e 202065d1 branch iicd_write_protect_eep_data + +mouse_load_eeprom_dpi: +443f d8400001 arg 1 ,temp +4440 da20477a arg mem_mouse_dpi ,rega +4441 da40005a arg mouse_dpi_eeprom_offect ,regb +4442 202065df branch iicd_read_eep_data + +mouse_statue_cheak_timer: +4443 c6130000 rtnmark1 mark_24g +4444 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4445 c40b0000 rtnbit0 mouse_enable_statue_up +4446 6800c705 fetch 1 ,mem_mouse_1step_up_count +4447 1fe0fe01 pincrease 1 +4448 1fe17e07 and pdata ,0x07 ,pdata +4449 6000c705 store 1 ,mem_mouse_1step_up_count +444a c1838000 rtnne 0x07 +444b 68014682 fetch 2 ,mem_ui_state_map +444c c280444f bbit1 ui_state_bt_connected ,mouse_check_statue_up +444d c284c44f bbit1 ui_state_ble_connected ,mouse_check_statue_up +444e 20600000 rtn + +mouse_check_statue_up: +444f 44f7401d bpatch patch1d_6 ,mem_patch1d +4450 6800c706 fetch 1 ,mem_mouse_2step_up_count +4451 247a0000 nrtn blank +4452 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4453 c4040000 rtnbit0 mouse_statue_up_flag +4454 6800c6a5 fetch 1 ,mem_sensor_squal_reg +4455 204063fb call sensor_read +4456 6000c6a6 store 1 ,mem_sensor_iqc +4457 1fe67c10 sub pdata ,0x10 ,null +4458 2021445b branch mouse_statue_up_timer_init ,positive +4459 70470600 jam 0 ,mem_mouse_2step_up_count +445a 20600000 rtn + +mouse_statue_up_timer_init: +445b 7047061e jam 30 ,mem_mouse_2step_up_count +445c 20600000 rtn + +mouse_statue_up_timer: +445d da604706 arg mem_mouse_2step_up_count ,regc +445e da404460 arg mouse_statue_up ,regb +445f 2020336d branch timer_single_step + +mouse_statue_up: +4460 6800c6a5 fetch 1 ,mem_sensor_squal_reg +4461 20406414 call twspi_read +4462 1fe67c10 sub pdata ,0x10 ,null +4463 24610000 nrtn positive +4464 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4465 c4040000 rtnbit0 mouse_statue_up_flag +4466 d8e00008 arg mouse_statue_up_flag ,queue +4467 204043d2 call mouse_disable_function_flag +4468 70417200 jam 0 ,mem_lpm_mult +4469 7046c41e jam 30 ,mem_mouse_statue_led_timer +446a 20404482 call mouse_devce_led_off +446b 680246d3 fetch mouse_flag_len ,mem_mouse_flag +446c c28ac471 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up + +mouse_two_device_statue_up: +446d 6800c720 fetch 1 ,mem_device_flag +446e c000c489 beq mode_bt_device1 ,mouse_device1_led_on +446f c0014476 beq mode_bt_device2 ,mouse_device_blink_led_init +4470 20600000 rtn + +mouse_three_device_statue_up: +4471 6800c720 fetch 1 ,mem_device_flag +4472 c000c489 beq mode_bt_device1 ,mouse_device1_led_on +4473 c001448c beq mode_bt_device2 ,mouse_device2_led_on +4474 c001c48f beq mode_bt_device3 ,mouse_device3_led_on +4475 20600000 rtn + +mouse_device_blink_led_init: +4476 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +4477 2020428f branch mouse_led_blink + +mouse_statue_led_off: +4478 70417220 jam 0x20 ,mem_lpm_mult +4479 20204482 branch mouse_devce_led_off + +mouse_devce1_led_off: +447a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +447b c17f8000 rtneq gpio_disable +447c 6000c715 store 1 ,mem_mouse_struct_led_gpio +447d 20204296 branch mouse_led_off + +mouse_devce2_led_off: +447e 6800c6f1 fetch 1 ,mem_config_device2_led_gpio +447f c17f8000 rtneq gpio_disable +4480 6000c715 store 1 ,mem_mouse_struct_led_gpio +4481 20204296 branch mouse_led_off + +mouse_devce_led_off: +4482 20404296 call mouse_led_off +4483 2040447a call mouse_devce1_led_off +4484 2040447e call mouse_devce2_led_off + +mouse_devce3_led_off: +4485 6800c6f2 fetch 1 ,mem_config_device3_led_gpio +4486 c17f8000 rtneq gpio_disable +4487 6000c715 store 1 ,mem_mouse_struct_led_gpio +4488 20204296 branch mouse_led_off + +mouse_device1_led_on: +4489 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +448a 6000c715 store 1 ,mem_mouse_struct_led_gpio +448b 20204298 branch mouse_led_on + +mouse_device2_led_on: +448c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio +448d 6000c715 store 1 ,mem_mouse_struct_led_gpio +448e 20204298 branch mouse_led_on + +mouse_device3_led_on: +448f 6800c6f2 fetch 1 ,mem_config_device3_led_gpio +4490 6000c715 store 1 ,mem_mouse_struct_led_gpio +4491 20204298 branch mouse_led_on + +mouse_polling_device: +4492 44f7c01d bpatch patch1d_7 ,mem_patch1d +4493 6800c71e fetch 1 ,mem_reconn_times +4494 1fe0ffff increase -1 ,pdata +4495 6000c71e store 1 ,mem_reconn_times +4496 6808c720 fetcht 1 ,mem_device_flag +4497 18408401 increase 1 ,temp +4498 6800c6d2 fetch 1 ,mem_device_number +4499 98467c00 isub temp ,null +449a 244143cc ncall mouse_select_device_count_clean ,positive +449b 6008c720 storet 1 ,mem_device_flag +449c 7041bd00 jam 0 ,mem_link_key_exists +449d 2040437a call mouse_store_device_number2eeprom +449e 204042fb call mouse_before_store_reconn_info +449f 202042a2 branch mouse_check_reconn_target + +mouse_power_down: +44a0 20404482 call mouse_devce_led_off +44a1 58000000 setarg 0 +44a2 600400a1 store 8 ,mem_gpio_wakeup_low +44a3 20202b1f branch lpm_hibernate + +remote_car_init: +44a4 20758000 rtn wake +44a5 68108081 hfetch 1 ,core_gpio_sel1 +44a6 1fe17ef0 and_into 0xf0 ,pdata +44a7 60108081 hstore 1 ,core_gpio_sel1 +44a8 20406948 call keyscan_key_init +44a9 580044e6 setarg remote_car_le_before_hibernate +44aa 600141eb store 2 ,mem_cb_before_hibernate +44ab 580044e9 setarg remote_car_process_lpm_before +44ac 600141ed store 2 ,mem_cb_before_lpm +44ad 580044ef setarg remote_car_scale_process_idle +44ae 600141f3 store 2 ,mem_cb_idle_process +44af 580044f2 setarg remote_car_scale_process_bb_event +44b0 600141f5 store 2 ,mem_cb_bb_event_process +44b1 580033d0 setarg app_get_lpm_wake_lock +44b2 600141e9 store 2 ,mem_cb_check_wakelock +44b3 20402c7a call g24_head_ptr2regc +44b4 580045c2 setarg remote_car_g24_package_data +44b5 1a608ad8 add regc ,offset_24g_cb_data ,contw +44b6 e0a10000 istore 2 ,contw +44b7 580044ea setarg remote_car_g24_enter_lpm +44b8 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw +44b9 e0a10000 istore 2 ,contw +44ba 580044e9 setarg remote_car_process_lpm_before +44bb 1a608adc add regc ,offset_24g_cb_lpm_before ,contw +44bc e0a10000 istore 2 ,contw +44bd 5800450e setarg remote_car_event_timer +44be 600141fd store 2 ,mem_cb_event_timer +44bf 580044da setarg remote_car_power_off_signal +44c0 6001475b store 2 ,mem_remote_car_power_off_cb +44c1 580044d6 setarg remote_car_soft_switch_power_on_signal +44c2 6001475f store 2 ,mem_remote_car_power_standby_cb +44c3 58004560 setarg remote_car_send_key_data +44c4 6001470f store 2 ,mem_cb_remote_car_keyscan +44c5 44f8401e bpatch patch1e_0 ,mem_patch1e +44c6 204044e2 call remote_car_init_environment +44c7 20407e38 call queue_init +44c8 70417202 jam 2 ,mem_lpm_mult +44c9 6800c72b fetch 1 ,mem_remote_car_config_soft_switch_enable +44ca 6000c69a store 1 ,mem_remote_car_hard_soft_switch +44cb c00044d5 beq hard_switch ,remote_car_hard_switch_power_on_signal +44cc 6800c72c fetch 1 ,mem_remote_car_config_soft_switch_gpio +44cd 6000c686 store 1 ,mem_ui_button_gpio + +remote_car_soft_switch_power_on_init: +44ce 204044db call remote_car_ui_led_init +44cf 20407cd3 call ui_button_init +44d0 20407cdd call ui_button_polling +44d1 70475701 jam power_starting ,mem_remote_car_power_state +44d2 68014682 fetch 2 ,mem_ui_state_map +44d3 c3860000 rtnbit1 ui_state_btn_down +44d4 2020340a branch app_enter_hibernate + +remote_car_hard_switch_power_on_signal: +44d5 70475702 jam power_standby ,mem_remote_car_power_state + +remote_car_soft_switch_power_on_signal: +44d6 204044db call remote_car_ui_led_init +44d7 da200000 arg 0 ,rega +44d8 20407d1e call ui_led_blink_start_global + +remote_car_connect_24g_mode: +44d9 20202ee4 branch g24_auto_pair_start + +remote_car_power_off_signal: +44da 202044db branch remote_car_ui_led_init + +remote_car_ui_led_init: +44db 44f8c01e bpatch patch1e_1 ,mem_patch1e +44dc 6800c729 fetch 1 ,mem_remote_car_config_connect_led_gpio +44dd c0ffc4e0 bne invalid_pin_num ,remote_car_pairing_led_gpio_set + +remote_car_ui_led_init_1: +44de 6808c706 fetcht 1 ,mem_remote_car_led_map +44df 2020680e branch gpio_config_output + +remote_car_pairing_led_gpio_set: +44e0 6000c706 store 1 ,mem_remote_car_led_map +44e1 202044de branch remote_car_ui_led_init_1 + +remote_car_init_environment: +44e2 20402c9d call g24_set_device_addr +44e3 68014753 fetch 2 ,mem_remote_car_no_data_timeout +44e4 60014755 store 2 ,mem_remote_car_no_data_timer +44e5 20204515 branch remote_car_get_adc_default_data + +remote_car_le_before_hibernate: + +remote_car_in_enter_hibernate: +44e6 20406835 call gpio_set_before_lpm_common +44e7 204044e9 call remote_car_process_lpm_before +44e8 2020340a branch app_enter_hibernate + +remote_car_process_lpm_before: +44e9 2020696c branch keyscan_process_lpm_before + +remote_car_g24_enter_lpm: +44ea 6800c765 fetch 1 ,mem_remote_car_24g_enter_lpm_enable +44eb 207a0000 rtn blank +44ec 20202d83 branch g24_lpm_long_sleep + +remote_car_process_auto_pair_exit: +44ed 20600000 rtn + +remote_car_key_scan_process: +44ee 20206978 branch keyscan_key_process + +remote_car_scale_process_idle: +44ef 20404544 call remote_car_rocker_process +44f0 20404503 call remote_car_24g_status_process +44f1 202044ee branch remote_car_key_scan_process + +remote_car_scale_process_bb_event: +44f2 1a627e00 copy regc ,pdata +44f3 c016b431 beq bt_evt_button_up ,app_event_button_up +44f4 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed +44f5 c01cc4fb beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +44f6 c01e44ff beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +44f7 c01d44f9 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +44f8 20600000 rtn + +remote_car_24g_attempt_fail: +44f9 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable +44fa 20600000 rtn + +remote_car_24g_pairing_complete: +44fb 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable +44fc 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step +44fd 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag +44fe 20600000 rtn + +remote_car_24g_attempt_success: +44ff 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable +4500 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step +4501 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag +4502 20600000 rtn + +remote_car_24g_status_process: +4503 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step +4504 c1000000 rtneq power_on +4505 6800c762 fetch 1 ,mem_remote_car_24g_status +4506 c1008000 rtneq work_paired +4507 70476201 jam work_paired ,mem_remote_car_24g_status + +remote_car_scale_process_paired: +4508 da200000 arg 0 ,rega +4509 20207d19 branch ui_led_off_global + +remote_car_scale_process_shutdown: +450a da200000 arg 0 ,rega +450b 20407d19 call ui_led_off_global +450c 204044db call remote_car_ui_led_init +450d 2020340a branch app_enter_hibernate + +remote_car_event_timer: +450e 2040337b call app_power_timer +450f 20204510 branch remote_car_no_data_timer + +remote_car_no_data_timer: +4510 6800c72d fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +4511 207a0000 rtn blank +4512 da604755 arg mem_remote_car_no_data_timer ,regc +4513 da40450a arg remote_car_scale_process_shutdown ,regb +4514 20203374 branch timer_single_step_2b + +remote_car_get_adc_default_data: +4515 2040451a call remote_car_rocker_get_x +4516 6009471a storet 2 ,mem_current_vdd_value_default_mid_x +4517 2040451f call remote_car_rocker_get_y +4518 6009471c storet 2 ,mem_current_vdd_value_default_mid_y +4519 20600000 rtn + +remote_car_rocker_data_get: + +remote_car_rocker_get_x: +451a 6801471a fetch 2 ,mem_current_vdd_value_default_mid_x +451b 6001471e store 2 ,mem_current_vdd_value_default_mid_temp +451c 20404540 call remote_car_get_adc_from_gpio6 +451d 20404525 call remote_car_rocker_get_value +451e 6000c724 store 1 ,mem_rocker_status + +remote_car_rocker_get_y: +451f 6801471c fetch 2 ,mem_current_vdd_value_default_mid_y +4520 6001471e store 2 ,mem_current_vdd_value_default_mid_temp +4521 20404542 call remote_car_get_adc_from_gpio7 +4522 20404525 call remote_car_rocker_get_value +4523 6000c725 store 1 ,mem_rocker_status + 1 +4524 20600000 rtn + +remote_car_rocker_get_value: +4525 68014720 fetch 2 ,mem_current_vdd_default_range +4526 1fe22200 copy pdata ,rega +4527 6801471e fetch 2 ,mem_current_vdd_value_default_mid_temp +4528 2040452e call remote_car_rocker_mid_value_adjust +4529 6800c719 fetch 1 ,mem_rocker_work_status +452a 243a4537 nbranch remote_car_rocker_translate_key ,blank +452b 24610000 nrtn positive +452c 6809471e fetcht 2 ,mem_current_vdd_value_default_mid_temp +452d 20600000 rtn + +remote_car_rocker_mid_value_adjust: +452e 98467e00 isub temp ,pdata +452f 20214534 branch remote_car_rocker_mid_adjust_positive ,positive +4530 1fe67e00 sub pdata ,0 ,pdata +4531 70471801 jam 1 ,mem_rocker_negative_flag +4532 9a267c00 isub rega ,null +4533 20600000 rtn + +remote_car_rocker_mid_adjust_positive: +4534 70471800 jam 0 ,mem_rocker_negative_flag +4535 9a267c00 isub rega ,null +4536 20600000 rtn + +remote_car_rocker_translate_key: +4537 2421453e nbranch remote_car_rocker_middle_key ,positive +4538 6800c718 fetch 1 ,mem_rocker_negative_flag +4539 243a453c nbranch remote_car_rocker_negative_key ,blank + +remote_car_rocker_positive_key: +453a 58000001 setarg rocker_positive_key +453b 20600000 rtn + +remote_car_rocker_negative_key: +453c 58000002 setarg rocker_negative_key +453d 20600000 rtn + +remote_car_rocker_middle_key: +453e 58000000 setarg rocker_middle_key +453f 20600000 rtn + +remote_car_get_adc_from_gpio6: +4540 70422e33 jam 0x33 ,mem_adc_channel +4541 202068eb branch adc_set_mode + +remote_car_get_adc_from_gpio7: +4542 70422e34 jam 0x34 ,mem_adc_channel +4543 202068eb branch adc_set_mode + +remote_car_rocker_process: +4544 6800c72a fetch 1 ,mem_remote_car_config_check_way +4545 c1808000 rtnne car_remote_check_rocker + +remote_car_read_rocker_check_start: +4546 44f9401e bpatch patch1e_2 ,mem_patch1e +4547 70471901 jam 1 ,mem_rocker_work_status +4548 2040451a call remote_car_rocker_data_get +4549 68014724 fetch 2 ,mem_rocker_status +454a 68094722 fetcht 2 ,mem_rocker_last_status +454b 98467c00 isub temp ,null +454c 20628000 rtn zero +454d 60014722 store 2 ,mem_rocker_last_status +454e 20404550 call remote_car_rocker_x_to_key +454f 20204554 branch remote_car_rocker_y_to_key + +remote_car_rocker_x_to_key: +4550 6800c724 fetch 1 ,mem_rocker_x_status +4551 203a455a branch rocker_to_queue_set_0 ,blank +4552 1fe0ffff increase -1 ,pdata +4553 20204557 branch remote_car_rocker_to_key + +remote_car_rocker_y_to_key: +4554 6800c725 fetch 1 ,mem_rocker_y_status +4555 203a455d branch rocker_to_queue_set_2 ,blank +4556 1fe0fe01 increase 1 ,pdata + +remote_car_rocker_to_key: +4557 1fe20e00 copy pdata ,queue +4558 da200001 arg 1 ,rega +4559 20204560 branch remote_car_send_key_data + +rocker_to_queue_set_0: +455a d8e00000 arg 0 ,queue +455b da200000 arg 0 ,rega +455c 20204560 branch remote_car_send_key_data + +rocker_to_queue_set_2: +455d d8e00002 arg 2 ,queue +455e da200000 arg 0 ,rega +455f 20204560 branch remote_car_send_key_data + +remote_car_send_key_data: +4560 1a227e00 copy rega ,pdata +4561 6000c761 store 1 ,mem_remote_key_status +4562 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step +4563 c0002ee4 beq power_on ,g24_auto_pair_start +4564 68014753 fetch 2 ,mem_remote_car_no_data_timeout +4565 60014755 store 2 ,mem_remote_car_no_data_timer +4566 6800c761 fetch 1 ,mem_remote_key_status +4567 203a4580 branch remote_car_key_is_release ,blank + +remote_car_key_is_press: +4568 44f9c01e bpatch patch1e_3 ,mem_patch1e +4569 da200000 arg 0 ,rega +456a 20407d14 call ui_led_on_global + +remote_car_attack_key_press: +456b 18e27e00 copy queue ,pdata +456c c00245a3 beq 4 ,remote_car_send_attack_key4_press +456d c002c5a5 beq 5 ,remote_car_send_attack_key5_press +456e c00345a7 beq 6 ,remote_car_send_fire_key6_press + +remote_car_motor_key_press: +456f 2040458b call remote_car_device_layout_select +4570 c0004574 beq control_f_b_ten ,remote_car_single_motor_key_is_press +4571 c001457a beq control_l_r_ten ,remote_car_double_motor_key_press +4572 c001c574 beq control_l_r_lr ,remote_car_single_motor_key_is_press +4573 20600000 rtn + +remote_car_single_motor_key_is_press: +4574 18e27e00 copy queue ,pdata +4575 c000458f beq 0 ,remote_car_send_motor1_key0_press +4576 c000c591 beq 1 ,remote_car_send_motor1_key1_press +4577 c0014593 beq 2 ,remote_car_send_motor2_key2_press +4578 c001c595 beq 3 ,remote_car_send_motor2_key3_press +4579 20600000 rtn + +remote_car_double_motor_key_press: +457a 18e27e00 copy queue ,pdata +457b c0004597 beq 0 ,remote_car_send_double_motor_key0_press +457c c000c59a beq 1 ,remote_car_send_double_motor_key1_press +457d c001459d beq 2 ,remote_car_send_double_motor_key2_press +457e c001c5a0 beq 3 ,remote_car_send_double_motor_key3_press +457f 20600000 rtn + +remote_car_key_is_release: +4580 44fa401e bpatch patch1e_4 ,mem_patch1e +4581 da200000 arg 0 ,rega +4582 20407d19 call ui_led_off_global + +remote_car_attack_key_release: +4583 18e27e00 copy queue ,pdata +4584 c00245bc beq 4 ,remote_car_send_attack_key4_rel +4585 c002c5bc beq 5 ,remote_car_send_attack_key5_rel + +remote_car_motor_key_release: +4586 2040458b call remote_car_device_layout_select +4587 c00045a9 beq control_f_b_ten ,remote_car_single_motor_key_rel +4588 c00145af beq control_l_r_ten ,remote_car_double_motor_key_rel +4589 c001c5a9 beq control_l_r_lr ,remote_car_single_motor_key_rel +458a 20600000 rtn + +remote_car_device_layout_select: +458b 6800c728 fetch 1 ,mem_remote_car_config_layout +458c 6808c727 fetcht 1 ,mem_remote_car_config_key_map +458d 9841fe00 ior temp ,pdata +458e 20600000 rtn + +remote_car_send_motor1_key0_press: +458f 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload +4590 202045be branch remote_car_send_key + +remote_car_send_motor1_key1_press: +4591 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload +4592 202045be branch remote_car_send_key + +remote_car_send_motor2_key2_press: +4593 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload +4594 202045be branch remote_car_send_key + +remote_car_send_motor2_key3_press: +4595 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload +4596 202045be branch remote_car_send_key + +remote_car_send_double_motor_key0_press: +4597 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload +4598 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload +4599 202045be branch remote_car_send_key + +remote_car_send_double_motor_key1_press: +459a 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload +459b 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload +459c 202045be branch remote_car_send_key + +remote_car_send_double_motor_key2_press: +459d 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload +459e 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload +459f 202045be branch remote_car_send_key + +remote_car_send_double_motor_key3_press: +45a0 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload +45a1 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload +45a2 202045be branch remote_car_send_key + +remote_car_send_attack_key4_press: +45a3 70473801 jam motor_positive ,mem_remote_car_24g_motor3_payload +45a4 202045be branch remote_car_send_key + +remote_car_send_attack_key5_press: +45a5 70473802 jam motor_negative ,mem_remote_car_24g_motor3_payload +45a6 202045be branch remote_car_send_key + +remote_car_send_fire_key6_press: +45a7 70474101 jam 0x01 ,mem_remote_car_24g_fire_send_payload +45a8 202045c0 branch remote_car_send_attack + +remote_car_single_motor_key_rel: +45a9 18e27e00 copy queue ,pdata +45aa c00045b5 beq 0 ,remote_car_send_motor1_key0_rel +45ab c000c5b5 beq 1 ,remote_car_send_motor1_key1_rel +45ac c00145b7 beq 2 ,remote_car_send_motor2_key2_rel +45ad c001c5b7 beq 3 ,remote_car_send_motor2_key3_rel +45ae 20600000 rtn + +remote_car_double_motor_key_rel: +45af 18e27e00 copy queue ,pdata +45b0 c00045b9 beq 0 ,remote_car_send_double_motor_key0_rel +45b1 c000c5b9 beq 1 ,remote_car_send_double_motor_key1_rel +45b2 c00145b9 beq 2 ,remote_car_send_double_motor_key2_rel +45b3 c001c5b9 beq 3 ,remote_car_send_double_motor_key3_rel +45b4 20600000 rtn + +remote_car_send_motor1_key0_rel: + +remote_car_send_motor1_key1_rel: +45b5 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload +45b6 202045be branch remote_car_send_key + +remote_car_send_motor2_key2_rel: + +remote_car_send_motor2_key3_rel: +45b7 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload +45b8 202045be branch remote_car_send_key + +remote_car_send_double_motor_key0_rel: + +remote_car_send_double_motor_key1_rel: + +remote_car_send_double_motor_key2_rel: + +remote_car_send_double_motor_key3_rel: +45b9 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload +45ba 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload +45bb 202045be branch remote_car_send_key + +remote_car_send_attack_key4_rel: + +remote_car_send_attack_key5_rel: +45bc 70473800 jam motor_stop ,mem_remote_car_24g_motor3_payload +45bd 202045be branch remote_car_send_key + +remote_car_send_key: +45be da20472e arg mem_remote_car_24g_motor_packet ,rega +45bf 20207e3d branch queue_push + +remote_car_send_attack: +45c0 da20473b arg mem_remote_car_24g_fire_packet ,rega +45c1 20207e3d branch queue_push + +remote_car_g24_package_data: +45c2 6800c764 fetch 1 ,mem_remote_car_24g_pair_success_flag +45c3 c000c5cc beq work_paired ,remote_car_g24_send_empty +45c4 da204744 arg mem_remote_car_24g_tx_temp ,rega +45c5 20407e54 call queue_pop +45c6 243445d1 nbranch remote_car_moto_data ,user + +remote_car_g24_package_data_continue: +45c7 d8c04744 arg mem_remote_car_24g_tx_temp ,contr +45c8 e8c08000 ifetch 1 ,contr +45c9 1fe22200 copy pdata ,rega +45ca da404745 arg mem_remote_car_24g_tx_temp + 1 ,regb +45cb 20600000 rtn + +remote_car_g24_send_empty: +45cc 70476400 jam 0 ,mem_remote_car_24g_pair_success_flag +45cd 78347c00 enable user +45ce da200001 arg 1 ,rega +45cf da404766 arg mem_remote_car_empty_packet ,regb +45d0 20600000 rtn + +remote_car_moto_data: +45d1 6800c747 fetch 1 ,mem_remote_car_24g_tx_temp + 3 +45d2 c00245d5 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +45d3 c002c5d5 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +45d4 20600000 rtn + +remote_car_moto_data_next: +45d5 6800c74a fetch 1 ,mem_remote_car_24g_tx_temp + 6 +45d6 243a45dc nbranch remote_car_moto_data_enable_user ,blank +45d7 6800c74c fetch 1 ,mem_remote_car_24g_tx_temp + 8 +45d8 243a45dc nbranch remote_car_moto_data_enable_user ,blank +45d9 6800c74e fetch 1 ,mem_remote_car_24g_tx_temp + 10 +45da 243a45dc nbranch remote_car_moto_data_enable_user ,blank +45db 20600000 rtn + +remote_car_moto_data_enable_user: +45dc 78347c00 enable user +45dd 202045c7 branch remote_car_g24_package_data_continue + +shutter_init: +45de 20758000 rtn wake +45df 68108081 hfetch 1 ,core_gpio_sel1 +45e0 1fe17efc and_into 0xfc ,pdata +45e1 60108081 hstore 1 ,core_gpio_sel1 +45e2 580046b4 setarg shutter_le_before_hibernate +45e3 600141eb store 2 ,mem_cb_before_hibernate +45e4 580046b3 setarg shutter_process_lpm_before +45e5 600141ed store 2 ,mem_cb_before_lpm +45e6 5800340a setarg app_enter_hibernate +45e7 600141f7 store 2 ,mem_cb_discovry_timeout +45e8 580046b1 setarg shutter_process_idle +45e9 600141f3 store 2 ,mem_cb_idle_process +45ea 58004612 setarg shutter_process_bb_event +45eb 600141f5 store 2 ,mem_cb_bb_event_process +45ec 5800460c setarg shutter_le_scale_lpm_lock +45ed 600141e9 store 2 ,mem_cb_check_wakelock +45ee 5800476a setarg ble_shutter_receive_data +45ef 600141f9 store 2 ,mem_cb_att_write +45f0 58004686 setarg shutter_le_bb_event_timer +45f1 600141fd store 2 ,mem_cb_event_timer +45f2 58004729 setarg shutter_key_change +45f3 600146e7 store 2 ,mem_cb_shutter_keycan +45f4 58004806 setarg shutter_soft_swtich_power_on +45f5 600146e2 store 2 ,mem_shutter_soft_switch_poweron_callback_function +45f6 58004807 setarg shutter_soft_swtich_power_off +45f7 600146e4 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +45f8 204057a3 call le_modified_name +45f9 204047da call shutter_load_bluetooth_config_by_user_config +45fa 20404788 call shutter_init_bluetooth_config +45fb 2040476d call shutter_init_param +45fc 20406948 call keyscan_key_init +45fd 2040477a call shutter_load_buffer_config_form_datarom +45fe 20407e38 call queue_init +45ff 20407d08 call ui_led_init_global +4600 20404793 call shutter_load_bluetooth_config +4601 204047c7 call shutter_load_bluetooth_config_by_eeprom +4602 44fac01e bpatch patch1e_5 ,mem_patch1e +4603 2040464f call classic_shutter_load_reconn_info +4604 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case +4605 c0004609 beq hard_switch ,shutter_hart_swtich_power_on +4606 6800c6de fetch 1 ,mem_shutter_soft_switch_button_gpio +4607 6000c686 store 1 ,mem_ui_button_gpio +4608 2020480e branch ui_soft_swtich_init + +shutter_hart_swtich_power_on: +4609 704686ff jam ui_button_gpio_disable ,mem_ui_button_gpio +460a 7046df01 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +460b 202046d9 branch shutter_start_reconnect + +shutter_le_scale_lpm_lock: +460c 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +460d c00133d0 beq ss_state_power_off ,app_get_lpm_wake_lock +460e 2040527e call l2cap_malloc_get_full_map +460f 6800c256 fetch 1 ,mem_used_map +4610 243a33d0 nbranch app_get_lpm_wake_lock ,blank +4611 202033d2 branch app_put_lpm_wake_lock + +shutter_process_bb_event: +4612 1a627e00 copy regc ,pdata +4613 c000c626 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect +4614 c0014629 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect +4615 c0024631 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed +4616 c002c633 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete +4617 c0034635 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect +4618 c003c638 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect +4619 c009463c beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake +461a c009c644 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout +461b c013c645 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug +461c c0174648 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff +461d c01ec649 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information +461e c00a4658 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +461f c00ac65c beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +4620 c01fc65f beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +4621 c0204665 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +4622 c008466b beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +4623 c016466c beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +4624 c016c677 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +4625 20600000 rtn + +classic_shutter_process_baseband_connect: +4626 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count +4627 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut +4628 20600000 rtn + +classic_shutter_process_baseband_disconnect: +4629 2040462b call classic_shutter_disconnect_clear_flag +462a 20204631 branch classic_shutter_process_reconnect_failed + +classic_shutter_disconnect_clear_flag: +462b 7041e200 jam app_handshake_null ,mem_app_handshake_flag +462c 70468000 jam 0 ,mem_hid_handshake_timer_count +462d 70420500 jam 0 ,mem_unsniff2sniff_timer_count +462e 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut +462f 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count +4630 20207e38 branch queue_init + +classic_shutter_process_reconnect_failed: +4631 204033a9 call app_disconn_reason_clear +4632 202046c2 branch shutter_start_bluetooth_discovery + +classic_shutter_process_setup_complete: +4633 204046b6 call shutter_stop_bluetooth_discovery +4634 20203408 branch app_led_stop_blink + +classic_shutter_process_hid_connect: +4635 58000002 setarg hid_handshake_timeout +4636 6000c680 store 1 ,mem_hid_handshake_timer_count +4637 20600000 rtn + +classic_shutter_process_hid_disconnect: +4638 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut +4639 58000001 setarg flag_shutter_hid_disconn_timeout +463a 6000c6ad store 1 ,mem_classic_shutter_hid_disconn_count +463b 20600000 rtn + +classic_shutter_process_hid_handshake: +463c 6800c1e2 fetch 1 ,mem_app_handshake_flag +463d c1008000 rtneq app_handshake_done +463e 7041e201 jam app_handshake_done ,mem_app_handshake_flag +463f 20403416 call app_lpm_mult_enable +4640 20403414 call app_store_reconn_info +4641 204046b6 call shutter_stop_bluetooth_discovery +4642 20403408 call app_led_off +4643 2020340e branch app_bt_enter_sniff + +classic_shutter_process_reconnect_page_timeout: +4644 20204631 branch classic_shutter_process_reconnect_failed + +classic_shutter_process_virtual_cable_unplug: +4645 58000005 setarg flag_shutter_cable_unplug_timeout +4646 6000c6ac store 1 ,mem_classic_shutter_cable_unplug_conut +4647 20600000 rtn + +classic_shutter_process_remote_unsniff: +4648 202033cd branch app_start_auto_sniff + +classic_shutter_process_store_reconnect_information: +4649 da400000 arg nvram_eeprom_offset ,regb +464a 6800c217 fetch 1 ,mem_nv_data_number +464b 1fef8422 mul32 pdata ,34 ,temp +464c 68014215 fetch 2 ,mem_nv_data_ptr +464d 1fe22200 copy pdata ,rega +464e 20206606 branch iicd_write_eep_data + +classic_shutter_load_reconn_info: +464f da400000 arg nvram_eeprom_offset ,regb +4650 6800c69a fetch 1 ,mem_shutter_bluetooth_type +4651 c4008000 rtnbit0 classic_shutter +4652 6800c217 fetch 1 ,mem_nv_data_number +4653 207a0000 rtn blank +4654 1fef8422 mul32 pdata ,34 ,temp +4655 68014215 fetch 2 ,mem_nv_data_ptr +4656 1fe22200 copy pdata ,rega +4657 202065df branch iicd_read_eep_data + +ble_shutter_process_baseband_connect: +4658 204046b6 call shutter_stop_bluetooth_discovery +4659 58000000 setarg 0 +465a 600146b7 store 2 ,mem_ble_shutter_reconn_timer +465b 20203408 branch app_led_off + +ble_shutter_process_baseband_disconnect: +465c 20407e38 call queue_init +465d 7046b000 jam 0 ,mem_ble_shutter_enable_notify +465e 202046d9 branch shutter_start_reconnect + +ble_shutter_process_reconnect_complete: +465f 20407e38 call queue_init +4660 7046b001 jam 1 ,mem_ble_shutter_enable_notify +4661 680446c1 fetch 8 ,mem_ble_shutter_interval_min +4662 60044496 store 8 ,mem_le_interval_min +4663 20403416 call app_lpm_mult_enable +4664 20205abf branch le_l2cap_tx_update_req + +ble_shutter_process_parse_connect_parameter_update_response: +4665 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +4666 c1000000 rtneq ble_signaling_connect_parameter_update_accepted +4667 680446c9 fetch 8 ,mem_ble_shutter_interval_min_new +4668 207a0000 rtn blank +4669 60044496 store 8 ,mem_le_interval_min +466a 20205abf branch le_l2cap_tx_update_req + +shutter_process_soft_swtich_button_long_press: +466b 2020481f branch ui_soft_switch_botton_long_press + +shutter_process_soft_swtich_button_down: +466c 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case +466d c1000000 rtneq hard_switch +466e 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +466f c1808000 rtnne ss_state_power_on +4670 20404672 call shutter_store_currenct_led_state +4671 20203406 branch app_led_on + +shutter_store_currenct_led_state: +4672 7048df01 jam 1 ,mem_shutter_soft_swtich_botton_down +4673 df20000b arg 11 ,loopcnt +4674 d8a048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contw +4675 d8c048c9 arg mem_shutter_led_struct_app_led ,contr +4676 20207f01 branch memcpy + +shutter_process_soft_swtich_button_up: +4677 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case +4678 c1000000 rtneq hard_switch +4679 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +467a c000c67c beq ss_state_power_on ,shutter_load_currenct_led_state +467b 2020481b branch ui_soft_switch_botton_up + +shutter_load_currenct_led_state: +467c 6800c8df fetch 1 ,mem_shutter_soft_swtich_botton_down +467d c1808000 rtnne 1 +467e 7048df00 jam 0 ,mem_shutter_soft_swtich_botton_down +467f 68014682 fetch 2 ,mem_ui_state_map +4680 c2803408 bbit1 ui_state_bt_connected ,app_led_off +4681 c284b408 bbit1 ui_state_ble_connected ,app_led_off +4682 df20000b arg 11 ,loopcnt +4683 d8c048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contr +4684 d8a048c9 arg mem_shutter_led_struct_app_led ,contw +4685 20207f01 branch memcpy + +shutter_le_bb_event_timer: +4686 2040468c call shutter_check_sleep_timer +4687 20404693 call shutter_check_power_off_timer +4688 2040469e call classic_shutter_check_unplug_timer +4689 204046a6 call classic_shutter_hid_handshake_timer +468a 204046a9 call classic_shutter_hid_disconn_timer +468b 202046ac branch ble_shutter_reconn_timer + +shutter_check_sleep_timer: +468c da6046db arg mem_shutter_sleep_timer ,regc +468d da40468f arg shutter_sleep_timeout ,regb +468e 20203374 branch timer_single_step_2b + +shutter_sleep_timeout: +468f 7046df02 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +4690 20403408 call app_led_off +4691 204046f4 call shutter_disconnect_current_connection +4692 2020480b branch shutter_wait_power_off + +shutter_check_power_off_timer: +4693 da6048ec arg mem_shutter_power_off_timer ,regc +4694 da404696 arg shutter_check_power_off_timeout ,regb +4695 2020336d branch timer_single_step + +shutter_check_power_off_timeout: +4696 68014682 fetch 2 ,mem_ui_state_map +4697 c284c80b bbit1 ui_state_ble_connected ,shutter_wait_power_off +4698 c280480b bbit1 ui_state_bt_connected ,shutter_wait_power_off +4699 6800c8c9 fetch 1 ,mem_shutter_led_struct_app_led_type +469a c000c80b beq ui_led_state_blink_start ,shutter_wait_power_off +469b c002480b beq ui_led_state_blink_lighting ,shutter_wait_power_off +469c c002c80b beq ui_led_state_blink_darking ,shutter_wait_power_off +469d 2020340a branch app_enter_hibernate + +classic_shutter_check_unplug_timer: +469e da6046ac arg mem_classic_shutter_cable_unplug_conut ,regc +469f da4046a1 arg classic_shutter_unplug_timeout ,regb +46a0 2020336d branch timer_single_step + +classic_shutter_unplug_timeout: +46a1 6800827f fetch 1 ,mem_control_tasks +46a2 79207e00 set1 l2cap_disconnect_interrupt ,pdata +46a3 79207e07 set1 l2cap_disconnect_control ,pdata +46a4 6000827f store 1 ,mem_control_tasks +46a5 20600000 rtn + +classic_shutter_hid_handshake_timer: +46a6 da604680 arg mem_hid_handshake_timer_count ,regc +46a7 da40463c arg classic_shutter_process_hid_handshake ,regb +46a8 2020336d branch timer_single_step + +classic_shutter_hid_disconn_timer: +46a9 da6046ad arg mem_classic_shutter_hid_disconn_count ,regc +46aa da4033e9 arg app_bt_disconnect ,regb +46ab 2020336d branch timer_single_step + +ble_shutter_reconn_timer: +46ac 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +46ad c1808000 rtnne ss_state_power_on +46ae da6046b7 arg mem_ble_shutter_reconn_timer ,regc +46af da4046c2 arg shutter_start_bluetooth_discovery ,regb +46b0 20203374 branch timer_single_step_2b + +shutter_process_idle: +46b1 2040473a call shutter_send_data_to_master +46b2 20206978 branch keyscan_key_process + +shutter_process_lpm_before: +46b3 2020696c branch keyscan_process_lpm_before + +shutter_le_before_hibernate: +46b4 20406835 call gpio_set_before_lpm_common +46b5 202046b3 branch shutter_process_lpm_before + +shutter_stop_bluetooth_discovery: +46b6 6800c69a fetch 1 ,mem_shutter_bluetooth_type +46b7 c280c6be bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery +46b8 c28046ba bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +46b9 20600000 rtn + +ble_shutter_stop_bluetooth_discovery: +46ba 680146d7 fetch 2 ,mem_ble_shutter_connect_timeout +46bb 600146d9 store 2 ,mem_shutter_sleep_timeout +46bc 600146db store 2 ,mem_shutter_sleep_timer +46bd 202033f8 branch app_ble_stop_adv + +classic_shutter_stop_bluetooth_discovery: +46be 680146d3 fetch 2 ,mem_classic_shutter_connect_timeout +46bf 600146d9 store 2 ,mem_shutter_sleep_timeout +46c0 600146db store 2 ,mem_shutter_sleep_timer +46c1 202033f0 branch app_bt_stop_discovery + +shutter_start_bluetooth_discovery: +46c2 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +46c3 c1808000 rtnne ss_state_power_on +46c4 6800c69a fetch 1 ,mem_shutter_bluetooth_type +46c5 c280c6c8 bbit1 classic_shutter ,classic_shutter_start_discovery +46c6 c28046cc bbit1 ble_shutter ,ble_shutter_start_discovery +46c7 20600000 rtn + +classic_shutter_start_discovery: +46c8 680146d1 fetch 2 ,mem_classic_shutter_discovery_timeout , +46c9 600146d9 store 2 ,mem_shutter_sleep_timeout +46ca 600146db store 2 ,mem_shutter_sleep_timer +46cb 202033eb branch app_bt_start_discovery_short + +ble_shutter_start_discovery: +46cc 68014682 fetch 2 ,mem_ui_state_map +46cd c3848000 rtnbit1 ui_state_ble_connected +46ce 680146d5 fetch 2 ,mem_ble_shutter_discovery_timeout +46cf 600146d9 store 2 ,mem_shutter_sleep_timeout +46d0 600146db store 2 ,mem_shutter_sleep_timer +46d1 680146b3 fetch 2 ,mem_ble_shutter_discovery_adv_interval +46d2 204046f0 call shutter_ble_adv_interval_set +46d3 20403404 call app_led_start_blink +46d4 680246bd fetch 4 ,mem_ble_shutter_discovery_blink_on_time +46d5 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time +46d6 68014682 fetch 2 ,mem_ui_state_map +46d7 c3858000 rtnbit1 ui_state_ble_adv +46d8 202033fa branch app_ble_start_adv + +shutter_start_reconnect: +46d9 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +46da c1808000 rtnne ss_state_power_on +46db 6800c69a fetch 1 ,mem_shutter_bluetooth_type +46dc c280c6df bbit1 classic_shutter ,classic_shutter_start_reconnect +46dd c28046e4 bbit1 ble_shutter ,ble_shutter_start_reconnect +46de 20600000 rtn + +classic_shutter_start_reconnect: +46df 204046f8 call app_check_reconn_target +46e0 203a46c2 branch shutter_start_bluetooth_discovery ,blank +46e1 20403406 call app_led_on +46e2 204033f0 call app_bt_stop_discovery +46e3 202033e1 branch app_bt_start_reconnect + +ble_shutter_start_reconnect: +46e4 680146b7 fetch 2 ,mem_ble_shutter_reconn_timer +46e5 680946b5 fetcht 2 ,mem_ble_shutter_reconn_timeout +46e6 600946b7 storet 2 ,mem_ble_shutter_reconn_timer +46e7 247a0000 nrtn blank +46e8 680146b1 fetch 2 ,mem_ble_shutter_reconn_dav_interval +46e9 204046f0 call shutter_ble_adv_interval_set +46ea 20403404 call app_led_start_blink +46eb 680246b9 fetch 4 ,mem_ble_shutter_reconn_blink_on_time +46ec 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time +46ed 68014682 fetch 2 ,mem_ui_state_map +46ee c3858000 rtnbit1 ui_state_ble_adv +46ef 202033fa branch app_ble_start_adv + +shutter_ble_adv_interval_set: +46f0 60014154 store 2 ,mem_lpm_interval +46f1 1fe0fffc increase -4 ,pdata +46f2 60014482 store 2 ,mem_le_adv_interval +46f3 20600000 rtn + +shutter_disconnect_current_connection: +46f4 68014682 fetch 2 ,mem_ui_state_map +46f5 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +46f6 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +46f7 202046b6 branch shutter_stop_bluetooth_discovery + +app_check_reconn_target: +46f8 6800c217 fetch 1 ,mem_nv_data_number +46f9 1fe27200 copy pdata ,loopcnt +46fa 68014215 fetch 2 ,mem_nv_data_ptr +46fb 1fe22200 copy pdata ,rega + +app_check_reconn_target_loop: +46fc ea210000 ifetch 2 ,rega +46fd c0004701 beq 0 ,found_reconn_device +46fe 1a20a222 increase nv_data_len ,rega +46ff c20046fc loop app_check_reconn_target_loop +4700 20207ff1 branch enable_blank + +found_reconn_device: +4701 e8c30000 ifetch 6 ,contr +4702 600341d0 store 6 ,mem_hci_plap +4703 18c08c0a increase 10 ,contr +4704 d8a041be arg mem_link_key ,contw +4705 20407ebf call memcpy16 +4706 204067d7 call check_link_key_load +4707 20207fef branch disable_blank + +shutter_check_data_enable: +4708 20407fe9 call disable_user +4709 68014682 fetch 2 ,mem_ui_state_map +470a c280470d bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable +470b c284c710 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +470c 20600000 rtn + +shutter_check_bt_data_enable: +470d 6800c253 fetch 1 ,mem_hid_interrupt_state +470e c19f8000 rtnne 0x3f +470f 20207fe7 branch enable_user + +shutter_check_ble_data_enable: +4710 6800c6b0 fetch 1 ,mem_ble_shutter_enable_notify +4711 207a0000 rtn blank +4712 20207fe7 branch enable_user + +shutter_check_bluetooth_conn: +4713 20407fe9 call disable_user +4714 68014682 fetch 2 ,mem_ui_state_map +4715 c3800000 rtnbit1 ui_state_bt_connected +4716 c3848000 rtnbit1 ui_state_ble_connected +4717 20207fe7 branch enable_user + +shutter_change_bluetooth_status_bt_disconn: +4718 6800c69a fetch 1 ,mem_shutter_bluetooth_type +4719 c280c71c bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn +471a c280471f bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +471b 20600000 rtn + +classic_shutter_change_bluetooth_status_bt_disconn: +471c 6800c093 fetch 1 ,mem_scan_mode +471d c1818000 rtnne 0x03 +471e 202046d9 branch shutter_start_reconnect + +ble_shutter_change_bluetooth_status_bt_disconn: +471f 202046d9 branch shutter_start_reconnect + +shutter_check_send_data: +4720 78567c00 disable user2 +4721 680146d9 fetch 2 ,mem_shutter_sleep_timeout +4722 600146db store 2 ,mem_shutter_sleep_timer +4723 20404713 call shutter_check_bluetooth_conn +4724 20344718 branch shutter_change_bluetooth_status_bt_disconn ,user +4725 20404708 call shutter_check_data_enable +4726 24740000 nrtn user +4727 78367c00 enable user2 +4728 20600000 rtn + +shutter_key_change: +4729 20404720 call shutter_check_send_data +472a 24760000 nrtn user2 +472b 1a227e00 deposit rega +472c 203a4730 branch shutter_key_release ,blank + +shutter_key_press: +472d 20403406 call app_led_on +472e da6046f1 arg mem_key0_press ,regc +472f 20204732 branch push_queue_press_or_release + +shutter_key_release: +4730 20403408 call app_led_off +4731 da604719 arg mem_key0_release ,regc + +push_queue_press_or_release: +4732 dfe00005 arg max_queue_num ,pdata +4733 98effe00 imul32 queue ,pdata +4734 9a60a600 iadd regc ,regc + +push_buffer_in_queue: +4735 ea608000 ifetch 1 ,regc +4736 207a0000 rtn blank +4737 20404762 call queue_push_one_byte +4738 1a60a601 increase 1 ,regc +4739 20204735 branch push_buffer_in_queue + +shutter_send_data_to_master: +473a 68014682 fetch 2 ,mem_ui_state_map +473b c284c73e bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +473c c280474e bbit1 ui_state_bt_connected ,pop_queue_to_classic_data +473d 20600000 rtn + +pop_queue_to_ble_data: +473e 20405892 call le_fifo_check_nearly_full +473f 247a0000 nrtn blank +4740 20404765 call queue_pop_one_byte +4741 24740000 nrtn user +4742 1fe0ffff pincrease -1 +4743 1feffe05 mul32 pdata ,shutter_ble_data_buffer ,pdata +4744 d8404741 arg mem_ble_data_buffer1 ,temp +4745 98408c00 iadd temp ,contr + +le_send_notify_from_list: +4746 e8c08000 ifetch 1 ,contr +4747 1fe22200 copy pdata ,rega +4748 e8c90000 ifetcht 2 ,contr +4749 20407ea5 call store_contr +474a 20405a64 call le_att_malloc_tx_notify +474b 1a227200 copy rega ,loopcnt +474c 20407e9f call get_contr +474d 20207f01 branch memcpy + +pop_queue_to_classic_data: +474e 20405271 call l2cap_malloc_is_fifo_nearly_full +474f 247a0000 nrtn blank +4750 20404765 call queue_pop_one_byte +4751 24740000 nrtn user +4752 1fe0ffff pincrease -1 +4753 1feffe05 mul32 pdata ,shutter_classic_data_buffer ,pdata +4754 d84047a0 arg mem_classic_data_buffer1 ,temp +4755 98408c00 iadd temp ,contr +4756 e8c28000 ifetch 5 ,contr +4757 6002c79b store 5 ,mem_classic_data_buffer + +classic_send_hid_data: +4758 6800c79b fetch 1 ,mem_classic_data_buffer +4759 1fe22200 copy pdata ,rega +475a 20404d63 call hid_malloc_tx_buff +475b 6801424e fetch 2 ,mem_hid_int_remote_cid +475c e0a10000 istore 2 ,contw +475d 580000a1 setarg 0xa1 +475e e0a08000 istore 1 ,contw +475f 6802479c fetch 4 ,mem_classic_data_buffer + 1 +4760 e0a48000 istore 9 ,contw +4761 20600000 rtn + +queue_push_one_byte: +4762 60008a9a store 1 ,mem_pdatatemp +4763 da200a9a arg mem_pdatatemp ,rega +4764 20207e3d branch queue_push + +queue_pop_one_byte: +4765 da200a9a arg mem_pdatatemp ,rega +4766 20407e54 call queue_pop +4767 24740000 nrtn user +4768 68008a9a fetch 1 ,mem_pdatatemp +4769 20600000 rtn + +ble_shutter_receive_data: +476a 68010478 fetch 2 ,mem_le_att_handle +476b c00c465f beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +476c 20600000 rtn + +shutter_init_param: +476d 58000002 setarg 0x02 +476e 6000c8eb store 1 ,mem_shutter_power_off_timeout +476f 58200008 setarg 0x00200008 +4770 600246c1 store 4 ,mem_ble_shutter_interval_min +4771 592c0005 setarg 0x012c0005 +4772 e0a20000 istore 4 ,contw +4773 7044a617 jam 0x17 ,mem_le_local_mtu +4774 5800001b setarg 0x1b +4775 600144fa store 2 ,mem_le_pairing_handle +4776 20405810 call le_set_config_fixed_ltk +4777 2040582c call le_set_fixed_ltk +4778 20405839 call le_set_justwork +4779 20205818 branch le_set_config_read_authentication + +shutter_load_buffer_config_form_datarom: +477a df200028 arg ble_key_value_list_size ,loopcnt +477b d8a04741 arg mem_ble_data_buffer1 ,contw +477c d8c0949f arg ble_shutter_key_value_list ,contr +477d 20407ef4 call memcpy_fast +477e df200028 arg bt_key_value_list_size ,loopcnt +477f d8a047a0 arg mem_classic_data_buffer1 ,contw +4780 d8c094c7 arg classic_shutter_key_value_list ,contr +4781 20207ef4 branch memcpy_fast + +shutter_load_ble_gatt_form_datarom: +4782 df20017e arg ble_gatt_list_size ,loopcnt +4783 d8c0913a arg ble_shutter_gatt_list ,contr +4784 20207ef4 branch memcpy_fast + +shutter_load_bt_sdp_form_datarom: +4785 df2001e7 arg bt_sdp_list_size ,loopcnt +4786 d8c092b8 arg classic_shutter_sdp_list ,contr +4787 20207ef4 branch memcpy_fast + +shutter_init_bluetooth_config: +4788 204047ae call shutter_check_load_config_flag +4789 24740000 nrtn user +478a 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 +478b 20404790 call shutter_init_bluetooth_config_gpio_input +478c 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 +478d 20404790 call shutter_init_bluetooth_config_gpio_input +478e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 +478f 20204790 branch shutter_init_bluetooth_config_gpio_input + +shutter_init_bluetooth_config_gpio_input: +4790 207a0000 rtn blank +4791 1fe18480 or pdata ,0x80 ,temp +4792 202067f9 branch gpio_config_input_nowake + +shutter_load_bluetooth_config: +4793 204047ae call shutter_check_load_config_flag +4794 24740000 nrtn user +4795 20404797 call shutter_load_bluetooth_config_label +4796 202047b4 branch shutter_load_bluetooth_config_by_otp + +shutter_load_bluetooth_config_label: +4797 da200000 arg 0 ,rega +4798 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 +4799 204047a9 call shutter_load_bluetooth_config_read_gpio_input +479a 7d3a2200 nsetflag blank ,0 ,rega +479b 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 +479c 204047a9 call shutter_load_bluetooth_config_read_gpio_input +479d 7d3a2201 nsetflag blank ,1 ,rega +479e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 +479f 204047a9 call shutter_load_bluetooth_config_read_gpio_input +47a0 7d3a2202 nsetflag blank ,2 ,rega +47a1 1a227e00 copy rega ,pdata +47a2 6000c6a9 store 1 ,mem_shutter_config_label +47a3 6800c69e fetch 1 ,mem_shutter_config_size +47a4 9a2ffe00 imul32 rega ,pdata +47a5 6809469c fetcht 2 ,mem_shutter_config_otp_base_address +47a6 9840fe00 iadd temp ,pdata +47a7 600146aa store 2 ,mem_shutter_config_otp_addr +47a8 20600000 rtn + +shutter_load_bluetooth_config_read_gpio_input: +47a9 207a0000 rtn blank +47aa 1fe18480 or pdata ,0x80 ,temp +47ab 2040681d call gpio_get_bit +47ac 2420fff1 nbranch enable_blank ,true +47ad 20207fef branch disable_blank + +shutter_check_load_config_flag: +47ae 20407fe9 call disable_user +47af 6800c6a8 fetch 1 ,mem_shutter_config_user_size +47b0 247a0000 nrtn blank +47b1 6800c69b fetch 1 ,mem_shutter_config_enable +47b2 207a0000 rtn blank +47b3 20207fe7 branch enable_user + +shutter_load_bluetooth_config_by_otp: +47b4 2040666a call otp_enable_chgpump +47b5 680146aa fetch 2 ,mem_shutter_config_otp_addr +47b6 da200ac2 arg mem_shutter_config_data_temp ,rega +47b7 6808c69e fetcht 1 ,mem_shutter_config_size +47b8 204066b3 call otpd_read_data +47b9 2040666d call otp_disable_chgpump + +shutter_load_bluetooth_config_store_name: +47ba 68008ac2 fetch 1 ,mem_shutter_config_data_temp +47bb 1fe27200 copy pdata ,loopcnt +47bc 6000c3af store 1 ,mem_le_name_len +47bd 20407ef4 call memcpy_fast +47be 68008ac2 fetch 1 ,mem_shutter_config_data_temp +47bf 1fe27200 copy pdata ,loopcnt +47c0 6000c515 store 1 ,mem_local_name_length +47c1 20407ef4 call memcpy_fast +47c2 e8c08000 ifetch 1 ,contr +47c3 6000c6e6 store 1 ,mem_shutter_key_num +47c4 e8c08000 ifetch 1 ,contr +47c5 6000c6dd store 1 ,mem_shutter_hard_soft_switch_case +47c6 20600000 rtn + +shutter_load_bluetooth_config_by_eeprom: +47c7 6800c69a fetch 1 ,mem_shutter_bluetooth_type +47c8 c4008000 rtnbit0 classic_shutter +47c9 d8400003 arg 3 ,temp +47ca 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr +47cb 1fe22400 copy pdata ,regb +47cc da2046a6 arg mem_shutter_config_eeprom_start_flag ,rega +47cd 204065df call iicd_read_eep_data +47ce 680946a6 fetcht 2 ,mem_shutter_config_eeprom_start_flag +47cf 58001b3a setarg shutter_eeprom_config_crc +47d0 98467c00 isub temp ,null +47d1 24628000 nrtn zero +47d2 6800c6a8 fetch 1 ,mem_shutter_config_user_size +47d3 207a0000 rtn blank +47d4 1fe20400 copy pdata ,temp +47d5 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr +47d6 1fe0a403 add pdata ,3 ,regb +47d7 da200ac2 arg mem_shutter_config_data_temp ,rega +47d8 204065df call iicd_read_eep_data +47d9 202047e8 branch shutter_store_config + +shutter_load_bluetooth_config_by_user_config: +47da 680146a2 fetch 2 ,mem_shutter_config_user_otp_address +47db 207a0000 rtn blank +47dc 2040666a call otp_enable_chgpump +47dd d8400001 arg 1 ,temp +47de da2046a8 arg mem_shutter_config_user_size ,rega +47df 204066b3 call otpd_read_data +47e0 6800c6a8 fetch 1 ,mem_shutter_config_user_size +47e1 207a0000 rtn blank +47e2 680146a2 fetch 2 ,mem_shutter_config_user_otp_address +47e3 1fe0fe01 pincrease 1 +47e4 da200ac2 arg mem_shutter_config_data_temp ,rega +47e5 6808c6a8 fetcht 1 ,mem_shutter_config_user_size +47e6 204066b3 call otpd_read_data +47e7 2040666d call otp_disable_chgpump + +shutter_store_config: +47e8 204047ba call shutter_load_bluetooth_config_store_name + +shutter_load_bluetooth_config_custom: +47e9 e8c10000 ifetch 2 ,contr +47ea 207a0000 rtn blank +47eb 1fe20a00 copy pdata ,contw +47ec e8c88000 ifetcht 1 ,contr +47ed 18427200 copy temp ,loopcnt +47ee 20407f01 call memcpy +47ef 202047e9 branch shutter_load_bluetooth_config_custom + +shutter_random_mac_addr: +47f0 6800c69a fetch 1 ,mem_shutter_bluetooth_type +47f1 c4008000 rtnbit0 classic_shutter +47f2 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr +47f3 1fe22400 copy pdata ,regb +47f4 d8400004 arg 4 ,temp +47f5 da200ac2 arg mem_shutter_random_mac_data_temp ,rega +47f6 204065df call iicd_read_eep_data +47f7 68008ac2 fetch 1 ,mem_shutter_random_mac_data_temp +47f8 c080c7f9 bne 1 ,shutter_write_random_mac_addr_to_eeprom + +shutter_write_random_mac_addr_to_eeprom: +47f9 58000001 setarg 1 +47fa 60008ac2 store 1 ,mem_shutter_random_mac_data_temp +47fb 18007203 force 3 ,loopcnt +47fc 2040630d call generate_random_loop +47fd 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr +47fe 1fe22400 copy pdata ,regb +47ff d8400004 arg 4 ,temp +4800 da200ac2 arg mem_shutter_random_mac_data_temp ,rega +4801 20406606 call iicd_write_eep_data + +shutter_write_random_mac_addr: +4802 68018ac3 fetch 3 ,mem_shutter_random_mac_data_temp + 1 +4803 6001c0a0 store 3 ,mem_lap +4804 6001c4a0 store 3 ,mem_le_lap +4805 20600000 rtn + +shutter_soft_swtich_power_on: +4806 202046d9 branch shutter_start_reconnect + +shutter_soft_swtich_power_off: +4807 da200000 arg 0 ,rega +4808 da6048d4 arg mem_shutter_power_off_led_style ,regc +4809 20407d24 call ui_led_set_style_global +480a 204046f4 call shutter_disconnect_current_connection + +shutter_wait_power_off: +480b 6800c8eb fetch 1 ,mem_shutter_power_off_timeout +480c 6000c8ec store 1 ,mem_shutter_power_off_timer +480d 20600000 rtn + +ui_soft_swtich_init: +480e 58000000 setarg ss_state_power_up +480f 20404816 call ui_soft_swtich_init_power_on_time +4810 70467901 jam ui_button_state_up ,mem_ui_button_last_state +4811 20407cd3 call ui_button_init +4812 20407cdd call ui_button_polling +4813 68014682 fetch 2 ,mem_ui_state_map +4814 c3860000 rtnbit1 ui_state_btn_down +4815 2020340a branch app_enter_hibernate + +ui_soft_swtich_init_power_on_time: +4816 6809423f fetcht 2 ,mem_power_param_ptr +4817 e0408000 istore 1 ,temp +4818 e8a08000 ifetch 1 ,contw +4819 6000c685 store 1 ,mem_ui_button_timeout +481a 20600000 rtn + +ui_soft_switch_botton_up: +481b 6801423f fetch 2 ,mem_power_param_ptr +481c efe08000 ifetch 1 ,pdata +481d c1800000 rtnne ss_state_power_up +481e 2020340a branch app_enter_hibernate + +ui_soft_switch_botton_long_press: +481f 6809423f fetcht 2 ,mem_power_param_ptr +4820 e8408000 ifetch 1 ,temp +4821 c000c82a beq ss_state_power_on ,ui_soft_switch_power_off + +ui_soft_switch_power_on: +4822 58000001 setarg ss_state_power_on +4823 6809423f fetcht 2 ,mem_power_param_ptr +4824 e0408000 istore 1 ,temp +4825 18408c02 add temp ,ss_power_off_time ,contr +4826 e8c08000 ifetch 1 ,contr +4827 e0a08000 istore 1 ,mem_ui_button_timeout +4828 e8c10000 ifetch 2 ,contr +4829 20207f9c branch callback_func + +ui_soft_switch_power_off: +482a 58000002 setarg ss_state_power_off +482b 20404816 call ui_soft_swtich_init_power_on_time +482c 18408c05 add temp ,ss_power_off_cb ,contr +482d e8c10000 ifetch 2 ,contr +482e 203a340a branch app_enter_hibernate ,blank +482f 20207f9c branch callback_func + +shutter_byteswap: +4830 60030101 store 6 ,mem_tmp_buffer +4831 68008101 fetch 1 ,mem_tmp_buffer +4832 6000810c store 1 ,mem_tmp_buffer + 11 +4833 e8c08000 ifetch 1 ,contr +4834 6000810b store 1 ,mem_tmp_buffer + 10 +4835 e8c08000 ifetch 1 ,contr +4836 6000810a store 1 ,mem_tmp_buffer + 9 +4837 e8c08000 ifetch 1 ,contr +4838 60008109 store 1 ,mem_tmp_buffer + 8 +4839 e8c08000 ifetch 1 ,contr +483a 60008108 store 1 ,mem_tmp_buffer + 7 +483b e8c08000 ifetch 1 ,contr +483c 60008107 store 1 ,mem_tmp_buffer + 6 +483d 68030107 fetch 6 ,mem_tmp_buffer + 6 +483e 20600000 rtn + +shutter_random_addr_by_otp: +483f 204068a2 call load_adc_init +4840 6800c223 fetch 1 ,mem_1v_adc_io_data +4841 6000c4a0 store 1 ,mem_le_lap +4842 6800c225 fetch 1 ,mem_5v_adc_hvin_data +4843 e0a08000 istore 1 ,contw +4844 6800c227 fetch 1 ,mem_3v_adc_vinlpm_data +4845 e0a08000 istore 1 ,contw +4846 6801c4a0 fetch 3 ,mem_le_lap +4847 6001c0a0 store 3 ,mem_lap +4848 20600000 rtn + +sim_iic_read_eep_data: +4849 68014203 fetch 2 ,mem_eeprom_base +484a 9a40fe00 iadd regb ,pdata +484b 1ff0fe00 byteswap pdata ,pdata +484c 600101f7 store 2 ,mem_addr_mi +484d 18422400 copy temp ,regb +484e 2040489b call sim_iic_start +484f 580000a0 setarg 0xa0 +4850 2040488d call sim_iic_send_byte +4851 680081f7 fetch 1 ,mem_addr_mi +4852 2040488d call sim_iic_send_byte +4853 c5144856 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k +4854 680081f8 fetch 1 ,mem_addr_mi + 1 +4855 2040488d call sim_iic_send_byte + +sim_iic_read_eep_data_2k: +4856 204048a1 call sim_iic_stop +4857 2040489b call sim_iic_start +4858 580000a1 setarg 0xa1 +4859 2040488d call sim_iic_send_byte + +sim_iic_read_eep_data_loop: +485a 2040487f call sim_iic_read_byte +485b e2208000 istore 1 ,rega +485c 1a20a201 increase 1 ,rega +485d 1a40a5ff increase -1 ,regb +485e 2422c85a nbranch sim_iic_read_eep_data_loop ,zero +485f 202048a1 branch sim_iic_stop + +sim_iic_write_eep_data: +4860 1a50fe00 byteswap regb ,pdata +4861 600101f7 store 2 ,mem_addr_mi +4862 18422400 copy temp ,regb +4863 2040489b call sim_iic_start +4864 580000a0 setarg 0xa0 +4865 2040488d call sim_iic_send_byte +4866 680081f7 fetch 1 ,mem_addr_mi +4867 2040488d call sim_iic_send_byte +4868 c514486b bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop +4869 680081f8 fetch 1 ,mem_addr_mi + 1 +486a 2040488d call sim_iic_send_byte + +sim_iic_write_eep_data_loop: +486b ea208000 ifetch 1 ,rega +486c 2040488d call sim_iic_send_byte +486d 1a20a201 increase 1 ,rega +486e 1a40a5ff increase -1 ,regb +486f 2422c86b nbranch sim_iic_write_eep_data_loop ,zero +4870 202048a1 branch sim_iic_stop + +sim_iic_wait_ack: +4871 df20000a arg 10 ,loopcnt +4872 204048be call sim_iic_release_sda +4873 204048a6 call sim_iic_scl_output_high +4874 204048d2 call sim_iic_delay + +sim_iic_wait_ack_loop: +4875 204048c7 call sim_iic_read_sda_level +4876 203a48a9 branch sim_iic_scl_output_low ,blank +4877 c2004875 loop sim_iic_wait_ack_loop +4878 202048a9 branch sim_iic_scl_output_low + +sim_iic_ack_slave: +4879 204048a9 call sim_iic_scl_output_low +487a 204048af call sim_iic_sda_output_low +487b 204048d2 call sim_iic_delay +487c 204048a6 call sim_iic_scl_output_high +487d 204048d2 call sim_iic_delay +487e 202048a9 branch sim_iic_scl_output_low + +sim_iic_read_byte: +487f df200008 arg 8 ,loopcnt +4880 da600000 arg 0 ,regc +4881 204048be call sim_iic_release_sda + +sim_iic_read_byte_loop: +4882 204048a6 call sim_iic_scl_output_high +4883 204048d2 call sim_iic_delay +4884 1a63a600 lshift regc ,regc +4885 204048c7 call sim_iic_read_sda_level +4886 9a60a600 iadd regc ,regc +4887 204048d2 call sim_iic_delay +4888 204048a9 call sim_iic_scl_output_low +4889 c2004882 loop sim_iic_read_byte_loop +488a 20404879 call sim_iic_ack_slave +488b 1a627e00 copy regc ,pdata +488c 20600000 rtn + +sim_iic_send_byte: +488d df200008 arg 8 ,loopcnt +488e 1fe22600 copy pdata ,regc +488f 204048a9 call sim_iic_scl_output_low + +sim_iic_send_byte_loop: +4890 2a6ffe07 isolate1 7 ,regc +4891 2040c8ac call sim_iic_sda_output_high ,true +4892 2440c8af ncall sim_iic_sda_output_low ,true +4893 1a63a600 lshift regc ,regc +4894 204048d2 call sim_iic_delay +4895 204048a6 call sim_iic_scl_output_high +4896 204048d2 call sim_iic_delay +4897 204048a9 call sim_iic_scl_output_low +4898 204048d2 call sim_iic_delay +4899 c2004890 loop sim_iic_send_byte_loop +489a 20204871 branch sim_iic_wait_ack + +sim_iic_start: +489b 204048ac call sim_iic_sda_output_high +489c 204048a6 call sim_iic_scl_output_high +489d 204048d2 call sim_iic_delay +489e 204048af call sim_iic_sda_output_low +489f 204048d2 call sim_iic_delay +48a0 202048a9 branch sim_iic_scl_output_low + +sim_iic_stop: +48a1 204048af call sim_iic_sda_output_low +48a2 204048a6 call sim_iic_scl_output_high +48a3 204048d2 call sim_iic_delay +48a4 204048ac call sim_iic_sda_output_high +48a5 202048d2 branch sim_iic_delay + +sim_iic_scl_output_high: +48a6 78347c00 enable user +48a7 6800cffe fetch 1 ,sim_iic_scl_gpio_num +48a8 202048b2 branch sim_iic_config_gpio + +sim_iic_scl_output_low: +48a9 78547c00 disable user +48aa 6800cffe fetch 1 ,sim_iic_scl_gpio_num +48ab 202048b2 branch sim_iic_config_gpio + +sim_iic_sda_output_high: +48ac 78347c00 enable user +48ad 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48ae 202048b2 branch sim_iic_config_gpio + +sim_iic_sda_output_low: +48af 78547c00 disable user +48b0 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48b1 202048b2 branch sim_iic_config_gpio + +sim_iic_config_gpio: +48b2 1fe10e07 and pdata ,0x07 ,queue +48b3 1fe97e00 rshift3 pdata ,pdata +48b4 d8408070 arg core_gpio_oe0 ,temp +48b5 98408400 iadd temp ,temp +48b6 e8408000 ifetch 1 ,temp +48b7 f9207e00 qset1 pdata +48b8 e0408000 istore 1 ,temp +48b9 18408404 increase 4 ,temp +48ba e8408000 ifetch 1 ,temp +48bb f9347e00 qsetflag user ,pdata +48bc e0408000 istore 1 ,temp +48bd 20600000 rtn + +sim_iic_release_sda: +48be 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48bf 1fe10e07 and pdata ,0x07 ,queue +48c0 1fe97e00 rshift3 pdata ,pdata +48c1 d8408070 arg core_gpio_oe0 ,temp +48c2 98408400 iadd temp ,temp +48c3 e8408000 ifetch 1 ,temp +48c4 f93ffe00 qset0 pdata +48c5 e0408000 istore 1 ,temp +48c6 20600000 rtn + +sim_iic_read_sda_level: +48c7 20000004 nop 4 +48c8 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48c9 1fe10e07 and pdata ,0x07 ,queue +48ca 1fe97e00 rshift3 pdata ,pdata +48cb d840811c arg core_gpio_in ,temp +48cc 98408400 iadd temp ,temp +48cd 58000000 setarg 0 +48ce e8488000 ifetcht 1 ,temp +48cf a84fffff qisolate1 temp +48d0 7920fe00 setflag true ,0 ,pdata +48d1 20600000 rtn + +sim_iic_delay: +48d2 20600000 rtn + +usb_isr: +48d3 44fb401e bpatch patch1e_6 ,mem_patch1e +48d4 68108a26 hfetch 1 ,core_usb_status +48d5 2feffe07 isolate1 7 ,pdata +48d6 2040c8ea call usb_init ,true +48d7 2040492e call usb_nak_state_judge +48d8 68108a26 hfetch 1 ,core_usb_status +48d9 60008b22 store 1 ,mem_usb_status +48da 68108a27 hfetch 1 ,core_usb_fifo_empty +48db 60008b23 store 1 ,mem_usb_fifo_empty +48dc 60108a27 hstore 1 ,core_usb_fifo_empty +48dd 1fe47e00 pinvert +48de 68088d37 fetcht 1 ,mem_usb_tx_wait +48df 98417e00 iand temp ,pdata +48e0 60008d37 store 1 ,mem_usb_tx_wait +48e1 708a26e0 hjam 0xe0 ,core_usb_status +48e2 68008b23 fetch 1 ,mem_usb_fifo_empty +48e3 2fe00201 compare 0x1 ,pdata ,0x1 +48e4 2040c941 call usb0_fifo_empty ,true +48e5 68008b22 fetch 1 ,mem_usb_status +48e6 2fe00201 compare 0x1 ,pdata ,0x1 +48e7 2040c94a call usb_status1 ,true +48e8 20404b61 call usb_tx +48e9 20204903 branch usb_nak_state + +usb_init: +48ea 44fbc01e bpatch patch1e_7 ,mem_patch1e +48eb 20404919 call usb_init_param +48ec 708a0000 hjam 0x00 ,core_usb_config +48ed 20002710 nop 10000 +48ee 708a10c0 hjam 0xc0 ,core_usb_trig +48ef 68110050 hfetch 2 ,core_clkoff +48f0 793ffe0a set0 clock_off_usb ,pdata +48f1 60110050 hstore 2 ,core_clkoff +48f2 708a003c hjam 0x3c ,core_usb_config +48f3 708a26ff hjam 0xff ,core_usb_status +48f4 708a27ff hjam 0xff ,core_usb_fifo_empty +48f5 708a0400 hjam 0 ,core_usb_addr +48f6 700c6b02 jam dev_default ,mem_usb0_state +48f7 58000d9d setarg mem_usb_clear_mem_end +48f8 d8a00c6e arg mem_usb_clear_mem_start ,contw +48f9 98a67200 isub contw ,loopcnt +48fa 20207ed4 branch clear_mem + +usb_offline_check_init: +48fb 68088c6c fetcht 1 ,mem_usb_offline_check_gpio +48fc 202067fb branch gpio_config_input + +usb_offline_state: +48fd 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag +48fe 207a0000 rtn blank +48ff 68088c6c fetcht 1 ,mem_usb_offline_check_gpio +4900 2040681d call gpio_get_bit +4901 2020c8ea branch usb_init ,true +4902 20600000 rtn + +usb_nak_state: +4903 d8e00000 arg timer_nak ,queue +4904 20407f16 call timer_check +4905 247a0000 nrtn blank +4906 68008d46 fetch 1 ,mem_usb_wakestate_onetime_flag +4907 247a0000 nrtn blank +4908 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag +4909 245a4bb7 ncall usb_mac_wakeup_judge ,blank +490a 20600000 rtn + +usb_mem_devicedesc_init: +490b d8a00b68 arg mem_devicedesc ,contw +490c 38011212 setsect 0 ,0x11212 +490d 38048000 setsect 1 ,0x8000 +490e 38080000 setsect 2 ,0x0 +490f 380d0000 setsect 3 ,0x10000 +4910 e0a48000 istore 9 ,contw +4911 38022412 setsect 0 ,0x22412 +4912 38048604 setsect 1 ,0x8604 +4913 38081000 setsect 2 ,0x1000 +4914 380c0008 setsect 3 ,0x8 +4915 e0a48000 istore 9 ,contw +4916 38000001 setsect 0 ,0x1 +4917 e0a08000 istore 1 ,contw +4918 20600000 rtn + +usb_init_param: +4919 700c6b02 jam 2 ,mem_usb0_state +491a 58000000 setarg 0x0 +491b 60008b67 store 1 ,mem_remain +491c 60010c65 store 2 ,mem_usb_zero_packet +491d 1fe0fe01 pincrease 1 +491e 60010c67 store 2 ,mem_usb_ones_packet +491f 1fe0fe01 pincrease 1 +4920 60010c69 store 2 ,mem_usb_two_packet +4921 58008ffa setarg hid_kbdata_addr +4922 60010b7c store 2 ,mem_hidreportdesc_kb +4923 5800903a setarg hid_msdata_addr +4924 60010b7e store 2 ,mem_hidreportdesc_m +4925 d8a00b80 arg mem_confdesc ,contw +4926 d8c090fe arg hid_confdata_addr ,contr +4927 20407eb3 call memcpy64 +4928 68008c6d fetch 1 ,mem_usb_tx_interval +4929 245a492b ncall usb_tx_interval_config ,blank +492a 2020490b branch usb_mem_devicedesc_init + +usb_tx_interval_config: +492b 60008ba2 store 1 ,mem_confdesc + 34 +492c 60008bbb store 1 ,mem_confdesc + 59 +492d 20600000 rtn + +usb_nak_state_judge: +492e 68108a26 hfetch 1 ,core_usb_status +492f c2834931 bbit1 usb_status_nak ,usb_nak_state_timer_init +4930 20600000 rtn + +usb_nak_state_timer_init: +4931 20404936 call usb0_attached_state_judge +4932 20407f15 call timer_reinit +4933 58000280 setarg timer_nak_delay +4934 d8e00000 arg timer_nak ,queue +4935 20207f08 branch timer_init + +usb0_attached_state_judge: +4936 68008d36 fetch 1 ,mem_usb_state +4937 c081493b bne usb_connected ,usb_clear_halt_dispose +4938 700d4600 jam 0 ,mem_usb_wakestate_onetime_flag +4939 700d4700 jam 0 ,mem_usb_mac_wakeup_trig +493a 20600000 rtn + +usb_clear_halt_dispose: +493b 68008d53 fetch 1 ,mem_usb_clear_halt +493c 207a0000 rtn blank +493d 700d5300 jam 0 ,mem_usb_clear_halt +493e 700d3602 jam usb_connected ,mem_usb_state +493f 700d4501 jam 1 ,mem_usb_device_enumeration_endflag +4940 20600000 rtn + +usb0_fifo_empty: +4941 708a2701 hjam 0x1 ,core_usb_fifo_empty +4942 20204b37 branch usb0_tx + +usb_rx_no_data: +4943 68008b22 fetch 1 ,mem_usb_status +4944 c2824955 bbit1 usb_status_setup ,usb_class_type +4945 20600000 rtn + +usb_rx_read: +4946 68108a18 hfetch 1 ,core_usb_ep +4947 e0a08000 istore 1 ,contw +4948 c2004946 loop usb_rx_read +4949 20600000 rtn + +usb_status1: +494a 44fc401f bpatch patch1f_0 ,mem_patch1f +494b 708a2611 hjam 0x11 ,core_usb_status +494c 68108a20 hfetch 1 ,core_usb_ep_len +494d 60008b24 store 1 ,mem_usb_read_len +494e 1fe27200 copy pdata ,loopcnt +494f 203a4943 branch usb_rx_no_data ,blank +4950 d8a00c6e arg mem_usb_setup ,contw +4951 20404946 call usb_rx_read +4952 68008b24 fetch 1 ,mem_usb_read_len +4953 1fe67c07 sub pdata ,7 ,null +4954 20610000 rtn positive + +usb_class_type: +4955 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4956 1fe17e80 and_into 0x80 ,pdata +4957 c040495a beq in_device ,usb_in_device +4958 c0004962 beq out_device ,usb_out_device +4959 20202a8c branch assert + +usb_in_device: +495a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +495b 1ff1fe00 rshift4 pdata ,pdata +495c 1fe37e00 rshift pdata ,pdata +495d 1fe17e03 and_into 0x03 ,pdata +495e c000496a beq standard_req ,usb_in_standard_req +495f c000c970 beq class_req ,usb_in_class_req +4960 c0014975 beq manufacturer_req ,usb_in_manufacturer_req +4961 20202a8c branch assert + +usb_out_device: +4962 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4963 1ff1fe00 rshift4 pdata ,pdata +4964 1fe37e00 rshift pdata ,pdata +4965 1fe17e03 and_into 0x03 ,pdata +4966 c0004976 beq standard_req ,usb_out_standard_req +4967 c000c97e beq class_req ,usb_out_class_req +4968 c0014983 beq manufacturer_req ,usb_out_manufacturer_req +4969 20202a8c branch assert + +usb_in_standard_req: +496a 68008c6f fetch 1 ,mem_usb_setup_brequest +496b c004498a beq get_configuration ,usb0_request_get_configuration +496c c00349a0 beq get_descriptor ,usb0_request_get_descriptor +496d c00549ea beq get_interface ,usb0_request_get_interface +496e c00049fc beq get_status ,usb0_request_get_status +496f 20204984 branch usb0_force_stall + +usb_in_class_req: +4970 68008c6f fetch 1 ,mem_usb_setup_brequest +4971 c0014a2f beq get_idle ,usb_get_idle +4972 c000ca33 beq get_report ,usb_get_report +4973 c001ca45 beq get_protocol ,usb_get_protocol_req +4974 20204984 branch usb0_force_stall + +usb_in_manufacturer_req: +4975 20204984 branch usb0_force_stall + +usb_out_standard_req: +4976 68008c6f fetch 1 ,mem_usb_setup_brequest +4977 c000ca4f beq clear_feature ,usb0_request_clear_feature +4978 c001ca79 beq set_feature ,usb0_request_set_feature +4979 c002caa3 beq set_address ,usb0_request_set_address +497a c004cabc beq set_configuration ,usb0_request_set_configuration +497b c005cad7 beq set_interface ,usb0_request_set_interface +497c c003c984 beq set_descriptor ,usb0_force_stall +497d 20204984 branch usb0_force_stall + +usb_out_class_req: +497e 68008c6f fetch 1 ,mem_usb_setup_brequest +497f c0054ae8 beq set_idle ,usb_set_idle +4980 c004caf9 beq set_report ,usb_set_report +4981 c005cb11 beq set_protocol ,usb_set_protocol_req +4982 20204984 branch usb0_force_stall + +usb_out_manufacturer_req: +4983 20204984 branch usb0_force_stall + +usb0_force_stall: +4984 68108a11 hfetch 1 ,core_usb_stall +4985 79207e00 set1 0 ,pdata +4986 60108a11 hstore 1 ,core_usb_stall +4987 20204988 branch usb0_reply_zerolen + +usb0_reply_zerolen: +4988 708a1240 hjam 0x40 ,core_usb_clear +4989 20600000 rtn + +usb0_request_get_configuration: +498a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +498b c0c04984 bne in_device ,usb0_force_stall +498c 68008c72 fetch 1 ,mem_usb_setup_windex +498d c0804984 bne 0 ,usb0_force_stall +498e 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +498f c0804984 bne 0 ,usb0_force_stall +4990 68008c74 fetch 1 ,mem_usb_setup_blength +4991 c080c984 bne 1 ,usb0_force_stall +4992 68008c75 fetch 1 ,mem_usb_setup_blengthh +4993 c0804984 bne 0 ,usb0_force_stall +4994 68008c70 fetch 1 ,mem_usb_setup_bvalue +4995 c0804984 bne 0 ,usb0_force_stall +4996 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 +4997 c0804984 bne 0 ,usb0_force_stall +4998 68008c6b fetch 1 ,mem_usb0_state +4999 c002499c beq dev_configured ,usb0_request_get_cfg_dev_cfg +499a c001c99e beq dev_address ,usb0_request_get_cfg_dev_addr +499b 20204984 branch usb0_force_stall + +usb0_request_get_cfg_dev_cfg: +499c da400001 arg 1 ,regb +499d 20204a14 branch usb_send_ones_packet + +usb0_request_get_cfg_dev_addr: +499e da400001 arg 1 ,regb +499f 20204a12 branch usb_send_zero_packet + +usb0_request_get_descriptor: +49a0 44fcc01f bpatch patch1f_1 ,mem_patch1f +49a1 793f8023 set0 mark_isstr ,mark +49a2 68008c71 fetch 1 ,mem_usb_setup_bvalueh +49a3 c000c9b6 beq dsc_device ,dsc_device_info +49a4 c00149cf beq dsc_config ,dsc_config_info +49a5 c001c9d2 beq dsc_string ,dsc_string_info +49a6 c010c9a9 beq dsc_hid ,dsc_hid_info +49a7 c01149e0 beq dsc_hid_report ,dsc_hid_report_info +49a8 20204984 branch usb0_force_stall + +dsc_hid_info: +49a9 700d4b00 jam 0 ,mem_usb_get_protocol_flag +49aa 68008c72 fetch 1 ,mem_usb_setup_windex +49ab c00049ae beq 0 ,dsc_hid_info_interface0 +49ac c000c9b2 beq 1 ,dsc_hid_info_interface1 +49ad 20204984 branch usb0_force_stall + +dsc_hid_info_interface0: +49ae da200b93 arg mem_confdesc + 19 ,rega +49af ea208000 ifetch 1 ,rega +49b0 98002400 iforce regb +49b1 20204b21 branch usb0_respond + +dsc_hid_info_interface1: +49b2 da200bac arg mem_confdesc + 44 ,rega +49b3 ea208000 ifetch 1 ,rega +49b4 98002400 iforce regb +49b5 20204b21 branch usb0_respond + +dsc_device_info: +49b6 68008d48 fetch 1 ,mem_usb_set_high_addr_flag +49b7 245a49c7 ncall usb_set_high_addr ,blank +49b8 58000b68 setarg mem_devicedesc +49b9 68088b68 fetcht 1 ,mem_devicedesc + +dsc_info_set_data_len: +49ba 60010d3f store 2 ,mem_dsc_info_data_pointer +49bb 60088d41 storet 1 ,mem_dsc_info_len +49bc 68008c74 fetch 1 ,mem_usb_setup_blength +49bd 98467c00 isub temp ,null +49be 242149c5 nbranch dsc_info_set_current_data_len ,positive + +dsc_info_set_initial_data_len: +49bf 68008d41 fetch 1 ,mem_dsc_info_len + +dsc_info_set_data_size_completed: +49c0 98002400 iforce regb +49c1 68010d3f fetch 2 ,mem_dsc_info_data_pointer +49c2 1fe0fe01 add pdata ,1 ,pdata +49c3 98002200 iforce rega +49c4 20204b21 branch usb0_respond + +dsc_info_set_current_data_len: +49c5 68008c74 fetch 1 ,mem_usb_setup_blength +49c6 202049c0 branch dsc_info_set_data_size_completed + +usb_set_high_addr: +49c7 68108a04 hfetch 1 ,core_usb_addr +49c8 245a49cb ncall usb0_set_addr ,blank +49c9 700d4800 jam 0 ,mem_usb_set_high_addr_flag +49ca 20600000 rtn + +usb0_set_addr: +49cb 68108a04 hfetch 1 ,core_usb_addr +49cc 79207e07 set1 7 ,pdata +49cd 60108a04 hstore 1 ,core_usb_addr +49ce 20600000 rtn + +dsc_config_info: +49cf 58000b80 setarg mem_confdesc +49d0 68088b80 fetcht 1 ,mem_confdesc +49d1 202049ba branch dsc_info_set_data_len + +dsc_string_info: +49d2 68008c70 fetch 1 ,mem_usb_setup_bvalue +49d3 1fe67c03 sub pdata ,3 ,null +49d4 24214984 nbranch usb0_force_stall ,positive +49d5 68008c70 fetch 1 ,mem_usb_setup_bvalue +49d6 da200be4 arg mem_string0 ,rega +49d7 c0004b1e beq 0 ,usb0_respond_length +49d8 79200023 set1 mark_isstr ,mark +49d9 da200be9 arg mem_string1 ,rega +49da c000cb1e beq 1 ,usb0_respond_length +49db da200c07 arg mem_string2 ,rega +49dc c0014b1e beq 2 ,usb0_respond_length +49dd da200c47 arg mem_string3 ,rega +49de c001cb1e beq 3 ,usb0_respond_length +49df 20600000 rtn + +dsc_hid_report_info: +49e0 68010c72 fetch 2 ,mem_usb_setup_windex +49e1 c000c9e5 beq 1 ,dsc_hid_report_info0 +49e2 68010b7c fetch 2 ,mem_hidreportdesc_kb +49e3 1fe22200 copy pdata ,rega +49e4 20204b1e branch usb0_respond_length + +dsc_hid_report_info0: +49e5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag +49e6 700d3601 jam usb_got_report_req ,mem_usb_state +49e7 68010b7e fetch 2 ,mem_hidreportdesc_m +49e8 1fe22200 copy pdata ,rega +49e9 20204b1e branch usb0_respond_length + +usb0_request_get_interface: +49ea 68008c6b fetch 1 ,mem_usb0_state +49eb c0824984 bne dev_configured ,usb0_force_stall +49ec 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +49ed c0c0c984 bne in_interface ,usb0_force_stall +49ee 68008c70 fetch 1 ,mem_usb_setup_bvalue +49ef c0804984 bne 0 ,usb0_force_stall +49f0 68008c71 fetch 1 ,mem_usb_setup_bvalueh +49f1 c0804984 bne 0 ,usb0_force_stall +49f2 68008c74 fetch 1 ,mem_usb_setup_blength +49f3 c080c984 bne 1 ,usb0_force_stall +49f4 68008c75 fetch 1 ,mem_usb_setup_blengthh +49f5 c0804984 bne 0 ,usb0_force_stall +49f6 68008c72 fetch 1 ,mem_usb_setup_windex +49f7 c0804984 bne 0 ,usb0_force_stall +49f8 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +49f9 c0804984 bne 0 ,usb0_force_stall +49fa da400001 arg 1 ,regb +49fb 20204a12 branch usb_send_zero_packet + +usb0_request_get_status: +49fc 68008c6b fetch 1 ,mem_usb0_state +49fd c0014984 beq dev_default ,usb0_force_stall +49fe 68008c70 fetch 1 ,mem_usb_setup_bvalue +49ff c0804984 bne 0 ,usb0_force_stall +4a00 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4a01 c0804984 bne 0 ,usb0_force_stall +4a02 68008c74 fetch 1 ,mem_usb_setup_blength +4a03 c0814984 bne 2 ,usb0_force_stall +4a04 68008c75 fetch 1 ,mem_usb_setup_blengthh +4a05 c0804984 bne 0 ,usb0_force_stall +4a06 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4a07 c0804984 bne 0 ,usb0_force_stall +4a08 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4a09 c0404a0d beq in_device ,usb0_get_status_in_device +4a0a c040ca18 beq in_interface ,usb0_get_status_in_interface +4a0b c0414a1c beq in_endpoint ,usb0_get_status_in_endpoint +4a0c 20204984 branch usb0_force_stall + +usb0_get_status_in_device: +4a0d 68008c72 fetch 1 ,mem_usb_setup_windex +4a0e c0804984 bne 0 ,usb0_force_stall +4a0f da400002 arg 2 ,regb +4a10 68008d39 fetch 1 ,mem_usb_remote_wakeup +4a11 c000ca16 beq 0x01 ,usb_send_two_packet + +usb_send_zero_packet: +4a12 da200c65 arg mem_usb_zero_packet ,rega +4a13 20204b21 branch usb0_respond + +usb_send_ones_packet: +4a14 da200c67 arg mem_usb_ones_packet ,rega +4a15 20204b21 branch usb0_respond + +usb_send_two_packet: +4a16 da200c69 arg mem_usb_two_packet ,rega +4a17 20204b21 branch usb0_respond + +usb0_get_status_in_interface: +4a18 68008c6b fetch 1 ,mem_usb0_state +4a19 c0824984 bne dev_configured ,usb0_force_stall +4a1a da400002 arg 2 ,regb +4a1b 20204a12 branch usb_send_zero_packet + +usb0_get_status_in_endpoint: +4a1c 68008c6b fetch 1 ,mem_usb0_state +4a1d c0824984 bne dev_configured ,usb0_force_stall +4a1e 68008c72 fetch 1 ,mem_usb_setup_windex +4a1f c040ca29 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +4a20 c0414a2b beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +4a21 c041ca2d beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +4a22 1fe17e7f and_into 0x7f ,pdata +4a23 c0004a25 beq 0x00 ,usb0_get_status_in_ep_in_ep0 +4a24 20204984 branch usb0_force_stall + +usb0_get_status_in_ep_in_ep0: +4a25 68008d3b fetch 1 ,mem_usb_ep0_stall_status + +usb0_get_status_in_ep_in_ack: +4a26 da400002 arg 2 ,regb +4a27 c000ca14 beq 1 ,usb_send_ones_packet +4a28 20204a12 branch usb_send_zero_packet + +usb0_get_status_in_ep_in_ep1: +4a29 68008d3c fetch 1 ,mem_usb_ep1_stall_status +4a2a 20204a26 branch usb0_get_status_in_ep_in_ack + +usb0_get_status_in_ep_in_ep2: +4a2b 68008d3d fetch 1 ,mem_usb_ep2_stall_status +4a2c 20204a26 branch usb0_get_status_in_ep_in_ack + +usb0_get_status_in_ep_in_ep3: +4a2d 68008d3e fetch 1 ,mem_usb_ep3_stall_status +4a2e 20204a26 branch usb0_get_status_in_ep_in_ack + +usb_get_idle: +4a2f 700d4c01 jam 1 ,mem_usb_idle_flag +4a30 da200d4d arg mem_usb_idle_rate ,rega +4a31 da400001 arg 1 ,regb +4a32 20204b21 branch usb0_respond + +usb_get_report: +4a33 68010c70 fetch 2 ,mem_usb_setup_bvalue +4a34 d84001ba arg pc_get_report ,temp +4a35 98467c00 isub temp ,null +4a36 2422c984 nbranch usb0_force_stall ,zero +4a37 793f8023 set0 mark_isstr ,mark + +usb_get_report_dispose: +4a38 68008d42 fetch 1 ,mem_usb0_data_ready_report +4a39 243a4a42 nbranch usb_get_report_data_success ,blank +4a3a 700cf600 jam pc_get_nondata ,mem_usb0_get_report_data + +usb_get_report_send_data: +4a3b 68008c74 fetch 1 ,mem_usb_setup_blength +4a3c 98002400 iforce regb +4a3d da200cf6 arg mem_usb0_get_report_data ,rega +4a3e 20404b21 call usb0_respond + +usb_get_report_data_release: +4a3f d8a00cf6 arg mem_usb0_get_report_data ,contw +4a40 df200008 arg 8 ,loopcnt +4a41 20207ec6 branch memset0 + +usb_get_report_data_success: +4a42 700d4200 jam 0 ,mem_usb0_data_ready_report +4a43 700cf601 jam pc_get_data ,mem_usb0_get_report_data +4a44 20204a3b branch usb_get_report_send_data + +usb_get_protocol_req: +4a45 68008c74 fetch 1 ,mem_usb_setup_blength +4a46 c080c984 bne 1 ,usb0_force_stall +4a47 700d4b01 jam 1 ,mem_usb_get_protocol_flag +4a48 da400001 arg 1 ,regb +4a49 68008d49 fetch 1 ,mem_usb_set_protocol_value +4a4a c0004a4d beq 0 ,usb_get_report_protocol +4a4b c000ca4e beq 1 ,usb_get_boot_protocol +4a4c 20204a12 branch usb_send_zero_packet + +usb_get_report_protocol: +4a4d 20204a14 branch usb_send_ones_packet + +usb_get_boot_protocol: +4a4e 20204a12 branch usb_send_zero_packet + +usb0_request_clear_feature: +4a4f 68008c6b fetch 1 ,mem_usb0_state +4a50 c0824984 bne dev_configured ,usb0_force_stall +4a51 68008c74 fetch 1 ,mem_usb_setup_blength +4a52 c0804984 bne 0 ,usb0_force_stall +4a53 68008c75 fetch 1 ,mem_usb_setup_blengthh +4a54 c0804984 bne 0 ,usb0_force_stall +4a55 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4a56 c0804984 bne 0 ,usb0_force_stall +4a57 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4a58 c0804984 bne 0 ,usb0_force_stall +4a59 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4a5a c0004a5e beq out_device ,usb0_request_clear_feature_out_device +4a5b c000ca66 beq out_interface ,usb0_request_clear_feature_out_interface +4a5c c0014a67 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +4a5d 20204984 branch usb0_force_stall + +usb0_request_clear_feature_out_device: +4a5e 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a5f c080c984 bne device_remote_wakeup ,usb0_force_stall +4a60 68108a00 hfetch 1 ,core_usb_config +4a61 793ffe07 set0 7 ,pdata +4a62 60108a00 hstore 1 ,core_usb_config +4a63 700d3900 jam 0 ,mem_usb_remote_wakeup +4a64 700d3a01 jam 1 ,mem_usb_clear_remote_wakeup +4a65 20204988 branch usb0_reply_zerolen + +usb0_request_clear_feature_out_interface: +4a66 20204984 branch usb0_force_stall + +usb0_request_clear_feature_out_endpoint: +4a67 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a68 c0804984 bne endpoint_halt ,usb0_force_stall +4a69 68008c72 fetch 1 ,mem_usb_setup_windex +4a6a c040ca72 beq in_ep1 ,usb0_force_stall_ep1_in_off +4a6b c0414a75 beq in_ep2 ,usb0_force_stall_ep2_in_off +4a6c c041ca77 beq in_ep3 ,usb0_force_stall_ep3_in_off +4a6d 1fe17e7f and_into 0x7f ,pdata +4a6e c0004a70 beq 0x00 ,usb0_force_stall_ep0_in_off +4a6f 20204984 branch usb0_force_stall + +usb0_force_stall_ep0_in_off: +4a70 700d3b00 jam 0 ,mem_usb_ep0_stall_status +4a71 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep1_in_off: +4a72 700d3c00 jam 0 ,mem_usb_ep1_stall_status + +usb0_force_stall_ep1_in_off_reply: +4a73 700d5301 jam 1 ,mem_usb_clear_halt +4a74 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep2_in_off: +4a75 700d3d00 jam 0 ,mem_usb_ep2_stall_status +4a76 20204a73 branch usb0_force_stall_ep1_in_off_reply + +usb0_force_stall_ep3_in_off: +4a77 700d3e00 jam 0 ,mem_usb_ep3_stall_status +4a78 20204a73 branch usb0_force_stall_ep1_in_off_reply + +usb0_request_set_feature: +4a79 68008c74 fetch 1 ,mem_usb_setup_blength +4a7a c0804984 bne 0 ,usb0_force_stall +4a7b 68008c75 fetch 1 ,mem_usb_setup_blengthh +4a7c c0804984 bne 0 ,usb0_force_stall +4a7d 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4a7e c0004a82 beq out_device ,usb0_request_set_feature_out_device +4a7f c000ca8f beq out_interface ,usb0_request_set_feature_out_interface +4a80 c0014a90 beq out_endpoint ,usb0_request_set_feature_out_endpoint +4a81 20204984 branch usb0_force_stall + +usb0_request_set_feature_out_device: +4a82 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a83 c080c984 bne device_remote_wakeup ,usb0_force_stall +4a84 68108a00 hfetch 1 ,core_usb_config +4a85 79207e07 set1 7 ,pdata +4a86 60108a00 hstore 1 ,core_usb_config +4a87 700d3901 jam 1 ,mem_usb_remote_wakeup +4a88 700d3603 jam usb_sleep ,mem_usb_state +4a89 700d4300 jam 0 ,mem_usb_tx_win_enable +4a8a 20404988 call usb0_reply_zerolen + +usb_wakeup_timer_reinit: +4a8b 20407f15 call timer_reinit +4a8c 58001388 setarg timer_wakeup_delay +4a8d d8e0000f arg timer_wakeup ,queue +4a8e 20207f08 branch timer_init + +usb0_request_set_feature_out_interface: +4a8f 20204984 branch usb0_force_stall + +usb0_request_set_feature_out_endpoint: +4a90 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a91 c0804984 bne endpoint_halt ,usb0_force_stall +4a92 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4a93 c0804984 bne 0 ,usb0_force_stall +4a94 68008c72 fetch 1 ,mem_usb_setup_windex +4a95 c040ca9d beq in_ep1 ,usb0_force_stall_ep1_in_on +4a96 c0414a9f beq in_ep2 ,usb0_force_stall_ep2_in_on +4a97 c041caa1 beq in_ep3 ,usb0_force_stall_ep3_in_on +4a98 1fe17e7f and_into 0x7f ,pdata +4a99 c0004a9b beq 0x00 ,usb0_force_stall_ep0_in_on +4a9a 20204984 branch usb0_force_stall + +usb0_force_stall_ep0_in_on: +4a9b 700d3b01 jam 1 ,mem_usb_ep0_stall_status +4a9c 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep1_in_on: +4a9d 700d3c01 jam 1 ,mem_usb_ep1_stall_status +4a9e 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep2_in_on: +4a9f 700d3d01 jam 1 ,mem_usb_ep2_stall_status +4aa0 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep3_in_on: +4aa1 700d3e01 jam 1 ,mem_usb_ep3_stall_status +4aa2 20204988 branch usb0_reply_zerolen + +usb0_request_set_address: +4aa3 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4aa4 c0804984 bne out_device ,usb0_force_stall +4aa5 68008c72 fetch 1 ,mem_usb_setup_windex +4aa6 c0804984 bne 0 ,usb0_force_stall +4aa7 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4aa8 c0804984 bne 0 ,usb0_force_stall +4aa9 68008c74 fetch 1 ,mem_usb_setup_blength +4aaa c0804984 bne 0 ,usb0_force_stall +4aab 68008c75 fetch 1 ,mem_usb_setup_blengthh +4aac c0804984 bne 0 ,usb0_force_stall +4aad 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4aae c0804984 bne 0 ,usb0_force_stall +4aaf 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ab0 1fe17e80 and_into 0x80 ,pdata +4ab1 c0804984 bne 0 ,usb0_force_stall +4ab2 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ab3 c0804aba bne 0 ,usb_usb0_state_set_dev_addr + +usb_usb0_state_set_dev_default: +4ab4 700c6b02 jam dev_default ,mem_usb0_state + +usb0_request_set_wait_address: +4ab5 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ab6 60108a04 hstore 1 ,core_usb_addr +4ab7 20404988 call usb0_reply_zerolen +4ab8 700d4801 jam 1 ,mem_usb_set_high_addr_flag +4ab9 20600000 rtn + +usb_usb0_state_set_dev_addr: +4aba 700c6b03 jam dev_address ,mem_usb0_state +4abb 20204ab5 branch usb0_request_set_wait_address + +usb0_request_set_configuration: +4abc 68008c6b fetch 1 ,mem_usb0_state +4abd c0014984 beq dev_default ,usb0_force_stall +4abe 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4abf c0804984 bne out_device ,usb0_force_stall +4ac0 68008c72 fetch 1 ,mem_usb_setup_windex +4ac1 c0804984 bne 0 ,usb0_force_stall +4ac2 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4ac3 c0804984 bne 0 ,usb0_force_stall +4ac4 68008c74 fetch 1 ,mem_usb_setup_blength +4ac5 c0804984 bne 0 ,usb0_force_stall +4ac6 68008c75 fetch 1 ,mem_usb_setup_blengthh +4ac7 c0804984 bne 0 ,usb0_force_stall +4ac8 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 +4ac9 c0804984 bne 0 ,usb0_force_stall +4aca 68008c70 fetch 1 ,mem_usb_setup_bvalue +4acb 1fe67c01 sub pdata ,usb_max_num_cfg ,null +4acc 24214984 nbranch usb0_force_stall ,positive +4acd 68008c6b fetch 1 ,mem_usb0_state +4ace c001cad1 beq dev_address ,usb0_request_set_cfg_addr_state +4acf c0024ad1 beq dev_configured ,usb0_request_set_cfg_cfg_state +4ad0 20204984 branch usb0_force_stall + +usb0_request_set_cfg_addr_state: + +usb0_request_set_cfg_cfg_state: +4ad1 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ad2 c0004ad5 beq 0 ,usb0_request_set_cfg_stay_addr_state +4ad3 700c6b04 jam dev_configured ,mem_usb0_state +4ad4 20204988 branch usb0_reply_zerolen + +usb0_request_set_cfg_stay_addr_state: +4ad5 700c6b03 jam dev_address ,mem_usb0_state +4ad6 20204988 branch usb0_reply_zerolen + +usb0_request_set_interface: +4ad7 68008c6b fetch 1 ,mem_usb0_state +4ad8 c0824984 bne dev_configured ,usb0_force_stall +4ad9 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4ada c080c984 bne out_interface ,usb0_force_stall +4adb 68008c70 fetch 1 ,mem_usb_setup_bvalue +4adc c0804984 bne 0 ,usb0_force_stall +4add 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4ade c0804984 bne 0 ,usb0_force_stall +4adf 68008c74 fetch 1 ,mem_usb_setup_blength +4ae0 c0804984 bne 0 ,usb0_force_stall +4ae1 68008c75 fetch 1 ,mem_usb_setup_blengthh +4ae2 c0804984 bne 0 ,usb0_force_stall +4ae3 68008c72 fetch 1 ,mem_usb_setup_windex +4ae4 c0804984 bne 0 ,usb0_force_stall +4ae5 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4ae6 c0804984 bne 0 ,usb0_force_stall +4ae7 20204988 branch usb0_reply_zerolen + +usb_set_idle: +4ae8 700d4c01 jam 1 ,mem_usb_idle_flag +4ae9 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4aea 60008d4d store 1 ,mem_usb_idle_rate +4aeb 68008c72 fetch 1 ,mem_usb_setup_windex +4aec 1fe67c01 sub pdata ,1 ,null +4aed 2042caf5 call usb_clear_remote_wakeup_set0 ,zero +4aee 68008d36 fetch 1 ,mem_usb_state +4aef c0824988 bne usb_resume ,usb0_reply_zerolen +4af0 700d3602 jam usb_connected ,mem_usb_state +4af1 20404988 call usb0_reply_zerolen +4af2 20007530 nop 30000 +4af3 20007530 nop 30000 +4af4 20600000 rtn + +usb_clear_remote_wakeup_set0: +4af5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag +4af6 700d3a00 jam 0 ,mem_usb_clear_remote_wakeup +4af7 700d3604 jam usb_resume ,mem_usb_state +4af8 20600000 rtn + +usb_set_report: +4af9 700d5001 jam 1 ,mem_usb0_get_set_report +4afa 20404b03 call usb_set_report_resume_judge +4afb 68010c70 fetch 2 ,mem_usb_setup_bvalue +4afc 60010d4e store 2 ,mem_usb_setup_bvalue_temp +4afd 68008c74 fetch 1 ,mem_usb_setup_blength +4afe 98007200 iforce loopcnt +4aff d8c00c76 arg mem_usb0_setup ,contr +4b00 d8a00cb6 arg mem_usb0_set_report_data ,contw +4b01 20407f01 call memcpy +4b02 20204988 branch usb0_reply_zerolen + +usb_set_report_resume_judge: +4b03 68010c70 fetch 2 ,mem_usb_setup_bvalue +4b04 d8400200 arg pc_set_report_bvalue ,temp +4b05 98467c00 isub temp ,null +4b06 24628000 nrtn zero +4b07 68010c72 fetch 2 ,mem_usb_setup_windex +4b08 d8400000 arg pc_set_report_windex ,temp +4b09 98467c00 isub temp ,null +4b0a 24628000 nrtn zero +4b0b 68010c74 fetch 2 ,mem_usb_setup_blength +4b0c d8400001 arg pc_set_report_blength ,temp +4b0d 98467c00 isub temp ,null +4b0e 24628000 nrtn zero +4b0f 700d4301 jam 1 ,mem_usb_tx_win_enable +4b10 20600000 rtn + +usb_set_protocol_req: +4b11 68008c74 fetch 1 ,mem_usb_setup_blength +4b12 c0804984 bne 0 ,usb0_force_stall +4b13 68008c70 fetch 1 ,mem_usb_setup_bvalue +4b14 c0004b17 beq boot_protocol ,usb_set_boot_protocol +4b15 c000cb1a beq report_protocol ,usb_set_report_protocol +4b16 20204984 branch usb0_force_stall + +usb_set_boot_protocol: +4b17 700d4a00 jam 0 ,mem_usb_set_protocol_status +4b18 700d4901 jam 1 ,mem_usb_set_protocol_value +4b19 20204988 branch usb0_reply_zerolen + +usb_set_report_protocol: +4b1a 700d4401 jam 1 ,mem_usb_tx_mac_enable +4b1b 700d4a01 jam 1 ,mem_usb_set_protocol_status +4b1c 700d4900 jam 0 ,mem_usb_set_protocol_value +4b1d 20204988 branch usb0_reply_zerolen + +usb0_respond_length: +4b1e ea208000 ifetch 1 ,rega +4b1f 98002400 iforce regb +4b20 1a20a201 increase 1 ,rega + +usb0_respond: +4b21 44fd401f bpatch patch1f_2 ,mem_patch1f +4b22 c591cb2c bmark0 mark_isstr ,usb0_respond0 +4b23 1a40fe01 add regb ,1 ,pdata +4b24 1fe3fe00 lshift pdata ,pdata +4b25 60108a18 hstore 1 ,core_usb_dfifo0 +4b26 708a1803 hjam 3 ,core_usb_dfifo0 +4b27 68008c74 fetch 1 ,mem_usb_setup_blength +4b28 1fe0fffe increase -2 ,pdata +4b29 1fe37e00 rshift pdata ,pdata +4b2a 60008c74 store 1 ,mem_usb_setup_blength +4b2b c0004b35 beq 0 ,usb_no_respond_data + +usb0_respond0: +4b2c 68010c74 fetch 2 ,mem_usb_setup_blength +4b2d 9a467c00 isub regb ,null +4b2e 20214b30 branch usb0_respond1 ,positive +4b2f 1fe22400 copy pdata ,regb + +usb0_respond1: +4b30 1a227e00 deposit rega +4b31 60010b65 store 2 ,mem_bufptr +4b32 1a427e00 deposit regb +4b33 60008b67 store 1 ,mem_remain +4b34 20204b37 branch usb0_tx + +usb_no_respond_data: +4b35 d8e00000 arg 0 ,queue +4b36 20204b57 branch usb_trig + +usb0_tx: +4b37 44fdc01f bpatch patch1f_3 ,mem_patch1f +4b38 68008b67 fetch 1 ,mem_remain +4b39 207a0000 rtn blank +4b3a 1fe27200 copy pdata ,loopcnt +4b3b 1fe67c40 sub pdata ,ep0_packet_size ,null +4b3c 20214b3e branch usb0_tx_info ,positive +4b3d df200040 arg ep0_packet_size ,loopcnt + +usb0_tx_info: +4b3e 68008b67 fetch 1 ,mem_remain +4b3f 9f267e00 isub loopcnt ,pdata +4b40 60008b67 store 1 ,mem_remain +4b41 68010b65 fetch 2 ,mem_bufptr +4b42 1fe20c00 copy pdata ,contr + +usb0_tx0: +4b43 e8c08000 ifetch 1 ,contr +4b44 60108a18 hstore 1 ,core_usb_dfifo0 +4b45 c591cb47 bmark0 mark_isstr ,usb0_tx1 +4b46 708a1800 hjam 0 ,core_usb_dfifo0 + +usb0_tx1: +4b47 c2004b43 loop usb0_tx0 +4b48 18c27e00 copy contr ,pdata +4b49 60010b65 store 2 ,mem_bufptr +4b4a d8e00000 arg 0 ,queue +4b4b 20404b57 call usb_trig +4b4c 68008b67 fetch 1 ,mem_remain +4b4d 247a0000 nrtn blank +4b4e 68008d36 fetch 1 ,mem_usb_state +4b4f c1808000 rtnne usb_got_report_req +4b50 700d3602 jam usb_connected ,mem_usb_state +4b51 20600000 rtn + +usb_tx_ep1: +4b52 da208a19 arg core_usb_dfifo1 ,rega +4b53 d8e00001 arg 1 ,queue + +usb_tx_loop: +4b54 e8c08000 ifetch 1 ,contr +4b55 e2208000 istore 1 ,rega +4b56 c2004b54 loop usb_tx_loop + +usb_trig: +4b57 58000000 setarg 0 +4b58 f9207e00 qset1 pdata +4b59 60108a10 hstore 1 ,core_usb_trig +4b5a 68088d37 fetcht 1 ,mem_usb_tx_wait +4b5b 9841fe00 ior temp ,pdata +4b5c 60008d37 store 1 ,mem_usb_tx_wait +4b5d 20600000 rtn + +usb_tx_ep2: +4b5e d8e00002 arg 2 ,queue +4b5f da208a1a arg core_usb_dfifo2 ,rega +4b60 20204b54 branch usb_tx_loop + +usb_tx: +4b61 44fe401f bpatch patch1f_4 ,mem_patch1f +4b62 68008d38 fetch 1 ,mem_usb_tx_enable +4b63 207a0000 rtn blank +4b64 68008d37 fetch 1 ,mem_usb_tx_wait +4b65 243a4bac nbranch usb_inwake_state_tx_dispose ,blank +4b66 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag +4b67 203a4b86 branch usb_tx_fifo_release ,blank +4b68 68008d36 fetch 1 ,mem_usb_state +4b69 c001cbbf beq usb_sleep ,usb_windows_wakeup +4b6a c0814b86 bne usb_connected ,usb_tx_fifo_release +4b6b 68008d3a fetch 1 ,mem_usb_clear_remote_wakeup +4b6c 243a4b86 nbranch usb_tx_fifo_release ,blank +4b6d 20404b6f call usb_tx_data_ep1 +4b6e 20204b7a branch usb_tx_data_ep2 + +usb_tx_data_ep1: +4b6f 68008d38 fetch 1 ,mem_usb_tx_enable +4b70 c4008000 rtnbit0 1 +4b71 68008d37 fetch 1 ,mem_usb_tx_wait +4b72 c3808000 rtnbit1 1 +4b73 68008d38 fetch 1 ,mem_usb_tx_enable +4b74 793ffe01 set0 1 ,pdata +4b75 60008d38 store 1 ,mem_usb_tx_enable +4b76 68008d51 fetch 1 ,mem_usb_ep1_data +4b77 207a0000 rtn blank +4b78 c0084ba8 beq usb_ep1_kb ,usb_tx_kb_normal_data +4b79 20202a8c branch assert + +usb_tx_data_ep2: +4b7a 68008d38 fetch 1 ,mem_usb_tx_enable +4b7b c4010000 rtnbit0 2 +4b7c 68008d37 fetch 1 ,mem_usb_tx_wait +4b7d c3810000 rtnbit1 2 +4b7e 68008d38 fetch 1 ,mem_usb_tx_enable +4b7f 793ffe02 set0 2 ,pdata +4b80 60008d38 store 1 ,mem_usb_tx_enable +4b81 68008d52 fetch 1 ,mem_usb_ep2_data +4b82 207a0000 rtn blank +4b83 c0104b89 beq usb_ep2_ms ,usb_tx_ms_data +4b84 c010cba4 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +4b85 20202a8c branch assert + +usb_tx_fifo_release: +4b86 d8a00d54 arg mem_usb_mouse_data ,contw +4b87 df200006 arg 6 ,loopcnt +4b88 20207ec6 branch memset0 + +usb_tx_ms_data: +4b89 68008d4c fetch 1 ,mem_usb_idle_flag +4b8a 68088d4b fetcht 1 ,mem_usb_get_protocol_flag +4b8b 98417e00 iand temp ,pdata +4b8c 203a4ba0 branch usb_tx_ms_data_normal_mode ,blank +4b8d 68088d4a fetcht 1 ,mem_usb_set_protocol_status +4b8e 9840fe00 iadd temp ,pdata +4b8f c000cb91 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +4b90 20204ba0 branch usb_tx_ms_data_normal_mode + +usb_tx_ms_data_mac_boot_mode: +4b91 700d5200 jam 0 ,mem_usb_ep2_data + +usb_tx_ms_data_mac_boot_regroup: +4b92 68008d55 fetch 1 ,mem_usb_mouse_data + 1 +4b93 c0014ba1 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +4b94 c001cba1 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +4b95 68008d55 fetch 1 ,mem_usb_mouse_data + 1 +4b96 60008d54 store 1 ,mem_usb_mouse_data +4b97 68008d56 fetch 1 ,mem_usb_mouse_data + 2 +4b98 e0a08000 istore 1 ,contw +4b99 68008d58 fetch 1 ,mem_usb_mouse_data + 4 +4b9a e0a08000 istore 1 ,contw +4b9b 68008d5a fetch 1 ,mem_usb_mouse_data + 6 +4b9c e0a08000 istore 1 ,contw +4b9d df200004 arg 4 ,loopcnt +4b9e d8c00d54 arg mem_usb_mouse_data ,contr +4b9f 20204b5e branch usb_tx_ep2 + +usb_tx_ms_data_normal_mode: +4ba0 700d5200 jam 0 ,mem_usb_ep2_data + +usb_tx_mac_boot_ms_regroup_r_or_lrkey: +4ba1 df200008 arg 8 ,loopcnt +4ba2 d8c00d54 arg mem_usb_mouse_data ,contr +4ba3 20204b5e branch usb_tx_ep2 + +usb_tx_kb_multikey_data: +4ba4 700d5200 jam 0 ,mem_usb_ep2_data +4ba5 df200003 arg 3 ,loopcnt +4ba6 d8c00d74 arg mem_usb_kb_multikey ,contr +4ba7 20204b5e branch usb_tx_ep2 + +usb_tx_kb_normal_data: +4ba8 700d5100 jam 0 ,mem_usb_ep1_data +4ba9 df200008 arg 8 ,loopcnt +4baa d8c00d64 arg mem_usb_kb_data ,contr +4bab 20204b52 branch usb_tx_ep1 + +usb_inwake_state_tx_dispose: +4bac 68008d36 fetch 1 ,mem_usb_state +4bad c001cbb0 beq usb_sleep ,usb_clear_tx_wait +4bae c0014bb2 beq usb_connected ,usb_mac_wakeup_trig +4baf 20600000 rtn + +usb_clear_tx_wait: +4bb0 700d3700 jam 0 ,mem_usb_tx_wait +4bb1 20600000 rtn + +usb_mac_wakeup_trig: +4bb2 68108a00 hfetch 1 ,core_usb_config +4bb3 79207e07 set1 7 ,pdata +4bb4 60108a00 hstore 1 ,core_usb_config +4bb5 700d4701 jam 1 ,mem_usb_mac_wakeup_trig +4bb6 20600000 rtn + +usb_mac_wakeup_judge: +4bb7 68008d36 fetch 1 ,mem_usb_state +4bb8 c1018000 rtneq usb_sleep +4bb9 c0014bbb beq usb_connected ,usb_mac_wakeup +4bba 20600000 rtn + +usb_mac_wakeup: +4bbb 68008d47 fetch 1 ,mem_usb_mac_wakeup_trig +4bbc 207a0000 rtn blank +4bbd 700d4601 jam 1 ,mem_usb_wakestate_onetime_flag +4bbe 20204bc2 branch usb_wakeup + +usb_windows_wakeup: +4bbf d8e0000f arg timer_wakeup ,queue +4bc0 20407f16 call timer_check +4bc1 247a0000 nrtn blank + +usb_wakeup: +4bc2 68108a00 hfetch 1 ,core_usb_config +4bc3 c4038000 rtnbit0 7 +4bc4 708a00fc hjam 0xfc ,core_usb_config +4bc5 20007530 nop 30000 +4bc6 708a003c hjam 0x3c ,core_usb_config +4bc7 20600000 rtn + +hci_rx_h4: +4bc8 44fec01f bpatch patch1f_5 ,mem_patch1f +4bc9 6800c1ce fetch 1 ,mem_hci_cmd +4bca 247a0000 nrtn blank + +hci_rx_h4_1: +4bcb 20404bce call hci_h4_parse_packet +4bcc 24544be6 ncall h4_rx_discard_packet ,user +4bcd 20600000 rtn + +hci_h4_parse_packet: +4bce 44ff401f bpatch patch1f_6 ,mem_patch1f +4bcf 18622200 copy contru ,rega +4bd0 d8400004 arg 4 ,temp +4bd1 e8608000 ifetch 1 ,contru +4bd2 c000cbd8 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len +4bd3 18408401 increase 1 ,temp +4bd4 c0014bd8 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len +4bd5 18627e00 copy contru ,pdata +4bd6 60110058 hstore 2 ,core_uart_rrptr +4bd7 20600000 rtn + +hci_h4_parse_packet_wait_len: +4bd8 68110112 hfetch 2 ,core_uart_rxitems +4bd9 98467c00 isub temp ,null +4bda 24214bd8 nbranch hci_h4_parse_packet_wait_len ,positive +4bdb 78547c00 disable user +4bdc 1a220600 copy rega ,contru +4bdd 20404bee call h4_get_rx_payload_len +4bde 98408400 iadd temp ,temp + +hci_h4_parse_packet_wait: +4bdf 68110112 hfetch 2 ,core_uart_rxitems +4be0 98467c00 isub temp ,null +4be1 24214bdf nbranch hci_h4_parse_packet_wait ,positive +4be2 1a220600 copy rega ,contru +4be3 e8608000 ifetch 1 ,contru +4be4 c000cc3f beq hci_h4_type_cmd ,process_hci_cmd +4be5 20202a8c branch assert + +h4_rx_discard_packet: +4be6 44ffc01f bpatch patch1f_7 ,mem_patch1f +4be7 68110058 hfetch 2 ,core_uart_rrptr +4be8 98000600 iforce contru +4be9 20404bee call h4_get_rx_payload_len +4bea 98608600 iadd contru ,contru +4beb 18627e00 deposit contru +4bec 60110058 hstore 2 ,core_uart_rrptr +4bed 20600000 rtn + +h4_get_rx_payload_len: +4bee e8608000 ifetch 1 ,contru +4bef 18608602 increase 2 ,contru +4bf0 c0014bf3 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl +4bf1 e8608000 ifetch 1 ,contru +4bf2 20600000 rtn + +h4_get_rx_payload_len_acl: +4bf3 e8610000 ifetch 2 ,contru +4bf4 20600000 rtn + +h4_get_tx_ptr: +4bf5 6811005e hfetch 2 ,core_uart_twptr +4bf6 194095fb increase -5 ,contwu +4bf7 99409400 iadd contwu ,contwu +4bf8 20600000 rtn + +h4_send_packet_event: +4bf9 d8400004 arg hci_h4_type_event ,temp +4bfa 20204bfc branch h4_send_packet + +h4_send_packet_acl: +4bfb d8400002 arg hci_h4_type_acl ,temp + +h4_send_packet: +4bfc 47004020 bpatchx patch20_0 ,mem_patch20 +4bfd 1f20f201 increase 1 ,loopcnt +4bfe 6811005e hfetch 2 ,core_uart_twptr +4bff 1fe21400 copy pdata ,contwu +4c00 1f227e00 copy loopcnt ,pdata +4c01 e1488000 istoret 1 ,contwu +4c02 1fe0ffff increase -1 ,pdata +4c03 99409400 iadd contwu ,contwu +4c04 19427e00 copy contwu ,pdata +4c05 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr +4c06 18427e00 copy temp ,pdata +4c07 c1010000 rtneq hci_h4_type_acl +4c08 68010258 fetch 2 ,mem_hci_acl_tx_trigger_wptr +4c09 6011005e hstore 2 ,core_uart_twptr +4c0a 20204c0b branch h4_send_acl_trigger_clear + +h4_send_acl_trigger_clear: +4c0b 58000000 setarg 0 +4c0c 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr +4c0d 20600000 rtn + +hci_init: +4c0e 20758000 rtn wake +4c0f 58004d28 setarg hci_idle_dispatch +4c10 600141f3 store 2 ,mem_cb_idle_process +4c11 580001a0 setarg uart_baud_115200 +4c12 60014243 store uart_baud_len ,mem_baud + +hci_lpm_init: +4c13 58001800 setarg mem_h5rx_buf +4c14 60110054 hstore 2 ,core_uart_rsaddr +4c15 58001bff setarg mem_h5rx_buf_end +4c16 60110056 hstore 2 ,core_uart_readdr +4c17 58001c00 setarg mem_h5tx_buf +4c18 6011005a hstore 2 ,core_uart_tsaddr +4c19 20404c28 call hci_sel_init + +hci_reinit: +4c1a 70806200 hjam 0x0 ,core_uart_ctrl +4c1b 58001c00 setarg mem_h5tx_buf +4c1c 6011005e hstore 2 ,core_uart_twptr +4c1d 60110060 hstore 2 ,core_uart_trptrp +4c1e 58001800 setarg mem_h5rx_buf +4c1f 60110058 hstore 2 ,core_uart_rrptr +4c20 60010244 store 2 ,mem_h5rx_rptr + +hci_init_common: +4c21 68110050 hfetch 2 ,core_clkoff +4c22 793ffe0f set0 clock_off_uart ,pdata +4c23 60110050 hstore 2 ,core_clkoff +4c24 204066ce call uart_set_baud_by_mem +4c25 70804301 hjam uartclk_dpll ,core_uart_clksel +4c26 70806281 hjam uart_ctrl_h4 ,core_uart_ctrl +4c27 20600000 rtn + +hci_sel_init: +4c28 58001fff setarg mem_h5tx_buf_end +4c29 6011005c hstore 2 ,core_uart_teaddr +4c2a 68108081 hfetch 1 ,core_gpio_sel1 +4c2b 1fe1fe07 or_into 0x07 ,pdata +4c2c 60108081 hstore 1 ,core_gpio_sel1 +4c2d 20600000 rtn + +hci_rx_packet: +4c2e 4700c020 bpatchx patch20_1 ,mem_patch20 +4c2f 6810810c hfetch 1 ,core_uart_status +4c30 98002400 iforce regb +4c31 c301cc37 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont +4c32 68110112 hfetch 2 ,core_uart_rxitems +4c33 98002600 iforce regc +4c34 d840044f arg 0x44f ,temp +4c35 98467c00 isub temp ,null +4c36 24628000 nrtn zero + +hci_rx_packet_cont: +4c37 68110058 hfetch 2 ,core_uart_rrptr +4c38 98000600 iforce contru +4c39 20204bc8 branch hci_rx_h4 + +uart_send_byte: +4c3a 6818810c hfetcht 1 ,core_uart_status +4c3b 284ffe06 isolate1 6 ,temp +4c3c 2020cc3a branch uart_send_byte ,true +4c3d 60108015 hstore 1 ,core_uart_txd +4c3e 20600000 rtn + +process_hci_cmd: +4c3f 47014020 bpatchx patch20_2 ,mem_patch20 +4c40 6800c1ce fetch 1 ,mem_hci_cmd +4c41 203a4c44 branch process_hci_cmd_cont ,blank +4c42 78347c00 enable user +4c43 20600000 rtn + +process_hci_cmd_cont: +4c44 e8610000 ifetch 2 ,contru +4c45 98006000 iforce alarm +4c46 98000e00 iforce queue +4c47 e8608000 ifetch 1 ,contru +4c48 98000400 iforce temp +4c49 1e0b7e00 rshift2 alarm ,pdata +4c4a 1fecfe00 rshift8 pdata ,pdata +4c4b c01fcc4d beq hci_ogf_vendor_specific ,phci_grp_vendor_specific +4c4c 20600000 rtn + +phci_grp_vendor_specific: +4c4d 4701c020 bpatchx patch20_3 ,mem_patch20 +4c4e 18e27e00 deposit queue +4c4f c0004cdc beq hci_vendor_cmd_reset ,hci_normal_reply +4c50 c000cc66 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +4c51 c0014c6b beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +4c52 c001cc7a beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +4c53 c0024cb3 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +4c54 c002ccdc beq hci_vendor_cmd_echo ,hci_normal_reply +4c55 c0034cc6 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr +4c56 c003cc5c beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm +4c57 c0084cc9 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +4c58 c008ccd1 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep +4c59 c0094ca5 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init +4c5a c009cc85 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec +4c5b 20204cdc branch hci_normal_reply + +phci_grp_vendor_enter_lpm: +4c5c 20404cdc call hci_normal_reply +4c5d 20407f9e call wait_uarttx +4c5e 2040688c call gpio_pu_uart_tx + +hci_enter_lpm: +4c5f 204033d2 call app_put_lpm_wake_lock +4c60 204033d9 call app_l2cap_flow_control_enable +4c61 2020688f branch gpio_rx_config_input_with_pu + +hci_exit_lpm: +4c62 70424500 jam hci_rx_ready ,mem_hci_lt_rx_state +4c63 204033d0 call app_get_lpm_wake_lock +4c64 20404c13 call hci_lpm_init +4c65 202033db branch app_l2cap_flow_control_disable + +phci_grp_vendor_chipid: +4c66 20404cf2 call hci_get_cmd_complete_ptr +4c67 68110000 hfetch 2 ,core_chipid +4c68 e1410000 istore 2 ,contwu +4c69 18007206 force 6 ,loopcnt +4c6a 20204cdd branch hci_command_complete + +phci_grp_vendor_baud: +4c6b e8610000 ifetch 2 ,contru +4c6c 60014243 store 2 ,mem_baud +4c6d 60110052 hstore 2 ,core_uart_baud +4c6e 20600000 rtn + +phci_grp_vendor_patch_common: +4c6f e8608000 ifetch 1 ,contru +4c70 1fe20400 copy pdata ,temp +4c71 60108024 hstore 1 ,core_ucode_low +4c72 e8608000 ifetch 1 ,contru +4c73 98408400 iadd temp ,temp +4c74 79207e07 set1 7 ,pdata +4c75 60108023 hstore 1 ,core_ucode_ctrl +4c76 e8608000 ifetch 1 ,contru +4c77 98408400 iadd temp ,temp +4c78 1fe27200 copy pdata ,loopcnt +4c79 20600000 rtn + +phci_grp_vendor_patch: +4c7a c515ccc4 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad +4c7b 20404c6f call phci_grp_vendor_patch_common + +phci_grp_vendor_patch_loop: +4c7c e8608000 ifetch 1 ,contru +4c7d 60108025 hstore 1 ,core_ucode_data +4c7e 98408400 iadd temp ,temp +4c7f c2004c7c loop phci_grp_vendor_patch_loop + +phci_grp_vendor_patch_check_sum: +4c80 184104ff and temp ,0xff ,temp +4c81 e8608000 ifetch 1 ,contru +4c82 98467c00 isub temp ,null +4c83 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero +4c84 20204cdc branch hci_normal_reply + +phci_grp_vendor_patch_sec: +4c85 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +4c86 20404c6f call phci_grp_vendor_patch_common +4c87 60040a9a store 8 ,mem_pdatatemp + +phci_grp_vendor_patch_sec_loop: +4c88 20407422 call do_aes_cbc +4c89 df200010 arg 16 ,loopcnt +4c8a d8a00ac2 arg mem_temp_block0 ,contw +4c8b 20404ca0 call load_uart_sum_loop +4c8c 600c0aa2 storet 8 ,mem_temp +4c8d d8a00ad2 arg mem_temp_block2 ,contw +4c8e 20407497 call store_aes_result +4c8f da200ad2 arg mem_temp_block2 ,rega +4c90 da400ac2 arg mem_temp_block0 ,regb +4c91 d8a00ae2 arg mem_temp_block3 ,contw +4c92 20407352 call xor16 +4c93 df200010 arg 16 ,loopcnt +4c94 d8c00ae2 arg mem_temp_block3 ,contr +4c95 20404c9c call load_ucode_only_loop +4c96 680c0aa2 fetcht 8 ,mem_temp +4c97 68040a9a fetch 8 ,mem_pdatatemp +4c98 1fe0fff0 increase -16 ,pdata +4c99 60040a9a store 8 ,mem_pdatatemp +4c9a 243a4c88 nbranch phci_grp_vendor_patch_sec_loop ,blank +4c9b 20204c80 branch phci_grp_vendor_patch_check_sum + +load_ucode_only_loop: +4c9c e8c08000 ifetch 1 ,contr +4c9d 60108025 hstore 1 ,core_ucode_data +4c9e c2004c9c loop load_ucode_only_loop +4c9f 20600000 rtn + +load_uart_sum_loop: +4ca0 e8608000 ifetch 1 ,contru +4ca1 e0a08000 istore 1 ,contw +4ca2 98408400 iadd temp ,temp +4ca3 c2004ca0 loop load_uart_sum_loop +4ca4 20600000 rtn + +phci_grp_vendor_patch_sec_init: +4ca5 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +4ca6 d8400000 arg 0 ,temp +4ca7 df200010 arg 16 ,loopcnt +4ca8 d8a00ac2 arg mem_temp_block0 ,contw +4ca9 20404ca0 call load_uart_sum_loop +4caa 68108085 hfetch 1 ,core_gpio_key2 +4cab 1fe17efd and_into 0xfd ,pdata +4cac 60108085 hstore 1 ,core_gpio_key2 +4cad d8c00ac2 arg mem_temp_block0 ,contr +4cae df200010 arg 16 ,loopcnt +4caf 20407478 call aes_load_data +4cb0 20407428 call aes_init +4cb1 20407491 call aes_clear_data +4cb2 20204c80 branch phci_grp_vendor_patch_check_sum + +phci_grp_vendor_done: +4cb3 df200020 arg 0x20 ,loopcnt +4cb4 d8a04000 arg mem_patch00 ,contw +4cb5 d8400000 arg 0 ,temp + +phci_grp_vendor_done_loop: +4cb6 e8608000 ifetch 1 ,contru +4cb7 e0a08000 istore 1 ,contw +4cb8 98408400 iadd temp ,temp +4cb9 c2004cb6 loop phci_grp_vendor_done_loop +4cba 184104ff and temp ,0xff ,temp +4cbb e8608000 ifetch 1 ,contru +4cbc 98467c00 isub temp ,null +4cbd 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero +4cbe 70802300 hjam 0 ,core_ucode_ctrl +4cbf 20404cdc call hci_normal_reply +4cc0 20404be6 call h4_rx_discard_packet +4cc1 204064a3 call clear_key_buf +4cc2 20407f9e call wait_uarttx +4cc3 20202001 branch soft_reset + +phci_grp_vendor_patch_bad: +4cc4 70802300 hjam 0 ,core_ucode_ctrl +4cc5 20202000 branch start + +phci_grp_vendor_bdaddr: +4cc6 e8630000 ifetch 6 ,contru +4cc7 600340a0 store 6 ,mem_lap +4cc8 20204cdc branch hci_normal_reply + +phci_grp_vendor_mem: +4cc9 e8608000 ifetch 1 ,contru +4cca 6000825a store 1 ,mem_hci_curr_len +4ccb 1fe27200 copy pdata ,loopcnt +4ccc e8610000 ifetch 2 ,contru +4ccd 6001025b store 2 ,mem_hci_curr_target +4cce 1fe20a00 copy pdata ,contw +4ccf 204066fd call uart_copy_rx_bytes +4cd0 20204cdc branch hci_normal_reply + +phci_grp_vendor_eep: +4cd1 e8608000 ifetch 1 ,contru +4cd2 6000825a store 1 ,mem_hci_curr_len +4cd3 1fe27200 copy pdata ,loopcnt +4cd4 e8610000 ifetch 2 ,contru +4cd5 6001025b store 2 ,mem_hci_curr_target +4cd6 d8a01000 arg mem_l2cap_rxbuff1 ,contw +4cd7 204066fd call uart_copy_rx_bytes +4cd8 6808825a fetcht 1 ,mem_hci_curr_len +4cd9 da201000 arg mem_l2cap_rxbuff1 ,rega +4cda 6801025b fetch 2 ,mem_hci_curr_target +4cdb 20206608 branch iicd_write_ota_data + +hci_normal_reply: +4cdc 18007204 force 4 ,loopcnt + +hci_command_complete: +4cdd 20404cf4 call hci_get_payload_ptr +4cde 18007e01 force 0x1 ,pdata +4cdf e1408000 istore 1 ,contwu +4ce0 1e027e00 deposit alarm +4ce1 e1418000 istore 3 ,contwu +4ce2 18000e0e force hci_event_command_complete ,queue + +hci_send_event: +4ce3 47024020 bpatchx patch20_4 ,mem_patch20 +4ce4 20404cf6 call hci_get_packet_ptr +4ce5 18e27e00 deposit queue +4ce6 e1408000 istore 1 ,contwu +4ce7 1f227e00 deposit loopcnt +4ce8 e1408000 istore 1 ,contwu + +hci_send_event_raw: +4ce9 18000e05 force 5 ,queue +4cea 1f20f202 increase 2 ,loopcnt + +hci_send_packet: +4ceb 20204bf9 branch h4_send_packet_event + +hci_send_commu_ready_event: +4cec 18000eff force hci_event_vendor_specific ,queue +4ced 20404cf4 call hci_get_payload_ptr +4cee 58000001 setarg hci_vendor_event_commu_ready +4cef e1408000 istore 1 ,contwu +4cf0 18007201 force 1 ,loopcnt +4cf1 20204ce3 branch hci_send_event + +hci_get_cmd_complete_ptr: +4cf2 1800140c force 12 ,contwu +4cf3 20204cf7 branch hci_get_tx_ptr + +hci_get_payload_ptr: +4cf4 18001408 force 8 ,contwu +4cf5 20204cf7 branch hci_get_tx_ptr + +hci_get_packet_ptr: +4cf6 18001406 force 6 ,contwu + +hci_get_tx_ptr: +4cf7 20204bf5 branch h4_get_tx_ptr + +calc_tx_crc16: +4cf8 7827fc00 pulse crc16 +4cf9 7824fc00 enable enable_crc + +crcloop: +4cfa e9408000 ifetch 1 ,contwu +4cfb 08008008 inject bucket ,8 +4cfc c2004cfa loop crcloop +4cfd 78247c00 enable enable_parity +4cfe 08008010 inject bucket ,16 +4cff 78447c00 disable enable_parity +4d00 7844fc00 disable enable_crc +4d01 7847fc00 disable crc16 +4d02 1ff0fe00 byteswap pdata ,pdata +4d03 20600000 rtn + +cmd_exit: +4d04 7041ce00 jam 0 ,mem_hci_cmd +4d05 20600000 rtn + +cmd_check_plap: +4d06 680341d0 fetch 6 ,mem_hci_plap +4d07 680b0040 fetcht 6 ,mem_plap +4d08 98467c00 isub temp ,null +4d09 20600000 rtn + +cmd_pair: +4d0a 6800804b fetch 1 ,mem_op +4d0b c2814d0f bbit1 op_inrand_req ,cmd_pair_passive +4d0c 204062ef call tid_initiate +4d0d 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 +4d0e 20204d04 branch cmd_exit + +cmd_pair_passive: +4d0f 793ffe02 set0 op_inrand_req ,pdata +4d10 6000804b store 1 ,mem_op +4d11 20406001 call lmp_accept_inrand +4d12 58000000 setarg 0 +4d13 7934fe01 setflag master ,smap_lmptid ,pdata +4d14 6000807f store 1 ,mem_lmo_tid2 +4d15 20204d04 branch cmd_exit +4d16 20600000 rtn + +cmd_in_sniff: +4d17 70007c17 jam lmp_sniff_req ,mem_lmo_opcode2 +4d18 d8a004d9 arg mem_sniff_payload ,contw +4d19 58000000 setarg 0 +4d1a 2d0ffe1b isolate1 27 ,clke_bt +4d1b 7920fe01 setflag true ,1 ,pdata +4d1c e0a08000 istore 1 ,contw +4d1d 58000000 setarg 0 +4d1e e0a10000 istore 2 ,contw +4d1f 680141e3 fetch 2 ,mem_sniff_param_interval +4d20 e0a10000 istore 2 ,contw +4d21 6800c1e5 fetch 1 ,mem_sniff_param_attempt +4d22 e0a10000 istore 2 ,contw +4d23 6800c1e7 fetch 1 ,mem_sniff_param_timeout +4d24 e0a10000 istore 2 ,contw +4d25 20204d04 branch cmd_exit + +cmd_exit_sniff: +4d26 70007c18 jam lmp_unsniff_req ,mem_lmo_opcode2 +4d27 20204d04 branch cmd_exit + +hci_idle_dispatch: +4d28 20406899 call gpio_check_uart_state +4d29 20608000 rtn true +4d2a d8400007 arg uart_wakeup_rx ,temp +4d2b 2040681d call gpio_get_bit +4d2c 2420cd2f nbranch uart_wake_up ,true +4d2d 70424501 jam hci_rx_wake ,mem_hci_lt_rx_state +4d2e 20600000 rtn + +uart_wake_up: +4d2f 6800c245 fetch 1 ,mem_hci_lt_rx_state +4d30 c1808000 rtnne hci_rx_wake +4d31 20404c62 call hci_exit_lpm +4d32 20204cec branch hci_send_commu_ready_event + +hid_rx_process: +4d33 4702c020 bpatchx patch20_5 ,mem_patch20 +4d34 68010264 fetch 2 ,mem_l2cap_payload_ptr +4d35 1fe20c00 copy pdata ,contr +4d36 e8c08000 ifetch 1 ,contr +4d37 1fe1040f and pdata ,0x0f ,temp +4d38 1ff1fe00 rshift4 pdata ,pdata +4d39 c004cd53 beq hid_type_set_idle ,hid_rx_process_handshake +4d3a c003cd53 beq hid_type_set_protocol ,hid_rx_process_handshake +4d3b c0054d5f beq hid_type_data ,hid_rx_process_data +4d3c c002cd4b beq hid_type_set_report ,hid_rx_process_set_report +4d3d c000cd3f beq hid_type_control ,hid_rx_process_hid_control +4d3e 20600000 rtn + +hid_rx_process_hid_control: +4d3f 18427e00 copy temp ,pdata +4d40 c002cd43 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +4d41 c001cd4a beq hid_control_p_suspend ,hid_rx_process_suspend +4d42 20600000 rtn + +hid_rx_process_virtual_cable_unplug: +4d43 700a9927 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +4d44 20407d86 call ui_ipc_send_event +4d45 6800c092 fetch 1 ,mem_device_option +4d46 c4030000 rtnbit0 dvc_op_mouse +4d47 18427e00 copy temp ,pdata +4d48 c002c38e beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +4d49 20600000 rtn + +hid_rx_process_suspend: +4d4a 20600000 rtn + +hid_rx_process_set_report: +4d4b 20404d5f call hid_rx_process_data +4d4c da200001 arg 0x01 ,rega +4d4d 20404d63 call hid_malloc_tx_buff +4d4e 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4d4f e0a10000 istore 2 ,contw +4d50 58000000 setarg 0x00 +4d51 e0a08000 istore 1 ,contw +4d52 20600000 rtn + +hid_rx_process_handshake: +4d53 da200001 arg 1 ,rega +4d54 20404d63 call hid_malloc_tx_buff +4d55 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4d56 e0a10000 istore 2 ,contw +4d57 58000000 setarg 0 +4d58 e0a08000 istore 1 ,contw +4d59 700a8e01 jam 1 ,mem_ui_data_txbuff_length +4d5a 6800c252 fetch 1 ,mem_hid_control_state +4d5b 79207e06 set1 l2cap_channel_hid_handshake_done +4d5c 6000c252 store 1 ,mem_hid_control_state +4d5d 700a9912 jam bt_evt_hid_handshake ,mem_fifo_temp +4d5e 20207d86 branch ui_ipc_send_event + +hid_rx_process_data: +4d5f e8c08000 ifetch 1 ,contr +4d60 c000cd62 beq hid_report_id_kb ,hid_rx_process_data_hid_kb +4d61 20600000 rtn + +hid_rx_process_data_hid_kb: +4d62 20600000 rtn + +hid_malloc_tx_buff: +4d63 20405240 call l2cap_malloc +4d64 1a220400 copy rega ,temp +4d65 60088a8e storet 1 ,mem_ui_data_txbuff_length +4d66 1fe20a00 copy pdata ,contw +4d67 1a227e00 copy rega ,pdata +4d68 e0a10000 istore 2 ,contw +4d69 20600000 rtn + +l2cap_init: +4d6a 2035cd6f branch l2cap_init_wake ,wake + +l2cap_init_work: +4d6b 58004365 setarg mem_l2cap_xmem_end +4d6c d8a04246 arg mem_l2cap_xmem_start ,contw +4d6d 98a67200 isub contw ,loopcnt +4d6e 20407ed4 call clear_mem + +l2cap_init_wake: +4d6f 47034020 bpatchx patch20_6 ,mem_patch20 +4d70 58000551 setarg mem_sdp_mem_end +4d71 d8a00511 arg mem_sdp_mem_start ,contw +4d72 98a67200 isub contw ,loopcnt +4d73 20407ed4 call clear_mem +4d74 580002c9 setarg mem_l2cap_mem_end +4d75 d8a0025d arg mem_l2cap_mem_start ,contw +4d76 98a67200 isub contw ,loopcnt +4d77 20407ed4 call clear_mem +4d78 20205318 branch l2cap_lpm_load_txbuf + +process_rx_l2cap_pkt: +4d79 4703c020 bpatchx patch20_7 ,mem_patch20 +4d7a 18c20400 copy contr ,temp +4d7b 18420c00 copy temp ,contr +4d7c e8c10000 ifetch 2 ,contr +4d7d 60010266 store 2 ,mem_l2cap_rx_pkt_length +4d7e e8c10000 ifetch 2 ,contr +4d7f 60010268 store 2 ,mem_l2cap_rx_cid +4d80 18c27e00 deposit contr +4d81 60010264 store 2 ,mem_l2cap_payload_ptr +4d82 6800c681 fetch 1 ,memui_reconnect_mode +4d83 c0004d85 beq no_reconnection ,l2cap_rx_multiplexing +4d84 202050ef branch ml2cap_rx_multiplexing + +l2cap_rx_multiplexing: +4d85 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +4d86 203a4dfc branch l2cap_rx_reset_state ,blank +4d87 47044021 bpatchx patch21_0 ,mem_patch21 +4d88 68008268 fetch 1 ,mem_l2cap_rx_cid +4d89 c000cd9d beq l2cap_signal_channel ,l2cap_call_proc_signal + +l2cap_rx_multiplexing0: +4d8a c0284de0 beq l2cap_sdp_channel ,l2cap_call_proc_sdp +4d8b c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +4d8c c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +4d8d c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +4d8e 20204dfc branch l2cap_rx_reset_state + +l2cap_check_map: +4d8f 4704c021 bpatchx patch21_1 ,mem_patch21 +4d90 2040527e call l2cap_malloc_get_full_map +4d91 6800c256 fetch 1 ,mem_used_map +4d92 c0004d9b beq 0 ,set_pdata_0 +4d93 c000cd9b beq 1 ,set_pdata_0 +4d94 c0014d9b beq 2 ,set_pdata_0 +4d95 c001cd9b beq 3 ,set_pdata_0 +4d96 c040cd9b beq 0x81 ,set_pdata_0 +4d97 c0604d9b beq 0xc0 ,set_pdata_0 +4d98 c0404d9b beq 0x80 ,set_pdata_0 +4d99 c0204d9b beq 0x40 ,set_pdata_0 +4d9a 20600000 rtn + +set_pdata_0: +4d9b 58000000 setarg 0 +4d9c 20600000 rtn + +l2cap_call_proc_signal: +4d9d 20404d8f call l2cap_check_map +4d9e 247a0000 nrtn blank + +l2cap_call_proc_signal0: +4d9f 204052b8 call l2cap_malloc_signal_channel +4da0 20404e01 call l2cap_process_signal_pkt +4da1 6809026f fetcht 2 ,mem_l2cap_signal_tx_length +4da2 203a4dfb branch l2cap_call_proc_no_reply ,blank +4da3 204052c1 call l2cap_get_signal_tx_buff +4da4 6801026f fetch 2 ,mem_l2cap_signal_tx_length +4da5 e0a10000 istore 2 ,contw +4da6 18007e01 force l2cap_signal_channel ,pdata +4da7 e0a10000 istore 2 ,contw +4da8 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_sigal_pending: +4da9 6800c364 fetch 1 ,mem_l2cap_pending_item +4daa 207a0000 rtn blank +4dab 1fe22200 copy pdata ,rega +4dac 47054021 bpatchx patch21_2 ,mem_patch21 +4dad 680202d5 fetch 4 ,mem_l2cap_sdpres_delay_time +4dae d8400100 arg 0x100 ,temp +4daf 98408400 iadd temp ,temp +4db0 1c427e00 copy clkn_bt ,pdata +4db1 98467c00 isub temp ,null +4db2 24610000 nrtn positive +4db3 70436400 jam 0 ,mem_l2cap_pending_item +4db4 1a227e00 copy rega ,pdata +4db5 c0284db7 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +4db6 20202a8c branch assert + +l2cap_sdp_conn_succ: +4db7 d9000000 arg 0 ,debug +4db8 204052b8 call l2cap_malloc_signal_channel +4db9 20404e7a call restore_l2cap_req_param +4dba 204052c3 call l2cap_get_signal_tx_payload +4dbb 20407ea8 call save_cont_pointers +4dbc 20404ead call send_connection_sdp_res +4dbd 204052c1 call l2cap_get_signal_tx_buff +4dbe 5800000c setarg 0x000c +4dbf e0a10000 istore 2 ,contw +4dc0 18007e01 force l2cap_signal_channel ,pdata +4dc1 e0a10000 istore 2 ,contw +4dc2 20204dfc branch l2cap_rx_reset_state + +l2cap_reset_sdp_map: +4dc3 4705c021 bpatchx patch21_3 ,mem_patch21 +4dc4 68010275 fetch 2 ,mem_sdp_tx_pkt_length +4dc5 1fe0fe04 increase 4 ,pdata +4dc6 1ff1fe00 rshift4 pdata ,pdata +4dc7 1fe97e00 rshift3 pdata ,pdata +4dc8 1fe08401 add pdata ,1 ,temp +4dc9 d8c04260 arg mem_tx_fifo3 ,contr +4dca e8c18000 ifetch 3 ,contr +4dcb 207a0000 rtn blank +4dcc 60018ac2 store 3 ,mem_tx_fifo_map_temp +4dcd 68008ac2 fetch 1 ,mem_tx_fifo_map_temp +4dce 1fe22200 copy pdata ,rega +4dcf 20404dd3 call check_l2cap_map +4dd0 1a427e00 copy regb ,pdata +4dd1 6000c260 store 1 ,mem_tx_fifo3 +4dd2 20600000 rtn + +check_l2cap_map: +4dd3 d8e00000 arg 0 ,queue +4dd4 da400000 arg 0 ,regb + +check_l2cap_map_loop: +4dd5 18e67c07 sub queue ,7 ,null +4dd6 24610000 nrtn positive +4dd7 aa2fffff qisolate1 rega +4dd8 2020cdda branch check_l2cap_map_used ,true +4dd9 20204dde branch check_l2cap_map_used2 + +check_l2cap_map_used: +4dda 18427e00 copy temp ,pdata +4ddb 203a4dde branch check_l2cap_map_used2 ,blank +4ddc f9202400 qset1 regb +4ddd 184085ff increase -1 ,temp + +check_l2cap_map_used2: +4dde 18e08e01 increase 1 ,queue +4ddf 20204dd5 branch check_l2cap_map_loop + +l2cap_call_proc_sdp: +4de0 20405274 call l2cap_malloc_is_fifo_empty +4de1 247a0000 nrtn blank +4de2 20404d8f call l2cap_check_map +4de3 247a0000 nrtn blank +4de4 204052c5 call l2cap_malloc_sdp_channel +4de5 20406e11 call sdp_process +4de6 20404dc3 call l2cap_reset_sdp_map +4de7 20204dec branch l2cap_call_proc_sdp_common + +ml2cap_call_proc_sdp: +4de8 20405274 call l2cap_malloc_is_fifo_empty +4de9 247a0000 nrtn blank +4dea 204052c5 call l2cap_malloc_sdp_channel +4deb 20406e11 call sdp_process + +l2cap_call_proc_sdp_common: +4dec 204052ce call l2cap_get_sdp_tx_buff +4ded 68010275 fetch 2 ,mem_sdp_tx_pkt_length +4dee 203a4dfb branch l2cap_call_proc_no_reply ,blank +4def e0a10000 istore 2 ,contw +4df0 68014248 fetch 2 ,mem_sdp_remote_cid +4df1 e0a10000 istore 2 ,contw +4df2 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_hid: +4df3 20404d33 call hid_rx_process +4df4 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_rfcomm: +4df5 47064021 bpatchx patch21_4 ,mem_patch21 +4df6 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +4df7 20406a8a call rfcomm_rx_process +4df8 68008284 fetch 1 ,mem_rfcomm_malloc_fail_flag +4df9 c1008000 rtneq rfcomm_malloc_fail +4dfa 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_no_reply: +4dfb 20405264 call l2cap_malloc_discard + +l2cap_rx_reset_state: +4dfc 58000000 setarg 0 +4dfd 60010266 store 2 ,mem_l2cap_rx_pkt_length +4dfe 60010268 store 2 ,mem_l2cap_rx_cid +4dff 70026a01 jam l2cap_rx_done ,mem_l2cap_rx_done +4e00 20600000 rtn + +l2cap_process_signal_pkt: +4e01 4706c021 bpatchx patch21_5 ,mem_patch21 +4e02 204052c3 call l2cap_get_signal_tx_payload +4e03 18002400 force 0 ,regb +4e04 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +4e05 1fe22600 copy pdata ,regc +4e06 68010264 fetch 2 ,mem_l2cap_payload_ptr +4e07 98000c00 iforce contr + +l2cap_process_signal_pkt_loop: +4e08 20404e10 call l2cap_process_one_signal +4e09 1a627e00 deposit regc +4e0a 1a60a7fc increase -4 ,regc +4e0b 1fe0fffc increase -4 ,pdata +4e0c 243a4e08 nbranch l2cap_process_signal_pkt_loop ,blank +4e0d 1a427e00 copy regb ,pdata +4e0e 6001026f store 2 ,mem_l2cap_signal_tx_length +4e0f 20600000 rtn + +l2cap_process_one_signal: +4e10 47074021 bpatchx patch21_6 ,mem_patch21 +4e11 e8c08000 ifetch 1 ,contr +4e12 c000ce49 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +4e13 c0014e51 beq signal_connect_req ,l2cap_proc_signal_connect_req +4e14 c001ced5 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +4e15 c0024f05 beq signal_config_req ,l2cap_proc_signal_config_req +4e16 c002cfa2 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +4e17 c0034fcb beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +4e18 c003d01b beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +4e19 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req +4e1a c004d060 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +4e1b c0054e1f beq signal_info_req ,l2cap_proc_signal_info_req +4e1c c005d061 beq signal_info_rsp ,l2cap_proc_signal_info_rsp +4e1d 20405062 call l2cap_reject_command + +l2cap_process_one_signal_rtn: +4e1e 20600000 rtn + +l2cap_proc_signal_info_req: +4e1f e8c08000 ifetch 1 ,contr +4e20 1fe20e00 copy pdata ,queue +4e21 e8c10000 ifetch 2 ,contr +4e22 1fe22200 copy pdata ,rega +4e23 1a627e00 copy regc ,pdata +4e24 9a262600 isub rega ,regc +4e25 5800000b setarg signal_info_rsp +4e26 e0a08000 istore 1 ,contw +4e27 18e27e00 copy queue ,pdata +4e28 e0a08000 istore 1 ,contw +4e29 e8c10000 ifetch 2 ,contr + +l2cap_proc_signal_info_req_reply: +4e2a c0014e2d beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +4e2b c001ce33 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +4e2c 20600000 rtn + +l2cap_proc_signal_info_req_ext: +4e2d 58020008 setarg 0x020008 +4e2e e0a30000 istore 6 ,contw +4e2f 58000280 setarg 0x0280 +4e30 e0a20000 istore 4 ,contw +4e31 18007e0c force 12 ,pdata +4e32 20204e38 branch l2cap_proc_signal_info_req_common + +l2cap_proc_signal_info_req_fix: +4e33 5803000c setarg 0x3000c +4e34 e0a30000 istore 6 ,contw +4e35 58000006 setarg 0x0006 +4e36 e0a40000 istore 8 ,contw +4e37 18007e10 force 16 ,pdata + +l2cap_proc_signal_info_req_common: +4e38 9a40a400 iadd regb ,regb +4e39 20204e1e branch l2cap_process_one_signal_rtn + +ml2cap_proc_signal_info_req: +4e3a e8c08000 ifetch 1 ,contr +4e3b 1fe20e00 copy pdata ,queue +4e3c e8c10000 ifetch 2 ,contr +4e3d 1fe22200 copy pdata ,rega +4e3e e8c10000 ifetch 2 ,contr +4e3f 60010aa2 store 2 ,mem_temp +4e40 1a627e00 copy regc ,pdata +4e41 9a262600 isub rega ,regc +4e42 204052c3 call l2cap_get_signal_tx_payload +4e43 5800000b setarg signal_info_rsp +4e44 e0a08000 istore 1 ,contw +4e45 18e27e00 copy queue ,pdata +4e46 e0a08000 istore 1 ,contw +4e47 68010aa2 fetch 2 ,mem_temp +4e48 20204e2a branch l2cap_proc_signal_info_req_reply + +l2cap_proc_signal_cmd_reject: +4e49 e8c08000 ifetch 1 ,contr +4e4a 1fe20e00 copy pdata ,queue +4e4b e8c10000 ifetch 2 ,contr +4e4c 1fe22200 copy pdata ,rega +4e4d 98c08c00 iadd contr ,contr +4e4e 1a627e00 copy regc ,pdata +4e4f 9a262600 isub rega ,regc + +l2cap_proc_signal_cmd_reject_rtn: +4e50 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_req: +4e51 20407ea8 call save_cont_pointers +4e52 20407ead call load_cont_pointers +4e53 d9000000 arg 0 ,debug +4e54 e8c08000 ifetch 1 ,contr +4e55 1fe20e00 copy pdata ,queue +4e56 e8c10000 ifetch 2 ,contr +4e57 1fe22200 copy pdata ,rega +4e58 e8c10000 ifetch 2 ,contr +4e59 1fe20400 copy pdata ,temp +4e5a e8c10000 ifetch 2 ,contr +4e5b 1fe21600 copy pdata ,timeup +4e5c 4707c021 bpatchx patch21_7 ,mem_patch21 +4e5d 18427e00 copy temp ,pdata +4e5e c000ce64 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +4e5f c001ce86 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +4e60 c008ce92 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +4e61 c009ce9d beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +4e62 20405062 call l2cap_reject_command +4e63 20204ed4 branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_sdp: +4e64 20407ea8 call save_cont_pointers +4e65 d8400050 arg l2cap_sdp_channel ,temp +4e66 68014248 fetch 2 ,mem_sdp_remote_cid +4e67 243a4ece nbranch already_connected ,blank +4e68 19627e00 copy timeup ,pdata +4e69 60014248 store 2 ,mem_sdp_remote_cid +4e6a 1c427e00 copy clkn_bt ,pdata +4e6b 600202d5 store 4 ,mem_l2cap_sdpres_delay_time +4e6c 20404e6e call store_l2cap_req_param +4e6d 20204ea9 branch send_connection_pending + +store_l2cap_req_param: +4e6e 600902d3 storet 2 ,mem_psm +4e6f 19627e00 deposit timeup +4e70 600102c9 store 2 ,mem_scid +4e71 1a227e00 deposit rega +4e72 600102cb store 2 ,mem_cmd_length +4e73 1a427e00 deposit regb +4e74 600102cd store 2 ,mem_tt2 +4e75 1a627e00 deposit regc +4e76 600102cf store 2 ,mem_tt3 +4e77 18e27e00 deposit queue +4e78 600102d1 store 2 ,mem_id +4e79 20600000 rtn + +restore_l2cap_req_param: +4e7a 680902d3 fetcht 2 ,mem_psm +4e7b 680102c9 fetch 2 ,mem_scid +4e7c 1fe21600 copy pdata ,timeup +4e7d 680102cb fetch 2 ,mem_cmd_length +4e7e 1fe22200 copy pdata ,rega +4e7f 680102cd fetch 2 ,mem_tt2 +4e80 1fe22400 copy pdata ,regb +4e81 680102cf fetch 2 ,mem_tt3 +4e82 1fe22600 copy pdata ,regc +4e83 680102d1 fetch 2 ,mem_id +4e84 1fe20e00 copy pdata ,queue +4e85 20600000 rtn + +l2cap_proc_signal_connect_req_rfcomm: +4e86 20407ea8 call save_cont_pointers +4e87 58000051 setarg l2cap_rfcomm_channel +4e88 d8400051 arg l2cap_rfcomm_channel ,temp +4e89 6801424a fetch 2 ,mem_rfcomm_remote_cid +4e8a 243a4ece nbranch already_connected ,blank +4e8b 19627e00 copy timeup ,pdata +4e8c 6001424a store 2 ,mem_rfcomm_remote_cid +4e8d 6800c251 fetch 1 ,mem_rfcomm_state +4e8e 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4e8f 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4e90 6000c251 store 1 ,mem_rfcomm_state +4e91 20204eb1 branch send_connection_res + +l2cap_proc_signal_connect_req_hid_ctrl: +4e92 20407ea8 call save_cont_pointers +4e93 d8400052 arg l2cap_hid_control_channel ,temp +4e94 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4e95 243a4ece nbranch already_connected ,blank +4e96 19627e00 copy timeup ,pdata +4e97 6001424c store 2 ,mem_hid_ctrl_remote_cid +4e98 6800c252 fetch 1 ,mem_hid_control_state +4e99 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4e9a 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4e9b 6000c252 store 1 ,mem_hid_control_state +4e9c 20204eb1 branch send_connection_res + +l2cap_proc_signal_connect_req_hid_int: +4e9d 20407ea8 call save_cont_pointers +4e9e 1b427e00 deposit clke +4e9f d8400053 arg l2cap_hid_interrupt_channel ,temp +4ea0 6801424e fetch 2 ,mem_hid_int_remote_cid +4ea1 243a4ece nbranch already_connected ,blank +4ea2 19627e00 copy timeup ,pdata +4ea3 6001424e store 2 ,mem_hid_int_remote_cid +4ea4 6800c253 fetch 1 ,mem_hid_interrupt_state +4ea5 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4ea6 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ea7 6000c253 store 1 ,mem_hid_interrupt_state +4ea8 20204eb1 branch send_connection_res + +send_connection_pending: +4ea9 58000001 setarg l2cap_connect_pending +4eaa 6001027d store 2 ,meml2cap_t1 +4eab 70436450 jam l2cap_sdp_channel ,mem_l2cap_pending_item +4eac 20204eb3 branch send_connection_res0 + +send_connection_sdp_res: +4ead 6800c250 fetch 1 ,mem_sdp_state +4eae 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4eaf 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4eb0 6000c250 store 1 ,mem_sdp_state + +send_connection_res: +4eb1 58000000 setarg l2cap_connect_successful +4eb2 6001027d store 2 ,meml2cap_t1 + +send_connection_res0: +4eb3 47084022 bpatchx patch22_0 ,mem_patch22 +4eb4 20407ead call load_cont_pointers +4eb5 58000003 setarg signal_connect_rsp +4eb6 e0a08000 istore 1 ,contw +4eb7 18e27e00 copy queue ,pdata +4eb8 e0a08000 istore 1 ,contw +4eb9 58000008 setarg 0x0008 +4eba e0a10000 istore 2 ,contw +4ebb 18427e00 copy temp ,pdata +4ebc e0a10000 istore 2 ,contw +4ebd 19627e00 copy timeup ,pdata +4ebe e0a10000 istore 2 ,contw +4ebf 6801027d fetch 2 ,meml2cap_t1 +4ec0 c000cec9 beq l2cap_connect_pending ,connect_pending +4ec1 290c0000 isolate0 0 ,debug +4ec2 2020cec4 branch connect_suc ,true +4ec3 58000004 setarg l2cap_connect_refused_no_resources + +connect_suc: +4ec4 e0a10000 istore 2 ,contw +4ec5 18007e00 force 0x0000 ,pdata +4ec6 e0a10000 istore 2 ,contw +4ec7 5800000c setarg 12 +4ec8 20204ed0 branch connect_req_update_byte_counts + +connect_pending: +4ec9 e0a10000 istore 2 ,contw +4eca 18007e02 force 0x0002 ,pdata +4ecb e0a10000 istore 2 ,contw +4ecc 5800000c setarg 12 +4ecd 20204ed0 branch connect_req_update_byte_counts + +already_connected: +4ece 79201000 set1 0 ,debug +4ecf 20204eb1 branch send_connection_res + +connect_req_update_byte_counts: +4ed0 9a40a400 iadd regb ,regb +4ed1 1a627e00 copy regc ,pdata +4ed2 9a262600 isub rega ,regc +4ed3 20204ed4 branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_rtn: +4ed4 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp: +4ed5 e8c08000 ifetch 1 ,contr +4ed6 1fe20e00 copy pdata ,queue +4ed7 e8c10000 ifetch 2 ,contr +4ed8 1fe22200 copy pdata ,rega +4ed9 1a627e00 copy regc ,pdata +4eda 9a262600 isub rega ,regc +4edb e8c10000 ifetch 2 ,contr +4edc 1fe21600 copy pdata ,timeup +4edd e8c10000 ifetch 2 ,contr +4ede 1fe20400 copy pdata ,temp +4edf 4708c022 bpatchx patch22_1 ,mem_patch22 +4ee0 58000050 setarg l2cap_sdp_channel +4ee1 98467c00 isub temp ,null +4ee2 2022ceed branch l2cap_proc_signal_connect_rsp_sdp ,zero +4ee3 58000051 setarg l2cap_rfcomm_channel +4ee4 98467c00 isub temp ,null +4ee5 2022cef3 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +4ee6 58000052 setarg l2cap_hid_control_channel +4ee7 98467c00 isub temp ,null +4ee8 2022ceff branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +4ee9 58000053 setarg l2cap_hid_interrupt_channel +4eea 98467c00 isub temp ,null +4eeb 2022cef9 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +4eec 20600000 rtn + +l2cap_proc_signal_connect_rsp_sdp: +4eed 19627e00 copy timeup ,pdata +4eee 60014248 store 2 ,mem_sdp_remote_cid +4eef 6800c250 fetch 1 ,mem_sdp_state +4ef0 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ef1 6000c250 store 1 ,mem_sdp_state +4ef2 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp_rfcomm: +4ef3 19627e00 copy timeup ,pdata +4ef4 6001424a store 2 ,mem_rfcomm_remote_cid +4ef5 6800c251 fetch 1 ,mem_rfcomm_state +4ef6 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ef7 6000c251 store 1 ,mem_rfcomm_state +4ef8 20600000 rtn + +l2cap_proc_signal_connect_rsp_hid_int: +4ef9 19627e00 copy timeup ,pdata +4efa 6001424c store 2 ,mem_hid_ctrl_remote_cid +4efb 6800c253 fetch 1 ,mem_hid_interrupt_state +4efc 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4efd 6000c253 store 1 ,mem_hid_interrupt_state +4efe 20600000 rtn + +l2cap_proc_signal_connect_rsp_hid_ctrl: +4eff 19627e00 copy timeup ,pdata +4f00 6001424e store 2 ,mem_hid_int_remote_cid +4f01 6800c252 fetch 1 ,mem_hid_control_state +4f02 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f03 6000c252 store 1 ,mem_hid_control_state +4f04 20600000 rtn + +l2cap_proc_signal_config_req: +4f05 e8c08000 ifetch 1 ,contr +4f06 1fe20e00 copy pdata ,queue +4f07 e8c10000 ifetch 2 ,contr +4f08 1fe22200 copy pdata ,rega +4f09 1a627e00 copy regc ,pdata +4f0a 9a262600 isub rega ,regc +4f0b e8c10000 ifetch 2 ,contr +4f0c 1fe20400 copy pdata ,temp +4f0d 18422200 copy temp ,rega +4f0e 47094022 bpatchx patch22_2 ,mem_patch22 +4f0f 58000050 setarg l2cap_sdp_channel +4f10 98467c00 isub temp ,null +4f11 2022cf1c branch l2cap_proc_signal_config_req_sdp ,zero +4f12 58000051 setarg l2cap_rfcomm_channel +4f13 98467c00 isub temp ,null +4f14 2022cf3a branch l2cap_proc_signal_config_req_rfcomm ,zero +4f15 58000052 setarg l2cap_hid_control_channel +4f16 98467c00 isub temp ,null +4f17 2022cf26 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +4f18 58000053 setarg l2cap_hid_interrupt_channel +4f19 98467c00 isub temp ,null +4f1a 2022cf30 branch l2cap_proc_signal_config_req_hid_int ,zero +4f1b 20205062 branch l2cap_reject_command + +l2cap_proc_signal_config_req_sdp: +4f1c 18a21600 copy contw ,timeup +4f1d 6800c250 fetch 1 ,mem_sdp_state +4f1e 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f1f 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f20 6000c250 store 1 ,mem_sdp_state +4f21 19620a00 copy timeup ,contw +4f22 d9600050 arg l2cap_sdp_channel ,timeup +4f23 68014248 fetch 2 ,mem_sdp_remote_cid +4f24 1fe20400 copy pdata ,temp +4f25 20204f43 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_hid_ctrl: +4f26 18a21600 copy contw ,timeup +4f27 6800c252 fetch 1 ,mem_hid_control_state +4f28 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f29 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f2a 6000c252 store 1 ,mem_hid_control_state +4f2b 19620a00 copy timeup ,contw +4f2c d9600052 arg l2cap_hid_control_channel ,timeup +4f2d 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4f2e 1fe20400 copy pdata ,temp +4f2f 20204f43 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_hid_int: +4f30 18a21600 copy contw ,timeup +4f31 6800c253 fetch 1 ,mem_hid_interrupt_state +4f32 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f33 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f34 6000c253 store 1 ,mem_hid_interrupt_state +4f35 19620a00 copy timeup ,contw +4f36 d9600053 arg l2cap_hid_interrupt_channel ,timeup +4f37 6801424e fetch 2 ,mem_hid_int_remote_cid +4f38 1fe20400 copy pdata ,temp +4f39 20204f43 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_rfcomm: +4f3a 18a21600 copy contw ,timeup +4f3b 6800c251 fetch 1 ,mem_rfcomm_state +4f3c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f3d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f3e 6000c251 store 1 ,mem_rfcomm_state +4f3f 19620a00 copy timeup ,contw +4f40 d9600051 arg l2cap_rfcomm_channel ,timeup +4f41 6801424a fetch 2 ,mem_rfcomm_remote_cid +4f42 1fe20400 copy pdata ,temp + +l2cap_send_config_rsp: +4f43 4709c022 bpatchx patch22_3 ,mem_patch22 +4f44 58000005 setarg signal_config_rsp +4f45 e0a08000 istore 1 ,contw +4f46 18e27e00 copy queue ,pdata +4f47 e0a08000 istore 1 ,contw +4f48 58000006 setarg 0x0006 +4f49 e0a10000 istore 2 ,contw +4f4a 18427e00 copy temp ,pdata +4f4b e0a10000 istore 2 ,contw +4f4c 18007e00 force 0x00 ,pdata +4f4d e0a10000 istore 2 ,contw +4f4e 18007e00 force l2cap_config_success ,pdata +4f4f e0a10000 istore 2 ,contw +4f50 18007e0a force 10 ,pdata +4f51 9a40a400 iadd regb ,regb +4f52 60090282 storet 2 ,mem_config_req_dest_cid +4f53 18e27e00 copy queue ,pdata +4f54 60008281 store 1 ,mem_config_identifier +4f55 18007e50 force l2cap_sdp_channel ,pdata +4f56 a961fe00 icompare 0xff ,timeup +4f57 2020cf59 branch l2cap_send_config_rsp_is_sdp ,true +4f58 1fe0fe01 increase 1 ,pdata + +l2cap_send_config_rsp_is_sdp: +4f59 20600000 rtn + +l2cap_check_channel_state: +4f5a 78547c00 disable user +4f5b c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +4f5c c4000000 rtnbit0 l2cap_channel_state_conn_req ,pdata +4f5d c4008000 rtnbit0 l2cap_channel_state_conn_res ,pdata +4f5e 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +4f5f 18c20a00 copy contr ,contw +4f60 18a08bff increase -1 ,contw +4f61 e0a08000 istore 1 ,contw +4f62 78347c00 enable user +4f63 20600000 rtn + +l2cap_send_config_req: + +l2cap_send_config_req_sdp: +4f64 6800c250 fetch 1 ,mem_sdp_state +4f65 20404f5a call l2cap_check_channel_state +4f66 24344f6b nbranch l2cap_send_config_req_rfcomm ,user +4f67 70028050 jam l2cap_sdp_channel ,mem_send_config_req +4f68 68014248 fetch 2 ,mem_sdp_remote_cid +4f69 60010282 store 2 ,mem_config_req_dest_cid +4f6a 20204f7f branch l2cap_generate_config_req + +l2cap_send_config_req_rfcomm: +4f6b 6800c251 fetch 1 ,mem_rfcomm_state +4f6c 20404f5a call l2cap_check_channel_state +4f6d 24344f72 nbranch l2cap_send_config_req_hid_ctrl ,user +4f6e 70028051 jam l2cap_rfcomm_channel ,mem_send_config_req +4f6f 6801424a fetch 2 ,mem_rfcomm_remote_cid +4f70 60010282 store 2 ,mem_config_req_dest_cid +4f71 20204f7f branch l2cap_generate_config_req + +l2cap_send_config_req_hid_ctrl: +4f72 6800c252 fetch 1 ,mem_hid_control_state +4f73 20404f5a call l2cap_check_channel_state +4f74 24344f79 nbranch l2cap_send_config_req_hid_int ,user +4f75 70028052 jam l2cap_hid_control_channel ,mem_send_config_req +4f76 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4f77 60010282 store 2 ,mem_config_req_dest_cid +4f78 20204f7f branch l2cap_generate_config_req + +l2cap_send_config_req_hid_int: +4f79 6800c253 fetch 1 ,mem_hid_interrupt_state +4f7a 20404f5a call l2cap_check_channel_state +4f7b 24740000 nrtn user +4f7c 70028053 jam l2cap_hid_interrupt_channel ,mem_send_config_req +4f7d 6801424e fetch 2 ,mem_hid_int_remote_cid +4f7e 60010282 store 2 ,mem_config_req_dest_cid + +l2cap_generate_config_req: +4f7f 470a4022 bpatchx patch22_4 ,mem_patch22 +4f80 2040523a call l2cap_get_req_id +4f81 204052b8 call l2cap_malloc_signal_channel +4f82 18002400 force 0 ,regb +4f83 204052c3 call l2cap_get_signal_tx_payload +4f84 18007e04 force signal_config_req ,pdata +4f85 e0a08000 istore 1 ,contw +4f86 6800c255 fetch 1 ,mem_ml2cap_comm_id +4f87 e0a08000 istore 1 ,contw +4f88 58000008 setarg 0x0008 +4f89 e0a10000 istore 2 ,contw +4f8a 68010282 fetch 2 ,mem_config_req_dest_cid +4f8b e0a10000 istore 2 ,contw +4f8c 58000000 setarg 0x0000 +4f8d e0a10000 istore 2 ,contw +4f8e 18007e01 force 1 ,pdata +4f8f e0a08000 istore 1 ,contw +4f90 18007e02 force 2 ,pdata +4f91 e0a08000 istore 1 ,contw +4f92 68008280 fetch 1 ,mem_send_config_req +4f93 c028cf97 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +4f94 58000030 setarg l2cap_config_mtu_sdp +4f95 e0a10000 istore 2 ,contw +4f96 20204f99 branch l2cap_generate_config_req_done + +l2cap_generate_config_req_rfcomm: +4f97 580003e3 setarg l2cap_config_mtu_rfcomm +4f98 e0a10000 istore 2 ,contw + +l2cap_generate_config_req_done: +4f99 d840000c arg 0x0c ,temp +4f9a 6009026f storet 2 ,mem_l2cap_signal_tx_length +4f9b 204052c1 call l2cap_get_signal_tx_buff +4f9c 6801026f fetch 2 ,mem_l2cap_signal_tx_length +4f9d e0a10000 istore 2 ,contw +4f9e 18007e01 force l2cap_signal_channel ,pdata +4f9f e0a10000 istore 2 ,contw +4fa0 70028000 jam 0 ,mem_send_config_req + +l2cap_proc_signal_config_req_rtn: +4fa1 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp: +4fa2 18c08c01 increase 1 ,contr +4fa3 e8c10000 ifetch 2 ,contr +4fa4 1fe22200 copy pdata ,rega +4fa5 1a627e00 copy regc ,pdata +4fa6 9a262600 isub rega ,regc +4fa7 e8c10000 ifetch 2 ,contr +4fa8 1fe22200 copy pdata ,rega +4fa9 470ac022 bpatchx patch22_5 ,mem_patch22 +4faa 58000050 setarg l2cap_sdp_channel +4fab 9a267c00 isub rega ,null +4fac 2022cfba branch l2cap_proc_signal_config_rsp_sdp ,zero +4fad 58000051 setarg l2cap_rfcomm_channel +4fae 9a267c00 isub rega ,null +4faf 2022cfbe branch l2cap_proc_signal_config_rsp_rfcomm ,zero +4fb0 58000052 setarg l2cap_hid_control_channel +4fb1 9a267c00 isub rega ,null +4fb2 2022cfc2 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +4fb3 58000053 setarg l2cap_hid_interrupt_channel +4fb4 9a267c00 isub rega ,null +4fb5 2022cfc6 branch l2cap_proc_signal_config_rsp_hid_int ,zero +4fb6 18c08c02 increase 2 ,contr +4fb7 e8c10000 ifetch 2 ,contr +4fb8 98007c00 iforce null +4fb9 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_sdp: +4fba 6800c250 fetch 1 ,mem_sdp_state +4fbb 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fbc 6000c250 store 1 ,mem_sdp_state +4fbd 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_rfcomm: +4fbe 6800c251 fetch 1 ,mem_rfcomm_state +4fbf 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fc0 6000c251 store 1 ,mem_rfcomm_state +4fc1 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_hid_ctrl: +4fc2 6800c252 fetch 1 ,mem_hid_control_state +4fc3 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fc4 6000c252 store 1 ,mem_hid_control_state +4fc5 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_hid_int: +4fc6 6800c253 fetch 1 ,mem_hid_interrupt_state +4fc7 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fc8 6000c253 store 1 ,mem_hid_interrupt_state +4fc9 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp +4fca 20207d86 branch ui_ipc_send_event + +l2cap_proc_signal_disconnect_req: +4fcb e8c08000 ifetch 1 ,contr +4fcc 1fe20e00 copy pdata ,queue +4fcd e8c10000 ifetch 2 ,contr +4fce 1fe22200 copy pdata ,rega +4fcf 1a627e00 copy regc ,pdata +4fd0 9a262600 isub rega ,regc +4fd1 e8c10000 ifetch 2 ,contr +4fd2 1fe22200 copy pdata ,rega +4fd3 e8c10000 ifetch 2 ,contr +4fd4 1fe21600 copy pdata ,timeup +4fd5 1a220400 copy rega ,temp +4fd6 20407ea8 call save_cont_pointers +4fd7 470b4022 bpatchx patch22_6 ,mem_patch22 +4fd8 58000050 setarg l2cap_sdp_channel +4fd9 98467c00 isub temp ,null +4fda 2022cff2 branch l2cap_proc_signal_disconnect_req_sdp ,zero +4fdb 58000051 setarg l2cap_rfcomm_channel +4fdc 98467c00 isub temp ,null +4fdd 2022d002 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +4fde 58000052 setarg l2cap_hid_control_channel +4fdf 98467c00 isub temp ,null +4fe0 2022cfe6 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +4fe1 58000053 setarg l2cap_hid_interrupt_channel +4fe2 98467c00 isub temp ,null +4fe3 2022cfec branch l2cap_proc_signal_disconnect_req_hid_int ,zero +4fe4 20405062 call l2cap_reject_command +4fe5 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_hid_ctrl: +4fe6 19620400 copy timeup ,temp +4fe7 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4fe8 98467c00 isub temp ,null +4fe9 2022cff8 branch l2cap_disconnect_hid_control_now ,zero +4fea 20405062 call l2cap_reject_command +4feb 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_hid_int: +4fec 19620400 copy timeup ,temp +4fed 6801424e fetch 2 ,mem_hid_int_remote_cid +4fee 98467c00 isub temp ,null +4fef 2022cffa branch l2cap_disconnect_hid_interrupt_now ,zero +4ff0 20405062 call l2cap_reject_command +4ff1 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_sdp: +4ff2 19620400 copy timeup ,temp +4ff3 68014248 fetch 2 ,mem_sdp_remote_cid +4ff4 98467c00 isub temp ,null +4ff5 2022cffe branch l2cap_disconnect_sdp_now ,zero +4ff6 20405062 call l2cap_reject_command +4ff7 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_disconnect_hid_control_now: +4ff8 20405079 call l2cap_reset_hid_ctrl_state +4ff9 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_hid_interrupt_now: +4ffa 2040507f call l2cap_reset_hid_int_state +4ffb 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4ffc 203a500a branch l2cap_send_disconnect_rsp_pkt ,blank +4ffd 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_sdp_now: +4ffe 20405074 call l2cap_reset_sdp_channel_state +4fff 68008288 fetch 1 ,mem_upper_sm_ss +5000 243a500a nbranch l2cap_send_disconnect_rsp_pkt ,blank +5001 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_proc_signal_disconnect_req_rfcomm: +5002 19620400 copy timeup ,temp +5003 6801424a fetch 2 ,mem_rfcomm_remote_cid +5004 98467c00 isub temp ,null +5005 2022d008 branch l2cap_disconnect_rfcomm_now ,zero +5006 20405062 call l2cap_reject_command +5007 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_disconnect_rfcomm_now: +5008 2040506f call l2cap_reset_rfcomm_channel_state +5009 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_send_disconnect_rsp_pkt: +500a 20407ead call load_cont_pointers +500b 58000007 setarg signal_disconnect_rsp +500c e0a08000 istore 1 ,contw +500d 18e27e00 copy queue ,pdata +500e e0a08000 istore 1 ,contw +500f 58000004 setarg 0x0004 +5010 e0a10000 istore 2 ,contw +5011 1a227e00 copy rega ,pdata +5012 e0a10000 istore 2 ,contw +5013 19627e00 copy timeup ,pdata +5014 e0a10000 istore 2 ,contw +5015 18007e08 force 8 ,pdata +5016 20205019 branch l2cap_proc_signal_disconnect_req_rtn + +l2cap_proc_signal_disconnect_req_err_rtn: +5017 20407ead call load_cont_pointers +5018 20205019 branch l2cap_proc_signal_disconnect_req_rtn + +l2cap_proc_signal_disconnect_req_rtn: +5019 9a40a400 iadd regb ,regb +501a 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_disconnect_rsp: +501b e8c08000 ifetch 1 ,contr +501c 1fe20e00 copy pdata ,queue +501d e8c10000 ifetch 2 ,contr +501e 1fe22200 copy pdata ,rega +501f 1a627e00 copy regc ,pdata +5020 9a262600 isub rega ,regc +5021 e8c10000 ifetch 2 ,contr +5022 1fe21600 copy pdata ,timeup +5023 e8c10000 ifetch 2 ,contr +5024 1fe20400 copy pdata ,temp +5025 20407ea8 call save_cont_pointers +5026 470bc022 bpatchx patch22_7 ,mem_patch22 +5027 58000050 setarg l2cap_sdp_channel +5028 98467c00 isub temp ,null +5029 2022d035 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +502a 58000051 setarg l2cap_rfcomm_channel +502b 98467c00 isub temp ,null +502c 2022d03b branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +502d 58000052 setarg l2cap_hid_control_channel +502e 98467c00 isub temp ,null +502f 2022d041 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +5030 58000053 setarg l2cap_hid_interrupt_channel +5031 98467c00 isub temp ,null +5032 2022d047 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +5033 20405062 call l2cap_reject_command +5034 2020504f branch l2cap_proc_signal_disconnect_rsp_err_rtn + +l2cap_proc_signal_disconnect_rsp_sdp: +5035 18422200 copy temp ,rega +5036 19620400 copy timeup ,temp +5037 68014248 fetch 2 ,mem_sdp_remote_cid +5038 98467c00 isub temp ,null +5039 2042d074 call l2cap_reset_sdp_channel_state ,zero +503a 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_rfcomm: +503b 18422200 copy temp ,rega +503c 19620400 copy timeup ,temp +503d 6801424a fetch 2 ,mem_rfcomm_remote_cid +503e 98467c00 isub temp ,null +503f 2042d06f call l2cap_reset_rfcomm_channel_state ,zero +5040 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_hid_ctrl: +5041 18422200 copy temp ,rega +5042 19620400 copy timeup ,temp +5043 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +5044 98467c00 isub temp ,null +5045 2042d079 call l2cap_reset_hid_ctrl_state ,zero +5046 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_hid_int: +5047 18422200 copy temp ,rega +5048 19620400 copy timeup ,temp +5049 6801424e fetch 2 ,mem_hid_int_remote_cid +504a 98467c00 isub temp ,null +504b 2042d07f call l2cap_reset_hid_int_state ,zero +504c 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_rtn: +504d 20407ead call load_cont_pointers +504e 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_disconnect_rsp_err_rtn: +504f 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_echo_req: +5050 e8c08000 ifetch 1 ,contr +5051 1fe20e00 copy pdata ,queue +5052 e8c10000 ifetch 2 ,contr +5053 1fe22200 copy pdata ,rega +5054 98c08c00 iadd contr ,contr +5055 58000009 setarg 9 +5056 e0a08000 istore 1 ,contw +5057 18e27e00 copy queue ,pdata +5058 e0a08000 istore 1 ,contw +5059 18007e00 force 0x0000 ,pdata +505a e0a10000 istore 2 ,contw +505b 18007e04 force 4 ,pdata +505c 9a40a400 iadd regb ,regb +505d 1a627e00 copy regc ,pdata +505e 9a262600 isub rega ,regc +505f 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_echo_rsp: +5060 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_info_rsp: +5061 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_reject_command: +5062 18002400 force 0 ,regb +5063 204052c3 call l2cap_get_signal_tx_payload +5064 58000001 setarg signal_cmd_reject +5065 e0a08000 istore 1 ,contw +5066 18e27e00 copy queue ,pdata +5067 e0a08000 istore 1 ,contw +5068 58000002 setarg 2 +5069 e0a10000 istore 2 ,contw +506a 58000000 setarg cmd_not_understood +506b e0a10000 istore 2 ,contw +506c 1a40a406 increase 6 ,regb +506d da600004 arg 4 ,regc +506e 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_reset_rfcomm_channel_state: +506f 58000000 setarg 0 +5070 6001027b store 2 ,mem_rfcomm_tx_pkt_length +5071 6001424a store 2 ,mem_rfcomm_remote_cid +5072 70425100 jam 0 ,mem_rfcomm_state +5073 20600000 rtn + +l2cap_reset_sdp_channel_state: +5074 58000000 setarg 0 +5075 60010275 store 2 ,mem_sdp_tx_pkt_length +5076 60014248 store 2 ,mem_sdp_remote_cid +5077 70425000 jam 0 ,mem_sdp_state +5078 20600000 rtn + +l2cap_reset_hid_ctrl_state: +5079 58000000 setarg 0 +507a 6001424c store 2 ,mem_hid_ctrl_remote_cid +507b 70425200 jam 0 ,mem_hid_control_state +507c 6800c253 fetch 1 ,mem_hid_interrupt_state +507d c0005085 beq 0 ,l2cap_reset_hid_disconnected +507e 20600000 rtn + +l2cap_reset_hid_int_state: +507f 58000000 setarg 0 +5080 6001424e store 2 ,mem_hid_int_remote_cid +5081 70425300 jam 0 ,mem_hid_interrupt_state +5082 6800c252 fetch 1 ,mem_hid_control_state +5083 c0005085 beq 0 ,l2cap_reset_hid_disconnected +5084 20600000 rtn + +l2cap_reset_hid_disconnected: +5085 700a9907 jam bt_evt_hid_disconnected ,mem_fifo_temp +5086 20207d86 branch ui_ipc_send_event + +l2cap_disconnect_interrupt_req: +5087 6800827f fetch 1 ,mem_control_tasks +5088 793ffe00 set0 l2cap_disconnect_interrupt ,pdata +5089 6000827f store 1 ,mem_control_tasks +508a 6801424e fetch 2 ,mem_hid_int_remote_cid +508b 207a0000 rtn blank +508c 204052b8 call l2cap_malloc_signal_channel +508d 6801424e fetch 2 ,mem_hid_int_remote_cid +508e 1fe22200 copy pdata ,rega +508f 18002453 force l2cap_hid_interrupt_channel ,regb +5090 2020509a branch l2cap_generate_disconnect_req + +l2cap_disconnect_control_req: +5091 6800827f fetch 1 ,mem_control_tasks +5092 793ffe07 set0 l2cap_disconnect_control ,pdata +5093 6000827f store 1 ,mem_control_tasks +5094 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +5095 207a0000 rtn blank +5096 204052b8 call l2cap_malloc_signal_channel +5097 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +5098 1fe22200 copy pdata ,rega +5099 18002452 force l2cap_hid_control_channel ,regb + +l2cap_generate_disconnect_req: +509a 2040523a call l2cap_get_req_id +509b 204052c3 call l2cap_get_signal_tx_payload +509c 18007e06 force signal_disconnect_req ,pdata +509d e0a08000 istore 1 ,contw +509e 6800c255 fetch 1 ,mem_ml2cap_comm_id +509f e0a08000 istore 1 ,contw +50a0 58000004 setarg 0x0004 +50a1 e0a10000 istore 2 ,contw +50a2 1a227e00 copy rega ,pdata +50a3 e0a10000 istore 2 ,contw +50a4 1a427e00 copy regb ,pdata +50a5 e0a10000 istore 2 ,contw +50a6 18000408 force 0x08 ,temp +50a7 202050de branch ml2cap_send_signal + +ml2cap_send_signal_connect_req: +50a8 470c4023 bpatchx patch23_0 ,mem_patch23 +50a9 2040523a call l2cap_get_req_id +50aa 204052c3 call l2cap_get_signal_tx_payload +50ab 58000002 setarg signal_connect_req +50ac e0a08000 istore 1 ,contw +50ad 6800c255 fetch 1 ,mem_ml2cap_comm_id +50ae e0a08000 istore 1 ,contw +50af 58000004 setarg 0x0004 +50b0 e0a10000 istore 2 ,contw +50b1 18427e00 copy temp ,pdata +50b2 e0a10000 istore 2 ,contw +50b3 19627e00 copy timeup ,pdata +50b4 e0a10000 istore 2 ,contw +50b5 d8400008 arg 8 ,temp +50b6 202050de branch ml2cap_send_signal + +ml2cap_send_signal_config_req: +50b7 470cc023 bpatchx patch23_1 ,mem_patch23 +50b8 2040523a call l2cap_get_req_id +50b9 204052c3 call l2cap_get_signal_tx_payload +50ba 58000004 setarg signal_config_req +50bb e0a08000 istore 1 ,contw +50bc 6800c255 fetch 1 ,mem_ml2cap_comm_id +50bd e0a08000 istore 1 ,contw +50be 58000008 setarg 0x0008 +50bf e0a10000 istore 2 ,contw +50c0 18427e00 copy temp ,pdata +50c1 e0a10000 istore 2 ,contw +50c2 58000000 setarg 0x0000 +50c3 e0a10000 istore 2 ,contw +50c4 58000001 setarg 0x01 +50c5 e0a08000 istore 1 ,contw +50c6 58000002 setarg 0x02 +50c7 e0a08000 istore 1 ,contw +50c8 580003e3 setarg l2cap_config_mtu_rfcomm +50c9 e0a10000 istore 2 ,contw +50ca d840000c arg 0xc ,temp +50cb 202050de branch ml2cap_send_signal + +ml2cap_send_signal_disconn_req: +50cc 470d4023 bpatchx patch23_2 ,mem_patch23 +50cd 2040523a call l2cap_get_req_id +50ce 204052c3 call l2cap_get_signal_tx_payload +50cf 58000006 setarg signal_disconnect_req +50d0 e0a08000 istore 1 ,contw +50d1 6800c255 fetch 1 ,mem_ml2cap_comm_id +50d2 1fe0fe01 increase 1 ,pdata +50d3 18a22200 copy contw ,rega +50d4 6000c255 store 1 ,mem_ml2cap_comm_id +50d5 1a220a00 copy rega ,contw +50d6 e0a08000 istore 1 ,contw +50d7 58000004 setarg 0x0004 +50d8 e0a10000 istore 2 ,contw +50d9 18427e00 copy temp ,pdata +50da e0a10000 istore 2 ,contw +50db 19627e00 copy timeup ,pdata +50dc e0a10000 istore 2 ,contw +50dd d8400008 arg 0x8 ,temp + +ml2cap_send_signal: +50de 6009026f storet 2 ,mem_l2cap_signal_tx_length +50df 18427e00 copy temp ,pdata +50e0 203a5264 branch l2cap_malloc_discard ,blank +50e1 204052c1 call l2cap_get_signal_tx_buff +50e2 6801026f fetch 2 ,mem_l2cap_signal_tx_length +50e3 e0a10000 istore 2 ,contw +50e4 18007e01 force l2cap_signal_channel ,pdata +50e5 e0a10000 istore 2 ,contw +50e6 20600000 rtn + +msdp_send_req_done: +50e7 68010275 fetch 2 ,mem_sdp_tx_pkt_length +50e8 203a2a8c branch assert ,blank +50e9 204052ce call l2cap_get_sdp_tx_buff +50ea 68010275 fetch 2 ,mem_sdp_tx_pkt_length +50eb e0a10000 istore 2 ,contw +50ec 68014248 fetch 2 ,mem_sdp_remote_cid +50ed e0a10000 istore 2 ,contw +50ee 20600000 rtn + +ml2cap_rx_multiplexing: +50ef 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +50f0 203a4dfc branch l2cap_rx_reset_state ,blank +50f1 470dc023 bpatchx patch23_3 ,mem_patch23 +50f2 68008268 fetch 1 ,mem_l2cap_rx_cid +50f3 c000d0f9 beq l2cap_signal_channel ,ml2cap_call_proc_signal +50f4 c0284de8 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +50f5 c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +50f6 c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +50f7 c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +50f8 20204dfc branch l2cap_rx_reset_state + +ml2cap_call_proc_signal: +50f9 470e4023 bpatchx patch23_4 ,mem_patch23 +50fa 204052b8 call l2cap_malloc_signal_channel +50fb 18002400 force 0 ,regb +50fc 204052c3 call l2cap_get_signal_tx_payload +50fd 1fe20a00 copy pdata ,contw +50fe 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +50ff 1fe22600 copy pdata ,regc +5100 68010264 fetch 2 ,mem_l2cap_payload_ptr +5101 98000c00 iforce contr + +ml2cap_proc_one_comm_loop: +5102 20405108 call ml2cap_proc_one_comm +5103 1a60a7fc increase -4 ,regc +5104 2422d102 nbranch ml2cap_proc_one_comm_loop ,zero +5105 1a420400 copy regb ,temp +5106 204050de call ml2cap_send_signal +5107 20204dfc branch l2cap_rx_reset_state + +ml2cap_proc_one_comm: +5108 e8c08000 ifetch 1 ,contr +5109 c0015113 beq signal_connect_req ,ml2cap_proc_signal_connect_req +510a c000d116 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +510b c001d120 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +510c c002d15c beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +510d c002518e beq signal_config_req ,ml2cap_proc_signal_config_req +510e c003d213 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +510f c00351e1 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +5110 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req +5111 c0054e3a beq signal_info_req ,ml2cap_proc_signal_info_req +5112 2020522e branch ml2cap_proc_send_reject + +ml2cap_proc_signal_connect_req: +5113 20407ea8 call save_cont_pointers +5114 20407ead call load_cont_pointers +5115 20204e51 branch l2cap_proc_signal_connect_req + +ml2cap_proc_signal_cmd_reject: +5116 e8c08000 ifetch 1 ,contr +5117 1fe20e00 copy pdata ,queue +5118 e8c10000 ifetch 2 ,contr +5119 1fe22200 copy pdata ,rega +511a 1a627e00 copy regc ,pdata +511b 9a262600 isub rega ,regc + +mvptr: +511c e8c08000 ifetch 1 ,contr +511d 1a20a3ff increase -1 ,rega +511e 2422d11c nbranch mvptr ,zero +511f 20600000 rtn + +ml2cap_proc_signal_connect_rsp: +5120 e8c08000 ifetch 1 ,contr +5121 1fe20e00 copy pdata ,queue +5122 e8c10000 ifetch 2 ,contr +5123 1fe22200 copy pdata ,rega +5124 e8c10000 ifetch 2 ,contr +5125 1fe21600 copy pdata ,timeup +5126 e8c10000 ifetch 2 ,contr +5127 1fe20400 copy pdata ,temp +5128 e8c10000 ifetch 2 ,contr +5129 1fe67c00 sub pdata ,0 ,null +512a 2022d132 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +512b c001512e beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +512c c002512e beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +512d 20205130 branch ml2cap_proc_signal_connect_rsp_mnosucc + +ml2cap_proc_signal_connect_refused_result: +512e 700a9916 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +512f 20407d86 call ui_ipc_send_event + +ml2cap_proc_signal_connect_rsp_mnosucc: +5130 e8c10000 ifetch 2 ,contr +5131 20205159 branch mnosucc + +ml2cap_proc_signal_connect_rsp_sucessful: +5132 20407ea8 call save_cont_pointers +5133 470ec023 bpatchx patch23_5 ,mem_patch23 +5134 58000050 setarg l2cap_sdp_channel +5135 98467c00 isub temp ,null +5136 2022d141 branch ml2cap_proc_signal_connect_rsp_sdp ,zero +5137 58000051 setarg l2cap_rfcomm_channel +5138 98467c00 isub temp ,null +5139 2022d147 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +513a 58000053 setarg l2cap_hid_interrupt_channel +513b 98467c00 isub temp ,null +513c 2022d153 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +513d 58000052 setarg l2cap_hid_control_channel +513e 98467c00 isub temp ,null +513f 2022d14d branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +5140 20205159 branch mnosucc + +ml2cap_proc_signal_connect_rsp_sdp: +5141 19627e00 copy timeup ,pdata +5142 60014248 store 2 ,mem_sdp_remote_cid +5143 6800c250 fetch 1 ,mem_sdp_state +5144 79207e01 set1 l2cap_channel_state_conn_res +5145 6000c250 store 1 ,mem_sdp_state +5146 20205158 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_rfcomm: +5147 19627e00 copy timeup ,pdata +5148 6001424a store 2 ,mem_rfcomm_remote_cid +5149 6800c251 fetch 1 ,mem_rfcomm_state +514a 79207e01 set1 l2cap_channel_state_conn_res +514b 6000c251 store 1 ,mem_rfcomm_state +514c 20205158 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_hid_ctrl: +514d 19627e00 copy timeup ,pdata +514e 6001424c store 2 ,mem_hid_ctrl_remote_cid +514f 6800c252 fetch 1 ,mem_hid_control_state +5150 79207e01 set1 l2cap_channel_state_conn_res +5151 6000c252 store 1 ,mem_hid_control_state +5152 20205158 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_hid_int: +5153 19627e00 copy timeup ,pdata +5154 6001424e store 2 ,mem_hid_int_remote_cid +5155 6800c253 fetch 1 ,mem_hid_interrupt_state +5156 79207e01 set1 l2cap_channel_state_conn_res +5157 6000c253 store 1 ,mem_hid_interrupt_state + +mnosucc1: +5158 20407ead call load_cont_pointers + +mnosucc: +5159 1a627e00 copy regc ,pdata +515a 9a262600 isub rega ,regc +515b 20600000 rtn + +ml2cap_proc_signal_config_rsp: +515c e8c08000 ifetch 1 ,contr +515d 1fe20e00 copy pdata ,queue +515e e8c10000 ifetch 2 ,contr +515f 1fe22200 copy pdata ,rega +5160 1a627e00 copy regc ,pdata +5161 9a262600 isub rega ,regc +5162 e8c10000 ifetch 2 ,contr +5163 1fe21600 copy pdata ,timeup +5164 e8c10000 ifetch 2 ,contr +5165 e8c10000 ifetch 2 ,contr +5166 243a5188 nbranch mcrsdone1 ,blank +5167 20407ea8 call save_cont_pointers +5168 19620400 copy timeup ,temp +5169 470f4023 bpatchx patch23_6 ,mem_patch23 +516a 58000050 setarg l2cap_sdp_channel +516b 98467c00 isub temp ,null +516c 2022d176 branch ml2cap_proc_signal_config_rsp_sdp ,zero +516d 58000051 setarg l2cap_rfcomm_channel +516e 98467c00 isub temp ,null +516f 2022d17a branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +5170 58000052 setarg l2cap_hid_control_channel +5171 98467c00 isub temp ,null +5172 2022d17e branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +5173 58000053 setarg l2cap_hid_interrupt_channel +5174 98467c00 isub temp ,null +5175 2022d182 branch ml2cap_proc_signal_config_rsp_hid_int ,zero + +ml2cap_proc_signal_config_rsp_sdp: +5176 6800c250 fetch 1 ,mem_sdp_state +5177 79207e05 set1 l2cap_channel_state_rcv_cfg_res +5178 6000c250 store 1 ,mem_sdp_state +5179 20600000 rtn + +ml2cap_proc_signal_config_rsp_rfcomm: +517a 6800c251 fetch 1 ,mem_rfcomm_state +517b 79207e05 set1 l2cap_channel_state_rcv_cfg_res +517c 6000c251 store 1 ,mem_rfcomm_state +517d 20600000 rtn + +ml2cap_proc_signal_config_rsp_hid_ctrl: +517e 6800c252 fetch 1 ,mem_hid_control_state +517f 79207e05 set1 l2cap_channel_state_rcv_cfg_res +5180 6000c252 store 1 ,mem_hid_control_state +5181 20600000 rtn + +ml2cap_proc_signal_config_rsp_hid_int: +5182 6800c253 fetch 1 ,mem_hid_interrupt_state +5183 79207e05 set1 l2cap_channel_state_rcv_cfg_res +5184 6000c253 store 1 ,mem_hid_interrupt_state +5185 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp +5186 20207d86 branch ui_ipc_send_event + +mcfrsdone: +5187 20407ead call load_cont_pointers + +mcrsdone1: +5188 1a20a3fa increase -6 ,rega + +mloop2: +5189 2022d18d branch mcrsdone ,zero +518a 18c08c01 increase 1 ,contr +518b 1a20a3ff increase -1 ,rega +518c 20205189 branch mloop2 + +mcrsdone: +518d 20600000 rtn + +ml2cap_proc_signal_config_req: +518e e8c08000 ifetch 1 ,contr +518f 1fe20e00 copy pdata ,queue +5190 e8c10000 ifetch 2 ,contr +5191 1fe22200 copy pdata ,rega +5192 1a627e00 copy regc ,pdata +5193 9a262600 isub rega ,regc +5194 e8c10000 ifetch 2 ,contr +5195 18c08c02 increase 2 ,contr +5196 1fe20400 copy pdata ,temp +5197 58000005 setarg signal_config_rsp +5198 e0a08000 istore 1 ,contw +5199 18e27e00 copy queue ,pdata +519a e0a08000 istore 1 ,contw +519b 1a20a202 increase 2 ,rega +519c 1a227e00 copy rega ,pdata +519d e0a10000 istore 2 ,contw +519e 20407ea8 call save_cont_pointers +519f 470fc023 bpatchx patch23_7 ,mem_patch23 +51a0 58000050 setarg l2cap_sdp_channel +51a1 98467c00 isub temp ,null +51a2 2022d1ad branch ml2cap_proc_signal_config_req_sdp ,zero +51a3 58000051 setarg l2cap_rfcomm_channel +51a4 98467c00 isub temp ,null +51a5 2022d1be branch ml2cap_proc_signal_config_req_rfcomm ,zero +51a6 58000052 setarg l2cap_hid_control_channel +51a7 98467c00 isub temp ,null +51a8 2022d1c4 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +51a9 58000053 setarg l2cap_hid_interrupt_channel +51aa 98467c00 isub temp ,null +51ab 2022d1ca branch ml2cap_proc_signal_config_req_hid_int ,zero +51ac 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_sdp: +51ad 6800c250 fetch 1 ,mem_sdp_state +51ae 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51af 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51b0 6000c250 store 1 ,mem_sdp_state +51b1 c28151bb bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +51b2 6808827f fetcht 1 ,mem_control_tasks +51b3 79200406 set1 l2cap_init_config_req ,temp +51b4 6008827f storet 1 ,mem_control_tasks +51b5 18e27e00 copy queue ,pdata +51b6 1fe0fe01 increase 1 ,pdata +51b7 60008281 store 1 ,mem_config_identifier +51b8 6800c250 fetch 1 ,mem_sdp_state +51b9 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +51ba 6000c250 store 1 ,mem_sdp_state + +ml2cap_proc_signal_config_req_sdp_nsndreq: +51bb 68014248 fetch 2 ,mem_sdp_remote_cid +51bc 60010282 store 2 ,mem_config_req_dest_cid +51bd 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_rfcomm: +51be 6800c251 fetch 1 ,mem_rfcomm_state +51bf 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51c0 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51c1 6000c251 store 1 ,mem_rfcomm_state +51c2 6801424a fetch 2 ,mem_rfcomm_remote_cid +51c3 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_hid_ctrl: +51c4 6800c252 fetch 1 ,mem_hid_control_state +51c5 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51c6 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51c7 6000c252 store 1 ,mem_hid_control_state +51c8 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +51c9 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_hid_int: +51ca 6800c253 fetch 1 ,mem_hid_interrupt_state +51cb 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51cc 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51cd 6000c253 store 1 ,mem_hid_interrupt_state +51ce 6801424e fetch 2 ,mem_hid_int_remote_cid + +mcfgrq_done: +51cf 1fe21600 copy pdata ,timeup +51d0 20407ead call load_cont_pointers +51d1 19627e00 copy timeup ,pdata +51d2 e0a10000 istore 2 ,contw +51d3 18007e00 force 0x0000 ,pdata +51d4 e0a10000 istore 2 ,contw +51d5 18007e00 force 0x0000 ,pdata +51d6 e0a10000 istore 2 ,contw +51d7 18007e0a force 10 ,pdata +51d8 9a40a400 iadd regb ,regb +51d9 1a20a3fa increase -6 ,rega + +mloop1: +51da 2022d1e0 branch mcrqdone ,zero +51db e8c08000 ifetch 1 ,contr +51dc e0a08000 istore 1 ,contw +51dd 1a40a401 increase 1 ,regb +51de 1a20a3ff increase -1 ,rega +51df 202051da branch mloop1 + +mcrqdone: +51e0 20600000 rtn + +ml2cap_proc_signal_disconn_req: +51e1 e8c08000 ifetch 1 ,contr +51e2 1fe20e00 copy pdata ,queue +51e3 e8c10000 ifetch 2 ,contr +51e4 1fe22200 copy pdata ,rega +51e5 1a627e00 copy regc ,pdata +51e6 9a262600 isub rega ,regc +51e7 e8c10000 ifetch 2 ,contr +51e8 1fe22200 copy pdata ,rega +51e9 e8c10000 ifetch 2 ,contr +51ea 1fe21600 copy pdata ,timeup +51eb 20407ea8 call save_cont_pointers +51ec 47104024 bpatchx patch24_0 ,mem_patch24 +51ed 58000050 setarg l2cap_sdp_channel +51ee 1a220400 copy rega ,temp +51ef 98467c00 isub temp ,null +51f0 2022d1fa branch ml2cap_proc_signal_disconn_sdp ,zero +51f1 58000052 setarg l2cap_hid_control_channel +51f2 1a220400 copy rega ,temp +51f3 98467c00 isub temp ,null +51f4 2022d1ff branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +51f5 58000053 setarg l2cap_hid_interrupt_channel +51f6 1a220400 copy rega ,temp +51f7 98467c00 isub temp ,null +51f8 2022d201 branch ml2cap_proc_signal_disconn_hid_int ,zero +51f9 20205203 branch mclsrfc + +ml2cap_proc_signal_disconn_sdp: +51fa 58000000 setarg 0x0000 +51fb 60010275 store 2 ,mem_sdp_tx_pkt_length +51fc 60014248 store 2 ,mem_sdp_remote_cid +51fd 6000c250 store 1 ,mem_sdp_state +51fe 20205205 branch mclssdp + +ml2cap_proc_signal_disconn_hid_ctrl: +51ff 20405079 call l2cap_reset_hid_ctrl_state +5200 20205205 branch mclssdp + +ml2cap_proc_signal_disconn_hid_int: +5201 2040507f call l2cap_reset_hid_int_state +5202 20205205 branch mclssdp + +mclsrfc: +5203 58000000 setarg 0x0000 +5204 6001027b store 2 ,mem_rfcomm_tx_pkt_length + +mclssdp: +5205 20407ead call load_cont_pointers +5206 58000007 setarg signal_disconnect_rsp +5207 e0a08000 istore 1 ,contw +5208 18e27e00 copy queue ,pdata +5209 e0a08000 istore 1 ,contw +520a 58000004 setarg 0x0004 +520b e0a10000 istore 2 ,contw +520c 1a227e00 copy rega ,pdata +520d e0a10000 istore 2 ,contw +520e 19627e00 copy timeup ,pdata +520f e0a10000 istore 2 ,contw +5210 18007e08 force 8 ,pdata +5211 9a40a400 iadd regb ,regb +5212 20600000 rtn + +ml2cap_proc_signal_disconn_rsp: +5213 e8c08000 ifetch 1 ,contr +5214 1fe20e00 copy pdata ,queue +5215 e8c10000 ifetch 2 ,contr +5216 1fe22200 copy pdata ,rega +5217 e8c10000 ifetch 2 ,contr +5218 1fe21600 copy pdata ,timeup +5219 e8c10000 ifetch 2 ,contr +521a 1fe20400 copy pdata ,temp +521b 20407ea8 call save_cont_pointers +521c 4710c024 bpatchx patch24_1 ,mem_patch24 +521d 6800c255 fetch 1 ,mem_ml2cap_comm_id +521e a8e1fe00 icompare 0xff ,queue +521f 2420d22a nbranch mdisdone ,true +5220 58000050 setarg l2cap_sdp_channel +5221 98467c00 isub temp ,null +5222 2022d227 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +5223 58000051 setarg l2cap_rfcomm_channel +5224 98467c00 isub temp ,null +5225 2022d22a branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +5226 2020522a branch mdisdone + +ml2cap_proc_signal_disconn_rsp_sdp: +5227 70424800 jam 0 ,mem_sdp_remote_cid +5228 70425000 jam 0 ,mem_sdp_state +5229 2020522a branch mdisdone + +ml2cap_proc_signal_disconn_rsp_rfcomm: + +mdisdone: +522a 20407ead call load_cont_pointers +522b 1a627e00 copy regc ,pdata +522c 9a262600 isub rega ,regc +522d 20600000 rtn + +ml2cap_proc_send_reject: +522e 58000001 setarg signal_cmd_reject +522f e0a08000 istore 1 ,contw +5230 e8c08000 ifetch 1 ,contr +5231 e0a08000 istore 1 ,contw +5232 58000002 setarg 0x0002 +5233 e0a10000 istore 2 ,contw +5234 58000000 setarg 0x0000 +5235 e0a10000 istore 2 ,contw +5236 58000006 setarg 0x0006 +5237 9a40a400 iadd regb ,regb +5238 18002604 force 4 ,regc +5239 20600000 rtn + +l2cap_get_req_id: +523a 6800c255 fetch 1 ,mem_ml2cap_comm_id +523b 1fe0fe01 increase 1 ,pdata +523c c080523e bne 0 ,l2cap_get_req_id_ok +523d 1fe0fe01 increase 1 ,pdata + +l2cap_get_req_id_ok: +523e 6000c255 store 1 ,mem_ml2cap_comm_id +523f 20600000 rtn + +l2cap_malloc: +5240 47114024 bpatchx patch24_2 ,mem_patch24 +5241 da400000 arg 0 ,regb +5242 2040526e call l2cap_malloc_is_fifo_full +5243 243a2a8c nbranch assert ,blank +5244 2040527e call l2cap_malloc_get_full_map +5245 da401800 arg mem_tx_buff0 ,regb +5246 d8e00000 arg 0 ,queue + +l2cap_malloc_loop: +5247 6808c256 fetcht 1 ,mem_used_map +5248 a84fffff qisolate1 temp +5249 2020d24f branch l2cap_malloc_next ,true +524a 204052a0 call l2cap_malloc_enough +524b 19667c00 sub timeup ,0 ,null +524c 2021524f branch l2cap_malloc_next ,positive +524d 20405288 call l2cap_malloc_into_fifo +524e 20205255 branch l2cap_malloc_rtn + +l2cap_malloc_next: +524f 1a40a480 increase 128 ,regb +5250 18e08e01 increase 1 ,queue +5251 58000008 setarg 8 +5252 98e67c00 isub queue ,null +5253 20215247 branch l2cap_malloc_loop ,positive +5254 da400000 arg 0 ,regb + +l2cap_malloc_rtn: +5255 1a427e00 copy regb ,pdata +5256 203a2a8c branch assert ,blank +5257 20600000 rtn + +l2cap_malloc_fifo_out: +5258 4711c024 bpatchx patch24_3 ,mem_patch24 +5259 20405277 call l2cap_malloc_fifo_get_first_ptr +525a 18c08c01 increase 1 ,contr +525b e8c10000 ifetch 2 ,contr +525c 20600000 rtn + +l2cap_malloc_free: +525d 47124024 bpatchx patch24_4 ,mem_patch24 +525e 20405277 call l2cap_malloc_fifo_get_first_ptr +525f 18c20a00 copy contr ,contw +5260 18c20400 copy contr ,temp +5261 58000000 setarg 0 +5262 e0a18000 istore 3 ,contw +5263 20600000 rtn + +l2cap_malloc_discard: +5264 4712c024 bpatchx patch24_5 ,mem_patch24 +5265 20405274 call l2cap_malloc_is_fifo_empty +5266 203a2a8c branch assert ,blank +5267 6801c25d fetch 3 ,mem_tx_fifo2 +5268 6001c260 store 3 ,mem_tx_fifo3 +5269 6801c25a fetch 3 ,mem_tx_fifo1 +526a 6001c25d store 3 ,mem_tx_fifo2 +526b 6801c257 fetch 3 ,mem_tx_fifo0 +526c 6001c25a store 3 ,mem_tx_fifo1 +526d 20600000 rtn + +l2cap_malloc_is_fifo_full: +526e 47134024 bpatchx patch24_6 ,mem_patch24 +526f 6801c257 fetch 3 ,mem_tx_fifo0 +5270 20600000 rtn + +l2cap_malloc_is_fifo_nearly_full: +5271 4713c024 bpatchx patch24_7 ,mem_patch24 +5272 6801c25a fetch 3 ,mem_tx_fifo1 +5273 20600000 rtn + +l2cap_malloc_is_fifo_empty: +5274 47144025 bpatchx patch25_0 ,mem_patch25 +5275 6801c260 fetch 3 ,mem_tx_fifo3 +5276 20600000 rtn + +l2cap_malloc_fifo_get_first_ptr: +5277 20405274 call l2cap_malloc_is_fifo_empty +5278 203a2a8c branch assert ,blank +5279 d8c04257 arg mem_tx_fifo0 ,contr + +l2cap_malloc_free_loop: +527a e8c18000 ifetch 3 ,contr +527b 203a527a branch l2cap_malloc_free_loop ,blank +527c 18c08dfd increase -3 ,contr +527d 20600000 rtn + +l2cap_malloc_get_full_map: +527e 4714c025 bpatchx patch25_1 ,mem_patch25 +527f df200004 arg 4 ,loopcnt +5280 d8c04257 arg mem_tx_fifo0_map ,contr +5281 d8400000 arg 0 ,temp + +l2cap_malloc_get_full_map_loop: +5282 e8c18000 ifetch 3 ,contr +5283 1fe17eff and pdata ,0xff ,pdata +5284 98418400 ior temp ,temp +5285 c2005282 loop l2cap_malloc_get_full_map_loop +5286 6008c256 storet 1 ,mem_used_map +5287 20600000 rtn + +l2cap_malloc_into_fifo: +5288 47154025 bpatchx patch25_2 ,mem_patch25 +5289 2040526e call l2cap_malloc_is_fifo_full +528a 243a2a8c nbranch assert ,blank +528b 20405274 call l2cap_malloc_is_fifo_empty +528c 203a5295 branch l2cap_malloc_into_fifo_no_push ,blank +528d 6801c25a fetch 3 ,mem_tx_fifo1 +528e 6001c257 store 3 ,mem_tx_fifo0 +528f e8c18000 ifetch 3 ,contr +5290 e0a18000 istore 3 ,contw +5291 e8c18000 ifetch 3 ,contr +5292 e0a18000 istore 3 ,contw +5293 58000000 setarg 0 +5294 e0a18000 istore 3 ,contw + +l2cap_malloc_into_fifo_no_push: +5295 d8400000 arg 0 ,temp +5296 19627e00 copy timeup ,pdata +5297 98e0fe00 iadd queue ,pdata + +l2cap_malloc_into_fifo_loop: +5298 f9200400 qset1 temp +5299 18e08e01 increase 1 ,queue +529a 98e67c00 isub queue ,null +529b 2422d298 nbranch l2cap_malloc_into_fifo_loop ,zero +529c 1a4d7e00 lshift8 regb ,pdata +529d 9841fe00 ior temp ,pdata +529e 6001c260 store 3 ,mem_tx_fifo3 +529f 20600000 rtn + +l2cap_malloc_enough: +52a0 4715c025 bpatchx patch25_3 ,mem_patch25 +52a1 2040527e call l2cap_malloc_get_full_map +52a2 18e22600 copy queue ,regc +52a3 d8400000 arg 0 ,temp +52a4 d9600000 arg 0 ,timeup + +l2cap_malloc_enough_loop: +52a5 18e27e00 copy queue ,pdata +52a6 c00452b0 beq 8 ,l2cap_malloc_enough_end +52a7 6800c256 fetch 1 ,mem_used_map +52a8 afefffff qisolate1 pdata +52a9 2020d2b0 branch l2cap_malloc_enough_end ,true +52aa 18408480 increase 128 ,temp +52ab 18e08e01 increase 1 ,queue +52ac 1a227e00 copy rega ,pdata +52ad 98467c00 isub temp ,null +52ae 2022d2b0 branch l2cap_malloc_enough_end ,zero +52af 202152a5 branch l2cap_malloc_enough_loop ,positive + +l2cap_malloc_enough_end: +52b0 18427e00 copy temp ,pdata +52b1 9a267c00 isub rega ,null +52b2 242152b6 nbranch l2cap_malloc_enough_rtn ,positive +52b3 18e27e00 copy queue ,pdata +52b4 1a620400 copy regc ,temp +52b5 98461600 isub temp ,timeup + +l2cap_malloc_enough_rtn: +52b6 1a620e00 copy regc ,queue +52b7 20600000 rtn + +l2cap_malloc_signal_channel: +52b8 47164025 bpatchx patch25_4 ,mem_patch25 +52b9 da20007f arg l2cap_signal_malloc_size ,rega +52ba 20405240 call l2cap_malloc +52bb 6001026b store 2 ,mem_l2cap_signal_tx_buff_ptr +52bc 1fe0fe04 increase 4 ,pdata +52bd 6001026d store 2 ,mem_l2cap_signal_tx_payload_ptr +52be 58000000 setarg 0 +52bf 6001026f store 2 ,mem_l2cap_signal_tx_length +52c0 20600000 rtn + +l2cap_get_signal_tx_buff: +52c1 6801026b fetch 2 ,mem_l2cap_signal_tx_buff_ptr +52c2 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_get_signal_tx_payload: +52c3 6801026d fetch 2 ,mem_l2cap_signal_tx_payload_ptr +52c4 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_malloc_sdp_channel: +52c5 4716c025 bpatchx patch25_5 ,mem_patch25 +52c6 da2000fa arg sdp_malloc_size ,rega +52c7 20405240 call l2cap_malloc +52c8 60010271 store 2 ,mem_sdp_tx_buff_ptr +52c9 1fe0fe04 increase 4 ,pdata +52ca 60010273 store 2 ,mem_sdp_tx_payload_ptr +52cb 58000000 setarg 0 +52cc 60010275 store 2 ,mem_sdp_tx_pkt_length +52cd 20600000 rtn + +l2cap_get_sdp_tx_buff: +52ce 68010271 fetch 2 ,mem_sdp_tx_buff_ptr +52cf 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_get_sdp_tx_payload: +52d0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr +52d1 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_malloc_rfcomm_channel: +52d2 47174025 bpatchx patch25_6 ,mem_patch25 +52d3 20407e7c call push_stack +52d4 70028401 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +52d5 2040526e call l2cap_malloc_is_fifo_full +52d6 247a0000 nrtn blank +52d7 da20007f arg rfcomm_malloc_size ,rega +52d8 20405240 call l2cap_malloc +52d9 60010277 store 2 ,mem_rfcomm_tx_buff_ptr +52da 1fe0fe04 increase 4 ,pdata +52db 60010279 store 2 ,mem_rfcomm_tx_payload_ptr +52dc 58000000 setarg 0 +52dd 6001027b store 2 ,mem_rfcomm_tx_pkt_length +52de 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +52df 20207e8c branch pop_stack + +l2cap_get_rfcomm_tx_buff: +52e0 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr +52e1 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_util_pdata_to_contw: +52e2 203a2a8c branch assert ,blank +52e3 1fe20a00 copy pdata ,contw +52e4 20600000 rtn + +l2cap_lpm_save_calc_len: +52e5 4717c025 bpatchx patch25_7 ,mem_patch25 +52e6 da400000 arg 0 ,regb +52e7 da204257 arg mem_tx_fifo0_map ,rega +52e8 1a20a3fe increase -2 ,rega + +l2cap_lpm_save_calc_len_loop: +52e9 1a20a202 increase 2 ,rega +52ea 58004263 setarg mem_tx_fifo_end +52eb 9a267c00 isub rega ,null +52ec 2022d2f5 branch l2cap_lpm_save_calc_len_end ,zero +52ed ea208000 ifetch 1 ,rega +52ee 1a20a201 increase 1 ,rega +52ef 203a52e9 branch l2cap_lpm_save_calc_len_loop ,blank +52f0 ea290000 ifetcht 2 ,rega +52f1 e8410000 ifetch 2 ,temp +52f2 9a40a400 iadd regb ,regb +52f3 1a40a404 increase 4 ,regb +52f4 202052e9 branch l2cap_lpm_save_calc_len_loop + +l2cap_lpm_save_calc_len_end: +52f5 1a427e00 copy regb ,pdata +52f6 20600000 rtn + +l2cap_lpm_get_wake_lock: +52f7 d8e0000c arg wake_lock_l2cap_tx ,queue +52f8 20202c32 branch lpm_get_wake_lock + +l2cap_lpm_put_wake_lock: +52f9 d8e0000c arg wake_lock_l2cap_tx ,queue +52fa 20202c36 branch lpm_put_wake_lock + +l2cap_lpm_save_txbuf: +52fb 47184026 bpatchx patch26_0 ,mem_patch26 +52fc 2040527e call l2cap_malloc_get_full_map +52fd 6800c256 fetch 1 ,mem_used_map +52fe 207a0000 rtn blank +52ff 204052e5 call l2cap_lpm_save_calc_len +5300 d8400100 arg l2cap_lpm_txbuf_len ,temp +5301 98467c00 isub temp ,null +5302 202152f7 branch l2cap_lpm_get_wake_lock ,positive +5303 204052f9 call l2cap_lpm_put_wake_lock +5304 d8a04263 arg mem_l2cap_lpm_txbuf ,contw +5305 da204257 arg mem_tx_fifo0 ,rega + +l2cap_lpm_save_txbuf_loop: +5306 58004263 setarg mem_tx_fifo_end +5307 9a267c00 isub rega ,null +5308 20628000 rtn zero +5309 ea208000 ifetch 1 ,rega +530a 1a20a201 increase 1 ,rega +530b 243a530f nbranch l2cap_lpm_save_txbuf_nempty ,blank +530c e0a10000 istore 2 ,contw +530d 1a20a202 increase 2 ,rega +530e 20205306 branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_save_txbuf_nempty: +530f ea210000 ifetch 2 ,rega +5310 1a20a202 increase 2 ,rega +5311 1fe20c00 copy pdata ,contr +5312 e8c10000 ifetch 2 ,contr +5313 e0a10000 istore 2 ,contw +5314 1fe27200 copy pdata ,loopcnt +5315 1f20f202 increase 2 ,loopcnt +5316 20407f01 call memcpy +5317 20205306 branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_load_txbuf: +5318 4718c026 bpatchx patch26_1 ,mem_patch26 +5319 2040527e call l2cap_malloc_get_full_map +531a 6800c256 fetch 1 ,mem_used_map +531b 207a0000 rtn blank +531c da204258 arg mem_tx_fifo0_ptr ,rega +531d 1a20a3fd increase -3 ,rega +531e d8c04263 arg mem_l2cap_lpm_txbuf ,contr + +l2cap_lpm_load_txbuf_loop: +531f 1a20a203 increase 3 ,rega +5320 58004264 setarg mem_tx_fifo_end + 1 +5321 9a267c00 isub rega ,null +5322 20628000 rtn zero +5323 e8c10000 ifetch 2 ,contr +5324 203a531f branch l2cap_lpm_load_txbuf_loop ,blank +5325 1fe0fe04 increase 4 ,pdata +5326 1fe27200 copy pdata ,loopcnt +5327 18c22400 copy contr ,regb +5328 ea210000 ifetch 2 ,rega +5329 1fe20a00 copy pdata ,contw +532a 1a420c00 copy regb ,contr +532b 18c08dfe increase -2 ,contr +532c 20407f01 call memcpy +532d 2020531f branch l2cap_lpm_load_txbuf_loop + +le_init_conn: +532e 47194026 bpatchx patch26_2 ,mem_patch26 +532f 7855fc00 disable wake +5330 70045501 jam 1 ,mem_le_conn_handle +5331 70043f03 jam 3 ,mem_le_state +5332 70045601 jam 1 ,mem_le_arq +5333 5fffffff setarg -1 +5334 60010459 store 2 ,mem_le_event_count +5335 18007e00 force 0 ,pdata +5336 60008457 store 1 ,mem_le_ch +5337 60008462 store 1 ,mem_le_op +5338 6001c169 store 3 ,mem_sniff_rcv +5339 6001c16c store 3 ,mem_sniff_lost +533a 6002c403 store 5 ,mem_le_pcnt_tx +533b 79207e27 set1 39 ,pdata +533c 6002c408 store 5 ,mem_le_pcnt_rx +533d 7043dc01 jam 1 ,mem_le_txheader +533e 7043dd00 jam 0 ,mem_le_txlen +533f 202056ed branch le_supervision_flush + +le_init_master: +5340 4719c026 bpatchx patch26_3 ,mem_patch26 +5341 7834fc00 enable master +5342 70044003 jam lemode_master ,mem_le_mode +5343 70047801 jam 1 ,mem_le_att_handle +5344 70445a01 jam 1 ,mem_le_search_handle_start +5345 5800ffff setarg 0xffff +5346 6001445c store 2 ,mem_le_search_handle_end +5347 18007e00 force 0 ,pdata +5348 6002c408 store 5 ,mem_le_pcnt_rx +5349 79207e27 set1 39 ,pdata +534a 6002c403 store 5 ,mem_le_pcnt_tx +534b 2020532e branch le_init_conn + +le_init_slave: +534c 471a4026 bpatchx patch26_4 ,mem_patch26 +534d 7854fc00 disable master +534e 58000017 setarg 0x17 +534f 600144a8 store 2 ,mem_le_remote_mtu +5350 70044001 jam lemode_slave ,mem_le_mode +5351 70436e00 jam 0 ,mem_le_adv_enable +5352 7000a000 jam 0 ,mem_lpm_current_mult +5353 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state +5354 7044c500 jam flag_le_enc_null ,mem_le_enc_state +5355 6801046d fetch 2 ,mem_le_superto +5356 600144ba store 2 ,mem_le_init_superto +5357 68010441 fetch 2 ,mem_le_tsniff +5358 1feffe05 mul32 pdata ,5 ,pdata +5359 1ff1fe00 rshift4 pdata ,pdata +535a 6001046d store 2 ,mem_le_superto +535b 2020532e branch le_init_conn + +le_dispatch: +535c 204053c4 call le_enable +535d 204055e8 call le_scan +535e 204056f0 call le_adv +535f 202053ce branch le_disable + +le_conn_dispatch: +5360 471ac026 bpatchx patch26_5 ,mem_patch26 +5361 204053c4 call le_enable +5362 204032f4 call app_process_ble +5363 68008440 fetch 1 ,mem_le_mode +5364 c001d366 beq lemode_master ,le_master_dispatch +5365 2020537a branch le_slave_dispatch + +le_master_dispatch: +5366 471b4026 bpatchx patch26_6 ,mem_patch26 +5367 7834fc00 enable master +5368 204056e4 call le_supervision_update +5369 20215377 branch le_master_disconn ,positive +536a 20402c6c call check_ble_disabled +536b 20405413 call le_setup +536c 2040561e call le_prepare_tx +536d 7856fc00 disable match +536e 204054bf call le_transmit_receive_sifs +536f 24768000 nrtn match +5370 471bc026 bpatchx patch26_7 ,mem_patch26 +5371 68008005 fetch 1 ,mem_le_conn_rcv +5372 1fe0fe01 increase 1 ,pdata +5373 60008005 store 1 ,mem_le_conn_rcv +5374 204055aa call le_acknowledge +5375 7854fc00 disable master +5376 20600000 rtn + +le_master_disconn: +5377 204053a9 call le_disconnect +5378 7854fc00 disable master +5379 20600000 rtn + +le_slave_dispatch: +537a 471c4027 bpatchx patch27_0 ,mem_patch27 +537b 70450f00 jam 0 ,mem_le_md_count +537c 20407aaf call sp_calc_sequence_256 +537d 20405c18 call le_secure_connect_sm +537e 78577c00 disable attempt +537f 204056e4 call le_supervision_update +5380 202153a9 branch le_slave_disconn ,positive +5381 20402c6c call check_ble_disabled +5382 20405413 call le_setup +5383 20405489 call le_receive_slave +5384 242c539b nbranch le_slave_unsync ,sync +5385 204053b7 call le_got_first_packet +5386 2036d388 branch le_slave_match ,match +5387 20205395 branch le_slave_cont + +le_slave_match: +5388 471cc027 bpatchx patch27_1 ,mem_patch27 +5389 6800c50f fetch 1 ,mem_le_md_count +538a 1fe0fe01 pincrease 1 +538b 6000c50f store 1 ,mem_le_md_count +538c c0065395 beq le_md_max_count ,le_slave_cont +538d 204055aa call le_acknowledge +538e 2040561e call le_prepare_tx +538f 204054c7 call le_transmit_norx +5390 2040567e call le_parse +5391 680141fb fetch 2 ,mem_cb_ble_transmit +5392 20407f9c call callback_func +5393 204053a0 call le_check_md +5394 203453a4 branch le_slave_more_data ,user + +le_slave_cont: +5395 471d4027 bpatchx patch27_2 ,mem_patch27 +5396 20405be4 call le_pairing_sm +5397 20405bdb call le_check_paring_time +5398 20407d9c call check_51cmd +5399 68008462 fetch 1 ,mem_le_op +539a c281d3a9 bbit1 op_disconn ,le_slave_disconn + +le_slave_unsync: +539b 471dc027 bpatchx patch27_3 ,mem_patch27 +539c 204057f4 call le_lpm_set_mult +539d 2040559d call le_update_channel_map +539e 20405575 call le_update_param +539f 20202841 branch calc_clke_offset + +le_check_md: +53a0 78547c00 disable user +53a1 c5157fe7 bmark1 mark_ble_rx_md ,enable_user +53a2 c514ffe7 bmark1 mark_ble_tx_md ,enable_user +53a3 20600000 rtn + +le_slave_more_data: +53a4 471e4027 bpatchx patch27_4 ,mem_patch27 +53a5 78377c00 enable attempt +53a6 204054c1 call le_transmit_receive_sifs_notx +53a7 2036d388 branch le_slave_match ,match +53a8 20205395 branch le_slave_cont + +le_slave_disconn: + +le_disconnect: +53a9 471ec027 bpatchx patch27_5 ,mem_patch27 +53aa 204053af call le_clear_connection_info +53ab 204033b4 call app_disconn_reason_collect_ble +53ac 20407a77 call sp_initialize_256 +53ad 700a9915 jam bt_evt_le_disconnected ,mem_fifo_temp +53ae 20207d86 branch ui_ipc_send_event + +le_clear_connection_info: +53af 58000000 setarg 0 +53b0 6004c4ff store 9 ,mem_le_tx_buff_used +53b1 70045500 jam 0 ,mem_le_conn_handle +53b2 70044000 jam lemode_idle ,mem_le_mode +53b3 70043f00 jam 0 ,mem_le_state +53b4 7044c500 jam flag_le_enc_null ,mem_le_enc_state +53b5 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state +53b6 20600000 rtn + +le_got_first_packet: +53b7 471f4027 bpatchx patch27_6 ,mem_patch27 +53b8 68008005 fetch 1 ,mem_le_conn_rcv +53b9 1fe0fe01 increase 1 ,pdata +53ba 60008005 store 1 ,mem_le_conn_rcv +53bb 6800843f fetch 1 ,mem_le_state +53bc c3818000 rtnbit1 lestate_got_first_packet +53bd 79207e03 set1 lestate_got_first_packet +53be 6000843f store 1 ,mem_le_state +53bf 680144ba fetch 2 ,mem_le_init_superto +53c0 6001046d store 2 ,mem_le_superto +53c1 58000000 setarg 0 +53c2 600244e5 store 4 ,mem_le_transmit_window +53c3 20600000 rtn + +le_enable: +53c4 471fc027 bpatchx patch27_7 ,mem_patch27 +53c5 70890f36 hjam 0x36 ,0x90f +53c6 70890b5f hjam 0x5f ,0x90b +53c7 783b7c00 enable le +53c8 70891407 hjam 7 ,rfen_ulp +53c9 20402c6c call check_ble_disabled +53ca 6800c1e0 fetch 1 ,mem_250k_freq_enable +53cb 207a0000 rtn blank +53cc 70890ab8 hjam 0xb8 ,0x90a +53cd 20600000 rtn + +le_disable: +53ce 47204028 bpatchx patch28_0 ,mem_patch28 +53cf 70890f2e hjam 0x2e ,0x90f +53d0 70890bff hjam 0xff ,0x90b +53d1 785b7c00 disable le +53d2 70891403 hjam 3 ,rfen_ulp +53d3 db600000 arg 0 ,stop_watch +53d4 20600000 rtn + +le_prep: +53d5 7844fc00 disable enable_crc +53d6 7843fc00 disable enable_white +53d7 68018467 fetch 3 ,mem_le_crcinit +53d8 98001e00 iforce crc24_init +53d9 68008016 fetch 1 ,mem_le_ch_mapped +53da 1fed8400 reverse pdata ,temp +53db 79200401 set1 1 ,temp +53dc 18431c00 rshift temp ,white_init +53dd 20600000 rtn + +lerx_setfreq: +53de 204053e6 call le_setfreq +53df 2040291f call set_freq_rx +53e0 58000500 setarg param_pll_setup +53e1 20402a8f call sleep +53e2 20202924 branch rf_rx_enable + +letx_setfreq: +53e3 2036a939 branch txon ,match + +letx_setfreq0: +53e4 204053e6 call le_setfreq +53e5 20202933 branch set_freq_tx + +le_setfreq: +53e6 4720c028 bpatchx patch28_1 ,mem_patch28 +53e7 20402918 call set_sync_on +53e8 6800848c fetch 1 ,mem_le_testtype +53e9 243a53f9 nbranch le_ctf_test ,blank +53ea 68008016 fetch 1 ,mem_le_ch_mapped +53eb 1fe67c24 sub pdata ,36 ,null +53ec 202153f3 branch le_ctf_normal ,positive +53ed 18000400 force 0 ,temp +53ee c1128000 rtneq 37 +53ef 18000418 force 24 ,temp +53f0 c1130000 rtneq 38 +53f1 1800044e force 78 ,temp +53f2 20600000 rtn + +le_ctf_normal: +53f3 1fe67c0a sub pdata ,10 ,null +53f4 202153f6 branch le_ctf_low ,positive +53f5 1fe0fe01 increase 1 ,pdata + +le_ctf_low: +53f6 1fe3fe00 lshift pdata ,pdata +53f7 1fe08402 add pdata ,2 ,temp +53f8 20600000 rtn + +le_ctf_test: +53f9 68008016 fetch 1 ,mem_le_ch_mapped +53fa 1fe38400 lshift pdata ,temp +53fb 20600000 rtn + +le_sca_map: +53fc d84001f4 arg 500 ,temp +53fd 207a0000 rtn blank +53fe d84000fa arg 250 ,temp +53ff c1008000 rtneq 1 +5400 d8400096 arg 150 ,temp +5401 c1010000 rtneq 2 +5402 d8400064 arg 100 ,temp +5403 c1018000 rtneq 3 +5404 d840004b arg 75 ,temp +5405 c1020000 rtneq 4 +5406 d8400032 arg 50 ,temp +5407 c1028000 rtneq 5 +5408 d8400028 arg 40 ,temp +5409 c1030000 rtneq 6 +540a d8400014 arg 20 ,temp +540b 20600000 rtn + +le_adv_access: +540c 588e89be setarg 0x8e89be +540d 1fed7e00 lshift8 pdata ,pdata +540e 1fe1fed6 or_into 0xd6 ,pdata +540f 98001200 iforce access +5410 58555555 setarg 0x555555 +5411 60018467 store 3 ,mem_le_crcinit +5412 20600000 rtn + +le_setup: +5413 47214028 bpatchx patch28_2 ,mem_patch28 +5414 78287c00 enable swfine +5415 68020463 fetch 4 ,mem_le_access +5416 98001200 iforce access +5417 20405466 call le_map_channel +5418 58000200 setarg 0x200 +5419 2034d41c branch le_setup_master ,master +541a 6801044d fetch 2 ,mem_le_receive_window +541b 1fe37e00 rshift pdata ,pdata + +le_setup_master: +541c d8400500 arg param_pll_setup ,temp +541d 9840fe00 iadd temp ,pdata +541e 20402a24 call ahead_window +541f 1b427e00 deposit clke +5420 60030491 store 6 ,mem_le_rxon_ts +5421 20600000 rtn + +le_next_adv_channel: +5422 4721c028 bpatchx patch28_3 ,mem_patch28 +5423 68008016 fetch 1 ,mem_le_ch_mapped +5424 c012d428 beq 37 ,le_next_adv_channel_curr_channel_37 +5425 c013542e beq 38 ,le_next_adv_channel_curr_channel_38 +5426 c013d434 beq 39 ,le_next_adv_channel_curr_channel_39 +5427 20205434 branch le_next_adv_channel_curr_channel_39 + +le_next_adv_channel_curr_channel_37: +5428 6808c48d fetcht 1 ,mem_le_adv_channel_map +5429 284ffe01 isolate1 bit_adv_channel_map_38 ,temp +542a 2020d43f branch set_le_next_adv_channel_38 ,true +542b 284ffe02 isolate1 bit_adv_channel_map_39 ,temp +542c 2020d444 branch set_le_next_adv_channel_39 ,true +542d 2020543a branch set_le_next_adv_channel_37 + +le_next_adv_channel_curr_channel_38: +542e 6808c48d fetcht 1 ,mem_le_adv_channel_map +542f 284ffe02 isolate1 bit_adv_channel_map_39 ,temp +5430 2020d444 branch set_le_next_adv_channel_39 ,true +5431 284ffe00 isolate1 bit_adv_channel_map_37 ,temp +5432 2020d43a branch set_le_next_adv_channel_37 ,true +5433 2020543f branch set_le_next_adv_channel_38 + +le_next_adv_channel_curr_channel_39: +5434 6808c48d fetcht 1 ,mem_le_adv_channel_map +5435 284ffe00 isolate1 bit_adv_channel_map_37 ,temp +5436 2020d43a branch set_le_next_adv_channel_37 ,true +5437 284ffe01 isolate1 bit_adv_channel_map_38 ,temp +5438 2020d43f branch set_le_next_adv_channel_38 ,true +5439 20205444 branch set_le_next_adv_channel_39 + +set_le_next_adv_channel_37: +543a 70001625 jam 37 ,mem_le_ch_mapped +543b 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +543c 79207e00 set1 bit_adv_channel_map_37 ,pdata +543d 60008ac2 store 1 ,mem_le_adv_channel_map_temp +543e 20600000 rtn + +set_le_next_adv_channel_38: +543f 70001626 jam 38 ,mem_le_ch_mapped +5440 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +5441 79207e01 set1 bit_adv_channel_map_38 ,pdata +5442 60008ac2 store 1 ,mem_le_adv_channel_map_temp +5443 20600000 rtn + +set_le_next_adv_channel_39: +5444 70001627 jam 39 ,mem_le_ch_mapped +5445 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +5446 79207e02 set1 bit_adv_channel_map_39 ,pdata +5447 60008ac2 store 1 ,mem_le_adv_channel_map_temp +5448 20600000 rtn + +le_context_nexthop: +5449 47224028 bpatchx patch28_4 ,mem_patch28 +544a 1a208c01 add rega ,coffset_mode ,contr +544b e8c08000 ifetch 1 ,contr +544c c4000000 rtnbit0 mode_le +544d 1a208a1a add rega ,coffset_le_event_cnt ,contw +544e e8a10000 ifetch 2 ,contw +544f 1fe0fe01 increase 1 ,pdata +5450 e0a10000 istore 2 ,contw +5451 1a208c19 add rega ,coffset_le_hop ,contr +5452 e8c08000 ifetch 1 ,contr +5453 1a208a18 add rega ,coffset_le_ch ,contw +5454 e8a88000 ifetcht 1 ,contw +5455 9840fe00 iadd temp ,pdata +5456 1fe67c24 sub pdata ,36 ,null +5457 20215459 branch le_nexthop_nowrap ,positive +5458 1fe0ffdb increase -37 ,pdata + +le_nexthop_nowrap: +5459 e0a08000 istore 1 ,contw +545a 20600000 rtn + +le_calc_channel_map: +545b 4722c028 bpatchx patch28_5 ,mem_patch28 +545c 6802846f fetch 5 ,mem_le_channel_map +545d 18000400 force 0 ,temp +545e 18007225 force 37 ,loopcnt + +le_count_channels_loop: +545f c3005461 bbit0 0 ,le_count_channels_notused +5460 18408401 increase 1 ,temp + +le_count_channels_notused: +5461 1fe37e00 rshift pdata ,pdata +5462 c200545f loop le_count_channels_loop +5463 1840ffff add temp ,-1 ,pdata +5464 60008461 store 1 ,mem_le_channels +5465 20600000 rtn + +le_map_channel: +5466 47234028 bpatchx patch28_6 ,mem_patch28 +5467 68008457 fetch 1 ,mem_le_ch +5468 98000e00 iforce queue +5469 680a846f fetcht 5 ,mem_le_channel_map +546a a84fffff qisolate1 temp +546b 2020d47c branch le_map_channel_end ,true + +le_map_channel_next: +546c 4723c028 bpatchx patch28_7 ,mem_patch28 +546d 68008461 fetch 1 ,mem_le_channels +546e 98e67e00 isub queue ,pdata +546f 20215472 branch le_map_channel_cont ,positive +5470 1fe60fff sub pdata ,-1 ,queue +5471 2020546c branch le_map_channel_next + +le_map_channel_cont: +5472 18e27200 copy queue ,loopcnt +5473 18000e00 force 0 ,queue + +le_map_channel_loop: +5474 a84fffff qisolate1 temp +5475 2020d477 branch le_map_channel_skip ,true +5476 1f20f201 increase 1 ,loopcnt + +le_map_channel_skip: +5477 1f227e00 deposit loopcnt +5478 203a547c branch le_map_channel_end ,blank +5479 18e08e01 increase 1 ,queue +547a 1f20f3ff increase -1 ,loopcnt +547b 20205474 branch le_map_channel_loop + +le_map_channel_end: +547c 18e27e00 deposit queue +547d 60008016 store 1 ,mem_le_ch_mapped +547e 20600000 rtn + +le_wait_tx: +547f 2034d482 branch le_wait_master ,master +5480 37c18200 until null ,timeout +5481 20600000 rtn + +le_wait_master: +5482 d9600ea0 arg 0xea0 ,timeup +5483 34730200 until clkn_rt ,meet +5484 20600000 rtn + +le_receive_adv: +5485 78487c00 disable swfine +5486 6801436c fetch 2 ,mem_le_scan_window +5487 1fe21600 copy pdata ,timeup +5488 2020548e branch le_receive_packet + +le_receive_slave: +5489 47244029 bpatchx patch29_0 ,mem_patch29 +548a 78287c00 enable swfine +548b 6801044d fetch 2 ,mem_le_receive_window +548c 680a44e5 fetcht 4 ,mem_le_transmit_window +548d 98409600 iadd temp ,timeup + +le_receive_packet: +548e 204053de call lerx_setfreq + +le_receive_rxon: +548f 4724c029 bpatchx patch29_1 ,mem_patch29 +5490 204053d5 call le_prep +5491 7856fc00 disable match +5492 7826fc00 enable decode_fec0 +5493 7830fc00 enable is_rx +5494 78507c00 disable is_tx +5495 19623600 copy timeup ,stop_watch +5496 37c18400 correlate null ,timeout +5497 2037549a branch le_receive_on_attempt ,attempt +5498 1b420400 copy clke ,temp +5499 600b009a storet 6 ,mem_sync_clke + +le_receive_on_attempt: +549a 242c264d nbranch end_of_packet ,sync +549b 203754a1 branch le_receive_skip ,attempt +549c dd2001e0 arg param_clke_cal_le ,clke_rt +549d 1c225000 copy bt_clk ,clke_bt +549e 6800843f fetch 1 ,mem_le_state +549f c301d4a1 bbit0 lestate_got_first_packet ,le_receive_skip +54a0 2055ab05 call lpm_adjust_clk ,wake + +le_receive_skip: +54a1 47254029 bpatchx patch29_2 ,mem_patch29 +54a2 204029bb call save_rssi +54a3 7823fc00 enable enable_white +54a4 7824fc00 enable enable_crc +54a5 09800008 parse demod ,bucket ,8 +54a6 19897e00 rshift3 pwindow ,pdata +54a7 600082d9 store 1 ,mem_le_rxbuf +54a8 09800008 parse demod ,bucket ,8 +54a9 19897e00 rshift3 pwindow ,pdata +54aa e0a08000 istore 1 ,contw +54ab 1fe1723f and pdata ,0x3f ,loopcnt +54ac 2022d4b1 branch lerx_nopayload ,zero + +lerx_loop: +54ad 09800008 parse demod ,bucket ,8 +54ae 19897e00 rshift3 pwindow ,pdata +54af e0a08000 istore 1 ,contw +54b0 c20054ad loop lerx_loop + +lerx_nopayload: +54b1 4725c029 bpatchx patch29_3 ,mem_patch29 +54b2 09800018 parse demod ,bucket ,24 +54b3 78287c00 enable swfine +54b4 db600664 arg param_sifs ,stop_watch +54b5 1fef7e00 rshift32 pdata ,pdata +54b6 1ff17e00 rshift16 pdata ,pdata +54b7 e0a18000 istore 3 ,contw +54b8 2023264d branch end_of_packet ,crc_failed +54b9 7836fc00 enable match +54ba 68008017 fetch 1 ,mem_last_freq +54bb 1fe0a200 add pdata ,0 ,rega +54bc 20402981 call rf_write_freq +54bd 7846fc00 disable decode_fec0 +54be 20202918 branch set_sync_on + +le_transmit_receive_sifs: +54bf 47264029 bpatchx patch29_4 ,mem_patch29 +54c0 204054c9 call le_transmit + +le_transmit_receive_sifs_notx: +54c1 68088017 fetcht 1 ,mem_last_freq +54c2 2040291f call set_freq_rx +54c3 20402924 call rf_rx_enable +54c4 78287c00 enable swfine +54c5 d960157c arg 5500 ,timeup +54c6 2020548f branch le_receive_rxon + +le_transmit_norx: +54c7 204054c9 call le_transmit +54c8 2020264d branch end_of_packet + +le_transmit: +54c9 4726c029 bpatchx patch29_5 ,mem_patch29 +54ca 204053d5 call le_prep +54cb 204053e3 call letx_setfreq +54cc 202054cd branch le_transmit0 + +le_transmit0: +54cd 79202a00 set1 txgfsk ,radio_ctrl +54ce 782efc00 enable encode_fec0 +54cf 78307c00 enable is_tx +54d0 7850fc00 disable is_rx +54d1 2040547f call le_wait_tx +54d2 19317e00 rshift16 access ,pdata +54d3 1fecfe00 rshift8 pdata ,pdata +54d4 1ff1fe00 rshift4 pdata ,pdata +54d5 08008628 inject mod ,40 +54d6 7823fc00 enable enable_white +54d7 7824fc00 enable enable_crc +54d8 47274029 bpatchx patch29_6 ,mem_patch29 +54d9 6800c3dc fetch 1 ,mem_le_txheader +54da 08008608 inject mod ,8 +54db e8c08000 ifetch 1 ,contr +54dc 1fe1723f and pdata ,0x3f ,loopcnt +54dd 08008608 inject mod ,8 +54de 2022d4e2 branch letr_nopayload ,zero + +letr_loop: +54df e8c08000 ifetch 1 ,contr +54e0 08008608 inject mod ,8 +54e1 c20054df loop letr_loop + +letr_nopayload: +54e2 78247c00 enable enable_parity +54e3 08008618 inject mod ,24 +54e4 78447c00 disable enable_parity +54e5 37d38200 until null ,tx_clear +54e6 20000064 nop 100 +54e7 784efc00 disable encode_fec0 +54e8 20600000 rtn + +le_send_adv_ind: +54e9 4727c029 bpatchx patch29_7 ,mem_patch29 +54ea 6800c484 fetch 1 ,mem_le_adv_type +54eb c000d4f9 beq adv_direct_ind ,le_send_adv_direct_ind +54ec 6800c485 fetch 1 ,mem_le_adv_own_addr_type +54ed 1ff27e00 lshift4 pdata ,pdata +54ee 1febfe00 lshift2 pdata ,pdata +54ef 6000c3dc store 1 ,mem_le_txheader +54f0 6808c36f fetcht 1 ,mem_le_adv_data_len +54f1 1840fe06 add temp ,6 ,pdata +54f2 6000c3dd store 1 ,mem_le_txlen +54f3 680344a0 fetch 6 ,mem_le_lap +54f4 600343de store 6 ,mem_le_txpayload +54f5 18427200 copy temp ,loopcnt +54f6 d8c04370 arg mem_le_adv_data ,contr +54f7 20407ef4 call memcpy_fast +54f8 20205504 branch le_send_adv_transmit + +le_send_adv_direct_ind: +54f9 6800c486 fetch 1 ,mem_le_adv_direct_addr_type +54fa 1ff27e00 lshift4 pdata ,pdata +54fb 1febfe00 lshift2 pdata ,pdata +54fc 1fe0fe01 increase 1 ,pdata +54fd 6000c3dc store 1 ,mem_le_txheader +54fe 5800000c setarg 12 +54ff 6000c3dd store 1 ,mem_le_txlen +5500 680344a0 fetch 6 ,mem_le_lap +5501 600343de store 6 ,mem_le_txpayload +5502 680341d0 fetch 6 ,mem_hci_plap +5503 e0a30000 istore 6 ,contw + +le_send_adv_transmit: +5504 4728402a bpatchx patch2a_0 ,mem_patch2a +5505 68008000 fetch 1 ,mem_le_adv_transmit +5506 1fe0fe01 increase 1 ,pdata +5507 60008000 store 1 ,mem_le_adv_transmit +5508 db600708 arg 1800 ,stop_watch +5509 7856fc00 disable match +550a 202054bf branch le_transmit_receive_sifs + +le_send_scan_request: +550b 4728c02a bpatchx patch2a_1 ,mem_patch2a +550c 6800c49e fetch 1 ,mem_le_scan_type +550d c1808000 rtnne le_scan_type_active +550e 68008000 fetch 1 ,mem_le_adv_transmit +550f 1fe0fe01 increase 1 ,pdata +5510 60008000 store 1 ,mem_le_adv_transmit +5511 d8400c03 arg 0x0c03 ,temp +5512 6800c49f fetch 1 ,mem_le_scan_own_addr_type +5513 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp +5514 1a227e00 copy rega ,pdata +5515 7d3a0407 nsetflag blank ,le_receiver_addr_bit ,temp +5516 600943dc storet 2 ,mem_le_txheader +5517 680344a0 fetch 6 ,mem_le_lap +5518 e0a30000 istore 6 ,contw +5519 6803044f fetch 6 ,mem_le_plap +551a e0a30000 istore 6 ,contw +551b 202054bf branch le_transmit_receive_sifs + +le_send_scan_response: +551c 4729402a bpatchx patch2a_2 ,mem_patch2a +551d d8400004 arg scan_rsp ,temp +551e 6800c485 fetch 1 ,mem_le_adv_own_addr_type +551f 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp +5520 6008c3dc storet 1 ,mem_le_txheader +5521 6808c38f fetcht 1 ,mem_le_scan_data_len +5522 1840fe06 add temp ,6 ,pdata +5523 6000c3dd store 1 ,mem_le_txlen +5524 680344a0 fetch 6 ,mem_le_lap +5525 600343de store 6 ,mem_le_txpayload +5526 d8c04390 arg mem_le_scan_data ,contr +5527 18427200 copy temp ,loopcnt +5528 20407ef4 call memcpy_fast +5529 204054c7 call le_transmit_norx +552a 20205706 branch le_adv_not_match + +le_connect_request: +552b 4729c02a bpatchx patch2a_3 ,mem_patch2a +552c 18007fff force -1 ,pdata +552d 38080001 setsect 2 ,1 +552e 6002846f store 5 ,mem_le_channel_map +552f 2040545b call le_calc_channel_map +5530 18007204 force 4 ,loopcnt +5531 d8a00463 arg mem_le_access ,contw +5532 2040630d call generate_random_loop +5533 6801449c fetch 2 ,mem_le_timeout +5534 6001046d store 2 ,mem_le_superto + +le_con_req_hop_retry: +5535 180a7e00 random pdata +5536 1fe17e0f and_into 0xf ,pdata +5537 1fe67c04 sub pdata ,4 ,null +5538 20215535 branch le_con_req_hop_retry ,positive +5539 60008458 store 1 ,mem_le_hop +553a 600086e6 store 1 ,mem_tmp1 +553b 472a402a bpatchx patch2a_4 ,mem_patch2a +553c 68094367 fetcht 2 ,mem_le_conn_interval +553d 60090441 storet 2 ,mem_le_tsniff +553e 18422600 copy temp ,regc +553f 1c40fe07 add clkn_bt ,7 ,pdata +5540 9a66fc00 idiv regc +5541 20407f86 call wait_div_end +5542 18072200 remainder rega +5543 9a267e00 isub rega ,pdata +5544 9a60fe00 iadd regc ,pdata +5545 68094365 fetcht 2 ,mem_le_dsniff +5546 9840fe00 iadd temp ,pdata +5547 60020443 store 4 ,mem_le_anchor +5548 9c462200 isub clkn_bt ,rega +5549 1a20a3fa increase -6 ,rega +554a da402205 arg 0x2205 ,regb +554b 6800c495 fetch 1 ,mem_le_conn_own_addr_type +554c 7d3a2406 nsetflag blank ,le_sender_addr_bit ,regb +554d 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +554e 7d3a2407 nsetflag blank ,le_receiver_addr_bit ,regb +554f 1a427e00 copy regb ,pdata +5550 600143dc store 2 ,mem_le_txheader +5551 680344a0 fetch 6 ,mem_le_lap +5552 e0a30000 istore 6 ,contw +5553 6803044f fetch 6 ,mem_le_plap +5554 e0a30000 istore 6 ,contw +5555 68020463 fetch 4 ,mem_le_access +5556 e0a20000 istore 4 ,contw +5557 180a7e00 random pdata +5558 e0a10000 istore 2 ,contw +5559 180a7e00 random pdata +555a e0a08000 istore 1 ,contw +555b 18007e02 force 2 ,pdata +555c e0a08000 istore 1 ,contw +555d 1a2b7e00 rshift2 rega ,pdata +555e e0a10000 istore 2 ,contw +555f 1a6b7e00 rshift2 regc ,pdata +5560 e0a10000 istore 2 ,contw +5561 472ac02a bpatchx patch2a_5 ,mem_patch2a +5562 58000000 setarg 0 +5563 e0a10000 istore 2 ,contw +5564 6801449c fetch 2 ,mem_le_timeout +5565 e0a10000 istore 2 ,contw +5566 6802846f fetch 5 ,mem_le_channel_map +5567 e0a28000 istore 5 ,contw +5568 68008458 fetch 1 ,mem_le_hop +5569 d84000a0 arg param_le_sca ,temp +556a 9841fe00 ior temp ,pdata +556b e0a08000 istore 1 ,contw +556c 204054c7 call le_transmit_norx +556d 580043dc setarg mem_le_txheader +556e 1fe08c12 add pdata ,18 ,contr +556f e8c18000 ifetch 3 ,contr +5570 60018467 store 3 ,mem_le_crcinit +5571 20600000 rtn + +le_init_adv: +5572 472b402a bpatchx patch2a_6 ,mem_patch2a +5573 7854fc00 disable master +5574 2020540c branch le_adv_access + +le_update_param: +5575 6800843f fetch 1 ,mem_le_state +5576 c4028000 rtnbit0 lestate_update_param +5577 68010459 fetch 2 ,mem_le_event_count +5578 6809045f fetcht 2 ,mem_le_instant +5579 98467e00 isub temp ,pdata +557a 24610000 nrtn positive +557b 60010a9a store 2 ,mem_pdatatemp +557c 472bc02a bpatchx patch2a_7 ,mem_patch2a +557d 6800843f fetch 1 ,mem_le_state +557e 793ffe05 set0 lestate_update_param ,pdata +557f 793ffe03 set0 lestate_got_first_packet ,pdata +5580 6000843f store 1 ,mem_le_state +5581 68020443 fetch 4 ,mem_le_anchor +5582 68090441 fetcht 2 ,mem_le_tsniff +5583 60090aa2 storet 2 ,mem_temp +5584 98462200 isub temp ,rega +5585 472c402b bpatchx patch2b_0 ,mem_patch2b +5586 6800c3d3 fetch 1 ,mem_le_new_param +5587 6000846a store 1 ,mem_le_window_size +5588 e8c90000 ifetcht 2 ,contr +5589 e8c10000 ifetch 2 ,contr +558a 1febfe00 lshift2 pdata ,pdata +558b 60010441 store 2 ,mem_le_tsniff +558c 184b8400 lshift2 temp ,temp +558d 9840fe00 iadd temp ,pdata +558e e8ca0000 ifetcht 4 ,contr +558f 600a046b storet 4 ,mem_le_slave_latency +5590 9a20fe00 iadd rega ,pdata +5591 1fe22800 copy pdata ,regab +5592 68010441 fetch 2 ,mem_le_tsniff +5593 68090aa2 fetcht 2 ,mem_temp +5594 98467e00 isub temp ,pdata +5595 68090a9a fetcht 2 ,mem_pdatatemp +5596 984ffe00 imul32 temp ,pdata +5597 9a80fe00 iadd regab ,pdata +5598 60020443 store 4 ,mem_le_anchor +5599 20405713 call le_receive_window_size +559a 6801046d fetch 2 ,mem_le_superto +559b 600144ba store 2 ,mem_le_init_superto +559c 20600000 rtn + +le_update_channel_map: +559d 472cc02b bpatchx patch2b_1 ,mem_patch2b +559e 6800843f fetch 1 ,mem_le_state +559f c4030000 rtnbit0 lestate_update_map +55a0 68010459 fetch 2 ,mem_le_event_count +55a1 6809045f fetcht 2 ,mem_le_instant +55a2 98467e00 isub temp ,pdata +55a3 24610000 nrtn positive +55a4 6800843f fetch 1 ,mem_le_state +55a5 793ffe06 set0 lestate_update_map ,pdata +55a6 6000843f store 1 ,mem_le_state +55a7 6802c3ce fetch 5 ,mem_le_new_map +55a8 6002846f store 5 ,mem_le_channel_map +55a9 2020545b branch le_calc_channel_map + +le_acknowledge: +55aa 472d402b bpatchx patch2b_2 ,mem_patch2b +55ab 204056ed call le_supervision_flush +55ac 204055c0 call le_check_wak +55ad 680082d9 fetch 1 ,mem_le_rxbuf +55ae 2feffe04 isolate1 md ,pdata +55af 7920802a setflag true ,mark_ble_rx_md ,mark +55b0 1fe37e00 rshift pdata ,pdata +55b1 9842fe00 ixor temp ,pdata +55b2 2feffe02 isolate1 nesn ,pdata +55b3 7920800f setflag true ,mark_old_packet ,mark +55b4 c6078000 rtnmark1 mark_old_packet +55b5 680082da fetch 1 ,mem_le_rxbuf + 1 +55b6 203a55bc branch le_ack_unenc ,blank +55b7 6800843f fetch 1 ,mem_le_state +55b8 c30255bc bbit0 lestate_encryption ,le_ack_unenc +55b9 2040748d call load_sk +55ba 204073fb call le_decrypt +55bb 247a0000 nrtn blank + +le_ack_unenc: +55bc 68088456 fetcht 1 ,mem_le_arq +55bd 79400402 setflip nesn ,temp +55be 60088456 storet 1 ,mem_le_arq +55bf 20600000 rtn + +le_check_wak: +55c0 472dc02b bpatchx patch2b_3 ,mem_patch2b +55c1 68088456 fetcht 1 ,mem_le_arq +55c2 284c0005 isolate0 wak ,temp +55c3 20608000 rtn true +55c4 680082d9 fetch 1 ,mem_le_rxbuf +55c5 1fe3fe00 lshift pdata ,pdata +55c6 9842fe00 ixor temp ,pdata +55c7 c4018000 rtnbit0 sn +55c8 793f8405 set0 wak ,temp +55c9 79400403 setflip sn ,temp +55ca 60088456 storet 1 ,mem_le_arq +55cb 28400603 compare 3 ,temp ,3 +55cc 24608000 nrtn true +55cd 6800c3de fetch 1 ,mem_le_txpayload +55ce c002d5d2 beq ll_start_enc_req ,le_set_enc +55cf 6800c4c5 fetch 1 ,mem_le_enc_state +55d0 c00155d6 beq flag_le_enc_pause ,le_clear_enc +55d1 20600000 rtn + +le_set_enc: +55d2 6800843f fetch 1 ,mem_le_state +55d3 79207e04 set1 lestate_encryption ,pdata +55d4 6000843f store 1 ,mem_le_state +55d5 20600000 rtn + +le_clear_enc: +55d6 472e402b bpatchx patch2b_4 ,mem_patch2b +55d7 7044c500 jam flag_le_enc_null ,mem_le_enc_state +55d8 dfe00000 arg 0 ,pdata +55d9 6002440d store 4 ,mem_le_last_mic +55da 6002c403 store 5 ,mem_le_pcnt_tx +55db 79207e27 set1 39 ,pdata +55dc 6002c408 store 5 ,mem_le_pcnt_rx +55dd 6800843f fetch 1 ,mem_le_state +55de 793ffe04 set0 lestate_encryption ,pdata +55df 6000843f store 1 ,mem_le_state +55e0 20600000 rtn + +le_wait_adv: +55e1 472ec02b bpatchx patch2b_5 ,mem_patch2b +55e2 20405422 call le_next_adv_channel +55e3 20405485 call le_receive_adv +55e4 68008001 fetch 1 ,mem_le_adv_waitcnt +55e5 1fe0fe01 increase 1 ,pdata +55e6 60008001 store 1 ,mem_le_adv_waitcnt +55e7 20600000 rtn + +le_scan: +55e8 472f402b bpatchx patch2b_6 ,mem_patch2b +55e9 6800c369 fetch 1 ,mem_le_scan_enable +55ea c1808000 rtnne le_scan_enable +55eb d8e00002 arg le_scan_interval_timer ,queue +55ec 20407f16 call timer_check +55ed 247a0000 nrtn blank +55ee 6801436a fetch 2 ,mem_le_scan_interval +55ef 6809436c fetcht 2 ,mem_le_scan_window +55f0 98467e00 isub temp ,pdata +55f1 d8e00002 arg le_scan_interval_timer ,queue +55f2 20407f08 call timer_init +55f3 7854fc00 disable master +55f4 20405572 call le_init_adv +55f5 204055e1 call le_wait_adv +55f6 24768000 nrtn match +55f7 472fc02b bpatchx patch2b_7 ,mem_patch2b +55f8 680302db fetch 6 ,mem_le_rxbuf + 2 +55f9 6003044f store 6 ,mem_le_plap +55fa 68008002 fetch 1 ,mem_le_adv_rcv +55fb 1fe0fe01 increase 1 ,pdata +55fc 60008002 store 1 ,mem_le_adv_rcv +55fd 20405608 call le_create_conn +55fe 20748000 rtn master +55ff 2040550b call le_send_scan_request +5600 24768000 nrtn match +5601 4730402c bpatchx patch2c_0 ,mem_patch2c +5602 68008004 fetch 1 ,mem_le_scanrsp_rcv +5603 1fe0fe01 increase 1 ,pdata +5604 60008004 store 1 ,mem_le_scanrsp_rcv +5605 680482e1 fetch 9 ,mem_le_rxbuf + 8 +5606 60048101 store 9 ,mem_tmp_buffer +5607 20600000 rtn + +le_create_conn: +5608 4730c02c bpatchx patch2c_1 ,mem_patch2c +5609 6800849b fetch 1 ,mem_cmd_le_create_conn +560a c18d8000 rtnne hci_cmd_le_create_conn +560b 6803044f fetch 6 ,mem_le_plap +560c 680b448f fetcht 6 ,mem_le_conn_peer_addr +560d 98467c00 isub temp ,null +560e 24628000 nrtn zero +560f 2040223b call context_new +5610 24628000 nrtn zero +5611 2040552b call le_connect_request +5612 20405340 call le_init_master +5613 4731402c bpatchx patch2c_2 ,mem_patch2c +5614 7041ce00 jam 0 ,mem_hci_cmd +5615 70047600 jam 0 ,mem_le_peer_sca +5616 70436900 jam 0 ,mem_le_scan_enable +5617 70049b00 jam 0 ,mem_cmd_le_create_conn +5618 20202223 branch context_save + +le_scan_check_sender_addr_type: +5619 da200001 arg 1 ,rega +561a 680082d9 fetch 1 ,mem_le_rxbuf +561b c3830000 rtnbit1 le_sender_addr_bit +561c da200000 arg 0 ,rega +561d 20600000 rtn + +le_prepare_tx: +561e 4731c02c bpatchx patch2c_3 ,mem_patch2c +561f 68008456 fetch 1 ,mem_le_arq +5620 c3828000 rtnbit1 wak +5621 20405642 call le_check_tx_md +5622 20405873 call le_fifo_get_first_tx_ptr +5623 203a5664 branch le_send_empty ,blank +5624 e8c08000 ifetch 1 ,contr +5625 e8c88000 ifetcht 1 ,contr +5626 18422200 copy temp ,rega +5627 9a267e00 isub rega ,pdata +5628 d840001b arg le_max_paket_len ,temp +5629 20407fdd call not_greater_than +562a 1fe20400 copy pdata ,temp +562b e8c08000 ifetch 1 ,contr +562c 1fe20200 copy pdata ,type +562d 1a227e00 copy rega ,pdata +562e 98c08c00 iadd contr ,contr +562f d8a043de arg mem_le_txpayload ,contw +5630 18427200 copy temp ,loopcnt +5631 20407f01 call memcpy +5632 20405654 call le_update_tx_type +5633 20405666 call le_send_packet +5634 20405873 call le_fifo_get_first_tx_ptr +5635 e8c08000 ifetch 1 ,contr +5636 1fe22200 copy pdata ,rega +5637 18c22600 copy contr ,regc +5638 e8c88000 ifetcht 1 ,contr +5639 18422400 copy temp ,regb +563a 9a467e00 isub regb ,pdata +563b d840001b arg le_max_paket_len ,temp +563c 20407fdd call not_greater_than +563d 9a40fe00 iadd regb ,pdata +563e e2608000 istore 1 ,regc +563f 9a267c00 isub rega ,null +5640 24628000 nrtn zero +5641 20205896 branch le_fifo_release_first_node + +le_check_tx_md: +5642 20405649 call le_check_continue +5643 c6148000 rtnmark1 mark_ble_tx_md +5644 6800c4e9 fetch 1 ,mem_le_configuration +5645 c3015652 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +5646 20405876 call le_fifo_get_second_tx_ptr +5647 203a5652 branch le_clear_md ,blank +5648 20205650 branch le_set_md + +le_check_continue: +5649 20405873 call le_fifo_get_first_tx_ptr +564a 203a5652 branch le_clear_md ,blank +564b e8c08000 ifetch 1 ,contr +564c e8c88000 ifetcht 1 ,contr +564d 98467e00 isub temp ,pdata +564e 1fe67c1b sub pdata ,le_max_paket_len ,null +564f 20215652 branch le_clear_md ,positive + +le_set_md: +5650 79200029 set1 mark_ble_tx_md ,mark +5651 20600000 rtn + +le_clear_md: +5652 793f8029 set0 mark_ble_tx_md ,mark +5653 20600000 rtn + +le_update_tx_type: +5654 1a227e00 copy rega ,pdata +5655 207a0000 rtn blank +5656 d8200001 arg llid_continue ,type +5657 20600000 rtn + +le_att_check_notification_enable: +5658 4732402c bpatchx patch2c_4 ,mem_patch2c +5659 18408401 increase 1 ,temp +565a 2040576a call le_att_get_handle_ptr +565b 18c08dfe increase -2 ,contr +565c e8c10000 ifetch 2 ,contr +565d d8402902 arg client_charactertic_configuration ,temp +565e 98467c00 isub temp ,null +565f 24628000 nrtn zero +5660 18c08c01 increase 1 ,contr +5661 18c22200 copy contr ,rega +5662 e8c08000 ifetch 1 ,contr +5663 20600000 rtn + +le_send_empty: +5664 18000400 force 0 ,temp +5665 18000201 force 1 ,type + +le_send_packet: +5666 4732c02c bpatchx patch2c_5 ,mem_patch2c +5667 6008c3dd storet 1 ,mem_le_txlen +5668 68088456 fetcht 1 ,mem_le_arq +5669 79200405 set1 wak ,temp +566a 18417efc and temp ,0xfc ,pdata +566b 9821fe00 ior type ,pdata +566c 60008456 store 1 ,mem_le_arq +566d 1fe17e1f and_into 0x1f ,pdata +566e 280ffe29 isolate1 mark_ble_tx_md ,mark +566f 7920fe04 setflag true ,md ,pdata +5670 6000c3dc store 1 ,mem_le_txheader +5671 6800c3dc fetch 1 ,mem_le_txheader +5672 28200601 compare 1 ,type ,3 +5673 2420d676 nbranch le_send_no_txlen ,true +5674 6800c3dd fetch 1 ,mem_le_txlen +5675 207a0000 rtn blank + +le_send_no_txlen: +5676 6800843f fetch 1 ,mem_le_state +5677 c4020000 rtnbit0 lestate_encryption +5678 2040748d call load_sk +5679 202073e3 branch le_encrypt + +get_lpm_wake_ble_rx_lock: +567a d8e00000 arg wake_lock_ble_rx ,queue +567b 20202c32 branch lpm_get_wake_lock + +put_lpm_wake_ble_rx_lock: +567c d8e00000 arg wake_lock_ble_rx ,queue +567d 20202c36 branch lpm_put_wake_lock + +le_parse: +567e 4733402c bpatchx patch2c_6 ,mem_patch2c +567f c6078000 rtnmark1 mark_old_packet +5680 20405890 call le_fifo_check_full +5681 247a0000 nrtn blank +5682 680082d9 fetch 1 ,mem_le_rxbuf +5683 1fe17e03 and pdata ,0x3 ,pdata +5684 6000c50c store 1 ,mem_le_packet_llid +5685 e8c08000 ifetch 1 ,contr +5686 1fe17e1f and pdata ,0x1f ,pdata +5687 6000c50b store 1 ,mem_le_packet_size +5688 207a0000 rtn blank +5689 18c27e00 copy contr ,pdata +568a 6001450d store 2 ,mem_le_payload_ptr +568b 6800c50c fetch 1 ,mem_le_packet_llid +568c c001dc64 beq llid_le_ll ,le_parse_ll + +le_parse_l2cap: +568d 2040569a call le_check_l2cap_complete +568e 2434567a nbranch get_lpm_wake_ble_rx_lock ,user +568f 2040567c call put_lpm_wake_ble_rx_lock +5690 6801450d fetch 2 ,mem_le_payload_ptr +5691 1fe20c00 copy pdata ,contr +5692 e8c10000 ifetch 2 ,contr +5693 600144fc store 2 ,mem_le_l2cap_size +5694 4733c02c bpatchx patch2c_7 ,mem_patch2c +5695 e8c10000 ifetch 2 ,contr +5696 c00258ab beq le_l2cap_cid_att ,le_parse_att +5697 c0035af4 beq le_l2cap_cid_smp ,le_parse_smp +5698 c002dab6 beq le_l2cap_cid_signal ,le_parse_signaling +5699 20600000 rtn + +le_check_l2cap_complete: +569a 6800c50c fetch 1 ,mem_le_packet_llid +569b c00156a9 beq llid_start ,le_check_l2cap_llid_start +569c c000d6c1 beq llid_continue ,le_check_l2cap_llid_continue +569d 20600000 rtn + +le_check_l2cap_cid_legal: +569e 20407fe7 call enable_user +569f d8400004 arg le_l2cap_cid_att ,temp +56a0 9fe67c00 isub pdata ,null +56a1 20628000 rtn zero +56a2 d8400005 arg le_l2cap_cid_signal ,temp +56a3 9fe67c00 isub pdata ,null +56a4 20628000 rtn zero +56a5 d8400006 arg le_l2cap_cid_smp ,temp +56a6 9fe67c00 isub pdata ,null +56a7 20628000 rtn zero +56a8 20207fe9 branch disable_user + +le_check_l2cap_llid_start: +56a9 6801450d fetch 2 ,mem_le_payload_ptr +56aa 1fe20c00 copy pdata ,contr +56ab e8c10000 ifetch 2 ,contr +56ac 600144fc store 2 ,mem_le_l2cap_size +56ad e8c10000 ifetch 2 ,contr +56ae 2040569e call le_check_l2cap_cid_legal +56af 24740000 nrtn user +56b0 6808c50b fetcht 1 ,mem_le_packet_size +56b1 6008c4fe storet 1 ,mem_le_packet_len_recved +56b2 680144fc fetch 2 ,mem_le_l2cap_size +56b3 1fe0fe04 increase 4 ,pdata +56b4 98467c00 isub temp ,null +56b5 2022ffe7 branch enable_user ,zero +56b6 6800c50b fetch 1 ,mem_le_packet_size +56b7 1fe27200 copy pdata ,loopcnt +56b8 d8a00311 arg mem_le_l2capbuf ,contw +56b9 6801450d fetch 2 ,mem_le_payload_ptr +56ba 1fe20c00 copy pdata ,contr +56bb 20407f01 call memcpy +56bc 20207fe9 branch disable_user + +le_check_l2cap_continue_legal: +56bd 20407fe7 call enable_user +56be 6800c4fe fetch 1 ,mem_le_packet_len_recved +56bf 247a0000 nrtn blank +56c0 20207fe9 branch disable_user + +le_check_l2cap_llid_continue: +56c1 204056bd call le_check_l2cap_continue_legal +56c2 24740000 nrtn user +56c3 6800c4fe fetch 1 ,mem_le_packet_len_recved +56c4 d8a00311 arg mem_le_l2capbuf ,contw +56c5 98a0a200 iadd contw ,rega +56c6 6808c50b fetcht 1 ,mem_le_packet_size +56c7 9840fe00 iadd temp ,pdata +56c8 6000c4fe store 1 ,mem_le_packet_len_recved +56c9 6800c50b fetch 1 ,mem_le_packet_size +56ca 1fe27200 copy pdata ,loopcnt +56cb 1a220a00 copy rega ,contw +56cc 6801450d fetch 2 ,mem_le_payload_ptr +56cd 1fe20c00 copy pdata ,contr +56ce 20407ef4 call memcpy_fast +56cf 58000311 setarg mem_le_l2capbuf +56d0 6001450d store 2 ,mem_le_payload_ptr +56d1 680144fc fetch 2 ,mem_le_l2cap_size +56d2 1fe0fe04 increase 4 ,pdata +56d3 6808c4fe fetcht 1 ,mem_le_packet_len_recved +56d4 98467c00 isub temp ,null +56d5 2022ffe7 branch enable_user ,zero +56d6 20207fe9 branch disable_user + +le_get_search_att_type: +56d7 20407ea5 call store_contr +56d8 d8a0445e arg mem_le_search_att_type_length ,contw + +le_get_search_common: +56d9 680144fc fetch 2 ,mem_le_l2cap_size +56da 1fe0fffb increase -5 ,pdata + +le_get_search_common2: +56db e0a08000 istore 1 ,contw +56dc 1fe27200 copy pdata ,loopcnt +56dd 20407e9f call get_contr +56de 20207ef4 branch memcpy_fast + +le_get_search_att_uuid: +56df 20407ea5 call store_contr +56e0 d8a04471 arg mem_le_search_uuid_length ,contw +56e1 202056d9 branch le_get_search_common + +le_writeatt_cb: +56e2 680141f9 fetch 2 ,mem_cb_att_write +56e3 20207f9c branch callback_func + +le_supervision_update: +56e4 680a045b fetcht 4 ,mem_le_supervision_timer +56e5 20402a7b call get_clkbt +56e6 98461600 isub temp ,timeup +56e7 19627e00 deposit timeup +56e8 6809046d fetcht 2 ,mem_le_superto +56e9 18520400 lshift4 temp ,temp +56ea 18438400 lshift temp ,temp +56eb 98467e00 isub temp ,pdata +56ec 20600000 rtn + +le_supervision_flush: +56ed 20402a7b call get_clkbt +56ee 6002045b store 4 ,mem_le_supervision_timer +56ef 20600000 rtn + +le_adv: +56f0 70001624 jam 36 ,mem_le_ch_mapped +56f1 700ac200 jam 0 ,mem_le_adv_channel_map_temp + +le_adv_loop: +56f2 4734402d bpatchx patch2d_0 ,mem_patch2d +56f3 6800c36e fetch 1 ,mem_le_adv_enable +56f4 207a0000 rtn blank +56f5 d8e00000 arg le_adv_interval_timer ,queue +56f6 20407f16 call timer_check +56f7 247a0000 nrtn blank +56f8 4734c02d bpatchx patch2d_1 ,mem_patch2d + +le_adv_loop_tx: +56f9 7854fc00 disable master +56fa 78287c00 enable swfine +56fb 20405572 call le_init_adv +56fc 20405422 call le_next_adv_channel +56fd 204054e9 call le_send_adv_ind +56fe 2436d706 nbranch le_adv_not_match ,match +56ff 68008003 fetch 1 ,mem_le_req_rcv +5700 1fe0fe01 increase 1 ,pdata +5701 60008003 store 1 ,mem_le_req_rcv +5702 680082d9 fetch 1 ,mem_le_rxbuf +5703 1fe17e0f and pdata ,0x0f ,pdata +5704 c001d51c beq scan_req ,le_send_scan_response +5705 c002d728 beq connect_req ,le_parse_connect_req + +le_adv_not_match: +5706 4735402d bpatchx patch2d_2 ,mem_patch2d +5707 180a7e00 random pdata +5708 d84001ff arg 0x1ff ,temp +5709 98417e00 iand temp ,pdata +570a 1fe0fefa add pdata ,250 ,pdata +570b 20403cbe call delay +570c 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +570d 6808c48d fetcht 1 ,mem_le_adv_channel_map +570e 98467c00 isub temp ,null +570f 2422d6f2 nbranch le_adv_loop ,zero +5710 d8e00000 arg le_adv_interval_timer ,queue +5711 68014482 fetch 2 ,mem_le_adv_interval +5712 20207f08 branch timer_init + +le_receive_window_size: +5713 4735c02d bpatchx patch2d_3 ,mem_patch2d +5714 68008476 fetch 1 ,mem_le_peer_sca +5715 204053fc call le_sca_map +5716 68010441 fetch 2 ,mem_le_tsniff +5717 984ffe00 imul32 temp ,pdata +5718 d8400177 arg 375 ,temp +5719 984ffe00 imul32 temp ,pdata +571a d84186a0 arg 100000 ,temp +571b 9846fc00 idiv temp +571c 6800846a fetch 1 ,mem_le_window_size +571d d8404e20 arg 20000 ,temp +571e 984ffe00 imul32 temp ,pdata +571f 9840fe00 iadd temp ,pdata +5720 600244e5 store 4 ,mem_le_transmit_window +5721 4736402d bpatchx patch2d_4 ,mem_patch2d +5722 680140c1 fetch 2 ,mem_rx_window_sniff +5723 20407f86 call wait_div_end +5724 18078400 quotient temp +5725 9840fe00 iadd temp ,pdata +5726 6001044d store 2 ,mem_le_receive_window +5727 20600000 rtn + +le_parse_connect_req: +5728 4736c02d bpatchx patch2d_5 ,mem_patch2d +5729 680302e1 fetch 6 ,mem_le_rxbuf + 8 +572a 680b44a0 fetcht 6 ,mem_le_lap +572b 98467c00 isub temp ,null +572c 24628000 nrtn zero +572d 20405619 call le_scan_check_sender_addr_type +572e 1a227e00 copy rega ,pdata +572f 6000c48e store 1 ,mem_le_conn_peer_addr_type +5730 680382ee fetch 7 ,mem_le_rxbuf + 21 +5731 60038101 store 7 ,mem_tmp_buffer +5732 e8c40000 ifetch 8 ,contr +5733 e0a40000 istore 8 ,contw +5734 680302db fetch 6 ,mem_le_rxbuf + 2 +5735 6003044f store 6 ,mem_le_plap +5736 18c08c06 increase 6 ,contr +5737 e8c40000 ifetch 8 ,contr +5738 60040463 store 8 ,mem_le_access +5739 e8c90000 ifetcht 2 ,contr +573a 4737402d bpatchx patch2d_6 ,mem_patch2d +573b 184b8400 lshift2 temp ,temp +573c e8c10000 ifetch 2 ,contr +573d 1febfe00 lshift2 pdata ,pdata +573e 60010441 store 2 ,mem_le_tsniff +573f 60020443 store 4 ,mem_le_anchor +5740 98467e00 isub temp ,pdata +5741 1fe0d1fe add pdata ,-2 ,clke_bt +5742 e8c48000 ifetch 9 ,contr +5743 6004846b store 9 ,mem_le_slave_latency +5744 4737c02d bpatchx patch2d_7 ,mem_patch2d +5745 e8c08000 ifetch 1 ,contr +5746 1ff18400 rshift4 pdata ,temp +5747 18430400 rshift temp ,temp +5748 60088476 storet 1 ,mem_le_peer_sca +5749 1fe17e1f and_into 0x1f ,pdata +574a 60008458 store 1 ,mem_le_hop +574b 20405713 call le_receive_window_size +574c 2040545b call le_calc_channel_map +574d 2040534c call le_init_slave +574e 2040223b call context_new +574f 24628000 nrtn zero +5750 4738402e bpatchx patch2e_0 ,mem_patch2e +5751 20402841 call calc_clke_offset +5752 20405ad3 call le_l2cap_reset_signaling_identifier +5753 700a9914 jam bt_evt_le_connected ,mem_fifo_temp +5754 20407d86 call ui_ipc_send_event +5755 20202223 branch context_save + +le_init_attlist_search: +5756 4738c02e bpatchx patch2e_1 ,mem_patch2e +5757 6801445a fetch 2 ,mem_le_search_handle_start +5758 98002400 iforce regb +5759 6801445c fetch 2 ,mem_le_search_handle_end +575a 98002600 iforce regc +575b 680144bc fetch 2 ,mem_ui_le_uuid_table +575c 98000c00 iforce contr +575d 78347c00 enable user +575e 20600000 rtn + +le_att_handle_inrange: +575f e8c10000 ifetch 2 ,contr +5760 207a0000 rtn blank +5761 9a467c00 isub regb ,null +5762 24610000 nrtn positive +5763 9a667c00 isub regc ,null +5764 20628000 rtn zero +5765 20215768 branch le_att_handle_blank ,positive +5766 18007c01 force 1 ,null +5767 20600000 rtn + +le_att_handle_blank: +5768 18007e00 force 0 ,pdata +5769 20600000 rtn + +le_att_get_handle_ptr: +576a 2040576d call le_att_get_handle_ptr2 +576b 2022d779 branch le_att_get_handle_ptr_found ,zero +576c 20600000 rtn + +le_att_get_handle_ptr2: +576d 4739402e bpatchx patch2e_2 ,mem_patch2e +576e 680144bc fetch 2 ,mem_ui_le_uuid_table +576f 98000c00 iforce contr + +le_att_get_handle_loop1: +5770 e8c10000 ifetch 2 ,contr +5771 207a0000 rtn blank +5772 98467c00 isub temp ,null +5773 20628000 rtn zero +5774 e8c08000 ifetch 1 ,contr +5775 98c08c00 iadd contr ,contr +5776 e8c08000 ifetch 1 ,contr +5777 98c08c00 iadd contr ,contr +5778 20205770 branch le_att_get_handle_loop1 + +le_att_get_handle_ptr_found: +5779 e8c08000 ifetch 1 ,contr +577a 98c08c00 iadd contr ,contr +577b 20600000 rtn + +le_att_get_short_uuid_ptr: +577c 4739c02e bpatchx patch2e_3 ,mem_patch2e +577d 680144bc fetch 2 ,mem_ui_le_uuid_table +577e 98000c00 iforce contr + +le_att_get_short_uuid_loop: +577f e8c10000 ifetch 2 ,contr +5780 207a0000 rtn blank +5781 e8c08000 ifetch 1 ,contr +5782 98c08c00 iadd contr ,contr +5783 18c08dfe increase -2 ,contr +5784 e8c10000 ifetch 2 ,contr +5785 98467c00 isub temp ,null +5786 20628000 rtn zero +5787 e8c08000 ifetch 1 ,contr +5788 98c08c00 iadd contr ,contr +5789 2020577f branch le_att_get_short_uuid_loop + +le_att_get_handle_info_from_ptr: +578a 6801049c fetch 2 ,mem_le_cur_attlist_start_ptr +578b 2020578e branch le_att_get_handle_info_fast + +le_att_get_handle_info: +578c 473a402e bpatchx patch2e_4 ,mem_patch2e +578d 680144bc fetch 2 ,mem_ui_le_uuid_table + +le_att_get_handle_info_fast: +578e 98000c00 iforce contr +578f 18422200 copy temp ,rega + +le_att_get_handle_loop: +5790 e8c10000 ifetch 2 ,contr +5791 203a5799 branch le_att_unfind_handle ,blank +5792 9a267c00 isub rega ,null +5793 2022d79a branch le_att_finded_handle ,zero +5794 e8c08000 ifetch 1 ,contr +5795 98c08c00 iadd contr ,contr +5796 e8c08000 ifetch 1 ,contr +5797 98c08c00 iadd contr ,contr +5798 20205790 branch le_att_get_handle_loop + +le_att_unfind_handle: +5799 20207fef branch disable_blank + +le_att_finded_handle: +579a e8c08000 ifetch 1 ,contr +579b 600084a2 store 1 ,mem_le_cur_uuid_length +579c 1fe27200 copy pdata ,loopcnt +579d d8a004a3 arg mem_le_cur_uuid ,contw +579e 20407ef4 call memcpy_fast +579f e8c08000 ifetch 1 ,contr +57a0 600084b3 store 1 ,mem_le_curr_att_len +57a1 20407ea5 call store_contr +57a2 20207ff1 branch enable_blank + +le_modified_name: +57a3 473ac02e bpatchx patch2e_5 ,mem_patch2e +57a4 204057a6 call le_modified_name_att_list +57a5 202057b8 branch le_modified_name_adv + +le_modified_name_att_list: +57a6 d8402a00 arg uuid_chrctr_device_name ,temp +57a7 2040577c call le_att_get_short_uuid_ptr +57a8 207a0000 rtn blank +57a9 e8c08000 ifetch 1 ,contr +57aa 18c20a00 copy contr ,contw +57ab 6808c3af fetcht 1 ,mem_le_name_len +57ac 18427200 copy temp ,loopcnt +57ad 98467c00 isub temp ,null +57ae 242157b5 nbranch le_name_length_longer_than_att ,positive +57af 98460400 isub temp ,temp +57b0 d8c043b0 arg mem_le_name ,contr +57b1 20407f01 call memcpy +57b2 18427200 copy temp ,loopcnt +57b3 2442d7f0 ncall memcpy_empty ,zero +57b4 20600000 rtn + +le_name_length_longer_than_att: +57b5 1fe27200 copy pdata ,loopcnt +57b6 d8c043b0 arg mem_le_name ,contr +57b7 20207ef4 branch memcpy_fast + +le_modified_name_adv: +57b8 da60438f arg mem_le_adv_data_len + 32 ,regc +57b9 da204370 arg mem_le_adv_data ,rega +57ba 204057c5 call le_modified_name_adv_and_scan +57bb 58000000 setarg 0 +57bc 79347e00 setflag user ,0 ,pdata +57bd 60008a9a store 1 ,mem_pdatatemp +57be da6043af arg mem_le_scan_data_len + 32 ,regc +57bf da204390 arg mem_le_scan_data ,rega +57c0 204057c5 call le_modified_name_adv_and_scan +57c1 20740000 rtn user +57c2 68008a9a fetch 1 ,mem_pdatatemp +57c3 203a2a8c branch assert ,blank +57c4 20600000 rtn + +le_modified_name_adv_and_scan: +57c5 473b402e bpatchx patch2e_6 ,mem_patch2e +57c6 20407fe7 call enable_user +57c7 20407eda call clear_temp_block +57c8 da400000 arg 0 ,regb +57c9 d8a00ac3 arg mem_le_data_temp ,contw +57ca 204057df call le_modified_name_adv_loop +57cb 6800c3af fetch 1 ,mem_le_name_len +57cc 1fe08401 add pdata ,1 ,temp +57cd 9a40a200 iadd regb ,rega +57ce 1a20a202 increase 2 ,rega +57cf 1a267c1f sub rega ,0x1f ,null +57d0 242157dd nbranch le_modified_name_adv_and_scan_name_overflow ,positive +57d1 e0a88000 istoret 1 ,contw +57d2 d8400009 arg gap_adtype_local_name_complete ,temp +57d3 e0a88000 istoret 1 ,contw +57d4 98007200 iforce loopcnt +57d5 20407ef4 call memcpy_fast +57d6 1a222400 copy rega ,regb + +le_modified_name_adv_and_scan_store_data: +57d7 1a427e00 deposit regb +57d8 60008ac2 store 1 ,mem_le_data_len_temp +57d9 d8c00ac2 arg mem_le_data_len_temp ,contr +57da 5fffffe0 setarg -32 +57db 9a608a00 iadd regc ,contw +57dc 20207ebd branch memcpy32 + +le_modified_name_adv_and_scan_name_overflow: +57dd 20407fe9 call disable_user +57de 202057d7 branch le_modified_name_adv_and_scan_store_data + +le_modified_name_adv_loop: +57df ea208000 ifetch 1 ,rega +57e0 207a0000 rtn blank +57e1 1fe0fe01 pincrease 1 +57e2 e8c88000 ifetcht 1 ,contr +57e3 18467c09 sub temp ,gap_adtype_local_name_complete ,null +57e4 2022d7ee branch le_modified_name_adv_found_name ,zero +57e5 9a40a400 iadd regb ,regb +57e6 1a220c00 copy rega ,contr +57e7 98007200 iforce loopcnt +57e8 20407ef4 call memcpy_fast +57e9 18c22200 copy contr ,rega + +le_modified_name_adv_loop2: +57ea 1a227e00 deposit rega +57eb 9a667c00 isub regc ,null +57ec 20610000 rtn positive +57ed 202057df branch le_modified_name_adv_loop + +le_modified_name_adv_found_name: +57ee 9a20a200 iadd rega ,rega +57ef 202057ea branch le_modified_name_adv_loop2 + +memcpy_empty: +57f0 58000020 setarg space +57f1 e0a08000 istore 1 ,contw +57f2 c20057f0 loop memcpy_empty +57f3 20600000 rtn + +le_lpm_set_mult: +57f4 473bc02e bpatchx patch2e_7 ,mem_patch2e +57f5 7855fc00 disable wake +57f6 203757f8 branch le_lpm_set_mult_attempt ,attempt +57f7 2436d806 nbranch le_lpm_lost ,match + +le_lpm_set_mult_attempt: +57f8 20402bcb call lpm_match +57f9 680140c1 fetch 2 ,mem_rx_window_sniff +57fa 6001044d store 2 ,mem_le_receive_window +57fb 2436abde nbranch lpm_mult_short ,match +57fc c507abde bmark1 mark_old_packet ,lpm_mult_short +57fd 6800c50b fetch 1 ,mem_le_packet_size +57fe 243a2bde nbranch lpm_mult_short ,blank +57ff 6800c3dd fetch 1 ,mem_le_txlen +5800 243a2bde nbranch lpm_mult_short ,blank +5801 6800c4e9 fetch 1 ,mem_le_configuration +5802 c282abde bbit1 bit_ble_short_mult ,lpm_mult_short +5803 6800843f fetch 1 ,mem_le_state +5804 c282abde bbit1 lestate_update_param ,lpm_mult_short +5805 20202bc0 branch lpm_mult_wait_timeout + +le_lpm_lost: +5806 680940c1 fetcht 2 ,mem_rx_window_sniff +5807 18430400 rshift temp ,temp +5808 6801044d fetch 2 ,mem_le_receive_window +5809 9840fe00 iadd temp ,pdata +580a 6001044d store 2 ,mem_le_receive_window +580b 20202bd6 branch lpm_lost + +le_set_config_fixed_tk: +580c d8e00000 arg bit_ble_passkey_fixed_key ,queue +580d 20205824 branch le_set_config + +le_clr_config_fixed_tk: +580e d8e00000 arg bit_ble_passkey_fixed_key ,queue +580f 20205828 branch le_clr_config + +le_set_config_fixed_ltk: +5810 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue +5811 20205824 branch le_set_config + +le_clr_config_fixed_ltk: +5812 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue +5813 20205828 branch le_clr_config + +le_set_config_more_data: +5814 d8e00002 arg bit_ble_transmit_packet_by_md ,queue +5815 20205824 branch le_set_config + +le_clr_config_more_data: +5816 d8e00002 arg bit_ble_transmit_packet_by_md ,queue +5817 20205828 branch le_clr_config + +le_set_config_read_authentication: +5818 d8e00003 arg bit_ble_read_auth ,queue +5819 20205824 branch le_set_config + +le_clr_config_read_authentication: +581a d8e00003 arg bit_ble_read_auth ,queue +581b 20205828 branch le_clr_config + +le_set_config_write_authentication: +581c d8e00004 arg bit_ble_write_auth ,queue +581d 20205824 branch le_set_config + +le_clr_config_write_authentication: +581e d8e00004 arg bit_ble_write_auth ,queue +581f 20205828 branch le_clr_config + +le_set_config_short_mult: +5820 d8e00005 arg bit_ble_short_mult ,queue +5821 20205824 branch le_set_config + +le_clr_config_short_mult: +5822 d8e00005 arg bit_ble_short_mult ,queue +5823 20205828 branch le_clr_config + +le_set_config: +5824 6800c4e9 fetch 1 ,mem_le_configuration +5825 f9207e00 qset1 pdata +5826 6000c4e9 store 1 ,mem_le_configuration +5827 20600000 rtn + +le_clr_config: +5828 6800c4e9 fetch 1 ,mem_le_configuration +5829 f93ffe00 qset0 pdata +582a 6000c4e9 store 1 ,mem_le_configuration +582b 20600000 rtn + +le_set_fixed_ltk: +582c 58112233 setarg 0x112233 +582d 6001c4ea store 3 ,mem_le_fixed_ltk +582e 58445566 setarg 0x445566 +582f e0a18000 istore 3 ,contw +5830 58778899 setarg 0x778899 +5831 e0a18000 istore 3 ,contw +5832 58001122 setarg 0x001122 +5833 e0a18000 istore 3 ,contw +5834 58334455 setarg 0x334455 +5835 e0a18000 istore 3 ,contw +5836 58000066 setarg 0x66 +5837 e0a08000 istore 1 ,contw +5838 20600000 rtn + +le_set_justwork: +5839 59000302 setarg 0x01000302 +583a 60024453 store 4 ,mem_le_pres +583b 58010010 setarg 0x010010 +583c 6001c457 store 3 ,mem_le_pres_max_keysize +583d 7044c601 jam 1 ,mem_le_pairing_mode +583e 20600000 rtn + +le_fifo_malloc_tx_empty: +583f da200000 arg 0 ,rega +5840 d8200001 arg llid_empty ,type +5841 20205850 branch le_fifo_malloc_tx + +le_fifo_malloc_tx_ll: +5842 d8200003 arg llid_le_ll ,type +5843 20405850 call le_fifo_malloc_tx +5844 1a427e00 copy regb ,pdata +5845 e0a08000 istore 1 ,contw +5846 20600000 rtn + +le_fifo_malloc_tx_l2cap: +5847 18000202 force llid_l2cap_start ,type +5848 1a20a204 increase 4 ,rega +5849 20405850 call le_fifo_malloc_tx +584a 1a20a3fc increase -4 ,rega +584b 1a227e00 copy rega ,pdata +584c e0a10000 istore 2 ,contw +584d 1a427e00 copy regb ,pdata +584e e0a10000 istore 2 ,contw +584f 20600000 rtn + +le_fifo_malloc_tx: +5850 1a267cf0 sub rega ,240 ,null +5851 24212a8c nbranch assert ,positive +5852 6800c4ff fetch 1 ,mem_le_tx_buff_used +5853 d8400001 arg 1 ,temp +5854 df200004 arg le_tx_buff_count ,loopcnt + +le_fifo_malloc_tx_loop: +5855 98417c00 iand temp ,null +5856 2022d85a branch le_fifo_malloc_tx_got_empty ,zero +5857 18438400 lshift temp ,temp +5858 c2005855 loop le_fifo_malloc_tx_loop +5859 20202a8c branch assert + +le_fifo_malloc_tx_got_empty: +585a 9842fe00 ixor temp ,pdata +585b 6000c4ff store 1 ,mem_le_tx_buff_used +585c 1f267e04 sub loopcnt ,le_tx_buff_count ,pdata +585d 1ff27e00 lshift4 pdata ,pdata +585e 1ff27e00 lshift4 pdata ,pdata +585f d8401800 arg mem_le_tx_buffer0 ,temp +5860 98408400 iadd temp ,temp + +le_fifo_tx_find_empty_ptr: +5861 df200000 arg 0 ,loopcnt +5862 d8c04500 arg mem_le_tx_ptr0 ,contr + +le_fifo_tx_find_empty_ptr_loop: +5863 e8c10000 ifetch 2 ,contr +5864 203a5869 branch le_fifo_tx_found_empty_ptr ,blank +5865 1f227e00 copy loopcnt ,pdata +5866 1f20f201 increase 1 ,loopcnt +5867 c0825863 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop +5868 20202a8c branch assert + +le_fifo_tx_found_empty_ptr: +5869 18c08dfe increase -2 ,contr +586a e0c90000 istoret 2 ,contr +586b 18420a00 copy temp ,contw +586c 1a227e00 copy rega ,pdata +586d e0a08000 istore 1 ,contw +586e 58000000 setarg 0 +586f e0a08000 istore 1 ,contw +5870 18227e00 copy type ,pdata +5871 e0a08000 istore 1 ,contw +5872 20600000 rtn + +le_fifo_get_first_tx_ptr: +5873 68014500 fetch 2 ,mem_le_tx_ptr0 +5874 1fe20c00 copy pdata ,contr +5875 20600000 rtn + +le_fifo_get_second_tx_ptr: +5876 68014502 fetch 2 ,mem_le_tx_ptr1 +5877 1fe20c00 copy pdata ,contr +5878 20600000 rtn + +le_fifo_get_last_tx_ptr: +5879 2040587c call le_fifo_get_last_tx_ptr0 +587a 1fe20c00 copy pdata ,contr +587b 20600000 rtn + +le_fifo_get_last_tx_ptr0: +587c 68014506 fetch 2 ,mem_le_tx_ptr3 +587d 247a0000 nrtn blank +587e 68014504 fetch 2 ,mem_le_tx_ptr2 +587f 247a0000 nrtn blank +5880 68014502 fetch 2 ,mem_le_tx_ptr1 +5881 247a0000 nrtn blank +5882 68014500 fetch 2 ,mem_le_tx_ptr0 +5883 20600000 rtn + +le_fifo_get_first_l2cap_ptr: +5884 20405873 call le_fifo_get_first_tx_ptr +5885 18c08c03 increase 3 ,contr +5886 20600000 rtn + +le_fifo_get_first_att_ptr: +5887 20405873 call le_fifo_get_first_tx_ptr +5888 18c08c07 increase 7 ,contr +5889 20600000 rtn + +le_fifo_get_last_att_ptr: +588a 20405879 call le_fifo_get_last_tx_ptr +588b 18c08c07 increase 7 ,contr +588c 20600000 rtn + +le_fifo_get_last_l2cap_ptr: +588d 20405879 call le_fifo_get_last_tx_ptr +588e 18c08c03 increase 3 ,contr +588f 20600000 rtn + +le_fifo_check_full: +5890 68014506 fetch 2 ,mem_le_tx_ptr3 +5891 20600000 rtn + +le_fifo_check_nearly_full: +5892 68014504 fetch 2 ,mem_le_tx_ptr2 +5893 20600000 rtn + +le_fifo_check_empty: +5894 68014500 fetch 2 ,mem_le_tx_ptr0 +5895 20600000 rtn + +le_fifo_release_first_node: +5896 68014500 fetch 2 ,mem_le_tx_ptr0 +5897 d8401800 arg mem_le_tx_buffer0 ,temp +5898 98467e00 isub temp ,pdata +5899 1ff1fe00 rshift4 pdata ,pdata +589a 1ff18e00 rshift4 pdata ,queue +589b 6800c4ff fetch 1 ,mem_le_tx_buff_used +589c f93ffe00 qset0 pdata +589d 6000c4ff store 1 ,mem_le_tx_buff_used +589e df200000 arg 0 ,loopcnt + +le_fifo_release_first_node_loop: +589f 1f23fe00 lshift loopcnt ,pdata +58a0 d8404502 arg mem_le_tx_ptr1 ,temp +58a1 98408400 iadd temp ,temp +58a2 e8410000 ifetch 2 ,temp +58a3 184085fe increase -2 ,temp +58a4 e0410000 istore 2 ,temp +58a5 1f227e00 copy loopcnt ,pdata +58a6 1f20f201 increase 1 ,loopcnt +58a7 c081d89f bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop +58a8 58000000 setarg 0 +58a9 e0410000 istore 2 ,temp +58aa 20600000 rtn + +le_parse_att: +58ab e8c18000 ifetch 3 ,contr +58ac 60018477 store 3 ,mem_le_att_opcode +58ad c00158c1 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +58ae c001d8c9 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +58af c00258cc beq attop_find_information_request ,le_parse_att_find_information_request +58b0 c00358f2 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +58b1 c004593f beq attop_read_by_type_request ,le_parse_att_read_by_type_request +58b2 c00559bc beq attop_read_request ,le_parse_att_read_request +58b3 c00659e4 beq attop_read_blob_request ,le_parse_att_read_blob_request +58b4 c00859fa beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +58b5 c0095a2f beq attop_write_request ,le_parse_att_write_request +58b6 c00b5a48 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +58b7 c00c5a5b beq attop_execute_write_request ,le_parse_att_execute_write_request +58b8 c0295a60 beq attop_write_command ,le_parse_att_write_command +58b9 20600000 rtn + +le_send_att_exchange_mtu_requset: +58ba 18002203 force 3 ,rega +58bb 20405a82 call le_fifo_malloc_tx_l2cap_gatt +58bc 58000002 setarg attop_exchange_mtu_request +58bd e0a08000 istore 1 ,contw +58be 680144a6 fetch 2 ,mem_le_local_mtu +58bf e0a10000 istore 2 ,contw +58c0 20600000 rtn + +le_parse_att_exchange_mtu_request: +58c1 204058c9 call le_parse_att_exchange_mtu_response + +le_send_att_exchange_mtu_response: +58c2 18002203 force 3 ,rega +58c3 20405a82 call le_fifo_malloc_tx_l2cap_gatt +58c4 58000003 setarg attop_exchange_mtu_response +58c5 e0a08000 istore 1 ,contw +58c6 680144a6 fetch 2 ,mem_le_local_mtu +58c7 e0a10000 istore 2 ,contw +58c8 20600000 rtn + +le_parse_att_exchange_mtu_response: +58c9 1fecfe00 rshift8 pdata ,pdata +58ca 600144a8 store 2 ,mem_le_remote_mtu +58cb 20600000 rtn + +le_parse_att_find_information_request: +58cc 20405ab1 call le_get_search_handle_start_end_common +58cd 20407fe7 call enable_user +58ce 202058cf branch le_send_att_find_information_response + +le_send_att_find_information_response: +58cf d9600003 arg 3 ,timeup +58d0 20405756 call le_init_attlist_search + +le_send_att_find_information_res_loop: +58d1 2040575f call le_att_handle_inrange +58d2 203a58f0 branch le_send_att_find_information_res_end ,blank +58d3 242158ed nbranch le_send_att_find_information_res_next ,positive +58d4 18c08dfe increase -2 ,contr +58d5 20407ea5 call store_contr +58d6 20407e9c call get_contw +58d7 243458e1 nbranch le_send_att_find_information_res_store_info ,user +58d8 20407e85 call push_stack_rega_b_c +58d9 20407fe9 call disable_user +58da 18002214 force 20 ,rega +58db 20405a82 call le_fifo_malloc_tx_l2cap_gatt +58dc 20407e95 call pop_stack_rega_b_c +58dd 58000005 setarg attop_find_information_response +58de e0a08000 istore 1 ,contw +58df 58000001 setarg uuid_size_16bit +58e0 e0a08000 istore 1 ,contw + +le_send_att_find_information_res_store_info: +58e1 20407e9f call get_contr +58e2 e8c10000 ifetch 2 ,contr +58e3 e0a10000 istore 2 ,contw +58e4 e8c08000 ifetch 1 ,contr +58e5 1fe27200 copy pdata ,loopcnt +58e6 20407f01 call memcpy +58e7 20407ea2 call store_contw +58e8 196097ff increase -1 ,timeup +58e9 2022d8f0 branch le_send_att_find_information_res_end ,zero + +le_send_att_find_information_res_cont: +58ea e8c08000 ifetch 1 ,contr +58eb 98c08c00 iadd contr ,contr +58ec 202058d1 branch le_send_att_find_information_res_loop + +le_send_att_find_information_res_next: +58ed e8c08000 ifetch 1 ,contr +58ee 98c08c00 iadd contr ,contr +58ef 202058ea branch le_send_att_find_information_res_cont + +le_send_att_find_information_res_end: +58f0 20345a76 branch le_send_att_error_response_notfound ,user +58f1 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_find_by_type_value_request: +58f2 20405ab1 call le_get_search_handle_start_end_common +58f3 e8c10000 ifetch 2 ,contr +58f4 60014472 store 2 ,mem_le_search_uuid +58f5 20407ea5 call store_contr +58f6 d8a0445e arg mem_le_search_att_type_length ,contw +58f7 680144fc fetch 2 ,mem_le_l2cap_size +58f8 1fe0fff9 increase -7 ,pdata +58f9 204056db call le_get_search_common2 +58fa 20205905 branch le_send_att_find_by_type_value_response + +le_start_end_handle_check_1: +58fb 78547c00 disable user +58fc 6809445a fetcht 2 ,mem_le_search_handle_start +58fd 6801445c fetch 2 ,mem_le_search_handle_end +58fe 98467c00 isub temp ,null +58ff 24215902 nbranch le_start_end_handle_check_1_fail ,positive +5900 18427e00 deposit temp +5901 c1800000 rtnne 0 + +le_start_end_handle_check_1_fail: +5902 78347c00 enable user +5903 70047a01 jam att_err_invalid_handle ,mem_le_err_code +5904 20205a77 branch le_send_att_error_response + +le_send_att_find_by_type_value_response: +5905 204058fb call le_start_end_handle_check_1 +5906 20740000 rtn user +5907 68094472 fetcht 2 ,mem_le_search_uuid +5908 58002800 setarg uuid_gatt_primary_service +5909 98467c00 isub temp ,null +590a 2022d90c branch le_send_att_find_by_type_value_res_primary ,zero +590b 20205a76 branch le_send_att_error_response_notfound + +le_send_att_find_by_type_value_res_primary: +590c 7004b400 jam le_find_by_type_val_res_not_found ,mem_le_search_res +590d 6809445a fetcht 2 ,mem_le_search_handle_start +590e 60090aa2 storet 2 ,mem_temp +590f 2040578c call le_att_get_handle_info +5910 243a5a76 nbranch le_send_att_error_response_notfound ,blank + +le_send_att_find_primary_search_loop: +5911 68090aa2 fetcht 2 ,mem_temp +5912 2040578c call le_att_get_handle_info +5913 243a5925 nbranch le_send_att_error_response_notfound2 ,blank +5914 18c22200 copy contr ,rega +5915 680084b3 fetch 1 ,mem_le_curr_att_len +5916 1fe27200 copy pdata ,loopcnt +5917 6808c45e fetcht 1 ,mem_le_search_att_type_length +5918 98467c00 isub temp ,null +5919 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero +591a da40445f arg mem_le_search_att_type ,regb +591b 20407f88 call string_compare +591c 2022d928 branch le_send_att_find_primary_search_end_start_handle_found ,zero +591d 680104a3 fetch 2 ,mem_le_cur_uuid +591e 68094472 fetcht 2 ,mem_le_search_uuid +591f 98467c00 isub temp ,null +5920 2022d930 branch le_send_att_find_primary_search_end_ending_handle_found ,zero + +le_send_att_find_primary_search_loop1: +5921 68010aa2 fetch 2 ,mem_temp +5922 1fe0fe01 increase 1 ,pdata +5923 60010aa2 store 2 ,mem_temp +5924 20205911 branch le_send_att_find_primary_search_loop + +le_send_att_error_response_notfound2: +5925 680084b4 fetch 1 ,mem_le_search_res +5926 c000d930 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +5927 20205a76 branch le_send_att_error_response_notfound + +le_send_att_find_primary_search_end_start_handle_found: +5928 680104a3 fetch 2 ,mem_le_cur_uuid +5929 68094472 fetcht 2 ,mem_le_search_uuid +592a 98467c00 isub temp ,null +592b 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero +592c 7004b401 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +592d 68090aa2 fetcht 2 ,mem_temp +592e 6009049e storet 2 ,mem_le_cur_handle_start +592f 20205921 branch le_send_att_find_primary_search_loop1 + +le_send_att_find_primary_search_end_ending_handle_found: +5930 680084b4 fetch 1 ,mem_le_search_res +5931 c0005921 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +5932 7004b402 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +5933 68090aa2 fetcht 2 ,mem_temp +5934 184085ff increase -1 ,temp +5935 600904a0 storet 2 ,mem_le_cur_handle_end + +le_send_att_find_primary_search_end: +5936 da200005 arg 5 ,rega +5937 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5938 58000007 setarg attop_find_by_type_value_response +5939 e0a08000 istore 1 ,contw +593a 6801049e fetch 2 ,mem_le_cur_handle_start +593b e0a10000 istore 2 ,contw +593c 680104a0 fetch 2 ,mem_le_cur_handle_end +593d e0a10000 istore 2 ,contw +593e 20600000 rtn + +le_parse_att_read_by_type_request: +593f 20405ab1 call le_get_search_handle_start_end_common +5940 204056df call le_get_search_att_uuid +5941 20205942 branch le_send_att_read_by_type_response + +le_send_att_read_by_type_response: +5942 6809445a fetcht 2 ,mem_le_search_handle_start +5943 60090aa2 storet 2 ,mem_temp +5944 20405756 call le_init_attlist_search +5945 2040576d call le_att_get_handle_ptr2 +5946 18c08dfe increase -2 ,contr +5947 18c27e00 copy contr ,pdata +5948 6001049c store 2 ,mem_le_cur_attlist_start_ptr +5949 68094472 fetcht 2 ,mem_le_search_uuid +594a 58002a00 setarg uuid_chrctr_device_name +594b 98467c00 isub temp ,null +594c 2022d9a8 branch le_send_att_read_by_type_res_device_name ,zero +594d 58002803 setarg uuid_gatt_characteristic +594e 98467c00 isub temp ,null +594f 2422d990 nbranch le_send_att_read_by_type_res_not_characteristic ,zero +5950 d9600002 arg 2 ,timeup + +le_send_att_read_by_type_response_loop: +5951 20405a88 call le_att_check_handle_end +5952 2421596d nbranch le_send_att_read_by_type_response_end ,positive +5953 68090aa2 fetcht 2 ,mem_temp +5954 2040578a call le_att_get_handle_info_from_ptr +5955 c000d96d beq 1 ,le_send_att_read_by_type_response_end +5956 20405a94 call le_att_same_uuid +5957 2422d96b nbranch le_send_att_read_by_type_response_next_handle ,zero +5958 2434596f nbranch le_send_att_read_by_type_res_found_next ,user +5959 78547c00 disable user +595a da200014 arg 20 ,rega +595b 20405a82 call le_fifo_malloc_tx_l2cap_gatt +595c 58000009 setarg attop_read_by_type_response +595d e0a08000 istore 1 ,contw +595e 18a26000 copy contw ,alarm +595f 18a08a01 increase 1 ,contw +5960 2040597d call le_send_att_read_by_type_write_properties +5961 20405a84 call le_att_next_handle +5962 2040578a call le_att_get_handle_info_from_ptr +5963 20405984 call le_send_att_read_by_type_write_uuid +5964 680084a2 fetch 1 ,mem_le_cur_uuid_length +5965 1fe0fe05 increase 5 ,pdata +5966 e6008000 istore 1 ,alarm +5967 680084a2 fetch 1 ,mem_le_cur_uuid_length +5968 c008596d beq 16 ,le_send_att_read_by_type_response_end +5969 196097ff increase -1 ,timeup +596a 2022d96d branch le_send_att_read_by_type_response_end ,zero + +le_send_att_read_by_type_response_next_handle: +596b 20405a84 call le_att_next_handle +596c 20205951 branch le_send_att_read_by_type_response_loop + +le_send_att_read_by_type_response_end: +596d 20345a76 branch le_send_att_error_response_notfound ,user +596e 20205aa5 branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_found_next: +596f 20405a97 call le_store_att_record +5970 20405a84 call le_att_next_handle +5971 2040578a call le_att_get_handle_info_from_ptr +5972 680084a2 fetch 1 ,mem_le_cur_uuid_length +5973 c008596d beq 16 ,le_send_att_read_by_type_response_end +5974 20407e9c call get_contw +5975 68010aa2 fetch 2 ,mem_temp +5976 1fe0ffff increase -1 ,pdata +5977 e0a10000 istore 2 ,contw +5978 20405aa1 call le_write_att_record_common +5979 20405984 call le_send_att_read_by_type_write_uuid +597a 196097ff increase -1 ,timeup +597b 2022d96d branch le_send_att_read_by_type_response_end ,zero +597c 2020596b branch le_send_att_read_by_type_response_next_handle + +le_send_att_read_by_type_write_properties: +597d 68010aa2 fetch 2 ,mem_temp +597e e0a10000 istore 2 ,contw +597f 680084b3 fetch 1 ,mem_le_curr_att_len +5980 1fe27200 copy pdata ,loopcnt +5981 20407e9f call get_contr +5982 20407ef4 call memcpy_fast +5983 20207ea2 branch store_contw + +le_send_att_read_by_type_write_uuid: +5984 20407e9c call get_contw +5985 68010aa2 fetch 2 ,mem_temp +5986 e0a10000 istore 2 ,contw +5987 20407ea2 call store_contw +5988 680084a2 fetch 1 ,mem_le_cur_uuid_length +5989 1fe27200 copy pdata ,loopcnt +598a 20407e9c call get_contw +598b 20407e9f call get_contr +598c 9f260c00 isub loopcnt ,contr +598d 18c08dff increase -1 ,contr +598e 20407ef4 call memcpy_fast +598f 20207ea2 branch store_contw + +le_send_att_read_by_type_res_not_characteristic: +5990 6809445a fetcht 2 ,mem_le_search_handle_start +5991 60090aa2 storet 2 ,mem_temp + +le_send_att_read_by_type_res_not_char_loop: +5992 20405a88 call le_att_check_handle_end +5993 24215a76 nbranch le_send_att_error_response_notfound ,positive +5994 2040578a call le_att_get_handle_info_from_ptr +5995 c000da76 beq 1 ,le_send_att_error_response_notfound +5996 20405a94 call le_att_same_uuid +5997 2422d9a6 nbranch le_send_att_read_by_type_res_not_char_next ,zero + +le_send_att_read_by_type_res_not_char_common: +5998 da200014 arg 20 ,rega +5999 20405a82 call le_fifo_malloc_tx_l2cap_gatt +599a 58000009 setarg attop_read_by_type_response +599b e0a08000 istore 1 ,contw +599c 680084b3 fetch 1 ,mem_le_curr_att_len +599d 1fe27200 copy pdata ,loopcnt +599e 1fe0fe02 increase 2 ,pdata +599f e0a08000 istore 1 ,contw +59a0 68010aa2 fetch 2 ,mem_temp +59a1 e0a10000 istore 2 ,contw +59a2 20407e9f call get_contr +59a3 20407ef4 call memcpy_fast +59a4 20407ea2 call store_contw +59a5 20205aa5 branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_not_char_next: +59a6 20405a84 call le_att_next_handle +59a7 20205992 branch le_send_att_read_by_type_res_not_char_loop + +le_send_att_read_by_type_res_device_name: +59a8 d8402a00 arg uuid_chrctr_device_name ,temp +59a9 2040577c call le_att_get_short_uuid_ptr +59aa 207a0000 rtn blank +59ab 18c08dfb increase -5 ,contr +59ac e8c10000 ifetch 2 ,contr +59ad 60010aa2 store 2 ,mem_temp +59ae da200014 arg 20 ,rega +59af 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59b0 58000009 setarg attop_read_by_type_response +59b1 e0a08000 istore 1 ,contw +59b2 6800c3af fetch 1 ,mem_le_name_len +59b3 1fe27200 copy pdata ,loopcnt +59b4 1fe0fe02 increase 2 ,pdata +59b5 e0a08000 istore 1 ,contw +59b6 68010aa2 fetch 2 ,mem_temp +59b7 e0a10000 istore 2 ,contw +59b8 d8c043b0 arg mem_le_name ,contr +59b9 20407ef4 call memcpy_fast +59ba 20407ea2 call store_contw +59bb 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_read_request: +59bc 68090478 fetcht 2 ,mem_le_att_handle +59bd 6800c4e9 fetch 1 ,mem_le_configuration +59be c281d9dd bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth + +le_send_att_read_response: +59bf 2040576a call le_att_get_handle_ptr +59c0 203a5a76 branch le_send_att_error_response_notfound ,blank +59c1 18c08dfe increase -2 ,contr +59c2 e8c10000 ifetch 2 ,contr +59c3 d8402a00 arg uuid_chrctr_device_name ,temp +59c4 98467c00 isub temp ,null +59c5 2022d9d3 branch le_send_device_name ,zero +59c6 e8c08000 ifetch 1 ,contr +59c7 1fe67c16 sub pdata ,22 ,null +59c8 202159ca branch le_send_att_read_response_less ,positive +59c9 18007e16 force 22 ,pdata + +le_send_att_read_response_less: +59ca 1fe22600 copy pdata ,regc +59cb 20407ea5 call store_contr +59cc 1a60a201 add regc ,1 ,rega +59cd 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59ce 5800000b setarg attop_read_response +59cf e0a08000 istore 1 ,contw +59d0 1a627200 copy regc ,loopcnt +59d1 20407e9f call get_contr +59d2 20207f01 branch memcpy + +le_send_device_name: +59d3 20407ea5 call store_contr +59d4 6800c3af fetch 1 ,mem_le_name_len +59d5 1fe0a201 add pdata ,1 ,rega +59d6 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59d7 5800000b setarg attop_read_response +59d8 e0a08000 istore 1 ,contw +59d9 6800c3af fetch 1 ,mem_le_name_len +59da 1fe27200 copy pdata ,loopcnt +59db d8c043b0 arg mem_le_name ,contr +59dc 20207f01 branch memcpy + +le_send_att_read_response_check_auth: +59dd 680144fa fetch 2 ,mem_le_pairing_handle +59de 98467c00 isub temp ,null +59df 2422d9bf nbranch le_send_att_read_response ,zero +59e0 20405a42 call le_check_encrypt_state +59e1 243459bf nbranch le_send_att_read_response ,user +59e2 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +59e3 20205a77 branch le_send_att_error_response + +le_parse_att_read_blob_request: +59e4 e8c10000 ifetch 2 ,contr +59e5 6001445e store 2 ,mem_le_att_offset + +le_send_att_read_blob_response: +59e6 da200014 arg 20 ,rega +59e7 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59e8 5800000d setarg attop_read_blob_response +59e9 e0a08000 istore 1 ,contw +59ea 6801445e fetch 2 ,mem_le_att_offset +59eb 98002200 iforce rega +59ec 68090478 fetcht 2 ,mem_le_att_handle +59ed 2040576a call le_att_get_handle_ptr +59ee 203a5a76 branch le_send_att_error_response_notfound ,blank +59ef e8c08000 ifetch 1 ,contr +59f0 9a267200 isub rega ,loopcnt +59f1 24215a76 nbranch le_send_att_error_response_notfound ,positive +59f2 1f267c16 sub loopcnt ,22 ,null +59f3 202159f5 branch le_send_att_read_blob_response_less ,positive +59f4 18007216 force 22 ,loopcnt + +le_send_att_read_blob_response_less: +59f5 1a227e00 deposit rega +59f6 98c08c00 iadd contr ,contr +59f7 20407ef4 call memcpy_fast +59f8 20407ea2 call store_contw +59f9 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_read_by_group_type_request: +59fa 20405ab1 call le_get_search_handle_start_end_common +59fb 204056d7 call le_get_search_att_type +59fc 202059fd branch le_send_att_read_by_group_type_response + +le_send_att_read_by_group_type_response: +59fd d9600002 arg 2 ,timeup +59fe 6809445a fetcht 2 ,mem_le_search_handle_start +59ff 60090aa2 storet 2 ,mem_temp +5a00 20405756 call le_init_attlist_search +5a01 2040576d call le_att_get_handle_ptr2 +5a02 18c08dfe increase -2 ,contr +5a03 18c27e00 copy contr ,pdata +5a04 6001049c store 2 ,mem_le_cur_attlist_start_ptr + +le_send_att_read_by_group_type_response_loop: +5a05 20405a88 call le_att_check_handle_end +5a06 24215a25 nbranch le_send_att_read_by_group_type_end0 ,positive +5a07 68090aa2 fetcht 2 ,mem_temp +5a08 2040578a call le_att_get_handle_info_from_ptr +5a09 c000da28 beq 1 ,le_send_att_read_by_group_type_end1 +5a0a 20405a8c call le_att_same_type +5a0b 2422da23 nbranch le_send_att_read_by_group_type_next_handle ,zero +5a0c 19627e00 copy timeup ,pdata +5a0d c0005a28 beq 0 ,le_send_att_read_by_group_type_end1 +5a0e 24345a19 nbranch le_send_att_read_by_group_type_store_write_record ,user +5a0f 78547c00 disable user +5a10 da200014 arg 20 ,rega +5a11 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a12 58000011 setarg attop_read_by_group_type_response +5a13 e0a08000 istore 1 ,contw +5a14 680084b3 fetch 1 ,mem_le_curr_att_len +5a15 1fe0fe04 increase 4 ,pdata +5a16 e0a08000 istore 1 ,contw +5a17 20407ea2 call store_contw +5a18 20205a1f branch le_send_att_read_by_group_type_store_record + +le_send_att_read_by_group_type_store_write_record: +5a19 680084b3 fetch 1 ,mem_le_curr_att_len +5a1a c0085a28 beq 16 ,le_send_att_read_by_group_type_end1 +5a1b 68010aa2 fetch 2 ,mem_temp +5a1c 1fe0ffff increase -1 ,pdata +5a1d 600104a0 store 2 ,mem_le_cur_handle_end +5a1e 20405a9c call le_write_att_record + +le_send_att_read_by_group_type_store_record: +5a1f 68010aa2 fetch 2 ,mem_temp +5a20 6001049e store 2 ,mem_le_cur_handle_start +5a21 20405a97 call le_store_att_record +5a22 196097ff increase -1 ,timeup + +le_send_att_read_by_group_type_next_handle: +5a23 20405a84 call le_att_next_handle +5a24 20205a05 branch le_send_att_read_by_group_type_response_loop + +le_send_att_read_by_group_type_end0: +5a25 68010aa2 fetch 2 ,mem_temp +5a26 600104a0 store 2 ,mem_le_cur_handle_end +5a27 20205a2c branch le_send_att_read_by_group_type_end_common + +le_send_att_read_by_group_type_end1: +5a28 68010aa2 fetch 2 ,mem_temp +5a29 1fe0ffff increase -1 ,pdata +5a2a 600104a0 store 2 ,mem_le_cur_handle_end +5a2b 20205a2c branch le_send_att_read_by_group_type_end_common + +le_send_att_read_by_group_type_end_common: +5a2c 20345a76 branch le_send_att_error_response_notfound ,user +5a2d 20405a9c call le_write_att_record +5a2e 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_write_request: +5a2f 18c22200 copy contr ,rega +5a30 680144fc fetch 2 ,mem_le_l2cap_size +5a31 1fe0a5fd add pdata ,-3 ,regb +5a32 204056e2 call le_writeatt_cb + +le_send_att_write_response_check_auth: +5a33 6800c4e9 fetch 1 ,mem_le_configuration +5a34 c3025a3d bbit0 bit_ble_write_auth ,le_send_att_write_response +5a35 68090478 fetcht 2 ,mem_le_att_handle +5a36 680144fa fetch 2 ,mem_le_pairing_handle +5a37 98467c00 isub temp ,null +5a38 2422da3d nbranch le_send_att_write_response ,zero +5a39 20405a42 call le_check_encrypt_state +5a3a 24345a3d nbranch le_send_att_write_response ,user +5a3b 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +5a3c 20205a77 branch le_send_att_error_response + +le_send_att_write_response: +5a3d 18002201 force 1 ,rega +5a3e 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a3f 58000013 setarg attop_write_response +5a40 e0a08000 istore 1 ,contw +5a41 20600000 rtn + +le_check_encrypt_state: +5a42 20407fe9 call disable_user +5a43 6800c4c6 fetch 1 ,mem_le_pairing_mode +5a44 c1000000 rtneq le_pairing_mode_none +5a45 6800c040 fetch 1 ,mem_context +5a46 c3820000 rtnbit1 lestate_encryption +5a47 20207fe7 branch enable_user + +le_parse_att_prepare_write_request: +5a48 18c0a202 add contr ,2 ,rega +5a49 680144fc fetch 2 ,mem_le_l2cap_size +5a4a 1fe0a5fb add pdata ,-5 ,regb +5a4b 204056e2 call le_writeatt_cb +5a4c 20205a4d branch le_send_att_prepare_write_response + +le_send_att_prepare_write_response: +5a4d 680144fc fetch 2 ,mem_le_l2cap_size +5a4e 1fe22200 copy pdata ,rega +5a4f 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a50 58000017 setarg attop_prepare_write_response +5a51 e0a08000 istore 1 ,contw +5a52 68010478 fetch 2 ,mem_le_att_handle +5a53 e0a10000 istore 2 ,contw +5a54 680144fc fetch 2 ,mem_le_l2cap_size +5a55 1fe0f3fb add pdata ,-5 ,loopcnt +5a56 6801450d fetch 2 ,mem_le_payload_ptr +5a57 1fe08c07 add pdata ,7 ,contr +5a58 e8c10000 ifetch 2 ,contr +5a59 e0a10000 istore 2 ,contw +5a5a 20207ef4 branch memcpy_fast + +le_parse_att_execute_write_request: + +le_send_att_execute_write_response: +5a5b 18002201 force 1 ,rega +5a5c 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a5d 58000019 setarg attop_execute_write_response +5a5e e0a08000 istore 1 ,contw +5a5f 20600000 rtn + +le_parse_att_write_command: +5a60 18c22200 copy contr ,rega +5a61 680144fc fetch 2 ,mem_le_l2cap_size +5a62 1fe0a5fd add pdata ,-3 ,regb +5a63 202056e2 branch le_writeatt_cb + +le_att_malloc_tx_notify: +5a64 18422600 copy temp ,regc +5a65 1a20a203 increase 3 ,rega +5a66 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a67 1a20a3fd increase -3 ,rega +5a68 5800001b setarg attop_handle_value_notification +5a69 e0a08000 istore 1 ,contw +5a6a 1a620400 copy regc ,temp +5a6b e0a90000 istoret 2 ,contw +5a6c 20600000 rtn + +le_att_malloc_tx_indication: +5a6d 18422600 copy temp ,regc +5a6e 1a20a203 increase 3 ,rega +5a6f 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a70 1a20a3fd increase -3 ,rega +5a71 5800001d setarg attop_handle_value_indication +5a72 e0a08000 istore 1 ,contw +5a73 1a620400 copy regc ,temp +5a74 e0a90000 istoret 2 ,contw +5a75 20600000 rtn + +le_send_att_error_response_notfound: +5a76 70047a0a jam att_err_attribute_not_found ,mem_le_err_code + +le_send_att_error_response: +5a77 18002205 force 5 ,rega +5a78 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a79 58000001 setarg attop_error_response +5a7a e0a08000 istore 1 ,contw +5a7b 68008477 fetch 1 ,mem_le_att_opcode +5a7c e0a08000 istore 1 ,contw +5a7d 68010478 fetch 2 ,mem_le_att_handle +5a7e e0a10000 istore 2 ,contw +5a7f 6800847a fetch 1 ,mem_le_err_code +5a80 e0a08000 istore 1 ,contw +5a81 20600000 rtn + +le_fifo_malloc_tx_l2cap_gatt: +5a82 18002404 force le_l2cap_cid_att ,regb +5a83 20205847 branch le_fifo_malloc_tx_l2cap + +le_att_next_handle: +5a84 68090aa2 fetcht 2 ,mem_temp +5a85 18408401 increase 1 ,temp +5a86 60090aa2 storet 2 ,mem_temp +5a87 20600000 rtn + +le_att_check_handle_end: +5a88 68090aa2 fetcht 2 ,mem_temp +5a89 6801445c fetch 2 ,mem_le_search_handle_end +5a8a 98467c00 isub temp ,null +5a8b 20600000 rtn + +le_att_same_type: +5a8c 6808c45e fetcht 1 ,mem_le_search_att_type_length +5a8d da20445f arg mem_le_search_att_type ,rega + +le_att_check_same_common: +5a8e 680084a2 fetch 1 ,mem_le_cur_uuid_length +5a8f 1fe27200 copy pdata ,loopcnt +5a90 98467c00 isub temp ,null +5a91 24628000 nrtn zero +5a92 da4004a3 arg mem_le_cur_uuid ,regb +5a93 20207f88 branch string_compare + +le_att_same_uuid: +5a94 6808c471 fetcht 1 ,mem_le_search_uuid_length +5a95 da204472 arg mem_le_search_uuid ,rega +5a96 20205a8e branch le_att_check_same_common + +le_store_att_record: +5a97 680084b3 fetch 1 ,mem_le_curr_att_len +5a98 60008101 store 1 ,mem_tmp_buffer +5a99 1fe27200 copy pdata ,loopcnt +5a9a 20407e9f call get_contr +5a9b 20207ef4 branch memcpy_fast + +le_write_att_record: +5a9c 20407e9c call get_contw +5a9d 6801049e fetch 2 ,mem_le_cur_handle_start +5a9e e0a10000 istore 2 ,contw +5a9f 680104a0 fetch 2 ,mem_le_cur_handle_end +5aa0 e0a10000 istore 2 ,contw + +le_write_att_record_common: +5aa1 68008101 fetch 1 ,mem_tmp_buffer +5aa2 1fe27200 copy pdata ,loopcnt +5aa3 20407ef4 call memcpy_fast +5aa4 20207ea2 branch store_contw + +le_send_auto_len_by_mem: +5aa5 20407e9c call get_contw +5aa6 2040588a call le_fifo_get_last_att_ptr +5aa7 18a27e00 copy contw ,pdata +5aa8 98c62200 isub contr ,rega +5aa9 2040588d call le_fifo_get_last_l2cap_ptr +5aaa 1a227e00 copy rega ,pdata +5aab e0c10000 istore 2 ,contr +5aac 1a20a204 increase 4 ,rega +5aad 20405879 call le_fifo_get_last_tx_ptr +5aae 1a227e00 copy rega ,pdata +5aaf e0c08000 istore 1 ,contr +5ab0 20600000 rtn + +le_get_search_handle_start_end_common: +5ab1 1fecfe00 rshift8 pdata ,pdata +5ab2 6001445a store 2 ,mem_le_search_handle_start +5ab3 e8c10000 ifetch 2 ,contr +5ab4 6001445c store 2 ,mem_le_search_handle_end +5ab5 20600000 rtn + +le_parse_signaling: +5ab6 e8c08000 ifetch 1 ,contr +5ab7 e8c88000 ifetcht 1 ,contr +5ab8 e8c90000 ifetcht 2 ,contr +5ab9 c009dabb beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +5aba 20600000 rtn + +le_l2cap_parse_conn_parameter_update_rsp: +5abb e8c10000 ifetch 2 ,contr +5abc 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +5abd 700a9940 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +5abe 20207d86 branch ui_ipc_send_event + +le_l2cap_tx_update_req: +5abf da20000c arg 0x0c ,rega +5ac0 da600012 arg l2cap_connection_parameter_update_request ,regc +5ac1 20405ac7 call le_fifo_malloc_tx_l2cap_signaling +5ac2 58000008 setarg 0x08 +5ac3 e0a10000 istore 2 ,contw +5ac4 68044496 fetch 8 ,mem_le_interval_min +5ac5 e0a40000 istore 8 ,contw +5ac6 20600000 rtn + +le_fifo_malloc_tx_l2cap_signaling: +5ac7 20405acf call le_l2cap_update_signaling_identifier +5ac8 da400005 arg le_l2cap_cid_signal ,regb +5ac9 20405847 call le_fifo_malloc_tx_l2cap +5aca 1a627e00 copy regc ,pdata +5acb e0a08000 istore 1 ,contw +5acc 6800c508 fetch 1 ,mem_le_signaling_identifier +5acd e0a08000 istore 1 ,contw +5ace 20600000 rtn + +le_l2cap_update_signaling_identifier: +5acf 6800c508 fetch 1 ,mem_le_signaling_identifier +5ad0 1fe0fe01 pincrease 1 +5ad1 6000c508 store 1 ,mem_le_signaling_identifier +5ad2 c1800000 rtnne 0 + +le_l2cap_reset_signaling_identifier: +5ad3 70450801 jam 1 ,mem_le_signaling_identifier +5ad4 20600000 rtn + +le_pairing_mode_init: +5ad5 6800c4c6 fetch 1 ,mem_le_pairing_mode +5ad6 c0005ae4 beq le_pairing_mode_none ,le_set_no_pairing +5ad7 c000dae7 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +5ad8 c0015ae9 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +5ad9 c040dadd beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +5ada c0415adf beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +5adb c041dae2 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +5adc 20600000 rtn + +le_set_pairing_mode_secure_justwork: +5add 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +5ade 20205ae5 branch le_set_noinputnooutput + +le_set_pairing_mode_secure_numeric: +5adf 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +5ae0 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap +5ae1 20600000 rtn + +le_set_pairing_mode_secure_passkey: +5ae2 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +5ae3 20205aea branch le_set_displayonly + +le_set_no_pairing: +5ae4 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth + +le_set_noinputnooutput: +5ae5 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +5ae6 20600000 rtn + +le_set_pairing_mode_lagacy_just_work: +5ae7 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth +5ae8 20205ae5 branch le_set_noinputnooutput + +le_set_pairing_mode_lagacy_passkey: +5ae9 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth + +le_set_displayonly: +5aea 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap +5aeb 20600000 rtn + +le_secure_connection_enable: +5aec 6800c456 fetch 1 ,mem_le_pres_auth +5aed 79207e03 set1 le_auth_secure_connection_pairing_bit ,pdata +5aee 6000c456 store 1 ,mem_le_pres_auth +5aef 20600000 rtn + +le_secure_connection_disable: +5af0 6800c456 fetch 1 ,mem_le_pres_auth +5af1 793ffe03 set0 le_auth_secure_connection_pairing_bit ,pdata +5af2 6000c456 store 1 ,mem_le_pres_auth +5af3 20600000 rtn + +le_parse_smp: +5af4 e8c08000 ifetch 1 ,contr +5af5 c000db09 beq smp_pairing_request ,le_parse_smp_pairing_request +5af6 c001db30 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +5af7 c0025b4d beq smp_pairing_random ,le_parse_smp_pairing_random +5af8 c002db5a beq smp_pairing_failed ,le_parse_smp_pairing_failed +5af9 c0035b80 beq smp_encryption_information ,le_parse_smp_encryption_information +5afa c003dbc4 beq smp_master_identification ,le_parse_smp_master_identification +5afb c0045baf beq smp_identity_information ,le_parse_smp_identity_information +5afc c004dbc0 beq smp_identity_address_information ,le_parse_smp_identity_address_information +5afd c0055bc4 beq smp_signing_information ,le_parse_smp_signing_information +5afe c005dbc4 beq smp_security_request ,le_parse_smp_security_request +5aff c0065bc5 beq smp_pairing_public_key ,le_parse_smp_public_key +5b00 c006dbca beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +5b01 20600000 rtn + +le_send_smp_security_request: +5b02 18002202 force 2 ,rega +5b03 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b04 5800000b setarg smp_security_request +5b05 e0a08000 istore 1 ,contw +5b06 6800c456 fetch 1 ,mem_le_pres_auth +5b07 e0a08000 istore 1 ,contw +5b08 20600000 rtn + +le_parse_smp_pairing_request: +5b09 6000c44c store 1 ,mem_le_preq +5b0a e8c30000 ifetch 6 ,contr +5b0b e0a30000 istore 6 ,contw +5b0c 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b0d c0005b5f beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +5b0e 20405b2b call le_send_smp_pairing_response +5b0f 20405b26 call le_check_master_support_secure_connect +5b10 7044c403 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +5b11 6800c44d fetch 1 ,mem_le_preq_iocap +5b12 c0005b18 beq flag_iocap_displayonly ,le_set_tk_0 +5b13 c000db18 beq flag_iocap_displayyesno ,le_set_tk_0 +5b14 c001db18 beq flag_iocap_noinputnooutput ,le_set_tk_0 +5b15 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b16 c0015b1b beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +5b17 c1418000 rtneq le_pairing_mode_secure_connect_passkey + +le_set_tk_0: +5b18 dfe00000 arg 0 ,pdata +5b19 600244c7 store 4 ,mem_le_tk +5b1a 20600000 rtn + +le_parse_smp_pairing_req_passkey: +5b1b 6800c4e9 fetch 1 ,mem_le_configuration +5b1c c2805b24 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey + +le_genernate_tk: +5b1d da2044c7 arg mem_le_tk ,rega +5b1e 1a220a00 copy rega ,contw +5b1f df200003 arg 3 ,loopcnt +5b20 2040630d call generate_random_loop +5b21 680144c9 fetch 2 ,mem_le_tk + 2 +5b22 1fe17e07 and_into 0x7 ,pdata +5b23 600144c9 store 2 ,mem_le_tk + 2 + +le_parse_smp_pairing_req_fixed_passkey: +5b24 700a9934 jam bt_evt_le_tk_generate ,mem_fifo_temp +5b25 20207d86 branch ui_ipc_send_event + +le_check_master_support_secure_connect: +5b26 6800c44f fetch 1 ,mem_le_preq_auth +5b27 c3818000 rtnbit1 le_auth_secure_connection_pairing_bit +5b28 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b29 c4038000 rtnbit0 le_pairing_mode_secure_connect_bit +5b2a 20203402 branch app_ble_disconnect + +le_send_smp_pairing_response: +5b2b 18002207 force 7 ,rega +5b2c 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b2d 6803c453 fetch 7 ,mem_le_pres +5b2e e0a38000 istore 7 ,contw +5b2f 20600000 rtn + +le_parse_smp_pairing_confirm: +5b30 18c22200 copy contr ,rega +5b31 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b32 c041db37 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +5b33 1a220c00 copy rega ,contr +5b34 d8a0442a arg mem_le_rconfirm ,contw +5b35 20407ebf call memcpy16 +5b36 20205b3d branch le_send_smp_pairing_confirm + +le_parse_smp_pairing_confirm_secure_passkey: +5b37 1a220c00 copy rega ,contr +5b38 d8a0442a arg mem_le_rconfirm ,contw +5b39 20407ebf call memcpy16 +5b3a 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5b3b 7044c108 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +5b3c 20600000 rtn + +le_send_smp_pairing_confirm: +5b3d 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b3e c283db45 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +5b3f 2040739c call generate_confirm +5b40 18002211 force 17 ,rega +5b41 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b42 58000003 setarg smp_pairing_confirm +5b43 e0a08000 istore 1 ,contw +5b44 20207497 branch store_aes_result + +le_send_smp_pairing_confirm_sc: +5b45 d8a0443a arg mem_le_srand ,contw +5b46 2040630c call generate_random +5b47 204071c5 call function_f4_cb +5b48 18002211 force 17 ,rega +5b49 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b4a 58000003 setarg smp_pairing_confirm +5b4b e0a08000 istore 1 ,contw +5b4c 20207201 branch load_inverse_result + +le_parse_smp_pairing_random: +5b4d 18c22200 copy contr ,rega +5b4e 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b4f c283db61 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +5b50 1a220c00 copy rega ,contr +5b51 20407394 call authenticate_rconfirm +5b52 2022db75 branch le_parse_smp_pairing_random_success ,zero + +le_send_pairing_confirm_value_failed: +5b53 70047b04 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason + +le_send_pairing_failed: +5b54 18002202 force 2 ,rega +5b55 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b56 58000005 setarg smp_pairing_failed +5b57 e0a08000 istore 1 ,contw +5b58 6800847b fetch 1 ,mem_le_ll_pairing_fail_reason +5b59 e0a08000 istore 1 ,contw + +le_parse_smp_pairing_failed: +5b5a 18000e0a force smp_pairing_timer ,queue +5b5b 20407f07 call timer_stop +5b5c 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state +5b5d 700a9930 jam bt_evt_le_pairing_fail ,mem_fifo_temp +5b5e 20207d86 branch ui_ipc_send_event + +le_smp_pairing_fail_reason_not_support_pairing: +5b5f 70047b05 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +5b60 20205b54 branch le_send_pairing_failed + +le_parse_smp_pairing_random_sc: +5b61 d8a0042f arg mem_le_mrand ,contw +5b62 1a220c00 copy rega ,contr +5b63 20407ebf call memcpy16 +5b64 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b65 c041db6c beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +5b66 2040714f call function_g2 +5b67 20405b7a call le_send_smp_pairing_random +5b68 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b69 c1c10000 rtnne le_pairing_mode_secure_connect_numeric +5b6a 700a993b jam bt_evt_le_gkey_generate ,mem_fifo_temp +5b6b 20207d86 branch ui_ipc_send_event + +le_parse_smp_pairing_random_sc_passkey: +5b6c 204071ba call function_f4_ca +5b6d d8a00af2 arg mem_aes_cmac_temp ,contw +5b6e 20407201 call load_inverse_result +5b6f da200af2 arg mem_aes_cmac_temp ,rega +5b70 da40442a arg mem_le_rconfirm ,regb +5b71 df200010 arg 16 ,loopcnt +5b72 20407f88 call string_compare +5b73 2422db53 nbranch le_send_pairing_confirm_value_failed ,zero +5b74 20205b7a branch le_send_smp_pairing_random + +le_parse_smp_pairing_random_success: +5b75 20407390 call generate_stk +5b76 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp +5b77 20407d86 call ui_ipc_send_event +5b78 70442901 jam 1 ,mem_ltk_exists +5b79 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state + +le_send_smp_pairing_random: +5b7a 18002211 force 17 ,rega +5b7b 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b7c 58000004 setarg smp_pairing_random +5b7d e0a08000 istore 1 ,contw +5b7e d8c0443a arg mem_le_srand ,contr +5b7f 20207ebf branch memcpy16 + +le_parse_smp_encryption_information: +5b80 d8a0041f arg mem_le_peer_ltk ,contw +5b81 20207ebf branch memcpy16 + +le_send_smp_encryption_information: +5b82 18002211 force 17 ,rega +5b83 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b84 58000006 setarg smp_encryption_information +5b85 e0a08000 istore 1 ,contw +5b86 6800c4e9 fetch 1 ,mem_le_configuration +5b87 c280db8a bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +5b88 d8c04419 arg mem_le_ltk ,contr +5b89 20207ebf branch memcpy16 + +le_send_fixed_ltk: +5b8a d8c044ea arg mem_le_fixed_ltk ,contr +5b8b 20207ebf branch memcpy16 + +le_send_smp_master_identification: +5b8c d8a044cb arg mem_le_ediv ,contw +5b8d 1800720a force 10 ,loopcnt +5b8e 2040630d call generate_random_loop +5b8f 1800220b force 11 ,rega +5b90 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b91 58000007 setarg smp_master_identification +5b92 e0a08000 istore 1 ,contw +5b93 680144cb fetch 2 ,mem_le_ediv +5b94 e0a10000 istore 2 ,contw +5b95 680444cd fetch 8 ,mem_le_rand +5b96 e0a40000 istore 8 ,contw +5b97 20600000 rtn + +le_send_smp_identity_information: +5b98 18002211 force 17 ,rega +5b99 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b9a 58000008 setarg smp_identity_information +5b9b e0a08000 istore 1 ,contw +5b9c 58000000 setarg 0 +5b9d e0a40000 istore 8 ,contw +5b9e e0a40000 istore 8 ,contw +5b9f 20600000 rtn + +le_send_smp_identity_address_information: +5ba0 18002208 force 8 ,rega +5ba1 20405c62 call le_fifo_malloc_tx_l2cap_smp +5ba2 58000009 setarg smp_identity_address_information +5ba3 e0a08000 istore 1 ,contw +5ba4 6800c495 fetch 1 ,mem_le_conn_own_addr_type +5ba5 e0a08000 istore 1 ,contw +5ba6 680344a0 fetch 6 ,mem_le_lap +5ba7 e0a30000 istore 6 ,contw +5ba8 20600000 rtn + +le_send_pairing_fail_unspecified_reason: +5ba9 70047b08 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +5baa 20205b54 branch le_send_pairing_failed + +le_check_init_key_distribution: +5bab 6800c458 fetch 1 ,mem_le_pres_init_key_distribution +5bac 6808c458 fetcht 1 ,mem_le_pres_init_key_distribution +5bad 98417e00 iand temp ,pdata +5bae 20600000 rtn + +le_parse_smp_identity_information: +5baf d8a044d5 arg mem_le_irk ,contw +5bb0 20407ebf call memcpy16 +5bb1 20405bab call le_check_init_key_distribution +5bb2 2fec0001 isolate0 le_initator_irk_bit ,pdata +5bb3 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true +5bb4 6800c092 fetch 1 ,mem_device_option +5bb5 c1850000 rtnne dvc_op_module +5bb6 20405bb9 call le_check_master_addr_type +5bb7 24740000 nrtn user +5bb8 20203410 branch app_ble_store_reconn_info + +le_check_master_addr_type: +5bb9 20407fe9 call disable_user +5bba 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +5bbb c1000000 rtneq master_public_addr +5bbc 68008454 fetch 1 ,mem_le_plap + 5 +5bbd 2fe180c0 compare 0xc0 ,pdata ,0xc0 +5bbe 20608000 rtn true +5bbf 20207fe7 branch enable_user + +le_parse_smp_identity_address_information: +5bc0 20405bab call le_check_init_key_distribution +5bc1 2fec0001 isolate0 le_initator_irk_bit ,pdata +5bc2 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true +5bc3 20600000 rtn + +le_parse_smp_master_identification: + +le_parse_smp_signing_information: + +le_parse_smp_security_request: +5bc4 20600000 rtn + +le_parse_smp_public_key: +5bc5 d8a009be arg mem_le_pubkey_remote_x_256 ,contw +5bc6 20407eb3 call memcpy64 +5bc7 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5bc8 7044c101 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +5bc9 20600000 rtn + +le_parse_smp_dhkey_check: +5bca d8a00a6e arg mem_sp_confirm_remote ,contw +5bcb 20407ebf call memcpy16 +5bcc 7044c106 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +5bcd 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5bce 20600000 rtn + +le_send_smp_pairing_public_key: +5bcf 18002241 force 65 ,rega +5bd0 20405c62 call le_fifo_malloc_tx_l2cap_smp +5bd1 5800000c setarg smp_pairing_public_key +5bd2 e0a08000 istore 1 ,contw +5bd3 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +5bd4 20207eb3 branch memcpy64 + +le_send_smp_pairing_dhkey_check: +5bd5 20407166 call function_f6_eb +5bd6 18002211 force 17 ,rega +5bd7 20405c62 call le_fifo_malloc_tx_l2cap_smp +5bd8 5800000d setarg smp_pairing_dhkey_check +5bd9 e0a08000 istore 1 ,contw +5bda 20207201 branch load_inverse_result + +le_check_paring_time: +5bdb 6800c4c4 fetch 1 ,mem_le_pairing_state +5bdc c17f8000 rtneq flag_le_pairing_end +5bdd d8400003 arg flag_le_pairing_rcv_pairing_req ,temp +5bde 98467c00 isub temp ,null +5bdf 24610000 nrtn positive +5be0 d8e0000a arg smp_pairing_timer ,queue +5be1 20407f16 call timer_check +5be2 247a0000 nrtn blank +5be3 20205ba9 branch le_send_pairing_fail_unspecified_reason + +le_pairing_sm: +5be4 473c402f bpatchx patch2f_0 ,mem_patch2f +5be5 6800c4c4 fetch 1 ,mem_le_pairing_state +5be6 c0005bef beq flag_le_pairing_null ,le_pairing_sm_null +5be7 c000dbf5 beq flag_le_pairing_start ,le_pairing_sm_start +5be8 c0015bef beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +5be9 c001dbf7 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +5bea c002dbfb beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +5beb c003dc07 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +5bec c0045c09 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +5bed c004dc10 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +5bee 20600000 rtn + +le_pairing_sm_null: + +le_pairing_sm_send_sec_req: +5bef 6800c4c5 fetch 1 ,mem_le_enc_state +5bf0 c1820000 rtnne flag_le_send_start_enc_rsp +5bf1 7044c5ff jam flag_le_enc_end ,mem_le_enc_state +5bf2 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state +5bf3 700a993f jam bt_evt_le_reconnect_complete ,mem_fifo_temp +5bf4 20207d86 branch ui_ipc_send_event + +le_pairing_sm_start: +5bf5 7044c402 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +5bf6 20205b02 branch le_send_smp_security_request + +le_pairing_sm_rcv_pairing_req: +5bf7 7044c404 jam flag_le_pairing_auth ,mem_le_pairing_state +5bf8 58017700 setarg timer_smp_pairing_timeout +5bf9 d8e0000a arg smp_pairing_timer ,queue +5bfa 20207f08 branch timer_init + +le_pairing_sm_after_auth: +5bfb 6800c4c5 fetch 1 ,mem_le_enc_state +5bfc c0025bfe beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +5bfd 20600000 rtn + +le_pairing_sm_after_auth_start_enc: +5bfe 7044c407 jam flag_le_paring_send_enc_information ,mem_le_pairing_state +5bff 700a9929 jam bt_evt_le_enc_info ,mem_fifo_temp +5c00 20407d86 call ui_ipc_send_event +5c01 20405b82 call le_send_smp_encryption_information +5c02 6800c092 fetch 1 ,mem_device_option +5c03 c1850000 rtnne dvc_op_module +5c04 20405bb9 call le_check_master_addr_type +5c05 20740000 rtn user +5c06 20203410 branch app_ble_store_reconn_info + +le_pairng_sm_send_enc_information: +5c07 7044c408 jam flag_le_paring_send_master_identification ,mem_le_pairing_state +5c08 20205b8c branch le_send_smp_master_identification + +le_pairng_sm_send_master_indentification: +5c09 6800c452 fetch 1 ,mem_le_preq_resp_key_distribution +5c0a 6808c459 fetcht 1 ,mem_le_pres_resp_key_distribution +5c0b 98417e00 iand temp ,pdata +5c0c 2fec0001 isolate0 le_initator_irk_bit ,pdata +5c0d 2020dc12 branch le_parse_start_enc_rsp_after_auth_end ,true +5c0e 7044c409 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +5c0f 20205b98 branch le_send_smp_identity_information + +le_pairng_sm_send_indentity_information: +5c10 20405ba0 call le_send_smp_identity_address_information +5c11 20205c12 branch le_parse_start_enc_rsp_after_auth_end + +le_parse_start_enc_rsp_after_auth_end: +5c12 18000e0a force smp_pairing_timer ,queue +5c13 20407f07 call timer_stop +5c14 7044c5ff jam flag_le_enc_end ,mem_le_enc_state +5c15 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state +5c16 700a993e jam bt_evt_le_pairing_complete ,mem_fifo_temp +5c17 20207d86 branch ui_ipc_send_event + +le_secure_connect_sm: +5c18 473cc02f bpatchx patch2f_1 ,mem_patch2f +5c19 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c1a c4038000 rtnbit0 le_pairing_mode_secure_connect_bit +5c1b 6800c4bf fetch 1 ,mem_le_secure_connect_flag +5c1c c1810000 rtnne le_sp_flag_commit_256 +5c1d 7044bf00 jam sp_flag_standby ,mem_le_secure_connect_flag +5c1e 6800c4c1 fetch 1 ,mem_le_secure_connect_state +5c1f c000dc58 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +5c20 c0015c5f beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +5c21 c001dc52 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +5c22 c0035c39 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +5c23 c003dc30 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +5c24 c0045c26 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +5c25 20600000 rtn + +le_sc_sm_passkey_wait_confirm: +5c26 6800c663 fetch 1 ,mem_authentication_passkey_times +5c27 1fe20e00 copy pdata ,queue +5c28 1fe0fe01 increase 1 ,pdata +5c29 6000c663 store 1 ,mem_authentication_passkey_times +5c2a 680244c7 fetch 4 ,mem_le_tk +5c2b afefffff qisolate1 pdata +5c2c 58000080 setarg 0x80 +5c2d 7920fe00 setflag true ,0 ,pdata +5c2e 6000c664 store 1 ,mem_passkey_1bit +5c2f 20205c55 branch le_sc_sm_ready_send_pairing_confirm + +le_sc_sm_wait_confirm_gkey: +5c30 6800c4c2 fetch 1 ,mem_le_sc_confirm_gkey_flag +5c31 7044c200 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +5c32 c000dc35 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +5c33 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c34 20600000 rtn + +le_sc_confirm_gkey_ok: +5c35 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp +5c36 20407d86 call ui_ipc_send_event +5c37 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state +5c38 20205bd5 branch le_send_smp_pairing_dhkey_check + +le_sc_sm_receive_dhkey: +5c39 680089b9 fetch 1 ,mem_sp_dhkey_invalid +5c3a c001dc3d beq sp_key_valid_256 ,le_dhkey_ready +5c3b 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c3c 20600000 rtn + +le_dhkey_ready: +5c3d 2040718d call function_f5 +5c3e 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c3f c041dc41 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +5c40 20405b18 call le_set_tk_0 + +le_dhkey_ready_common: +5c41 2040717a call function_f6_ea +5c42 da200af2 arg mem_aes_cmac_temp ,rega +5c43 da400a6e arg mem_sp_confirm_remote ,regb +5c44 df200010 arg 16 ,loopcnt +5c45 20407f88 call string_compare +5c46 2022dc49 branch le_dhkey_check_ok ,zero + +le_dhkey_check_fail: +5c47 70047b0b jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +5c48 20205b54 branch le_send_pairing_failed + +le_dhkey_check_ok: +5c49 20407595 call sp_calc_check_publickey_256 +5c4a 2422dc47 nbranch le_dhkey_check_fail ,zero +5c4b 70442901 jam 1 ,mem_ltk_exists +5c4c 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c4d c040dc35 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +5c4e c041dc35 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +5c4f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c50 7044c107 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +5c51 20600000 rtn + +le_sc_sm_send_public_key: +5c52 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c53 c041dc56 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +5c54 70466400 jam 0 ,mem_passkey_1bit + +le_sc_sm_ready_send_pairing_confirm: +5c55 20205b3d branch le_send_smp_pairing_confirm + +le_sc_sm_send_public_key_passkey: +5c56 70466300 jam 0 ,mem_authentication_passkey_times +5c57 20205b1b branch le_parse_smp_pairing_req_passkey + +le_sc_sm_receive_public_key: +5c58 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c59 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid +5c5a c001dc5c beq sp_key_valid_256 ,le_public_key_ready +5c5b 20600000 rtn + +le_public_key_ready: +5c5c 7044c102 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +5c5d 7009b900 jam sp_key_invalid ,mem_sp_dhkey_invalid +5c5e 20207a99 branch sp_dhkey_calc_256 + +le_sc_sm_wait_send_public_key: +5c5f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c60 7044c103 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +5c61 20205bcf branch le_send_smp_pairing_public_key + +le_fifo_malloc_tx_l2cap_smp: +5c62 18002406 force le_l2cap_cid_smp ,regb +5c63 20205847 branch le_fifo_malloc_tx_l2cap + +le_parse_ll: +5c64 680082db fetch 1 ,mem_le_rxbuf + 2 +5c65 c0005c7b beq ll_connection_update_req ,le_parse_connection_update_req +5c66 c000dc83 beq ll_channel_map_req ,le_parse_channel_map_req +5c67 c0015c8e beq ll_terminate_ind ,le_parse_terminate_ind +5c68 c001dcaa beq ll_enc_req ,le_parse_enc_req +5c69 c0025ce1 beq ll_enc_rsp ,le_parse_enc_rsp +5c6a c002dce6 beq ll_start_enc_req ,le_parse_start_enc_req +5c6b c0035cea beq ll_start_enc_rsp ,le_parse_start_enc_rsp +5c6c c003dcf5 beq ll_unknown_rsp ,le_parse_unknown_rsp +5c6d c0045c99 beq ll_feature_req ,le_parse_feature_req +5c6e c004dcf5 beq ll_feature_rsp ,le_parse_feature_rsp +5c6f c0055cef beq ll_pause_enc_req ,le_parse_pause_enc_req +5c70 c005dcf5 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +5c71 c0065c9f beq ll_version_ind ,le_parse_version_ind +5c72 c006dcf5 beq ll_reject_ind ,le_parse_reject_ind +5c73 c0095ca6 beq ll_ping_req ,le_parse_ping_req +5c74 c009dcf5 beq ll_ping_rsp ,le_parse_ping_rsp +5c75 da200002 arg 2 ,rega +5c76 da400007 arg ll_unknown_rsp ,regb +5c77 20405842 call le_fifo_malloc_tx_ll +5c78 680082db fetch 1 ,mem_le_rxbuf + 2 +5c79 e0a08000 istore 1 ,contw +5c7a 20600000 rtn + +le_parse_connection_update_req: +5c7b e8c48000 ifetch 9 ,contr +5c7c 6004c3d3 store 9 ,mem_le_new_param +5c7d e8c10000 ifetch 2 ,contr +5c7e 6001045f store 2 ,mem_le_instant +5c7f 6800843f fetch 1 ,mem_le_state +5c80 79207e05 set1 lestate_update_param ,pdata +5c81 6000843f store 1 ,mem_le_state +5c82 20600000 rtn + +le_parse_channel_map_req: +5c83 e8c28000 ifetch 5 ,contr +5c84 6002c3ce store 5 ,mem_le_new_map +5c85 e8c10000 ifetch 2 ,contr +5c86 6001045f store 2 ,mem_le_instant +5c87 68090459 fetcht 2 ,mem_le_event_count +5c88 98467c00 isub temp ,null +5c89 24215c8e nbranch le_parse_terminate_ind ,positive +5c8a 6800843f fetch 1 ,mem_le_state +5c8b 79207e06 set1 lestate_update_map ,pdata +5c8c 6000843f store 1 ,mem_le_state +5c8d 20600000 rtn + +le_parse_terminate_ind: +5c8e 58000014 setarg 20 +5c8f 6001046d store 2 ,mem_le_superto +5c90 600144ba store 2 ,mem_le_init_superto +5c91 20600000 rtn + +le_send_terminate_ind_user_terminated: +5c92 da600013 arg error_remote_user_terminated_connection ,regc + +le_send_terminate_ind: +5c93 da200002 arg 2 ,rega +5c94 da400002 arg ll_terminate_ind ,regb +5c95 20405842 call le_fifo_malloc_tx_ll +5c96 1a627e00 copy regc ,pdata +5c97 e0a08000 istore 1 ,contw +5c98 20600000 rtn + +le_parse_feature_req: + +le_send_feature_rsp: +5c99 da200009 arg 9 ,rega +5c9a da400009 arg ll_feature_rsp ,regb +5c9b 20405842 call le_fifo_malloc_tx_ll +5c9c 58000001 setarg param_le_features +5c9d e0a40000 istore 8 ,contw +5c9e 20600000 rtn + +le_parse_version_ind: +5c9f 20748000 rtn master + +le_send_version_ind: +5ca0 da200006 arg 6 ,rega +5ca1 da40000c arg ll_version_ind ,regb +5ca2 20405842 call le_fifo_malloc_tx_ll +5ca3 6802c510 fetch 5 ,mem_lmp_version +5ca4 e0a28000 istore 5 ,contw +5ca5 20600000 rtn + +le_parse_ping_req: +5ca6 da400013 arg ll_ping_rsp ,regb +5ca7 20205ca8 branch le_send_ll_one_lenth + +le_send_ll_one_lenth: +5ca8 da200001 arg 1 ,rega +5ca9 20205842 branch le_fifo_malloc_tx_ll + +le_parse_enc_req: +5caa e8c40000 ifetch 8 ,contr +5cab 600444cd store 8 ,mem_le_rand +5cac e8c10000 ifetch 2 ,contr +5cad 600144cb store 2 ,mem_le_ediv +5cae e8c40000 ifetch 8 ,contr +5caf 600444aa store 8 ,mem_le_skdm +5cb0 e8c20000 ifetch 4 ,contr +5cb1 60024411 store 4 ,mem_le_ivm +5cb2 20405ccf call le_send_enc_rsp +5cb3 473d402f bpatchx patch2f_2 ,mem_patch2f +5cb4 6800c4c4 fetch 1 ,mem_le_pairing_state +5cb5 c002dcbc beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +5cb6 6800c4e9 fetch 1 ,mem_le_configuration +5cb7 c280dcbf bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +5cb8 6800c217 fetch 1 ,mem_nv_data_number +5cb9 245a67be ncall load_device_list_mode_4 ,blank +5cba 6800c429 fetch 1 ,mem_ltk_exists +5cbb c0005cc4 beq 0 ,le_ltk_lost + +le_parse_enc_req_after_auth: +5cbc 7044c501 jam flag_le_rcv_enc_start ,mem_le_enc_state +5cbd 20405cdd call le_send_start_enc_req +5cbe 202073a2 branch generate_sk + +le_parse_enc_req_fixed_ltk: +5cbf 70442901 jam 1 ,mem_ltk_exists +5cc0 d8c044ea arg mem_le_fixed_ltk ,contr +5cc1 d8a04419 arg mem_le_ltk ,contw +5cc2 20407ebf call memcpy16 +5cc3 20205cbc branch le_parse_enc_req_after_auth + +le_ltk_lost: +5cc4 473dc02f bpatchx patch2f_3 ,mem_patch2f +5cc5 7044c500 jam flag_le_enc_null ,mem_le_enc_state +5cc6 7044c400 jam flag_le_enc_null ,mem_le_pairing_state +5cc7 700a9941 jam bt_evt_le_ltk_lost ,mem_fifo_temp +5cc8 20207d86 branch ui_ipc_send_event + +le_send_reject_ind: +5cc9 da200002 arg 2 ,rega +5cca da40000d arg ll_reject_ind ,regb +5ccb 20405842 call le_fifo_malloc_tx_ll +5ccc 58000006 setarg le_err_pin_or_key_missing +5ccd e0a08000 istore 1 ,contw +5cce 20600000 rtn + +le_send_enc_rsp: +5ccf d8a044b2 arg mem_le_skds ,contw +5cd0 18007208 force 8 ,loopcnt +5cd1 2040630d call generate_random_loop +5cd2 d8a04415 arg mem_le_ivs ,contw +5cd3 18007204 force 4 ,loopcnt +5cd4 2040630d call generate_random_loop +5cd5 da20000d arg 13 ,rega +5cd6 da400004 arg ll_enc_rsp ,regb +5cd7 20405842 call le_fifo_malloc_tx_ll +5cd8 680444b2 fetch 8 ,mem_le_skds +5cd9 e0a40000 istore 8 ,contw +5cda 68024415 fetch 4 ,mem_le_ivs +5cdb e0a20000 istore 4 ,contw +5cdc 20600000 rtn + +le_send_start_enc_req: +5cdd da400005 arg ll_start_enc_req ,regb +5cde 20205ca8 branch le_send_ll_one_lenth + +le_send_start_enc_rsp: +5cdf da400006 arg ll_start_enc_rsp ,regb +5ce0 20205ca8 branch le_send_ll_one_lenth + +le_parse_enc_rsp: +5ce1 e8c40000 ifetch 8 ,contr +5ce2 600444b2 store 8 ,mem_le_skds +5ce3 e8c20000 ifetch 4 ,contr +5ce4 60024415 store 4 ,mem_le_ivs +5ce5 202073a2 branch generate_sk + +le_parse_start_enc_req: +5ce6 6800843f fetch 1 ,mem_le_state +5ce7 79207e04 set1 lestate_encryption ,pdata +5ce8 6000843f store 1 ,mem_le_state +5ce9 20600000 rtn + +le_parse_start_enc_rsp: +5cea 20748000 rtn master +5ceb 700a9932 jam bt_evt_le_start_enc ,mem_fifo_temp +5cec 20407d86 call ui_ipc_send_event +5ced 7044c504 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +5cee 20205cdf branch le_send_start_enc_rsp + +le_parse_pause_enc_req: +5cef 7044c502 jam flag_le_enc_pause ,mem_le_enc_state +5cf0 20405cf3 call le_send_pause_enc_rsp +5cf1 700a9933 jam bt_evt_le_pause_enc ,mem_fifo_temp +5cf2 20207d86 branch ui_ipc_send_event + +le_send_pause_enc_rsp: +5cf3 da40000b arg ll_pause_enc_rsp ,regb +5cf4 20205ca8 branch le_send_ll_one_lenth + +le_parse_feature_rsp: + +le_parse_unknown_rsp: + +le_parse_pause_enc_rsp: + +le_parse_reject_ind: + +le_parse_ping_rsp: +5cf5 20600000 rtn + +init_lmp: +5cf6 20758000 rtn wake + +init_lmp_work: +5cf7 473e402f bpatchx patch2f_4 ,mem_patch2f +5cf8 58000000 setarg 0 +5cf9 60008048 store 1 ,mem_lmp_to_send +5cfa 60008055 store 1 ,mem_conn_sm +5cfb 60008078 store 1 ,mem_lmo_opcode1 +5cfc 6000807c store 1 ,mem_lmo_opcode2 +5cfd 6000c158 store 1 ,mem_esco_addr +5cfe 600084d7 store 1 ,mem_auth_enable +5cff 6000816d store 1 ,mem_connection_options +5d00 600089b5 store 1 ,mem_pairing_auth +5d01 70455b00 jam switch_flag_init ,mem_switch_flag +5d02 70022900 jam 0 ,mem_switch_fail_master_count +5d03 7004d800 jam null_encryp ,mem_wait_encryption + +init_lmp_reinit: +5d04 7009b500 jam 0 ,mem_pairing_auth +5d05 7009b400 jam 0 ,mem_sp_localsm +5d06 7004d100 jam 0 ,mem_lmp_conn_state + +parse_rx_done: +5d07 20600000 rtn + +parse_lmp: +5d08 473ec02f bpatchx patch2f_5 ,mem_patch2f +5d09 2054e2ff call setlocalsm_master ,master +5d0a 2454e303 ncall setlocalsm_slave ,master +5d0b 204062bc call lmo_fifo_check +5d0c 247a0000 nrtn blank +5d0d 6800804c fetch 1 ,mem_state_map +5d0e c4030000 rtnbit0 smap_rxlmp +5d0f 793ffe06 set0 smap_rxlmp ,pdata +5d10 793f8001 set0 mark_rxbuf_inuse ,mark +5d11 6000804c store 1 ,mem_state_map +5d12 68008551 fetch 1 ,mem_rxbuf +5d13 6808804c fetcht 1 ,mem_state_map +5d14 2feffe00 isolate1 smap_lmptidinit ,pdata +5d15 79208401 setflag true ,smap_lmptid ,temp +5d16 6008804c storet 1 ,mem_state_map +5d17 18410402 and_into 0x2 ,temp +5d18 6008807f storet 1 ,mem_lmo_tid2 +5d19 6808804c fetcht 1 ,mem_state_map +5d1a 1fe37e00 rshift pdata ,pdata +5d1b 6000807d store 1 ,mem_lmi_opcode2 +5d1c 473f402f bpatchx patch2f_6 ,mem_patch2f +5d1d 6800807d fetch 1 ,mem_lmi_opcode2 +5d1e c03fdd66 beq lmp_escape ,parse_lmp_escape +5d1f c001ddb1 beq lmp_accepted ,parse_lmp_accepted +5d20 c0025dc2 beq lmp_not_accepted ,parse_lmp_not_accepted +5d21 c01e5d59 beq lmp_set_afh ,parse_lmp_set_afh +5d22 c002dd55 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +5d23 c007dfa8 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +5d24 c0085e24 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +5d25 c011de42 beq lmp_auto_rate ,parse_lmp_auto_rate +5d26 c01cdfc1 beq lmp_test_control ,parse_lmp_test_control +5d27 c01c5fbc beq lmp_test_activate ,parse_lmp_test_activate +5d28 c018de27 beq lmp_setup_complete ,parse_lmp_setup_complete +5d29 c01bdeb0 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +5d2a c013deac beq lmp_features_req ,parse_lmp_features_req +5d2b c019dea9 beq lmp_host_connection_req ,parse_lmp_conn_req +5d2c c012deae beq lmp_version_req ,parse_lmp_version_req +5d2d c0135e3e beq lmp_version_res ,parse_lmp_version_res +5d2e c003de36 beq lmp_detach ,parse_lmp_detach +5d2f c016de2d beq lmp_max_slot ,parse_lmp_max_slot +5d30 c0175e2e beq lmp_max_slot_req ,parse_lmp_max_slot_req +5d31 c000dea5 beq lmp_name_req ,parse_lmp_name_req +5d32 c0015e90 beq lmp_name_res ,parse_lmp_name_res +5d33 c0145fb3 beq lmp_features_res ,parse_lmp_features_res +5d34 c004de86 beq lmp_comb_key ,parse_lmp_comb_key +5d35 c005de5f beq lmp_au_rand ,parse_lmp_au_rand +5d36 c0045e43 beq lmp_in_rand ,parse_lmp_in_rand +5d37 c0065e6a beq lmp_sres ,parse_lmp_sres +5d38 c00fde3a beq lmp_incr_power_req ,parse_lmp_incr_power +5d39 c0105e3c beq lmp_decr_power_req ,parse_lmp_decr_power +5d3a c010deca beq lmp_max_power ,parse_lmp_max_power +5d3b c0115eca beq lmp_min_power ,parse_lmp_min_power +5d3c c01adecb beq lmp_page_mode_req ,parse_lmp_page_mode_req +5d3d c01b5ecc beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +5d3e c0125eca beq lmp_preferred_rate ,parse_lmp_preferred_rate +5d3f c01a5ecd beq lmp_slot_offset ,parse_lmp_slot_offset +5d40 c00bded6 beq lmp_sniff_req ,parse_lmp_sniff_req +5d41 c008def2 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +5d42 c0095ef6 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +5d43 c009def8 beq lmp_switch_req ,parse_lmp_switch_req +5d44 c006df0a beq lmp_temp_rand ,parse_lmp_temp_rand +5d45 c0075f0a beq lmp_temp_key ,parse_lmp_temp_key +5d46 c017deaa beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +5d47 c0185f0a beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +5d48 c0055f0a beq lmp_unit_key ,parse_lmp_unit_key +5d49 c00c5f0b beq lmp_unsniff_req ,parse_lmp_unsniff_req +5d4a c0195f0a beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +5d4b c01edf10 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +5d4c c01f5f51 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +5d4d c01fdf4b beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +5d4e c0205f78 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +5d4f c020df8a beq lmp_dhkey_check ,parse_dhkey_check +5d50 c0035fa7 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +5d51 c01d5d57 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req + +reject_unknown_packet: +5d52 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 + +reject_lmp_packet: +5d53 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5d54 20600000 rtn + +parse_lmp_clkoffset_req: +5d55 70007c06 jam lmp_clkoffset_res ,mem_lmo_opcode2 +5d56 20600000 rtn + +parse_enc_key_size_mask_req: +5d57 70007c3b jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +5d58 20600000 rtn + +parse_lmp_set_afh: +5d59 68020552 fetch 4 ,mem_rxbuf + 1 +5d5a 1fe3fe00 lshift pdata ,pdata +5d5b 600240d2 store 4 ,mem_afh_instant +5d5c 68008556 fetch 1 ,mem_rxbuf + 5 +5d5d 6000c0d9 store 1 ,mem_afh_new_mod +5d5e 68028557 fetch 5 ,mem_rxbuf + 6 +5d5f 6002c0e7 store 5 ,mem_afh_map_new +5d60 6802855c fetch 5 ,mem_rxbuf + 11 +5d61 e0a28000 istore 5 ,contw +5d62 68008031 fetch 1 ,mem_mode +5d63 79207e03 set1 afh_change ,pdata +5d64 60008031 store 1 ,mem_mode +5d65 20600000 rtn + +parse_lmp_escape: +5d66 473fc02f bpatchx patch2f_7 ,mem_patch2f +5d67 68008552 fetch 1 ,mem_rxbuf + 1 +5d68 79207e07 set1 7 ,pdata +5d69 6000807d store 1 ,mem_lmi_opcode2 +5d6a c040dd88 beq lmp_ext_accepted ,parse_lmpext_accepted +5d6b c0415d8d beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +5d6c c04adeb1 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +5d6d c04b5eca beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +5d6e c045debf beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +5d6f c041dda5 beq lmp_ext_features_req ,parse_lmpext_features_req +5d70 c0425da7 beq lmp_ext_features_res ,parse_lmpext_features_res +5d71 c0485d7a beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +5d72 c04bdd9e beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +5d73 c04c5da3 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +5d74 c04cdd7d beq lmp_io_cap_req ,parse_lmpext_iocap_req +5d75 c04d5d80 beq lmp_io_cap_res ,parse_lmpext_iocap_res +5d76 c1420000 rtneq lmp_ext_features_res + +reject_unknown_ext_packet: +5d77 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +5d78 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 +5d79 20600000 rtn + +parse_lmpext_chn_classification_req: +5d7a 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +5d7b 70007e2e jam not_support_chn_classification ,mem_lmo_reason2 +5d7c 20600000 rtn + +parse_lmpext_iocap_req: +5d7d 20405d82 call iocap_lmpext_load +5d7e 70007c9a jam lmp_io_cap_res ,mem_lmo_opcode2 +5d7f 20600000 rtn + +parse_lmpext_iocap_res: +5d80 20405d82 call iocap_lmpext_load +5d81 20205d86 branch iocap_lmpext_common + +iocap_lmpext_load: +5d82 d8a0465e arg mem_sp_iocap_remote ,contw +5d83 68018553 fetch 3 ,mem_rxbuf + 2 +5d84 e0a18000 istore 3 ,contw +5d85 20600000 rtn + +iocap_lmpext_common: +5d86 2020f6d8 branch master_set_mem_master_sp_flag ,true +5d87 20600000 rtn + +parse_lmpext_accepted: +5d88 68008554 fetch 1 ,mem_rxbuf + 3 +5d89 79207e07 set1 7 ,pdata +5d8a 600084c9 store 1 ,mem_lmi_accepted_opcode +5d8b c045dd92 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +5d8c 20600000 rtn + +parse_lmpext_not_accepted: +5d8d 68008554 fetch 1 ,mem_rxbuf + 3 +5d8e 79207e07 set1 7 ,pdata +5d8f 600084c9 store 1 ,mem_lmi_accepted_opcode +5d90 c045dd96 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +5d91 20600000 rtn + +parse_lmpext_accepted_ptt: +5d92 6800c15a fetch 1 ,mem_ptt +5d93 6808804c fetcht 1 ,mem_state_map +5d94 7d3a0405 nsetflag blank ,smap_edr ,temp +5d95 6008804c storet 1 ,mem_state_map + +parse_lmpext_not_accepted_ptt: +5d96 68008030 fetch 1 ,mem_state +5d97 c4028000 rtnbit0 state_init_seq +5d98 793ffe05 set0 state_init_seq ,pdata +5d99 60008030 store 1 ,mem_state +5d9a 680084d7 fetch 1 ,mem_auth_enable +5d9b 247a0000 nrtn blank +5d9c 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +5d9d 20600000 rtn + +parse_lmpext_pause_encrypt: +5d9e 2434dda1 nbranch parse_lmpext_pause_encrypt_slave ,master +5d9f 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +5da0 202062eb branch tid_reply + +parse_lmpext_pause_encrypt_slave: +5da1 70007c97 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +5da2 20600000 rtn + +parse_lmpext_resume_encrypt: +5da3 204062eb call tid_reply +5da4 20205ffe branch lmp_start_encryption + +parse_lmpext_features_req: +5da5 70007c84 jam lmp_ext_features_res ,mem_lmo_opcode2 +5da6 20600000 rtn + +parse_lmpext_features_res: +5da7 68088555 fetcht 1 ,mem_rxbuf + 4 +5da8 18410401 and temp ,0x1 ,temp +5da9 600884d0 storet 1 ,mem_remote_sppcap +5daa 6800c1ce fetch 1 ,mem_hci_cmd +5dab c0a8ddad bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +5dac 7041ce00 jam 0 ,mem_hci_cmd + +parse_lmpext_features_res_not_hci: +5dad 68008055 fetch 1 ,mem_conn_sm +5dae c18a8000 rtnne conn_sm_wait_features_ext +5daf 70005504 jam conn_sm_send_conn_req ,mem_conn_sm +5db0 2020631b branch process_conn_sm + +parse_lmp_accepted: +5db1 47404030 bpatchx patch30_0 ,mem_patch30 +5db2 68008552 fetch 1 ,mem_rxbuf + 1 +5db3 600084c9 store 1 ,mem_lmi_accepted_opcode +5db4 c019ddd8 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +5db5 c0045de7 beq lmp_in_rand ,parse_lmp_accepted_inrand +5db6 c007ddee beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +5db7 c0085df4 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +5db8 c008ddf5 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +5db9 c0095dfd beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +5dba c00c5e13 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +5dbb c00bde16 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +5dbc c009ddcf beq lmp_switch_req ,parse_lmp_accepted_switch +5dbd c01edf1e beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +5dbe c01f5f6a beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +5dbf c0205f20 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +5dc0 c020df3d beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +5dc1 20600000 rtn + +parse_lmp_not_accepted: +5dc2 4740c030 bpatchx patch30_1 ,mem_patch30 +5dc3 68008552 fetch 1 ,mem_rxbuf + 1 +5dc4 600084c9 store 1 ,mem_lmi_accepted_opcode +5dc5 c000de0a beq lmp_name_req ,parse_lmp_not_accepted_name_req +5dc6 c019dde2 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +5dc7 c005ddfe beq lmp_au_rand ,parse_lmp_not_accepted_aurand +5dc8 c0045e01 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +5dc9 c009ddd2 beq lmp_switch_req ,parse_lmp_not_accepted_switch +5dca c0205e0b beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +5dcb c020de0e beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +5dcc c00c5e11 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +5dcd c00bde22 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +5dce 20600000 rtn + +parse_lmp_accepted_switch: +5dcf 700a9920 jam bt_evt_switch_accept ,mem_fifo_temp +5dd0 20407d86 call ui_ipc_send_event +5dd1 202021dc branch role_switch_prepare0 + +parse_lmp_not_accepted_switch: +5dd2 700a9919 jam bt_evt_switch_not_accept ,mem_fifo_temp +5dd3 20407d86 call ui_ipc_send_event +5dd4 70455b02 jam switch_flag_not_accept ,mem_switch_flag +5dd5 58000050 setarg timer_switch_waite +5dd6 d8e00006 arg switch_wait_timer ,queue +5dd7 20207f08 branch timer_init + +parse_lmp_accepted_hostconn: +5dd8 680084d1 fetch 1 ,mem_lmp_conn_state +5dd9 79207e00 set1 received_conn_req ,pdata +5dda 600084d1 store 1 ,mem_lmp_conn_state +5ddb 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp +5ddc 20407d86 call ui_ipc_send_event +5ddd 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 + +parse_lmp_accepted_hostconn_ctn: +5dde 68008055 fetch 1 ,mem_conn_sm +5ddf c082dd07 bne conn_sm_wait_conn_accept ,parse_rx_done +5de0 70005506 jam conn_sm_auth_pair ,mem_conn_sm +5de1 20600000 rtn + +parse_lmp_not_accepted_hostconn: +5de2 7004ca0b jam acl_connection_already_exists ,mem_disconn_reason_send +5de3 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5de4 70005500 jam conn_sm_standby ,mem_conn_sm +5de5 2020dd07 branch parse_rx_done ,true +5de6 20600000 rtn + +parse_lmp_accepted_inrand: +5de7 6800c1bd fetch 1 ,mem_link_key_exists +5de8 247a0000 nrtn blank +5de9 2040244f call clear_linkkey +5dea 20405ffc call lmp_generate_key +5deb 20748000 rtn master +5dec 79200021 set1 mark_slave_in_rand_accepted ,mark +5ded 20600000 rtn + +parse_lmp_accepted_enc_mode: +5dee 24748000 nrtn master +5def 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +5df0 6800804c fetch 1 ,mem_state_map +5df1 c4010000 rtnbit0 smap_encryption +5df2 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +5df3 20600000 rtn + +parse_lmp_accepted_enc_keysize: +5df4 20205ffe branch lmp_start_encryption + +parse_lmp_accepted_start_enc: +5df5 20406059 call send_create_conn_start_l2cap_timer_sm +5df6 68008030 fetch 1 ,mem_state +5df7 c3820000 rtnbit1 state_conn_comp +5df8 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +5df9 68008055 fetch 1 ,mem_conn_sm +5dfa c1850000 rtnne conn_sm_encrypt_wait +5dfb 7000550b jam conn_sm_encrypt_wait_clear ,mem_conn_sm +5dfc 20600000 rtn + +parse_lmp_accepted_stop_enc: +5dfd 20600000 rtn + +parse_lmp_not_accepted_aurand: + +parse_lmp_not_accepted_aurand_send_detach: +5dfe 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5dff 7004ca13 jam other_end_terminated ,mem_disconn_reason_send +5e00 20600000 rtn + +parse_lmp_not_accepted_inrand: +5e01 68008553 fetch 1 ,mem_rxbuf + 2 +5e02 c0035e07 beq key_missing ,parse_lmp_inrand_key_missing +5e03 c18c0000 rtnne pairing_not_allowed +5e04 7004ca18 jam pairing_not_allowed ,mem_disconn_reason_send +5e05 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e06 20600000 rtn + +parse_lmp_inrand_key_missing: +5e07 7004ca06 jam key_missing ,mem_disconn_reason_send +5e08 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e09 20600000 rtn + +parse_lmp_not_accepted_name_req: +5e0a 20600000 rtn + +parse_lmp_not_accepted_simple_pairing_number: +5e0b 7009ae00 jam sp_stat_null ,mem_sp_state +5e0c 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e0d 20205d07 branch parse_rx_done + +parse_lmp_not_accepted_dhkey_check: +5e0e 7009ae00 jam sp_stat_null ,mem_sp_state +5e0f 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e10 20205d07 branch parse_rx_done + +parse_lmp_not_accepted_unsniff_req: +5e11 700a9924 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +5e12 20207d86 branch ui_ipc_send_event + +parse_lmp_accepted_unsniff_req: +5e13 700a9923 jam bt_evt_unsniff_accept ,mem_fifo_temp +5e14 20407d86 call ui_ipc_send_event +5e15 202026e9 branch sniff_exit + +parse_lmp_accepted_sniff_req: +5e16 700a9922 jam bt_evt_sniff_accept ,mem_fifo_temp +5e17 20407d86 call ui_ipc_send_event +5e18 58000000 setarg 0 +5e19 60010075 store 2 ,mem_dsniff +5e1a 680141e3 fetch 2 ,mem_sniff_param_interval +5e1b 1fe3fe00 lshift pdata ,pdata +5e1c 60010032 store 2 ,mem_tsniff +5e1d 6800c1e5 fetch 1 ,mem_sniff_param_attempt +5e1e 60008073 store 1 ,mem_sniff_attempt +5e1f 6800c1e7 fetch 1 ,mem_sniff_param_timeout +5e20 60008074 store 1 ,mem_sniff_timeout +5e21 202026c6 branch sniff_init + +parse_lmp_not_acdcept_sniff_req: +5e22 700a9921 jam bt_evt_sniff_not_accept ,mem_fifo_temp +5e23 20207d86 branch ui_ipc_send_event + +parse_lmp_crypt_key: +5e24 68088552 fetcht 1 ,mem_rxbuf + 1 +5e25 60088054 storet 1 ,mem_key_size +5e26 20205e38 branch accept_lmp_msg + +parse_lmp_setup_complete: +5e27 680084d1 fetch 1 ,mem_lmp_conn_state +5e28 79207e02 set1 received_setup_complete ,pdata +5e29 600084d1 store 1 ,mem_lmp_conn_state +5e2a c3818000 rtnbit1 sent_setup_complete +5e2b 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +5e2c 20205d07 branch parse_rx_done + +parse_lmp_max_slot: +5e2d 20600000 rtn + +parse_lmp_max_slot_req: +5e2e 6800c0d0 fetch 1 ,mem_max_slot +5e2f 68088552 fetcht 1 ,mem_rxbuf + 1 +5e30 98467c00 isub temp ,null +5e31 20215e38 branch accept_lmp_msg ,positive +5e32 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5e33 70007e1f jam unspecified_error ,mem_lmo_reason2 +5e34 70007d2e jam lmp_max_slot_req ,mem_lmi_opcode2 +5e35 20600000 rtn + +parse_lmp_detach: +5e36 20406157 call prepare_disconnect +5e37 20205e38 branch accept_lmp_msg + +accept_lmp_msg: +5e38 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5e39 20600000 rtn + +parse_lmp_incr_power: +5e3a 70007c21 jam lmp_max_power ,mem_lmo_opcode2 +5e3b 20600000 rtn + +parse_lmp_decr_power: +5e3c 70007c22 jam lmp_min_power ,mem_lmo_opcode2 +5e3d 20600000 rtn + +parse_lmp_version_res: +5e3e 68008055 fetch 1 ,mem_conn_sm +5e3f c1098000 rtneq conn_sm_wait_version +5e40 70005502 jam conn_sm_send_features ,mem_conn_sm +5e41 20600000 rtn + +parse_lmp_auto_rate: +5e42 20600000 rtn + +parse_lmp_in_rand: +5e43 20405ff9 call lmp_copy_rand +5e44 7004d401 jam pincode_state_wait_pincode ,mem_pincode_state +5e45 700a990a jam bt_evt_pincode_req ,mem_fifo_temp +5e46 20407d86 call ui_ipc_send_event +5e47 204062f3 call tid_check +5e48 2420e001 nbranch lmp_accept_inrand ,true +5e49 2434de4e nbranch parse_lmp_inrand_res ,master +5e4a 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5e4b 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 +5e4c 70007e23 jam transaction_collision ,mem_lmo_reason2 +5e4d 20600000 rtn + +parse_lmp_inrand_res: +5e4e 6800804b fetch 1 ,mem_op +5e4f 79207e02 set1 op_inrand_req ,pdata +5e50 6000804b store 1 ,mem_op +5e51 20600000 rtn + +pop_tid_follow: +5e52 6808804c fetcht 1 ,mem_state_map +5e53 7d3a0401 nsetflag blank ,smap_lmptid ,temp +5e54 6008804c storet 1 ,mem_state_map +5e55 20600000 rtn + +push_tid_follow: +5e56 6800807f fetch 1 ,mem_lmo_tid2 +5e57 1fe37e00 rshift pdata ,pdata +5e58 1fe17e01 and_into 1 ,pdata +5e59 20600000 rtn + +parse_lmp_au_rand_moudle: +5e5a 6800c217 fetch 1 ,mem_nv_data_number +5e5b 207a0000 rtn blank +5e5c 680089b5 fetch 1 ,mem_pairing_auth +5e5d 205a67b2 call load_device_list ,blank +5e5e 20600000 rtn + +parse_lmp_au_rand: +5e5f 20405e5a call parse_lmp_au_rand_moudle +5e60 20405e56 call push_tid_follow +5e61 600084d5 store 1 ,mem_sres_tid +5e62 20405ff9 call lmp_copy_rand +5e63 70007c0c jam lmp_sres ,mem_lmo_opcode2 +5e64 6800c1bd fetch 1 ,mem_link_key_exists +5e65 247a0000 nrtn blank +5e66 68008030 fetch 1 ,mem_state +5e67 c3830000 rtnbit1 state_combkey +5e68 70007e06 jam key_missing ,mem_lmo_reason2 +5e69 20205d53 branch reject_lmp_packet + +parse_lmp_sres: +5e6a da200040 arg mem_plap ,rega +5e6b 20407288 call function_e1 +5e6c 68020552 fetch 4 ,mem_rxbuf + 1 +5e6d 680a0592 fetcht 4 ,mem_input_store +5e6e 98467c00 isub temp ,null +5e6f 2022de73 branch authentication_ok ,zero +5e70 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e71 7004ca05 jam authentication_failure_error ,mem_disconn_reason_send +5e72 20600000 rtn + +authentication_ok: +5e73 20405e77 call authentication_ok_common +5e74 6800c65a fetch 1 ,mem_ssp_enable +5e75 203a5f3e branch pairing_success ,blank +5e76 20600000 rtn + +authentication_ok_common: +5e77 20407386 call copy_aco +5e78 204021b2 call linkkey_ready +5e79 6800804b fetch 1 ,mem_op +5e7a 2feffe01 isolate1 op_auth_req ,pdata +5e7b 793ffe01 set0 op_auth_req ,pdata +5e7c 6000804b store 1 ,mem_op +5e7d 68008055 fetch 1 ,mem_conn_sm +5e7e c00cde81 beq conn_sm_auth_wait ,authentication_ok_conn_sm +5e7f c00c5e81 beq conn_sm_pairing_wait ,authentication_ok_conn_sm +5e80 20600000 rtn + +authentication_ok_conn_sm: +5e81 680089b5 fetch 1 ,mem_pairing_auth +5e82 c1800000 rtnne defalt_pairing_auth +5e83 6800804c fetch 1 ,mem_state_map +5e84 c3810000 rtnbit1 smap_encryption +5e85 202063b1 branch host_create_conn_encrypt + +parse_lmp_comb_key: +5e86 da200552 arg mem_rxbuf + 1 ,rega +5e87 da400582 arg mem_kinit ,regb +5e88 d8a00562 arg mem_random_number ,contw +5e89 20407352 call xor16 +5e8a da200040 arg mem_plap ,rega +5e8b 20406311 call generate_linkkey +5e8c 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 +5e8d 68008030 fetch 1 ,mem_state +5e8e c3035ffc bbit0 state_combkey ,lmp_generate_key +5e8f 20600000 rtn + +parse_lmp_name_res: +5e90 6801015f fetch 2 ,mem_len +5e91 1fe0f3fd add pdata ,-3 ,loopcnt +5e92 68088552 fetcht 1 ,mem_rxbuf + 1 +5e93 58000101 setarg mem_tmp_buffer +5e94 98408a00 iadd temp ,contw +5e95 d8c00554 arg mem_rxbuf + 3 ,contr +5e96 20407f01 call memcpy +5e97 68088053 fetcht 1 ,mem_name_offset +5e98 68008553 fetch 1 ,mem_rxbuf + 2 +5e99 98467e00 isub temp ,pdata +5e9a 1fe67c0e sub pdata ,14 ,null +5e9b 20215ea0 branch parse_lmp_name_res_end ,positive +5e9c 1840fe0e add temp ,14 ,pdata +5e9d 60008053 store 1 ,mem_name_offset +5e9e 70007c01 jam lmp_name_req ,mem_lmo_opcode2 +5e9f 20600000 rtn + +parse_lmp_name_res_end: +5ea0 6800804c fetch 1 ,mem_state_map +5ea1 79207e03 set1 smap_name_res ,pdata +5ea2 6000804c store 1 ,mem_state_map +5ea3 c2826006 bbit1 smap_name_req ,lmp_disconnect +5ea4 20600000 rtn + +parse_lmp_name_req: +5ea5 68008552 fetch 1 ,mem_rxbuf + 1 +5ea6 6000807d store 1 ,mem_lmi_opcode2 +5ea7 70007c02 jam lmp_name_res ,mem_lmo_opcode2 +5ea8 20600000 rtn + +parse_lmp_conn_req: +5ea9 20205e38 branch accept_lmp_msg + +parse_lmp_timing_accuracy_req: +5eaa 70007c30 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +5eab 20600000 rtn + +parse_lmp_features_req: +5eac 70007c28 jam lmp_features_res ,mem_lmo_opcode2 +5ead 20600000 rtn + +parse_lmp_version_req: +5eae 70007c26 jam lmp_version_res ,mem_lmo_opcode2 +5eaf 20600000 rtn + +parse_lmp_supervision_timeout: +5eb0 20600000 rtn + +parse_lmp_sniff_subrating_req: +5eb1 68010032 fetch 2 ,mem_tsniff +5eb2 98000400 iforce temp +5eb3 68008553 fetch 1 ,mem_rxbuf + 2 +5eb4 60008095 store 1 ,mem_subsniff_rate +5eb5 984f8400 imul32 temp ,temp +5eb6 68010554 fetch 2 ,mem_rxbuf + 3 +5eb7 1fe3fe00 lshift pdata ,pdata +5eb8 60010096 store 2 ,mem_subsniff_tcmax +5eb9 68020556 fetch 4 ,mem_rxbuf + 5 +5eba 1fe3fe00 lshift pdata ,pdata +5ebb 60020091 store 4 ,mem_subsniff_instant +5ebc 18427e00 deposit temp +5ebd 60010098 store 2 ,mem_subsniff_tsniff +5ebe 20600000 rtn + +parse_lmpext_packet_type_table_req: +5ebf 6808c15a fetcht 1 ,mem_ptt +5ec0 68008553 fetch 1 ,mem_rxbuf + 2 +5ec1 9842fc00 ixor temp ,null +5ec2 2422dd77 nbranch reject_unknown_ext_packet ,zero +5ec3 2feffe00 isolate1 0 ,pdata +5ec4 6800804c fetch 1 ,mem_state_map +5ec5 7920fe05 setflag true ,smap_edr ,pdata +5ec6 6000804c store 1 ,mem_state_map +5ec7 70007c81 jam lmp_ext_accepted ,mem_lmo_opcode2 +5ec8 70007d8b jam lmp_packet_type_table_req ,mem_lmi_opcode2 +5ec9 20600000 rtn + +parse_lmp_sniff_subrating_res: + +parse_lmp_preferred_rate: + +parse_lmp_max_power: + +parse_lmp_min_power: +5eca 20600000 rtn + +parse_lmp_page_mode_req: +5ecb 20205e38 branch accept_lmp_msg + +parse_lmp_page_scan_mode_req: +5ecc 20205e38 branch accept_lmp_msg + +parse_lmp_slot_offset: +5ecd 68010552 fetch 2 ,mem_rxbuf + 1 +5ece 60010171 store 2 ,mem_slot_offset +5ecf 20600000 rtn + +parse_lmp_sniff_req_check_sniff_para: +5ed0 68010555 fetch 2 ,mem_rxbuf + 4 +5ed1 6808c172 fetcht 1 ,mem_lpm_mult +5ed2 984ffe00 imul32 temp ,pdata +5ed3 d8400640 arg 0x640 ,temp +5ed4 98467c00 isub temp ,null +5ed5 20600000 rtn + +parse_lmp_sniff_req: +5ed6 68010557 fetch 2 ,mem_rxbuf + 6 +5ed7 203a5ef0 branch lmp_reject_sniff ,blank +5ed8 20405ed0 call parse_lmp_sniff_req_check_sniff_para +5ed9 20215ef0 branch lmp_reject_sniff ,positive +5eda 6800c092 fetch 1 ,mem_device_option +5edb 1fe67c0a sub pdata ,dvc_op_module ,null +5edc 2042bcd5 call module_set_lpm_mult_2 ,zero +5edd 68008030 fetch 1 ,mem_state +5ede c280def0 bbit1 state_insniff ,lmp_reject_sniff +5edf 68010553 fetch 2 ,mem_rxbuf + 2 +5ee0 1fe3fe00 lshift pdata ,pdata +5ee1 60010075 store 2 ,mem_dsniff +5ee2 68010555 fetch 2 ,mem_rxbuf + 4 +5ee3 1fe3fe00 lshift pdata ,pdata +5ee4 60010032 store 2 ,mem_tsniff +5ee5 68010557 fetch 2 ,mem_rxbuf + 6 +5ee6 60008073 store 1 ,mem_sniff_attempt +5ee7 98000400 iforce temp +5ee8 68010559 fetch 2 ,mem_rxbuf + 8 +5ee9 60008074 store 1 ,mem_sniff_timeout +5eea 98467c00 isub temp ,null +5eeb 24215eed nbranch set_big_value_to_attempt ,positive +5eec 60008073 store 1 ,mem_sniff_attempt + +set_big_value_to_attempt: +5eed 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5eee 70007d17 jam lmp_sniff_req ,mem_lmi_opcode2 +5eef 20600000 rtn + +lmp_reject_sniff: +5ef0 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5ef1 20205d53 branch reject_lmp_packet + +parse_lmp_start_encryption_req: +5ef2 20405e38 call accept_lmp_msg +5ef3 20405ff9 call lmp_copy_rand +5ef4 2040728b call function_e3 +5ef5 202026b8 branch start_encryption + +parse_lmp_stop_encryption_req: +5ef6 20405e38 call accept_lmp_msg +5ef7 202026c0 branch stop_encryption + +parse_lmp_switch_req: +5ef8 68020552 fetch 4 ,mem_rxbuf + 1 +5ef9 1fe3fe00 lshift pdata ,pdata +5efa 2034df04 branch parse_lmp_switch_accept ,master +5efb 6808c1bd fetcht 1 ,mem_link_key_exists +5efc 243a5f01 nbranch parse_lmp_switch_req_clear_mark ,blank + +parse_lmp_switch_req_not_accept: +5efd 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5efe 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 +5eff 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f00 20600000 rtn + +parse_lmp_switch_req_clear_mark: +5f01 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 +5f02 70005500 jam 0 ,mem_conn_sm +5f03 202021d9 branch role_switch_prepare + +parse_lmp_switch_accept: +5f04 204021d9 call role_switch_prepare +5f05 79200022 set1 mark_reconn_recieve_switch ,mark +5f06 6800816d fetch 1 ,mem_connection_options +5f07 793ffe02 set0 connection_switch ,pdata +5f08 6000816d store 1 ,mem_connection_options +5f09 20205e38 branch accept_lmp_msg + +parse_lmp_temp_rand: + +parse_lmp_temp_key: + +parse_lmp_timing_accuracy_res: + +parse_lmp_unit_key: + +parse_lmp_use_semi_permanend_key: +5f0a 20600000 rtn + +parse_lmp_unsniff_req: +5f0b 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5f0c 70007d18 jam lmp_unsniff_req ,mem_lmi_opcode2 +5f0d 700a992e jam bt_evt_remote_unsniff ,mem_fifo_temp +5f0e 20407d86 call ui_ipc_send_event +5f0f 202026e9 branch sniff_exit + +parse_lmp_encapsulated_header: +5f10 68008552 fetch 1 ,mem_rxbuf + 1 +5f11 c080df1c bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject +5f12 68008553 fetch 1 ,mem_rxbuf + 2 +5f13 c080df1c bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject +5f14 68008554 fetch 1 ,mem_rxbuf + 3 +5f15 c0985f1c bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject +5f16 204062fc call check_localsm +5f17 2020df19 branch parse_lmp_encapsulated_header_master ,true +5f18 7009ae01 jam sp_stat_key_recv ,mem_sp_state + +parse_lmp_encapsulated_header_master: +5f19 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5f1a 70007d3d jam lmp_encapsulated_header ,mem_lmi_opcode2 +5f1b 20205d07 branch parse_rx_done + +parse_lmp_encapsulated_header_reject: +5f1c 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f1d 20205d53 branch reject_lmp_packet + +parse_lmp_accepted_encapsulated_header: +5f1e 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +5f1f 20600000 rtn + +parse_lmp_accepted_simple_pairing_number: +5f20 6800c662 fetch 1 ,mem_ssp_mode_flag +5f21 c000df27 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +5f22 c0015f2b beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey + +parse_lmp_accepted_simple_pairing_number_common: +5f23 204062fc call check_localsm +5f24 20608000 rtn true +5f25 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state +5f26 20600000 rtn + +parse_lmp_accepted_simple_pairing_number_ssp_pin: +5f27 20407962 call g_noninit_number_confirm +5f28 700a9935 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +5f29 20407d86 call ui_ipc_send_event +5f2a 20205f23 branch parse_lmp_accepted_simple_pairing_number_common + +parse_lmp_accepted_simple_pairing_number_passkey: +5f2b 204062fc call check_localsm +5f2c 20608000 rtn true +5f2d 6800c663 fetch 1 ,mem_authentication_passkey_times +5f2e c009df3b beq 19 ,authentication_passkey_end +5f2f 1fe0fe01 increase 1 ,pdata +5f30 6000c663 store 1 ,mem_authentication_passkey_times + +authentication_passkey: +5f31 7009b001 jam sp_flag_commit ,mem_sp_flag +5f32 7009ae04 jam sp_stat_commit_calc ,mem_sp_state +5f33 6800c663 fetch 1 ,mem_authentication_passkey_times +5f34 1fe20e00 copy pdata ,queue +5f35 6803468a fetch 6 ,mem_pin +5f36 afefffff qisolate1 pdata +5f37 58000080 setarg 0x80 +5f38 7920fe00 setflag true ,0 ,pdata +5f39 6000c664 store 1 ,mem_passkey_1bit +5f3a 20600000 rtn + +authentication_passkey_end: +5f3b 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state +5f3c 20600000 rtn + +parse_lmp_accepted_dhkey_check: +5f3d 20405f43 call parse_lmp_accepted_dhkey_check_common + +pairing_success: +5f3e 6800c665 fetch 1 ,mem_flag_pairing_state +5f3f 207a0000 rtn blank +5f40 70466500 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +5f41 700a9938 jam bt_evt_bt_pairing_success ,mem_fifo_temp +5f42 20207d86 branch ui_ipc_send_event + +parse_lmp_accepted_dhkey_check_common: +5f43 204062fc call check_localsm +5f44 2440f965 ncall g_noninit ,true +5f45 2040f975 call g_init ,true +5f46 204062fc call check_localsm +5f47 20608000 rtn true +5f48 7009ae0c jam sp_stat_link_key_calc ,mem_sp_state +5f49 7009b001 jam sp_flag_commit ,mem_sp_flag +5f4a 20600000 rtn + +parse_simple_pairing_confirm: +5f4b d8a00a6e arg mem_sp_confirm_remote ,contw +5f4c d8c00552 arg mem_rxbuf + 1 ,contr +5f4d 20407ebf call memcpy16 +5f4e 6800c662 fetch 1 ,mem_ssp_mode_flag +5f4f c1010000 rtneq ssp_mode_passkey_entry_flag +5f50 202076d8 branch master_set_mem_master_sp_flag + +parse_lmp_encapsulated_payload: +5f51 680089af fetch 1 ,mem_master_sp_state +5f52 c003df55 beq sp_stat_random_send ,parse_encapsulated_payload_master +5f53 680089ae fetch 1 ,mem_sp_state +5f54 c080df68 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject + +parse_encapsulated_payload_master: +5f55 680089b7 fetch 1 ,mem_sp_remote_key_recv_count +5f56 1fe60a20 sub pdata ,0x20 ,contw +5f57 24215f68 nbranch parse_lmp_encapsulated_payload_reject ,positive +5f58 d8a009c6 arg mem_sp_pubkey_remote ,contw +5f59 98a08a00 iadd contw ,contw +5f5a 68040552 fetch 8 ,mem_rxbuf + 1 +5f5b e0a40000 istore 8 ,contw +5f5c 6804055a fetch 8 ,mem_rxbuf + 9 +5f5d e0a40000 istore 8 ,contw +5f5e 680089b7 fetch 1 ,mem_sp_remote_key_recv_count +5f5f 1fe0fe10 increase 16 ,pdata +5f60 600089b7 store 1 ,mem_sp_remote_key_recv_count +5f61 c0985e38 bne encapsulated_len_p192 ,accept_lmp_msg + +parse_lmp_encapsulated_payload_completed: +5f62 204062fc call check_localsm +5f63 2020de38 branch accept_lmp_msg ,true +5f64 7009b801 jam sp_key_valid ,mem_sp_remote_key_invalid +5f65 7009ae02 jam sp_stat_key_generate ,mem_sp_state +5f66 7009b001 jam sp_flag_commit ,mem_sp_flag +5f67 20205e38 branch accept_lmp_msg + +parse_lmp_encapsulated_payload_reject: +5f68 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f69 20205d53 branch reject_lmp_packet + +parse_lmp_accepted_encapsulated_payload: +5f6a 680089b6 fetch 1 ,mem_sp_local_key_send_count +5f6b c0185f6e beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +5f6c 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +5f6d 20205d07 branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted: +5f6e 204062fc call check_localsm +5f6f 2020df77 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +5f70 6800c662 fetch 1 ,mem_ssp_mode_flag +5f71 c0015f75 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +5f72 7009b001 jam sp_flag_commit ,mem_sp_flag +5f73 7009ae04 jam sp_stat_commit_calc ,mem_sp_state +5f74 20205d07 branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted_get_passkey: +5f75 700a9936 jam bt_evt_bt_get_passkey ,mem_fifo_temp +5f76 20207d86 branch ui_ipc_send_event + +parse_lmp_encapsulated_payload_all_accepted_master: +5f77 20205d07 branch parse_rx_done + +parse_lmp_simple_pairing_number: +5f78 680089af fetch 1 ,mem_master_sp_state +5f79 c003df7c beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +5f7a 680089ae fetch 1 ,mem_sp_state +5f7b c0835f88 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject + +parse_lmp_simple_pairing_number_master: +5f7c d8a00a2e arg mem_sp_random_remote ,contw +5f7d 68040552 fetch 8 ,mem_rxbuf + 1 +5f7e e0a40000 istore 8 ,contw +5f7f 6804055a fetch 8 ,mem_rxbuf + 9 +5f80 e0a40000 istore 8 ,contw +5f81 204062fc call check_localsm +5f82 2020df86 branch parse_lmp_simple_pairing_number_master0 ,true +5f83 7009ae07 jam sp_stat_random_send ,mem_sp_state +5f84 7009b001 jam sp_flag_commit ,mem_sp_flag +5f85 20205e38 branch accept_lmp_msg + +parse_lmp_simple_pairing_number_master0: +5f86 7009af04 jam sp_stat_commit_calc ,mem_master_sp_state +5f87 202076d8 branch master_set_mem_master_sp_flag + +parse_lmp_simple_pairing_number_reject: +5f88 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f89 20205d53 branch reject_lmp_packet + +parse_dhkey_check: +5f8a 680089af fetch 1 ,mem_master_sp_state +5f8b c005df8e beq sp_stat_confirm_send ,parse_dhkey_check_master +5f8c 680089ae fetch 1 ,mem_sp_state +5f8d c0845f9d bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject + +parse_dhkey_check_master: +5f8e d8a00a5e arg mem_sp_check_result ,contw +5f8f d8c00552 arg mem_rxbuf + 1 ,contr +5f90 20407ebf call memcpy16 +5f91 204062fc call check_localsm +5f92 2020df9a branch parse_dhkey_check_master0 ,true +5f93 6800c662 fetch 1 ,mem_ssp_mode_flag +5f94 c000df9f beq ssp_mode_ssp_pin_flag ,number_comparison_mode + +number_comparison_successed: +5f95 70466100 jam 0 ,mem_flag_mode_ssp_pin +5f96 7009ae09 jam sp_stat_confirm_check ,mem_sp_state +5f97 7009b001 jam sp_flag_commit ,mem_sp_flag +5f98 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 +5f99 20205d07 branch parse_rx_done + +parse_dhkey_check_master0: +5f9a 7009af09 jam sp_stat_confirm_check ,mem_master_sp_state +5f9b 7009b101 jam sp_flag_commit ,mem_master_sp_flag +5f9c 20205d07 branch parse_rx_done + +parse_lmp_dhkey_check_reject: +5f9d 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f9e 20205d53 branch reject_lmp_packet + +number_comparison_mode: +5f9f 6800c661 fetch 1 ,mem_flag_mode_ssp_pin +5fa0 c283dfa4 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +5fa1 79207e06 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +5fa2 6000c661 store 1 ,mem_flag_mode_ssp_pin +5fa3 20600000 rtn + +comparison_result: +5fa4 c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +5fa5 70466100 jam 0 ,mem_flag_mode_ssp_pin +5fa6 20205f9d branch parse_lmp_dhkey_check_reject + +parse_lmp_clkoffset_res: +5fa7 20205d07 branch parse_rx_done + +parse_lmp_encryption_mode_req: +5fa8 6800816d fetch 1 ,mem_connection_options +5fa9 793ffe01 set0 connection_encrypt +5faa 6000816d store 1 ,mem_connection_options +5fab 20405e38 call accept_lmp_msg +5fac 24748000 nrtn master +5fad 68008552 fetch 1 ,mem_rxbuf + 1 +5fae 6808804b fetcht 1 ,mem_op +5faf 793a0404 setflag blank ,op_stop_enc ,temp +5fb0 7d3a0405 nsetflag blank ,op_start_enc ,temp +5fb1 6008804b storet 1 ,mem_op +5fb2 20600000 rtn + +parse_lmp_features_res: +5fb3 680c0552 fetcht 8 ,mem_rxbuf + 1 + +parse_lmp_features_res_not_hci: +5fb4 68008055 fetch 1 ,mem_conn_sm +5fb5 c1818000 rtnne conn_sm_wait_features_res +5fb6 6800816d fetch 1 ,mem_connection_options +5fb7 c3025fba bbit0 connection_feature_ext ,parse_lmp_send_conn +5fb8 70005514 jam conn_sm_send_features_ext ,mem_conn_sm +5fb9 20600000 rtn + +parse_lmp_send_conn: +5fba 70005504 jam conn_sm_send_conn_req ,mem_conn_sm +5fbb 20600000 rtn + +parse_lmp_test_activate: +5fbc 6800817f fetch 1 ,mem_debug_config +5fbd 6000815b store 1 ,mem_test_mode_old_debug_config +5fbe 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5fbf 70007d38 jam lmp_test_activate ,mem_lmi_opcode2 +5fc0 20600000 rtn + +parse_lmp_test_control: +5fc1 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5fc2 70007d39 jam lmp_test_control ,mem_lmi_opcode2 +5fc3 18007209 force 9 ,loopcnt +5fc4 d8c00552 arg mem_rxbuf + 1 ,contr +5fc5 d8a00152 arg mem_temp_payload ,contw + +parse_lmp_test_xor: +5fc6 e8c08000 ifetch 1 ,contr +5fc7 1fe2fe55 xor_into 0x55 ,pdata +5fc8 e0a08000 istore 1 ,contw +5fc9 c2005fc6 loop parse_lmp_test_xor +5fca 68008152 fetch 1 ,test_mode_scenario +5fcb 68088151 fetcht 1 ,mem_tester_emulate +5fcc 793f8407 set0 tester_no_whitening ,temp +5fcd 793f8404 set0 tester_pattern_test ,temp +5fce c07fdfda beq exit_test_mode ,parse_lmp_test_control_exit +5fcf c0005ff3 beq pause_test_mode ,parse_lmp_test_control_pause +5fd0 c002dfe7 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +5fd1 c003dfe6 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +5fd2 c0035fe7 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +5fd3 c0045fe6 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +5fd4 c000dfdf beq zero_pattern ,parse_lmp_test_control_pattern +5fd5 c0015fdf beq one_pattern ,parse_lmp_test_control_pattern +5fd6 c001dfdf beq alt_pattern ,parse_lmp_test_control_pattern +5fd7 c004dfdf beq alt2_pattern ,parse_lmp_test_control_pattern +5fd8 c0025fdf beq pseudorandom ,parse_lmp_test_control_pattern +5fd9 20600000 rtn + +parse_lmp_test_control_exit: +5fda 68008151 fetch 1 ,mem_tester_emulate +5fdb 79207e03 set1 tester_exit ,pdata +5fdc 79207e02 set1 tester_change ,pdata +5fdd 60008151 store 1 ,mem_tester_emulate +5fde 20600000 rtn + +parse_lmp_test_control_pattern: +5fdf 79200404 set1 tester_pattern_test ,temp +5fe0 70018005 jam 5 ,mem_lch_code +5fe1 68010159 fetch 2 ,test_mode_data_length +5fe2 98007200 iforce loopcnt +5fe3 6001015f store 2 ,mem_len +5fe4 d8a00551 arg mem_rxbuf ,contw +5fe5 20407f73 call pn9 + +parse_lmp_test_control_loopback_nowhite: +5fe6 79200407 set1 tester_no_whitening ,temp + +parse_lmp_test_control_loopback: +5fe7 79200402 set1 tester_change ,temp +5fe8 18007e00 force 0 ,pdata +5fe9 6000800b store 1 ,mem_slave_rcvcnt +5fea 600100fa store 2 ,mem_tst_pktcnt_crc +5feb 600100fc store 2 ,mem_tst_pktcnt_dmh +5fec 600100f8 store 2 ,mem_tst_pktcnt_hec +5fed 600100f6 store 2 ,mem_tst_pktcnt_sync +5fee 68008153 fetch 1 ,test_mode_hopping_mode +5fef 2fe1fe00 compare fixed_freq ,pdata ,0xff +5ff0 79208406 setflag true ,tester_fixed_freq ,temp +5ff1 60088151 storet 1 ,mem_tester_emulate +5ff2 20600000 rtn + +parse_lmp_test_control_pause: +5ff3 793f8011 set0 mark_testmode ,mark +5ff4 70015100 jam 0 ,mem_tester_emulate +5ff5 6800817f fetch 1 ,mem_debug_config +5ff6 793ffe06 set0 debug_tx_pattern ,pdata +5ff7 6000817f store 1 ,mem_debug_config +5ff8 20600000 rtn + +lmp_copy_rand: +5ff9 d8c00552 arg mem_rxbuf + 1 ,contr +5ffa d8a00562 arg mem_random_number ,contw +5ffb 20207ebf branch memcpy16 + +lmp_generate_key: +5ffc 70007c09 jam lmp_comb_key ,mem_lmo_opcode2 +5ffd 20600000 rtn + +lmp_start_encryption: +5ffe 24748000 nrtn master +5fff 70007c11 jam lmp_start_encryption_req ,mem_lmo_opcode2 +6000 20600000 rtn + +lmp_accept_inrand: +6001 da2040a0 arg mem_lap ,rega +6002 20407255 call generate_kinit +6003 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +6004 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 +6005 20600000 rtn + +lmp_disconnect: +6006 7000720a jam 10 ,mem_conn_timer +6007 70007c07 jam lmp_detach ,mem_lmo_opcode2 +6008 7004ca16 jam local_host ,mem_disconn_reason_send +6009 20600000 rtn + +send_lmp: +600a 47414030 bpatchx patch30_2 ,mem_patch30 +600b 78547c00 disable user +600c 204062c1 call lmo_fifo_process +600d 68008048 fetch 1 ,mem_lmp_to_send +600e 207a0000 rtn blank +600f c283e03f bbit1 7 ,send_lmp_escape + +send_lmp0: +6010 c000e16f beq lmp_name_req ,send_lmp_name_req +6011 c00160e4 beq lmp_name_res ,send_lmp_name_res +6012 c001e04a beq lmp_accepted ,send_lmp_accepted +6013 c0026060 beq lmp_not_accepted ,send_lmp_not_accepted +6014 c013e1db beq lmp_features_req ,send_lmp_features_req +6015 c0146108 beq lmp_features_res ,send_lmp_features_res +6016 c01860f4 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +6017 c012e1d6 beq lmp_version_req ,send_lmp_version_req +6018 c0136103 beq lmp_version_res ,send_lmp_version_res +6019 c018e1c3 beq lmp_setup_complete ,send_lmp_setup_complete +601a c01be16a beq lmp_supervision_timeout ,send_lmp_superto +601b c019e15c beq lmp_host_connection_req ,send_lmp_no_payload +601c c0046259 beq lmp_in_rand ,send_lmp_inrand +601d c004e24f beq lmp_comb_key ,send_lmp_comb_key +601e c005e264 beq lmp_au_rand ,send_lmp_aurand +601f c006626d beq lmp_sres ,send_lmp_sres +6020 c007e162 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +6021 c0086292 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +6022 c008e288 beq lmp_start_encryption_req ,send_lmp_start_encryption +6023 c003e152 beq lmp_detach ,send_lmp_detach +6024 c015617e beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +6025 c005617f beq lmp_unit_key ,send_lmp_unit_key +6026 c00fe1bc beq lmp_incr_power_req ,send_lmp_inc_power +6027 c00360f9 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +6028 c010e15f beq lmp_max_power ,send_lmp_nopayload_reply +6029 c016e1b2 beq lmp_max_slot ,send_lmp_max_slot +602a c01761b7 beq lmp_max_slot_req ,send_lmp_max_slot_req +602b c011615f beq lmp_min_power ,send_lmp_nopayload_reply +602c c01a6180 beq lmp_slot_offset ,send_lmp_slot_offset +602d c009e195 beq lmp_switch_req ,send_lmp_switch_req +602e c00be1a4 beq lmp_sniff_req ,send_lmp_sniff_req +602f c009628f beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +6030 c017e1aa beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +6031 c00c61af beq lmp_unsniff_req ,send_lmp_unsniff_req +6032 c01ee1ff beq lmp_encapsulated_header ,send_lmp_encapsulated_header +6033 c01f620b beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +6034 c01fe21d beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +6035 c0206227 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +6036 c020e23c beq lmp_dhkey_check ,send_lmp_dhkey_check +6037 c011e24b beq lmp_auto_rate ,send_lmp_auto_rate +6038 c01de246 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +6039 c002e24c beq lmp_clkoffset_req ,send_lmp_clkoffset_req +603a c014e24d beq lmp_quality_of_service ,send_lmp_quality_of_service +603b c01c624e beq lmp_test_activate ,send_lmp_test_activate +603c c01ce175 beq lmp_test_control ,send_lmp_test_control + +send_lmp_error: +603d 20202a8c branch assert +603e 20600000 rtn + +send_lmp_escape: +603f c040e06d beq lmp_ext_accepted ,send_lmpext_accepted +6040 c0426099 beq lmp_ext_features_res ,send_lmpext_features_res +6041 c0416076 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +6042 c041e10d beq lmp_ext_features_req ,send_lmpext_features_req +6043 c045e118 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +6044 c04be14e beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +6045 c04ce0d5 beq lmp_io_cap_req ,send_lmp_io_cap_req +6046 c04d60a4 beq lmp_io_cap_res ,send_lmpext_io_cap_res +6047 c04ae0da beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +6048 c04b60db beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +6049 20202a8c branch assert + +send_lmp_accepted: +604a 18007e02 force 2 ,pdata +604b 20406298 call msg_send_lmp +604c 68008049 fetch 1 ,mem_lmi_opcode +604d e0a08000 istore 1 ,contw +604e 204062a7 call send_lmp_follow +604f 4741c030 bpatchx patch30_3 ,mem_patch30 +6050 68008049 fetch 1 ,mem_lmi_opcode +6051 c0046080 beq lmp_in_rand ,send_lmp_accepted_inrand +6052 c007e084 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +6053 c008608f beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +6054 c00be05f beq lmp_sniff_req ,send_lmp_accept_sniff_req +6055 c019e092 beq lmp_host_connection_req ,send_lmp_accepted_connection +6056 c020e098 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +6057 c008e059 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +6058 20600000 rtn + +send_create_conn_start_l2cap_timer_sm: +6059 68008055 fetch 1 ,mem_conn_sm +605a 207a0000 rtn blank +605b 7000551b jam conn_sm_wait_done ,mem_conn_sm +605c 5800000c setarg timer_enpt_waite +605d d8e00007 arg enpt_delay_timer ,queue +605e 20207f08 branch timer_init + +send_lmp_accept_sniff_req: +605f 202026c6 branch sniff_init + +send_lmp_not_accepted: +6060 18007e03 force 3 ,pdata +6061 20406298 call msg_send_lmp +6062 68008049 fetch 1 ,mem_lmi_opcode +6063 c005e068 beq lmp_au_rand ,send_not_accept_aurand +6064 e0a08000 istore 1 ,contw +6065 6800804a fetch 1 ,mem_lmo_reason +6066 e0a08000 istore 1 ,contw +6067 202062a7 branch send_lmp_follow + +send_not_accept_aurand: +6068 e0a08000 istore 1 ,contw +6069 6800804a fetch 1 ,mem_lmo_reason +606a e0a08000 istore 1 ,contw +606b d84004d5 arg mem_sres_tid ,temp +606c 202062e2 branch special_tid_store + +send_lmpext_accepted: +606d 18000e04 force 4 ,queue +606e 204062a0 call send_lmpext +606f 5800007f setarg lmp_escape +6070 e0a08000 istore 1 ,contw +6071 68008049 fetch 1 ,mem_lmi_opcode +6072 793ffe07 set0 7 ,pdata +6073 e0a08000 istore 1 ,contw +6074 68008049 fetch 1 ,mem_lmi_opcode +6075 202062a7 branch send_lmp_follow + +send_lmpext_not_accepted: +6076 18000e05 force 5 ,queue +6077 204062a0 call send_lmpext +6078 5800007f setarg lmp_escape +6079 e0a08000 istore 1 ,contw +607a 68008049 fetch 1 ,mem_lmi_opcode +607b 793ffe07 set0 7 ,pdata +607c e0a08000 istore 1 ,contw +607d 6800804a fetch 1 ,mem_lmo_reason +607e e0a08000 istore 1 ,contw +607f 202062a7 branch send_lmp_follow + +send_lmp_accepted_inrand: +6080 2040244f call clear_linkkey +6081 204062f3 call tid_check +6082 20608000 rtn true +6083 20205ffc branch lmp_generate_key + +send_lmp_accepted_enc_mode: +6084 6800804b fetch 1 ,mem_op +6085 c282e08b bbit1 op_start_enc ,send_lmp_accepted_enc_start +6086 c4020000 rtnbit0 op_stop_enc +6087 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +6088 793ffe04 set0 op_stop_enc ,pdata +6089 204062eb call tid_reply +608a 2020608d branch send_lmp_accepted_enc_exit + +send_lmp_accepted_enc_start: +608b 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +608c 793ffe05 set0 op_start_enc ,pdata + +send_lmp_accepted_enc_exit: +608d 6000804b store 1 ,mem_op +608e 20600000 rtn + +send_lmp_accepted_enc_key: +608f 204062fc call check_localsm +6090 2020dffe branch lmp_start_encryption ,true +6091 20600000 rtn + +send_lmp_accepted_connection: +6092 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 +6093 680084d1 fetch 1 ,mem_lmp_conn_state +6094 79207e00 set1 received_conn_req ,pdata +6095 600084d1 store 1 ,mem_lmp_conn_state +6096 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp +6097 20207d86 branch ui_ipc_send_event + +send_lmp_accept_dhkey_check: +6098 20600000 rtn + +send_lmpext_features_res: +6099 18000e0c force 12 ,queue +609a 204062a0 call send_lmpext +609b 58000001 setarg 0x01 +609c e0a08000 istore 1 ,contw +609d 680104ce fetch 2 ,mem_lmpext_ssp_enable +609e e0a10000 istore 2 ,contw +609f 58000000 setarg 0 +60a0 e0a18000 istore 3 ,contw +60a1 58000000 setarg 0x00 +60a2 e0a20000 istore 4 ,contw +60a3 202062b0 branch send_lmp_reply + +send_lmpext_io_cap_res: +60a4 18000e05 force 5 ,queue +60a5 204062a0 call send_lmpext +60a6 6801c65b fetch 3 ,mem_sp_iocap_local +60a7 e0a18000 istore 3 ,contw +60a8 204062b0 call send_lmp_reply +60a9 70466501 jam flag_pairing_state_pairing ,mem_flag_pairing_state +60aa 6800c65b fetch 1 ,mem_sp_iocap_local +60ab c000e0b5 beq display_yesno ,responder_iocap_display_yesno +60ac c00160af beq keyboard_only ,responder_iocap_keyboard_only +60ad c001e0bb beq no_input_no_output ,responder_iocap_no_input_no_output +60ae 20600000 rtn + +responder_iocap_keyboard_only: +60af 6800c65e fetch 1 ,mem_sp_iocap_remote +60b0 c00060c7 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +60b1 c000e0c7 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +60b2 c00160c7 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +60b3 c001e0c1 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +60b4 20600000 rtn + +responder_iocap_display_yesno: +60b5 6800c65e fetch 1 ,mem_sp_iocap_remote +60b6 c00060c1 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +60b7 c000e0c5 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +60b8 c00160c7 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +60b9 c001e0c1 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +60ba 20600000 rtn + +responder_iocap_no_input_no_output: +60bb 6800c65e fetch 1 ,mem_sp_iocap_remote +60bc c00060c1 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +60bd c000e0c1 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +60be c00160c1 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +60bf c001e0c1 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +60c0 20600000 rtn + +responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: + +responder_iocap_display_yesno_initiator_iocap_no_input_no_output: + +responder_iocap_display_yesno_initiator_iocap_display_only: + +responder_iocap_no_input_no_output_initiator_iocap_display_only: + +responder_iocap_no_input_no_output_initiator_iocap_display_yesno: + +responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: + +responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: + +set_ssp_mode_justwork: +60c1 70466203 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +60c2 6800c55c fetch 1 ,mem_classic_bt_flag +60c3 c28033e9 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +60c4 20600000 rtn + +responder_iocap_display_yesno_initiator_iocap_display_yesno: + +set_ssp_mode_numeric_comparison: +60c5 70466201 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +60c6 20600000 rtn + +responder_iocap_keyboard_only_initiator_iocap_display_yesno: + +responder_iocap_keyboard_only_initiator_iocap_keyboard_only: + +responder_iocap_keyboard_only_initiator_iocap_display_only: + +responder_iocap_display_yesno_initiator_iocap_keyboard_only: + +set_ssp_mode_passkey: +60c7 70466202 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +60c8 20600000 rtn + +classic_bt_set_reject_justwork_flag: +60c9 d8e00000 arg flag_ssp_reject_justwork ,queue +60ca 202060cd branch classic_bluetooth_set_flag + +classic_bt_clr_reject_justwork_flag: +60cb d8e00000 arg flag_ssp_reject_justwork ,queue +60cc 202060d1 branch classic_bluetooth_clr_flag + +classic_bluetooth_set_flag: +60cd 6800c55c fetch 1 ,mem_classic_bt_flag +60ce f9207e00 qset1 pdata +60cf 6000c55c store 1 ,mem_classic_bt_flag +60d0 20600000 rtn + +classic_bluetooth_clr_flag: +60d1 6800c55c fetch 1 ,mem_classic_bt_flag +60d2 f93ffe00 qset0 pdata +60d3 6000c55c store 1 ,mem_classic_bt_flag +60d4 20600000 rtn + +send_lmp_io_cap_req: +60d5 18000e05 force 5 ,queue +60d6 204062a0 call send_lmpext +60d7 6801c65b fetch 3 ,mem_sp_iocap_local +60d8 e0a18000 istore 3 ,contw +60d9 202062b2 branch send_lmp_request + +send_lmpext_sniff_subrating_req: +60da 20600000 rtn + +send_lmpext_sniff_subrating_res: +60db 18000e09 force 9 ,queue +60dc 204062a0 call send_lmpext +60dd 68008095 fetch 1 ,mem_subsniff_rate +60de e0a08000 istore 1 ,contw +60df 68010096 fetch 2 ,mem_subsniff_tcmax +60e0 e0a10000 istore 2 ,contw +60e1 68020091 fetch 4 ,mem_subsniff_instant +60e2 e0a20000 istore 4 ,contw +60e3 202062b0 branch send_lmp_reply + +send_lmp_name_res: +60e4 18007e11 force 17 ,pdata +60e5 20406298 call msg_send_lmp +60e6 68008049 fetch 1 ,mem_lmi_opcode +60e7 1fe20400 copy pdata ,temp +60e8 c00060ec beq 0x00 ,send_lmp_name_res_offset_ok +60e9 c00760ec beq 0x0e ,send_lmp_name_res_offset_ok +60ea c00e60ec beq 0x1c ,send_lmp_name_res_offset_ok +60eb 20600000 rtn + +send_lmp_name_res_offset_ok: +60ec e0a08000 istore 1 ,contw +60ed 6800c515 fetch 1 ,mem_local_name_length +60ee e0a08000 istore 1 ,contw +60ef df20000e arg 14 ,loopcnt +60f0 58004516 setarg mem_local_name +60f1 98408c00 iadd temp ,contr +60f2 20407f01 call memcpy +60f3 202062b0 branch send_lmp_reply + +send_lmp_timing_accuracy_res: +60f4 18007e03 force 3 ,pdata +60f5 20406298 call msg_send_lmp +60f6 58000114 setarg 0x0114 +60f7 e0a10000 istore 2 ,contw +60f8 202062b0 branch send_lmp_reply + +send_lmp_clkoffset_res: +60f9 18007e03 force 3 ,pdata +60fa 20406298 call msg_send_lmp +60fb 68020165 fetch 4 ,mem_clke_bt +60fc 9c467e00 isub clkn_bt ,pdata +60fd 2034e0ff branch send_lmp_clkoffset_res_master ,master +60fe 1fe67e00 sub pdata ,0 ,pdata + +send_lmp_clkoffset_res_master: +60ff 1feb7e00 rshift2 pdata ,pdata +6100 793ffe0f set0 15 ,pdata +6101 e0a10000 istore 2 ,contw +6102 202062b0 branch send_lmp_reply + +send_lmp_version_res: +6103 18007e06 force 6 ,pdata +6104 20406298 call msg_send_lmp +6105 6802c510 fetch 5 ,mem_lmp_version +6106 e0a28000 istore 5 ,contw +6107 202062b0 branch send_lmp_reply + +send_lmp_features_res: +6108 18007e09 force 9 ,pdata +6109 20406298 call msg_send_lmp +610a 68044098 fetch 8 ,mem_features +610b e0a40000 istore 8 ,contw +610c 202062b0 branch send_lmp_reply + +send_lmpext_features_req: +610d 18000e0c force 12 ,queue +610e 204062a0 call send_lmpext +610f 58000001 setarg 0x01 +6110 e0a08000 istore 1 ,contw +6111 680104ce fetch 2 ,mem_lmpext_ssp_enable +6112 e0a10000 istore 2 ,contw +6113 58000000 setarg 0 +6114 e0a18000 istore 3 ,contw +6115 58000000 setarg 0x00 +6116 e0a20000 istore 4 ,contw +6117 202062b2 branch send_lmp_request + +send_lmpext_packet_type_table_req: +6118 18000e03 force 3 ,queue +6119 204062a0 call send_lmpext +611a 6800c15a fetch 1 ,mem_ptt +611b e0a08000 istore 1 ,contw +611c 78547c00 disable user +611d 204062b2 call send_lmp_request +611e 24740000 nrtn user +611f 24748000 nrtn master +6120 6800c0d8 fetch 1 ,mem_afh_cfg +6121 c4000000 rtnbit0 afh_cfg_on +6122 20406132 call afh_init +6123 2020613c branch afh_open_all_channels + +ssp_enable: +6124 47424030 bpatchx patch30_4 ,mem_patch30 +6125 6800c09e fetch 1 ,mem_features + 6 +6126 79207e03 set1 param_featrue_ssp ,pdata +6127 6000c09e store 1 ,mem_features + 6 +6128 58000101 setarg param_lmpext_ssp_enable +6129 600104ce store 2 ,mem_lmpext_ssp_enable +612a 20600000 rtn + +ssp_disable: +612b 4742c030 bpatchx patch30_5 ,mem_patch30 +612c 6800c09e fetch 1 ,mem_features + 6 +612d 793ffe03 set0 param_featrue_ssp ,pdata +612e 6000c09e store 1 ,mem_features + 6 +612f 58000000 setarg 0 +6130 600104ce store 2 ,mem_lmpext_ssp_enable +6131 20600000 rtn + +afh_init: +6132 7040d803 jam 0x3 ,mem_afh_cfg +6133 58000000 setarg 0 +6134 60024142 store 4 ,mem_afh_timer +6135 d8a040da arg mem_afh_map_lo ,contw +6136 20406140 call afh_reset_map +6137 d8a040e7 arg mem_afh_map_new ,contw +6138 20406140 call afh_reset_map +6139 d8a04146 arg mem_afh_classify_channel_map ,contw +613a 20406140 call afh_reset_map +613b 20206147 branch afh_clear_error_counter + +afh_open_all_channels: +613c d8a040e7 arg mem_afh_map_new ,contw +613d 20406140 call afh_reset_map +613e 20406147 call afh_clear_error_counter +613f 2020614a branch afh_set_send_flag + +afh_reset_map: +6140 58ffffff setarg 0xffffff +6141 e0a18000 istore 3 ,contw +6142 e0a18000 istore 3 ,contw +6143 e0a18000 istore 3 ,contw +6144 5800007f setarg 0x7f +6145 e0a08000 istore 1 ,contw +6146 20600000 rtn + +afh_clear_error_counter: +6147 58000000 setarg 0 +6148 600140d6 store 2 ,mem_afh_error_total +6149 20600000 rtn + +afh_set_send_flag: +614a 6800c0d8 fetch 1 ,mem_afh_cfg +614b 79207e02 set1 send_lmp_set_afh ,pdata +614c 6000c0d8 store 1 ,mem_afh_cfg +614d 20600000 rtn + +send_lmpext_pause_encryption_req: +614e 18000e02 force 2 ,queue +614f 204062a0 call send_lmpext +6150 2434e2b0 nbranch send_lmp_reply ,master +6151 202062b2 branch send_lmp_request + +send_lmp_detach: +6152 18007e02 force 2 ,pdata +6153 20406298 call msg_send_lmp +6154 680084ca fetch 1 ,mem_disconn_reason_send +6155 e0a08000 istore 1 ,contw +6156 204062b2 call send_lmp_request + +prepare_disconnect: +6157 6800804b fetch 1 ,mem_op +6158 79207e03 set1 op_disconn ,pdata +6159 6000804b store 1 ,mem_op +615a 70007232 jam 50 ,mem_conn_timer +615b 20600000 rtn + +send_lmp_no_payload: +615c 18007e01 force 1 ,pdata +615d 20406298 call msg_send_lmp +615e 202062b2 branch send_lmp_request + +send_lmp_nopayload_reply: +615f 18007e01 force 1 ,pdata +6160 20406298 call msg_send_lmp +6161 202062b0 branch send_lmp_reply + +send_lmp_encryption_mode_req: +6162 18007e02 force 2 ,pdata +6163 20406298 call msg_send_lmp +6164 6800804c fetch 1 ,mem_state_map +6165 2fec0002 isolate0 smap_encryption ,pdata +6166 7920fe00 setflag true ,0 ,pdata +6167 1fe17e01 and_into 1 ,pdata +6168 e0a08000 istore 1 ,contw +6169 202062b2 branch send_lmp_request + +send_lmp_superto: +616a 18007e03 force 3 ,pdata +616b 20406298 call msg_send_lmp +616c 68010051 fetch 2 ,mem_supervision_to +616d e0a10000 istore 2 ,contw +616e 202062b2 branch send_lmp_request + +send_lmp_name_req: +616f 700072fa jam 250 ,mem_conn_timer +6170 18007e02 force 2 ,pdata +6171 20406298 call msg_send_lmp +6172 68008053 fetch 1 ,mem_name_offset +6173 e0a08000 istore 1 ,contw +6174 202062b2 branch send_lmp_request + +send_lmp_test_control: +6175 18007e0a force 10 ,pdata +6176 20406298 call msg_send_lmp +6177 d8c00152 arg mem_temp_payload ,contr +6178 18007209 force 9 ,loopcnt + +send_lmp_test_control_loop: +6179 e8c08000 ifetch 1 ,contr +617a 1fe2fe55 xor_into 0x55 ,pdata +617b e0a08000 istore 1 ,contw +617c c2006179 loop send_lmp_test_control_loop +617d 202062b2 branch send_lmp_request + +send_lmp_quality_of_service_req: +617e 202062b2 branch send_lmp_request + +send_lmp_unit_key: +617f 202062b2 branch send_lmp_request + +send_lmp_slot_offset: +6180 20748000 rtn master +6181 2040282d call calc_slot_offset +6182 18007e09 force 9 ,pdata +6183 20406298 call msg_send_lmp +6184 68010171 fetch 2 ,mem_slot_offset +6185 e0a10000 istore 2 ,contw +6186 6801c0a0 fetch 3 ,mem_lap +6187 e0a18000 istore 3 ,contw +6188 6800c0a3 fetch 1 ,mem_uap +6189 e0a08000 istore 1 ,contw +618a 680140a4 fetch 2 ,mem_nap +618b e0a10000 istore 2 ,contw +618c c581e191 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +618d 793f8003 set0 mark_switch_initiated ,mark +618e 204062b2 call send_lmp_request +618f 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +6190 20600000 rtn + +send_lmp_slot_offset_reply: +6191 204062b0 call send_lmp_reply +6192 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +6193 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 +6194 20600000 rtn + +send_lmp_switch_req: +6195 d8400200 arg 0x200 ,temp +6196 2034e199 branch switch_on_native ,master +6197 1d027e00 deposit clke_bt +6198 2020619a branch switch_slack + +switch_on_native: +6199 1c427e00 deposit clkn_bt + +switch_slack: +619a 1c227e00 deposit bt_clk +619b 9840fe00 iadd temp ,pdata +619c 1fe17ffc and_into 0x1fc ,pdata +619d 60020034 store 4 ,mem_sniff_anchor +619e 18007e05 force 5 ,pdata +619f 20406298 call msg_send_lmp +61a0 68020034 fetch 4 ,mem_sniff_anchor +61a1 1fe37e00 rshift pdata ,pdata +61a2 e0a20000 istore 4 ,contw +61a3 202062b2 branch send_lmp_request + +send_lmp_sniff_req: +61a4 18007e0a force 10 ,pdata +61a5 20406298 call msg_send_lmp +61a6 d8c004d9 arg mem_sniff_payload ,contr +61a7 e8c48000 ifetch 9 ,contr +61a8 e0a48000 istore 9 ,contw +61a9 202062b2 branch send_lmp_request + +send_lmp_timing_accuracy_req: +61aa 18007e03 force 3 ,pdata +61ab 20406298 call msg_send_lmp +61ac 58000114 setarg 0x0114 +61ad e0a10000 istore 2 ,contw +61ae 202062b2 branch send_lmp_request + +send_lmp_unsniff_req: +61af 18007e01 force 1 ,pdata +61b0 20406298 call msg_send_lmp +61b1 202062b2 branch send_lmp_request + +send_lmp_max_slot: +61b2 18007e02 force 2 ,pdata +61b3 20406298 call msg_send_lmp +61b4 6800c0d0 fetch 1 ,mem_max_slot +61b5 e0a08000 istore 1 ,contw +61b6 202062b2 branch send_lmp_request + +send_lmp_max_slot_req: +61b7 18007e02 force 2 ,pdata +61b8 20406298 call msg_send_lmp +61b9 58000005 setarg 0x05 +61ba e0a08000 istore 1 ,contw +61bb 202062b2 branch send_lmp_request + +send_lmp_inc_power: +61bc 18007e02 force 2 ,pdata +61bd 20406298 call msg_send_lmp +61be 58000000 setarg 0x00 +61bf e0a08000 istore 1 ,contw +61c0 202062b2 branch send_lmp_request + +send_lmp_setup_complete_by_module: +61c1 70007c2e jam lmp_max_slot_req ,mem_lmo_opcode2 +61c2 20600000 rtn + +send_lmp_setup_complete: +61c3 6800c092 fetch 1 ,mem_device_option +61c4 1fe67c0a sub pdata ,dvc_op_module ,null +61c5 2042e1c1 call send_lmp_setup_complete_by_module ,zero +61c6 68008030 fetch 1 ,mem_state +61c7 79207e04 set1 state_conn_comp ,pdata +61c8 60008030 store 1 ,mem_state +61c9 1c427e00 copy clkn_bt ,pdata +61ca 600204e9 store 4 ,mem_aurand_send_delay_time +61cb 680084d1 fetch 1 ,mem_lmp_conn_state +61cc c281e1d4 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +61cd 79207e03 set1 sent_setup_complete ,pdata +61ce 600084d1 store 1 ,mem_lmp_conn_state +61cf 700a9905 jam bt_evt_setup_complete ,mem_fifo_temp +61d0 20407d86 call ui_ipc_send_event +61d1 18007e01 force 1 ,pdata +61d2 20406298 call msg_send_lmp +61d3 202062b2 branch send_lmp_request + +send_lmp_setup_complete_has_sent: +61d4 70004800 jam 0 ,mem_lmp_to_send +61d5 20600000 rtn + +send_lmp_version_req: +61d6 18007e06 force 6 ,pdata +61d7 20406298 call msg_send_lmp +61d8 6802c510 fetch 5 ,mem_lmp_version +61d9 e0a28000 istore 5 ,contw +61da 202062b2 branch send_lmp_request + +send_lmp_features_req: +61db 18007e09 force 9 ,pdata +61dc 20406298 call msg_send_lmp +61dd 68044098 fetch 8 ,mem_features +61de e0a40000 istore 8 ,contw +61df 202062b2 branch send_lmp_request + +sp_master_send_io_cap_get: +61e0 7009b101 jam sp_flag_commit ,mem_master_sp_flag +61e1 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +61e2 c1808000 rtnne sp_key_valid +61e3 7009af13 jam sp_master_stat_start_done ,mem_master_sp_state +61e4 20600000 rtn + +sp_master_send_io_cap_send: +61e5 204062ef call tid_initiate +61e6 70007c99 jam lmp_io_cap_req ,mem_lmo_opcode2 +61e7 7009af03 jam sp_stat_key_send ,mem_master_sp_state +61e8 20600000 rtn + +sp_master_send_lmp_encapsulated_header: +61e9 204062ef call tid_initiate +61ea 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 +61eb 7009af07 jam sp_stat_random_send ,mem_master_sp_state +61ec 20600000 rtn + +sp_master_commitment_compare: +61ed da200a4e arg mem_sp_calc_result_high ,rega +61ee da400a6e arg mem_sp_confirm_remote ,regb +61ef df200010 arg 16 ,loopcnt +61f0 20407f88 call string_compare +61f1 2022e1f7 branch sp_master_commitment_compare_success ,zero +61f2 7009af00 jam sp_stat_null ,mem_master_sp_state +61f3 204076da call master_clear_mem_master_sp_flag +61f4 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +61f5 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +61f6 20205d53 branch reject_lmp_packet + +sp_master_commitment_compare_success: +61f7 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state +61f8 204076d8 call master_set_mem_master_sp_flag +61f9 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +61fa 20205e38 branch accept_lmp_msg + +sp_master_send_lmp_simple_pairing_number: +61fb 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +61fc 20600000 rtn + +sp_send_lmp_encapsulated_header: +61fd 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 +61fe 20600000 rtn + +send_lmp_encapsulated_header: +61ff 7009b600 jam 0 ,mem_sp_local_key_send_count +6200 18007e04 force 4 ,pdata +6201 20406298 call msg_send_lmp +6202 18007e01 force encapsulated_major_type_p192 ,pdata +6203 e0a08000 istore 1 ,contw +6204 18007e01 force encapsulated_minor_type_p192 ,pdata +6205 e0a08000 istore 1 ,contw +6206 18007e30 force encapsulated_len_p192 ,pdata +6207 e0a08000 istore 1 ,contw +6208 204062fc call check_localsm +6209 2020e2b2 branch send_lmp_request ,true +620a 202062b0 branch send_lmp_reply + +send_lmp_encapsulated_payload: +620b 18007e11 force 17 ,pdata +620c 20406298 call msg_send_lmp +620d 680089b6 fetch 1 ,mem_sp_local_key_send_count +620e d8c0462a arg mem_sp_pubkey_local ,contr +620f 98c08c00 iadd contr ,contr +6210 e8c40000 ifetch 8 ,contr +6211 e0a40000 istore 8 ,contw +6212 e8c40000 ifetch 8 ,contr +6213 e0a40000 istore 8 ,contw +6214 680089b6 fetch 1 ,mem_sp_local_key_send_count +6215 1fe0fe10 increase 16 ,pdata +6216 600089b6 store 1 ,mem_sp_local_key_send_count +6217 204062fc call check_localsm +6218 2020e2b2 branch send_lmp_request ,true +6219 202062b0 branch send_lmp_reply + +sp_send_lmp_simple_pairing_comfirm: +621a 7009ae06 jam sp_stat_random_recv ,mem_sp_state +621b 70007c3f jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +621c 20600000 rtn + +send_lmp_simple_pairing_comfirm: +621d 18007e11 force 17 ,pdata +621e 20406298 call msg_send_lmp +621f d8c00a4e arg mem_sp_calc_result_high ,contr +6220 e8c40000 ifetch 8 ,contr +6221 e0a40000 istore 8 ,contw +6222 e8c40000 ifetch 8 ,contr +6223 e0a40000 istore 8 ,contw +6224 202062b0 branch send_lmp_reply + +sp_send_lmp_simple_pairing_number: +6225 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +6226 20600000 rtn + +send_lmp_simple_pairing_number: +6227 204062fc call check_localsm +6228 2040f612 call sp_local_random_key_generator ,true +6229 18007e11 force 17 ,pdata +622a 20406298 call msg_send_lmp +622b d8c00a1e arg mem_sp_random_local ,contr +622c e8c40000 ifetch 8 ,contr +622d e0a40000 istore 8 ,contw +622e e8c40000 ifetch 8 ,contr +622f e0a40000 istore 8 ,contw +6230 204062fc call check_localsm +6231 2420e2b0 nbranch send_lmp_reply ,true +6232 2020e2b2 branch send_lmp_request ,true + +master_sp_sm_end: +6233 7009af0f jam sp_stat_done ,mem_master_sp_state + +sp_aurand_send: +6234 204062ef call tid_initiate +6235 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 +6236 20406307 call check_localsm_master +6237 2020f64e branch sp_master_key_prarm_push ,true +6238 20207658 branch sp_link_key_prarm_push + +master_sp_send_lmp_dhkey_check: +6239 204062eb call tid_reply + +sp_send_lmp_dhkey_check: +623a 70007c41 jam lmp_dhkey_check ,mem_lmo_opcode2 +623b 20600000 rtn + +send_lmp_dhkey_check: +623c 18007e11 force 17 ,pdata +623d 20406298 call msg_send_lmp +623e d8c00a4e arg mem_sp_calc_result_high ,contr +623f e8c40000 ifetch 8 ,contr +6240 e0a40000 istore 8 ,contw +6241 e8c40000 ifetch 8 ,contr +6242 e0a40000 istore 8 ,contw +6243 204062fc call check_localsm +6244 2420e2b0 nbranch send_lmp_reply ,true +6245 2020e2b2 branch send_lmp_request ,true + +send_lmp_enc_key_size_mask_res: +6246 18007e03 force 3 ,pdata +6247 20406298 call msg_send_lmp +6248 5800fffe setarg 0xfffe +6249 e0a10000 istore 2 ,contw +624a 202062b0 branch send_lmp_reply + +send_lmp_auto_rate: +624b 202062b2 branch send_lmp_request + +send_lmp_clkoffset_req: +624c 202062b2 branch send_lmp_request + +send_lmp_quality_of_service: +624d 202062b2 branch send_lmp_request + +send_lmp_test_activate: +624e 202062b2 branch send_lmp_request + +send_lmp_comb_key: +624f 2040630b call generate_random_number +6250 da2040a0 arg mem_lap ,rega +6251 20406311 call generate_linkkey +6252 18007e11 force 17 ,pdata +6253 20406298 call msg_send_lmp +6254 da200582 arg mem_kinit ,rega +6255 da400562 arg mem_random_number ,regb +6256 20407352 call xor16 +6257 2434e2a7 nbranch send_lmp_follow ,master +6258 202062ad branch send_lmp_tid + +send_lmp_inrand: +6259 2040630b call generate_random_number +625a da200040 arg mem_plap ,rega +625b 20407255 call generate_kinit + +send_lmp_rand: +625c 18007e11 force 17 ,pdata +625d 20406298 call msg_send_lmp +625e d8c00562 arg mem_random_number ,contr +625f 20407ebf call memcpy16 +6260 68008055 fetch 1 ,mem_conn_sm +6261 c00ce2b2 beq conn_sm_auth_wait ,send_lmp_request +6262 c00c62b2 beq conn_sm_pairing_wait ,send_lmp_request +6263 202062ad branch send_lmp_tid + +send_lmp_aurand: +6264 680089b5 fetch 1 ,mem_pairing_auth +6265 203a626a branch send_lmp_aurand_notpairing ,blank +6266 204062fc call check_localsm +6267 2040e2ef call tid_initiate ,true +6268 2440e2eb ncall tid_reply ,true +6269 2020626b branch send_lmp_aurand_common + +send_lmp_aurand_notpairing: +626a 204062ef call tid_initiate + +send_lmp_aurand_common: +626b 2040630b call generate_random_number +626c 2020625c branch send_lmp_rand + +send_lmp_sres: +626d da2040a0 arg mem_lap ,rega +626e 20407288 call function_e1 +626f 18007e05 force 5 ,pdata +6270 20406298 call msg_send_lmp +6271 68020592 fetch 4 ,mem_input_store +6272 e0a20000 istore 4 ,contw +6273 d84004d5 arg mem_sres_tid ,temp +6274 204062e2 call special_tid_store +6275 20407386 call copy_aco +6276 204062fc call check_localsm +6277 2020e27c branch send_lmp_sres_master ,true +6278 7004d801 jam done_encryp ,mem_wait_encryption +6279 680089b5 fetch 1 ,mem_pairing_auth +627a 207a0000 rtn blank +627b 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 + +send_lmp_sres_master: +627c 6800c1bd fetch 1 ,mem_link_key_exists +627d 207a0000 rtn blank + +send_lmp_sres_startenc: +627e 204062fc call check_localsm +627f 2420e284 nbranch send_lmp_sres_startenc_slave ,true +6280 680084d7 fetch 1 ,mem_auth_enable +6281 207a0000 rtn blank +6282 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +6283 20600000 rtn + +send_lmp_sres_startenc_slave: +6284 c6908000 rtnmark0 mark_slave_in_rand_accepted +6285 793f8021 set0 mark_slave_in_rand_accepted ,mark +6286 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +6287 20600000 rtn + +send_lmp_start_encryption: +6288 2040630b call generate_random_number +6289 2040728b call function_e3 +628a 18007e11 force 17 ,pdata +628b 20406298 call msg_send_lmp +628c d8c00562 arg mem_random_number ,contr +628d 20407ebf call memcpy16 +628e 202062ad branch send_lmp_tid + +send_lmp_stop_encryption_req: +628f 18007e01 force 1 ,pdata +6290 20406298 call msg_send_lmp +6291 202062ad branch send_lmp_tid + +send_lmp_encryption_key_size_req: +6292 18007e02 force 2 ,pdata +6293 20406298 call msg_send_lmp +6294 18007e10 force 16 ,pdata +6295 e0a08000 istore 1 ,contw +6296 60008054 store 1 ,mem_key_size +6297 202062ad branch send_lmp_tid + +msg_send_lmp: +6298 1fe9fe00 lshift3 pdata ,pdata +6299 1fe1fe07 or_into 0x07 ,pdata +629a 600084b6 store 1 ,mem_lmo_header_length +629b df200011 arg 17 ,loopcnt +629c d8a004b8 arg mem_lmo_payload ,contw +629d 20407ed4 call clear_mem +629e d8a004b8 arg mem_lmo_payload ,contw +629f 20600000 rtn + +send_lmpext: +62a0 1fe1227f and pdata ,0x7f ,rega +62a1 7000487f jam lmp_escape ,mem_lmp_to_send +62a2 18e27e00 deposit queue +62a3 20406298 call msg_send_lmp +62a4 1a227e00 deposit rega +62a5 e0a08000 istore 1 ,contw +62a6 20600000 rtn + +send_lmp_follow: +62a7 68008048 fetch 1 ,mem_lmp_to_send +62a8 1fe3fe00 lshift pdata ,pdata +62a9 6808804c fetcht 1 ,mem_state_map +62aa 284ffe01 isolate1 smap_lmptid ,temp +62ab 7920fe00 setflag true ,0 ,pdata +62ac 202062b7 branch send_lmp_exit + +send_lmp_tid: +62ad 6808804c fetcht 1 ,mem_state_map +62ae 18410401 and_into 1 ,temp +62af 202062b3 branch send_lmp_end + +send_lmp_reply: +62b0 18000400 force 0 ,temp +62b1 202062b3 branch send_lmp_end + +send_lmp_request: +62b2 18000401 force 1 ,temp + +send_lmp_end: +62b3 68008048 fetch 1 ,mem_lmp_to_send +62b4 1fe3fe00 lshift pdata ,pdata +62b5 7934fe00 setflag master ,0 ,pdata +62b6 9842fe00 ixor temp ,pdata + +send_lmp_exit: +62b7 600084b7 store 1 ,mem_lmo_header_opcode +62b8 70004800 jam 0 ,mem_lmp_to_send +62b9 204062c7 call lmo_fifo_process_lmo0empty +62ba 78347c00 enable user +62bb 20600000 rtn + +lmo_fifo_check: +62bc 6800807c fetch 1 ,mem_lmo_opcode2 +62bd 207a0000 rtn blank +62be 204062c1 call lmo_fifo_process +62bf 6800807c fetch 1 ,mem_lmo_opcode2 +62c0 20600000 rtn + +lmo_fifo_process: +62c1 47434030 bpatchx patch30_6 ,mem_patch30 +62c2 68008048 fetch 1 ,mem_lmp_to_send +62c3 203a62c7 branch lmo_fifo_process_lmo0empty ,blank +62c4 68008078 fetch 1 ,mem_lmo_opcode1 +62c5 247a0000 nrtn blank +62c6 202062d1 branch lmo_fifo_process_lmo2to1 + +lmo_fifo_process_lmo0empty: +62c7 68008078 fetch 1 ,mem_lmo_opcode1 +62c8 203a62d7 branch lmo_fifo_process_lmo1_empty ,blank +62c9 68018078 fetch 3 ,mem_lmo_opcode1 +62ca 60018048 store 3 ,mem_lmp_to_send +62cb 6808807b fetcht 1 ,mem_lmo_tid1 +62cc 6800804c fetch 1 ,mem_state_map +62cd 793ffe01 set0 smap_lmptid ,pdata +62ce 9841fe00 ior temp ,pdata +62cf 6000804c store 1 ,mem_state_map +62d0 70007800 jam 0 ,mem_lmo_opcode1 + +lmo_fifo_process_lmo2to1: +62d1 6800807c fetch 1 ,mem_lmo_opcode2 +62d2 207a0000 rtn blank +62d3 6802007c fetch 4 ,mem_lmo_opcode2 +62d4 60020078 store 4 ,mem_lmo_opcode1 +62d5 70007c00 jam 0 ,mem_lmo_opcode2 +62d6 20600000 rtn + +lmo_fifo_process_lmo1_empty: +62d7 6800807c fetch 1 ,mem_lmo_opcode2 +62d8 207a0000 rtn blank +62d9 6801807c fetch 3 ,mem_lmo_opcode2 +62da 60018048 store 3 ,mem_lmp_to_send +62db 6808807f fetcht 1 ,mem_lmo_tid2 +62dc 6800804c fetch 1 ,mem_state_map +62dd 793ffe01 set0 smap_lmptid ,pdata +62de 9841fe00 ior temp ,pdata +62df 6000804c store 1 ,mem_state_map +62e0 70007c00 jam 0 ,mem_lmo_opcode2 +62e1 20600000 rtn + +special_tid_store: +62e2 4743c030 bpatchx patch30_7 ,mem_patch30 +62e3 6800804c fetch 1 ,mem_state_map +62e4 1fe22600 copy pdata ,regc +62e5 e8408000 ifetch 1 ,temp +62e6 20405e52 call pop_tid_follow +62e7 204062a7 call send_lmp_follow +62e8 1a627e00 copy regc ,pdata +62e9 6000804c store 1 ,mem_state_map +62ea 20600000 rtn + +tid_reply: +62eb 6808804c fetcht 1 ,mem_state_map +62ec 793f8400 set0 smap_lmptidinit ,temp +62ed 6008804c storet 1 ,mem_state_map +62ee 20600000 rtn + +tid_initiate: +62ef 6808804c fetcht 1 ,mem_state_map +62f0 79200400 set1 smap_lmptidinit ,temp +62f1 6008804c storet 1 ,mem_state_map +62f2 20600000 rtn + +tid_check: +62f3 7d34fe01 nsetflag master ,smap_lmptid ,pdata +62f4 6808804c fetcht 1 ,mem_state_map +62f5 9842fe00 ixor temp ,pdata +62f6 2feffe01 isolate1 smap_lmptid ,pdata +62f7 20600000 rtn + +tid_set_reply: +62f8 6800804c fetch 1 ,mem_state_map +62f9 7934fe01 setflag master ,smap_lmptid ,pdata +62fa 6000804c store 1 ,mem_state_map +62fb 20600000 rtn + +check_localsm: +62fc 680089b4 fetch 1 ,mem_sp_localsm +62fd 2fe0fe01 compare local_statemachine ,pdata ,0x7f +62fe 20600000 rtn + +setlocalsm_master: +62ff 680089b4 fetch 1 ,mem_sp_localsm +6300 79207e07 set1 7 ,pdata +6301 600089b4 store 1 ,mem_sp_localsm +6302 20600000 rtn + +setlocalsm_slave: +6303 680089b4 fetch 1 ,mem_sp_localsm +6304 793ffe07 set0 7 ,pdata +6305 600089b4 store 1 ,mem_sp_localsm +6306 20600000 rtn + +check_localsm_master: +6307 680089b4 fetch 1 ,mem_sp_localsm +6308 2feffe07 isolate1 7 ,pdata +6309 600089b4 store 1 ,mem_sp_localsm +630a 20600000 rtn + +generate_random_number: +630b d8a00562 arg mem_random_number ,contw + +generate_random: +630c 18007210 force 16 ,loopcnt + +generate_random_another: + +generate_random_loop: +630d 180a7e00 random pdata +630e e0a08000 istore 1 ,contw +630f c200630d loop generate_random_another +6310 20600000 rtn + +generate_linkkey: +6311 20407259 call function_e21 +6312 da2041be arg mem_link_key ,rega +6313 da400592 arg mem_input_store ,regb +6314 ea240000 ifetch 8 ,rega +6315 68088030 fetcht 1 ,mem_state +6316 7d3a0406 nsetflag blank ,state_combkey ,temp +6317 60088030 storet 1 ,mem_state +6318 1a220a00 copy rega ,contw +6319 20407352 call xor16 +631a 202021c4 branch generate_linkkey_continue + +process_conn_sm: +631b 47444031 bpatchx patch31_0 ,mem_patch31 +631c 204062bc call lmo_fifo_check +631d 247a0000 nrtn blank + +process_conn_sm_continue: +631e 68008055 fetch 1 ,mem_conn_sm +631f 207a0000 rtn blank +6320 c002636f beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +6321 c002e374 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +6322 c0016366 beq conn_sm_send_features ,host_create_conn_send_features +6323 c001e37c beq conn_sm_wait_features_res ,host_create_conn_waiting +6324 c0076369 beq conn_sm_send_switch ,host_create_conn_send_switch +6325 c0036398 beq conn_sm_auth_pair ,host_create_conn_auth_pair +6326 c003e3b0 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +6327 c004e3b1 beq conn_sm_encrypt ,host_create_conn_encrypt +6328 c00563ba beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +6329 c005e3be beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +632a c0066386 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +632b c006e389 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +632c c007e38f beq conn_sm_detach_delay ,host_create_conn_master_detach +632d c0096359 beq conn_sm_send_version ,host_create_conn_send_version +632e c009e37c beq conn_sm_wait_version ,host_create_conn_waiting +632f c008635c beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +6330 c00a6356 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +6331 c00ae37c beq conn_sm_wait_features_ext ,host_create_conn_waiting +6332 c00b6350 beq conn_sm_pairing ,host_create_conn_pairing +6333 c00c6355 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +6334 c00be349 beq conn_sm_auth ,host_create_conn_auth +6335 c00ce34f beq conn_sm_auth_wait ,host_create_conn_auth_wait +6336 c00d633a beq conn_sm_done ,host_create_conn_done +6337 c00de344 beq conn_sm_wait_done ,host_create_conn_done_wait +6338 70005500 jam conn_sm_standby ,mem_conn_sm +6339 20600000 rtn + +host_create_conn_done: +633a 680084d1 fetch 1 ,mem_lmp_conn_state +633b c4010000 rtnbit0 received_setup_complete +633c c4018000 rtnbit0 sent_setup_complete +633d 70005500 jam conn_sm_standby ,mem_conn_sm +633e 20406340 call host_conn_judge_encrypt +633f 20206cef branch scheduler_start_upper_sm + +host_conn_judge_encrypt: +6340 6800816d fetch 1 ,mem_connection_options +6341 c4008000 rtnbit0 connection_encrypt +6342 7000550a jam conn_sm_encrypt_wait ,mem_conn_sm +6343 20600000 rtn + +host_create_conn_done_wait: +6344 d8e00007 arg enpt_delay_timer ,queue +6345 20407f16 call timer_check +6346 247a0000 nrtn blank +6347 7000551a jam conn_sm_done ,mem_conn_sm +6348 20600000 rtn + +host_create_conn_auth: +6349 6800816d fetch 1 ,mem_connection_options +634a 793ffe00 set0 connection_auth ,pdata +634b 6000816d store 1 ,mem_connection_options +634c 70005519 jam conn_sm_auth_wait ,mem_conn_sm +634d 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 +634e 20600000 rtn + +host_create_conn_auth_wait: +634f 20600000 rtn + +host_create_conn_pairing: +6350 680084d4 fetch 1 ,mem_pincode_state +6351 c1810000 rtnne pincode_state_pincode_ready +6352 204063c0 call host_auth +6353 70005518 jam conn_sm_pairing_wait ,mem_conn_sm +6354 20600000 rtn + +host_create_conn_pairing_wait: +6355 20600000 rtn + +host_creat_conn_send_feat_ext: +6356 70005515 jam conn_sm_wait_features_ext ,mem_conn_sm +6357 70007c83 jam lmp_ext_features_req ,mem_lmo_opcode2 +6358 20600000 rtn + +host_create_conn_send_version: +6359 70005513 jam conn_sm_wait_version ,mem_conn_sm +635a 70007c25 jam lmp_version_req ,mem_lmo_opcode2 +635b 20600000 rtn + +host_creat_conn_wait_switch: +635c 6800c55b fetch 1 ,mem_switch_flag +635d c1000000 rtneq switch_flag_init +635e c000e364 beq switch_flag_accept ,host_create_conn_switch_accept +635f d8e00006 arg switch_wait_timer ,queue +6360 20407f16 call timer_check +6361 247a0000 nrtn blank +6362 70455b00 jam switch_flag_init ,mem_switch_flag +6363 2020637d branch host_create_conn_switch + +host_create_conn_switch_accept: +6364 20748000 rtn master +6365 20206398 branch host_create_conn_auth_pair + +host_create_conn_send_features: +6366 70005503 jam conn_sm_wait_features_res ,mem_conn_sm +6367 70007c27 jam lmp_features_req ,mem_lmo_opcode2 +6368 20600000 rtn + +host_create_conn_send_switch: +6369 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +636a 79200003 set1 mark_switch_initiated ,mark +636b 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm +636c 580001ff setarg 0x1ff +636d 600104d2 store 2 ,mem_soft_timer +636e 20600000 rtn + +host_create_conn_send_conn_req: +636f 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm +6370 7004d2ff jam 0xff ,mem_soft_timer +6371 793f8022 set0 mark_reconn_recieve_switch ,mark +6372 70007c33 jam lmp_host_connection_req ,mem_lmo_opcode2 +6373 20205d04 branch init_lmp_reinit + +host_create_conn_wait_accept: +6374 c6110000 rtnmark1 mark_reconn_recieve_switch +6375 680104d2 fetch 2 ,mem_soft_timer +6376 1fe67e01 sub pdata ,1 ,pdata +6377 2022e37a branch host_create_conn_resend ,zero +6378 600104d2 store 2 ,mem_soft_timer +6379 20600000 rtn + +host_create_conn_resend: +637a 7000550e jam conn_sm_send_switch ,mem_conn_sm +637b 20600000 rtn + +host_create_conn_waiting: +637c 20600000 rtn + +host_create_conn_switch: +637d 680084d1 fetch 1 ,mem_lmp_conn_state +637e c4018000 rtnbit0 sent_setup_complete +637f c4010000 rtnbit0 received_setup_complete +6380 6800816d fetch 1 ,mem_connection_options +6381 793ffe02 set0 connection_switch ,pdata +6382 6000816d store 1 ,mem_connection_options +6383 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +6384 70005510 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +6385 20600000 rtn + +host_create_conn_send_setup_complete: +6386 7000550d jam conn_sm_wait_setup_complete ,mem_conn_sm +6387 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +6388 20600000 rtn + +host_create_conn_wait_setup_complete: +6389 680084d1 fetch 1 ,mem_lmp_conn_state +638a c4010000 rtnbit0 received_setup_complete +638b 70005500 jam conn_sm_standby ,mem_conn_sm +638c 20600000 rtn + +host_create_conn_wait_setup_complete_rtn: +638d 70005506 jam conn_sm_auth_pair ,mem_conn_sm +638e 20600000 rtn + +host_create_conn_master_detach: +638f 680084d2 fetch 1 ,mem_soft_timer +6390 1fe0ffff increase -1 ,pdata +6391 203a6394 branch host_create_conn_send_detach ,blank +6392 600084d2 store 1 ,mem_soft_timer +6393 20600000 rtn + +host_create_conn_send_detach: +6394 70007c07 jam lmp_detach ,mem_lmo_opcode2 +6395 7004ca16 jam local_host ,mem_disconn_reason_send +6396 70005500 jam 0 ,mem_conn_sm +6397 20600000 rtn + +host_create_conn_auth_pair: +6398 6800816d fetch 1 ,mem_connection_options +6399 c281637d bbit1 connection_switch ,host_create_conn_switch +639a c280639d bbit1 connection_auth ,host_create_conn_auth_pair_true + +host_create_conn_sm_done: +639b 7000551a jam conn_sm_done ,mem_conn_sm +639c 20600000 rtn + +host_create_conn_auth_pair_true: +639d 6800c1bd fetch 1 ,mem_link_key_exists +639e 203a63a9 branch host_create_conn_auth_pair_nokey ,blank +639f 680084d1 fetch 1 ,mem_lmp_conn_state +63a0 c4018000 rtnbit0 sent_setup_complete +63a1 c4010000 rtnbit0 received_setup_complete +63a2 680204e9 fetch 4 ,mem_aurand_send_delay_time +63a3 d8400064 arg 100 ,temp +63a4 98408400 iadd temp ,temp +63a5 1c427e00 copy clkn_bt ,pdata +63a6 98467c00 isub temp ,null +63a7 24610000 nrtn positive +63a8 20206349 branch host_create_conn_auth + +host_create_conn_auth_pair_nokey: +63a9 70005516 jam conn_sm_pairing ,mem_conn_sm +63aa 70468904 jam 4 ,mem_pin_length +63ab 58003030 setarg 0x3030 +63ac 6001468a store 2 ,mem_pin +63ad e0a10000 istore 2 ,contw +63ae 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state +63af 20206350 branch host_create_conn_pairing + +host_create_conn_auth_pair_wait: +63b0 20600000 rtn + +host_create_conn_encrypt: +63b1 6800816d fetch 1 ,mem_connection_options +63b2 c280e3b5 bbit1 connection_encrypt ,host_create_conn_encrypt_start +63b3 7000551a jam conn_sm_done ,mem_conn_sm +63b4 20600000 rtn + +host_create_conn_encrypt_start: +63b5 6800816d fetch 1 ,mem_connection_options +63b6 793ffe01 set0 connection_encrypt ,pdata +63b7 6000816d store 1 ,mem_connection_options +63b8 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +63b9 20600000 rtn + +host_create_conn_encrypt_wait: +63ba 680084d8 fetch 1 ,mem_wait_encryption +63bb 207a0000 rtn blank +63bc 70005500 jam conn_sm_standby ,mem_conn_sm +63bd 202063b5 branch host_create_conn_encrypt_start + +host_create_conn_encrypt_wait_clear: +63be 7000550c jam conn_sm_send_setup_complete ,mem_conn_sm +63bf 20600000 rtn + +host_auth: +63c0 6800804b fetch 1 ,mem_op +63c1 c28163c5 bbit1 op_inrand_req ,remote_auth +63c2 204062ef call tid_initiate +63c3 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 +63c4 20204d04 branch cmd_exit + +remote_auth: +63c5 6800804b fetch 1 ,mem_op +63c6 793ffe02 set0 op_inrand_req ,pdata +63c7 6000804b store 1 ,mem_op +63c8 20406001 call lmp_accept_inrand +63c9 204062f8 call tid_set_reply +63ca 20204d04 branch cmd_exit + +pincode_reinit: +63cb 58000004 setarg 4 +63cc 6000c689 store 1 ,mem_pin_length +63cd 58003030 setarg 0x3030 +63ce e0a10000 istore 2 ,contw +63cf e0a10000 istore 2 ,contw +63d0 20600000 rtn + +twspi_reset: +63d1 47464031 bpatchx patch31_4 ,mem_patch31 +63d2 68108073 hfetch 1 ,core_gpio_oe3 +63d3 d8400006 arg 0x06 ,temp +63d4 9841fe00 ior temp ,pdata +63d5 60108073 hstore 1 ,core_gpio_oe3 +63d6 68108077 hfetch 1 ,core_gpio_out3 +63d7 9841fe00 ior temp ,pdata +63d8 60108077 hstore 1 ,core_gpio_out3 +63d9 204063ee call twspi_disable +63da 68108077 hfetch 1 ,core_gpio_out3 +63db 793ffe01 set0 1 ,pdata +63dc 793ffe02 set0 2 ,pdata +63dd 60108077 hstore 1 ,core_gpio_out3 +63de 2000001e nop 30 +63df 202063f2 branch twspi_enable + +twspi_reset2: +63e0 68108073 hfetch 1 ,core_gpio_oe3 +63e1 d84000c0 arg 0xc0 ,temp +63e2 9841fe00 ior temp ,pdata +63e3 60108073 hstore 1 ,core_gpio_oe3 +63e4 68108077 hfetch 1 ,core_gpio_out3 +63e5 9841fe00 ior temp ,pdata +63e6 60108077 hstore 1 ,core_gpio_out3 +63e7 204063ee call twspi_disable +63e8 68108077 hfetch 1 ,core_gpio_out3 +63e9 793ffe06 set0 6 ,pdata +63ea 793ffe07 set0 7 ,pdata +63eb 60108077 hstore 1 ,core_gpio_out3 +63ec 2000001e nop 30 +63ed 202063f6 branch twspi_enable2 + +twspi_disable: +63ee 68108081 hfetch 1 ,core_gpio_sel1 +63ef 1fe17efc and pdata ,0xfc ,pdata +63f0 60108081 hstore 1 ,core_gpio_sel1 +63f1 20600000 rtn + +twspi_enable: +63f2 68108081 hfetch 1 ,core_gpio_sel1 +63f3 1fe1fe01 or pdata ,0x01 ,pdata +63f4 60108081 hstore 1 ,core_gpio_sel1 +63f5 20600000 rtn + +twspi_enable2: +63f6 68108081 hfetch 1 ,core_gpio_sel1 +63f7 1fe1fe03 or pdata ,0x03 ,pdata +63f8 793ffe04 set0 4 ,pdata +63f9 60108081 hstore 1 ,core_gpio_sel1 +63fa 20600000 rtn + +sensor_read: +63fb 1fe22400 copy pdata ,regb +63fc 2040640f call spi_ncs_enable +63fd 20000064 nop 100 +63fe 1a427e00 copy regb ,pdata +63ff 20406414 call twspi_read +6400 1fe22400 copy pdata ,regb +6401 20406411 call spi_ncs_disable +6402 20000064 nop 100 +6403 1a427e00 copy regb ,pdata +6404 20600000 rtn + +sensor_write: +6405 1fe22400 copy pdata ,regb +6406 2040640f call spi_ncs_enable +6407 20000064 nop 100 +6408 1a427e00 copy regb ,pdata +6409 20406413 call twspi_write +640a 20406411 call spi_ncs_disable +640b 20000064 nop 100 +640c 20600000 rtn + +spi_ncs_gpio_init: +640d 6808c214 fetcht 1 ,mem_spi_ncs_gpio +640e 2020680e branch gpio_config_output + +spi_ncs_enable: +640f 6808c214 fetcht 1 ,mem_spi_ncs_gpio +6410 20206829 branch gpio_out_active + +spi_ncs_disable: +6411 6808c214 fetcht 1 ,mem_spi_ncs_gpio +6412 20206825 branch gpio_out_inactive + +twspi_write: +6413 202064ec branch spid_write_reg + +twspi_read: +6414 202064f3 branch spid_read_reg + +read_function_aes: +6415 24346419 nbranch read_function ,user +6416 68108085 hfetch 1 ,core_gpio_key2 +6417 1fe1fe02 or_into 0x2 ,pdata +6418 60108085 hstore 1 ,core_gpio_key2 + +read_function: +6419 18427c00 copy temp ,null +641a 2022e41c branch read_fuction_zero ,zero +641b 1a627a00 copy regc ,pc + +read_fuction_zero: +641c 2fcc0000 isolate0 0 ,null +641d 202064b9 branch set_ucode_status + +get_block_header: +641e 18000404 force 4 ,temp + +get_block_header0: +641f da2001fe arg mem_ucode_buf ,rega +6420 68108085 hfetch 1 ,core_gpio_key2 +6421 1fe17efd and_into 0xfd ,pdata +6422 60108085 hstore 1 ,core_gpio_key2 +6423 20406419 call read_function +6424 da2055aa arg 0x55aa ,rega +6425 680101fe fetch 2 ,mem_ucode_buf +6426 e8c90000 ifetcht 2 ,contr +6427 9a267c00 isub rega ,null +6428 20600000 rtn + +read_first_block: +6429 d8400002 arg 2 ,temp +642a da200204 arg mem_ucode_ptr ,rega +642b 20406419 call read_function +642c 68010204 fetch 2 ,mem_ucode_ptr +642d 600101f7 store 2 ,mem_addr_mi +642e 20546430 call get_iv ,user +642f 20600000 rtn + +get_iv: +6430 d8400010 arg 16 ,temp +6431 da200206 arg mem_ucode_keybuf ,rega +6432 68108085 hfetch 1 ,core_gpio_key2 +6433 1fe17efd and_into 0xfd ,pdata +6434 60108085 hstore 1 ,core_gpio_key2 +6435 20406419 call read_function +6436 d8c00206 arg mem_ucode_keybuf ,contr +6437 df200010 arg 16 ,loopcnt +6438 20407478 call aes_load_data +6439 20407428 call aes_init +643a 20407491 call aes_clear_data +643b 20207422 branch do_aes_cbc + +load_storage: +643c 7856fc00 disable match +643d 2040641e call get_block_header +643e 24628000 nrtn zero +643f 7836fc00 enable match +6440 70802380 hjam 0x80 ,core_ucode_ctrl +6441 70802200 hjam 0 ,core_ucode_hi +6442 70802400 hjam 0 ,core_ucode_low +6443 da208025 arg core_ucode_data ,rega +6444 20406415 call read_function_aes +6445 70802300 hjam 0x0 ,core_ucode_ctrl + +load_storage_loop: +6446 d8400006 arg 6 ,temp +6447 2040641f call get_block_header0 +6448 24628000 nrtn zero +6449 e8c10000 ifetch 2 ,contr +644a 98002200 iforce rega +644b 20406419 call read_function +644c 20206446 branch load_storage_loop + +reload_eeprom: +644d 20407f99 call clean_mem +644e 58001000 setarg 0x1000 +644f 600101f7 store 2 ,mem_addr_mi +6450 da6065e5 arg iicd_read_eep ,regc +6451 df200002 arg 2 ,loopcnt + +reload_eeprom_loop: +6452 2040641e call get_block_header +6453 24628000 nrtn zero +6454 680101f7 fetch 2 ,mem_addr_mi +6455 1ff0fe00 byteswap pdata ,pdata +6456 9840fe00 iadd temp ,pdata +6457 1ff0fe00 byteswap pdata ,pdata +6458 600101f7 store 2 ,mem_addr_mi +6459 c2006452 loop reload_eeprom_loop +645a 20206446 branch load_storage_loop + +loadcode: +645b 20407f99 call clean_mem +645c 78547c00 disable user +645d 2040666a call otp_enable_chgpump +645e 58000000 setarg otp_ucode_flag +645f da2001f3 arg mem_otp_ucode_flag ,rega +6460 d8400002 arg 2 ,temp +6461 204066b3 call otpd_read_data +6462 680101f3 fetch 2 ,mem_otp_ucode_flag +6463 c303e46e bbit0 otp_uflag_aes ,loadcode_otp +6464 70805025 hjam 0x25 ,core_clkoff +6465 580007f0 setarg otp_ucode_aeskey +6466 da200206 arg mem_ucode_keybuf ,rega +6467 d8400010 arg 16 ,temp +6468 204066b3 call otpd_read_data +6469 70800608 hjam lock_otp ,core_misc_ctrl +646a 7920002b set1 mark_otp_encrypt ,mark +646b d8c00206 arg mem_ucode_keybuf ,contr +646c 20407484 call load_key +646d 78347c00 enable user + +loadcode_otp: +646e 7041da00 jam 0 ,mem_loadcode_times + +loadcode_otp_2: +646f 204064b0 call loadcode_check_times +6470 680101f3 fetch 2 ,mem_otp_ucode_flag +6471 1ff0fe00 byteswap pdata ,pdata +6472 d84007ff arg 0x7ff ,temp +6473 98417e00 iand temp ,pdata +6474 2022e47b branch loadcode_iic ,zero +6475 2040666f call otp_set_addr +6476 da6066b8 arg otpd_read_code ,regc +6477 20546430 call get_iv ,user +6478 2040643c call load_storage +6479 680081f2 fetch 1 ,mem_ucode_status +647a c300646f bbit0 0 ,loadcode_otp_2 + +loadcode_iic: +647b 2040666d call otp_disable_chgpump +647c 7041da00 jam 0 ,mem_loadcode_times + +loadcode_iic_2: +647d 204064b0 call loadcode_check_times +647e 204065c2 call clear_eeprom_size_2k +647f 680081f3 fetch 1 ,mem_otp_ucode_flag +6480 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi +6481 204064aa call loadcode_iic_by_eeprom +6482 2436e486 nbranch loadcode_iic_eeprom_2k ,match +6483 680081f2 fetch 1 ,mem_ucode_status +6484 c300647d bbit0 0 ,loadcode_iic_2 +6485 2020649b branch loadcode_hci + +loadcode_iic_eeprom_2k: +6486 204065bf call set_eeprom_size_2k +6487 680081f3 fetch 1 ,mem_otp_ucode_flag +6488 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi +6489 204064aa call loadcode_iic_by_eeprom +648a 2436e48e nbranch loadcode_spi ,match +648b 680081f2 fetch 1 ,mem_ucode_status +648c c300647d bbit0 0 ,loadcode_iic_2 +648d 2020649b branch loadcode_hci + +loadcode_spi: +648e 7041da00 jam 0 ,mem_loadcode_times + +loadcode_spi_2: +648f 204064b0 call loadcode_check_times +6490 680081f3 fetch 1 ,mem_otp_ucode_flag +6491 c282e49b bbit1 otp_uflag_skip_flash ,loadcode_hci +6492 58000000 setarg 0x0 +6493 600181f6 store 3 ,mem_addr_hi +6494 20406502 call spid_init_flash +6495 da606578 arg spid_load_flash ,regc +6496 20406429 call read_first_block +6497 2040643c call load_storage +6498 2436e49b nbranch loadcode_hci ,match +6499 680081f2 fetch 1 ,mem_ucode_status +649a c300648f bbit0 0 ,loadcode_spi_2 + +loadcode_hci: +649b c515e49d bmark1 mark_otp_encrypt ,loadcode_hci_enc +649c 204064a3 call clear_key_buf + +loadcode_hci_enc: +649d 680081f3 fetch 1 ,mem_otp_ucode_flag +649e c30264a3 bbit0 otp_uflag_hci ,clear_key_buf +649f 70805021 hjam 0x21 ,core_clkoff +64a0 20404c0e call hci_init + +loadcode_hci_loop: +64a1 20404c2e call hci_rx_packet +64a2 202064a1 branch loadcode_hci_loop + +clear_key_buf: +64a3 58000000 setarg 0 +64a4 60040206 store 8 ,mem_ucode_keybuf +64a5 6004020e store 8 ,mem_ucode_keybuf + 8 +64a6 18007004 force regidx_key ,regext_index +64a7 20407492 call aes_clear +64a8 70805021 hjam 0x21 ,core_clkoff +64a9 20600000 rtn + +loadcode_iic_by_eeprom: +64aa 58000000 setarg 0x0 +64ab 600101f7 store 2 ,mem_addr_mi +64ac da6065e5 arg iicd_read_eep ,regc +64ad 204065a3 call iicd_init_12m +64ae 20406429 call read_first_block +64af 2020643c branch load_storage + +loadcode_check_times: +64b0 6800c1da fetch 1 ,mem_loadcode_times +64b1 1fe0fe01 increase 1 ,pdata +64b2 1fe67c03 sub pdata ,3 ,null +64b3 242164b6 nbranch loadcode_error ,positive +64b4 6000c1da store 1 ,mem_loadcode_times +64b5 20600000 rtn + +loadcode_error: +64b6 204064a3 call clear_key_buf +64b7 20407fa1 call ice_break +64b8 20600000 rtn + +set_ucode_status: +64b9 680081f2 fetch 1 ,mem_ucode_status +64ba 1fe3fe00 lshift pdata ,pdata +64bb 7920fe00 setflag true ,0 ,pdata +64bc 2a2c000f isolate0 15 ,rega +64bd 20608000 rtn true +64be 600081f2 store 1 ,mem_ucode_status +64bf 20600000 rtn + +decrypt_code: +64c0 68108085 hfetch 1 ,core_gpio_key2 +64c1 c4008000 rtnbit0 1 +64c2 202064c6 branch decrypt_code_skip + +decrypt_code_loop: +64c3 6810812c hfetch 1 ,core_dma_status +64c4 afefffff qisolate1 pdata +64c5 20608000 rtn true + +decrypt_code_skip: +64c6 68108108 hfetch 1 ,core_misc_status +64c7 c300e4c3 bbit0 1 ,decrypt_code_loop +64c8 20407422 call do_aes_cbc +64c9 202064c3 branch decrypt_code_loop + +load_ucode: +64ca 68014199 fetch 2 ,mem_patch_ptr +64cb 207a0000 rtn blank +64cc 70802380 hjam 0x80 ,core_ucode_ctrl +64cd 70802200 hjam 0 ,core_ucode_hi +64ce 70802400 hjam 0 ,core_ucode_low +64cf 6809419b fetcht 2 ,mem_patch_len +64d0 184bf200 lshift2 temp ,loopcnt +64d1 98000c00 iforce contr + +load_ucode_loop: +64d2 e8c08000 ifetch 1 ,contr +64d3 60108025 hstore 1 ,core_ucode_data +64d4 c20064d2 loop load_ucode_loop +64d5 70802300 hjam 0x0 ,core_ucode_ctrl +64d6 20600000 rtn + +spid_init: +64d7 4746c031 bpatchx patch31_5 ,mem_patch31 +64d8 204064dd call spid_init_common +64d9 202063f2 branch twspi_enable + +spid_init2: +64da 204064dd call spid_init_common +64db 204063ee call twspi_disable +64dc 202063f6 branch twspi_enable2 + +spid_init_common: +64dd 6800c212 fetch 1 ,mem_spi_init_clk +64de 60108086 hstore 1 ,core_spid_ctrl +64df 6800c213 fetch 1 ,mem_spi_init_delay_time +64e0 60108087 hstore 1 ,core_spid_delay +64e1 580001f5 setarg mem_spid_tbuf +64e2 6011008a hstore 2 ,core_spid_txaddr +64e3 580001fa setarg mem_spid_rbuf +64e4 6011008c hstore 2 ,core_spid_rxaddr +64e5 202063ee branch twspi_disable + +spid_reset: +64e6 68108086 hfetch 1 ,core_spid_ctrl +64e7 79207e07 set1 7 ,pdata +64e8 60108086 hstore 1 ,core_spid_ctrl +64e9 793ffe07 set0 7 ,pdata +64ea 60108086 hstore 1 ,core_spid_ctrl +64eb 20600000 rtn + +spid_write_reg: +64ec 79207e07 set1 7 ,pdata +64ed 600101f5 store 2 ,mem_spid_tbuf +64ee 47474031 bpatchx patch31_6 ,mem_patch31 +64ef 70808802 hjam 2 ,core_spid_txlen +64f0 70808e00 hjam 0 ,core_spid_rxlen +64f1 70800602 hjam spid_start ,core_misc_ctrl +64f2 202064fc branch wait_spid_done + +spid_read_reg: +64f3 18000401 force 1 ,temp + +spid_read_regs: +64f4 600081f5 store 1 ,mem_spid_tbuf +64f5 4747c031 bpatchx patch31_7 ,mem_patch31 +64f6 70808801 hjam 1 ,core_spid_txlen +64f7 6019008e hstoret 2 ,core_spid_rxlen +64f8 70800602 hjam spid_start ,core_misc_ctrl +64f9 204064fc call wait_spid_done +64fa 680081fa fetch 1 ,mem_spid_rbuf +64fb 20600000 rtn + +wait_spid_done: +64fc 680140d6 fetch 2 ,mem_afh_error_total +64fd 1fe0fe01 increase 1 ,pdata +64fe 600140d6 store 2 ,mem_afh_error_total +64ff 6810812c hfetch 1 ,core_dma_status +6500 c301e4fc bbit0 spid_done ,wait_spid_done +6501 20600000 rtn + +spid_init_flash: +6502 70808640 hjam 0x40 ,core_spid_ctrl +6503 70808700 hjam 0x0 ,core_spid_delay +6504 68108081 hfetch 1 ,core_gpio_sel1 +6505 793ffe00 set0 0 ,pdata +6506 79207e01 set1 1 ,pdata +6507 60108081 hstore 1 ,core_gpio_sel1 +6508 58000000 setarg 0 +6509 600201f5 store 4 ,mem_spid_tbuf +650a 20600000 rtn + +spid_unlock_flash: +650b 58000000 setarg 0 +650c 6011008e hstore 2 ,core_spid_rxlen +650d 58000001 setarg 1 +650e 60110088 hstore 2 ,core_spid_txlen +650f 580001f5 setarg mem_spid_tbuf +6510 6011008a hstore 2 ,core_spid_txaddr +6511 7001f506 jam 6 ,mem_spid_tbuf +6512 70800602 hjam spid_start ,core_misc_ctrl +6513 202064fc branch wait_spid_done + +flash_write: +6514 78547c00 disable user +6515 1fe22400 copy pdata ,regb +6516 6800c239 fetch 1 ,mem_spi_write_flash_sm +6517 c1800000 rtnne flash_sm_no_buys +6518 78347c00 enable user +6519 1a427e00 copy regb ,pdata +651a 20206522 branch flash_write_start + +flash_write_spi_sm_timer: +651b 6800c239 fetch 1 ,mem_spi_write_flash_sm +651c c000e522 beq flash_sm_start ,flash_write_start +651d c0016528 beq flash_sm_erase_sector ,flash_erase_sector +651e c001e530 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector +651f c0026537 beq flash_sm_write_data ,flash_write_data +6520 c002e53d beq flash_sm_wait_write_data ,flash_wait_write_data +6521 20600000 rtn + +flash_write_start: +6522 6001c232 store 3 ,mem_spi_write_addr +6523 1a227e00 copy rega ,pdata +6524 60014235 store 2 ,mem_spi_write_ptr +6525 60094237 storet 2 ,mem_spi_write_len +6526 70423902 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +6527 20206502 branch spid_init_flash + +flash_erase_sector: +6528 20406502 call spid_init_flash +6529 70423903 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +652a 2040650b call spid_unlock_flash +652b da2001f5 arg mem_spid_tbuf ,rega +652c 6801c232 fetch 3 ,mem_spi_write_addr +652d 70808804 hjam 4 ,core_spid_txlen +652e d8400020 arg flash_command_sector_erase ,temp +652f 20206556 branch spid_write_flash_common + +flash_wait_erase_sector: +6530 20406502 call spid_init_flash +6531 2040650b call spid_unlock_flash +6532 58000005 setarg flash_read_satus +6533 204064f3 call spid_read_reg +6534 c3800000 rtnbit1 flash_status_wip +6535 70423904 jam flash_sm_write_data ,mem_spi_write_flash_sm +6536 20600000 rtn + +flash_write_data: +6537 20406502 call spid_init_flash +6538 70423905 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +6539 2040650b call spid_unlock_flash +653a 2040654a call flash_data_preserve +653b 20406552 call spid_write_flash +653c 20206545 branch flash_data_recover + +flash_wait_write_data: +653d 20406502 call spid_init_flash +653e 2040650b call spid_unlock_flash +653f 58000005 setarg flash_read_satus +6540 204064f3 call spid_read_reg +6541 c3800000 rtnbit1 flash_status_wip +6542 70423900 jam flash_sm_no_buys ,mem_spi_write_flash_sm +6543 68014201 fetch 2 ,mem_cb_spi_flash_write_complate +6544 20207f9c branch callback_func + +flash_data_recover: +6545 68020aa2 fetch 4 ,mem_temp +6546 68094235 fetcht 2 ,mem_spi_write_ptr +6547 184085fc increase -4 ,temp +6548 e0420000 istore 4 ,temp +6549 20600000 rtn + +flash_data_preserve: +654a 68094235 fetcht 2 ,mem_spi_write_ptr +654b 18422200 copy temp ,rega +654c 184085fc increase -4 ,temp +654d e8420000 ifetch 4 ,temp +654e 60020aa2 store 4 ,mem_temp +654f 68094237 fetcht 2 ,mem_spi_write_len +6550 6801c232 fetch 3 ,mem_spi_write_addr +6551 20600000 rtn + +spid_write_flash: +6552 18408404 increase 4 ,temp +6553 60190088 hstoret 2 ,core_spid_txlen +6554 d8400002 arg flash_command_write_data ,temp +6555 1a20a3fc increase -4 ,rega + +spid_write_flash_common: +6556 e2288000 istoret 1 ,rega +6557 1ff10400 rshift16 pdata ,temp +6558 e0a88000 istoret 1 ,contw +6559 1fec8400 rshift8 pdata ,temp +655a e0a88000 istoret 1 ,contw +655b e0a08000 istore 1 ,contw +655c 1a227e00 deposit rega +655d 6011008a hstore 2 ,core_spid_txaddr +655e 58000000 setarg 0 +655f 6011008e hstore 2 ,core_spid_rxlen +6560 70800602 hjam spid_start ,core_misc_ctrl +6561 202064fc branch wait_spid_done + +spid_read_flash: +6562 6019008e hstoret 2 ,core_spid_rxlen +6563 1ff10400 rshift16 pdata ,temp +6564 600881f6 storet 1 ,mem_addr_hi +6565 1fec8400 rshift8 pdata ,temp +6566 600881f7 storet 1 ,mem_addr_mi +6567 600081f8 store 1 ,mem_addr_lo +6568 58000004 setarg 4 +6569 60110088 hstore 2 ,core_spid_txlen +656a 7001f503 jam flash_command_read_data ,mem_spid_tbuf +656b 580001f5 setarg mem_spid_tbuf +656c 6011008a hstore 2 ,core_spid_txaddr +656d 1a227e00 deposit rega +656e 6011008c hstore 2 ,core_spid_rxaddr +656f 68108086 hfetch 1 ,core_spid_ctrl +6570 2a2c000f isolate0 15 ,rega +6571 7920fe06 setflag true ,6 ,pdata +6572 60108086 hstore 1 ,core_spid_ctrl +6573 70800602 hjam spid_start ,core_misc_ctrl + +spi_read_flash_wait: +6574 6810812c hfetch 1 ,core_dma_status +6575 c283e574 bbit1 7 ,spi_read_flash_wait +6576 d8e00003 arg spid_done ,queue +6577 202064fc branch wait_spid_done + +spid_load_flash: +6578 6019008e hstoret 2 ,core_spid_rxlen +6579 58000004 setarg 4 +657a 60110088 hstore 2 ,core_spid_txlen +657b 7001f503 jam 3 ,mem_spid_tbuf +657c 580001f5 setarg mem_spid_tbuf +657d 6011008a hstore 2 ,core_spid_txaddr +657e 1a227e00 deposit rega +657f 6011008c hstore 2 ,core_spid_rxaddr +6580 68108086 hfetch 1 ,core_spid_ctrl +6581 2a2c000f isolate0 15 ,rega +6582 7920fe06 setflag true ,6 ,pdata +6583 60108086 hstore 1 ,core_spid_ctrl +6584 70800602 hjam spid_start ,core_misc_ctrl + +spi_load_flash_wait: +6585 6810812c hfetch 1 ,core_dma_status +6586 c283e585 bbit1 7 ,spi_load_flash_wait +6587 d8e00003 arg spid_done ,queue +6588 204064c0 call decrypt_code +6589 204064fc call wait_spid_done +658a 2feffe02 isolate1 spid_crcok ,pdata +658b 204064b9 call set_ucode_status +658c 680081f6 fetch 1 ,mem_addr_hi +658d 1ff02400 lshift16 pdata ,regb +658e 680081f7 fetch 1 ,mem_addr_mi +658f 1fed7e00 lshift8 pdata ,pdata +6590 9a41a400 ior regb ,regb +6591 680081f8 fetch 1 ,mem_addr_lo +6592 9a41fe00 ior regb ,pdata +6593 9840fe00 iadd temp ,pdata +6594 600081f8 store 1 ,mem_addr_lo +6595 1fecfe00 rshift8 pdata ,pdata +6596 600081f7 store 1 ,mem_addr_mi +6597 1fecfe00 rshift8 pdata ,pdata +6598 600081f6 store 1 ,mem_addr_hi +6599 20600000 rtn + +soft_reset_chip: +659a 70801001 hjam 1 ,core_reset +659b 20600000 rtn + +iic_init_390k: +659c 7080910c hjam 12 ,core_iicd_scl_low +659d 7080920d hjam 13 ,core_iicd_scl_high +659e 7080930d hjam 13 ,core_iicd_start_setup +659f 7080940d hjam 13 ,core_iicd_start_hold +65a0 7080950d hjam 13 ,core_iicd_stop_setup +65a1 7080960c hjam 12 ,core_iicd_data_setup +65a2 202065a9 branch iicd_init_gpio + +iicd_init_12m: +65a3 70809105 hjam 5 ,core_iicd_scl_low +65a4 70809207 hjam 7 ,core_iicd_scl_high +65a5 70809307 hjam 7 ,core_iicd_start_setup +65a6 70809407 hjam 7 ,core_iicd_start_hold +65a7 70809507 hjam 7 ,core_iicd_stop_setup +65a8 70809605 hjam 5 ,core_iicd_data_setup + +iicd_init_gpio: +65a9 6810807b hfetch 1 ,core_gpio_pu3 +65aa 1fe1fec0 or_into 0xc0 ,pdata +65ab 6010807b hstore 1 ,core_gpio_pu3 +65ac 68108081 hfetch 1 ,core_gpio_sel1 +65ad 1fe1fe10 or_into 0x10 ,pdata +65ae 60108081 hstore 1 ,core_gpio_sel1 +65af 20600000 rtn + +wait_iicd_done: +65b0 6810812c hfetch 1 ,core_dma_status +65b1 c302e5b0 bbit0 iicd_done ,wait_iicd_done +65b2 20600000 rtn + +iicd_read_data: +65b3 60110098 hstore 2 ,core_iicd_txlen +65b4 1a227e00 deposit rega +65b5 6011009a hstore 2 ,core_iicd_txaddr +65b6 1a427e00 deposit regb +65b7 6011009c hstore 2 ,core_iicd_rxaddr +65b8 18427e00 deposit temp +65b9 6011009e hstore 2 ,core_iicd_rxlen +65ba d8400001 arg 1 ,temp +65bb 7d3a0401 nsetflag blank ,1 ,temp +65bc 60108090 hstore 1 ,core_iicd_ctrl +65bd 70800604 hjam iicd_start ,core_misc_ctrl +65be 202065b0 branch wait_iicd_done + +set_eeprom_size_2k: +65bf 79200028 set1 mark_eeprom_size ,mark +65c0 70421108 jam 0x08 ,mem_eeprom_block_size +65c1 20600000 rtn + +clear_eeprom_size_2k: +65c2 793f8028 set0 mark_eeprom_size ,mark +65c3 70421120 jam 0x20 ,mem_eeprom_block_size +65c4 20600000 rtn + +iicd_read_eep_data_size_2k: +65c5 6800c203 fetch 1 ,mem_eeprom_base +65c6 9a40fe00 iadd regb ,pdata +65c7 600081f7 store 1 ,mem_addr_mi +65c8 202065cc branch iicd_read_eep_size_2k + +iicd_read_eep_size_2k_lcadcode: +65c9 680101f7 fetch 2 ,mem_addr_mi +65ca 1ff0fe00 byteswap pdata ,pdata +65cb 600081f7 store 1 ,mem_addr_mi + +iicd_read_eep_size_2k: +65cc 58000003 setarg 3 +65cd 60110098 hstore 2 ,core_iicd_txlen +65ce 7001f6a0 jam 0xa0 ,mem_iicd_tbuf +65cf 7001f8a1 jam 0xa1 ,mem_iicd_tbuf + 2 +65d0 202065eb branch iicd_read_eep_common + +iicd_write_protect_eep_data: +65d1 60090aa2 storet 2 ,mem_temp +65d2 204065d6 call iicd_eeprom_write_enable +65d3 68090aa2 fetcht 2 ,mem_temp +65d4 20406606 call iicd_write_eep_data +65d5 202065dd branch iicd_eeprom_write_disable + +iicd_eeprom_write_enable: +65d6 6800c23a fetch 1 ,mem_eeprom_wp_gpio +65d7 c17f8000 rtneq gpio_disable +65d8 c30365db bbit0 6 ,iicd_wp_gpio_output_low +65d9 580249f0 setarg 150000 +65da 20402a8f call sleep + +iicd_wp_gpio_output_low: +65db 6808c23a fetcht 1 ,mem_eeprom_wp_gpio +65dc 20206829 branch gpio_out_active + +iicd_eeprom_write_disable: +65dd 6808c23a fetcht 1 ,mem_eeprom_wp_gpio +65de 20206825 branch gpio_out_inactive + +iicd_read_eep_data: +65df 47484032 bpatchx patch32_0 ,mem_patch32 +65e0 c51465c5 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +65e1 68014203 fetch 2 ,mem_eeprom_base +65e2 9a40fe00 iadd regb ,pdata +65e3 1ff0fe00 byteswap pdata ,pdata +65e4 600101f7 store 2 ,mem_addr_mi + +iicd_read_eep: +65e5 4748c032 bpatchx patch32_1 ,mem_patch32 +65e6 c51465c9 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +65e7 58000004 setarg 4 +65e8 60110098 hstore 2 ,core_iicd_txlen +65e9 7001f6a0 jam 0xa0 ,mem_iicd_tbuf +65ea 7001f9a1 jam 0xa1 ,mem_iicd_tbuf + 3 + +iicd_read_eep_common: +65eb 580001f6 setarg mem_iicd_tbuf +65ec 6011009a hstore 2 ,core_iicd_txaddr +65ed 6019009e hstoret 2 ,core_iicd_rxlen +65ee 1a227e00 deposit rega +65ef 6011009c hstore 2 ,core_iicd_rxaddr +65f0 58000002 setarg 2 +65f1 2a2c000f isolate0 15 ,rega +65f2 7920fe00 setflag true ,0 ,pdata +65f3 60108090 hstore 1 ,core_iicd_ctrl +65f4 70800604 hjam iicd_start ,core_misc_ctrl +65f5 d8e00005 arg iicd_done ,queue +65f6 204064c0 call decrypt_code +65f7 204065b0 call wait_iicd_done +65f8 2feffe04 isolate1 iicd_crcok ,pdata +65f9 204064b9 call set_ucode_status +65fa c5146601 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +65fb 680101f7 fetch 2 ,mem_addr_mi +65fc 1ff0fe00 byteswap pdata ,pdata +65fd 9840fe00 iadd temp ,pdata +65fe 1ff0fe00 byteswap pdata ,pdata +65ff 600101f7 store 2 ,mem_addr_mi +6600 20600000 rtn + +iicd_read_eep_load_code_size_2k: +6601 680081f7 fetch 1 ,mem_addr_mi +6602 9840fe00 iadd temp ,pdata +6603 1ff0fe00 byteswap pdata ,pdata +6604 600101f7 store 2 ,mem_addr_mi +6605 20600000 rtn + +iicd_write_eep_data: +6606 68014203 fetch 2 ,mem_eeprom_base +6607 9a40fe00 iadd regb ,pdata + +iicd_write_ota_data: +6608 60010a9a store 2 ,mem_pdatatemp +6609 47494032 bpatchx patch32_2 ,mem_patch32 +660a 60090aa2 storet 2 ,mem_temp +660b 1a227e00 copy rega ,pdata +660c 60010ab9 store 2 ,mem_contr + +iicd_write_eep_loop: +660d 2040661d call iicd_eep_transparency +660e 68090ab2 fetcht 2 ,mem_regb +660f 68010ab9 fetch 2 ,mem_contr +6610 1fe22200 copy pdata ,rega +6611 68010a9a fetch 2 ,mem_pdatatemp +6612 2040663d call iicd_write_eep +6613 68010ab2 fetch 2 ,mem_regb +6614 68090ab9 fetcht 2 ,mem_contr +6615 98408400 iadd temp ,temp +6616 60090ab9 storet 2 ,mem_contr +6617 68090a9a fetcht 2 ,mem_pdatatemp +6618 98408400 iadd temp ,temp +6619 60090a9a storet 2 ,mem_pdatatemp +661a 68010aa2 fetch 2 ,mem_temp +661b 243a660d nbranch iicd_write_eep_loop ,blank +661c 20600000 rtn + +iicd_eep_transparency: +661d 4749c032 bpatchx patch32_3 ,mem_patch32 +661e 6800c211 fetch 1 ,mem_eeprom_block_size +661f 1fe0ffff increase -1 ,pdata +6620 68090a9a fetcht 2 ,mem_pdatatemp +6621 9841fe00 ior temp ,pdata +6622 1fe0fe01 increase 1 ,pdata +6623 60018ab6 store 3 ,mem_regc +6624 68010aa2 fetch 2 ,mem_temp +6625 9840fe00 iadd temp ,pdata +6626 68098ab6 fetcht 3 ,mem_regc +6627 98467e00 isub temp ,pdata +6628 2421662f nbranch iicd_eep_deal_short_packet ,positive +6629 60010aa2 store 2 ,mem_temp +662a 68018ab6 fetch 3 ,mem_regc +662b 68090a9a fetcht 2 ,mem_pdatatemp +662c 98467e00 isub temp ,pdata +662d 60010ab2 store 2 ,mem_regb +662e 20600000 rtn + +iicd_eep_deal_short_packet: +662f 68010aa2 fetch 2 ,mem_temp +6630 60010ab2 store 2 ,mem_regb +6631 58000000 setarg 0 +6632 60010aa2 store 2 ,mem_temp +6633 20600000 rtn + +iicd_write_eep_size_2k: +6634 18408402 increase 2 ,temp +6635 60190098 hstoret 2 ,core_iicd_txlen +6636 1a20a3fe increase -2 ,rega +6637 ea298000 ifetcht 3 ,rega +6638 18422400 copy temp ,regb +6639 d84000a0 arg 0xa0 ,temp +663a e2288000 istoret 1 ,rega +663b e0a08000 istore 1 ,contw +663c 2020664a branch iicd_write_eep_common + +iicd_write_eep: +663d 1fe22400 copy pdata ,regb +663e 474a4032 bpatchx patch32_4 ,mem_patch32 +663f c5146634 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +6640 1a427e00 copy regb ,pdata +6641 18408403 increase 3 ,temp +6642 60190098 hstoret 2 ,core_iicd_txlen +6643 1a20a3fd increase -3 ,rega +6644 ea298000 ifetcht 3 ,rega +6645 18422400 copy temp ,regb +6646 d84000a0 arg 0xa0 ,temp +6647 e2288000 istoret 1 ,rega +6648 1ff0fe00 byteswap pdata ,pdata +6649 e0a10000 istore 2 ,contw + +iicd_write_eep_common: +664a 1a227e00 deposit rega +664b 6011009a hstore 2 ,core_iicd_txaddr +664c 58000000 setarg 0 +664d 6011009e hstore 2 ,core_iicd_rxlen +664e 70809001 hjam 1 ,core_iicd_ctrl +664f 70800604 hjam iicd_start ,core_misc_ctrl +6650 204065b0 call wait_iicd_done +6651 1a427e00 copy regb ,pdata +6652 e2218000 istore 3 ,rega + +iic_check_eeprom_standby: +6653 474ac032 bpatchx patch32_5 ,mem_patch32 +6654 7001f900 jam 0 ,mem_iicd_tbuf + 3 + +iic_check_eeprom_standby_wait: +6655 58000001 setarg 1 +6656 60110098 hstore 2 ,core_iicd_txlen +6657 7001f6a0 jam 0xa0 ,mem_iicd_tbuf +6658 580001f6 setarg mem_iicd_tbuf +6659 6011009a hstore 2 ,core_iicd_txaddr +665a 58000000 setarg 0 +665b 6011009e hstore 2 ,core_iicd_rxlen +665c 6011009c hstore 2 ,core_iicd_rxaddr +665d 58000003 setarg 3 +665e 60108090 hstore 1 ,core_iicd_ctrl +665f 70800604 hjam iicd_start ,core_misc_ctrl +6660 204065b0 call wait_iicd_done +6661 6810812c hfetch 1 ,core_dma_status +6662 c4030000 rtnbit0 iicd_ack +6663 200005dc nop 1500 +6664 680081f9 fetch 1 ,mem_iicd_tbuf + 3 +6665 1fe0fe01 increase 1 ,pdata +6666 600081f9 store 1 ,mem_iicd_tbuf + 3 +6667 1fe67c28 sub pdata ,40 ,null +6668 24610000 nrtn positive +6669 20206655 branch iic_check_eeprom_standby_wait + +otp_enable_chgpump: +666a 70897370 hjam 0x70 ,rfen_chgpump +666b 20000bb8 nop param_chgpump_delay +666c 20600000 rtn + +otp_disable_chgpump: +666d 70897330 hjam 0x30 ,rfen_chgpump +666e 20600000 rtn + +otp_set_addr: +666f 1fe9fe00 lshift3 pdata ,pdata +6670 60110045 hstore 2 ,core_otp_addr +6671 70804b00 hjam 0 ,core_otpd_ctrl +6672 20600000 rtn + +otp_write: +6673 2040666f call otp_set_addr +6674 204066a0 call otp_ce + +otp_program: +6675 ea288000 ifetcht 1 ,rega +6676 1a20a201 increase 1 ,rega +6677 18000e00 force 0 ,queue + +otp_program_bit: +6678 a84c0000 qisolate0 temp +6679 2020e697 branch otp_skip_0 ,true +667a 68108046 hfetch 1 ,core_otp_din +667b 79207e06 set1 6 ,pdata +667c 79207e07 set1 7 ,pdata +667d 60108046 hstore 1 ,core_otp_din +667e 70804702 hjam 0x02 ,core_otp_ctrl +667f 70804782 hjam 0x82 ,core_otp_ctrl +6680 793ffe07 set0 7 ,pdata +6681 60108046 hstore 1 ,core_otp_din +6682 7080478a hjam 0x8a ,core_otp_ctrl +6683 2000000b nop 11 +6684 708047ca hjam 0xca ,core_otp_ctrl +6685 20000021 nop 33 +6686 7080474a hjam 0x4a ,core_otp_ctrl +6687 2000002c nop 44 +6688 708047ca hjam 0xca ,core_otp_ctrl +6689 20000016 nop 22 +668a 7080478a hjam 0x8a ,core_otp_ctrl +668b 20000021 nop 33 +668c 70804782 hjam 0x82 ,core_otp_ctrl +668d 20000001 nop 1 +668e 70804792 hjam 0x92 ,core_otp_ctrl +668f 2000000a nop 10 +6690 708047b2 hjam 0xb2 ,core_otp_ctrl +6691 68108007 hfetch 1 ,core_otp_rdata +6692 70804792 hjam 0x92 ,core_otp_ctrl +6693 20000001 nop 1 +6694 70804782 hjam 0x82 ,core_otp_ctrl +6695 afec0000 qisolate0 pdata +6696 2020e678 branch otp_program_bit ,true + +otp_skip_0: +6697 68110045 hfetch 2 ,core_otp_addr +6698 1fe0fe01 increase 1 ,pdata +6699 60110045 hstore 2 ,core_otp_addr +669a 18e08e01 increase 1 ,queue +669b 28e01e08 compare 8 ,queue ,0xf +669c 2420e678 nbranch otp_program_bit ,true +669d c2006675 loop otp_program +669e 70804783 hjam 0x83 ,core_otp_ctrl +669f 20600000 rtn + +otp_ce: +66a0 70804782 hjam 0x82 ,core_otp_ctrl +66a1 2000000c nop 12 +66a2 70804780 hjam 0x80 ,core_otp_ctrl +66a3 70804782 hjam 0x82 ,core_otp_ctrl +66a4 20000096 nop 150 +66a5 20600000 rtn + +otpd_read_init: +66a6 204066a0 call otp_ce +66a7 708047a2 hjam 0xa2 ,core_otp_ctrl +66a8 1a227e00 deposit rega +66a9 60110048 hstore 2 ,core_otpd_addr +66aa 7920040b set1 11 ,temp +66ab 2fec000f isolate0 15 ,pdata +66ac 7920840f setflag true ,15 ,temp +66ad 6019004a hstoret 2 ,core_otpd_len +66ae 70800601 hjam otpd_start ,core_misc_ctrl +66af 20600000 rtn + +otpd_wait_end: +66b0 6810812c hfetch 1 ,core_dma_status +66b1 c300e6b0 bbit0 otpd_done ,otpd_wait_end +66b2 20600000 rtn + +otpd_read_data: +66b3 2040666f call otp_set_addr +66b4 204066a6 call otpd_read_init +66b5 204066b0 call otpd_wait_end +66b6 70804783 hjam 0x83 ,core_otp_ctrl +66b7 20600000 rtn + +otpd_read_code: +66b8 68110124 hfetch 2 ,core_current_otp_addr +66b9 60110045 hstore 2 ,core_otp_addr +66ba 204066a6 call otpd_read_init +66bb d8e00001 arg otpd_done ,queue +66bc 204064c0 call decrypt_code +66bd 204066b0 call otpd_wait_end +66be 2feffe00 isolate1 otpd_crcok ,pdata +66bf 204064b9 call set_ucode_status +66c0 70804783 hjam 0x83 ,core_otp_ctrl +66c1 20600000 rtn + +uartd_prepare_tx: +66c2 6811005e hfetch 2 ,core_uart_twptr +66c3 98001400 iforce contwu +66c4 20600000 rtn + +uartd_send: +66c5 19427e00 deposit contwu +66c6 6011005e hstore 2 ,core_uart_twptr +66c7 20600000 rtn + +uartd_rxdone: +66c8 18627e00 deposit contru +66c9 60110058 hstore 2 ,core_uart_rrptr +66ca 20600000 rtn + +uartd_prepare_rx: +66cb 68110058 hfetch 2 ,core_uart_rrptr +66cc 1fe20600 copy pdata ,contru +66cd 20600000 rtn + +uart_set_baud_by_mem: +66ce 68014243 fetch uart_baud_len ,mem_baud +66cf 60110052 hstore uart_baud_len ,core_uart_baud +66d0 20600000 rtn + +uart_copy_tx_bytes_fast: +66d1 1f227e00 deposit loopcnt +66d2 207a0000 rtn blank + +uart_copy_tx_bytes_fast_loop: +66d3 1f20f3f8 increase -8 ,loopcnt +66d4 204166de call uart_tx_8_bytes ,positive +66d5 20628000 rtn zero +66d6 202166d3 branch uart_copy_tx_bytes_fast_loop ,positive +66d7 1f20f208 increase 8 ,loopcnt + +uart_copy_tx_bytes_fast_loop_four: +66d8 1f20f3fc increase -4 ,loopcnt +66d9 204166e1 call uart_tx_4_bytes ,positive +66da 20628000 rtn zero +66db 202166d8 branch uart_copy_tx_bytes_fast_loop_four ,positive +66dc 1f20f204 increase 4 ,loopcnt +66dd 202066e4 branch uart_copy_tx_bytes + +uart_tx_8_bytes: +66de e8c40000 ifetch 8 ,contr +66df e1440000 istore 8 ,contwu +66e0 20600000 rtn + +uart_tx_4_bytes: +66e1 e8c20000 ifetch 4 ,contr +66e2 e1420000 istore 4 ,contwu +66e3 20600000 rtn + +uart_copy_tx_bytes: +66e4 1f227e00 deposit loopcnt +66e5 207a0000 rtn blank + +uart_copy_tx_bytes_loop: +66e6 e8c08000 ifetch 1 ,contr +66e7 e1408000 istore 1 ,contwu +66e8 c20066e6 loop uart_copy_tx_bytes_loop +66e9 20600000 rtn + +uart_copy_rx_bytes_fast: +66ea 1f227e00 deposit loopcnt +66eb 207a0000 rtn blank + +uart_copy_rx_bytes_fast_loop: +66ec 1f20f3f8 increase -8 ,loopcnt +66ed 204166f7 call uart_rx_8_bytes ,positive +66ee 20628000 rtn zero +66ef 202166ec branch uart_copy_rx_bytes_fast_loop ,positive +66f0 1f20f208 increase 8 ,loopcnt + +uart_copy_rx_bytes_fast_loop_four: +66f1 1f20f3fc increase -4 ,loopcnt +66f2 204166fa call uart_rx_4_bytes ,positive +66f3 20628000 rtn zero +66f4 202166f1 branch uart_copy_rx_bytes_fast_loop_four ,positive +66f5 1f20f204 increase 4 ,loopcnt +66f6 202066fd branch uart_copy_rx_bytes + +uart_rx_8_bytes: +66f7 e8640000 ifetch 8 ,contru +66f8 e0a40000 istore 8 ,contw +66f9 20600000 rtn + +uart_rx_4_bytes: +66fa e8620000 ifetch 4 ,contru +66fb e0a20000 istore 4 ,contw +66fc 20600000 rtn + +uart_copy_rx_bytes: +66fd 1f227e00 deposit loopcnt +66fe 207a0000 rtn blank + +uart_copy_rx_bytes_loop: +66ff e8608000 ifetch 1 ,contru +6700 e0a08000 istore 1 ,contw +6701 c20066ff loop uart_copy_rx_bytes_loop +6702 20600000 rtn + +uart_copy_rx2tx: +6703 1f227e00 deposit loopcnt +6704 207a0000 rtn blank + +uart_copy_rx2tx_loop: +6705 e8608000 ifetch 1 ,contru +6706 e1408000 istore 1 ,contwu +6707 c2006705 loop uart_copy_rx2tx_loop +6708 20600000 rtn + +app_store_nvram_event: +6709 700a993d jam bt_evt_store_nvram ,mem_fifo_temp +670a 20207d86 branch ui_ipc_send_event + +check_51cmd_store_reconn_info: + +check_51cmd_update_device_record: +670b 474b4032 bpatchx patch32_6 ,mem_patch32 +670c 6800c217 fetch 1 ,mem_nv_data_number +670d 207a0000 rtn blank +670e 204067a3 call check_nvram +670f 2042e7a9 call init_device_list ,zero +6710 2040673e call nvram_find_addr_from_bd_list + +write_device_record: +6711 6800c217 fetch 1 ,mem_nv_data_number +6712 1fe22600 icopy regc +6713 68094215 fetcht 2 ,mem_nv_data_ptr +6714 6009018c storet 2 ,mem_list_item_ptr + +write_device_loop_find: +6715 1a627e00 copy regc ,pdata +6716 203a6709 branch app_store_nvram_event ,blank +6717 1a60a7ff increase -1 ,regc +6718 18422200 copy temp ,rega +6719 ea208000 ifetch 1 ,rega +671a 68088184 fetcht 1 ,mem_select_list_item +671b 98467c00 isub temp ,null +671c 2042e725 call set_index_finded_device ,zero +671d 20216721 branch write_device_loop_find0 ,positive +671e ea208000 ifetch 1 ,rega +671f 1fe0fe01 increase 1 ,pdata +6720 e2208000 istore 1 ,rega + +write_device_loop_find0: +6721 6809018c fetcht 2 ,mem_list_item_ptr +6722 18408422 increase nv_data_len ,temp +6723 6009018c storet 2 ,mem_list_item_ptr +6724 20206715 branch write_device_loop_find + +set_index_finded_device: +6725 58000000 setarg 0 +6726 e2208000 istore 1 ,rega +6727 68008185 fetch 1 ,mem_temp_reconn_record +6728 e0a08000 istore 1 ,contw +6729 c099e733 bne rec_3_mode ,set_index_finded_device_ble_mode +672a da4041be arg mem_link_key ,regb + +set_index_find_device_master_addr: +672b e8c30000 ifetch 6 ,contr +672c e0a40000 istore 8 ,contw +672d 58000000 setarg 0 +672e e0a40000 istore 8 ,contw +672f 1a420c00 copy regb ,contr + +store_rec_data_common: +6730 20407ebf call memcpy16 +6731 18007c01 force 1 ,null +6732 20600000 rtn + +set_index_finded_device_ble_mode: +6733 c01b6737 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +6734 c01be73b beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +6735 da404419 arg mem_le_ltk ,regb +6736 2020672b branch set_index_find_device_master_addr + +set_index_finded_device_irk: +6737 d8c044d5 arg mem_le_irk ,contr +6738 20407ebf call memcpy16 + +store_ble_rec_data_common: +6739 d8c04419 arg mem_le_ltk ,contr +673a 20206730 branch store_rec_data_common + +set_index_finded_device_ediv: +673b d8c044cd arg mem_le_rand ,contr +673c 20407ebf call memcpy16 +673d 20206739 branch store_ble_rec_data_common + +nvram_find_addr_from_bd_list: +673e 20407fe9 call disable_user +673f 6800c217 fetch 1 ,mem_nv_data_number +6740 207a0000 rtn blank +6741 68014682 fetch 2 ,mem_ui_state_map +6742 c2806754 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode + +find_addr_from_bd_list_ble_mode: +6743 474bc032 bpatchx patch32_7 ,mem_patch32 +6744 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +6745 c000674d beq master_public_addr ,find_addr_from_bd_list_static_addr +6746 68008454 fetch 1 ,mem_le_plap + 5 +6747 2fe180c0 compare 0xc0 ,pdata ,0xc0 +6748 2020e74d branch find_addr_from_bd_list_static_addr ,true +6749 2fe18040 compare 0x40 ,pdata ,0xc0 +674a 2020e752 branch find_addr_from_bd_list_random_addr ,true +674b 2fe18000 compare 0x00 ,pdata ,0xc0 +674c 2020e750 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true + +find_addr_from_bd_list_static_addr: +674d 70018535 jam rec_4_mode_static_address ,mem_temp_reconn_record +674e 6803044f fetch 6 ,mem_le_plap +674f 20206757 branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_non_resolvable_private_address: +6750 70018537 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +6751 20206757 branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_addr: +6752 70018536 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +6753 20206757 branch find_addr_from_bd_list_common + +find_addr_from_bd_list_spp_mode: +6754 474c4033 bpatchx patch33_0 ,mem_patch33 +6755 70018533 jam rec_3_mode ,mem_temp_reconn_record +6756 68030040 fetch 6 ,mem_plap + +find_addr_from_bd_list_common: +6757 60030186 store 6 ,mem_temp_reconn_record + 1 +6758 68014215 fetch 2 ,mem_nv_data_ptr +6759 efe88000 ifetcht 1 ,pdata +675a 1fe0fe01 pincrease 1 +675b 6001018c store 2 ,mem_list_item_ptr +675c 60088184 storet 1 ,mem_select_list_item +675d 6800c217 fetch 1 ,mem_nv_data_number +675e 1fe22600 icopy regc + +nvram_find_addr_from_list: +675f 6801018c fetch 2 ,mem_list_item_ptr +6760 1fe22200 copy pdata ,rega +6761 2040676f call nvram_find_addr_from_list_compare +6762 20740000 rtn user +6763 6809018c fetcht 2 ,mem_list_item_ptr +6764 18408422 increase nv_data_len ,temp +6765 6009018c storet 2 ,mem_list_item_ptr +6766 184085ff increase -1 ,temp +6767 e8408000 ifetch 1 ,temp +6768 60008184 store 1 ,mem_select_list_item +6769 1a60a7ff increase -1 ,regc +676a 2422e75f nbranch nvram_find_addr_from_list ,zero +676b 6800c217 fetch 1 ,mem_nv_data_number +676c 1fe0ffff pincrease decreased_one +676d 60008184 store 1 ,mem_select_list_item +676e 20600000 rtn + +nvram_find_addr_from_list_compare: +676f 68008185 fetch 1 ,mem_temp_reconn_record +6770 c099e776 bne rec_3_mode ,find_addr_from_list_compare_ble_mode + +find_master_addr_from_list_compare: +6771 da400185 arg mem_temp_reconn_record ,regb +6772 df200007 arg 7 ,loopcnt +6773 20407f88 call string_compare +6774 2022ffe7 branch enable_user ,zero +6775 20600000 rtn + +find_addr_from_list_compare_ble_mode: +6776 c01b6779 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +6777 c01be794 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +6778 20206771 branch find_master_addr_from_list_compare + +find_irk_form_list_compare: +6779 ea288000 ifetcht 1 ,rega +677a 98467c00 isub temp ,null +677b 24628000 nrtn zero +677c d8a00ac2 arg mem_le_prand ,contw +677d df200010 arg 16 ,loopcnt +677e 20407ed4 call clear_mem +677f 68018452 fetch 3 ,mem_le_plap + 3 +6780 60018ac2 store 3 ,mem_le_prand +6781 2040678b call genernate_master_macaddress +6782 68010adf fetch 2 ,mem_le_aes_128 + 13 +6783 1ff0fe00 byteswap pdata ,pdata +6784 1fed0400 lshift8 pdata ,temp +6785 e8c08000 ifetch 1 ,contr +6786 9840fe00 iadd temp ,pdata +6787 6809844f fetcht 3 ,mem_le_plap +6788 98467c00 isub temp ,null +6789 2022ffe7 branch enable_user ,zero +678a 20600000 rtn + +genernate_master_macaddress: +678b d8c00ac2 arg mem_le_prand ,contr +678c 20407486 call load_data128 +678d ea208000 ifetch 1 ,rega +678e 20407487 call load_regext +678f 18006c38 force 0x38 ,aes_ctrl +6790 18006c00 force 0x0 ,aes_ctrl +6791 2040741d call wait_aes +6792 d8a00ad2 arg mem_le_aes_128 ,contw +6793 20207497 branch store_aes_result + +find_ediv_form_list_compare: +6794 ea288000 ifetcht 1 ,rega +6795 98467c00 isub temp ,null +6796 24628000 nrtn zero +6797 18c22200 copy contr ,rega +6798 18c0a608 add contr ,8 ,regc +6799 da4044cd arg mem_le_rand ,regb +679a df200008 arg 8 ,loopcnt +679b 20407f88 call string_compare +679c 2022ffe7 branch enable_user ,zero +679d 1a622200 copy regc ,rega +679e da4044d5 arg mem_le_irk ,regb +679f df200008 arg 8 ,loopcnt +67a0 20407f88 call string_compare +67a1 2022ffe7 branch enable_user ,zero +67a2 20600000 rtn + +check_nvram: +67a3 68014215 fetch 2 ,mem_nv_data_ptr +67a4 efe88000 ifetcht 1 ,pdata +67a5 1fe0fe22 pincrease nv_data_len +67a6 efe08000 ifetch 1 ,pdata +67a7 98467c00 isub temp ,null +67a8 20600000 rtn + +init_device_list: +67a9 6800c217 fetch 1 ,mem_nv_data_number +67aa 1fe27200 icopy loopcnt +67ab 68094215 fetcht 2 ,mem_nv_data_ptr +67ac 58000000 setarg 0 + +init_device_list_loop: +67ad e0408000 istore 1 ,temp +67ae 18408422 increase nv_data_len ,temp +67af 1fe0fe01 pincrease 1 +67b0 c20067ad loop init_device_list_loop +67b1 20600000 rtn + +load_device_list: +67b2 474cc033 bpatchx patch33_1 ,mem_patch33 +67b3 2040673e call nvram_find_addr_from_bd_list +67b4 68008030 fetch 1 ,mem_state +67b5 79347e06 setflag user ,state_combkey ,pdata +67b6 60008030 store 1 ,mem_state +67b7 243467bc nbranch clear_key_exists ,user +67b8 1a208c0a add rega ,10 ,contr +67b9 d8a041be arg mem_link_key ,contw +67ba 20407ebf call memcpy16 +67bb 202067d7 branch check_link_key_load + +clear_key_exists: +67bc 7041bd00 jam 0 ,mem_link_key_exists +67bd 20600000 rtn + +load_device_list_mode_4: +67be 6804c4cb fetch 9 ,mem_le_ediv +67bf 203a67ca branch clear_ltk_exists ,blank +67c0 2040673e call nvram_find_addr_from_bd_list +67c1 243467ca nbranch clear_ltk_exists ,user +67c2 6801018c fetch 2 ,mem_list_item_ptr +67c3 1fe08c01 add pdata ,1 ,contr +67c4 d8a044d5 arg mem_le_irk ,contw +67c5 20407ebf call memcpy16 +67c6 d8a04419 arg mem_le_ltk ,contw +67c7 20407ebf call memcpy16 +67c8 70442901 jam 1 ,mem_ltk_exists +67c9 20600000 rtn + +clear_ltk_exists: +67ca 70442900 jam 0 ,mem_ltk_exists +67cb 20600000 rtn + +eeprom_store_le_reconn_info: +67cc 6803044f fetch 6 ,mem_le_plap +67cd 60030186 store 6 ,mem_temp_lap +67ce 70018534 jam rec_4_mode ,mem_record_bt_mode +67cf 202067d3 branch eeprom_store_reconn_info + +eeprom_store_bd_reconn_info: +67d0 68030040 fetch 6 ,mem_plap +67d1 60030186 store 6 ,mem_temp_lap +67d2 70018533 jam rec_3_mode ,mem_record_bt_mode + +eeprom_store_reconn_info: +67d3 6800c092 fetch 1 ,mem_device_option +67d4 c005670b beq dvc_op_module ,check_51cmd_update_device_record +67d5 c28342da bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr +67d6 20600000 rtn + +check_link_key_load: +67d7 680441be fetch 8 ,mem_link_key +67d8 680c41c6 fetcht 8 ,mem_link_key + 8 +67d9 9841fe00 ior temp ,pdata +67da 207a0000 rtn blank +67db 7041bd01 jam 1 ,mem_link_key_exists +67dc 20600000 rtn + +gpio_set_wake_by_current_state: +67dd 474d4033 bpatchx patch33_2 ,mem_patch33 +67de 79200407 set1 7 ,temp +67df 2040681d call gpio_get_bit +67e0 7d208407 nsetflag true ,7 ,temp + +gpio_set_wake: +67e1 474dc033 bpatchx patch33_3 ,mem_patch33 +67e2 18467cff sub temp ,ui_button_gpio_disable ,null +67e3 20628000 rtn zero +67e4 284c0007 isolate0 7 ,temp +67e5 18410e1f and temp ,0x1f ,queue +67e6 680200a1 fetch 4 ,mem_gpio_wakeup_low +67e7 f920fe00 qsetflag true ,pdata +67e8 600200a1 store 4 ,mem_gpio_wakeup_low +67e9 680200a5 fetch 4 ,mem_gpio_wakeup_high +67ea fd20fe00 nqsetflag true ,pdata +67eb 600200a5 store 4 ,mem_gpio_wakeup_high +67ec 20600000 rtn + +gpio_clr_wake: +67ed 474e4033 bpatchx patch33_4 ,mem_patch33 +67ee 18467cff sub temp ,ui_button_gpio_disable ,null +67ef 20628000 rtn zero +67f0 284c0007 isolate0 7 ,temp +67f1 18410e1f and temp ,0x1f ,queue +67f2 680200a1 fetch 4 ,mem_gpio_wakeup_low +67f3 f93ffe00 qset0 pdata +67f4 600200a1 store 4 ,mem_gpio_wakeup_low +67f5 680200a5 fetch 4 ,mem_gpio_wakeup_high +67f6 f93ffe00 qset0 pdata +67f7 600200a5 store 4 ,mem_gpio_wakeup_high +67f8 20600000 rtn + +gpio_config_input_nowake: +67f9 204067ed call gpio_clr_wake +67fa 202067fe branch gpio_config_input_without_wake + +gpio_config_input: +67fb 18467cff sub temp ,ui_button_gpio_disable ,null +67fc 20628000 rtn zero +67fd 2455e7e1 ncall gpio_set_wake ,wake + +gpio_config_input_without_wake: +67fe d8a0807c arg core_gpio_pd0 ,contw +67ff 20406830 call gpio_set_bit +6800 79400407 setflip gpio_active_bit ,temp +6801 d8a08078 arg core_gpio_pu0 ,contw +6802 20406830 call gpio_set_bit +6803 793f8407 set0 gpio_active_bit ,temp +6804 d8a08070 arg core_gpio_oe0 ,contw +6805 20206830 branch gpio_set_bit + +gpio_set_high_impedance: +6806 d8a0807c arg core_gpio_pd0 ,contw +6807 20406830 call gpio_set_bit +6808 793f8407 set0 gpio_active_bit ,temp +6809 d8a08078 arg core_gpio_pu0 ,contw +680a 20406830 call gpio_set_bit +680b 793f8407 set0 gpio_active_bit ,temp +680c d8a08070 arg core_gpio_oe0 ,contw +680d 20206830 branch gpio_set_bit + +gpio_config_output: +680e 18467cff sub temp ,ui_button_gpio_disable ,null +680f 20628000 rtn zero +6810 79400407 setflip gpio_active_bit ,temp +6811 2040682f call gpio_out + +gpio_config_output0: +6812 79200407 set1 gpio_active_bit ,temp +6813 d8a08070 arg core_gpio_oe0 ,contw +6814 20206830 branch gpio_set_bit + +gpio_common: +6815 18410e07 and temp ,0x07 ,queue +6816 18497e00 rshift3 temp ,pdata +6817 1fe17e03 and_into 3 ,pdata +6818 98a08a00 iadd contw ,contw +6819 e8a08000 ifetch 1 ,contw +681a 20600000 rtn + +gpio_check_active: +681b d8a08074 arg core_gpio_out0 ,contw +681c 2020681e branch get_bit_common + +gpio_get_bit: +681d d8a0811c arg core_gpio_in ,contw + +get_bit_common: +681e 20406815 call gpio_common +681f 284ffe07 isolate1 gpio_active_bit ,temp +6820 2020e823 branch gpio_get_bit_reverse ,true +6821 afec0000 qisolate0 pdata +6822 20600000 rtn + +gpio_get_bit_reverse: +6823 afefffff qisolate1 pdata +6824 20600000 rtn + +gpio_out_inactive: +6825 18467cff sub temp ,ui_button_gpio_disable ,null +6826 20628000 rtn zero +6827 2fcffe07 isolate1 7 ,null +6828 2020682c branch gpio_out_flag + +gpio_out_active: +6829 18467cff sub temp ,ui_button_gpio_disable ,null +682a 20628000 rtn zero +682b 2fcc0007 isolate0 7 ,null + +gpio_out_flag: +682c 58000000 setarg 0 +682d 7d20fe07 nsetflag true ,gpio_active_bit ,pdata +682e 98428400 ixor temp ,temp + +gpio_out: +682f d8a08074 arg core_gpio_out0 ,contw + +gpio_set_bit: +6830 20406815 call gpio_common +6831 284ffe07 isolate1 gpio_active_bit ,temp +6832 f920fe00 qsetflag true ,pdata +6833 e0a08000 istore 1 ,contw +6834 20600000 rtn + +gpio_set_before_lpm_common: +6835 da3fffff arg -1 ,rega +6836 68108081 hfetch 1 ,core_gpio_sel1 +6837 2fe00602 compare 0x02 ,pdata ,0x03 +6838 2040e878 call neglact4_from_23_pin ,true +6839 2fe00601 compare 0x01 ,pdata ,0x03 +683a 2040e87a call neglact2_form_25_pin ,true +683b 2fe00603 compare 0x03 ,pdata ,0x03 +683c 2040e87a call neglact2_form_25_pin ,true +683d 2feffe02 isolate1 2 ,pdata +683e 2040e874 call neglect2_from_6_pin ,true +683f 2feffe03 isolate1 3 ,pdata +6840 2040e876 call neglect4_from_9_pin ,true +6841 2feffe04 isolate1 4 ,pdata +6842 2040e87c call neglact2_form_30_pin ,true +6843 2feffe06 isolate1 6 ,pdata +6844 7d20a204 nsetflag true ,04 ,rega +6845 2feffe07 isolate1 7 ,pdata +6846 7d20a205 nsetflag true ,05 ,rega +6847 68108082 hfetch 1 ,core_gpio_sel2 +6848 2feffe00 isolate1 0 ,pdata +6849 7d20a21b nsetflag true ,27 ,rega +684a 2feffe01 isolate1 1 ,pdata +684b 7d20a21c nsetflag true ,28 ,rega +684c 2feffe02 isolate1 2 ,pdata +684d 7d20a203 nsetflag true ,03 ,rega +684e 2feffe03 isolate1 3 ,pdata +684f 7d20a208 nsetflag true ,08 ,rega +6850 2feffe04 isolate1 4 ,pdata +6851 7d20a214 nsetflag true ,20 ,rega +6852 2feffe05 isolate1 5 ,pdata +6853 7d20a215 nsetflag true ,21 ,rega +6854 2feffe06 isolate1 6 ,pdata +6855 7d20a216 nsetflag true ,22 ,rega +6856 2feffe07 isolate1 7 ,pdata +6857 7d20a217 nsetflag true ,23 ,rega +6858 68108080 hfetch 1 ,core_gpio_sel +6859 2feffe00 isolate1 0 ,pdata +685a 7d20a205 nsetflag true ,05 ,rega +685b 2feffe01 isolate1 1 ,pdata +685c 7d20a206 nsetflag true ,06 ,rega +685d 2feffe02 isolate1 2 ,pdata +685e 7d20a207 nsetflag true ,07 ,rega +685f 2feffe03 isolate1 3 ,pdata +6860 7d20a212 nsetflag true ,18 ,rega +6861 2feffe04 isolate1 4 ,pdata +6862 7d20a213 nsetflag true ,19 ,rega +6863 2feffe05 isolate1 5 ,pdata +6864 7d20a214 nsetflag true ,20 ,rega +6865 2feffe06 isolate1 6 ,pdata +6866 7d20a215 nsetflag true ,21 ,rega +6867 2feffe07 isolate1 7 ,pdata +6868 7d20a216 nsetflag true ,22 ,rega +6869 68108062 hfetch 1 ,core_uart_ctrl +686a 2feffe04 isolate1 4 ,pdata +686b 2040e87e call neglact2_form_2_pin ,true +686c 474ec033 bpatchx patch33_5 ,mem_patch33 +686d 68120078 hfetch 4 ,core_gpio_pu0 +686e 681a007c hfetcht 4 ,core_gpio_pd0 +686f 9841fe00 ior temp ,pdata +6870 1fe47e00 invert pdata ,pdata +6871 9a217e00 iand rega ,pdata +6872 60120070 hstore 4 ,core_gpio_oe0 +6873 20600000 rtn + +neglect2_from_6_pin: +6874 d8e00006 arg 6 ,queue +6875 20206884 branch neglect_2_pin + +neglect4_from_9_pin: +6876 d8e00009 arg 9 ,queue +6877 20206882 branch neglact_4_pin + +neglact4_from_23_pin: +6878 d8e00017 arg 23 ,queue +6879 20206882 branch neglact_4_pin + +neglact2_form_25_pin: +687a d8e00019 arg 25 ,queue +687b 20206884 branch neglect_2_pin + +neglact2_form_30_pin: +687c d8e0001e arg 30 ,queue +687d 20206884 branch neglect_2_pin + +neglact2_form_2_pin: +687e d8e00002 arg 2 ,queue +687f 20206884 branch neglect_2_pin + +neglact_1_pin: +6880 df200001 arg 1 ,loopcnt +6881 20206885 branch neglect_pin_loop + +neglact_4_pin: +6882 df200004 arg 4 ,loopcnt +6883 20206885 branch neglect_pin_loop + +neglect_2_pin: +6884 df200002 arg 2 ,loopcnt + +neglect_pin_loop: +6885 f93fa200 qset0 rega +6886 18e08e01 increase 1 ,queue +6887 c2006885 loop neglect_pin_loop +6888 20600000 rtn + +gpio_cfg_uart_tx_output: +6889 20406895 call gpio_uart2gpio +688a d8400006 arg uart_wakeup_tx ,temp +688b 2020680e branch gpio_config_output + +gpio_pu_uart_tx: +688c 20406889 call gpio_cfg_uart_tx_output +688d d8400006 arg uart_wakeup_tx ,temp +688e 20206825 branch gpio_out_inactive + +gpio_rx_config_input_with_pu: +688f 20406895 call gpio_uart2gpio +6890 68108078 hfetch 1 ,core_gpio_pu0 +6891 79207e07 set1 uart_wakeup_rx ,pdata +6892 60108078 hstore 1 ,core_gpio_pu0 +6893 d8400007 arg uart_wakeup_rx ,temp +6894 202067fb branch gpio_config_input + +gpio_uart2gpio: +6895 68108081 hfetch 1 ,core_gpio_sel1 +6896 1fe17efb and_into 0xfb ,pdata +6897 60108081 hstore 1 ,core_gpio_sel1 +6898 20600000 rtn + +gpio_check_uart_state: +6899 68108081 hfetch 1 ,core_gpio_sel1 +689a 2feffe02 isolate1 2 ,pdata +689b 20600000 rtn + +load_chip_option: +689c 2040666a call otp_enable_chgpump +689d 580007e0 setarg otp_chip_functions +689e da204150 arg mem_chip_functions ,rega +689f d8400002 arg 0x02 ,temp +68a0 204066b3 call otpd_read_data +68a1 2020666d branch otp_disable_chgpump + +load_adc_init: +68a2 2040666a call otp_enable_chgpump +68a3 580007e2 setarg otp_adc_io_0_5v_addr +68a4 da20421d arg mem_0_5_adc_io_data ,rega +68a5 d840000e arg 14 ,temp +68a6 204066b3 call otpd_read_data +68a7 2020666d branch otp_disable_chgpump + +adc_init_data: +68a8 474f4033 bpatchx patch33_6 ,mem_patch33 +68a9 204068a2 call load_adc_init +68aa 6800c22d fetch 1 ,mem_adc_config_flag +68ab c00068af beq adc_config_vinlpm ,adc_init_data_vinlpm +68ac c000e8c3 beq adc_config_hvin ,adc_init_data_hvin +68ad c00168d7 beq adc_config_gpio ,adc_init_data_io +68ae 20600000 rtn + +adc_init_data_vinlpm: +68af 68094229 fetcht 2 ,mem_otp_adc_flag +68b0 5800aa55 setarg otp_adc_flag +68b1 98467c00 isub temp ,null +68b2 2022e8b8 branch adc_check_data_vinlpm ,zero +68b3 58004dfa setarg 0x4dfa +68b4 60014227 store 2 ,mem_3v_adc_vinlpm_data +68b5 58004894 setarg 0x4894 +68b6 60014221 store 2 ,mem_2v_adc_vinlpm_data +68b7 202068c0 branch set_vdd_reference_voltage_1v + +adc_check_data_vinlpm: +68b8 68014227 fetch 2 ,mem_3v_adc_vinlpm_data +68b9 243a68bc nbranch adc_check_2v_vinlpm ,blank +68ba 58004dfa setarg 0x4dfa +68bb 60014227 store 2 ,mem_3v_adc_vinlpm_data + +adc_check_2v_vinlpm: +68bc 68014221 fetch 2 ,mem_2v_adc_vinlpm_data +68bd 243a68c0 nbranch set_vdd_reference_voltage_1v ,blank +68be 58004894 setarg 0x4894 +68bf 60014221 store 2 ,mem_2v_adc_vinlpm_data + +set_vdd_reference_voltage_1v: +68c0 58000064 setarg 100 +68c1 6001422b store 2 ,mem_reference_voltage +68c2 20600000 rtn + +adc_init_data_hvin: +68c3 68094229 fetcht 2 ,mem_otp_adc_flag +68c4 5800aa55 setarg otp_adc_flag +68c5 98467c00 isub temp ,null +68c6 2022e8cc branch adc_check_data_hvin ,zero +68c7 58005932 setarg 0x5932 +68c8 60014225 store 2 ,mem_5v_adc_hvin_data +68c9 58004323 setarg 0x4323 +68ca 6001421f store 2 ,mem_1v_adc_hvin_data +68cb 202068d4 branch set_vdd_reference_voltage_4v + +adc_check_data_hvin: +68cc 68014225 fetch 2 ,mem_5v_adc_hvin_data +68cd 243a68d0 nbranch adc_check_1v_hvin ,blank +68ce 58005932 setarg 0x5932 +68cf 60014225 store 2 ,mem_5v_adc_hvin_data + +adc_check_1v_hvin: +68d0 6801421f fetch 2 ,mem_1v_adc_hvin_data +68d1 243a68d4 nbranch set_vdd_reference_voltage_4v ,blank +68d2 58004323 setarg 0x4323 +68d3 6001421f store 2 ,mem_1v_adc_hvin_data + +set_vdd_reference_voltage_4v: +68d4 58000190 setarg 400 +68d5 6001422b store 2 ,mem_reference_voltage +68d6 20600000 rtn + +adc_init_data_io: +68d7 68094229 fetcht 2 ,mem_otp_adc_flag +68d8 5800aa55 setarg otp_adc_flag +68d9 98467c00 isub temp ,null +68da 2022e8e0 branch adc_check_data_io ,zero +68db 58006946 setarg 0x6946 +68dc 60014223 store 2 ,mem_1v_adc_io_data +68dd 58005377 setarg 0x5377 +68de 6001421d store 2 ,mem_0_5_adc_io_data +68df 202068e8 branch set_vdd_reference_voltage_0_5v + +adc_check_data_io: +68e0 68014223 fetch 2 ,mem_1v_adc_io_data +68e1 243a68e4 nbranch adc_check_0_5v_io ,blank +68e2 58006946 setarg 0x6946 +68e3 60014223 store 2 ,mem_1v_adc_io_data + +adc_check_0_5v_io: +68e4 6801421d fetch 2 ,mem_0_5_adc_io_data +68e5 243a68e8 nbranch set_vdd_reference_voltage_0_5v ,blank +68e6 58005377 setarg 0x5377 +68e7 6001421d store 2 ,mem_0_5_adc_io_data + +set_vdd_reference_voltage_0_5v: +68e8 58000032 setarg 50 +68e9 6001422b store 2 ,mem_reference_voltage +68ea 20600000 rtn + +adc_set_mode: +68eb 6800c22d fetch 1 ,mem_adc_config_flag +68ec c00068f0 beq adc_config_vinlpm ,adc_check_vinlpm +68ed c000e8f2 beq adc_config_hvin ,adc_check_hvin +68ee c00168f4 beq adc_config_gpio ,adc_check_gpio +68ef 20600000 rtn + +adc_check_vinlpm: +68f0 708971bf hjam 0xbf ,rf_adc_mode +68f1 202068f8 branch read_adc + +adc_check_hvin: +68f2 708971af hjam 0xaf ,rf_adc_mode +68f3 202068f8 branch read_adc + +adc_check_gpio: +68f4 7089718f hjam 0x8f ,rf_adc_mode +68f5 6800c22e fetch 1 ,mem_adc_channel +68f6 60108973 hstore 1 ,rf_adc_ch +68f7 202068f8 branch read_adc + +read_adc: +68f8 474fc033 bpatchx patch33_7 ,mem_patch33 +68f9 68108053 hfetch 1 ,core_uart_baud + 1 +68fa 79207e07 set1 7 ,pdata +68fb 60108053 hstore 1 ,core_uart_baud + 1 +68fc 68108973 hfetch 1 ,rf_adc_ch +68fd 1fe1fe30 or_into 0x30 ,pdata +68fe 60108973 hstore 1 ,rf_adc_ch +68ff 7089067c hjam 0x7c ,rfen_adc +6900 708972aa hjam 0xaa ,rf_adc_gc +6901 20001388 nop 5000 +6902 68190150 hfetcht 2 ,core_adc_sum +6903 68108053 hfetch 1 ,core_uart_baud + 1 +6904 793ffe07 set0 7 ,pdata +6905 60108053 hstore 1 ,core_uart_baud + 1 +6906 6009422f storet 2 ,mem_adc_current_value +6907 20600000 rtn + +vdd_calculate_by_mode: +6908 47504034 bpatchx patch34_0 ,mem_patch34 +6909 6800c22d fetch 1 ,mem_adc_config_flag +690a c000690e beq adc_config_vinlpm ,vdd_calculate_vinlpm +690b c000e912 beq adc_config_hvin ,vdd_calculate_hvin +690c c0016916 beq adc_config_gpio ,vdd_calculate_io +690d 20600000 rtn + +vdd_calculate_vinlpm: +690e 68014227 fetch 2 ,mem_3v_adc_vinlpm_data +690f 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data +6910 da6000c8 arg 200 ,regc +6911 2020691a branch vdd_calculate + +vdd_calculate_hvin: +6912 68014225 fetch 2 ,mem_5v_adc_hvin_data +6913 6809421f fetcht 2 ,mem_1v_adc_hvin_data +6914 da600064 arg 100 ,regc +6915 2020691a branch vdd_calculate + +vdd_calculate_io: +6916 68014223 fetch 2 ,mem_1v_adc_io_data +6917 6809421d fetcht 2 ,mem_0_5_adc_io_data +6918 da600032 arg 50 ,regc +6919 2020691a branch vdd_calculate + +vdd_calculate: +691a 98462200 isub temp ,rega +691b 6801422f fetch 2 ,mem_adc_current_value +691c 98467e00 isub temp ,pdata +691d 24216927 nbranch vdd_calculate1 ,positive +691e 6809422b fetcht 2 ,mem_reference_voltage +691f 984fa400 imul32 temp ,regb +6920 1a627e00 copy regc ,pdata +6921 9a2ffe00 imul32 rega ,pdata +6922 9a40fe00 iadd regb ,pdata + +vdd_calculate2: +6923 9a26fc00 idiv rega +6924 20407f86 call wait_div_end +6925 1807fe00 quotient pdata +6926 20600000 rtn + +vdd_calculate1: +6927 18427e00 copy temp ,pdata +6928 6809422f fetcht 2 ,mem_adc_current_value +6929 98467e00 isub temp ,pdata +692a 6809422b fetcht 2 ,mem_reference_voltage +692b 984fa400 imul32 temp ,regb +692c 1a627e00 copy regc ,pdata +692d 9a2ffe00 imul32 rega ,pdata +692e 9a467e00 isub regb ,pdata +692f 20206923 branch vdd_calculate2 + +adc_bat_percent_lowpower_out: +6930 ea240000 ifetch 8 ,rega +6931 60040a9a store 8 ,mem_pdatatemp +6932 68010a9a fetch 2 ,mem_pdatatemp +6933 68090a9c fetcht 2 ,mem_pdatatemp + 2 +6934 98462200 isub temp ,rega +6935 68010aa0 fetch 2 ,mem_pdatatemp + 6 +6936 98462400 isub temp ,regb +6937 68090a9e fetcht 2 ,mem_pdatatemp + 4 +6938 98467c00 isub temp ,null +6939 24416940 ncall adc_set_low_power_flag ,positive +693a 1a4ffe64 mul32 regb ,100 ,pdata +693b 9a26fc00 idiv rega +693c 20407f86 call wait_div_end +693d 1807fe00 quotient pdata +693e 205a6944 call adc_set_no_power_flag ,blank +693f 20600000 rtn + +adc_set_low_power_flag: +6940 6800c231 fetch 1 ,mem_adc_power_flag +6941 79207e00 set1 0 ,pdata +6942 6000c231 store 1 ,mem_adc_power_flag +6943 20600000 rtn + +adc_set_no_power_flag: +6944 6808c231 fetcht 1 ,mem_adc_power_flag +6945 79200401 set1 1 ,temp +6946 6008c231 storet 1 ,mem_adc_power_flag +6947 20600000 rtn + +keyscan_key_init: +6948 6801423d fetch 2 ,mem_key_num_ptr +6949 efe08000 ifetch 1 ,pdata + +keyscan_key_init_next: +694a 207a0000 rtn blank +694b 1fe27200 copy pdata ,loopcnt +694c 6801423d fetch 2 ,mem_keyscan_ptr +694d 1fe0fe03 increase 3 ,pdata +694e 1fe22200 copy pdata ,rega + +keyscan_key_init_lp1: +694f ea288000 ifetcht 1 ,rega +6950 204067fb call gpio_config_input +6951 1a20a201 increase key_conf_struct_len ,rega +6952 c200694f loop keyscan_key_init_lp1 + +keyscan_key_init_end: +6953 20600000 rtn + +keyscan_scan_key: +6954 6801423d fetch 2 ,mem_keyscan_ptr +6955 1fe0fe03 increase 3 ,pdata +6956 1fe22200 copy pdata ,rega +6957 18002400 force 0 ,regb +6958 700b1200 jam 0 ,mem_key_value_temp + +keyscan_scan_key_lp1: +6959 ea288000 ifetcht 1 ,rega +695a 2040681d call gpio_get_bit +695b 4750c034 bpatchx patch34_1 ,mem_patch34 +695c 68010b12 fetch 2 ,mem_key_value_temp +695d 1a420e00 copy regb ,queue +695e f920fe00 qsetflag true ,pdata +695f 60010b12 store 2 ,mem_key_value_temp +6960 1a20a201 increase key_conf_struct_len ,rega +6961 1a40a401 increase 1 ,regb +6962 6801423d fetch 2 ,mem_key_num_ptr +6963 efe08000 ifetch 1 ,pdata + +keyscan_scan_key_lp1_next: +6964 9a42fc00 ixor regb ,null +6965 2422e959 nbranch keyscan_scan_key_lp1 ,zero +6966 68010b12 fetch 2 ,mem_key_value_temp +6967 68090b14 fetcht 2 ,mem_key_value +6968 9842fc00 ixor temp ,null +6969 20628000 rtn zero +696a 78347c00 enable user +696b 20600000 rtn + +keyscan_process_lpm_before: +696c 6801423d fetch 2 ,mem_key_num_ptr +696d efe08000 ifetch 1 ,pdata + +keyscan_process_lpm_before_next: +696e 207a0000 rtn blank +696f 1fe27200 copy pdata ,loopcnt +6970 6801423d fetch 2 ,mem_keyscan_ptr +6971 1fe0fe03 increase 3 ,pdata +6972 1fe22200 copy pdata ,rega + +keyscan_process_lpm_before_lp1: +6973 ea288000 ifetcht 1 ,rega +6974 204067dd call gpio_set_wake_by_current_state +6975 1a20a201 increase key_conf_struct_len ,rega +6976 c2006973 loop keyscan_process_lpm_before_lp1 + +keyscan_process_lpm_before_end: +6977 20600000 rtn + +keyscan_key_process: +6978 d8e00009 arg key_scan_timer ,queue +6979 20407f16 call timer_check +697a 247a0000 nrtn blank +697b 58000020 setarg 0x20 +697c d8e00009 arg key_scan_timer ,queue +697d 20407f08 call timer_init +697e 78547c00 disable user +697f 2040696c call keyscan_process_lpm_before +6980 47514034 bpatchx patch34_2 ,mem_patch34 +6981 6801423d fetch 2 ,mem_key_num_ptr +6982 efe08000 ifetch 1 ,pdata + +keyscan_key_process_next: +6983 207a0000 rtn blank +6984 20406954 call keyscan_scan_key +6985 24347d02 nbranch lpm_button_clean_wake_lock ,user +6986 20407d00 call lpm_button_get_wake_lock +6987 78547c00 disable user +6988 68010b12 fetch 2 ,mem_key_value_temp +6989 60010b19 store 2 ,mem_key_value_temp4 +698a 700b1b00 jam 0 ,mem_key_value_temp6 +698b 18000e00 force 0 ,queue + +keyscan_key_lp1: +698c 68010b14 fetch 2 ,mem_key_value +698d 1fe30400 rshift pdata ,temp +698e 60090b14 storet 2 ,mem_key_value +698f 1fe17e01 and pdata ,0x01 ,pdata +6990 68090b19 fetcht 2 ,mem_key_value_temp4 +6991 18412201 and temp ,0x01 ,rega +6992 18430400 rshift temp ,temp +6993 60090b19 storet 2 ,mem_key_value_temp4 +6994 9a22fc00 ixor rega ,null +6995 2442e9a1 ncall keyscan_send_key_data ,zero +6996 6801423d fetch 2 ,mem_key_num_ptr +6997 efe08000 ifetch 1 ,pdata + +keyscan_key_lp1_next: +6998 68088b1b fetcht 1 ,mem_key_value_temp6 +6999 18408401 increase 1 ,temp +699a 60088b1b storet 1 ,mem_key_value_temp6 +699b 18420e00 copy temp ,queue +699c 98e2fc00 ixor queue ,null +699d 2422e98c nbranch keyscan_key_lp1 ,zero +699e 68010b12 fetch 2 ,mem_key_value_temp +699f 60010b14 store 2 ,mem_key_value +69a0 20600000 rtn + +keyscan_send_key_data: +69a1 4751c034 bpatchx patch34_3 ,mem_patch34 +69a2 6801423d fetch 2 ,mem_keyscan_ptr +69a3 1fe0fe01 increase 1 ,pdata +69a4 efe10000 ifetch 2 ,pdata +69a5 20207f9c branch callback_func + +pwm_init: +69a6 68108042 hfetch 1 ,core_clksel +69a7 9a21fe00 ior rega ,pdata +69a8 60108042 hstore 1 ,core_clksel +69a9 68110050 hfetch 2 ,core_clkoff +69aa 793ffe0d set0 clock_off_pwm ,pdata +69ab 60110050 hstore 2 ,core_clkoff +69ac 20000064 nop 100 +69ad 20600000 rtn + +pwm_out_set: +69ae 68098a9c fetcht 3 ,mem_pdatatemp + 2 +69af 58b71b00 setarg pwm_12mhz +69b0 9846fc00 idiv temp +69b1 20407f86 call wait_div_end +69b2 18078400 quotient temp +69b3 68008a9f fetch 1 ,mem_pdatatemp + 5 +69b4 984ffe00 imul32 temp ,pdata +69b5 1fe6fc64 div pdata ,100 +69b6 20407f86 call wait_div_end +69b7 1807a200 quotient rega +69b8 18427e00 copy temp ,pdata +69b9 9a262400 isub rega ,regb +69ba 68008a9b fetch 1 ,mem_pdatatemp + 1 +69bb 204069be call pwm_duty_cycle_set +69bc 68008a9a fetch 1 ,mem_pdatatemp +69bd 202069d5 branch pwm_enable + +pwm_duty_cycle_set: +69be c00069c4 beq 0 ,pwm_pwm0_duty_set +69bf c000e9c6 beq 1 ,pwm_pwm1_duty_set +69c0 c00169c8 beq 2 ,pwm_pwm2_duty_set +69c1 c001e9ca beq 3 ,pwm_pwm3_duty_set +69c2 c00269cc beq 4 ,pwm_pwm4_duty_set +69c3 c002e9ce beq 5 ,pwm_pwm5_duty_set + +pwm_pwm0_duty_set: +69c4 d8a080a0 arg core_pwm_pcnt0 ,contw +69c5 202069d0 branch pwm_set_pncnt + +pwm_pwm1_duty_set: +69c6 d8a080a4 arg core_pwm_pcnt1 ,contw +69c7 202069d0 branch pwm_set_pncnt + +pwm_pwm2_duty_set: +69c8 d8a080a8 arg core_pwm_pcnt2 ,contw +69c9 202069d0 branch pwm_set_pncnt + +pwm_pwm3_duty_set: +69ca d8a08064 arg core_pwm_pcnt3 ,contw +69cb 202069d0 branch pwm_set_pncnt + +pwm_pwm4_duty_set: +69cc d8a08068 arg core_pwm_pcnt4 ,contw +69cd 202069d0 branch pwm_set_pncnt + +pwm_pwm5_duty_set: +69ce d8a0806c arg core_pwm_pcnt5 ,contw +69cf 202069d0 branch pwm_set_pncnt + +pwm_set_pncnt: +69d0 1a227e00 copy rega ,pdata +69d1 e0a10000 istore 2 ,contw +69d2 1a427e00 copy regb ,pdata +69d3 e0a10000 istore 2 ,contw +69d4 20600000 rtn + +pwm_enable: +69d5 78347c00 enable user +69d6 202069d8 branch pwm_gpio_set + +pwm_disable: +69d7 78547c00 disable user + +pwm_gpio_set: +69d8 c00269e3 beq 4 ,pwm_gpio4_set +69d9 c002e9e5 beq 5 ,pwm_gpio5_set +69da c00de9e7 beq 27 ,pwm_gpio27_set +69db c00e69e9 beq 28 ,pwm_gpio28_set +69dc c001e9eb beq 3 ,pwm_gpio3_set +69dd c00469ed beq 8 ,pwm_gpio8_set +69de c00a69ef beq 20 ,pwm_gpio20_set +69df c00ae9f1 beq 21 ,pwm_gpio21_set +69e0 c00b69f3 beq 22 ,pwm_gpio22_set +69e1 c00be9f5 beq 23 ,pwm_gpio23_set +69e2 20600000 rtn + +pwm_gpio4_set: +69e3 d8e00006 arg 6 ,queue +69e4 202069ff branch pwm_one_set_select + +pwm_gpio5_set: +69e5 d8e00007 arg 7 ,queue +69e6 202069ff branch pwm_one_set_select + +pwm_gpio27_set: +69e7 d8e00008 arg 8 ,queue +69e8 202069ff branch pwm_one_set_select + +pwm_gpio28_set: +69e9 d8e00009 arg 9 ,queue +69ea 202069ff branch pwm_one_set_select + +pwm_gpio3_set: +69eb d8e0000a arg 10 ,queue +69ec 202069ff branch pwm_one_set_select + +pwm_gpio8_set: +69ed d8e0000b arg 11 ,queue +69ee 202069ff branch pwm_one_set_select + +pwm_gpio20_set: +69ef d8e0000c arg 12 ,queue +69f0 20206a01 branch pwm_tw0_set_select + +pwm_gpio21_set: +69f1 d8e0000d arg 13 ,queue +69f2 20206a01 branch pwm_tw0_set_select + +pwm_gpio22_set: +69f3 d8e0000e arg 14 ,queue +69f4 20206a01 branch pwm_tw0_set_select + +pwm_gpio23_set: +69f5 d8e0000f arg 15 ,queue +69f6 20206a01 branch pwm_tw0_set_select + +pwm_set_select: +69f7 68110081 hfetch 2 ,core_gpio_sel1 +69f8 f9347e00 qsetflag user ,pdata +69f9 60110081 hstore 2 ,core_gpio_sel1 +69fa 1a220e00 copy rega ,queue +69fb 68108085 hfetch 1 ,core_gpio_key2 +69fc f9347e00 qsetflag user ,pdata +69fd 60108085 hstore 1 ,core_gpio_key2 +69fe 20600000 rtn + +pwm_one_set_select: +69ff 18e0a3fc add queue ,-4 ,rega +6a00 202069f7 branch pwm_set_select + +pwm_tw0_set_select: +6a01 18e0a3f6 add queue ,-10 ,rega +6a02 202069f7 branch pwm_set_select + +rfcomm_init: +6a03 20758000 rtn wake +6a04 70456700 jam 0 ,mem_rfcomm_send_more_pkt +6a05 7004ed03 jam bits9600 ,memremoterpnbitrate +6a06 7004ee03 jam databits8 ,memremoteprndatabits +6a07 7004f211 jam 0x11 ,memremoteprnxon +6a08 7004f313 jam 0x13 ,memremoteprnxoff +6a09 58000000 setarg 0 +6a0a 600184ef store 3 ,memremoteprnstopbit +6a0b 6000c254 store 1 ,mem_spp_state +6a0c 70468100 jam 0 ,memui_reconnect_mode + +rfcomm_init_spp: +6a0d 47524034 bpatchx patch34_4 ,mem_patch34 +6a0e 58000000 setarg 0 +6a0f 6000c254 store 1 ,mem_spp_state +6a10 6000c564 store 1 ,mem_remote_spp_channel +6a11 6000c55d store 1 ,mem_pn_dlci +6a12 6800c56b fetch 1 ,mem_credit_flag +6a13 c000ea16 beq credit_enable ,rfcomm_init_spp_with_credit +6a14 70456950 jam 0x50 ,mem_credit_given +6a15 20600000 rtn + +rfcomm_init_spp_with_credit: +6a16 70456900 jam 0x00 ,mem_credit_given +6a17 20600000 rtn + +set_cr_bit: +6a18 18418402 or_into 0x02 ,temp +6a19 20600000 rtn + +rfcomm_calculate_fcs_sabm: +6a1a 18427e00 copy temp ,pdata +6a1b 1fedfe00 reverse pdata ,pdata +6a1c 6000c562 store 1 ,memfcstemp3 +6a1d 18007e3f force ini_tx_sabm ,pdata +6a1e 1fedfe00 reverse pdata ,pdata +6a1f 6000c561 store 1 ,memfcstemp2 +6a20 18007e01 force 0x01 ,pdata +6a21 1fedfe00 reverse pdata ,pdata +6a22 6000c560 store 1 ,memfcstemp1 +6a23 20406a50 call caculate_fcs +6a24 18427e00 copy temp ,pdata +6a25 20600000 rtn + +rfcomm_calculate_fcs_ua: +6a26 1fedfe00 reverse pdata ,pdata +6a27 6000c562 store 1 ,memfcstemp3 +6a28 18007e73 force rsp_tx_ua ,pdata +6a29 1fedfe00 reverse pdata ,pdata +6a2a 6000c561 store 1 ,memfcstemp2 +6a2b 18007e01 force 0x01 ,pdata +6a2c 1fedfe00 reverse pdata ,pdata +6a2d 6000c560 store 1 ,memfcstemp1 +6a2e 20206a50 branch caculate_fcs + +rfcomm_calculate_fcs_dlci0: +6a2f 6800c563 fetch 1 ,mem_rfcomm_initiator +6a30 203a6a33 branch rfcomm_calculate_fcs_dlci0_res ,blank +6a31 58000070 setarg 0x70 +6a32 20600000 rtn + +rfcomm_calculate_fcs_dlci0_res: +6a33 580000aa setarg 0xaa +6a34 20600000 rtn + +rfcomm_save_fcs_uih: +6a35 1fedfe00 reverse pdata ,pdata +6a36 6000c562 store 1 ,memfcstemp3 +6a37 18007eef force rsp_rx_uih ,pdata +6a38 20406a44 call caculate_uihdata_fcs +6a39 680904f7 fetcht 2 ,mem_contw_temp +6a3a 18420a00 copy temp ,contw +6a3b e0a08000 istore 1 ,contw +6a3c 18a20400 copy contw ,temp +6a3d 600904f7 storet 2 ,mem_contw_temp +6a3e 18007eff force rsp_rx_uih_wdata ,pdata +6a3f 20406a44 call caculate_uihdata_fcs +6a40 680904f7 fetcht 2 ,mem_contw_temp +6a41 18420a00 copy temp ,contw +6a42 e0a08000 istore 1 ,contw +6a43 20600000 rtn + +caculate_uihdata_fcs: +6a44 1fedfe00 reverse pdata ,pdata +6a45 6000c561 store 1 ,memfcstemp2 +6a46 68014561 fetch 2 ,memfcstemp2 +6a47 1fed7e00 lshift8 pdata ,pdata +6a48 600184f4 store 3 ,mem_mod2div_temp +6a49 da200107 arg 0x107 ,rega +6a4a da40000f arg 0xf ,regb +6a4b 20406a5d call mod2div +6a4c 1fe2fed7 xor_into 0xd7 ,pdata +6a4d 1fe47e00 invert pdata ,pdata +6a4e 1fedfe00 reverse pdata ,pdata +6a4f 20600000 rtn + +caculate_fcs: +6a50 6801c560 fetch 3 ,memfcstemp1 +6a51 600184f4 store 3 ,mem_mod2div_temp +6a52 da200107 arg 0x107 ,rega +6a53 da40000f arg 0xf ,regb +6a54 20406a5d call mod2div +6a55 1fed7e00 lshift8 pdata ,pdata +6a56 da400007 arg 0x7 ,regb +6a57 20406a5d call mod2div +6a58 1fe2fe2b xor_into 0x2b ,pdata +6a59 1fe47e00 invert pdata ,pdata +6a5a 1fedfe00 reverse pdata ,pdata +6a5b 1fe20400 copy pdata ,temp +6a5c 20600000 rtn + +mod2div: +6a5d da600000 arg 0 ,regc +6a5e 1a427200 copy regb ,loopcnt +6a5f 20407e71 call right_shift_n +6a60 1fe20400 icopy temp + +mod2div_loop: +6a61 18427e00 copy temp ,pdata +6a62 1a63a600 lshift regc ,regc +6a63 c3046a66 bbit0 8 ,mod2div_not_enough_reduction +6a64 9a228400 ixor rega ,temp +6a65 1a60a601 increase 1 ,regc + +mod2div_not_enough_reduction: +6a66 18438400 lshift temp ,temp +6a67 680184f4 fetch 3 ,mem_mod2div_temp +6a68 1a40a5ff increase -1 ,regb +6a69 2a41feff compare 0xff ,regb ,0xff +6a6a 2020ea70 branch mod2div_end ,true +6a6b 1a427200 copy regb ,loopcnt +6a6c 20407e71 call right_shift_n +6a6d 2feffe00 isolate1 0 ,pdata +6a6e 79208400 setflag true ,0 ,temp +6a6f 20206a61 branch mod2div_loop + +mod2div_end: +6a70 18437e00 rshift temp ,pdata +6a71 20600000 rtn + +get_rfcomm_snd_adss: +6a72 6808c55d fetcht 1 ,mem_pn_dlci + +dlci_to_address_cmd: +6a73 184b8400 lshift2 temp ,temp +6a74 79200400 set1 rfcomm_address_ext_len ,temp +6a75 6800c563 fetch 1 ,mem_rfcomm_initiator +6a76 245a6a18 ncall set_cr_bit ,blank +6a77 6008850d storet 1 ,mem_rfcomm_send_adss +6a78 20600000 rtn + +channel_to_dlci: +6a79 18438400 lshift temp ,temp +6a7a 6800c563 fetch 1 ,mem_rfcomm_initiator +6a7b 793a0400 setflag blank ,0 ,temp +6a7c 20600000 rtn + +rfcomm_rx_process_dlci0_sabm: +6a7d 680884fc fetcht 1 ,mem_current_channel +6a7e 7004fed7 jam 0xd7 ,mem_current_fcs +6a7f 20406bb6 call rfcomm_send_ua +6a80 6800c251 fetch 1 ,mem_rfcomm_state +6a81 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata +6a82 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata +6a83 6000c251 store 1 ,mem_rfcomm_state +6a84 70456300 jam 0 ,mem_rfcomm_initiator +6a85 20206b97 branch rfcomm_rx_process_end + +rfcomm_rx_process_dlci0_ua: +6a86 6800c251 fetch 1 ,mem_rfcomm_state +6a87 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata +6a88 6000c251 store 1 ,mem_rfcomm_state +6a89 20206b97 branch rfcomm_rx_process_end + +rfcomm_rx_process: +6a8a 4752c034 bpatchx patch34_5 ,mem_patch34 +6a8b 6800c681 fetch 1 ,memui_reconnect_mode +6a8c c0006a8e beq no_reconnection ,rfcomm_rx_process_remote_page +6a8d 20206b4c branch rfcomm_rx_process_reconn + +rfcomm_rx_process_remote_page: +6a8e 68010264 fetch 2 ,mem_l2cap_payload_ptr +6a8f 1fe20c00 copy pdata ,contr +6a90 20406ab8 call get_rfcomm_head_struct +6a91 680084fc fetch 1 ,mem_current_channel +6a92 c0006a94 beq 0 ,parse_dlci0_rp +6a93 20206b18 branch parse_uih_rp + +parse_dlci0_rp: +6a94 47534034 bpatchx patch34_6 ,mem_patch34 +6a95 680084fd fetch 1 ,mem_current_frame_type +6a96 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +6a97 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +6a98 c077ea9b beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +6a99 c029eb44 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +6a9a 20600000 rtn + +parse_dlci0_rp_uih: +6a9b 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +6a9c 1fe20c00 copy pdata ,contr +6a9d 20406ac3 call get_rfcomm_uih_head_struct +6a9e 68008503 fetch 1 ,mem_uih_cmd_type +6a9f c020eaa5 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +6aa0 c0206aad beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +6aa1 c038eae6 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +6aa2 c0386af2 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +6aa3 c024eafd beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +6aa4 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_cmd: +6aa5 20406aaf call parse_dlci0_rp_uih_pn_res_common +6aa6 20206aa7 branch parse_dlci0_rp_uih_pn_cmd_spp + +parse_dlci0_rp_uih_pn_cmd_spp: +6aa7 6800c254 fetch 1 ,mem_spp_state +6aa8 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata +6aa9 79207e01 set1 rfcomm_channel_state_pn_res ,pdata +6aaa 6000c254 store 1 ,mem_spp_state +6aab 20406be0 call rfcomm_send_param_neg_res +6aac 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_res: +6aad 20406aaf call parse_dlci0_rp_uih_pn_res_common +6aae 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_res_common: +6aaf 20406acb call get_param_payload_ptr +6ab0 20206ad7 branch get_rfcomm_prarmer_negotiation + +get_rfcomm_param_modem_status: +6ab1 20406acb call get_param_payload_ptr +6ab2 e8c08000 ifetch 1 ,contr +6ab3 1fe97e00 rshift3 pdata ,pdata +6ab4 6000c56a store 1 ,mem_ms_channel +6ab5 e8c08000 ifetch 1 ,contr +6ab6 60008508 store 1 ,mem_ms_param +6ab7 20600000 rtn + +get_rfcomm_head_struct: +6ab8 e8c08000 ifetch 1 ,contr +6ab9 600084fb store 1 ,mem_current_adss +6aba 1fe97e00 rshift3 pdata ,pdata +6abb 600084fc store 1 ,mem_current_channel +6abc e8c08000 ifetch 1 ,contr +6abd 600084fd store 1 ,mem_current_frame_type + +get_rfcomm_current_length: +6abe 20406ace call get_rfcomm_length_common +6abf 600904ff storet 2 ,mem_current_length +6ac0 18c27e00 copy contr ,pdata +6ac1 60010501 store 2 ,mem_rfcomm_uih_payload_ptr +6ac2 20600000 rtn + +get_rfcomm_uih_head_struct: +6ac3 e8c08000 ifetch 1 ,contr +6ac4 1fe37e00 rshift pdata ,pdata +6ac5 60008503 store 1 ,mem_uih_cmd_type +6ac6 20406ace call get_rfcomm_length_common +6ac7 60090504 storet 2 ,mem_uih_length +6ac8 18c27e00 copy contr ,pdata +6ac9 60010506 store 2 ,mem_param_payload_ptr +6aca 20600000 rtn + +get_param_payload_ptr: +6acb 68010506 fetch 2 ,mem_param_payload_ptr +6acc 1fe20c00 copy pdata ,contr +6acd 20600000 rtn + +get_rfcomm_length_common: +6ace e8c08000 ifetch 1 ,contr +6acf 1fe20400 copy pdata ,temp +6ad0 18430400 rshift temp ,temp +6ad1 c3800000 rtnbit1 0 +6ad2 e8c08000 ifetch 1 ,contr +6ad3 1fe9fe00 lshift3 pdata ,pdata +6ad4 1ff27e00 lshift4 pdata ,pdata +6ad5 98408400 iadd temp ,temp +6ad6 20600000 rtn + +get_rfcomm_prarmer_negotiation: +6ad7 e8c08000 ifetch 1 ,contr +6ad8 6000c55d store 1 ,mem_pn_dlci +6ad9 e8c08000 ifetch 1 ,contr +6ada 60008509 store 1 ,mem_pn_credit_flow_type_info +6adb e8c08000 ifetch 1 ,contr +6adc 6000850a store 1 ,mem_pn_priority +6add e8c08000 ifetch 1 ,contr +6ade 6000850b store 1 ,mem_pn_acknowledg_timer +6adf e8c10000 ifetch 2 ,contr +6ae0 6001455e store 2 ,mem_pn_max_frame_size +6ae1 e8c08000 ifetch 1 ,contr +6ae2 6000850c store 1 ,mem_pn_max_retrans +6ae3 e8c08000 ifetch 1 ,contr +6ae4 6000c568 store 1 ,mem_remote_credits +6ae5 20600000 rtn + +parse_dlci0_rp_uih_ms_cmd: +6ae6 20406ab1 call get_rfcomm_param_modem_status +6ae7 20206ae8 branch parse_dlci0_rp_uih_ms_cmd_spp + +parse_dlci0_rp_uih_ms_cmd_spp: +6ae8 6800c254 fetch 1 ,mem_spp_state +6ae9 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +6aea 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata +6aeb 6000c254 store 1 ,mem_spp_state +6aec 6808c55d fetcht 1 ,mem_pn_dlci +6aed 184b8400 lshift2 temp ,temp +6aee 18418403 or_into 3 ,temp +6aef 20406c11 call rfcomm_send_modem_status_res +6af0 70456703 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +6af1 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_ms_res: +6af2 700a9908 jam bt_evt_spp_connected ,mem_fifo_temp +6af3 20407d86 call ui_ipc_send_event +6af4 20406ab1 call get_rfcomm_param_modem_status +6af5 6800c56a fetch 1 ,mem_ms_channel +6af6 1fe67c01 sub pdata ,1 ,null +6af7 2022eaf9 branch parse_dlci0_rp_uih_ms_res_spp ,zero +6af8 20202a8c branch assert + +parse_dlci0_rp_uih_ms_res_spp: +6af9 6800c254 fetch 1 ,mem_spp_state +6afa 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata +6afb 6000c254 store 1 ,mem_spp_state +6afc 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_cmd_port: +6afd 20406acb call get_param_payload_ptr +6afe e8c08000 ifetch 1 ,contr +6aff 60008ac2 store 1 ,mem_rpn_dlci +6b00 204052d2 call l2cap_malloc_rfcomm_channel +6b01 204052e0 call l2cap_get_rfcomm_tx_buff +6b02 5800000e setarg 0x000e +6b03 e0a10000 istore 2 ,contw +6b04 6801424a fetch 2 ,mem_rfcomm_remote_cid +6b05 e0a10000 istore 2 ,contw +6b06 6800c563 fetch 1 ,mem_rfcomm_initiator +6b07 1fe3fe00 lshift pdata ,pdata +6b08 79207e00 set1 0 ,pdata +6b09 e0a08000 istore 1 ,contw +6b0a 4753c034 bpatchx patch34_7 ,mem_patch34 +6b0b 580015ef setarg 0x15ef +6b0c e0a10000 istore 2 ,contw +6b0d 58001191 setarg 0x1191 +6b0e e0a10000 istore 2 ,contw +6b0f 68008ac2 fetch 1 ,mem_rpn_dlci +6b10 e0a08000 istore 1 ,contw +6b11 58000007 setarg 0x000007 +6b12 e0a28000 istore 5 ,contw +6b13 58000001 setarg 0x01 +6b14 e0a10000 istore 2 ,contw +6b15 20406a2f call rfcomm_calculate_fcs_dlci0 +6b16 e0a08000 istore 1 ,contw +6b17 20600000 rtn + +parse_uih_rp: +6b18 20206b19 branch parse_uih_rp_spp + +parse_uih_rp_spp: +6b19 47544035 bpatchx patch35_0 ,mem_patch35 +6b1a 680084fd fetch 1 ,mem_current_frame_type +6b1b c039eb21 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +6b1c c01feb25 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +6b1d c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih +6b1e c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +6b1f c029eb46 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +6b20 20600000 rtn + +parse_uih_rp_spp_ua: +6b21 6800c254 fetch 1 ,mem_spp_state +6b22 79207e03 set1 rfcomm_channel_state_ua ,pdata +6b23 6000c254 store 1 ,mem_spp_state +6b24 20206b97 branch rfcomm_rx_process_end + +parse_uih_rp_spp_sabm: +6b25 6800c254 fetch 1 ,mem_spp_state +6b26 79207e03 set1 rfcomm_channel_state_ua ,pdata +6b27 79207e02 set1 rfcomm_channel_state_sabm ,pdata +6b28 6000c254 store 1 ,mem_spp_state +6b29 680084fb fetch 1 ,mem_current_adss +6b2a 20406a26 call rfcomm_calculate_fcs_ua +6b2b 600084fe store 1 ,mem_current_fcs +6b2c 20406bb6 call rfcomm_send_ua +6b2d 680084fb fetch 1 ,mem_current_adss +6b2e 1feb7e00 rshift2 pdata ,pdata +6b2f 6000c55d store 1 ,mem_pn_dlci +6b30 1febfe00 lshift2 pdata ,pdata +6b31 793ffe01 set0 rfcomm_address_cr ,pdata +6b32 79207e00 set1 rfcomm_address_ext_len ,pdata +6b33 d8404565 arg mem_hiufcs_spp ,temp +6b34 600904f7 storet 2 ,mem_contw_temp +6b35 20406a35 call rfcomm_save_fcs_uih +6b36 20206b97 branch rfcomm_rx_process_end + +parse_uih_spp_uih_credits: +6b37 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +6b38 1fe20c00 copy pdata ,contr +6b39 1fe0fe01 increase 1 ,pdata +6b3a 60010501 store 2 ,mem_rfcomm_uih_payload_ptr +6b3b e8c08000 ifetch 1 ,contr +6b3c 6808c568 fetcht 1 ,mem_remote_credits +6b3d 9840fe00 iadd temp ,pdata +6b3e 6000c568 store 1 ,mem_remote_credits + +parse_uih_spp_uih: +6b3f 20406c42 call rfcomm_increase_credit_given + +parse_uih_spp_uih_cont: +6b40 20406a72 call get_rfcomm_snd_adss +6b41 20406c28 call rfcomm_send_uih_without_payload +6b42 20406c4b call spp_process_rx_data +6b43 20206b97 branch rfcomm_rx_process_end + +parse_uih_rp_spp_disconn_send_event: +6b44 700a9909 jam bt_evt_spp_disconnected ,mem_fifo_temp +6b45 20407d86 call ui_ipc_send_event + +parse_uih_rp_spp_disconn: +6b46 20406a0d call rfcomm_init_spp +6b47 680084fb fetch 1 ,mem_current_adss +6b48 20406a26 call rfcomm_calculate_fcs_ua +6b49 600084fe store 1 ,mem_current_fcs +6b4a 20406bb6 call rfcomm_send_ua +6b4b 20206b97 branch rfcomm_rx_process_end + +rfcomm_rx_process_reconn: +6b4c 68010264 fetch 2 ,mem_l2cap_payload_ptr +6b4d 1fe20c00 copy pdata ,contr +6b4e 20406ab8 call get_rfcomm_head_struct +6b4f 680084fc fetch 1 ,mem_current_channel +6b50 c0006b52 beq 0 ,parse_dlci0_reconn +6b51 20206b86 branch parse_uih_reconn + +parse_dlci0_reconn: +6b52 4754c035 bpatchx patch35_1 ,mem_patch35 +6b53 680084fd fetch 1 ,mem_current_frame_type +6b54 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +6b55 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +6b56 c077eb58 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +6b57 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih: +6b58 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +6b59 1fe20c00 copy pdata ,contr +6b5a 20406ac3 call get_rfcomm_uih_head_struct +6b5b 68008503 fetch 1 ,mem_uih_cmd_type +6b5c c020eb61 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +6b5d c0206b61 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +6b5e c038eb6c beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +6b5f c0386b7c beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +6b60 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_pn_cmd: +6b61 20406aaf call parse_dlci0_rp_uih_pn_res_common +6b62 6800c55d fetch 1 ,mem_pn_dlci +6b63 1fe37e00 rshift pdata ,pdata +6b64 6808c564 fetcht 1 ,mem_remote_spp_channel +6b65 98467c00 isub temp ,null +6b66 2022eb68 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +6b67 20202a8c branch assert + +parse_dlci0_reconn_uih_pn_cmd_spp: +6b68 6800c254 fetch 1 ,mem_spp_state +6b69 79207e01 set1 rfcomm_channel_state_pn_res ,pdata +6b6a 6000c254 store 1 ,mem_spp_state +6b6b 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_cmd: +6b6c 20406ab1 call get_rfcomm_param_modem_status +6b6d 6800c56a fetch 1 ,mem_ms_channel +6b6e 6808c564 fetcht 1 ,mem_remote_spp_channel +6b6f 98467c00 isub temp ,null +6b70 2022eb73 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +6b71 20202a8c branch assert +6b72 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_cmd_spp: +6b73 6800c254 fetch 1 ,mem_spp_state +6b74 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +6b75 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata +6b76 6000c254 store 1 ,mem_spp_state +6b77 6808c55d fetcht 1 ,mem_pn_dlci +6b78 184b8400 lshift2 temp ,temp +6b79 18418403 or_into 3 ,temp +6b7a 20406c11 call rfcomm_send_modem_status_res +6b7b 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_res: +6b7c 20406ab1 call get_rfcomm_param_modem_status +6b7d 6800c56a fetch 1 ,mem_ms_channel +6b7e 6808c564 fetcht 1 ,mem_remote_spp_channel +6b7f 98467c00 isub temp ,null +6b80 2022eb82 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +6b81 20202a8c branch assert + +parse_dlci0_reconn_uih_ms_res_spp: +6b82 6800c254 fetch 1 ,mem_spp_state +6b83 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata +6b84 6000c254 store 1 ,mem_spp_state +6b85 20206b97 branch rfcomm_rx_process_end + +parse_uih_reconn: +6b86 680084fc fetch 1 ,mem_current_channel +6b87 6808c564 fetcht 1 ,mem_remote_spp_channel +6b88 98467c00 isub temp ,null +6b89 2022eb8c branch parse_uih_reconn_spp ,zero +6b8a 20202a8c branch assert +6b8b 20206b97 branch rfcomm_rx_process_end + +parse_uih_reconn_spp: +6b8c 680084fd fetch 1 ,mem_current_frame_type +6b8d c039eb91 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +6b8e c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih +6b8f c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +6b90 c029eb96 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn + +parse_uih_reconn_spp_ua: +6b91 6800c254 fetch 1 ,mem_spp_state +6b92 79207e03 set1 rfcomm_channel_state_ua ,pdata +6b93 6000c254 store 1 ,mem_spp_state +6b94 20206b97 branch rfcomm_rx_process_end + +parse_uih_reconn_spp_sabm: +6b95 20206b95 branch parse_uih_reconn_spp_sabm + +parse_uih_reconn_spp_disconn: +6b96 20206b46 branch parse_uih_rp_spp_disconn + +rfcomm_rx_process_end: +6b97 20600000 rtn + +rfcomm_send_more_pkt: +6b98 6800c567 fetch 1 ,mem_rfcomm_send_more_pkt +6b99 207a0000 rtn blank +6b9a c001eb9c beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +6b9b 20202a8c branch assert + +rfcomm_send_more_pkt_msc_cmd_spp: +6b9c 70456700 jam 0 ,mem_rfcomm_send_more_pkt +6b9d 204052d2 call l2cap_malloc_rfcomm_channel +6b9e d8400001 arg spp_slave_channel ,temp +6b9f 6808c55d fetcht 1 ,mem_pn_dlci +6ba0 184b8400 lshift2 temp ,temp + +rfcomm_send_more_pkt_msc_cmd_spp0: +6ba1 18418403 or_into 0x03 ,temp +6ba2 da2000aa arg 0xaa ,rega +6ba3 20406bfc call rfcomm_send_modem_status_cmd +6ba4 204052e0 call l2cap_get_rfcomm_tx_buff +6ba5 18a20c00 copy contw ,contr +6ba6 e8c10000 ifetch 2 ,contr +6ba7 203a2a8c branch assert ,blank +6ba8 20600000 rtn + +rfcomm_send_sabm: +6ba9 204052e0 call l2cap_get_rfcomm_tx_buff +6baa 58000004 setarg 0x0004 +6bab e0a10000 istore 2 ,contw +6bac 6801424a fetch 2 ,mem_rfcomm_remote_cid +6bad e0a10000 istore 2 ,contw +6bae 680084fb fetch 1 ,mem_current_adss +6baf e0a08000 istore 1 ,contw +6bb0 47554035 bpatchx patch35_2 ,mem_patch35 +6bb1 5800013f setarg 0x013f +6bb2 e0a10000 istore 2 ,contw +6bb3 680084fe fetch 1 ,mem_current_fcs +6bb4 e0a08000 istore 1 ,contw +6bb5 20600000 rtn + +rfcomm_send_ua: +6bb6 204052d2 call l2cap_malloc_rfcomm_channel +6bb7 204052e0 call l2cap_get_rfcomm_tx_buff +6bb8 58000004 setarg 0x0004 +6bb9 e0a10000 istore 2 ,contw +6bba 6801424a fetch 2 ,mem_rfcomm_remote_cid +6bbb e0a10000 istore 2 ,contw +6bbc 680084fb fetch 1 ,mem_current_adss +6bbd e0a08000 istore 1 ,contw +6bbe 4755c035 bpatchx patch35_3 ,mem_patch35 +6bbf 58000173 setarg 0x0173 +6bc0 e0a10000 istore 2 ,contw +6bc1 680084fe fetch 1 ,mem_current_fcs +6bc2 e0a08000 istore 1 ,contw +6bc3 20600000 rtn + +rfcomm_send_param_neg_cmd: +6bc4 204052e0 call l2cap_get_rfcomm_tx_buff +6bc5 5800000e setarg 0x000e +6bc6 e0a10000 istore 2 ,contw +6bc7 6801424a fetch 2 ,mem_rfcomm_remote_cid +6bc8 e0a10000 istore 2 ,contw +6bc9 6800c563 fetch 1 ,mem_rfcomm_initiator +6bca 1fe3fe00 lshift pdata ,pdata +6bcb 79207e00 set1 0 ,pdata +6bcc e0a08000 istore 1 ,contw +6bcd 47564035 bpatchx patch35_4 ,mem_patch35 +6bce 580015ef setarg 0x15ef +6bcf e0a10000 istore 2 ,contw +6bd0 58001183 setarg 0x1183 +6bd1 e0a10000 istore 2 ,contw +6bd2 18427e00 copy temp ,pdata +6bd3 e0a08000 istore 1 ,contw +6bd4 580000f0 setarg 0x0000f0 +6bd5 e0a18000 istore 3 ,contw +6bd6 5800007f setarg rfcomm_max_frame_size +6bd7 e0a10000 istore 2 ,contw +6bd8 58000000 setarg 0 +6bd9 e0a08000 istore 1 ,contw +6bda 58000001 setarg 0x01 +6bdb e0a08000 istore 1 ,contw +6bdc 20406a2f call rfcomm_calculate_fcs_dlci0 +6bdd e0a08000 istore 1 ,contw +6bde 70456910 jam 0x10 ,mem_credit_given +6bdf 20600000 rtn + +rfcomm_send_param_neg_res: +6be0 204052d2 call l2cap_malloc_rfcomm_channel +6be1 204052e0 call l2cap_get_rfcomm_tx_buff +6be2 5800000e setarg 0x000e +6be3 e0a10000 istore 2 ,contw +6be4 6801424a fetch 2 ,mem_rfcomm_remote_cid +6be5 e0a10000 istore 2 ,contw +6be6 6800c563 fetch 1 ,mem_rfcomm_initiator +6be7 1fe3fe00 lshift pdata ,pdata +6be8 79207e00 set1 0 ,pdata +6be9 e0a08000 istore 1 ,contw +6bea 4756c035 bpatchx patch35_5 ,mem_patch35 +6beb 580015ef setarg 0x15ef +6bec e0a10000 istore 2 ,contw +6bed 58001181 setarg 0x1181 +6bee e0a10000 istore 2 ,contw +6bef 6800c55d fetch 1 ,mem_pn_dlci +6bf0 e0a08000 istore 1 ,contw +6bf1 580000e0 setarg 0x0000e0 +6bf2 e0a18000 istore 3 ,contw +6bf3 6801456c fetch 2 ,mem_rfcomm_max_frame_size +6bf4 e0a10000 istore 2 ,contw +6bf5 58000000 setarg 0x00 +6bf6 e0a08000 istore 1 ,contw +6bf7 6800c56e fetch 1 ,mem_rfcomm_credit_init_data +6bf8 e0a08000 istore 1 ,contw +6bf9 20406a2f call rfcomm_calculate_fcs_dlci0 +6bfa e0a08000 istore 1 ,contw +6bfb 20600000 rtn + +rfcomm_send_modem_status_cmd: +6bfc 204052e0 call l2cap_get_rfcomm_tx_buff +6bfd 58000008 setarg 0x0008 +6bfe e0a10000 istore 2 ,contw +6bff 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c00 e0a10000 istore 2 ,contw +6c01 6800c563 fetch 1 ,mem_rfcomm_initiator +6c02 1fe3fe00 lshift pdata ,pdata +6c03 79207e00 set1 0 ,pdata +6c04 e0a08000 istore 1 ,contw +6c05 47574035 bpatchx patch35_6 ,mem_patch35 +6c06 580009ef setarg 0x09ef +6c07 e0a10000 istore 2 ,contw +6c08 580005e3 setarg 0x05e3 +6c09 e0a10000 istore 2 ,contw +6c0a 18427e00 copy temp ,pdata +6c0b e0a08000 istore 1 ,contw +6c0c 5800008d setarg 0x8d +6c0d e0a08000 istore 1 ,contw +6c0e 20406a2f call rfcomm_calculate_fcs_dlci0 +6c0f e0a08000 istore 1 ,contw +6c10 20600000 rtn + +rfcomm_send_modem_status_res: +6c11 204052d2 call l2cap_malloc_rfcomm_channel +6c12 204052e0 call l2cap_get_rfcomm_tx_buff +6c13 58000008 setarg 0x0008 +6c14 e0a10000 istore 2 ,contw +6c15 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c16 e0a10000 istore 2 ,contw +6c17 18421600 copy temp ,timeup +6c18 6800c563 fetch 1 ,mem_rfcomm_initiator +6c19 1fe3fe00 lshift pdata ,pdata +6c1a 79207e00 set1 0 ,pdata +6c1b e0a08000 istore 1 ,contw +6c1c 4757c035 bpatchx patch35_7 ,mem_patch35 +6c1d 580009ef setarg 0x09ef +6c1e e0a10000 istore 2 ,contw +6c1f 580005e1 setarg 0x05e1 +6c20 e0a10000 istore 2 ,contw +6c21 19627e00 copy timeup ,pdata +6c22 e0a08000 istore 1 ,contw +6c23 5800008d setarg 0x8d +6c24 e0a08000 istore 1 ,contw +6c25 20406a2f call rfcomm_calculate_fcs_dlci0 +6c26 e0a08000 istore 1 ,contw +6c27 20600000 rtn + +rfcomm_send_uih_without_payload: +6c28 47584036 bpatchx patch36_0 ,mem_patch36 +6c29 6800c569 fetch 1 ,mem_credit_given +6c2a 207a0000 rtn blank +6c2b 68110112 hfetch 2 ,core_uart_rxitems +6c2c 247a0000 nrtn blank +6c2d 1a227e00 copy rega ,pdata +6c2e 60008a9b store 1 ,mem_pdatatemp + 1 +6c2f 60088a9a storet 1 ,mem_pdatatemp +6c30 2040526e call l2cap_malloc_is_fifo_full +6c31 247a0000 nrtn blank +6c32 204052d2 call l2cap_malloc_rfcomm_channel +6c33 204052e0 call l2cap_get_rfcomm_tx_buff +6c34 58000005 setarg 0x05 +6c35 e0a10000 istore 2 ,contw +6c36 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c37 e0a10000 istore 2 ,contw +6c38 6800850d fetch 1 ,mem_rfcomm_send_adss +6c39 e0a08000 istore 1 ,contw +6c3a 580001ff setarg 0x01ff +6c3b e0a10000 istore 2 ,contw +6c3c 6800c569 fetch 1 ,mem_credit_given +6c3d e0a08000 istore 1 ,contw +6c3e 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits +6c3f e0a08000 istore 1 ,contw +6c40 70456900 jam 0 ,mem_credit_given +6c41 20600000 rtn + +rfcomm_increase_credit_given: +6c42 4758c036 bpatchx patch36_1 ,mem_patch36 +6c43 6800c56b fetch 1 ,mem_credit_flag +6c44 c1008000 rtneq credit_enable +6c45 680104ff fetch 2 ,mem_current_length +6c46 207a0000 rtn blank +6c47 6800c569 fetch 1 ,mem_credit_given +6c48 1fe0fe01 increase 1 ,pdata +6c49 6000c569 store 1 ,mem_credit_given +6c4a 20600000 rtn + +spp_process_rx_data: +6c4b 6801456f fetch 2 ,mem_cb_receive_spp_data +6c4c 20207f9c branch callback_func + +spp_tx_rfcomm_packet: +6c4d 47594036 bpatchx patch36_2 ,mem_patch36 +6c4e 6800c568 fetch 1 ,mem_remote_credits +6c4f 207a0000 rtn blank +6c50 1fe0ffff increase -1 ,pdata +6c51 6000c568 store 1 ,mem_remote_credits +6c52 6801455e fetch 2 ,mem_pn_max_frame_size +6c53 6809469f fetcht 2 ,mem_current_packet_length +6c54 98467c00 isub temp ,null +6c55 20216c57 branch ssp_tx_rfcomm_from_uart ,positive +6c56 6001469f store 2 ,mem_current_packet_length + +ssp_tx_rfcomm_from_uart: +6c57 6800c569 fetch 1 ,mem_credit_given +6c58 203a6c5f branch ssp_tx_rfcomm_from_uart_without_credit ,blank +6c59 70051001 jam 1 ,mem_rfcomm_send_offset +6c5a 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits +6c5b 6000850f store 1 ,mem_rfcomm_send_fcs +6c5c 580000ff setarg rsp_rx_uih_wdata +6c5d 6000850e store 1 ,mem_rfcomm_send_frame_type +6c5e 20206c64 branch ssp_tx_rfcomm_from_uart_common + +ssp_tx_rfcomm_from_uart_without_credit: +6c5f 70051000 jam 0 ,mem_rfcomm_send_offset +6c60 6800c565 fetch 1 ,mem_hiufcs_spp +6c61 6000850f store 1 ,mem_rfcomm_send_fcs +6c62 580000ef setarg rsp_tx_uih +6c63 6000850e store 1 ,mem_rfcomm_send_frame_type + +ssp_tx_rfcomm_from_uart_common: +6c64 4759c036 bpatchx patch36_3 ,mem_patch36 +6c65 6801469f fetch 2 ,mem_current_packet_length +6c66 1fe67c7f sub pdata ,127 ,null +6c67 20216c6b branch ssp_tx_rfcomm_from_uart_common0 ,positive +6c68 68008510 fetch 1 ,mem_rfcomm_send_offset +6c69 1fe0fe01 increase 1 ,pdata +6c6a 60008510 store 1 ,mem_rfcomm_send_offset + +ssp_tx_rfcomm_from_uart_common0: +6c6b 20406a72 call get_rfcomm_snd_adss +6c6c 6801469f fetch 2 ,mem_current_packet_length +6c6d 1fe0fe08 increase 8 ,pdata +6c6e 68088510 fetcht 1 ,mem_rfcomm_send_offset +6c6f 9840a200 iadd temp ,rega +6c70 20405240 call l2cap_malloc +6c71 60010277 store 2 ,mem_rfcomm_tx_buff_ptr +6c72 1fe0fe04 increase 4 ,pdata +6c73 60010279 store 2 ,mem_rfcomm_tx_payload_ptr +6c74 1fe20a00 copy pdata ,contw +6c75 6800850d fetch 1 ,mem_rfcomm_send_adss +6c76 e0a08000 istore 1 ,contw +6c77 6800850e fetch 1 ,mem_rfcomm_send_frame_type +6c78 e0a08000 istore 1 ,contw +6c79 20406c95 call ssp_tx_write_length +6c7a 20406ca6 call ssp_tx_write_given_credit +6c7b 475a4036 bpatchx patch36_4 ,mem_patch36 +6c7c 68014571 fetch 2 ,mem_nl_rx_data_src +6c7d 1fe20600 copy pdata ,contru +6c7e 6801469f fetch 2 ,mem_current_packet_length +6c7f 1fe27200 copy pdata ,loopcnt +6c80 204066ea call uart_copy_rx_bytes_fast +6c81 18a20400 copy contw ,temp +6c82 18627e00 copy contru ,pdata +6c83 60014571 store 2 ,mem_nl_rx_data_src +6c84 18420a00 copy temp ,contw +6c85 6800850f fetch 1 ,mem_rfcomm_send_fcs +6c86 e0a08000 istore 1 ,contw +6c87 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr +6c88 1fe20a00 copy pdata ,contw +6c89 6801469f fetch 2 ,mem_current_packet_length +6c8a 68088510 fetcht 1 ,mem_rfcomm_send_offset +6c8b 9840fe00 iadd temp ,pdata +6c8c 1fe0fe04 increase 4 ,pdata +6c8d e0a10000 istore 2 ,contw +6c8e 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c8f e0a10000 istore 2 ,contw +6c90 70456900 jam 0 ,mem_credit_given +6c91 68014573 fetch 2 ,mem_nl_rx_len_all +6c92 c0003a97 beq 0 ,module_hci_command_tx_spp_tx_complete +6c93 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +6c94 20600000 rtn + +ssp_tx_write_length: +6c95 475ac036 bpatchx patch36_5 ,mem_patch36 +6c96 6801469f fetch 2 ,mem_current_packet_length +6c97 1fe67c7f sub pdata ,0x7f ,null +6c98 24216c9d nbranch ssp_tx_write_long_packet ,positive +6c99 1fe3fe00 lshift pdata ,pdata +6c9a 79207e00 set1 0 ,pdata +6c9b e0a08000 istore 1 ,contw +6c9c 20600000 rtn + +ssp_tx_write_long_packet: +6c9d 6801469f fetch 2 ,mem_current_packet_length +6c9e 1fe97e00 rshift3 pdata ,pdata +6c9f 1ff18400 rshift4 pdata ,temp +6ca0 1fe17e7f and_into 0x7f ,pdata +6ca1 1fe3fe00 lshift pdata ,pdata +6ca2 793ffe00 set0 0 ,pdata +6ca3 e0a08000 istore 1 ,contw +6ca4 e0a88000 istoret 1 ,contw +6ca5 20600000 rtn + +ssp_tx_write_given_credit: +6ca6 6800c569 fetch 1 ,mem_credit_given +6ca7 207a0000 rtn blank +6ca8 e0a08000 istore 1 ,contw +6ca9 20600000 rtn + +scheduler_process: +6caa 475b4036 bpatchx patch36_6 ,mem_patch36 +6cab 20407d9c call check_51cmd +6cac 204032f6 call app_process_bb_event +6cad 2040631b call process_conn_sm +6cae 475bc036 bpatchx patch36_7 ,mem_patch36 +6caf 204076dc call sp_calc_sequence +6cb0 204076b5 call simple_pairing_sequence +6cb1 204076c6 call master_simple_paring_sequence +6cb2 2040526e call l2cap_malloc_is_fifo_full +6cb3 247a0000 nrtn blank +6cb4 20404da9 call l2cap_call_proc_sigal_pending +6cb5 2040526e call l2cap_malloc_is_fifo_full +6cb6 247a0000 nrtn blank +6cb7 475c4037 bpatchx patch37_0 ,mem_patch37 +6cb8 20406cf5 call process_upper_sm +6cb9 20404f64 call l2cap_send_config_req +6cba 20406b98 call rfcomm_send_more_pkt + +scheduler_process0: +6cbb 20406cbe call scheduler_tx_disconnect_hid +6cbc 475cc037 bpatchx patch37_1 ,mem_patch37 +6cbd 202032f2 branch app_process_bt + +scheduler_tx_disconnect_hid: +6cbe 6800827f fetch 1 ,mem_control_tasks +6cbf c2805087 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +6cc0 c283d091 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +6cc1 20600000 rtn + +scheduler_tx_l2cap_pkt: +6cc2 475d4037 bpatchx patch37_2 ,mem_patch37 +6cc3 20405274 call l2cap_malloc_is_fifo_empty +6cc4 207a0000 rtn blank +6cc5 6800804b fetch 1 ,mem_op +6cc6 c3830000 rtnbit1 op_txl2cap +6cc7 20405258 call l2cap_malloc_fifo_out +6cc8 6001016f store 2 ,mem_txptr +6cc9 1fe20c00 copy pdata ,contr +6cca e8c10000 ifetch 2 ,contr +6ccb 1fe0fe04 increase 4 ,pdata +6ccc 600141dc store 2 ,mem_tx_len +6ccd 7041db06 jam 6 ,mem_tx_lch +6cce 475dc037 bpatchx patch37_3 ,mem_patch37 +6ccf 68014246 fetch 2 ,mem_l2cap_tx_multi_offset +6cd0 203a6cdd branch scheduler_tx_l2cap_start_pkt ,blank +6cd1 6800804b fetch 1 ,mem_op +6cd2 c4038000 rtnbit0 op_pkt_comp +6cd3 793ffe07 set0 op_pkt_comp ,pdata +6cd4 6000804b store 1 ,mem_op +6cd5 7041db05 jam 5 ,mem_tx_lch +6cd6 68094246 fetcht 2 ,mem_l2cap_tx_multi_offset +6cd7 6801016f fetch 2 ,mem_txptr +6cd8 9840fe00 iadd temp ,pdata +6cd9 6001016f store 2 ,mem_txptr +6cda 680141dc fetch 2 ,mem_tx_len +6cdb 98467e00 isub temp ,pdata +6cdc 600141dc store 2 ,mem_tx_len + +scheduler_tx_l2cap_start_pkt: +6cdd 475e4037 bpatchx patch37_4 ,mem_patch37 +6cde 680141dc fetch 2 ,mem_tx_len +6cdf 203a2a8c branch assert ,blank +6ce0 d8400104 arg l2cap_max_pkt_len ,temp +6ce1 98467e00 isub temp ,pdata +6ce2 24216ce9 nbranch scheduler_tx_l2cap_last_pkt ,positive +6ce3 475ec037 bpatchx patch37_5 ,mem_patch37 +6ce4 600941dc storet 2 ,mem_tx_len +6ce5 68014246 fetch 2 ,mem_l2cap_tx_multi_offset +6ce6 9840fe00 iadd temp ,pdata +6ce7 60014246 store 2 ,mem_l2cap_tx_multi_offset +6ce8 20206ceb branch scheduler_tx_l2cap_pkt_end + +scheduler_tx_l2cap_last_pkt: +6ce9 58000000 setarg 0 +6cea 60014246 store 2 ,mem_l2cap_tx_multi_offset + +scheduler_tx_l2cap_pkt_end: +6ceb 6800804b fetch 1 ,mem_op +6cec 79207e06 set1 op_txl2cap ,pdata +6ced 6000804b store 1 ,mem_op +6cee 20600000 rtn + +scheduler_start_upper_sm: +6cef 6800c684 fetch 1 ,mem_ui_profile_supported +6cf0 c2806cf3 bbit1 support_hid ,scheduler_start_upper_sm_hid +6cf1 70028701 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +6cf2 20600000 rtn + +scheduler_start_upper_sm_hid: +6cf3 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +6cf4 20600000 rtn + +process_upper_sm: +6cf5 6800c681 fetch 1 ,memui_reconnect_mode +6cf6 243a6cfb nbranch process_upper_sm_reconn ,blank + +process_upper_sm_remote_page: +6cf7 68008286 fetch 1 ,mem_upper_sm_remote_page +6cf8 207a0000 rtn blank +6cf9 70028600 jam 0 ,mem_upper_sm_remote_page + +process_upper_sm_rp_wait: +6cfa 20600000 rtn + +process_upper_sm_reconn: +6cfb 475f4037 bpatchx patch37_6 ,mem_patch37 +6cfc 68008287 fetch 1 ,mem_upper_sm_reconn +6cfd 207a0000 rtn blank +6cfe c000ed1b beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +6cff c0016d74 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +6d00 c001ed21 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +6d01 c0026d78 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +6d02 c01ded2b beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +6d03 c01e6d7b beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +6d04 c006ed30 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +6d05 c0076d80 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +6d06 c007ed33 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +6d07 c0086d86 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +6d08 c008ed39 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +6d09 c0096d8a beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +6d0a c009ed3f beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +6d0b c00a6d8e beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +6d0c c00aed45 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +6d0d c00b6d92 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +6d0e c00bed4b beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +6d0f c00c6d97 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +6d10 c00ced51 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +6d11 c00d6d9b beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +6d12 c00ded57 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +6d13 c00e6d9f beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +6d14 c00eed5d beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +6d15 c00f6da4 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +6d16 c00fed63 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +6d17 c0106da8 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +6d18 c010ed6e beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +6d19 c0116dac beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait + +process_upper_sm_reconn_wait: +6d1a 20600000 rtn + +process_upper_sm_reconn_sdp_conn: +6d1b 20406db7 call upper_sm_send_sdp_conn +6d1c 70028702 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +6d1d 6800c250 fetch 1 ,mem_sdp_state +6d1e 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d1f 6000c250 store 1 ,mem_sdp_state +6d20 20600000 rtn + +process_upper_sm_reconn_sdp_cfg: +6d21 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +6d22 6800c250 fetch 1 ,mem_sdp_state +6d23 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req +6d24 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +6d25 20406dbe call upper_sm_send_sdp_cfg +6d26 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +6d27 6800c250 fetch 1 ,mem_sdp_state +6d28 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d29 6000c250 store 1 ,mem_sdp_state +6d2a 20600000 rtn + +process_upper_sm_reconn_ss_spp: +6d2b 20405274 call l2cap_malloc_is_fifo_empty +6d2c 247a0000 nrtn blank +6d2d 20406dcd call upper_sm_send_ss_spp +6d2e 7002873c jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +6d2f 20600000 rtn + +process_upper_sm_reconn_sdp_disconn: +6d30 20406dc3 call upper_sm_send_sdp_disconn +6d31 7002870e jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +6d32 20600000 rtn + +process_upper_sm_reconn_hid_ctrl_conn: +6d33 20406ddd call upper_sm_send_hid_ctrl_conn +6d34 70028710 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +6d35 6800c252 fetch 1 ,mem_hid_control_state +6d36 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d37 6000c252 store 1 ,mem_hid_control_state +6d38 20600000 rtn + +process_upper_sm_reconn_hid_ctrl_cfg: +6d39 20406de4 call upper_sm_send_hid_ctrl_cfg +6d3a 70028712 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +6d3b 6800c252 fetch 1 ,mem_hid_control_state +6d3c 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d3d 6000c252 store 1 ,mem_hid_control_state +6d3e 20600000 rtn + +process_upper_sm_reconn_hid_int_conn: +6d3f 20406de9 call upper_sm_send_hid_int_conn +6d40 70028714 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +6d41 6800c253 fetch 1 ,mem_hid_interrupt_state +6d42 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d43 6000c253 store 1 ,mem_hid_interrupt_state +6d44 20600000 rtn + +process_upper_sm_reconn_hid_int_cfg: +6d45 20406df0 call upper_sm_send_hid_int_cfg +6d46 70028716 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +6d47 6800c253 fetch 1 ,mem_hid_interrupt_state +6d48 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d49 6000c253 store 1 ,mem_hid_interrupt_state +6d4a 20600000 rtn + +process_upper_sm_reconn_rfcomm_conn: +6d4b 20406dd1 call upper_sm_send_rfcomm_conn +6d4c 70028718 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +6d4d 6800c251 fetch 1 ,mem_rfcomm_state +6d4e 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d4f 6000c251 store 1 ,mem_rfcomm_state +6d50 20600000 rtn + +process_upper_sm_reconn_rfcomm_cfg: +6d51 20406dd8 call upper_sm_send_rfcomm_cfg +6d52 7002871a jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +6d53 6800c251 fetch 1 ,mem_rfcomm_state +6d54 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d55 6000c251 store 1 ,mem_rfcomm_state +6d56 20600000 rtn + +process_upper_sm_reconn_rfcomm_sabm: +6d57 20406df5 call upper_sm_send_rfcomm_sabm +6d58 7002871c jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +6d59 6800c251 fetch 1 ,mem_rfcomm_state +6d5a 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata +6d5b 6000c251 store 1 ,mem_rfcomm_state +6d5c 20600000 rtn + +process_upper_sm_reconn_spp_cmd_pn: +6d5d 20406dfc call upper_sm_send_spp_cmd_pn +6d5e 6800c254 fetch 1 ,mem_spp_state +6d5f 79207e00 set1 rfcomm_channel_state_pn_cmd +6d60 6000c254 store 1 ,mem_spp_state +6d61 7002871e jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +6d62 20600000 rtn + +process_upper_sm_reconn_spp_sabm: +6d63 20406e02 call upper_sm_send_spp_sabm +6d64 6800c254 fetch 1 ,mem_spp_state +6d65 79207e02 set1 rfcomm_channel_state_sabm +6d66 6000c254 store 1 ,mem_spp_state +6d67 70028720 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +6d68 6800c564 fetch 1 ,mem_remote_spp_channel +6d69 1fe9fe00 lshift3 pdata ,pdata +6d6a 1fe1fe03 or_into 3 ,pdata +6d6b d8404565 arg mem_hiufcs_spp ,temp +6d6c 600904f7 storet 2 ,mem_contw_temp +6d6d 20206a35 branch rfcomm_save_fcs_uih + +process_upper_sm_reconn_spp_cmd_ms: +6d6e 20406e0c call upper_sm_send_spp_cmd_ms +6d6f 6800c254 fetch 1 ,mem_spp_state +6d70 79207e04 set1 rfcomm_channel_state_snd_ms_cmd +6d71 6000c254 store 1 ,mem_spp_state +6d72 70028722 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +6d73 20600000 rtn + +process_upper_sm_reconn_sdp_conn_wait: +6d74 6800c250 fetch 1 ,mem_sdp_state +6d75 c4008000 rtnbit0 l2cap_channel_state_conn_res +6d76 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +6d77 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_sdp_cfg_wait: +6d78 6800c250 fetch 1 ,mem_sdp_state +6d79 c19f8000 rtnne l2cap_channel_setup_complete +6d7a 7002873b jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn + +process_upper_sm_reconn_ss_spp_wait: +6d7b 68008285 fetch 1 ,mem_message_to_uppersm +6d7c c18b8000 rtnne recieve_ss_reasult_hf +6d7d 70028500 jam 0 ,mem_message_to_uppersm +6d7e 7002870d jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +6d7f 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_sdp_disconn_wait: +6d80 6800c250 fetch 1 ,mem_sdp_state +6d81 247a0000 nrtn blank +6d82 6800c684 fetch 1 ,mem_ui_profile_supported +6d83 c2806daf bbit1 support_hid ,process_upper_sm_reconn_setup_hid +6d84 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +6d85 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_hid_ctrl_conn_wait: +6d86 6800c252 fetch 1 ,mem_hid_control_state +6d87 c4008000 rtnbit0 l2cap_channel_state_conn_res +6d88 70028711 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +6d89 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_ctrl_cfg_wait: +6d8a 6800c252 fetch 1 ,mem_hid_control_state +6d8b c19f8000 rtnne l2cap_channel_setup_complete +6d8c 70028713 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +6d8d 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_int_conn_wait: +6d8e 6800c253 fetch 1 ,mem_hid_interrupt_state +6d8f c4008000 rtnbit0 l2cap_channel_state_conn_res +6d90 70028715 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +6d91 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_int_cfg_wait: +6d92 6800c253 fetch 1 ,mem_hid_interrupt_state +6d93 c19f8000 rtnne l2cap_channel_setup_complete +6d94 6800c684 fetch 1 ,mem_ui_profile_supported +6d95 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +6d96 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_rfcomm_conn_wait: +6d97 6800c251 fetch 1 ,mem_rfcomm_state +6d98 c4008000 rtnbit0 l2cap_channel_state_conn_res +6d99 70028719 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +6d9a 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_rfcomm_cfg_wait: +6d9b 6800c251 fetch 1 ,mem_rfcomm_state +6d9c c19f8000 rtnne l2cap_channel_setup_complete +6d9d 7002871b jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +6d9e 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_rfcomm_sabm_wait: +6d9f 6800c251 fetch 1 ,mem_rfcomm_state +6da0 c1ff8000 rtnne l2cap_channel_rfcomm_dlci0_opened +6da1 6800c684 fetch 1 ,mem_ui_profile_supported +6da2 c2836db3 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +6da3 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_spp_cmd_pn_wait: +6da4 6800c254 fetch 1 ,mem_spp_state +6da5 c4008000 rtnbit0 rfcomm_channel_state_pn_res +6da6 7002871f jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +6da7 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_spp_sabm_wait: +6da8 6800c254 fetch 1 ,mem_spp_state +6da9 c4018000 rtnbit0 rfcomm_channel_state_ua +6daa 70028721 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +6dab 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_spp_cmd_ms_wait: +6dac 6800c254 fetch 1 ,mem_spp_state +6dad c1ff8000 rtnne rfcomm_channel_setup_complete +6dae 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_setup_hid: +6daf 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +6db0 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_rfcomm: +6db1 70028717 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +6db2 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_spp: +6db3 7002871d jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +6db4 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_termination: +6db5 70028700 jam 0 ,mem_upper_sm_reconn +6db6 20600000 rtn + +upper_sm_send_sdp_conn: +6db7 475fc037 bpatchx patch37_7 ,mem_patch37 +6db8 204052b8 call l2cap_malloc_signal_channel +6db9 58000001 setarg psm_sdp +6dba 1fe20400 copy pdata ,temp +6dbb 58000050 setarg l2cap_sdp_channel +6dbc 1fe21600 copy pdata ,timeup +6dbd 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_sdp_cfg: +6dbe 47604038 bpatchx patch38_0 ,mem_patch38 +6dbf 204052b8 call l2cap_malloc_signal_channel +6dc0 68014248 fetch 2 ,mem_sdp_remote_cid +6dc1 1fe20400 copy pdata ,temp +6dc2 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_sdp_disconn: +6dc3 4760c038 bpatchx patch38_1 ,mem_patch38 +6dc4 204052b8 call l2cap_malloc_signal_channel +6dc5 68014248 fetch 2 ,mem_sdp_remote_cid +6dc6 1fe20400 copy pdata ,temp +6dc7 d9600050 arg l2cap_sdp_channel ,timeup +6dc8 204050cc call ml2cap_send_signal_disconn_req +6dc9 6800c250 fetch 1 ,mem_sdp_state +6dca 793ffe05 set0 l2cap_channel_state_rcv_cfg_res ,pdata +6dcb 6000c250 store 1 ,mem_sdp_state +6dcc 20600000 rtn + +upper_sm_send_ss_spp: +6dcd 47614038 bpatchx patch38_2 ,mem_patch38 +6dce 204052c5 call l2cap_malloc_sdp_channel +6dcf 20407138 call sdp_send_spp_request +6dd0 202050e7 branch msdp_send_req_done + +upper_sm_send_rfcomm_conn: +6dd1 4761c038 bpatchx patch38_3 ,mem_patch38 +6dd2 204052b8 call l2cap_malloc_signal_channel +6dd3 58000003 setarg psm_rfcomm +6dd4 1fe20400 copy pdata ,temp +6dd5 58000051 setarg l2cap_rfcomm_channel +6dd6 1fe21600 copy pdata ,timeup +6dd7 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_rfcomm_cfg: +6dd8 47624038 bpatchx patch38_4 ,mem_patch38 +6dd9 204052b8 call l2cap_malloc_signal_channel +6dda 6801424a fetch 2 ,mem_rfcomm_remote_cid +6ddb 1fe20400 copy pdata ,temp +6ddc 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_hid_ctrl_conn: +6ddd 4762c038 bpatchx patch38_5 ,mem_patch38 +6dde 204052b8 call l2cap_malloc_signal_channel +6ddf 58000011 setarg psm_hid_control +6de0 1fe20400 copy pdata ,temp +6de1 58000052 setarg l2cap_hid_control_channel +6de2 1fe21600 copy pdata ,timeup +6de3 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_hid_ctrl_cfg: +6de4 47634038 bpatchx patch38_6 ,mem_patch38 +6de5 204052b8 call l2cap_malloc_signal_channel +6de6 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +6de7 1fe20400 copy pdata ,temp +6de8 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_hid_int_conn: +6de9 4763c038 bpatchx patch38_7 ,mem_patch38 +6dea 204052b8 call l2cap_malloc_signal_channel +6deb 58000013 setarg psm_hid_interrupt +6dec 1fe20400 copy pdata ,temp +6ded 58000053 setarg l2cap_hid_interrupt_channel +6dee 1fe21600 copy pdata ,timeup +6def 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_hid_int_cfg: +6df0 47644039 bpatchx patch39_0 ,mem_patch39 +6df1 204052b8 call l2cap_malloc_signal_channel +6df2 6801424e fetch 2 ,mem_hid_int_remote_cid +6df3 1fe20400 copy pdata ,temp +6df4 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_rfcomm_sabm: +6df5 4764c039 bpatchx patch39_1 ,mem_patch39 +6df6 204052d2 call l2cap_malloc_rfcomm_channel +6df7 7004fb03 jam 3 ,mem_current_adss +6df8 7004fe1c jam 0x1c ,mem_current_fcs +6df9 20406ba9 call rfcomm_send_sabm +6dfa 70456301 jam 1 ,mem_rfcomm_initiator +6dfb 20600000 rtn + +upper_sm_send_spp_cmd_pn: +6dfc 47654039 bpatchx patch39_2 ,mem_patch39 +6dfd 204052d2 call l2cap_malloc_rfcomm_channel +6dfe 6808c564 fetcht 1 ,mem_remote_spp_channel +6dff 20406a79 call channel_to_dlci +6e00 6008c55d storet 1 ,mem_pn_dlci +6e01 20206bc4 branch rfcomm_send_param_neg_cmd + +upper_sm_send_spp_sabm: +6e02 4765c039 bpatchx patch39_3 ,mem_patch39 +6e03 204052d2 call l2cap_malloc_rfcomm_channel +6e04 6808c55d fetcht 1 ,mem_pn_dlci +6e05 20406a73 call dlci_to_address_cmd +6e06 20406a1a call rfcomm_calculate_fcs_sabm +6e07 600084fe store 1 ,mem_current_fcs +6e08 6808c55d fetcht 1 ,mem_pn_dlci +6e09 20406a73 call dlci_to_address_cmd +6e0a 600884fb storet 1 ,mem_current_adss +6e0b 20206ba9 branch rfcomm_send_sabm + +upper_sm_send_spp_cmd_ms: +6e0c 47664039 bpatchx patch39_4 ,mem_patch39 +6e0d 204052d2 call l2cap_malloc_rfcomm_channel +6e0e 6808c55d fetcht 1 ,mem_pn_dlci +6e0f 20406a73 call dlci_to_address_cmd +6e10 20206bfc branch rfcomm_send_modem_status_cmd + +sdp_process: +6e11 4766c039 bpatchx patch39_5 ,mem_patch39 +6e12 68010264 fetch 2 ,mem_l2cap_payload_ptr +6e13 98000c00 iforce contr +6e14 e8c08000 ifetch 1 ,contr +6e15 1fe22400 copy pdata ,regb +6e16 6000851b store 1 ,mem_sdp_pduid +6e17 e8c10000 ifetch 2 ,contr +6e18 6001051c store 2 ,mem_sdp_transactionid +6e19 e8c08000 ifetch 1 ,contr +6e1a 1fed1600 lshift8 pdata ,timeup +6e1b e8c08000 ifetch 1 ,contr +6e1c 99609600 iadd timeup ,timeup +6e1d 47674039 bpatchx patch39_6 ,mem_patch39 +6e1e 18c20400 copy contr ,temp +6e1f df200004 arg 4 ,loopcnt +6e20 d8a0052a arg mem_sdp_handle_list ,contw +6e21 20407ec6 call memset0 +6e22 18420c00 copy temp ,contr +6e23 1a427e00 deposit regb +6e24 c000efba beq sdp_error_res ,sdp_process_error_res +6e25 c0016e2c beq sdp_search_req ,sdp_process_ss_req +6e26 c001efba beq sdp_search_res ,sdp_process_ss_res +6e27 c0026e54 beq sdp_attribute_req ,sdp_process_sa_req +6e28 c002efba beq sdp_attribute_res ,sdp_process_sa_res +6e29 c0036f02 beq sdp_searchattrib_req ,sdp_process_ssa_req +6e2a c003efba beq sdp_searchattrib_res ,sdp_process_ssa_res +6e2b 20206fc1 branch sdp_insufficient_resource + +sdp_process_ss_req: +6e2c 4767c039 bpatchx patch39_7 ,mem_patch39 +6e2d 20406fd0 call ask_serviceclassid +6e2e 2841fe01 compare 1 ,temp ,0xff +6e2f 2020f040 branch ss_empty_rsp ,true +6e30 2841feff compare 0xff ,temp ,0xff +6e31 2020efc4 branch sdp_invalid_request_syntax ,true +6e32 e8c10000 ifetch 2 ,contr +6e33 60010522 store 2 ,mem_sdp_record_maxcnt +6e34 196097fe increase -2 ,timeup +6e35 196097ff increase -1 ,timeup +6e36 2422efbe nbranch sdp_invalid_pdu_size ,zero +6e37 d9600511 arg mem_sdp_uuid_search_ptr ,timeup +6e38 e9610000 ifetch 2 ,timeup +6e39 207a0000 rtn blank +6e3a 20407082 call search_all_uuid +6e3b 204052d0 call l2cap_get_sdp_tx_payload +6e3c 18007e03 force 3 ,pdata +6e3d e0a08000 istore 1 ,contw +6e3e 6801051c fetch 2 ,mem_sdp_transactionid +6e3f e0a10000 istore 2 ,contw +6e40 18ebfe00 lshift2 queue ,pdata +6e41 1fe0fe05 add pdata ,5 ,pdata +6e42 1fe0a605 add pdata ,5 ,regc +6e43 1ff0fe00 byteswap pdata ,pdata +6e44 e0a10000 istore 2 ,contw +6e45 18e27e00 deposit queue +6e46 1ff0fe00 byteswap pdata ,pdata +6e47 e0a10000 istore 2 ,contw +6e48 e0a10000 istore 2 ,contw +6e49 d8c0052a arg mem_sdp_handle_list ,contr +6e4a 18e27200 copy queue ,loopcnt +6e4b 2022ee4f branch ss_req_blank ,zero + +ss_req_loop: +6e4c e8c20000 ifetch 4 ,contr +6e4d e0a20000 istore 4 ,contw +6e4e c2006e4c loop ss_req_loop + +ss_req_blank: +6e4f 18007e00 force 0 ,pdata +6e50 e0a08000 istore 1 ,contw +6e51 1a627e00 deposit regc +6e52 60010275 store 2 ,mem_sdp_tx_pkt_length +6e53 20600000 rtn + +sdp_process_sa_req: +6e54 4768403a bpatchx patch3a_0 ,mem_patch3a +6e55 e8c20000 ifetch 4 ,contr +6e56 60020524 store 4 ,mem_sdp_record_handle +6e57 196097fc increase -4 ,timeup +6e58 20406f2e call sdp_store_maxbyte +6e59 60010520 store 2 ,mem_sdp_attribute_maxbyte +6e5a 196097fe increase -2 ,timeup +6e5b 20407028 call dataelementtype6 +6e5c 2022efc4 branch sdp_invalid_request_syntax ,zero +6e5d 2a21fe05 compare 5 ,rega ,0xff +6e5e 2020ee62 branch sa_judge_wholerange ,true + +sa_isnot_wholerange: +6e5f d8a0052a arg mem_sdp_attrib_list ,contw +6e60 18000e00 force 0 ,queue +6e61 20206e71 branch sa_req_loop + +sa_judge_wholerange: +6e62 e8c08000 ifetch 1 ,contr +6e63 c0856fc4 bne sdp_attribute_range ,sdp_invalid_request_syntax +6e64 e8c10000 ifetch 2 ,contr +6e65 243a6e6f nbranch sa_judge_wholerange_false1 ,blank +6e66 e8c08000 ifetch 1 ,contr +6e67 c0ffee6d bne 0xff ,sa_judge_wholerange_false2 +6e68 e8c08000 ifetch 1 ,contr +6e69 c0ffee6b bne 0xff ,sa_judge_wholerange_false3 +6e6a 20206eb8 branch sa_req_all + +sa_judge_wholerange_false3: +6e6b 18c08dfb increase -5 ,contr +6e6c 20206e5f branch sa_isnot_wholerange + +sa_judge_wholerange_false2: +6e6d 18c08dfc increase -4 ,contr +6e6e 20206e5f branch sa_isnot_wholerange + +sa_judge_wholerange_false1: +6e6f 18c08dfd increase -3 ,contr +6e70 20206e5f branch sa_isnot_wholerange + +sa_req_loop: +6e71 e8c08000 ifetch 1 ,contr +6e72 c004ee86 beq sdp_attribute_id ,sa_req_one_id +6e73 c0056e74 beq sdp_attribute_range ,sa_req_range + +sa_req_range: +6e74 e8c10000 ifetch 2 ,contr +6e75 e0a10000 istore 2 ,contw +6e76 18e08e01 increase 1 ,queue +6e77 1ff0a400 byteswap pdata ,regb +6e78 e8c10000 ifetch 2 ,contr +6e79 1ff0fe00 byteswap pdata ,pdata + +sa_req_range_id_increase: +6e7a 1a40a401 increase 1 ,regb +6e7b 9a467c00 isub regb ,null +6e7c 24216e83 nbranch sa_req_range_id_finish ,positive +6e7d 1fe22600 copy pdata ,regc +6e7e 1a50fe00 byteswap regb ,pdata +6e7f e0a10000 istore 2 ,contw +6e80 18e08e01 increase 1 ,queue +6e81 1a627e00 copy regc ,pdata +6e82 20206e7a branch sa_req_range_id_increase + +sa_req_range_id_finish: +6e83 196097fb increase -5 ,timeup +6e84 1a20a3fb increase -5 ,rega +6e85 20206e8b branch sa_req_check_next_id + +sa_req_one_id: +6e86 e8c10000 ifetch 2 ,contr +6e87 e0a10000 istore 2 ,contw +6e88 18e08e01 increase 1 ,queue +6e89 196097fd increase -3 ,timeup +6e8a 1a20a3fd increase -3 ,rega + +sa_req_check_next_id: +6e8b 24216fc4 nbranch sdp_invalid_request_syntax ,positive +6e8c 2422ee71 nbranch sa_req_loop ,zero +6e8d 196097ff increase -1 ,timeup +6e8e 2422efc4 nbranch sdp_invalid_request_syntax ,zero +6e8f 204052d0 call l2cap_get_sdp_tx_payload +6e90 18a08a0a increase 10 ,contw +6e91 da20052a arg mem_sdp_attrib_list ,rega + +sa_req_handle_attributelist_next: +6e92 18e27e00 copy queue ,pdata +6e93 203a6ea5 branch sa_req_handle_attributelist_end ,blank +6e94 ea210000 ifetch 2 ,rega +6e95 203a6ea5 branch sa_req_handle_attributelist_end ,blank +6e96 98002400 iforce regb +6e97 68020524 fetch 4 ,mem_sdp_record_handle +6e98 98000400 iforce temp +6e99 204070e7 call search_handle_attrib +6e9a 18c27e00 copy contr ,pdata +6e9b 203a6ea2 branch sa_req_handle_attributelist_notfound ,blank +6e9c 18c08dfd increase -3 ,contr +6e9d e8c18000 ifetch 3 ,contr +6e9e e0a18000 istore 3 ,contw +6e9f 2040705b call sdp_data_len +6ea0 98007200 iforce loopcnt +6ea1 20407f01 call memcpy + +sa_req_handle_attributelist_notfound: +6ea2 1a20a202 increase 2 ,rega +6ea3 18e08fff increase -1 ,queue +6ea4 20206e92 branch sa_req_handle_attributelist_next + +sa_req_handle_attributelist_end: +6ea5 da200005 arg sdp_attribute_res ,rega +6ea6 20406f84 call ssa_req_range_lastfreg_common +6ea7 68010275 fetch 2 ,mem_sdp_tx_pkt_length +6ea8 c005f043 beq 11 ,sa_empty_rsp +6ea9 20206f9a branch ssa_req_range_attrbutes_length_no_continue + +sdp_store_continue_common: +6eaa e8c08000 ifetch 1 ,contr +6eab c0006eae beq 0 ,sdp_store_continue_0byte +6eac c000eeb0 beq 1 ,sdp_store_continue_1byte +6ead c0016eb3 beq 2 ,sdp_store_continue_2byte + +sdp_store_continue_0byte: +6eae 196097ff increase -1 ,timeup +6eaf 20206eb6 branch sdp_store_continue_end + +sdp_store_continue_1byte: +6eb0 e8c08000 ifetch 1 ,contr +6eb1 196097fe increase -2 ,timeup +6eb2 20206eb6 branch sdp_store_continue_end + +sdp_store_continue_2byte: +6eb3 e8c10000 ifetch 2 ,contr +6eb4 1ff0fe00 byteswap pdata ,pdata +6eb5 196097fd increase -3 ,timeup + +sdp_store_continue_end: +6eb6 60010519 store 2 ,mem_sdp_continue_byte +6eb7 20600000 rtn + +sa_req_all: +6eb8 196097fb increase -5 ,timeup +6eb9 20406eaa call sdp_store_continue_common +6eba 2422efbe nbranch sdp_invalid_pdu_size ,zero +6ebb 680a0524 fetcht 4 ,mem_sdp_record_handle +6ebc 204070b1 call search_handle +6ebd 2422efbb nbranch sdp_invalid_service_record_handle ,zero +6ebe 18c22200 copy contr ,rega +6ebf 204052d0 call l2cap_get_sdp_tx_payload +6ec0 1a220c00 copy rega ,contr +6ec1 18a08a03 increase 3 ,contw +6ec2 18c21600 copy contr ,timeup +6ec3 20407062 call sdp_get_data +6ec4 1fe22200 copy pdata ,rega +6ec5 68010519 fetch 2 ,mem_sdp_continue_byte +6ec6 1fe22400 copy pdata ,regb +6ec7 1a227e00 copy rega ,pdata +6ec8 9a462400 isub regb ,regb +6ec9 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6eca 9a467c00 isub regb ,null +6ecb 24216ee7 nbranch sa_req_all_fragment_sdp ,positive +6ecc 78547c00 disable user +6ecd 68010519 fetch 2 ,mem_sdp_continue_byte +6ece 203a6eda branch sa_req_all_fisrt_fragment ,blank +6ecf 99608c00 iadd timeup ,contr +6ed0 1a40a403 increase 3 ,regb +6ed1 1a427200 copy regb ,loopcnt +6ed2 1f227e00 copy loopcnt ,pdata +6ed3 1fe0fe03 increase 3 ,pdata +6ed4 1ff0fe00 byteswap pdata ,pdata +6ed5 e0a10000 istore 2 ,contw +6ed6 1f227e00 copy loopcnt ,pdata +6ed7 1ff0fe00 byteswap pdata ,pdata +6ed8 e0a10000 istore 2 ,contw +6ed9 20206ef5 branch sa_req_all_answer_attributelist_full_loop + +sa_req_all_fisrt_fragment: +6eda 1a20f206 add rega ,6 ,loopcnt +6edb 20346ede branch sa_req_all_parlength_continue_byte ,user +6edc 1f30fe00 byteswap loopcnt ,pdata +6edd 20206ee1 branch sa_req_all_parlength_continue_byte_end + +sa_req_all_parlength_continue_byte: +6ede 1f227e00 copy loopcnt ,pdata +6edf 1fe0fe02 increase 2 ,pdata +6ee0 1ff0fe00 byteswap pdata ,pdata + +sa_req_all_parlength_continue_byte_end: +6ee1 e0a10000 istore 2 ,contw +6ee2 1f20f3fd increase -3 ,loopcnt +6ee3 1f30fe00 byteswap loopcnt ,pdata +6ee4 e0a10000 istore 2 ,contw +6ee5 19620c00 copy timeup ,contr +6ee6 20206ef5 branch sa_req_all_answer_attributelist_full_loop + +sa_req_all_fragment_sdp: +6ee7 78347c00 enable user +6ee8 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6ee9 1fe22200 copy pdata ,rega +6eea 1a227200 copy rega ,loopcnt +6eeb 68010519 fetch 2 ,mem_sdp_continue_byte +6eec 203a6eda branch sa_req_all_fisrt_fragment ,blank +6eed 99608c00 iadd timeup ,contr +6eee 1a227e00 copy rega ,pdata +6eef 1fe0fe05 increase 5 ,pdata +6ef0 1ff0fe00 byteswap pdata ,pdata +6ef1 e0a10000 istore 2 ,contw +6ef2 1a227e00 copy rega ,pdata +6ef3 1ff0fe00 byteswap pdata ,pdata +6ef4 e0a10000 istore 2 ,contw + +sa_req_all_answer_attributelist_full_loop: +6ef5 20407f01 call memcpy +6ef6 24346efe nbranch sa_req_all_last_frag_continue ,user +6ef7 18007e02 force 2 ,pdata +6ef8 e0a08000 istore 1 ,contw +6ef9 18c27e00 copy contr ,pdata +6efa 99667e00 isub timeup ,pdata +6efb 1ff0fe00 byteswap pdata ,pdata +6efc e0a10000 istore 2 ,contw +6efd 20206f00 branch sa_req_all_frag_end + +sa_req_all_last_frag_continue: +6efe 18007e00 force 0 ,pdata +6eff e0a08000 istore 1 ,contw + +sa_req_all_frag_end: +6f00 da200005 arg sdp_attribute_res ,rega +6f01 20206fb0 branch ssa_req_range_common + +sdp_process_ssa_req: +6f02 4768c03a bpatchx patch3a_1 ,mem_patch3a +6f03 20406fd0 call ask_serviceclassid +6f04 2841feff compare 0xff ,temp ,0xff +6f05 2020efc4 branch sdp_invalid_request_syntax ,true +6f06 20406f2e call sdp_store_maxbyte +6f07 60010520 store 2 ,mem_sdp_attribute_maxbyte +6f08 196097fe increase -2 ,timeup +6f09 20407028 call dataelementtype6 +6f0a d8a0052a arg mem_sdp_attrib_list ,contw +6f0b 18000e00 force 0 ,queue + +ssa_req_loop: +6f0c e8c08000 ifetch 1 ,contr +6f0d c0056f36 beq sdp_attribute_range ,ssa_req_range +6f0e e8c10000 ifetch 2 ,contr +6f0f e0a10000 istore 2 ,contw +6f10 18e08e01 increase 1 ,queue +6f11 196097fd increase -3 ,timeup +6f12 1a20a3fd increase -3 ,rega +6f13 24216fc4 nbranch sdp_invalid_request_syntax ,positive +6f14 2422ef0c nbranch ssa_req_loop ,zero +6f15 196097ff increase -1 ,timeup +6f16 2422efc4 nbranch sdp_invalid_request_syntax ,zero +6f17 204052d0 call l2cap_get_sdp_tx_payload +6f18 18a08a0d increase 13 ,contw +6f19 68010511 fetch 2 ,mem_sdp_uuid_search_ptr +6f1a 98002600 iforce regc +6f1b da20052a arg mem_sdp_attrib_list ,rega + +ssa_req_attributelist_next: +6f1c ea210000 ifetch 2 ,rega +6f1d 203a6f29 branch ssa_req_attributelist_end ,blank +6f1e 98002400 iforce regb +6f1f 204070c6 call search_attrib +6f20 203a6f27 branch ssa_req_attributelist_notfound ,blank +6f21 18c08dfd increase -3 ,contr +6f22 e8c18000 ifetch 3 ,contr +6f23 e0a18000 istore 3 ,contw +6f24 2040705b call sdp_data_len +6f25 98007200 iforce loopcnt +6f26 20407f01 call memcpy + +ssa_req_attributelist_notfound: +6f27 1a20a202 increase 2 ,rega +6f28 20206f1c branch ssa_req_attributelist_next + +ssa_req_attributelist_end: +6f29 20406f83 call ssa_req_range_lastfreg +6f2a 68010275 fetch 2 ,mem_sdp_tx_pkt_length +6f2b c0077046 beq 14 ,ssa_empty_rsp +6f2c 20406f9a call ssa_req_range_attrbutes_length_no_continue +6f2d 20206f9a branch ssa_req_range_attrbutes_length_no_continue + +sdp_store_maxbyte: +6f2e e8c10000 ifetch 2 ,contr +6f2f 1ff0fe00 byteswap pdata ,pdata +6f30 1fe0fffd increase -3 ,pdata +6f31 d84000c8 arg 200 ,temp +6f32 98467c00 isub temp ,null +6f33 24610000 nrtn positive +6f34 580000c8 setarg 200 +6f35 20600000 rtn + +ssa_req_range: +6f36 18c08c04 increase 4 ,contr +6f37 196097fb increase -5 ,timeup +6f38 1a20a3fb increase -5 ,rega +6f39 2422efc4 nbranch sdp_invalid_request_syntax ,zero +6f3a 20406eaa call sdp_store_continue_common +6f3b 2422efbe nbranch sdp_invalid_pdu_size ,zero +6f3c d9600511 arg mem_sdp_uuid_search_ptr ,timeup +6f3d 20407082 call search_all_uuid +6f3e 18e27e00 deposit queue +6f3f 203a7046 branch ssa_empty_rsp ,blank +6f40 6000854e store 1 ,mem_handle_humber +6f41 1a427e00 copy regb ,pdata +6f42 6001054c store 2 ,mem_sdp_all_length +6f43 d8e00000 arg 0 ,queue +6f44 da200000 arg 0 ,rega +6f45 204052d0 call l2cap_get_sdp_tx_payload +6f46 18a08a0a increase 10 ,contw + +ssa_req_range_find_handle: +6f47 20406f6c call ssa_req_range_get_length +6f48 24342a8c nbranch assert ,user +6f49 18c21600 copy contr ,timeup +6f4a 1fe22600 copy pdata ,regc +6f4b 9a20a200 iadd rega ,rega +6f4c 68010519 fetch 2 ,mem_sdp_continue_byte +6f4d 1fe22400 copy pdata ,regb +6f4e 203a6f75 branch ssa_req_range_first_freg ,blank + +ssa_req_range_later_freg_with_continue: +6f4f 1a227e00 copy rega ,pdata +6f50 9a462400 isub regb ,regb +6f51 2022ef67 branch ssa_req_range_next_handle ,zero +6f52 24216f67 nbranch ssa_req_range_next_handle ,positive +6f53 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6f54 9a467c00 isub regb ,null +6f55 2022ef5e branch ssa_req_range_maxbyte_with_continue ,zero +6f56 24216f5e nbranch ssa_req_range_maxbyte_with_continue ,positive + +ssa_req_range_send_not_maxbyte: +6f57 1a427200 copy regb ,loopcnt +6f58 20406f61 call ssa_req_range_maxbyte_with_continue_cpy +6f59 6800854e fetch 1 ,mem_handle_humber +6f5a 18e08e01 increase 1 ,queue +6f5b 98e67c00 isub queue ,null +6f5c 2022ef83 branch ssa_req_range_lastfreg ,zero +6f5d 20206fa0 branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue: +6f5e 1fe27200 copy pdata ,loopcnt +6f5f 20406f61 call ssa_req_range_maxbyte_with_continue_cpy +6f60 20206fa0 branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue_cpy: +6f61 18a08bfd increase -3 ,contw +6f62 1f220400 copy loopcnt ,temp +6f63 1a627e00 copy regc ,pdata +6f64 9a467e00 isub regb ,pdata +6f65 99608c00 iadd timeup ,contr +6f66 20207f01 branch memcpy + +ssa_req_range_next_handle: +6f67 6800854e fetch 1 ,mem_handle_humber +6f68 18e08e01 increase 1 ,queue +6f69 98e67c00 isub queue ,null +6f6a 20628000 rtn zero +6f6b 20206f47 branch ssa_req_range_find_handle + +ssa_req_range_get_length: +6f6c 20407fe9 call disable_user +6f6d d8c0052a arg mem_sdp_handle_list ,contr +6f6e 18ebfe00 lshift2 queue ,pdata +6f6f 98c08c00 iadd contr ,contr +6f70 e8ca0000 ifetcht 4 ,contr +6f71 204070b1 call search_handle +6f72 24628000 nrtn zero +6f73 2040705b call sdp_data_len +6f74 20207fe7 branch enable_user + +ssa_req_range_first_freg: +6f75 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6f76 9a267c00 isub rega ,null +6f77 24216f8f nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +6f78 1a227200 copy rega ,loopcnt +6f79 1f220400 copy loopcnt ,temp +6f7a 19620c00 copy timeup ,contr +6f7b 20407f01 call memcpy +6f7c 6801054c fetch 2 ,mem_sdp_all_length +6f7d 9a267c00 isub rega ,null +6f7e 2022ef81 branch ssa_req_range_freg_no_continue ,zero + +ssa_req_range_firstfreg_not_maxbyte_with_continue: +6f7f 20406fa0 call ssa_req_range_freg_with_continue +6f80 20206f94 branch ssa_req_range_attrbutes_length + +ssa_req_range_freg_no_continue: +6f81 20406f83 call ssa_req_range_lastfreg +6f82 20206f94 branch ssa_req_range_attrbutes_length + +ssa_req_range_lastfreg: +6f83 da200007 arg sdp_searchattrib_res ,rega + +ssa_req_range_lastfreg_common: +6f84 18007e00 force 0 ,pdata +6f85 e0a08000 istore 1 ,contw +6f86 20406fb0 call ssa_req_range_common +6f87 68090275 fetcht 2 ,mem_sdp_tx_pkt_length +6f88 184085fb increase -5 ,temp +6f89 1850fe00 byteswap temp ,pdata +6f8a e0a10000 istore 2 ,contw +6f8b 184085fd increase -3 ,temp +6f8c 1850fe00 byteswap temp ,pdata +6f8d e0a10000 istore 2 ,contw +6f8e 20600000 rtn + +ssa_req_range_firstfreg_maxbyte_with_continue: +6f8f 1fe27200 copy pdata ,loopcnt +6f90 1f220400 copy loopcnt ,temp +6f91 19620c00 copy timeup ,contr +6f92 20407f01 call memcpy +6f93 20406fa0 call ssa_req_range_freg_with_continue + +ssa_req_range_attrbutes_length: +6f94 58000036 setarg 0x36 +6f95 e0a08000 istore 1 ,contw +6f96 6801054c fetch 2 ,mem_sdp_all_length +6f97 1ff0fe00 byteswap pdata ,pdata +6f98 e0a10000 istore 2 ,contw +6f99 20600000 rtn + +ssa_req_range_attrbutes_length_no_continue: +6f9a 58000036 setarg 0x36 +6f9b e0a08000 istore 1 ,contw +6f9c 184085fd increase -3 ,temp +6f9d 1850fe00 byteswap temp ,pdata +6f9e e0a10000 istore 2 ,contw +6f9f 20600000 rtn + +ssa_req_range_freg_with_continue: +6fa0 da200007 arg sdp_searchattrib_res ,rega +6fa1 58000002 setarg 2 +6fa2 e0a08000 istore 1 ,contw +6fa3 68010519 fetch 2 ,mem_sdp_continue_byte +6fa4 98408400 iadd temp ,temp +6fa5 1850fe00 byteswap temp ,pdata +6fa6 e0a10000 istore 2 ,contw +6fa7 20406fb0 call ssa_req_range_common +6fa8 68090275 fetcht 2 ,mem_sdp_tx_pkt_length +6fa9 184085fb increase -5 ,temp +6faa 1850fe00 byteswap temp ,pdata +6fab e0a10000 istore 2 ,contw +6fac 184085fb increase -5 ,temp +6fad 1850fe00 byteswap temp ,pdata +6fae e0a10000 istore 2 ,contw +6faf 20600000 rtn + +ssa_req_range_common: +6fb0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr +6fb1 98a67e00 isub contw ,pdata +6fb2 1fe67e00 sub pdata ,0 ,pdata +6fb3 60010275 store 2 ,mem_sdp_tx_pkt_length +6fb4 204052d0 call l2cap_get_sdp_tx_payload +6fb5 1a227e00 copy rega ,pdata +6fb6 e0a08000 istore 1 ,contw +6fb7 6801051c fetch 2 ,mem_sdp_transactionid +6fb8 e0a10000 istore 2 ,contw +6fb9 20600000 rtn + +sdp_process_ssa_res: + +sdp_process_ss_res: + +sdp_process_sa_res: + +sdp_process_error_res: +6fba 20600000 rtn + +sdp_invalid_service_record_handle: +6fbb 58000200 setarg 0x0200 +6fbc 6001054a store 2 ,mem_sdp_error_code +6fbd 20206fc6 branch sdp_error_response + +sdp_invalid_pdu_size: +6fbe 58000400 setarg 0x0400 +6fbf 6001054a store 2 ,mem_sdp_error_code +6fc0 20206fc6 branch sdp_error_response + +sdp_insufficient_resource: +6fc1 58000600 setarg 0x0600 +6fc2 6001054a store 2 ,mem_sdp_error_code +6fc3 20206fc6 branch sdp_error_response + +sdp_invalid_request_syntax: +6fc4 58000300 setarg 0x0300 +6fc5 6001054a store 2 ,mem_sdp_error_code + +sdp_error_response: +6fc6 204052d0 call l2cap_get_sdp_tx_payload +6fc7 e0a08000 istore 1 ,contw +6fc8 6801051c fetch 2 ,mem_sdp_transactionid +6fc9 e0a10000 istore 2 ,contw +6fca 58000200 setarg 0x0200 +6fcb e0a10000 istore 2 ,contw +6fcc 6801054a fetch 2 ,mem_sdp_error_code +6fcd e0a10000 istore 2 ,contw +6fce 70027507 jam 7 ,mem_sdp_tx_pkt_length +6fcf 20600000 rtn + +ask_serviceclassid: +6fd0 da400000 arg 0 ,regb +6fd1 18000400 force 0 ,temp +6fd2 d8a00511 arg mem_sdp_uuid_search_ptr ,contw +6fd3 20407028 call dataelementtype6 +6fd4 2022f026 branch asksrv_error ,zero + +classidloop: +6fd5 1a40a401 increase 1 ,regb +6fd6 e8c08000 ifetch 1 ,contr +6fd7 1a20a3ff increase -1 ,rega +6fd8 196097ff increase -1 ,timeup +6fd9 2fe1f018 compare 0x18 ,pdata ,0xf8 +6fda 2420f026 nbranch asksrv_error ,true +6fdb 2fe00e04 compare 0x04 ,pdata ,0x07 +6fdc 2420eff3 nbranch cmp032 ,true +6fdd 18000401 force 1 ,temp + +skip2bytes: +6fde e8c08000 ifetch 1 ,contr +6fdf 1a20a3ff increase -1 ,rega +6fe0 196097ff increase -1 ,timeup +6fe1 c0806fe7 bne 0x00 ,frstbwrong +6fe2 e8c08000 ifetch 1 ,contr +6fe3 1a20a3ff increase -1 ,rega +6fe4 196097ff increase -1 ,timeup +6fe5 c0006ff8 beq 0x00 ,cmpuuid +6fe6 20206fea branch scndbwrong + +frstbwrong: +6fe7 18c08c01 increase 1 ,contr +6fe8 1a20a3ff increase -1 ,rega +6fe9 196097ff increase -1 ,timeup + +scndbwrong: +6fea 18c08c02 increase 2 ,contr +6feb 1a20a3fe increase -2 ,rega +6fec 196097fe increase -2 ,timeup +6fed 2841fe00 compare 0x00 ,temp ,0xff +6fee 2020f020 branch loopornot ,true +6fef 18c08c0c increase 12 ,contr +6ff0 1a20a3f4 increase -12 ,rega +6ff1 196097f4 increase -12 ,timeup +6ff2 20207020 branch loopornot + +cmp032: +6ff3 2fe00e02 compare 0x02 ,pdata ,0x07 +6ff4 2420eff6 nbranch cmp016 ,true +6ff5 20206fde branch skip2bytes + +cmp016: +6ff6 2fe00e01 compare 0x01 ,pdata ,0x07 +6ff7 2420f026 nbranch asksrv_error ,true + +cmpuuid: +6ff8 1a20a3fe increase -2 ,rega +6ff9 196097fe increase -2 ,timeup +6ffa e8c10000 ifetch 2 ,contr +6ffb 1a467c04 sub regb ,4 ,null +6ffc 2022effe branch uuidsize ,zero +6ffd e0a10000 istore 2 ,contw + +uuidsize: +6ffe 2841fe00 compare 0x00 ,temp ,0xff +6fff 2020f020 branch loopornot ,true +7000 18c20400 copy contr ,temp +7001 e8c08000 ifetch 1 ,contr +7002 c0807019 bne 0x00 ,wrong12b +7003 e8c08000 ifetch 1 ,contr +7004 c0807019 bne 0x00 ,wrong12b +7005 e8c08000 ifetch 1 ,contr +7006 c0887019 bne 0x10 ,wrong12b +7007 e8c08000 ifetch 1 ,contr +7008 c0807019 bne 0x00 ,wrong12b +7009 e8c08000 ifetch 1 ,contr +700a c0c07019 bne 0x80 ,wrong12b +700b e8c08000 ifetch 1 ,contr +700c c0807019 bne 0x00 ,wrong12b +700d e8c08000 ifetch 1 ,contr +700e c0807019 bne 0x00 ,wrong12b +700f e8c08000 ifetch 1 ,contr +7010 c0c07019 bne 0x80 ,wrong12b +7011 e8c08000 ifetch 1 ,contr +7012 c0aff019 bne 0x5f ,wrong12b +7013 e8c08000 ifetch 1 ,contr +7014 c0cdf019 bne 0x9b ,wrong12b +7015 e8c08000 ifetch 1 ,contr +7016 c09a7019 bne 0x34 ,wrong12b +7017 e8c08000 ifetch 1 ,contr +7018 c07df01e beq 0xfb ,chck12dn + +wrong12b: +7019 18420c00 copy temp ,contr + +wrong12b1: +701a 18c08c0c increase 12 ,contr +701b 18000e00 force 0x00 ,queue +701c 18000400 force 0x00 ,temp +701d 2020701e branch chck12dn + +chck12dn: +701e 196097f4 increase -12 ,timeup +701f 1a20a3f4 increase -12 ,rega + +loopornot: +7020 18000400 force 0x00 ,temp +7021 2a21fe00 compare 0x00 ,rega ,0xff +7022 2420efd5 nbranch classidloop ,true +7023 18007e00 force 0 ,pdata +7024 e0a10000 istore 2 ,contw +7025 20600000 rtn + +asksrv_error: +7026 d84000ff arg 0xff ,temp +7027 20600000 rtn + +dataelementtype6: +7028 476a403a bpatchx patch3a_4 ,mem_patch3a +7029 e8c08000 ifetch 1 ,contr +702a 196097ff increase -1 ,timeup +702b 2fe1f030 compare 0x30 ,pdata ,0xf8 +702c 2420f03e nbranch dsize_error ,true +702d 2fe00e07 compare 0x07 ,pdata ,0x07 +702e 2020f037 branch dsize32 ,true +702f 2fe00e06 compare 0x06 ,pdata ,0x07 +7030 2020f039 branch dsize16 ,true +7031 2fe00e05 compare 0x05 ,pdata ,0x07 +7032 2420f03e nbranch dsize_error ,true +7033 e8c08000 ifetch 1 ,contr +7034 1fe22200 copy pdata ,rega +7035 196097ff increase -1 ,timeup +7036 2020703c branch dsize + +dsize32: +7037 18c08c02 increase 2 ,contr +7038 196097fe increase -2 ,timeup + +dsize16: +7039 e8c10000 ifetch 2 ,contr +703a 1ff0a200 byteswap pdata ,rega +703b 196097fe increase -2 ,timeup + +dsize: +703c 18007e01 force 0x01 ,pdata +703d 20600000 rtn + +dsize_error: +703e 18007e00 force 0x00 ,pdata +703f 20600000 rtn + +ss_empty_rsp: +7040 58000003 setarg sdp_search_res +7041 6000851b store 1 ,mem_sdp_pduid +7042 20207048 branch empty_response + +sa_empty_rsp: +7043 58000005 setarg sdp_attribute_res +7044 6000851b store 1 ,mem_sdp_pduid +7045 20207048 branch empty_response + +ssa_empty_rsp: +7046 58000007 setarg sdp_searchattrib_res +7047 6000851b store 1 ,mem_sdp_pduid + +empty_response: +7048 204052d0 call l2cap_get_sdp_tx_payload +7049 6800851b fetch 1 ,mem_sdp_pduid +704a 1fe22400 copy pdata ,regb +704b e0a08000 istore 1 ,contw +704c 6801051c fetch 2 ,mem_sdp_transactionid +704d e0a10000 istore 2 ,contw +704e 58000500 setarg 0x0500 +704f e0a10000 istore 2 ,contw +7050 2a41fe05 compare sdp_attribute_res ,regb ,0xff +7051 2020f057 branch fullsearch ,true +7052 2a41fe07 compare sdp_searchattrib_res ,regb ,0xff +7053 2020f057 branch fullsearch ,true +7054 58000000 setarg 0x000000 +7055 e0a28000 istore 5 ,contw +7056 20207059 branch outempty + +fullsearch: +7057 58350200 setarg 0x350200 +7058 e0a28000 istore 5 ,contw + +outempty: +7059 7002750a jam 10 ,mem_sdp_tx_pkt_length +705a 20600000 rtn + +sdp_data_len: +705b 20407ea2 call store_contw +705c 20407ea5 call store_contr +705d 20407062 call sdp_get_data +705e 20407e9c call get_contw +705f 20407e9f call get_contr +7060 18427e00 copy temp ,pdata +7061 20600000 rtn + +sdp_get_data: +7062 e8c08000 ifetch 1 ,contr +7063 1fe17207 and pdata ,0x7 ,loopcnt +7064 1fe97e00 rshift3 pdata ,pdata +7065 c080706c bne 0 ,sdp_get_data_type_not0 + +sdp_get_data_type0: +7066 18007e01 force 1 ,pdata +7067 18000401 force 1 ,temp +7068 20600000 rtn + +sdp_get_data_type_not0_sizeindex01234: +7069 20407e76 call left_shift_n +706a 1fe08401 add pdata ,1 ,temp +706b 20600000 rtn + +sdp_get_data_type_not0: +706c 1f227e00 deposit loopcnt +706d 1fe67c04 sub pdata ,4 ,null +706e 20217069 branch sdp_get_data_type_not0_sizeindex01234 ,positive +706f c002f073 beq 5 ,sdp_get_data_type_not0_sizeindex5 +7070 c0037076 beq 6 ,sdp_get_data_type_not0_sizeindex6 +7071 c003f07a beq 7 ,sdp_get_data_type_not0_sizeindex7 +7072 20600000 rtn + +sdp_get_data_type_not0_sizeindex5: +7073 e8c08000 ifetch 1 ,contr +7074 1fe08402 add pdata ,2 ,temp +7075 20600000 rtn + +sdp_get_data_type_not0_sizeindex6: +7076 e8c10000 ifetch 2 ,contr +7077 1ff0fe00 byteswap pdata ,pdata +7078 1fe08403 add pdata ,3 ,temp +7079 20600000 rtn + +sdp_get_data_type_not0_sizeindex7: +707a e8c10000 ifetch 2 ,contr +707b 1ff0fe00 byteswap pdata ,pdata +707c e8c90000 ifetcht 2 ,contr +707d 18508400 byteswap temp ,temp +707e 18500400 lshift16 temp ,temp +707f 9840fe00 iadd temp ,pdata +7080 1fe08405 add pdata ,5 ,temp +7081 20600000 rtn + +search_all_uuid: +7082 476ac03a bpatchx patch3a_5 ,mem_patch3a +7083 18000e00 force 0 ,queue +7084 da400000 arg 0 ,regb +7085 d8a0052a arg mem_sdp_handle_list ,contw + +search_all_uuid_llop: +7086 e9610000 ifetch 2 ,timeup +7087 207a0000 rtn blank +7088 2040708d call search_uuid +7089 18e27e00 copy queue ,pdata +708a c1038000 rtneq sdp_max_handle_number +708b 19609602 increase 2 ,timeup +708c 20207086 branch search_all_uuid_llop + +search_uuid: +708d 98002600 iforce regc +708e 68014575 fetch 2 ,mem_ui_uuid_table +708f 98000c00 iforce contr + +search_uuid_next: +7090 18e27e00 copy queue ,pdata +7091 c1038000 rtneq sdp_max_handle_number +7092 78547c00 disable user +7093 e8c08000 ifetch 1 ,contr +7094 207a0000 rtn blank +7095 98007200 iforce loopcnt + +search_uuid_loop: +7096 e8c10000 ifetch 2 ,contr +7097 9a667c00 isub regc ,null +7098 2422f09a nbranch search_uuid_not_found ,zero +7099 78347c00 enable user + +search_uuid_not_found: +709a c2007096 loop search_uuid_loop +709b e8ca0000 ifetcht 4 ,contr +709c 18c22200 copy contr ,rega +709d 243470ad nbranch search_uuid_nomatch ,user +709e d8c0052a arg mem_sdp_handle_list ,contr +709f df200007 arg sdp_max_handle_number ,loopcnt + +search_uuid_check_same_handle: +70a0 e8c20000 ifetch 4 ,contr +70a1 203a70a6 branch search_uuid_store_handle ,blank +70a2 98467c00 isub temp ,null +70a3 2022f0ad branch search_uuid_nomatch ,zero +70a4 c20070a0 loop search_uuid_check_same_handle +70a5 20600000 rtn + +search_uuid_store_handle: +70a6 e0aa0000 istoret 4 ,contw +70a7 18e08e01 increase 1 ,queue +70a8 1a220c00 copy rega ,contr +70a9 2040705b call sdp_data_len +70aa 9a40a400 iadd regb ,regb +70ab 98c08c00 iadd contr ,contr +70ac 20207090 branch search_uuid_next + +search_uuid_nomatch: +70ad 1a220c00 copy rega ,contr +70ae 20407062 call sdp_get_data +70af 98c08c00 iadd contr ,contr +70b0 20207090 branch search_uuid_next + +search_handle: +70b1 476b403a bpatchx patch3a_6 ,mem_patch3a +70b2 68014575 fetch 2 ,mem_ui_uuid_table +70b3 98000c00 iforce contr + +search_handle_loop: +70b4 e8c08000 ifetch 1 ,contr +70b5 203a7fe3 branch disable_zero ,blank +70b6 1fe3fe00 lshift pdata ,pdata +70b7 98c08c00 iadd contr ,contr +70b8 e8c20000 ifetch 4 ,contr +70b9 98467c00 isub temp ,null +70ba 20628000 rtn zero +70bb 18a27e00 deposit contw +70bc 60010abb store 2 ,mem_contw +70bd 600c0aa2 storet 8 ,mem_temp +70be 20407062 call sdp_get_data +70bf 98c08c00 iadd contr ,contr +70c0 18c27e00 copy contr ,pdata +70c1 68090abb fetcht 2 ,mem_contw +70c2 18420a00 copy temp ,contw +70c3 680c0aa2 fetcht 8 ,mem_temp +70c4 1fe20c00 copy pdata ,contr +70c5 202070b4 branch search_handle_loop + +search_attrib: +70c6 476bc03a bpatchx patch3a_7 ,mem_patch3a +70c7 68014575 fetch 2 ,mem_ui_uuid_table +70c8 98000c00 iforce contr + +search_attrib_next: +70c9 e8c08000 ifetch 1 ,contr +70ca 203a70e4 branch search_attrib_end ,blank +70cb 98007200 iforce loopcnt + +search_attrib_loop: +70cc e8c10000 ifetch 2 ,contr +70cd 9a667c00 isub regc ,null +70ce 2022f0d4 branch search_attrib_found_uuid ,zero +70cf c20070cc loop search_attrib_loop +70d0 18c08c04 increase 4 ,contr +70d1 20407062 call sdp_get_data +70d2 98c08c00 iadd contr ,contr +70d3 202070c9 branch search_attrib_next + +search_attrib_found_uuid: +70d4 1f20f3ff increase -1 ,loopcnt +70d5 1f23fe00 lshift loopcnt ,pdata +70d6 98c08c00 iadd contr ,contr +70d7 18c08c04 increase 4 ,contr +70d8 20407062 call sdp_get_data +70d9 98c09600 iadd contr ,timeup + +search_attrib_loop_attribs: +70da 18c08c01 increase 1 ,contr +70db e8c10000 ifetch 2 ,contr +70dc 9a467c00 isub regb ,null +70dd 2022ffef branch disable_blank ,zero +70de 2040705b call sdp_data_len +70df 98c08c00 iadd contr ,contr +70e0 19627e00 deposit timeup +70e1 98c67c00 isub contr ,null +70e2 2022f0e4 branch search_attrib_end ,zero +70e3 202070da branch search_attrib_loop_attribs + +search_attrib_end: +70e4 18000c00 force 0 ,contr +70e5 18007e00 force 0 ,pdata +70e6 20600000 rtn + +search_handle_attrib: +70e7 476c403b bpatchx patch3b_0 ,mem_patch3b +70e8 68014575 fetch 2 ,mem_ui_uuid_table +70e9 98000c00 iforce contr + +search_handle_attrib_next: +70ea e8c08000 ifetch 1 ,contr +70eb 203a7100 branch search_handle_attrib_end ,blank +70ec 1fe3fe00 lshift pdata ,pdata +70ed 98c08c00 iadd contr ,contr +70ee e8c20000 ifetch 4 ,contr +70ef 98467c00 isub temp ,null +70f0 2022f0f4 branch search_handl_attrib_found_handle ,zero +70f1 20407062 call sdp_get_data +70f2 98c08c00 iadd contr ,contr +70f3 202070ea branch search_handle_attrib_next + +search_handl_attrib_found_handle: +70f4 20407062 call sdp_get_data +70f5 98c09600 iadd contr ,timeup + +search_handle_attrib_loop_attribs: +70f6 18c08c01 increase 1 ,contr +70f7 e8c10000 ifetch 2 ,contr +70f8 9a467c00 isub regb ,null +70f9 20628000 rtn zero +70fa 2040705b call sdp_data_len +70fb 98c08c00 iadd contr ,contr +70fc 19627e00 deposit timeup +70fd 98c67c00 isub contr ,null +70fe 2022f100 branch search_handle_attrib_end ,zero +70ff 202070f6 branch search_handle_attrib_loop_attribs + +search_handle_attrib_end: +7100 18000c00 force 0 ,contr +7101 20600000 rtn + +search_rfcomm_cn: +7102 da400400 arg 0x0400 ,regb +7103 204070f4 call search_handl_attrib_found_handle +7104 da400300 arg 0x0300 ,regb +7105 2040710d call search_uuid_in_data +7106 24740000 nrtn user +7107 1a267c03 sub rega ,3 ,null +7108 20217fe9 branch disable_user ,positive +7109 e8c08000 ifetch 1 ,contr +710a c0847fe9 bne 0x08 ,disable_user +710b e8c08000 ifetch 1 ,contr +710c 20600000 rtn + +search_uuid_in_data: +710d 476cc03b bpatchx patch3b_1 ,mem_patch3b +710e 20407062 call sdp_get_data +710f 1fe22200 copy pdata ,rega + +search_uuid_in_data_loop: +7110 e8c08000 ifetch 1 ,contr +7111 1fe17207 and pdata ,0x7 ,loopcnt +7112 1fe97e00 rshift3 pdata ,pdata +7113 1fe67c03 sub pdata ,3 ,null +7114 2022f129 branch search_uuid_in_data_found_uuid ,zero +7115 1f227e00 copy loopcnt ,pdata +7116 c002f120 beq 5 ,search_uuid_in_data_found_element_index5 +7117 c0037123 beq 6 ,search_uuid_in_data_found_element_index6 +7118 c003f126 beq 7 ,search_uuid_in_data_found_element_index7 +7119 18c08dff increase -1 ,contr +711a 20407062 call sdp_get_data +711b 98c08c00 iadd contr ,contr +711c 1a227e00 copy rega ,pdata +711d 98462200 isub temp ,rega +711e 2022ffe9 branch disable_user ,zero +711f 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index5: +7120 1a20a3fe increase -2 ,rega +7121 18c08c01 increase 1 ,contr +7122 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index6: +7123 1a20a3fd increase -3 ,rega +7124 18c08c02 increase 2 ,contr +7125 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index7: +7126 1a20a3fb increase -5 ,rega +7127 18c08c04 increase 4 ,contr +7128 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_uuid: +7129 1a20a3ff increase -1 ,rega +712a 1f227e00 copy loopcnt ,pdata +712b c000f132 beq 1 ,search_uuid_in_data_type_uuid_16 +712c c0017130 beq 2 ,search_uuid_in_data_type_uuid_32 +712d c002712f beq 4 ,search_uuid_in_data_type_uuid_128 +712e 20207fe9 branch disable_user + +search_uuid_in_data_type_uuid_128: +712f 1a20a3f4 increase -12 ,rega + +search_uuid_in_data_type_uuid_32: +7130 e8c10000 ifetch 2 ,contr +7131 1a20a3fe increase -2 ,rega + +search_uuid_in_data_type_uuid_16: +7132 e8c10000 ifetch 2 ,contr +7133 9a467c00 isub regb ,null +7134 2022ffe7 branch enable_user ,zero +7135 1a20a3fe increase -2 ,rega +7136 2022ffe9 branch disable_user ,zero +7137 20207110 branch search_uuid_in_data_loop + +sdp_send_spp_request: +7138 204052d0 call l2cap_get_sdp_tx_payload +7139 1fe20a00 copy pdata ,contw +713a 58000006 setarg 6 +713b e0a08000 istore 1 ,contw +713c 5800006e setarg sdp_tid_spp +713d e0a10000 istore 2 ,contw +713e 58000f00 setarg 0x0f00 +713f e0a10000 istore 2 ,contw +7140 581a0535 setarg 0x1a0535 +7141 e0a18000 istore 3 ,contw +7142 58000111 setarg 0x0111 +7143 1ff07e00 lshift16 pdata ,pdata +7144 e0a20000 istore 4 ,contw +7145 58002600 setarg 0x2600 +7146 e0a10000 istore 2 ,contw +7147 58000335 setarg 0x0335 +7148 e0a10000 istore 2 ,contw +7149 58000009 setarg 0x0009 +714a e0a10000 istore 2 ,contw +714b 58000004 setarg 0x0004 +714c e0a10000 istore 2 ,contw +714d 70027514 jam 0x14 ,mem_sdp_tx_pkt_length +714e 20600000 rtn + +function_g2: +714f 476d403b bpatchx patch3b_2 ,mem_patch3b +7150 7005e550 jam 80 ,mem_aes_cmac_data_length +7151 d8a005e6 arg memdat ,contw +7152 d8c0443a arg mem_le_srand ,contr +7153 20407ebf call memcpy16 +7154 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +7155 20407ebd call memcpy32 +7156 d8c009be arg mem_le_pubkey_remote_x_256 ,contr +7157 20407ebd call memcpy32 +7158 2040720a call inverse_memdat +7159 d8c0042f arg mem_le_mrand ,contr +715a 20407205 call store_inverse_k +715b 204071d0 call function_aes_cmac +715c d8a00af2 arg mem_aes_cmac_temp ,contw +715d 20407201 call load_inverse_result +715e 580f4240 setarg 1000000 +715f 1fe22200 copy pdata ,rega +7160 68020af2 fetch 4 ,mem_aes_cmac_temp +7161 9a26fc00 idiv rega +7162 20407f86 call wait_div_end +7163 18077e00 remainder pdata +7164 600209ba store 4 ,mem_gkey +7165 20600000 rtn + +function_f6_eb: +7166 7005e541 jam 65 ,mem_aes_cmac_data_length +7167 d8a005e6 arg memdat ,contw +7168 204071b5 call store_addr_common_a +7169 204071b0 call store_addr_common_b +716a 6801c454 fetch 3 ,mem_le_pres + 1 +716b e0a18000 istore 3 ,contw +716c 20407176 call get_r +716d d8c0042f arg mem_le_mrand ,contr +716e 20407ebf call memcpy16 +716f d8c0443a arg mem_le_srand ,contr +7170 20407ebf call memcpy16 +7171 2040720a call inverse_memdat +7172 d8c00b12 arg mem_le_mackey ,contr +7173 d8a00ac2 arg mem_aes_cmac_k ,contw +7174 20407ebf call memcpy16 +7175 202071d0 branch function_aes_cmac + +get_r: +7176 680244c7 fetch 4 ,mem_le_tk +7177 e0a20000 istore 4 ,contw +7178 20407ecd call memset0_4 +7179 20207eca branch memset0_8 + +function_f6_ea: +717a 476dc03b bpatchx patch3b_3 ,mem_patch3b +717b 7005e541 jam 65 ,mem_aes_cmac_data_length +717c d8a005e6 arg memdat ,contw +717d 204071b0 call store_addr_common_b +717e 204071b5 call store_addr_common_a +717f 6801c44d fetch 3 ,mem_le_preq + 1 +7180 e0a18000 istore 3 ,contw +7181 20407176 call get_r +7182 d8c0443a arg mem_le_srand ,contr +7183 20407ebf call memcpy16 +7184 d8c0042f arg mem_le_mrand ,contr +7185 20407ebf call memcpy16 +7186 2040720a call inverse_memdat +7187 d8c00b12 arg mem_le_mackey ,contr +7188 d8a00ac2 arg mem_aes_cmac_k ,contw +7189 20407ebf call memcpy16 +718a 204071d0 call function_aes_cmac +718b d8a00af2 arg mem_aes_cmac_temp ,contw +718c 20207201 branch load_inverse_result + +function_f5: +718d 7005e520 jam 32 ,mem_aes_cmac_data_length +718e d8c009fe arg mem_le_dhkey_256 ,contr +718f d8a005e6 arg memdat ,contw +7190 20407ebd call memcpy32 +7191 2040720a call inverse_memdat +7192 d8c0099e arg mem_le_slat ,contr +7193 20407205 call store_inverse_k +7194 204071d0 call function_aes_cmac +7195 d8a00ac2 arg mem_aes_cmac_k ,contw +7196 20407497 call store_aes_result +7197 d8400001 arg 1 ,temp +7198 2040719f call function_f5_common +7199 d8a04419 arg mem_le_ltk ,contw +719a 20407201 call load_inverse_result +719b d8400000 arg 0 ,temp +719c 2040719f call function_f5_common +719d d8a00b12 arg mem_le_mackey ,contw +719e 20207497 branch store_aes_result + +function_f5_common: +719f 476e403b bpatchx patch3b_4 ,mem_patch3b +71a0 7005e535 jam 53 ,mem_aes_cmac_data_length +71a1 58000100 setarg 0x100 +71a2 600105e6 store 2 ,memdat +71a3 204071b0 call store_addr_common_b +71a4 204071b5 call store_addr_common_a +71a5 d8c0443a arg mem_le_srand ,contr +71a6 20407ebf call memcpy16 +71a7 d8c0042f arg mem_le_mrand ,contr +71a8 20407ebf call memcpy16 +71a9 58006c65 setarg 0x6c65 +71aa e0a10000 istore 2 ,contw +71ab 58006274 setarg 0x6274 +71ac e0a10000 istore 2 ,contw +71ad e0a88000 istoret 1 ,contw +71ae 2040720a call inverse_memdat +71af 202071d0 branch function_aes_cmac + +store_addr_common_b: +71b0 680344a0 fetch 6 ,mem_le_lap +71b1 e0a30000 istore 6 ,contw +71b2 6800c495 fetch 1 ,mem_le_conn_own_addr_type +71b3 e0a08000 istore 1 ,contw +71b4 20600000 rtn + +store_addr_common_a: +71b5 6803044f fetch 6 ,mem_le_plap +71b6 e0a30000 istore 6 ,contw +71b7 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +71b8 e0a08000 istore 1 ,contw +71b9 20600000 rtn + +function_f4_ca: +71ba 7005e541 jam 65 ,mem_aes_cmac_data_length +71bb 6800c664 fetch 1 ,mem_passkey_1bit +71bc 600085e6 store 1 ,memdat +71bd d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +71be 20407ebd call memcpy32 +71bf d8c009be arg mem_le_pubkey_remote_x_256 ,contr +71c0 20407ebd call memcpy32 +71c1 2040720a call inverse_memdat +71c2 d8c0042f arg mem_le_mrand ,contr +71c3 20407205 call store_inverse_k +71c4 202071d0 branch function_aes_cmac + +function_f4_cb: +71c5 7005e541 jam 65 ,mem_aes_cmac_data_length +71c6 6800c664 fetch 1 ,mem_passkey_1bit +71c7 600085e6 store 1 ,memdat +71c8 d8c009be arg mem_le_pubkey_remote_x_256 ,contr +71c9 20407ebd call memcpy32 +71ca d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +71cb 20407ebd call memcpy32 +71cc 2040720a call inverse_memdat +71cd d8c0443a arg mem_le_srand ,contr +71ce 20407205 call store_inverse_k +71cf 202071d0 branch function_aes_cmac + +function_aes_cmac: +71d0 476ec03b bpatchx patch3b_5 ,mem_patch3b +71d1 2040721f call function_aes_cmac_generate_subkey +71d2 680085e5 fetch 1 ,mem_aes_cmac_data_length +71d3 1fe20400 copy pdata ,temp + +function_ceil16: +71d4 1fe0fe0f increase 15 ,pdata +71d5 1ff1fe00 rshift4 pdata ,pdata +71d6 1fe22400 copy pdata ,regb +71d7 203a71e2 branch function_aes_cmac_set_flag_0_balnk ,blank +71d8 18417e0f and temp ,0x0f ,pdata +71d9 243a71e5 nbranch function_aes_cmac_set_flag_0 ,blank +71da da600ad2 arg mem_aes_cmac_k1 ,regc +71db dfe005e6 arg memdat ,pdata +71dc 1fe0fff0 increase -16 ,pdata +71dd 9840a200 iadd temp ,rega +71de d8a00b02 arg mem_aes_cmac_m_last ,contw +71df df200004 arg 4 ,loopcnt +71e0 20407edd call xor_loop +71e1 202071f0 branch function_aes_cmac_aes + +function_aes_cmac_set_flag_0_balnk: +71e2 da400001 arg 1 ,regb +71e3 da200000 arg 0 ,rega +71e4 202071e6 branch function_aes_cmac_set_flag_0_common + +function_aes_cmac_set_flag_0: +71e5 1841220f and temp ,0x0f ,rega + +function_aes_cmac_set_flag_0_common: +71e6 dfe005e6 arg memdat ,pdata +71e7 9840fe00 iadd temp ,pdata +71e8 9a260c00 isub rega ,contr +71e9 d8a00af2 arg mem_aes_cmac_temp ,contw +71ea 20407245 call function_aes_cmac_padding +71eb da600ae2 arg mem_aes_cmac_k2 ,regc +71ec da200af2 arg mem_aes_cmac_temp ,rega +71ed d8a00b02 arg mem_aes_cmac_m_last ,contw +71ee df200004 arg 4 ,loopcnt +71ef 20407edd call xor_loop + +function_aes_cmac_aes: +71f0 20407491 call aes_clear_data +71f1 20407428 call aes_init +71f2 d8c005e6 arg memdat ,contr + +function_aes_cmac_aes_loop: +71f3 1a40a5ff increase -1 ,regb +71f4 1a427e00 deposit regb +71f5 203a71f9 branch function_aes_cmac_aes_loop_end ,blank +71f6 20407486 call load_data128 +71f7 20407422 call do_aes_cbc +71f8 202071f3 branch function_aes_cmac_aes_loop + +function_aes_cmac_aes_loop_end: +71f9 d8a00af2 arg mem_aes_cmac_temp ,contw +71fa 20407497 call store_aes_result +71fb d8c00b02 arg mem_aes_cmac_m_last ,contr +71fc 20407486 call load_data128 +71fd 20407428 call aes_init +71fe d8c00af2 arg mem_aes_cmac_temp ,contr +71ff 20407486 call load_data128 +7200 20207422 branch do_aes_cbc + +load_inverse_result: +7201 18a22200 copy contw ,rega +7202 20407497 call store_aes_result +7203 df200010 arg 16 ,loopcnt +7204 20207ee5 branch inverse_data + +store_inverse_k: +7205 d8a00ac2 arg mem_aes_cmac_k ,contw +7206 20407ebf call memcpy16 + +inverse_k: +7207 df200010 arg 16 ,loopcnt +7208 da200ac2 arg mem_aes_cmac_k ,rega +7209 20207ee5 branch inverse_data + +inverse_memdat: +720a 680085e5 fetch 1 ,mem_aes_cmac_data_length +720b 1fe27200 copy pdata ,loopcnt +720c da2005e6 arg memdat ,rega +720d 20207ee5 branch inverse_data + +bn_lshift_0_inverse: +720e ea208000 ifetch 1 ,rega +720f 1fe3fe00 lshift pdata ,pdata +7210 2a6ffe00 isolate1 0 ,regc +7211 7920fe00 setflag true ,0 ,pdata +7212 2feffe08 isolate1 8 ,pdata +7213 7920a600 setflag true ,0 ,regc +7214 e2208000 istore 1 ,rega +7215 1a20a3ff increase -1 ,rega +7216 c200720e loop bn_lshift_0_inverse +7217 20600000 rtn + +function_aes_cmac_k1_inverse: +7218 da200ad2 arg mem_aes_cmac_k1 ,rega + +function_aes_cmac_inverse_common: +7219 1a20a20f increase 15 ,rega +721a 18007210 force 16 ,loopcnt +721b 18002600 force 0 ,regc +721c 2020720e branch bn_lshift_0_inverse + +function_aes_cmac_k2_inverse: +721d da200ae2 arg mem_aes_cmac_k2 ,rega +721e 20207219 branch function_aes_cmac_inverse_common + +function_aes_cmac_generate_subkey: +721f d8c00ac2 arg mem_aes_cmac_k ,contr +7220 20407484 call load_key +7221 18007008 force regidx_xor ,regext_index +7222 20407492 call aes_clear +7223 20407491 call aes_clear_data +7224 2040741f call do_aes_ocb +7225 d8a00ad2 arg mem_aes_cmac_k1 ,contw +7226 20407497 call store_aes_result + +function_aes_cmac_k1: +7227 476f403b bpatchx patch3b_6 ,mem_patch3b +7228 68008ad2 fetch 1 ,mem_aes_cmac_k1 +7229 2feffe07 isolate1 7 ,pdata +722a 2420f230 nbranch function_aes_cmac_k1_0 ,true +722b 20407218 call function_aes_cmac_k1_inverse +722c da600ad2 arg mem_aes_cmac_k1 ,regc +722d d8a00ad2 arg mem_aes_cmac_k1 ,contw +722e 2040723a call function_aes_cmac_xor_rb +722f 20207231 branch function_aes_cmac_k2 + +function_aes_cmac_k1_0: +7230 20407218 call function_aes_cmac_k1_inverse + +function_aes_cmac_k2: +7231 d8c00ad2 arg mem_aes_cmac_k1 ,contr +7232 d8a00ae2 arg mem_aes_cmac_k2 ,contw +7233 20407ebf call memcpy16 +7234 68008ae2 fetch 1 ,mem_aes_cmac_k2 +7235 2feffe07 isolate1 7 ,pdata +7236 2420f21d nbranch function_aes_cmac_k2_inverse ,true +7237 2040721d call function_aes_cmac_k2_inverse +7238 da600ae2 arg mem_aes_cmac_k2 ,regc +7239 d8a00ae2 arg mem_aes_cmac_k2 ,contw + +function_aes_cmac_xor_rb: +723a df200003 arg 3 ,loopcnt + +function_aes_cmac_xor_rb_loop: +723b d8400000 arg 0 ,temp +723c 20407241 call function_aes_cmac_xor_loop_common +723d 1a60a604 increase 4 ,regc +723e c200723b loop function_aes_cmac_xor_rb_loop +723f d8408700 arg 0x8700 ,temp +7240 18500400 lshift16 temp ,temp + +function_aes_cmac_xor_loop_common: +7241 ea620000 ifetch 4 ,regc +7242 9842fe00 ixor temp ,pdata +7243 e0a20000 istore 4 ,contw +7244 20600000 rtn + +function_aes_cmac_padding: +7245 476fc03b bpatchx patch3b_7 ,mem_patch3b +7246 df200010 arg 16 ,loopcnt +7247 dfe00000 arg 0 ,pdata + +function_aes_cmac_padding_loop: +7248 9a267c00 isub rega ,null +7249 2022f250 branch function_aes_cmac_padding_beq_length ,zero +724a 20217253 branch function_aes_cmac_padding_big_length ,positive +724b e8c88000 ifetcht 1 ,contr +724c e0a88000 istoret 1 ,contw + +function_aes_cmac_padding_loop2: +724d 1fe0fe01 increase 1 ,pdata +724e c2007248 loop function_aes_cmac_padding_loop +724f 20600000 rtn + +function_aes_cmac_padding_beq_length: +7250 d8400080 arg 0x80 ,temp + +function_aes_cmac_padding_common: +7251 e0a88000 istoret 1 ,contw +7252 2020724d branch function_aes_cmac_padding_loop2 + +function_aes_cmac_padding_big_length: +7253 d8400000 arg 0 ,temp +7254 20207251 branch function_aes_cmac_padding_common + +generate_kinit: +7255 20407268 call function_e22 +7256 d8c00592 arg mem_input_store ,contr +7257 d8a00582 arg mem_kinit ,contw +7258 20207ebf branch memcpy16 + +function_e21: +7259 78547c00 disable user +725a 2040735f call function_expand +725b d8c00562 arg mem_random_number ,contr +725c d8a005a2 arg mem_x ,contw +725d 1800720f force 15 ,loopcnt +725e 20407f01 call memcpy +725f e8c08000 ifetch 1 ,contr +7260 1fe2fe06 xor_into 6 ,pdata +7261 e0a08000 istore 1 ,contw +7262 580005b2 setarg mem_y +7263 600105d6 store 2 ,memp_ar_input +7264 580005a2 setarg mem_x +7265 600105d4 store 2 ,memp_ar_key +7266 79200012 set1 mark_ar2 ,mark +7267 202072a8 branch function_ar + +function_e22: +7268 6808c689 fetcht 1 ,mem_pin_length +7269 18002410 force 16 ,regb +726a 1840a606 add temp ,6 ,regc +726b 1a667c10 sub regc ,16 ,null +726c 2021726e branch function_e22_pin_init ,positive +726d 18002610 force 16 ,regc + +function_e22_pin_init: +726e d8a005a2 arg mem_x ,contw + +function_e22_genx_pin: +726f d8c0468a arg mem_pin ,contr +7270 18427200 copy temp ,loopcnt +7271 78547c00 disable user + +function_e22_genx_loop: +7272 e8c08000 ifetch 1 ,contr +7273 e0a08000 istore 1 ,contw +7274 1a40a5ff increase -1 ,regb +7275 2022f27c branch function_e22_genx_end ,zero +7276 c2007272 loop function_e22_genx_loop +7277 2034726f branch function_e22_genx_pin ,user +7278 78347c00 enable user +7279 18007206 force 6 ,loopcnt +727a 1a220c00 copy rega ,contr +727b 20207272 branch function_e22_genx_loop + +function_e22_genx_end: +727c d8c00562 arg mem_random_number ,contr +727d d8a005b2 arg mem_y ,contw +727e 20407ebf call memcpy16 +727f 680085c1 fetch 1 ,mem_y15 +7280 9a62fe00 ixor regc ,pdata +7281 600085c1 store 1 ,mem_y15 +7282 580005b2 setarg mem_y +7283 600105d6 store 2 ,memp_ar_input +7284 580005a2 setarg mem_x +7285 600105d4 store 2 ,memp_ar_key +7286 79200012 set1 mark_ar2 ,mark +7287 202072a8 branch function_ar + +function_e1: +7288 78547c00 disable user +7289 2040735f call function_expand +728a 20207292 branch function_hash + +function_e3: +728b da200056 arg mem_aco ,rega +728c 78347c00 enable user +728d 2040735f call function_expand +728e 20407292 call function_hash +728f d8c00592 arg mem_input_store ,contr +7290 d8a00062 arg mem_kc ,contw +7291 20207ebf branch memcpy16 + +function_hash: +7292 58000562 setarg mem_random_number +7293 600105d6 store 2 ,memp_ar_input +7294 580041be setarg mem_link_key +7295 600105d4 store 2 ,memp_ar_key +7296 793f8012 set0 mark_ar2 ,mark +7297 204072a8 call function_ar +7298 da200592 arg mem_input_store ,rega +7299 da400562 arg mem_random_number ,regb +729a d8a005a2 arg mem_x ,contw +729b 20407352 call xor16 +729c da2005a2 arg mem_x ,rega +729d da4005b2 arg mem_y ,regb +729e 1a420a00 copy regb ,contw +729f 78347c00 enable user +72a0 20407350 call add16 +72a1 2040736a call key_offset +72a2 580005b2 setarg mem_y +72a3 600105d6 store 2 ,memp_ar_input +72a4 580005a2 setarg mem_x +72a5 600105d4 store 2 ,memp_ar_key +72a6 79200012 set1 mark_ar2 ,mark +72a7 202072a8 branch function_ar + +function_ar: +72a8 7005d800 jam 0 ,mem_ar_hround +72a9 680105d4 fetch 2 ,memp_ar_key +72aa 98000c00 iforce contr +72ab d8a005c2 arg mem_key_store ,contw +72ac 20407ebf call memcpy16 +72ad 680105d6 fetch 2 ,memp_ar_input +72ae 98000c00 iforce contr +72af d8a00592 arg mem_input_store ,contw +72b0 20407ebf call memcpy16 + +function_ar_loop: +72b1 204072cf call key_scheduling +72b2 78547c00 disable user +72b3 c58972b9 bmark0 mark_ar2 ,function_ar_original +72b4 680085d8 fetch 1 ,mem_ar_hround +72b5 c08272b9 bne 4 ,function_ar_original +72b6 680105d6 fetch 2 ,memp_ar_input +72b7 98002400 iforce regb +72b8 20407301 call xor_mod32_ar2 + +function_ar_original: +72b9 20407300 call xor_mod32 +72ba 20407313 call el_boxes +72bb 680085d8 fetch 1 ,mem_ar_hround +72bc 1fe0fe01 increase 1 ,pdata +72bd 600085d8 store 1 ,mem_ar_hround +72be 204072cf call key_scheduling +72bf 78347c00 enable user +72c0 20407300 call xor_mod32 +72c1 20407322 call pht +72c2 20407331 call permute +72c3 20407322 call pht +72c4 20407331 call permute +72c5 20407322 call pht +72c6 20407331 call permute +72c7 20407322 call pht +72c8 680085d8 fetch 1 ,mem_ar_hround +72c9 1fe0fe01 increase 1 ,pdata +72ca 600085d8 store 1 ,mem_ar_hround +72cb c08872b1 bne 16 ,function_ar_loop +72cc 204072cf call key_scheduling +72cd 78547c00 disable user +72ce 20207300 branch xor_mod32 + +key_scheduling: +72cf 680085d8 fetch 1 ,mem_ar_hround +72d0 d8c005c2 arg mem_key_store ,contr +72d1 203a72f6 branch key_sched_zero ,blank +72d2 98002400 iforce regb +72d3 18007211 force 17 ,loopcnt +72d4 18c20a00 copy contr ,contw + +key_rotateloop: +72d5 e8c08000 ifetch 1 ,contr +72d6 1fe98400 lshift3 pdata ,temp +72d7 1feb7e00 rshift2 pdata ,pdata +72d8 1fe97e00 rshift3 pdata ,pdata +72d9 9841fe00 ior temp ,pdata +72da e0a08000 istore 1 ,contw +72db c20072d5 loop key_rotateloop +72dc 580005c2 setarg mem_key_store +72dd 9a408c00 iadd regb ,contr +72de 18007210 force 16 ,loopcnt +72df d8a00572 arg mem_round_key ,contw + +key_select_octet_loop: +72e0 e8c08000 ifetch 1 ,contr +72e1 e0a08000 istore 1 ,contw +72e2 28c1ffd3 compare mem_key_store_end ,contr ,0xff +72e3 2420f2e5 nbranch key_select_octet_nwrap ,true +72e4 18c08def increase -17 ,contr + +key_select_octet_nwrap: +72e5 c20072e0 loop key_select_octet_loop +72e6 18002200 force 0 ,rega +72e7 1a40a7ff add regb ,-1 ,regc +72e8 1a6ba600 lshift2 regc ,regc +72e9 1a6ba600 lshift2 regc ,regc +72ea 204074b9 call enable_authrom +72eb 58008400 setarg mem_b_box +72ec 9a60a600 iadd regc ,regc +72ed d8a00572 arg mem_round_key ,contw +72ee 18007210 force 16 ,loopcnt + +bias_round_key_loop: +72ef ea688000 ifetcht 1 ,regc +72f0 e8a08000 ifetch 1 ,contw +72f1 9840fe00 iadd temp ,pdata +72f2 e0a08000 istore 1 ,contw +72f3 1a60a601 increase 1 ,regc +72f4 c20072ef loop bias_round_key_loop +72f5 202074bd branch disable_authrom + +key_sched_zero: +72f6 18007210 force 16 ,loopcnt +72f7 18000400 force 0 ,temp + +create_byte_16_loop: +72f8 e8c08000 ifetch 1 ,contr +72f9 98428400 ixor temp ,temp +72fa c20072f8 loop create_byte_16_loop +72fb 18427e00 deposit temp +72fc e0c08000 istore 1 ,contr +72fd d8c005c2 arg mem_key_store ,contr +72fe d8a00572 arg mem_round_key ,contw +72ff 20207ebf branch memcpy16 + +xor_mod32: +7300 da400572 arg mem_round_key ,regb + +xor_mod32_ar2: +7301 18007210 force 16 ,loopcnt +7302 da200592 arg mem_input_store ,rega +7303 1a220a00 copy rega ,contw + +xor_mod32_loop: +7304 ea288000 ifetcht 1 ,rega +7305 ea408000 ifetch 1 ,regb +7306 9842e000 ixor temp ,alarm +7307 1f212603 and loopcnt ,3 ,regc +7308 2434730a nbranch xor_mod32_invert ,user +7309 1a62a603 xor_into 3 ,regc + +xor_mod32_invert: +730a 1a662601 sub regc ,1 ,regc +730b 2021730d branch xor_even ,positive +730c 9840e000 iadd temp ,alarm + +xor_even: +730d 1e027e00 deposit alarm +730e e0a08000 istore 1 ,contw +730f 1a20a201 increase 1 ,rega +7310 1a40a401 increase 1 ,regb +7311 c2007304 loop xor_mod32_loop +7312 20600000 rtn + +el_boxes: +7313 204074b9 call enable_authrom +7314 18007210 force 16 ,loopcnt +7315 da200592 arg mem_input_store ,rega + +el_box_loop: +7316 ea208000 ifetch 1 ,rega +7317 d8c08500 arg mem_e_box ,contr +7318 1f212603 and loopcnt ,3 ,regc +7319 1a667c01 sub regc ,1 ,null +731a 2021731c branch e_boxes ,positive +731b d8c08600 arg mem_l_box ,contr + +e_boxes: +731c 98c08c00 iadd contr ,contr +731d e8c08000 ifetch 1 ,contr +731e e2208000 istore 1 ,rega +731f 1a20a201 increase 1 ,rega +7320 c2007316 loop el_box_loop +7321 202074bd branch disable_authrom + +pht: +7322 18007208 force 8 ,loopcnt +7323 d8c00592 arg mem_input_store ,contr +7324 18c20a00 copy contr ,contw + +pht_loop: +7325 e8c08000 ifetch 1 ,contr +7326 98002200 iforce rega +7327 e8c08000 ifetch 1 ,contr +7328 98002400 iforce regb +7329 1a23fe00 lshift rega ,pdata +732a 9a40fe00 iadd regb ,pdata +732b e0a08000 istore 1 ,contw +732c 1a227e00 deposit rega +732d 9a40fe00 iadd regb ,pdata +732e e0a08000 istore 1 ,contw +732f c2007325 loop pht_loop +7330 20600000 rtn + +permute: +7331 588ae42c setarg 0x8ae42c +7332 98000400 iforce temp +7333 18007207 force 7 ,loopcnt +7334 20407340 call permute_exchange +7335 580d751b setarg 0xd751b +7336 98000400 iforce temp +7337 18007205 force 5 ,loopcnt +7338 20407340 call permute_exchange +7339 680085a1 fetch 1 ,mem_input_store + 15 +733a 98002200 iforce rega +733b 68008595 fetch 1 ,mem_input_store + 3 +733c 600085a1 store 1 ,mem_input_store + 15 +733d 1a227e00 deposit rega +733e 60008595 store 1 ,mem_input_store + 3 +733f 20600000 rtn + +permute_exchange: +7340 1841240f and temp ,0xf ,regb + +permute_loop: +7341 18417e0f and temp ,0xf ,pdata +7342 d8a00592 arg mem_input_store ,contw +7343 98a08a00 iadd contw ,contw +7344 e8a08000 ifetch 1 ,contw +7345 98002600 iforce regc +7346 1a227e00 deposit rega +7347 e0a08000 istore 1 ,contw +7348 1a622200 copy regc ,rega +7349 18518400 rshift4 temp ,temp +734a c2007341 loop permute_loop +734b 58000592 setarg mem_input_store +734c 9a408a00 iadd regb ,contw +734d 1a227e00 deposit rega +734e e0a08000 istore 1 ,contw +734f 20600000 rtn + +add16: +7350 78347c00 enable user +7351 20207353 branch xor_add16 + +xor16: +7352 78547c00 disable user + +xor_add16: +7353 18007210 force 16 ,loopcnt + +xoradd_loop: +7354 ea288000 ifetcht 1 ,rega +7355 ea408000 ifetch 1 ,regb +7356 20347359 branch xoradd_add ,user +7357 9842fe00 ixor temp ,pdata +7358 2020735a branch xoradd_store + +xoradd_add: +7359 9840fe00 iadd temp ,pdata + +xoradd_store: +735a e0a08000 istore 1 ,contw +735b 1a20a201 increase 1 ,rega +735c 1a40a401 increase 1 ,regb +735d c2007354 loop xoradd_loop +735e 20600000 rtn + +function_expand: +735f d8a005b2 arg mem_y ,contw +7360 ea230000 ifetch 6 ,rega +7361 e0a30000 istore 6 ,contw +7362 20347365 branch expand_12 ,user +7363 ea230000 ifetch 6 ,rega +7364 20207366 branch expand_cont + +expand_12: +7365 e8c30000 ifetch 6 ,contr + +expand_cont: +7366 e0a30000 istore 6 ,contw +7367 ea220000 ifetch 4 ,rega +7368 e0a20000 istore 4 ,contw +7369 20600000 rtn + +key_offset: +736a d8c041be arg mem_link_key ,contr +736b d8a005a2 arg mem_x ,contw +736c d8400000 arg 0 ,temp +736d 588395a7 setarg 0x8395a7 +736e 2040738b call concatenate_temp24 +736f 58b3c1df setarg 0xb3c1df +7370 2040738b call concatenate_temp24 +7371 5800e5e9 setarg 0xe5e9 +7372 2040738c call concatenate_temp16 +7373 18422800 copy temp ,regab +7374 78547c00 disable user +7375 20407379 call key_addxor +7376 1a820400 copy regab ,temp +7377 78347c00 enable user +7378 20207379 branch key_addxor + +key_addxor: +7379 18007208 force 8 ,loopcnt + +key_addxor_loop: +737a e8c08000 ifetch 1 ,contr +737b 2f200201 compare 1 ,loopcnt ,1 +737c 20347380 branch key_high ,user +737d 2020f381 branch key_xor ,true + +key_add: +737e 9840fe00 iadd temp ,pdata +737f 20207382 branch key_store + +key_high: +7380 2020f37e branch key_add ,true + +key_xor: +7381 9842fe00 ixor temp ,pdata + +key_store: +7382 e0a08000 istore 1 ,contw +7383 184c8400 rshift8 temp ,temp +7384 c200737a loop key_addxor_loop +7385 20600000 rtn + +copy_aco: +7386 68030596 fetch 6 ,mem_input_store + 4 +7387 60030056 store 6 ,mem_aco +7388 e8c30000 ifetch 6 ,contr +7389 e0a30000 istore 6 ,contw +738a 20600000 rtn + +concatenate_temp24: +738b 184d0400 lshift8 temp ,temp + +concatenate_temp16: +738c 18500400 lshift16 temp ,temp +738d 98418400 ior temp ,temp +738e 20600000 rtn + +loop1: +738f 2020738f branch loop1 + +generate_stk: +7390 4770403c bpatchx patch3c_0 ,mem_patch3c +7391 2040742b call function_s1 +7392 d8a04419 arg mem_le_ltk ,contw +7393 20207497 branch store_aes_result + +authenticate_rconfirm: +7394 d8a0443a arg mem_le_srand ,contw +7395 2034f397 branch authenticate_mconfirm ,master +7396 d8a0042f arg mem_le_mrand ,contw + +authenticate_mconfirm: +7397 18c22200 copy contr ,rega +7398 20407ebf call memcpy16 +7399 20407440 call function_c1 +739a d8c0442a arg mem_le_rconfirm ,contr +739b 202074b0 branch compare_res + +generate_confirm: +739c da20042f arg mem_le_mrand ,rega +739d 2034f39f branch generate_mrand ,master +739e da20443a arg mem_le_srand ,rega + +generate_mrand: +739f 1a220a00 copy rega ,contw +73a0 2040630c call generate_random +73a1 20207440 branch function_c1 + +generate_sk: +73a2 d8c044aa arg mem_le_skdm ,contr +73a3 20407486 call load_data128 +73a4 d8c04419 arg mem_le_ltk ,contr +73a5 20407487 call load_regext +73a6 18006c38 force 0x38 ,aes_ctrl +73a7 18006c00 force 0x0 ,aes_ctrl +73a8 2040741d call wait_aes +73a9 d8a0047c arg mem_le_sk ,contw +73aa 20207497 branch store_aes_result + +first_block_counter: +73ab 18007e49 force 0x49 ,pdata +73ac 202073ae branch first_block + +first_block_data: +73ad 18007e01 force 1 ,pdata + +first_block: +73ae 18007000 force regidx_data ,regext_index +73af 184d5e00 lshift8 temp ,regext +73b0 9de1de00 ior regext ,regext +73b1 1f00f001 increase 1 ,regext_index +73b2 184cde00 rshift8 temp ,regext +73b3 1df15e00 rshift16 regext ,regext +73b4 68014411 fetch 2 ,mem_le_ivm +73b5 1ff07e00 lshift16 ,pdata ,pdata +73b6 9de1de00 ior regext ,regext +73b7 1f00f001 increase 1 ,regext_index +73b8 e8c20000 ifetch 4 ,contr +73b9 98005e00 iforce regext +73ba 1f00f001 increase 1 ,regext_index +73bb e8c10000 ifetch 2 ,contr +73bc 1a30de00 byteswap rega ,regext +73bd 1df05e00 lshift16 regext ,regext +73be 9de1de00 ior regext ,regext +73bf 1f00f001 increase 1 ,regext_index +73c0 20600000 rtn + +generate_mic: +73c1 1a608c01 add regc ,1 ,contr +73c2 e8c08000 ifetch 1 ,contr +73c3 98002200 iforce rega +73c4 204073ab call first_block_counter +73c5 2040741f call do_aes_ocb +73c6 18007000 force regidx_data ,regext_index +73c7 ea608000 ifetch 1 ,regc +73c8 1fe17e03 and_into 0x3 ,pdata +73c9 1ff05e00 lshift16 pdata ,regext +73ca 79205e08 set1 8 ,regext +73cb 2040748f call clear_hidata +73cc 20407422 call do_aes_cbc +73cd 1a227200 copy rega ,loopcnt +73ce 1a608c02 add regc ,2 ,contr +73cf 2040746e call padding_data + +generate_mic_loop: +73d0 20407478 call aes_load_data +73d1 20407422 call do_aes_cbc +73d2 1f227e00 deposit loopcnt +73d3 203a73d5 branch generate_mic_end ,blank +73d4 202073d0 branch generate_mic_loop + +generate_mic_end: +73d5 1800700c force regidx_result ,regext_index +73d6 1de27e00 deposit regext +73d7 60020417 store 4 ,mem_le_mic +73d8 20600000 rtn + +aes_crypt_data: +73d9 1a20a201 increase 1 ,rega +73da 204073ad call first_block_data +73db 1a620c00 copy regc ,contr +73dc 20407482 call aes_load_xor +73dd 20407425 call do_aes_ctr +73de 2040749e call store_enc_data +73df 1a60a610 increase 16 ,regc +73e0 1a40a5f0 increase -16 ,regb +73e1 202173d9 branch aes_crypt_data ,positive +73e2 20600000 rtn + +le_encrypt: +73e3 4770c03c bpatchx patch3c_1 ,mem_patch3c +73e4 da6043dc arg mem_le_txheader ,regc +73e5 680ac403 fetcht 5 ,mem_le_pcnt_tx +73e6 204073c1 call generate_mic +73e7 18007008 force regidx_xor ,regext_index +73e8 98005e00 iforce regext +73e9 18002200 force 0 ,rega +73ea 204073ad call first_block_data +73eb 20407425 call do_aes_ctr +73ec da6043de arg mem_le_txpayload ,regc +73ed 6800c3dd fetch 1 ,mem_le_txlen +73ee 1fe0a5ff add pdata ,-1 ,regb +73ef 9a608a00 iadd regc ,contw +73f0 1800700c force regidx_result ,regext_index +73f1 1de27e00 deposit regext +73f2 e0a20000 istore 4 ,contw +73f3 204073d9 call aes_crypt_data +73f4 6800c3dd fetch 1 ,mem_le_txlen +73f5 1fe0fe04 increase 4 ,pdata +73f6 6000c3dd store 1 ,mem_le_txlen +73f7 680ac403 fetcht 5 ,mem_le_pcnt_tx +73f8 18408401 increase 1 ,temp +73f9 600ac403 storet 5 ,mem_le_pcnt_tx +73fa 20600000 rtn + +le_decrypt: +73fb 4771403c bpatchx patch3c_2 ,mem_patch3c +73fc 680082da fetch 1 ,mem_le_rxbuf + 1 +73fd 1fe67c14 sub pdata ,20 ,null +73fe 202173ff branch le_dec_cont ,positive + +le_dec_cont: +73ff da6002db arg mem_le_rxbuf + 2 ,regc +7400 1fe0a5ff add pdata ,-1 ,regb +7401 1fe0fffc increase -4 ,pdata +7402 600082da store 1 ,mem_le_rxbuf + 1 +7403 9a608c00 iadd regc ,contr +7404 e8c20000 ifetch 4 ,contr +7405 18007008 force regidx_xor ,regext_index +7406 98005e00 iforce regext +7407 18002200 force 0 ,rega +7408 680ac408 fetcht 5 ,mem_le_pcnt_rx +7409 204073ad call first_block_data +740a 20407425 call do_aes_ctr +740b 1800700c force regidx_result ,regext_index +740c 1de27e00 deposit regext +740d 6002041b store 4 ,mem_le_peer_mic +740e 204073d9 call aes_crypt_data +740f da6002d9 arg mem_le_rxbuf ,regc +7410 204073c1 call generate_mic +7411 680a041b fetcht 4 ,mem_le_peer_mic +7412 98467e00 isub temp ,pdata +7413 247a0000 nrtn blank +7414 6802440d fetch 4 ,mem_le_last_mic +7415 98467e00 isub temp ,pdata +7416 207a0000 rtn blank +7417 600a440d storet 4 ,mem_le_last_mic +7418 6802c408 fetch 5 ,mem_le_pcnt_rx +7419 1fe0fe01 increase 1 ,pdata +741a 6002c408 store 5 ,mem_le_pcnt_rx +741b 18007e00 force 0 ,pdata +741c 20600000 rtn + +wait_aes: +741d 243bf41d nbranch wait_aes ,aes_ready +741e 20600000 rtn + +do_aes_ocb: +741f 18006c30 force 0x30 ,aes_ctrl +7420 18006c00 force 0x0 ,aes_ctrl +7421 2020741d branch wait_aes + +do_aes_cbc: +7422 18006c32 force 0x32 ,aes_ctrl +7423 18006c02 force 0x2 ,aes_ctrl +7424 2020741d branch wait_aes + +do_aes_ctr: +7425 18006c34 force 0x34 ,aes_ctrl +7426 18006c04 force 0x4 ,aes_ctrl +7427 2020741d branch wait_aes + +aes_init: +7428 18006c01 force 1 ,aes_ctrl +7429 18006c00 force 0 ,aes_ctrl +742a 20600000 rtn + +function_s1: +742b 18007000 force regidx_data ,regext_index +742c 6802042f fetch 4 ,mem_le_mrand +742d 98005e00 iforce regext +742e 1f00f001 increase 1 ,regext_index +742f e8c20000 ifetch 4 ,contr +7430 98005e00 iforce regext +7431 1f00f001 increase 1 ,regext_index +7432 6802443a fetch 4 ,mem_le_srand +7433 98005e00 iforce regext +7434 1f00f001 increase 1 ,regext_index +7435 e8c20000 ifetch 4 ,contr +7436 98005e00 iforce regext +7437 1f00f001 increase 1 ,regext_index +7438 20407492 call aes_clear +7439 1f00f1fc increase -4 ,regext_index +743a 680244c7 fetch 4 ,mem_le_tk +743b 1fe25e00 copy pdata ,regext +743c 1f00f004 increase 4 ,regext_index +743d 18006c38 force 0x38 ,aes_ctrl +743e 18006c08 force 0x8 ,aes_ctrl +743f 2020741d branch wait_aes + +function_c1: +7440 4771c03c bpatchx patch3c_3 ,mem_patch3c +7441 680344a0 fetch 6 ,mem_le_lap +7442 680b044f fetcht 6 ,mem_le_plap +7443 2034f446 branch function_c1_master ,master +7444 6803044f fetch 6 ,mem_le_plap +7445 680b44a0 fetcht 6 ,mem_le_lap + +function_c1_master: +7446 18007008 force regidx_xor ,regext_index +7447 18425e00 copy temp ,regext +7448 1f00f001 increase 1 ,regext_index +7449 184f5e00 rshift32 temp ,regext +744a 1ff07e00 lshift16 pdata ,pdata +744b 9de1de00 ior regext ,regext +744c 1f00f001 increase 1 ,regext_index +744d 1fef5e00 rshift32 pdata ,regext +744e 1f00f001 increase 1 ,regext_index +744f 18005e00 force 0 ,regext +7450 18007e00 force 0 ,pdata +7451 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +7452 6808c485 fetcht 1 ,mem_le_adv_own_addr_type +7453 2434f456 nbranch function_c1_irat ,master +7454 6800c495 fetch 1 ,mem_le_conn_own_addr_type +7455 6808c48e fetcht 1 ,mem_le_conn_peer_addr_type + +function_c1_irat: +7456 6000c44a store 1 ,mem_le_iat +7457 6008c44b storet 1 ,mem_le_rat +7458 18007000 force regidx_data ,regext_index +7459 da40444a arg mem_le_iat ,regb +745a 18007204 force 4 ,loopcnt + +function_c1_loop1: +745b ea220000 ifetch 4 ,rega +745c ea4a0000 ifetcht 4 ,regb +745d 9842de00 ixor temp ,regext +745e 1f00f001 increase 1 ,regext_index +745f 1a20a204 increase 4 ,rega +7460 1a40a404 increase 4 ,regb +7461 c200745b loop function_c1_loop1 +7462 20407492 call aes_clear +7463 1f00f1fc increase -4 ,regext_index +7464 680244c7 fetch 4 ,mem_le_tk +7465 1fe25e00 copy pdata ,regext +7466 1f00f004 increase 4 ,regext_index +7467 18006c38 force 0x38 ,aes_ctrl +7468 18006c0c force 0xc ,aes_ctrl +7469 2040741d call wait_aes +746a 20407491 call aes_clear_data +746b 18006c3a force 0x3a ,aes_ctrl +746c 18006c08 force 0x8 ,aes_ctrl +746d 2020741d branch wait_aes + +padding_data: +746e 2f200600 compare 0 ,loopcnt ,3 +746f 20608000 rtn true +7470 18c27e00 deposit contr +7471 9f208a00 iadd loopcnt ,contw +7472 18007e00 force 0 ,pdata + +padding_loop: +7473 e0a08000 istore 1 ,contw +7474 1f20f201 increase 1 ,loopcnt +7475 2f200600 compare 0 ,loopcnt ,3 +7476 20608000 rtn true +7477 20207473 branch padding_loop + +aes_load_data: +7478 18007000 force regidx_data ,regext_index + +load_data_loop: +7479 1f227e00 deposit loopcnt +747a 203a747d branch load_data_padding ,blank +747b e8c20000 ifetch 4 ,contr +747c 1f20f3fc increase -4 ,loopcnt + +load_data_padding: +747d 98005e00 iforce regext +747e 1f00f001 increase 1 ,regext_index +747f 2f001e04 compare regidx_key ,regext_index ,0xf +7480 20608000 rtn true +7481 20207479 branch load_data_loop + +aes_load_xor: +7482 18007008 force regidx_xor ,regext_index +7483 20207487 branch load_regext + +load_key: +7484 18007004 force regidx_key ,regext_index +7485 20207487 branch load_regext + +load_data128: +7486 18007000 force regidx_data ,regext_index + +load_regext: +7487 18007204 force 4 ,loopcnt + +load_regext_loop: +7488 e8c20000 ifetch 4 ,contr +7489 98005e00 iforce regext +748a 1f00f001 increase 1 ,regext_index +748b c2007488 loop load_regext_loop +748c 20600000 rtn + +load_sk: +748d d8c0047c arg mem_le_sk ,contr +748e 20207484 branch load_key + +clear_hidata: +748f 18007204 force 4 ,loopcnt +7490 20207494 branch clear_data_rest + +aes_clear_data: +7491 18007000 force regidx_data ,regext_index + +aes_clear: +7492 18007204 force 4 ,loopcnt + +clear_loop: +7493 18005e00 force 0 ,regext + +clear_data_rest: +7494 1f00f001 increase 1 ,regext_index +7495 c2007493 loop clear_loop +7496 20600000 rtn + +store_aes_result: +7497 1800700c force regidx_result ,regext_index +7498 18007204 force 4 ,loopcnt + +send_aes_result_loop: +7499 1de27e00 deposit regext +749a e0a20000 istore 4 ,contw +749b 1f00f001 increase 1 ,regext_index +749c c2007499 loop send_aes_result_loop +749d 20600000 rtn + +store_enc_data: +749e 1800700c force regidx_result ,regext_index +749f 1a620a00 copy regc ,contw +74a0 1a40f201 add regb ,1 ,loopcnt +74a1 1f267c0f sub loopcnt ,15 ,null +74a2 202174a4 branch store_enc_loop ,positive +74a3 18007210 force 16 ,loopcnt + +store_enc_loop: +74a4 1de27e00 deposit regext +74a5 1f267c03 sub loopcnt ,3 ,null +74a6 202174ac branch store_enc_byte ,positive +74a7 e0a20000 istore 4 ,contw +74a8 1f20f3fc increase -4 ,loopcnt +74a9 20628000 rtn zero +74aa 1f00f001 increase 1 ,regext_index +74ab 202074a4 branch store_enc_loop + +store_enc_byte: +74ac e0a08000 istore 1 ,contw +74ad 1fecfe00 rshift8 pdata ,pdata +74ae c20074ac loop store_enc_byte +74af 20600000 rtn + +compare_res: +74b0 1800700c force regidx_result ,regext_index +74b1 18007204 force 4 ,loopcnt + +compare_res_loop: +74b2 e8c20000 ifetch 4 ,contr +74b3 9de67c00 isub regext ,null +74b4 24628000 nrtn zero +74b5 1f00f001 increase 1 ,regext_index +74b6 c20074b2 loop compare_res_loop +74b7 18007c00 force 0 ,null +74b8 20600000 rtn + +enable_authrom: +74b9 68108050 hfetch 1 ,core_clkoff +74ba 793ffe00 set0 clock_off_auth_rom ,pdata +74bb 60108050 hstore 1 ,core_clkoff +74bc 20600000 rtn + +disable_authrom: +74bd 68108050 hfetch 1 ,core_clkoff +74be 79207e00 set1 clock_off_auth_rom ,pdata +74bf 60108050 hstore 1 ,core_clkoff +74c0 20600000 rtn + +init_memp: +74c1 d8a00886 arg mem_p ,contw +74c2 3803ffff setsect 0 ,0x3ffff +74c3 3807ffff setsect 1 ,0x3ffff +74c4 380bffff setsect 2 ,0x3ffff +74c5 380ffbff setsect 3 ,0x3fbff +74c6 e0a48000 istore 9 ,contw +74c7 3803ffff setsect 0 ,0x3ffff +74c8 3807ffff setsect 1 ,0x3ffff +74c9 380bffff setsect 2 ,0x3ffff +74ca 380fffff setsect 3 ,0x3ffff +74cb e0a48000 istore 9 ,contw +74cc 3803ffff setsect 0 ,0x3ffff +74cd 3807ffff setsect 1 ,0x3ffff +74ce 380bcfff setsect 2 ,0x3cfff +74cf 380fffff setsect 3 ,0x3ffff +74d0 e0a48000 istore 9 ,contw +74d1 3803ffff setsect 0 ,0x3ffff +74d2 3807ffff setsect 1 ,0x3ffff +74d3 380bffef setsect 2 ,0x3ffef +74d4 380fffff setsect 3 ,0x3ffff +74d5 e0a48000 istore 9 ,contw +74d6 3803ffff setsect 0 ,0x3ffff +74d7 3807ffff setsect 1 ,0x3ffff +74d8 380bffff setsect 2 ,0x3ffff +74d9 380fffff setsect 3 ,0x3ffff +74da e0a48000 istore 9 ,contw +74db 3803ffff setsect 0 ,0x3ffff +74dc 38066c7f setsect 1 ,0x26c7f +74dd 3808146b setsect 2 ,0x146b +74de 380f7bb3 setsect 3 ,0x37bb3 +74df e0a48000 istore 9 ,contw +74e0 3801feb8 setsect 0 ,0x1feb8 +74e1 38050c12 setsect 1 ,0x10c12 +74e2 380ab722 setsect 2 ,0x2b722 +74e3 380e9fa6 setsect 3 ,0x29fa6 +74e4 e0a48000 istore 9 ,contw +74e5 3800e70f setsect 0 ,0xe70f +74e6 38056720 setsect 1 ,0x16720 +74e7 3808519e setsect 2 ,0x519e +74e8 380d9084 setsect 3 ,0x19084 +74e9 e0a48000 istore 9 ,contw +74ea 38031012 setsect 0 ,0x31012 +74eb 380760bf setsect 1 ,0x360bf +74ec 380bf0af setsect 2 ,0x3f0af +74ed 380c03d3 setsect 3 ,0x3d3 +74ee e0a48000 istore 9 ,contw +74ef 3803a188 setsect 0 ,0x3a188 +74f0 38043ad0 setsect 1 ,0x3ad0 +74f1 380bcbf2 setsect 2 ,0x3cbf2 +74f2 380e43d9 setsect 3 ,0x243d9 +74f3 e0a48000 istore 9 ,contw +74f4 3802b030 setsect 0 ,0x2b030 +74f5 38076a03 setsect 1 ,0x36a03 +74f6 38091188 setsect 2 ,0x11188 +74f7 380de520 setsect 3 ,0x1e520 +74f8 e0a48000 istore 9 ,contw +74f9 3803a11e setsect 0 ,0x3a11e +74fa 3804fe5d setsect 1 ,0xfe5d +74fb 3808dd57 setsect 2 ,0xdd57 +74fc 380dac93 setsect 3 ,0x1ac93 +74fd e0a48000 istore 9 ,contw +74fe 380011ed setsect 0 ,0x11ed +74ff 380618c4 setsect 1 ,0x218c4 +7500 38088da7 setsect 2 ,0x8da7 +7501 380e57ff setsect 3 ,0x257ff +7502 e0a48000 istore 9 ,contw +7503 3803192b setsect 0 ,0x3192b +7504 38074641 setsect 1 ,0x34641 +7505 3809be0c setsect 2 ,0x1be0c +7506 380f66ad setsect 3 ,0x366ad +7507 e0a48000 istore 9 ,contw +7508 38001f83 setsect 0 ,0x1f83 +7509 38055a23 setsect 1 ,0x15a23 +750a 380bf9b0 setsect 2 ,0x3f9b0 +750b 380c3949 setsect 3 ,0x3949 +750c e0a48000 istore 9 ,contw +750d 38013a51 setsect 0 ,0x13a51 +750e 380553fd setsect 1 ,0x153fd +750f 380b372a setsect 2 ,0x3372a +7510 380cf1bb setsect 3 ,0xf1bb +7511 e0a48000 istore 9 ,contw +7512 3803ae85 setsect 0 ,0x3ae85 +7513 3805eed9 setsect 1 ,0x1eed9 +7514 38089e66 setsect 2 ,0x9e66 +7515 380c01a8 setsect 3 ,0x1a8 +7516 e0a40000 istore 8 ,contw +7517 20600000 rtn + +init_memp_256: +7518 d8a0091e arg mem_p_256 ,contw +7519 3803ffff setsect 0 ,0x3ffff +751a 3807ffff setsect 1 ,0x3ffff +751b 380bffff setsect 2 ,0x3ffff +751c 380fffff setsect 3 ,0x3ffff +751d e0a48000 istore 9 ,contw +751e 3803ffff setsect 0 ,0x3ffff +751f 3804003f setsect 1 ,0x3f +7520 38080000 setsect 2 ,0x0 +7521 380c0000 setsect 3 ,0x0 +7522 e0a48000 istore 9 ,contw +7523 38000000 setsect 0 ,0x0 +7524 38040000 setsect 1 ,0x0 +7525 38081000 setsect 2 ,0x1000 +7526 380c0000 setsect 3 ,0x0 +7527 e0a48000 istore 9 ,contw +7528 3803ff00 setsect 0 ,0x3ff00 +7529 3807ffff setsect 1 ,0x3ffff +752a 380bffcf setsect 2 ,0x3ffcf +752b 380fffff setsect 3 ,0x3ffff +752c e0a48000 istore 9 ,contw +752d 3803ffff setsect 0 ,0x3ffff +752e 3807ffff setsect 1 ,0x3ffff +752f 380bffff setsect 2 ,0x3ffff +7530 380c03ff setsect 3 ,0x3ff +7531 e0a48000 istore 9 ,contw +7532 38000000 setsect 0 ,0x0 +7533 38040000 setsect 1 ,0x0 +7534 38080000 setsect 2 ,0x0 +7535 380c0000 setsect 3 ,0x0 +7536 e0a48000 istore 9 ,contw +7537 38010000 setsect 0 ,0x10000 +7538 38040000 setsect 1 ,0x0 +7539 380bf000 setsect 2 ,0x3f000 +753a 380fffff setsect 3 ,0x3ffff +753b e0a48000 istore 9 ,contw +753c 380296ff setsect 0 ,0x296ff +753d 38062630 setsect 1 ,0x22630 +753e 380b945d setsect 2 ,0x3945d +753f 380fd284 setsect 3 ,0x3d284 +7540 e0a48000 istore 9 ,contw +7541 380333a0 setsect 0 ,0x333a0 +7542 38044b7a setsect 1 ,0x4b7a +7543 380837d8 setsect 2 ,0x37d8 +7544 380fc9dc setsect 3 ,0x3c9dc +7545 e0a48000 istore 9 ,contw +7546 3803a440 setsect 0 ,0x3a440 +7547 3805b958 setsect 1 ,0x1b958 +7548 380b8bce setsect 2 ,0x38bce +7549 380d091f setsect 3 ,0x1091f +754a e0a48000 istore 9 ,contw +754b 3802e12c setsect 0 ,0x2e12c +754c 3805f47c setsect 1 ,0x1f47c +754d 380b56b1 setsect 2 ,0x356b1 +754e 380efd47 setsect 3 ,0x2fd47 +754f e0a48000 istore 9 ,contw +7550 38006837 setsect 0 ,0x6837 +7551 3806ed90 setsect 1 ,0x2ed90 +7552 3809ecec setsect 2 ,0x1ecec +7553 380dacc5 setsect 3 ,0x1acc5 +7554 e0a48000 istore 9 ,contw +7555 38023357 setsect 0 ,0x23357 +7556 38058af3 setsect 1 ,0x18af3 +7557 3808f9e1 setsect 2 ,0xf9e1 +7558 380d29f0 setsect 3 ,0x129f0 +7559 e0a48000 istore 9 ,contw +755a 3802e7eb setsect 0 ,0x2e7eb +755b 3807e6e3 setsect 1 ,0x3e6e3 +755c 380be1a7 setsect 2 ,0x3e1a7 +755d 380d0b8b setsect 3 ,0x10b8b +755e e0a48000 istore 9 ,contw +755f 38024fe3 setsect 0 ,0x24fe3 +7560 380420ef setsect 1 ,0x20ef +7561 3809b5a6 setsect 2 ,0x1b5a6 +7562 380cdc2f setsect 3 ,0xdc2f +7563 e0a48000 istore 9 ,contw +7564 38013860 setsect 0 ,0x13860 +7565 3806bd69 setsect 1 ,0x2bd69 +7566 3808391a setsect 2 ,0x391a +7567 380db222 setsect 3 ,0x1b222 +7568 e0a48000 istore 9 ,contw +7569 20600000 rtn + +publickey_init: +756a 6800c65a fetch 1 ,mem_ssp_enable +756b 243a757d nbranch sp_initialize ,blank +756c 20207a77 branch sp_initialize_256 + +sp_calc_sequence_256_check: +756d 4772403c bpatchx patch3c_4 ,mem_patch3c +756e 6800c65a fetch 1 ,mem_ssp_enable +756f 207a0000 rtn blank +7570 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +7571 c1808000 rtnne sp_key_valid +7572 6800c4be fetch 1 ,mem_le_secure_connect_enable +7573 207a0000 rtn blank +7574 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid +7575 c1018000 rtneq sp_key_valid_256 +7576 68014682 fetch 2 ,mem_ui_state_map +7577 c280757b bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +7578 6800c4c0 fetch 1 ,mem_le_sc_calc +7579 c0007a77 beq sp_calc_standby ,sp_initialize_256 +757a 20600000 rtn + +stop_publickey_calc_256: +757b 7044c000 jam sp_calc_standby ,mem_le_sc_calc +757c 20600000 rtn + +sp_initialize: +757d 4772c03c bpatchx patch3c_5 ,mem_patch3c +757e 6800c65a fetch 1 ,mem_ssp_enable +757f 203a612b branch ssp_disable ,blank +7580 20406124 call ssp_enable +7581 20407583 call sp_clear_flags +7582 2020766d branch sp_pubkey_calc + +sp_clear_flags: +7583 58000000 setarg 0 +7584 600409ae store 8 ,mem_sp_state_start +7585 600209b6 store 4 ,mem_sp_flag_start +7586 6003c65e store 7 ,mem_sp_iocap_remote +7587 20600000 rtn + +sp_generate_local_key: +7588 7009b001 jam sp_flag_commit ,mem_sp_flag +7589 2020758d branch sp_generate_local_key0 + +sp_master_generate_local_key: +758a 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +758b c000f68a beq sp_key_valid ,sp_dhkey_calc +758c 20202a8c branch assert + +sp_generate_local_key0: +758d 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +758e c000f590 beq sp_key_valid ,sp_start_send_pubkey +758f 2020766d branch sp_pubkey_calc + +sp_start_send_pubkey: +7590 2040768a call sp_dhkey_calc +7591 680089af fetch 1 ,mem_master_sp_state +7592 247a0000 nrtn blank +7593 7009ae03 jam sp_stat_key_send ,mem_sp_state +7594 20600000 rtn + +sp_calc_check_publickey_256: +7595 204075b0 call sp_calc_b256 +7596 da2009de arg mem_le_pubkey_remote_y_256 ,rega +7597 d8a00866 arg mem_t7_256 ,contw +7598 20407c79 call bn_sqrmod_256 +7599 da2009be arg mem_le_pubkey_remote_x_256 ,rega +759a d8a00826 arg mem_t2_256 ,contw +759b 20407c79 call bn_sqrmod_256 +759c da200826 arg mem_t2_256 ,rega +759d da4009be arg mem_le_pubkey_remote_x_256 ,regb +759e d8a00826 arg mem_t2_256 ,contw +759f 20407be1 call bn_mulmod_256 +75a0 da20093e arg mem_a_256 ,rega +75a1 da4009be arg mem_le_pubkey_remote_x_256 ,regb +75a2 d8a00846 arg mem_t3_256 ,contw +75a3 20407be1 call bn_mulmod_256 +75a4 da200846 arg mem_t3_256 ,rega +75a5 da400826 arg mem_t2_256 ,regb +75a6 d8a00826 arg mem_t2_256 ,contw +75a7 20407c7d call bn_addmod_256 +75a8 da200806 arg mem_t0_256 ,rega +75a9 da400826 arg mem_t2_256 ,regb +75aa d8a00806 arg mem_t0_256 ,contw +75ab 20407c7d call bn_addmod_256 +75ac df200020 arg 32 ,loopcnt +75ad da200866 arg mem_t7_256 ,rega +75ae da400806 arg mem_t0_256 ,regb +75af 20207f88 branch string_compare + +sp_calc_b256: +75b0 da20097e arg mem_gy_256 ,rega +75b1 d8a00806 arg mem_t0_256 ,contw +75b2 20407c79 call bn_sqrmod_256 +75b3 da20095e arg mem_gx_256 ,rega +75b4 d8a00826 arg mem_t2_256 ,contw +75b5 20407c79 call bn_sqrmod_256 +75b6 da200826 arg mem_t2_256 ,rega +75b7 da40095e arg mem_gx_256 ,regb +75b8 d8a00826 arg mem_t2_256 ,contw +75b9 20407be1 call bn_mulmod_256 +75ba da20093e arg mem_a_256 ,rega +75bb da40095e arg mem_gx_256 ,regb +75bc d8a00846 arg mem_t3_256 ,contw +75bd 20407be1 call bn_mulmod_256 +75be da200846 arg mem_t3_256 ,rega +75bf da400826 arg mem_t2_256 ,regb +75c0 d8a00826 arg mem_t2_256 ,contw +75c1 20407c7d call bn_addmod_256 +75c2 da200806 arg mem_t0_256 ,rega +75c3 da400826 arg mem_t2_256 ,regb +75c4 d8a00806 arg mem_t0_256 ,contw +75c5 20207c96 branch bn_submod_256 + +sp_calc_check_publickey: +75c6 204075e1 call sp_calc_b +75c7 da2009e6 arg mem_sp_pubkey_remote_y ,rega +75c8 d8a00866 arg mem_t7_256 ,contw +75c9 204077a8 call bn_sqrmod +75ca da2009c6 arg mem_sp_pubkey_remote_x ,rega +75cb d8a00826 arg mem_t2_256 ,contw +75cc 204077a8 call bn_sqrmod +75cd da200826 arg mem_t2_256 ,rega +75ce da4009c6 arg mem_sp_pubkey_remote_x ,regb +75cf d8a00826 arg mem_t2_256 ,contw +75d0 20407786 call bn_mulmod +75d1 da20089e arg mem_a ,rega +75d2 da4009c6 arg mem_sp_pubkey_remote_x ,regb +75d3 d8a00846 arg mem_t3_256 ,contw +75d4 20407786 call bn_mulmod +75d5 da200846 arg mem_t3_256 ,rega +75d6 da400826 arg mem_t2_256 ,regb +75d7 d8a00826 arg mem_t2_256 ,contw +75d8 20407755 call bn_addmod +75d9 da200806 arg mem_t0_256 ,rega +75da da400826 arg mem_t2_256 ,regb +75db d8a00806 arg mem_t0_256 ,contw +75dc 20407755 call bn_addmod +75dd df200018 arg 24 ,loopcnt +75de da200866 arg mem_t7_256 ,rega +75df da400806 arg mem_t0_256 ,regb +75e0 20207f88 branch string_compare + +sp_calc_b: +75e1 da2008e6 arg mem_gy ,rega +75e2 d8a00806 arg mem_t0_256 ,contw +75e3 204077a8 call bn_sqrmod +75e4 da2008ce arg mem_gx ,rega +75e5 d8a00826 arg mem_t2_256 ,contw +75e6 204077a8 call bn_sqrmod +75e7 da200826 arg mem_t2_256 ,rega +75e8 da4008ce arg mem_gx ,regb +75e9 d8a00826 arg mem_t2_256 ,contw +75ea 20407786 call bn_mulmod +75eb da20089e arg mem_a ,rega +75ec da4008ce arg mem_gx ,regb +75ed d8a00846 arg mem_t3_256 ,contw +75ee 20407786 call bn_mulmod +75ef da200846 arg mem_t3_256 ,rega +75f0 da400826 arg mem_t2_256 ,regb +75f1 d8a00826 arg mem_t2_256 ,contw +75f2 20407755 call bn_addmod +75f3 da200806 arg mem_t0_256 ,rega +75f4 da400826 arg mem_t2_256 ,regb +75f5 d8a00806 arg mem_t0_256 ,contw +75f6 20207758 branch bn_submod + +sp_calculate_commitment: +75f7 680089b2 fetch 1 ,mem_sp_calc +75f8 c0807615 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +75f9 20407612 call sp_local_random_key_generator +75fa d8a00a7e arg mem_sp_prarm_stack ,contw +75fb 58000a2e setarg mem_sp_random_local_end +75fc e0a10000 istore 2 ,contw +75fd 58004642 setarg mem_sp_pubkey_local_x_end +75fe e0a10000 istore 2 ,contw +75ff 580009de setarg mem_sp_pubkey_remote_x_end +7600 e0a10000 istore 2 ,contw +7601 20207609 branch sp_calculate_commitment0 + +master_sp_calculate_commitment: +7602 d8a00a7e arg mem_sp_prarm_stack ,contw +7603 58000a3e setarg mem_sp_random_remote_end +7604 e0a10000 istore 2 ,contw +7605 580009de setarg mem_sp_pubkey_remote_x_end +7606 e0a10000 istore 2 ,contw +7607 58004642 setarg mem_sp_pubkey_local_x_end +7608 e0a10000 istore 2 ,contw + +sp_calculate_commitment0: +7609 204079a0 call function_f1 +760a 680089af fetch 1 ,mem_master_sp_state +760b c002760f beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +760c 7009b001 jam sp_flag_commit ,mem_sp_flag +760d 7009ae05 jam sp_stat_commit_send ,mem_sp_state +760e 20600000 rtn + +master_sp_calculate_commitment0: +760f 7009af14 jam sp_stat_commitment_compare ,mem_master_sp_state +7610 2040758a call sp_master_generate_local_key +7611 202076d8 branch master_set_mem_master_sp_flag + +sp_local_random_key_generator: +7612 d8a00a1e arg mem_sp_random_local ,contw +7613 18000e08 force 8 ,queue +7614 202076a2 branch random_generator + +sp_calculate_commitment_wait_dhkey_calc: +7615 7009b001 jam sp_flag_commit ,mem_sp_flag +7616 20600000 rtn + +sp_confirm_check: +7617 4773403c bpatchx patch3c_6 ,mem_patch3c +7618 d8a00727 arg mem_addr_value ,contw +7619 680340a0 fetch 6 ,mem_lap +761a e0a30000 istore 6 ,contw +761b 68030040 fetch 6 ,mem_plap +761c e0a30000 istore 6 ,contw +761d 6801c65e fetch 3 ,mem_sp_iocap_remote +761e e0a18000 istore 3 ,contw +761f 20407a0d call function_f3a +7620 da200a4e arg mem_sp_calc_result_high ,rega +7621 da400a5e arg mem_sp_check_result ,regb +7622 18000e04 force 4 ,queue +7623 204076a7 call compare4 +7624 2420f631 nbranch sp_confirm_check_failed ,true +7625 20407628 call sp_confirm_check_success +7626 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 +7627 202062f8 branch tid_set_reply + +sp_confirm_check_success: +7628 680089af fetch 1 ,mem_master_sp_state +7629 c004f62e beq sp_stat_confirm_check ,sp_confirm_check_success_master +762a 7009ae0a jam sp_stat_confirm_calc ,mem_sp_state +762b 7009b001 jam sp_flag_commit ,mem_sp_flag +762c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +762d 20600000 rtn + +sp_confirm_check_success_master: +762e 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +762f 7009af15 jam sp_state_end ,mem_master_sp_state +7630 202076d8 branch master_set_mem_master_sp_flag + +sp_confirm_check_failed: +7631 680089af fetch 1 ,mem_master_sp_state +7632 c004f637 beq sp_stat_confirm_check ,sp_confirm_check_failed_master +7633 7009ae00 jam sp_stat_null ,mem_sp_state +7634 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +7635 70007e05 jam authentication_failure_error ,mem_lmo_reason2 +7636 20600000 rtn + +sp_confirm_check_failed_master: +7637 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +7638 7009af00 jam sp_stat_null ,mem_master_sp_state +7639 20600000 rtn + +sp_confirm_calc: +763a 680089b3 fetch 1 ,mem_sp_dh_ready +763b c000f63e beq sp_flag_commit ,sp_confirm_calc_ready +763c 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state +763d 202076d8 branch master_set_mem_master_sp_flag + +sp_confirm_calc_ready: +763e d8a00727 arg mem_addr_value ,contw +763f 68030040 fetch 6 ,mem_plap +7640 e0a30000 istore 6 ,contw +7641 680340a0 fetch 6 ,mem_lap +7642 e0a30000 istore 6 ,contw +7643 6801c65b fetch 3 ,mem_sp_iocap_local +7644 e0a18000 istore 3 ,contw +7645 20407a24 call function_f3b +7646 680089af fetch 1 ,mem_master_sp_state +7647 c005764b beq sp_stat_confirm_calc ,sp_confirm_calc_master +7648 7009ae0b jam sp_stat_confirm_send ,mem_sp_state +7649 7009b001 jam sp_flag_commit ,mem_sp_flag +764a 20600000 rtn + +sp_confirm_calc_master: +764b 7009af0b jam sp_stat_confirm_send ,mem_master_sp_state +764c 7009b101 jam sp_flag_commit ,mem_master_sp_flag +764d 20600000 rtn + +sp_master_key_prarm_push: +764e d8a00a7e arg mem_sp_prarm_stack ,contw +764f 68030040 fetch 6 ,mem_plap +7650 e0a30000 istore 6 ,contw +7651 680340a0 fetch 6 ,mem_lap +7652 e0a30000 istore 6 ,contw +7653 58000a2e setarg mem_sp_random_local_end +7654 e0a10000 istore 2 ,contw +7655 58000a3e setarg mem_sp_random_remote_end +7656 e0a10000 istore 2 ,contw +7657 20207662 branch sp_link_key_calc + +sp_link_key_prarm_push: +7658 7009ae0f jam sp_stat_done ,mem_sp_state +7659 d8a00a7e arg mem_sp_prarm_stack ,contw +765a 680340a0 fetch 6 ,mem_lap +765b e0a30000 istore 6 ,contw +765c 68030040 fetch 6 ,mem_plap +765d e0a30000 istore 6 ,contw +765e 58000a3e setarg mem_sp_random_remote_end +765f e0a10000 istore 2 ,contw +7660 58000a2e setarg mem_sp_random_local_end +7661 e0a10000 istore 2 ,contw + +sp_link_key_calc: +7662 d8a00727 arg mem_addr_value ,contw +7663 68030a7e fetch 6 ,mem_sp_prarm_stack +7664 e0a30000 istore 6 ,contw +7665 68030a84 fetch 6 ,mem_sp_prarm_stack + 6 +7666 e0a30000 istore 6 ,contw +7667 204079d7 call function_f2 +7668 7041bd01 jam 1 ,mem_link_key_exists +7669 d8a041be arg mem_link_key ,contw +766a d8c00a4e arg mem_sp_calc_result_high ,contr +766b 20407ebf call memcpy16 +766c 202021c4 branch generate_linkkey_continue + +sp_pubkey_calc: +766d 4773c03c bpatchx patch3c_7 ,mem_patch3c +766e 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +766f c1800000 rtnne sp_key_invalid +7670 680089b2 fetch 1 ,mem_sp_calc +7671 c1800000 rtnne sp_calc_standby +7672 d8a04612 arg mem_sp_private_key ,contw +7673 18000e0b force 11 ,queue +7674 204076a2 call random_generator +7675 180a7e00 random pdata +7676 1fe37e00 rshift pdata ,pdata +7677 e0a10000 istore 2 ,contw +7678 d8a006be arg mem_k ,contw +7679 d8c04612 arg mem_sp_private_key ,contr +767a 20407ebe call memcpy24 +767b d8a005e6 arg mem_ax ,contw +767c d8c008ce arg mem_gx ,contr +767d 20407ebc call memcpy48 +767e d8a00616 arg mem_az ,contw +767f 20407ec5 call bn_zero +7680 70061601 jam 1 ,mem_az +7681 20407a5d call eckp_calc_init +7682 7009b201 jam sp_calc_pubkey ,mem_sp_calc +7683 20600000 rtn + +sp_pubkey_generated: +7684 d8a0462a arg mem_sp_pubkey_local ,contw +7685 d8c0062e arg mem_bx ,contr +7686 20407ebc call memcpy48 +7687 7045b101 jam sp_key_valid ,mem_sp_local_key_invalid +7688 7009b200 jam sp_calc_standby ,mem_sp_calc +7689 20600000 rtn + +sp_dhkey_calc: +768a 4774403d bpatchx patch3d_0 ,mem_patch3d +768b 680089b9 fetch 1 ,mem_sp_dhkey_invalid +768c c1800000 rtnne sp_key_invalid +768d 680089b2 fetch 1 ,mem_sp_calc +768e c1800000 rtnne sp_calc_standby +768f d8a006be arg mem_k ,contw +7690 d8c04612 arg mem_sp_private_key ,contr +7691 20407ebe call memcpy24 +7692 d8a005e6 arg mem_ax ,contw +7693 d8c009c6 arg mem_sp_pubkey_remote ,contr +7694 20407ebc call memcpy48 +7695 d8a00616 arg mem_az ,contw +7696 20407ec5 call bn_zero +7697 70061601 jam 1 ,mem_az +7698 20407a5d call eckp_calc_init +7699 7009b202 jam sp_calc_dhkey ,mem_sp_calc +769a 20600000 rtn + +sp_dhkey_generated: +769b 7009b301 jam sp_flag_commit ,mem_sp_dh_ready +769c d8a00a06 arg mem_sp_dhkey ,contw +769d d8c0062e arg mem_bx ,contr +769e 20407ebe call memcpy24 +769f 7009b901 jam sp_key_valid ,mem_sp_dhkey_invalid +76a0 7009b200 jam sp_calc_standby ,mem_sp_calc +76a1 20600000 rtn + +random_generator: +76a2 18e08fff increase -1 ,queue +76a3 24610000 nrtn positive +76a4 180a7e00 random pdata +76a5 e0a10000 istore 2 ,contw +76a6 202076a2 branch random_generator + +compare4: +76a7 18e08fff increase -1 ,queue +76a8 242176b3 nbranch compare4_success ,positive +76a9 ea220000 ifetch 4 ,rega +76aa 1fe20400 copy pdata ,temp +76ab ea420000 ifetch 4 ,regb +76ac 9842fe00 iflip temp ,pdata +76ad 2422f6b1 nbranch compare4_failed ,zero +76ae 1a20a204 increase 4 ,rega +76af 1a40a404 increase 4 ,regb +76b0 202076a7 branch compare4 + +compare4_failed: +76b1 7840fc00 disable true +76b2 20600000 rtn + +compare4_success: +76b3 7820fc00 enable true +76b4 20600000 rtn + +simple_pairing_sequence: +76b5 4774c03d bpatchx patch3d_1 ,mem_patch3d +76b6 680089b0 fetch 1 ,mem_sp_flag +76b7 207a0000 rtn blank +76b8 204062bc call lmo_fifo_check +76b9 247a0000 nrtn blank +76ba 7009b000 jam sp_flag_standby ,mem_sp_flag +76bb 680089ae fetch 1 ,mem_sp_state +76bc c001e1fd beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +76bd c002e21a beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +76be c003e225 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +76bf c005e23a beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +76c0 c0017588 beq sp_stat_key_generate ,sp_generate_local_key +76c1 c00275f7 beq sp_stat_commit_calc ,sp_calculate_commitment +76c2 c004f617 beq sp_stat_confirm_check ,sp_confirm_check +76c3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc +76c4 c0067658 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +76c5 20600000 rtn + +master_simple_paring_sequence: +76c6 4775403d bpatchx patch3d_2 ,mem_patch3d +76c7 680089b1 fetch 1 ,mem_master_sp_flag +76c8 207a0000 rtn blank +76c9 204062bc call lmo_fifo_check +76ca 247a0000 nrtn blank +76cb 7009b100 jam sp_flag_standby ,mem_master_sp_flag +76cc 680089af fetch 1 ,mem_master_sp_state +76cd c00961e0 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +76ce c009e1e5 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +76cf c001e1e9 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +76d0 c0027602 beq sp_stat_commit_calc ,master_sp_calculate_commitment +76d1 c00a61ed beq sp_stat_commitment_compare ,sp_master_commitment_compare +76d2 c003e1fb beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +76d3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc +76d4 c005e239 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +76d5 c004f617 beq sp_stat_confirm_check ,sp_confirm_check +76d6 c00ae233 beq sp_state_end ,master_sp_sm_end +76d7 20600000 rtn + +master_set_mem_master_sp_flag: +76d8 7009b101 jam sp_flag_commit ,mem_master_sp_flag +76d9 20600000 rtn + +master_clear_mem_master_sp_flag: +76da 7009b100 jam sp_flag_standby ,mem_master_sp_flag +76db 20600000 rtn + +sp_calc_sequence: +76dc 4775c03d bpatchx patch3d_3 ,mem_patch3d +76dd 6800c65a fetch 1 ,mem_ssp_enable +76de 207a0000 rtn blank +76df 680089b2 fetch 1 ,mem_sp_calc +76e0 207a0000 rtn blank +76e1 1fe0fe80 increase 0x80 ,pdata +76e2 600089b2 store 1 ,mem_sp_calc +76e3 c3838000 rtnbit1 7 +76e4 680085e3 fetch 1 ,mem_ec_loopc +76e5 203a76e7 branch sp_calc_sequence_done ,blank +76e6 20207a68 branch eckp_calc + +sp_calc_sequence_done: +76e7 204078d3 call ecunmapz +76e8 680089b2 fetch 1 ,mem_sp_calc +76e9 c000f684 beq sp_calc_pubkey ,sp_pubkey_generated +76ea c001769b beq sp_calc_dhkey ,sp_dhkey_generated +76eb 20600000 rtn + +bn_testbit: +76ec 1fe10e07 and pdata ,7 ,queue +76ed 1fe97e00 rshift3 pdata ,pdata +76ee 98c08c00 iadd contr ,contr +76ef e8c08000 ifetch 1 ,contr +76f0 afec0000 qisolate0 pdata +76f1 20600000 rtn + +ec_copy: +76f2 20407ebe call memcpy24 +76f3 20407ebe call memcpy24 +76f4 20207ebe branch memcpy24 + +bn_eq_zero: +76f5 e8c40000 ifetch 8 ,contr +76f6 247a0000 nrtn blank +76f7 e8c40000 ifetch 8 ,contr +76f8 247a0000 nrtn blank +76f9 e8c40000 ifetch 8 ,contr +76fa 20600000 rtn + +bn_eq_0: +76fb ea220000 ifetch 4 ,rega +76fc 98000400 iforce temp +76fd ea420000 ifetch 4 ,regb +76fe 98467c00 isub temp ,null +76ff 24628000 nrtn zero +7700 1a20a204 increase 4 ,rega +7701 1a40a404 increase 4 ,regb +7702 c20076fb loop bn_eq_0 +7703 20600000 rtn + +bn_bigeq: +7704 18007206 force 6 ,loopcnt +7705 1a20a214 increase 20 ,rega +7706 1a40a414 increase 20 ,regb + +bn_bigeq_0: +7707 ea420000 ifetch 4 ,regb +7708 98000400 iforce temp +7709 ea220000 ifetch 4 ,rega +770a 98467e00 isub temp ,pdata +770b 24610000 nrtn positive +770c 247a0000 nrtn blank +770d 1a20a3fc increase -4 ,rega +770e 1a40a5fc increase -4 ,regb +770f c2007707 loop bn_bigeq_0 +7710 20600000 rtn + +bn_add: +7711 18007206 force 6 ,loopcnt +7712 18002600 force 0 ,regc + +bn_add_0: +7713 ea220000 ifetch 4 ,rega +7714 98000400 iforce temp +7715 ea420000 ifetch 4 ,regb +7716 9840fe00 iadd temp ,pdata +7717 9a60fe00 iadd regc ,pdata +7718 e0a20000 istore 4 ,contw +7719 2feffe20 isolate1 32 ,pdata +771a 7920a600 setflag true ,0 ,regc +771b 1a20a204 increase 4 ,rega +771c 1a40a404 increase 4 ,regb +771d c2007713 loop bn_add_0 +771e 20600000 rtn + +bn_sub: +771f 18007206 force 6 ,loopcnt +7720 18002600 force 0 ,regc + +bn_sub_0: +7721 ea420000 ifetch 4 ,regb +7722 98000400 iforce temp +7723 ea220000 ifetch 4 ,rega +7724 98467e00 isub temp ,pdata +7725 9a667e00 isub regc ,pdata +7726 e0a20000 istore 4 ,contw +7727 2feffe20 isolate1 32 ,pdata +7728 7920a600 setflag true ,0 ,regc +7729 1a20a204 increase 4 ,rega +772a 1a40a404 increase 4 ,regb +772b c2007721 loop bn_sub_0 +772c 20600000 rtn + +bn_rshift6: +772d 18007206 force 6 ,loopcnt +772e 1a20a214 increase 20 ,rega + +bn_rshift: +772f 18002600 force 0 ,regc + +bn_rshift_0: +7730 ea220000 ifetch 4 ,rega +7731 2feffe00 isolate1 0 ,pdata +7732 7920a601 setflag true ,1 ,regc +7733 1fe37e00 rshift pdata ,pdata +7734 2a6ffe00 isolate1 0 ,regc +7735 7920fe1f setflag true ,31 ,pdata +7736 e2220000 istore 4 ,rega +7737 1a20a3fc increase -4 ,rega +7738 1a632600 rshift regc ,regc +7739 c2007730 loop bn_rshift_0 +773a 20600000 rtn + +bn_lshift: +773b 18007206 force 6 ,loopcnt +773c 18002600 force 0 ,regc + +bn_lshift_0: +773d ea220000 ifetch 4 ,rega +773e 2feffe1f isolate1 31 ,pdata +773f 7920a601 setflag true ,1 ,regc +7740 1fe3fe00 lshift pdata ,pdata +7741 2a6ffe00 isolate1 0 ,regc +7742 7920fe00 setflag true ,0 ,pdata +7743 e2220000 istore 4 ,rega +7744 1a20a204 increase 4 ,rega +7745 1a632600 rshift regc ,regc +7746 c200773d loop bn_lshift_0 +7747 20600000 rtn + +bn_lshiftmod: +7748 2040773b call bn_lshift + +bn_lshiftmod_ismod: +7749 2a6ffe00 isolate1 0 ,regc +774a 2020f751 branch bn_lshiftmod_0 ,true +774b da400886 arg mem_p ,regb +774c 1a222600 copy rega ,regc +774d 1a20a3e8 increase -24 ,rega +774e 20407704 call bn_bigeq +774f 24610000 nrtn positive +7750 1a622200 copy regc ,rega + +bn_lshiftmod_0: +7751 1a20a3e8 increase -24 ,rega +7752 da400886 arg mem_p ,regb +7753 1a220a00 copy rega ,contw +7754 2020771f branch bn_sub + +bn_addmod: +7755 20407711 call bn_add +7756 18a22200 copy contw ,rega +7757 20207749 branch bn_lshiftmod_ismod + +bn_submod: +7758 2040771f call bn_sub +7759 2a6c0000 isolate0 0 ,regc +775a 20608000 rtn true +775b da400886 arg mem_p ,regb +775c 18a0a3e8 add contw ,-24 ,rega +775d 1a220a00 copy rega ,contw +775e 20207711 branch bn_add + +bn_p192mod: +775f 18a21600 copy contw ,timeup +7760 1a226000 copy rega ,alarm +7761 da400716 arg mem_tmp2 ,regb +7762 1a420a00 copy regb ,contw +7763 1a208c18 add rega ,24 ,contr +7764 e8c40000 ifetch 8 ,contr +7765 e0a40000 istore 8 ,contw +7766 e0a40000 istore 8 ,contw +7767 18007e00 force 0 ,pdata +7768 e0a40000 istore 8 ,contw +7769 19620a00 copy timeup ,contw +776a 20407755 call bn_addmod +776b da400716 arg mem_tmp2 ,regb +776c 1a420a00 copy regb ,contw +776d 18007e00 force 0 ,pdata +776e e0a40000 istore 8 ,contw +776f 1e008c20 add alarm ,32 ,contr +7770 e8c40000 ifetch 8 ,contr +7771 e0a40000 istore 8 ,contw +7772 e0a40000 istore 8 ,contw +7773 19622200 copy timeup ,rega +7774 1a220a00 copy rega ,contw +7775 20407755 call bn_addmod +7776 da400716 arg mem_tmp2 ,regb +7777 1a420a00 copy regb ,contw +7778 1e008c28 add alarm ,40 ,contr +7779 e8c40000 ifetch 8 ,contr +777a e0a40000 istore 8 ,contw +777b e0a40000 istore 8 ,contw +777c e0a40000 istore 8 ,contw +777d 19622200 copy timeup ,rega +777e 1a220a00 copy rega ,contw +777f 20207755 branch bn_addmod + +bn_load: +7780 18007206 force 6 ,loopcnt + +bn_load_0: +7781 e8c20000 ifetch 4 ,contr +7782 98005e00 iforce regext +7783 1f00f001 increase 1 ,regext_index +7784 c2007781 loop bn_load_0 +7785 20600000 rtn + +bn_mulmod: +7786 18a21600 copy contw ,timeup +7787 d8a006e6 arg mem_tmp1 ,contw +7788 20407ec5 call bn_zero +7789 d8a006e6 arg mem_tmp1 ,contw +778a 1a220c00 copy rega ,contr +778b 18007000 force 0 ,regext_index +778c 20407780 call bn_load +778d 1a420c00 copy regb ,contr +778e 20407780 call bn_load +778f 18002400 force 0 ,regb + +bn_mulmod_1: +7790 18000400 force 0 ,temp +7791 18002606 force 6 ,regc + +bn_mulmod_0: +7792 e8a20000 ifetch 4 ,contw +7793 98002200 iforce rega +7794 1a427000 copy regb ,regext_index +7795 1de27e00 deposit regext +7796 1a627000 copy regc ,regext_index +7797 9deffe00 imul32 regext ,pdata +7798 9a20fe00 iadd rega ,pdata +7799 9840fe00 iadd temp ,pdata +779a e0a20000 istore 4 ,contw +779b 1fef0400 rshift32 pdata ,temp +779c 1a60a601 increase 1 ,regc +779d 2a61fe0c compare 12 ,regc ,0xff +779e 2420f792 nbranch bn_mulmod_0 ,true +779f 18427e00 deposit temp +77a0 e0a20000 istore 4 ,contw +77a1 18a08be8 increase -24 ,contw +77a2 1a40a401 increase 1 ,regb +77a3 2a41fe06 compare 6 ,regb ,0xff +77a4 2420f790 nbranch bn_mulmod_1 ,true +77a5 da2006e6 arg mem_tmp1 ,rega +77a6 19620a00 copy timeup ,contw +77a7 2020775f branch bn_p192mod + +bn_sqrmod: +77a8 1a222400 copy rega ,regb +77a9 20207786 branch bn_mulmod + +bn_rshifteven: +77aa 1a226000 copy rega ,alarm + +bn_rshifteven_1: +77ab 1e022200 copy alarm ,rega +77ac ea208000 ifetch 1 ,rega +77ad 2feffe00 isolate1 0 ,pdata +77ae 20608000 rtn true +77af 2040772d call bn_rshift6 +77b0 ea408000 ifetch 1 ,regb +77b1 2fec0000 isolate0 0 ,pdata +77b2 2020f7ba branch bn_rshifteven_0 ,true +77b3 da200886 arg mem_p ,rega +77b4 1a420a00 copy regb ,contw +77b5 20407711 call bn_add +77b6 ea408000 ifetch 1 ,regb +77b7 9a60fe00 iadd regc ,pdata +77b8 e2408000 istore 1 ,regb +77b9 1a40a5e8 increase -24 ,regb + +bn_rshifteven_0: +77ba 1a40a218 add regb ,24 ,rega +77bb 18007207 force 7 ,loopcnt +77bc 2040772f call bn_rshift +77bd 202077ab branch bn_rshifteven_1 + +bn_invmod: +77be 18a21600 copy contw ,timeup +77bf d8a00746 arg mem_tmp0 ,contw +77c0 20407ec5 call bn_zero +77c1 18007e00 force 0 ,pdata +77c2 600206fe store 4 ,mem_tmp5 +77c3 6002075e store 4 ,mem_t2 +77c4 70074601 jam 1 ,mem_tmp0 +77c5 d8a006e6 arg mem_tmp1 ,contw +77c6 20407ec5 call bn_zero +77c7 d8c00886 arg mem_p ,contr +77c8 d8a00716 arg mem_tmp2 ,contw +77c9 20407ebe call memcpy24 +77ca 1a220c00 copy rega ,contr +77cb d8a0072e arg mem_tmp3 ,contw +77cc 20407ebe call memcpy24 + +bn_invmod_2: +77cd d8c0072e arg mem_tmp3 ,contr +77ce 204076f5 call bn_eq_zero +77cf 203a77f6 branch bn_invmod_0 ,blank +77d0 da20072e arg mem_tmp3 ,rega +77d1 da400746 arg mem_tmp0 ,regb +77d2 204077aa call bn_rshifteven +77d3 da200716 arg mem_tmp2 ,rega +77d4 da4006e6 arg mem_tmp1 ,regb +77d5 204077aa call bn_rshifteven +77d6 da20072e arg mem_tmp3 ,rega +77d7 da400716 arg mem_tmp2 ,regb +77d8 20407704 call bn_bigeq +77d9 202177e8 branch bn_invmod_1 ,positive +77da da200716 arg mem_tmp2 ,rega +77db da40072e arg mem_tmp3 ,regb +77dc 1a220a00 copy rega ,contw +77dd 2040771f call bn_sub +77de da200746 arg mem_tmp0 ,rega +77df da4006e6 arg mem_tmp1 ,regb +77e0 1a420a00 copy regb ,contw +77e1 20407711 call bn_add +77e2 ea208000 ifetch 1 ,rega +77e3 9a60a600 iadd regc ,regc +77e4 ea408000 ifetch 1 ,regb +77e5 9a60fe00 iadd regc ,pdata +77e6 e2408000 istore 1 ,regb +77e7 202077cd branch bn_invmod_2 + +bn_invmod_1: +77e8 da20072e arg mem_tmp3 ,rega +77e9 da400716 arg mem_tmp2 ,regb +77ea 1a220a00 copy rega ,contw +77eb 2040771f call bn_sub +77ec da2006e6 arg mem_tmp1 ,rega +77ed da400746 arg mem_tmp0 ,regb +77ee 1a420a00 copy regb ,contw +77ef 20407711 call bn_add +77f0 ea208000 ifetch 1 ,rega +77f1 9a60a600 iadd regc ,regc +77f2 ea408000 ifetch 1 ,regb +77f3 9a60fe00 iadd regc ,pdata +77f4 e2408000 istore 1 ,regb +77f5 202077cd branch bn_invmod_2 + +bn_invmod_0: +77f6 d8a00746 arg mem_tmp0 ,contw +77f7 20407ec5 call bn_zero +77f8 680086fe fetch 1 ,mem_tmp5 +77f9 60008746 store 1 ,mem_tmp0 +77fa 6000874e store 1 ,mem_tmp0a +77fb da200746 arg mem_tmp0 ,rega +77fc da4006e6 arg mem_tmp1 ,regb +77fd 1a420a00 copy regb ,contw +77fe 20407755 call bn_addmod +77ff da200886 arg mem_p ,rega +7800 da4006e6 arg mem_tmp1 ,regb +7801 19620a00 copy timeup ,contw +7802 20207758 branch bn_submod + +ecdbl: +7803 da2006a6 arg mem_cz ,rega +7804 d8a0075e arg mem_t2 ,contw +7805 204077a8 call bn_sqrmod +7806 da20075e arg mem_t2 ,rega +7807 d8a00776 arg mem_t3 ,contw +7808 204077a8 call bn_sqrmod +7809 da20089e arg mem_a ,rega +780a da400776 arg mem_t3 ,regb +780b d8a00776 arg mem_t3 ,contw +780c 20407786 call bn_mulmod +780d da200676 arg mem_cx ,rega +780e d8a0075e arg mem_t2 ,contw +780f 204077a8 call bn_sqrmod +7810 d8c0075e arg mem_t2 ,contr +7811 d8a0072e arg mem_t1 ,contw +7812 20407ebe call memcpy24 +7813 da20072e arg mem_t1 ,rega +7814 20407748 call bn_lshiftmod +7815 da20075e arg mem_t2 ,rega +7816 da40072e arg mem_t1 ,regb +7817 d8a0075e arg mem_t2 ,contw +7818 20407755 call bn_addmod +7819 da20075e arg mem_t2 ,rega +781a da400776 arg mem_t3 ,regb +781b d8a0075e arg mem_t2 ,contw +781c 20407755 call bn_addmod +781d d8c00676 arg mem_cx ,contr +781e d8a0072e arg mem_t1 ,contw +781f 20407ebe call memcpy24 +7820 da20068e arg mem_cy ,rega +7821 d8a00776 arg mem_t3 ,contw +7822 204077a8 call bn_sqrmod +7823 da20072e arg mem_t1 ,rega +7824 20407748 call bn_lshiftmod +7825 da20072e arg mem_t1 ,rega +7826 20407748 call bn_lshiftmod +7827 da20072e arg mem_t1 ,rega +7828 da400776 arg mem_t3 ,regb +7829 d8a0072e arg mem_t1 ,contw +782a 20407786 call bn_mulmod +782b da200776 arg mem_t3 ,rega +782c d8a00746 arg mem_t0 ,contw +782d 204077a8 call bn_sqrmod +782e da200746 arg mem_t0 ,rega +782f 20407748 call bn_lshiftmod +7830 da200746 arg mem_t0 ,rega +7831 20407748 call bn_lshiftmod +7832 da200746 arg mem_t0 ,rega +7833 20407748 call bn_lshiftmod +7834 d8c0068e arg mem_cy ,contr +7835 d8a00776 arg mem_t3 ,contw +7836 20407ebe call memcpy24 +7837 da200776 arg mem_t3 ,rega +7838 20407748 call bn_lshiftmod +7839 da200776 arg mem_t3 ,rega +783a da4006a6 arg mem_cz ,regb +783b d8a006a6 arg mem_cz ,contw +783c 20407786 call bn_mulmod +783d da20075e arg mem_t2 ,rega +783e d8a00776 arg mem_t3 ,contw +783f 204077a8 call bn_sqrmod +7840 da200776 arg mem_t3 ,rega +7841 da40072e arg mem_t1 ,regb +7842 d8a00776 arg mem_t3 ,contw +7843 20407758 call bn_submod +7844 da200776 arg mem_t3 ,rega +7845 da40072e arg mem_t1 ,regb +7846 d8a00676 arg mem_cx ,contw +7847 20407758 call bn_submod +7848 da20072e arg mem_t1 ,rega +7849 da400676 arg mem_cx ,regb +784a d8a00776 arg mem_t3 ,contw +784b 20407758 call bn_submod +784c da200776 arg mem_t3 ,rega +784d da40075e arg mem_t2 ,regb +784e d8a00776 arg mem_t3 ,contw +784f 20407786 call bn_mulmod +7850 da200776 arg mem_t3 ,rega +7851 da400746 arg mem_t0 ,regb +7852 d8a0068e arg mem_cy ,contw +7853 20207758 branch bn_submod + +ecadd: +7854 da200616 arg mem_az ,rega +7855 d8a0078e arg mem_t7 ,contw +7856 204077a8 call bn_sqrmod +7857 da200676 arg mem_cx ,rega +7858 da40078e arg mem_t7 ,regb +7859 d8a00746 arg mem_t0 ,contw +785a 20407786 call bn_mulmod +785b da200616 arg mem_az ,rega +785c da40078e arg mem_t7 ,regb +785d d8a0078e arg mem_t7 ,contw +785e 20407786 call bn_mulmod +785f da20068e arg mem_cy ,rega +7860 da40078e arg mem_t7 ,regb +7861 d8a0072e arg mem_t1 ,contw +7862 20407786 call bn_mulmod +7863 da2006a6 arg mem_cz ,rega +7864 d8a0078e arg mem_t7 ,contw +7865 204077a8 call bn_sqrmod +7866 da2005e6 arg mem_ax ,rega +7867 da40078e arg mem_t7 ,regb +7868 d8a0075e arg mem_t2 ,contw +7869 20407786 call bn_mulmod +786a da2006a6 arg mem_cz ,rega +786b da40078e arg mem_t7 ,regb +786c d8a0078e arg mem_t7 ,contw +786d 20407786 call bn_mulmod +786e da2005fe arg mem_ay ,rega +786f da40078e arg mem_t7 ,regb +7870 d8a00776 arg mem_t3 ,contw +7871 20407786 call bn_mulmod +7872 da200746 arg mem_t0 ,rega +7873 da40075e arg mem_t2 ,regb +7874 d8a0078e arg mem_t7 ,contw +7875 20407758 call bn_submod +7876 da200746 arg mem_t0 ,rega +7877 da40075e arg mem_t2 ,regb +7878 d8a00746 arg mem_t0 ,contw +7879 20407755 call bn_addmod +787a da20072e arg mem_t1 ,rega +787b da400776 arg mem_t3 ,regb +787c d8a0075e arg mem_t2 ,contw +787d 20407758 call bn_submod +787e da20072e arg mem_t1 ,rega +787f da400776 arg mem_t3 ,regb +7880 d8a0072e arg mem_t1 ,contw +7881 20407755 call bn_addmod +7882 da20072e arg mem_t1 ,rega +7883 da40078e arg mem_t7 ,regb +7884 d8a0072e arg mem_t1 ,contw +7885 20407786 call bn_mulmod +7886 da2006a6 arg mem_cz ,rega +7887 da400616 arg mem_az ,regb +7888 d8a00776 arg mem_t3 ,contw +7889 20407786 call bn_mulmod +788a da200776 arg mem_t3 ,rega +788b da40078e arg mem_t7 ,regb +788c d8a006a6 arg mem_cz ,contw +788d 20407786 call bn_mulmod +788e da20078e arg mem_t7 ,rega +788f d8a0078e arg mem_t7 ,contw +7890 204077a8 call bn_sqrmod +7891 da20078e arg mem_t7 ,rega +7892 da400746 arg mem_t0 ,regb +7893 d8a00776 arg mem_t3 ,contw +7894 20407786 call bn_mulmod +7895 da20078e arg mem_t7 ,rega +7896 da40072e arg mem_t1 ,regb +7897 d8a0072e arg mem_t1 ,contw +7898 20407786 call bn_mulmod +7899 da20075e arg mem_t2 ,rega +789a d8a00676 arg mem_cx ,contw +789b 204077a8 call bn_sqrmod +789c da200676 arg mem_cx ,rega +789d da400776 arg mem_t3 ,regb +789e d8a00676 arg mem_cx ,contw +789f 20407758 call bn_submod +78a0 d8c00676 arg mem_cx ,contr +78a1 d8a0078e arg mem_t7 ,contw +78a2 20407ebe call memcpy24 +78a3 da20078e arg mem_t7 ,rega +78a4 20407748 call bn_lshiftmod +78a5 da200776 arg mem_t3 ,rega +78a6 da40078e arg mem_t7 ,regb +78a7 d8a00776 arg mem_t3 ,contw +78a8 20407758 call bn_submod +78a9 da200776 arg mem_t3 ,rega +78aa da40075e arg mem_t2 ,regb +78ab d8a0075e arg mem_t2 ,contw +78ac 20407786 call bn_mulmod +78ad da20075e arg mem_t2 ,rega +78ae da40072e arg mem_t1 ,regb +78af d8a0068e arg mem_cy ,contw +78b0 20407758 call bn_submod +78b1 da20068e arg mem_cy ,rega +78b2 da400886 arg mem_p ,regb +78b3 d8a0068e arg mem_cy ,contw +78b4 18002600 force 0 ,regc +78b5 6800868e fetch 1 ,mem_cy +78b6 2feffe00 isolate1 0 ,pdata +78b7 2040f711 call bn_add ,true +78b8 1a626000 copy regc ,alarm +78b9 da20068e arg mem_cy ,rega +78ba 2040772d call bn_rshift6 +78bb 680086a5 fetch 1 ,mem_cy5 +78bc 2e0ffe00 isolate1 0 ,alarm +78bd 7920fe07 setflag true ,7 ,pdata +78be 600086a5 store 1 ,mem_cy5 +78bf 20600000 rtn + +eckp_0: +78c0 680085e3 fetch 1 ,mem_ec_loopc +78c1 1fe0ffff increase -1 ,pdata +78c2 24610000 nrtn positive +78c3 600085e3 store 1 ,mem_ec_loopc +78c4 680085e2 fetch 1 ,mem_ec_infinite +78c5 205a7803 call ecdbl ,blank +78c6 680085e3 fetch 1 ,mem_ec_loopc +78c7 d8c006be arg mem_k ,contr +78c8 204076ec call bn_testbit +78c9 2020f8c0 branch eckp_0 ,true +78ca 680085e2 fetch 1 ,mem_ec_infinite +78cb 243a78ce nbranch eckp_1 ,blank +78cc 20407854 call ecadd +78cd 202078c0 branch eckp_0 + +eckp_1: +78ce 7005e200 jam 0 ,mem_ec_infinite +78cf d8c005e6 arg mem_ax ,contr +78d0 d8a00676 arg mem_cx ,contw +78d1 204076f2 call ec_copy +78d2 202078c0 branch eckp_0 + +ecunmapz: +78d3 da2006a6 arg mem_cz ,rega +78d4 d8a00776 arg mem_t3 ,contw +78d5 204077be call bn_invmod +78d6 da200776 arg mem_t3 ,rega +78d7 d8a0072e arg mem_t1 ,contw +78d8 204077a8 call bn_sqrmod +78d9 da200676 arg mem_cx ,rega +78da da40072e arg mem_t1 ,regb +78db d8a0062e arg mem_bx ,contw +78dc 20407786 call bn_mulmod +78dd da200776 arg mem_t3 ,rega +78de da40072e arg mem_t1 ,regb +78df d8a0075e arg mem_t2 ,contw +78e0 20407786 call bn_mulmod +78e1 da20068e arg mem_cy ,rega +78e2 da40075e arg mem_t2 ,regb +78e3 d8a00646 arg mem_by ,contw +78e4 20207786 branch bn_mulmod + +sha_endian_swap2: +78e5 e8c20000 ifetch 4 ,contr +78e6 18002204 force 4 ,rega +78e7 18a08a03 increase 3 ,contw + +sha_endian_loop: +78e8 e0a08000 istore 1 ,contw +78e9 1fecfe00 rshift8 pdata ,pdata +78ea 18a08bfe increase -2 ,contw +78eb 1a20a3ff increase -1 ,rega +78ec 2422f8e8 nbranch sha_endian_loop ,zero +78ed 18a08a05 increase 5 ,contw +78ee c20078e5 loop sha_endian_swap2 +78ef 20600000 rtn + +sha_getw: +78f0 18ebfe00 lshift2 queue ,pdata +78f1 99608c00 iadd timeup ,contr +78f2 e8c20000 ifetch 4 ,contr +78f3 20600000 rtn + +sha_r: +78f4 18006010 force 16 ,alarm +78f5 d96005e6 arg memdat ,timeup + +sha_r_loop: +78f6 1e008ff9 add alarm ,-7 ,queue +78f7 204078f0 call sha_getw +78f8 98000400 iforce temp +78f9 1e008ff0 add alarm ,-16 ,queue +78fa 204078f0 call sha_getw +78fb 98408400 iadd temp ,temp +78fc 1e008ffe add alarm ,-2 ,queue +78fd 204078f0 call sha_getw +78fe 1fee7e01 shasx pdata ,1 ,pdata +78ff 98408400 iadd temp ,temp +7900 1e008ff1 add alarm ,-15 ,queue +7901 204078f0 call sha_getw +7902 1fee7e00 shasx pdata ,0 ,pdata +7903 98408400 iadd temp ,temp +7904 1e0bfe00 lshift2 alarm ,pdata +7905 99608a00 iadd timeup ,contw +7906 e0aa0000 istoret 4 ,contw +7907 1e00e001 increase 1 ,alarm +7908 2e01fe40 compare 64 ,alarm ,0xff +7909 2420f8f6 nbranch sha_r_loop ,true +790a 20600000 rtn + +sha_init: +790b d8c008fe arg memh0 ,contr +790c 18007007 force 7 ,regext_index + +sha_init_0: +790d e8c20000 ifetch 4 ,contr +790e 98005e00 iforce regext +790f 1f00f1ff increase -1 ,regext_index +7910 2021790d branch sha_init_0 ,positive +7911 20600000 rtn + +sha: +7912 4776403d bpatchx patch3d_4 ,mem_patch3d +7913 204078f4 call sha_r +7914 d8a006e6 arg memahbak ,contw +7915 18007000 force 0 ,regext_index + +sha_0: +7916 1de27e00 deposit regext +7917 e0a20000 istore 4 ,contw +7918 1f00f001 increase 1 ,regext_index +7919 2f01fe08 compare 8 ,regext_index ,0xff +791a 2420f916 nbranch sha_0 ,true +791b 204074b9 call enable_authrom +791c d9608700 arg memk ,timeup +791d de0005e6 arg memdat ,alarm +791e 18007240 force 64 ,loopcnt + +sha_loop: +791f ee0a0000 ifetcht 4 ,alarm +7920 e9620000 ifetch 4 ,timeup +7921 19609604 increase 4 ,timeup +7922 1e00e004 increase 4 ,alarm +7923 9840fe00 iadd temp ,pdata +7924 18007007 force 7 ,regext_index +7925 9de08400 iadd regext ,temp +7926 18007004 force 4 ,regext_index +7927 1dee7e03 shasx regext ,3 ,pdata +7928 98408400 iadd temp ,temp +7929 18007005 force 5 ,regext_index +792a 1de27e00 deposit regext +792b 18007006 force 6 ,regext_index +792c 9de2fe00 ixor regext ,pdata +792d 18007004 force 4 ,regext_index +792e 9de17e00 iand regext ,pdata +792f 18007006 force 6 ,regext_index +7930 9de2fe00 ixor regext ,pdata +7931 98408400 iadd temp ,temp +7932 18007007 force 7 ,regext_index +7933 18425e00 copy temp ,regext +7934 18007003 force 3 ,regext_index +7935 1de27e00 deposit regext +7936 9840de00 iadd temp ,regext +7937 18007000 force 0 ,regext_index +7938 1de27e00 deposit regext +7939 18007001 force 1 ,regext_index +793a 9de10400 iand regext ,temp +793b 9de1fe00 ior regext ,pdata +793c 18007002 force 2 ,regext_index +793d 9de17e00 iand regext ,pdata +793e 98418400 ior temp ,temp +793f 18007000 force 0 ,regext_index +7940 1dee7e02 shasx regext ,2 ,pdata +7941 9840fe00 iadd temp ,pdata +7942 18007007 force 7 ,regext_index +7943 9de0de00 iadd regext ,regext +7944 980efc00 regexrot +7945 c200791f loop sha_loop +7946 d8c006e6 arg memahbak ,contr +7947 18007000 force 0 ,regext_index + +sha_1: +7948 e8c20000 ifetch 4 ,contr +7949 9de0de00 iadd regext ,regext +794a 1f00f001 increase 1 ,regext_index +794b 2f01fe08 compare 8 ,regext_index ,0xff +794c 2420f948 nbranch sha_1 ,true +794d 202074bd branch disable_authrom + +sha_result: +794e d8a00a3e arg memresult ,contw +794f 18007007 force 7 ,regext_index + +sha_regext_save: +7950 1de27e00 deposit regext +7951 e0a20000 istore 4 ,contw +7952 1f00f1ff increase -1 ,regext_index +7953 20217950 branch sha_regext_save ,positive +7954 20600000 rtn + +pad_xor: +7955 d8a005e6 arg memdat ,contw +7956 18c08dfc increase -4 ,contr +7957 1f262210 sub loopcnt ,16 ,rega + +pad_xor_0: +7958 e8c20000 ifetch 4 ,contr +7959 9842fe00 ixor temp ,pdata +795a e0a20000 istore 4 ,contw +795b 18c08df8 increase -8 ,contr +795c c2007958 loop pad_xor_0 +795d 1a227200 copy rega ,loopcnt +795e 18427e00 deposit temp + +pad_xor_1: +795f e0a20000 istore 4 ,contw +7960 c200795f loop pad_xor_1 +7961 20600000 rtn + +g_noninit_number_confirm: +7962 20407967 call g_noninit0 +7963 2040794e call sha_result +7964 2020798d branch g_common0 + +g_noninit: +7965 20407967 call g_noninit0 +7966 2020798d branch g_common0 + +g_noninit0: +7967 d8c009de arg mem_sp_pubkey_remote_x_end ,contr +7968 d8a005e6 arg memdat ,contw +7969 18007206 force 6 ,loopcnt +796a 20407a71 call memcpy_dword_swap +796b d8c04642 arg mem_sp_pubkey_local_x_end ,contr +796c 18007206 force 6 ,loopcnt +796d 20407a71 call memcpy_dword_swap +796e d8c00a3e arg mem_sp_random_remote_end ,contr +796f 20407a70 call memcpy_dword_swap4 +7970 2040790b call sha_init +7971 20407912 call sha +7972 d8c00a2e arg mem_sp_random_local_end ,contr +7973 d8a005e6 arg memdat ,contw +7974 20207984 branch g_common + +g_init: +7975 d8c04642 arg mem_sp_pubkey_local_x_end ,contr +7976 d8a005e6 arg memdat ,contw +7977 18007206 force 6 ,loopcnt +7978 20407a71 call memcpy_dword_swap +7979 d8c009de arg mem_sp_pubkey_remote_x_end ,contr +797a 18007206 force 6 ,loopcnt +797b 20407a71 call memcpy_dword_swap +797c d8c00a2e arg mem_sp_random_local_end ,contr +797d 20407a70 call memcpy_dword_swap4 +797e 2040790b call sha_init +797f 20407912 call sha +7980 d8c00a3e arg mem_sp_random_remote_end ,contr +7981 d8a005e6 arg memdat ,contw +7982 20407984 call g_common +7983 2020798d branch g_common0 + +g_common: +7984 20407a70 call memcpy_dword_swap4 +7985 58800000 setarg 0x800000 +7986 1fed7e00 lshift8 pdata ,pdata +7987 e0a20000 istore 4 ,contw +7988 18007205 force 5 ,loopcnt +7989 20407ec6 call memset0 +798a 58000280 setarg 640 +798b e0a20000 istore 4 ,contw +798c 20207912 branch sha + +g_common0: +798d 68020a3e fetch 4 ,memresult +798e da2003e8 arg 1000 ,rega +798f 9a26fc00 idiv rega +7990 20407f86 call wait_div_end +7991 18077e00 remainder pdata +7992 600209ba store 4 ,mem_gkey +7993 1807fe00 quotient pdata +7994 da2003e8 arg 1000 ,rega +7995 9a26fc00 idiv rega +7996 20407f86 call wait_div_end +7997 18077e00 remainder pdata +7998 da2003e8 arg 1000 ,rega +7999 9a2ffe00 imul32 rega ,pdata +799a 680a09ba fetcht 4 ,mem_gkey +799b 9840fe00 iadd temp ,pdata +799c 600209ba store 4 ,mem_gkey +799d 20600000 rtn + +function_f1_no_key: +799e 70466400 jam 0 ,mem_passkey_1bit +799f 202079a2 branch function_f1_common + +function_f1: +79a0 6800c662 fetch 1 ,mem_ssp_mode_flag +79a1 c081799e bne ssp_mode_passkey_entry_flag ,function_f1_no_key + +function_f1_common: +79a2 4776c03d bpatchx patch3d_5 ,mem_patch3d +79a3 58363636 setarg 0x363636 +79a4 1fed0400 lshift8 pdata ,temp +79a5 18418436 or_into 0x36 ,temp +79a6 68010a7e fetch 2 ,mem_sp_prarm_stack +79a7 1fe20c00 copy pdata ,contr +79a8 18007204 force 4 ,loopcnt +79a9 20407955 call pad_xor +79aa 2040790b call sha_init +79ab 20407912 call sha +79ac 68010a80 fetch 2 ,mem_sp_prarm_stack + 2 +79ad 1fe20c00 copy pdata ,contr +79ae d8a005e6 arg memdat ,contw +79af 18007206 force 6 ,loopcnt +79b0 20407a71 call memcpy_dword_swap +79b1 68010a82 fetch 2 ,mem_sp_prarm_stack + 4 +79b2 1fe20c00 copy pdata ,contr +79b3 18007206 force 6 ,loopcnt +79b4 20407a71 call memcpy_dword_swap +79b5 58800000 setarg 0x800000 +79b6 e0a18000 istore 3 ,contw +79b7 6800c664 fetch 1 ,mem_passkey_1bit +79b8 e0a08000 istore 1 ,contw +79b9 18007e00 force 0 ,pdata +79ba e0a40000 istore 8 ,contw +79bb 58000388 setarg 0x0388 +79bc e0a20000 istore 4 ,contw +79bd 20407912 call sha +79be 2040794e call sha_result +79bf d8c00a3e arg memresult ,contr +79c0 d8a00706 arg memahsave ,contw +79c1 20407ebd call memcpy32 +79c2 585c5c5c setarg 0x5c5c5c +79c3 1fed0400 lshift8 pdata ,temp +79c4 1841845c or_into 0x5c ,temp +79c5 68010a7e fetch 2 ,mem_sp_prarm_stack +79c6 1fe20c00 copy pdata ,contr +79c7 18007204 force 4 ,loopcnt +79c8 20407955 call pad_xor +79c9 2040790b call sha_init +79ca 20407912 call sha +79cb d8c00726 arg memahsave_end ,contr +79cc d8a005e6 arg memdat ,contw +79cd 18007208 force 8 ,loopcnt +79ce 20407a71 call memcpy_dword_swap +79cf 58800000 setarg 0x800000 +79d0 1fed7e00 lshift8 pdata ,pdata +79d1 e0a20000 istore 4 ,contw +79d2 20407ec5 call bn_zero +79d3 58000300 setarg 0x0300 +79d4 e0a20000 istore 4 ,contw +79d5 20407912 call sha +79d6 2020794e branch sha_result + +function_f2: +79d7 58363636 setarg 0x363636 +79d8 1fed0400 lshift8 pdata ,temp +79d9 18418436 or_into 0x36 ,temp +79da d8c00a1e arg mem_sp_dhkey_end ,contr +79db 18007206 force 6 ,loopcnt +79dc 20407955 call pad_xor +79dd 2040790b call sha_init +79de 20407912 call sha +79df 68010a8a fetch 2 ,mem_sp_prarm_stack + 12 +79e0 1fe20c00 copy pdata ,contr +79e1 d8a005e6 arg memdat ,contw +79e2 20407a70 call memcpy_dword_swap4 +79e3 68010a8c fetch 2 ,mem_sp_prarm_stack + 14 +79e4 1fe20c00 copy pdata ,contr +79e5 20407a70 call memcpy_dword_swap4 +79e6 5862746c setarg 0x62746c +79e7 1fed7e00 lshift8 pdata ,pdata +79e8 1fe1fe6b or_into 0x6b ,pdata +79e9 e0a20000 istore 4 ,contw +79ea d8c00733 arg mem_addr_value_end ,contr +79eb 18007203 force 3 ,loopcnt +79ec 20407a71 call memcpy_dword_swap +79ed 58800000 setarg 0x800000 +79ee 1fed7e00 lshift8 pdata ,pdata +79ef e0a20000 istore 4 ,contw +79f0 18007e00 force 0 ,pdata +79f1 e0a40000 istore 8 ,contw +79f2 58000380 setarg 0x0380 +79f3 e0a20000 istore 4 ,contw +79f4 20407912 call sha +79f5 2040794e call sha_result +79f6 d8c00a3e arg memresult ,contr +79f7 d8a00706 arg memahsave ,contw +79f8 20407ebd call memcpy32 +79f9 585c5c5c setarg 0x5c5c5c +79fa 1fed0400 lshift8 pdata ,temp +79fb 1841845c or_into 0x5c ,temp +79fc d8c00a1e arg mem_sp_dhkey_end ,contr +79fd 18007206 force 6 ,loopcnt +79fe 20407955 call pad_xor +79ff 2040790b call sha_init +7a00 20407912 call sha +7a01 d8c00726 arg memahsave_end ,contr +7a02 d8a005e6 arg memdat ,contw +7a03 18007208 force 8 ,loopcnt +7a04 20407a71 call memcpy_dword_swap +7a05 58800000 setarg 0x800000 +7a06 1fed7e00 lshift8 pdata ,pdata +7a07 e0a20000 istore 4 ,contw +7a08 20407ec5 call bn_zero +7a09 58000300 setarg 0x0300 +7a0a e0a20000 istore 4 ,contw +7a0b 20407912 call sha +7a0c 2020794e branch sha_result + +function_f3a: +7a0d 6800c662 fetch 1 ,mem_ssp_mode_flag +7a0e c0817a1e bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin + +function_f3a_common: +7a0f 4777403d bpatchx patch3d_6 ,mem_patch3d +7a10 58363636 setarg 0x363636 +7a11 1fed0400 lshift8 pdata ,temp +7a12 18418436 or_into 0x36 ,temp +7a13 d8c00a1e arg mem_sp_dhkey_end ,contr +7a14 18007206 force 6 ,loopcnt +7a15 20407955 call pad_xor +7a16 2040790b call sha_init +7a17 20407912 call sha +7a18 d8c00a3e arg mem_sp_random_remote_end ,contr +7a19 d8a005e6 arg memdat ,contw +7a1a 20407a70 call memcpy_dword_swap4 +7a1b d8c00a2e arg mem_sp_random_local_end ,contr +7a1c 20407a70 call memcpy_dword_swap4 +7a1d 20207a33 branch function_f3_common + +function_f3a_no_pin: +7a1e 58000000 setarg 0 +7a1f 6002468a store 4 ,mem_pin +7a20 20207a0f branch function_f3a_common + +function_f3b_no_pin: +7a21 58000000 setarg 0 +7a22 6002468a store 4 ,mem_pin +7a23 20207a26 branch function_f3b_common + +function_f3b: +7a24 6800c662 fetch 1 ,mem_ssp_mode_flag +7a25 c0817a21 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin + +function_f3b_common: +7a26 58363636 setarg 0x363636 +7a27 1fed0400 lshift8 pdata ,temp +7a28 18418436 or_into 0x36 ,temp +7a29 d8c00a1e arg mem_sp_dhkey_end ,contr +7a2a 18007206 force 6 ,loopcnt +7a2b 20407955 call pad_xor +7a2c 2040790b call sha_init +7a2d 20407912 call sha +7a2e d8c00a2e arg mem_sp_random_local_end ,contr +7a2f d8a005e6 arg memdat ,contw +7a30 20407a70 call memcpy_dword_swap4 +7a31 d8c00a3e arg mem_sp_random_remote_end ,contr +7a32 20407a70 call memcpy_dword_swap4 + +function_f3_common: +7a33 58000000 setarg 0x0 +7a34 e0a40000 istore 8 ,contw +7a35 e0a20000 istore 4 ,contw +7a36 6802468a fetch 4 ,mem_pin +7a37 e0a20000 istore 4 ,contw +7a38 18a20400 copy contw ,temp +7a39 70072680 jam 0x80 ,mem_addr_padding +7a3a 18420a00 copy temp ,contw +7a3b d8c00736 arg mem_addr_iocap_end ,contr +7a3c 20407a70 call memcpy_dword_swap4 +7a3d 20407912 call sha +7a3e d8a005e6 arg memdat ,contw +7a3f 18007207 force 7 ,loopcnt +7a40 20407ec6 call memset0 +7a41 e0a20000 istore 4 ,contw +7a42 580003f8 setarg 0x03F8 +7a43 e0a20000 istore 4 ,contw +7a44 20407912 call sha +7a45 2040794e call sha_result +7a46 d8c00a3e arg memresult ,contr +7a47 d8a00706 arg memahsave ,contw +7a48 20407ebd call memcpy32 +7a49 585c5c5c setarg 0x5c5c5c +7a4a 1fed0400 lshift8 pdata ,temp +7a4b 1841845c or_into 0x5c ,temp +7a4c d8c00a1e arg mem_sp_dhkey_end ,contr +7a4d 18007206 force 6 ,loopcnt +7a4e 20407955 call pad_xor +7a4f 2040790b call sha_init +7a50 20407912 call sha +7a51 d8c00726 arg memahsave_end ,contr +7a52 d8a005e6 arg memdat ,contw +7a53 18007208 force 8 ,loopcnt +7a54 20407a71 call memcpy_dword_swap +7a55 58800000 setarg 0x800000 +7a56 1fed7e00 lshift8 pdata ,pdata +7a57 e0a20000 istore 4 ,contw +7a58 20407ec5 call bn_zero +7a59 58000300 setarg 0x0300 +7a5a e0a20000 istore 4 ,contw +7a5b 20407912 call sha +7a5c 2020794e branch sha_result + +eckp_calc_init: +7a5d 7005e3c0 jam 192 ,mem_ec_loopc + +eckp_calc_init_1: +7a5e 680085e3 fetch 1 ,mem_ec_loopc +7a5f 207a0000 rtn blank +7a60 1fe0ffff increase -1 ,pdata +7a61 600085e3 store 1 ,mem_ec_loopc +7a62 d8c006be arg mem_k ,contr +7a63 204076ec call bn_testbit +7a64 2020fa5e branch eckp_calc_init_1 ,true +7a65 d8c005e6 arg mem_ax ,contr +7a66 d8a00676 arg mem_cx ,contw +7a67 202076f2 branch ec_copy + +eckp_calc: +7a68 20407803 call ecdbl +7a69 680085e3 fetch 1 ,mem_ec_loopc +7a6a 1fe0ffff increase -1 ,pdata +7a6b 600085e3 store 1 ,mem_ec_loopc +7a6c d8c006be arg mem_k ,contr +7a6d 204076ec call bn_testbit +7a6e 20608000 rtn true +7a6f 20207854 branch ecadd + +memcpy_dword_swap4: +7a70 18007204 force 4 ,loopcnt + +memcpy_dword_swap: +7a71 18c08dfc increase -4 ,contr + +memcpy_dword_swap_loop: +7a72 e8c20000 ifetch 4 ,contr +7a73 e0a20000 istore 4 ,contw +7a74 18c08df8 increase -8 ,contr +7a75 c2007a72 loop memcpy_dword_swap_loop +7a76 20600000 rtn + +sp_initialize_256: +7a77 4777c03d bpatchx patch3d_7 ,mem_patch3d +7a78 6800c4be fetch 1 ,mem_le_secure_connect_enable +7a79 203a5af0 branch le_secure_connection_disable ,blank +7a7a 20405aec call le_secure_connection_enable +7a7b 20407583 call sp_clear_flags +7a7c 20207a7d branch sp_pubkey_calc_256 + +sp_pubkey_calc_256: +7a7d 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid +7a7e c1800000 rtnne sp_key_invalid +7a7f 6800c4c0 fetch 1 ,mem_le_sc_calc +7a80 c1800000 rtnne sp_calc_standby +7a81 d8a045b2 arg mem_le_private_key_256 ,contw +7a82 18000e0f force 15 ,queue +7a83 204076a2 call random_generator +7a84 180a7e00 random pdata +7a85 1fe37e00 rshift pdata ,pdata +7a86 e0a10000 istore 2 ,contw +7a87 d8a00766 arg mem_k_256 ,contw +7a88 d8c045b2 arg mem_le_private_key_256 ,contr +7a89 20407ebd call memcpy32 +7a8a d8a00646 arg mem_ax_256 ,contw +7a8b d8c0095e arg mem_gx_256 ,contr +7a8c 20407eb3 call memcpy64 +7a8d d8a00686 arg mem_az_256 ,contw +7a8e 20407ed0 call clear_mem_256 +7a8f 70068601 jam 1 ,mem_az_256 +7a90 20407ac7 call eckp_calc_init_256 +7a91 7044c003 jam sp_calc_pubkey_256 ,mem_le_sc_calc +7a92 20600000 rtn + +sp_pubkey_generated_256: +7a93 d8a045d2 arg mem_le_pubkey_local_x_256 ,contw +7a94 d8c006a6 arg mem_bx_256 ,contr +7a95 20407eb3 call memcpy64 +7a96 7044c303 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid +7a97 7044c000 jam sp_calc_standby ,mem_le_sc_calc +7a98 20600000 rtn + +sp_dhkey_calc_256: +7a99 680089b9 fetch 1 ,mem_sp_dhkey_invalid +7a9a c1800000 rtnne sp_key_invalid +7a9b 6800c4c0 fetch 1 ,mem_le_sc_calc +7a9c c1800000 rtnne sp_calc_standby +7a9d d8a00766 arg mem_k_256 ,contw +7a9e d8c045b2 arg mem_le_private_key_256 ,contr +7a9f 20407ebd call memcpy32 +7aa0 d8a00646 arg mem_ax_256 ,contw +7aa1 d8c009be arg mem_le_pubkey_remote_x_256 ,contr +7aa2 20407eb3 call memcpy64 +7aa3 d8a00686 arg mem_az_256 ,contw +7aa4 20407ed0 call clear_mem_256 +7aa5 70068601 jam 1 ,mem_az_256 +7aa6 20407ac7 call eckp_calc_init_256 +7aa7 7044c004 jam sp_calc_dhkey_256 ,mem_le_sc_calc +7aa8 20600000 rtn + +sp_dhkey_generated_256: +7aa9 d8a009fe arg mem_le_dhkey_256 ,contw +7aaa d8c006a6 arg mem_bx_256 ,contr +7aab 20407ebd call memcpy32 +7aac 7009b903 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +7aad 7044c000 jam sp_calc_standby ,mem_le_sc_calc +7aae 20600000 rtn + +sp_calc_sequence_256: +7aaf 6800c4be fetch 1 ,mem_le_secure_connect_enable +7ab0 207a0000 rtn blank +7ab1 6800c4c0 fetch 1 ,mem_le_sc_calc +7ab2 207a0000 rtn blank +7ab3 1fe0fe80 increase 0x80 ,pdata +7ab4 6000c4c0 store 1 ,mem_le_sc_calc +7ab5 c3838000 rtnbit1 7 +7ab6 680105e3 fetch 2 ,mem_ec_loopc +7ab7 203a7ab9 branch sp_calc_sequence_done_256 ,blank +7ab8 20207abf branch eckp_calc_256 + +sp_calc_sequence_done_256: +7ab9 4778403e bpatchx patch3e_0 ,mem_patch3e +7aba 20407ad4 call ecunmapz_256 +7abb 6800c4c0 fetch 1 ,mem_le_sc_calc +7abc c001fa93 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +7abd c0027aa9 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +7abe 20600000 rtn + +eckp_calc_256: +7abf 20407ae6 call ecdbl_256 +7ac0 680105e3 fetch 2 ,mem_ec_loopc +7ac1 1fe0ffff increase -1 ,pdata +7ac2 600105e3 store 2 ,mem_ec_loopc +7ac3 d8c00766 arg mem_k_256 ,contr +7ac4 204076ec call bn_testbit +7ac5 20608000 rtn true +7ac6 20207b37 branch ecadd_256 + +eckp_calc_init_256: +7ac7 4778c03e bpatchx patch3e_1 ,mem_patch3e +7ac8 58000100 setarg 256 ,pdata +7ac9 600105e3 store 2 ,mem_ec_loopc + +eckp_calc_init_256_1: +7aca 680105e3 fetch 2 ,mem_ec_loopc +7acb 207a0000 rtn blank +7acc 1fe0ffff increase -1 ,pdata +7acd 600105e3 store 2 ,mem_ec_loopc +7ace d8c00766 arg mem_k_256 ,contr +7acf 204076ec call bn_testbit +7ad0 2020faca branch eckp_calc_init_256_1 ,true +7ad1 d8c00646 arg mem_ax_256 ,contr +7ad2 d8a00706 arg mem_cx_256 ,contw +7ad3 20207eb2 branch memcpy96 + +ecunmapz_256: +7ad4 da200746 arg mem_cz_256 ,rega +7ad5 d8a00846 arg mem_t3_256 ,contw +7ad6 20407ba3 call bn_invmod_256 +7ad7 da200846 arg mem_t3_256 ,rega +7ad8 d8a007e6 arg mem_t1_256 ,contw +7ad9 20407c79 call bn_sqrmod_256 +7ada da200706 arg mem_cx_256 ,rega +7adb da4007e6 arg mem_t1_256 ,regb +7adc d8a006a6 arg mem_bx_256 ,contw +7add 20407be1 call bn_mulmod_256 +7ade da200846 arg mem_t3_256 ,rega +7adf da4007e6 arg mem_t1_256 ,regb +7ae0 d8a00826 arg mem_t2_256 ,contw +7ae1 20407be1 call bn_mulmod_256 +7ae2 da200726 arg mem_cy_256 ,rega +7ae3 da400826 arg mem_t2_256 ,regb +7ae4 d8a006c6 arg mem_by_256 ,contw +7ae5 20207be1 branch bn_mulmod_256 + +ecdbl_256: +7ae6 da200746 arg mem_cz_256 ,rega +7ae7 d8a00826 arg mem_t2_256 ,contw +7ae8 20407c79 call bn_sqrmod_256 +7ae9 da200826 arg mem_t2_256 ,rega +7aea d8a00846 arg mem_t3_256 ,contw +7aeb 20407c79 call bn_sqrmod_256 +7aec da20093e arg mem_a_256 ,rega +7aed da400846 arg mem_t3_256 ,regb +7aee d8a00846 arg mem_t3_256 ,contw +7aef 20407be1 call bn_mulmod_256 +7af0 da200706 arg mem_cx_256 ,rega +7af1 d8a00826 arg mem_t2_256 ,contw +7af2 20407c79 call bn_sqrmod_256 +7af3 d8c00826 arg mem_t2_256 ,contr +7af4 d8a007e6 arg mem_t1_256 ,contw +7af5 20407ebd call memcpy32 +7af6 da2007e6 arg mem_t1_256 ,rega +7af7 20407c80 call bn_lshiftmod_256 +7af8 da200826 arg mem_t2_256 ,rega +7af9 da4007e6 arg mem_t1_256 ,regb +7afa d8a00826 arg mem_t2_256 ,contw +7afb 20407c7d call bn_addmod_256 +7afc da200826 arg mem_t2_256 ,rega +7afd da400846 arg mem_t3_256 ,regb +7afe d8a00826 arg mem_t2_256 ,contw +7aff 20407c7d call bn_addmod_256 +7b00 d8c00706 arg mem_cx_256 ,contr +7b01 d8a007e6 arg mem_t1_256 ,contw +7b02 20407ebd call memcpy32 +7b03 da200726 arg mem_cy_256 ,rega +7b04 d8a00846 arg mem_t3_256 ,contw +7b05 20407c79 call bn_sqrmod_256 +7b06 da2007e6 arg mem_t1_256 ,rega +7b07 20407c80 call bn_lshiftmod_256 +7b08 da2007e6 arg mem_t1_256 ,rega +7b09 20407c80 call bn_lshiftmod_256 +7b0a da2007e6 arg mem_t1_256 ,rega +7b0b da400846 arg mem_t3_256 ,regb +7b0c d8a007e6 arg mem_t1_256 ,contw +7b0d 20407be1 call bn_mulmod_256 +7b0e da200846 arg mem_t3_256 ,rega +7b0f d8a00806 arg mem_t0_256 ,contw +7b10 20407c79 call bn_sqrmod_256 +7b11 da200806 arg mem_t0_256 ,rega +7b12 20407c80 call bn_lshiftmod_256 +7b13 da200806 arg mem_t0_256 ,rega +7b14 20407c80 call bn_lshiftmod_256 +7b15 da200806 arg mem_t0_256 ,rega +7b16 20407c80 call bn_lshiftmod_256 +7b17 d8c00726 arg mem_cy_256 ,contr +7b18 d8a00846 arg mem_t3_256 ,contw +7b19 20407ebd call memcpy32 +7b1a da200846 arg mem_t3_256 ,rega +7b1b 20407c80 call bn_lshiftmod_256 +7b1c da200846 arg mem_t3_256 ,rega +7b1d da400746 arg mem_cz_256 ,regb +7b1e d8a00746 arg mem_cz_256 ,contw +7b1f 20407be1 call bn_mulmod_256 +7b20 da200826 arg mem_t2_256 ,rega +7b21 d8a00846 arg mem_t3_256 ,contw +7b22 20407c79 call bn_sqrmod_256 +7b23 da200846 arg mem_t3_256 ,rega +7b24 da4007e6 arg mem_t1_256 ,regb +7b25 d8a00846 arg mem_t3_256 ,contw +7b26 20407c96 call bn_submod_256 +7b27 da200846 arg mem_t3_256 ,rega +7b28 da4007e6 arg mem_t1_256 ,regb +7b29 d8a00706 arg mem_cx_256 ,contw +7b2a 20407c96 call bn_submod_256 +7b2b da2007e6 arg mem_t1_256 ,rega +7b2c da400706 arg mem_cx_256 ,regb +7b2d d8a00846 arg mem_t3_256 ,contw +7b2e 20407c96 call bn_submod_256 +7b2f da200846 arg mem_t3_256 ,rega +7b30 da400826 arg mem_t2_256 ,regb +7b31 d8a00846 arg mem_t3_256 ,contw +7b32 20407be1 call bn_mulmod_256 +7b33 da200846 arg mem_t3_256 ,rega +7b34 da400806 arg mem_t0_256 ,regb +7b35 d8a00726 arg mem_cy_256 ,contw +7b36 20207c96 branch bn_submod_256 + +ecadd_256: +7b37 da200686 arg mem_az_256 ,rega +7b38 d8a00866 arg mem_t7_256 ,contw +7b39 20407c79 call bn_sqrmod_256 +7b3a da200706 arg mem_cx_256 ,rega +7b3b da400866 arg mem_t7_256 ,regb +7b3c d8a00806 arg mem_t0_256 ,contw +7b3d 20407be1 call bn_mulmod_256 +7b3e da200686 arg mem_az_256 ,rega +7b3f da400866 arg mem_t7_256 ,regb +7b40 d8a00866 arg mem_t7_256 ,contw +7b41 20407be1 call bn_mulmod_256 +7b42 da200726 arg mem_cy_256 ,rega +7b43 da400866 arg mem_t7_256 ,regb +7b44 d8a007e6 arg mem_t1_256 ,contw +7b45 20407be1 call bn_mulmod_256 +7b46 da200746 arg mem_cz_256 ,rega +7b47 d8a00866 arg mem_t7_256 ,contw +7b48 20407c79 call bn_sqrmod_256 +7b49 da200646 arg mem_ax_256 ,rega +7b4a da400866 arg mem_t7_256 ,regb +7b4b d8a00826 arg mem_t2_256 ,contw +7b4c 20407be1 call bn_mulmod_256 +7b4d da200746 arg mem_cz_256 ,rega +7b4e da400866 arg mem_t7_256 ,regb +7b4f d8a00866 arg mem_t7_256 ,contw +7b50 20407be1 call bn_mulmod_256 +7b51 da200666 arg mem_ay_256 ,rega +7b52 da400866 arg mem_t7_256 ,regb +7b53 d8a00846 arg mem_t3_256 ,contw +7b54 20407be1 call bn_mulmod_256 +7b55 da400806 arg mem_t0_256 ,regb +7b56 da200826 arg mem_t2_256 ,rega +7b57 d8a00866 arg mem_t7_256 ,contw +7b58 20407c96 call bn_submod_256 +7b59 da200806 arg mem_t0_256 ,rega +7b5a da400826 arg mem_t2_256 ,regb +7b5b d8a00806 arg mem_t0_256 ,contw +7b5c 20407c7d call bn_addmod_256 +7b5d da4007e6 arg mem_t1_256 ,regb +7b5e da200846 arg mem_t3_256 ,rega +7b5f d8a00826 arg mem_t2_256 ,contw +7b60 20407c96 call bn_submod_256 +7b61 da2007e6 arg mem_t1_256 ,rega +7b62 da400846 arg mem_t3_256 ,regb +7b63 d8a007e6 arg mem_t1_256 ,contw +7b64 20407c7d call bn_addmod_256 +7b65 da2007e6 arg mem_t1_256 ,rega +7b66 da400866 arg mem_t7_256 ,regb +7b67 d8a007e6 arg mem_t1_256 ,contw +7b68 20407be1 call bn_mulmod_256 +7b69 da200746 arg mem_cz_256 ,rega +7b6a da400686 arg mem_az_256 ,regb +7b6b d8a00846 arg mem_t3_256 ,contw +7b6c 20407be1 call bn_mulmod_256 +7b6d da200846 arg mem_t3_256 ,rega +7b6e da400866 arg mem_t7_256 ,regb +7b6f d8a00746 arg mem_cz_256 ,contw +7b70 20407be1 call bn_mulmod_256 +7b71 da200866 arg mem_t7_256 ,rega +7b72 d8a00866 arg mem_t7_256 ,contw +7b73 20407c79 call bn_sqrmod_256 +7b74 da200866 arg mem_t7_256 ,rega +7b75 da400806 arg mem_t0_256 ,regb +7b76 d8a00846 arg mem_t3_256 ,contw +7b77 20407be1 call bn_mulmod_256 +7b78 da200866 arg mem_t7_256 ,rega +7b79 da4007e6 arg mem_t1_256 ,regb +7b7a d8a007e6 arg mem_t1_256 ,contw +7b7b 20407be1 call bn_mulmod_256 +7b7c da200826 arg mem_t2_256 ,rega +7b7d d8a00706 arg mem_cx_256 ,contw +7b7e 20407c79 call bn_sqrmod_256 +7b7f da200706 arg mem_cx_256 ,rega +7b80 da400846 arg mem_t3_256 ,regb +7b81 d8a00706 arg mem_cx_256 ,contw +7b82 20407c96 call bn_submod_256 +7b83 d8c00706 arg mem_cx_256 ,contr +7b84 d8a00866 arg mem_t7_256 ,contw +7b85 20407ebd call memcpy32 +7b86 da200866 arg mem_t7_256 ,rega +7b87 20407c80 call bn_lshiftmod_256 +7b88 da200846 arg mem_t3_256 ,rega +7b89 da400866 arg mem_t7_256 ,regb +7b8a d8a00846 arg mem_t3_256 ,contw +7b8b 20407c96 call bn_submod_256 +7b8c da200846 arg mem_t3_256 ,rega +7b8d da400826 arg mem_t2_256 ,regb +7b8e d8a00826 arg mem_t2_256 ,contw +7b8f 20407be1 call bn_mulmod_256 +7b90 da200826 arg mem_t2_256 ,rega +7b91 da4007e6 arg mem_t1_256 ,regb +7b92 d8a00726 arg mem_cy_256 ,contw +7b93 20407c96 call bn_submod_256 +7b94 da200726 arg mem_cy_256 ,rega +7b95 da40091e arg mem_p_256 ,regb +7b96 d8a00726 arg mem_cy_256 ,contw +7b97 18002600 force 0 ,regc +7b98 68008726 fetch 1 ,mem_cy_256 +7b99 2feffe00 isolate1 0 ,pdata +7b9a 2040fc7b call bn_add_256 ,true +7b9b 1a626000 copy regc ,alarm +7b9c da200726 arg mem_cy_256 ,rega +7b9d 20407cab call bn_rshift_256 +7b9e 68008745 fetch 1 ,mem_cy5_256 +7b9f 2e0ffe00 isolate1 0 ,alarm +7ba0 7920fe07 setflag true ,7 ,pdata +7ba1 60008745 store 1 ,mem_cy5_256 +7ba2 20600000 rtn + +bn_invmod_256: +7ba3 18a21600 copy contw ,timeup +7ba4 d8a00806 arg mem_tmp0_256 ,contw +7ba5 20407ed0 call clear_mem_256 +7ba6 18007e00 force 0 ,pdata +7ba7 60020826 store 4 ,mem_t2_256 +7ba8 70080601 jam 1 ,mem_tmp0_256 +7ba9 d8a00786 arg mem_tmp1_256 ,contw +7baa 20407ed2 call clear_mem_512 +7bab d8c0091e arg mem_p_256 ,contr +7bac d8a007c6 arg mem_tmp2_256 ,contw +7bad 20407ebd call memcpy32 +7bae 1a220c00 copy rega ,contr +7baf d8a007e6 arg mem_tmp3_256 ,contw +7bb0 20407ebd call memcpy32 + +bn_invmod_256_2: +7bb1 d8c007e6 arg mem_tmp3_256 ,contr +7bb2 20407cb5 call bn_eq_zero_256 +7bb3 203a7bda branch bn_invmod_256_0 ,blank +7bb4 da2007e6 arg mem_tmp3_256 ,rega +7bb5 da400806 arg mem_tmp0_256 ,regb +7bb6 20407cb8 call bn_rshifteven_256 +7bb7 da2007c6 arg mem_tmp2_256 ,rega +7bb8 da400786 arg mem_tmp1_256 ,regb +7bb9 20407cb8 call bn_rshifteven_256 +7bba da2007e6 arg mem_tmp3_256 ,rega +7bbb da4007c6 arg mem_tmp2_256 ,regb +7bbc 20407cb1 call bn_bigeq_256 +7bbd 20217bcc branch bn_invmod_256_1 ,positive +7bbe da2007c6 arg mem_tmp2_256 ,rega +7bbf da4007e6 arg mem_tmp3_256 ,regb +7bc0 1a220a00 copy rega ,contw +7bc1 20407ca9 call bn_sub_256 +7bc2 da200806 arg mem_tmp0_256 ,rega +7bc3 da400786 arg mem_tmp1_256 ,regb +7bc4 1a420a00 copy regb ,contw +7bc5 20407c7b call bn_add_256 +7bc6 ea208000 ifetch 1 ,rega +7bc7 9a60a600 iadd regc ,regc +7bc8 ea408000 ifetch 1 ,regb +7bc9 9a60fe00 iadd regc ,pdata +7bca e2408000 istore 1 ,regb +7bcb 20207bb1 branch bn_invmod_256_2 + +bn_invmod_256_1: +7bcc da2007e6 arg mem_tmp3_256 ,rega +7bcd da4007c6 arg mem_tmp2_256 ,regb +7bce 1a220a00 copy rega ,contw +7bcf 20407ca9 call bn_sub_256 +7bd0 da200786 arg mem_tmp1_256 ,rega +7bd1 da400806 arg mem_tmp0_256 ,regb +7bd2 1a420a00 copy regb ,contw +7bd3 20407c7b call bn_add_256 +7bd4 ea208000 ifetch 1 ,rega +7bd5 9a60a600 iadd regc ,regc +7bd6 ea408000 ifetch 1 ,regb +7bd7 9a60fe00 iadd regc ,pdata +7bd8 e2408000 istore 1 ,regb +7bd9 20207bb1 branch bn_invmod_256_2 + +bn_invmod_256_0: +7bda da200786 arg mem_tmp1_256 ,rega +7bdb 19620a00 copy timeup ,contw +7bdc 20407c0a call bn_p256mod +7bdd da20091e arg mem_p_256 ,rega +7bde 19622400 copy timeup ,regb +7bdf 19620a00 copy timeup ,contw +7be0 20207c96 branch bn_submod_256 + +bn_mulmod_256: +7be1 18a21600 copy contw ,timeup +7be2 18007000 force 0 ,regext_index +7be3 d8a00786 arg mem_tmp1_256 ,contw +7be4 20407ed2 call clear_mem_512 +7be5 d8a00ad2 arg mem_regext ,contw +7be6 20407ed2 call clear_mem_512 +7be7 1a220c00 copy rega ,contr +7be8 700ad200 jam 0 ,mem_regext +7be9 58000000 setarg 0 +7bea 20407c73 call bn_load_mem +7beb 1a420c00 copy regb ,contr +7bec 20407c77 call bn_load_256 +7bed 18000e00 force 0 ,queue +7bee d8a00786 arg mem_tmp1_256 ,contw + +bn_mulmod_256_1: +7bef d8400ad2 arg mem_regext ,temp +7bf0 18e22400 copy queue ,regb +7bf1 1a4bfe00 lshift2 regb ,pdata +7bf2 9840a400 iadd temp ,regb +7bf3 18000400 force 0 ,temp +7bf4 18002600 force 0 ,regc + +bn_mulmod_256_0: +7bf5 e8a20000 ifetch 4 ,contw +7bf6 98002200 iforce rega +7bf7 ea420000 ifetch 4 ,regb +7bf8 1a627000 copy regc ,regext_index +7bf9 9deffe00 imul32 regext ,pdata +7bfa 9a20fe00 iadd rega ,pdata +7bfb 9840fe00 iadd temp ,pdata +7bfc e0a20000 istore 4 ,contw +7bfd 1fef0400 rshift32 pdata ,temp +7bfe 1a60a601 increase 1 ,regc +7bff 2a61fe08 compare 8 ,regc ,0xff +7c00 2420fbf5 nbranch bn_mulmod_256_0 ,true +7c01 18427e00 deposit temp +7c02 e0a20000 istore 4 ,contw +7c03 18a08be0 increase -32 ,contw +7c04 18e08e01 increase 1 ,queue +7c05 28e1fe08 compare 8 ,queue ,0xff +7c06 2420fbef nbranch bn_mulmod_256_1 ,true +7c07 da200786 arg mem_tmp1_256 ,rega +7c08 19620a00 copy timeup ,contw +7c09 20207c0a branch bn_p256mod + +bn_p256mod: +7c0a 4779403e bpatchx patch3e_2 ,mem_patch3e +7c0b 18a21600 copy contw ,timeup +7c0c 1a226000 copy rega ,alarm +7c0d da4007c6 arg mem_tmp2_256 ,regb +7c0e 1a420a00 copy regb ,contw +7c0f 20407ecd call memset0_4 +7c10 e0a40000 istore 8 ,contw +7c11 1a208c2c add rega ,44 ,contr +7c12 20407eb9 call memcpy8 +7c13 20407eb5 call memcpy12 +7c14 1a422200 copy regb ,rega +7c15 20407c80 call bn_lshiftmod_256 +7c16 da4007c6 arg mem_tmp2_256 ,regb +7c17 1e022200 copy alarm ,rega +7c18 19620a00 copy timeup ,contw +7c19 20407c7d call bn_addmod_256 +7c1a da4007c6 arg mem_tmp2_256 ,regb +7c1b 1a420a00 copy regb ,contw +7c1c 20407ecd call memset0_4 +7c1d e0a40000 istore 8 ,contw +7c1e 1e008c30 add alarm ,48 ,contr +7c1f 20407ebf call memcpy16 +7c20 20407ecd call memset0_4 +7c21 1a422200 copy regb ,rega +7c22 20407c80 call bn_lshiftmod_256 +7c23 da4007c6 arg mem_tmp2_256 ,regb +7c24 19622200 copy timeup ,rega +7c25 1a220a00 copy rega ,contw +7c26 20407c7d call bn_addmod_256 +7c27 da4007c6 arg mem_tmp2_256 ,regb +7c28 1a420a00 copy regb ,contw +7c29 1e008c20 add alarm ,32 ,contr +7c2a 20407eb5 call memcpy12 +7c2b 20407ecd call memset0_4 +7c2c e0a40000 istore 8 ,contw +7c2d 1e008c38 add alarm ,56 ,contr +7c2e 20407eb9 call memcpy8 +7c2f 19622200 copy timeup ,rega +7c30 1a220a00 copy rega ,contw +7c31 20407c7d call bn_addmod_256 +7c32 da4007c6 arg mem_tmp2_256 ,regb +7c33 1a420a00 copy regb ,contw +7c34 1e008c24 add alarm ,36 ,contr +7c35 20407eb5 call memcpy12 +7c36 1e008c34 add alarm ,52 ,contr +7c37 20407eb5 call memcpy12 +7c38 1e008c34 add alarm ,52 ,contr +7c39 20407eb6 call memcpy4 +7c3a 1e008c20 add alarm ,32 ,contr +7c3b 20407eb6 call memcpy4 +7c3c 19622200 copy timeup ,rega +7c3d 1a220a00 copy rega ,contw +7c3e 20407c7d call bn_addmod_256 +7c3f da4007c6 arg mem_tmp2_256 ,regb +7c40 1a420a00 copy regb ,contw +7c41 1e008c2c add alarm ,44 ,contr +7c42 20407eb5 call memcpy12 +7c43 20407ecd call memset0_4 +7c44 e0a40000 istore 8 ,contw +7c45 1e008c20 add alarm ,32 ,contr +7c46 20407eb6 call memcpy4 +7c47 1e008c28 add alarm ,40 ,contr +7c48 20407eb6 call memcpy4 +7c49 19622200 copy timeup ,rega +7c4a 1a220a00 copy rega ,contw +7c4b 20407c96 call bn_submod_256 +7c4c da4007c6 arg mem_tmp2_256 ,regb +7c4d 1a420a00 copy regb ,contw +7c4e 1e008c30 add alarm ,48 ,contr +7c4f 20407eb9 call memcpy8 +7c50 20407eb9 call memcpy8 +7c51 18007e00 force 0 ,pdata +7c52 e0a40000 istore 8 ,contw +7c53 1e008c24 add alarm ,36 ,contr +7c54 20407eb6 call memcpy4 +7c55 1e008c2c add alarm ,44 ,contr +7c56 20407eb6 call memcpy4 +7c57 19622200 copy timeup ,rega +7c58 1a220a00 copy rega ,contw +7c59 20407c96 call bn_submod_256 +7c5a da4007c6 arg mem_tmp2_256 ,regb +7c5b 1a420a00 copy regb ,contw +7c5c 1e008c34 add alarm ,52 ,contr +7c5d 20407eb5 call memcpy12 +7c5e 1e008c20 add alarm ,32 ,contr +7c5f 20407eb5 call memcpy12 +7c60 20407ecd call memset0_4 +7c61 1e008c30 add alarm ,48 ,contr +7c62 20407eb6 call memcpy4 +7c63 19622200 copy timeup ,rega +7c64 1a220a00 copy rega ,contw +7c65 20407c96 call bn_submod_256 +7c66 da4007c6 arg mem_tmp2_256 ,regb +7c67 1a420a00 copy regb ,contw +7c68 1e008c38 add alarm ,56 ,contr +7c69 20407eb9 call memcpy8 +7c6a 20407ecd call memset0_4 +7c6b 1e008c24 add alarm ,36 ,contr +7c6c 20407eb5 call memcpy12 +7c6d 20407ecd call memset0_4 +7c6e 1e008c34 add alarm ,52 ,contr +7c6f 20407eb6 call memcpy4 +7c70 19622200 copy timeup ,rega +7c71 1a220a00 copy rega ,contw +7c72 20207c96 branch bn_submod_256 + +bn_load_mem: +7c73 18007220 force 32 ,loopcnt +7c74 d8a00ad2 arg mem_regext ,contw +7c75 98a08a00 iadd contw ,contw +7c76 20207f01 branch memcpy + +bn_load_256: +7c77 18007208 force 8 ,loopcnt +7c78 20207781 branch bn_load_0 + +bn_sqrmod_256: +7c79 1a222400 copy rega ,regb +7c7a 20207be1 branch bn_mulmod_256 + +bn_add_256: +7c7b 18007208 force 8 ,loopcnt +7c7c 20207712 branch bn_add + 1 + +bn_addmod_256: +7c7d 20407c7b call bn_add_256 +7c7e 18a22200 copy contw ,rega +7c7f 20207c81 branch bn_lshiftmod_ismod_256 + +bn_lshiftmod_256: +7c80 20407cae call bn_lshift_256 + +bn_lshiftmod_ismod_256: +7c81 2a6ffe00 isolate1 0 ,regc +7c82 2020fc8a branch bn_lshiftmod_p_256 ,true +7c83 da40091e arg mem_p_256 ,regb +7c84 1a222600 copy rega ,regc +7c85 1a20a3e0 increase -32 ,rega +7c86 20407cb1 call bn_bigeq_256 +7c87 24610000 nrtn positive +7c88 1a622200 copy regc ,rega +7c89 20207c92 branch sub_p2_256 + +bn_lshiftmod_p_256: +7c8a 20407c92 call sub_p2_256 +7c8b 1a222600 copy rega ,regc +7c8c 1a20a3e0 increase -32 ,rega +7c8d da40091e arg mem_p_256 ,regb +7c8e 20407cb1 call bn_bigeq_256 +7c8f 24610000 nrtn positive +7c90 1a622200 copy regc ,rega +7c91 20207c92 branch sub_p2_256 + +sub_p2_256: +7c92 1a20a3e0 increase -32 ,rega +7c93 da40091e arg mem_p_256 ,regb +7c94 1a220a00 copy rega ,contw +7c95 20207ca9 branch bn_sub_256 + +bn_submod_256: +7c96 20407ca9 call bn_sub_256 +7c97 2020fca0 branch bn_submod_256_np ,true +7c98 18a0a3e0 add contw ,-32 ,rega +7c99 da40091e arg mem_p_256 ,regb +7c9a 20407cb1 call bn_bigeq_256 +7c9b 24610000 nrtn positive +7c9c da40091e arg mem_p_256 ,regb +7c9d 18a0a3e0 add contw ,-32 ,rega +7c9e 1a220a00 copy rega ,contw +7c9f 20207ca9 branch bn_sub_256 + +bn_submod_256_np: +7ca0 18a0a3e0 add contw ,-32 ,rega +7ca1 da40091e arg mem_p_256 ,regb +7ca2 1a220a00 copy rega ,contw +7ca3 20407c7b call bn_add_256 +7ca4 20608000 rtn true +7ca5 18a0a3e0 add contw ,-32 ,rega +7ca6 da40091e arg mem_p_256 ,regb +7ca7 1a220a00 copy rega ,contw +7ca8 20207c7b branch bn_add_256 + +bn_sub_256: +7ca9 18007208 force 8 ,loopcnt +7caa 20207720 branch bn_sub + 1 + +bn_rshift_256: +7cab 18007208 force 8 ,loopcnt +7cac 1a20a21c increase 28 ,rega +7cad 2020772f branch bn_rshift + +bn_lshift_256: +7cae 18007208 force 8 ,loopcnt +7caf 18002600 force 0 ,regc +7cb0 2020773d branch bn_lshift_0 + +bn_bigeq_256: +7cb1 18007208 force 8 ,loopcnt +7cb2 1a20a21c increase 28 ,rega +7cb3 1a40a41c increase 28 ,regb +7cb4 20207707 branch bn_bigeq_0 + +bn_eq_zero_256: +7cb5 e8c40000 ifetch 8 ,contr +7cb6 247a0000 nrtn blank +7cb7 202076f5 branch bn_eq_zero + +bn_rshifteven_256: +7cb8 1a226000 copy rega ,alarm + +bn_rshifteven_256_1: +7cb9 1e022200 copy alarm ,rega +7cba ea208000 ifetch 1 ,rega +7cbb 2feffe00 isolate1 0 ,pdata +7cbc 20608000 rtn true +7cbd 20407cab call bn_rshift_256 +7cbe ea408000 ifetch 1 ,regb +7cbf 2fec0000 isolate0 0 ,pdata +7cc0 2020fcc8 branch bn_rshifteven_256_0 ,true +7cc1 da20091e arg mem_p_256 ,rega +7cc2 1a420a00 copy regb ,contw +7cc3 20407c7b call bn_add_256 +7cc4 ea408000 ifetch 1 ,regb +7cc5 9a60fe00 iadd regc ,pdata +7cc6 e2408000 istore 1 ,regb +7cc7 1a40a5e0 increase -32 ,regb + +bn_rshifteven_256_0: +7cc8 1a40a220 add regb ,32 ,rega +7cc9 18007209 force 9 ,loopcnt +7cca 2040772f call bn_rshift +7ccb 20207cb9 branch bn_rshifteven_256_1 + +ui_init: +7ccc 20402c65 call lpm_disable_exen_output +7ccd 20758000 rtn wake +7cce 20407cd3 call ui_button_init +7ccf 20407d75 call ui_timer_init +7cd0 20207d08 branch ui_led_init_global + +ui_dispatch: +7cd1 20407d29 call ui_led_dispatch +7cd2 20207d64 branch ui_timer_check + +ui_button_init: +7cd3 6800c686 fetch 1 ,mem_ui_button_gpio +7cd4 c17f8000 rtneq ui_button_gpio_disable +7cd5 98000400 iforce temp +7cd6 2040680e call gpio_config_output +7cd7 6808c686 fetcht 1 ,mem_ui_button_gpio +7cd8 20406825 call gpio_out_inactive +7cd9 20000064 nop 100 +7cda 6808c686 fetcht 1 ,mem_ui_button_gpio +7cdb 204067fb call gpio_config_input +7cdc 20207cdd branch ui_button_polling + +ui_button_polling: +7cdd 4779c03e bpatchx patch3e_3 ,mem_patch3e +7cde 6800c686 fetch 1 ,mem_ui_button_gpio +7cdf c17f8000 rtneq ui_button_gpio_disable +7ce0 1fe20400 copy pdata ,temp +7ce1 2040681d call gpio_get_bit +7ce2 2420fcef nbranch ui_button_up ,true + +ui_button_down: +7ce3 20407cf9 call ui_button_check_long_press +7ce4 68014682 fetch 2 ,mem_ui_state_map +7ce5 79207e0c set1 ui_state_btn_down +7ce6 60014682 store 2 ,mem_ui_state_map +7ce7 6800c679 fetch 1 ,mem_ui_button_last_state +7ce8 c1000000 rtneq ui_button_state_down +7ce9 70467900 jam ui_button_state_down ,mem_ui_button_last_state +7cea 6800c685 fetch 1 ,mem_ui_button_timeout +7ceb 6000c678 store 1 ,mem_ui_button_timer +7cec 20407d00 call lpm_button_get_wake_lock +7ced 700a992c jam bt_evt_button_down ,mem_fifo_temp +7cee 20207d86 branch ui_ipc_send_event + +ui_button_up: +7cef 68014682 fetch 2 ,mem_ui_state_map +7cf0 793ffe0c set0 ui_state_btn_down +7cf1 60014682 store 2 ,mem_ui_state_map +7cf2 6800c679 fetch 1 ,mem_ui_button_last_state +7cf3 c1008000 rtneq ui_button_state_up +7cf4 70467901 jam ui_button_state_up ,mem_ui_button_last_state +7cf5 70467800 jam 0 ,mem_ui_button_timer +7cf6 20407d02 call lpm_button_clean_wake_lock +7cf7 700a992d jam bt_evt_button_up ,mem_fifo_temp +7cf8 20207d86 branch ui_ipc_send_event + +ui_button_check_long_press: +7cf9 6800c678 fetch 1 ,mem_ui_button_timer +7cfa 207a0000 rtn blank +7cfb 1fe0ffff increase -1 ,pdata +7cfc 6000c678 store 1 ,mem_ui_button_timer +7cfd 247a0000 nrtn blank +7cfe 700a9910 jam bt_evt_button_long_pressed ,mem_fifo_temp +7cff 20207d86 branch ui_ipc_send_event + +lpm_button_get_wake_lock: +7d00 d8e00007 arg wake_lock_button ,queue +7d01 20202c32 branch lpm_get_wake_lock + +lpm_button_clean_wake_lock: +7d02 d8e00007 arg wake_lock_button ,queue +7d03 20202c36 branch lpm_put_wake_lock + +calc_curr_struct_prt: +7d04 6801421b fetch 2 ,mem_ui_led_struct_ptr +7d05 1a2fa40b mul32 rega ,led_offset_length ,regb +7d06 9a40a400 iadd regb ,regb +7d07 20600000 rtn + +ui_led_init_global: +7d08 6800c21a fetch 1 ,mem_ui_led_struct_num +7d09 207a0000 rtn blank +7d0a 1fe27200 copy pdata ,loopcnt +7d0b 6801421b fetch 2 ,mem_ui_led_struct_ptr +7d0c 1fe22400 copy pdata ,regb + +ui_led_init_loop: +7d0d 1a40a602 add regb ,led_offset_led_gpio ,regc +7d0e ea688000 ifetcht 1 ,regc +7d0f 2040680e call gpio_config_output +7d10 20407d32 call ui_led_off_static +7d11 1a40a40b increase led_offset_length ,regb +7d12 c2007d0d loop ui_led_init_loop +7d13 20600000 rtn + +ui_led_on_global: +7d14 20407d04 call calc_curr_struct_prt +7d15 58000002 setarg ui_led_state_lighting +7d16 e2408000 istore 1 ,regb +7d17 20407d5e call ui_led_stop_timer +7d18 20207d35 branch ui_led_on_static + +ui_led_blink_stop_global: + +ui_led_off_global: +7d19 20407d04 call calc_curr_struct_prt +7d1a 58000003 setarg ui_led_state_darking +7d1b e2408000 istore 1 ,regb +7d1c 20407d5e call ui_led_stop_timer +7d1d 20207d32 branch ui_led_off_static + +ui_led_blink_start_global: +7d1e 20407d04 call calc_curr_struct_prt +7d1f 58000001 setarg ui_led_state_blink_start +7d20 e2408000 istore 1 ,regb +7d21 580000ff setarg led_infinite_flash_num +7d22 e0a08000 istore 1 ,contw +7d23 20207d32 branch ui_led_off_static + +ui_led_set_style_global: +7d24 20407d04 call calc_curr_struct_prt +7d25 df20000b arg led_offset_length ,loopcnt +7d26 1a620c00 copy regc ,contr +7d27 1a420a00 copy regb ,contw +7d28 20207ef4 branch memcpy_fast + +ui_led_dispatch: +7d29 6800c21a fetch 1 ,mem_ui_led_struct_num +7d2a 207a0000 rtn blank +7d2b da200000 arg 0 ,rega + +ui_led_blink_polling: +7d2c 20407d38 call ui_led_change_style_by_type +7d2d 1a20a201 increase 1 ,rega +7d2e 6800c21a fetch 1 ,mem_ui_led_struct_num +7d2f 9a267c00 isub rega ,null +7d30 20628000 rtn zero +7d31 20207d2c branch ui_led_blink_polling + +ui_led_off_static: +7d32 1a40a602 add regb ,led_offset_led_gpio ,regc +7d33 ea688000 ifetcht 1 ,regc +7d34 20206825 branch gpio_out_inactive + +ui_led_on_static: +7d35 1a40a602 add regb ,led_offset_led_gpio ,regc +7d36 ea688000 ifetcht 1 ,regc +7d37 20206829 branch gpio_out_active + +ui_led_change_style_by_type: +7d38 1a208e0b add rega ,ui_led_blink ,queue +7d39 20407f16 call timer_check +7d3a 247a0000 nrtn blank +7d3b 20407d04 call calc_curr_struct_prt +7d3c ea408000 ifetch 1 ,regb +7d3d c0017d35 beq ui_led_state_lighting ,ui_led_on_static +7d3e c001fd32 beq ui_led_state_darking ,ui_led_off_static +7d3f c0007d32 beq ui_led_state_blink_stop ,ui_led_off_static +7d40 c002fd4c beq ui_led_state_blink_darking ,ui_led_blink_state_darking + +ui_led_blink_state_lighting: +7d41 20407d35 call ui_led_on_static +7d42 1a40a607 add regb ,led_offset_cb_ledon ,regc +7d43 20407e7c call push_stack +7d44 ea610000 ifetch 2 ,regc +7d45 20407f9c call callback_func +7d46 20407e8c call pop_stack +7d47 58000005 setarg ui_led_state_blink_darking +7d48 e2408000 istore 1 ,regb +7d49 1a40a603 add regb ,led_offset_on_time ,regc +7d4a ea610000 ifetch 2 ,regc +7d4b 20207d5c branch ui_led_blink_timer_start + +ui_led_blink_state_darking: +7d4c 20407d32 call ui_led_off_static +7d4d 1a40a609 add regb ,led_offset_cb_ledoff ,regc +7d4e 20407e7c call push_stack +7d4f ea610000 ifetch 2 ,regc +7d50 20407f9c call callback_func +7d51 20407e8c call pop_stack +7d52 1a40a601 add regb ,led_offset_blink_count ,regc +7d53 ea608000 ifetch 1 ,regc +7d54 c07ffd58 beq led_infinite_flash_num ,ui_led_blink_infinite +7d55 1fe0ffff increase -1 ,pdata +7d56 e2608000 istore 1 ,regc +7d57 203a7d19 branch ui_led_blink_stop_global ,blank + +ui_led_blink_infinite: +7d58 58000004 setarg ui_led_state_blink_lighting +7d59 e2408000 istore 1 ,regb +7d5a 1a40a605 add regb ,led_offset_off_time ,regc +7d5b ea610000 ifetch 2 ,regc + +ui_led_blink_timer_start: +7d5c 1a208e0b add rega ,ui_led_blink ,queue +7d5d 20207f08 branch timer_init + +ui_led_stop_timer: +7d5e 58000000 setarg 0 +7d5f 20207d5c branch ui_led_blink_timer_start + +ui_timer_timeout: +7d60 58001000 setarg 0x1000 +7d61 1ff07e00 lshift16 pdata ,pdata +7d62 9a40a400 iadd regb ,regb +7d63 20600000 rtn + +ui_timer_check: +7d64 477a403e bpatchx patch3e_4 ,mem_patch3e +7d65 da200000 arg 0 ,rega +7d66 680a467a fetcht 4 ,mem_ui_timer_last_btclk +7d67 1c422400 copy clkn_bt ,regb +7d68 1a427e00 copy regb ,pdata +7d69 98467c00 isub temp ,null +7d6a 24417d60 ncall ui_timer_timeout ,positive + +ui_timer_check_loop: +7d6b 1a427e00 copy regb ,pdata +7d6c 184084a0 increase 160 ,temp +7d6d 184084a0 increase 160 ,temp +7d6e 98467c00 isub temp ,null +7d6f 24217d78 nbranch ui_timer_check_end ,positive +7d70 1a20a201 increase 1 ,rega +7d71 1a217e0f and rega ,0x0f ,pdata +7d72 243a7d6b nbranch ui_timer_check_loop ,blank +7d73 da200000 arg 0 ,rega +7d74 20407d7f call ui_timer_check_send_evt + +ui_timer_init: +7d75 1c427e00 copy clkn_bt ,pdata +7d76 6002467a store 4 ,mem_ui_timer_last_btclk +7d77 20600000 rtn + +ui_timer_check_end: +7d78 477ac03e bpatchx patch3e_5 ,mem_patch3e +7d79 1a227e00 copy rega ,pdata +7d7a 207a0000 rtn blank +7d7b 18408560 increase -160 ,temp +7d7c 18408560 increase -160 ,temp +7d7d 793f841c set0 28 ,temp +7d7e 600a467a storet 4 ,mem_ui_timer_last_btclk + +ui_timer_check_send_evt: +7d7f 2020335f branch app_evt_timer + +ui_ipc_get_lock: +7d80 70466601 jam 1 ,mem_ipc_lock_bt + +ui_ipc_get_lock_wait: +7d81 6800c667 fetch 1 ,mem_ipc_lock_c51 +7d82 243a7d81 nbranch ui_ipc_get_lock_wait ,blank +7d83 20600000 rtn + +ui_ipc_put_lock: +7d84 70466600 jam 0 ,mem_ipc_lock_bt +7d85 20600000 rtn + +ui_ipc_send_event: +7d86 477b403e bpatchx patch3e_6 ,mem_patch3e +7d87 20407d80 call ui_ipc_get_lock +7d88 1a227e00 copy rega ,pdata +7d89 60020a91 store 4 ,mem_ipc_rega_temp +7d8a da204668 arg mem_ipc_fifo_bt2c51 ,rega +7d8b 20407fb8 call fifo_in +7d8c 68020a91 fetch 4 ,mem_ipc_rega_temp +7d8d 1fe22200 copy pdata ,rega +7d8e 20207d84 branch ui_ipc_put_lock + +ui_ipc_send_cmd: +7d8f 477bc03e bpatchx patch3e_7 ,mem_patch3e +7d90 20407d80 call ui_ipc_get_lock +7d91 1a227e00 copy rega ,pdata +7d92 60020a91 store 4 ,mem_ipc_rega_temp +7d93 da204670 arg mem_ipc_fifo_c512bt ,rega +7d94 20407fb8 call fifo_in +7d95 68020a91 fetch 4 ,mem_ipc_rega_temp +7d96 1fe22200 copy pdata ,rega +7d97 20207d84 branch ui_ipc_put_lock + +ui_ipc_clean_all_fifo: +7d98 58000000 setarg 0 +7d99 60044670 store util_fifo_len ,mem_ipc_fifo_c512bt +7d9a 60044668 store util_fifo_len ,mem_ipc_fifo_bt2c51 +7d9b 20600000 rtn + +check_51cmd: +7d9c 477c403f bpatchx patch3f_0 ,mem_patch3f +7d9d 6800c1ce fetch 1 ,mem_hci_cmd +7d9e 247a0000 nrtn blank +7d9f da204670 arg mem_ipc_fifo_c512bt ,rega +7da0 20407fd0 call fifo_is_empty +7da1 207a0000 rtn blank +7da2 700a9000 jam ipc_continue_process ,mem_ipc_skip_continue_proc +7da3 20407da7 call check_51cmd_once +7da4 68008a90 fetch 1 ,mem_ipc_skip_continue_proc +7da5 203a7d9c branch check_51cmd ,blank +7da6 20600000 rtn + +check_51cmd_once: +7da7 20407d80 call ui_ipc_get_lock +7da8 da204670 arg mem_ipc_fifo_c512bt ,rega +7da9 20407fc4 call fifo_out +7daa 1fe20400 copy pdata ,temp +7dab 20407d84 call ui_ipc_put_lock +7dac 477cc03f bpatchx patch3f_1 ,mem_patch3f +7dad 18427e00 copy temp ,pdata +7dae 207a0000 rtn blank +7daf c000fddd beq bt_cmd_start_discovery ,check_51cmd_start_discovery +7db0 c0017de2 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +7db1 c001fde8 beq bt_cmd_reconnect ,check_51cmd_reconnect +7db2 c003fded beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating +7db3 c0047dee beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating +7db4 c004fdef beq bt_cmd_sniff_test ,check_51cmd_sniff_test +7db5 c005fdf2 beq bt_cmd_start_inquiry ,check_51cmd_inq +7db6 c0067df3 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq +7db7 c006fdf4 beq bt_cmd_start_adv ,check_51cmd_adv +7db8 c0077dfa beq bt_cmd_stop_adv ,check_51cmd_stop_adv +7db9 c007fdff beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +7dba c0087e05 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +7dbb c009fe0f beq bt_cmd_led_off ,check_51cmd_led_off +7dbc c00a7e11 beq bt_cmd_led_on ,check_51cmd_led_on +7dbd c00afe13 beq bt_cmd_led_blink ,check_51cmd_led_start_blink +7dbe c00b7e15 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +7dbf c00bfe18 beq bt_cmd_le_start_scan ,check_51cmd_start_scan +7dc0 c00c7e1a beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +7dc1 c00cfe1d beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +7dc2 c00dfe25 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +7dc3 c00f7e2f beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +7dc4 60008a99 store 1 ,mem_fifo_temp +7dc5 477d403f bpatchx patch3f_2 ,mem_patch3f +7dc6 204062bc call lmo_fifo_check +7dc7 243a7ddb nbranch check_51cmd_restore ,blank + +check_51cmd_once_continue: +7dc8 68008a99 fetch 1 ,mem_fifo_temp +7dc9 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle +7dca c0027dea beq bt_cmd_disconnect ,check_51cmd_disconnect +7dcb c002cd17 beq bt_cmd_enter_sniff ,cmd_in_sniff +7dcc c0034d26 beq bt_cmd_exit_sniff ,cmd_exit_sniff +7dcd c0057df0 beq bt_cmd_set_pin_code ,check_51cmd_pincode +7dce c008fe0a beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +7dcf c0097e0e beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +7dd0 c00efe26 beq bt_cmd_role_switch ,check_51cmd_role_switch +7dd1 c00fe7cc beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +7dd2 c01067d0 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +7dd3 c010fe31 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +7dd4 c012e70b beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +7dd5 20600000 rtn + +check_51cmd_check_idle: +7dd6 60008a99 store 1 ,mem_fifo_temp +7dd7 20402252 call context_check_idle +7dd8 2022fddb branch check_51cmd_restore ,zero +7dd9 2040225a call context_search_plap +7dda 24628000 nrtn zero + +check_51cmd_restore: +7ddb 700a9001 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +7ddc 20207d8f branch ui_ipc_send_cmd + +check_51cmd_start_discovery: +7ddd 68014682 fetch 2 ,mem_ui_state_map +7dde 79207e06 set1 ui_state_bt_discovery +7ddf 60014682 store 2 ,mem_ui_state_map +7de0 70409303 jam 3 ,mem_scan_mode +7de1 20600000 rtn + +check_51cmd_stop_discovery: +7de2 70468000 jam 0 ,mem_hid_handshake_timer_count +7de3 70409300 jam 0 ,mem_scan_mode +7de4 68014682 fetch 2 ,mem_ui_state_map +7de5 793ffe06 set0 ui_state_bt_discovery +7de6 60014682 store 2 ,mem_ui_state_map +7de7 20600000 rtn + +check_51cmd_reconnect: +7de8 7041ce05 jam hci_cmd_create_conn ,mem_hci_cmd +7de9 20600000 rtn + +check_51cmd_disconnect: +7dea 70007c07 jam lmp_detach ,mem_lmo_opcode2 +7deb 7004ca13 jam other_end_terminated ,mem_disconn_reason_send +7dec 20600000 rtn + +check_51cmd_enter_sniff_subrating: +7ded 20600000 rtn + +check_51cmd_exit_sniff_subrating: +7dee 20600000 rtn + +check_51cmd_sniff_test: +7def 20600000 rtn + +check_51cmd_pincode: +7df0 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state +7df1 20204d0a branch cmd_pair + +check_51cmd_inq: +7df2 20600000 rtn + +check_51cmd_stop_inq: +7df3 20600000 rtn + +check_51cmd_adv: +7df4 70436e01 jam on ,mem_le_adv_enable +7df5 70448400 jam adv_ind ,mem_le_adv_type +7df6 68014682 fetch 2 ,mem_ui_state_map +7df7 79207e0b set1 ui_state_ble_adv ,pdata +7df8 60014682 store 2 ,mem_ui_state_map +7df9 20600000 rtn + +check_51cmd_stop_adv: +7dfa 68014682 fetch 2 ,mem_ui_state_map +7dfb 793ffe0b set0 ui_state_ble_adv ,pdata +7dfc 60014682 store 2 ,mem_ui_state_map +7dfd 70436e00 jam off ,mem_le_adv_enable +7dfe 20600000 rtn + +check_51cmd_direct_adv: +7dff 70436e01 jam on ,mem_le_adv_enable +7e00 70448401 jam adv_direct_ind ,mem_le_adv_type +7e01 68014682 fetch 2 ,mem_ui_state_map +7e02 79207e0b set1 ui_state_ble_adv ,pdata +7e03 60014682 store 2 ,mem_ui_state_map +7e04 20600000 rtn + +check_51cmd_stop_direct_adv: +7e05 68014682 fetch 2 ,mem_ui_state_map +7e06 793ffe0b set0 ui_state_ble_adv ,pdata +7e07 60014682 store 2 ,mem_ui_state_map +7e08 70436e00 jam off ,mem_le_adv_enable +7e09 20600000 rtn + +check_51cmd_le_disconnect: +7e0a 58000014 setarg 20 +7e0b 6001046d store 2 ,mem_le_superto +7e0c 600144ba store 2 ,mem_le_init_superto +7e0d 20205c92 branch le_send_terminate_ind_user_terminated + +check_51cmd_ble_update_connect_param: +7e0e 20205abf branch le_l2cap_tx_update_req + +check_51cmd_led_off: +7e0f da200000 arg 0 ,rega +7e10 20207d19 branch ui_led_off_global + +check_51cmd_led_on: +7e11 da200000 arg 0 ,rega +7e12 20207d14 branch ui_led_on_global + +check_51cmd_led_start_blink: +7e13 da200000 arg 0 ,rega +7e14 20207d1e branch ui_led_blink_start_global + +check_51cmd_le_start_con: +7e15 70436901 jam on ,mem_le_scan_enable +7e16 7041ce1b jam hci_cmd_le_create_conn ,mem_hci_cmd +7e17 20600000 rtn + +check_51cmd_start_scan: +7e18 70436901 jam on ,mem_le_scan_enable +7e19 20600000 rtn + +check_51cmd_stop_scan: +7e1a 70436900 jam off ,mem_le_scan_enable +7e1b 7041ce00 jam 0 ,mem_hci_cmd +7e1c 20600000 rtn + +check_51cmd_hibernate: +7e1d 680141eb fetch 2 ,mem_cb_before_hibernate +7e1e 20407f9c call callback_func +7e1f 6800c686 fetch 1 ,mem_ui_button_gpio +7e20 c07ffe23 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +7e21 1fe20400 copy pdata ,temp +7e22 204067fb call gpio_config_input + +check_51cmd_hibernate_btn_disabled: +7e23 20407d98 call ui_ipc_clean_all_fifo +7e24 20202b1f branch lpm_hibernate + +check_51cmd_le_smp_sec_req: +7e25 20205b02 branch le_send_smp_security_request + +check_51cmd_role_switch: +7e26 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 +7e27 79200003 set1 mark_switch_initiated ,mark +7e28 24748000 nrtn master +7e29 70455b00 jam switch_flag_init ,mem_switch_flag +7e2a 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +7e2b 6800816d fetch 1 ,mem_connection_options +7e2c 793ffe02 set0 connection_switch ,pdata +7e2d 6000816d store 1 ,mem_connection_options +7e2e 20600000 rtn + +check_51cmd_bb_reconn_cancel: +7e2f 18000e03 force page_length_timer ,queue +7e30 20207f07 branch timer_stop + +check_51cmd_dhkey_not_accept: +7e31 204062f8 call tid_set_reply +7e32 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 +7e33 20205f9d branch parse_lmp_dhkey_check_reject + +ui_check_paring_button: +7e34 6800c682 fetch 1 ,mem_ui_state_map +7e35 c4060000 rtnbit0 ui_state_btn_down +7e36 c4038000 rtnbit0 ui_state_bt_reconnect +7e37 20207e2f branch check_51cmd_bb_reconn_cancel + +queue_init: +7e38 68014218 fetch 2 ,mem_queue_ptr +7e39 1fe08a02 add pdata ,queue_offset_curr_num ,contw +7e3a 58000000 setarg 0 +7e3b e0a18000 istore 3 ,contw +7e3c 20600000 rtn + +queue_push: +7e3d 20407fe9 call disable_user +7e3e 20407e69 call queue_full +7e3f 207a0000 rtn blank +7e40 68014218 fetch 2 ,mem_queue_ptr +7e41 1fe0a402 add pdata ,queue_offset_curr_num ,regb +7e42 ea488000 ifetcht 1 ,regb +7e43 18408401 increase 1 ,temp +7e44 e2488000 istoret 1 ,regb +7e45 efe88000 ifetcht 1 ,pdata +7e46 18427200 copy temp ,loopcnt +7e47 1fe0a404 add pdata ,queue_offset_write_ptr ,regb +7e48 ea408000 ifetch 1 ,regb +7e49 984ffe00 imul32 temp ,pdata +7e4a 98c08a00 iadd contr ,contw +7e4b 1a220c00 copy rega ,contr + +calc_queue_next_ptr: +7e4c 20407f01 call memcpy +7e4d 20407e6d call queue_get_size +7e4e 1fe0ffff pincrease -1 +7e4f ea488000 ifetcht 1 ,regb +7e50 18408401 increase 1 ,temp +7e51 98410400 iand temp ,temp +7e52 e2488000 istoret 1 ,regb +7e53 20207fe7 branch enable_user + +queue_pop: +7e54 20407fe9 call disable_user +7e55 20407e65 call queue_empty +7e56 207a0000 rtn blank +7e57 68014218 fetch 2 ,mem_queue_ptr +7e58 1fe0a402 add pdata ,queue_offset_curr_num ,regb +7e59 ea488000 ifetcht 1 ,regb +7e5a 184085ff increase -1 ,temp +7e5b e2488000 istoret 1 ,regb +7e5c efe88000 ifetcht 1 ,pdata +7e5d 18427200 copy temp ,loopcnt +7e5e 1fe0a403 add pdata ,queue_offset_read_ptr ,regb +7e5f ea408000 ifetch 1 ,regb +7e60 984ffe00 imul32 temp ,pdata +7e61 98c08c00 iadd contr ,contr +7e62 18c08c01 increase 1 ,contr +7e63 1a220a00 copy rega ,contw +7e64 20207e4c branch calc_queue_next_ptr + +queue_empty: +7e65 68014218 fetch 2 ,mem_queue_ptr +7e66 1fe08c02 add pdata ,queue_offset_curr_num ,contr +7e67 e8c08000 ifetch 1 ,contr +7e68 20600000 rtn + +queue_full: +7e69 20407e6d call queue_get_size +7e6a e8c88000 ifetcht 1 ,contr +7e6b 98467e00 isub temp ,pdata +7e6c 20600000 rtn + +queue_get_size: +7e6d 68014218 fetch 2 ,mem_queue_ptr +7e6e 1fe08c01 add pdata ,queue_offset_length ,contr +7e6f e8c08000 ifetch 1 ,contr +7e70 20600000 rtn + +right_shift_n: +7e71 1f267c00 sub loopcnt ,0 ,null +7e72 20628000 rtn zero + +right_shift_n_loop: +7e73 1fe37e00 rshift pdata ,pdata +7e74 c2007e73 loop right_shift_n_loop +7e75 20600000 rtn + +left_shift_n: +7e76 18007e01 force 1 ,pdata +7e77 1f267c00 sub loopcnt ,0 ,null +7e78 20628000 rtn zero + +left_shift_n_loop: +7e79 1fe3fe00 lshift pdata ,pdata +7e7a c2007e79 loop left_shift_n_loop +7e7b 20600000 rtn + +push_stack: +7e7c 18a27e00 deposit contw +7e7d 60010abb store 2 ,mem_contw +7e7e 600c0aa2 storet 8 ,mem_temp +7e7f 19627e00 deposit timeup +7e80 60020aaa store 4 ,mem_timeup +7e81 20407e85 call push_stack_rega_b_c +7e82 18c27e00 deposit contr +7e83 60010ab9 store 2 ,mem_contr +7e84 20600000 rtn + +push_stack_rega_b_c: +7e85 1a227e00 deposit rega +7e86 60020aae store 4 ,mem_rega +7e87 1a427e00 deposit regb +7e88 60020ab2 store 4 ,mem_regb +7e89 1a627e00 deposit regc +7e8a 60018ab6 store 3 ,mem_regc +7e8b 20600000 rtn + +pop_stack: +7e8c 680c0aa2 fetcht 8 ,mem_temp +7e8d 68020aaa fetch 4 ,mem_timeup +7e8e 98001600 iforce timeup +7e8f 20407e95 call pop_stack_rega_b_c +7e90 68010abb fetch 2 ,mem_contw +7e91 98000a00 iforce contw +7e92 68010ab9 fetch 2 ,mem_contr +7e93 98000c00 iforce contr +7e94 20600000 rtn + +pop_stack_rega_b_c: +7e95 68020aae fetch 4 ,mem_rega +7e96 98002200 iforce rega +7e97 68020ab2 fetch 4 ,mem_regb +7e98 98002400 iforce regb +7e99 68018ab6 fetch 3 ,mem_regc +7e9a 98002600 iforce regc +7e9b 20600000 rtn + +get_contw: +7e9c 68010abb fetch 2 ,mem_contw +7e9d 1fe20a00 copy pdata ,contw +7e9e 20600000 rtn + +get_contr: +7e9f 68010ab9 fetch 2 ,mem_contr +7ea0 1fe20c00 copy pdata ,contr +7ea1 20600000 rtn + +store_contw: +7ea2 18a27e00 copy contw ,pdata +7ea3 60010abb store 2 ,mem_contw +7ea4 20600000 rtn + +store_contr: +7ea5 18c27e00 copy contr ,pdata +7ea6 60010ab9 store 2 ,mem_contr +7ea7 20600000 rtn + +save_cont_pointers: +7ea8 18a27e00 copy contw ,pdata +7ea9 60010a97 store 2 ,mem_hold_contw +7eaa 18c27e00 copy contr ,pdata +7eab 60010a95 store 2 ,mem_hold_contr +7eac 20600000 rtn + +load_cont_pointers: +7ead 68010a97 fetch 2 ,mem_hold_contw +7eae 1fe20a00 copy pdata ,contw +7eaf 68010a95 fetch 2 ,mem_hold_contr +7eb0 1fe20c00 copy pdata ,contr +7eb1 20600000 rtn + +memcpy96: +7eb2 20407ebd call memcpy32 + +memcpy64: +7eb3 20407ebd call memcpy32 +7eb4 20207ebd branch memcpy32 + +memcpy12: +7eb5 20407eb9 call memcpy8 + +memcpy4: +7eb6 e8c20000 ifetch 4 ,contr +7eb7 e0a20000 istore 4 ,contw +7eb8 20600000 rtn + +memcpy8: +7eb9 e8c40000 ifetch 8 ,contr +7eba e0a40000 istore 8 ,contw +7ebb 20600000 rtn + +memcpy48: +7ebc 20407ebf call memcpy16 + +memcpy32: +7ebd 20407eb9 call memcpy8 + +memcpy24: +7ebe 20407eb9 call memcpy8 + +memcpy16: +7ebf 20407eb9 call memcpy8 +7ec0 20207eb9 branch memcpy8 + +delay_10ms: +7ec1 df20000a arg 10 ,loopcnt + +delay_ms_wait: +7ec2 20002ee0 nop 12000 +7ec3 c2007ec2 loop delay_ms_wait +7ec4 20600000 rtn + +bn_zero: +7ec5 18007203 force 3 ,loopcnt + +memset0: +7ec6 18007e00 force 0 ,pdata + +memset8: +7ec7 e0a40000 istore 8 ,contw +7ec8 c2007ec7 loop memset8 +7ec9 20600000 rtn + +memset0_8: +7eca 18007e00 force 0 ,pdata +7ecb e0a40000 istore 8 ,contw +7ecc 20600000 rtn + +memset0_4: +7ecd 18007e00 force 0 ,pdata +7ece e0a20000 istore 4 ,contw +7ecf 20600000 rtn + +clear_mem_256: +7ed0 18007204 force 4 ,loopcnt +7ed1 20207ec6 branch memset0 + +clear_mem_512: +7ed2 18007208 force 8 ,loopcnt +7ed3 20207ec6 branch memset0 + +clear_mem: +7ed4 1f227e00 deposit loopcnt +7ed5 207a0000 rtn blank +7ed6 58000000 setarg 0 + +clear_mem_loop: +7ed7 e0a08000 istore 1 ,contw +7ed8 c2007ed7 loop clear_mem_loop +7ed9 20600000 rtn + +clear_temp_block: +7eda df200020 arg 32 ,loopcnt +7edb d8a00ac2 arg mem_temp_block0 ,contw +7edc 20207ed4 branch clear_mem + +xor_loop: +7edd ea620000 ifetch 4 ,regc +7ede ea2a0000 ifetcht 4 ,rega +7edf 9842fe00 ixor temp ,pdata +7ee0 e0a20000 istore 4 ,contw +7ee1 1a20a204 increase 4 ,rega +7ee2 1a60a604 increase 4 ,regc +7ee3 c2007edd loop xor_loop +7ee4 20600000 rtn + +inverse_data: +7ee5 477dc03f bpatchx patch3f_3 ,mem_patch3f +7ee6 1f227e00 copy loopcnt ,pdata +7ee7 1fe67c01 sub pdata ,1 ,null +7ee8 20610000 rtn positive +7ee9 9a20a400 iadd rega ,regb +7eea 1a40a5ff increase -1 ,regb +7eeb 1f237200 rshift loopcnt ,loopcnt + +inverse_loop: +7eec ea288000 ifetcht 1 ,rega +7eed ea408000 ifetch 1 ,regb +7eee e2208000 istore 1 ,rega +7eef e2488000 istoret 1 ,regb +7ef0 1a40a5ff increase -1 ,regb +7ef1 1a20a201 increase 1 ,rega +7ef2 c2007eec loop inverse_loop +7ef3 20600000 rtn + +memcpy_fast: +7ef4 1f227e00 deposit loopcnt +7ef5 207a0000 rtn blank + +memcpy_fast_loop: +7ef6 1f20f3f8 increase -8 ,loopcnt +7ef7 20417eb9 call memcpy8 ,positive +7ef8 20628000 rtn zero +7ef9 20217ef6 branch memcpy_fast_loop ,positive +7efa 1f20f208 increase 8 ,loopcnt + +memcpy_fast_loop_four: +7efb 1f20f3fc increase -4 ,loopcnt +7efc 20417eb6 call memcpy4 ,positive +7efd 20628000 rtn zero +7efe 20217efb branch memcpy_fast_loop_four ,positive +7eff 1f20f204 increase 4 ,loopcnt +7f00 20207f01 branch memcpy + +memcpy: +7f01 1f227e00 deposit loopcnt +7f02 207a0000 rtn blank + +memcpy_loop: +7f03 e8c08000 ifetch 1 ,contr +7f04 e0a08000 istore 1 ,contw +7f05 c2007f03 loop memcpy_loop +7f06 20600000 rtn + +timer_stop: +7f07 58000000 setarg 0 + +timer_init: +7f08 1c430400 rshift clkn_bt ,temp +7f09 600a4094 storet 4 ,mem_last_clkn +7f0a d8a0419d arg mem_timers ,contw +7f0b 98000400 iforce temp +7f0c 18e3fe00 lshift queue ,pdata +7f0d 98a08a00 iadd contw ,contw +7f0e e0a90000 istoret 2 ,contw +7f0f 477e403f bpatchx patch3f_4 ,mem_patch3f +7f10 20600000 rtn + +timer_check_timeout: +7f11 d9600800 arg 0x800 ,timeup +7f12 19701600 lshift16 timeup ,timeup +7f13 9960fe00 iadd timeup ,pdata +7f14 20600000 rtn + +timer_reinit: +7f15 d8e00000 arg 0 ,queue + +timer_check: +7f16 477ec03f bpatchx patch3f_5 ,mem_patch3f +7f17 680a4094 fetcht 4 ,mem_last_clkn +7f18 1c437e00 rshift clkn_bt ,pdata +7f19 60024094 store 4 ,mem_last_clkn +7f1a 98467c00 isub temp ,null +7f1b 24417f11 ncall timer_check_timeout ,positive +7f1c 98461600 isub temp ,timeup +7f1d 19620400 copy timeup ,temp +7f1e d8c0419d arg mem_timers ,contr +7f1f 18c20a00 copy contr ,contw +7f20 df200010 arg 16 ,loopcnt + +timer_loop: +7f21 e8c10000 ifetch 2 ,contr +7f22 98467e00 isub temp ,pdata +7f23 20217f25 branch timer_counting ,positive +7f24 18007e00 force 0 ,pdata + +timer_counting: +7f25 e0a10000 istore 2 ,contw +7f26 c2007f21 loop timer_loop +7f27 d8c0419d arg mem_timers ,contr +7f28 18e3fe00 lshift queue ,pdata +7f29 98c08c00 iadd contr ,contr +7f2a e8c10000 ifetch 2 ,contr +7f2b 20600000 rtn + +clk_add: +7f2c 98408400 iadd temp ,temp +7f2d 18427200 copy temp ,loopcnt +7f2e 58000ea6 setarg 3750 +7f2f 9f267e00 isub loopcnt ,pdata +7f30 20610000 rtn positive +7f31 1fe67e00 sub pdata ,0 ,pdata +7f32 18510400 rshift16 temp ,temp +7f33 18408401 increase 1 ,temp +7f34 18500400 lshift16 temp ,temp +7f35 98418400 ior temp ,temp +7f36 20600000 rtn + +clk_diff_rt: +7f37 20407f39 call clk_diff +7f38 20207f43 branch clk2rt + +clk_diff: +7f39 78547c00 disable user +7f3a 98467e00 isub temp ,pdata +7f3b 20217f3e branch clk_diff_pos ,positive +7f3c 78347c00 enable user +7f3d 1fe67e00 sub pdata ,0 ,pdata + +clk_diff_pos: +7f3e c4078000 rtnbit0 15 +7f3f d85f0ea6 arg -61786 ,temp +7f40 9840fe00 iadd temp ,pdata +7f41 793ffe40 set0 64 ,pdata +7f42 20600000 rtn + +clk2rt: +7f43 98000c00 iforce contr +7f44 1ff17e00 rshift16 pdata ,pdata +7f45 d8400ea6 arg 3750 ,temp +7f46 984ffe00 imul32 temp ,pdata +7f47 98c0fe00 iadd contr ,pdata +7f48 20600000 rtn + +clk2lpo: +7f49 1fed7e00 lshift8 pdata ,pdata +7f4a 1ff27e00 lshift4 pdata ,pdata +7f4b 6809c16f fetcht 3 ,mem_clks_per_lpo +7f4c 9846fc00 idiv temp +7f4d 20407f86 call wait_div_end +7f4e 18078400 quotient temp +7f4f 20600000 rtn + +clk2bt: +7f50 d8400ea6 arg 3750 ,temp +7f51 9846fc00 idiv temp +7f52 20407f86 call wait_div_end +7f53 1807fe00 quotient pdata +7f54 1ff07e00 lshift16 pdata ,pdata +7f55 18070400 remainder temp +7f56 98418400 ior temp ,temp +7f57 20600000 rtn + +string2dec_from_uart: +7f58 d8400000 arg 0 ,temp + +string2dec_from_uart_done: +7f59 18422600 copy temp ,regc +7f5a e8608000 ifetch 1 ,contru +7f5b 20407f64 call uchar2dialog +7f5c 1a620400 copy regc ,temp +7f5d 20407f95 call swap +7f5e da40000a arg 10 ,regb +7f5f 9a4ffe00 imul32 regb ,pdata +7f60 9840fe00 iadd temp ,pdata +7f61 1fe20400 copy pdata ,temp +7f62 c2007f59 loop string2dec_from_uart_done +7f63 20600000 rtn + +uchar2dialog: +7f64 d840003a arg 0x3a ,temp +7f65 98467c00 isub temp ,null +7f66 24217f6d nbranch uchar2dialog_number ,positive +7f67 d8400061 arg 0x61 ,temp +7f68 98467c00 isub temp ,null +7f69 20217f70 branch uchar2dialog_a2f ,positive +7f6a d8400037 arg 0x37 ,temp +7f6b 98467e00 isub temp ,pdata +7f6c 20600000 rtn + +uchar2dialog_number: +7f6d d8400030 arg 0x30 ,temp +7f6e 98467e00 isub temp ,pdata +7f6f 20600000 rtn + +uchar2dialog_a2f: +7f70 d8400057 arg 0x57 ,temp +7f71 98467e00 isub temp ,pdata +7f72 20600000 rtn + +pn9: +7f73 18426000 copy temp ,alarm +7f74 580001ff setarg 0x1ff +7f75 18002400 force 0 ,regb + +pn9_loop: +7f76 1fe92200 rshift3 pdata ,rega +7f77 1a232200 rshift rega ,rega +7f78 9a22a200 ixor rega ,rega +7f79 2a2ffe00 isolate1 0 ,rega +7f7a 7920fe09 setflag true ,9 ,pdata +7f7b 18430400 rshift temp ,temp +7f7c 2feffe00 isolate1 0 ,pdata +7f7d 79208407 setflag true ,7 ,temp +7f7e 1fe37e00 rshift pdata ,pdata +7f7f 1a40a401 increase 1 ,regb +7f80 2a400e00 compare 0 ,regb ,0x7 +7f81 2420ff76 nbranch pn9_loop ,true +7f82 e0a88000 istoret 1 ,contw +7f83 c2007f76 loop pn9_loop +7f84 1e020400 copy alarm ,temp +7f85 20600000 rtn + +wait_div_end: +7f86 207a8000 rtn modone +7f87 20207f86 branch wait_div_end + +compare_loop: + +string_compare: +7f88 ea208000 ifetch 1 ,rega +7f89 ea488000 ifetcht 1 ,regb +7f8a 98467c00 isub temp ,null +7f8b 24628000 nrtn zero +7f8c 1a20a201 increase 1 ,rega +7f8d 1a40a401 increase 1 ,regb +7f8e c2007f88 loop string_compare +7f8f 18007c00 force 0 ,null +7f90 20600000 rtn + +ceiling: +7f91 98467c00 isub temp ,null +7f92 24610000 nrtn positive +7f93 18427e00 deposit temp +7f94 20600000 rtn + +swap: +7f95 9840fe00 iadd temp ,pdata +7f96 98460400 isub temp ,temp +7f97 98467e00 isub temp ,pdata +7f98 20600000 rtn + +clean_mem: +7f99 df200200 arg 0x200 ,loopcnt +7f9a d8a04000 arg 0x4000 ,contw +7f9b 20207ec6 branch memset0 + +callback_func: +7f9c 207a0000 rtn blank +7f9d 1fe27a00 copy pdata ,pc + +wait_uarttx: +7f9e 6811010e hfetch 2 ,core_uart_txitems +7f9f 243a7f9e nbranch wait_uarttx ,blank +7fa0 20600000 rtn + +ice_break: +7fa1 70820301 hjam 0x1 ,core_ice_ctrl +7fa2 20600000 rtn + +ice_setbp: +7fa3 60110205 hstore 2 ,core_ice_break0 +7fa4 68108203 hfetch 1 ,core_ice_ctrl +7fa5 79207e04 set1 4 ,pdata +7fa6 60108203 hstore 1 ,core_ice_ctrl +7fa7 20600000 rtn + +ice_setbp2: +7fa8 60110207 hstore 2 ,core_ice_break1 +7fa9 68108203 hfetch 1 ,core_ice_ctrl +7faa 79207e06 set1 6 ,pdata +7fab 60108203 hstore 1 ,core_ice_ctrl +7fac 20600000 rtn + +ice_set_write_bp: +7fad 60110205 hstore 2 ,core_ice_break0 +7fae 70820330 hjam 0x30 ,core_ice_ctrl +7faf 20600000 rtn + +test_enable_white: +7fb0 68108043 hfetch 1 ,core_config +7fb1 793ffe04 set0 whiteoff_bit ,pdata +7fb2 60108043 hstore 1 ,core_config +7fb3 20600000 rtn + +check_uart_tx_buff: +7fb4 6811010e hfetch 2 ,core_uart_txitems +7fb5 d8400200 arg uart_air_control_threshold ,temp + +pdata_sub_temp: +7fb6 98467c00 isub temp ,null +7fb7 20600000 rtn + +fifo_in: +7fb8 477f403f bpatchx patch3f_6 ,mem_patch3f +7fb9 ea2c0000 ifetcht util_fifo_len ,rega +7fba 18417eff and temp ,0xff ,pdata +7fbb 243a7fbe nbranch fifo_in_push ,blank +7fbc 184cfe00 rshift8 temp ,pdata +7fbd e2240000 istore util_fifo_len ,rega + +fifo_in_push: +7fbe 1a20a207 increase util_fifo_len + util_fifo_offset ,rega +7fbf ea208000 ifetch 1 ,rega +7fc0 243a2a8c nbranch assert ,blank +7fc1 68008a99 fetch 1 ,mem_fifo_temp +7fc2 e2208000 istore 1 ,rega +7fc3 20600000 rtn + +fifo_out: +7fc4 477fc03f bpatchx patch3f_7 ,mem_patch3f +7fc5 df200008 arg util_fifo_len ,loopcnt +7fc6 ea240000 ifetch util_fifo_len ,rega +7fc7 207a0000 rtn blank + +fifo_out_loop: +7fc8 ea208000 ifetch 1 ,rega +7fc9 243a7fcd nbranch fifo_out_end ,blank +7fca 1a20a201 increase 1 ,rega +7fcb c2007fc8 loop fifo_out_loop +7fcc 20202a8c branch assert + +fifo_out_end: +7fcd d8400000 arg 0 ,temp +7fce e2288000 istoret 1 ,rega +7fcf 20600000 rtn + +fifo_is_empty: +7fd0 ea240000 ifetch util_fifo_len ,rega +7fd1 20600000 rtn + +fifo_is_full: +7fd2 ea208000 ifetch 1 ,rega +7fd3 20600000 rtn + +fifo_is_near_full: +7fd4 ea210000 ifetch 2 ,rega +7fd5 20600000 rtn + +fifo_content_count: +7fd6 d8400000 arg 0 ,temp + +fifo_content_count_loop: +7fd7 68008006 fetch 1 ,contr +7fd8 c2007fd7 loop fifo_content_count_loop ,blank +7fd9 18408401 increase 1 ,temp +7fda c2007fd7 loop fifo_content_count_loop +7fdb 18427e00 copy temp ,pdata +7fdc 20600000 rtn + +not_greater_than: +7fdd 98467c00 isub temp ,null +7fde 24610000 nrtn positive +7fdf 18427e00 copy temp ,pdata +7fe0 20600000 rtn + +disable_positive: +7fe1 18007dff force -1 ,null +7fe2 20600000 rtn + +enable_positive: + +disable_zero: +7fe3 18007c01 force 1 ,null +7fe4 20600000 rtn + +enable_zero: +7fe5 18007c00 force 0 ,null +7fe6 20600000 rtn + +enable_user: +7fe7 78347c00 enable user +7fe8 20600000 rtn + +disable_user: +7fe9 78547c00 disable user +7fea 20600000 rtn + +enable_user2: +7feb 78367c00 enable user2 +7fec 20600000 rtn + +disable_user2: +7fed 78567c00 disable user2 +7fee 20600000 rtn + +disable_blank: +7fef 58000001 setarg 1 +7ff0 20600000 rtn + +enable_blank: +7ff1 58000000 setarg 0 +7ff2 20600000 rtn + +reverse_byte: +7ff3 1f227e00 copy loopcnt ,pdata +7ff4 207a0000 rtn blank +7ff5 18c27e00 copy contr ,pdata +7ff6 9f20fe00 iadd loopcnt ,pdata +7ff7 1fe0ffff increase -1 ,pdata +7ff8 1fe20c00 copy pdata ,contr + +reverse_loop: +7ff9 e8c08000 ifetch 1 ,contr +7ffa 18c08dfe increase -2 ,contr +7ffb e0a08000 istore 1 ,contw +7ffc c2007ff9 loop reverse_loop +7ffd 20600000 rtn +rtn Index: 1066_OTP_FLASH/output/ramcode.rom =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/ramcode.rom (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/ramcode.rom (working copy) @@ -0,0 +1,20 @@ +20402978 +58000000 +600181f6 +2040000a +2040650b +d84000ab +20406556 +da606578 +20406429 +2020643c +70808640 +70808700 +68108081 +793ffe00 +793ffe01 +79207e03 +60108081 +58000000 +600201f5 +20600000 Index: 1066_OTP_FLASH/output/romcode.rom =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/romcode.rom (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/romcode.rom (working copy) @@ -0,0 +1,24576 @@ +20402abc +44804000 +20800000 +2040640d +2040296c +204065a3 +20402a96 +20404d6a +4480c000 +20406a03 +20405cf6 +20407ccc +204032d8 +2455e89c +44814000 +2055b2e3 +2040756a +2055ab41 +4481c000 +204076dc +20407aaf +2040756d +2040535c +44824000 +20402038 +204032ed +2040208f +204022f8 +2040236a +20402021 +20402b6a +20402c72 +20202012 +20402026 +c6848000 +793f8009 +20402223 +202053ce +4482c000 +2040225e +2422a02f +2040220a +1a208c01 +e8c08000 +c2805360 +c280a166 +202023cf +2040222b +1f227c00 +20628000 +2040220a +68008030 +c281a0d3 +68008031 +c280a166 +202023cf +6800c1ce +207a0000 +c000a048 +c001204d +c001a050 +c002a055 +c00da045 +20402257 +20628000 +2040225a +20628000 +7041ce00 +20600000 +70049b1b +7041ce00 +20600000 +7920001c +793f801e +70008fff +70008d1f +20202043 +793f801c +18003600 +20202043 +2040225a +20628000 +18000401 +70016e05 +2020205c +44834000 +680341d0 +203a2043 +70468101 +70005503 +2020205b +18000425 +4483c000 +680080f1 +203a2062 +1fe9fe00 +1ff27e00 +1fe0ffff +6000c0a6 +600080f0 +70008e1f +793f800c +2040223b +2422a083 +20402a6f +60008077 +6008807c +680341d0 +60030040 +44844001 +20407f15 +18007e00 +2841fe01 +7d20fe05 +79207e03 +60008030 +700a9903 +20407d86 +18007e00 +7920fe04 +6000804c +58000000 +79207e01 +60008031 +7834fc00 +20402223 +7854fc00 +18000e03 +680140b9 +20407f08 +20202043 +4484c001 +680341d0 +60030040 +2841fe01 +2020a089 +20202043 +d8a00101 +df200008 +20407ec6 +700a9904 +20407d86 +20202043 +c68e0000 +18000e01 +20407f16 +7d3a001c +243a2095 +20600000 +44854001 +680940bb +18000e04 +2040271c +20740000 +204028a4 +18004800 +20618000 +793f800b +793f8000 +1c40c201 +280ffe1e +7920c802 +2c200400 +2420a0be +4485c001 +68008012 +1fe0fe01 +60008012 +204028d8 +204028d2 +204028f2 +20402a51 +20402a56 +20402a64 +2040264d +204020b1 +2020209c +44864001 +6800808d +1fe0ffff +6000808d +20610000 +70008d1f +6800808f +1fe0ffff +6000808f +20610000 +7940001e +70008fff +20600000 +4486c001 +204028d8 +204028cc +204028f2 +20402a5b +204029eb +20402a0d +202c20c8 +204020b1 +2020209f +44874001 +204029bb +20402a6b +2040251e +793f8001 +c6858000 +4487c001 +68008013 +1fe0fe01 +60008013 +20600000 +44884002 +7834fc00 +78387c00 +680140b5 +203a20db +18000e08 +20407f16 +247a0000 +4488c002 +680940b7 +18000e28 +2040271c +20342114 +18000e03 +20407f16 +243a20f0 +6800804c +c28220e6 +202020e9 +d8a00101 +df200008 +20407ec6 +44894002 +70003000 +20405cf7 +70468100 +700a9913 +20407d86 +20202114 +4489c002 +18001600 +34730200 +680080f2 +1fe0ffff +9c42fe00 +2fe00600 +2420a0f0 +18827e00 +60008181 +18004c00 +18004800 +448a4002 +2021a114 +204028dc +d9600600 +34730200 +448ac002 +680200f2 +98004200 +1fe0fe01 +600200f2 +280ffe0c +7920c802 +2c200400 +2420a128 +6800800c +1fe0fe01 +6000800c +204028d2 +20402a51 +20402a56 +20402a64 +2040264d +2040211a +202020fc +448b4002 +7854fc00 +680140b5 +207a0000 +18000e08 +20207f08 +448bc002 +6800808e +1fe0ffff +6000808e +20610000 +70008e1f +680080f0 +1fe0ffff +600080f0 +20610000 +7940000c +6800c0a6 +600080f0 +20600000 +448c4003 +204028cc +20402a5b +204029eb +20402a0d +202c2130 +2040211a +20202101 +2040264d +6800800d +1fe0fe01 +6000800d +18003600 +680200f2 +448cc003 +20402a4f +204028dc +1cc0cc01 +1c2143fd +1c8149fc +204028d2 +20402a51 +20402a56 +20402a64 +1c427e00 +60020161 +18000800 +18000202 +20402a6b +20402766 +448d4003 +20402a4d +1c21c202 +1c8149fc +204028cc +20402a5b +204029eb +20402a0d +204c264d +202c2155 +68008010 +203a20fc +1fe0ffff +60008010 +20202136 +448dc003 +6800800e +1fe0fe01 +6000800e +20402435 +204022f2 +202c215f +20402455 +243a215a +202020fc +448e4003 +68008030 +793ffe03 +60008030 +20402440 +7854fc00 +20600000 +448ec003 +7834fc00 +78387c00 +204021e1 +20740000 +20402c69 +20402a4f +1c40c201 +204028e2 +18004803 +20406cc2 +20402489 +204028d2 +20402a51 +20402a56 +20402a64 +20402762 +448f4003 +20405d08 +204022e4 +2436a180 +20402a88 +20402728 +6800800f +1fe0fe01 +6000800f +448fc003 +20406caa +2040218b +24748000 +204026f3 +243a2188 +7854fc00 +20600000 +20402489 +204022da +20202177 +2036a18e +20402a7f +2021219c +204021a7 +2434219c +6800804c +c4020000 +c3818000 +6800804b +c3818000 +204021ae +247a0000 +6800816e +1fe0ffff +6000816e +247a0000 +20206006 +44904004 +2040245d +7854fc00 +6800804c +c28221a2 +20600000 +6800804c +c3818000 +d8a00101 +df200008 +20207ec6 +4490c004 +78347c00 +6800804b +c4018000 +204021ae +247a0000 +20207fe9 +68008072 +1fe0ffff +60008072 +20600000 +44914004 +68008030 +c283a1bb +680089b5 +203a21bb +7009b500 +700a9918 +20407d86 +202021bb +4491c004 +20402254 +68008030 +79207e07 +60008030 +7041bd01 +68008055 +c08b21c3 +20600000 +7009b501 +68008030 +793ffe07 +60008030 +20600000 +44924004 +78547c00 +68010032 +d840ffff +98467c00 +24628000 +68020034 +203821d3 +9d067e00 +202021d4 +9c467e00 +1fe67c04 +24610000 +18007e00 +60010032 +20207fe7 +1fe20400 +4492c004 +600a0034 +70455b01 +5800ffff +60010032 +70007301 +20600000 +44934004 +204021c9 +24740000 +78547c00 +70001120 +793f800b +20402a4f +204022e6 +c505a1f4 +20402455 +243a21e7 +4493c004 +78547c00 +1c427e00 +600240ca +78387c00 +7834fc00 +700a992a +20207d86 +44944005 +20402a4d +d8200010 +204022dc +78587c00 +7854fc00 +20402818 +20402435 +4494c005 +2040247c +2036a202 +20402455 +243a21fc +202021ec +68008031 +793ffe01 +60008031 +20402a88 +20402841 +78347c00 +700a992b +20207d86 +44954005 +79200009 +1a227e00 +6001001e +18007250 +d8a0043f +1a208c01 +e8c08000 +1a220c00 +c2807f01 +d8a00030 +20407f01 +78577c00 +68008077 +98000800 +70008a01 +2034a21c +70008a01 +68008030 +c4008000 +68008073 +6000808a +68008074 +6000808b +20600000 +4495c005 +6801001e +98000a00 +18007250 +d8c0043f +203b7f01 +d8c00030 +20207f01 +df200001 +68088015 +18408401 +2841fe01 +2420a231 +d8400000 +60088015 +184ffe50 +da204040 +9a20a200 +ea208000 +c280a239 +c3800000 +c3818000 +c200222d +20600000 +44964005 +da60226a +20402261 +24628000 +1a227e00 +6001001e +18007c00 +20600000 +20402725 +2020a24b +6801001e +1fe08a17 +68008047 +e0a08000 +da6022aa +20202261 +68008047 +2feffe03 +2020a250 +18007c01 +20600000 +18007c00 +20600000 +da6022a7 +20202261 +6809001e +da6022cf +20202261 +6808c1cf +da602275 +20202261 +4496c005 +680b41d0 +da60226e +20202261 +da60227b +20202261 +da6022c6 +44974005 +da204040 +df200001 +ea208000 +1a627a00 +1a20a250 +c2002264 +18007c01 +20600000 +c2802266 +c281a266 +18007c00 +20600000 +c281a270 +c3002266 +1a208c10 +e8c30000 +98467c00 +20628000 +20202266 +c3002266 +1a208c16 +e8c08000 +98467c00 +20628000 +20202266 +c300a266 +204022b3 +20402297 +98467e00 +1fe0fe01 +20212291 +18c22400 +60048aa2 +6800c4c0 +243a2289 +68048aa2 +1a420c00 +1fe0fe05 +2020228c +68048aa2 +1a420c00 +1fe0fe14 +24212266 +18424200 +204022bf +18007c00 +20600000 +98002400 +1a208c02 +e8c10000 +203a228d +204022bf +2020227c +1ff11600 +196c9600 +2022a2a1 +29601e0f +24608000 +18511600 +196c9600 +24628000 +7920041c +20600000 +18511600 +196c9600 +29601e0f +24608000 +79207e1c +20600000 +c3002266 +18007c00 +20600000 +c3002266 +1a208c01 +e8c08000 +c2802266 +1a208c17 +e8c08000 +c301a266 +18007c00 +20600000 +1a208c01 +e8c88000 +1c427e00 +284ffe01 +1a208c04 +e8ca0000 +20608000 +1a208c08 +e8c30000 +20402854 +1d027e00 +20600000 +1a208c02 +1a208a04 +e8c10000 +98409600 +19627e00 +e0a20000 +20205449 +c300a266 +204022b3 +9b60fe00 +9b60fe00 +98e0fe00 +98467c00 +24212266 +18007c00 +20600000 +c3002266 +18427e00 +9a267c00 +203f2266 +1a208c01 +e8c08000 +c2802266 +ea208000 +793ffe07 +e2208000 +20202266 +4497c005 +20402a4f +1c40c201 +204028e2 +18004803 +204028d2 +20402a51 +20402a56 +20402a64 +20202762 +44984006 +20402a4d +1c40c201 +204028e2 +18004803 +204028cc +2040242a +204029f1 +20402a5b +204029eb +20402a0d +246c0000 +204029bb +2020251c +4498c006 +68008181 +98000800 +18000201 +204022da +202022e4 +6800c093 +c4000000 +18000e04 +20407f16 +247a0000 +680940ad +18000e04 +2040271c +20740000 +20402308 +18000e04 +680140af +242c7f08 +180a7e00 +9ea17e00 +20207f08 +44994006 +70018100 +78587c00 +78577c00 +204028a4 +1c4143fc +18004801 +204028d8 +204028cc +7940001d +68008006 +1fe0fe01 +60008006 +204028f2 +204029eb +20402a14 +246c0000 +4499c006 +18003600 +204028f9 +68008007 +1fe0fe01 +60008007 +204028d8 +20402a4d +1c21c202 +18004801 +204028d2 +204028f2 +20402a51 +20402a5f +1c427e00 +60020161 +20402a64 +18000202 +18000800 +20402a6b +20402766 +20402332 +1c2143fd +1cc0cc01 +20600000 +449a4006 +6800c0d1 +207a0000 +d8a0018e +6800c515 +1fe27200 +1fe0fe01 +e0a08000 +18a20400 +1fe0fe01 +600141dc +18420a00 +58000009 +e0a08000 +d8c04516 +20407f01 +da60458d +df200004 +20402354 +da604577 +df200001 +20402354 +1800020a +7041db02 +5800018e +6001016f +20402a4d +204028d2 +20402a51 +20402a5f +20402a64 +20402a6b +20402766 +20600000 +18a20400 +1a620c00 +e8c08000 +207a0000 +1fe3fe00 +c2002358 +1fe22200 +1fe0fe02 +1fe20e00 +680141dc +98e0fe00 +600141dc +18420a00 +1a227e00 +1fe0fe01 +e0a08000 +1a620c00 +e8c08000 +e8c08000 +e0a08000 +1a227200 +20207f01 +6800c093 +c4008000 +18000e05 +20407f16 +247a0000 +680940b1 +18000e28 +2040271c +20740000 +18000800 +70001008 +793f800b +2040237a +18000e05 +680140b3 +20207f08 +449ac006 +78587c00 +204028a4 +68008008 +1fe0fe01 +60008008 +18004c00 +204028e2 +1c40c201 +18004802 +449b4006 +204028cc +204029eb +20402a14 +246c0000 +204028f9 +68008009 +1fe0fe01 +60008009 +18003600 +20402a4d +1c21c202 +18004801 +204028d2 +20402a51 +20402a5f +20402a64 +2040264d +18000800 +d9600600 +35330200 +1d01d003 +1c2143fd +449bc006 +1cc0cc01 +204028cc +204029eb +20402a07 +242c23a4 +20402a6b +2040251e +c505a3ab +449c4007 +68008010 +207a0000 +1fe0ffff +60008010 +20402a4f +2020239b +449cc007 +793fd001 +79205000 +6800800a +1fe0fe01 +6000800a +20402a4d +1c21c202 +204028d2 +20402a51 +20402a5f +20402a64 +2040264d +2d000603 +2020a3bc +37cb8200 +202023b8 +68020165 +1fe1fe03 +1fe25000 +449d4007 +68030178 +60030040 +20402435 +2040247c +2036a3c8 +20402455 +243a23c3 +20600000 +449dc007 +20402440 +2040223b +24628000 +70003100 +20402841 +20202223 +449e4007 +20402850 +204023f3 +20740000 +449ec007 +20402c69 +20406caa +20402514 +2436a3e2 +20402a88 +20406cc2 +20402489 +20402757 +20402728 +20405d08 +6800800b +1fe0fe01 +6000800b +20402841 +449f4007 +20402bb1 +20402a7f +202123eb +204021a7 +243423eb +204026f3 +243a23d3 +20600000 +449fc007 +70015100 +70017f00 +2040245d +793f8011 +20407fb0 +68008030 +20600000 +44a04008 +204021c9 +24740000 +18820400 +20402a6f +60008181 +18420800 +70001120 +44a0c008 +20402a4f +18000202 +2040274f +1c427e00 +60020161 +20402762 +20402a4d +7837fc00 +204024f6 +202c240d +204028f9 +20402455 +243a23fb +c6820000 +70007c34 +79200003 +20600000 +78387c00 +20402435 +204028a4 +44a14008 +204022f2 +202c2419 +20402455 +243a2410 +78587c00 +1d027e00 +600240ca +20600000 +7834fc00 +c582241f +793f8004 +70007c03 +70007d33 +204062f8 +18827e00 +60008077 +18007e00 +60030038 +68008031 +79207e01 +60008031 +20402a88 +7854fc00 +78347c00 +20600000 +44a1c008 +7856fc00 +793f8005 +793f800a +793f8010 +793f800f +68008047 +793ffe05 +79207e04 +60008047 +20600000 +44a24008 +70001120 +70004750 +680140bf +6001003e +1c427e00 +600240ca +20780000 +1d027e00 +600240ca +20600000 +44a2c008 +20405d04 +20402459 +60008046 +58000000 +6001025d +58001c80 +60010051 +68008030 +79207e00 +60008030 +70004b00 +70004c00 +7000a000 +20202a88 +44a34008 +18007e00 +600441be +e0a40000 +204021c5 +20202254 +68008011 +1fe0ffff +60008011 +20600000 +6800c0cf +1fe0fe01 +6000c0cf +20600000 +44a3c008 +6800c1ce +c001a462 +68008048 +c080a466 +20404d06 +2422a466 +204021a4 +7041ce00 +44a44009 +204033af +204026e9 +700a9902 +20407d86 +20405cf7 +20404d6b +2040757d +68008030 +793ffe00 +60008030 +70468100 +6800804c +2fe18000 +2020a476 +793f8001 +68008047 +c301a478 +6800804b +c4030000 +793f8002 +20600000 +44a4c009 +68008174 +207a0000 +1fe20800 +20402514 +24768000 +18000200 +20402757 +18827e00 +60008077 +18007e00 +60008174 +20600000 +44a54009 +68008030 +c3012496 +18000207 +c583a495 +20402725 +2420a496 +20372496 +204024c1 +58000002 +600140c8 +20600000 +24770000 +44a5c009 +20402243 +2422a4a7 +68008047 +c301a4b0 +c502a4b4 +6800817f +c28324ba +680140c8 +1fe0ffff +600140c8 +203a24a5 +6800c0c5 +98000200 +20600000 +44a64009 +20402687 +20402725 +2020a4b0 +2040600a +203424be +6800804b +c28324c0 +c502a4b4 +6800817f +c28324ba +18000201 +20748000 +18000200 +20600000 +44a6c009 +68008019 +98000200 +c1808000 +18000200 +20600000 +68008158 +1fe1020f +79200005 +20600000 +18000213 +202024c1 +204024ca +44a74009 +68088047 +79200403 +60088047 +18227e00 +6000c0c5 +5800ffff +600140c8 +20600000 +44a7c009 +6800804c +2feffe05 +680141dc +2020a4e0 +18000203 +1fe67c11 +20610000 +18000204 +1fe67c1b +20610000 +1800020a +1fe67c79 +20610000 +1800020b +1fe67cb7 +20610000 +1800020e +1fe67ce0 +20610000 +1800020f +20600000 +18000203 +1fe67c11 +20610000 +18000204 +1fe67c36 +20610000 +1800020a +d840016f +98467c00 +24610000 +1800020e +d84002a7 +98467c00 +24610000 +1800020f +20600000 +68008030 +c300a4f5 +68010032 +203a24f5 +243724f7 +20402a4f +1d00c201 +78287c00 +6801003e +1fe37e00 +d8400500 +9840fe00 +20402a24 +204028ea +18004803 +204028cc +2040242a +204029f1 +44a8400a +6801003e +1fe37e00 +20402a24 +204029eb +7826fc00 +6801003e +d84003bb +9840b600 +37c18400 +1b420400 +600b009a +7846fc00 +246c0000 +dd2003bb +1c225000 +2035ab05 +20600000 +44a8c00a +204024f0 +242c28f9 +204029bb +c588a51c +680100f6 +1fe0fe01 +600100f6 +1c230400 +18419c40 +44a9400a +7823fc00 +78257c00 +7825fc00 +09800003 +198cfe00 +6000815d +09800004 +08008007 +19827e00 +60008019 +09800003 +198cfe00 +6000815e +68008019 +1fe67c03 +20212533 +c003a533 +6800804c +2feffe05 +7920aa01 +44a9c00a +09800008 +7845fc00 +78457c00 +20232631 +c588a53c +680100f8 +1fe0fe01 +600100f8 +44aa400a +6800815d +2fe00e00 +7920800a +2020a54c +a8800e00 +2020a54b +c583a64d +680880b0 +a8400e00 +2420a64d +68008047 +793ffe05 +79207e04 +60008047 +7836fc00 +44aac00a +68008019 +1fe20200 +c505255b +6808815e +68008047 +793ffe00 +284ffe00 +7920fe00 +284ffe01 +7920fe01 +60008047 +284c0001 +2020a55b +20402687 +44ab400a +d8400000 +20402a1c +18217e0f +c000a587 +c000264d +c0012659 +6808815e +68008047 +a8400800 +2420a569 +c5852568 +c303a569 +7920000f +44abc00a +18227e00 +c001a589 +c002258d +c003a578 +c004258c +d8400004 +20402a1c +c0052588 +c005a58b +d8400008 +20402a1c +c0072588 +c007a58b +20600000 +44ac400b +7826fc00 +7824fc00 +78277c00 +d8a000d1 +1800721e +09800008 +19897e00 +e0a08000 +c200257e +c583a64d +09800010 +7d230008 +2023263d +20202620 +2020264d +79200010 +78267c00 +2020258e +79200010 +79202a02 +7826fc00 +44acc00b +c500a64d +2aac0001 +2020a59a +7843fc00 +7826fc00 +78467c00 +1c409602 +34530400 +242c263d +79200010 +7823fc00 +44ad400b +78277c00 +7824fc00 +09800003 +198cfe00 +60008180 +09800005 +c50825a5 +19897200 +1f297200 +202025a8 +09800005 +19837200 +09800003 +44adc00b +1f227e00 +6001015f +203a25e8 +9ea67c00 +2021263d +44ae400b +793f8000 +68008180 +1fe17e03 +d8a00551 +c001a5ba +c508a5e4 +68008180 +1fe17e03 +c00125bf +c000a5d3 +2020263d +6801015f +1fe67c70 +2421263d +c507a620 +202025e4 +44aec00b +c507a620 +6801015f +d84002e0 +98467c00 +2021263d +68008263 +c30025c9 +c300a5ce +2020264d +70026101 +6801025d +c080264d +d8a01000 +202025e4 +70026102 +6801025f +c080264d +d8a01400 +202025e4 +44af400b +c507a620 +6801015f +d84002e0 +98467c00 +2021263d +68008261 +c000a5dd +c00125e1 +2020264d +d8a01000 +6801025d +98a08a00 +202025e4 +d8a01400 +6801025f +98a08a00 +09800008 +19897e00 +e0a08000 +c20025e4 +44afc00b +09800010 +20232637 +6800c363 +c000a64d +c508a60d +c507a64a +68008180 +2fe00603 +2020a60d +6801015f +203a260d +44b0400c +68008261 +c000a5f9 +c0012603 +20202a8c +6801025d +6809015f +9840fe00 +6001025d +c0002a8c +68091000 +18408404 +98467c00 +2042a747 +2020260d +6801025f +6809015f +9840fe00 +6001025f +c0002a8c +68091400 +18408404 +98467c00 +2042a74b +2020260d +44b0c00c +6808804c +68008180 +2fe00603 +79208406 +7d208407 +6008804c +2420a616 +79200001 +c588a620 +284ffe06 +2020a620 +680100fa +1fe0fe01 +600100fa +79200005 +793f8407 +793f8001 +6008804c +44b1400c +6808815e +68008047 +79207e05 +284ffe02 +7920fe02 +280ffe0a +7920fe07 +60008047 +6801015f +243a264d +6800804c +793ffe07 +6000804c +68008180 +2fe00e01 +2020264d +44b1c00c +7856fc00 +6801001a +1fe0fe01 +6001001a +2020264d +6801001c +1fe0fe01 +6001001c +2040263e +c588a63d +79200005 +2020264d +44b2400c +68008180 +2fe00603 +2420a646 +6808804c +793f8406 +6008804c +20600000 +6808804c +793f8407 +6008804c +20204c0b +68008047 +79207e05 +60008047 +44b2c00c +784efc00 +784e7c00 +7846fc00 +78467c00 +7844fc00 +78477c00 +7843fc00 +2030a8f9 +37d38200 +20000064 +202028f9 +44b3400c +7824fc00 +78267c00 +09800048 +2feffe3a +79208000 +1c020400 +57e04000 +57e03c00 +782afc00 +380bffff +380cffff +20000020 +29a80000 +1d827e00 +60018178 +1da27e00 +6000817b +18424000 +2020a66e +2020263d +44b3c00c +09800048 +57e03e00 +57e00800 +57e05c00 +57e02400 +18007e00 +09800010 +2023263d +5ffffffc +9a417e00 +60020165 +1ba27e00 +60018175 +1b827e00 +60008173 +18827e00 +60008174 +1dc27e00 +6001017c +1c227e00 +08008220 +28201e02 +7920800b +2020264d +44b4400d +68008047 +c4018000 +793ffe03 +79407e06 +60008047 +6800c0c5 +c009a69c +c1038000 +6800804b +c4030000 +793ffe06 +79207e07 +6000804b +793f8002 +68014246 +247a0000 +6800804b +793ffe07 +6000804b +2020525d +44b4c00d +680084b7 +1fe37e00 +c008a6b8 +c00926c0 +c00c26e9 +c03fa6a8 +c1818000 +680084b8 +c015a6b0 +c008a6ab +20600000 +680084b8 +79207e07 +20600000 +20748000 +68008030 +c3820000 +70007c31 +20600000 +20748000 +68008031 +2feffe04 +2020a6b5 +20600000 +793ffe04 +60008031 +20600000 +44b5400d +6800804c +79207e02 +6000804c +70801101 +68008030 +2feffe04 +20600000 +44b5c00d +6800804c +793ffe02 +6000804c +70801100 +20600000 +44b6400d +1c427e00 +6002420c +1c40a203 +2034a6cc +1d00a203 +68090032 +1a227e00 +793ffe1b +9846fc00 +68010075 +20407f86 +18072600 +9a667e00 +202126d6 +9840fe00 +9a20fe00 +60020034 +70455b00 +68008030 +79207e01 +60008030 +68008073 +6000808a +58000000 +6001c169 +6001c16c +6000c159 +700a990b +20407d86 +680140c1 +6001003e +24748000 +18808fff +20600000 +44b6c00d +68008030 +c4008000 +793ffe01 +60008030 +680140bf +6001003e +7855fc00 +700a990c +20207d86 +44b7400d +78377c00 +68008030 +c280a700 +c6088000 +68008047 +c3818000 +68008048 +247a0000 +6800804b +c3830000 +18007e00 +20600000 +c301270f +6800808a +c0012706 +68008047 +c281a718 +c5842718 +2434a718 +68008048 +243a2718 +680080ef +1fe0ffff +600080ef +243a26fe +7000ef10 +20202718 +6800808a +c080a718 +6800808b +203a2718 +1fe0ffff +6000808b +68008047 +c3818000 +24768000 +6800808a +1fe0ffff +6000808a +20600000 +44b7c00d +78487c00 +18423600 +20402260 +78547c00 +24628000 +18003600 +78347c00 +20600000 +6800c158 +a881fe00 +20600000 +44b8400e +793f8001 +70026a00 +68008263 +207a0000 +2feffe00 +d8c01000 +2040cd79 +44b8c00e +6800826a +c000a73b +70026a00 +68008263 +c4008000 +d8c01400 +20404d79 +6800826a +c000a741 +20600000 +68008263 +793ffe00 +60008263 +58000000 +6001025d +20600000 +68008263 +793ffe01 +60008263 +58000000 +6001025f +20600000 +68008263 +79207e00 +60008263 +20600000 +68008263 +79207e01 +60008263 +20600000 +44b9400e +1d00c201 +204028ea +18004803 +204028d2 +20402a51 +20402a5f +20202a64 +44b9c00e +20402a4d +1d027e00 +680a40ca +98467e00 +c1808000 +28203e00 +2420a761 +68008019 +207a0000 +2040274f +28203e10 +2020a64d +1c230400 +18419c40 +44ba400e +7823fc00 +78257c00 +782dfc00 +793f8010 +18827e00 +08008603 +18227e00 +08008604 +68008047 +08008004 +08008603 +78247c00 +08008608 +784dfc00 +78447c00 +78457c00 +793faa02 +d8400000 +20402a1c +44bac00e +18217e1f +c009a7b4 +c000264d +c000a64d +c0012797 +c001a7c5 +c00227cb +c003a78c +c00427ca +d8400004 +20402a1c +c00527c7 +c005a7cd +d8400008 +20402a1c +c007a7cd +202027c7 +44bb400e +782efc00 +7824fc00 +78277c00 +1800721e +d8c000b3 +e8c08000 +08008608 +c2002792 +c503a7f7 +2020264d +44bbc00e +68008181 +1fe20800 +68008090 +1fe23800 +6801c0aa +1fe23a00 +680140a4 +1fe25c00 +7824fc00 +782e7c00 +1c022200 +204028e2 +782afc00 +20000020 +1c221600 +68020161 +1fe24200 +53c07e00 +79207e3a +08008648 +53e07e00 +08008648 +19624200 +1a224000 +78247c00 +08008610 +78447c00 +2020264d +44bc400f +78277c00 +7824fc00 +782e7c00 +680084b6 +1fe105f8 +d8c004b6 +18408408 +1840a7b8 +242127c2 +e8c48000 +08008648 +1a620400 +202027bc +e8c48000 +08418600 +202027f7 +782e7c00 +202027d0 +782e7c00 +79200010 +202027d0 +79202a02 +782efc00 +202027d0 +79202a02 +782efc00 +79200010 +44bcc00f +6800804c +c302a7e5 +18267c03 +202127e5 +78477c00 +784e7c00 +782efc00 +7843fc00 +79202a01 +2aaffe02 +2020a7df +580abeee +08008614 +202027e3 +585faeba +08008618 +58000012 +08008606 +7823fc00 +79200010 +78277c00 +7824fc00 +c502a800 +6800c1db +08008603 +680141dc +98007200 +c50827ef +08008605 +202027f0 +0800860d +1f227e00 +203a27f7 +6801016f +98000c00 +e8c08000 +08008608 +c20027f4 +78247c00 +08008610 +78447c00 +204024c1 +6800804c +c302a64d +18007e00 +08008606 +2020264d +44bd400f +c5082808 +68008180 +08008603 +6800815f +98002600 +08008605 +2020280d +68008180 +08008603 +6801015f +98002600 +0800860d +d8c00551 +1a627c00 +2022a814 +e8c08000 +08008608 +1a60a7ff +2020280e +680100fc +1fe0fe01 +600100fc +202027f7 +68020165 +1fe0a207 +68010171 +243a281e +1a20a3fd +20202826 +1feffe0c +68190040 +18408401 +98467e00 +24212825 +1a20a3ff +20202821 +1fe67e00 +37d18200 +2c400600 +2420a826 +98005200 +1a225000 +98005200 +20600000 +44bdc00f +37d10200 +1b427e00 +98000c00 +1ff17e00 +9c467200 +1f217203 +2422a837 +18007e00 +2020283b +d8400ea6 +18007e00 +9840fe00 +c2002839 +98c0fe00 +1fe6fc0c +20407f86 +1807fe00 +60010171 +20600000 +44be400f +1b427e00 +1b220400 +98467c00 +7d217e2c +98460400 +58000ea6 +284c000f +2020a84c +5fff0ea6 +98408400 +600b0447 +207b0000 +600b0038 +20600000 +78587c00 +68030447 +203b2854 +68030038 +9b20e000 +1e00e00a +58000ea6 +9e067e00 +2fec000f +2020a85e +5800f15a +9e00e000 +1e023400 +20600000 +18007c00 +2020285c +44bec00f +20402918 +1c227e00 +1fe17f80 +2c800e03 +2420a869 +1fe97e00 +9ae0fe00 +2020286a +1ae27e00 +1fe6fc4f +782afc00 +20407f86 +18072200 +1a2085d8 +20212872 +1a238400 +20202874 +18438400 +18408401 +44bf400f +68008031 +c301a885 +680240d2 +9c267c00 +20212885 +204028a4 +6800c0d9 +207a0000 +68008031 +79207e02 +60008031 +6802c0e7 +6002c0da +e8c28000 +6002c0df +204028a9 +68008031 +c4010000 +2c2ffe01 +2020a8a1 +18492200 +18410e07 +580040da +9a20a200 +ea208000 +afec0000 +2020a892 +18427e00 +2020289e +6800c0e4 +98002400 +1c227e00 +1fe17f80 +1fe97e00 +9ae0fe00 +9a46fc00 +580040f2 +20407f86 +18072200 +9a208c00 +e8c08000 +6000c0e5 +98000400 +20600000 +6800c0e5 +98000400 +20600000 +68008031 +793ffe02 +793ffe03 +60008031 +20600000 +44bfc00f +d8a040f2 +1800720a +20407ec6 +d8a040f2 +18002600 +18000e02 +6802c0da +98000400 +28e1fe02 +2020a8b5 +18430400 +284c0000 +2020a8b9 +1a627e00 +e0a08000 +184b0400 +1a60a602 +2a61fc28 +2420a8c2 +6802c0df +98000400 +28e1fe02 +2020a8c2 +18430400 +1a667c4e +202128b5 +18002601 +18e08fff +2422a8b0 +da2040f2 +18a27e00 +9a267e00 +6000c0e4 +20600000 +44c04010 +20402860 +6800817f +c302a8d1 +680884cc +2020291f +44c0c010 +20402860 +6800817f +c30228d7 +680884cb +20202933 +18005a00 +6801c0a7 +98005800 +20600000 +44c14010 +6800c1d3 +1fe25a00 +6801c1d0 +1fe25800 +20600000 +44c1c010 +680140a4 +1fe25c00 +6800c0a3 +1fe25a00 +6801c0a0 +1fe25800 +20600000 +44c24010 +68010044 +1fe25c00 +68008043 +1fe25a00 +68018040 +1fe25800 +20600000 +c51028f5 +c68e8000 +c68f8000 +1d815900 +782afc00 +20000020 +20600000 +44c2c010 +2030a90a +708955d4 +20000004 +708955d2 +20000004 +708955d1 +20000004 +6800c1de +c0002908 +c000a915 +c0012908 +c001a915 +c0022915 +c0102915 +708955d0 +708956e0 +18002a00 +7850fc00 +78507c00 +782f7c00 +70890200 +70890100 +70890000 +70890300 +70890470 +70890600 +20600000 +708955d0 +708956c0 +2020290a +44c34010 +70890200 +70890100 +70890018 +708903a7 +7089047f +20600000 +44c3c010 +60088017 +1840a204 +70896d07 +20202981 +44c44011 +708901cf +2000000a +708900ff +708903af +708904ff +2000000a +708902a0 +20600000 +6800c1e0 +203a2931 +1840a202 +20600000 +1840a200 +20600000 +44c4c011 +60088017 +2040292d +20402981 +58000500 +20402a8f +70890601 +7089003c +708901e0 +70896d12 +2000000a +70890201 +7089023d +2000000a +708903b7 +2000000a +7089027f +6800c1de +c000294b +c000a94f +c0012953 +c001a957 +c002295b +c010295f +708956f0 +20402965 +708955d8 +20600000 +708956df +20402965 +708955df +20600000 +708956ff +20402965 +708955df +20600000 +708956ce +20402965 +708955d8 +20600000 +708956cb +20402965 +708955d8 +20600000 +708955d0 +708956c0 +7089574c +7089586c +70895950 +20600000 +20000004 +708955d1 +20000004 +708955d2 +20000004 +708955d4 +20600000 +70804206 +680140c3 +c307296d +98000c00 +d8408900 +e8c08000 +c07fa977 +98418a00 +e8c08000 +e0a08000 +20202971 +44c54011 +20402be5 +204029c9 +580007d0 +9c40fe00 +60020169 +79202a03 +18002a00 +2455a998 +202029ab +44c5c011 +58000960 +9a208400 +6800c0bd +70895f04 +984ffe00 +6808c0be +9846fc00 +20407f86 +1807a200 +18077e00 +1ff07e00 +1ff27e00 +9846fc00 +20407f86 +1807fe00 +1fed7e00 +1fe3fe00 +9a21fe00 +60120960 +70895f44 +70895fc4 +20600000 +44c64011 +70890602 +5803d090 +20402a8f +7089007f +20000082 +70895230 +708901d0 +70895270 +708952f0 +18007232 +68108980 +c282a9a6 +c20029a3 +6000c0ce +70890100 +70890000 +70890600 +20600000 +44c6c011 +6800c0ce +79207e05 +60108952 +68188950 +18410407 +1fe9fe00 +9841fe00 +60108950 +68108951 +793ffe00 +60108951 +68108952 +793ffe05 +60108952 +20600000 +44c74011 +68110981 +1ff1fe00 +1fe97e00 +1fe67e00 +1fe17eff +1fe6fc0a +20407f86 +1807fe00 +1ff27e00 +18070400 +9841fe00 +60008018 +20600000 +70804206 +6810896b +793ffe04 +793ffe05 +6010896b +70890500 +70890400 +70890470 +708905ff +6810896b +79207e04 +79207e05 +6010896b +204029e9 +68108968 +79207e07 +60108968 +793ffe07 +60108968 +79207e07 +60108968 +70804205 +20000001 +70804204 +6810896b +1fe17ecf +6010896b +1fe1fe30 +6010896b +20600000 +58000f0f +20202c18 +5800080f +20202c18 +44c7c011 +20402924 +78507c00 +7830fc00 +782b7c00 +20600000 +44c84012 +6800804c +2feffe02 +7920fe00 +60108011 +d8c00062 +e8c48000 +98006400 +e8c38000 +98006600 +68008054 +1fe0e9ff +782d7c00 +20600000 +1b427e00 +6003009a +7846fc00 +242c28f9 +dd2003bb +1d00d001 +1d0151fc +20600000 +7826fc00 +37cb8400 +202c29ff +2d000402 +2420aa08 +202029ff +44c8c012 +d9600600 +7826fc00 +34730400 +7846fc00 +242c28f9 +20600000 +44c94012 +7826fc00 +37c18400 +7846fc00 +242c28f9 +dd2003bb +1d0151fc +20600000 +44c9c012 +98002200 +1c227e00 +98409600 +19627e00 +600240ca +1a227e00 +20600000 +1fe20400 +44ca4012 +18427e00 +20407f50 +1c307e00 +79207e2c +20407f39 +793ffe2c +20402a77 +20407f39 +20740000 +20407f43 +98003600 +37c18200 +20600000 +44cac012 +20382a38 +35330200 +1d020400 +20202a3b +20372a3a +34730200 +1c420400 +20342a47 +28400601 +2420aa33 +44cb4012 +68008030 +c4000000 +680240ca +98467e00 +24610000 +1fe67cff +20212a33 +20600000 +28400603 +2420aa33 +20202a3e +44cbc012 +d9600600 +20202a33 +78547c00 +20202a4a +78347c00 +20202a4a +44cc4013 +204029f1 +7850fc00 +78307c00 +20600000 +44ccc013 +d9600e43 +34730200 +782b7c00 +20600000 +44cd4013 +d9600d00 +34730200 +20600000 +44cdc013 +d9600e43 +35330200 +782b7c00 +20600000 +44ce4013 +51207e00 +782efc00 +79202a00 +08008648 +784efc00 +20600000 +1ca20400 +18418460 +18421c00 +20600000 +44cec013 +6800c090 +1fe0fe01 +c083aa74 +18007e01 +6000c090 +98000800 +20600000 +1b220400 +20748000 +1b420400 +20600000 +1c427e00 +20748000 +1d027e00 +20600000 +44cf4013 +680a004d +20402a7b +98461600 +19627e00 +68090051 +18438400 +98467e00 +20600000 +44cfc013 +20402a7b +6002004d +20600000 +44d04014 +20202a8c +20202a8e +207a0000 +1fe37e00 +1fe0fffd +1fe0ffff +2422aa92 +18007e00 +20600000 +df200010 +d8a00000 +20407ec6 +d8a0043f +df20000a +20407ec6 +7009b200 +700a9900 +70048c00 +70017f00 +7004d100 +44d0c014 +70016d00 +70015100 +70015c00 +589e8b33 +6001c0a7 +58000153 +60010083 +7000851e +70008601 +70008807 +5812e904 +60018080 +70009060 +7040d005 +70001402 +6800c65a +245a74c1 +6800c4be +245a7518 +44d14014 +20758000 +58000000 +600141dc +1c437e00 +60024094 +20600000 +5800ee21 +60110050 +6812011c +60020abe +6810813e +60008abd +c301e45b +7835fc00 +c303aacc +7855fc00 +1ce27e00 +243a2acc +6810813b +c2812acc +d85fffff +20202b3c +6811813c +6011804c +e8c08000 +1fe1feef +e0a08000 +20402c23 +6810804f +79207e04 +6010804f +20402c23 +2055aadf +6810804e +793ffe03 +6010804e +20402c23 +2435e45b +c6958000 +70800608 +20600000 +6800c198 +60108086 +6801c18d +60118080 +68024181 +60120074 +6802417d +60120070 +68044185 +60140078 +68044190 +98000000 +68140140 +600400a1 +204064ca +20600000 +18027e00 +60044190 +68140070 +6004417d +e8c40000 +e0a40000 +68118080 +6001c18d +68108086 +6000c198 +20202c29 +68108063 +243a2b00 +6801c16f +247a0000 +708063c0 +70800680 +6810812d +c4008000 +68118149 +6001c16f +20600000 +44d1c014 +1b427e00 +20407f37 +680a415f +18467cff +20610000 +1fed7e00 +1ff27e00 +9846fc00 +20407f86 +1807fe00 +d84000c8 +20407f91 +60008099 +24342b15 +1fe67e00 +6809c16f +9840fe00 +6001c16f +58000000 +6002415f +20600000 +6800c177 +79207e02 +6000c177 +20202b23 +d85fffff +6800c176 +793ffe07 +6000c176 +44d24014 +20402c29 +6800c157 +6000c17c +6800c17a +79207e07 +6000c17a +44d2c014 +204029e7 +6802415f +9840fe00 +6002415f +20402aef +6802c178 +6012004c +1fef2200 +37d98200 +1b227e00 +60034163 +70800502 +37d98200 +37d98200 +1a227e00 +6010804f +70800502 +37d98200 +37d98200 +601a004c +70800510 +37df8200 +44d34014 +58000000 +1ce27c00 +2022ab4c +6810813c +6818813d +98467c00 +20212b4a +18427e00 +9ce67e00 +1fe0fe01 +1fe0fe08 +37d98200 +9e20fe00 +680a415b +9840fe00 +6809c16f +984ffe00 +1fecfe00 +1ff1fe00 +1fe0fe6e +d8400ea6 +9846fc00 +20407f86 +1807fe00 +1ff07e00 +18070400 +9841fe00 +680b4163 +20407f2c +18423200 +68034048 +20402854 +1b427e00 +60030a9a +1ce27e00 +e0a08000 +6810811d +1fe1fef0 +e0a08000 +20600000 +44d3c014 +20402afa +6801c16f +207a0000 +6800c091 +207a0000 +6800c65a +203a2b74 +6800c5b1 +207a0000 +6800c4c0 +247a0000 +20402c3a +247a0000 +6800c040 +2fe00e03 +2420ab9d +68014042 +207a0000 +20758000 +44d44015 +680880a0 +68014042 +984ffe00 +18518400 +184b0400 +98467e00 +680a4044 +9840fe00 +6808c156 +98467e00 +1ff06000 +44d4c015 +6801404e +1fe37e00 +20407f50 +1e027e00 +20407f39 +1b420400 +20407f37 +20740000 +20407f49 +44d54015 +6800c178 +98467c00 +20212b18 +600a415b +20403328 +204052fb +680a415b +20202b2a +44d5c015 +6800c040 +c3800000 +c3818000 +6800c65a +203a2ba5 +6800c5b1 +207a0000 +44d64015 +6800c36e +243a2baa +6800c093 +207a0000 +68014154 +207a0000 +6808c156 +98467e00 +d8401d4c +984ffe00 +20202b93 +44d6c015 +7855fc00 +68008030 +c4008000 +2436abd0 +20402bcb +680140c1 +6001003e +68008047 +c281abde +c586abde +20405274 +243a2bde +6800c55c +c280abde +7000a000 +c586abde +6800c174 +203a2be2 +1fe0ffff +6000c174 +20600000 +d8e00001 +202060cd +d8e00001 +202060d1 +70415900 +6801c169 +1fe0fe01 +6001c169 +20600000 +44d74015 +680940c1 +18430400 +6801003e +9840fe00 +6001003e +7000a000 +6801c16c +1fe0fe01 +6001c16c +6800c159 +1fe0fe01 +6000c159 +20600000 +7000a000 +6800c173 +6000c174 +20600000 +6808c172 +600880a0 +20600000 +44d7c015 +6800c178 +247a0000 +70804206 +58000f0c +20402c18 +58030d40 +20402a8f +37d98200 +1e226000 +204029e7 +70804204 +2000000a +37d98200 +1e227e00 +9e067e00 +1fe0fe30 +d84000ff +20407f91 +6000c178 +20007530 +20007530 +20007530 +20600000 +6800c178 +247a0000 +708044ff +70804206 +204029e7 +580003e8 +9e20e000 +07e00000 +1e227e00 +20002ee0 +20002ee0 +20002ee0 +20002ee0 +20002ee0 +20002ee0 +20002ee0 +20002ee0 +20002ee0 +9e067e00 +1fe0fe30 +d84000ff +20407f91 +6000c178 +20007530 +20007530 +20007530 +20600000 +d8a00fff +98a10a00 +6800c175 +1fe17ef0 +1fed7e00 +98a1fe00 +6011004c +e8c10000 +e0a10000 +58000001 +20202c24 +58000002 +37d98200 +60108005 +37d98200 +37d98200 +20600000 +44d84016 +680200a1 +6012004c +58000004 +20402c24 +680200a5 +6012004c +58000008 +20202c24 +68014152 +f9207e00 +60014152 +20600000 +68014152 +f93ffe00 +60014152 +20600000 +44d8c016 +20403326 +68014152 +1fe22200 +6800804c +2feffe06 +7920a20b +68008078 +6808807c +9840fe00 +68088048 +9840fe00 +7d3a220a +6800c4ff +7d3a2201 +6801025d +6809025f +9840fe00 +7d3a220d +68044668 +7d3a220f +68044670 +7d3a220e +6800c1ce +7d3a2208 +6800c092 +2fe1fe0a +2040ac5b +5ffffff8 +9a212200 +1a227e00 +60014152 +20600000 +68110112 +7d3a2206 +6811010e +7d3a2205 +20600000 +68120138 +793ffe1b +6012004c +20402c21 +20202a8c +6812013c +793ffe14 +6012004c +20202c23 +68014150 +c2802a8c +20600000 +68014150 +c280aa8c +20600000 +68014150 +c2812a8c +20600000 +44d94016 +20402c7a +1a60a4cd +ea408000 +c1000000 +c000ad06 +c0012c7f +20600000 +68094241 +18422600 +20600000 +20402f3d +2020307d +20403084 +2040305a +2040305e +202030a2 +20403231 +5800004e +2040322f +204032ba +1a60a292 +ea220000 +2020322c +20402c7a +1a60a491 +ea488000 +20402c90 +1a608a91 +20202e56 +20402c94 +18408401 +18410403 +20600000 +1a60a4ae +ea408000 +1fe17e03 +1fefa204 +1a60fe97 +9a20fe00 +98408c00 +e8c08000 +2020322f +2040326c +2040666a +580007e2 +da200aa2 +d8400004 +204066b3 +2040666d +68020aa2 +20403227 +247a0000 +680240a0 +20203227 +20403241 +58000000 +2040323f +2040323a +1fe17e07 +2020323c +2040323a +79207e04 +2040323c +20203235 +2040325d +c000acb7 +c0012cbc +20600000 +2040323e +1a608ad1 +204032d6 +20403242 +20202cac +2040325a +20202cb8 +1a60a28c +ea208000 +1fe0fe01 +1a608a8c +e0a08000 +c0102dd2 +20403258 +c000acca +58000001 +2040325b +20403258 +c080acac +1a60a2d3 +ea208000 +1fe0fe01 +20402cd5 +c0022cd2 +20402c8a +20402d04 +20202d8f +20402cd4 +20202cac +58000000 +1a608ad3 +202032b4 +2040323e +2040325a +20403241 +20202cac +2040325d +c001acd8 +2040323a +2fec0004 +2020aca9 +2040325d +c000acd7 +c0012cd8 +20600000 +20403253 +c1ff8000 +20402ce9 +24562cf4 +20600000 +78567c00 +1a60a2ce +ea208000 +c1808000 +1a60a2d0 +ea208000 +c1800000 +58000001 +20402cfd +20403237 +20207feb +1a60a2d0 +ea208000 +203a2cff +1fe0ffff +2040323f +58000002 +20402cfd +20402c8a +20203237 +1a608ad2 +202032b4 +58000003 +20402cfd +20403258 +243a2cc8 +20402c8a +58000002 +20203238 +c6930000 +79200027 +44d9c016 +1a60a28e +ea208000 +c000ad0f +2040306a +24342d16 +20402d1b +1a608a8e +204032d6 +20402d2c +24342d7d +20402ce4 +20402d8f +20402e7a +793f8027 +20600000 +20628000 +79207e1c +20600000 +1a60a2c2 +ea208000 +1fe0fe01 +1a608ac2 +e0a08000 +c0022d23 +c002ad27 +20600000 +1a60a2ad +ea208000 +1a608aab +202032b4 +1a608ac2 +204032d6 +1a60a2ac +ea208000 +20202d25 +20403253 +c0ffaeb1 +44da4016 +20402d3a +24342d36 +20402d53 +20402e71 +58000001 +1a608a8b +202032b4 +1a60a28b +ea208000 +c000ffe7 +20600000 +1a6084d8 +e8410000 +20407f9c +24740000 +1a227e00 +60008aae +1a608ab2 +204032d6 +20402cac +6000919e +68008aae +1fe22200 +1a208401 +d8a0119f +1a227200 +1a420c00 +20407f01 +da20119e +c6938000 +1a608a86 +e0a88000 +18427200 +1a608a22 +1a220c00 +20207f01 +1a60a286 +ea208000 +1fe0fe02 +1a608a88 +e0a08000 +2040323a +20403235 +1a60a286 +ea208000 +1fe9fe00 +1a60a285 +ea288000 +18410403 +18438400 +9841fe00 +1a60a2c3 +ea288000 +9840fe00 +e0a08000 +1a60a286 +ea208000 +98007200 +1a608c22 +20207f01 +2040324f +2040325a +20402e6d +20402cac +6000919e +20402d77 +2040323a +79207e03 +2040323c +20402d53 +20402d33 +20202d14 +6000919f +20403224 +600211a0 +d8400006 +da20119e +20202d4c +1a60a2b2 +ea208000 +203a2d6b +1a60a2da +ea210000 +20207f9c +20402c7a +20402afa +6801c16f +207a0000 +1a6084dc +e8410000 +20407f9c +1a6084b6 +e8440000 +20407f49 +600a415b +20202b2a +20402c7a +1a608a8f +204032d6 +20402da4 +242c2dae +2437adae +20402dd6 +20402e75 +20402c7a +1a60a285 +ea208000 +1fe0fe01 +20403232 +20403253 +c0ffaed0 +20402cdb +58000000 +1a608a8c +e0a10000 +58000000 +20202d34 +7857fc00 +20402df7 +20402c7a +1a60a2c3 +ea208000 +c000adac +20402e11 +20202e45 +20402e45 +20202d97 +44dac016 +1a60a28d +ea208000 +1fe0fe01 +1a608a8d +e0a08000 +20403253 +c0ffadcc +1a60a28f +ea288000 +18408401 +1a608a8f +e0a88000 +1a60a2cc +ea208000 +98467e00 +243a2d92 +44db4016 +2040325d +c001acbe +1a60a2d1 +ea208000 +1fe0fe01 +1a608ad1 +e0a08000 +c0012cb3 +20402caf +58000001 +20403238 +20202d8f +1a60a28d +ea208000 +c1ff8000 +1a608a8d +204032d6 +20202dd4 +1a608a8c +204032d6 +700a993a +20207d86 +20402dde +1a60a284 +ea208000 +207a0000 +98007200 +1a608c02 +1a608a64 +20207f01 +2040325f +1fe97e00 +1a608a84 +e0a08000 +1fe0fe01 +1a608c01 +98c08c00 +e8c18000 +1a608ac4 +e0a18000 +2040325f +1fe37e00 +1fe17e03 +1a608aca +e0a08000 +20600000 +7844fc00 +7843fc00 +58555555 +98001e00 +20600000 +20402918 +1a60a290 +ea288000 +20202933 +20402dee +20402df3 +79202a00 +782efc00 +78307c00 +7850fc00 +204053c4 +2040322a +98001200 +08008620 +7824fc00 +1a60a288 +ea208000 +98007200 +1a608c42 +e8c08000 +08008608 +c2002e06 +78247c00 +08008618 +78447c00 +37d38200 +44dbc016 +20000064 +784efc00 +20600000 +7857fc00 +18002a00 +1a60a290 +ea288000 +2040291f +20402924 +20402dee +7826fc00 +7830fc00 +78507c00 +204053c4 +2040322a +98001200 +78287c00 +1a60a289 +ea210000 +98003600 +37c18400 +242c2e4d +7824fc00 +09800008 +19897e00 +1a608a00 +e0a08000 +1a60a2cd +ea208000 +c0012e33 +44dc4017 +1a60a200 +ea208000 +1a60a287 +ea288000 +a8400e00 +2420ae45 +09800008 +19897e00 +e0a08000 +1fe97e00 +1fe1721f +2022ae3d +09800008 +19897e00 +e0a08000 +c2002e39 +09800018 +1fef7e00 +1ff17e00 +e0a18000 +20232e45 +7837fc00 +7846fc00 +20600000 +784efc00 +7846fc00 +7844fc00 +7843fc00 +2030a8f9 +37d38200 +20000064 +202028f9 +20402e4f +20202e45 +204029bb +207a0000 +1a60a2ea +ea288000 +da200d9e +20402e58 +1a608aea +e0a88000 +20600000 +da4000ff +20202e5a +1a227e00 +98408a00 +68008018 +e0a08000 +18408401 +1a427e00 +98410400 +20600000 +d8400000 +1a220c00 +e8c08000 +98408400 +c2002e64 +184c8400 +20600000 +20402c7a +20402e9f +58000001 +20403272 +58000000 +20402e73 +e0a08000 +20600000 +20403270 +1fe0fe01 +1a608afc +202032b4 +1a60a2fd +ea208000 +1fe0fe01 +1a608afd +202032b4 +44dcc017 +20403270 +1fe67c7c +20610000 +1a60a2fd +ea288000 +98460400 +20402e6d +58000102 +9a60a200 +ea208000 +98467c00 +24212e8d +58000103 +9a60a200 +ea208000 +98467c00 +20212e99 +20600000 +1a60a2fe +ea208000 +c0012e93 +1fe0fe01 +20403272 +c000ae9f +5800000a +204032b0 +58000000 +204032b2 +1a60a2ff +20202ea5 +1a60a2fe +ea208000 +c0002ea7 +1fe0ffff +20403272 +c0002ea7 +58000005 +204032b0 +58000000 +204032b2 +58000100 +9a60a200 +ea208000 +2020326a +58000002 +204032b0 +58000000 +204032b2 +58000101 +20202ea4 +79200026 +20402c83 +58000001 +20203256 +1a60a28b +ea208000 +c000ffe7 +20403253 +c000aeb9 +c0012ebd +c001aec1 +20202a8c +58000011 +20403256 +70119eaa +20202ec4 +58000012 +20403256 +70119e55 +20202ec4 +58000013 +20403256 +70119e22 +2040323a +1fe17e07 +6000919f +20403224 +600211a0 +7011a400 +da20119e +d8400007 +20402d4c +20402d53 +20402d33 +20207fe7 +20403253 +c17f8000 +c008aed6 +c0092ed9 +c009aedc +20600000 +58000002 +20403256 +20202d9f +58000003 +20403256 +20202d9f +580000ff +20403256 +700a9939 +20407d86 +1a60a266 +ea220000 +2040322c +20202d9f +793f8026 +20402f08 +20402f22 +20403263 +200007d0 +20403261 +c07fadd4 +20402da4 +242c2efa +2437aefa +20402dd6 +20402c7a +1a60a292 +ea2a0000 +204030be +2022aead +20402c7a +1a60a266 +ea220000 +c0002ee7 +2040322c +20202f1c +20403261 +1fe0fe01 +20403264 +20402f04 +1fe0fe01 +1fe17e01 +20402f06 +c0002f0c +c000af0e +20600000 +5800018b +202032d0 +da20018b +202032b3 +20403267 +20403224 +2040322c +20202c8a +20402f08 +20202ee8 +20402c83 +20202ee8 +793f8026 +20402c8a +20403253 +c1ff8000 +20402f22 +20403263 +200007d0 +20403261 +c07fadd4 +20402da4 +242c2f27 +2437af27 +79200026 +20403263 +580000ff +20403256 +700a993c +20207d86 +79200027 +70119eff +2040323a +20402d77 +20202d53 +20403261 +1fe0fe01 +20403264 +20402c8a +20202f16 +20403267 +580000ff +20403256 +20202f10 +44dd4017 +20402c7a +580031b0 +1a608ade +e0a10000 +20402f3d +204048ea +204032b6 +44ddc017 +c0003055 +c000af45 +c007af41 +20202a8c +2040326c +df200080 +d8a00d9e +20207ec6 +20402f4c +20402f4f +204048d3 +20202f42 +44de4017 +20402f4c +20402f4f +20402fbd +204048d3 +20403019 +20202f47 +20403291 +20403296 +20203299 +2040328f +c1800000 +20402f55 +20402f65 +2040316b +20202f96 +20403294 +c3800000 +79207e00 +20403297 +20403267 +20403299 +700d3800 +2040324f +20402f61 +1a608a00 +df200042 +20207ed4 +20403231 +2040327d +2040322c +20202c8a +44dec017 +2040324c +c000af8d +20403245 +c000ac8a +58000136 +9a60a200 +ea2a0000 +1c427e00 +98467c00 +24412d18 +1fe22400 +58000136 +9a60a200 +ea220000 +1fe20400 +5800013a +9a60a200 +18427e00 +ea288000 +98408400 +1a427e00 +98467c00 +24610000 +793ffe1c +58000136 +9a608a00 +e0a20000 +20402c8a +20403278 +1fe0fe01 +2040327b +c1810000 +2040327a +2020324f +1c427e00 +da200136 +204032bf +e0a20000 +2020327a +da200d9e +20402f94 +1a608aeb +e0a88000 +18467c50 +24610000 +20202c8a +df200100 +20202e62 +20402f99 +20402fa5 +20202fb1 +58000180 +204032d0 +207a0000 +d8e0000b +20407f16 +247a0000 +204032a7 +58000001 +60008d54 +58000000 +e0a38000 +202031b8 +5800017e +204032d0 +207a0000 +d8e0000e +20407f16 +247a0000 +204032aa +d8a00d64 +df200002 +20407ec6 +700d6400 +202031ed +5800017f +204032d0 +207a0000 +d8e0000c +20407f16 +247a0000 +204032ad +d8a00d74 +df200002 +20407ec6 +700d7403 +20203207 +2040328f +c1808000 +20402fc1 +20202fcb +20403294 +c3808000 +79207e01 +20403297 +2040329c +20402c83 +58000000 +da200106 +204032bf +202032c5 +2040316e +2437af5e +1a608c00 +58000109 +9a608a00 +df200008 +20407f01 +5800010b +204032d0 +c0552fd9 +c02aafed +c0113001 +c07fb212 +20202f5e +204032bd +c000afdd +c0012fe8 +20600000 +58000001 +20402ff7 +58000001 +20403289 +58000080 +da200130 +204032b3 +2040327d +da200131 +204032bf +2020322d +58000001 +20402fff +58000002 +20403289 +20202fe1 +204032bd +c000aff1 +c0012ff9 +20600000 +20402fdf +58000106 +204032d0 +c000aff6 +20600000 +58000002 +da200106 +202032b3 +20402fea +58000107 +204032d0 +c000affe +20600000 +58000002 +da200107 +202032b3 +204032bd +c000b005 +c0013011 +20600000 +58000106 +204032d0 +c0013009 +20600000 +2040328b +1fe1fe01 +2040328d +58000000 +58000106 +9a608a00 +e0a10000 +20202f5e +58000107 +204032d0 +c0803015 +20600000 +2040328b +1fe1fe02 +2040328d +2020300c +68008d50 +207a0000 +700d5000 +68010d4e +d84002ba +98467c00 +24628000 +68008cb6 +c1dd0000 +68008cb7 +44df4017 +c050303b +c050b02c +c0533041 +c053b043 +c054b049 +c058304d +700d4200 +20600000 +68008cb8 +c000b031 +c0423034 +c053b039 +2020302a +2040328b +60008cf7 +2020303f +20403291 +20403296 +2040328b +60008cf7 +2020303f +700cf7a1 +2020303f +68008cb8 +c040b03e +2020302a +20403090 +700d4201 +20600000 +700cf715 +2020303f +2040328f +c0003047 +c000b039 +20600000 +700cf7a0 +2020303f +700cf700 +700cf800 +700cf901 +2020303f +2040329c +68008cb8 +1fe0fe02 +1fe27200 +d8c00cb6 +5800013c +9a608a00 +20207f01 +44dfc017 +2040307d +20402c7f +204048d3 +20203057 +2040328f +c1800000 +20402f51 +20203098 +2040328f +c1808000 +20402fc1 +20402fcb +2040328b +207a0000 +20403286 +20402f4c +20403093 +58000000 +1a608aa7 +2020322d +20407fe9 +1a60a2a7 +ea2a0000 +1c427e00 +98467c00 +24412d18 +1fe22400 +1a60a2a7 +ea220000 +1a60a2ab +ea288000 +98408400 +1a427e00 +98467c00 +24610000 +793ffe1c +1a608aa7 +e0a20000 +20207fe7 +58000001 +20403287 +20403283 +580000ff +1a608aab +e0a08000 +20203067 +5800015c +204032d0 +207a0000 +2040306a +24740000 +20403281 +1fe0fe01 +1fe17e01 +20403284 +c0002f4c +c000b090 +20600000 +58000001 +20403292 +20203296 +58000001 +204032a5 +58000280 +d8e00008 +20207f08 +204032a2 +207a0000 +d8e00008 +20407f16 +247a0000 +204032a4 +58000007 +20403292 +20403296 +20202f5e +44e04018 +2040328f +c1838000 +204030cb +204030e0 +2040316e +2437af5e +204030bc +2042b172 +20402f4c +20403294 +79207e00 +20403297 +20402f5e +20403093 +204030bc +2022b0c1 +58000164 +204032d3 +204030be +2022b0c5 +58000160 +204032d3 +204030be +2022b0c8 +20600000 +5800012b +204032d3 +2040322a +98467c00 +20600000 +58000182 +204032d0 +1a608a91 +202032b4 +58000185 +204032d0 +202030c3 +58000188 +204032d0 +202030c3 +20403294 +c3838000 +79207e07 +20403297 +20403283 +2040329c +58000000 +1a608af5 +e0a18000 +da200183 +204032bf +e0a38000 +204030bc +24628000 +1a60a291 +ea208000 +da200182 +204032b3 +1a60a290 +ea208000 +2020314a +44e0c018 +20403281 +1fe0fe01 +1fe17e03 +20403284 +c000310e +c000b132 +c00130ea +c001b132 +20600000 +20402fdf +58000160 +2040327e +203a30e0 +2040322c +58000189 +204032d0 +205a3108 +58000187 +204032d0 +2040322f +1a60a2f7 +ea288000 +da200f9e +20402e58 +1a608af7 +e0a88000 +20402f94 +1a608afa +e0a88000 +18467c50 +24610000 +58000188 +20403275 +20402c90 +da200188 +204032c8 +e0a88000 +da200187 +202032b3 +58000001 +da200189 +204032b3 +d8400000 +20402c94 +20203106 +20402fea +58000164 +2040327e +203a30e0 +2040322c +58000186 +204032d0 +205a312c +58000184 +204032d0 +2040322f +1a60a2f6 +ea288000 +da20109e +20402e58 +1a608af6 +e0a88000 +20402f94 +1a608af9 +e0a88000 +18467c50 +24610000 +58000185 +20403275 +20402c90 +da200185 +204032c8 +e0a88000 +da200184 +202032b3 +58000001 +da200186 +204032b3 +d8400000 +20402c94 +2020312a +20402fdf +2040327d +2040322c +58000183 +204032d0 +205a314c +2040314f +1a60a2f5 +ea288000 +da200e9e +20402e58 +1a608af5 +e0a88000 +20402f94 +1a608af8 +e0a88000 +18467c50 +24610000 +58000182 +20403275 +20402c90 +da200182 +204032c8 +e0a88000 +da200181 +202032b3 +58000001 +da200183 +204032b3 +58000181 +204032d0 +2020322f +1a60a200 +ea208000 +2040323c +20402dde +2040325f +2feffe00 +2020b15c +2040315d +20402d53 +20402df7 +20202e45 +44e14018 +1a608a86 +204032d6 +5800013b +204032d0 +207a0000 +58000006 +1a608a86 +e0a08000 +df200006 +5800012f +9a608c00 +1a608a22 +20207f01 +2040316e +2437af5e +20203172 +20402f5e +20402e11 +24778000 +20203152 +44e1c018 +20403188 +24342f5e +1a60a284 +ea208000 +203a2f5e +1fe0fe02 +98007200 +1a608c00 +58000109 +9a608a00 +20407f01 +20403286 +204032b6 +205a3093 +5800010b +204032d0 +c000b19e +c00131c6 +c001b1f2 +c07fb212 +20202f5e +20402c7a +20407fe9 +1a60a2ca +ea208000 +1a60a2cb +ea288000 +98467c00 +2442ffe7 +1a60a2ca +ea208000 +1a608acb +e0a08000 +1a60a2c4 +ea218000 +1a60a2c7 +ea298000 +98467c00 +2442ffe7 +1a60a2c4 +ea218000 +1a608ac7 +202032c5 +20402f88 +2040324c +60008aa2 +20403274 +68008aa2 +284ffe03 +7920fe00 +1a608ab2 +e0a08000 +c000b216 +20403245 +20403274 +284ffe04 +7920fe00 +20403249 +1a60a2de +ea210000 +20207f9c +58000001 +60008d54 +2040329e +e0a38000 +2040329e +245a31bd +2040329e +205a31c2 +700d5220 +68008d38 +79207e02 +60008d38 +20600000 +58000001 +204032a8 +58000140 +d8e0000b +20207f08 +204032a7 +58000000 +d8e0000b +20207f08 +20403274 +284ffe03 +2020b21b +d8a00d64 +204031e0 +68040d64 +245a31e4 +68040d64 +205a31e9 +20402c7a +68040d64 +da200168 +204032bf +e0a40000 +58000170 +9a60a200 +ea2c0000 +98467c00 +2442b1ed +58000168 +9a60a200 +ea240000 +da200170 +204032bf +e0a40000 +20202f5e +5800010b +9a608c00 +df200009 +20207ff3 +58000001 +204032ab +58000140 +d8e0000e +20207f08 +204032aa +58000000 +d8e0000e +20207f08 +700d5110 +68008d38 +79207e01 +60008d38 +20600000 +d8a00d74 +204031e0 +68010d75 +245a3209 +68010d75 +205a320e +20402c7a +68018d74 +da200178 +204032c4 +5800017b +9a60a200 +ea298000 +98467c00 +2442b207 +58000178 +9a60a200 +ea218000 +da20017b +204032c4 +20202f5e +700d5221 +202031b9 +58000001 +204032ae +58000140 +d8e0000c +20207f08 +204032ad +58000000 +d8e0000c +20207f08 +204032bd +c000b216 +c001321b +20600000 +5800010d +2040327e +da200160 +204032bf +2020322d +5800010d +2040327e +da200164 +204032bf +2020322d +20402c7a +1a608acd +e0a08000 +20600000 +20402c7a +1a60a2be +2020327f +20402c7a +1a608abe +2020322d +1a60a2ae +2020327f +1a608aae +e0a20000 +20600000 +1a608a90 +202032b4 +58000000 +20402c7a +1a608a85 +202032b4 +1a608a42 +202032b4 +58000004 +1a608acc +202032b4 +1a60a287 +202032d1 +1a608a87 +202032b4 +58000002 +1a608ad0 +202032b4 +58000001 +20402c7a +1a608ace +202032b4 +20402c7a +1a60a2b4 +202032d1 +58000001 +20402c7a +1a608ab4 +202032b4 +20402c7a +1a60a2b2 +202032d1 +58000001 +20402c7a +1a608ab2 +202032b4 +20402c7a +1a60a296 +202032d1 +1a608a96 +202032b4 +1a60a2cf +202032d1 +58000000 +1a608acf +202032b4 +1a60a2d2 +202032d1 +1a60a201 +202032d1 +1a60a2b5 +202032d1 +58000000 +20402c7a +1a608ab5 +202032b4 +20402c7a +1a60a2fb +ea208000 +6000c1de +20600000 +20402c7a +6800c1de +1a608afb +202032b4 +1a60a2fc +202032d1 +1a608afe +202032b4 +58000109 +9a60a200 +ea288000 +20600000 +58000135 +202032d0 +58000000 +da200135 +202032b3 +5800012b +204032cd +ea220000 +20600000 +5800015f +202032d0 +58000000 +da20015f +202032b3 +58000000 +da20015c +202032b3 +da20012f +202032b3 +58000108 +202032d0 +da200108 +202032b3 +58000105 +202032d0 +58000000 +da200105 +202032b3 +58000104 +202032d0 +58000000 +da200104 +202032b3 +58000000 +da20013b +202032b3 +58000001 +2020329a +5800010c +204032cd +ea238000 +20600000 +5800015e +202032d0 +58000000 +da20015e +202032b3 +58000000 +da200180 +202032b3 +58000000 +da20017e +202032b3 +58000000 +da20017f +202032b3 +da200102 +202032b3 +da200103 +204032c7 +e0a08000 +20600000 +5800015d +202032d0 +da20015d +202032b3 +5800018a +204032d0 +2020326a +5800010c +202032d0 +1fe20400 +1a227e00 +9a608a00 +18427e00 +20600000 +204032bf +e0a18000 +20600000 +20402c7a +1fe22400 +1a227e00 +9a608a00 +1a427e00 +20600000 +20402c7a +9a60a200 +20600000 +204032cd +ea208000 +20600000 +204032cd +ea2a0000 +20600000 +58000000 +202032b4 +44e24018 +6800c092 +203a32d8 +c0022f30 +c007b436 +c004c5de +c005392a +c00735bf +c00844a4 +c2833d00 +20600000 +44e2c018 +70015100 +70017f00 +70018000 +58000000 +600289ae +6800c092 +203a32e3 +c0053962 +20600000 +20407cd1 +20407d9c +204032f6 +680141f3 +20207f9c +680141f1 +20207f9c +680141ef +20207f9c +44e34018 +da204668 +20407fc4 +207a0000 +1fe22600 +204032ff +20203324 +da600000 +20600000 +c000b311 +c0083357 +c002b335 +c009333c +c0033353 +c0023394 +c0013399 +c009b394 +c00a334b +c00ab34f +c001b32e +c005b340 +c0063347 +c00b335b +c00c332a +c015331a +c015b318 +20600000 +68014682 +79207e00 +60014682 +6801420a +793ffe00 +6001420a +20600000 +70022900 +20600000 +68008229 +1fe0fe01 +60008229 +1fe67c01 +202133df +70022900 +6801420a +79207e09 +6001420a +202033e9 +680141f5 +20207f9c +680141e9 +20207f9c +680141ed +20207f9c +6801420a +79207e01 +6001420a +20203412 +68014682 +79207e07 +60014682 +6801420a +79207e02 +6001420a +20600000 +68014682 +79207e01 +60014682 +6801420a +79207e04 +6001420a +20600000 +68014682 +79207e03 +60014682 +20600000 +68014682 +79207e05 +60014682 +6801420a +79207e03 +6001420a +20600000 +68014682 +793ffe05 +60014682 +20600000 +68014682 +79207e09 +60014682 +20600000 +68014682 +793ffe09 +60014682 +20203418 +68014682 +79207e02 +60014682 +20600000 +6801420a +79207e00 +6001420a +20600000 +6801420a +79207e08 +6001420a +202033e9 +44e3c018 +6000822a +6800822a +207a0000 +1fe0ffff +6000822a +20407cdd +204033d6 +20403387 +2040338d +2040651b +680141fd +20407f9c +20203361 +ea608000 +207a0000 +1fe0ffff +e2608000 +247a0000 +1a427e00 +20207f9c +ea610000 +207a0000 +1fe0ffff +e2610000 +247a0000 +1a427e00 +20207f9c +6809423f +1840a601 +da40337f +2020336d +2040342d +c000b382 +2020340a +58000002 +e2608000 +1840a408 +ea410000 +20207f9c +da604205 +da40338a +2020336d +20402252 +2022b40e +20600000 +da60467e +da403390 +20203374 +204033f0 +20403408 +680141f7 +20207f9c +204033ac +68014682 +793ffe07 +60014682 +20600000 +70420500 +68014682 +c283b39e +2fec0001 +2040b2fd +44e44019 +68014682 +793ffe00 +793ffe01 +793ffe02 +793ffe03 +793ffe07 +60014682 +20203418 +204033a9 +2020340a +58000000 +60014208 +20600000 +58000000 +6001420a +20600000 +6801420a +60014208 +58000000 +6001420a +20600000 +6801420a +79207e07 +60014208 +58000000 +6001420a +20600000 +6800c682 +2feffe05 +20600000 +5800aa55 +60010aaa +44e4c019 +d8400002 +da200aaa +da4000c3 +20206606 +44e54019 +d8400002 +da200a9a +da4000c3 +204065df +68010a9a +d840aa55 +98467c00 +20600000 +6800c55a +6000c205 +20600000 +d8e00009 +20202c32 +d8e00009 +20202c36 +70420605 +202033d0 +da604206 +da4033d2 +2020336d +70436301 +20600000 +70436300 +20600000 +700a990a +20207d8f +700a991d +20207d8f +44e5c019 +6800c207 +6000816d +70022801 +700a9903 +20207d8f +700a991e +20207d8f +700a9904 +20207d8f +68014687 +6001467e +20403404 +700a9901 +20207d8f +58000000 +6001467e +700a9902 +20207d8f +700a990f +20207d8f +700a9910 +20207d8f +700a990e +20207d8f +700a990d +20207d8f +700a9917 +20207d8f +700a9918 +20207d8f +700a9916 +20207d8f +700a9911 +20207d8f +700a9915 +20207d8f +700a9914 +20207d8f +700a9913 +20207d8f +700a9919 +20207d8f +700a9906 +20207d8f +700a9905 +20207d8f +700a991f +20207d8f +700a9920 +20207d8f +700a9925 +20207d8f +7920000d +20600000 +793f800d +20600000 +2040342d +c0013424 +58000001 +e2608000 +1840a203 +1840a406 +ea288000 +1a60a601 +e2688000 +20203385 +58000000 +e2608000 +68014682 +c304b429 +20403402 +6809423f +1840a202 +1840a404 +20203420 +6809423f +1840a600 +ea608000 +20600000 +2040342d +c0803434 +2020340a +1840a40a +20203385 +20758000 +70808100 +58003463 +600141eb +5800696c +600141ed +580034f5 +600141f3 +580034f4 +600141ef +5800347e +600141f5 +580034b2 +600141fd +58003465 +600141fb +58003470 +600141e9 +58003501 +600141f9 +44e64019 +2040359b +20406948 +204035ad +20407d08 +20407cd3 +5800350b +60014766 +580034fc +6001475d +580034f8 +6001475f +5800346c +60014761 +580035a2 +600146a9 +580035a4 +600146ab +580035a9 +600146b4 +580035a6 +600146b6 +68014682 +c3860000 +2020340a +20403586 +2020340a +20405892 +247a0000 +da200b06 +20407e54 +24740000 +d8c00b06 +20204746 +68014797 +60014791 +70475301 +2020358f +6800c79d +c000b479 +68014682 +c304b479 +6800c79e +c000b3d0 +6800c700 +243a33d0 +202033d2 +6800c79b +6808c79c +9841fe00 +c000b3d0 +202033d2 +1a627e00 +c016b431 +c008341a +c00a34df +c00ab4e8 +c0203485 +20600000 +68014509 +c000b48c +680143d8 +203a34a2 +70478a02 +70478f3c +20600000 +6801449a +203a34a0 +70478a01 +680947b4 +68014496 +9840fe00 +60014496 +1fe22200 +68014498 +9840fe00 +60014498 +9a20fe00 +1fe30400 +680147c0 +9846fc00 +20407f86 +1807fe00 +6001449a +70479001 +20600000 +70478a03 +20600000 +70417200 +70479000 +680143d6 +680947be +98467c00 +79212200 +680147c0 +680943d6 +98467e00 +79212201 +2a200603 +20608000 +680447be +60044496 +70479001 +20600000 +2040337b +204034b9 +204034be +204034d5 +204034ca +204034c4 +202034d9 +da604799 +da4034bc +2020336d +70479a00 +20600000 +da604793 +da4034c1 +20203374 +da6046bf +da40469e +20203591 +da60478f +da4034c7 +2020336d +6801449a +6000c172 +20600000 +da604790 +da4034cd +2020336d +6800843f +2fe0c000 +2420b4d3 +70478a01 +20403416 +20205abf +70479001 +20600000 +da604791 +da4034d8 +20203374 +2020341a +da60478d +da4034dc +20203374 +680147a7 +6001478d +202035af +680147a7 +6001478d +58000000 +60014793 +60014791 +2040355c +20403586 +70417200 +202033f8 +58000000 +6002478d +6001c78a +60014509 +7047a001 +68014797 +60014791 +20407e38 +6800c759 +c1000000 +2040358f +2020356e +20203508 +6800c759 +c1810000 +20203508 +da6046cd +20403582 +da6046c6 +20203584 +70436e00 +da6046db +20403582 +da6046d4 +202034fb +68008477 +c0093504 +20600000 +68010478 +c006b536 +c005b571 +20600000 +6800c753 +207a0000 +20206978 +1a227e00 +203a3510 +18e27e00 +c0003513 +20600000 +18e27e00 +c000351b +20600000 +70479d01 +da6046f7 +20403582 +da6046f0 +20403584 +68014682 +c304b532 +20203521 +70479d00 +2020351d +6800c79a +c1808000 +70479905 +20600000 +6800c79a +1fe0fe01 +6000c79a +c000b527 +c001352b +20600000 +2040355c +70477101 +da60476c +20203544 +70479a00 +70477102 +da60476c +20403544 +6800c79e +c000b551 +20600000 +68014797 +60014791 +2040355c +2020358f +44e6c019 +204036fc +ea208000 +c001b53c +c003b540 +20600000 +6800c79e +c0003551 +c000b55c +20600000 +ea408000 +c000b564 +c0003569 +20600000 +44e74019 +6800c78b +2feffe00 +24608000 +1a608c06 +e8c10000 +1ff0fe00 +1fe0f205 +1a608c03 +204036f0 +e0c08000 +1a622200 +20207e3d +6800c759 +207a0000 +70479e01 +da6046e9 +20403582 +da6046e2 +20403584 +70478004 +70478301 +da60477b +20203544 +6800c79e +207a0000 +70479e00 +20403586 +70478004 +70478300 +da60477b +20203544 +70479f01 +70478007 +70478301 +da60477b +20203544 +70479f00 +70478007 +70478300 +da60477b +20203544 +6800c79f +207a0000 +20203551 +ea210000 +6001478b +2feffe00 +24608000 +6800c7a0 +207a0000 +7047a000 +680447b6 +60044496 +70479002 +204035af +204035b9 +70478007 +6800c79f +6000c783 +da60477b +20203544 +da200001 +20203585 +da200000 +2020358c +da200000 +20407d19 +da200001 +20407d19 +6800c7a1 +202069d7 +20407d04 +df200007 +20207d26 +da6046b8 +da40469a +20403596 +20403584 +68014795 +60014793 +202033fa +ea410000 +60014154 +e8c10000 +60014482 +20600000 +da200000 +204069a6 +680347a1 +60030a9a +204069ae +6800c7a1 +202069d7 +70479b01 +20600000 +70479b00 +20600000 +70479c00 +6800c7a1 +202069d7 +70479c01 +680347a1 +60030a9a +202069ae +70422d00 +202068a8 +204068eb +20406908 +600147b0 +da2047aa +20406930 +6000c7a9 +c00035be +1fe67c64 +242135bc +6000c783 +70478005 +da60477b +20203544 +70478364 +202035b9 +2020341a +20758000 +68108081 +1fe17ef0 +60108081 +58003631 +600141eb +58003633 +600141ed +5800340a +600141f7 +58003635 +600141f3 +5800364b +600141f5 +580033d0 +600141e9 +580036f6 +600141f9 +5800367a +600141fd +20402c7a +58003722 +1a608ade +e0a10000 +580035ed +6001475b +580035ef +6001475f +44e7c019 +20403628 +20407e38 +70417202 +7049f600 +6800c7cb +6000c69a +c00035ee +6800c7cc +6000c686 +70436e00 +2040360f +20407cd3 +20407cdd +7047f301 +68014682 +c3860000 +2020340a +2020360f +7047f302 +70436e01 +2040360f +da200000 +20407d1e +58000020 +204046f0 +d8a043b7 +6800c4a0 +1fe104f0 +18518400 +20403609 +e0a88000 +1fe1040f +20403609 +e0a88000 +204057a6 +6808c3af +18427200 +d8a04372 +d8c043b0 +20407f01 +6808c3af +18427200 +d8a04392 +d8c043b0 +20207f01 +18467c09 +2021360d +18408437 +20600000 +18408430 +20600000 +6800c7c0 +c0ffb621 +6800c7be +c0ffb624 +6800c7c9 +c0ffb626 +6800c72c +1fe27200 +5800472d +1fe22200 +1a220c00 +e8c08000 +18c22200 +c07fb61f +1fe20400 +2040680e +c2003619 +20600000 +680447c0 +6004472f +20203611 +6000c72d +20203613 +6000c72e +20203615 +da200000 +204069a6 +204037e4 +20402c7d +2020362d +7047cf64 +6800c7c9 +6000c744 +202068a8 +20406835 +2020696c +2020696c +20206978 +20403642 +204037ee +20403639 +20203634 +68014682 +c3848000 +6800c9f6 +c000b63e +20600000 +6800c7ea +c1008000 +7047ea01 +20203654 +68014682 +c4048000 +20405892 +247a0000 +da204718 +20407e54 +24740000 +d8c04718 +20204746 +1a627e00 +c016b431 +c008341a +c00a3651 +c00ab660 +20600000 +58000000 +20403220 +20203656 +680147eb +600147ed +7047ce14 +70409100 +204033f8 +20403416 +6800c7bd +c000b65e +da200000 +20207d14 +da200000 +20207d19 +58000002 +20403220 +58000000 +6002c79c +58000004 +204069d7 +58000005 +204069d7 +58000014 +204069d7 +58000015 +204069d7 +58000016 +204069d7 +58000007 +204069d7 +20407e38 +70475e0a +7047600a +7047620a +70417202 +da200000 +20407d1e +58000020 +204046f0 +202033fa +2040373b +2040373e +20403741 +2040337b +204036c8 +204036a1 +2040368a +20403683 +2020368f +da60479a +da403686 +2020336d +20403847 +24608000 +70479b01 +20600000 +da6047ed +da40368d +20203374 +7047ea02 +20203662 +da6047f1 +da403692 +2020336d +6800c7f2 +203a369e +7047f102 +7047f200 +58000a02 +60014752 +6800c7b9 +c001b69b +20203762 +58000a02 +60014754 +20203762 +58000000 +60024752 +20203762 +6800c7c8 +207a0000 +68014682 +c304b6c6 +da6047ce +da4036a8 +2020336d +6800c7cd +6000c7ce +6800c7d1 +247a0000 +204068eb +20406908 +600147e8 +da2047e2 +20406930 +6808c7cf +98467c00 +202136b6 +6000c7cf +1fe20400 +6008c7d0 +6800c7ca +98467c00 +204136c1 +6008c7db +df200006 +d8c047d6 +204036f0 +6000c7dc +da2047d3 +20207e3d +6800c7d2 +247a0000 +7047d201 +da200001 +20207d1e +da200001 +20207d19 +da6047a4 +da4036cb +2020336d +7047a405 +7047a600 +6800c7a5 +c000b6ee +c00036ec +d8c0479c +18c22200 +df200008 +1a220c00 +e8c08000 +18c22200 +c00036e3 +c000b6e6 +c00136e9 +6800c7a6 +1fe0fe01 +6000c7a6 +c20036d3 +20600000 +6800c7a6 +da4047c0 +9a40a400 +ea488000 +20600000 +204036de +20406825 +202036d9 +204036de +20406829 +202036d9 +6800c7a5 +c000b6e3 +202036e6 +7047a501 +202036d0 +7047a500 +202036d0 +da200000 +e8c08000 +9a20a200 +c20036f1 +1a217eff +20600000 +68008477 +c00936f9 +20600000 +68010478 +c00a3710 +20600000 +44e8401a +ea228000 +60028b12 +68010b12 +d8406b5a +98467c00 +24628000 +68010b15 +1ff0fe00 +60010b15 +1fe27200 +1a20a205 +1a220c00 +d8a00b17 +20407f01 +e8c08000 +60008b21 +da200b14 +da400b17 +20600000 +58000000 +6002c752 +6002c757 +204036fc +1a420c00 +d8a04752 +df20000a +20407f01 +44e8c01a +ea208000 +c001374a +c001b75c +c0023762 +c002b762 +c00337b1 +c003b849 +c004384c +20600000 +68014682 +c3848000 +680147eb +600147ed +7049f601 +5800010c +204032cd +20403710 +68008b14 +c002372e +c002b72e +20600000 +6800c752 +245a3735 +6800c754 +245a3737 +6800c756 +245a3739 +20600000 +7049f305 +20600000 +7049f405 +20600000 +7049f505 +20600000 +da6049f3 +da403744 +2020336d +da6049f4 +da403746 +2020336d +da6049f5 +da403748 +2020336d +70475200 +20203762 +70475400 +20203762 +70475600 +20203762 +2040374c +2020374f +6800c752 +6000c75f +20203773 +6800c75e +20403754 +6800c753 +6000c75d +20203770 +c0013758 +c001b75a +6000c75e +20600000 +70475e05 +20600000 +70475e0a +20600000 +6800c752 +20403754 +6800c75e +2040379e +204037a1 +202069c4 +6800c7f0 +247a0000 +68034752 +6003475d +6800c75e +6808c760 +98417e00 +6808c762 +98417e00 +205a3779 +44e9401a +20403770 +20403773 +20203776 +da404763 +d8c0475d +2020377b +da40476b +d8c0475f +2020377b +da404773 +d8c04761 +2020377b +7047d100 +20600000 +e8c08000 +c0003787 +c000b780 +c0013782 +20600000 +70477b00 +20203783 +70477b01 +e8c08000 +6000c77d +ea440000 +2020378c +ea408000 +204069d7 +1a40a401 +ea408000 +202069d7 +6004477e +7047d101 +6800c77b +c000379a +6800c77f +6000c780 +6800c77e +204069d7 +6800c77d +2040379e +6000c785 +68034780 +60030a9a +202069ae +6800c77e +6000c780 +6800c77f +20203793 +1feffe05 +1fe0fe32 +20600000 +d8402ee0 +984ffe00 +1fe6fc64 +20407f86 +18078400 +18422200 +58002ee0 +98462400 +20600000 +68108082 +79207e02 +60108082 +5800009e +60110068 +6011006a +20600000 +6800c7f0 +247a0000 +68014752 +60014787 +6800c7ea +c080b7b9 +680144a0 +60014787 +44e9c01a +204037aa +204037dc +5800bb80 +20402a8f +204037e0 +58001c20 +20402a8f +df200010 +204037dc +68014787 +c28037c9 +58001c20 +20402a8f +204037e0 +202037cc +58003840 +20402a8f +204037e0 +58001c20 +20402a8f +68014787 +1fe37e00 +60014787 +c20037c2 +7047f102 +7047f201 +58000a01 +60014752 +6800c7b9 +c001b7d9 +20203762 +58000a01 +60014754 +20203762 +68108085 +1fe1fe40 +60108085 +20600000 +68108085 +1fe17ebf +60108085 +20600000 +6800c7bb +c1000000 +20402c65 +6808c7bc +6008c786 +204067fb +20403847 +24608000 +70479a01 +20600000 +6800c7bb +c1000000 +6800c79b +247a0000 +68014682 +c284b7f6 +6800c7ea +c1808000 +44ea401a +20403847 +24608000 +58008ca0 +20402a8f +20403847 +24608000 +2040383f +20403842 +24610000 +20403847 +2020b7fe +da200000 +df200010 +2040383f +20403842 +24610000 +20403847 +2420b805 +58002a30 +20402a8f +20403847 +2020b812 +58000000 +1a232200 +9a21a200 +c2003805 +2020381b +58008000 +1a232200 +9a21a200 +2040383f +20403842 +24610000 +20403847 +2020b816 +c2003805 +44eac01a +1a227e00 +60014789 +60014797 +6800c7ea +c000b827 +df200007 +d8c04792 +204036f0 +6000c799 +da20478f +20207e3d +6800c7ef +1fe0fe01 +6000c7ef +1fe6fc02 +20407f86 +18078400 +18077e00 +243a3838 +6800c7bf +98467c00 +2042b83d +dfe0479c +184085ff +9840a200 +dfe00000 +e2208000 +20600000 +dfe0479c +9840a200 +dfe00002 +e2208000 +20600000 +7047f001 +20600000 +1c427e00 +6002478b +20600000 +1c427e00 +680a478b +98467e00 +1fe67cc8 +20600000 +6808c786 +2020681d +68044752 +6004479c +20600000 +6800c7b9 +6000c7af +6800c7ba +6000c7b0 +6800c7bb +6000c7b1 +df20000d +d8c047aa +204036f0 +6000c7b7 +da2047a7 +20207e3d +204065c2 +7046f67a +2040386d +20403867 +58003860 +600141fd +da200000 +202069a6 +680146a1 +207a0000 +1fe0ffff +600146a1 +c1800000 +7046a000 +20600000 +44eb401a +6800c6a4 +1fe67c28 +20610000 +7046a400 +20600000 +da2046a4 +da400000 +d8400051 +202065df +78547c00 +6800c6a3 +1fe27200 +da2046a5 +1a622400 +44ebc01a +2040387c +2022ffe7 +1a20a204 +c2003876 +20600000 +44ec401b +ea218000 +ea498000 +98467c00 +20600000 +44ecc01b +ea218000 +ea498000 +98467c00 +24628000 +e8c08000 +1fe67c00 +20628000 +1a208c03 +e8c88000 +98467c00 +20600000 +44ed401b +78547c00 +6800c6a3 +1fe27200 +da2046a5 +1a622400 +20403881 +2022ffe7 +1a20a204 +c2003893 +20600000 +68008004 +1fe0fe01 +60008004 +da6002e5 +ea610000 +d84055aa +98467c00 +24628000 +18c22600 +ea698000 +58ffffff +98467c00 +2022b8a8 +2040388d +203438a8 +20600000 +44edc01b +1a60a604 +ea608000 +6808c6f6 +98467c00 +20628000 +6000c6f6 +68008003 +1fe0fe01 +60008003 +1a60a601 +ea608000 +6000c6f5 +1fe27200 +207a0000 +e8c08000 +c00038c2 +c000b8cf +c00138d4 +c001b8d9 +c00238de +c002b8e3 +c00338e8 +c07fb8ea +c20038b7 +20600000 +18c22600 +6800c69a +60008a9a +d8400000 +60088a9b +58002710 +60018a9c +ea608000 +60008a9f +204069ae +1a610c01 +c20038b7 +20600000 +1a620c00 +6800c69b +60008a9a +d8400001 +202038c6 +1a620c00 +6800c69c +60008a9a +d8400002 +202038c6 +1a620c00 +6800c69d +60008a9a +d8400003 +202038c6 +1a620c00 +6800c69e +60008a9a +d8400004 +202038c6 +1a620c00 +6800c69f +60008a9a +d8400005 +202038c6 +e8c08000 +20600000 +18c22600 +6800c6a0 +c080b8ee +204038f0 +1a610c04 +20600000 +44ee401b +20403871 +203438fe +6800c6a4 +1fe20400 +1fe0fe01 +6000c6a4 +20403867 +184b8400 +580046a5 +98408a00 +ea620000 +e0a20000 +20203903 +1a608c03 +e8c08000 +207a0000 +ea620000 +e2220000 +da2046a4 +da400000 +d8400051 +20206606 +6808c69a +20406825 +20600000 +6808c69a +20406829 +6808c69a +20406825 +2040391d +6800c6a7 +247a0000 +20402c29 +68120138 +793ffe0f +6012004c +20402c21 +d85fffff +20202b2a +6800c6a7 +203a56f9 +1fe0ffff +6000c6a7 +202056f9 +1feffe14 +d8c046a8 +98c08c00 +e8c08000 +207a0000 +1fe22200 +1a227200 +d8a04372 +20407f01 +1a227e00 +1fe0fe02 +6000c36f +20600000 +20758000 +204057a3 +204068a8 +58003982 +600141f3 +5800396e +600141f1 +58003986 +600141f5 +5800396d +600141ef +58003969 +600141e9 +58003ab7 +600141fb +58003c32 +6001456f +58003cc2 +600141f9 +58003cd7 +600141fd +2040397f +44eec01b +20403945 +20403964 +20402c6f +20203c48 +680246aa +60120054 +680246ae +6012005a +68108081 +1fe1fe04 +1fe17efc +60108081 +70806200 +680146aa +60110058 +680146ae +6011005e +60110060 +68120078 +79207e07 +60120078 +68110050 +793ffe0f +60110050 +204066ce +70804300 +70806281 +6800c6bf +2feffe00 +68188062 +79208404 +60188062 +20600000 +2040397f +20203945 +6808c69e +2040680e +204039e6 +6808c69c +202067fb +6808c69c +2040681d +2420b3d2 +202033d0 +20600000 +20403970 +20203ce9 +6800c682 +c302397f +44ef401b +58003eff +680a46c5 +98408400 +1c427e00 +98467c00 +24610000 +68014682 +c282b97f +6800c6bf +c3830000 +20403cec +2040340e +1c427e00 +600246c5 +20600000 +20403ce9 +2040526e +247a0000 +202039eb +1a627e00 +c000b9d4 +c00139a3 +c00239d7 +c002b9c4 +c00439aa +c004b9b1 +c00539c9 +c005b9b6 +c00639c2 +c009b9d7 +c00a39cf +c00ab9c6 +c010b9ca +c011b9cb +c01239ce +c0183c8a +c018bc8c +c0193c9a +c019bc98 +c01a3c84 +c01abc73 +c01b3c82 +c01bbc8e +c01c3c90 +c01dbca1 +c01ebc6a +c020b9d9 +20600000 +2040397f +6800c665 +245a3c8e +204039d7 +68014682 +c4020000 +202039b1 +68014682 +79207e04 +60014682 +6800c6a7 +6000c172 +204039e6 +20203c1d +68014682 +c4020000 +793ffe04 +60014682 +20203c21 +2040397f +68014042 +1fe37e00 +680941e3 +98467c00 +2422b9bd +20203416 +6800c6bf +c3828000 +68110112 +245a3cf0 +2020340c +20403cee +20203418 +2040397f +202039dd +20405816 +204039d7 +20203c23 +202033dd +20203cee +6800c6bf +c302b40e +20203cf2 +20203cf2 +204058ba +204039dd +6800c6a8 +6000c172 +20203c1f +70466100 +20403cee +20203cf2 +20403a52 +202039db +20405cc9 +20205b02 +6808c69e +20206829 +204039df +202039e6 +6800c6a1 +2feffe00 +2040b3f0 +6800c6a1 +2feffe01 +2040b3f8 +20600000 +6808c69e +20206825 +6800c56b +c1000000 +20206c28 +6810810c +c281b9e8 +204066cb +e8608000 +c080ba01 +68110112 +1fe67c02 +20610000 +e8608000 +60008b03 +e8688000 +18622200 +60088b04 +18408403 +68110112 +98460400 +24610000 +700b0501 +20403a17 +68008b05 +c1000000 +20203a12 +20407ec1 +20403c79 +20203a04 +44efc01b +68110112 +207a0000 +204066cb +e8608000 +1fe67c01 +2442ba16 +2422ba04 +e8608000 +c1028000 +c1148000 +186087ff +20403a16 +20203a04 +204066cb +18608602 +e8608000 +98608600 +202066c8 +44f0401c +68008b03 +c0003a3f +c000ba44 +c0013a49 +c001ba5f +c0023a6b +c002ba75 +c004ba9a +c005bad7 +c0063ad8 +c006baec +c0073af4 +c007bafa +c0083b06 +c008bb0e +c0093b12 +c0133b16 +c0143b1d +c014bb2d +c0153b36 +c015bb69 +c0163b6f +c0183b76 +c018bb7c +c0193b90 +c019bb98 +c01a3bbb +c01abbc4 +c01b3bcd +c01bbbd7 +c01c3bda +c0203be2 +c0213bec +c0243bf1 +c024bbfc +c028bc02 +c030bc06 +c07fbc15 +20203c17 +68008b04 +c0833c17 +e8630000 +600340a0 +20203c1a +68008b04 +c0833c17 +e8630000 +600344a0 +20203c1a +68008b04 +c080bc17 +1a220600 +20403c1a +e8688000 +6008c6a9 +68014682 +c3848000 +c3800000 +6800c6a1 +2feffe00 +2420ba58 +6808c6a9 +18417e03 +6000c093 +6800c6a1 +2feffe01 +24608000 +6808c6a9 +284ffe02 +2020b3fa +202033f8 +68008b04 +1fe67c43 +24213c17 +6000c515 +df200008 +20407ec6 +68008b04 +1fe27200 +1a220600 +d8a04516 +204066ea +20203c1a +68008b04 +1fe67c1d +24213c17 +6000c3af +1fe27200 +1a220600 +d8a043b0 +204066ea +204057a3 +20203c1a +6800c682 +c3023c17 +204033ba +2020ba86 +700b0500 +2040397f +6800c568 +207a0000 +68014573 +c0803a84 +68008b04 +60014573 +1a220600 +18627e00 +60014571 +20403a88 +20206c4d +700b0500 +20203cd1 +20403a8e +68014573 +6809469f +98467e00 +60014573 +20600000 +68014573 +d840006e +20407fdd +6809456c +20407fdd +6809455e +20407fdd +6001469f +20600000 +700b0501 +700b0305 +20203c1a +68014682 +c304bc17 +20403ad4 +20343c17 +700b0500 +6800c6bf +c2823ab4 +6800c6c0 +247a0000 +700b0501 +e8610000 +600146c1 +18627e00 +600146c3 +68008b04 +1fe0fffe +24213c17 +2022bc17 +6000c6c0 +700b0500 +20405814 +20403ab7 +20403ab7 +20403ab7 +6800c6bf +c4020000 +700b0501 +20403cf6 +20203c1a +6800c6c0 +207a0000 +20405892 +247a0000 +20403acf +44f0c01c +1840fffd +6808c6c0 +20407fdd +1fe22200 +18427e00 +9a267e00 +6000c6c0 +680946c1 +20405a64 +680146c3 +1fe20600 +1a227200 +204066ea +18627e00 +600146c3 +6800c6c0 +247a0000 +20203cf4 +d8400017 +6800c6bf +c3808000 +680944a8 +20600000 +6800c6bf +c2815a42 +20207fe9 +20203c4c +1a220600 +e8608000 +c0003adf +c000bae2 +c0013ae8 +c001baea +20203c17 +2040612b +70465a00 +20203c1a +58040003 +6001c65b +6000c662 +20406124 +70465a01 +20203c1a +58040002 +20203ae3 +58040001 +20203ae3 +68008b04 +1fe67c10 +24213c17 +6000c689 +1fe27200 +d8a0468a +204066fd +20203c1a +1a220600 +e8608000 +68188062 +7d3a0404 +60188062 +20203c1a +68008b04 +1fe27200 +1a220600 +20407f58 +596e3600 +9846fc00 +20407f86 +1807fe00 +60014243 +20403c1a +20407f9e +202066ce +da200002 +da40469a +d8400000 +20203c25 +60010ac2 +da400ac2 +d8400000 +20203c25 +68014682 +c3003c17 +20403c1a +202033e9 +68014682 +c304bc17 +20403c1a +20203402 +68008b04 +1fe27200 +1a220600 +68014215 +1fe20a00 +204066ea +20203c1a +6800c682 +c3003c17 +e8608000 +6808c661 +793a0400 +79200407 +6008c661 +20403c1a +6800c661 +c2833b2b +20600000 +70466100 +700a9921 +20207d8f +c2805f95 +20203b28 +6800c682 +c4020000 +6800c56b +c1000000 +e8608000 +6808c569 +98408400 +6008c569 +20600000 +df200040 +d8a0436f +20407ed4 +58000000 +60008ab2 +1a220600 +18627e00 +60010ab6 +20403b64 +68008ab2 +68088aa2 +18408401 +9840fe00 +60008ab2 +1fe67c1f +24213b50 +6808c36f +58004370 +9840fe00 +60010abb +68088aa2 +18408401 +6800c36f +9840fe00 +6000c36f +20203b59 +6808c38f +58004390 +9840fe00 +60010abb +68088aa2 +18408401 +6800c38f +9840fe00 +6000c38f +68010abb +1fe20a00 +68010ab6 +1fe20600 +18427200 +204066ea +68008b04 +68088ab2 +98467c00 +2422bb3c +20203c1a +e8608000 +60008aa2 +e8608000 +60008aae +20600000 +d8400000 +da200002 +680146b4 +60010ac2 +da400ac2 +20203c25 +68008b04 +c080bc17 +e8608000 +6000c6b2 +58000000 +600146b4 +20203c1a +e8620000 +6002468a +70468904 +70466300 +20403c1a +20205f31 +68008b04 +c081bc17 +e8608000 +c0003b82 +c000bb8a +20203c17 +e8688000 +e8608000 +c0013b88 +7d3a0407 +204067fb +20203c1a +20406806 +20203c1a +e8688000 +20406812 +e8608000 +2feffe00 +2040682c +20203c1a +68008b04 +c080bc17 +e8688000 +2040681d +58000000 +7d20fe00 +da200001 +20203b0a +1a220600 +e8608000 +1fe20400 +c040bba3 +c0413ba8 +c041bbae +6000c4c6 +c0003bb3 +c000bbb6 +c0013bb8 +20203c17 +6800c4be +203a3c17 +6008c4c6 +7044560d +20203bb4 +6800c4be +203a3c17 +6008c4c6 +7044560d +70445401 +20203c1a +6800c4be +203a3c17 +6008c4c6 +7044560d +20203bb9 +70445600 +70445403 +20203c1a +70445605 +20203bb4 +70445605 +70445400 +20203c1a +68008b04 +1fe67c1f +24213c17 +6000c36f +1fe27200 +1a220600 +d8a04370 +204066ea +20203c1a +68008b04 +1fe67c1f +24213c17 +6000c38f +1fe27200 +1a220600 +d8a04390 +204066ea +20203c1a +68014682 +c304bc17 +68008b04 +c0843c17 +1a220600 +e8640000 +60044496 +700a9912 +20407d8f +20203c1a +e8610000 +60014482 +20203c1a +6800c4c6 +203a3c17 +6800c4c4 +c0803c17 +6800c4c5 +c0803c17 +20407e25 +20203c1a +68008b04 +c082bc17 +e8608000 +6000c6a2 +e8620000 +600246a3 +6808c6a2 +2040680e +20403cbc +20203c1a +68008b04 +c080bc17 +e8608000 +6000c1de +20203c1a +e8608000 +c000bbfa +6800c4c1 +c001bbf8 +c0033bf8 +c003bbf8 +20203c17 +7044c201 +20203c1a +20405b53 +20203c1a +68008b04 +c080bc17 +20403c1a +e8608000 +203a60cb +202060c9 +20403c1a +20407f9e +70801001 +20202a8e +68008b04 +c0003c17 +e8608000 +203a3c13 +68008b04 +c082bc17 +e8620000 +d84f4240 +98467c00 +20213c17 +600244c7 +2040580c +20203c1a +2040580e +20203c1a +70409100 +20203c1a +d8400001 +da200000 +20203c25 +d8400000 +da200000 +20203c25 +700b0300 +20203c49 +700b0302 +20203c49 +700b0303 +20203c49 +700b0305 +20203c49 +68008b03 +1fe22600 +700b0306 +58000002 +9a20fe00 +20403ca7 +1a627e00 +e1408000 +e1488000 +1a227200 +1a420c00 +204066e4 +202066c5 +2040397f +700b0307 +680084ff +207a0000 +20403ca7 +680084ff +1fe27200 +68010501 +1fe20c00 +204066d1 +202066c5 +700b0308 +6800c6b6 +1fe27200 +1fe0fe02 +20403ca7 +680146b9 +e1410000 +680146b7 +1fe20c00 +204066d1 +202066c5 +700b0309 +58000000 +20403ca7 +202066c5 +700b030a +58000001 +20403ca7 +20403c5d +68014682 +d8e00002 +afefffff +79208403 +d8e00009 +afefffff +79208405 +6800c682 +d8e00004 +afefffff +79208404 +e1488000 +202066c5 +d8400000 +6800c093 +d8e00000 +afefffff +79208400 +d8e00001 +afefffff +79208401 +6800c36e +d8e00000 +afefffff +79208402 +20600000 +700b030d +6800c217 +1feffe22 +1fe27200 +20403ca7 +68014215 +1fe20c00 +204066d1 +202066c5 +700b030e +58000004 +20403ca7 +680209ba +e1420000 +202066c5 +700b030f +68110112 +d84000ff +20407fdd +1fe27200 +20403ca7 +204066cb +20406703 +202066c5 +700b0310 +20203c49 +700b0311 +58000004 +20403ca7 +680244c7 +e1420000 +202066c5 +da200180 +20203c91 +da200080 +20203c91 +da200101 +20203c91 +da200001 +70466100 +700b0314 +58000002 +20403ca7 +1a227e00 +e1410000 +202066c5 +da600000 +20203c9b +da600001 +700b0315 +58000001 +20403ca7 +1a627e00 +e1408000 +202066c5 +700b031d +58000004 +20403ca7 +680209ba +e1420000 +202066c5 +700b0202 +60008b04 +600c0aa2 +44f1401c +20403cb1 +680c0aa2 +204066c2 +68018b02 +e1418000 +20600000 +20403cba +20608000 +20403cb8 +680246a3 +1feb7e00 +207a0000 +20203cbe +6808c6a2 +20206829 +6808c6a2 +2020681b +6808c6a2 +20206825 +1fe0ffff +20000026 +243a3cbe +20600000 +20403ad4 +20740000 +1a227e00 +600146b7 +1a427e00 +6000c6b6 +68010478 +680946bb +98467c00 +2022bccf +680946bd +98467c00 +24628000 +600146b9 +20203c3d +6800c6bf +c3828000 +20403cf0 +2020340c +70417202 +20600000 +20203cd8 +6800c6b2 +207a0000 +6800c6b3 +207a0000 +1fe0ffff +6000c6b3 +247a0000 +7046b30a +204068eb +20406908 +1fe6fc64 +20407f86 +1807fe00 +18070400 +6000c6b4 +6008c6b5 +20600000 +20407fb4 +202133d9 +202033db +d8e00006 +20203cfc +d8e00006 +20203cf8 +d8e00005 +20203cfc +d8e00005 +20203cf8 +d8e00004 +20203cfc +d8e00004 +20203cf8 +6800c6bf +f93ffe00 +6000c6bf +20600000 +6800c6bf +f9207e00 +6000c6bf +20600000 +20403d39 +2040640f +204040c6 +20403d66 +20406411 +20758000 +20403d16 +20403d19 +680246d3 +c3880000 +20403d4e +c6130000 +68014682 +c28642b0 +202042a2 +680246d3 +c40d8000 +df200014 +58030d40 +20402a8f +c2007ec1 +20600000 +680246d3 +c4080000 +202048ea +5800416d +600141ef +58003f77 +600141f1 +58003ebb +600141ed +5800417c +600141f5 +58003de3 +600141f3 +58003eb3 +600141eb +58003d5b +600141f9 +20402c7a +58004401 +1a608ad8 +e0a10000 +58004406 +1a608ada +e0a10000 +58003ebf +1a608adc +e0a10000 +580041f9 +600141fd +58003d36 +60014201 +20600000 +680246d3 +c30964d7 +202064da +20758000 +20402c9d +20403e6e +20403e1e +20403e54 +20405810 +20405839 +2040582c +20405818 +680246d3 +c28a3d46 +c289c414 +20600000 +2040659c +680246d3 +2feffe19 +2440e5c2 +2040443f +20403dc9 +204041aa +202065df +680246d3 +c30f3d53 +68008abd +2fec0003 +24608000 +6800c71f +6000c71e +6800c6f5 +c3830000 +680246d3 +c4088000 +c28eaee4 +20202f2c +68008478 +1fe67e1a +24628000 +700a9912 +20407d8f +d8e00000 +202041b9 +6800c6b6 +c1008000 +7046b601 +20600000 +6800c6e1 +1fe17e0f +6000c77a +20203d80 +6808c6e7 +2040681d +2420bd62 +6800c6b6 +c1000000 +7046b600 +6800c77a +1fe0fe01 +1fe17e03 +6000c77a +20403d7e +680246d3 +c28a443b +c289bd79 +20600000 +d840001e +2040680e +d840001f +2040680e +20204435 +44f1c01c +2040424a +6800c6e0 +c002bdaa +c0023d96 +6800c77a +c0003d8a +c000bd88 +c0013d8c +c001bd8e +6800c780 +20203dbe +6800c77f +20203dbe +6800c781 +20203dbe +6800c782 +20203dbe +6800c6e0 +c1030000 +6800c6b5 +1fe0fe01 +6000c6b5 +20600000 +6800c77a +c0003d9d +c000bd9b +c0013d9f +c001bda1 +6800c784 +20203da2 +6800c783 +20203da2 +6800c785 +20203da2 +6800c786 +6000c6b5 +1fed7e00 +1fe22200 +1fe0fe0d +20406413 +1a227e00 +1fe0fe0e +20206413 +6800c77a +c0003db1 +c000bdaf +c0013db3 +c001bdb5 +6800c788 +20203db6 +6800c787 +20203db6 +6800c789 +20203db6 +6800c78a +6000c6b5 +204040c0 +6800c6b5 +1fe0fe80 +1fed7e00 +1fe0fe05 +1fe22200 +2020415a +6000c6b5 +20403d90 +6800c6b5 +58000006 +20406414 +1fe104f8 +6800c6b5 +9840fe00 +1fed7e00 +1fe0fe06 +20206413 +204033c4 +2022c316 +2040441c +204042e4 +202033bd +68014707 +207a0000 +680246d3 +c4088000 +c3818000 +c6130000 +20404083 +c1838000 +20404482 +d8e00003 +204043ce +58000000 +600146ae +6000c6b4 +20403263 +68014682 +c283c392 +c284b402 +c28033e9 +204042ca +20202ead +20403dce +20407e34 +20403d6a +20403de9 +20403ee0 +20203df7 +680246d3 +c4080000 +204048d3 +202048fd +68108a04 +c303bdf1 +c283bdf4 +20600000 +6800c6ff +c4038000 +2020659a +6800c6ff +c3838000 +20204381 +20403ded +68108a04 +6000c6ff +c4038000 +20403e07 +680246f9 +6808c6fd +98408400 +1c427e00 +98467c00 +24610000 +600246f9 +20403f97 +24740000 +700d3804 +20203e0f +680a46f9 +1c427e00 +98467c00 +24413e0c +20600000 +58000000 +600246f9 +20600000 +68008d38 +c4010000 +20203e12 +68108a04 +c4038000 +700d5220 +58000001 +60008d54 +6803c69a +e0a38000 +20600000 +68110050 +793ffe0b +60110050 +20600000 +58008c00 +60014575 +58008e7a +600144bc +58002402 +600140bd +58002580 +6001c0aa +70417303 +70415608 +7046d901 +58000200 +60014154 +7044a617 +7044a817 +58000a77 +60014212 +38000306 +38044440 +38090000 +380c4408 +6004c577 +38001224 +38044000 +38080000 +e0a28000 +3803ffff +3806fe23 +380999d9 +380c020d +60044098 +5800012c +60014707 +204057a3 +680246d3 +c40f8000 +20403e44 +20203e4c +6808c6f7 +204067fb +6808c6f7 +2040681d +7046f603 +20608000 +7046f602 +20600000 +6808c6f8 +204067fb +6808c6f8 +2040681d +70422d00 +20608000 +70422d02 +20600000 +6800c22d +c0003e59 +c000be62 +c0013e6b +20203e59 +68094221 +68014227 +98467e00 +1feffe14 +1fe6fc64 +20407f86 +1807fe00 +600146d0 +20600000 +6809421f +68014225 +98467e00 +1feffee6 +1fe6fd90 +20407f86 +1807fe00 +600146d0 +20600000 +68014223 +600146d0 +20600000 +6808c23a +2040680e +204048fb +6808c6e2 +204067fb +6808c6e3 +204067fb +6808c6e4 +204067fb +6808c6f3 +204067fb +6808c6dc +2040680e +6808c6e8 +204067fb +6808c6e9 +204067fb +6808c6ea +204067fb +6808c6eb +204067fb +6808c6e5 +204067fb +6808c6e6 +204067fb +6808c6ef +2040680e +6808c6f0 +2040680e +6808c6f1 +2040680e +6808c6f2 +2040680e +6808c6f4 +2040680e +6808c6ed +204067fb +6808c6ec +204067fb +6808c6e7 +202067fb +6808c6e8 +204067dd +6808c6e9 +204067dd +6808c6ea +204067dd +6808c6eb +202067dd +6808c6e8 +20403ea7 +6808c6e9 +20403ea7 +6808c6ea +20403ea7 +6808c6eb +20203ea7 +18467cff +20628000 +18410e7f +6812011c +afefffff +68120078 +f920fe00 +60120078 +6812007c +fd20fe00 +6012007c +20600000 +78347c00 +68120138 +79347e1a +6012004c +20402c21 +20404482 +20403e9f +20203ebf +20403ebf +680080a0 +247a0000 +202067ed +20403ee0 +d8400019 +680246d3 +2feffe12 +2040bede +2040680e +204063ee +6808c6e2 +204067dd +6808c6e3 +204067dd +6808c6e4 +204067dd +6808c6e5 +204067dd +6808c6e6 +204067dd +6808c6e7 +204067dd +6808c6ed +204067dd +6808c6e8 +204067dd +6808c6e9 +204067dd +6808c6ea +204067dd +6808c6eb +204067dd +6808c6f3 +202067e1 +d840001e +20600000 +44f2401c +20403eee +20403f36 +6800c6b8 +6808c6b7 +6000c6b7 +98467c00 +2422b3d4 +6800c6be +6808c6bd +6000c6bd +98467c00 +2422b3d4 +20600000 +6800c6ea +c17f8000 +da200000 +6808c6ea +2040681d +7920a200 +6808c6eb +2040681d +7920a201 +1a227e00 +6000c6b8 +c000befe +c0013f02 +6800c6b9 +c283bf0e +20600000 +6800c6b7 +c0003f06 +c001bf08 +20600000 +6800c6b7 +c0003f0a +c001bf0c +20600000 +7046b982 +20600000 +7046b981 +20600000 +7046b980 +20600000 +7046b983 +20600000 +6800c6b9 +793ffe07 +6000c6b9 +c0003f16 +c000bf19 +c0013f1c +c001bf1f +20600000 +6800c6b8 +c001bf22 +20600000 +6800c6b8 +c0003f22 +20600000 +6800c6b8 +c001bf2c +20600000 +6800c6b8 +c0003f2c +20600000 +6800c6bc +1fe0fe01 +6000c6bc +1fe67c01 +20610000 +7046bc00 +6800c6ba +1fe0fe01 +6000c6ba +20600000 +6800c6bb +1fe0fe01 +6000c6bb +1fe67c01 +20610000 +7046bb00 +6800c6ba +1fe0ffff +6000c6ba +20600000 +6800c6e8 +c17f8000 +da200000 +6808c6e8 +2040681d +7920a200 +6808c6e9 +2040681d +7920a201 +1a227e00 +6000c6be +c000bf46 +c0013f4a +6800c6bf +c283bf56 +20600000 +6800c6bd +c0003f4e +c001bf50 +20600000 +6800c6bd +c0003f52 +c001bf54 +20600000 +7046bf82 +20600000 +7046bf81 +20600000 +7046bf80 +20600000 +7046bf83 +20600000 +6800c6bf +793ffe07 +6000c6bf +c0003f5e +c000bf61 +c0013f64 +c001bf67 +20600000 +6800c6be +c001bf6a +20600000 +6800c6be +c0003f6a +20600000 +6800c6be +c001bf6f +20600000 +6800c6be +c0003f6f +20600000 +7046c200 +6800c6c0 +1fe0fe01 +6000c6c0 +20600000 +7046c100 +6800c6c0 +1fe0ffff +6000c6c0 +20600000 +58000002 +6000c680 +20600000 +6800c1e2 +207a0000 +20405271 +247a0000 +680246d3 +c281bf8a +c2803f8a +c282bf8a +20403f97 +24740000 +da200009 +20404d63 +6801424e +e0a10000 +580002a1 +e0a10000 +6803c69a +e0a38000 +20600000 +58000000 +6003c69a +20203f81 +680146aa +600146b0 +20600000 +44f2c01c +da200007 +6809446f +20405a64 +6803c69a +e0a38000 +20600000 +44f3401c +78547c00 +58000000 +6003469b +20403fb5 +20404079 +2040407e +20404099 +24740000 +20403f8d +d8e00008 +202043ce +6801469b +1fe67e00 +6001469b +20207fe7 +6801469d +1fe67e00 +6001469d +20207fe7 +6801469d +1fe67e00 +6001469d +6801469b +1fe67e00 +6001469b +20404002 +20207fe7 +20404002 +20207fe7 +6800c239 +c1800000 +6800c6e0 +c0003fe2 +c000bfe2 +c0013fe2 +c001bfe2 +c0023fc4 +c002c010 +c0033fe2 +20203fe2 +6800c6a7 +205a405d +7046a701 +20600000 +20403fc0 +6808c6f3 +2040681d +24608000 +58000000 +20406414 +c09840d1 +58000002 +20406414 +c4038000 +2040405d +20403fde +6000c6a1 +1ff1fe00 +20404169 +6000c69c +6800c6a1 +1fe17e0f +20404169 +6000c69e +6800c6f6 +c0003fa3 +c000bfab +c0013fa7 +c001bfb3 +20600000 +58000012 +20206414 +c018bfea +202040d1 +20403fc0 +78547c00 +6808c6f3 +2040681d +24608000 +58000000 +20406414 +c0983fe0 +58000002 +20406414 +c4038000 +2040405d +6800c69b +20404165 +6001469b +6800c69d +20404165 +6001469d +6800c6f6 +c0003ffa +c000bffc +c0013ffe +c001c000 +20600000 +20403fa3 +202040b3 +20403fab +202040b3 +20403fa7 +202040b3 +20403fb3 +202040b3 +6801469d +6809469b +6001469b +6009469d +20600000 +2040640f +20000064 +1a427e00 +20406414 +1fe22400 +20406411 +20000064 +1a427e00 +20600000 +78547c00 +6808c6f3 +2040681d +24608000 +da400002 +20404007 +c4038000 +da400000 +20404007 +6000c6dd +c09f4145 +6800c6a7 +205a4039 +7046a701 +20404039 +6800c6a1 +1ff1fe00 +20404169 +6000c69c +6800c6a1 +1fe17e0f +20404169 +6000c69e +6800c6f6 +c0004031 +c000c035 +c0014033 +c001c037 +20600000 +6800c6a4 +c0004051 +c000c045 +20600000 +20403fa3 +2020402d +20403fa7 +2020402d +20403fab +2020402d +20403fb3 +2020402d +2040640f +2040405d +dfe00005 +20406414 +6000c6a1 +dfe00007 +20406414 +6000c6a2 +dfe00008 +20406414 +6000c6a3 +20206411 +6800c6a2 +c1800000 +6800c6a3 +1fe67c2d +20610000 +7046a400 +5800ba41 +20406405 +58000032 +20406405 +5800b541 +20206405 +6800c6a2 +c1800000 +6800c6a3 +1fe67c2d +24610000 +7046a401 +5800ba41 +20406405 +58008032 +20406405 +5800b541 +20206405 +dfe00003 +20406414 +6001469b +dfe00004 +20406414 +6001469d +20600000 +d840001b +204067fb +d840001b +2040681d +20608000 +68108109 +79207e04 +60108109 +20600000 +6808c6c0 +68108109 +9840fe00 +207a0000 +6000c69f +7046c000 +20207fe7 +6808c6c0 +68108109 +9840fe00 +6000c6c0 +20600000 +6800c6c0 +207a0000 +6000c69f +7046c000 +20207fe7 +6800c6ba +207a0000 +6000c6a0 +7046ba00 +20207fe7 +da200000 +6808c6e2 +2040681d +7920a200 +6808c6e3 +2040681d +7920a201 +6808c6e4 +2040681d +7920a202 +20404090 +1a227e00 +20600000 +6800c6e5 +c17f8000 +6808c6e5 +2040681d +7920a203 +6808c6e6 +2040681d +7920a204 +20600000 +20404083 +204040a8 +204040a3 +1a227e00 +6808c69a +6000c69a +9842fe00 +1fe67c00 +20628000 +20207fe7 +c6930000 +1a227e00 +207a0000 +6000c69a +20207fe7 +68014682 +c284c0ad +68014682 +c28040b0 +20600000 +1a227e00 +243a5820 +20205822 +1a227e00 +243a2bc7 +20202bc9 +44f3c01c +d840001a +680246d3 +2feffe12 +2040c0be +2040681d +20608000 +5800000a +20406414 +200003e8 +202040b3 +d840001f +20600000 +680246d3 +c28940c4 +d840001a +202067fe +d840001f +202067fe +20403d36 +20758000 +204040c0 +6800c6e0 +c002c0d5 +204040d9 +c01840e0 +c018c0ea +204040d1 +200003e8 +202040cb +44f4401d +680246d3 +c28963e0 +202063d1 +204040d9 +c01f414b +20404145 +202040d5 +58000001 +20406414 +6000c6de +58000000 +20406414 +6000c6dd +20600000 +6800c6de +c068c139 +c06940f8 +c00140ee +c02a40e6 +20600000 +7046e002 +20600000 +7046e006 +20600000 +6800c6de +c03840e8 +7046e001 +20600000 +7046e004 +204040f6 +58003426 +20406413 +58000419 +20406413 +58000009 +20206413 +58005a09 +20206413 +7046e003 +204040f6 +58000f0d +20406413 +5800e31d +20406413 +5800d27d +20406413 +20404102 +2020411a +5800351b +20406413 +5800b428 +20406413 +58004629 +20406413 +5800962a +20406413 +58008c2b +20406413 +58006e2c +20406413 +5800642d +20406413 +58005f38 +20406413 +58000f39 +20406413 +5800323a +20406413 +5800473b +20406413 +58001042 +20206413 +58002e54 +20406413 +5800f255 +20406413 +5800f461 +20406413 +58007063 +20406413 +58005275 +20406413 +58004176 +20406413 +5800ed77 +20406413 +58002378 +20406413 +58004679 +20406413 +5800e57a +20406413 +5800487c +20406413 +5800777e +20406413 +5800017f +20406413 +5800000b +20406413 +5800007f +20406413 +202040f4 +7046e000 +204040f6 +5800100d +20406413 +5800ed1d +20406413 +5800807d +20406413 +20404102 +58000943 +20406413 +2020411a +6808c6dc +20406829 +20407ec1 +6808c6dc +20406825 +20207ec1 +7046e005 +5800ba41 +20406405 +58000d11 +20406405 +5800041b +20406405 +5800041c +20406405 +58000f1d +20406405 +58000032 +20406405 +5800b541 +20206405 +5800ba41 +20406405 +20000fa0 +5800ff7f +20406405 +1a227e00 +20406405 +5800007f +20406405 +5800b541 +20206405 +c4038000 +d840ff00 +9841fe00 +20600000 +c4018000 +d84000f0 +9841fe00 +20600000 +20405892 +247a0000 +6800c6c5 +1fe17e03 +c1818000 +680246d3 +c281c179 +c2804179 +c282c179 +20403f97 +24740000 +20203f90 +58000000 +6003c69a +20203f90 +1a627e00 +c00a41c3 +c000c2ca +c00ac1d9 +c00141d9 +c002c1d6 +c008426c +c009429b +c00341d5 +c00241cc +c009c1cc +c00541ca +c01733cd +c018c1b4 +c01941b6 +c01f4191 +c013c38e +c01cc19c +c01d4192 +c01e419a +20600000 +20203410 +70478b01 +6800c71e +243a4492 +6800c720 +6808c703 +98467c00 +2022b40a +20600000 +70478b01 +20600000 +70478b01 +d8e00003 +204043d2 +58000000 +60014707 +7046a700 +6800c6e0 +1fe67c05 +2042c039 +2442c05d +68008004 +c289c1af +204041aa +202065d1 +20402c7a +1a60a2ae +da40005b +d8400004 +20600000 +20402c7a +1a60a4ae +ea408000 +6000c77b +20204435 +d8e00002 +202041b9 +7046c602 +d8e00001 +202041b9 +6800c6c5 +f9207e00 +6000c6c5 +20600000 +6800c6c5 +f93ffe00 +6000c6c5 +20600000 +7046c500 +20600000 +6801420a +793ffe00 +6001420a +58000000 +600146ae +20403f8d +202042ca +204063cb +202033dd +6800c71e +243a4492 +68014682 +c28642b0 +680246d3 +c28041d7 +c282c2b0 +c281aead +202033a7 +20203f74 +20600000 +204043c0 +2020659a +44f4c01d +204041e7 +680246d3 +c28041d7 +c281aead +6800c71e +243a4492 +68014208 +c283c1f5 +c28033a9 +c280c1ef +c28141f2 +c281c1f2 +202042b0 +58000000 +600446b7 +e0a20000 +7046b400 +7046a700 +7041e200 +70442900 +20600000 +c282c1f2 +c281c1f2 +202042b0 +68014682 +c28642b0 +202033a7 +204041c1 +68014208 +c28033a9 +202033a7 +204043d6 +20404243 +20404246 +20404250 +2040445d +20404443 +20404333 +204043a5 +204043eb +20404209 +20404231 +20404234 +20404237 +2040423a +2040423d +20204240 +6800c711 +207a0000 +1fe0ffff +6000c711 +247a0000 +2020420f +6800c712 +c1000000 +c002c216 +20404225 +70471205 +70471105 +20600000 +2040422c +70471204 +70471105 +20600000 +58008006 +20406413 +200003e8 +70471100 +70471200 +202040e0 +5800a006 +20406413 +5800a005 +20206413 +70471100 +6800c6e0 +c0024220 +58000106 +20406413 +5800a105 +20206413 +70471100 +58000906 +20206413 +70471105 +70471201 +20600000 +da604680 +da40429b +2020336d +da6046ac +da404264 +20203374 +da6046ae +da404266 +20203374 +da6046b0 +da40426a +20203374 +da6046c4 +da404478 +2020336d +da6046c6 +da40425e +2020336d +da604704 +da404249 +2020336d +da604707 +da404249 +20203374 +20600000 +680246d3 +c40b8000 +7046df0a +6800c6f4 +6000c715 +20600000 +da6046df +da404253 +2020336d +6800c6f4 +6000c715 +58000190 +60014716 +60014718 +da200000 +6808c77a +18408401 +6008c714 +70471301 +20600000 +6800c6c5 +c3810000 +700a9912 +20407d8f +d8e00000 +202041b9 +204042ca +2020340a +204033f6 +6800c71e +243a4492 +2020340a +c5137e1d +20204386 +44f5401d +7046b400 +20404386 +204041c1 +202042b0 +680341d0 +203a33eb +2040427e +70016d17 +6800c65a +243a33e1 +70016d04 +202033e1 +680146a8 +600146ae +2040427e +20403418 +20207df4 +580000c8 +60014716 +60014718 +20204285 +580003e8 +60014716 +60014718 +6800c720 +c000c28a +c001428c +c001c28e +20600000 +6800c6f0 +2020428f +6800c6f1 +2020428f +6800c6f2 +60008aa2 +20404482 +68008aa2 +6000c715 +da200000 +70471301 +20207d1e +da200000 +20207d19 +da200000 +20207d14 +202041c1 +7041e201 +20403416 +20403412 +58000000 +6001467e +6000c680 +2020340e +2040435f +6800c720 +6808c703 +98467c00 +2022c2ab +6800c210 +c019c271 +c01a4279 +202042b0 +20403d57 +c6130000 +6800c71e +243a4492 +20600000 +44f5c01d +68014682 +c285c2b7 +680246d3 +c30c42b7 +180a7e00 +6000c4a1 +20403418 +68014687 +600146ac +70016d06 +58000000 +600146b0 +600146ae +d8e00007 +204043ce +204043ca +6800c092 +2feffe01 +2040fdf4 +6800c092 +2feffe00 +2040fddd +680246d3 +c28e422e +20204282 +44f6401d +6800c092 +2feffe01 +2040c2d4 +6800c092 +2feffe00 +2040c2d7 +680246d3 +c28e421a +20204482 +58000000 +600146ae +20207dfa +58000000 +600146ac +20207de2 +680246d3 +c4038000 +d8e00007 +204043d2 +204042e8 +204042fb +680246d3 +c289c435 +c28a42e4 +20600000 +d8400058 +da204720 +da400000 +202065d1 +68008185 +c01a42ec +c019c2ef +20600000 +6000c6c7 +6803044f +202042f1 +6000c6c7 +68030040 +600346c8 +6803c6c7 +d8c04721 +df200003 +e8cb8000 +98467c00 +2022c310 +18c08c16 +c20042f5 +20600000 +da204721 +6800c720 +1fe0ffff +1feffe1d +9a20a200 +68008185 +e2208000 +c01a4305 +c019c30c +20600000 +6803044f +e0a30000 +d8c04419 +20407ebf +680344a0 +e0a30000 +20600000 +68030040 +e0a30000 +d8c041be +20207ebf +18c08dfa +18c20a00 +680b46c8 +18408403 +e0ab0000 +20600000 +d8400058 +da204720 +da400000 +204065df +da204721 +6800c720 +6808c703 +98467c00 +20628000 +1fe0ffff +1feffe1d +9a20a200 +ea208000 +6000c210 +c019c327 +c01a432c +20600000 +e8c30000 +600341d0 +d8a041be +20407ebf +202067d7 +e8c30000 +600341d0 +d8a04419 +20407ebf +e8c30000 +600344a0 +20600000 +6800c6f5 +c282c349 +c2834359 +20204337 +20404083 +c003433e +7046d81e +6800c6d9 +c1008000 +7046d901 +20600000 +20404343 +6800c6d9 +c1000000 +7046d900 +202043c0 +6800c6d8 +207a0000 +1fe0ffff +6000c6d8 +247a0000 +20204370 +6800c6ed +c17f8000 +6808c6ed +2040681d +2020c354 +6800c6d9 +c1008000 +7046d901 +680246d3 +c3830000 +20204370 +6800c6d9 +c1000000 +7046d900 +d8e00006 +202043d2 +68008004 +c4030000 +6800c720 +c000c369 +c001436c +20600000 +68008004 +c4030000 +6808c6ed +2040681d +2020c366 +70472001 +20600000 +6800c703 +6000c720 +20600000 +6808c6ed +2420c370 +20600000 +6808c6ed +2040681d +2020c354 +20600000 +6808c720 +18408401 +6800c6d2 +98467c00 +244143cc +6008c720 +7041bd00 +2040437a +204043c0 +2020437e +d8400001 +da204720 +da400000 +20206606 +20404381 +204043c2 +202041d7 +68014682 +c283c392 +c284b402 +c28033e9 +202042ca +44f6c01d +58000000 +600146b0 +68014682 +c284b402 +68014682 +c28033e9 +20600000 +58000001 +60030040 +70018533 +202042df +204043c4 +20207e2f +6800c6ec +c17f8000 +6808c6ec +2040681d +2020c39f +6800c685 +6000c6da +6800c6db +c1008000 +7046db01 +202043ca +204043b5 +6800c6db +c1000000 +7046db00 +20407e2f +202043c8 +6800c6f5 +c2824394 +20404083 +c003c3af +6800c685 +6000c6da +6800c6db +c1008000 +7046db01 +202043ca +204043b5 +6800c6db +c1000000 +7046db00 +20407e2f +202043c8 +da6046da +da4043b8 +2020336d +d8e00006 +204043ce +20403357 +2020426c +d8e00001 +202043ce +d8e00001 +202043d2 +d8e00000 +202043ce +d8e00000 +202043d2 +d8e00002 +202043ce +d8e00002 +202043d2 +d8e00005 +202043ce +d8e00005 +202043d2 +d8400001 +20600000 +680246d3 +f9207e00 +600246d3 +20600000 +680246d3 +f93ffe00 +600246d3 +20600000 +680246d3 +c40d0000 +6800c6ce +1fe0fe01 +6000c6ce +1fe67c0a +20610000 +7046ce00 +204068eb +20406908 +6001470f +da204709 +20406930 +6800c231 +c280c4a0 +c30043e9 +202043e7 +d8e00004 +202043ce +d8e00004 +202043d2 +680246d3 +c4020000 +6800c6ef +6000c715 +6800c6cf +1fe0fe01 +6000c6cf +1fe67c14 +244143f9 +c00143fb +c00243fe +c00343fb +c00443fe +20600000 +7046cf01 +202043fe +da200000 +70471302 +20207d14 +da200000 +70471302 +20207d19 +20403f97 +24740000 +da200007 +da40469a +20600000 +6800c78b +207a0000 +6808c6e7 +2040681d +2040c410 +6800c704 +247a0000 +20404083 +247a0000 +20202d83 +6800c6e7 +c17f8000 +7047040a +20600000 +20404423 +68014778 +d840aa55 +98467c00 +2022c42b +60094778 +2040441c +20204435 +680344a0 +60034738 +1fe0ff00 +60034755 +1fe0ff00 +60034772 +20600000 +58004778 +d8404720 +98460400 +6801c700 +9840fe00 +d8400002 +da204778 +20206562 +5800477f +d8404720 +98460400 +6801c700 +da204720 +20406562 +2040431a +6802477b +20402c7a +2020322c +5800477f +d8404720 +98460400 +da204720 +6801c700 +20206514 +d8400001 +da20477a +da40005a +202065d1 +d8400001 +da20477a +da40005a +202065df +c6130000 +680246d3 +c40b0000 +6800c705 +1fe0fe01 +1fe17e07 +6000c705 +c1838000 +68014682 +c280444f +c284c44f +20600000 +44f7401d +6800c706 +247a0000 +680246d3 +c4040000 +6800c6a5 +204063fb +6000c6a6 +1fe67c10 +2021445b +70470600 +20600000 +7047061e +20600000 +da604706 +da404460 +2020336d +6800c6a5 +20406414 +1fe67c10 +24610000 +680246d3 +c4040000 +d8e00008 +204043d2 +70417200 +7046c41e +20404482 +680246d3 +c28ac471 +6800c720 +c000c489 +c0014476 +20600000 +6800c720 +c000c489 +c001448c +c001c48f +20600000 +6800c6f0 +2020428f +70417220 +20204482 +6800c6f0 +c17f8000 +6000c715 +20204296 +6800c6f1 +c17f8000 +6000c715 +20204296 +20404296 +2040447a +2040447e +6800c6f2 +c17f8000 +6000c715 +20204296 +6800c6f0 +6000c715 +20204298 +6800c6f1 +6000c715 +20204298 +6800c6f2 +6000c715 +20204298 +44f7c01d +6800c71e +1fe0ffff +6000c71e +6808c720 +18408401 +6800c6d2 +98467c00 +244143cc +6008c720 +7041bd00 +2040437a +204042fb +202042a2 +20404482 +58000000 +600400a1 +20202b1f +20758000 +68108081 +1fe17ef0 +60108081 +20406948 +580044e6 +600141eb +580044e9 +600141ed +580044ef +600141f3 +580044f2 +600141f5 +580033d0 +600141e9 +20402c7a +580045c2 +1a608ad8 +e0a10000 +580044ea +1a608ada +e0a10000 +580044e9 +1a608adc +e0a10000 +5800450e +600141fd +580044da +6001475b +580044d6 +6001475f +58004560 +6001470f +44f8401e +204044e2 +20407e38 +70417202 +6800c72b +6000c69a +c00044d5 +6800c72c +6000c686 +204044db +20407cd3 +20407cdd +70475701 +68014682 +c3860000 +2020340a +70475702 +204044db +da200000 +20407d1e +20202ee4 +202044db +44f8c01e +6800c729 +c0ffc4e0 +6808c706 +2020680e +6000c706 +202044de +20402c9d +68014753 +60014755 +20204515 +20406835 +204044e9 +2020340a +2020696c +6800c765 +207a0000 +20202d83 +20600000 +20206978 +20404544 +20404503 +202044ee +1a627e00 +c016b431 +c008341a +c01cc4fb +c01e44ff +c01d44f9 +20600000 +70476501 +20600000 +70476501 +70476301 +70476401 +20600000 +70476501 +70476301 +70476401 +20600000 +6800c763 +c1000000 +6800c762 +c1008000 +70476201 +da200000 +20207d19 +da200000 +20407d19 +204044db +2020340a +2040337b +20204510 +6800c72d +207a0000 +da604755 +da40450a +20203374 +2040451a +6009471a +2040451f +6009471c +20600000 +6801471a +6001471e +20404540 +20404525 +6000c724 +6801471c +6001471e +20404542 +20404525 +6000c725 +20600000 +68014720 +1fe22200 +6801471e +2040452e +6800c719 +243a4537 +24610000 +6809471e +20600000 +98467e00 +20214534 +1fe67e00 +70471801 +9a267c00 +20600000 +70471800 +9a267c00 +20600000 +2421453e +6800c718 +243a453c +58000001 +20600000 +58000002 +20600000 +58000000 +20600000 +70422e33 +202068eb +70422e34 +202068eb +6800c72a +c1808000 +44f9401e +70471901 +2040451a +68014724 +68094722 +98467c00 +20628000 +60014722 +20404550 +20204554 +6800c724 +203a455a +1fe0ffff +20204557 +6800c725 +203a455d +1fe0fe01 +1fe20e00 +da200001 +20204560 +d8e00000 +da200000 +20204560 +d8e00002 +da200000 +20204560 +1a227e00 +6000c761 +6800c763 +c0002ee4 +68014753 +60014755 +6800c761 +203a4580 +44f9c01e +da200000 +20407d14 +18e27e00 +c00245a3 +c002c5a5 +c00345a7 +2040458b +c0004574 +c001457a +c001c574 +20600000 +18e27e00 +c000458f +c000c591 +c0014593 +c001c595 +20600000 +18e27e00 +c0004597 +c000c59a +c001459d +c001c5a0 +20600000 +44fa401e +da200000 +20407d19 +18e27e00 +c00245bc +c002c5bc +2040458b +c00045a9 +c00145af +c001c5a9 +20600000 +6800c728 +6808c727 +9841fe00 +20600000 +70473401 +202045be +70473402 +202045be +70473601 +202045be +70473602 +202045be +70473401 +70473601 +202045be +70473402 +70473602 +202045be +70473402 +70473601 +202045be +70473401 +70473602 +202045be +70473801 +202045be +70473802 +202045be +70474101 +202045c0 +18e27e00 +c00045b5 +c000c5b5 +c00145b7 +c001c5b7 +20600000 +18e27e00 +c00045b9 +c000c5b9 +c00145b9 +c001c5b9 +20600000 +70473400 +202045be +70473600 +202045be +70473400 +70473600 +202045be +70473800 +202045be +da20472e +20207e3d +da20473b +20207e3d +6800c764 +c000c5cc +da204744 +20407e54 +243445d1 +d8c04744 +e8c08000 +1fe22200 +da404745 +20600000 +70476400 +78347c00 +da200001 +da404766 +20600000 +6800c747 +c00245d5 +c002c5d5 +20600000 +6800c74a +243a45dc +6800c74c +243a45dc +6800c74e +243a45dc +20600000 +78347c00 +202045c7 +20758000 +68108081 +1fe17efc +60108081 +580046b4 +600141eb +580046b3 +600141ed +5800340a +600141f7 +580046b1 +600141f3 +58004612 +600141f5 +5800460c +600141e9 +5800476a +600141f9 +58004686 +600141fd +58004729 +600146e7 +58004806 +600146e2 +58004807 +600146e4 +204057a3 +204047da +20404788 +2040476d +20406948 +2040477a +20407e38 +20407d08 +20404793 +204047c7 +44fac01e +2040464f +6800c6dd +c0004609 +6800c6de +6000c686 +2020480e +704686ff +7046df01 +202046d9 +6800c6df +c00133d0 +2040527e +6800c256 +243a33d0 +202033d2 +1a627e00 +c000c626 +c0014629 +c0024631 +c002c633 +c0034635 +c003c638 +c009463c +c009c644 +c013c645 +c0174648 +c01ec649 +c00a4658 +c00ac65c +c01fc65f +c0204665 +c008466b +c016466c +c016c677 +20600000 +7046ad00 +7046ac00 +20600000 +2040462b +20204631 +7041e200 +70468000 +70420500 +7046ac00 +7046ad00 +20207e38 +204033a9 +202046c2 +204046b6 +20203408 +58000002 +6000c680 +20600000 +7046ac00 +58000001 +6000c6ad +20600000 +6800c1e2 +c1008000 +7041e201 +20403416 +20403414 +204046b6 +20403408 +2020340e +20204631 +58000005 +6000c6ac +20600000 +202033cd +da400000 +6800c217 +1fef8422 +68014215 +1fe22200 +20206606 +da400000 +6800c69a +c4008000 +6800c217 +207a0000 +1fef8422 +68014215 +1fe22200 +202065df +204046b6 +58000000 +600146b7 +20203408 +20407e38 +7046b000 +202046d9 +20407e38 +7046b001 +680446c1 +60044496 +20403416 +20205abf +68014509 +c1000000 +680446c9 +207a0000 +60044496 +20205abf +2020481f +6800c6dd +c1000000 +6800c6df +c1808000 +20404672 +20203406 +7048df01 +df20000b +d8a048e0 +d8c048c9 +20207f01 +6800c6dd +c1000000 +6800c6df +c000c67c +2020481b +6800c8df +c1808000 +7048df00 +68014682 +c2803408 +c284b408 +df20000b +d8c048e0 +d8a048c9 +20207f01 +2040468c +20404693 +2040469e +204046a6 +204046a9 +202046ac +da6046db +da40468f +20203374 +7046df02 +20403408 +204046f4 +2020480b +da6048ec +da404696 +2020336d +68014682 +c284c80b +c280480b +6800c8c9 +c000c80b +c002480b +c002c80b +2020340a +da6046ac +da4046a1 +2020336d +6800827f +79207e00 +79207e07 +6000827f +20600000 +da604680 +da40463c +2020336d +da6046ad +da4033e9 +2020336d +6800c6df +c1808000 +da6046b7 +da4046c2 +20203374 +2040473a +20206978 +2020696c +20406835 +202046b3 +6800c69a +c280c6be +c28046ba +20600000 +680146d7 +600146d9 +600146db +202033f8 +680146d3 +600146d9 +600146db +202033f0 +6800c6df +c1808000 +6800c69a +c280c6c8 +c28046cc +20600000 +680146d1 +600146d9 +600146db +202033eb +68014682 +c3848000 +680146d5 +600146d9 +600146db +680146b3 +204046f0 +20403404 +680246bd +600248cc +68014682 +c3858000 +202033fa +6800c6df +c1808000 +6800c69a +c280c6df +c28046e4 +20600000 +204046f8 +203a46c2 +20403406 +204033f0 +202033e1 +680146b7 +680946b5 +600946b7 +247a0000 +680146b1 +204046f0 +20403404 +680246b9 +600248cc +68014682 +c3858000 +202033fa +60014154 +1fe0fffc +60014482 +20600000 +68014682 +c284b402 +c28033e9 +202046b6 +6800c217 +1fe27200 +68014215 +1fe22200 +ea210000 +c0004701 +1a20a222 +c20046fc +20207ff1 +e8c30000 +600341d0 +18c08c0a +d8a041be +20407ebf +204067d7 +20207fef +20407fe9 +68014682 +c280470d +c284c710 +20600000 +6800c253 +c19f8000 +20207fe7 +6800c6b0 +207a0000 +20207fe7 +20407fe9 +68014682 +c3800000 +c3848000 +20207fe7 +6800c69a +c280c71c +c280471f +20600000 +6800c093 +c1818000 +202046d9 +202046d9 +78567c00 +680146d9 +600146db +20404713 +20344718 +20404708 +24740000 +78367c00 +20600000 +20404720 +24760000 +1a227e00 +203a4730 +20403406 +da6046f1 +20204732 +20403408 +da604719 +dfe00005 +98effe00 +9a60a600 +ea608000 +207a0000 +20404762 +1a60a601 +20204735 +68014682 +c284c73e +c280474e +20600000 +20405892 +247a0000 +20404765 +24740000 +1fe0ffff +1feffe05 +d8404741 +98408c00 +e8c08000 +1fe22200 +e8c90000 +20407ea5 +20405a64 +1a227200 +20407e9f +20207f01 +20405271 +247a0000 +20404765 +24740000 +1fe0ffff +1feffe05 +d84047a0 +98408c00 +e8c28000 +6002c79b +6800c79b +1fe22200 +20404d63 +6801424e +e0a10000 +580000a1 +e0a08000 +6802479c +e0a48000 +20600000 +60008a9a +da200a9a +20207e3d +da200a9a +20407e54 +24740000 +68008a9a +20600000 +68010478 +c00c465f +20600000 +58000002 +6000c8eb +58200008 +600246c1 +592c0005 +e0a20000 +7044a617 +5800001b +600144fa +20405810 +2040582c +20405839 +20205818 +df200028 +d8a04741 +d8c0949f +20407ef4 +df200028 +d8a047a0 +d8c094c7 +20207ef4 +df20017e +d8c0913a +20207ef4 +df2001e7 +d8c092b8 +20207ef4 +204047ae +24740000 +6800c69f +20404790 +6800c6a0 +20404790 +6800c6a1 +20204790 +207a0000 +1fe18480 +202067f9 +204047ae +24740000 +20404797 +202047b4 +da200000 +6800c69f +204047a9 +7d3a2200 +6800c6a0 +204047a9 +7d3a2201 +6800c6a1 +204047a9 +7d3a2202 +1a227e00 +6000c6a9 +6800c69e +9a2ffe00 +6809469c +9840fe00 +600146aa +20600000 +207a0000 +1fe18480 +2040681d +2420fff1 +20207fef +20407fe9 +6800c6a8 +247a0000 +6800c69b +207a0000 +20207fe7 +2040666a +680146aa +da200ac2 +6808c69e +204066b3 +2040666d +68008ac2 +1fe27200 +6000c3af +20407ef4 +68008ac2 +1fe27200 +6000c515 +20407ef4 +e8c08000 +6000c6e6 +e8c08000 +6000c6dd +20600000 +6800c69a +c4008000 +d8400003 +680146a4 +1fe22400 +da2046a6 +204065df +680946a6 +58001b3a +98467c00 +24628000 +6800c6a8 +207a0000 +1fe20400 +680146a4 +1fe0a403 +da200ac2 +204065df +202047e8 +680146a2 +207a0000 +2040666a +d8400001 +da2046a8 +204066b3 +6800c6a8 +207a0000 +680146a2 +1fe0fe01 +da200ac2 +6808c6a8 +204066b3 +2040666d +204047ba +e8c10000 +207a0000 +1fe20a00 +e8c88000 +18427200 +20407f01 +202047e9 +6800c69a +c4008000 +680146ae +1fe22400 +d8400004 +da200ac2 +204065df +68008ac2 +c080c7f9 +58000001 +60008ac2 +18007203 +2040630d +680146ae +1fe22400 +d8400004 +da200ac2 +20406606 +68018ac3 +6001c0a0 +6001c4a0 +20600000 +202046d9 +da200000 +da6048d4 +20407d24 +204046f4 +6800c8eb +6000c8ec +20600000 +58000000 +20404816 +70467901 +20407cd3 +20407cdd +68014682 +c3860000 +2020340a +6809423f +e0408000 +e8a08000 +6000c685 +20600000 +6801423f +efe08000 +c1800000 +2020340a +6809423f +e8408000 +c000c82a +58000001 +6809423f +e0408000 +18408c02 +e8c08000 +e0a08000 +e8c10000 +20207f9c +58000002 +20404816 +18408c05 +e8c10000 +203a340a +20207f9c +60030101 +68008101 +6000810c +e8c08000 +6000810b +e8c08000 +6000810a +e8c08000 +60008109 +e8c08000 +60008108 +e8c08000 +60008107 +68030107 +20600000 +204068a2 +6800c223 +6000c4a0 +6800c225 +e0a08000 +6800c227 +e0a08000 +6801c4a0 +6001c0a0 +20600000 +68014203 +9a40fe00 +1ff0fe00 +600101f7 +18422400 +2040489b +580000a0 +2040488d +680081f7 +2040488d +c5144856 +680081f8 +2040488d +204048a1 +2040489b +580000a1 +2040488d +2040487f +e2208000 +1a20a201 +1a40a5ff +2422c85a +202048a1 +1a50fe00 +600101f7 +18422400 +2040489b +580000a0 +2040488d +680081f7 +2040488d +c514486b +680081f8 +2040488d +ea208000 +2040488d +1a20a201 +1a40a5ff +2422c86b +202048a1 +df20000a +204048be +204048a6 +204048d2 +204048c7 +203a48a9 +c2004875 +202048a9 +204048a9 +204048af +204048d2 +204048a6 +204048d2 +202048a9 +df200008 +da600000 +204048be +204048a6 +204048d2 +1a63a600 +204048c7 +9a60a600 +204048d2 +204048a9 +c2004882 +20404879 +1a627e00 +20600000 +df200008 +1fe22600 +204048a9 +2a6ffe07 +2040c8ac +2440c8af +1a63a600 +204048d2 +204048a6 +204048d2 +204048a9 +204048d2 +c2004890 +20204871 +204048ac +204048a6 +204048d2 +204048af +204048d2 +202048a9 +204048af +204048a6 +204048d2 +204048ac +202048d2 +78347c00 +6800cffe +202048b2 +78547c00 +6800cffe +202048b2 +78347c00 +6800cfff +202048b2 +78547c00 +6800cfff +202048b2 +1fe10e07 +1fe97e00 +d8408070 +98408400 +e8408000 +f9207e00 +e0408000 +18408404 +e8408000 +f9347e00 +e0408000 +20600000 +6800cfff +1fe10e07 +1fe97e00 +d8408070 +98408400 +e8408000 +f93ffe00 +e0408000 +20600000 +20000004 +6800cfff +1fe10e07 +1fe97e00 +d840811c +98408400 +58000000 +e8488000 +a84fffff +7920fe00 +20600000 +20600000 +44fb401e +68108a26 +2feffe07 +2040c8ea +2040492e +68108a26 +60008b22 +68108a27 +60008b23 +60108a27 +1fe47e00 +68088d37 +98417e00 +60008d37 +708a26e0 +68008b23 +2fe00201 +2040c941 +68008b22 +2fe00201 +2040c94a +20404b61 +20204903 +44fbc01e +20404919 +708a0000 +20002710 +708a10c0 +68110050 +793ffe0a +60110050 +708a003c +708a26ff +708a27ff +708a0400 +700c6b02 +58000d9d +d8a00c6e +98a67200 +20207ed4 +68088c6c +202067fb +68008d45 +207a0000 +68088c6c +2040681d +2020c8ea +20600000 +d8e00000 +20407f16 +247a0000 +68008d46 +247a0000 +68008d45 +245a4bb7 +20600000 +d8a00b68 +38011212 +38048000 +38080000 +380d0000 +e0a48000 +38022412 +38048604 +38081000 +380c0008 +e0a48000 +38000001 +e0a08000 +20600000 +700c6b02 +58000000 +60008b67 +60010c65 +1fe0fe01 +60010c67 +1fe0fe01 +60010c69 +58008ffa +60010b7c +5800903a +60010b7e +d8a00b80 +d8c090fe +20407eb3 +68008c6d +245a492b +2020490b +60008ba2 +60008bbb +20600000 +68108a26 +c2834931 +20600000 +20404936 +20407f15 +58000280 +d8e00000 +20207f08 +68008d36 +c081493b +700d4600 +700d4700 +20600000 +68008d53 +207a0000 +700d5300 +700d3602 +700d4501 +20600000 +708a2701 +20204b37 +68008b22 +c2824955 +20600000 +68108a18 +e0a08000 +c2004946 +20600000 +44fc401f +708a2611 +68108a20 +60008b24 +1fe27200 +203a4943 +d8a00c6e +20404946 +68008b24 +1fe67c07 +20610000 +68008c6e +1fe17e80 +c040495a +c0004962 +20202a8c +68008c6e +1ff1fe00 +1fe37e00 +1fe17e03 +c000496a +c000c970 +c0014975 +20202a8c +68008c6e +1ff1fe00 +1fe37e00 +1fe17e03 +c0004976 +c000c97e +c0014983 +20202a8c +68008c6f +c004498a +c00349a0 +c00549ea +c00049fc +20204984 +68008c6f +c0014a2f +c000ca33 +c001ca45 +20204984 +20204984 +68008c6f +c000ca4f +c001ca79 +c002caa3 +c004cabc +c005cad7 +c003c984 +20204984 +68008c6f +c0054ae8 +c004caf9 +c005cb11 +20204984 +20204984 +68108a11 +79207e00 +60108a11 +20204988 +708a1240 +20600000 +68008c6e +c0c04984 +68008c72 +c0804984 +68008c73 +c0804984 +68008c74 +c080c984 +68008c75 +c0804984 +68008c70 +c0804984 +68008c71 +c0804984 +68008c6b +c002499c +c001c99e +20204984 +da400001 +20204a14 +da400001 +20204a12 +44fcc01f +793f8023 +68008c71 +c000c9b6 +c00149cf +c001c9d2 +c010c9a9 +c01149e0 +20204984 +700d4b00 +68008c72 +c00049ae +c000c9b2 +20204984 +da200b93 +ea208000 +98002400 +20204b21 +da200bac +ea208000 +98002400 +20204b21 +68008d48 +245a49c7 +58000b68 +68088b68 +60010d3f +60088d41 +68008c74 +98467c00 +242149c5 +68008d41 +98002400 +68010d3f +1fe0fe01 +98002200 +20204b21 +68008c74 +202049c0 +68108a04 +245a49cb +700d4800 +20600000 +68108a04 +79207e07 +60108a04 +20600000 +58000b80 +68088b80 +202049ba +68008c70 +1fe67c03 +24214984 +68008c70 +da200be4 +c0004b1e +79200023 +da200be9 +c000cb1e +da200c07 +c0014b1e +da200c47 +c001cb1e +20600000 +68010c72 +c000c9e5 +68010b7c +1fe22200 +20204b1e +700d4501 +700d3601 +68010b7e +1fe22200 +20204b1e +68008c6b +c0824984 +68008c6e +c0c0c984 +68008c70 +c0804984 +68008c71 +c0804984 +68008c74 +c080c984 +68008c75 +c0804984 +68008c72 +c0804984 +68008c73 +c0804984 +da400001 +20204a12 +68008c6b +c0014984 +68008c70 +c0804984 +68008c71 +c0804984 +68008c74 +c0814984 +68008c75 +c0804984 +68008c73 +c0804984 +68008c6e +c0404a0d +c040ca18 +c0414a1c +20204984 +68008c72 +c0804984 +da400002 +68008d39 +c000ca16 +da200c65 +20204b21 +da200c67 +20204b21 +da200c69 +20204b21 +68008c6b +c0824984 +da400002 +20204a12 +68008c6b +c0824984 +68008c72 +c040ca29 +c0414a2b +c041ca2d +1fe17e7f +c0004a25 +20204984 +68008d3b +da400002 +c000ca14 +20204a12 +68008d3c +20204a26 +68008d3d +20204a26 +68008d3e +20204a26 +700d4c01 +da200d4d +da400001 +20204b21 +68010c70 +d84001ba +98467c00 +2422c984 +793f8023 +68008d42 +243a4a42 +700cf600 +68008c74 +98002400 +da200cf6 +20404b21 +d8a00cf6 +df200008 +20207ec6 +700d4200 +700cf601 +20204a3b +68008c74 +c080c984 +700d4b01 +da400001 +68008d49 +c0004a4d +c000ca4e +20204a12 +20204a14 +20204a12 +68008c6b +c0824984 +68008c74 +c0804984 +68008c75 +c0804984 +68008c71 +c0804984 +68008c73 +c0804984 +68008c6e +c0004a5e +c000ca66 +c0014a67 +20204984 +68008c70 +c080c984 +68108a00 +793ffe07 +60108a00 +700d3900 +700d3a01 +20204988 +20204984 +68008c70 +c0804984 +68008c72 +c040ca72 +c0414a75 +c041ca77 +1fe17e7f +c0004a70 +20204984 +700d3b00 +20204988 +700d3c00 +700d5301 +20204988 +700d3d00 +20204a73 +700d3e00 +20204a73 +68008c74 +c0804984 +68008c75 +c0804984 +68008c6e +c0004a82 +c000ca8f +c0014a90 +20204984 +68008c70 +c080c984 +68108a00 +79207e07 +60108a00 +700d3901 +700d3603 +700d4300 +20404988 +20407f15 +58001388 +d8e0000f +20207f08 +20204984 +68008c70 +c0804984 +68008c71 +c0804984 +68008c72 +c040ca9d +c0414a9f +c041caa1 +1fe17e7f +c0004a9b +20204984 +700d3b01 +20204988 +700d3c01 +20204988 +700d3d01 +20204988 +700d3e01 +20204988 +68008c6e +c0804984 +68008c72 +c0804984 +68008c73 +c0804984 +68008c74 +c0804984 +68008c75 +c0804984 +68008c71 +c0804984 +68008c70 +1fe17e80 +c0804984 +68008c70 +c0804aba +700c6b02 +68008c70 +60108a04 +20404988 +700d4801 +20600000 +700c6b03 +20204ab5 +68008c6b +c0014984 +68008c6e +c0804984 +68008c72 +c0804984 +68008c73 +c0804984 +68008c74 +c0804984 +68008c75 +c0804984 +68008c71 +c0804984 +68008c70 +1fe67c01 +24214984 +68008c6b +c001cad1 +c0024ad1 +20204984 +68008c70 +c0004ad5 +700c6b04 +20204988 +700c6b03 +20204988 +68008c6b +c0824984 +68008c6e +c080c984 +68008c70 +c0804984 +68008c71 +c0804984 +68008c74 +c0804984 +68008c75 +c0804984 +68008c72 +c0804984 +68008c73 +c0804984 +20204988 +700d4c01 +68008c71 +60008d4d +68008c72 +1fe67c01 +2042caf5 +68008d36 +c0824988 +700d3602 +20404988 +20007530 +20007530 +20600000 +700d4501 +700d3a00 +700d3604 +20600000 +700d5001 +20404b03 +68010c70 +60010d4e +68008c74 +98007200 +d8c00c76 +d8a00cb6 +20407f01 +20204988 +68010c70 +d8400200 +98467c00 +24628000 +68010c72 +d8400000 +98467c00 +24628000 +68010c74 +d8400001 +98467c00 +24628000 +700d4301 +20600000 +68008c74 +c0804984 +68008c70 +c0004b17 +c000cb1a +20204984 +700d4a00 +700d4901 +20204988 +700d4401 +700d4a01 +700d4900 +20204988 +ea208000 +98002400 +1a20a201 +44fd401f +c591cb2c +1a40fe01 +1fe3fe00 +60108a18 +708a1803 +68008c74 +1fe0fffe +1fe37e00 +60008c74 +c0004b35 +68010c74 +9a467c00 +20214b30 +1fe22400 +1a227e00 +60010b65 +1a427e00 +60008b67 +20204b37 +d8e00000 +20204b57 +44fdc01f +68008b67 +207a0000 +1fe27200 +1fe67c40 +20214b3e +df200040 +68008b67 +9f267e00 +60008b67 +68010b65 +1fe20c00 +e8c08000 +60108a18 +c591cb47 +708a1800 +c2004b43 +18c27e00 +60010b65 +d8e00000 +20404b57 +68008b67 +247a0000 +68008d36 +c1808000 +700d3602 +20600000 +da208a19 +d8e00001 +e8c08000 +e2208000 +c2004b54 +58000000 +f9207e00 +60108a10 +68088d37 +9841fe00 +60008d37 +20600000 +d8e00002 +da208a1a +20204b54 +44fe401f +68008d38 +207a0000 +68008d37 +243a4bac +68008d45 +203a4b86 +68008d36 +c001cbbf +c0814b86 +68008d3a +243a4b86 +20404b6f +20204b7a +68008d38 +c4008000 +68008d37 +c3808000 +68008d38 +793ffe01 +60008d38 +68008d51 +207a0000 +c0084ba8 +20202a8c +68008d38 +c4010000 +68008d37 +c3810000 +68008d38 +793ffe02 +60008d38 +68008d52 +207a0000 +c0104b89 +c010cba4 +20202a8c +d8a00d54 +df200006 +20207ec6 +68008d4c +68088d4b +98417e00 +203a4ba0 +68088d4a +9840fe00 +c000cb91 +20204ba0 +700d5200 +68008d55 +c0014ba1 +c001cba1 +68008d55 +60008d54 +68008d56 +e0a08000 +68008d58 +e0a08000 +68008d5a +e0a08000 +df200004 +d8c00d54 +20204b5e +700d5200 +df200008 +d8c00d54 +20204b5e +700d5200 +df200003 +d8c00d74 +20204b5e +700d5100 +df200008 +d8c00d64 +20204b52 +68008d36 +c001cbb0 +c0014bb2 +20600000 +700d3700 +20600000 +68108a00 +79207e07 +60108a00 +700d4701 +20600000 +68008d36 +c1018000 +c0014bbb +20600000 +68008d47 +207a0000 +700d4601 +20204bc2 +d8e0000f +20407f16 +247a0000 +68108a00 +c4038000 +708a00fc +20007530 +708a003c +20600000 +44fec01f +6800c1ce +247a0000 +20404bce +24544be6 +20600000 +44ff401f +18622200 +d8400004 +e8608000 +c000cbd8 +18408401 +c0014bd8 +18627e00 +60110058 +20600000 +68110112 +98467c00 +24214bd8 +78547c00 +1a220600 +20404bee +98408400 +68110112 +98467c00 +24214bdf +1a220600 +e8608000 +c000cc3f +20202a8c +44ffc01f +68110058 +98000600 +20404bee +98608600 +18627e00 +60110058 +20600000 +e8608000 +18608602 +c0014bf3 +e8608000 +20600000 +e8610000 +20600000 +6811005e +194095fb +99409400 +20600000 +d8400004 +20204bfc +d8400002 +47004020 +1f20f201 +6811005e +1fe21400 +1f227e00 +e1488000 +1fe0ffff +99409400 +19427e00 +60010258 +18427e00 +c1010000 +68010258 +6011005e +20204c0b +58000000 +60010258 +20600000 +20758000 +58004d28 +600141f3 +580001a0 +60014243 +58001800 +60110054 +58001bff +60110056 +58001c00 +6011005a +20404c28 +70806200 +58001c00 +6011005e +60110060 +58001800 +60110058 +60010244 +68110050 +793ffe0f +60110050 +204066ce +70804301 +70806281 +20600000 +58001fff +6011005c +68108081 +1fe1fe07 +60108081 +20600000 +4700c020 +6810810c +98002400 +c301cc37 +68110112 +98002600 +d840044f +98467c00 +24628000 +68110058 +98000600 +20204bc8 +6818810c +284ffe06 +2020cc3a +60108015 +20600000 +47014020 +6800c1ce +203a4c44 +78347c00 +20600000 +e8610000 +98006000 +98000e00 +e8608000 +98000400 +1e0b7e00 +1fecfe00 +c01fcc4d +20600000 +4701c020 +18e27e00 +c0004cdc +c000cc66 +c0014c6b +c001cc7a +c0024cb3 +c002ccdc +c0034cc6 +c003cc5c +c0084cc9 +c008ccd1 +c0094ca5 +c009cc85 +20204cdc +20404cdc +20407f9e +2040688c +204033d2 +204033d9 +2020688f +70424500 +204033d0 +20404c13 +202033db +20404cf2 +68110000 +e1410000 +18007206 +20204cdd +e8610000 +60014243 +60110052 +20600000 +e8608000 +1fe20400 +60108024 +e8608000 +98408400 +79207e07 +60108023 +e8608000 +98408400 +1fe27200 +20600000 +c515ccc4 +20404c6f +e8608000 +60108025 +98408400 +c2004c7c +184104ff +e8608000 +98467c00 +2422ccc4 +20204cdc +c595ccc4 +20404c6f +60040a9a +20407422 +df200010 +d8a00ac2 +20404ca0 +600c0aa2 +d8a00ad2 +20407497 +da200ad2 +da400ac2 +d8a00ae2 +20407352 +df200010 +d8c00ae2 +20404c9c +680c0aa2 +68040a9a +1fe0fff0 +60040a9a +243a4c88 +20204c80 +e8c08000 +60108025 +c2004c9c +20600000 +e8608000 +e0a08000 +98408400 +c2004ca0 +20600000 +c595ccc4 +d8400000 +df200010 +d8a00ac2 +20404ca0 +68108085 +1fe17efd +60108085 +d8c00ac2 +df200010 +20407478 +20407428 +20407491 +20204c80 +df200020 +d8a04000 +d8400000 +e8608000 +e0a08000 +98408400 +c2004cb6 +184104ff +e8608000 +98467c00 +2422ccc4 +70802300 +20404cdc +20404be6 +204064a3 +20407f9e +20202001 +70802300 +20202000 +e8630000 +600340a0 +20204cdc +e8608000 +6000825a +1fe27200 +e8610000 +6001025b +1fe20a00 +204066fd +20204cdc +e8608000 +6000825a +1fe27200 +e8610000 +6001025b +d8a01000 +204066fd +6808825a +da201000 +6801025b +20206608 +18007204 +20404cf4 +18007e01 +e1408000 +1e027e00 +e1418000 +18000e0e +47024020 +20404cf6 +18e27e00 +e1408000 +1f227e00 +e1408000 +18000e05 +1f20f202 +20204bf9 +18000eff +20404cf4 +58000001 +e1408000 +18007201 +20204ce3 +1800140c +20204cf7 +18001408 +20204cf7 +18001406 +20204bf5 +7827fc00 +7824fc00 +e9408000 +08008008 +c2004cfa +78247c00 +08008010 +78447c00 +7844fc00 +7847fc00 +1ff0fe00 +20600000 +7041ce00 +20600000 +680341d0 +680b0040 +98467c00 +20600000 +6800804b +c2814d0f +204062ef +70007c08 +20204d04 +793ffe02 +6000804b +20406001 +58000000 +7934fe01 +6000807f +20204d04 +20600000 +70007c17 +d8a004d9 +58000000 +2d0ffe1b +7920fe01 +e0a08000 +58000000 +e0a10000 +680141e3 +e0a10000 +6800c1e5 +e0a10000 +6800c1e7 +e0a10000 +20204d04 +70007c18 +20204d04 +20406899 +20608000 +d8400007 +2040681d +2420cd2f +70424501 +20600000 +6800c245 +c1808000 +20404c62 +20204cec +4702c020 +68010264 +1fe20c00 +e8c08000 +1fe1040f +1ff1fe00 +c004cd53 +c003cd53 +c0054d5f +c002cd4b +c000cd3f +20600000 +18427e00 +c002cd43 +c001cd4a +20600000 +700a9927 +20407d86 +6800c092 +c4030000 +18427e00 +c002c38e +20600000 +20600000 +20404d5f +da200001 +20404d63 +6801424c +e0a10000 +58000000 +e0a08000 +20600000 +da200001 +20404d63 +6801424c +e0a10000 +58000000 +e0a08000 +700a8e01 +6800c252 +79207e06 +6000c252 +700a9912 +20207d86 +e8c08000 +c000cd62 +20600000 +20600000 +20405240 +1a220400 +60088a8e +1fe20a00 +1a227e00 +e0a10000 +20600000 +2035cd6f +58004365 +d8a04246 +98a67200 +20407ed4 +47034020 +58000551 +d8a00511 +98a67200 +20407ed4 +580002c9 +d8a0025d +98a67200 +20407ed4 +20205318 +4703c020 +18c20400 +18420c00 +e8c10000 +60010266 +e8c10000 +60010268 +18c27e00 +60010264 +6800c681 +c0004d85 +202050ef +68010266 +203a4dfc +47044021 +68008268 +c000cd9d +c0284de0 +c028cdf5 +c0294df3 +c029cdf3 +20204dfc +4704c021 +2040527e +6800c256 +c0004d9b +c000cd9b +c0014d9b +c001cd9b +c040cd9b +c0604d9b +c0404d9b +c0204d9b +20600000 +58000000 +20600000 +20404d8f +247a0000 +204052b8 +20404e01 +6809026f +203a4dfb +204052c1 +6801026f +e0a10000 +18007e01 +e0a10000 +20204dfc +6800c364 +207a0000 +1fe22200 +47054021 +680202d5 +d8400100 +98408400 +1c427e00 +98467c00 +24610000 +70436400 +1a227e00 +c0284db7 +20202a8c +d9000000 +204052b8 +20404e7a +204052c3 +20407ea8 +20404ead +204052c1 +5800000c +e0a10000 +18007e01 +e0a10000 +20204dfc +4705c021 +68010275 +1fe0fe04 +1ff1fe00 +1fe97e00 +1fe08401 +d8c04260 +e8c18000 +207a0000 +60018ac2 +68008ac2 +1fe22200 +20404dd3 +1a427e00 +6000c260 +20600000 +d8e00000 +da400000 +18e67c07 +24610000 +aa2fffff +2020cdda +20204dde +18427e00 +203a4dde +f9202400 +184085ff +18e08e01 +20204dd5 +20405274 +247a0000 +20404d8f +247a0000 +204052c5 +20406e11 +20404dc3 +20204dec +20405274 +247a0000 +204052c5 +20406e11 +204052ce +68010275 +203a4dfb +e0a10000 +68014248 +e0a10000 +20204dfc +20404d33 +20204dfc +47064021 +70028400 +20406a8a +68008284 +c1008000 +20204dfc +20405264 +58000000 +60010266 +60010268 +70026a01 +20600000 +4706c021 +204052c3 +18002400 +68010266 +1fe22600 +68010264 +98000c00 +20404e10 +1a627e00 +1a60a7fc +1fe0fffc +243a4e08 +1a427e00 +6001026f +20600000 +47074021 +e8c08000 +c000ce49 +c0014e51 +c001ced5 +c0024f05 +c002cfa2 +c0034fcb +c003d01b +c0045050 +c004d060 +c0054e1f +c005d061 +20405062 +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +5800000b +e0a08000 +18e27e00 +e0a08000 +e8c10000 +c0014e2d +c001ce33 +20600000 +58020008 +e0a30000 +58000280 +e0a20000 +18007e0c +20204e38 +5803000c +e0a30000 +58000006 +e0a40000 +18007e10 +9a40a400 +20204e1e +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +e8c10000 +60010aa2 +1a627e00 +9a262600 +204052c3 +5800000b +e0a08000 +18e27e00 +e0a08000 +68010aa2 +20204e2a +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +98c08c00 +1a627e00 +9a262600 +20204e1e +20407ea8 +20407ead +d9000000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +e8c10000 +1fe20400 +e8c10000 +1fe21600 +4707c021 +18427e00 +c000ce64 +c001ce86 +c008ce92 +c009ce9d +20405062 +20204ed4 +20407ea8 +d8400050 +68014248 +243a4ece +19627e00 +60014248 +1c427e00 +600202d5 +20404e6e +20204ea9 +600902d3 +19627e00 +600102c9 +1a227e00 +600102cb +1a427e00 +600102cd +1a627e00 +600102cf +18e27e00 +600102d1 +20600000 +680902d3 +680102c9 +1fe21600 +680102cb +1fe22200 +680102cd +1fe22400 +680102cf +1fe22600 +680102d1 +1fe20e00 +20600000 +20407ea8 +58000051 +d8400051 +6801424a +243a4ece +19627e00 +6001424a +6800c251 +79207e00 +79207e01 +6000c251 +20204eb1 +20407ea8 +d8400052 +6801424c +243a4ece +19627e00 +6001424c +6800c252 +79207e00 +79207e01 +6000c252 +20204eb1 +20407ea8 +1b427e00 +d8400053 +6801424e +243a4ece +19627e00 +6001424e +6800c253 +79207e00 +79207e01 +6000c253 +20204eb1 +58000001 +6001027d +70436450 +20204eb3 +6800c250 +79207e00 +79207e01 +6000c250 +58000000 +6001027d +47084022 +20407ead +58000003 +e0a08000 +18e27e00 +e0a08000 +58000008 +e0a10000 +18427e00 +e0a10000 +19627e00 +e0a10000 +6801027d +c000cec9 +290c0000 +2020cec4 +58000004 +e0a10000 +18007e00 +e0a10000 +5800000c +20204ed0 +e0a10000 +18007e02 +e0a10000 +5800000c +20204ed0 +79201000 +20204eb1 +9a40a400 +1a627e00 +9a262600 +20204ed4 +20204e1e +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe21600 +e8c10000 +1fe20400 +4708c022 +58000050 +98467c00 +2022ceed +58000051 +98467c00 +2022cef3 +58000052 +98467c00 +2022ceff +58000053 +98467c00 +2022cef9 +20600000 +19627e00 +60014248 +6800c250 +79207e01 +6000c250 +20204e1e +19627e00 +6001424a +6800c251 +79207e01 +6000c251 +20600000 +19627e00 +6001424c +6800c253 +79207e01 +6000c253 +20600000 +19627e00 +6001424e +6800c252 +79207e01 +6000c252 +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe20400 +18422200 +47094022 +58000050 +98467c00 +2022cf1c +58000051 +98467c00 +2022cf3a +58000052 +98467c00 +2022cf26 +58000053 +98467c00 +2022cf30 +20205062 +18a21600 +6800c250 +79207e04 +79207e03 +6000c250 +19620a00 +d9600050 +68014248 +1fe20400 +20204f43 +18a21600 +6800c252 +79207e04 +79207e03 +6000c252 +19620a00 +d9600052 +6801424c +1fe20400 +20204f43 +18a21600 +6800c253 +79207e04 +79207e03 +6000c253 +19620a00 +d9600053 +6801424e +1fe20400 +20204f43 +18a21600 +6800c251 +79207e04 +79207e03 +6000c251 +19620a00 +d9600051 +6801424a +1fe20400 +4709c022 +58000005 +e0a08000 +18e27e00 +e0a08000 +58000006 +e0a10000 +18427e00 +e0a10000 +18007e00 +e0a10000 +18007e00 +e0a10000 +18007e0a +9a40a400 +60090282 +18e27e00 +60008281 +18007e50 +a961fe00 +2020cf59 +1fe0fe01 +20600000 +78547c00 +c3810000 +c4000000 +c4008000 +79207e02 +18c20a00 +18a08bff +e0a08000 +78347c00 +20600000 +6800c250 +20404f5a +24344f6b +70028050 +68014248 +60010282 +20204f7f +6800c251 +20404f5a +24344f72 +70028051 +6801424a +60010282 +20204f7f +6800c252 +20404f5a +24344f79 +70028052 +6801424c +60010282 +20204f7f +6800c253 +20404f5a +24740000 +70028053 +6801424e +60010282 +470a4022 +2040523a +204052b8 +18002400 +204052c3 +18007e04 +e0a08000 +6800c255 +e0a08000 +58000008 +e0a10000 +68010282 +e0a10000 +58000000 +e0a10000 +18007e01 +e0a08000 +18007e02 +e0a08000 +68008280 +c028cf97 +58000030 +e0a10000 +20204f99 +580003e3 +e0a10000 +d840000c +6009026f +204052c1 +6801026f +e0a10000 +18007e01 +e0a10000 +70028000 +20204e1e +18c08c01 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe22200 +470ac022 +58000050 +9a267c00 +2022cfba +58000051 +9a267c00 +2022cfbe +58000052 +9a267c00 +2022cfc2 +58000053 +9a267c00 +2022cfc6 +18c08c02 +e8c10000 +98007c00 +20204e1e +6800c250 +79207e05 +6000c250 +20204e1e +6800c251 +79207e05 +6000c251 +20204e1e +6800c252 +79207e05 +6000c252 +20204e1e +6800c253 +79207e05 +6000c253 +700a9906 +20207d86 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe22200 +e8c10000 +1fe21600 +1a220400 +20407ea8 +470b4022 +58000050 +98467c00 +2022cff2 +58000051 +98467c00 +2022d002 +58000052 +98467c00 +2022cfe6 +58000053 +98467c00 +2022cfec +20405062 +20205017 +19620400 +6801424c +98467c00 +2022cff8 +20405062 +20205017 +19620400 +6801424e +98467c00 +2022cffa +20405062 +20205017 +19620400 +68014248 +98467c00 +2022cffe +20405062 +20205017 +20405079 +2020500a +2040507f +6801424c +203a500a +2020500a +20405074 +68008288 +243a500a +2020500a +19620400 +6801424a +98467c00 +2022d008 +20405062 +20205017 +2040506f +2020500a +20407ead +58000007 +e0a08000 +18e27e00 +e0a08000 +58000004 +e0a10000 +1a227e00 +e0a10000 +19627e00 +e0a10000 +18007e08 +20205019 +20407ead +20205019 +9a40a400 +20204e1e +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe21600 +e8c10000 +1fe20400 +20407ea8 +470bc022 +58000050 +98467c00 +2022d035 +58000051 +98467c00 +2022d03b +58000052 +98467c00 +2022d041 +58000053 +98467c00 +2022d047 +20405062 +2020504f +18422200 +19620400 +68014248 +98467c00 +2042d074 +2020504d +18422200 +19620400 +6801424a +98467c00 +2042d06f +2020504d +18422200 +19620400 +6801424c +98467c00 +2042d079 +2020504d +18422200 +19620400 +6801424e +98467c00 +2042d07f +2020504d +20407ead +20204e1e +20204e1e +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +98c08c00 +58000009 +e0a08000 +18e27e00 +e0a08000 +18007e00 +e0a10000 +18007e04 +9a40a400 +1a627e00 +9a262600 +20204e1e +20204e1e +20204e1e +18002400 +204052c3 +58000001 +e0a08000 +18e27e00 +e0a08000 +58000002 +e0a10000 +58000000 +e0a10000 +1a40a406 +da600004 +20204e1e +58000000 +6001027b +6001424a +70425100 +20600000 +58000000 +60010275 +60014248 +70425000 +20600000 +58000000 +6001424c +70425200 +6800c253 +c0005085 +20600000 +58000000 +6001424e +70425300 +6800c252 +c0005085 +20600000 +700a9907 +20207d86 +6800827f +793ffe00 +6000827f +6801424e +207a0000 +204052b8 +6801424e +1fe22200 +18002453 +2020509a +6800827f +793ffe07 +6000827f +6801424c +207a0000 +204052b8 +6801424c +1fe22200 +18002452 +2040523a +204052c3 +18007e06 +e0a08000 +6800c255 +e0a08000 +58000004 +e0a10000 +1a227e00 +e0a10000 +1a427e00 +e0a10000 +18000408 +202050de +470c4023 +2040523a +204052c3 +58000002 +e0a08000 +6800c255 +e0a08000 +58000004 +e0a10000 +18427e00 +e0a10000 +19627e00 +e0a10000 +d8400008 +202050de +470cc023 +2040523a +204052c3 +58000004 +e0a08000 +6800c255 +e0a08000 +58000008 +e0a10000 +18427e00 +e0a10000 +58000000 +e0a10000 +58000001 +e0a08000 +58000002 +e0a08000 +580003e3 +e0a10000 +d840000c +202050de +470d4023 +2040523a +204052c3 +58000006 +e0a08000 +6800c255 +1fe0fe01 +18a22200 +6000c255 +1a220a00 +e0a08000 +58000004 +e0a10000 +18427e00 +e0a10000 +19627e00 +e0a10000 +d8400008 +6009026f +18427e00 +203a5264 +204052c1 +6801026f +e0a10000 +18007e01 +e0a10000 +20600000 +68010275 +203a2a8c +204052ce +68010275 +e0a10000 +68014248 +e0a10000 +20600000 +68010266 +203a4dfc +470dc023 +68008268 +c000d0f9 +c0284de8 +c028cdf5 +c0294df3 +c029cdf3 +20204dfc +470e4023 +204052b8 +18002400 +204052c3 +1fe20a00 +68010266 +1fe22600 +68010264 +98000c00 +20405108 +1a60a7fc +2422d102 +1a420400 +204050de +20204dfc +e8c08000 +c0015113 +c000d116 +c001d120 +c002d15c +c002518e +c003d213 +c00351e1 +c0045050 +c0054e3a +2020522e +20407ea8 +20407ead +20204e51 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c08000 +1a20a3ff +2422d11c +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +e8c10000 +1fe21600 +e8c10000 +1fe20400 +e8c10000 +1fe67c00 +2022d132 +c001512e +c002512e +20205130 +700a9916 +20407d86 +e8c10000 +20205159 +20407ea8 +470ec023 +58000050 +98467c00 +2022d141 +58000051 +98467c00 +2022d147 +58000053 +98467c00 +2022d153 +58000052 +98467c00 +2022d14d +20205159 +19627e00 +60014248 +6800c250 +79207e01 +6000c250 +20205158 +19627e00 +6001424a +6800c251 +79207e01 +6000c251 +20205158 +19627e00 +6001424c +6800c252 +79207e01 +6000c252 +20205158 +19627e00 +6001424e +6800c253 +79207e01 +6000c253 +20407ead +1a627e00 +9a262600 +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe21600 +e8c10000 +e8c10000 +243a5188 +20407ea8 +19620400 +470f4023 +58000050 +98467c00 +2022d176 +58000051 +98467c00 +2022d17a +58000052 +98467c00 +2022d17e +58000053 +98467c00 +2022d182 +6800c250 +79207e05 +6000c250 +20600000 +6800c251 +79207e05 +6000c251 +20600000 +6800c252 +79207e05 +6000c252 +20600000 +6800c253 +79207e05 +6000c253 +700a9906 +20207d86 +20407ead +1a20a3fa +2022d18d +18c08c01 +1a20a3ff +20205189 +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +18c08c02 +1fe20400 +58000005 +e0a08000 +18e27e00 +e0a08000 +1a20a202 +1a227e00 +e0a10000 +20407ea8 +470fc023 +58000050 +98467c00 +2022d1ad +58000051 +98467c00 +2022d1be +58000052 +98467c00 +2022d1c4 +58000053 +98467c00 +2022d1ca +202051cf +6800c250 +79207e04 +79207e03 +6000c250 +c28151bb +6808827f +79200406 +6008827f +18e27e00 +1fe0fe01 +60008281 +6800c250 +79207e02 +6000c250 +68014248 +60010282 +202051cf +6800c251 +79207e04 +79207e03 +6000c251 +6801424a +202051cf +6800c252 +79207e04 +79207e03 +6000c252 +6801424c +202051cf +6800c253 +79207e04 +79207e03 +6000c253 +6801424e +1fe21600 +20407ead +19627e00 +e0a10000 +18007e00 +e0a10000 +18007e00 +e0a10000 +18007e0a +9a40a400 +1a20a3fa +2022d1e0 +e8c08000 +e0a08000 +1a40a401 +1a20a3ff +202051da +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +1a627e00 +9a262600 +e8c10000 +1fe22200 +e8c10000 +1fe21600 +20407ea8 +47104024 +58000050 +1a220400 +98467c00 +2022d1fa +58000052 +1a220400 +98467c00 +2022d1ff +58000053 +1a220400 +98467c00 +2022d201 +20205203 +58000000 +60010275 +60014248 +6000c250 +20205205 +20405079 +20205205 +2040507f +20205205 +58000000 +6001027b +20407ead +58000007 +e0a08000 +18e27e00 +e0a08000 +58000004 +e0a10000 +1a227e00 +e0a10000 +19627e00 +e0a10000 +18007e08 +9a40a400 +20600000 +e8c08000 +1fe20e00 +e8c10000 +1fe22200 +e8c10000 +1fe21600 +e8c10000 +1fe20400 +20407ea8 +4710c024 +6800c255 +a8e1fe00 +2420d22a +58000050 +98467c00 +2022d227 +58000051 +98467c00 +2022d22a +2020522a +70424800 +70425000 +2020522a +20407ead +1a627e00 +9a262600 +20600000 +58000001 +e0a08000 +e8c08000 +e0a08000 +58000002 +e0a10000 +58000000 +e0a10000 +58000006 +9a40a400 +18002604 +20600000 +6800c255 +1fe0fe01 +c080523e +1fe0fe01 +6000c255 +20600000 +47114024 +da400000 +2040526e +243a2a8c +2040527e +da401800 +d8e00000 +6808c256 +a84fffff +2020d24f +204052a0 +19667c00 +2021524f +20405288 +20205255 +1a40a480 +18e08e01 +58000008 +98e67c00 +20215247 +da400000 +1a427e00 +203a2a8c +20600000 +4711c024 +20405277 +18c08c01 +e8c10000 +20600000 +47124024 +20405277 +18c20a00 +18c20400 +58000000 +e0a18000 +20600000 +4712c024 +20405274 +203a2a8c +6801c25d +6001c260 +6801c25a +6001c25d +6801c257 +6001c25a +20600000 +47134024 +6801c257 +20600000 +4713c024 +6801c25a +20600000 +47144025 +6801c260 +20600000 +20405274 +203a2a8c +d8c04257 +e8c18000 +203a527a +18c08dfd +20600000 +4714c025 +df200004 +d8c04257 +d8400000 +e8c18000 +1fe17eff +98418400 +c2005282 +6008c256 +20600000 +47154025 +2040526e +243a2a8c +20405274 +203a5295 +6801c25a +6001c257 +e8c18000 +e0a18000 +e8c18000 +e0a18000 +58000000 +e0a18000 +d8400000 +19627e00 +98e0fe00 +f9200400 +18e08e01 +98e67c00 +2422d298 +1a4d7e00 +9841fe00 +6001c260 +20600000 +4715c025 +2040527e +18e22600 +d8400000 +d9600000 +18e27e00 +c00452b0 +6800c256 +afefffff +2020d2b0 +18408480 +18e08e01 +1a227e00 +98467c00 +2022d2b0 +202152a5 +18427e00 +9a267c00 +242152b6 +18e27e00 +1a620400 +98461600 +1a620e00 +20600000 +47164025 +da20007f +20405240 +6001026b +1fe0fe04 +6001026d +58000000 +6001026f +20600000 +6801026b +202052e2 +6801026d +202052e2 +4716c025 +da2000fa +20405240 +60010271 +1fe0fe04 +60010273 +58000000 +60010275 +20600000 +68010271 +202052e2 +68010273 +202052e2 +47174025 +20407e7c +70028401 +2040526e +247a0000 +da20007f +20405240 +60010277 +1fe0fe04 +60010279 +58000000 +6001027b +70028400 +20207e8c +68010277 +202052e2 +203a2a8c +1fe20a00 +20600000 +4717c025 +da400000 +da204257 +1a20a3fe +1a20a202 +58004263 +9a267c00 +2022d2f5 +ea208000 +1a20a201 +203a52e9 +ea290000 +e8410000 +9a40a400 +1a40a404 +202052e9 +1a427e00 +20600000 +d8e0000c +20202c32 +d8e0000c +20202c36 +47184026 +2040527e +6800c256 +207a0000 +204052e5 +d8400100 +98467c00 +202152f7 +204052f9 +d8a04263 +da204257 +58004263 +9a267c00 +20628000 +ea208000 +1a20a201 +243a530f +e0a10000 +1a20a202 +20205306 +ea210000 +1a20a202 +1fe20c00 +e8c10000 +e0a10000 +1fe27200 +1f20f202 +20407f01 +20205306 +4718c026 +2040527e +6800c256 +207a0000 +da204258 +1a20a3fd +d8c04263 +1a20a203 +58004264 +9a267c00 +20628000 +e8c10000 +203a531f +1fe0fe04 +1fe27200 +18c22400 +ea210000 +1fe20a00 +1a420c00 +18c08dfe +20407f01 +2020531f +47194026 +7855fc00 +70045501 +70043f03 +70045601 +5fffffff +60010459 +18007e00 +60008457 +60008462 +6001c169 +6001c16c +6002c403 +79207e27 +6002c408 +7043dc01 +7043dd00 +202056ed +4719c026 +7834fc00 +70044003 +70047801 +70445a01 +5800ffff +6001445c +18007e00 +6002c408 +79207e27 +6002c403 +2020532e +471a4026 +7854fc00 +58000017 +600144a8 +70044001 +70436e00 +7000a000 +7044c400 +7044c500 +6801046d +600144ba +68010441 +1feffe05 +1ff1fe00 +6001046d +2020532e +204053c4 +204055e8 +204056f0 +202053ce +471ac026 +204053c4 +204032f4 +68008440 +c001d366 +2020537a +471b4026 +7834fc00 +204056e4 +20215377 +20402c6c +20405413 +2040561e +7856fc00 +204054bf +24768000 +471bc026 +68008005 +1fe0fe01 +60008005 +204055aa +7854fc00 +20600000 +204053a9 +7854fc00 +20600000 +471c4027 +70450f00 +20407aaf +20405c18 +78577c00 +204056e4 +202153a9 +20402c6c +20405413 +20405489 +242c539b +204053b7 +2036d388 +20205395 +471cc027 +6800c50f +1fe0fe01 +6000c50f +c0065395 +204055aa +2040561e +204054c7 +2040567e +680141fb +20407f9c +204053a0 +203453a4 +471d4027 +20405be4 +20405bdb +20407d9c +68008462 +c281d3a9 +471dc027 +204057f4 +2040559d +20405575 +20202841 +78547c00 +c5157fe7 +c514ffe7 +20600000 +471e4027 +78377c00 +204054c1 +2036d388 +20205395 +471ec027 +204053af +204033b4 +20407a77 +700a9915 +20207d86 +58000000 +6004c4ff +70045500 +70044000 +70043f00 +7044c500 +7044c400 +20600000 +471f4027 +68008005 +1fe0fe01 +60008005 +6800843f +c3818000 +79207e03 +6000843f +680144ba +6001046d +58000000 +600244e5 +20600000 +471fc027 +70890f36 +70890b5f +783b7c00 +70891407 +20402c6c +6800c1e0 +207a0000 +70890ab8 +20600000 +47204028 +70890f2e +70890bff +785b7c00 +70891403 +db600000 +20600000 +7844fc00 +7843fc00 +68018467 +98001e00 +68008016 +1fed8400 +79200401 +18431c00 +20600000 +204053e6 +2040291f +58000500 +20402a8f +20202924 +2036a939 +204053e6 +20202933 +4720c028 +20402918 +6800848c +243a53f9 +68008016 +1fe67c24 +202153f3 +18000400 +c1128000 +18000418 +c1130000 +1800044e +20600000 +1fe67c0a +202153f6 +1fe0fe01 +1fe3fe00 +1fe08402 +20600000 +68008016 +1fe38400 +20600000 +d84001f4 +207a0000 +d84000fa +c1008000 +d8400096 +c1010000 +d8400064 +c1018000 +d840004b +c1020000 +d8400032 +c1028000 +d8400028 +c1030000 +d8400014 +20600000 +588e89be +1fed7e00 +1fe1fed6 +98001200 +58555555 +60018467 +20600000 +47214028 +78287c00 +68020463 +98001200 +20405466 +58000200 +2034d41c +6801044d +1fe37e00 +d8400500 +9840fe00 +20402a24 +1b427e00 +60030491 +20600000 +4721c028 +68008016 +c012d428 +c013542e +c013d434 +20205434 +6808c48d +284ffe01 +2020d43f +284ffe02 +2020d444 +2020543a +6808c48d +284ffe02 +2020d444 +284ffe00 +2020d43a +2020543f +6808c48d +284ffe00 +2020d43a +284ffe01 +2020d43f +20205444 +70001625 +68008ac2 +79207e00 +60008ac2 +20600000 +70001626 +68008ac2 +79207e01 +60008ac2 +20600000 +70001627 +68008ac2 +79207e02 +60008ac2 +20600000 +47224028 +1a208c01 +e8c08000 +c4000000 +1a208a1a +e8a10000 +1fe0fe01 +e0a10000 +1a208c19 +e8c08000 +1a208a18 +e8a88000 +9840fe00 +1fe67c24 +20215459 +1fe0ffdb +e0a08000 +20600000 +4722c028 +6802846f +18000400 +18007225 +c3005461 +18408401 +1fe37e00 +c200545f +1840ffff +60008461 +20600000 +47234028 +68008457 +98000e00 +680a846f +a84fffff +2020d47c +4723c028 +68008461 +98e67e00 +20215472 +1fe60fff +2020546c +18e27200 +18000e00 +a84fffff +2020d477 +1f20f201 +1f227e00 +203a547c +18e08e01 +1f20f3ff +20205474 +18e27e00 +60008016 +20600000 +2034d482 +37c18200 +20600000 +d9600ea0 +34730200 +20600000 +78487c00 +6801436c +1fe21600 +2020548e +47244029 +78287c00 +6801044d +680a44e5 +98409600 +204053de +4724c029 +204053d5 +7856fc00 +7826fc00 +7830fc00 +78507c00 +19623600 +37c18400 +2037549a +1b420400 +600b009a +242c264d +203754a1 +dd2001e0 +1c225000 +6800843f +c301d4a1 +2055ab05 +47254029 +204029bb +7823fc00 +7824fc00 +09800008 +19897e00 +600082d9 +09800008 +19897e00 +e0a08000 +1fe1723f +2022d4b1 +09800008 +19897e00 +e0a08000 +c20054ad +4725c029 +09800018 +78287c00 +db600664 +1fef7e00 +1ff17e00 +e0a18000 +2023264d +7836fc00 +68008017 +1fe0a200 +20402981 +7846fc00 +20202918 +47264029 +204054c9 +68088017 +2040291f +20402924 +78287c00 +d960157c +2020548f +204054c9 +2020264d +4726c029 +204053d5 +204053e3 +202054cd +79202a00 +782efc00 +78307c00 +7850fc00 +2040547f +19317e00 +1fecfe00 +1ff1fe00 +08008628 +7823fc00 +7824fc00 +47274029 +6800c3dc +08008608 +e8c08000 +1fe1723f +08008608 +2022d4e2 +e8c08000 +08008608 +c20054df +78247c00 +08008618 +78447c00 +37d38200 +20000064 +784efc00 +20600000 +4727c029 +6800c484 +c000d4f9 +6800c485 +1ff27e00 +1febfe00 +6000c3dc +6808c36f +1840fe06 +6000c3dd +680344a0 +600343de +18427200 +d8c04370 +20407ef4 +20205504 +6800c486 +1ff27e00 +1febfe00 +1fe0fe01 +6000c3dc +5800000c +6000c3dd +680344a0 +600343de +680341d0 +e0a30000 +4728402a +68008000 +1fe0fe01 +60008000 +db600708 +7856fc00 +202054bf +4728c02a +6800c49e +c1808000 +68008000 +1fe0fe01 +60008000 +d8400c03 +6800c49f +7d3a0406 +1a227e00 +7d3a0407 +600943dc +680344a0 +e0a30000 +6803044f +e0a30000 +202054bf +4729402a +d8400004 +6800c485 +7d3a0406 +6008c3dc +6808c38f +1840fe06 +6000c3dd +680344a0 +600343de +d8c04390 +18427200 +20407ef4 +204054c7 +20205706 +4729c02a +18007fff +38080001 +6002846f +2040545b +18007204 +d8a00463 +2040630d +6801449c +6001046d +180a7e00 +1fe17e0f +1fe67c04 +20215535 +60008458 +600086e6 +472a402a +68094367 +60090441 +18422600 +1c40fe07 +9a66fc00 +20407f86 +18072200 +9a267e00 +9a60fe00 +68094365 +9840fe00 +60020443 +9c462200 +1a20a3fa +da402205 +6800c495 +7d3a2406 +6800c48e +7d3a2407 +1a427e00 +600143dc +680344a0 +e0a30000 +6803044f +e0a30000 +68020463 +e0a20000 +180a7e00 +e0a10000 +180a7e00 +e0a08000 +18007e02 +e0a08000 +1a2b7e00 +e0a10000 +1a6b7e00 +e0a10000 +472ac02a +58000000 +e0a10000 +6801449c +e0a10000 +6802846f +e0a28000 +68008458 +d84000a0 +9841fe00 +e0a08000 +204054c7 +580043dc +1fe08c12 +e8c18000 +60018467 +20600000 +472b402a +7854fc00 +2020540c +6800843f +c4028000 +68010459 +6809045f +98467e00 +24610000 +60010a9a +472bc02a +6800843f +793ffe05 +793ffe03 +6000843f +68020443 +68090441 +60090aa2 +98462200 +472c402b +6800c3d3 +6000846a +e8c90000 +e8c10000 +1febfe00 +60010441 +184b8400 +9840fe00 +e8ca0000 +600a046b +9a20fe00 +1fe22800 +68010441 +68090aa2 +98467e00 +68090a9a +984ffe00 +9a80fe00 +60020443 +20405713 +6801046d +600144ba +20600000 +472cc02b +6800843f +c4030000 +68010459 +6809045f +98467e00 +24610000 +6800843f +793ffe06 +6000843f +6802c3ce +6002846f +2020545b +472d402b +204056ed +204055c0 +680082d9 +2feffe04 +7920802a +1fe37e00 +9842fe00 +2feffe02 +7920800f +c6078000 +680082da +203a55bc +6800843f +c30255bc +2040748d +204073fb +247a0000 +68088456 +79400402 +60088456 +20600000 +472dc02b +68088456 +284c0005 +20608000 +680082d9 +1fe3fe00 +9842fe00 +c4018000 +793f8405 +79400403 +60088456 +28400603 +24608000 +6800c3de +c002d5d2 +6800c4c5 +c00155d6 +20600000 +6800843f +79207e04 +6000843f +20600000 +472e402b +7044c500 +dfe00000 +6002440d +6002c403 +79207e27 +6002c408 +6800843f +793ffe04 +6000843f +20600000 +472ec02b +20405422 +20405485 +68008001 +1fe0fe01 +60008001 +20600000 +472f402b +6800c369 +c1808000 +d8e00002 +20407f16 +247a0000 +6801436a +6809436c +98467e00 +d8e00002 +20407f08 +7854fc00 +20405572 +204055e1 +24768000 +472fc02b +680302db +6003044f +68008002 +1fe0fe01 +60008002 +20405608 +20748000 +2040550b +24768000 +4730402c +68008004 +1fe0fe01 +60008004 +680482e1 +60048101 +20600000 +4730c02c +6800849b +c18d8000 +6803044f +680b448f +98467c00 +24628000 +2040223b +24628000 +2040552b +20405340 +4731402c +7041ce00 +70047600 +70436900 +70049b00 +20202223 +da200001 +680082d9 +c3830000 +da200000 +20600000 +4731c02c +68008456 +c3828000 +20405642 +20405873 +203a5664 +e8c08000 +e8c88000 +18422200 +9a267e00 +d840001b +20407fdd +1fe20400 +e8c08000 +1fe20200 +1a227e00 +98c08c00 +d8a043de +18427200 +20407f01 +20405654 +20405666 +20405873 +e8c08000 +1fe22200 +18c22600 +e8c88000 +18422400 +9a467e00 +d840001b +20407fdd +9a40fe00 +e2608000 +9a267c00 +24628000 +20205896 +20405649 +c6148000 +6800c4e9 +c3015652 +20405876 +203a5652 +20205650 +20405873 +203a5652 +e8c08000 +e8c88000 +98467e00 +1fe67c1b +20215652 +79200029 +20600000 +793f8029 +20600000 +1a227e00 +207a0000 +d8200001 +20600000 +4732402c +18408401 +2040576a +18c08dfe +e8c10000 +d8402902 +98467c00 +24628000 +18c08c01 +18c22200 +e8c08000 +20600000 +18000400 +18000201 +4732c02c +6008c3dd +68088456 +79200405 +18417efc +9821fe00 +60008456 +1fe17e1f +280ffe29 +7920fe04 +6000c3dc +6800c3dc +28200601 +2420d676 +6800c3dd +207a0000 +6800843f +c4020000 +2040748d +202073e3 +d8e00000 +20202c32 +d8e00000 +20202c36 +4733402c +c6078000 +20405890 +247a0000 +680082d9 +1fe17e03 +6000c50c +e8c08000 +1fe17e1f +6000c50b +207a0000 +18c27e00 +6001450d +6800c50c +c001dc64 +2040569a +2434567a +2040567c +6801450d +1fe20c00 +e8c10000 +600144fc +4733c02c +e8c10000 +c00258ab +c0035af4 +c002dab6 +20600000 +6800c50c +c00156a9 +c000d6c1 +20600000 +20407fe7 +d8400004 +9fe67c00 +20628000 +d8400005 +9fe67c00 +20628000 +d8400006 +9fe67c00 +20628000 +20207fe9 +6801450d +1fe20c00 +e8c10000 +600144fc +e8c10000 +2040569e +24740000 +6808c50b +6008c4fe +680144fc +1fe0fe04 +98467c00 +2022ffe7 +6800c50b +1fe27200 +d8a00311 +6801450d +1fe20c00 +20407f01 +20207fe9 +20407fe7 +6800c4fe +247a0000 +20207fe9 +204056bd +24740000 +6800c4fe +d8a00311 +98a0a200 +6808c50b +9840fe00 +6000c4fe +6800c50b +1fe27200 +1a220a00 +6801450d +1fe20c00 +20407ef4 +58000311 +6001450d +680144fc +1fe0fe04 +6808c4fe +98467c00 +2022ffe7 +20207fe9 +20407ea5 +d8a0445e +680144fc +1fe0fffb +e0a08000 +1fe27200 +20407e9f +20207ef4 +20407ea5 +d8a04471 +202056d9 +680141f9 +20207f9c +680a045b +20402a7b +98461600 +19627e00 +6809046d +18520400 +18438400 +98467e00 +20600000 +20402a7b +6002045b +20600000 +70001624 +700ac200 +4734402d +6800c36e +207a0000 +d8e00000 +20407f16 +247a0000 +4734c02d +7854fc00 +78287c00 +20405572 +20405422 +204054e9 +2436d706 +68008003 +1fe0fe01 +60008003 +680082d9 +1fe17e0f +c001d51c +c002d728 +4735402d +180a7e00 +d84001ff +98417e00 +1fe0fefa +20403cbe +68008ac2 +6808c48d +98467c00 +2422d6f2 +d8e00000 +68014482 +20207f08 +4735c02d +68008476 +204053fc +68010441 +984ffe00 +d8400177 +984ffe00 +d84186a0 +9846fc00 +6800846a +d8404e20 +984ffe00 +9840fe00 +600244e5 +4736402d +680140c1 +20407f86 +18078400 +9840fe00 +6001044d +20600000 +4736c02d +680302e1 +680b44a0 +98467c00 +24628000 +20405619 +1a227e00 +6000c48e +680382ee +60038101 +e8c40000 +e0a40000 +680302db +6003044f +18c08c06 +e8c40000 +60040463 +e8c90000 +4737402d +184b8400 +e8c10000 +1febfe00 +60010441 +60020443 +98467e00 +1fe0d1fe +e8c48000 +6004846b +4737c02d +e8c08000 +1ff18400 +18430400 +60088476 +1fe17e1f +60008458 +20405713 +2040545b +2040534c +2040223b +24628000 +4738402e +20402841 +20405ad3 +700a9914 +20407d86 +20202223 +4738c02e +6801445a +98002400 +6801445c +98002600 +680144bc +98000c00 +78347c00 +20600000 +e8c10000 +207a0000 +9a467c00 +24610000 +9a667c00 +20628000 +20215768 +18007c01 +20600000 +18007e00 +20600000 +2040576d +2022d779 +20600000 +4739402e +680144bc +98000c00 +e8c10000 +207a0000 +98467c00 +20628000 +e8c08000 +98c08c00 +e8c08000 +98c08c00 +20205770 +e8c08000 +98c08c00 +20600000 +4739c02e +680144bc +98000c00 +e8c10000 +207a0000 +e8c08000 +98c08c00 +18c08dfe +e8c10000 +98467c00 +20628000 +e8c08000 +98c08c00 +2020577f +6801049c +2020578e +473a402e +680144bc +98000c00 +18422200 +e8c10000 +203a5799 +9a267c00 +2022d79a +e8c08000 +98c08c00 +e8c08000 +98c08c00 +20205790 +20207fef +e8c08000 +600084a2 +1fe27200 +d8a004a3 +20407ef4 +e8c08000 +600084b3 +20407ea5 +20207ff1 +473ac02e +204057a6 +202057b8 +d8402a00 +2040577c +207a0000 +e8c08000 +18c20a00 +6808c3af +18427200 +98467c00 +242157b5 +98460400 +d8c043b0 +20407f01 +18427200 +2442d7f0 +20600000 +1fe27200 +d8c043b0 +20207ef4 +da60438f +da204370 +204057c5 +58000000 +79347e00 +60008a9a +da6043af +da204390 +204057c5 +20740000 +68008a9a +203a2a8c +20600000 +473b402e +20407fe7 +20407eda +da400000 +d8a00ac3 +204057df +6800c3af +1fe08401 +9a40a200 +1a20a202 +1a267c1f +242157dd +e0a88000 +d8400009 +e0a88000 +98007200 +20407ef4 +1a222400 +1a427e00 +60008ac2 +d8c00ac2 +5fffffe0 +9a608a00 +20207ebd +20407fe9 +202057d7 +ea208000 +207a0000 +1fe0fe01 +e8c88000 +18467c09 +2022d7ee +9a40a400 +1a220c00 +98007200 +20407ef4 +18c22200 +1a227e00 +9a667c00 +20610000 +202057df +9a20a200 +202057ea +58000020 +e0a08000 +c20057f0 +20600000 +473bc02e +7855fc00 +203757f8 +2436d806 +20402bcb +680140c1 +6001044d +2436abde +c507abde +6800c50b +243a2bde +6800c3dd +243a2bde +6800c4e9 +c282abde +6800843f +c282abde +20202bc0 +680940c1 +18430400 +6801044d +9840fe00 +6001044d +20202bd6 +d8e00000 +20205824 +d8e00000 +20205828 +d8e00001 +20205824 +d8e00001 +20205828 +d8e00002 +20205824 +d8e00002 +20205828 +d8e00003 +20205824 +d8e00003 +20205828 +d8e00004 +20205824 +d8e00004 +20205828 +d8e00005 +20205824 +d8e00005 +20205828 +6800c4e9 +f9207e00 +6000c4e9 +20600000 +6800c4e9 +f93ffe00 +6000c4e9 +20600000 +58112233 +6001c4ea +58445566 +e0a18000 +58778899 +e0a18000 +58001122 +e0a18000 +58334455 +e0a18000 +58000066 +e0a08000 +20600000 +59000302 +60024453 +58010010 +6001c457 +7044c601 +20600000 +da200000 +d8200001 +20205850 +d8200003 +20405850 +1a427e00 +e0a08000 +20600000 +18000202 +1a20a204 +20405850 +1a20a3fc +1a227e00 +e0a10000 +1a427e00 +e0a10000 +20600000 +1a267cf0 +24212a8c +6800c4ff +d8400001 +df200004 +98417c00 +2022d85a +18438400 +c2005855 +20202a8c +9842fe00 +6000c4ff +1f267e04 +1ff27e00 +1ff27e00 +d8401800 +98408400 +df200000 +d8c04500 +e8c10000 +203a5869 +1f227e00 +1f20f201 +c0825863 +20202a8c +18c08dfe +e0c90000 +18420a00 +1a227e00 +e0a08000 +58000000 +e0a08000 +18227e00 +e0a08000 +20600000 +68014500 +1fe20c00 +20600000 +68014502 +1fe20c00 +20600000 +2040587c +1fe20c00 +20600000 +68014506 +247a0000 +68014504 +247a0000 +68014502 +247a0000 +68014500 +20600000 +20405873 +18c08c03 +20600000 +20405873 +18c08c07 +20600000 +20405879 +18c08c07 +20600000 +20405879 +18c08c03 +20600000 +68014506 +20600000 +68014504 +20600000 +68014500 +20600000 +68014500 +d8401800 +98467e00 +1ff1fe00 +1ff18e00 +6800c4ff +f93ffe00 +6000c4ff +df200000 +1f23fe00 +d8404502 +98408400 +e8410000 +184085fe +e0410000 +1f227e00 +1f20f201 +c081d89f +58000000 +e0410000 +20600000 +e8c18000 +60018477 +c00158c1 +c001d8c9 +c00258cc +c00358f2 +c004593f +c00559bc +c00659e4 +c00859fa +c0095a2f +c00b5a48 +c00c5a5b +c0295a60 +20600000 +18002203 +20405a82 +58000002 +e0a08000 +680144a6 +e0a10000 +20600000 +204058c9 +18002203 +20405a82 +58000003 +e0a08000 +680144a6 +e0a10000 +20600000 +1fecfe00 +600144a8 +20600000 +20405ab1 +20407fe7 +202058cf +d9600003 +20405756 +2040575f +203a58f0 +242158ed +18c08dfe +20407ea5 +20407e9c +243458e1 +20407e85 +20407fe9 +18002214 +20405a82 +20407e95 +58000005 +e0a08000 +58000001 +e0a08000 +20407e9f +e8c10000 +e0a10000 +e8c08000 +1fe27200 +20407f01 +20407ea2 +196097ff +2022d8f0 +e8c08000 +98c08c00 +202058d1 +e8c08000 +98c08c00 +202058ea +20345a76 +20205aa5 +20405ab1 +e8c10000 +60014472 +20407ea5 +d8a0445e +680144fc +1fe0fff9 +204056db +20205905 +78547c00 +6809445a +6801445c +98467c00 +24215902 +18427e00 +c1800000 +78347c00 +70047a01 +20205a77 +204058fb +20740000 +68094472 +58002800 +98467c00 +2022d90c +20205a76 +7004b400 +6809445a +60090aa2 +2040578c +243a5a76 +68090aa2 +2040578c +243a5925 +18c22200 +680084b3 +1fe27200 +6808c45e +98467c00 +2422d921 +da40445f +20407f88 +2022d928 +680104a3 +68094472 +98467c00 +2022d930 +68010aa2 +1fe0fe01 +60010aa2 +20205911 +680084b4 +c000d930 +20205a76 +680104a3 +68094472 +98467c00 +2422d921 +7004b401 +68090aa2 +6009049e +20205921 +680084b4 +c0005921 +7004b402 +68090aa2 +184085ff +600904a0 +da200005 +20405a82 +58000007 +e0a08000 +6801049e +e0a10000 +680104a0 +e0a10000 +20600000 +20405ab1 +204056df +20205942 +6809445a +60090aa2 +20405756 +2040576d +18c08dfe +18c27e00 +6001049c +68094472 +58002a00 +98467c00 +2022d9a8 +58002803 +98467c00 +2422d990 +d9600002 +20405a88 +2421596d +68090aa2 +2040578a +c000d96d +20405a94 +2422d96b +2434596f +78547c00 +da200014 +20405a82 +58000009 +e0a08000 +18a26000 +18a08a01 +2040597d +20405a84 +2040578a +20405984 +680084a2 +1fe0fe05 +e6008000 +680084a2 +c008596d +196097ff +2022d96d +20405a84 +20205951 +20345a76 +20205aa5 +20405a97 +20405a84 +2040578a +680084a2 +c008596d +20407e9c +68010aa2 +1fe0ffff +e0a10000 +20405aa1 +20405984 +196097ff +2022d96d +2020596b +68010aa2 +e0a10000 +680084b3 +1fe27200 +20407e9f +20407ef4 +20207ea2 +20407e9c +68010aa2 +e0a10000 +20407ea2 +680084a2 +1fe27200 +20407e9c +20407e9f +9f260c00 +18c08dff +20407ef4 +20207ea2 +6809445a +60090aa2 +20405a88 +24215a76 +2040578a +c000da76 +20405a94 +2422d9a6 +da200014 +20405a82 +58000009 +e0a08000 +680084b3 +1fe27200 +1fe0fe02 +e0a08000 +68010aa2 +e0a10000 +20407e9f +20407ef4 +20407ea2 +20205aa5 +20405a84 +20205992 +d8402a00 +2040577c +207a0000 +18c08dfb +e8c10000 +60010aa2 +da200014 +20405a82 +58000009 +e0a08000 +6800c3af +1fe27200 +1fe0fe02 +e0a08000 +68010aa2 +e0a10000 +d8c043b0 +20407ef4 +20407ea2 +20205aa5 +68090478 +6800c4e9 +c281d9dd +2040576a +203a5a76 +18c08dfe +e8c10000 +d8402a00 +98467c00 +2022d9d3 +e8c08000 +1fe67c16 +202159ca +18007e16 +1fe22600 +20407ea5 +1a60a201 +20405a82 +5800000b +e0a08000 +1a627200 +20407e9f +20207f01 +20407ea5 +6800c3af +1fe0a201 +20405a82 +5800000b +e0a08000 +6800c3af +1fe27200 +d8c043b0 +20207f01 +680144fa +98467c00 +2422d9bf +20405a42 +243459bf +70047a05 +20205a77 +e8c10000 +6001445e +da200014 +20405a82 +5800000d +e0a08000 +6801445e +98002200 +68090478 +2040576a +203a5a76 +e8c08000 +9a267200 +24215a76 +1f267c16 +202159f5 +18007216 +1a227e00 +98c08c00 +20407ef4 +20407ea2 +20205aa5 +20405ab1 +204056d7 +202059fd +d9600002 +6809445a +60090aa2 +20405756 +2040576d +18c08dfe +18c27e00 +6001049c +20405a88 +24215a25 +68090aa2 +2040578a +c000da28 +20405a8c +2422da23 +19627e00 +c0005a28 +24345a19 +78547c00 +da200014 +20405a82 +58000011 +e0a08000 +680084b3 +1fe0fe04 +e0a08000 +20407ea2 +20205a1f +680084b3 +c0085a28 +68010aa2 +1fe0ffff +600104a0 +20405a9c +68010aa2 +6001049e +20405a97 +196097ff +20405a84 +20205a05 +68010aa2 +600104a0 +20205a2c +68010aa2 +1fe0ffff +600104a0 +20205a2c +20345a76 +20405a9c +20205aa5 +18c22200 +680144fc +1fe0a5fd +204056e2 +6800c4e9 +c3025a3d +68090478 +680144fa +98467c00 +2422da3d +20405a42 +24345a3d +70047a05 +20205a77 +18002201 +20405a82 +58000013 +e0a08000 +20600000 +20407fe9 +6800c4c6 +c1000000 +6800c040 +c3820000 +20207fe7 +18c0a202 +680144fc +1fe0a5fb +204056e2 +20205a4d +680144fc +1fe22200 +20405a82 +58000017 +e0a08000 +68010478 +e0a10000 +680144fc +1fe0f3fb +6801450d +1fe08c07 +e8c10000 +e0a10000 +20207ef4 +18002201 +20405a82 +58000019 +e0a08000 +20600000 +18c22200 +680144fc +1fe0a5fd +202056e2 +18422600 +1a20a203 +20405a82 +1a20a3fd +5800001b +e0a08000 +1a620400 +e0a90000 +20600000 +18422600 +1a20a203 +20405a82 +1a20a3fd +5800001d +e0a08000 +1a620400 +e0a90000 +20600000 +70047a0a +18002205 +20405a82 +58000001 +e0a08000 +68008477 +e0a08000 +68010478 +e0a10000 +6800847a +e0a08000 +20600000 +18002404 +20205847 +68090aa2 +18408401 +60090aa2 +20600000 +68090aa2 +6801445c +98467c00 +20600000 +6808c45e +da20445f +680084a2 +1fe27200 +98467c00 +24628000 +da4004a3 +20207f88 +6808c471 +da204472 +20205a8e +680084b3 +60008101 +1fe27200 +20407e9f +20207ef4 +20407e9c +6801049e +e0a10000 +680104a0 +e0a10000 +68008101 +1fe27200 +20407ef4 +20207ea2 +20407e9c +2040588a +18a27e00 +98c62200 +2040588d +1a227e00 +e0c10000 +1a20a204 +20405879 +1a227e00 +e0c08000 +20600000 +1fecfe00 +6001445a +e8c10000 +6001445c +20600000 +e8c08000 +e8c88000 +e8c90000 +c009dabb +20600000 +e8c10000 +60014509 +700a9940 +20207d86 +da20000c +da600012 +20405ac7 +58000008 +e0a10000 +68044496 +e0a40000 +20600000 +20405acf +da400005 +20405847 +1a627e00 +e0a08000 +6800c508 +e0a08000 +20600000 +6800c508 +1fe0fe01 +6000c508 +c1800000 +70450801 +20600000 +6800c4c6 +c0005ae4 +c000dae7 +c0015ae9 +c040dadd +c0415adf +c041dae2 +20600000 +7044560d +20205ae5 +7044560d +70445401 +20600000 +7044560d +20205aea +70445600 +70445403 +20600000 +70445605 +20205ae5 +70445605 +70445400 +20600000 +6800c456 +79207e03 +6000c456 +20600000 +6800c456 +793ffe03 +6000c456 +20600000 +e8c08000 +c000db09 +c001db30 +c0025b4d +c002db5a +c0035b80 +c003dbc4 +c0045baf +c004dbc0 +c0055bc4 +c005dbc4 +c0065bc5 +c006dbca +20600000 +18002202 +20405c62 +5800000b +e0a08000 +6800c456 +e0a08000 +20600000 +6000c44c +e8c30000 +e0a30000 +6800c4c6 +c0005b5f +20405b2b +20405b26 +7044c403 +6800c44d +c0005b18 +c000db18 +c001db18 +6800c4c6 +c0015b1b +c1418000 +dfe00000 +600244c7 +20600000 +6800c4e9 +c2805b24 +da2044c7 +1a220a00 +df200003 +2040630d +680144c9 +1fe17e07 +600144c9 +700a9934 +20207d86 +6800c44f +c3818000 +6800c4c6 +c4038000 +20203402 +18002207 +20405c62 +6803c453 +e0a38000 +20600000 +18c22200 +6800c4c6 +c041db37 +1a220c00 +d8a0442a +20407ebf +20205b3d +1a220c00 +d8a0442a +20407ebf +7044bf02 +7044c108 +20600000 +6800c4c6 +c283db45 +2040739c +18002211 +20405c62 +58000003 +e0a08000 +20207497 +d8a0443a +2040630c +204071c5 +18002211 +20405c62 +58000003 +e0a08000 +20207201 +18c22200 +6800c4c6 +c283db61 +1a220c00 +20407394 +2022db75 +70047b04 +18002202 +20405c62 +58000005 +e0a08000 +6800847b +e0a08000 +18000e0a +20407f07 +7044c400 +700a9930 +20207d86 +70047b05 +20205b54 +d8a0042f +1a220c00 +20407ebf +6800c4c6 +c041db6c +2040714f +20405b7a +6800c4c6 +c1c10000 +700a993b +20207d86 +204071ba +d8a00af2 +20407201 +da200af2 +da40442a +df200010 +20407f88 +2422db53 +20205b7a +20407390 +700a9931 +20407d86 +70442901 +7044c405 +18002211 +20405c62 +58000004 +e0a08000 +d8c0443a +20207ebf +d8a0041f +20207ebf +18002211 +20405c62 +58000006 +e0a08000 +6800c4e9 +c280db8a +d8c04419 +20207ebf +d8c044ea +20207ebf +d8a044cb +1800720a +2040630d +1800220b +20405c62 +58000007 +e0a08000 +680144cb +e0a10000 +680444cd +e0a40000 +20600000 +18002211 +20405c62 +58000008 +e0a08000 +58000000 +e0a40000 +e0a40000 +20600000 +18002208 +20405c62 +58000009 +e0a08000 +6800c495 +e0a08000 +680344a0 +e0a30000 +20600000 +70047b08 +20205b54 +6800c458 +6808c458 +98417e00 +20600000 +d8a044d5 +20407ebf +20405bab +2fec0001 +2020dba9 +6800c092 +c1850000 +20405bb9 +24740000 +20203410 +20407fe9 +6800c48e +c1000000 +68008454 +2fe180c0 +20608000 +20207fe7 +20405bab +2fec0001 +2020dba9 +20600000 +20600000 +d8a009be +20407eb3 +7044bf02 +7044c101 +20600000 +d8a00a6e +20407ebf +7044c106 +7044bf02 +20600000 +18002241 +20405c62 +5800000c +e0a08000 +d8c045d2 +20207eb3 +20407166 +18002211 +20405c62 +5800000d +e0a08000 +20207201 +6800c4c4 +c17f8000 +d8400003 +98467c00 +24610000 +d8e0000a +20407f16 +247a0000 +20205ba9 +473c402f +6800c4c4 +c0005bef +c000dbf5 +c0015bef +c001dbf7 +c002dbfb +c003dc07 +c0045c09 +c004dc10 +20600000 +6800c4c5 +c1820000 +7044c5ff +7044c4ff +700a993f +20207d86 +7044c402 +20205b02 +7044c404 +58017700 +d8e0000a +20207f08 +6800c4c5 +c0025bfe +20600000 +7044c407 +700a9929 +20407d86 +20405b82 +6800c092 +c1850000 +20405bb9 +20740000 +20203410 +7044c408 +20205b8c +6800c452 +6808c459 +98417e00 +2fec0001 +2020dc12 +7044c409 +20205b98 +20405ba0 +20205c12 +18000e0a +20407f07 +7044c5ff +7044c4ff +700a993e +20207d86 +473cc02f +6800c4c6 +c4038000 +6800c4bf +c1810000 +7044bf00 +6800c4c1 +c000dc58 +c0015c5f +c001dc52 +c0035c39 +c003dc30 +c0045c26 +20600000 +6800c663 +1fe20e00 +1fe0fe01 +6000c663 +680244c7 +afefffff +58000080 +7920fe00 +6000c664 +20205c55 +6800c4c2 +7044c200 +c000dc35 +7044bf02 +20600000 +700a9931 +20407d86 +7044c405 +20205bd5 +680089b9 +c001dc3d +7044bf02 +20600000 +2040718d +6800c4c6 +c041dc41 +20405b18 +2040717a +da200af2 +da400a6e +df200010 +20407f88 +2022dc49 +70047b0b +20205b54 +20407595 +2422dc47 +70442901 +6800c4c6 +c040dc35 +c041dc35 +7044bf02 +7044c107 +20600000 +6800c4c6 +c041dc56 +70466400 +20205b3d +70466300 +20205b1b +7044bf02 +6800c4c3 +c001dc5c +20600000 +7044c102 +7009b900 +20207a99 +7044bf02 +7044c103 +20205bcf +18002406 +20205847 +680082db +c0005c7b +c000dc83 +c0015c8e +c001dcaa +c0025ce1 +c002dce6 +c0035cea +c003dcf5 +c0045c99 +c004dcf5 +c0055cef +c005dcf5 +c0065c9f +c006dcf5 +c0095ca6 +c009dcf5 +da200002 +da400007 +20405842 +680082db +e0a08000 +20600000 +e8c48000 +6004c3d3 +e8c10000 +6001045f +6800843f +79207e05 +6000843f +20600000 +e8c28000 +6002c3ce +e8c10000 +6001045f +68090459 +98467c00 +24215c8e +6800843f +79207e06 +6000843f +20600000 +58000014 +6001046d +600144ba +20600000 +da600013 +da200002 +da400002 +20405842 +1a627e00 +e0a08000 +20600000 +da200009 +da400009 +20405842 +58000001 +e0a40000 +20600000 +20748000 +da200006 +da40000c +20405842 +6802c510 +e0a28000 +20600000 +da400013 +20205ca8 +da200001 +20205842 +e8c40000 +600444cd +e8c10000 +600144cb +e8c40000 +600444aa +e8c20000 +60024411 +20405ccf +473d402f +6800c4c4 +c002dcbc +6800c4e9 +c280dcbf +6800c217 +245a67be +6800c429 +c0005cc4 +7044c501 +20405cdd +202073a2 +70442901 +d8c044ea +d8a04419 +20407ebf +20205cbc +473dc02f +7044c500 +7044c400 +700a9941 +20207d86 +da200002 +da40000d +20405842 +58000006 +e0a08000 +20600000 +d8a044b2 +18007208 +2040630d +d8a04415 +18007204 +2040630d +da20000d +da400004 +20405842 +680444b2 +e0a40000 +68024415 +e0a20000 +20600000 +da400005 +20205ca8 +da400006 +20205ca8 +e8c40000 +600444b2 +e8c20000 +60024415 +202073a2 +6800843f +79207e04 +6000843f +20600000 +20748000 +700a9932 +20407d86 +7044c504 +20205cdf +7044c502 +20405cf3 +700a9933 +20207d86 +da40000b +20205ca8 +20600000 +20758000 +473e402f +58000000 +60008048 +60008055 +60008078 +6000807c +6000c158 +600084d7 +6000816d +600089b5 +70455b00 +70022900 +7004d800 +7009b500 +7009b400 +7004d100 +20600000 +473ec02f +2054e2ff +2454e303 +204062bc +247a0000 +6800804c +c4030000 +793ffe06 +793f8001 +6000804c +68008551 +6808804c +2feffe00 +79208401 +6008804c +18410402 +6008807f +6808804c +1fe37e00 +6000807d +473f402f +6800807d +c03fdd66 +c001ddb1 +c0025dc2 +c01e5d59 +c002dd55 +c007dfa8 +c0085e24 +c011de42 +c01cdfc1 +c01c5fbc +c018de27 +c01bdeb0 +c013deac +c019dea9 +c012deae +c0135e3e +c003de36 +c016de2d +c0175e2e +c000dea5 +c0015e90 +c0145fb3 +c004de86 +c005de5f +c0045e43 +c0065e6a +c00fde3a +c0105e3c +c010deca +c0115eca +c01adecb +c01b5ecc +c0125eca +c01a5ecd +c00bded6 +c008def2 +c0095ef6 +c009def8 +c006df0a +c0075f0a +c017deaa +c0185f0a +c0055f0a +c00c5f0b +c0195f0a +c01edf10 +c01f5f51 +c01fdf4b +c0205f78 +c020df8a +c0035fa7 +c01d5d57 +70007e19 +70007c04 +20600000 +70007c06 +20600000 +70007c3b +20600000 +68020552 +1fe3fe00 +600240d2 +68008556 +6000c0d9 +68028557 +6002c0e7 +6802855c +e0a28000 +68008031 +79207e03 +60008031 +20600000 +473fc02f +68008552 +79207e07 +6000807d +c040dd88 +c0415d8d +c04adeb1 +c04b5eca +c045debf +c041dda5 +c0425da7 +c0485d7a +c04bdd9e +c04c5da3 +c04cdd7d +c04d5d80 +c1420000 +70007c82 +70007e19 +20600000 +70007c82 +70007e2e +20600000 +20405d82 +70007c9a +20600000 +20405d82 +20205d86 +d8a0465e +68018553 +e0a18000 +20600000 +2020f6d8 +20600000 +68008554 +79207e07 +600084c9 +c045dd92 +20600000 +68008554 +79207e07 +600084c9 +c045dd96 +20600000 +6800c15a +6808804c +7d3a0405 +6008804c +68008030 +c4028000 +793ffe05 +60008030 +680084d7 +247a0000 +70007c31 +20600000 +2434dda1 +70007c12 +202062eb +70007c97 +20600000 +204062eb +20205ffe +70007c84 +20600000 +68088555 +18410401 +600884d0 +6800c1ce +c0a8ddad +7041ce00 +68008055 +c18a8000 +70005504 +2020631b +47404030 +68008552 +600084c9 +c019ddd8 +c0045de7 +c007ddee +c0085df4 +c008ddf5 +c0095dfd +c00c5e13 +c00bde16 +c009ddcf +c01edf1e +c01f5f6a +c0205f20 +c020df3d +20600000 +4740c030 +68008552 +600084c9 +c000de0a +c019dde2 +c005ddfe +c0045e01 +c009ddd2 +c0205e0b +c020de0e +c00c5e11 +c00bde22 +20600000 +700a9920 +20407d86 +202021dc +700a9919 +20407d86 +70455b02 +58000050 +d8e00006 +20207f08 +680084d1 +79207e00 +600084d1 +700a9901 +20407d86 +70007c8b +68008055 +c082dd07 +70005506 +20600000 +7004ca0b +70007c07 +70005500 +2020dd07 +20600000 +6800c1bd +247a0000 +2040244f +20405ffc +20748000 +79200021 +20600000 +24748000 +70007c10 +6800804c +c4010000 +70007c12 +20600000 +20205ffe +20406059 +68008030 +c3820000 +70007c31 +68008055 +c1850000 +7000550b +20600000 +20600000 +70007c07 +7004ca13 +20600000 +68008553 +c0035e07 +c18c0000 +7004ca18 +70007c07 +20600000 +7004ca06 +70007c07 +20600000 +20600000 +7009ae00 +70007c07 +20205d07 +7009ae00 +70007c07 +20205d07 +700a9924 +20207d86 +700a9923 +20407d86 +202026e9 +700a9922 +20407d86 +58000000 +60010075 +680141e3 +1fe3fe00 +60010032 +6800c1e5 +60008073 +6800c1e7 +60008074 +202026c6 +700a9921 +20207d86 +68088552 +60088054 +20205e38 +680084d1 +79207e02 +600084d1 +c3818000 +70007c31 +20205d07 +20600000 +6800c0d0 +68088552 +98467c00 +20215e38 +70007c04 +70007e1f +70007d2e +20600000 +20406157 +20205e38 +70007c03 +20600000 +70007c21 +20600000 +70007c22 +20600000 +68008055 +c1098000 +70005502 +20600000 +20600000 +20405ff9 +7004d401 +700a990a +20407d86 +204062f3 +2420e001 +2434de4e +70007c04 +70007d08 +70007e23 +20600000 +6800804b +79207e02 +6000804b +20600000 +6808804c +7d3a0401 +6008804c +20600000 +6800807f +1fe37e00 +1fe17e01 +20600000 +6800c217 +207a0000 +680089b5 +205a67b2 +20600000 +20405e5a +20405e56 +600084d5 +20405ff9 +70007c0c +6800c1bd +247a0000 +68008030 +c3830000 +70007e06 +20205d53 +da200040 +20407288 +68020552 +680a0592 +98467c00 +2022de73 +70007c07 +7004ca05 +20600000 +20405e77 +6800c65a +203a5f3e +20600000 +20407386 +204021b2 +6800804b +2feffe01 +793ffe01 +6000804b +68008055 +c00cde81 +c00c5e81 +20600000 +680089b5 +c1800000 +6800804c +c3810000 +202063b1 +da200552 +da400582 +d8a00562 +20407352 +da200040 +20406311 +70007c0b +68008030 +c3035ffc +20600000 +6801015f +1fe0f3fd +68088552 +58000101 +98408a00 +d8c00554 +20407f01 +68088053 +68008553 +98467e00 +1fe67c0e +20215ea0 +1840fe0e +60008053 +70007c01 +20600000 +6800804c +79207e03 +6000804c +c2826006 +20600000 +68008552 +6000807d +70007c02 +20600000 +20205e38 +70007c30 +20600000 +70007c28 +20600000 +70007c26 +20600000 +20600000 +68010032 +98000400 +68008553 +60008095 +984f8400 +68010554 +1fe3fe00 +60010096 +68020556 +1fe3fe00 +60020091 +18427e00 +60010098 +20600000 +6808c15a +68008553 +9842fc00 +2422dd77 +2feffe00 +6800804c +7920fe05 +6000804c +70007c81 +70007d8b +20600000 +20600000 +20205e38 +20205e38 +68010552 +60010171 +20600000 +68010555 +6808c172 +984ffe00 +d8400640 +98467c00 +20600000 +68010557 +203a5ef0 +20405ed0 +20215ef0 +6800c092 +1fe67c0a +2042bcd5 +68008030 +c280def0 +68010553 +1fe3fe00 +60010075 +68010555 +1fe3fe00 +60010032 +68010557 +60008073 +98000400 +68010559 +60008074 +98467c00 +24215eed +60008073 +70007c03 +70007d17 +20600000 +70007e24 +20205d53 +20405e38 +20405ff9 +2040728b +202026b8 +20405e38 +202026c0 +68020552 +1fe3fe00 +2034df04 +6808c1bd +243a5f01 +70007c04 +70007d13 +70007e24 +20600000 +70007c34 +70005500 +202021d9 +204021d9 +79200022 +6800816d +793ffe02 +6000816d +20205e38 +20600000 +70007c03 +70007d18 +700a992e +20407d86 +202026e9 +68008552 +c080df1c +68008553 +c080df1c +68008554 +c0985f1c +204062fc +2020df19 +7009ae01 +70007c03 +70007d3d +20205d07 +70007e24 +20205d53 +70007c3e +20600000 +6800c662 +c000df27 +c0015f2b +204062fc +20608000 +7009ae08 +20600000 +20407962 +700a9935 +20407d86 +20205f23 +204062fc +20608000 +6800c663 +c009df3b +1fe0fe01 +6000c663 +7009b001 +7009ae04 +6800c663 +1fe20e00 +6803468a +afefffff +58000080 +7920fe00 +6000c664 +20600000 +7009ae08 +20600000 +20405f43 +6800c665 +207a0000 +70466500 +700a9938 +20207d86 +204062fc +2440f965 +2040f975 +204062fc +20608000 +7009ae0c +7009b001 +20600000 +d8a00a6e +d8c00552 +20407ebf +6800c662 +c1010000 +202076d8 +680089af +c003df55 +680089ae +c080df68 +680089b7 +1fe60a20 +24215f68 +d8a009c6 +98a08a00 +68040552 +e0a40000 +6804055a +e0a40000 +680089b7 +1fe0fe10 +600089b7 +c0985e38 +204062fc +2020de38 +7009b801 +7009ae02 +7009b001 +20205e38 +70007e24 +20205d53 +680089b6 +c0185f6e +70007c3e +20205d07 +204062fc +2020df77 +6800c662 +c0015f75 +7009b001 +7009ae04 +20205d07 +700a9936 +20207d86 +20205d07 +680089af +c003df7c +680089ae +c0835f88 +d8a00a2e +68040552 +e0a40000 +6804055a +e0a40000 +204062fc +2020df86 +7009ae07 +7009b001 +20205e38 +7009af04 +202076d8 +70007e24 +20205d53 +680089af +c005df8e +680089ae +c0845f9d +d8a00a5e +d8c00552 +20407ebf +204062fc +2020df9a +6800c662 +c000df9f +70466100 +7009ae09 +7009b001 +70007d41 +20205d07 +7009af09 +7009b101 +20205d07 +70007e24 +20205d53 +6800c661 +c283dfa4 +79207e06 +6000c661 +20600000 +c2805f95 +70466100 +20205f9d +20205d07 +6800816d +793ffe01 +6000816d +20405e38 +24748000 +68008552 +6808804b +793a0404 +7d3a0405 +6008804b +20600000 +680c0552 +68008055 +c1818000 +6800816d +c3025fba +70005514 +20600000 +70005504 +20600000 +6800817f +6000815b +70007c03 +70007d38 +20600000 +70007c03 +70007d39 +18007209 +d8c00552 +d8a00152 +e8c08000 +1fe2fe55 +e0a08000 +c2005fc6 +68008152 +68088151 +793f8407 +793f8404 +c07fdfda +c0005ff3 +c002dfe7 +c003dfe6 +c0035fe7 +c0045fe6 +c000dfdf +c0015fdf +c001dfdf +c004dfdf +c0025fdf +20600000 +68008151 +79207e03 +79207e02 +60008151 +20600000 +79200404 +70018005 +68010159 +98007200 +6001015f +d8a00551 +20407f73 +79200407 +79200402 +18007e00 +6000800b +600100fa +600100fc +600100f8 +600100f6 +68008153 +2fe1fe00 +79208406 +60088151 +20600000 +793f8011 +70015100 +6800817f +793ffe06 +6000817f +20600000 +d8c00552 +d8a00562 +20207ebf +70007c09 +20600000 +24748000 +70007c11 +20600000 +da2040a0 +20407255 +70007c03 +70007d08 +20600000 +7000720a +70007c07 +7004ca16 +20600000 +47414030 +78547c00 +204062c1 +68008048 +207a0000 +c283e03f +c000e16f +c00160e4 +c001e04a +c0026060 +c013e1db +c0146108 +c01860f4 +c012e1d6 +c0136103 +c018e1c3 +c01be16a +c019e15c +c0046259 +c004e24f +c005e264 +c006626d +c007e162 +c0086292 +c008e288 +c003e152 +c015617e +c005617f +c00fe1bc +c00360f9 +c010e15f +c016e1b2 +c01761b7 +c011615f +c01a6180 +c009e195 +c00be1a4 +c009628f +c017e1aa +c00c61af +c01ee1ff +c01f620b +c01fe21d +c0206227 +c020e23c +c011e24b +c01de246 +c002e24c +c014e24d +c01c624e +c01ce175 +20202a8c +20600000 +c040e06d +c0426099 +c0416076 +c041e10d +c045e118 +c04be14e +c04ce0d5 +c04d60a4 +c04ae0da +c04b60db +20202a8c +18007e02 +20406298 +68008049 +e0a08000 +204062a7 +4741c030 +68008049 +c0046080 +c007e084 +c008608f +c00be05f +c019e092 +c020e098 +c008e059 +20600000 +68008055 +207a0000 +7000551b +5800000c +d8e00007 +20207f08 +202026c6 +18007e03 +20406298 +68008049 +c005e068 +e0a08000 +6800804a +e0a08000 +202062a7 +e0a08000 +6800804a +e0a08000 +d84004d5 +202062e2 +18000e04 +204062a0 +5800007f +e0a08000 +68008049 +793ffe07 +e0a08000 +68008049 +202062a7 +18000e05 +204062a0 +5800007f +e0a08000 +68008049 +793ffe07 +e0a08000 +6800804a +e0a08000 +202062a7 +2040244f +204062f3 +20608000 +20205ffc +6800804b +c282e08b +c4020000 +70007c12 +793ffe04 +204062eb +2020608d +70007c10 +793ffe05 +6000804b +20600000 +204062fc +2020dffe +20600000 +70007c8b +680084d1 +79207e00 +600084d1 +700a9901 +20207d86 +20600000 +18000e0c +204062a0 +58000001 +e0a08000 +680104ce +e0a10000 +58000000 +e0a18000 +58000000 +e0a20000 +202062b0 +18000e05 +204062a0 +6801c65b +e0a18000 +204062b0 +70466501 +6800c65b +c000e0b5 +c00160af +c001e0bb +20600000 +6800c65e +c00060c7 +c000e0c7 +c00160c7 +c001e0c1 +20600000 +6800c65e +c00060c1 +c000e0c5 +c00160c7 +c001e0c1 +20600000 +6800c65e +c00060c1 +c000e0c1 +c00160c1 +c001e0c1 +20600000 +70466203 +6800c55c +c28033e9 +20600000 +70466201 +20600000 +70466202 +20600000 +d8e00000 +202060cd +d8e00000 +202060d1 +6800c55c +f9207e00 +6000c55c +20600000 +6800c55c +f93ffe00 +6000c55c +20600000 +18000e05 +204062a0 +6801c65b +e0a18000 +202062b2 +20600000 +18000e09 +204062a0 +68008095 +e0a08000 +68010096 +e0a10000 +68020091 +e0a20000 +202062b0 +18007e11 +20406298 +68008049 +1fe20400 +c00060ec +c00760ec +c00e60ec +20600000 +e0a08000 +6800c515 +e0a08000 +df20000e +58004516 +98408c00 +20407f01 +202062b0 +18007e03 +20406298 +58000114 +e0a10000 +202062b0 +18007e03 +20406298 +68020165 +9c467e00 +2034e0ff +1fe67e00 +1feb7e00 +793ffe0f +e0a10000 +202062b0 +18007e06 +20406298 +6802c510 +e0a28000 +202062b0 +18007e09 +20406298 +68044098 +e0a40000 +202062b0 +18000e0c +204062a0 +58000001 +e0a08000 +680104ce +e0a10000 +58000000 +e0a18000 +58000000 +e0a20000 +202062b2 +18000e03 +204062a0 +6800c15a +e0a08000 +78547c00 +204062b2 +24740000 +24748000 +6800c0d8 +c4000000 +20406132 +2020613c +47424030 +6800c09e +79207e03 +6000c09e +58000101 +600104ce +20600000 +4742c030 +6800c09e +793ffe03 +6000c09e +58000000 +600104ce +20600000 +7040d803 +58000000 +60024142 +d8a040da +20406140 +d8a040e7 +20406140 +d8a04146 +20406140 +20206147 +d8a040e7 +20406140 +20406147 +2020614a +58ffffff +e0a18000 +e0a18000 +e0a18000 +5800007f +e0a08000 +20600000 +58000000 +600140d6 +20600000 +6800c0d8 +79207e02 +6000c0d8 +20600000 +18000e02 +204062a0 +2434e2b0 +202062b2 +18007e02 +20406298 +680084ca +e0a08000 +204062b2 +6800804b +79207e03 +6000804b +70007232 +20600000 +18007e01 +20406298 +202062b2 +18007e01 +20406298 +202062b0 +18007e02 +20406298 +6800804c +2fec0002 +7920fe00 +1fe17e01 +e0a08000 +202062b2 +18007e03 +20406298 +68010051 +e0a10000 +202062b2 +700072fa +18007e02 +20406298 +68008053 +e0a08000 +202062b2 +18007e0a +20406298 +d8c00152 +18007209 +e8c08000 +1fe2fe55 +e0a08000 +c2006179 +202062b2 +202062b2 +202062b2 +20748000 +2040282d +18007e09 +20406298 +68010171 +e0a10000 +6801c0a0 +e0a18000 +6800c0a3 +e0a08000 +680140a4 +e0a10000 +c581e191 +793f8003 +204062b2 +70007c13 +20600000 +204062b0 +70007c03 +70007d13 +20600000 +d8400200 +2034e199 +1d027e00 +2020619a +1c427e00 +1c227e00 +9840fe00 +1fe17ffc +60020034 +18007e05 +20406298 +68020034 +1fe37e00 +e0a20000 +202062b2 +18007e0a +20406298 +d8c004d9 +e8c48000 +e0a48000 +202062b2 +18007e03 +20406298 +58000114 +e0a10000 +202062b2 +18007e01 +20406298 +202062b2 +18007e02 +20406298 +6800c0d0 +e0a08000 +202062b2 +18007e02 +20406298 +58000005 +e0a08000 +202062b2 +18007e02 +20406298 +58000000 +e0a08000 +202062b2 +70007c2e +20600000 +6800c092 +1fe67c0a +2042e1c1 +68008030 +79207e04 +60008030 +1c427e00 +600204e9 +680084d1 +c281e1d4 +79207e03 +600084d1 +700a9905 +20407d86 +18007e01 +20406298 +202062b2 +70004800 +20600000 +18007e06 +20406298 +6802c510 +e0a28000 +202062b2 +18007e09 +20406298 +68044098 +e0a40000 +202062b2 +7009b101 +6800c5b1 +c1808000 +7009af13 +20600000 +204062ef +70007c99 +7009af03 +20600000 +204062ef +70007c3d +7009af07 +20600000 +da200a4e +da400a6e +df200010 +20407f88 +2022e1f7 +7009af00 +204076da +70007e24 +70007d40 +20205d53 +7009af0a +204076d8 +70007d40 +20205e38 +70007c40 +20600000 +70007c3d +20600000 +7009b600 +18007e04 +20406298 +18007e01 +e0a08000 +18007e01 +e0a08000 +18007e30 +e0a08000 +204062fc +2020e2b2 +202062b0 +18007e11 +20406298 +680089b6 +d8c0462a +98c08c00 +e8c40000 +e0a40000 +e8c40000 +e0a40000 +680089b6 +1fe0fe10 +600089b6 +204062fc +2020e2b2 +202062b0 +7009ae06 +70007c3f +20600000 +18007e11 +20406298 +d8c00a4e +e8c40000 +e0a40000 +e8c40000 +e0a40000 +202062b0 +70007c40 +20600000 +204062fc +2040f612 +18007e11 +20406298 +d8c00a1e +e8c40000 +e0a40000 +e8c40000 +e0a40000 +204062fc +2420e2b0 +2020e2b2 +7009af0f +204062ef +70007c0b +20406307 +2020f64e +20207658 +204062eb +70007c41 +20600000 +18007e11 +20406298 +d8c00a4e +e8c40000 +e0a40000 +e8c40000 +e0a40000 +204062fc +2420e2b0 +2020e2b2 +18007e03 +20406298 +5800fffe +e0a10000 +202062b0 +202062b2 +202062b2 +202062b2 +202062b2 +2040630b +da2040a0 +20406311 +18007e11 +20406298 +da200582 +da400562 +20407352 +2434e2a7 +202062ad +2040630b +da200040 +20407255 +18007e11 +20406298 +d8c00562 +20407ebf +68008055 +c00ce2b2 +c00c62b2 +202062ad +680089b5 +203a626a +204062fc +2040e2ef +2440e2eb +2020626b +204062ef +2040630b +2020625c +da2040a0 +20407288 +18007e05 +20406298 +68020592 +e0a20000 +d84004d5 +204062e2 +20407386 +204062fc +2020e27c +7004d801 +680089b5 +207a0000 +70007c0b +6800c1bd +207a0000 +204062fc +2420e284 +680084d7 +207a0000 +70007c0f +20600000 +c6908000 +793f8021 +70007c0f +20600000 +2040630b +2040728b +18007e11 +20406298 +d8c00562 +20407ebf +202062ad +18007e01 +20406298 +202062ad +18007e02 +20406298 +18007e10 +e0a08000 +60008054 +202062ad +1fe9fe00 +1fe1fe07 +600084b6 +df200011 +d8a004b8 +20407ed4 +d8a004b8 +20600000 +1fe1227f +7000487f +18e27e00 +20406298 +1a227e00 +e0a08000 +20600000 +68008048 +1fe3fe00 +6808804c +284ffe01 +7920fe00 +202062b7 +6808804c +18410401 +202062b3 +18000400 +202062b3 +18000401 +68008048 +1fe3fe00 +7934fe00 +9842fe00 +600084b7 +70004800 +204062c7 +78347c00 +20600000 +6800807c +207a0000 +204062c1 +6800807c +20600000 +47434030 +68008048 +203a62c7 +68008078 +247a0000 +202062d1 +68008078 +203a62d7 +68018078 +60018048 +6808807b +6800804c +793ffe01 +9841fe00 +6000804c +70007800 +6800807c +207a0000 +6802007c +60020078 +70007c00 +20600000 +6800807c +207a0000 +6801807c +60018048 +6808807f +6800804c +793ffe01 +9841fe00 +6000804c +70007c00 +20600000 +4743c030 +6800804c +1fe22600 +e8408000 +20405e52 +204062a7 +1a627e00 +6000804c +20600000 +6808804c +793f8400 +6008804c +20600000 +6808804c +79200400 +6008804c +20600000 +7d34fe01 +6808804c +9842fe00 +2feffe01 +20600000 +6800804c +7934fe01 +6000804c +20600000 +680089b4 +2fe0fe01 +20600000 +680089b4 +79207e07 +600089b4 +20600000 +680089b4 +793ffe07 +600089b4 +20600000 +680089b4 +2feffe07 +600089b4 +20600000 +d8a00562 +18007210 +180a7e00 +e0a08000 +c200630d +20600000 +20407259 +da2041be +da400592 +ea240000 +68088030 +7d3a0406 +60088030 +1a220a00 +20407352 +202021c4 +47444031 +204062bc +247a0000 +68008055 +207a0000 +c002636f +c002e374 +c0016366 +c001e37c +c0076369 +c0036398 +c003e3b0 +c004e3b1 +c00563ba +c005e3be +c0066386 +c006e389 +c007e38f +c0096359 +c009e37c +c008635c +c00a6356 +c00ae37c +c00b6350 +c00c6355 +c00be349 +c00ce34f +c00d633a +c00de344 +70005500 +20600000 +680084d1 +c4010000 +c4018000 +70005500 +20406340 +20206cef +6800816d +c4008000 +7000550a +20600000 +d8e00007 +20407f16 +247a0000 +7000551a +20600000 +6800816d +793ffe00 +6000816d +70005519 +70007c0b +20600000 +20600000 +680084d4 +c1810000 +204063c0 +70005518 +20600000 +20600000 +70005515 +70007c83 +20600000 +70005513 +70007c25 +20600000 +6800c55b +c1000000 +c000e364 +d8e00006 +20407f16 +247a0000 +70455b00 +2020637d +20748000 +20206398 +70005503 +70007c27 +20600000 +70007c13 +79200003 +70005505 +580001ff +600104d2 +20600000 +70005505 +7004d2ff +793f8022 +70007c33 +20205d04 +c6110000 +680104d2 +1fe67e01 +2022e37a +600104d2 +20600000 +7000550e +20600000 +20600000 +680084d1 +c4018000 +c4010000 +6800816d +793ffe02 +6000816d +70007c13 +70005510 +20600000 +7000550d +70007c31 +20600000 +680084d1 +c4010000 +70005500 +20600000 +70005506 +20600000 +680084d2 +1fe0ffff +203a6394 +600084d2 +20600000 +70007c07 +7004ca16 +70005500 +20600000 +6800816d +c281637d +c280639d +7000551a +20600000 +6800c1bd +203a63a9 +680084d1 +c4018000 +c4010000 +680204e9 +d8400064 +98408400 +1c427e00 +98467c00 +24610000 +20206349 +70005516 +70468904 +58003030 +6001468a +e0a10000 +7004d402 +20206350 +20600000 +6800816d +c280e3b5 +7000551a +20600000 +6800816d +793ffe01 +6000816d +70007c0f +20600000 +680084d8 +207a0000 +70005500 +202063b5 +7000550c +20600000 +6800804b +c28163c5 +204062ef +70007c08 +20204d04 +6800804b +793ffe02 +6000804b +20406001 +204062f8 +20204d04 +58000004 +6000c689 +58003030 +e0a10000 +e0a10000 +20600000 +47464031 +68108073 +d8400006 +9841fe00 +60108073 +68108077 +9841fe00 +60108077 +204063ee +68108077 +793ffe01 +793ffe02 +60108077 +2000001e +202063f2 +68108073 +d84000c0 +9841fe00 +60108073 +68108077 +9841fe00 +60108077 +204063ee +68108077 +793ffe06 +793ffe07 +60108077 +2000001e +202063f6 +68108081 +1fe17efc +60108081 +20600000 +68108081 +1fe1fe01 +60108081 +20600000 +68108081 +1fe1fe03 +793ffe04 +60108081 +20600000 +1fe22400 +2040640f +20000064 +1a427e00 +20406414 +1fe22400 +20406411 +20000064 +1a427e00 +20600000 +1fe22400 +2040640f +20000064 +1a427e00 +20406413 +20406411 +20000064 +20600000 +6808c214 +2020680e +6808c214 +20206829 +6808c214 +20206825 +202064ec +202064f3 +24346419 +68108085 +1fe1fe02 +60108085 +18427c00 +2022e41c +1a627a00 +2fcc0000 +202064b9 +18000404 +da2001fe +68108085 +1fe17efd +60108085 +20406419 +da2055aa +680101fe +e8c90000 +9a267c00 +20600000 +d8400002 +da200204 +20406419 +68010204 +600101f7 +20546430 +20600000 +d8400010 +da200206 +68108085 +1fe17efd +60108085 +20406419 +d8c00206 +df200010 +20407478 +20407428 +20407491 +20207422 +7856fc00 +2040641e +24628000 +7836fc00 +70802380 +70802200 +70802400 +da208025 +20406415 +70802300 +d8400006 +2040641f +24628000 +e8c10000 +98002200 +20406419 +20206446 +20407f99 +58001000 +600101f7 +da6065e5 +df200002 +2040641e +24628000 +680101f7 +1ff0fe00 +9840fe00 +1ff0fe00 +600101f7 +c2006452 +20206446 +20407f99 +78547c00 +2040666a +58000000 +da2001f3 +d8400002 +204066b3 +680101f3 +c303e46e +70805025 +580007f0 +da200206 +d8400010 +204066b3 +70800608 +7920002b +d8c00206 +20407484 +78347c00 +7041da00 +204064b0 +680101f3 +1ff0fe00 +d84007ff +98417e00 +2022e47b +2040666f +da6066b8 +20546430 +2040643c +680081f2 +c300646f +2040666d +7041da00 +204064b0 +204065c2 +680081f3 +c283648e +204064aa +2436e486 +680081f2 +c300647d +2020649b +204065bf +680081f3 +c283648e +204064aa +2436e48e +680081f2 +c300647d +2020649b +7041da00 +204064b0 +680081f3 +c282e49b +58000000 +600181f6 +20406502 +da606578 +20406429 +2040643c +2436e49b +680081f2 +c300648f +c515e49d +204064a3 +680081f3 +c30264a3 +70805021 +20404c0e +20404c2e +202064a1 +58000000 +60040206 +6004020e +18007004 +20407492 +70805021 +20600000 +58000000 +600101f7 +da6065e5 +204065a3 +20406429 +2020643c +6800c1da +1fe0fe01 +1fe67c03 +242164b6 +6000c1da +20600000 +204064a3 +20407fa1 +20600000 +680081f2 +1fe3fe00 +7920fe00 +2a2c000f +20608000 +600081f2 +20600000 +68108085 +c4008000 +202064c6 +6810812c +afefffff +20608000 +68108108 +c300e4c3 +20407422 +202064c3 +68014199 +207a0000 +70802380 +70802200 +70802400 +6809419b +184bf200 +98000c00 +e8c08000 +60108025 +c20064d2 +70802300 +20600000 +4746c031 +204064dd +202063f2 +204064dd +204063ee +202063f6 +6800c212 +60108086 +6800c213 +60108087 +580001f5 +6011008a +580001fa +6011008c +202063ee +68108086 +79207e07 +60108086 +793ffe07 +60108086 +20600000 +79207e07 +600101f5 +47474031 +70808802 +70808e00 +70800602 +202064fc +18000401 +600081f5 +4747c031 +70808801 +6019008e +70800602 +204064fc +680081fa +20600000 +680140d6 +1fe0fe01 +600140d6 +6810812c +c301e4fc +20600000 +70808640 +70808700 +68108081 +793ffe00 +79207e01 +60108081 +58000000 +600201f5 +20600000 +58000000 +6011008e +58000001 +60110088 +580001f5 +6011008a +7001f506 +70800602 +202064fc +78547c00 +1fe22400 +6800c239 +c1800000 +78347c00 +1a427e00 +20206522 +6800c239 +c000e522 +c0016528 +c001e530 +c0026537 +c002e53d +20600000 +6001c232 +1a227e00 +60014235 +60094237 +70423902 +20206502 +20406502 +70423903 +2040650b +da2001f5 +6801c232 +70808804 +d8400020 +20206556 +20406502 +2040650b +58000005 +204064f3 +c3800000 +70423904 +20600000 +20406502 +70423905 +2040650b +2040654a +20406552 +20206545 +20406502 +2040650b +58000005 +204064f3 +c3800000 +70423900 +68014201 +20207f9c +68020aa2 +68094235 +184085fc +e0420000 +20600000 +68094235 +18422200 +184085fc +e8420000 +60020aa2 +68094237 +6801c232 +20600000 +18408404 +60190088 +d8400002 +1a20a3fc +e2288000 +1ff10400 +e0a88000 +1fec8400 +e0a88000 +e0a08000 +1a227e00 +6011008a +58000000 +6011008e +70800602 +202064fc +6019008e +1ff10400 +600881f6 +1fec8400 +600881f7 +600081f8 +58000004 +60110088 +7001f503 +580001f5 +6011008a +1a227e00 +6011008c +68108086 +2a2c000f +7920fe06 +60108086 +70800602 +6810812c +c283e574 +d8e00003 +202064fc +6019008e +58000004 +60110088 +7001f503 +580001f5 +6011008a +1a227e00 +6011008c +68108086 +2a2c000f +7920fe06 +60108086 +70800602 +6810812c +c283e585 +d8e00003 +204064c0 +204064fc +2feffe02 +204064b9 +680081f6 +1ff02400 +680081f7 +1fed7e00 +9a41a400 +680081f8 +9a41fe00 +9840fe00 +600081f8 +1fecfe00 +600081f7 +1fecfe00 +600081f6 +20600000 +70801001 +20600000 +7080910c +7080920d +7080930d +7080940d +7080950d +7080960c +202065a9 +70809105 +70809207 +70809307 +70809407 +70809507 +70809605 +6810807b +1fe1fec0 +6010807b +68108081 +1fe1fe10 +60108081 +20600000 +6810812c +c302e5b0 +20600000 +60110098 +1a227e00 +6011009a +1a427e00 +6011009c +18427e00 +6011009e +d8400001 +7d3a0401 +60108090 +70800604 +202065b0 +79200028 +70421108 +20600000 +793f8028 +70421120 +20600000 +6800c203 +9a40fe00 +600081f7 +202065cc +680101f7 +1ff0fe00 +600081f7 +58000003 +60110098 +7001f6a0 +7001f8a1 +202065eb +60090aa2 +204065d6 +68090aa2 +20406606 +202065dd +6800c23a +c17f8000 +c30365db +580249f0 +20402a8f +6808c23a +20206829 +6808c23a +20206825 +47484032 +c51465c5 +68014203 +9a40fe00 +1ff0fe00 +600101f7 +4748c032 +c51465c9 +58000004 +60110098 +7001f6a0 +7001f9a1 +580001f6 +6011009a +6019009e +1a227e00 +6011009c +58000002 +2a2c000f +7920fe00 +60108090 +70800604 +d8e00005 +204064c0 +204065b0 +2feffe04 +204064b9 +c5146601 +680101f7 +1ff0fe00 +9840fe00 +1ff0fe00 +600101f7 +20600000 +680081f7 +9840fe00 +1ff0fe00 +600101f7 +20600000 +68014203 +9a40fe00 +60010a9a +47494032 +60090aa2 +1a227e00 +60010ab9 +2040661d +68090ab2 +68010ab9 +1fe22200 +68010a9a +2040663d +68010ab2 +68090ab9 +98408400 +60090ab9 +68090a9a +98408400 +60090a9a +68010aa2 +243a660d +20600000 +4749c032 +6800c211 +1fe0ffff +68090a9a +9841fe00 +1fe0fe01 +60018ab6 +68010aa2 +9840fe00 +68098ab6 +98467e00 +2421662f +60010aa2 +68018ab6 +68090a9a +98467e00 +60010ab2 +20600000 +68010aa2 +60010ab2 +58000000 +60010aa2 +20600000 +18408402 +60190098 +1a20a3fe +ea298000 +18422400 +d84000a0 +e2288000 +e0a08000 +2020664a +1fe22400 +474a4032 +c5146634 +1a427e00 +18408403 +60190098 +1a20a3fd +ea298000 +18422400 +d84000a0 +e2288000 +1ff0fe00 +e0a10000 +1a227e00 +6011009a +58000000 +6011009e +70809001 +70800604 +204065b0 +1a427e00 +e2218000 +474ac032 +7001f900 +58000001 +60110098 +7001f6a0 +580001f6 +6011009a +58000000 +6011009e +6011009c +58000003 +60108090 +70800604 +204065b0 +6810812c +c4030000 +200005dc +680081f9 +1fe0fe01 +600081f9 +1fe67c28 +24610000 +20206655 +70897370 +20000bb8 +20600000 +70897330 +20600000 +1fe9fe00 +60110045 +70804b00 +20600000 +2040666f +204066a0 +ea288000 +1a20a201 +18000e00 +a84c0000 +2020e697 +68108046 +79207e06 +79207e07 +60108046 +70804702 +70804782 +793ffe07 +60108046 +7080478a +2000000b +708047ca +20000021 +7080474a +2000002c +708047ca +20000016 +7080478a +20000021 +70804782 +20000001 +70804792 +2000000a +708047b2 +68108007 +70804792 +20000001 +70804782 +afec0000 +2020e678 +68110045 +1fe0fe01 +60110045 +18e08e01 +28e01e08 +2420e678 +c2006675 +70804783 +20600000 +70804782 +2000000c +70804780 +70804782 +20000096 +20600000 +204066a0 +708047a2 +1a227e00 +60110048 +7920040b +2fec000f +7920840f +6019004a +70800601 +20600000 +6810812c +c300e6b0 +20600000 +2040666f +204066a6 +204066b0 +70804783 +20600000 +68110124 +60110045 +204066a6 +d8e00001 +204064c0 +204066b0 +2feffe00 +204064b9 +70804783 +20600000 +6811005e +98001400 +20600000 +19427e00 +6011005e +20600000 +18627e00 +60110058 +20600000 +68110058 +1fe20600 +20600000 +68014243 +60110052 +20600000 +1f227e00 +207a0000 +1f20f3f8 +204166de +20628000 +202166d3 +1f20f208 +1f20f3fc +204166e1 +20628000 +202166d8 +1f20f204 +202066e4 +e8c40000 +e1440000 +20600000 +e8c20000 +e1420000 +20600000 +1f227e00 +207a0000 +e8c08000 +e1408000 +c20066e6 +20600000 +1f227e00 +207a0000 +1f20f3f8 +204166f7 +20628000 +202166ec +1f20f208 +1f20f3fc +204166fa +20628000 +202166f1 +1f20f204 +202066fd +e8640000 +e0a40000 +20600000 +e8620000 +e0a20000 +20600000 +1f227e00 +207a0000 +e8608000 +e0a08000 +c20066ff +20600000 +1f227e00 +207a0000 +e8608000 +e1408000 +c2006705 +20600000 +700a993d +20207d86 +474b4032 +6800c217 +207a0000 +204067a3 +2042e7a9 +2040673e +6800c217 +1fe22600 +68094215 +6009018c +1a627e00 +203a6709 +1a60a7ff +18422200 +ea208000 +68088184 +98467c00 +2042e725 +20216721 +ea208000 +1fe0fe01 +e2208000 +6809018c +18408422 +6009018c +20206715 +58000000 +e2208000 +68008185 +e0a08000 +c099e733 +da4041be +e8c30000 +e0a40000 +58000000 +e0a40000 +1a420c00 +20407ebf +18007c01 +20600000 +c01b6737 +c01be73b +da404419 +2020672b +d8c044d5 +20407ebf +d8c04419 +20206730 +d8c044cd +20407ebf +20206739 +20407fe9 +6800c217 +207a0000 +68014682 +c2806754 +474bc032 +6800c48e +c000674d +68008454 +2fe180c0 +2020e74d +2fe18040 +2020e752 +2fe18000 +2020e750 +70018535 +6803044f +20206757 +70018537 +20206757 +70018536 +20206757 +474c4033 +70018533 +68030040 +60030186 +68014215 +efe88000 +1fe0fe01 +6001018c +60088184 +6800c217 +1fe22600 +6801018c +1fe22200 +2040676f +20740000 +6809018c +18408422 +6009018c +184085ff +e8408000 +60008184 +1a60a7ff +2422e75f +6800c217 +1fe0ffff +60008184 +20600000 +68008185 +c099e776 +da400185 +df200007 +20407f88 +2022ffe7 +20600000 +c01b6779 +c01be794 +20206771 +ea288000 +98467c00 +24628000 +d8a00ac2 +df200010 +20407ed4 +68018452 +60018ac2 +2040678b +68010adf +1ff0fe00 +1fed0400 +e8c08000 +9840fe00 +6809844f +98467c00 +2022ffe7 +20600000 +d8c00ac2 +20407486 +ea208000 +20407487 +18006c38 +18006c00 +2040741d +d8a00ad2 +20207497 +ea288000 +98467c00 +24628000 +18c22200 +18c0a608 +da4044cd +df200008 +20407f88 +2022ffe7 +1a622200 +da4044d5 +df200008 +20407f88 +2022ffe7 +20600000 +68014215 +efe88000 +1fe0fe22 +efe08000 +98467c00 +20600000 +6800c217 +1fe27200 +68094215 +58000000 +e0408000 +18408422 +1fe0fe01 +c20067ad +20600000 +474cc033 +2040673e +68008030 +79347e06 +60008030 +243467bc +1a208c0a +d8a041be +20407ebf +202067d7 +7041bd00 +20600000 +6804c4cb +203a67ca +2040673e +243467ca +6801018c +1fe08c01 +d8a044d5 +20407ebf +d8a04419 +20407ebf +70442901 +20600000 +70442900 +20600000 +6803044f +60030186 +70018534 +202067d3 +68030040 +60030186 +70018533 +6800c092 +c005670b +c28342da +20600000 +680441be +680c41c6 +9841fe00 +207a0000 +7041bd01 +20600000 +474d4033 +79200407 +2040681d +7d208407 +474dc033 +18467cff +20628000 +284c0007 +18410e1f +680200a1 +f920fe00 +600200a1 +680200a5 +fd20fe00 +600200a5 +20600000 +474e4033 +18467cff +20628000 +284c0007 +18410e1f +680200a1 +f93ffe00 +600200a1 +680200a5 +f93ffe00 +600200a5 +20600000 +204067ed +202067fe +18467cff +20628000 +2455e7e1 +d8a0807c +20406830 +79400407 +d8a08078 +20406830 +793f8407 +d8a08070 +20206830 +d8a0807c +20406830 +793f8407 +d8a08078 +20406830 +793f8407 +d8a08070 +20206830 +18467cff +20628000 +79400407 +2040682f +79200407 +d8a08070 +20206830 +18410e07 +18497e00 +1fe17e03 +98a08a00 +e8a08000 +20600000 +d8a08074 +2020681e +d8a0811c +20406815 +284ffe07 +2020e823 +afec0000 +20600000 +afefffff +20600000 +18467cff +20628000 +2fcffe07 +2020682c +18467cff +20628000 +2fcc0007 +58000000 +7d20fe07 +98428400 +d8a08074 +20406815 +284ffe07 +f920fe00 +e0a08000 +20600000 +da3fffff +68108081 +2fe00602 +2040e878 +2fe00601 +2040e87a +2fe00603 +2040e87a +2feffe02 +2040e874 +2feffe03 +2040e876 +2feffe04 +2040e87c +2feffe06 +7d20a204 +2feffe07 +7d20a205 +68108082 +2feffe00 +7d20a21b +2feffe01 +7d20a21c +2feffe02 +7d20a203 +2feffe03 +7d20a208 +2feffe04 +7d20a214 +2feffe05 +7d20a215 +2feffe06 +7d20a216 +2feffe07 +7d20a217 +68108080 +2feffe00 +7d20a205 +2feffe01 +7d20a206 +2feffe02 +7d20a207 +2feffe03 +7d20a212 +2feffe04 +7d20a213 +2feffe05 +7d20a214 +2feffe06 +7d20a215 +2feffe07 +7d20a216 +68108062 +2feffe04 +2040e87e +474ec033 +68120078 +681a007c +9841fe00 +1fe47e00 +9a217e00 +60120070 +20600000 +d8e00006 +20206884 +d8e00009 +20206882 +d8e00017 +20206882 +d8e00019 +20206884 +d8e0001e +20206884 +d8e00002 +20206884 +df200001 +20206885 +df200004 +20206885 +df200002 +f93fa200 +18e08e01 +c2006885 +20600000 +20406895 +d8400006 +2020680e +20406889 +d8400006 +20206825 +20406895 +68108078 +79207e07 +60108078 +d8400007 +202067fb +68108081 +1fe17efb +60108081 +20600000 +68108081 +2feffe02 +20600000 +2040666a +580007e0 +da204150 +d8400002 +204066b3 +2020666d +2040666a +580007e2 +da20421d +d840000e +204066b3 +2020666d +474f4033 +204068a2 +6800c22d +c00068af +c000e8c3 +c00168d7 +20600000 +68094229 +5800aa55 +98467c00 +2022e8b8 +58004dfa +60014227 +58004894 +60014221 +202068c0 +68014227 +243a68bc +58004dfa +60014227 +68014221 +243a68c0 +58004894 +60014221 +58000064 +6001422b +20600000 +68094229 +5800aa55 +98467c00 +2022e8cc +58005932 +60014225 +58004323 +6001421f +202068d4 +68014225 +243a68d0 +58005932 +60014225 +6801421f +243a68d4 +58004323 +6001421f +58000190 +6001422b +20600000 +68094229 +5800aa55 +98467c00 +2022e8e0 +58006946 +60014223 +58005377 +6001421d +202068e8 +68014223 +243a68e4 +58006946 +60014223 +6801421d +243a68e8 +58005377 +6001421d +58000032 +6001422b +20600000 +6800c22d +c00068f0 +c000e8f2 +c00168f4 +20600000 +708971bf +202068f8 +708971af +202068f8 +7089718f +6800c22e +60108973 +202068f8 +474fc033 +68108053 +79207e07 +60108053 +68108973 +1fe1fe30 +60108973 +7089067c +708972aa +20001388 +68190150 +68108053 +793ffe07 +60108053 +6009422f +20600000 +47504034 +6800c22d +c000690e +c000e912 +c0016916 +20600000 +68014227 +68094221 +da6000c8 +2020691a +68014225 +6809421f +da600064 +2020691a +68014223 +6809421d +da600032 +2020691a +98462200 +6801422f +98467e00 +24216927 +6809422b +984fa400 +1a627e00 +9a2ffe00 +9a40fe00 +9a26fc00 +20407f86 +1807fe00 +20600000 +18427e00 +6809422f +98467e00 +6809422b +984fa400 +1a627e00 +9a2ffe00 +9a467e00 +20206923 +ea240000 +60040a9a +68010a9a +68090a9c +98462200 +68010aa0 +98462400 +68090a9e +98467c00 +24416940 +1a4ffe64 +9a26fc00 +20407f86 +1807fe00 +205a6944 +20600000 +6800c231 +79207e00 +6000c231 +20600000 +6808c231 +79200401 +6008c231 +20600000 +6801423d +efe08000 +207a0000 +1fe27200 +6801423d +1fe0fe03 +1fe22200 +ea288000 +204067fb +1a20a201 +c200694f +20600000 +6801423d +1fe0fe03 +1fe22200 +18002400 +700b1200 +ea288000 +2040681d +4750c034 +68010b12 +1a420e00 +f920fe00 +60010b12 +1a20a201 +1a40a401 +6801423d +efe08000 +9a42fc00 +2422e959 +68010b12 +68090b14 +9842fc00 +20628000 +78347c00 +20600000 +6801423d +efe08000 +207a0000 +1fe27200 +6801423d +1fe0fe03 +1fe22200 +ea288000 +204067dd +1a20a201 +c2006973 +20600000 +d8e00009 +20407f16 +247a0000 +58000020 +d8e00009 +20407f08 +78547c00 +2040696c +47514034 +6801423d +efe08000 +207a0000 +20406954 +24347d02 +20407d00 +78547c00 +68010b12 +60010b19 +700b1b00 +18000e00 +68010b14 +1fe30400 +60090b14 +1fe17e01 +68090b19 +18412201 +18430400 +60090b19 +9a22fc00 +2442e9a1 +6801423d +efe08000 +68088b1b +18408401 +60088b1b +18420e00 +98e2fc00 +2422e98c +68010b12 +60010b14 +20600000 +4751c034 +6801423d +1fe0fe01 +efe10000 +20207f9c +68108042 +9a21fe00 +60108042 +68110050 +793ffe0d +60110050 +20000064 +20600000 +68098a9c +58b71b00 +9846fc00 +20407f86 +18078400 +68008a9f +984ffe00 +1fe6fc64 +20407f86 +1807a200 +18427e00 +9a262400 +68008a9b +204069be +68008a9a +202069d5 +c00069c4 +c000e9c6 +c00169c8 +c001e9ca +c00269cc +c002e9ce +d8a080a0 +202069d0 +d8a080a4 +202069d0 +d8a080a8 +202069d0 +d8a08064 +202069d0 +d8a08068 +202069d0 +d8a0806c +202069d0 +1a227e00 +e0a10000 +1a427e00 +e0a10000 +20600000 +78347c00 +202069d8 +78547c00 +c00269e3 +c002e9e5 +c00de9e7 +c00e69e9 +c001e9eb +c00469ed +c00a69ef +c00ae9f1 +c00b69f3 +c00be9f5 +20600000 +d8e00006 +202069ff +d8e00007 +202069ff +d8e00008 +202069ff +d8e00009 +202069ff +d8e0000a +202069ff +d8e0000b +202069ff +d8e0000c +20206a01 +d8e0000d +20206a01 +d8e0000e +20206a01 +d8e0000f +20206a01 +68110081 +f9347e00 +60110081 +1a220e00 +68108085 +f9347e00 +60108085 +20600000 +18e0a3fc +202069f7 +18e0a3f6 +202069f7 +20758000 +70456700 +7004ed03 +7004ee03 +7004f211 +7004f313 +58000000 +600184ef +6000c254 +70468100 +47524034 +58000000 +6000c254 +6000c564 +6000c55d +6800c56b +c000ea16 +70456950 +20600000 +70456900 +20600000 +18418402 +20600000 +18427e00 +1fedfe00 +6000c562 +18007e3f +1fedfe00 +6000c561 +18007e01 +1fedfe00 +6000c560 +20406a50 +18427e00 +20600000 +1fedfe00 +6000c562 +18007e73 +1fedfe00 +6000c561 +18007e01 +1fedfe00 +6000c560 +20206a50 +6800c563 +203a6a33 +58000070 +20600000 +580000aa +20600000 +1fedfe00 +6000c562 +18007eef +20406a44 +680904f7 +18420a00 +e0a08000 +18a20400 +600904f7 +18007eff +20406a44 +680904f7 +18420a00 +e0a08000 +20600000 +1fedfe00 +6000c561 +68014561 +1fed7e00 +600184f4 +da200107 +da40000f +20406a5d +1fe2fed7 +1fe47e00 +1fedfe00 +20600000 +6801c560 +600184f4 +da200107 +da40000f +20406a5d +1fed7e00 +da400007 +20406a5d +1fe2fe2b +1fe47e00 +1fedfe00 +1fe20400 +20600000 +da600000 +1a427200 +20407e71 +1fe20400 +18427e00 +1a63a600 +c3046a66 +9a228400 +1a60a601 +18438400 +680184f4 +1a40a5ff +2a41feff +2020ea70 +1a427200 +20407e71 +2feffe00 +79208400 +20206a61 +18437e00 +20600000 +6808c55d +184b8400 +79200400 +6800c563 +245a6a18 +6008850d +20600000 +18438400 +6800c563 +793a0400 +20600000 +680884fc +7004fed7 +20406bb6 +6800c251 +79207e06 +79207e07 +6000c251 +70456300 +20206b97 +6800c251 +79207e07 +6000c251 +20206b97 +4752c034 +6800c681 +c0006a8e +20206b4c +68010264 +1fe20c00 +20406ab8 +680084fc +c0006a94 +20206b18 +47534034 +680084fd +c01fea7d +c039ea86 +c077ea9b +c029eb44 +20600000 +68010501 +1fe20c00 +20406ac3 +68008503 +c020eaa5 +c0206aad +c038eae6 +c0386af2 +c024eafd +20206b97 +20406aaf +20206aa7 +6800c254 +79207e00 +79207e01 +6000c254 +20406be0 +20206b97 +20406aaf +20206b97 +20406acb +20206ad7 +20406acb +e8c08000 +1fe97e00 +6000c56a +e8c08000 +60008508 +20600000 +e8c08000 +600084fb +1fe97e00 +600084fc +e8c08000 +600084fd +20406ace +600904ff +18c27e00 +60010501 +20600000 +e8c08000 +1fe37e00 +60008503 +20406ace +60090504 +18c27e00 +60010506 +20600000 +68010506 +1fe20c00 +20600000 +e8c08000 +1fe20400 +18430400 +c3800000 +e8c08000 +1fe9fe00 +1ff27e00 +98408400 +20600000 +e8c08000 +6000c55d +e8c08000 +60008509 +e8c08000 +6000850a +e8c08000 +6000850b +e8c10000 +6001455e +e8c08000 +6000850c +e8c08000 +6000c568 +20600000 +20406ab1 +20206ae8 +6800c254 +79207e05 +79207e06 +6000c254 +6808c55d +184b8400 +18418403 +20406c11 +70456703 +20206b97 +700a9908 +20407d86 +20406ab1 +6800c56a +1fe67c01 +2022eaf9 +20202a8c +6800c254 +79207e07 +6000c254 +20206b97 +20406acb +e8c08000 +60008ac2 +204052d2 +204052e0 +5800000e +e0a10000 +6801424a +e0a10000 +6800c563 +1fe3fe00 +79207e00 +e0a08000 +4753c034 +580015ef +e0a10000 +58001191 +e0a10000 +68008ac2 +e0a08000 +58000007 +e0a28000 +58000001 +e0a10000 +20406a2f +e0a08000 +20600000 +20206b19 +47544035 +680084fd +c039eb21 +c01feb25 +c077eb3f +c07feb37 +c029eb46 +20600000 +6800c254 +79207e03 +6000c254 +20206b97 +6800c254 +79207e03 +79207e02 +6000c254 +680084fb +20406a26 +600084fe +20406bb6 +680084fb +1feb7e00 +6000c55d +1febfe00 +793ffe01 +79207e00 +d8404565 +600904f7 +20406a35 +20206b97 +68010501 +1fe20c00 +1fe0fe01 +60010501 +e8c08000 +6808c568 +9840fe00 +6000c568 +20406c42 +20406a72 +20406c28 +20406c4b +20206b97 +700a9909 +20407d86 +20406a0d +680084fb +20406a26 +600084fe +20406bb6 +20206b97 +68010264 +1fe20c00 +20406ab8 +680084fc +c0006b52 +20206b86 +4754c035 +680084fd +c01fea7d +c039ea86 +c077eb58 +20206b97 +68010501 +1fe20c00 +20406ac3 +68008503 +c020eb61 +c0206b61 +c038eb6c +c0386b7c +20206b97 +20406aaf +6800c55d +1fe37e00 +6808c564 +98467c00 +2022eb68 +20202a8c +6800c254 +79207e01 +6000c254 +20206b97 +20406ab1 +6800c56a +6808c564 +98467c00 +2022eb73 +20202a8c +20206b97 +6800c254 +79207e05 +79207e06 +6000c254 +6808c55d +184b8400 +18418403 +20406c11 +20206b97 +20406ab1 +6800c56a +6808c564 +98467c00 +2022eb82 +20202a8c +6800c254 +79207e07 +6000c254 +20206b97 +680084fc +6808c564 +98467c00 +2022eb8c +20202a8c +20206b97 +680084fd +c039eb91 +c077eb3f +c07feb37 +c029eb96 +6800c254 +79207e03 +6000c254 +20206b97 +20206b95 +20206b46 +20600000 +6800c567 +207a0000 +c001eb9c +20202a8c +70456700 +204052d2 +d8400001 +6808c55d +184b8400 +18418403 +da2000aa +20406bfc +204052e0 +18a20c00 +e8c10000 +203a2a8c +20600000 +204052e0 +58000004 +e0a10000 +6801424a +e0a10000 +680084fb +e0a08000 +47554035 +5800013f +e0a10000 +680084fe +e0a08000 +20600000 +204052d2 +204052e0 +58000004 +e0a10000 +6801424a +e0a10000 +680084fb +e0a08000 +4755c035 +58000173 +e0a10000 +680084fe +e0a08000 +20600000 +204052e0 +5800000e +e0a10000 +6801424a +e0a10000 +6800c563 +1fe3fe00 +79207e00 +e0a08000 +47564035 +580015ef +e0a10000 +58001183 +e0a10000 +18427e00 +e0a08000 +580000f0 +e0a18000 +5800007f +e0a10000 +58000000 +e0a08000 +58000001 +e0a08000 +20406a2f +e0a08000 +70456910 +20600000 +204052d2 +204052e0 +5800000e +e0a10000 +6801424a +e0a10000 +6800c563 +1fe3fe00 +79207e00 +e0a08000 +4756c035 +580015ef +e0a10000 +58001181 +e0a10000 +6800c55d +e0a08000 +580000e0 +e0a18000 +6801456c +e0a10000 +58000000 +e0a08000 +6800c56e +e0a08000 +20406a2f +e0a08000 +20600000 +204052e0 +58000008 +e0a10000 +6801424a +e0a10000 +6800c563 +1fe3fe00 +79207e00 +e0a08000 +47574035 +580009ef +e0a10000 +580005e3 +e0a10000 +18427e00 +e0a08000 +5800008d +e0a08000 +20406a2f +e0a08000 +20600000 +204052d2 +204052e0 +58000008 +e0a10000 +6801424a +e0a10000 +18421600 +6800c563 +1fe3fe00 +79207e00 +e0a08000 +4757c035 +580009ef +e0a10000 +580005e1 +e0a10000 +19627e00 +e0a08000 +5800008d +e0a08000 +20406a2f +e0a08000 +20600000 +47584036 +6800c569 +207a0000 +68110112 +247a0000 +1a227e00 +60008a9b +60088a9a +2040526e +247a0000 +204052d2 +204052e0 +58000005 +e0a10000 +6801424a +e0a10000 +6800850d +e0a08000 +580001ff +e0a10000 +6800c569 +e0a08000 +6800c566 +e0a08000 +70456900 +20600000 +4758c036 +6800c56b +c1008000 +680104ff +207a0000 +6800c569 +1fe0fe01 +6000c569 +20600000 +6801456f +20207f9c +47594036 +6800c568 +207a0000 +1fe0ffff +6000c568 +6801455e +6809469f +98467c00 +20216c57 +6001469f +6800c569 +203a6c5f +70051001 +6800c566 +6000850f +580000ff +6000850e +20206c64 +70051000 +6800c565 +6000850f +580000ef +6000850e +4759c036 +6801469f +1fe67c7f +20216c6b +68008510 +1fe0fe01 +60008510 +20406a72 +6801469f +1fe0fe08 +68088510 +9840a200 +20405240 +60010277 +1fe0fe04 +60010279 +1fe20a00 +6800850d +e0a08000 +6800850e +e0a08000 +20406c95 +20406ca6 +475a4036 +68014571 +1fe20600 +6801469f +1fe27200 +204066ea +18a20400 +18627e00 +60014571 +18420a00 +6800850f +e0a08000 +68010277 +1fe20a00 +6801469f +68088510 +9840fe00 +1fe0fe04 +e0a10000 +6801424a +e0a10000 +70456900 +68014573 +c0003a97 +700b0500 +20600000 +475ac036 +6801469f +1fe67c7f +24216c9d +1fe3fe00 +79207e00 +e0a08000 +20600000 +6801469f +1fe97e00 +1ff18400 +1fe17e7f +1fe3fe00 +793ffe00 +e0a08000 +e0a88000 +20600000 +6800c569 +207a0000 +e0a08000 +20600000 +475b4036 +20407d9c +204032f6 +2040631b +475bc036 +204076dc +204076b5 +204076c6 +2040526e +247a0000 +20404da9 +2040526e +247a0000 +475c4037 +20406cf5 +20404f64 +20406b98 +20406cbe +475cc037 +202032f2 +6800827f +c2805087 +c283d091 +20600000 +475d4037 +20405274 +207a0000 +6800804b +c3830000 +20405258 +6001016f +1fe20c00 +e8c10000 +1fe0fe04 +600141dc +7041db06 +475dc037 +68014246 +203a6cdd +6800804b +c4038000 +793ffe07 +6000804b +7041db05 +68094246 +6801016f +9840fe00 +6001016f +680141dc +98467e00 +600141dc +475e4037 +680141dc +203a2a8c +d8400104 +98467e00 +24216ce9 +475ec037 +600941dc +68014246 +9840fe00 +60014246 +20206ceb +58000000 +60014246 +6800804b +79207e06 +6000804b +20600000 +6800c684 +c2806cf3 +70028701 +20600000 +7002870f +20600000 +6800c681 +243a6cfb +68008286 +207a0000 +70028600 +20600000 +475f4037 +68008287 +207a0000 +c000ed1b +c0016d74 +c001ed21 +c0026d78 +c01ded2b +c01e6d7b +c006ed30 +c0076d80 +c007ed33 +c0086d86 +c008ed39 +c0096d8a +c009ed3f +c00a6d8e +c00aed45 +c00b6d92 +c00bed4b +c00c6d97 +c00ced51 +c00d6d9b +c00ded57 +c00e6d9f +c00eed5d +c00f6da4 +c00fed63 +c0106da8 +c010ed6e +c0116dac +20600000 +20406db7 +70028702 +6800c250 +79207e00 +6000c250 +20600000 +70028704 +6800c250 +c3810000 +70028703 +20406dbe +70028704 +6800c250 +79207e02 +6000c250 +20600000 +20405274 +247a0000 +20406dcd +7002873c +20600000 +20406dc3 +7002870e +20600000 +20406ddd +70028710 +6800c252 +79207e00 +6000c252 +20600000 +20406de4 +70028712 +6800c252 +79207e02 +6000c252 +20600000 +20406de9 +70028714 +6800c253 +79207e00 +6000c253 +20600000 +20406df0 +70028716 +6800c253 +79207e02 +6000c253 +20600000 +20406dd1 +70028718 +6800c251 +79207e00 +6000c251 +20600000 +20406dd8 +7002871a +6800c251 +79207e02 +6000c251 +20600000 +20406df5 +7002871c +6800c251 +79207e06 +6000c251 +20600000 +20406dfc +6800c254 +79207e00 +6000c254 +7002871e +20600000 +20406e02 +6800c254 +79207e02 +6000c254 +70028720 +6800c564 +1fe9fe00 +1fe1fe03 +d8404565 +600904f7 +20206a35 +20406e0c +6800c254 +79207e04 +6000c254 +70028722 +20600000 +6800c250 +c4008000 +70028703 +20206cfb +6800c250 +c19f8000 +7002873b +68008285 +c18b8000 +70028500 +7002870d +20206cfb +6800c250 +247a0000 +6800c684 +c2806daf +c2836db1 +20206db5 +6800c252 +c4008000 +70028711 +20206cfb +6800c252 +c19f8000 +70028713 +20206cfb +6800c253 +c4008000 +70028715 +20206cfb +6800c253 +c19f8000 +6800c684 +c2836db1 +20206db5 +6800c251 +c4008000 +70028719 +20206cfb +6800c251 +c19f8000 +7002871b +20206cfb +6800c251 +c1ff8000 +6800c684 +c2836db3 +20206db5 +6800c254 +c4008000 +7002871f +20206cfb +6800c254 +c4018000 +70028721 +20206cfb +6800c254 +c1ff8000 +20206db5 +7002870f +20206cfb +70028717 +20206cfb +7002871d +20206cfb +70028700 +20600000 +475fc037 +204052b8 +58000001 +1fe20400 +58000050 +1fe21600 +202050a8 +47604038 +204052b8 +68014248 +1fe20400 +202050b7 +4760c038 +204052b8 +68014248 +1fe20400 +d9600050 +204050cc +6800c250 +793ffe05 +6000c250 +20600000 +47614038 +204052c5 +20407138 +202050e7 +4761c038 +204052b8 +58000003 +1fe20400 +58000051 +1fe21600 +202050a8 +47624038 +204052b8 +6801424a +1fe20400 +202050b7 +4762c038 +204052b8 +58000011 +1fe20400 +58000052 +1fe21600 +202050a8 +47634038 +204052b8 +6801424c +1fe20400 +202050b7 +4763c038 +204052b8 +58000013 +1fe20400 +58000053 +1fe21600 +202050a8 +47644039 +204052b8 +6801424e +1fe20400 +202050b7 +4764c039 +204052d2 +7004fb03 +7004fe1c +20406ba9 +70456301 +20600000 +47654039 +204052d2 +6808c564 +20406a79 +6008c55d +20206bc4 +4765c039 +204052d2 +6808c55d +20406a73 +20406a1a +600084fe +6808c55d +20406a73 +600884fb +20206ba9 +47664039 +204052d2 +6808c55d +20406a73 +20206bfc +4766c039 +68010264 +98000c00 +e8c08000 +1fe22400 +6000851b +e8c10000 +6001051c +e8c08000 +1fed1600 +e8c08000 +99609600 +47674039 +18c20400 +df200004 +d8a0052a +20407ec6 +18420c00 +1a427e00 +c000efba +c0016e2c +c001efba +c0026e54 +c002efba +c0036f02 +c003efba +20206fc1 +4767c039 +20406fd0 +2841fe01 +2020f040 +2841feff +2020efc4 +e8c10000 +60010522 +196097fe +196097ff +2422efbe +d9600511 +e9610000 +207a0000 +20407082 +204052d0 +18007e03 +e0a08000 +6801051c +e0a10000 +18ebfe00 +1fe0fe05 +1fe0a605 +1ff0fe00 +e0a10000 +18e27e00 +1ff0fe00 +e0a10000 +e0a10000 +d8c0052a +18e27200 +2022ee4f +e8c20000 +e0a20000 +c2006e4c +18007e00 +e0a08000 +1a627e00 +60010275 +20600000 +4768403a +e8c20000 +60020524 +196097fc +20406f2e +60010520 +196097fe +20407028 +2022efc4 +2a21fe05 +2020ee62 +d8a0052a +18000e00 +20206e71 +e8c08000 +c0856fc4 +e8c10000 +243a6e6f +e8c08000 +c0ffee6d +e8c08000 +c0ffee6b +20206eb8 +18c08dfb +20206e5f +18c08dfc +20206e5f +18c08dfd +20206e5f +e8c08000 +c004ee86 +c0056e74 +e8c10000 +e0a10000 +18e08e01 +1ff0a400 +e8c10000 +1ff0fe00 +1a40a401 +9a467c00 +24216e83 +1fe22600 +1a50fe00 +e0a10000 +18e08e01 +1a627e00 +20206e7a +196097fb +1a20a3fb +20206e8b +e8c10000 +e0a10000 +18e08e01 +196097fd +1a20a3fd +24216fc4 +2422ee71 +196097ff +2422efc4 +204052d0 +18a08a0a +da20052a +18e27e00 +203a6ea5 +ea210000 +203a6ea5 +98002400 +68020524 +98000400 +204070e7 +18c27e00 +203a6ea2 +18c08dfd +e8c18000 +e0a18000 +2040705b +98007200 +20407f01 +1a20a202 +18e08fff +20206e92 +da200005 +20406f84 +68010275 +c005f043 +20206f9a +e8c08000 +c0006eae +c000eeb0 +c0016eb3 +196097ff +20206eb6 +e8c08000 +196097fe +20206eb6 +e8c10000 +1ff0fe00 +196097fd +60010519 +20600000 +196097fb +20406eaa +2422efbe +680a0524 +204070b1 +2422efbb +18c22200 +204052d0 +1a220c00 +18a08a03 +18c21600 +20407062 +1fe22200 +68010519 +1fe22400 +1a227e00 +9a462400 +68010520 +9a467c00 +24216ee7 +78547c00 +68010519 +203a6eda +99608c00 +1a40a403 +1a427200 +1f227e00 +1fe0fe03 +1ff0fe00 +e0a10000 +1f227e00 +1ff0fe00 +e0a10000 +20206ef5 +1a20f206 +20346ede +1f30fe00 +20206ee1 +1f227e00 +1fe0fe02 +1ff0fe00 +e0a10000 +1f20f3fd +1f30fe00 +e0a10000 +19620c00 +20206ef5 +78347c00 +68010520 +1fe22200 +1a227200 +68010519 +203a6eda +99608c00 +1a227e00 +1fe0fe05 +1ff0fe00 +e0a10000 +1a227e00 +1ff0fe00 +e0a10000 +20407f01 +24346efe +18007e02 +e0a08000 +18c27e00 +99667e00 +1ff0fe00 +e0a10000 +20206f00 +18007e00 +e0a08000 +da200005 +20206fb0 +4768c03a +20406fd0 +2841feff +2020efc4 +20406f2e +60010520 +196097fe +20407028 +d8a0052a +18000e00 +e8c08000 +c0056f36 +e8c10000 +e0a10000 +18e08e01 +196097fd +1a20a3fd +24216fc4 +2422ef0c +196097ff +2422efc4 +204052d0 +18a08a0d +68010511 +98002600 +da20052a +ea210000 +203a6f29 +98002400 +204070c6 +203a6f27 +18c08dfd +e8c18000 +e0a18000 +2040705b +98007200 +20407f01 +1a20a202 +20206f1c +20406f83 +68010275 +c0077046 +20406f9a +20206f9a +e8c10000 +1ff0fe00 +1fe0fffd +d84000c8 +98467c00 +24610000 +580000c8 +20600000 +18c08c04 +196097fb +1a20a3fb +2422efc4 +20406eaa +2422efbe +d9600511 +20407082 +18e27e00 +203a7046 +6000854e +1a427e00 +6001054c +d8e00000 +da200000 +204052d0 +18a08a0a +20406f6c +24342a8c +18c21600 +1fe22600 +9a20a200 +68010519 +1fe22400 +203a6f75 +1a227e00 +9a462400 +2022ef67 +24216f67 +68010520 +9a467c00 +2022ef5e +24216f5e +1a427200 +20406f61 +6800854e +18e08e01 +98e67c00 +2022ef83 +20206fa0 +1fe27200 +20406f61 +20206fa0 +18a08bfd +1f220400 +1a627e00 +9a467e00 +99608c00 +20207f01 +6800854e +18e08e01 +98e67c00 +20628000 +20206f47 +20407fe9 +d8c0052a +18ebfe00 +98c08c00 +e8ca0000 +204070b1 +24628000 +2040705b +20207fe7 +68010520 +9a267c00 +24216f8f +1a227200 +1f220400 +19620c00 +20407f01 +6801054c +9a267c00 +2022ef81 +20406fa0 +20206f94 +20406f83 +20206f94 +da200007 +18007e00 +e0a08000 +20406fb0 +68090275 +184085fb +1850fe00 +e0a10000 +184085fd +1850fe00 +e0a10000 +20600000 +1fe27200 +1f220400 +19620c00 +20407f01 +20406fa0 +58000036 +e0a08000 +6801054c +1ff0fe00 +e0a10000 +20600000 +58000036 +e0a08000 +184085fd +1850fe00 +e0a10000 +20600000 +da200007 +58000002 +e0a08000 +68010519 +98408400 +1850fe00 +e0a10000 +20406fb0 +68090275 +184085fb +1850fe00 +e0a10000 +184085fb +1850fe00 +e0a10000 +20600000 +68010273 +98a67e00 +1fe67e00 +60010275 +204052d0 +1a227e00 +e0a08000 +6801051c +e0a10000 +20600000 +20600000 +58000200 +6001054a +20206fc6 +58000400 +6001054a +20206fc6 +58000600 +6001054a +20206fc6 +58000300 +6001054a +204052d0 +e0a08000 +6801051c +e0a10000 +58000200 +e0a10000 +6801054a +e0a10000 +70027507 +20600000 +da400000 +18000400 +d8a00511 +20407028 +2022f026 +1a40a401 +e8c08000 +1a20a3ff +196097ff +2fe1f018 +2420f026 +2fe00e04 +2420eff3 +18000401 +e8c08000 +1a20a3ff +196097ff +c0806fe7 +e8c08000 +1a20a3ff +196097ff +c0006ff8 +20206fea +18c08c01 +1a20a3ff +196097ff +18c08c02 +1a20a3fe +196097fe +2841fe00 +2020f020 +18c08c0c +1a20a3f4 +196097f4 +20207020 +2fe00e02 +2420eff6 +20206fde +2fe00e01 +2420f026 +1a20a3fe +196097fe +e8c10000 +1a467c04 +2022effe +e0a10000 +2841fe00 +2020f020 +18c20400 +e8c08000 +c0807019 +e8c08000 +c0807019 +e8c08000 +c0887019 +e8c08000 +c0807019 +e8c08000 +c0c07019 +e8c08000 +c0807019 +e8c08000 +c0807019 +e8c08000 +c0c07019 +e8c08000 +c0aff019 +e8c08000 +c0cdf019 +e8c08000 +c09a7019 +e8c08000 +c07df01e +18420c00 +18c08c0c +18000e00 +18000400 +2020701e +196097f4 +1a20a3f4 +18000400 +2a21fe00 +2420efd5 +18007e00 +e0a10000 +20600000 +d84000ff +20600000 +476a403a +e8c08000 +196097ff +2fe1f030 +2420f03e +2fe00e07 +2020f037 +2fe00e06 +2020f039 +2fe00e05 +2420f03e +e8c08000 +1fe22200 +196097ff +2020703c +18c08c02 +196097fe +e8c10000 +1ff0a200 +196097fe +18007e01 +20600000 +18007e00 +20600000 +58000003 +6000851b +20207048 +58000005 +6000851b +20207048 +58000007 +6000851b +204052d0 +6800851b +1fe22400 +e0a08000 +6801051c +e0a10000 +58000500 +e0a10000 +2a41fe05 +2020f057 +2a41fe07 +2020f057 +58000000 +e0a28000 +20207059 +58350200 +e0a28000 +7002750a +20600000 +20407ea2 +20407ea5 +20407062 +20407e9c +20407e9f +18427e00 +20600000 +e8c08000 +1fe17207 +1fe97e00 +c080706c +18007e01 +18000401 +20600000 +20407e76 +1fe08401 +20600000 +1f227e00 +1fe67c04 +20217069 +c002f073 +c0037076 +c003f07a +20600000 +e8c08000 +1fe08402 +20600000 +e8c10000 +1ff0fe00 +1fe08403 +20600000 +e8c10000 +1ff0fe00 +e8c90000 +18508400 +18500400 +9840fe00 +1fe08405 +20600000 +476ac03a +18000e00 +da400000 +d8a0052a +e9610000 +207a0000 +2040708d +18e27e00 +c1038000 +19609602 +20207086 +98002600 +68014575 +98000c00 +18e27e00 +c1038000 +78547c00 +e8c08000 +207a0000 +98007200 +e8c10000 +9a667c00 +2422f09a +78347c00 +c2007096 +e8ca0000 +18c22200 +243470ad +d8c0052a +df200007 +e8c20000 +203a70a6 +98467c00 +2022f0ad +c20070a0 +20600000 +e0aa0000 +18e08e01 +1a220c00 +2040705b +9a40a400 +98c08c00 +20207090 +1a220c00 +20407062 +98c08c00 +20207090 +476b403a +68014575 +98000c00 +e8c08000 +203a7fe3 +1fe3fe00 +98c08c00 +e8c20000 +98467c00 +20628000 +18a27e00 +60010abb +600c0aa2 +20407062 +98c08c00 +18c27e00 +68090abb +18420a00 +680c0aa2 +1fe20c00 +202070b4 +476bc03a +68014575 +98000c00 +e8c08000 +203a70e4 +98007200 +e8c10000 +9a667c00 +2022f0d4 +c20070cc +18c08c04 +20407062 +98c08c00 +202070c9 +1f20f3ff +1f23fe00 +98c08c00 +18c08c04 +20407062 +98c09600 +18c08c01 +e8c10000 +9a467c00 +2022ffef +2040705b +98c08c00 +19627e00 +98c67c00 +2022f0e4 +202070da +18000c00 +18007e00 +20600000 +476c403b +68014575 +98000c00 +e8c08000 +203a7100 +1fe3fe00 +98c08c00 +e8c20000 +98467c00 +2022f0f4 +20407062 +98c08c00 +202070ea +20407062 +98c09600 +18c08c01 +e8c10000 +9a467c00 +20628000 +2040705b +98c08c00 +19627e00 +98c67c00 +2022f100 +202070f6 +18000c00 +20600000 +da400400 +204070f4 +da400300 +2040710d +24740000 +1a267c03 +20217fe9 +e8c08000 +c0847fe9 +e8c08000 +20600000 +476cc03b +20407062 +1fe22200 +e8c08000 +1fe17207 +1fe97e00 +1fe67c03 +2022f129 +1f227e00 +c002f120 +c0037123 +c003f126 +18c08dff +20407062 +98c08c00 +1a227e00 +98462200 +2022ffe9 +20207110 +1a20a3fe +18c08c01 +20207110 +1a20a3fd +18c08c02 +20207110 +1a20a3fb +18c08c04 +20207110 +1a20a3ff +1f227e00 +c000f132 +c0017130 +c002712f +20207fe9 +1a20a3f4 +e8c10000 +1a20a3fe +e8c10000 +9a467c00 +2022ffe7 +1a20a3fe +2022ffe9 +20207110 +204052d0 +1fe20a00 +58000006 +e0a08000 +5800006e +e0a10000 +58000f00 +e0a10000 +581a0535 +e0a18000 +58000111 +1ff07e00 +e0a20000 +58002600 +e0a10000 +58000335 +e0a10000 +58000009 +e0a10000 +58000004 +e0a10000 +70027514 +20600000 +476d403b +7005e550 +d8a005e6 +d8c0443a +20407ebf +d8c045d2 +20407ebd +d8c009be +20407ebd +2040720a +d8c0042f +20407205 +204071d0 +d8a00af2 +20407201 +580f4240 +1fe22200 +68020af2 +9a26fc00 +20407f86 +18077e00 +600209ba +20600000 +7005e541 +d8a005e6 +204071b5 +204071b0 +6801c454 +e0a18000 +20407176 +d8c0042f +20407ebf +d8c0443a +20407ebf +2040720a +d8c00b12 +d8a00ac2 +20407ebf +202071d0 +680244c7 +e0a20000 +20407ecd +20207eca +476dc03b +7005e541 +d8a005e6 +204071b0 +204071b5 +6801c44d +e0a18000 +20407176 +d8c0443a +20407ebf +d8c0042f +20407ebf +2040720a +d8c00b12 +d8a00ac2 +20407ebf +204071d0 +d8a00af2 +20207201 +7005e520 +d8c009fe +d8a005e6 +20407ebd +2040720a +d8c0099e +20407205 +204071d0 +d8a00ac2 +20407497 +d8400001 +2040719f +d8a04419 +20407201 +d8400000 +2040719f +d8a00b12 +20207497 +476e403b +7005e535 +58000100 +600105e6 +204071b0 +204071b5 +d8c0443a +20407ebf +d8c0042f +20407ebf +58006c65 +e0a10000 +58006274 +e0a10000 +e0a88000 +2040720a +202071d0 +680344a0 +e0a30000 +6800c495 +e0a08000 +20600000 +6803044f +e0a30000 +6800c48e +e0a08000 +20600000 +7005e541 +6800c664 +600085e6 +d8c045d2 +20407ebd +d8c009be +20407ebd +2040720a +d8c0042f +20407205 +202071d0 +7005e541 +6800c664 +600085e6 +d8c009be +20407ebd +d8c045d2 +20407ebd +2040720a +d8c0443a +20407205 +202071d0 +476ec03b +2040721f +680085e5 +1fe20400 +1fe0fe0f +1ff1fe00 +1fe22400 +203a71e2 +18417e0f +243a71e5 +da600ad2 +dfe005e6 +1fe0fff0 +9840a200 +d8a00b02 +df200004 +20407edd +202071f0 +da400001 +da200000 +202071e6 +1841220f +dfe005e6 +9840fe00 +9a260c00 +d8a00af2 +20407245 +da600ae2 +da200af2 +d8a00b02 +df200004 +20407edd +20407491 +20407428 +d8c005e6 +1a40a5ff +1a427e00 +203a71f9 +20407486 +20407422 +202071f3 +d8a00af2 +20407497 +d8c00b02 +20407486 +20407428 +d8c00af2 +20407486 +20207422 +18a22200 +20407497 +df200010 +20207ee5 +d8a00ac2 +20407ebf +df200010 +da200ac2 +20207ee5 +680085e5 +1fe27200 +da2005e6 +20207ee5 +ea208000 +1fe3fe00 +2a6ffe00 +7920fe00 +2feffe08 +7920a600 +e2208000 +1a20a3ff +c200720e +20600000 +da200ad2 +1a20a20f +18007210 +18002600 +2020720e +da200ae2 +20207219 +d8c00ac2 +20407484 +18007008 +20407492 +20407491 +2040741f +d8a00ad2 +20407497 +476f403b +68008ad2 +2feffe07 +2420f230 +20407218 +da600ad2 +d8a00ad2 +2040723a +20207231 +20407218 +d8c00ad2 +d8a00ae2 +20407ebf +68008ae2 +2feffe07 +2420f21d +2040721d +da600ae2 +d8a00ae2 +df200003 +d8400000 +20407241 +1a60a604 +c200723b +d8408700 +18500400 +ea620000 +9842fe00 +e0a20000 +20600000 +476fc03b +df200010 +dfe00000 +9a267c00 +2022f250 +20217253 +e8c88000 +e0a88000 +1fe0fe01 +c2007248 +20600000 +d8400080 +e0a88000 +2020724d +d8400000 +20207251 +20407268 +d8c00592 +d8a00582 +20207ebf +78547c00 +2040735f +d8c00562 +d8a005a2 +1800720f +20407f01 +e8c08000 +1fe2fe06 +e0a08000 +580005b2 +600105d6 +580005a2 +600105d4 +79200012 +202072a8 +6808c689 +18002410 +1840a606 +1a667c10 +2021726e +18002610 +d8a005a2 +d8c0468a +18427200 +78547c00 +e8c08000 +e0a08000 +1a40a5ff +2022f27c +c2007272 +2034726f +78347c00 +18007206 +1a220c00 +20207272 +d8c00562 +d8a005b2 +20407ebf +680085c1 +9a62fe00 +600085c1 +580005b2 +600105d6 +580005a2 +600105d4 +79200012 +202072a8 +78547c00 +2040735f +20207292 +da200056 +78347c00 +2040735f +20407292 +d8c00592 +d8a00062 +20207ebf +58000562 +600105d6 +580041be +600105d4 +793f8012 +204072a8 +da200592 +da400562 +d8a005a2 +20407352 +da2005a2 +da4005b2 +1a420a00 +78347c00 +20407350 +2040736a +580005b2 +600105d6 +580005a2 +600105d4 +79200012 +202072a8 +7005d800 +680105d4 +98000c00 +d8a005c2 +20407ebf +680105d6 +98000c00 +d8a00592 +20407ebf +204072cf +78547c00 +c58972b9 +680085d8 +c08272b9 +680105d6 +98002400 +20407301 +20407300 +20407313 +680085d8 +1fe0fe01 +600085d8 +204072cf +78347c00 +20407300 +20407322 +20407331 +20407322 +20407331 +20407322 +20407331 +20407322 +680085d8 +1fe0fe01 +600085d8 +c08872b1 +204072cf +78547c00 +20207300 +680085d8 +d8c005c2 +203a72f6 +98002400 +18007211 +18c20a00 +e8c08000 +1fe98400 +1feb7e00 +1fe97e00 +9841fe00 +e0a08000 +c20072d5 +580005c2 +9a408c00 +18007210 +d8a00572 +e8c08000 +e0a08000 +28c1ffd3 +2420f2e5 +18c08def +c20072e0 +18002200 +1a40a7ff +1a6ba600 +1a6ba600 +204074b9 +58008400 +9a60a600 +d8a00572 +18007210 +ea688000 +e8a08000 +9840fe00 +e0a08000 +1a60a601 +c20072ef +202074bd +18007210 +18000400 +e8c08000 +98428400 +c20072f8 +18427e00 +e0c08000 +d8c005c2 +d8a00572 +20207ebf +da400572 +18007210 +da200592 +1a220a00 +ea288000 +ea408000 +9842e000 +1f212603 +2434730a +1a62a603 +1a662601 +2021730d +9840e000 +1e027e00 +e0a08000 +1a20a201 +1a40a401 +c2007304 +20600000 +204074b9 +18007210 +da200592 +ea208000 +d8c08500 +1f212603 +1a667c01 +2021731c +d8c08600 +98c08c00 +e8c08000 +e2208000 +1a20a201 +c2007316 +202074bd +18007208 +d8c00592 +18c20a00 +e8c08000 +98002200 +e8c08000 +98002400 +1a23fe00 +9a40fe00 +e0a08000 +1a227e00 +9a40fe00 +e0a08000 +c2007325 +20600000 +588ae42c +98000400 +18007207 +20407340 +580d751b +98000400 +18007205 +20407340 +680085a1 +98002200 +68008595 +600085a1 +1a227e00 +60008595 +20600000 +1841240f +18417e0f +d8a00592 +98a08a00 +e8a08000 +98002600 +1a227e00 +e0a08000 +1a622200 +18518400 +c2007341 +58000592 +9a408a00 +1a227e00 +e0a08000 +20600000 +78347c00 +20207353 +78547c00 +18007210 +ea288000 +ea408000 +20347359 +9842fe00 +2020735a +9840fe00 +e0a08000 +1a20a201 +1a40a401 +c2007354 +20600000 +d8a005b2 +ea230000 +e0a30000 +20347365 +ea230000 +20207366 +e8c30000 +e0a30000 +ea220000 +e0a20000 +20600000 +d8c041be +d8a005a2 +d8400000 +588395a7 +2040738b +58b3c1df +2040738b +5800e5e9 +2040738c +18422800 +78547c00 +20407379 +1a820400 +78347c00 +20207379 +18007208 +e8c08000 +2f200201 +20347380 +2020f381 +9840fe00 +20207382 +2020f37e +9842fe00 +e0a08000 +184c8400 +c200737a +20600000 +68030596 +60030056 +e8c30000 +e0a30000 +20600000 +184d0400 +18500400 +98418400 +20600000 +2020738f +4770403c +2040742b +d8a04419 +20207497 +d8a0443a +2034f397 +d8a0042f +18c22200 +20407ebf +20407440 +d8c0442a +202074b0 +da20042f +2034f39f +da20443a +1a220a00 +2040630c +20207440 +d8c044aa +20407486 +d8c04419 +20407487 +18006c38 +18006c00 +2040741d +d8a0047c +20207497 +18007e49 +202073ae +18007e01 +18007000 +184d5e00 +9de1de00 +1f00f001 +184cde00 +1df15e00 +68014411 +1ff07e00 +9de1de00 +1f00f001 +e8c20000 +98005e00 +1f00f001 +e8c10000 +1a30de00 +1df05e00 +9de1de00 +1f00f001 +20600000 +1a608c01 +e8c08000 +98002200 +204073ab +2040741f +18007000 +ea608000 +1fe17e03 +1ff05e00 +79205e08 +2040748f +20407422 +1a227200 +1a608c02 +2040746e +20407478 +20407422 +1f227e00 +203a73d5 +202073d0 +1800700c +1de27e00 +60020417 +20600000 +1a20a201 +204073ad +1a620c00 +20407482 +20407425 +2040749e +1a60a610 +1a40a5f0 +202173d9 +20600000 +4770c03c +da6043dc +680ac403 +204073c1 +18007008 +98005e00 +18002200 +204073ad +20407425 +da6043de +6800c3dd +1fe0a5ff +9a608a00 +1800700c +1de27e00 +e0a20000 +204073d9 +6800c3dd +1fe0fe04 +6000c3dd +680ac403 +18408401 +600ac403 +20600000 +4771403c +680082da +1fe67c14 +202173ff +da6002db +1fe0a5ff +1fe0fffc +600082da +9a608c00 +e8c20000 +18007008 +98005e00 +18002200 +680ac408 +204073ad +20407425 +1800700c +1de27e00 +6002041b +204073d9 +da6002d9 +204073c1 +680a041b +98467e00 +247a0000 +6802440d +98467e00 +207a0000 +600a440d +6802c408 +1fe0fe01 +6002c408 +18007e00 +20600000 +243bf41d +20600000 +18006c30 +18006c00 +2020741d +18006c32 +18006c02 +2020741d +18006c34 +18006c04 +2020741d +18006c01 +18006c00 +20600000 +18007000 +6802042f +98005e00 +1f00f001 +e8c20000 +98005e00 +1f00f001 +6802443a +98005e00 +1f00f001 +e8c20000 +98005e00 +1f00f001 +20407492 +1f00f1fc +680244c7 +1fe25e00 +1f00f004 +18006c38 +18006c08 +2020741d +4771c03c +680344a0 +680b044f +2034f446 +6803044f +680b44a0 +18007008 +18425e00 +1f00f001 +184f5e00 +1ff07e00 +9de1de00 +1f00f001 +1fef5e00 +1f00f001 +18005e00 +18007e00 +6800c48e +6808c485 +2434f456 +6800c495 +6808c48e +6000c44a +6008c44b +18007000 +da40444a +18007204 +ea220000 +ea4a0000 +9842de00 +1f00f001 +1a20a204 +1a40a404 +c200745b +20407492 +1f00f1fc +680244c7 +1fe25e00 +1f00f004 +18006c38 +18006c0c +2040741d +20407491 +18006c3a +18006c08 +2020741d +2f200600 +20608000 +18c27e00 +9f208a00 +18007e00 +e0a08000 +1f20f201 +2f200600 +20608000 +20207473 +18007000 +1f227e00 +203a747d +e8c20000 +1f20f3fc +98005e00 +1f00f001 +2f001e04 +20608000 +20207479 +18007008 +20207487 +18007004 +20207487 +18007000 +18007204 +e8c20000 +98005e00 +1f00f001 +c2007488 +20600000 +d8c0047c +20207484 +18007204 +20207494 +18007000 +18007204 +18005e00 +1f00f001 +c2007493 +20600000 +1800700c +18007204 +1de27e00 +e0a20000 +1f00f001 +c2007499 +20600000 +1800700c +1a620a00 +1a40f201 +1f267c0f +202174a4 +18007210 +1de27e00 +1f267c03 +202174ac +e0a20000 +1f20f3fc +20628000 +1f00f001 +202074a4 +e0a08000 +1fecfe00 +c20074ac +20600000 +1800700c +18007204 +e8c20000 +9de67c00 +24628000 +1f00f001 +c20074b2 +18007c00 +20600000 +68108050 +793ffe00 +60108050 +20600000 +68108050 +79207e00 +60108050 +20600000 +d8a00886 +3803ffff +3807ffff +380bffff +380ffbff +e0a48000 +3803ffff +3807ffff +380bffff +380fffff +e0a48000 +3803ffff +3807ffff +380bcfff +380fffff +e0a48000 +3803ffff +3807ffff +380bffef +380fffff +e0a48000 +3803ffff +3807ffff +380bffff +380fffff +e0a48000 +3803ffff +38066c7f +3808146b +380f7bb3 +e0a48000 +3801feb8 +38050c12 +380ab722 +380e9fa6 +e0a48000 +3800e70f +38056720 +3808519e +380d9084 +e0a48000 +38031012 +380760bf +380bf0af +380c03d3 +e0a48000 +3803a188 +38043ad0 +380bcbf2 +380e43d9 +e0a48000 +3802b030 +38076a03 +38091188 +380de520 +e0a48000 +3803a11e +3804fe5d +3808dd57 +380dac93 +e0a48000 +380011ed +380618c4 +38088da7 +380e57ff +e0a48000 +3803192b +38074641 +3809be0c +380f66ad +e0a48000 +38001f83 +38055a23 +380bf9b0 +380c3949 +e0a48000 +38013a51 +380553fd +380b372a +380cf1bb +e0a48000 +3803ae85 +3805eed9 +38089e66 +380c01a8 +e0a40000 +20600000 +d8a0091e +3803ffff +3807ffff +380bffff +380fffff +e0a48000 +3803ffff +3804003f +38080000 +380c0000 +e0a48000 +38000000 +38040000 +38081000 +380c0000 +e0a48000 +3803ff00 +3807ffff +380bffcf +380fffff +e0a48000 +3803ffff +3807ffff +380bffff +380c03ff +e0a48000 +38000000 +38040000 +38080000 +380c0000 +e0a48000 +38010000 +38040000 +380bf000 +380fffff +e0a48000 +380296ff +38062630 +380b945d +380fd284 +e0a48000 +380333a0 +38044b7a +380837d8 +380fc9dc +e0a48000 +3803a440 +3805b958 +380b8bce +380d091f +e0a48000 +3802e12c +3805f47c +380b56b1 +380efd47 +e0a48000 +38006837 +3806ed90 +3809ecec +380dacc5 +e0a48000 +38023357 +38058af3 +3808f9e1 +380d29f0 +e0a48000 +3802e7eb +3807e6e3 +380be1a7 +380d0b8b +e0a48000 +38024fe3 +380420ef +3809b5a6 +380cdc2f +e0a48000 +38013860 +3806bd69 +3808391a +380db222 +e0a48000 +20600000 +6800c65a +243a757d +20207a77 +4772403c +6800c65a +207a0000 +6800c5b1 +c1808000 +6800c4be +207a0000 +6800c4c3 +c1018000 +68014682 +c280757b +6800c4c0 +c0007a77 +20600000 +7044c000 +20600000 +4772c03c +6800c65a +203a612b +20406124 +20407583 +2020766d +58000000 +600409ae +600209b6 +6003c65e +20600000 +7009b001 +2020758d +6800c5b1 +c000f68a +20202a8c +6800c5b1 +c000f590 +2020766d +2040768a +680089af +247a0000 +7009ae03 +20600000 +204075b0 +da2009de +d8a00866 +20407c79 +da2009be +d8a00826 +20407c79 +da200826 +da4009be +d8a00826 +20407be1 +da20093e +da4009be +d8a00846 +20407be1 +da200846 +da400826 +d8a00826 +20407c7d +da200806 +da400826 +d8a00806 +20407c7d +df200020 +da200866 +da400806 +20207f88 +da20097e +d8a00806 +20407c79 +da20095e +d8a00826 +20407c79 +da200826 +da40095e +d8a00826 +20407be1 +da20093e +da40095e +d8a00846 +20407be1 +da200846 +da400826 +d8a00826 +20407c7d +da200806 +da400826 +d8a00806 +20207c96 +204075e1 +da2009e6 +d8a00866 +204077a8 +da2009c6 +d8a00826 +204077a8 +da200826 +da4009c6 +d8a00826 +20407786 +da20089e +da4009c6 +d8a00846 +20407786 +da200846 +da400826 +d8a00826 +20407755 +da200806 +da400826 +d8a00806 +20407755 +df200018 +da200866 +da400806 +20207f88 +da2008e6 +d8a00806 +204077a8 +da2008ce +d8a00826 +204077a8 +da200826 +da4008ce +d8a00826 +20407786 +da20089e +da4008ce +d8a00846 +20407786 +da200846 +da400826 +d8a00826 +20407755 +da200806 +da400826 +d8a00806 +20207758 +680089b2 +c0807615 +20407612 +d8a00a7e +58000a2e +e0a10000 +58004642 +e0a10000 +580009de +e0a10000 +20207609 +d8a00a7e +58000a3e +e0a10000 +580009de +e0a10000 +58004642 +e0a10000 +204079a0 +680089af +c002760f +7009b001 +7009ae05 +20600000 +7009af14 +2040758a +202076d8 +d8a00a1e +18000e08 +202076a2 +7009b001 +20600000 +4773403c +d8a00727 +680340a0 +e0a30000 +68030040 +e0a30000 +6801c65e +e0a18000 +20407a0d +da200a4e +da400a5e +18000e04 +204076a7 +2420f631 +20407628 +70007d41 +202062f8 +680089af +c004f62e +7009ae0a +7009b001 +70007c03 +20600000 +70007c03 +7009af15 +202076d8 +680089af +c004f637 +7009ae00 +70007c04 +70007e05 +20600000 +70007c04 +7009af00 +20600000 +680089b3 +c000f63e +7009af0a +202076d8 +d8a00727 +68030040 +e0a30000 +680340a0 +e0a30000 +6801c65b +e0a18000 +20407a24 +680089af +c005764b +7009ae0b +7009b001 +20600000 +7009af0b +7009b101 +20600000 +d8a00a7e +68030040 +e0a30000 +680340a0 +e0a30000 +58000a2e +e0a10000 +58000a3e +e0a10000 +20207662 +7009ae0f +d8a00a7e +680340a0 +e0a30000 +68030040 +e0a30000 +58000a3e +e0a10000 +58000a2e +e0a10000 +d8a00727 +68030a7e +e0a30000 +68030a84 +e0a30000 +204079d7 +7041bd01 +d8a041be +d8c00a4e +20407ebf +202021c4 +4773c03c +6800c5b1 +c1800000 +680089b2 +c1800000 +d8a04612 +18000e0b +204076a2 +180a7e00 +1fe37e00 +e0a10000 +d8a006be +d8c04612 +20407ebe +d8a005e6 +d8c008ce +20407ebc +d8a00616 +20407ec5 +70061601 +20407a5d +7009b201 +20600000 +d8a0462a +d8c0062e +20407ebc +7045b101 +7009b200 +20600000 +4774403d +680089b9 +c1800000 +680089b2 +c1800000 +d8a006be +d8c04612 +20407ebe +d8a005e6 +d8c009c6 +20407ebc +d8a00616 +20407ec5 +70061601 +20407a5d +7009b202 +20600000 +7009b301 +d8a00a06 +d8c0062e +20407ebe +7009b901 +7009b200 +20600000 +18e08fff +24610000 +180a7e00 +e0a10000 +202076a2 +18e08fff +242176b3 +ea220000 +1fe20400 +ea420000 +9842fe00 +2422f6b1 +1a20a204 +1a40a404 +202076a7 +7840fc00 +20600000 +7820fc00 +20600000 +4774c03d +680089b0 +207a0000 +204062bc +247a0000 +7009b000 +680089ae +c001e1fd +c002e21a +c003e225 +c005e23a +c0017588 +c00275f7 +c004f617 +c005763a +c0067658 +20600000 +4775403d +680089b1 +207a0000 +204062bc +247a0000 +7009b100 +680089af +c00961e0 +c009e1e5 +c001e1e9 +c0027602 +c00a61ed +c003e1fb +c005763a +c005e239 +c004f617 +c00ae233 +20600000 +7009b101 +20600000 +7009b100 +20600000 +4775c03d +6800c65a +207a0000 +680089b2 +207a0000 +1fe0fe80 +600089b2 +c3838000 +680085e3 +203a76e7 +20207a68 +204078d3 +680089b2 +c000f684 +c001769b +20600000 +1fe10e07 +1fe97e00 +98c08c00 +e8c08000 +afec0000 +20600000 +20407ebe +20407ebe +20207ebe +e8c40000 +247a0000 +e8c40000 +247a0000 +e8c40000 +20600000 +ea220000 +98000400 +ea420000 +98467c00 +24628000 +1a20a204 +1a40a404 +c20076fb +20600000 +18007206 +1a20a214 +1a40a414 +ea420000 +98000400 +ea220000 +98467e00 +24610000 +247a0000 +1a20a3fc +1a40a5fc +c2007707 +20600000 +18007206 +18002600 +ea220000 +98000400 +ea420000 +9840fe00 +9a60fe00 +e0a20000 +2feffe20 +7920a600 +1a20a204 +1a40a404 +c2007713 +20600000 +18007206 +18002600 +ea420000 +98000400 +ea220000 +98467e00 +9a667e00 +e0a20000 +2feffe20 +7920a600 +1a20a204 +1a40a404 +c2007721 +20600000 +18007206 +1a20a214 +18002600 +ea220000 +2feffe00 +7920a601 +1fe37e00 +2a6ffe00 +7920fe1f +e2220000 +1a20a3fc +1a632600 +c2007730 +20600000 +18007206 +18002600 +ea220000 +2feffe1f +7920a601 +1fe3fe00 +2a6ffe00 +7920fe00 +e2220000 +1a20a204 +1a632600 +c200773d +20600000 +2040773b +2a6ffe00 +2020f751 +da400886 +1a222600 +1a20a3e8 +20407704 +24610000 +1a622200 +1a20a3e8 +da400886 +1a220a00 +2020771f +20407711 +18a22200 +20207749 +2040771f +2a6c0000 +20608000 +da400886 +18a0a3e8 +1a220a00 +20207711 +18a21600 +1a226000 +da400716 +1a420a00 +1a208c18 +e8c40000 +e0a40000 +e0a40000 +18007e00 +e0a40000 +19620a00 +20407755 +da400716 +1a420a00 +18007e00 +e0a40000 +1e008c20 +e8c40000 +e0a40000 +e0a40000 +19622200 +1a220a00 +20407755 +da400716 +1a420a00 +1e008c28 +e8c40000 +e0a40000 +e0a40000 +e0a40000 +19622200 +1a220a00 +20207755 +18007206 +e8c20000 +98005e00 +1f00f001 +c2007781 +20600000 +18a21600 +d8a006e6 +20407ec5 +d8a006e6 +1a220c00 +18007000 +20407780 +1a420c00 +20407780 +18002400 +18000400 +18002606 +e8a20000 +98002200 +1a427000 +1de27e00 +1a627000 +9deffe00 +9a20fe00 +9840fe00 +e0a20000 +1fef0400 +1a60a601 +2a61fe0c +2420f792 +18427e00 +e0a20000 +18a08be8 +1a40a401 +2a41fe06 +2420f790 +da2006e6 +19620a00 +2020775f +1a222400 +20207786 +1a226000 +1e022200 +ea208000 +2feffe00 +20608000 +2040772d +ea408000 +2fec0000 +2020f7ba +da200886 +1a420a00 +20407711 +ea408000 +9a60fe00 +e2408000 +1a40a5e8 +1a40a218 +18007207 +2040772f +202077ab +18a21600 +d8a00746 +20407ec5 +18007e00 +600206fe +6002075e +70074601 +d8a006e6 +20407ec5 +d8c00886 +d8a00716 +20407ebe +1a220c00 +d8a0072e +20407ebe +d8c0072e +204076f5 +203a77f6 +da20072e +da400746 +204077aa +da200716 +da4006e6 +204077aa +da20072e +da400716 +20407704 +202177e8 +da200716 +da40072e +1a220a00 +2040771f +da200746 +da4006e6 +1a420a00 +20407711 +ea208000 +9a60a600 +ea408000 +9a60fe00 +e2408000 +202077cd +da20072e +da400716 +1a220a00 +2040771f +da2006e6 +da400746 +1a420a00 +20407711 +ea208000 +9a60a600 +ea408000 +9a60fe00 +e2408000 +202077cd +d8a00746 +20407ec5 +680086fe +60008746 +6000874e +da200746 +da4006e6 +1a420a00 +20407755 +da200886 +da4006e6 +19620a00 +20207758 +da2006a6 +d8a0075e +204077a8 +da20075e +d8a00776 +204077a8 +da20089e +da400776 +d8a00776 +20407786 +da200676 +d8a0075e +204077a8 +d8c0075e +d8a0072e +20407ebe +da20072e +20407748 +da20075e +da40072e +d8a0075e +20407755 +da20075e +da400776 +d8a0075e +20407755 +d8c00676 +d8a0072e +20407ebe +da20068e +d8a00776 +204077a8 +da20072e +20407748 +da20072e +20407748 +da20072e +da400776 +d8a0072e +20407786 +da200776 +d8a00746 +204077a8 +da200746 +20407748 +da200746 +20407748 +da200746 +20407748 +d8c0068e +d8a00776 +20407ebe +da200776 +20407748 +da200776 +da4006a6 +d8a006a6 +20407786 +da20075e +d8a00776 +204077a8 +da200776 +da40072e +d8a00776 +20407758 +da200776 +da40072e +d8a00676 +20407758 +da20072e +da400676 +d8a00776 +20407758 +da200776 +da40075e +d8a00776 +20407786 +da200776 +da400746 +d8a0068e +20207758 +da200616 +d8a0078e +204077a8 +da200676 +da40078e +d8a00746 +20407786 +da200616 +da40078e +d8a0078e +20407786 +da20068e +da40078e +d8a0072e +20407786 +da2006a6 +d8a0078e +204077a8 +da2005e6 +da40078e +d8a0075e +20407786 +da2006a6 +da40078e +d8a0078e +20407786 +da2005fe +da40078e +d8a00776 +20407786 +da200746 +da40075e +d8a0078e +20407758 +da200746 +da40075e +d8a00746 +20407755 +da20072e +da400776 +d8a0075e +20407758 +da20072e +da400776 +d8a0072e +20407755 +da20072e +da40078e +d8a0072e +20407786 +da2006a6 +da400616 +d8a00776 +20407786 +da200776 +da40078e +d8a006a6 +20407786 +da20078e +d8a0078e +204077a8 +da20078e +da400746 +d8a00776 +20407786 +da20078e +da40072e +d8a0072e +20407786 +da20075e +d8a00676 +204077a8 +da200676 +da400776 +d8a00676 +20407758 +d8c00676 +d8a0078e +20407ebe +da20078e +20407748 +da200776 +da40078e +d8a00776 +20407758 +da200776 +da40075e +d8a0075e +20407786 +da20075e +da40072e +d8a0068e +20407758 +da20068e +da400886 +d8a0068e +18002600 +6800868e +2feffe00 +2040f711 +1a626000 +da20068e +2040772d +680086a5 +2e0ffe00 +7920fe07 +600086a5 +20600000 +680085e3 +1fe0ffff +24610000 +600085e3 +680085e2 +205a7803 +680085e3 +d8c006be +204076ec +2020f8c0 +680085e2 +243a78ce +20407854 +202078c0 +7005e200 +d8c005e6 +d8a00676 +204076f2 +202078c0 +da2006a6 +d8a00776 +204077be +da200776 +d8a0072e +204077a8 +da200676 +da40072e +d8a0062e +20407786 +da200776 +da40072e +d8a0075e +20407786 +da20068e +da40075e +d8a00646 +20207786 +e8c20000 +18002204 +18a08a03 +e0a08000 +1fecfe00 +18a08bfe +1a20a3ff +2422f8e8 +18a08a05 +c20078e5 +20600000 +18ebfe00 +99608c00 +e8c20000 +20600000 +18006010 +d96005e6 +1e008ff9 +204078f0 +98000400 +1e008ff0 +204078f0 +98408400 +1e008ffe +204078f0 +1fee7e01 +98408400 +1e008ff1 +204078f0 +1fee7e00 +98408400 +1e0bfe00 +99608a00 +e0aa0000 +1e00e001 +2e01fe40 +2420f8f6 +20600000 +d8c008fe +18007007 +e8c20000 +98005e00 +1f00f1ff +2021790d +20600000 +4776403d +204078f4 +d8a006e6 +18007000 +1de27e00 +e0a20000 +1f00f001 +2f01fe08 +2420f916 +204074b9 +d9608700 +de0005e6 +18007240 +ee0a0000 +e9620000 +19609604 +1e00e004 +9840fe00 +18007007 +9de08400 +18007004 +1dee7e03 +98408400 +18007005 +1de27e00 +18007006 +9de2fe00 +18007004 +9de17e00 +18007006 +9de2fe00 +98408400 +18007007 +18425e00 +18007003 +1de27e00 +9840de00 +18007000 +1de27e00 +18007001 +9de10400 +9de1fe00 +18007002 +9de17e00 +98418400 +18007000 +1dee7e02 +9840fe00 +18007007 +9de0de00 +980efc00 +c200791f +d8c006e6 +18007000 +e8c20000 +9de0de00 +1f00f001 +2f01fe08 +2420f948 +202074bd +d8a00a3e +18007007 +1de27e00 +e0a20000 +1f00f1ff +20217950 +20600000 +d8a005e6 +18c08dfc +1f262210 +e8c20000 +9842fe00 +e0a20000 +18c08df8 +c2007958 +1a227200 +18427e00 +e0a20000 +c200795f +20600000 +20407967 +2040794e +2020798d +20407967 +2020798d +d8c009de +d8a005e6 +18007206 +20407a71 +d8c04642 +18007206 +20407a71 +d8c00a3e +20407a70 +2040790b +20407912 +d8c00a2e +d8a005e6 +20207984 +d8c04642 +d8a005e6 +18007206 +20407a71 +d8c009de +18007206 +20407a71 +d8c00a2e +20407a70 +2040790b +20407912 +d8c00a3e +d8a005e6 +20407984 +2020798d +20407a70 +58800000 +1fed7e00 +e0a20000 +18007205 +20407ec6 +58000280 +e0a20000 +20207912 +68020a3e +da2003e8 +9a26fc00 +20407f86 +18077e00 +600209ba +1807fe00 +da2003e8 +9a26fc00 +20407f86 +18077e00 +da2003e8 +9a2ffe00 +680a09ba +9840fe00 +600209ba +20600000 +70466400 +202079a2 +6800c662 +c081799e +4776c03d +58363636 +1fed0400 +18418436 +68010a7e +1fe20c00 +18007204 +20407955 +2040790b +20407912 +68010a80 +1fe20c00 +d8a005e6 +18007206 +20407a71 +68010a82 +1fe20c00 +18007206 +20407a71 +58800000 +e0a18000 +6800c664 +e0a08000 +18007e00 +e0a40000 +58000388 +e0a20000 +20407912 +2040794e +d8c00a3e +d8a00706 +20407ebd +585c5c5c +1fed0400 +1841845c +68010a7e +1fe20c00 +18007204 +20407955 +2040790b +20407912 +d8c00726 +d8a005e6 +18007208 +20407a71 +58800000 +1fed7e00 +e0a20000 +20407ec5 +58000300 +e0a20000 +20407912 +2020794e +58363636 +1fed0400 +18418436 +d8c00a1e +18007206 +20407955 +2040790b +20407912 +68010a8a +1fe20c00 +d8a005e6 +20407a70 +68010a8c +1fe20c00 +20407a70 +5862746c +1fed7e00 +1fe1fe6b +e0a20000 +d8c00733 +18007203 +20407a71 +58800000 +1fed7e00 +e0a20000 +18007e00 +e0a40000 +58000380 +e0a20000 +20407912 +2040794e +d8c00a3e +d8a00706 +20407ebd +585c5c5c +1fed0400 +1841845c +d8c00a1e +18007206 +20407955 +2040790b +20407912 +d8c00726 +d8a005e6 +18007208 +20407a71 +58800000 +1fed7e00 +e0a20000 +20407ec5 +58000300 +e0a20000 +20407912 +2020794e +6800c662 +c0817a1e +4777403d +58363636 +1fed0400 +18418436 +d8c00a1e +18007206 +20407955 +2040790b +20407912 +d8c00a3e +d8a005e6 +20407a70 +d8c00a2e +20407a70 +20207a33 +58000000 +6002468a +20207a0f +58000000 +6002468a +20207a26 +6800c662 +c0817a21 +58363636 +1fed0400 +18418436 +d8c00a1e +18007206 +20407955 +2040790b +20407912 +d8c00a2e +d8a005e6 +20407a70 +d8c00a3e +20407a70 +58000000 +e0a40000 +e0a20000 +6802468a +e0a20000 +18a20400 +70072680 +18420a00 +d8c00736 +20407a70 +20407912 +d8a005e6 +18007207 +20407ec6 +e0a20000 +580003f8 +e0a20000 +20407912 +2040794e +d8c00a3e +d8a00706 +20407ebd +585c5c5c +1fed0400 +1841845c +d8c00a1e +18007206 +20407955 +2040790b +20407912 +d8c00726 +d8a005e6 +18007208 +20407a71 +58800000 +1fed7e00 +e0a20000 +20407ec5 +58000300 +e0a20000 +20407912 +2020794e +7005e3c0 +680085e3 +207a0000 +1fe0ffff +600085e3 +d8c006be +204076ec +2020fa5e +d8c005e6 +d8a00676 +202076f2 +20407803 +680085e3 +1fe0ffff +600085e3 +d8c006be +204076ec +20608000 +20207854 +18007204 +18c08dfc +e8c20000 +e0a20000 +18c08df8 +c2007a72 +20600000 +4777c03d +6800c4be +203a5af0 +20405aec +20407583 +20207a7d +6800c4c3 +c1800000 +6800c4c0 +c1800000 +d8a045b2 +18000e0f +204076a2 +180a7e00 +1fe37e00 +e0a10000 +d8a00766 +d8c045b2 +20407ebd +d8a00646 +d8c0095e +20407eb3 +d8a00686 +20407ed0 +70068601 +20407ac7 +7044c003 +20600000 +d8a045d2 +d8c006a6 +20407eb3 +7044c303 +7044c000 +20600000 +680089b9 +c1800000 +6800c4c0 +c1800000 +d8a00766 +d8c045b2 +20407ebd +d8a00646 +d8c009be +20407eb3 +d8a00686 +20407ed0 +70068601 +20407ac7 +7044c004 +20600000 +d8a009fe +d8c006a6 +20407ebd +7009b903 +7044c000 +20600000 +6800c4be +207a0000 +6800c4c0 +207a0000 +1fe0fe80 +6000c4c0 +c3838000 +680105e3 +203a7ab9 +20207abf +4778403e +20407ad4 +6800c4c0 +c001fa93 +c0027aa9 +20600000 +20407ae6 +680105e3 +1fe0ffff +600105e3 +d8c00766 +204076ec +20608000 +20207b37 +4778c03e +58000100 +600105e3 +680105e3 +207a0000 +1fe0ffff +600105e3 +d8c00766 +204076ec +2020faca +d8c00646 +d8a00706 +20207eb2 +da200746 +d8a00846 +20407ba3 +da200846 +d8a007e6 +20407c79 +da200706 +da4007e6 +d8a006a6 +20407be1 +da200846 +da4007e6 +d8a00826 +20407be1 +da200726 +da400826 +d8a006c6 +20207be1 +da200746 +d8a00826 +20407c79 +da200826 +d8a00846 +20407c79 +da20093e +da400846 +d8a00846 +20407be1 +da200706 +d8a00826 +20407c79 +d8c00826 +d8a007e6 +20407ebd +da2007e6 +20407c80 +da200826 +da4007e6 +d8a00826 +20407c7d +da200826 +da400846 +d8a00826 +20407c7d +d8c00706 +d8a007e6 +20407ebd +da200726 +d8a00846 +20407c79 +da2007e6 +20407c80 +da2007e6 +20407c80 +da2007e6 +da400846 +d8a007e6 +20407be1 +da200846 +d8a00806 +20407c79 +da200806 +20407c80 +da200806 +20407c80 +da200806 +20407c80 +d8c00726 +d8a00846 +20407ebd +da200846 +20407c80 +da200846 +da400746 +d8a00746 +20407be1 +da200826 +d8a00846 +20407c79 +da200846 +da4007e6 +d8a00846 +20407c96 +da200846 +da4007e6 +d8a00706 +20407c96 +da2007e6 +da400706 +d8a00846 +20407c96 +da200846 +da400826 +d8a00846 +20407be1 +da200846 +da400806 +d8a00726 +20207c96 +da200686 +d8a00866 +20407c79 +da200706 +da400866 +d8a00806 +20407be1 +da200686 +da400866 +d8a00866 +20407be1 +da200726 +da400866 +d8a007e6 +20407be1 +da200746 +d8a00866 +20407c79 +da200646 +da400866 +d8a00826 +20407be1 +da200746 +da400866 +d8a00866 +20407be1 +da200666 +da400866 +d8a00846 +20407be1 +da400806 +da200826 +d8a00866 +20407c96 +da200806 +da400826 +d8a00806 +20407c7d +da4007e6 +da200846 +d8a00826 +20407c96 +da2007e6 +da400846 +d8a007e6 +20407c7d +da2007e6 +da400866 +d8a007e6 +20407be1 +da200746 +da400686 +d8a00846 +20407be1 +da200846 +da400866 +d8a00746 +20407be1 +da200866 +d8a00866 +20407c79 +da200866 +da400806 +d8a00846 +20407be1 +da200866 +da4007e6 +d8a007e6 +20407be1 +da200826 +d8a00706 +20407c79 +da200706 +da400846 +d8a00706 +20407c96 +d8c00706 +d8a00866 +20407ebd +da200866 +20407c80 +da200846 +da400866 +d8a00846 +20407c96 +da200846 +da400826 +d8a00826 +20407be1 +da200826 +da4007e6 +d8a00726 +20407c96 +da200726 +da40091e +d8a00726 +18002600 +68008726 +2feffe00 +2040fc7b +1a626000 +da200726 +20407cab +68008745 +2e0ffe00 +7920fe07 +60008745 +20600000 +18a21600 +d8a00806 +20407ed0 +18007e00 +60020826 +70080601 +d8a00786 +20407ed2 +d8c0091e +d8a007c6 +20407ebd +1a220c00 +d8a007e6 +20407ebd +d8c007e6 +20407cb5 +203a7bda +da2007e6 +da400806 +20407cb8 +da2007c6 +da400786 +20407cb8 +da2007e6 +da4007c6 +20407cb1 +20217bcc +da2007c6 +da4007e6 +1a220a00 +20407ca9 +da200806 +da400786 +1a420a00 +20407c7b +ea208000 +9a60a600 +ea408000 +9a60fe00 +e2408000 +20207bb1 +da2007e6 +da4007c6 +1a220a00 +20407ca9 +da200786 +da400806 +1a420a00 +20407c7b +ea208000 +9a60a600 +ea408000 +9a60fe00 +e2408000 +20207bb1 +da200786 +19620a00 +20407c0a +da20091e +19622400 +19620a00 +20207c96 +18a21600 +18007000 +d8a00786 +20407ed2 +d8a00ad2 +20407ed2 +1a220c00 +700ad200 +58000000 +20407c73 +1a420c00 +20407c77 +18000e00 +d8a00786 +d8400ad2 +18e22400 +1a4bfe00 +9840a400 +18000400 +18002600 +e8a20000 +98002200 +ea420000 +1a627000 +9deffe00 +9a20fe00 +9840fe00 +e0a20000 +1fef0400 +1a60a601 +2a61fe08 +2420fbf5 +18427e00 +e0a20000 +18a08be0 +18e08e01 +28e1fe08 +2420fbef +da200786 +19620a00 +20207c0a +4779403e +18a21600 +1a226000 +da4007c6 +1a420a00 +20407ecd +e0a40000 +1a208c2c +20407eb9 +20407eb5 +1a422200 +20407c80 +da4007c6 +1e022200 +19620a00 +20407c7d +da4007c6 +1a420a00 +20407ecd +e0a40000 +1e008c30 +20407ebf +20407ecd +1a422200 +20407c80 +da4007c6 +19622200 +1a220a00 +20407c7d +da4007c6 +1a420a00 +1e008c20 +20407eb5 +20407ecd +e0a40000 +1e008c38 +20407eb9 +19622200 +1a220a00 +20407c7d +da4007c6 +1a420a00 +1e008c24 +20407eb5 +1e008c34 +20407eb5 +1e008c34 +20407eb6 +1e008c20 +20407eb6 +19622200 +1a220a00 +20407c7d +da4007c6 +1a420a00 +1e008c2c +20407eb5 +20407ecd +e0a40000 +1e008c20 +20407eb6 +1e008c28 +20407eb6 +19622200 +1a220a00 +20407c96 +da4007c6 +1a420a00 +1e008c30 +20407eb9 +20407eb9 +18007e00 +e0a40000 +1e008c24 +20407eb6 +1e008c2c +20407eb6 +19622200 +1a220a00 +20407c96 +da4007c6 +1a420a00 +1e008c34 +20407eb5 +1e008c20 +20407eb5 +20407ecd +1e008c30 +20407eb6 +19622200 +1a220a00 +20407c96 +da4007c6 +1a420a00 +1e008c38 +20407eb9 +20407ecd +1e008c24 +20407eb5 +20407ecd +1e008c34 +20407eb6 +19622200 +1a220a00 +20207c96 +18007220 +d8a00ad2 +98a08a00 +20207f01 +18007208 +20207781 +1a222400 +20207be1 +18007208 +20207712 +20407c7b +18a22200 +20207c81 +20407cae +2a6ffe00 +2020fc8a +da40091e +1a222600 +1a20a3e0 +20407cb1 +24610000 +1a622200 +20207c92 +20407c92 +1a222600 +1a20a3e0 +da40091e +20407cb1 +24610000 +1a622200 +20207c92 +1a20a3e0 +da40091e +1a220a00 +20207ca9 +20407ca9 +2020fca0 +18a0a3e0 +da40091e +20407cb1 +24610000 +da40091e +18a0a3e0 +1a220a00 +20207ca9 +18a0a3e0 +da40091e +1a220a00 +20407c7b +20608000 +18a0a3e0 +da40091e +1a220a00 +20207c7b +18007208 +20207720 +18007208 +1a20a21c +2020772f +18007208 +18002600 +2020773d +18007208 +1a20a21c +1a40a41c +20207707 +e8c40000 +247a0000 +202076f5 +1a226000 +1e022200 +ea208000 +2feffe00 +20608000 +20407cab +ea408000 +2fec0000 +2020fcc8 +da20091e +1a420a00 +20407c7b +ea408000 +9a60fe00 +e2408000 +1a40a5e0 +1a40a220 +18007209 +2040772f +20207cb9 +20402c65 +20758000 +20407cd3 +20407d75 +20207d08 +20407d29 +20207d64 +6800c686 +c17f8000 +98000400 +2040680e +6808c686 +20406825 +20000064 +6808c686 +204067fb +20207cdd +4779c03e +6800c686 +c17f8000 +1fe20400 +2040681d +2420fcef +20407cf9 +68014682 +79207e0c +60014682 +6800c679 +c1000000 +70467900 +6800c685 +6000c678 +20407d00 +700a992c +20207d86 +68014682 +793ffe0c +60014682 +6800c679 +c1008000 +70467901 +70467800 +20407d02 +700a992d +20207d86 +6800c678 +207a0000 +1fe0ffff +6000c678 +247a0000 +700a9910 +20207d86 +d8e00007 +20202c32 +d8e00007 +20202c36 +6801421b +1a2fa40b +9a40a400 +20600000 +6800c21a +207a0000 +1fe27200 +6801421b +1fe22400 +1a40a602 +ea688000 +2040680e +20407d32 +1a40a40b +c2007d0d +20600000 +20407d04 +58000002 +e2408000 +20407d5e +20207d35 +20407d04 +58000003 +e2408000 +20407d5e +20207d32 +20407d04 +58000001 +e2408000 +580000ff +e0a08000 +20207d32 +20407d04 +df20000b +1a620c00 +1a420a00 +20207ef4 +6800c21a +207a0000 +da200000 +20407d38 +1a20a201 +6800c21a +9a267c00 +20628000 +20207d2c +1a40a602 +ea688000 +20206825 +1a40a602 +ea688000 +20206829 +1a208e0b +20407f16 +247a0000 +20407d04 +ea408000 +c0017d35 +c001fd32 +c0007d32 +c002fd4c +20407d35 +1a40a607 +20407e7c +ea610000 +20407f9c +20407e8c +58000005 +e2408000 +1a40a603 +ea610000 +20207d5c +20407d32 +1a40a609 +20407e7c +ea610000 +20407f9c +20407e8c +1a40a601 +ea608000 +c07ffd58 +1fe0ffff +e2608000 +203a7d19 +58000004 +e2408000 +1a40a605 +ea610000 +1a208e0b +20207f08 +58000000 +20207d5c +58001000 +1ff07e00 +9a40a400 +20600000 +477a403e +da200000 +680a467a +1c422400 +1a427e00 +98467c00 +24417d60 +1a427e00 +184084a0 +184084a0 +98467c00 +24217d78 +1a20a201 +1a217e0f +243a7d6b +da200000 +20407d7f +1c427e00 +6002467a +20600000 +477ac03e +1a227e00 +207a0000 +18408560 +18408560 +793f841c +600a467a +2020335f +70466601 +6800c667 +243a7d81 +20600000 +70466600 +20600000 +477b403e +20407d80 +1a227e00 +60020a91 +da204668 +20407fb8 +68020a91 +1fe22200 +20207d84 +477bc03e +20407d80 +1a227e00 +60020a91 +da204670 +20407fb8 +68020a91 +1fe22200 +20207d84 +58000000 +60044670 +60044668 +20600000 +477c403f +6800c1ce +247a0000 +da204670 +20407fd0 +207a0000 +700a9000 +20407da7 +68008a90 +203a7d9c +20600000 +20407d80 +da204670 +20407fc4 +1fe20400 +20407d84 +477cc03f +18427e00 +207a0000 +c000fddd +c0017de2 +c001fde8 +c003fded +c0047dee +c004fdef +c005fdf2 +c0067df3 +c006fdf4 +c0077dfa +c007fdff +c0087e05 +c009fe0f +c00a7e11 +c00afe13 +c00b7e15 +c00bfe18 +c00c7e1a +c00cfe1d +c00dfe25 +c00f7e2f +60008a99 +477d403f +204062bc +243a7ddb +68008a99 +c584fdd6 +c0027dea +c002cd17 +c0034d26 +c0057df0 +c008fe0a +c0097e0e +c00efe26 +c00fe7cc +c01067d0 +c010fe31 +c012e70b +20600000 +60008a99 +20402252 +2022fddb +2040225a +24628000 +700a9001 +20207d8f +68014682 +79207e06 +60014682 +70409303 +20600000 +70468000 +70409300 +68014682 +793ffe06 +60014682 +20600000 +7041ce05 +20600000 +70007c07 +7004ca13 +20600000 +20600000 +20600000 +20600000 +7004d402 +20204d0a +20600000 +20600000 +70436e01 +70448400 +68014682 +79207e0b +60014682 +20600000 +68014682 +793ffe0b +60014682 +70436e00 +20600000 +70436e01 +70448401 +68014682 +79207e0b +60014682 +20600000 +68014682 +793ffe0b +60014682 +70436e00 +20600000 +58000014 +6001046d +600144ba +20205c92 +20205abf +da200000 +20207d19 +da200000 +20207d14 +da200000 +20207d1e +70436901 +7041ce1b +20600000 +70436901 +20600000 +70436900 +7041ce00 +20600000 +680141eb +20407f9c +6800c686 +c07ffe23 +1fe20400 +204067fb +20407d98 +20202b1f +20205b02 +70007c34 +79200003 +24748000 +70455b00 +70007c13 +6800816d +793ffe02 +6000816d +20600000 +18000e03 +20207f07 +204062f8 +70007d41 +20205f9d +6800c682 +c4060000 +c4038000 +20207e2f +68014218 +1fe08a02 +58000000 +e0a18000 +20600000 +20407fe9 +20407e69 +207a0000 +68014218 +1fe0a402 +ea488000 +18408401 +e2488000 +efe88000 +18427200 +1fe0a404 +ea408000 +984ffe00 +98c08a00 +1a220c00 +20407f01 +20407e6d +1fe0ffff +ea488000 +18408401 +98410400 +e2488000 +20207fe7 +20407fe9 +20407e65 +207a0000 +68014218 +1fe0a402 +ea488000 +184085ff +e2488000 +efe88000 +18427200 +1fe0a403 +ea408000 +984ffe00 +98c08c00 +18c08c01 +1a220a00 +20207e4c +68014218 +1fe08c02 +e8c08000 +20600000 +20407e6d +e8c88000 +98467e00 +20600000 +68014218 +1fe08c01 +e8c08000 +20600000 +1f267c00 +20628000 +1fe37e00 +c2007e73 +20600000 +18007e01 +1f267c00 +20628000 +1fe3fe00 +c2007e79 +20600000 +18a27e00 +60010abb +600c0aa2 +19627e00 +60020aaa +20407e85 +18c27e00 +60010ab9 +20600000 +1a227e00 +60020aae +1a427e00 +60020ab2 +1a627e00 +60018ab6 +20600000 +680c0aa2 +68020aaa +98001600 +20407e95 +68010abb +98000a00 +68010ab9 +98000c00 +20600000 +68020aae +98002200 +68020ab2 +98002400 +68018ab6 +98002600 +20600000 +68010abb +1fe20a00 +20600000 +68010ab9 +1fe20c00 +20600000 +18a27e00 +60010abb +20600000 +18c27e00 +60010ab9 +20600000 +18a27e00 +60010a97 +18c27e00 +60010a95 +20600000 +68010a97 +1fe20a00 +68010a95 +1fe20c00 +20600000 +20407ebd +20407ebd +20207ebd +20407eb9 +e8c20000 +e0a20000 +20600000 +e8c40000 +e0a40000 +20600000 +20407ebf +20407eb9 +20407eb9 +20407eb9 +20207eb9 +df20000a +20002ee0 +c2007ec2 +20600000 +18007203 +18007e00 +e0a40000 +c2007ec7 +20600000 +18007e00 +e0a40000 +20600000 +18007e00 +e0a20000 +20600000 +18007204 +20207ec6 +18007208 +20207ec6 +1f227e00 +207a0000 +58000000 +e0a08000 +c2007ed7 +20600000 +df200020 +d8a00ac2 +20207ed4 +ea620000 +ea2a0000 +9842fe00 +e0a20000 +1a20a204 +1a60a604 +c2007edd +20600000 +477dc03f +1f227e00 +1fe67c01 +20610000 +9a20a400 +1a40a5ff +1f237200 +ea288000 +ea408000 +e2208000 +e2488000 +1a40a5ff +1a20a201 +c2007eec +20600000 +1f227e00 +207a0000 +1f20f3f8 +20417eb9 +20628000 +20217ef6 +1f20f208 +1f20f3fc +20417eb6 +20628000 +20217efb +1f20f204 +20207f01 +1f227e00 +207a0000 +e8c08000 +e0a08000 +c2007f03 +20600000 +58000000 +1c430400 +600a4094 +d8a0419d +98000400 +18e3fe00 +98a08a00 +e0a90000 +477e403f +20600000 +d9600800 +19701600 +9960fe00 +20600000 +d8e00000 +477ec03f +680a4094 +1c437e00 +60024094 +98467c00 +24417f11 +98461600 +19620400 +d8c0419d +18c20a00 +df200010 +e8c10000 +98467e00 +20217f25 +18007e00 +e0a10000 +c2007f21 +d8c0419d +18e3fe00 +98c08c00 +e8c10000 +20600000 +98408400 +18427200 +58000ea6 +9f267e00 +20610000 +1fe67e00 +18510400 +18408401 +18500400 +98418400 +20600000 +20407f39 +20207f43 +78547c00 +98467e00 +20217f3e +78347c00 +1fe67e00 +c4078000 +d85f0ea6 +9840fe00 +793ffe40 +20600000 +98000c00 +1ff17e00 +d8400ea6 +984ffe00 +98c0fe00 +20600000 +1fed7e00 +1ff27e00 +6809c16f +9846fc00 +20407f86 +18078400 +20600000 +d8400ea6 +9846fc00 +20407f86 +1807fe00 +1ff07e00 +18070400 +98418400 +20600000 +d8400000 +18422600 +e8608000 +20407f64 +1a620400 +20407f95 +da40000a +9a4ffe00 +9840fe00 +1fe20400 +c2007f59 +20600000 +d840003a +98467c00 +24217f6d +d8400061 +98467c00 +20217f70 +d8400037 +98467e00 +20600000 +d8400030 +98467e00 +20600000 +d8400057 +98467e00 +20600000 +18426000 +580001ff +18002400 +1fe92200 +1a232200 +9a22a200 +2a2ffe00 +7920fe09 +18430400 +2feffe00 +79208407 +1fe37e00 +1a40a401 +2a400e00 +2420ff76 +e0a88000 +c2007f76 +1e020400 +20600000 +207a8000 +20207f86 +ea208000 +ea488000 +98467c00 +24628000 +1a20a201 +1a40a401 +c2007f88 +18007c00 +20600000 +98467c00 +24610000 +18427e00 +20600000 +9840fe00 +98460400 +98467e00 +20600000 +df200200 +d8a04000 +20207ec6 +207a0000 +1fe27a00 +6811010e +243a7f9e +20600000 +70820301 +20600000 +60110205 +68108203 +79207e04 +60108203 +20600000 +60110207 +68108203 +79207e06 +60108203 +20600000 +60110205 +70820330 +20600000 +68108043 +793ffe04 +60108043 +20600000 +6811010e +d8400200 +98467c00 +20600000 +477f403f +ea2c0000 +18417eff +243a7fbe +184cfe00 +e2240000 +1a20a207 +ea208000 +243a2a8c +68008a99 +e2208000 +20600000 +477fc03f +df200008 +ea240000 +207a0000 +ea208000 +243a7fcd +1a20a201 +c2007fc8 +20202a8c +d8400000 +e2288000 +20600000 +ea240000 +20600000 +ea208000 +20600000 +ea210000 +20600000 +d8400000 +68008006 +c2007fd7 +18408401 +c2007fd7 +18427e00 +20600000 +98467c00 +24610000 +18427e00 +20600000 +18007dff +20600000 +18007c01 +20600000 +18007c00 +20600000 +78347c00 +20600000 +78547c00 +20600000 +78367c00 +20600000 +78567c00 +20600000 +58000001 +20600000 +58000000 +20600000 +1f227e00 +207a0000 +18c27e00 +9f20fe00 +1fe0ffff +1fe20c00 +e8c08000 +18c08dfe +e0a08000 +c2007ff9 +20600000 +00000000 +0000a447 Index: 1066_OTP_FLASH/output/sched.rom =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/output/sched.rom (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/output/sched.rom (working copy) @@ -0,0 +1,7 @@ + +mem_patch11:04 +mem_lpm_config:8f 10 ca +mem_rf_init_data: +ff +mem_rf_init_ptr:mem_rf_init_data + Index: 1066_OTP_FLASH/program/24g.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/24g.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/24g.prog (working copy) @@ -0,0 +1,2637 @@ +ifdef COMPILE_24G + +g24_dispatch: + bpatch patch16_2,mem_patch16 + call g24_head_ptr2regc + add regc,offset_24g_mode,regb + ifetch 1,regb + //fetch 1,mem_24g_mode + rtneq disable_24g + beq tx_24g,g24_transmit_process + beq rx_24g,g24_receive_process + rtn + +g24_head_ptr2regc: + fetcht 2,mem_24g_head_ptr + copy temp,regc + rtn + +g24_receive_process_init: + call g24_receive_init + branch g24_mode_switch_init + +g24_receive_process: + call g24_mode_switch + call g24_dongle_work_mode_auto + call g24_dongle_bind_mode_auto + branch g24_dongle_search_mode_auto + + +g24_pair_init: + //jam 0,mem_24g_pid + //jam G24_PAIR_CH,mem_24g_ch + call g24_set0_mem_pid + setarg G24_PAIR_CH + call g24_store_mem_ch + call g24_store_mem_pair_txpower + //fetch 4,mem_24g_paring_addr + //store 4,mem_24g_addr + add regc,offset_24g_paring_addr,rega + ifetch 4,rega + branch g24_store_mem_addr + +g24_ch: + call g24_head_ptr2regc + add regc,offset_24g_current_ch_number,regb + ifetcht 1,regb + //fetcht 1,mem_24g_current_ch_number + call g24_ch_temp_incre_size4 //map size =4 + add regc,offset_24g_current_ch_number,contw + //storet 1,mem_24g_current_ch_number + branch g24_contw_istoret_1byte + +g24_ch_temp_incre_size4: + call g24_ch_calc + increase 1,temp + and_into 3,temp + rtn + +g24_ch_calc: + add regc,offset_24g_addr,regb + ifetch 1,regb + //fetch 1,mem_24g_addr + and_into 0x03,pdata + mul32 pdata,4,rega //24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4 + add regc,offset_24g_ch_map1,pdata + //setarg mem_24g_ch_map1 + iadd rega,pdata + iadd temp,contr + ifetch 1,contr + //store 1,mem_24g_ch + branch g24_store_mem_ch + +g24_set_device_addr: + call g24_store_mem_tx_power_temp + call otp_enable_chgpump + setarg 0x7e2 + arg mem_temp,rega + arg 4,temp + call otpd_read_data + call otp_disable_chgpump + fetch 4,mem_temp //adc data from otp + call g24_store_mem_device_addr + //store 4,mem_24g_device_addr + nrtn blank + fetch 4,mem_lap + //store 4,mem_24g_device_addr + branch g24_store_mem_device_addr + +g24_transmit_rf_sta_init: + call g24_set1_mem_rf_last_sta + //jam 1,mem_24g_rf_last_sta + setarg 0 + call g24_store_mem_sync_cnt + //jam 0,mem_24g_sync_cnt +g24_transmit_rf_ctrl_clear: + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + and_into bits_data,pdata + //store 1,mem_24g_data_type + branch g24_store_mem_data_type + +g24_hop_ch_enable: + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + set1 bit_hop,pdata + call g24_store_mem_data_type + //store 1,mem_24g_data_type + //store 1,mem_24g_txpayload + branch g24_store_mem_txpayload + +g24_transmit_hop_pac_fail: + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 1,g24_transmit_hop_pac_fail_wo_hop + beq 2,g24_transmit_hop_pac_fail_hop_stage2 + rtn + +g24_transmit_hop_pac_fail_wo_hop: + call g24_set2_mem_sync_cnt + //jam 2,mem_24g_sync_cnt +g24_transmit_hop_pac_fail_stage1: + add regc,offset_24g_hop_pac_retry,contw + call g24_mem_set0 + //jam 0,mem_24g_hop_pac_retry + call g24_store_mem_rf_last_sta + //jam 0,mem_24g_rf_last_sta + branch g24_transmit_rf_ctrl_clear + +g24_transmit_hop_pac_fail_hop_stage2: + call g24_set0_mem_rf_hop_ch + //jam 0,mem_24g_rf_hop_ch + branch g24_transmit_hop_pac_fail_stage1 + +g24_transmit_pac_fail_hop_stage3: + add regc,offset_24g_txfail_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_txfail_cnt + increase 1,pdata + add regc,offset_24g_txfail_cnt,contw + istore 1,contw + //store 1,mem_24g_txfail_cnt + beq 0x20,g24_tx_attempt_fail + call g24_fetch_mem_rf_hop_ch + //fetch 1,mem_24g_rf_hop_ch + beq 1,g24_rf_hop_fastly + setarg 1 + call g24_store_mem_rf_hop_ch + //jam 1,mem_24g_rf_hop_ch +g24_rf_hop_attemp_again: + call g24_fetch_mem_rf_hop_ch + //fetch 1,mem_24g_rf_hop_ch + bne 1,g24_transmit_rf_ctrl_clear +g24_rf_hop_fastly: + add regc,offset_24g_hop_fastly_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_hop_fastly_cnt + increase 1,pdata + call g24_store_mem_hop_fastly_cnt + //store 1,mem_24g_hop_fastly_cnt + beq 4,g24_rf_hop_fastly_exit + call g24_ch + call g24_set2_mem_max_retry + //jam 2,mem_24g_max_retry + branch g24_transmit_packet + +g24_rf_hop_fastly_exit: + call g24_set0_mem_hop_fastly_cnt + //jam 0,mem_24g_hop_fastly_cnt + branch g24_transmit_rf_ctrl_clear + +g24_set0_mem_hop_fastly_cnt: + setarg 0 +g24_store_mem_hop_fastly_cnt: + add regc,offset_24g_hop_fastly_cnt,contw + branch g24_contw_istore_1byte + +g24_transmit_hop_pac_succ_wo_hop: + call g24_set2_mem_sync_cnt + //jam 2,mem_24g_sync_cnt +g24_transmit_hop_pac_succ: + call g24_set0_mem_rf_hop_ch + //jam 0,mem_24g_rf_hop_ch + call g24_set1_mem_rf_last_sta + //jam 1,mem_24g_rf_last_sta + branch g24_transmit_rf_ctrl_clear + +g24_transmit_succ_rf_config: + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 3,g24_transmit_hop_pac_succ + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + isolate0 bit_hop,pdata + branch g24_transmit_rf_sta_init,true + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 1,g24_transmit_hop_pac_succ_wo_hop + beq 2,g24_transmit_hop_pac_succ + rtn + +g24_rf_sta_check: + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + rtnne STATE_24G_PAIRING_SUCCESS + call g24_rf_laststa_synccnt_check + ncall g24_rf_sync_cnt_check,user2 + rtn + +g24_rf_laststa_synccnt_check: + disable user2 + add regc,offset_24g_rf_last_sta,rega + ifetch 1,rega + //fetch 1,mem_24g_rf_last_sta + rtnne 1 + add regc,offset_24g_sync_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_sync_cnt + rtnne 0 + setarg 1 + call g24_store_mem_rf_work_stage + //jam 1,mem_24g_rf_work_stage + call g24_set4_mem_max_retry + //jam 4,mem_24g_max_retry + branch enable_user2 + +g24_rf_sync_cnt_check: + add regc,offset_24g_sync_cnt,rega + ifetch 1,rega + //fetch 1,mem_24g_sync_cnt + branch g24_rf_hop_attemp,blank + increase -1,pdata + call g24_store_mem_sync_cnt + //store 1,mem_24g_sync_cnt + setarg 2 + call g24_store_mem_rf_work_stage + //jam 2,mem_24g_rf_work_stage + call g24_ch + //jam 4,mem_24g_max_retry + branch g24_set4_mem_max_retry + +g24_store_mem_rf_work_stage: + add regc,offset_24g_rf_work_stage,contw + branch g24_contw_istore_1byte + + +g24_rf_hop_attemp: + setarg 3 + call g24_store_mem_rf_work_stage + //jam 3,mem_24g_rf_work_stage + call g24_fetch_mem_rf_hop_ch + //fetch 1,mem_24g_rf_hop_ch + nbranch g24_rf_hop_attemp_again,blank + call g24_ch + //jam 2,mem_24g_max_retry +g24_set2_mem_max_retry: + setarg 2 + branch g24_store_mem_max_retry + +g24_transmit_process: + rtnmark0 mark_24g + set1 mark_24g_conext,mark + bpatch patch16_3,mem_patch16 + add regc,offset_24g_tx_without_int,rega + ifetch 1,rega + //fetch 1,mem_24g_tx_without_int + beq 1,g24_transmit_without_int + call g24_timer_check + nbranch g24_transmit_exit,user + call g24_interval_calibrate +g24_transmit_without_int: + add regc,offset_24g_tx_without_int,contw + call g24_mem_set0 + //jam 0,mem_24g_tx_without_int + call g24_txdata_prep + nbranch g24_enter_lpm,user + call g24_rf_sta_check +g24_transmit_start: + call g24_transmit_packet + call g24_power_ctrl +g24_transmit_exit: + set0 mark_24g_conext,mark + rtn + +g24_timer_timeout: + rtn zero + set1 28,pdata + rtn + +g24_interval_calibrate: + add regc,offset_24g_pac_index,rega + ifetch 1,rega + //fetch 1,mem_24g_pac_index + increase 1,pdata + add regc,offset_24g_pac_index,contw + istore 1,contw + //store 1,mem_24g_pac_index + beq 4,g24_interval_max + beq 5,g24_interval_min + rtn +g24_interval_max: + add regc,offset_24g_interval_max,rega + ifetch 1,rega + //fetch 1,mem_24g_interval_max +g24_interval_update: + //store 1,mem_24g_interval + add regc,offset_24g_interval,contw + branch g24_contw_istore_1byte + +g24_interval_min: + add regc,offset_24g_pac_index,contw + call g24_mem_set0 + //jam 0,mem_24g_pac_index + add regc,offset_24g_interval_min,rega + ifetch 1,rega + //fetch 1,mem_24g_interval_min + branch g24_interval_update + +g24_txdata_prep: + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + bne STATE_24G_PAIRING_SUCCESS,g24_pairing_sm + bpatch patch16_4,mem_patch16 + call g24_package_data + nbranch g24_txdata_last_pac,user + call g24_transmit_prep + call g24_power_ctrl_pac_incrs +g24_txdata_enable_tx: + //jam ENSURE_ON_24G,mem_24g_ensure + setarg ENSURE_ON_24G +g24_store_mem_ensure: + add regc,offset_24g_ensure,contw + branch g24_contw_istore_1byte + +g24_txdata_last_pac: + add regc,offset_24g_ensure,rega + ifetch 1,rega + //fetch 1,mem_24g_ensure + beq ENSURE_ON_24G,enable_user + rtn + +g24_package_data: + //rega:length,regb:contr + add regc,offset_24g_cb_data,temp + ifetch 2,temp + //fetch 2,mem_24g_cb_data + call callback_func + nrtn user + copy rega,pdata + store 1,mem_rega + add regc,offset_24g_abort_pac,contw + call g24_mem_set0 + //jam 0,mem_24g_abort_pac + call g24_transmit_rf_ctrl_clear + store 1,mem_24g_common_temp + fetch 1,mem_rega + copy pdata,rega + add rega,1,temp + arg mem_24g_common_temp+1,contw + copy rega,loopcnt + copy regb,contr + call memcpy + arg mem_24g_common_temp,rega +g24_put_data_in_buff: + rtnmark0 mark_24g_conext + add regc,offset_24g_datalen,contw + istoret 1,contw + //storet 1,mem_24g_datalen + copy temp,loopcnt + add regc,offset_24g_txbuf,contw + //arg mem_24g_txbuf,contw + copy rega,contr + branch memcpy + +g24_transmit_prep: +// total length + add regc,offset_24g_datalen,rega + ifetch 1,rega + //fetch 1,mem_24g_datalen + increase 2,pdata + add regc,offset_24g_txlen,contw + istore 1,contw + //store 1,mem_24g_txlen +// data type + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + call g24_store_mem_txpayload + //store 1,mem_24g_txpayload +//prepare 5bit payload length, 2bit PID, 1bit NO_ACK + add regc,offset_24g_datalen,rega + ifetch 1,rega + //fetch 1,mem_24g_datalen + lshift3 pdata,pdata + add regc,offset_24g_pid,rega + ifetcht 1,rega + //fetcht 1,mem_24g_pid + and temp,0x03,temp + lshift temp,temp + ior temp,pdata + add regc,offset_24g_no_ack,rega + ifetcht 1,rega + //fetcht 1,mem_24g_no_ack + iadd temp,pdata + istore 1,contw +//prepare payload data + add regc,offset_24g_datalen,rega + ifetch 1,rega + //fetch 1,mem_24g_datalen + iforce loopcnt + add regc,offset_24g_txbuf,contr + //arg mem_24g_txbuf,contr + branch memcpy + +g24_send_abort_packet: + call g24_set1_mem_abort_pac + //jam 1,mem_24g_abort_pac + call g24_set0_mem_rf_hop_ch + //jam 0,mem_24g_rf_hop_ch + call g24_power_ctrl_reinit + call g24_transmit_rf_ctrl_clear + store 1,mem_24g_common_temp + call g24_put_data_in_buff_pre + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + set1 bit_abort,pdata + call g24_store_mem_data_type + //store 1,mem_24g_data_type + call g24_transmit_prep + call g24_txdata_enable_tx + branch g24_transmit_start + +g24_put_data_in_buff_pre: + store 1,mem_24g_common_temp+1 + call g24_fetch_mem_device_addr + //fetch 4,mem_24g_device_addr + store 4,mem_24g_common_temp+2 + arg 6,temp + arg mem_24g_common_temp,rega + branch g24_put_data_in_buff + +g24_enter_lpm: + add regc,offset_24g_abort_pac,rega + ifetch 1,rega + //fetch 1,mem_24g_abort_pac + branch g24_send_abort_packet,blank +g24_enter_lpm_prepare: + // some thing need to do and do not enter 24g long sleep + add regc,offset_24g_cb_lpm_prepare,rega + ifetch 2,rega + //fetch 2,mem_24g_cb_lpm_prepare + branch callback_func + +g24_lpm_long_sleep: + call g24_head_ptr2regc + //fetch 8,mem_24g_enter_hibernate + call lpo_calibration + fetch 3,mem_clks_per_lpo + rtn blank + add regc,offset_24g_cb_lpm_before,temp + ifetch 2,temp + //fetch 2,mem_24g_cb_lpm_before + call callback_func + add regc,offset_24g_enter_hibernate,temp + ifetch 8,temp + call clk2lpo + storet 4,mem_sleep_counter + branch lpm_sleep + +g24_transmit_packet: + call g24_head_ptr2regc + add regc,offset_24g_retry,contw + call g24_mem_set0 + //jam 0,mem_24g_retry +g24_transmit_loop: + call g24_transmit_receive_ack + nbranch g24_retransmit,sync + nbranch g24_retransmit,user3 + call g24_ackpayload_parse + call g24_power_ctrl_ack_incrs +g24_transmit_next_packet: + call g24_head_ptr2regc + add regc,offset_24g_pid,rega + ifetch 1,rega + //fetch 1,mem_24g_pid + increase 1,pdata + call g24_store_mem_pid + //store 1,mem_24g_pid + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + bne STATE_24G_PAIRING_SUCCESS,g24_paring_mode + call g24_transmit_succ_rf_config +g24_transmit_abandon: + setarg 0 + add regc,offset_24g_txfail_cnt,contw + istore 2,contw //include mem_24g_get_ack_fail + //store 1,mem_24g_txfail_cnt + //store 1,mem_24g_get_ack_fail + //jam ENSURE_OFF_24G,mem_24g_ensure + setarg ENSURE_OFF_24G + branch g24_store_mem_ensure + + +g24_transmit_receive_ack: + disable user3 + call g24_transmit + call g24_head_ptr2regc + add regc,offset_24g_no_ack,rega + ifetch 1,rega + //fetch 1,mem_24g_no_ack + beq no_ack_24g,g24_transmit_no_ack //tx no ack + call g24_receive_packet + branch g24_end_of_packet +g24_transmit_no_ack: + call g24_end_of_packet + branch g24_transmit_next_packet + + +g24_retransmit: + bpatch patch16_5,mem_patch16 + add regc,offset_24g_get_ack_fail,rega + ifetch 1,rega + //fetch 1,mem_24g_get_ack_fail + increase 1,pdata + add regc,offset_24g_get_ack_fail,contw + istore 1,contw + //store 1,mem_24g_get_ack_fail + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + bne STATE_24G_PAIRING_SUCCESS,g24_tx_paring_retry + add regc,offset_24g_retry,rega + ifetcht 1,rega + //fetcht 1,mem_24g_retry + increase 1,temp + add regc,offset_24g_retry,contw + istoret 1,contw + //storet 1,mem_24g_retry + add regc,offset_24g_max_retry,rega + ifetch 1,rega + //fetch 1,mem_24g_max_retry + isub temp,pdata + nbranch g24_transmit_loop,blank + bpatch patch16_6,mem_patch16 + call g24_fetch_mem_rf_work_stage + //fetch 1,mem_24g_rf_work_stage + beq 3,g24_transmit_pac_fail_hop_stage3 + add regc,offset_24g_hop_pac_retry,rega + ifetch 1,rega + //fetch 1,mem_24g_hop_pac_retry + increase 1,pdata + add regc,offset_24g_hop_pac_retry,contw + istore 1,contw + //store 1,mem_24g_hop_pac_retry + beq 2,g24_transmit_hop_pac_fail + call g24_hop_ch_enable + setarg 1 + call g24_store_mem_max_retry + //jam 1,mem_24g_max_retry + branch g24_transmit_packet + +g24_tx_paring_retry: + add regc,offset_24g_get_ack_fail,rega + ifetch 1,rega + //fetch 1,mem_24g_get_ack_fail + rtnne 0xff + add regc,offset_24g_get_ack_fail,contw + call g24_mem_set0 + //jam 0,mem_24g_get_ack_fail + branch g24_stop_24g_mode + +g24_tx_attempt_fail: + add regc,offset_24g_txfail_cnt,contw + call g24_mem_set0 + //jam 0,mem_24g_txfail_cnt +g24_stop_24g_mode: + jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp + branch ui_ipc_send_event + +g24_ackpayload_parse: + call g24_read_len_pid_crc + add regc,offset_24g_rxdata_length,rega + ifetch 1,rega + //fetch 1,mem_24g_rxdata_length //ack payload length + rtn blank + iforce loopcnt + add regc,offset_24g_rxbuf_add2,contr + //arg mem_24g_rxbuf+2,contr + add regc,offset_24g_rxpayload,contw + //arg mem_24g_rxpayload,contw //ack payload buffer + branch memcpy + + +g24_read_len_pid_crc: +//read control + call g24_fetch_mem_rxbuf_add1 + //fetch 1,mem_24g_rxbuf+1 + rshift3 pdata,pdata + add regc,offset_24g_rxdata_length,contw + istore 1,contw + //store 1,mem_24g_rxdata_length +//get crc + increase 1,pdata + add regc,offset_24g_rxbuf_add1,contr + //arg mem_24g_rxbuf+1,contr + iadd contr,contr + ifetch 3,contr + add regc,offset_24g_sta_crc,contw + istore 3,contw + //store 3,mem_24g_sta_crc +//read pid + call g24_fetch_mem_rxbuf_add1 + //fetch 1,mem_24g_rxbuf+1 + rshift pdata,pdata + and pdata,0x03,pdata + add regc,offset_24g_sta_pid,contw + istore 1,contw + //store 1,mem_24g_sta_pid + rtn + +g24_prep: + disable enable_crc + disable enable_white + setarg 0x555555 + iforce crc24_init + rtn + +g24_set_freq_tx: + call set_sync_on + add regc,offset_24g_ch,rega + ifetcht 1,rega + //fetcht 1,mem_24g_ch + branch set_freq_tx + +g24_transmit: + call g24_prep + call g24_set_freq_tx + set1 TXGFSK,radio_ctrl + enable encode_fec0 + enable is_tx + disable is_rx + call le_enable + call g24_fetch_mem_addr + //fetch 4,mem_24g_addr + iforce access + inject mod,32 + enable enable_crc + add regc,offset_24g_txlen,rega + ifetch 1,rega + //fetch 1,mem_24g_txlen + iforce loopcnt + add regc,offset_24g_txpayload,contr + //arg mem_24g_txpayload,contr +g24tr_loop: + ifetch 1,contr + inject mod,8 + loop g24tr_loop + enable enable_parity + inject mod,24 //crc + disable enable_parity + until null,tx_clear + bpatch patch16_7,mem_patch16 + nop 100 + disable encode_fec0 + rtn + +g24_receive_packet: + disable user3 + force 0,radio_ctrl + add regc,offset_24g_ch,rega + ifetcht 1,rega + //fetcht 1,mem_24g_ch + call set_freq_rx + call rf_rx_enable +g24_receive_rxon: + call g24_prep + enable decode_fec0 + enable is_rx + disable is_tx + call le_enable + call g24_fetch_mem_addr + //fetch 4,mem_24g_addr + iforce access + enable swfine + add regc,offset_24g_rx_window,rega + ifetch 2,rega + //fetch 2,mem_24g_rx_window + iforce stop_watch + correlate null,timeout + nbranch g24_sync_timeout,sync + enable enable_crc + parse demod,bucket,8 + rshift3 pwindow,pdata + add regc,offset_24g_rxbuf,contw + istore 1,contw + //store 1,mem_24g_rxbuf //device id + add regc,offset_24g_mode,rega + ifetch 1,rega + //fetch 1,mem_24g_mode + beq rx_24g,g24_receive_skip + bpatch patch17_0,mem_patch17 + add regc,offset_24g_rxbuf,rega + ifetch 1,rega + //fetch 1,mem_24g_rxbuf + add regc,offset_24g_data_type,rega + ifetcht 1,rega + //fetcht 1,mem_24g_data_type + icompare bits_data,temp + nbranch g24_end_of_packet,true +g24_receive_skip: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + rshift3 pdata,pdata + and pdata,0x1f,loopcnt //max payload: 32bytes + branch g24rx_nopayload,zero +g24rx_loop: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop g24rx_loop +g24rx_nopayload: + parse demod,bucket,24 + rshift32 pdata,pdata + rshift16 pdata,pdata + istore 3,contw + branch g24_end_of_packet,crc_failed + enable user3 + disable decode_fec0 + rtn +// branch rssi_signal + +g24_end_of_packet: + disable encode_fec0 + disable decode_fec0 + disable enable_crc + disable enable_white + branch shutdown_radio,is_rx + until null,tx_clear + nop 100 /* flush out the last bit */ + branch shutdown_radio + +g24_sync_timeout: + call rssi_noise + branch g24_end_of_packet + +rssi_noise: + call save_rssi + rtn blank + add regc,offset_rssi_noise_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_index + arg mem_rssi_noise_buffer,rega + //arg mem_rssi_noise_buf,rega + call rssi_noise_store + add regc,offset_rssi_noise_index,contw + //storet 1,mem_rssi_noise_index +g24_contw_istoret_1byte: + istoret 1,contw + rtn + +rssi_noise_store: + arg RSSI_BUF_LEN_NOISE,regb + branch rssi_store + +/* +rssi_signal: + call save_rssi + rtn blank + add regc,offset_rssi_signal_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_signal_index + add regc,offset_rssi_signal_buf,rega + //arg mem_rssi_signal_buf,rega + arg RSSI_BUF_LEN_SIGNAL,regb + call rssi_store + add regc,offset_rssi_signal_index,contw + istoret 1,contw + //storet 1,mem_rssi_signal_index + rtn +*/ +rssi_store: + copy rega,pdata + iadd temp,contw + fetch 1,mem_rssi + istore 1,contw + increase 1,temp + copy regb,pdata + iand_into temp + rtn + +rssi_average: + arg 0,temp + copy rega,contr +rssi_average_loop: + ifetch 1,contr + iadd temp,temp + loop rssi_average_loop + rshift8 temp,temp + rtn + +g24_power_ctrl_init: + call g24_head_ptr2regc + call g24_power_ctrl_incrs_level1 + setarg 1 + call g24_store_mem_power_ctrl_level + //jam 1,mem_power_ctrl_level +g24_power_ctrl_reinit: + setarg 0 + call g24_store_mem_power_ctrl_pac + //jam 0,mem_power_ctrl_packet_cnt + istore 1,contw + //jam 0,mem_power_ctrl_ack_cnt + rtn + +g24_power_ctrl_pac_incrs: + call g24_fetch_mem_power_ctrl_pac + //fetch 1,mem_power_ctrl_packet_cnt + increase 1,pdata +g24_store_mem_power_ctrl_pac: + //store 1,mem_power_ctrl_packet_cnt + add regc,offset_power_ctrl_packet_cnt,contw + branch g24_contw_istore_1byte + +g24_power_ctrl_ack_incrs: + //fetch 1,mem_power_ctrl_ack_cnt + //store 1,mem_power_ctrl_ack_cnt + add regc,offset_power_ctrl_ack_cnt,rega + ifetch 1,rega + increase 1,pdata + add regc,offset_power_ctrl_ack_cnt,contw + branch g24_contw_istore_1byte + +g24_power_ctrl: + bpatch patch17_1,mem_patch17 + call g24_fetch_mem_power_ctrl_pac + //fetch 1,mem_power_ctrl_packet_cnt + sub pdata,POWER_CTRL_MAX_PACKET_CNT,null + rtn positive + add regc,offset_power_ctrl_ack_cnt,rega + ifetcht 1,rega + //fetcht 1,mem_power_ctrl_ack_cnt + isub temp,temp //loss packet cnt + call g24_power_ctrl_reinit + setarg offset_power_ctrl_threshold_up + iadd regc,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_threshold_up + isub temp,null + nbranch g24_power_ctrl_incrs,positive + setarg offset_power_ctrl_threshold_down + iadd regc,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_threshold_down + isub temp,null + branch g24_power_ctrl_decrs,positive + rtn + +g24_power_ctrl_incrs: + add regc,offset_power_ctrl_level,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_level + beq 2,g24_power_ctrl_incrs_level2 + increase 1,pdata + call g24_store_mem_power_ctrl_level + //store 1,mem_power_ctrl_level + beq 1,g24_power_ctrl_incrs_level1 +g24_power_ctrl_incrs_level2: + setarg POWER_CTRL_LOSSPAC_THRESH_UP2 + call g24_store_mem_power_ctrl_threshold_up + //jam POWER_CTRL_LOSSPAC_THRESH_UP2,mem_power_ctrl_threshold_up + setarg POWER_CTRL_LOSSPAC_THRESH_DOWN2 + call g24_store_mem_power_ctrl_threshold_down + //jam POWER_CTRL_LOSSPAC_THRESH_DOWN2,mem_power_ctrl_threshold_down +// jam POWER_CTRL_RSSI_THRESH_DOWN2,mem_rssi_ctrl_threshold_down + add regc,offset_power_ctrl_txpwr_level2,rega + //fetch 1,mem_power_ctrl_txpwr_level2 + branch g24_ifetch_rega_store_mem_txpower + +g24_power_ctrl_decrs: + add regc,offset_power_ctrl_level,rega + ifetch 1,rega + //fetch 1,mem_power_ctrl_level + beq 0,g24_power_ctrl_decrs_level0 + increase -1,pdata + call g24_store_mem_power_ctrl_level + //store 1,mem_power_ctrl_level + beq 0,g24_power_ctrl_decrs_level0 +g24_power_ctrl_decrs_level1: +// call rssi_check_distance +// nrtn user +g24_power_ctrl_incrs_level1: + setarg POWER_CTRL_LOSSPAC_THRESH_UP1 + call g24_store_mem_power_ctrl_threshold_up + //jam POWER_CTRL_LOSSPAC_THRESH_UP1,mem_power_ctrl_threshold_up + setarg POWER_CTRL_LOSSPAC_THRESH_DOWN1 + call g24_store_mem_power_ctrl_threshold_down + //jam POWER_CTRL_LOSSPAC_THRESH_DOWN1,mem_power_ctrl_threshold_down +// jam POWER_CTRL_RSSI_THRESH_DOWN1,mem_rssi_ctrl_threshold_down + setarg offset_power_ctrl_txpwr_level1 +g24_iadd_offset_mem_txpower: + iadd regc,rega +g24_ifetch_rega_store_mem_txpower: + ifetch 1,rega + //fetch 1,mem_power_ctrl_txpwr_level1 + branch g24_store_mem_txpower + +g24_power_ctrl_decrs_level0: +// call rssi_check_distance +// nrtn user + setarg POWER_CTRL_LOSSPAC_THRESH_UP0 + call g24_store_mem_power_ctrl_threshold_up + //jam POWER_CTRL_LOSSPAC_THRESH_UP0,mem_power_ctrl_threshold_up + setarg POWER_CTRL_LOSSPAC_THRESH_DOWN0 + call g24_store_mem_power_ctrl_threshold_down + //jam POWER_CTRL_LOSSPAC_THRESH_DOWN0,mem_power_ctrl_threshold_down +// jam POWER_CTRL_RSSI_THRESH_DOWN0,mem_rssi_ctrl_threshold_down + setarg offset_power_ctrl_txpwr_level0 + //fetch 1,mem_power_ctrl_txpwr_level0 + branch g24_iadd_offset_mem_txpower + +/* +rssi_check_distance: + disable user + arg mem_rssi_signal_buf,rega + arg RSSI_BUF_LEN_SIGNAL+1,loopcnt + call rssi_average + storet 1,mem_rssi_signal_avg + fetch 1,mem_rssi_ctrl_threshold_down + isub temp,null + branch enable_user,positive + rtn +*/ +g24_start_pairing_sm1: + set1 mark_24g,mark + call g24_pair_init +g24_set_pairing_sm_1: + //jam STATE_24G_PAIRING_1,mem_24g_pairing_sm + setarg STATE_24G_PAIRING_1 + branch g24_store_mem_pairing_sm + +g24_pairing_sm: + add regc,offset_24g_ensure,rega + ifetch 1,rega + //fetch 1,mem_24g_ensure + beq ENSURE_ON_24G,enable_user + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + beq STATE_24G_PAIRING_1,g24_pairing_sm_1 + beq STATE_24G_PAIRING_2,g24_pairing_sm_2 + beq STATE_24G_PAIRING_3,g24_pairing_sm_3 + branch assert + +g24_pairing_sm_1: + setarg STATE_24G_PAIRING_1_WAITING_ACK + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm + jam 0xaa,mem_24g_common_temp + branch g24_pairing_sm_common +g24_pairing_sm_2: + setarg STATE_24G_PAIRING_2_WAITING_ACK + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm + jam 0x55,mem_24g_common_temp + branch g24_pairing_sm_common +g24_pairing_sm_3: + setarg STATE_24G_PAIRING_3_WAITING_ACK + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm + jam 0x22,mem_24g_common_temp +g24_pairing_sm_common: + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + and_into bits_data,pdata + store 1,mem_24g_common_temp+1 + call g24_fetch_mem_device_addr + //fetch 4,mem_24g_device_addr + store 4,mem_24g_common_temp+2 +g24_put_pairing_data_in_buff: + jam 0,mem_24g_common_temp+6 + arg mem_24g_common_temp,rega + arg 7,temp + call g24_put_data_in_buff + call g24_transmit_prep + call g24_txdata_enable_tx + branch enable_user + +g24_paring_mode: + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + rtneq STATE_24G_PAIRING_SUCCESS + beq STATE_24G_PAIRING_1_WAITING_ACK,g24_pairing_sm_1_waiting_ack + beq STATE_24G_PAIRING_2_WAITING_ACK,g24_pairing_sm_2_waiting_ack + beq STATE_24G_PAIRING_3_WAITING_ACK,g24_pairing_sm_3_waiting_ack + rtn + +g24_pairing_sm_1_waiting_ack: + setarg STATE_24G_PAIRING_2 + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_2,mem_24g_pairing_sm + branch g24_transmit_abandon +g24_pairing_sm_2_waiting_ack: + setarg STATE_24G_PAIRING_3 + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_3,mem_24g_pairing_sm + branch g24_transmit_abandon +g24_pairing_sm_3_waiting_ack: + setarg STATE_24G_PAIRING_SUCCESS + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm + jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp + call ui_ipc_send_event + add regc,offset_24g_rxpayload_add2,rega + ifetch 4,rega + //fetch 4,mem_24g_rxpayload+2 + call g24_store_mem_addr + //store 4,mem_24g_addr + branch g24_transmit_abandon + +g24_auto_pair_start: + set0 mark_24g,mark + call g24_auto_pair_set_device_info + call g24_tx_attemp_data_prep +g24_auto_pair_restart: + call g24_set0_mem_check_dongle_times +g24_auto_pair_start_loop: + nop 2000 + call g24_fetch_mem_check_dongle_times + beq 0xff,g24_stop_24g_mode + call g24_transmit_receive_ack + nbranch g24_auto_pair_retry,sync + nbranch g24_auto_pair_retry,user3 + call g24_ackpayload_parse + call g24_head_ptr2regc + add regc,offset_24g_paring_addr,rega + ifetcht 4,rega + call g24_fetch_mem_addr_isub_temp + branch g24_start_pairing_sm1,zero + call g24_head_ptr2regc + add regc,offset_24g_rxpayload_add2,rega + ifetch 4,rega + beq 0,g24_auto_pair_restart + call g24_store_mem_addr + branch g24_tx_attemp_dongle_succ + +g24_auto_pair_retry: + call g24_fetch_mem_check_dongle_times + increase 1,pdata + call g24_store_mem_check_dongle_times + + call g24_fetch_mem_auto_paring_switch + increase 1,pdata + and_into 1,pdata + call g24_store_mem_auto_paring_switch + beq 0,g24_auto_pair_device_attemp + beq 1,g24_auto_pair_pair_attemp + rtn + +g24_fetch_mem_auto_paring_switch: + setarg offset_24g_auto_pair_switch + branch g24_set_rega_ifetch_1byte +g24_store_mem_auto_paring_switch: + arg offset_24g_auto_pair_switch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_auto_pair_set_device_info: + call g24_store_mem_tx_power + call g24_fetch_mem_device_addr + call g24_store_mem_addr + branch g24_ch + +g24_auto_pair_device_attemp: + call g24_auto_pair_set_device_info + branch g24_auto_pair_start_loop + +g24_auto_pair_pair_attemp: + call g24_pair_init + branch g24_auto_pair_start_loop + + +g24_start_24g_mode: + set0 mark_24g,mark + call g24_ch + call g24_fetch_mem_pairing_sm + //fetch 1,mem_24g_pairing_sm + rtnne STATE_24G_PAIRING_SUCCESS + call g24_tx_attemp_data_prep + call g24_set0_mem_check_dongle_times + //jam 0,mem_24g_check_dongle_times +g24_tx_attemp_dongle_loop: + nop 2000 + call g24_fetch_mem_check_dongle_times + //fetch 1,mem_24g_check_dongle_times + beq 0xff,g24_stop_24g_mode + call g24_transmit_receive_ack + nbranch g24_attemp_txdata_retry,sync + nbranch g24_attemp_txdata_retry,user3 +g24_tx_attemp_dongle_succ: + set1 mark_24g,mark + call g24_set0_mem_check_dongle_times + setarg STATE_24G_PAIRING_SUCCESS + call g24_store_mem_pairing_sm + //jam 0,mem_24g_check_dongle_times + jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp + branch ui_ipc_send_event + +g24_tx_attemp_data_prep: + set1 mark_24g_conext,mark + jam 0xff,mem_24g_common_temp + call g24_fetch_mem_data_type + //fetch 1,mem_24g_data_type + call g24_put_data_in_buff_pre + branch g24_transmit_prep + +g24_attemp_txdata_retry: + call g24_fetch_mem_check_dongle_times + //fetch 1,mem_24g_check_dongle_times + increase 1,pdata + call g24_store_mem_check_dongle_times + //store 1,mem_24g_check_dongle_times + call g24_ch + branch g24_tx_attemp_dongle_loop + +g24_check_51cmd_start_24g: + call g24_store_mem_tx_power + //fetch 1,mem_tx_power_temp + //store 1,mem_tx_power + setarg STATE_24G_PAIRING_SUCCESS + call g24_store_mem_pairing_sm + //jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm + branch g24_start_24g_mode +/* +g24_check_51cmd_stop_24g: + call g24_store_mem_tx_power + set0 mark_24g,mark + branch le_disable +*/ + + +dongle_init: + bpatch patch17_2,mem_patch17 + call g24_head_ptr2regc + setarg dongle_rxdata_type1 + add regc,offset_24g_cb_rxdata_type1,contw + istore 2,contw + //store 2,mem_24g_cb_rxdata_type1 + call g24_receive_init + call usb_init + call g24_fetch_mem_pair_mode + //fetch 1,mem_24g_pair_mode + bpatch patch17_3,mem_patch17 + beq 0x00,dongle_auto_bind + beq 0x01,dongle_pc_bind + beq 0x0f,dongle_all_powerful + branch assert + +g24_receive_init: + call g24_store_mem_tx_power_temp + arg 0x80,loopcnt + arg mem_rssi_noise_buffer,contw + branch memset0 + +dongle_all_powerful: + call dongle_check_mode +dongle_all_powerful_loop: + call g24_dongle_work_mode + call usb_isr + branch dongle_all_powerful_loop + +dongle_pc_bind: + bpatch patch17_4,mem_patch17 + call dongle_check_mode +dongle_pc_bind_loop: + call g24_dongle_work_mode + call g24_dongle_bind_mode + call usb_isr + call dongle_usb_dispatch + branch dongle_pc_bind_loop + +dongle_check_mode: + //jam DONGLE_WORK,mem_dongle_work_mode + //jam CLEAR_INIT,mem_dongle_mode_init + //jam 0,mem_24g_ackpayload_enable + call g24_set_work_mem_dongle_work_mode + call g24_set0_mem_dongle_mode_init + branch g24_set0_mem_ackpayload_enable + +g24_dongle_work_mode: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_WORK +g24_dongle_work_mode_start: + call g24_dongle_work_init + call g24_ch_process + call g24_receive_packet_start + branch g24_blank_data_process + +g24_dongle_work_init: + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + rtnbit1 DONGLE_WORK + set1 DONGLE_WORK,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_store_mem_tx_power + //fetch 1,mem_tx_power_temp + //store 1,mem_tx_power + call g24_set0_mem_ackpayload_enable + //jam 0,mem_24g_ackpayload_enable + jam 0,mem_usb_tx_enable + call g24_set1_mem_abort_pac + //jam 1,mem_24g_abort_pac + call g24_dongle_init +g24_rx_interrupt_clear: + add regc,offset_24g_rxbuf,contw + //arg mem_24g_rxbuf,contw + arg 66,loopcnt + branch clear_mem + +g24_dongle_init: + call g24_set0_mem_pid + //jam 0,mem_24g_pid + call g24_fetch_mem_rx_addr + //fetch 4,mem_24g_rx_addr + call g24_store_mem_addr + //store 4,mem_24g_addr + branch g24_ch + +g24_ch_process: + bpatch patch17_5,mem_patch17 + call g24_fetch_mem_abort_pac + //fetch 1,mem_24g_abort_pac + beq 1,g24_noise_rssi + call g24_fetch_mem_hop_pac + //fetch 1,mem_24g_hop_pac + beq 1,g24_ch + setarg offset_24g_hop_btclk + iadd regc,rega + ifetcht 4,rega + //fetcht 4,mem_24g_hop_btclk + copy clkn_bt,pdata + isub temp,null + ncall g24_timer_timeout,positive + copy pdata,regb + setarg offset_24g_hop_btclk + iadd regc,rega + ifetch 4,rega + copy pdata,temp + //fetch 4,mem_24g_hop_btclk + setarg offset_24g_hop_interval + iadd regc,rega + copy temp,pdata + ifetcht 1,rega + //fetcht 1,mem_24g_hop_interval + iadd temp,temp + copy regb,pdata + isub temp,null + nrtn positive + set0 28,pdata + setarg offset_24g_hop_btclk + iadd regc,contw + istore 4,contw + //store 4,mem_24g_hop_btclk +g24_ch_update: + call g24_ch + call g24_fetch_mem_rf_laststa + //fetch 1,mem_24g_rf_laststa + increase 1,pdata + call g24_store_mem_rf_laststa + //store 1,mem_24g_rf_laststa + rtnne 2 + call g24_set0_mem_rf_laststa + //jam 0,mem_24g_rf_laststa + //jam 1,mem_24g_abort_pac + //rtn + branch g24_set1_mem_abort_pac + +g24_ch_timer_reinit: + copy clkn_bt,pdata + arg offset_24g_hop_btclk,rega + call g24_set_contw_with_temp + istore 4,contw + //store 4,mem_24g_hop_btclk + //jam 0,mem_24g_rf_laststa + //rtn + branch g24_set0_mem_rf_laststa + +g24_noise_rssi: + arg mem_rssi_noise_buffer,rega + call g24_noise_rssi_average + add regc,offset_rssi_noise_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + branch g24_ch + +g24_noise_rssi_average: + arg RSSI_BUF_LEN_NOISE+1,loopcnt + branch rssi_average + +g24_blank_data_process: + call g24_ms_blank_data + call g24_kb_blank_data + branch g24_kb_mul_blank_data + +g24_ms_blank_data: + setarg offset_24g_ms_blank_data_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_blank_data_enable + rtn blank + arg TIMER_MS_BLANK,queue + call timer_check + nrtn blank + call g24_set0_mem_ms_blank_data_enable + //jam 0,mem_24g_ms_blank_data_enable + setarg MS_REPORT_ID + store 1,mem_usb_mouse_data + setarg 0 + istore 7,contw + branch g24_data_type1_usbtx_enable + +g24_kb_blank_data: + setarg offset_24g_kb_blank_data_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_blank_data_enable + rtn blank + arg TIMER_KB_BLANK,queue + call timer_check + nrtn blank + call g24_set0_mem_kb_blank_data_enable + //jam 0,mem_24g_kb_blank_data_enable + arg mem_usb_kb_data,contw + arg 2,loopcnt + call memset0 + jam KB_NORMAL_REPORT_ID,mem_usb_kb_data + branch g24_kb_data_into_ep1_fifo + +g24_kb_mul_blank_data: + setarg offset_24g_kb_mul_blank_data_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_mul_blank_data_enable + rtn blank + arg TIMER_KB_MUL_BLANK,queue + call timer_check + nrtn blank + call g24_set0_mem_kb_mul_blank_data_enable + //jam 0,mem_24g_kb_mul_blank_data_enable + arg mem_usb_kb_multikey,contw + arg 2,loopcnt + call memset0 + jam KB_MULTIKEY_REPORT_ID,mem_usb_kb_multikey + branch g24_kb_mul_data_into_ep2_fifo + +g24_dongle_bind_mode: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_BIND + call g24_dongle_bind_init + branch g24_dongle_bind_data_process + +g24_dongle_bind_init: + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + rtnbit1 DONGLE_BIND + set1 DONGLE_BIND,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_set1_mem_ackpayload_enable + //jam 1,mem_24g_ackpayload_enable + call g24_pair_init + setarg 0 + arg offset_dongle_ms_bind_step,rega + call g24_set_contw_with_temp + //store 3,mem_dongle_ms_bind_step + branch g24_contw_istore_3byte + +g24_dongle_bind_data_process: + call g24_receive_transmit_ack + nbranch g24_rx_interrupt_clear,user3 + add regc,offset_24g_rxbuf,contr + setarg offset_24g_rxdata_temp + iadd regc,contw + arg 8,loopcnt + call memcpy + setarg offset_24g_rxdata_temp_add2 + call g24_set_rega_ifetch_1byte + beq DATATYPE_BIND,g24_dongle_bind_first_step //bind step 1 + beq DATATYPE_CONFIG,g24_dongle_bind_second_step + beq DATATYPE_OK,g24_dongle_bind_third_step + beq 0xff,g24_data_attemp + branch g24_rx_interrupt_clear + +g24_dongle_bind_first_step: + call g24_fetch_mem_rxdata_temp_add3_1byte + beq BIND_MOUSE,g24_dongle_bind_first_step_mouse + beq BIND_KEYBOARD,g24_dongle_bind_first_step_keyboard + rtn +g24_dongle_bind_first_step_mouse: + setarg 1 + call g24_store_mem_ms_bind_step + //jam 1,mem_dongle_ms_bind_step +g24_dongle_bind_ms_payload_cfg: + setarg DATATYPE_MOUSE + call g24_store_mem_bind_payload + //jam DATATYPE_MOUSE,mem_24g_bind_payload +g24_dongle_bind_payload_cfg: + setarg 0x80 + arg offset_24g_bind_payload_add1,rega + call g24_set_contw_with_regb_store_1byte + //jam 0x80,mem_24g_bind_payload+1 + call g24_fetch_mem_rx_addr + //fetch 4,mem_24g_rx_addr + arg offset_24g_bind_payload_add2,rega + call g24_set_contw_with_temp + //store 4,mem_24g_bind_payload+2 + branch g24_contw_istore_4byte + +g24_dongle_bind_first_step_keyboard: + setarg 1 + call g24_store_mem_kb_bind_step + //jam 1,mem_dongle_kb_bind_step +g24_dongle_bind_kb_payload_cfg: + setarg DATATYPE_KEYBOARD + call g24_store_mem_bind_payload + //jam DATATYPE_KEYBOARD,mem_24g_bind_payload + branch g24_dongle_bind_payload_cfg + +g24_dongle_bind_second_step: + call g24_fetch_mem_rxdata_temp_add3_1byte + beq BIND_MOUSE,g24_dongle_bind_second_step_mouse + beq BIND_KEYBOARD,g24_dongle_bind_second_step_keyboard + rtn +g24_dongle_bind_second_step_mouse: + call g24_dongle_bind_ms_payload_cfg + setarg offset_dongle_ms_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_ms_bind_step + beq 1,g24_dongle_ms_bind_step_set2 + rtn +g24_dongle_ms_bind_step_set2: + setarg 2 + //jam 2,mem_dongle_ms_bind_step +g24_store_mem_ms_bind_step: + arg offset_dongle_ms_bind_step,rega + branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_second_step_keyboard: + call g24_dongle_bind_kb_payload_cfg + setarg offset_dongle_kb_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_kb_bind_step + beq 1,g24_dongle_kb_bind_step_set2 + rtn +g24_dongle_kb_bind_step_set2: + setarg 2 + //jam 2,mem_dongle_kb_bind_step +g24_store_mem_kb_bind_step: + arg offset_dongle_kb_bind_step,rega + branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_third_step: + call g24_fetch_mem_rxdata_temp_add3_1byte + beq BIND_MOUSE,g24_dongle_bind_third_step_mouse + beq BIND_KEYBOARD,g24_dongle_bind_third_step_keyboard + rtn +g24_dongle_bind_third_step_mouse: + setarg offset_dongle_ms_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_ms_bind_step + beq 2,g24_dongle_ms_bind_step_success + rtn +g24_dongle_ms_bind_step_success: + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + or_into 0x01,pdata + call g24_store_mem_bind_device_status + //store 1,mem_dongle_bind_device_status +g24_dongle_bind_exit: + setarg 0 + setarg offset_dongle_ms_bind_step + iadd regc,contw + istore 2,contw + branch g24_rx_interrupt_clear + +g24_dongle_bind_third_step_keyboard: + setarg offset_dongle_kb_bind_step + call g24_set_rega_ifetch_1byte + //fetch 1,mem_dongle_kb_bind_step + bne 0,g24_dongle_kb_bind_step_success + rtn +g24_dongle_kb_bind_step_success: + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + or_into 0x02,pdata + call g24_store_mem_bind_device_status + //store 1,mem_dongle_bind_device_status + branch g24_dongle_bind_exit + + +dongle_usb_dispatch: + fetch 1,mem_usb0_get_set_report + rtn blank + jam 0,mem_usb0_get_set_report + fetch 2,mem_usb_setup_bValue_temp + arg PC_SET_REPORT,temp + isub temp,null + nrtn zero + //get usb host command + fetch 1,mem_usb0_set_report_data + rtnne PC_REPORT_ID + fetch 1,mem_usb0_set_report_data+1 + bpatch patch17_6,mem_patch17 + beq COMMAND_MODE,dongle_dispose_cmd_mode + beq COMMAND_BIND,dongle_dispose_cmd_bind + beq COMMAND_CURRENT_PROJECT,dongle_dispose_cmd_current_project + beq COMMAND_CURRENT_MODE,dongle_dispose_cmd_current_mode + beq COMMAND_CURRENT_FW_VERSION,dongle_dispose_cmd_current_fw_version + beq COMMAND_USER_DEFINED,dongle_dispose_cmd_user_defined +usb0_data_ready_report_set0: + jam 0,mem_usb0_data_ready_report + rtn +dongle_dispose_cmd_bind: + fetch 1,mem_usb0_set_report_data+2 + beq COM_BIND_GET,dongle_dispose_cmd_get_bind + beq COM_BIND_EXIT,dongle_dispose_cmd_exit_bind + beq COM_READ_MODE,dongle_dispose_cmd_read_mode + branch usb0_data_ready_report_set0 +dongle_dispose_cmd_get_bind: + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + store 1,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 +dongle_dispose_cmd_exit_bind: + call g24_set_work_mem_dongle_work_mode + //jam DONGLE_WORK,mem_dongle_work_mode + call g24_set0_mem_dongle_mode_init + //jam CLEAR_INIT,mem_dongle_mode_init + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + store 1,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_read_mode: +dongle_dispose_in_bind_mode: + jam COMMAND_BIND,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_mode: + fetch 1,mem_usb0_set_report_data+2 + beq COM_MODE_BIND,dongle_enter_bind_mode +// beq COM_MODE_TEST,dongle_enter_test_mode + branch usb0_data_ready_report_set0 +dongle_enter_bind_mode: + //jam DONGLE_BIND,mem_dongle_work_mode + //jam CLEAR_INIT,mem_dongle_mode_init + call g24_bind_mode_enable +usb0_data_ready_report_set1: + jam 1,mem_usb0_data_ready_report + rtn +//dongle_enter_test_mode: +// jam DONGLE_TEST,mem_dongle_work_mode +// branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_project: + jam PRODUCT_ID,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_mode: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + beq DONGLE_WORK,dongle_dispose_in_work_mode + beq DONGLE_BIND,dongle_dispose_in_bind_mode +// beq DONGLE_TEST,dongle_dispose_in_test_mode + rtn +dongle_dispose_in_work_mode: + jam COMMAND_MODE,mem_usb0_get_report_data+1 + branch usb0_data_ready_report_set1 +//dongle_dispose_in_test_mode: +// jam COMMAND_TEST,mem_usb0_get_report_data+1 +// branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_fw_version: + jam FW_VERSION0,mem_usb0_get_report_data+1 + jam FW_VERSION1,mem_usb0_get_report_data+2 + jam FW_VERSION2,mem_usb0_get_report_data+3 + branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_user_defined: + //report_id|cmd|data_len|data + call g24_set1_mem_ackpayload_enable + fetch 1,mem_usb0_set_report_data+2 //data_len:max 30bytes + increase 2,pdata + copy pdata,loopcnt + arg mem_usb0_set_report_data,contr + setarg offset_24g_ackpayload + iadd regc,contw + branch memcpy + + +dongle_auto_bind: + bpatch patch17_7,mem_patch17 + call g24_mode_switch_init +dongle_auto_bind_loop: + call g24_receive_process + call usb_isr + branch dongle_auto_bind_loop + +g24_dongle_work_mode_auto: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_WORK + call g24_dongle_work_mode_start + branch g24_rx_nodata_process + +g24_dongle_bind_mode_auto: + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_BIND + call g24_dongle_bind_init + call g24_dongle_bind_data_process + call g24_fetch_mem_bind_device_status + //fetch 1,mem_dongle_bind_device_status + rtn blank + call g24_set0_mem_mode_switch + //jam 0,mem_24g_mode_switch + call dongle_check_mode + call g24_enable_nodata_timer +g24_timer_init: + setarg 0 + add regc,offset_24g_tx_btclk,contw + //store 4,mem_24g_tx_btclk + branch g24_contw_istore_4byte + +g24_timer_check: + call disable_user + add regc,offset_24g_tx_btclk,rega + ifetcht 4,rega + //fetcht 4,mem_24g_tx_btclk + copy clkn_bt,pdata + isub temp,null + ncall g24_timer_timeout,positive + copy pdata,regb + add regc,offset_24g_tx_btclk,rega + ifetch 4,rega + //fetch 4,mem_24g_tx_btclk + add regc,offset_24g_interval,rega + ifetcht 1,rega + //fetcht 1,mem_24g_interval + iadd temp,temp + copy regb,pdata + isub temp,null + nrtn positive + set0 28,pdata + add regc,offset_24g_tx_btclk,contw + istore 4,contw + //store 4,mem_24g_tx_btclk + branch enable_user + +g24_mode_switch_init: + setarg 1 + call g24_store_mem_mode_switch + //jam 1,mem_24g_mode_switch + call g24_set0_mem_time_slice + //jam 0,mem_24g_time_slice + setarg 0xff + add regc,offset_24g_interval,contw + istore 1,contw + //jam 0xff,mem_24g_interval + branch g24_timer_init + +g24_mode_switch: + setarg offset_24g_mode_switch + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_mode_switch + rtn blank + call g24_timer_check + nrtn user + call g24_fetch_mem_time_slice + //fetch 1,mem_24g_time_slice + increase 1,pdata + and_into 1,pdata + call g24_store_mem_time_slice + //store 1,mem_24g_time_slice + beq 0,dongle_check_mode + beq 1,g24_bind_mode_enable + rtn + +g24_bind_mode_enable: + //jam DONGLE_BIND,mem_dongle_work_mode + //jam CLEAR_INIT,mem_dongle_mode_init + //rtn + setarg DONGLE_BIND + call g24_store_mem_dongle_work_mode + branch g24_set0_mem_dongle_mode_init + +g24_enable_nodata_timer: + setarg 1 + call g24_store_mem_nodata_timer_enable + //jam 1,mem_24g_nodata_timer_enable + setarg TIMER_NODATA_DELAY + arg TIMER_NODATA,queue + branch timer_init + +g24_rx_nodata_process: + call g24_fetch_mem_nodata_timer_enable + //fetch 1,mem_24g_nodata_timer_enable + rtn blank + arg TIMER_NODATA,queue + call timer_check + nrtn blank + call g24_set0_mem_nodata_timer_enable + //jam 0,mem_24g_nodata_timer_enable + //no data for more than 100ms,then go to search + setarg DONGLE_SEARCH + call g24_store_mem_dongle_work_mode + //jam DONGLE_SEARCH,mem_dongle_work_mode + call g24_set0_mem_dongle_mode_init + //jam CLEAR_INIT,mem_dongle_mode_init + branch g24_rx_interrupt_clear + +g24_dongle_search_mode_auto: + bpatch patch18_0,mem_patch18 + call g24_fetch_mem_dongle_work_mode + //fetch 1,mem_dongle_work_mode + rtnne DONGLE_SEARCH + call g24_dongle_search_mode_init + call g24_rx_auto_addr_ch_search + call g24_receive_transmit_ack + nbranch g24_rx_interrupt_clear,user3 + //dongle addr,then parse rxdata + call g24_dongle_search_addr_check + call g24_receive_packet_parse,zero + //receive data,then go to paired + //jam DONGLE_WORK,mem_dongle_work_mode + //jam 0,mem_24g_ackpayload_enable + call dongle_check_mode + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + set1 DONGLE_WORK,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_rx_interrupt_clear + call g24_enable_nodata_timer + call g24_dongle_search_addr_check + branch g24_dg_ch_num_reinit,zero + setarg offset_24g_kb_addr + call g24_set_rega_ifetcht_4byte + //fetcht 4,mem_24g_kb_addr + call g24_fetch_mem_addr_isub_temp + branch g24_kb_ch_num_reinit,zero + setarg offset_24g_mouse_addr + call g24_set_rega_ifetcht_4byte + //fetcht 4,mem_24g_mouse_addr + call g24_fetch_mem_addr_isub_temp + branch g24_ms_ch_num_reinit,zero + rtn + +g24_dongle_search_addr_check: + setarg offset_24g_rx_addr + call g24_set_rega_ifetcht_4byte + //fetcht 4,mem_24g_rx_addr +g24_fetch_mem_addr_isub_temp: + call g24_fetch_mem_addr + //fetch 4,mem_24g_addr + isub temp,null + rtn + +g24_dg_ch_num_reinit: + setarg offset_24g_dg_ch_number + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_dg_ch_number +g24_current_ch_num_reinit: + //store 1,mem_24g_current_ch_number + add regc,offset_24g_current_ch_number,contw + branch g24_contw_istore_1byte + +g24_kb_ch_num_reinit: + setarg offset_24g_kb_ch_number + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_ch_number + branch g24_current_ch_num_reinit +g24_ms_ch_num_reinit: + setarg offset_24g_ms_ch_number + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_ch_number + branch g24_current_ch_num_reinit + +g24_dongle_search_mode_init: + call g24_fetch_mem_dongle_mode_init + //fetch 1,mem_dongle_mode_init + rtnbit1 DONGLE_SEARCH + set1 DONGLE_SEARCH,pdata + call g24_store_mem_dongle_mode_init + //store 1,mem_dongle_mode_init + call g24_set0_mem_time_slice + //jam 0,mem_24g_time_slice + call g24_set1_mem_ackpayload_enable + //jam 1,mem_24g_ackpayload_enable + setarg 0 + add regc,offset_rssi_noise_dg_index,contw + istore 3,contw + //store 3,mem_rssi_noise_dg_index + arg offset_24g_dg_config_ch_once,rega + call g24_set_contw_with_temp + istore 7,contw + //store 7,mem_24g_dg_config_ch_once + + call g24_dongle_search_addr_check + nrtn zero + add regc,offset_24g_current_ch_number,rega + ifetch 1,rega + //fetch 1,mem_24g_current_ch_number + arg offset_24g_dg_ch_number,rega + call g24_set_contw_with_regb_store_1byte + //store 1,mem_24g_dg_ch_number + add regc,offset_24g_ch,rega + ifetch 1,rega + //fetch 1,mem_24g_ch + //store 1,mem_24g_dg_last_ch + branch g24_store_mem_dg_last_ch + +g24_rx_auto_addr_ch_search: + bpatch patch18_1,mem_patch18 + call g24_fetch_mem_time_slice + //fetch 1,mem_24g_time_slice + increase 1,pdata + and_into 3,pdata + call g24_store_mem_time_slice + //store 1,mem_24g_time_slice + //pairing address and channel come first + beq 0,g24_rx_auto_bind_config_kb + beq 1,g24_rx_auto_bind_config_dongle + beq 2,g24_rx_auto_bind_config_mouse + beq 3,g24_rx_auto_bind_config_dongle + rtn + +g24_rx_auto_bind_config_mouse: + call g24_dongle_bind_ms_payload_cfg + setarg offset_24g_mouse_addr + call g24_set_rega_ifetch_4byte + //fetch 4,mem_24g_mouse_addr + branch g24_rx_auto_addr_ch_search,blank + call g24_store_mem_addr + //store 4,mem_24g_addr + setarg offset_24g_ms_config_ch_once + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_config_ch_once + call g24_ms_config_ch_once,blank + setarg offset_24g_ms_last_ch + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ms_last_ch + call g24_store_mem_ch + //store 1,mem_24g_ch + add regc,offset_rssi_noise_ms_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_ms_index + arg mem_rssi_noise_ms_buffer,rega + call rssi_noise_store + add regc,offset_rssi_noise_ms_index,contw + istoret 1,contw + //storet 1,mem_rssi_noise_ms_index + call g24_noise_rssi_average + add regc,offset_rssi_noise_ms_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_ms_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + setarg offset_24g_ms_ch_number + call g24_set_rega_ifetcht_1byte + //fetcht 1,mem_24g_ms_ch_number + call g24_ch_temp_incre_size4 //map size =4 + arg offset_24g_ms_ch_number,rega + call g24_set_contw_with_regb2 + istoret 1,contw + //storet 1,mem_24g_ms_ch_number +g24_store_mem_ms_last_ch: + //store 1,mem_24g_ms_last_ch + arg offset_24g_ms_last_ch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_ms_config_ch_once: + setarg 1 + arg offset_24g_ms_config_ch_once,rega + call g24_set_contw_with_regb_store_1byte + //jam 1,mem_24g_ms_config_ch_once + arg 0,temp + call g24_ch_calc + //store 1,mem_24g_ms_last_ch + //rtn + branch g24_store_mem_ms_last_ch + +g24_rx_auto_bind_config_kb: + call g24_dongle_bind_kb_payload_cfg + setarg offset_24g_kb_addr + call g24_set_rega_ifetch_4byte + //fetch 4,mem_24g_kb_addr + branch g24_rx_auto_addr_ch_search,blank + call g24_store_mem_addr + //store 4,mem_24g_addr + setarg offset_24g_kb_config_ch_once + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_config_ch_once + call g24_kb_config_ch_once,blank + setarg offset_24g_kb_last_ch + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_kb_last_ch + call g24_store_mem_ch + //store 1,mem_24g_ch + add regc,offset_rssi_noise_kb_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_kb_index + arg mem_rssi_noise_kb_buffer,rega + call rssi_noise_store + add regc,offset_rssi_noise_kb_index,contw + istoret 1,contw + //storet 1,mem_rssi_noise_kb_index + call g24_noise_rssi_average + add regc,offset_rssi_noise_kb_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_kb_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + setarg offset_24g_kb_ch_number + call g24_set_rega_ifetcht_1byte + //fetcht 1,mem_24g_kb_ch_number + call g24_ch_temp_incre_size4 //map size =4 + arg offset_24g_kb_ch_number,rega + call g24_set_contw_with_regb2 + istoret 1,contw + //storet 1,mem_24g_kb_ch_number +g24_store_mem_kb_last_ch: + //store 1,mem_24g_kb_last_ch + arg offset_24g_kb_last_ch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_kb_config_ch_once: + setarg 1 + arg offset_24g_kb_config_ch_once,rega + call g24_set_contw_with_regb_store_1byte + //jam 1,mem_24g_kb_config_ch_once + arg 0,temp + call g24_ch_calc + //store 1,mem_24g_kb_last_ch + //rtn + branch g24_store_mem_kb_last_ch + +g24_rx_auto_bind_config_dongle: + call g24_dongle_bind_ms_payload_cfg + call g24_fetch_mem_rx_addr + //fetch 4,mem_24g_rx_addr + call g24_store_mem_addr + //store 4,mem_24g_addr + setarg offset_24g_dg_config_ch_once + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_dg_config_ch_once + call g24_dg_config_ch_once,blank + call g24_dg_store_config_ch + add regc,offset_rssi_noise_dg_index,rega + ifetcht 1,rega + //fetcht 1,mem_rssi_noise_dg_index + arg mem_rssi_noise_dg_buffer,rega + call rssi_noise_store + add regc,offset_rssi_noise_dg_index,contw + istoret 1,contw + //storet 1,mem_rssi_noise_dg_index + call g24_noise_rssi_average + add regc,offset_rssi_noise_dg_avg,contw + istoret 1,contw + //storet 1,mem_rssi_noise_dg_avg + sub temp,RSSI_THRESH_NOISE,null + nrtn positive + setarg offset_24g_dg_ch_number + call g24_set_rega_ifetcht_1byte + //fetcht 1,mem_24g_dg_ch_number + call g24_ch_temp_incre_size4 //map size =4 + arg offset_24g_dg_ch_number,rega + call g24_set_contw_with_regb2 + istoret 1,contw + //storet 1,mem_24g_dg_ch_number +g24_store_mem_dg_last_ch: + //store 1,mem_24g_dg_last_ch + //rtn + arg offset_24g_dg_last_ch,rega + branch g24_set_contw_with_regb_store_1byte + + +g24_dg_config_ch_once: + //jam 1,mem_24g_dg_config_ch_once + //fetch 1,mem_24g_dg_last_ch + //store 1,mem_24g_ch + //rtn + setarg 1 + arg offset_24g_dg_config_ch_once,rega + call g24_set_contw_with_regb_store_1byte +g24_dg_store_config_ch: + setarg offset_24g_dg_last_ch + call g24_set_rega_ifetch_1byte + branch g24_store_mem_ch + + +g24_transmit_ack: +//data type + add regc,offset_24g_rxbuf,rega + ifetch 1,rega + //fetch 1,mem_24g_rxbuf + call g24_store_mem_data_type + //store 1,mem_24g_data_type +//read len pid crc + call g24_read_len_pid_crc +//read ack + call g24_fetch_mem_rxbuf_add1 + //fetch 1,mem_24g_rxbuf+1 + isolate1 bit_ack_24g,pdata + branch g24tx_no_ack,true +g24tx_with_ack: + call g24_ackpayload_prep + call g24_transmit_prep + call g24_transmit +g24tx_no_ack: + branch g24_end_of_packet + +g24_ackpayload_prep: + bpatch patch18_2,mem_patch18 + add regc,offset_24g_datalen,contw + call g24_mem_set0 + //jam 0,mem_24g_datalen + setarg offset_24g_ackpayload_enable + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_ackpayload_enable + rtn blank + setarg 0x06 + add regc,offset_24g_datalen,contw + istore 1,contw + //jam 0x06,mem_24g_datalen + arg 0x06,loopcnt + setarg offset_24g_bind_payload + iadd regc,contr + //arg mem_24g_bind_payload,contr + add regc,offset_24g_txbuf,contw + //arg mem_24g_txbuf,contw + branch memcpy + + +g24_receive_packet_start: + call g24_receive_transmit_ack + nbranch g24_rx_interrupt_clear,user3 + branch g24_receive_packet_parse + +g24_receive_transmit_ack: + call g24_rx_interrupt_clear + call g24_receive_packet + nrtn user3 + branch g24_transmit_ack + +g24_receive_packet_parse: + bpatch patch18_3,mem_patch18 + call g24_receive_packet_parse_pid_crc + nbranch g24_rx_interrupt_clear,user + add regc,offset_24g_rxdata_length,rega + ifetch 1,rega + //fetch 1,mem_24g_rxdata_length + branch g24_rx_interrupt_clear,blank + increase 2,pdata + iforce loopcnt + add regc,offset_24g_rxbuf,contr + //arg mem_24g_rxbuf,contr + setarg offset_24g_rxdata_temp + iadd regc,contw + //arg mem_24g_rxdata_temp,contw + call memcpy + call g24_set0_mem_mode_switch + //jam 0,mem_24g_mode_switch + call g24_fetch_mem_pair_mode + //fetch 1,mem_24g_pair_mode + call g24_enable_nodata_timer,blank + setarg offset_24g_rxdata_temp_add2 + call g24_set_rega_ifetch_1byte + //fetch 1,mem_24g_rxdata_temp+2 + beq 0x01,g24_data_type1 + beq 0x02,g24_data_type2 + beq 0x03,g24_data_type3 + beq 0xff,g24_data_attemp + branch g24_rx_interrupt_clear + +g24_receive_packet_parse_pid_crc: + call g24_head_ptr2regc + call disable_user + add regc,offset_24g_sta_pid,rega + ifetch 1,rega + //fetch 1,mem_24g_sta_pid + add regc,offset_24g_last_pid,rega + ifetcht 1,rega + //fetcht 1,mem_24g_last_pid + isub temp,null + ncall enable_user,zero + add regc,offset_24g_sta_pid,rega + ifetch 1,rega + //fetch 1,mem_24g_sta_pid + add regc,offset_24g_last_pid,contw + istore 1,contw + //store 1,mem_24g_last_pid + add regc,offset_24g_sta_crc,rega + ifetch 3,rega + //fetch 3,mem_24g_sta_crc + add regc,offset_24g_last_crc,rega + ifetcht 3,rega + //fetcht 3,mem_24g_last_crc + isub temp,null + ncall enable_user,zero + add regc,offset_24g_sta_crc,rega + ifetch 3,rega + //fetch 3,mem_24g_sta_crc + add regc,offset_24g_last_crc,contw + //store 3,mem_24g_last_crc + branch g24_contw_istore_3byte + +g24_data_type1: + call g24_ch_timer_reinit + call g24_fetch_mem_abort_pac + store 1,mem_temp + //fetch 1,mem_24g_abort_pac + call g24_fetcht_mem_rxdata_temp + fetch 1,mem_temp + //fetcht 1,mem_24g_rxdata_temp + isolate1 bit_abort,temp + setflag true,0,pdata + add regc,offset_24g_abort_pac,contw + istore 1,contw + //store 1,mem_24g_abort_pac + beq 1,g24_data_attemp_mouse + call g24_fetch_mem_hop_pac + //fetch 1,mem_24g_hop_pac + call g24_fetcht_mem_rxdata_temp + //fetcht 1,mem_24g_rxdata_temp + isolate1 bit_hop,temp + setflag true,0,pdata + call g24_store_mem_hop_pac + //store 1,mem_24g_hop_pac + add regc,offset_24g_cb_rxdata_type1,rega + ifetch 2,rega + //fetch 2,mem_24g_cb_rxdata_type1 + branch callback_func + +dongle_rxdata_type1: + setarg MS_REPORT_ID + store 1,mem_usb_mouse_data //report id + call g24_fetch_mem_rxdata_temp_add3_7byte + //fetch 7,mem_24g_rxdata_temp+3 //key + istore 7,contw + call g24_fetch_mem_rxdata_temp_add3_7byte + //fetch 7,mem_24g_rxdata_temp+3 //key + ncall g24_ms_enable_blank_data_forcibly,blank//get kb data + call g24_fetch_mem_rxdata_temp_add3_7byte + //fetch 7,mem_24g_rxdata_temp+3 //key + call g24_ms_disable_blank_data_forcibly,blank +g24_data_type1_usbtx_enable: + jam USB_EP2_MS,mem_usb_ep2_data +g24_data_type1_usbtx_enable_ep2: + fetch 1,mem_usb_tx_enable + set1 2,pdata + store 1,mem_usb_tx_enable + rtn + +g24_ms_enable_blank_data_forcibly: + setarg 1 + call g24_store_mem_ms_blank_data_enable + //jam 1,mem_24g_ms_blank_data_enable + setarg TIMER_MS_BLANK_DELAY + arg TIMER_MS_BLANK,queue + branch timer_init +g24_ms_disable_blank_data_forcibly: + call g24_set0_mem_ms_blank_data_enable + //jam 0,mem_24g_ms_blank_data_enable + setarg 0 + arg TIMER_MS_BLANK,queue + branch timer_init + +g24_data_type2: + call g24_fetcht_mem_rxdata_temp + //fetcht 1,mem_24g_rxdata_temp + isolate1 bit_abort,temp + branch g24_data_attemp_kbd,true + arg mem_usb_kb_data,contw + call g24_data_type2_reverse_data + fetch 8,mem_usb_kb_data + ncall g24_kb_enable_blank_data_forcibly,blank//get kb data + fetch 8,mem_usb_kb_data + call g24_kb_disable_blank_data_forcibly,blank + call g24_head_ptr2regc + fetch 8,mem_usb_kb_data + arg offset_24g_kb_data_sta_data,rega + call g24_set_contw_with_temp + istore 8,contw + //store 8,mem_24g_kb_data_sta_data + setarg offset_24g_kb_data_last_data + iadd regc,rega + ifetcht 8,rega + //fetcht 8,mem_24g_kb_data_last_data + isub temp,null + ncall g24_kb_data_dispose,zero + setarg offset_24g_kb_data_sta_data + iadd regc,rega + ifetch 8,rega + //fetch 8,mem_24g_kb_data_sta_data + arg offset_24g_kb_data_last_data,rega + call g24_set_contw_with_temp + istore 8,contw + //store 8,mem_24g_kb_data_last_data + branch g24_rx_interrupt_clear + +g24_data_type2_reverse_data: + setarg offset_24g_rxdata_temp_add2 + iadd regc,contr + //arg mem_24g_rxdata_temp+2,contr + arg 9,loopcnt + branch reverse_byte + +g24_kb_enable_blank_data_forcibly: + setarg 1 + call g24_store_mem_kb_blank_data_enable + //jam 1,mem_24g_kb_blank_data_enable + setarg TIMER_KB_BLANK_DELAY + arg TIMER_KB_BLANK,queue + branch timer_init + +g24_kb_disable_blank_data_forcibly: + call g24_set0_mem_kb_blank_data_enable + //jam 0,mem_24g_kb_blank_data_enable + setarg 0 + arg TIMER_KB_BLANK,queue + branch timer_init + +g24_kb_data_dispose: +g24_kb_data_into_ep1_fifo: + jam USB_EP1_KB,mem_usb_ep1_data + fetch 1,mem_usb_tx_enable + set1 1,pdata + store 1,mem_usb_tx_enable + rtn + +g24_data_type3: + arg mem_usb_kb_multikey,contw + call g24_data_type2_reverse_data + fetch 2,mem_usb_kb_multikey+1 + ncall g24_kb_mul_enable_blank_data_forcibly,blank//get multikey data + fetch 2,mem_usb_kb_multikey+1 + call g24_kb_mul_disable_blank_data_forcibly,blank + call g24_head_ptr2regc + fetch 3,mem_usb_kb_multikey + arg offset_24g_kb_multikey_sta_data,rega + call g24_set_contw_with_temp_store_3byte + //store 3,mem_24g_kb_multikey_sta_data + setarg offset_24g_kb_multikey_last_data + iadd regc,rega + ifetcht 3,rega + //fetcht 3,mem_24g_kb_multikey_last_data + isub temp,null + ncall g24_kb_mul_data_into_ep2_fifo,zero + setarg offset_24g_kb_multikey_sta_data + iadd regc,rega + ifetch 3,rega + //fetch 3,mem_24g_kb_multikey_sta_data + arg offset_24g_kb_multikey_last_data,rega + call g24_set_contw_with_temp_store_3byte + //store 3,mem_24g_kb_multikey_last_data + branch g24_rx_interrupt_clear + +g24_kb_mul_data_into_ep2_fifo: + jam USB_EP2_MULTIKEY,mem_usb_ep2_data + branch g24_data_type1_usbtx_enable_ep2 + +g24_kb_mul_enable_blank_data_forcibly: + setarg 1 + call g24_store_mem_kb_mul_blank_data_enable + //jam 1,mem_24g_kb_mul_blank_data_enable + setarg TIMER_KB_MUL_BLANK_DELAY + arg TIMER_KB_MUL_BLANK,queue + branch timer_init + +g24_kb_mul_disable_blank_data_forcibly: + call g24_set0_mem_kb_mul_blank_data_enable + //jam 0,mem_24g_kb_mul_blank_data_enable + setarg 0 + arg TIMER_KB_MUL_BLANK,queue + branch timer_init + +g24_data_attemp: + call g24_fetch_mem_rxdata_temp_add3_1byte + //fetch 1,mem_24g_rxdata_temp+3 + beq DATATYPE_MOUSE,g24_data_attemp_mouse + beq DATATYPE_KEYBOARD,g24_data_attemp_kbd + rtn +g24_data_attemp_mouse: + setarg offset_24g_rxdata_temp_add4 + call g24_set_rega_ifetch_4byte + arg offset_24g_mouse_addr,rega + call g24_set_contw_with_temp + //fetch 4,mem_24g_rxdata_temp+4 + //store 4,mem_24g_mouse_addr + branch g24_contw_istore_4byte + +g24_data_attemp_kbd: + setarg offset_24g_rxdata_temp_add4 + call g24_set_rega_ifetch_4byte + arg offset_24g_kb_addr,rega + call g24_set_contw_with_temp + //fetch 4,mem_24g_rxdata_temp+4 + //store 4,mem_24g_kb_addr + branch g24_contw_istore_4byte + +g24_store_mem_24g_mode: + call g24_head_ptr2regc + add regc,offset_24g_mode,contw + istore 1,contw + rtn + +g24_fetch_mem_device_addr: + call g24_head_ptr2regc + add regc,offset_24g_device_addr,rega + branch g24_rega_ifetch_4byte +g24_store_mem_device_addr: + call g24_head_ptr2regc + add regc,offset_24g_device_addr,contw + branch g24_contw_istore_4byte + +g24_fetch_mem_addr: + add regc,offset_24g_addr,rega + branch g24_rega_ifetch_4byte +g24_store_mem_addr: + add regc,offset_24g_addr,contw +g24_contw_istore_4byte: + istore 4,contw + rtn + +g24_store_mem_ch: + add regc,offset_24g_ch,contw + branch g24_contw_istore_1byte + +g24_set0_mem_pid: + setarg 0 +g24_store_mem_pid: + call g24_head_ptr2regc + add regc,offset_24g_pid,contw + branch g24_contw_istore_1byte + +g24_store_mem_txpayload: + add regc,offset_24g_txpayload,contw + branch g24_contw_istore_1byte + +g24_set4_mem_max_retry: + setarg 4 +g24_store_mem_max_retry: + add regc,offset_24g_max_retry,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_data_type: + add regc,offset_24g_data_type,rega + branch g24_rega_ifetch_1byte +g24_store_mem_data_type: + add regc,offset_24g_data_type,contw + branch g24_contw_istore_1byte + +g24_set2_mem_sync_cnt: + setarg 2 +g24_store_mem_sync_cnt: + add regc,offset_24g_sync_cnt,contw + branch g24_contw_istore_1byte + +g24_set1_mem_rf_last_sta: + setarg 1 +g24_store_mem_rf_last_sta: + call g24_head_ptr2regc + add regc,offset_24g_rf_last_sta,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_hop_pac: + call g24_head_ptr2regc + add regc,offset_24g_hop_pac,rega + branch g24_rega_ifetch_1byte +g24_set1_mem_hop_pac: + setarg 1 +g24_store_mem_hop_pac: + call g24_head_ptr2regc + add regc,offset_24g_hop_pac,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_abort_pac: + call g24_head_ptr2regc + add regc,offset_24g_abort_pac,rega + branch g24_rega_ifetch_1byte +g24_set1_mem_abort_pac: + setarg 1 +g24_store_mem_abort_pac: + call g24_head_ptr2regc + add regc,offset_24g_abort_pac,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_pairing_sm: + call g24_head_ptr2regc + add regc,offset_24g_pairing_sm,rega + branch g24_rega_ifetch_1byte +g24_store_mem_pairing_sm: + add regc,offset_24g_pairing_sm,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_rf_hop_ch: + add regc,offset_24g_rf_hop_ch,rega + branch g24_rega_ifetch_1byte +g24_set0_mem_rf_hop_ch: + setarg 0 +g24_store_mem_rf_hop_ch: + add regc,offset_24g_rf_hop_ch,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_rf_work_stage: + add regc,offset_24g_rf_work_stage,rega + branch g24_rega_ifetch_1byte + +g24_fetch_mem_rxbuf_add1: + add regc,offset_24g_rxbuf_add1,rega + branch g24_rega_ifetch_1byte + +g24_fetch_mem_check_dongle_times: + add regc,offset_24g_check_dongle_times,rega + branch g24_rega_ifetch_1byte +g24_set0_mem_check_dongle_times: + setarg 0 +g24_store_mem_check_dongle_times: + call g24_head_ptr2regc + add regc,offset_24g_check_dongle_times,contw + branch g24_contw_istore_1byte + +g24_store_mem_tx_power: + call g24_head_ptr2regc + add regc,offset_tx_power_temp,rega + ifetch 1,rega +g24_store_mem_txpower: + store 1,mem_tx_power + rtn + +g24_store_mem_tx_power_temp: + call g24_head_ptr2regc + fetch 1,mem_tx_power + //store 1,mem_tx_power_temp + add regc,offset_tx_power_temp,contw + branch g24_contw_istore_1byte + +g24_fetch_mem_power_ctrl_pac: + add regc,offset_power_ctrl_packet_cnt,rega + branch g24_rega_ifetch_1byte + +g24_store_mem_power_ctrl_level: + add regc,offset_power_ctrl_level,contw + branch g24_contw_istore_1byte + +g24_fetcht_mem_rxdata_temp: + setarg offset_24g_rxdata_temp +g24_set_rega_ifetcht_1byte: + iadd regc,rega + ifetcht 1,rega + rtn + +g24_fetch_mem_rf_laststa: + setarg offset_24g_rf_laststa + branch g24_set_rega_ifetch_1byte +g24_set0_mem_rf_laststa: + setarg 0 +g24_store_mem_rf_laststa: + arg offset_24g_rf_laststa,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_rx_addr: + setarg offset_24g_rx_addr +g24_set_rega_ifetch_4byte: + call g24_set_rega +g24_rega_ifetch_4byte: + ifetch 4,rega + rtn + +g24_fetch_mem_time_slice: + setarg offset_24g_time_slice + branch g24_set_rega_ifetch_1byte +g24_set0_mem_time_slice: + setarg 0 +g24_store_mem_time_slice: + arg offset_24g_time_slice,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_mode_switch: + setarg 0 +g24_store_mem_mode_switch: + arg offset_24g_mode_switch,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_bind_payload: + arg offset_24g_bind_payload,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_bind_device_status: + setarg offset_dongle_bind_device_status + branch g24_set_rega_ifetch_1byte +g24_store_mem_bind_device_status: + arg offset_dongle_bind_device_status,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_work_mode: + setarg offset_dongle_work_mode + branch g24_set_rega_ifetch_1byte +g24_set_work_mem_dongle_work_mode: + setarg DONGLE_WORK +g24_store_mem_dongle_work_mode: + arg offset_dongle_work_mode,rega + branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_mode_init: + setarg offset_dongle_mode_init + branch g24_set_rega_ifetch_1byte +g24_set0_mem_dongle_mode_init: + setarg CLEAR_INIT +g24_store_mem_dongle_mode_init: + arg offset_dongle_mode_init,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ackpayload_enable: + setarg 0 +g24_store_mem_ackpayload_enable: + arg offset_24g_ackpayload_enable,rega + branch g24_set_contw_with_regb_store_1byte +g24_set1_mem_ackpayload_enable: + setarg 1 + branch g24_store_mem_ackpayload_enable + +g24_fetch_mem_rxdata_temp_add3_7byte: + setarg offset_24g_rxdata_temp_add3 + call g24_set_rega + ifetch 7,rega + rtn + +g24_fetch_mem_nodata_timer_enable: + setarg offset_24g_nodata_timer_enable + branch g24_set_rega_ifetch_1byte +g24_set0_mem_nodata_timer_enable: + setarg 0 +g24_store_mem_nodata_timer_enable: + arg offset_24g_nodata_timer_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ms_blank_data_enable: + setarg 0 +g24_store_mem_ms_blank_data_enable: + arg offset_24g_ms_blank_data_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_blank_data_enable: + setarg 0 +g24_store_mem_kb_blank_data_enable: + arg offset_24g_kb_blank_data_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_mul_blank_data_enable: + setarg 0 +g24_store_mem_kb_mul_blank_data_enable: + arg offset_24g_kb_mul_blank_data_enable,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_up: + arg offset_power_ctrl_threshold_up,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_down: + arg offset_power_ctrl_threshold_down,rega +g24_set_contw_with_regb_store_1byte: + call g24_set_contw_with_regb +g24_contw_istore_1byte: + istore 1,contw + rtn + +g24_fetch_mem_pair_mode: + setarg offset_24g_pair_mode + branch g24_set_rega_ifetch_1byte + +g24_store_mem_pair_mode: + arg offset_24g_pair_mode,rega + branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_pair_txpower: + setarg offset_24g_pair_txpower + call g24_set_rega_ifetch_1byte + branch g24_store_mem_txpower + +g24_fetch_mem_rxdata_temp_add3_1byte: + setarg offset_24g_rxdata_temp_add3 + branch g24_set_rega_ifetch_1byte + +g24_set_contw_with_temp: + copy pdata,temp + copy rega,pdata + iadd regc,contw + copy temp,pdata + rtn + +g24_set_contw_with_temp_store_3byte: + call g24_set_contw_with_temp +g24_contw_istore_3byte: + istore 3,contw + rtn + +g24_set_contw_with_regb: + call g24_head_ptr2regc +g24_set_contw_with_regb2: + copy pdata,regb + copy rega,pdata + iadd regc,contw + copy regb,pdata + rtn + +g24_set_rega: + call g24_head_ptr2regc + iadd regc,rega + rtn + +g24_set_rega_ifetch_1byte: + call g24_set_rega +g24_rega_ifetch_1byte: + ifetch 1,rega + rtn + +g24_set_rega_ifetcht_4byte: + call g24_set_rega + ifetcht 4,rega + rtn + +g24_mem_set0: + setarg 0 + branch g24_contw_istore_1byte + +endif + + Index: 1066_OTP_FLASH/program/app.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app.prog (working copy) @@ -0,0 +1,576 @@ +app_init: + bpatch patch18_4,mem_patch18 + fetch 1,mem_device_option + branch app_init,blank /* wait ram to be initialized */ +// beq dvc_op_ukey,le_ukey_init + beq dvc_op_dongle,dongle_init + beq dvc_op_AntiLost,antilost_init + beq dvc_op_shutter,shutter_init + beq dvc_op_module,module_init + beq dvc_op_car,car_init + beq dvc_op_remote_car,remote_car_init + bbit1 dvc_op_mouse,mouse_init + rtn + +app_lpm_init: + bpatch patch18_5,mem_patch18 + jam 0,mem_tester_emulate + jam 0,mem_debug_config + jam 0, mem_lch_code + setarg 0 + store 5,mem_sp_state_start + fetch 1,mem_device_option + branch app_lpm_init,blank /* wait ram to be initialized */ + beq dvc_op_module,module_lpm_init +app_lpm_init0: + rtn + + +app_process_idle: + call ui_dispatch + call check_51cmd + call app_process_bb_event + fetch 2,mem_cb_idle_process + branch callback_func + +app_process_bt: + fetch 2,mem_cb_bt_process + branch callback_func + +app_process_ble: + fetch 2,mem_cb_le_process + branch callback_func + +app_process_bb_event: + bpatch patch18_6,mem_patch18 + //return if c51 need to process bb event + arg mem_ipc_fifo_bt2c51,rega + call fifo_out + rtn blank + //reaching here mains c51 cannot get bb event. + copy pdata,regc + call app_event_normal_process + branch app_process_bb_event_priority + +app_discard_event: + arg 0,regc + rtn + +//************************************************// +//*APP BB EVENT NORMAL PROCESS**// +//************************************************// +app_event_normal_process: + beq BT_EVT_BB_CONNECTED,app_evt_bt_conn + beq BT_EVT_BUTTON_LONG_PRESSED,app_evt_button_long_pressed + beq BT_EVT_SETUP_COMPLETE,app_evt_setup_complete + beq BT_EVT_HID_HANDSHAKE,app_evt_hid_handshake + beq BT_EVT_HID_CONNECTED,app_bb_event_hid_connected + beq BT_EVT_RECONN_FAILED,app_bb_event_reconn_failed + beq BT_EVT_BB_DISCONNECTED,app_bb_event_bb_disconn + beq BT_EVT_RECONN_PAGE_TIMEOUT,app_bb_event_reconn_failed + beq BT_EVT_LE_CONNECTED,app_le_event_bb_connected + beq BT_EVT_LE_DISCONNECTED,app_le_event_bb_disconn + beq BT_EVT_RECONN_STARTED,app_event_reconn_start + beq BT_EVT_ENTER_SNIFF,app_event_enter_sniff + beq BT_EVT_EXIT_SNIFF,app_event_exit_sniff + + beq BT_EVT_ML2CAP_CONN_REFUSED,app_event_ml2cap_conn_refused + beq BT_EVT_LINKKEY_GENERATE,app_event_linkkey_generate + beq BT_EVT_SWITCH_FAIL_MASTER,app_event_switch_fail_master + beq BT_EVT_SWITCH_SUCCESS_MASTER,app_event_switch_success + rtn + + +app_evt_bt_conn: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_CONNECTED,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set0 APP_DISC_BY_BUTTON ,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_event_switch_success: + jam 0,mem_switch_fail_master_count + rtn + +app_event_switch_fail_master: + fetch 1,mem_switch_fail_master_count + increase 1,pdata + store 1,mem_switch_fail_master_count + sub pdata,1,null + branch app_bt_role_switch,positive + jam 0,mem_switch_fail_master_count + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_SWITCH_FAIL,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + branch app_bt_disconnect + +app_process_bb_event_priority: + fetch 2,mem_cb_bb_event_process + branch callback_func + +app_check_wake_lock: + fetch 2,mem_cb_check_wakelock + branch callback_func + +app_will_enter_lpm: + fetch 2,mem_cb_before_lpm + branch callback_func + +app_event_linkkey_generate: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_PAIRING ,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + branch app_bt_store_reconn_info + +app_event_reconn_start: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_RECONNECT,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_RECONN,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_evt_setup_complete: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_SETUP_COMPLETE,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_SETUP_DONE,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_evt_hid_handshake: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_HID_HANDSHAKE,pdata + store 2,mem_ui_state_map + rtn + +app_event_enter_sniff: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_SNIFF,pdata + store 2,mem_ui_state_map + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_AFTER_SNIFF,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_event_exit_sniff: + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_SNIFF,pdata + store 2,mem_ui_state_map + rtn + +app_le_event_bb_connected: + fetch 2,mem_ui_state_map + set1 UI_STATE_BLE_CONNECTED,pdata + store 2,mem_ui_state_map + rtn + +app_le_event_bb_disconn: + fetch 2,mem_ui_state_map + set0 UI_STATE_BLE_CONNECTED,pdata + store 2,mem_ui_state_map + branch app_lpm_mult_disable + +app_bb_event_hid_connected: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_HID_CONN,pdata + store 2,mem_ui_state_map + rtn + +app_evt_button_long_pressed: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_BY_BUTTON,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_event_ml2cap_conn_refused: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_L2CAP_REFUSED,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + branch app_bt_disconnect + + +app_evt_timer: + bpatch patch18_7,mem_patch18 + store 1,mem_app_evt_timer_count +app_evt_100ms_loop: + fetch 1,mem_app_evt_timer_count + rtn blank + increase -1,pdata + store 1,mem_app_evt_timer_count + call ui_button_polling + call app_lpm_wake_auto_lock_timer + call app_unsniff_delay_timer + call app_discovery_timer + call flash_write_spi_sm_timer + fetch 2,mem_cb_event_timer + call callback_func + branch app_evt_100ms_loop + + +//regc:timer addr +//regb:timer up call back fuction +timer_single_step: + ifetch 1,regc + rtn blank + pincrease -1 + istore 1,regc + nrtn blank + copy regb,pdata + branch callback_func + +//regc:timer addr +//regb:timer up call back fuction +timer_single_step_2B: + ifetch 2,regc + rtn blank + pincrease -1 + istore 2,regc + nrtn blank + copy regb,pdata + branch callback_func + +app_power_timer: + fetcht 2,mem_power_param_ptr + add temp,power_timer_offset,regc + arg app_power_timer_timeout,regb + branch timer_single_step + +app_power_timer_timeout: + call app_got_power_state_common + beq POWER_STARTING,app_enter_power_stanby_state +app_enter_power_off_state: + branch app_enter_hibernate +app_enter_power_stanby_state: + setarg POWER_STANDBY + istore 1,regc + add temp,power_standby_cb_offset,regb +app_power_cb_common: + ifetch 2,regb + branch callback_func + +app_unsniff_delay_timer: + arg mem_unsniff2sniff_timer_count,regc + arg app_unsniff_delay_timeout,regb + branch timer_single_step + +app_unsniff_delay_timeout: + call context_check_idle + branch app_bt_enter_sniff,zero + rtn + + +app_discovery_timer: + arg mem_discovery_timeout_timer_count,regc + arg app_discovery_timeout,regb + branch timer_single_step_2B + +app_discovery_timeout: + call app_bt_stop_discovery + call app_led_off + fetch 2,mem_cb_discovry_timeout + branch callback_func + + +app_bb_event_reconn_failed: + call app_disconn_reason_flag_clear +app_clear_reconnect_flag: + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_RECONNECT,pdata + store 2,mem_ui_state_map + rtn + +app_bb_event_bb_disconn: + jam 0,mem_unsniff2sniff_timer_count + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_RECONNECT,app_bb_event_bb_reconn_disconn + isolate0 UI_STATE_BT_SETUP_COMPLETE,pdata + call app_discard_event,true +app_bb_event_bb_reconn_disconn: + bpatch patch19_0,mem_patch19 + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_CONNECTED,pdata + set0 UI_STATE_BT_SETUP_COMPLETE,pdata + set0 UI_STATE_BT_HID_CONN,pdata + set0 UI_STATE_BT_HID_HANDSHAKE,pdata + set0 UI_STATE_BT_RECONNECT,pdata + store 2,mem_ui_state_map + branch app_lpm_mult_disable + +app_bb_hibernate: + call app_disconn_reason_clear + branch app_enter_hibernate + + +app_disconn_reason_clear: + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason + rtn +app_disconn_reason_flag_clear: + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_disconn_reason_collect_bt: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + store APP_DISC_RSN_SIZE,mem_app_disconn_reason + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + +app_disconn_reason_collect_ble: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set1 APP_DISC_BLE,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason + setarg 0 + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + rtn + + +//************************************************// +//********APP SHARED FUNCSIONS*******// +//************************************************// + + +app_check_sniff: + fetch 1,mem_ui_state_map + isolate1 UI_STATE_BT_SNIFF,pdata + rtn + +//*****************************************// +//*****************API********************// +//*****************************************// +//app_clearflag_store: +// setarg 0 +// branch app_flag_store +app_initflag_store: + setarg EEPROM_INIT_FLAG +app_flag_store: + store 2,mem_timeup + bpatch patch19_1,mem_patch19 + arg 2,temp + arg mem_timeup,rega + arg eeprom_module_init_flag,regb + branch iicd_write_eep_data + +//initflag is in eeprom to sure is eeprom nead to init +app_initflag_check: + bpatch patch19_2,mem_patch19 + arg 2,temp + arg mem_pdatatemp,rega + arg eeprom_module_init_flag,regb + call iicd_read_eep_data + fetch 2,mem_pdatatemp + arg EEPROM_INIT_FLAG,temp + isub temp,null + rtn + + +app_start_auto_sniff: + fetch 1,mem_unsniff2sniff_timer + store 1,mem_unsniff2sniff_timer_count + rtn + +app_get_lpm_wake_lock: + arg wake_lock_app,queue + branch lpm_get_wake_lock + +app_put_lpm_wake_lock: + arg wake_lock_app,queue + branch lpm_put_wake_lock + +app_lpm_wake_auto_lock: + jam LPM_WAKE_UP_DELAY_TIMER,mem_wake_up_delay_timer + branch app_get_lpm_wake_lock + +app_lpm_wake_auto_lock_timer: + arg mem_wake_up_delay_timer,regc + arg app_put_lpm_wake_lock,regb + branch timer_single_step + +app_l2cap_flow_control_enable: + jam L2CAP_FLOW_CTRL_ENABLE,mem_l2cap_flow_ctrl_flag + rtn + +app_l2cap_flow_control_disable: + jam L2CAP_FLOW_CTRL_DISABLE,mem_l2cap_flow_ctrl_flag + rtn + +app_bt_set_pincode: + jam BT_CMD_SET_PIN_CODE,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_role_switch: + jam BT_CMD_ROLE_SWITCH,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_start_reconnect: + bpatch patch19_3,mem_patch19 + fetch 1,mem_app_connection_options + store 1,mem_connection_options + jam APP_FLAG_RECONNECT,mem_reconnect_flag + jam BT_CMD_RECONNECT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_reconnect_cancel: + jam BT_CMD_BB_RECONN_CANCEL,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_disconnect: + jam BT_CMD_DISCONNECT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_start_discovery_short: + fetch 2,mem_discovery_timeout + store 2,mem_discovery_timeout_timer_count +app_bt_start_discovery_led_blink: + call app_led_start_blink +app_bt_start_discovery: + jam BT_CMD_START_DISCOVERY,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_stop_discovery: + setarg 0 + store 2,mem_discovery_timeout_timer_count + jam BT_CMD_STOP_DISCOVERY,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_direct_adv: + jam BT_CMD_START_DIRECT_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_stop_direct_adv: + jam BT_CMD_STOP_DIRECT_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_stop_adv: + jam BT_CMD_STOP_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_adv: + jam BT_CMD_START_ADV,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_scan: + jam BT_CMD_LE_START_SCAN,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_stop_scan: + jam BT_CMD_LE_STOP_SCAN,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_start_conn: + jam BT_CMD_LE_START_CONN,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_disconnect: + jam BT_CMD_LE_DISCONNECT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_led_start_blink: + jam BT_CMD_LED_BLINK,mem_fifo_temp + branch ui_ipc_send_cmd + +app_led_on: + jam BT_CMD_LED_ON,mem_fifo_temp + branch ui_ipc_send_cmd + +app_led_stop_blink: +app_led_off: + jam BT_CMD_LED_OFF,mem_fifo_temp + branch ui_ipc_send_cmd + +app_enter_hibernate: + jam BT_CMD_ENTER_HIBERNATE,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_sniff_exit: + jam BT_CMD_EXIT_SNIFF,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_enter_sniff: + jam BT_CMD_ENTER_SNIFF,mem_fifo_temp + branch ui_ipc_send_cmd + +app_ble_store_reconn_info: + jam BT_CMD_STORE_RECONN_INFO_LE,mem_fifo_temp + branch ui_ipc_send_cmd + +app_bt_store_reconn_info: + jam BT_CMD_STORE_RECONN_INFO_BT,mem_fifo_temp + branch ui_ipc_send_cmd + +app_store_reconn_info: + jam BT_CMD_STORE_RECONN_INFO,mem_fifo_temp + branch ui_ipc_send_cmd + +app_lpm_mult_enable: + set1 mark_lpm_mult_enable,mark + rtn + +app_lpm_mult_disable: + set0 mark_lpm_mult_enable,mark + rtn + + +/* + +mem_power_param struct +{ + usigned char mem_power_state + usigned char mem_power_timer + usigned char mem_power_off_timeout + usigned char mem_power_starting_timeout + usigned long mem_power_off_cb + usigned long mem_power_starting_cb + usigned long mem_power_standby_cb + usigned long mem_ui_butten_up_cb +} + functions:power state switching by mem_app_power_timer timeout or by button_long_pressed event + (power off -> power starting->power standby->power off) and power timer initialization + input parameters:mem_power_param_ptr should be point to the variable(mem_power_param) address where the input parameters stored in with its format +output parameters:switched power state will be stored in variable mem_power_state*/ +app_button_long_pressed: + call app_got_power_state_common + beq POWER_STANDBY,app_power_shutting_down +app_power_starting: + setarg POWER_STARTING + istore 1,regc + add temp,power_starting_timeout_offset,rega + add temp,power_starting_cb_offset,regb +app_power_common: + ifetcht 1,rega + increase 1,regc + istoret 1,regc + branch app_power_cb_common + +app_power_shutting_down: + setarg POWER_OFF + istore 1,regc + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,app_power_off_end + call app_ble_disconnect +app_power_off_end: + fetcht 2,mem_power_param_ptr + add temp,power_off_timeout_offset,rega + add temp,power_off_cb_offset,regb + branch app_power_common + +app_got_power_state_common: + fetcht 2,mem_power_param_ptr + add temp,power_state_offset,regc + ifetch 1,regc + rtn + +app_event_button_up: + call app_got_power_state_common + bne POWER_OFF,app_power_release + branch app_enter_hibernate +app_power_release: + add temp,ui_butten_up_cb_offset,regb + branch app_power_cb_common + Index: 1066_OTP_FLASH/program/app_antiLost.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_antiLost.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_antiLost.prog (working copy) @@ -0,0 +1,565 @@ +ifdef COMPILE_AntiLost +antilost_init: + rtn wake + hjam 0x00,core_gpio_sel1//1: GPIO[26:25] is two wire SPI, 2: GPIO[26:23] is SPI, 3: GPIO[26:23] is PCM + setarg antilost_le_before_hibernate + store 2,mem_cb_before_hibernate + setarg keyscan_process_lpm_before + store 2,mem_cb_before_lpm + setarg antilost_idle_process // + store 2,mem_cb_idle_process + setarg antilost_le_conn_process // + store 2,mem_cb_le_process + setarg antilost_bb_event_process + store 2,mem_cb_bb_event_process + setarg antilost_le_bb_event_timer + store 2,mem_cb_event_timer + setarg antilost_le_notification + store 2,mem_cb_ble_transmit + setarg antilost_lpm_lock_process + store 2,mem_cb_check_wakelock + setarg antilost_le_receive_data_process + store 2,mem_cb_att_write + bpatch patch19_4,mem_patch19 + call antilost_buzzer_pwm_init + call keyscan_key_init + call antilost_adc_init + call ui_led_init_global + call ui_button_init + setarg antilost_key_up_down + store 2,mem_cb_antl_key + setarg antilost_power_off_cb + store 2,mem_antl_power_off_cb + setarg antilost_power_starting_cb + store 2,mem_antl_power_starting_cb + setarg antilost_power_standby_cb + store 2,mem_antl_power_standby_cb + setarg antilost_led_on_cb + store 2,mem_antl_led_cb_on + setarg antilost_led_off_cb + store 2,mem_antl_led_cb_off + setarg antilost_buzzer_on + store 2,mem_antl_buzzer_cb_on + setarg antilost_buzzer_off + store 2,mem_antl_buzzer_cb_off + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + +antilost_le_before_hibernate: + call antilost_led_buzzer_stop_blink + branch app_enter_hibernate + +antilost_le_notification: + call le_fifo_check_nearly_full + nrtn blank + arg mem_temp_block5,rega + call queue_pop + nrtn user + arg mem_temp_block5,contr + branch le_send_notify_from_list + +antilost_power_standby_cb: + fetch 2,mem_antl_le_sleep_timeout + store 2,mem_antl_le_sleep_timer + jam 1,mem_antl_key_scan_enable + branch antilost_fast_adv_start + +antilost_lpm_lock_process: + fetch 1,mem_antl_key_state + beq 1,antilost_lpm_ctrl_for_led_buzzer + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,antilost_lpm_ctrl_for_led_buzzer + fetch 1,mem_antl_lost_mode + beq 1,app_get_lpm_wake_lock + fetch 1, mem_antl_queue_curr_num + nbranch app_get_lpm_wake_lock,blank + branch app_put_lpm_wake_lock + +antilost_lpm_ctrl_for_led_buzzer: + fetch 1,mem_antl_led_state + fetcht 1,mem_antl_buzzer_state + ior temp,pdata + beq 1,app_get_lpm_wake_lock + branch app_put_lpm_wake_lock + +antilost_bb_event_process: + copy regc,pdata + beq BT_EVT_BUTTON_UP,app_event_button_up + beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed + beq BT_EVT_LE_CONNECTED,antilost_le_process_conn + beq BT_EVT_LE_DISCONNECTED,antilost_le_process_discon + beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,antilost_le_conn_param_update_rsp_recieved + rtn +antilost_le_conn_param_update_rsp_recieved: + fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + beq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED,antilost_le_conn_param_rejected +antilost_le_conn_param_accepted: + fetch 2,mem_le_new_connslavelatency + branch antilost_master_nonsupport_latency,blank +antilost_le_conn_param_updata_procedure_sucsess: + jam CONN_PARAM_UPDATA_PROCEDURE_COMPLETE,mem_antl_conn_updata_procedure_state + jam 60,mem_antl_conn_update_timer + rtn + +antilost_le_conn_param_rejected: + fetch 2,mem_le_latency + branch antilost_conn_param_updata_procedure_faild,blank +antilost_conn_param_retransimiting: + jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state + fetcht 2,mem_interval_increment + fetch 2,mem_le_interval_min + iadd temp,pdata + store 2,mem_le_interval_min + copy pdata,rega + fetch 2,mem_le_interval_max + iadd temp,pdata + store 2,mem_le_interval_max + iadd rega,pdata + rshift pdata,temp + fetch 2,mem_antl_le_unnormal_interval_max + idiv temp + call wait_div_end + quotient pdata + store 2,mem_le_latency + jam 1,mem_antl_send_updata_le_param_timer + rtn +antilost_conn_param_updata_procedure_faild: + jam CONN_PARAM_UPDATA_PROCEDURE_FAILD,mem_antl_conn_updata_procedure_state + rtn + +antilost_master_nonsupport_latency: + jam 0,mem_lpm_mult + jam 0,mem_antl_send_updata_le_param_timer + fetch 2,mem_le_new_conninterval //interval from master + fetcht 2,mem_antl_le_unnormal_interval_min + isub temp,null + setflag positive,0,rega + fetch 2,mem_antl_le_unnormal_interval_max //local intervalmax + fetcht 2,mem_le_new_conninterval//interval form master + isub temp,pdata + setflag positive,1,rega + compare 0x03,rega,0x03 + rtn true //return if the new conn_interval in range through conn_interval_min to conn_interval_max already + fetch 8,mem_antl_le_unnormal_interval_min + store 8,mem_le_interval_min + jam 1,mem_antl_send_updata_le_param_timer + rtn + + +antilost_le_bb_event_timer: + //call ui_button_check_long_press + call app_power_timer + call antilost_double_click_timer + call antilost_le_fast_adv_timer + call antilost_le_sleep_timer + call antilost_app_updata_le_param_timer + call antilost_conn_update_timer + branch antilost_adc_check_timer + + +antilost_double_click_timer: + arg mem_double_click_timer,regc + arg antilost_double_click_timeout,regb + branch timer_single_step +antilost_double_click_timeout: + jam 0,mem_butten_click_cnt + rtn +antilost_le_fast_adv_timer: + arg mem_antl_fast_adv_timer,regc + arg antilost_le_fast_adv_timeout,regb + branch timer_single_step_2B +antilost_le_fast_adv_timeout: + arg mem_antl_slow_adv_led_style,regc + arg mem_antl_slow_adv_lpm_interval,regb + branch antilost_adv_start_common + + +antilost_conn_update_timer: + arg mem_antl_conn_update_timer,regc + arg antilost_conn_update_timer_time_out,regb + branch timer_single_step + +antilost_conn_update_timer_time_out: + fetch 2,mem_le_latency + store 1,mem_lpm_mult + rtn +antilost_app_updata_le_param_timer: + arg mem_antl_send_updata_le_param_timer,regc + arg antilost_app_updata_le_param_timeout,regb + branch timer_single_step +antilost_app_updata_le_param_timeout: + fetch 1,mem_le_state + compare 0,pdata,0x60 + nbranch antilost_wait_for_updata_param_instant_expire,true + jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state + call app_lpm_mult_enable + branch le_l2cap_tx_update_req +antilost_wait_for_updata_param_instant_expire: + jam 1,mem_antl_send_updata_le_param_timer + rtn + +antilost_le_sleep_timer: + arg mem_antl_le_sleep_timer,regc + arg antilost_le_sleep_timer_timeout,regb + branch timer_single_step_2B + + +antilost_le_sleep_timer_timeout: + branch app_button_long_pressed + +antilost_adc_check_timer: + //fetch 1,mem_antl_power_timer + //rtneq SHUTTER_POWER_OFF + arg mem_adc_timer,regc + arg antilost_adc_check_timer_timeout,regb + branch timer_single_step_2B +antilost_adc_check_timer_timeout: + fetch 2,mem_adc_timeout + store 2,mem_adc_timer + branch antilost_battery_process + + +antilost_le_process_conn: + fetch 2,mem_adc_timeout + store 2,mem_adc_timer + setarg 0 + store 2,mem_antl_fast_adv_timer + store 2,mem_antl_le_sleep_timer + call antilost_alert_off + call antilost_led_buzzer_stop_blink + jam 0,mem_lpm_mult + branch app_ble_stop_adv + + +antilost_le_process_discon: + //setarg 0 + //store 1,mem_hci_curr_len + setarg 0 + store 4,mem_adc_timer + store 3,mem_antl_conn_updata_procedure_state + store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + + jam 1,mem_alarm_config_notfy_cnt + fetch 2,mem_antl_le_sleep_timeout + store 2,mem_antl_le_sleep_timer + call queue_init + fetch 1,mem_antl_power_state + rtneq POWER_OFF + call antilost_fast_adv_start + branch antilost_on_off_alarm_after_disconn + + +antilost_le_conn_process: +//bpatch + branch antilost_key_process + +antilost_idle_process: + + fetch 1,mem_antl_power_state + rtnne POWER_STANDBY + branch antilost_key_process + + +////////////////////////////////////////////////////////////////////////////////////////// +/////SOFT WTICH//////// +antilost_power_starting_cb: + arg mem_antl_power_starting_buzzer_style,regc + call antilost_buzzer_configuration + arg mem_antl_power_starting_led_style,regc +antilost_power_common: + branch antilost_led_configuration + +antilost_power_off_cb: + jam OFF,mem_le_adv_enable + arg mem_antl_power_off_buzzer_style,regc + call antilost_buzzer_configuration + arg mem_antl_power_off_led_style,regc + branch antilost_power_common + +antilost_le_receive_data_process: + fetch 1,mem_le_att_opcode + beq ATTOP_WRITE_REQUEST,antilost_le_parse_att_write_request + rtn +antilost_le_parse_att_write_request: + fetch 2,mem_le_att_handle +// beq ATT_WRITE_REQUEST_HANDLE,antilost_key_data_send + beq NEW_SPEC_WRITE_HANDLE,antilost_cmd_parse_for_application + beq NEW_SPEC_NOTIFICATION_ENABLE_HANDLE,antilost_notify_alarm_config_first_time + rtn +///////////////////////////////////////////////////////// + + +/////////key scan +antilost_key_process: + fetch 1,mem_antl_key_scan_enable + rtn blank + branch keyscan_key_process + + //queue = key index + //rega =1 press, =0 release +antilost_key_up_down: + copy rega,pdata + branch antilost_key_is_up,blank +antilost_key_is_down: + copy queue,pdata + beq 0,antilost_key0_down + rtn +antilost_key_is_up: + copy queue,pdata + beq 0,antilost_key0_up + rtn + +antilost_key0_down: + jam 1,mem_antl_key_state + arg mem_antl_key_buzzer_style,regc + call antilost_buzzer_configuration + arg mem_antl_key_led_style,regc + call antilost_led_configuration + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,antilost_butten_down_while_disconn + branch antilost_butten_down_after_conn + +antilost_key0_up: + jam 0,mem_antl_key_state + branch antilost_double_click_timer_init + +//////////////process for double-click + +antilost_double_click_timer_init: + fetch 1,mem_butten_click_cnt + rtnne 1 + jam 5,mem_double_click_timer + rtn + +antilost_butten_down_after_conn: + fetch 1,mem_butten_click_cnt + pincrease 1 + store 1,mem_butten_click_cnt + beq 1,antilost_click_once + beq 2,antilost_click_twice + rtn +antilost_click_once: + call antilost_alert_off + jam OPCODE1_BUTTEN_CLICK_ONCE,mem_antl_key0_press+5//5 represent opcode offset + arg mem_antl_key0_press,regc + branch antilost_prepare_data_and_send +antilost_click_twice: + jam 0,mem_butten_click_cnt + jam OPCODE2_BUTTEN_DOUBLE_CLICK,mem_antl_key0_press+5 + arg mem_antl_key0_press,regc + call antilost_prepare_data_and_send + fetch 1,mem_antl_lost_mode + beq 1,antilost_alert_on + rtn //rtn should be retaind + +antilost_butten_down_while_disconn: + fetch 2,mem_antl_le_sleep_timeout + store 2,mem_antl_le_sleep_timer + call antilost_alert_off + branch antilost_fast_adv_start + +///////////////////////NEW App Spcecific/////// +antilost_cmd_parse_for_application: + bpatch patch19_5,mem_patch19 + call le_app_receive_data + ifetch 1,rega + beq OPCODE3_ANTL_START_ALRAM,antilost_on_of_alram + beq OPCODE7_ANTL_CONFIG_ALRAM,antilost_configuration_for_alram + rtn + +antilost_on_of_alram: + fetch 1,mem_antl_lost_mode + beq ANTI_LE_ALARM_OFF,antilost_alert_on + beq ANTI_LE_ALARM_ON,antilost_alert_off + rtn + +antilost_configuration_for_alram: + ifetch 1,regb + beq 1,antilost_set_start_alarm_after_disconn + beq 0,antilost_set_no_alarm_after_disconn + rtn +/////////////////check//////////////////////// + +/*input: 1)package data addr in regc +output:no +function:calculate check_out value and send data*/ +//mem_temp_block5 +antilost_prepare_data_and_send: + bpatch patch19_6,mem_patch19 + fetch 1,mem_client_characteristic_configuration_descriptor + isolate1 NOTIFICATION_ENABLE_BIT,pdata + nrtn true + add regc,6,contr + ifetch 2,contr + byteswap pdata,pdata + add pdata,5,loopcnt + add regc,3,contr + call calc_check_sum_start + istore 1,contr + copy regc,rega + branch queue_push + +/////////////////NEW APP SPECIFIC check end//////////////////// + + +/////////alarm////////////////////////////// +antilost_alert_on: + fetch 1,mem_antl_power_state + rtn blank + jam 1,mem_antl_lost_mode + arg mem_antl_alert_buzzer_stlye,regc + call antilost_buzzer_configuration + arg mem_antl_alert_led_stlye,regc + call antilost_led_configuration + jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset + jam 1,mem_antl_key0_release+8 //8 represent data offset,digit 1 represent alarm is on at present + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_alert_off: + fetch 1,mem_antl_lost_mode + rtn blank + jam 0,mem_antl_lost_mode + call antilost_led_buzzer_stop_blink + jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset + jam 0,mem_antl_key0_release+8 //8 represent data offset,digit 0 represent alarm is off at present + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send + +antilost_set_start_alarm_after_disconn: + jam 1,mem_alarm_config + jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5 + jam 1,mem_antl_key0_release+8 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_set_no_alarm_after_disconn: + jam 0,mem_alarm_config + jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5 + jam 0,mem_antl_key0_release+8 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_on_off_alarm_after_disconn: + fetch 1,mem_alarm_config + rtn blank + branch antilost_alert_on + +antilost_notify_alarm_config_first_time: + ifetch 2,rega + store 2,mem_client_characteristic_configuration_descriptor + isolate1 NOTIFICATION_ENABLE_BIT,pdata + nrtn true + fetch 1,mem_alarm_config_notfy_cnt + rtn blank + jam 0,mem_alarm_config_notfy_cnt + fetch 8,mem_antl_le_interval_min + store 8,mem_le_interval_min + jam 2,mem_antl_send_updata_le_param_timer + call antilost_battery_process + call antilost_battery_calculate_end //send twice to combat the failure of reception first time + jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5 + fetch 1,mem_alarm_config + store 1,mem_antl_key0_release+8 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send + +//////////////alarm end////////////////////////// +//sytle address in regc +antilost_buzzer_configuration: + arg 1,rega + branch antilost_configuration_common +antilost_led_configuration: + arg 0,rega +antilost_configuration_common: + branch antilost_led_buzzer_style_configuration + +antilost_led_buzzer_stop_blink: + arg 0,rega + call ui_led_blink_stop_global + arg 1,rega + call ui_led_blink_stop_global + fetch 1,mem_buzzer_pwm_conf + branch pwm_disable + +antilost_led_buzzer_style_configuration: + call calc_curr_struct_prt + arg 7,loopcnt + branch ui_led_set_style_global+2 + + + +antilost_fast_adv_start: + arg mem_antl_fast_adv_led_style,regc + arg mem_antl_lpm_interval,regb +antilost_adv_start_common: + call antilost_adv_interval_lpm_interval_set + call antilost_led_configuration + fetch 2,mem_antl_fast_adv_timeout + store 2,mem_antl_fast_adv_timer + branch app_ble_start_adv + +antilost_adv_interval_lpm_interval_set: + ifetch 2,regb + store 2,mem_lpm_interval + ifetch 2,contr + store 2,mem_le_adv_interval + rtn +///////////////beep//////////// +antilost_buzzer_pwm_init: + arg 0,rega //sys clk 12mhz + call pwm_init + fetch 6,mem_buzzer_pwm_conf + store 6,mem_pdatatemp + call pwm_out_set + fetch 1,mem_buzzer_pwm_conf + branch pwm_disable + +antilost_led_on_cb: + jam 1,mem_antl_led_state + rtn +antilost_led_off_cb: + jam 0,mem_antl_led_state + rtn + + + +antilost_buzzer_off: + jam 0,mem_antl_buzzer_state + fetch 1,mem_buzzer_pwm_conf + branch pwm_disable + +antilost_buzzer_on: + jam 1,mem_antl_buzzer_state + fetch 6,mem_buzzer_pwm_conf + store 6,mem_pdatatemp + branch pwm_out_set + +////////////////beep end/////////////////////////// +/////////////adc start//////////////////////// +antilost_adc_init: + jam 0,mem_adc_config_flag + branch adc_init_data + +antilost_battery_process: + call adc_set_mode + call vdd_calculate_by_mode + store 2,mem_battery_current_voltage + arg mem_battery_calculate_set,rega + call adc_bat_percent_lowpower_out + store 1,mem_voltage_remain_percent //for debug + beq 0,antilost_low_battery + sub pdata,0x64,null + nbranch antilost_full_battery,positive + store 1,mem_antl_key0_release+8 +antilost_battery_calculate_end: + jam OPCODE5_BATTER_INFORMATION,mem_antl_key0_release+5 + arg mem_antl_key0_release,regc + branch antilost_prepare_data_and_send +antilost_full_battery: + jam 100,mem_antl_key0_release+8 + branch antilost_battery_calculate_end + +antilost_low_battery: + branch app_button_long_pressed +endif + + Index: 1066_OTP_FLASH/program/app_car.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_car.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_car.prog (working copy) @@ -0,0 +1,888 @@ +ifdef COMPILE_CAR + +car_init: + rtn wake + hfetch 1,core_gpio_sel1 + and_into 0xf0,pdata + hstore 1,core_gpio_sel1 + setarg car_le_before_hibernate + store 2,mem_cb_before_hibernate + + setarg car_le_process_lpm_before + store 2,mem_cb_before_lpm + + setarg app_enter_hibernate + store 2,mem_cb_discovry_timeout + + setarg car_scale_process_idle + store 2,mem_cb_idle_process + + setarg car_scale_process_bb_event + store 2,mem_cb_bb_event_process + + setarg app_get_lpm_wake_lock + store 2,mem_cb_check_wakelock + + setarg car_le_receive_data + store 2,mem_cb_att_write + + setarg car_le_bb_event_timer + store 2,mem_cb_event_timer + + call g24_head_ptr2regc + setarg car_24g_receive_data + add regc,offset_24g_cb_rxdata_type1,contw + istore 2,contw + + setarg car_power_off_signal + store 2,mem_remote_car_power_off_cb + + setarg car_soft_switch_power_on_signal + store 2,mem_remote_car_power_standby_cb + + bpatch patch19_7,mem_patch19 + call car_init_environment + call queue_init + jam 2,mem_lpm_mult + jam POWER_ON,mem_car_24g_received_pac + fetch 1,mem_car_config_soft_switch_enable + store 1,mem_car_hard_soft_switch + beq HARD_SWITCH, car_hard_switch_power_on_signal + fetch 1,mem_car_config_soft_switch_gpio + store 1,mem_ui_button_gpio + jam OFF,mem_le_adv_enable +car_soft_switch_power_on_init: + call car_ui_led_init + call ui_button_init + call ui_button_polling + jam POWER_STARTING,mem_car_power_state + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + +car_power_off_signal: + branch car_ui_led_init + +car_hard_switch_power_on_signal: + jam POWER_STANDBY,mem_car_power_state +car_soft_switch_power_on_signal: + jam ON,mem_le_adv_enable + call car_ui_led_init + arg 0,rega + call ui_led_blink_start_global + + setarg FAST_ADV_INTERVAL_VALUE_CAR + call shutter_ble_adv_interval_set +car_le_modified_name_adv: + arg mem_le_name+7,contw + fetch 1,mem_le_lap +car_name_loop: + and pdata,0xF0,temp + rshift4 temp,temp + call car_hex_to_ascii + istoret 1, contw + and pdata,0x0F,temp + call car_hex_to_ascii + istoret 1, contw + call le_modified_name_att_list + fetcht 1,mem_le_name_len + copy temp,loopcnt + arg mem_le_adv_data+2,contw + arg mem_le_name,contr + call memcpy +car_le_modified_name_scan: + fetcht 1,mem_le_name_len + copy temp,loopcnt + arg mem_le_scan_data+2,contw + arg mem_le_name,contr + branch memcpy +car_hex_to_ascii: + sub temp,9,null + branch car_hex_num,positive + add temp,55,temp + rtn +car_hex_num: + add temp,48,temp + rtn + +car_ui_led_init: + fetch 1,mem_car_config_blood_led1_gpio + bne INVALID_PIN_NUM,car_blood_led_gpio_set +car_ui_led_init_1: + fetch 1,mem_car_config_pairing_led_gpio + bne INVALID_PIN_NUM,car_pairing_led_gpio_set +car_ui_led_init_2: + fetch 1,mem_car_config_low_voltage_led_gpio + bne INVALID_PIN_NUM,car_low_voltage_led_gpio_set +car_ui_led_init_3: + fetch 1, mem_car_led_num + copy pdata,loopcnt + setarg mem_car_led_map + copy pdata,rega +car_in_lp1: + copy rega,contr + ifetch 1,contr + copy contr,rega + beq INVALID_PIN_NUM,car_in_lp1_end + copy pdata,temp + call gpio_config_output +car_in_lp1_end: + loop car_in_lp1 +car_ui_led_init_end: + rtn +car_blood_led_gpio_set: + fetch 8,mem_car_config_blood_led1_gpio + store 8,mem_car_led_map+2 + branch car_ui_led_init_1 +car_pairing_led_gpio_set: + store 1,mem_car_led_map + branch car_ui_led_init_2 +car_low_voltage_led_gpio_set: + store 1,mem_car_led_map+1 + branch car_ui_led_init_3 + + +car_init_environment: + arg 0,rega + call pwm_init + call car_ir_rx_init + call g24_receive_process_init + branch car_init_adc_hvin + +car_init_adc_hvin: + jam 100,mem_car_notify_vdd_value_last + fetch 1,mem_car_config_low_voltage_led_gpio + store 1,mem_car_style2_struct_led_gpio + branch adc_init_data + +car_le_before_hibernate: + call gpio_set_before_lpm_common + branch keyscan_process_lpm_before + +car_le_process_lpm_before: + branch keyscan_process_lpm_before + +car_key_scan_process: +// fetch 1,mem_enable_key_scan +// rtn blank + branch keyscan_key_process + +car_scale_process_idle: + call car_le_send_packet + call car_ir_receive_process + call car_g24_status_process + branch car_key_scan_process + +car_g24_status_process: + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + fetch 1,mem_car_24g_received_pac + beq WORK_PAIRED,car_g24_connected_event + rtn +car_g24_connected_event: + fetch 1,mem_car_24g_status + rtneq WORK_PAIRED + jam WORK_PAIRED,mem_car_24g_status + branch car_g24_connected + +car_le_send_packet: + fetch 2,mem_ui_state_map + rtnbit0 UI_STATE_BLE_CONNECTED + call le_fifo_check_nearly_full + nrtn blank + arg mem_car_pop_queue_buff,rega + call queue_pop + nrtn user + arg mem_car_pop_queue_buff,contr + branch le_send_notify_from_list + +car_scale_process_bb_event: + copy regc,pdata + beq BT_EVT_BUTTON_UP,app_event_button_up + beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed + beq BT_EVT_LE_CONNECTED,car_scale_event_le_conn + beq BT_EVT_LE_DISCONNECTED,car_scale_event_le_discon + rtn + +car_scale_event_le_conn: + setarg disable_24g + call g24_store_mem_24g_mode + branch car_scale_process_conn +car_g24_connected: + fetch 2,mem_car_24g_no_data_timeout_count + store 2,mem_car_24g_no_data_timeout_timer +car_scale_process_conn: + jam 0x14,mem_car_notify_vdd_timer + jam 0,mem_lpm_mode + call app_ble_stop_adv + call app_lpm_mult_enable + fetch 1,mem_car_config_pairing_led_conn_status + beq 0x01,car_pairing_led_conn_status_setting +car_scale_process_conn_next: + arg 0,rega + branch ui_led_on_global +car_pairing_led_conn_status_setting: + arg 0,rega + branch ui_led_blink_stop_global + +car_scale_event_le_discon: + setarg rx_24g + call g24_store_mem_24g_mode +car_g24_disconnect: + setarg 0 + store 5,mem_car_led_control + setarg 4 + call pwm_disable + setarg 5 + call pwm_disable + setarg 20 + call pwm_disable + setarg 21 + call pwm_disable + setarg 22 + call pwm_disable + setarg 7 + call pwm_disable + call queue_init + jam 10,mem_motor1_speed + jam 10,mem_motor2_speed + jam 10,mem_motor3_speed +// jam 1,mem_lpm_mode + jam 2,mem_lpm_mult + arg 0,rega + call ui_led_blink_start_global + + setarg FAST_ADV_INTERVAL_VALUE_CAR + call shutter_ble_adv_interval_set + branch app_ble_start_adv + +car_le_bb_event_timer: +// call car_ui_power_timeout_timer + call car_moto1_blank_data_timer + call car_moto2_blank_data_timer + call car_moto3_blank_data_timer + call app_power_timer + call car_led_control_timer + call car_notify_vdd_timer + call car_24g_no_data_timeout_timer + call car_ir_breakdown_timer + branch car_attack_shake_timer + +car_ir_breakdown_timer: + arg mem_car_ir_breakdown_check_timer,regc + arg car_ir_breakdown_timeout,regb + branch timer_single_step +car_ir_breakdown_timeout: + call car_ir_gpio_get_status + nrtn true + jam 1,mem_car_ir_breakdown_flag + rtn + +car_24g_no_data_timeout_timer: + arg mem_car_24g_no_data_timeout_timer,regc + arg car_24g_no_data_timer_timeout,regb + branch timer_single_step_2B +car_24g_no_data_timer_timeout: + jam WORK_SEARCH,mem_car_24g_status + branch car_g24_disconnect + +car_attack_shake_timer: + arg mem_car_attack_shake_timer,regc + arg car_attack_shake,regb + branch timer_single_step +car_attack_shake: + fetch 1, mem_car_attack_shake_flag + branch car_attack_shake_stop,blank + jam 2,mem_car_attack_shake_timer + jam 0, mem_car_attack_shake_flag + setarg 0x0a02 + store 2,mem_le_receive_payload + fetch 1,mem_car_config_device_select + beq DEVICE_BATTLE_TANK,car_attack_shake_front_battle_tank +car_attack_shake_front_battle_car: + branch car_motor_control +car_attack_shake_front_battle_tank: + setarg 0x0a02 + store 2,mem_le_receive_payload+2 + branch car_motor_control +car_attack_shake_stop: + setarg 0 + store 4,mem_le_receive_payload + branch car_motor_control + +car_notify_vdd_timer: + fetch 1,mem_car_config_bat_notify_enable + rtn blank + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,car_low_bat_led_off + arg mem_car_notify_vdd_timer,regc + arg car_notify_vdd,regb + branch timer_single_step +car_notify_vdd: + fetch 1,mem_car_notify_vdd_count + store 1,mem_car_notify_vdd_timer + fetch 1,mem_car_working_flag + nrtn blank +car_read_hvin: + call adc_set_mode + call vdd_calculate_by_mode + store 2,mem_vdd_now_vol + arg mem_vdd_calculate_set,rega + call adc_bat_percent_lowpower_out + fetcht 1,mem_car_notify_vdd_value_last + isub temp,null + branch car_notify_vdd_next2,positive + store 1,mem_car_notify_vdd_value_last + copy pdata,temp +car_notify_vdd_next2: + storet 1,mem_car_notify_vdd_percent + fetch 1,mem_car_config_low_voltage_percent + isub temp,null + call car_enter_low_bat,positive + storet 1,mem_notify_bat_payload + arg 6,loopcnt + arg mem_notify_bat_head,contr + call calc_check_sum_start + store 1,mem_notify_bat_check_sum + arg mem_notify_bat_packet,rega + branch queue_push +car_enter_low_bat: + fetch 1,mem_low_bat_flag + nrtn blank + jam 1,mem_low_bat_flag + arg 1,rega + branch ui_led_blink_start_global +car_low_bat_led_off: + arg 1,rega + branch ui_led_blink_stop_global + +car_led_control_timer: + arg mem_car_led_control_timer,regc + arg car_led_control,regb + branch timer_single_step +car_led_control: + jam 5,mem_car_led_control_timer + jam 0,mem_car_led_no + fetch 1,mem_car_led_blink_status + beq LED_ON,car_led_control_blink_off + beq LED_OFF,car_led_control_blink_on +car_led_control_set: + arg mem_car_led_control,contr + copy contr,rega + arg 8,loopcnt +car_led_control_timer_next: + copy rega,contr + ifetch 1,contr + copy contr,rega + beq LED_OFF,car_led_control_off + beq LED_ON,car_led_control_on + beq LED_BLINK,car_led_control_blink +car_led_control_timer_next_2: + fetch 1,mem_car_led_no + increase 1,pdata + store 1,mem_car_led_no + loop car_led_control_timer_next + rtn +car_led_switch: + fetch 1,mem_car_led_no + arg mem_car_config_blood_led_gpio,regb + iadd regb,regb + ifetcht 1,regb + rtn +car_led_control_off: + call car_led_switch + call gpio_out_inactive + branch car_led_control_timer_next_2 +car_led_control_on: + call car_led_switch + call gpio_out_active + branch car_led_control_timer_next_2 +car_led_control_blink: + fetch 1,mem_car_led_blink_status + beq LED_ON,car_led_control_off + branch car_led_control_on +car_led_control_blink_on: + jam LED_ON,mem_car_led_blink_status + branch car_led_control_set +car_led_control_blink_off: + jam LED_OFF,mem_car_led_blink_status + branch car_led_control_set + +////////////////////////check sum//////////////////////// +//loopcnt = sum number,contr = ptr +calc_check_sum_start: + arg 0,rega +calc_check_sum_loop: + ifetch 1,contr + iadd rega,rega + loop calc_check_sum_loop +calc_check_sum_and: + and rega,0xff,pdata + rtn + +car_le_receive_data: + fetch 1,mem_le_att_opcode + beq ATTOP_WRITE_REQUEST,car_le_parse_att_write_request + rtn +car_le_parse_att_write_request: + fetch 2,mem_le_att_handle + beq ATT_CAR_CONTROL_HANDLE,car_control_le_receive + rtn + +/* +* typedef struct +* { +* 2byte packet_head (mem_app_receive_temp) +* 1byte packet_cmd (mem_app_receive_temp+2) +* 2byte packet_payload_length (mem_app_receive_temp+3) +* 10byte packet_payload (mem_app_receive_temp+5) +* 1byte packet_check_sum (mem_app_receive_temp+15) +* } +*/ +le_app_receive_data: + bpatch patch1a_0,mem_patch1a + ifetch 5,rega + store 5,mem_app_receive_temp + fetch 2,mem_app_receive_temp + arg LE_RECEIVE_PACKET_HEAD,temp + isub temp,null + nrtn zero + fetch 2,mem_app_receive_temp+3 + byteswap pdata,pdata + store 2,mem_app_receive_temp+3 + copy pdata,loopcnt + increase 5,rega + copy rega,contr + arg mem_app_receive_temp+5,contw + call memcpy + ifetch 1,contr + store 1,mem_app_receive_temp+15 + arg mem_app_receive_temp+2,rega + arg mem_app_receive_temp+5,regb + rtn + +car_control_le_receive: + setarg 0 + store 5,mem_le_receive_payload + store 5,mem_le_receive_payload+5 + call le_app_receive_data + copy regb,contr + arg mem_le_receive_payload,contw + arg 10,loopcnt + call memcpy +car_receive_cmd_select: + bpatch patch1a_1,mem_patch1a + ifetch 1,rega + beq CAR_CMD_OLD_CAR_CONTROL,car_drive_old + beq CAR_CMD_OLD_SPEED_CONTROL,car_speed_set_old + beq CAR_CMD_L_R_MOTOR_CONTROL,car_motor_control + beq CAR_CMD_F_B_MOTOR_CONTROL,car_motor_control + beq CAR_CMD_IR_CONTROL,car_ir_data_rx_from_app + beq CAR_CMD_LED_CONTROL,car_led_control_receive + beq CAR_CMD_DEVICE_INFO,car_info_request + rtn + +car_24g_receive_data: + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + + fetch 2,mem_car_24g_no_data_timeout_count + store 2,mem_car_24g_no_data_timeout_timer + + jam WORK_PAIRED,mem_car_24g_received_pac + + setarg offset_24g_rxdata_temp_add3 + call g24_set_rega + call car_control_le_receive + + fetch 1,mem_app_receive_temp+2 //cmd + beq CAR_CMD_L_R_MOTOR_CONTROL,car_24g_receive_data_next + beq CAR_CMD_F_B_MOTOR_CONTROL,car_24g_receive_data_next + rtn +car_24g_receive_data_next: + fetch 1,mem_le_receive_payload //moto1 + ncall car_moto1_enable_blank_data_timer,blank + fetch 1,mem_le_receive_payload+2 //moto2 + ncall car_moto2_enable_blank_data_timer,blank + fetch 1,mem_le_receive_payload+4 //moto3 + ncall car_moto3_enable_blank_data_timer,blank + rtn + +car_moto1_enable_blank_data_timer: + jam 5,mem_car_moto1_blank_timer + rtn +car_moto2_enable_blank_data_timer: + jam 5,mem_car_moto2_blank_timer + rtn +car_moto3_enable_blank_data_timer: + jam 5,mem_car_moto3_blank_timer + rtn + +car_moto1_blank_data_timer: + arg mem_car_moto1_blank_timer,regc + arg car_moto1_blank_data,regb + branch timer_single_step +car_moto2_blank_data_timer: + arg mem_car_moto2_blank_timer,regc + arg car_moto2_blank_data,regb + branch timer_single_step +car_moto3_blank_data_timer: + arg mem_car_moto3_blank_timer,regc + arg car_moto3_blank_data,regb + branch timer_single_step + +car_moto1_blank_data: + jam 0,mem_le_receive_payload + branch car_motor_control +car_moto2_blank_data: + jam 0,mem_le_receive_payload+2 + branch car_motor_control +car_moto3_blank_data: + jam 0,mem_le_receive_payload+4 + branch car_motor_control + + +///////////////////////Motor////////////////////////////////////////// + +car_drive_old: + call car_left_right_control_old + branch car_front_back_control_old +car_left_right_control_old: + fetch 1,mem_le_receive_payload + store 1,mem_motor2_status + branch car_motor2_control +car_front_back_control_old: + fetch 1,mem_motor1_speed + call car_reset_old_speed + fetch 1,mem_le_receive_payload+1 + store 1,mem_motor1_status + branch car_motor1_control +car_reset_old_speed: + beq SPEED_LEVEL_2,car_reset_old_speed2 + beq SPEED_LEVEL_3,car_reset_old_speed3 + store 1,mem_motor1_speed + rtn +car_reset_old_speed2: + jam SPEED_LEVEL_5,mem_motor1_speed + rtn +car_reset_old_speed3: + jam SPEED_LEVEL_10,mem_motor1_speed + rtn +car_speed_set_old: + fetch 1,mem_le_receive_payload + call car_reset_old_speed + fetch 1,mem_motor1_speed + call car_motor_speed_duty_setting + call car_motor_speed_duty_transform + branch pwm_pwm0_duty_set + +car_motor_control: + fetch 1,mem_car_24g_go_die_flag + nrtn blank + fetch 6,mem_le_receive_payload + store 6,mem_motor1_status + fetch 1,mem_motor1_speed + fetcht 1,mem_motor2_speed + iand temp,pdata + fetcht 1,mem_motor3_speed + iand temp,pdata + call car_motor_working_flag,blank + bpatch patch1a_2,mem_patch1a + call car_motor1_control + call car_motor2_control + branch car_motor3_control +car_motor1_control: + arg mem_motor1_pwm_set,regb + arg mem_motor1_status,contr + branch car_motor_status_select +car_motor2_control: + arg mem_motor2_pwm_set,regb + arg mem_motor2_status,contr + branch car_motor_status_select +car_motor3_control: + arg mem_motor3_pwm_set,regb + arg mem_motor3_status,contr + branch car_motor_status_select +car_motor_working_flag: + jam 0,mem_car_working_flag + rtn + +car_motor_status_select: + ifetch 1,contr + beq MOTOR_STOP,car_motor_stop + beq GO_FRONT,car_motor_positive + beq GO_BACK,car_motor_negative + rtn +car_motor_positive: + jam 0,mem_motor_select_p_n + branch car_motor_negative+1 +car_motor_negative: + jam 1,mem_motor_select_p_n + ifetch 1,contr + store 1,mem_car_motor_speed + ifetch 8,regb + branch car_motor_work + +car_motor_stop: + ifetch 1,regb + call pwm_disable + increase 1,regb + ifetch 1,regb + branch pwm_disable +car_motor_work: + store 8,mem_motor_pwm_pin1_set + jam 1,mem_car_working_flag + fetch 1,mem_motor_select_p_n + beq 0,car_motor_select_positive +car_motor_select_negative: + fetch 1,mem_motor_pwm_pin2_set + store 1,mem_motor_pwm_pin_set + fetch 1,mem_motor_pwm_pin1_set +car_motor_work_next: + call pwm_disable + fetch 1,mem_car_motor_speed + call car_motor_speed_duty_setting + store 1,mem_motor_pwm_dute_set + fetch 6,mem_motor_pwm_pin_set + store 6,mem_pdatatemp + branch pwm_out_set +car_motor_select_positive: + fetch 1,mem_motor_pwm_pin1_set + store 1,mem_motor_pwm_pin_set + fetch 1,mem_motor_pwm_pin2_set + branch car_motor_work_next + +car_motor_speed_duty_setting: + mul32 pdata,5,pdata + add pdata,50,pdata + rtn +car_motor_speed_duty_transform: + arg 12000,temp + imul32 temp,pdata + div pdata,100 + call wait_div_end + quotient temp + copy temp,rega + setarg 12000 + isub temp,regb + rtn + +/////////////////////IR PROCESS///////////////////// +car_ir_init: + hfetch 1,core_gpio_sel2 // select GPIO3 as pwm4 + set1 2,pdata + hstore 1,core_gpio_sel2 + setarg 158 + hstore 2,core_pwm_pcnt4 + hstore 2,core_pwm_ncnt4 + rtn + +car_ir_data_rx_from_app: + fetch 1,mem_car_24g_go_die_flag + nrtn blank + fetch 2,mem_le_receive_payload + store 2,mem_ir_data + fetch 1,mem_car_24g_status + bne WORK_PAIRED,car_ir_data_tx + fetch 2,mem_le_lap + store 2,mem_ir_data +car_ir_data_tx: + bpatch patch1a_3,mem_patch1a + call car_ir_init + call car_ir_enable + setarg 48000 + call sleep + call car_ir_disable + setarg 7200 + call sleep + arg 16,loopcnt +car_ir_send_loop: + call car_ir_enable + fetch 2,mem_ir_data + bbit1 0,car_ir_is_bit1 + setarg 7200 + call sleep + call car_ir_disable + branch car_ir_wait_finish + +car_ir_is_bit1: + setarg 14400 + call sleep + call car_ir_disable +car_ir_wait_finish: + setarg 7200 + call sleep + fetch 2,mem_ir_data + rshift pdata,pdata + store 2,mem_ir_data + loop car_ir_send_loop + + jam 2,mem_car_attack_shake_timer + jam 1, mem_car_attack_shake_flag + setarg 0x0a01 + store 2,mem_le_receive_payload + fetch 1,mem_car_config_device_select + beq DEVICE_BATTLE_TANK,car_attack_shake_back_battle_tank +car_attack_shake_back_battle_car: + branch car_motor_control +car_attack_shake_back_battle_tank: + setarg 0x0a01 + store 2,mem_le_receive_payload+2 + branch car_motor_control + +car_ir_enable: + hfetch 1,core_gpio_key2 // PWM4_enable + or_into 0x40,pdata + hstore 1,core_gpio_key2 + rtn +car_ir_disable: + hfetch 1,core_gpio_key2 // PWM4_disable + and_into 0xbf,pdata + hstore 1,core_gpio_key2 + rtn + +car_ir_rx_init: + fetch 1,mem_car_config_ir_enable + rtneq 0x00 + call lpm_disable_exen_output + fetcht 1,mem_car_config_ir_rx_gpio + storet 1,mem_ir_rx_gpio + call gpio_config_input + call car_ir_gpio_get_status + nrtn true + jam 1,mem_car_ir_breakdown_check_timer + rtn + +car_ir_receive_process: + fetch 1,mem_car_config_ir_enable + rtneq FLAG_IR_DISABLE + fetch 1,mem_car_ir_breakdown_flag + nrtn blank + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,car_ir_receive_process_next + fetch 1,mem_car_24g_status + rtnne WORK_PAIRED +car_ir_receive_process_next: + bpatch patch1a_4,mem_patch1a + call car_ir_gpio_get_status + nrtn true + setarg 36000 + call sleep + call car_ir_gpio_get_status + nrtn true + call car_ir_clk_get +car_ir_packet_head_wait_end: + call car_ir_clk_check + nrtn positive + call car_ir_gpio_get_status + branch car_ir_packet_head_wait_end,true + arg 0,rega + arg 16,loopcnt + call car_ir_clk_get +car_ir_receive_process_loop: + call car_ir_clk_check + nrtn positive + call car_ir_gpio_get_status + nbranch car_ir_receive_process_loop,true + setarg 10800 + call sleep + call car_ir_gpio_get_status + branch car_ir_get_bit1,true +car_ir_get_bit0: + setarg 0 + rshift rega,rega + ior rega,rega + loop car_ir_receive_process_loop + branch car_ir_receive_process_end +car_ir_get_bit1: + setarg 0x8000 + rshift rega,rega + ior rega,rega + call car_ir_clk_get +car_ir_get_bit1_wait_low_end: + call car_ir_clk_check + nrtn positive + call car_ir_gpio_get_status + branch car_ir_get_bit1_wait_low_end,true + loop car_ir_receive_process_loop +car_ir_receive_process_end: + bpatch patch1a_5,mem_patch1a + copy rega,pdata + store 2,mem_ir_rx_buf + store 2,mem_ir_notify_data+8 + fetch 1,mem_car_24g_status + beq WORK_PAIRED,car_ir_24g_receive_attack +car_ir_data_notify: + arg 0x07,loopcnt + arg mem_ir_notify_data_head,contr + call calc_check_sum_start + store 1,mem_ir_notify_data_check_sum + arg mem_ir_notify_data,rega + branch queue_push + +car_ir_24g_receive_attack: + fetch 1,mem_car_24g_ir_receive_attack_count + increase 1,pdata + store 1,mem_car_24g_ir_receive_attack_count + div pdata,2 + call wait_div_end + quotient temp + remainder pdata + nbranch car_ir_24g_receive_attack_blink,blank +car_ir_24g_receive_attack_off: + fetch 1,mem_car_config_led_num + isub temp,null + call car_ir_24g_go_die,zero + arg mem_car_led_control,pdata + increase -1,temp + iadd temp,rega + arg 0,pdata + istore 1,rega + rtn +car_ir_24g_receive_attack_blink: + arg mem_car_led_control,pdata + iadd temp,rega + arg 2,pdata + istore 1,rega + rtn +car_ir_24g_go_die: + jam 1,mem_car_24g_go_die_flag + rtn +car_ir_clk_get: + copy clkn_bt,pdata + store 4,mem_ir_receive_clkn + rtn +car_ir_clk_check: + copy clkn_bt,pdata + fetcht 4,mem_ir_receive_clkn + isub temp,pdata + sub pdata,200,null + rtn + +car_ir_gpio_get_status: + fetcht 1,mem_ir_rx_gpio + branch gpio_get_bit + +car_led_control_receive: + fetch 8,mem_le_receive_payload + store 8,mem_car_led_control + rtn + +car_info_request: + fetch 1,mem_car_config_device_select + store 1,mem_car_info_request_payload + fetch 1,mem_car_config_motor_layout + store 1,mem_car_info_request_payload+1 + fetch 1,mem_car_config_ir_enable + store 1,mem_car_info_request_payload+2 + arg 13,loopcnt + arg mem_car_info_request_head,contr + call calc_check_sum_start + store 1,mem_car_info_request_checksum + arg mem_car_info_request,rega + branch queue_push + +endif + + + Index: 1066_OTP_FLASH/program/app_light.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_light.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_light.prog (working copy) @@ -0,0 +1,227 @@ + +light_init: + call clear_eeprom_size_2k + jam 0x7a,mem_curr_packet_num + call light_load_controler_list + call light_init_crr_cmd_count + setarg light_pairing_timer + store 2,mem_cb_event_timer + arg 0,rega + branch pwm_init + +light_pairing_timer: + fetch 2,mem_light_pairing_timer + rtn blank + increase -1,pdata + store 2,mem_light_pairing_timer + rtnne 0 + jam 0,mem_light_pairing_enable + rtn + +light_init_crr_cmd_count: + bpatch patch1a_6,mem_patch1a + fetch 1,mem_light_next_record + sub pdata,40,null + rtn positive + jam 0,mem_light_next_record + rtn + +light_load_controler_list: + arg mem_light_next_record,rega + arg 0,regb + arg 81,temp + branch iicd_read_eep_data + +//output user:group record find +light_find_controler_pairing: + disable user + fetch 1,mem_light_cnum + copy pdata,loopcnt + + arg mem_light_clist,rega + copy regc,regb +light_find_controler_pairing_loop: + bpatch patch1a_7,mem_patch1a + call light_compare_addr_record + branch enable_user,zero +light_find_single_pairing_diff: + increase 4,rega + loop light_find_controler_pairing_loop + rtn + +//rega: regb: +light_compare_addr_record: + bpatch patch1b_0,mem_patch1b + ifetch 3,rega + ifetcht 3,regb + isub temp,null + rtn +//rega: regb: +light_compare_single_record: + bpatch patch1b_1,mem_patch1b + ifetch 3,rega + ifetcht 3,regb + isub temp,null + nrtn zero + ifetch 1,contr + sub pdata,0,null //0 zero + rtn zero + add rega,3,contr + ifetcht 1,contr + isub temp,null + rtn + +//output:find single controler +light_find_controler_cmd: + bpatch patch1b_2,mem_patch1b + disable user + fetch 1,mem_light_cnum + copy pdata,loopcnt + + arg mem_light_clist,rega + copy regc,regb +light_find_controler_cmd_loop: + call light_compare_single_record + branch enable_user,zero + increase 4,rega + loop light_find_controler_cmd_loop + rtn + +//regc +light_recv_adv: + fetch 1,mem_le_scanrsp_rcv + increase 1,pdata + store 1,mem_le_scanrsp_rcv + arg mem_le_rxbuf+12,regc + +light_anylize_command: + ifetch 2,regc + arg 0x55aa,temp + isub temp,null + nrtn zero + copy contr,regc + ifetcht 3,regc + setarg 0xffffff + isub temp,null + branch light_parse_cmd,zero + call light_find_controler_cmd + branch light_parse_cmd,user + rtn + +light_parse_cmd: + bpatch patch1b_3,mem_patch1b + increase 4,regc + ifetch 1,regc + fetcht 1,mem_curr_packet_num + isub temp,null + rtn zero + store 1,mem_curr_packet_num + fetch 1,mem_le_req_rcv + increase 1,pdata + store 1,mem_le_req_rcv + + increase 1,regc + ifetch 1,regc + store 1,mem_light_crr_cmd_count + copy pdata,loopcnt + rtn blank +light_parse_cmd_loop: + ifetch 1,contr + beq LIGHT_CMD_PWM0,light_parse_cmd_pwm0 + beq LIGHT_CMD_PWM1,light_parse_cmd_pwm1 + beq LIGHT_CMD_PWM2,light_parse_cmd_pwm2 + beq LIGHT_CMD_PWM3,light_parse_cmd_pwm3 + beq LIGHT_CMD_PWM4,light_parse_cmd_pwm4 + beq LIGHT_CMD_PWM5,light_parse_cmd_pwm5 + beq LIGHT_CMD_AUTO_MODE,light_parse_auto_mode + beq LIGHT_CMD_PAIRING,light_parse_pairing + loop light_parse_cmd_loop + rtn + +light_parse_cmd_pwm0: + copy contr,regc + fetch 1,mem_light_pwm0 + store 1,mem_pdatatemp + arg 0,temp +light_parse_cmd_pwm_common: + storet 1,mem_pdatatemp+1 + setarg 10000 + store 3,mem_pdatatemp+2 + ifetch 1,regc + store 1,mem_pdatatemp+5 + call pwm_out_set + and regc,1,contr + loop light_parse_cmd_loop + rtn +light_parse_cmd_pwm1: + copy regc,contr + fetch 1,mem_light_pwm1 + store 1,mem_pdatatemp + arg 1,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm2: + copy regc,contr + fetch 1,mem_light_pwm2 + store 1,mem_pdatatemp + arg 2,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm3: + copy regc,contr + fetch 1,mem_light_pwm3 + store 1,mem_pdatatemp + arg 3,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm4: + copy regc,contr + fetch 1,mem_light_pwm4 + store 1,mem_pdatatemp + arg 4,temp + branch light_parse_cmd_pwm_common +light_parse_cmd_pwm5: + copy regc,contr + fetch 1,mem_light_pwm5 + store 1,mem_pdatatemp + arg 5,temp + branch light_parse_cmd_pwm_common + +light_parse_auto_mode: + ifetch 1,contr + rtn + +light_parse_pairing: + copy contr,regc + fetch 1,mem_light_pairing_enable + bne 1,light_parse_pairing_abandon + call update_controler_list +light_parse_pairing_abandon: + and regc,4,contr + rtn +update_controler_list: + bpatch patch1b_4,mem_patch1b + call light_find_controler_pairing + branch update_conrtoler_list_found,user + fetch 1,mem_light_next_record + copy pdata,temp + increase 1,pdata + store 1,mem_light_next_record + call light_init_crr_cmd_count + lshift2 temp,temp + setarg mem_light_clist + iadd temp,contw + ifetch 4,regc + istore 4,contw + branch update_conrtoler_store_list +update_conrtoler_list_found: + add regc,3,contr + ifetch 1,contr + rtn blank + ifetch 4,regc + istore 4,rega +update_conrtoler_store_list: + arg mem_light_next_record,rega + arg 0,regb + arg 81,temp + branch iicd_write_eep_data + + + Index: 1066_OTP_FLASH/program/app_lightC.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_lightC.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_lightC.prog (working copy) @@ -0,0 +1,55 @@ +lightc_init: + //key scan init + + //gpio init + fetcht 1,mem_lightc_led_gpio + call gpio_out_inactive + rtn + + +lightc_dispatch: + //key scan + + fetcht 1,mem_lightc_led_gpio + call gpio_out_active + + + fetcht 1,mem_lightc_led_gpio + call gpio_out_inactive + + // + call lightc_start_adv + + fetch 1,mem_adv_time + nrtn blank + //sleep + call lpm_write_gpio_wakeup + hfetch 4,core_lpm_ctrl + set0 15,pdata /* lowest lpo */ + hstore 4,core_lpm_reg + call lpm_write_ctrl + arg param_hibernate_clks,temp + branch lpm_sleep + +lightc_adv: + fetch 1,mem_adv_time + branch le_adv_loop_tx,blank + increase -1,pdata + store 1,mem_adv_time + branch le_adv_loop_tx + +lightc_start_adv: + mul32 pdata,20,pdata + arg mem_cmd0_string,contr + iadd contr,contr + ifetch 1,contr + rtn blank + copy pdata,rega + copy rega,loopcnt + arg mem_le_adv_data+2,contw + call memcpy + copy rega,pdata + increase 2,pdata + store 1,mem_le_adv_data_len + rtn + Index: 1066_OTP_FLASH/program/app_module.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_module.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_module.prog (working copy) @@ -0,0 +1,1506 @@ + +ifdef COMPILE_MODULE + + + + +module_init: + + rtn wake + call le_modified_name + call adc_init_data + setarg module_process_idle + store 2,mem_cb_idle_process + setarg module_bt_conn_process + store 2,mem_cb_bt_process + setarg module_process_bb_event + store 2,mem_cb_bb_event_process + setarg module_le_conn_process + store 2,mem_cb_le_process + setarg module_lpm_lock + store 2,mem_cb_check_wakelock + setarg module_hci_cmd_transmit_le_notify + store 2,mem_cb_ble_transmit + setarg module_hci_event_receive_spp_data + store 2,mem_cb_receive_spp_data + setarg module_le_receive_data + store 2,mem_cb_att_write + setarg module_bb_event_timer + store 2,mem_cb_event_timer + + call module_spp_clear_last_transmite_clock + bpatch patch1b_5,mem_patch1b + call module_lpm_uart_init + call module_gpio_init + call check_module_disabled + branch module_hci_event_enter_standby_mode + + +module_lpm_uart_init: + fetch 4,mem_module_uart_rx_buffer + hstore 4,core_uart_rsaddr + + fetch 4,mem_module_uart_tx_buffer + hstore 4,core_uart_tsaddr + + hfetch 1,core_gpio_sel1 + or_into 0x04,pdata + and_into 0xfc,pdata + hstore 1,core_gpio_sel1 + hjam 0x00,core_uart_ctrl + + fetch 2,mem_module_uart_rx_buffer + hstore 2,core_uart_rrptr + fetch 2,mem_module_uart_tx_buffer + hstore 2,core_uart_twptr + hstore 2,core_uart_trptrp + + hfetch 4,core_gpio_pu0 + set1 7,pdata + hstore 4,core_gpio_pu0 + + hfetch 2,core_clkoff + set0 CLOCK_OFF_UART,pdata + hstore 2,core_clkoff + call uart_set_baud_by_mem + hjam uartclk_crystal,core_uart_clksel + hjam uart_ctrl_h4,core_uart_ctrl + + fetch 1,mem_module_flag + isolate1 MODULE_FLAG_UART_FLOW_CONTROL,pdata + hfetcht 1,core_uart_ctrl + setflag true,4,temp + hstoret 1,core_uart_ctrl + rtn + + + +module_lpm_init: + call module_spp_clear_last_transmite_clock + branch module_lpm_uart_init +// branch module_gpio_init + +module_gpio_init: + //module state pin +// call ui_led_init +// call app_led_start_blink + //module conn state pin + fetcht 1,mem_module_connect_state_gpio + call gpio_config_output + call module_set_conn_pin_low + + fetcht 1,mem_module_wake_up_gpio + branch gpio_config_input + +module_lpm_lock: + fetcht 1,mem_module_wake_up_gpio + call gpio_get_bit + nbranch app_put_lpm_wake_lock,true + branch app_get_lpm_wake_lock + + +module_le_conn_process: + rtn + +module_bt_conn_process: + call module_spp_enter_sniff + branch module_control_air_flow + +module_spp_enter_sniff: + fetch 1,mem_ui_state_map + bbit0 UI_STATE_BT_SPP_CONN,module_spp_clear_last_transmite_clock + bpatch patch1b_6,mem_patch1b + setarg 0x3eff + fetcht 4,mem_last_transmite_clock + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_SNIFF,module_spp_clear_last_transmite_clock + fetch 1,mem_module_flag + rtnbit1 MOUDLE_TASK_SNIFF + call module_set_sniff_task_flag + call app_bt_enter_sniff +module_spp_clear_last_transmite_clock: + copy clkn_bt,pdata + store 4,mem_last_transmite_clock + rtn + + +module_process_idle: + call module_control_air_flow + call l2cap_malloc_is_fifo_full + nrtn blank + branch module_process + + +module_process_bb_event: + copy regc,pdata + beq BT_EVT_BB_CONNECTED,module_process_bb_conn + beq BT_EVT_BB_DISCONNECTED,module_process_bb_event_disconned + beq BT_EVT_RECONN_FAILED,module_process_reconn_fail + beq BT_EVT_SETUP_COMPLETE,module_process_setup_complete + beq BT_EVT_SPP_CONNECTED,module_process_spp_connected + beq BT_EVT_SPP_DISCONNECTED,module_process_spp_disconnected + beq BT_EVT_PINCODE_REQ,module_process_evt_pincode_req + beq BT_EVT_ENTER_SNIFF,module_process_enter_sniff + beq BT_EVT_EXIT_SNIFF,module_process_exit_sniff + beq BT_EVT_RECONN_PAGE_TIMEOUT,module_process_page_time_out + beq BT_EVT_LE_CONNECTED,module_process_le_conn + beq BT_EVT_LE_DISCONNECTED,module_process_bb_even_le_disconn + beq BT_EVT_SNIFF_NOT_ACCEPT,module_process_sniff_not_accept + beq BT_EVT_UNSNIFF_ACCEPT,module_process_unsniff_accept + beq BT_EVT_UNSNIFF_NOT_ACCEPT,module_process_unsniff_not_accept + beq BT_EVT_LE_PAIRING_FAIL,module_hci_event_le_pairing_fail + beq BT_EVT_LE_PAIRING_SUCCESS,module_hci_event_le_pairing_success + beq BT_EVT_LE_START_ENC,module_hci_event_start_enc + beq BT_EVT_LE_PAUSE_ENC,module_hci_event_pause_enc + beq BT_EVT_LE_TK_GENERATE,module_hci_event_le_tk + beq BT_EVT_BT_GKEY_GENERATE,module_hci_event_gkey_generate + beq BT_EVT_BT_GET_PASSKEY,module_hci_event_passkey_entry_mode + beq BT_EVT_BT_PAIRING_FAIL,module_hci_event_bt_pairing_fail + beq BT_EVT_BT_PAIRING_SUCCESS,module_hci_event_bt_pairing_success +ifdef SECURE_CONNECTION + beq BT_EVT_LE_GKEY_GENERATE,module_hci_event_le_gkey +endif + beq BT_EVT_STORE_NVRAM,module_hci_event_store_device + beq BT_EVT_LE_LTK_LOST,module_process_ble_ltk_lost + rtn + + +module_process_bb_event_disconned: + call module_spp_clear_last_transmite_clock + fetch 1,mem_flag_pairing_state + ncall module_hci_event_bt_pairing_fail,blank + call module_disconn_start + fetch 2,mem_ui_state_map + rtnbit0 UI_STATE_BT_SPP_CONN + branch module_spp_disconnected + +module_process_spp_connected: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_SPP_CONN,pdata + store 2,mem_ui_state_map + fetch 1,mem_module_spp_lpm_mult + store 1,mem_lpm_mult + call module_set_conn_pin_low + branch module_hci_event_spp_connect + +module_process_spp_disconnected: +// branch module_spp_disconnected +module_spp_disconnected: + fetch 2,mem_ui_state_map + rtnbit0 UI_STATE_BT_SPP_CONN + set0 UI_STATE_BT_SPP_CONN ,pdata + store 2,mem_ui_state_map + branch module_hci_event_spp_disconnect + + +module_process_enter_sniff: + +module_sniff_param_check: + call module_spp_clear_last_transmite_clock + //fetch 1,mem_context + //rtnbit0 state_insniff + fetch 2,mem_context+coffset_tsniff + rshift pdata,pdata + fetcht 2,mem_sniff_param_interval + isub temp,null + nbranch module_sniff_param_check_unsniff,zero + branch app_lpm_mult_enable +module_sniff_param_check_unsniff: + fetch 1,mem_module_flag + rtnbit1 MOUDLE_TASK_UNSNIFF + hfetch 2,core_uart_rxitems //* + ncall module_set_unsniff_task_flag,blank //*加这两句话 + branch app_bt_sniff_exit + +module_process_exit_sniff: + call module_clear_sniff_task_flag + branch app_lpm_mult_disable + +module_process_setup_complete: + call module_spp_clear_last_transmite_clock + branch module_conn_start + +module_process_bb_even_le_disconn: + call le_clr_config_more_data + call module_disconn_start + branch module_hci_event_le_disconnect + +module_process_evt_pincode_req: + branch app_bt_set_pincode + + +module_process_sniff_not_accept: + branch module_clear_sniff_task_flag + + +module_process_unsniff_accept: + fetch 1,mem_module_flag + bbit0 MOUDLE_TASK_UNSNIFF,app_bt_enter_sniff + branch module_clear_unsniff_task_flag + + +module_process_unsniff_not_accept: + branch module_clear_unsniff_task_flag + + +module_process_le_conn: + call le_send_att_exchange_mtu_requset + call module_conn_start + fetch 1,mem_module_le_lpm_mult + store 1,mem_lpm_mult + branch module_hci_event_le_connect + + +module_process_bb_conn: + jam 0,mem_flag_mode_ssp_pin + call module_clear_sniff_task_flag + branch module_clear_unsniff_task_flag + +module_process_page_time_out: +module_process_reconn_fail: +module_disconn_start: + call module_start_adv_discovery_by_command + branch module_set_conn_pin_high + + +module_process_ble_ltk_lost: + call le_send_reject_ind + branch le_send_smp_security_request + + +module_set_conn_pin_high: + fetcht 1,mem_module_connect_state_gpio + branch gpio_out_active + +module_conn_start: + call module_stop_adv_discovery + branch module_set_conn_pin_low + +module_stop_adv_discovery: + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BT_BIT,pdata + call app_bt_stop_discovery,true + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BLE_BIT,pdata + call app_ble_stop_adv,true + rtn +module_set_conn_pin_low: + fetcht 1,mem_module_connect_state_gpio + branch gpio_out_inactive + +module_process_with_credit: + fetch 1,mem_credit_flag + rtneq CREDIT_DISABLE + branch rfcomm_send_uih_without_payload + +module_process: + hfetch 1,core_uart_status + bbit1 uart_status_rx_fifo_empty,module_process_with_credit //rx no data + call uartd_prepare_rx + ifetch 1,contru + bne 0x01,module_hci_in_excp + hfetch 2,core_uart_rxitems + sub pdata,2,null + rtn positive + ifetch 1,contru + store 1,mem_module_uart_opcode + ifetcht 1,contru + copy contru,rega + storet 1,mem_module_uart_len + add temp,3,temp + hfetch 2,core_uart_rxitems + isub temp,temp + nrtn positive + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + call module_hci_cmd_control + fetch 1,mem_module_temp_nl_discard_packet + rtneq HCI_NOT_DISCARD_PACKET + branch module_hci_dicard_packet //discard this packet + +module_hci_in_excp: + call delay_10ms + call module_hci_event_invalid_packet + branch module_hci_release_except + + +module_hci_release_except: + bpatch patch1b_7,mem_patch1b + hfetch 2,core_uart_rxitems + rtn blank + call uartd_prepare_rx + ifetch 1,contru + sub pdata,0x01,null + ncall module_hci_dicard_bytes,zero + nbranch module_hci_release_except,zero + ifetch 1,contru + rtneq HCI_CMD_SPP_DATA_REQ + rtneq HCI_CMD_SET_CREDIT_GIVEN + increase -1,contru + call module_hci_dicard_bytes + branch module_hci_release_except + +module_hci_dicard_packet: + call uartd_prepare_rx + increase 2,contru + ifetch 1,contru + iadd contru,contru +module_hci_dicard_bytes: + branch uartd_rxdone + +/*********************HCI CONTROL*********************/ +module_hci_cmd_control: + bpatch patch1c_0,mem_patch1c + fetch 1,mem_module_uart_opcode + beq HCI_CMD_SET_BT_ADDR_REQ,module_hci_cmd_set_bt_addr + beq HCI_CMD_SET_LE_ADDR_REQ,module_hci_cmd_set_le_addr + beq HCI_CMD_SET_VISIBILITY_REQ,module_hci_cmd_set_visibility + beq HCI_CMD_SET_BT_NAME_REQ,module_hci_cmd_set_bt_name + beq HCI_CMD_SET_LE_NAME_REQ,module_hci_cmd_set_le_name + beq HCI_CMD_SPP_DATA_REQ,module_hci_cmd_receive_spp_data + beq HCI_CMD_LE_DATA_REQ,module_hci_cmd_receive_le_data + beq HCI_CMD_STATUS_IRQ,module_hci_cmd_inquire_status + beq HCI_CMD_SET_PAIRING_REQ,module_hci_cmd_set_pairing_mode + beq HCI_CMD_SET_PINCODE_REQ,module_hci_cmd_set_pincode + beq HCI_CMD_SET_UARTCONTROL_REQ,module_hci_cmd_set_uart_control_mode + beq HCI_CMD_SET_UART_BAUD_REQ,module_hci_cmd_set_uart_baud + beq HCI_CMD_VERSION_REQ,module_hci_cmd_version_request + beq HCI_CMD_BT_DISCONNECT,module_hci_cmd_bt_disconnect + beq HCI_CMD_BLE_DISCONNECT,module_hci_cmd_ble_disconnect + beq HCI_CMD_SET_NVRAM_REQ,module_hci_cmd_set_nvram + beq HCI_CMD_CONFIRM_GKEY,module_hci_cmd_confirm_gkey + beq HCI_CMD_SET_CREDIT_GIVEN,module_hci_cmd_set_credit_given + beq HCI_CMD_AUTO_ADV_SCAN,module_hci_cmd_auto_adv + beq HCI_CMD_POWER_REQ,module_hci_cmd_power_request + beq HCI_CMD_POWER_SET,module_hci_cmd_power_set + beq HCI_CMD_PASSKEY_ENTRY,module_hci_cmd_passkey_entry + beq HCI_CMD_SET_GPIO,module_hci_cmd_set_gpio + beq HCI_CMD_READ_GPIO,module_hci_cmd_read_gpio + beq HCI_CMD_LE_SET_PAIRING,module_hci_cmd_le_set_pairing_mode + beq HCI_CMD_LE_SET_ADV_DATA,module_hci_cmd_le_set_adv_data + beq HCI_CMD_LE_SET_SCAN_DATA,module_hci_cmd_le_set_scan_data + beq HCI_CMD_LE_SEND_CONN_UPDATE_REQ,module_hci_cmd_le_send_conn_update_req + beq HCI_CMD_LE_SET_ADV_PARM,module_hci_cmd_set_le_adv_parameter + beq HCI_CMD_LE_START_PAIRING,module_hci_cmd_le_start_pairing + beq HCI_CMD_SET_WAKE_GPIO,module_hci_cmd_set_wake_gpio + beq HCI_CMD_SET_TX_POWER,module_hci_cmd_set_tx_power + beq HCI_CMD_LE_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey + beq HCI_CMD_REJECT_JUSTWORK,module_hci_cmd_set_reject_justwork_flag + beq HCI_CMD_RESET_CHIP_REQ,module_hci_cmd_reset_chip + beq HCI_CMD_LE_SET_FIXED_PASSKEY,module_hci_cmd_le_set_fixed_passkey + beq HCI_TEST_CMD_CLOSE_LPM,module_hci_test_cmde_close_lpm + branch module_hci_event_receive_invalid_cmd + +/*********************HCI COMMAND*********************/ + +//command opcode 0x00 +module_hci_cmd_set_bt_addr: + fetch 1,mem_module_uart_len + bne 6,module_hci_event_receive_invalid_cmd + ifetch 6,contru + store 6,mem_lap + branch module_hci_event_receive_valid_cmd + +//command opcode 0x01 +module_hci_cmd_set_le_addr: + fetch 1,mem_module_uart_len + bne 6,module_hci_event_receive_invalid_cmd + ifetch 6,contru + store 6,mem_le_lap + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x02 +module_hci_cmd_set_visibility: + fetch 1,mem_module_uart_len + bne 1,module_hci_event_receive_invalid_cmd + copy rega,contru + call module_hci_event_receive_valid_cmd + ifetcht 1,contru + storet 1,mem_module_bluetooth_stauts_by_command + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + rtnbit1 UI_STATE_BT_CONNECTED +module_start_adv_discovery_by_command: + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BT_BIT,pdata + nbranch moudle_start_adv_by_command,true + fetcht 1,mem_module_bluetooth_stauts_by_command + and temp,0x03,pdata + store 1,mem_scan_mode +moudle_start_adv_by_command: + fetch 1,mem_module_state + isolate1 MOUDLE_STATE_BLE_BIT,pdata + nrtn true + fetcht 1,mem_module_bluetooth_stauts_by_command + isolate1 2,temp + branch app_ble_start_adv,true + branch app_ble_stop_adv + + +//command opcode 0x03 +module_hci_cmd_set_bt_name: + fetch 1,mem_module_uart_len + sub pdata,67,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_local_name_length + arg 8,loopcnt + call memset0 + fetch 1,mem_module_uart_len + copy pdata,loopcnt + copy rega,contru + arg mem_local_name,contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x04 +module_hci_cmd_set_le_name: + fetch 1,mem_module_uart_len + sub pdata,29,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_le_name_len + copy pdata,loopcnt + copy rega,contru + arg mem_le_name,contw + call uart_copy_rx_bytes_fast + call le_modified_name + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x05 +module_hci_cmd_receive_spp_data: + fetch 1,mem_ui_state_map + bbit0 UI_STATE_BT_SPP_CONN,module_hci_event_receive_invalid_cmd + call app_check_sniff + branch module_hci_cmd_spp_exit_sniff,true + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet +// call p_nl_clear_last_transmite_clock + call module_spp_clear_last_transmite_clock + fetch 1,mem_remote_credits + rtn blank + fetch 2,mem_nl_rx_len_all + bne 0,module_hci_cmd_pass_init_ng_rx_len_all + fetch 1,mem_module_uart_len + store 2,mem_nl_rx_len_all + + copy rega,contru +// ifetch 2,contru +// store 2,mem_nl_rx_handle + copy contru,pdata + store 2,mem_nl_rx_data_src +module_hci_cmd_pass_init_ng_rx_len_all: + call module_hci_cmd_get_current_packet_len_and_remain_len + branch spp_tx_rfcomm_packet + +module_hci_cmd_spp_exit_sniff: + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + branch module_exit_sniff + +module_hci_cmd_get_current_packet_len_and_remain_len: + call module_hci_cmd_get_current_patcket_len + fetch 2,mem_nl_rx_len_all + fetcht 2,mem_current_packet_length + isub temp,pdata + store 2,mem_nl_rx_len_all + rtn + +module_hci_cmd_get_current_patcket_len: + fetch 2,mem_nl_rx_len_all + arg DM_REFCOM_BUFF_LEN,temp + call not_greater_than + fetcht 2,mem_rfcomm_max_frame_size + call not_greater_than + fetcht 2,mem_pn_max_frame_size + call not_greater_than + store 2,mem_current_packet_length + rtn + +module_hci_command_tx_spp_tx_complete: + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + jam HCI_CMD_SPP_DATA_REQ,mem_module_uart_opcode + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x09 +module_hci_cmd_receive_le_data: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd + call module_check_ble_encrypt_state + branch module_hci_event_receive_invalid_cmd,user + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + fetch 1,mem_module_flag + bbit1 MODULE_FLAG_BLE_DATA_FINISH,module_hci_cmd_receive_le_data_finish + fetch 1,mem_module_hci_notify_len + nrtn blank + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + ifetch 2,contru //handle + store 2,mem_module_hci_notify_handle + copy contru,pdata + store 2,mem_module_hci_nofiy_addr + fetch 1,mem_module_uart_len + pincrease -2 + nbranch module_hci_event_receive_invalid_cmd,positive + branch module_hci_event_receive_invalid_cmd,zero + store 1,mem_module_hci_notify_len + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + call le_set_config_more_data + call module_hci_cmd_transmit_le_notify + call module_hci_cmd_transmit_le_notify + call module_hci_cmd_transmit_le_notify + fetch 1,mem_module_flag + rtnbit0 MODULE_FLAG_BLE_DATA_FINISH +module_hci_cmd_receive_le_data_finish: + jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet + call module_clear_le_tx_data_flag + branch module_hci_event_receive_valid_cmd + +module_hci_cmd_transmit_le_notify: + fetch 1,mem_module_hci_notify_len + rtn blank + call le_fifo_check_nearly_full + nrtn blank //no fifo + call module_get_le_remote_mtu + bpatch patch1c_1,mem_patch1c + add temp,-3,pdata //sub handle and opcode + fetcht 1,mem_module_hci_notify_len + call not_greater_than + copy pdata,rega + copy temp,pdata + isub rega,pdata + store 1,mem_module_hci_notify_len + fetcht 2,mem_module_hci_notify_handle + call le_att_malloc_tx_notify + fetch 2,mem_module_hci_nofiy_addr + copy pdata,contru + copy rega,loopcnt + call uart_copy_rx_bytes_fast + copy contru,pdata + store 2,mem_module_hci_nofiy_addr + fetch 1,mem_module_hci_notify_len + nrtn blank + branch module_set_le_tx_data_flag + + +//output: temp is master mtu +module_get_le_remote_mtu: + arg 0x17,temp + fetch 1,mem_module_flag + rtnbit1 MODULE_FLAG_BLE_SEND_MTU23 + fetcht 2,mem_le_remote_mtu + rtn + +module_check_ble_encrypt_state: + fetch 1,mem_module_flag + bbit1 MODULE_FLAG_BLE_DATA_ENCRYPT,le_check_encrypt_state + branch disable_user + + +//command opcode 0x0b +module_hci_cmd_inquire_status: + branch module_hci_event_status_res + + +//command opcode 0x0c +module_hci_cmd_set_pairing_mode: + copy rega,contru + ifetch 1,contru + beq PAIRING_PINCODE,module_hci_pairing_pincode_mode + beq PAIRING_JUSTWORK,module_hci_pairing_just_work_mode + beq PAIRING_PASSKEY,module_hci_pairing_passkey + beq PAIRING_CONFIRM,module_hci_pairing_numeric_comparison + branch module_hci_event_receive_invalid_cmd +module_hci_pairing_pincode_mode: + call ssp_disable + jam 0,mem_ssp_enable + branch module_hci_event_receive_valid_cmd +module_hci_pairing_just_work_mode: + setarg SSP_MODE_JUST_WORK_IO_CAP_DATA +module_hci_sspairing_mode: + store 3,mem_sp_iocap_local + store 1,mem_ssp_mode_flag + call ssp_enable + jam 1,mem_ssp_enable + branch module_hci_event_receive_valid_cmd +module_hci_pairing_passkey: + setarg SSP_MODE_PASSKEY_IO_CAP_DATA + branch module_hci_sspairing_mode + +module_hci_pairing_numeric_comparison: + setarg SSP_MODE_SSP_PIN_IO_CAP_DATA + branch module_hci_sspairing_mode + +//command opcode 0x0d +module_hci_cmd_set_pincode: + fetch 1,mem_module_uart_len + sub pdata,16,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_pin_length + copy pdata,loopcnt + arg mem_pin,contw + call uart_copy_rx_bytes + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x0e +module_hci_cmd_set_uart_control_mode: + copy rega,contru + ifetch 1,contru + hfetcht 1,core_uart_ctrl + nsetflag blank,4,temp + hstoret 1,core_uart_ctrl + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x0f +module_hci_cmd_set_uart_baud: + fetch 1,mem_module_uart_len + copy pdata,loopcnt + copy rega,contru + call string2dec_from_uart + setarg uart_clk_24 + idiv temp + call wait_div_end + quotient pdata +module_hci_cmd_set_uart_baud_ok: + store uart_baud_len,mem_baud + call module_hci_event_receive_valid_cmd + call wait_uarttx + branch uart_set_baud_by_mem + + +//command opcode 0x10 +module_hci_cmd_version_request: + arg 2,rega + arg mem_soft_version_num,regb + arg 0,temp + branch module_hci_event_set_cmd +module_hci_event_set_cmd_send_response: + store 2,mem_event_cmd_response_content + arg mem_event_cmd_response_content,regb + arg 0,temp + branch module_hci_event_set_cmd + + +//command opcode 0x11 +module_hci_cmd_bt_disconnect: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd +module_hci_cmd_bt_disconnect_doing: + call module_hci_event_receive_valid_cmd + branch app_bt_disconnect + + +//command opcode 0x12 +module_hci_cmd_ble_disconnect: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd +module_hci_cmd_ble_disconnect_doing: + call module_hci_event_receive_valid_cmd + branch app_ble_disconnect + + + + +//command opcode 0x26 +module_hci_cmd_set_nvram: + fetch 1,mem_module_uart_len + copy pdata,loopcnt + copy rega,contru + fetch 2,mem_nv_data_ptr + icopy contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x28 +module_hci_cmd_confirm_gkey: + fetch 1,mem_ui_state_map + bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd + ifetch 1,contru + fetcht 1,mem_flag_mode_ssp_pin + setflag blank,FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,temp + set1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,temp + storet 1,mem_flag_mode_ssp_pin + + call module_hci_event_receive_valid_cmd + + fetch 1,mem_flag_mode_ssp_pin + bbit1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,module_hci_cmd_spp_number_comparison_result_is1 + rtn + +dhkey_not_accept: + jam 0,mem_flag_mode_ssp_pin + jam BT_CMD_DHKEY_NOT_ACCEPT,mem_fifo_temp + branch ui_ipc_send_cmd + + +module_hci_cmd_spp_number_comparison_result_is1: + bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed + branch dhkey_not_accept + + +//command opcode 0x29 +module_hci_cmd_set_credit_given: + fetch 1,mem_ui_state_map + rtnbit0 UI_STATE_BT_SPP_CONN + fetch 1,mem_credit_flag + rtneq CREDIT_DISABLE + ifetch 1,contru + fetcht 1,mem_credit_given + iadd temp,temp + storet 1,mem_credit_given + rtn + + +//command opcode 0x2a +module_hci_cmd_auto_adv: + arg 0x40,loopcnt + arg mem_le_adv_data_len,contw + call clear_mem + setarg 0 + store 1,mem_regb + copy rega,contru +module_hci_cmd_auto_adv_loop: + copy contru,pdata + store 2,mem_regc + call module_hci_cmd_auto_adv_adv_analys + + fetch 1,mem_regb + fetcht 1,mem_temp + increase 1,temp + iadd temp,pdata + store 1,mem_regb + + sub pdata,31,null + nbranch module_hci_cmd_auto_adv_store_scan,positive +module_hci_cmd_auto_adv_store_adv: + fetcht 1,mem_le_adv_data_len + setarg mem_le_adv_data + iadd temp,pdata + store 2,mem_contw + fetcht 1,mem_temp + increase 1,temp + fetch 1,mem_le_adv_data_len + iadd temp,pdata + store 1,mem_le_adv_data_len + branch module_hci_cmd_auto_adv_store_common +module_hci_cmd_auto_adv_store_scan: + fetcht 1,mem_le_scan_data_len + setarg mem_le_scan_data + iadd temp,pdata + store 2,mem_contw + fetcht 1,mem_temp + increase 1,temp + fetch 1,mem_le_scan_data_len + iadd temp,pdata + store 1,mem_le_scan_data_len +module_hci_cmd_auto_adv_store_common: + fetch 2,mem_contw + copy pdata,contw + fetch 2,mem_regc + copy pdata,contru + + copy temp,loopcnt + call uart_copy_rx_bytes_fast + + fetch 1,mem_module_uart_len + fetcht 1,mem_regb + isub temp,null + nbranch module_hci_cmd_auto_adv_loop,zero + branch module_hci_event_receive_valid_cmd + +//block of adv len in mem_temp +module_hci_cmd_auto_adv_adv_analys: + ifetch 1,contru + store 1,mem_temp + ifetch 1,contru + store 1,mem_rega + rtn + + +//command opcode 0x2b +module_hci_cmd_power_request: + arg 0,temp + arg 2,rega + fetch 2,mem_module_vdd_quotient + store 2,mem_event_cmd_response_content + arg mem_event_cmd_response_content,regb + branch module_hci_event_set_cmd + + +//command opcode 0x2c +module_hci_cmd_power_set: + fetch 1,mem_module_uart_len + bne 1,module_hci_event_receive_invalid_cmd + ifetch 1,contru + store 1,mem_module_read_vdd_flag + setarg 0x00 + store 2,mem_module_vdd_quotient + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x30 +module_hci_cmd_passkey_entry: + ifetch 4,contru + store 4,mem_pin + jam 4,mem_pin_length + jam 0,mem_authentication_passkey_times + call module_hci_event_receive_valid_cmd + branch authentication_passkey + + +//command opcode 0x31 +module_hci_cmd_set_gpio: + fetch 1,mem_module_uart_len + bne 3,module_hci_event_receive_invalid_cmd + ifetch 1,contru + beq HCI_CMD_CONFIG_GPIO_INPUT,module_set_gpio_input + beq HCI_CMD_CONFIG_GPIO_OUTPUT,module_set_gpio_output + branch module_hci_event_receive_invalid_cmd + +module_set_gpio_input: + ifetcht 1,contru + ifetch 1,contru + beq GPIO_INPUT_HIGH_IMPEDANCE,module_set_gpio_high_impedance + nsetflag blank,7,temp + call gpio_config_input + branch module_hci_event_receive_valid_cmd + +module_set_gpio_high_impedance: + call gpio_set_high_impedance + branch module_hci_event_receive_valid_cmd + +module_set_gpio_output: + ifetcht 1,contru + call gpio_config_output0 + ifetch 1,contru + isolate1 0,pdata + call gpio_out_flag + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x32 +module_hci_cmd_read_gpio: + fetch 1,mem_module_uart_len + bne 1,module_hci_event_receive_invalid_cmd + ifetcht 1,contru + call gpio_get_bit + setarg 0x0 + nsetflag true,0,pdata + arg 1,rega + branch module_hci_event_set_cmd_send_response + + +//command opcode 0x33 +module_hci_cmd_le_set_pairing_mode: + copy rega,contru + ifetch 1,contru + copy pdata,temp +ifdef SECURE_CONNECTION + beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,module_le_set_pairing_mode_secure_justwork + beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,module_le_set_pairing_mode_secure_numeric + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,module_le_set_pairing_mode_secure_passkey +endif + store 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_NONE, module_le_set_no_pairing + beq LE_PAIRING_MODE_LAGACY_JUSTWORK,module_le_set_pairing_mode_lagacy_just_work + beq LE_PAIRING_MODE_LAGACY_PASSKEY,module_le_set_pairing_mode_lagacy_passkey + branch module_hci_event_receive_invalid_cmd + +ifdef SECURE_CONNECTION +module_le_set_pairing_mode_secure_justwork: + fetch 1,mem_le_secure_connect_enable + branch module_hci_event_receive_invalid_cmd,blank + storet 1,mem_le_pairing_mode + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch module_le_set_noinputnooutput +module_le_set_pairing_mode_secure_numeric: + fetch 1,mem_le_secure_connect_enable + branch module_hci_event_receive_invalid_cmd,blank + storet 1,mem_le_pairing_mode + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap + branch module_hci_event_receive_valid_cmd +module_le_set_pairing_mode_secure_passkey: + fetch 1,mem_le_secure_connect_enable + branch module_hci_event_receive_invalid_cmd,blank + storet 1,mem_le_pairing_mode + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch module_le_set_displayonly +endif +module_le_set_no_pairing: + jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth +module_le_set_noinputnooutput: + jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap + branch module_hci_event_receive_valid_cmd +module_le_set_pairing_mode_lagacy_just_work: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth + branch module_le_set_noinputnooutput +module_le_set_pairing_mode_lagacy_passkey: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth +module_le_set_displayonly: + jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x34 +module_hci_cmd_le_set_adv_data: + fetch 1,mem_module_uart_len + sub pdata,31,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_le_adv_data_len + copy pdata,loopcnt + copy rega,contru + arg mem_le_adv_data,contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x35 +module_hci_cmd_le_set_scan_data: + fetch 1,mem_module_uart_len + sub pdata,31,null + nbranch module_hci_event_receive_invalid_cmd,positive + store 1,mem_le_scan_data_len + copy pdata,loopcnt + copy rega,contru + arg mem_le_scan_data,contw + call uart_copy_rx_bytes_fast + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x36 +module_hci_cmd_le_send_conn_update_req: + fetch 2,mem_ui_state_map + bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd + fetch 1,mem_module_uart_len + bne 0x08,module_hci_event_receive_invalid_cmd + copy rega,contru + ifetch 8,contru + store 8,mem_le_interval_min + jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp + call ui_ipc_send_cmd + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x37 +module_hci_cmd_set_le_adv_parameter: + ifetch 2,contru + store 2,mem_le_adv_interval + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x38 +module_hci_cmd_le_start_pairing: + fetch 1,mem_le_pairing_mode + branch module_hci_event_receive_invalid_cmd,blank + fetch 1,mem_le_pairing_state + bne FLAG_LE_PAIRING_NULL,module_hci_event_receive_invalid_cmd + fetch 1,mem_le_enc_state + bne FLAG_LE_ENC_NULL,module_hci_event_receive_invalid_cmd + call check_51cmd_le_smp_sec_req + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x40 +module_hci_cmd_set_wake_gpio: + fetch 1,mem_module_uart_len + bne 5,module_hci_event_receive_invalid_cmd + ifetch 1,contru + store 1,mem_module_mcu_wake_pin + ifetch 4,contru + store 4, mem_module_mcu_wake_delay_us + fetcht 1,mem_module_mcu_wake_pin + call gpio_config_output + call module_set_mcu_wake_pin_low + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x42 +module_hci_cmd_set_tx_power: + fetch 1,mem_module_uart_len + bne 0x01,module_hci_event_receive_invalid_cmd + ifetch 1,contru + store 1,mem_tx_power + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x48 +module_hci_cmd_le_confirm_gkey: + ifetch 1,contru + beq 0x01,module_hci_cmd_le_confirm_gkey_fail + fetch 1,mem_le_secure_connect_state + beq LE_SC_STAT_SEND_PUBLIC_KEY,module_hci_cmd_le_confirm_gkey_ok + beq LE_SC_STAT_RECEIVE_DHKEY,module_hci_cmd_le_confirm_gkey_ok + beq LE_SC_STAT_WAIT_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey_ok + branch module_hci_event_receive_invalid_cmd +module_hci_cmd_le_confirm_gkey_ok: + jam FLAG_LE_SC_CONFRIM_GKEY_OK,mem_le_sc_confirm_gkey_flag + branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey_fail: + call le_send_pairing_confirm_value_failed + branch module_hci_event_receive_valid_cmd + + +//command opcode 0x49 +module_hci_cmd_set_reject_justwork_flag: + fetch 1,mem_module_uart_len + bne 0x01,module_hci_event_receive_invalid_cmd + call module_hci_event_receive_valid_cmd + ifetch 1,contru + branch classic_bt_clr_reject_justwork_flag,blank + branch classic_bt_set_reject_justwork_flag + + +//command opcode 0x51 +module_hci_cmd_reset_chip: + call module_hci_event_receive_valid_cmd + call wait_uarttx + hjam 0x01,core_reset // rest YC1021 + branch loop + + +//command opcode 0x61 +module_hci_cmd_le_set_fixed_passkey: + fetch 1,mem_module_uart_len + beq 0,module_hci_event_receive_invalid_cmd + ifetch 1,contru + branch module_hci_cmd_le_set_random_passkey,blank + fetch 1,mem_module_uart_len + bne 5,module_hci_event_receive_invalid_cmd + ifetch 4,contru + arg 1000000,temp + isub temp,null + branch module_hci_event_receive_invalid_cmd,positive + store 4,mem_le_tk + call le_set_config_fixed_tk + branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_random_passkey: + call le_clr_config_fixed_tk + branch module_hci_event_receive_valid_cmd + + +//command opcode 0xff +module_hci_test_cmde_close_lpm: + jam 0,mem_lpm_mode + branch module_hci_event_receive_valid_cmd + + +/*********************HCI EVENT*********************/ + +module_hci_event_receive_invalid_cmd: + arg 1,temp + arg 0,rega + branch module_hci_event_set_cmd + + +module_hci_event_receive_valid_cmd: + arg 0,temp + arg 0,rega + branch module_hci_event_set_cmd + + +//event opcode 0x00 +module_hci_event_spp_connect: + jam HCI_EVENT_SPP_CONN_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x02 +module_hci_event_le_connect: + jam HCI_EVENT_LE_CONN_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x03 +module_hci_event_spp_disconnect: + jam HCI_EVENT_SPP_DIS_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x05 +module_hci_event_le_disconnect: + jam HCI_EVENT_LE_DIS_REP,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x06 +//input: +// temp: success 0; fail 1 +// rega:Response Content length +// regb:Response Content address +module_hci_event_set_cmd: + fetch 1,mem_module_uart_opcode + copy pdata,regc + jam HCI_EVENT_CMD_RES,mem_module_uart_opcode + setarg 2 + iadd rega,pdata + call module_hci_prepare_tx + copy regc,pdata + istore 1,contwu + istoret 1,contwu + copy rega,loopcnt + copy regb,contr + call uart_copy_tx_bytes + branch uartd_send + + +//event opcode 0x07 +module_hci_event_receive_spp_data: +// call p_nl_clear_last_transmite_clock + call module_spp_clear_last_transmite_clock + jam HCI_EVENT_SPP_DATA_REP,mem_module_uart_opcode + fetch 1,mem_current_length + rtn blank + call module_hci_prepare_tx + fetch 1,mem_current_length + copy pdata,loopcnt + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + call uart_copy_tx_bytes_fast + branch uartd_send + + +//event opcode 0x08 +module_hci_event_receive_le_data: + jam HCI_EVENT_LE_DATA_REP,mem_module_uart_opcode + fetch 1,mem_module_le_rx_data_len + icopy loopcnt + increase 2,pdata + call module_hci_prepare_tx + fetch 2,mem_module_le_rx_data_handle // Attribute handle + istore 2,contwu + fetch 2,mem_module_le_rx_data_address + icopy contr + call uart_copy_tx_bytes_fast + branch uartd_send + + +//event opcode 0x09 +module_hci_event_enter_standby_mode: + jam HCI_EVENT_STANDBY_REP,mem_module_uart_opcode +module_hci_event_enter_standby_mode_len0: + setarg 0 + call module_hci_prepare_tx + branch uartd_send + + +//event opcode 0x0a +module_hci_event_status_res: + jam HCI_EVENT_STATUS_RES,mem_module_uart_opcode + setarg 1 + call module_hci_prepare_tx + + call module_hci_read_bt_status + + fetch 2,mem_ui_state_map + arg UI_STATE_BT_HID_CONN,queue + qisolate1 pdata + setflag true,3,temp + + arg UI_STATE_BLE_CONNECTED,queue + qisolate1 pdata + setflag true,5,temp + + fetch 1,mem_ui_state_map + arg UI_STATE_BT_SPP_CONN,queue + qisolate1 pdata + setflag true,4,temp + + istoret 1,contwu + branch uartd_send + +// temp: bit0 3.0 inquiry;bit1 3.0 scan;bit2 ble adv; + +module_hci_read_bt_status: + arg 0,temp + fetch 1,mem_scan_mode + arg inq_scan_mode,queue + qisolate1 pdata + setflag true,0,temp + arg page_scan_mode,queue + qisolate1 pdata + setflag true,1,temp + + fetch 1,mem_le_adv_enable + arg 0,queue + qisolate1 pdata + setflag true,2,temp + rtn + + +//event opcode 0x0d +module_hci_event_store_device: + jam HCI_EVENT_NVRAM_REP,mem_module_uart_opcode + fetch 1,mem_nv_data_number + mul32 pdata,34,pdata + icopy loopcnt + call module_hci_prepare_tx + fetch 2,mem_nv_data_ptr + icopy contr + call uart_copy_tx_bytes_fast + branch uartd_send + + +//event opcode 0x0e +module_hci_event_gkey_generate: + jam HCI_EVENT_GKEY,mem_module_uart_opcode + setarg 4 + call module_hci_prepare_tx + fetch 4,mem_gkey + istore 4,contwu + branch uartd_send + + +//event opcode 0x0f +module_hci_event_invalid_packet: + jam HCI_EVENT_INVALID_PACKET,mem_module_uart_opcode + hfetch 2,core_uart_rxitems + arg 0xff,temp + call not_greater_than + copy pdata,loopcnt + call module_hci_prepare_tx + call uartd_prepare_rx + call uart_copy_rx2tx + branch uartd_send + + +//event opcode 0x10 +module_hci_event_passkey_entry_mode: + jam HCI_EVENT_GET_PASSKEY,mem_module_uart_opcode + branch module_hci_event_enter_standby_mode_len0 + + +//event opcode 0x11 +module_hci_event_le_tk: + jam HCI_EVENT_LE_TK,mem_module_uart_opcode + setarg 4 + call module_hci_prepare_tx + fetch 4,mem_le_tk + istore 4,contwu + branch uartd_send + + +//event opcode 0x14 +module_hci_event_le_pairing_fail: + arg FLAG_BLE_PAIRING_FAIL,rega + branch module_hci_event_pairing_completed + +module_hci_event_le_pairing_success: + arg FLAG_BLE_PAIRING_SUCCESS,rega + branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_fail: + arg FLAG_BT_PAIRING_FAIL,rega + branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_success: + arg FLAG_BT_PAIRING_SUCCESS,rega + +module_hci_event_pairing_completed: + jam 0,mem_flag_mode_ssp_pin + jam HCI_EVENT_LE_PAIRING_STATE,mem_module_uart_opcode + setarg 2 + call module_hci_prepare_tx + copy rega,pdata + istore 2,contwu + branch uartd_send + + +//event opcode 0x15 +module_hci_event_pause_enc: + arg FLAG_EVENT_PAUSE_ENC,regc + branch module_hci_event_enc + +module_hci_event_start_enc: + arg FLAG_EVENT_START_ENC,regc + +module_hci_event_enc: + jam HCI_EVENT_LE_ENCRYPTION_STATE,mem_module_uart_opcode + setarg 1 + call module_hci_prepare_tx + copy regc,pdata + istore 1,contwu + branch uartd_send + + +//event opcode 0x1d +module_hci_event_le_gkey: + jam HCI_EVENT_LE_GKEY,mem_module_uart_opcode + setarg 4 + call module_hci_prepare_tx + fetch 4,mem_gkey + istore 4,contwu + branch uartd_send + + +//****************************************************************// + //module_hci_prepare_tx + //function:write hci packet header + //input: pdata-----packet length (1byte) + //input: mem_uart_opcode------opcode (1byte) + //output:contwu --- pointer to packet payload + //use reg: contwu,pdata +//****************************************************************// +module_hci_prepare_tx: + jam 0x02,mem_module_uart_cmd + store 1,mem_module_uart_len + storet 8,mem_temp + bpatch patch1c_2,mem_patch1c + call module_set_mcu_wake_pin_high_delay + fetcht 8,mem_temp + call uartd_prepare_tx + fetch 3,mem_module_uart_cmd + istore 3,contwu + rtn + + +module_set_mcu_wake_pin_high_delay: + call module_check_mcu_wake_pin_high + rtn true +module_set_mcu_wake_pin_h_delay: + call module_set_mcu_wake_pin_high + fetch 4,mem_module_mcu_wake_delay_us + rshift2 pdata,pdata + rtn blank + branch delay + +module_set_mcu_wake_pin_high: + //call ice_break + fetcht 1,mem_module_mcu_wake_pin + branch gpio_out_active + +module_check_mcu_wake_pin_high: + fetcht 1,mem_module_mcu_wake_pin + branch gpio_check_active + +module_set_mcu_wake_pin_low: + fetcht 1,mem_module_mcu_wake_pin + branch gpio_out_inactive + + +delay: + increase -1,pdata + nop 38 + nbranch delay,blank + rtn + +/*********************hci command end*********************/ + +/*********************hci ble receive data start*********************/ + +//rega is le rx data address +//regb is le rx data length +//mem_le_att_handle is write handle +module_le_receive_data: + call module_check_ble_encrypt_state + rtn user + copy rega,pdata + store 2,mem_module_le_rx_data_address + copy regb,pdata + store 1,mem_module_le_rx_data_len + fetch 2,mem_le_att_handle + fetcht 2,mem_module_data_write_handle + isub temp,null + branch module_le_receive_data_ok,zero + fetcht 2,mem_module_data_write_handle2 + isub temp,null + nrtn zero +module_le_receive_data_ok: + store 2,mem_module_le_rx_data_handle + branch module_hci_event_receive_le_data + + +/*********************hci ble receive data end*********************/ + +module_exit_sniff: + fetch 1,mem_module_flag + rtnbit1 MOUDLE_TASK_UNSNIFF + call module_set_unsniff_task_flag + branch app_bt_sniff_exit + + +module_set_lpm_mult_2: + jam 2,mem_lpm_mult + rtn + + + +module_bb_event_timer: + branch module_read_vdd_timer + +module_read_vdd_timer: + fetch 1,mem_module_read_vdd_flag + rtn blank + fetch 1,mem_module_read_vdd_count + rtn blank + increase -1,pdata + store 1,mem_module_read_vdd_count + nrtn blank + jam FLAG_MODULE_READ_VDD_COUNT,mem_module_read_vdd_count + call adc_set_mode + call vdd_calculate_by_mode + div pdata,0x64 + call wait_div_end + quotient pdata + remainder temp + store 1,mem_module_vdd_quotient + storet 1,mem_module_vdd_remainder + rtn + + +module_control_air_flow: + call check_uart_tx_buff + branch app_l2cap_flow_control_enable,positive + branch app_l2cap_flow_control_disable + + +/**************module state *******************/ +module_set_sniff_task_flag: + arg MOUDLE_TASK_SNIFF,queue + branch module_set_state + +module_clear_sniff_task_flag: + arg MOUDLE_TASK_SNIFF,queue + branch module_clr_state + +module_set_unsniff_task_flag: + arg MOUDLE_TASK_UNSNIFF,queue + branch module_set_state + +module_clear_unsniff_task_flag: + arg MOUDLE_TASK_UNSNIFF,queue + branch module_clr_state + +module_set_le_tx_data_flag: + arg MODULE_FLAG_BLE_DATA_FINISH,queue + branch module_set_state + +module_clear_le_tx_data_flag: + arg MODULE_FLAG_BLE_DATA_FINISH,queue + branch module_clr_state + +module_clr_state: + fetch 1,mem_module_flag + qset0 pdata + store 1,mem_module_flag + rtn + +module_set_state: + fetch 1,mem_module_flag + qset1 pdata + store 1,mem_module_flag + rtn + +/**************module state end*******************/ + + +else + +endif Index: 1066_OTP_FLASH/program/app_mouse.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_mouse.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_mouse.prog (working copy) @@ -0,0 +1,2657 @@ + + +//define FPGA_DEBUG + + +ifdef COMPILE_MOUSE +mouse_init: + call mouse_setting_config + call spi_ncs_enable + call mouse_init_sunt + call mouse_dpi_config + call spi_ncs_disable + rtn wake + call mouse_cheak_enable_usb + call mouse_cb_fuction +// fetch 1,mem_wakup_from_power_flag +// isolate0 gpio_latch,pdata + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit1 MOUSE_ENABLE_USB + call mouse_wakeup_from_power//,true // enter +ifdef FPGA_DEBUG + arg MOUSE_FPGA_DEBUG_GPIO,temp + call gpio_config_output + arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp + call gpio_config_output + arg MOUSE_FPGA_DEBUG_GPIO,temp + call gpio_out_active +endif + rtnmark1 mark_24g + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery + branch mouse_check_reconn_target + + +mouse_delay_4s: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_INIT_DELAY + arg 20,loopcnt +mouse_delay_20ms: + setarg 200000 + call sleep + loop delay_10ms + rtn + + +mouse_cheak_enable_usb: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_USB + branch usb_init + + +mouse_cb_fuction: + setarg mouse_le + store 2,mem_cb_le_process + setarg mouse_send_process + store 2,mem_cb_bt_process + setarg mouse_process_lpm_before + store 2,mem_cb_before_lpm + setarg mouse_priority_bb_event + store 2,mem_cb_bb_event_process + setarg mouse_idle + store 2,mem_cb_idle_process + setarg mouse_before_hibernate + store 2,mem_cb_before_hibernate + setarg le_mouse_bb_event_connect_complete + store 2,mem_cb_att_write + + call g24_head_ptr2regc + setarg mouse_g24_package_data + add regc,offset_24g_cb_data,contw + istore 2,contw + setarg mouse_g24_enter_lpm + add regc,offset_24g_cb_lpm_prepare,contw + istore 2,contw + setarg mouse_lpm_before_common + add regc,offset_24g_cb_lpm_before,contw + istore 2,contw + + setarg mouse_bb_event_timer + store 2,mem_cb_event_timer + setarg mouse_spi_write_flash_cb + store 2,mem_cb_spi_flash_write_complate + rtn +mouse_spi_write_flash_cb: +mouse_spi_init: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit0 MOUSE_ENABLE_SPI2,spid_init + branch spid_init2 + +mouse_setting_config: + rtn wake + call g24_set_device_addr + call mouse_gpio_init + call mouse_param_init + call mouse_adc_init + call le_set_config_fixed_ltk + call le_set_justwork + call le_set_fixed_ltk + call le_set_config_read_authentication + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_EEPROM,mouse_init_iic + bbit1 MOUSE_ENABLE_FLASH,mouse_load_flash_info_cheak + rtn + +mouse_init_iic: + call iic_init_390k + fetch MOUSE_FLAG_LEN,mem_mouse_flag + isolate1 MOUSE_ENABLE_2K_EEPROM,pdata + ncall clear_eeprom_size_2k,true + call mouse_load_eeprom_dpi + call mouse_init_environment + call mouse_set_24g_addr_eeprom + branch iicd_read_eep_data + +mouse_wakeup_from_power: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,mouse_wakeup_no_from_power + fetch 1,mem_wakup_from_power_flag + isolate0 gpio_latch,pdata + nrtn true +mouse_wakeup_no_from_power: + fetch 1,mem_reconn_times_init + store 1,mem_reconn_times + fetch 1,mem_config_function_enable + rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH +mouse_start_24g_mode: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_24G + bbit1 MOUSE_ENABLE_AUTO_24G_PARING,g24_auto_pair_start + branch g24_check_51cmd_start_24g +le_mouse_bb_event_connect_complete: + fetch 1,mem_le_att_handle + sub pdata,26,pdata + nrtn zero + jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp + call ui_ipc_send_cmd + arg WRITE_REQ_ENABLE_FLAG,queue + branch mouse_le_enable_connect_flag + +mouse_dpi_up: + fetch 1,mem_mouse_dpi_button_state + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_mouse_dpi_button_state + rtn +mouse_dpi_config: + fetch 1,mem_config_sensor_motion + and pdata,0x0f,pdata + store 1,mem_mouse_dpi + branch mouse_seting_dpi+2 + + +mouse_dpi_cheak: + fetcht 1,mem_dpi_button_gpio + call gpio_get_bit + nbranch mouse_dpi_up,true +mouse_dpi_down: + fetch 1,mem_mouse_dpi_button_state + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state + fetch 1,mem_mouse_dpi + increase 1,pdata + and pdata,0x03,pdata + store 1,mem_mouse_dpi + call mouse_seting_dpi + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eerpom_dpi + bbit1 MOUSE_ENABLE_FLASH,mouse_before_store_flash_cpi + rtn +mouse_before_store_flash_cpi: + arg MOUSE_SPI2_CLK_GPIO,temp + call gpio_config_output //hold high + arg MOUSE_SPI2_SDIO_GPIO,temp + call gpio_config_output //hold high + branch mouse_store_flash_device_info + +mouse_seting_dpi: + bpatch patch1c_3,mem_patch1c + call mosue_dpi_led_blink_init + fetch 1,mem_config_sensor_type + beq P3610,mouse_seting_3610_dpi + beq P3212,mouse_seting_3212_dpi + fetch 1,mem_mouse_dpi + beq MOUSE_DPI_LEVEL1,mouse_set_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_cpi3 + beq MOUSE_DPI_LEVEL4,mouse_set_cpi4 +mouse_set_cpi2: + fetch 1,mem_320x_dpi_2 + branch mouse_p3205_dpi +mouse_set_cpi1: + fetch 1,mem_320x_dpi_1 + branch mouse_p3205_dpi +mouse_set_cpi3: + fetch 1,mem_320x_dpi_3 + branch mouse_p3205_dpi +mouse_set_cpi4: + fetch 1,mem_320x_dpi_4 + branch mouse_p3205_dpi +moue_seting_cpi_count: + fetch 1,mem_config_sensor_type + rtneq P3065_XY + fetch 1 ,mem_mouse_cpi_count + increase 1,pdata + store 1,mem_mouse_cpi_count + rtn + +mouse_seting_3212_dpi: + fetch 1,mem_mouse_dpi + beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3 + beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4 +mouse_set_p3212_cpi2: + fetch 1,mem_3212_dpi_2 + branch mouse_p3212_dpi +mouse_set_p3212_cpi1: + fetch 1,mem_3212_dpi_1 + branch mouse_p3212_dpi +mouse_set_p3212_cpi3: + fetch 1,mem_3212_dpi_3 + branch mouse_p3212_dpi +mouse_set_p3212_cpi4: + fetch 1,mem_3212_dpi_4 +mouse_p3212_dpi: + store 1,mem_mouse_cpi_count + lshift8 pdata,pdata + copy pdata,rega + add pdata,MOUSE_P3212_DPI_XADDRESS,pdata + call twspi_write + copy rega,pdata + add pdata,MOUSE_P3212_DPI_YADDRESS,pdata + branch twspi_write + +mouse_seting_3610_dpi: + fetch 1,mem_mouse_dpi + beq MOUSE_DPI_LEVEL1,mouse_set_p3610_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_p3610_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_p3610_cpi3 + beq MOUSE_DPI_LEVEL4,mouse_set_p3610_cpi4 +mouse_set_p3610_cpi2: + fetch 1,mem_3610_dpi_2 + branch mouse_p3610_dpi +mouse_set_p3610_cpi1: + fetch 1,mem_3610_dpi_1 + branch mouse_p3610_dpi +mouse_set_p3610_cpi3: + fetch 1,mem_3610_dpi_3 + branch mouse_p3610_dpi +mouse_set_p3610_cpi4: + fetch 1,mem_3610_dpi_4 +mouse_p3610_dpi: + store 1,mem_mouse_cpi_count + call mouse_spi_sdio_gpio_pollup + fetch 1,mem_mouse_cpi_count +mouse_reset_p3610_dpi: + add pdata,0x80,pdata + lshift8 pdata,pdata + add pdata,MOUSE_P3610_DPI_ADDRESS,pdata + copy pdata,rega + branch mouse_set_sensor_reg + +mouse_p3205_dpi: + store 1,mem_mouse_cpi_count + call moue_seting_cpi_count + fetch 1,mem_mouse_cpi_count + setarg MOUSE_DPI_ADDRESS + call twspi_read + and pdata,0xf8,temp + fetch 1,mem_mouse_cpi_count + iadd temp,pdata + lshift8 pdata,pdata + add pdata,MOUSE_DPI_ADDRESS,pdata + branch twspi_write + + +mouse_init_environment: + call app_initflag_check + branch mouse_eeprom_load_recon_info,zero + call mouse_ble_init_address + call mouse_store_eeprom_device_info + branch app_initflag_store + + +mouse_24g_pairing_button: + fetch 2,mem_24g_pairing_timer_count + rtn blank + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_24G + rtnbit1 MOSUE_24G_PAIRING_FLAG + rtnmark1 mark_24g + call mouse_check_key_gpio + rtnne MOUSE_LMR_BUTTON + call mouse_devce_led_off + arg MOSUE_24G_PAIRING_FLAG,queue + call mouse_enable_function_flag + setarg 0 + store 2,mem_mouse_direct_timer + store 1,mem_mouse_send_blank_timer + call g24_set0_mem_check_dongle_times + + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + call mouse_stop_discovery + branch g24_start_pairing_sm1 + +ifdef FPGA_DEBUG +mouse_fpga_rf_working_normal: + fetch 1,mem_le_req_rcv + and pdata,0xfe,pdata + call mouse_fpga_working_fail,blank + fetch 1,mem_le_req_rcv + and pdata,0xfe,pdata + ncall mouse_fpga_working_normal,blank +// fetch 1,mem_inquiryscan_rcvcnt +// and pdata,0xfe,pdata +// call mouse_fpga_working_fail,blank +// fetch 1,mem_inquiryscan_rcvcnt +// and pdata,0xfe,pdata +// ncall mouse_fpga_working_normal,blank + rtn + +mouse_fpga_working_fail: + arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp + branch gpio_out_inactive + +mouse_fpga_working_normal: + arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp + branch gpio_out_active + + + +endif + +mouse_idle: +ifdef FPGA_DEBUG + call mouse_fpga_rf_working_normal +endif + call mouse_24g_pairing_button + call ui_check_paring_button + call mouse_dpi_cheak + call mouse_usb_isr + call mouse_wheel_check + branch mouse_usb_mode +mouse_usb_isr: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_USB + call usb_isr + branch usb_offline_state + +mouse_cheak_usb: + hfetch 1,core_usb_addr + bbit0 7,mouse_usb_no_exsit + bbit1 7,mouse_usb_exsit + rtn +mouse_usb_no_exsit: + fetch 1,mem_usb_addr + rtnbit0 7 + branch soft_reset_chip +mouse_usb_exsit: + fetch 1,mem_usb_addr + rtnbit1 7 + branch mouse_stop_bluetooth_mode + +mouse_usb_mode: + call mouse_cheak_usb + hfetch 1,core_usb_addr + store 1,mem_usb_addr + rtnbit0 7 + call mouse_clkn_check + fetch 4,mem_btclk_sensor + fetcht 1,mem_wire_usb_interval + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + store 4,mem_btclk_sensor + call mouse_motion + nrtn user + jam 4,mem_usb_tx_enable + branch mouse_wired_to_usb + +mouse_clkn_check: + fetcht 4,mem_btclk_sensor + copy clkn_bt,pdata + isub temp,null + ncall mouse_clkn_timeout,positive + rtn +mouse_clkn_timeout: + setarg 0 + store 4,mem_btclk_sensor + rtn + + + +mouse_wired_to_usb: + fetch 1,mem_usb_tx_enable + rtnbit0 2 + branch mouse_data_push +mouse_data_push: + hfetch 1,core_usb_addr + rtnbit0 7 + jam USB_EP2_MS,mem_usb_ep2_data + setarg MS_REPORT_ID + store 1,mem_usb_mouse_data + fetch 7,mem_mouse_key + istore 7,contw + rtn + + +mouse_enable_clock_qdecoder: + hfetch 2,core_clkoff + set0 CLOCK_OFF_QDECODER,pdata + hstore 2,core_clkoff + rtn + +mouse_param_init: + setarg 0x8c00 //bt sdp start address + store 2,mem_ui_uuid_table + setarg 0x8e7a //ble attlist start address + store 2,mem_ui_le_uuid_table + setarg 0x2402 + store 2,mem_fcomp_mul + setarg 0x2580 + store 3,mem_class + jam 3,mem_lpm_mult_timeout + jam 8,mem_lpm_overhead + jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue + setarg 0x0200 + store 2,mem_lpm_interval + jam 0x17,mem_le_local_mtu + jam 0x17,mem_le_remote_mtu +//===========init spi param============================== + setarg 0x0a77 + store 2,mem_spi_init_clk +//===========default bt reconnect address=================== +// jam 1,mem_device_flag +// setarg 0x332211 +// store 3,mem_device1_addr +// store 3,mem_device2_addr +// store 3,mem_device3_addr +// setarg 0x665544 +// store 3,mem_device1_addr+3 +// store 3,mem_device2_addr+3 +// store 3,mem_device3_addr+3 +// setarg 0x34 +// store 1,mem_device1_type +// store 1,mem_device2_type +// store 1,mem_device3_type +//===========all 16bit uuid================================== + setsect 0,0x306 + setsect 1,0x4440 + setsect 2,0x10000 + setsect 3,0x4408 + store 9,mem_all_uuid_16bits + setsect 0,0x1224 + setsect 1,0x4000 + setsect 2,0x0 + istore 5,contw +//===========features===================================== + setsect 0,0x3ffff + setsect 1,0x2fe23 + setsect 2,0x199d9 + setsect 3,0x20d + store 8,mem_features +//====================================================== + setarg 0x012c //24g ban pairing timer init + store 2,mem_24g_pairing_timer_count + call le_modified_name + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR + call mouse_sensor_set_angle + branch mouse_select_adc + +mouse_sensor_set_angle: + fetcht 1,mem_select_sensor_angle_gpio + call gpio_config_input + fetcht 1,mem_select_sensor_angle_gpio + call gpio_get_bit + jam MOUSE_3CLK_ANGLE,mem_config_sensor_angle + rtn true + jam MOUSE_12CLK_ANGLE,mem_config_sensor_angle + rtn + +mouse_select_adc: + fetcht 1,mem_select_adc_gpio + call gpio_config_input + fetcht 1,mem_select_adc_gpio + call gpio_get_bit + jam ADC_CONFIG_VINLPM,mem_adc_config_flag + rtn true + jam ADC_CONFIG_GPIO,mem_adc_config_flag + rtn + + +mouse_adc_init: + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,mouse_adc_init_data_vinlpm + beq ADC_CONFIG_HVIN,mouse_adc_init_data_hvin + beq ADC_CONFIG_GPIO,mouse_adc_init_data_io + branch mouse_adc_init_data_vinlpm + +mouse_adc_init_data_vinlpm: + fetcht 2,mem_2v_adc_vinlpm_data + fetch 2,mem_3v_adc_vinlpm_data + isub temp,pdata + mul32 pdata,20,pdata + div pdata,100 + call wait_div_end + quotient pdata + store 2,mem_adc_reference_voltage //vinlpm :2v2 low alter + rtn +mouse_adc_init_data_hvin: + fetcht 2,mem_1v_adc_hvin_data + fetch 2,mem_5v_adc_hvin_data + isub temp,pdata + mul32 pdata,230,pdata + div pdata,400 + call wait_div_end + quotient pdata + store 2,mem_adc_reference_voltage //hvin :3v3 low alter + rtn +mouse_adc_init_data_io: + fetch 2,mem_1v_adc_io_data + store 2,mem_adc_reference_voltage //vio :1v low alter + rtn +mouse_gpio_init: + fetcht 1,mem_eeprom_wp_gpio + call gpio_config_output + call usb_offline_check_init + fetcht 1,mem_lbutton_gpio + call gpio_config_input + fetcht 1,mem_rbutton_gpio + call gpio_config_input + fetcht 1,mem_mbutton_gpio + call gpio_config_input + fetcht 1,mem_sensor_data_gpio + call gpio_config_input + + fetcht 1,mem_sensor_reset_gpio + call gpio_config_output + + fetcht 1,mem_whee_a_data_gpio + call gpio_config_input + + fetcht 1,mem_whee_b_data_gpio + call gpio_config_input + + fetcht 1,mem_whee_ta_data_gpio + call gpio_config_input + fetcht 1,mem_whee_tb_data_gpio + call gpio_config_input + + fetcht 1,mem_bk_button_gpio + call gpio_config_input + fetcht 1,mem_fw_button_gpio + call gpio_config_input + + fetcht 1,mem_config_low_voltage_alarm_gpio + call gpio_config_output + + fetcht 1,mem_config_device1_led_gpio + call gpio_config_output + + fetcht 1,mem_config_device2_led_gpio + call gpio_config_output + + fetcht 1,mem_config_device3_led_gpio + call gpio_config_output + + fetcht 1,mem_dpi_led_gpio + call gpio_config_output + + fetcht 1,mem_config_select_device_button_gpio + call gpio_config_input + + fetcht 1,mem_config_bt_button_gpio + call gpio_config_input + + fetcht 1,mem_dpi_button_gpio + branch gpio_config_input + +mouse_wheel_gpio_set_wake: + fetcht 1,mem_whee_a_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_b_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_ta_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_tb_data_gpio + branch gpio_set_wake_by_current_state + +mouse_before_hibernate_wheel_gpio_set: + fetcht 1,mem_whee_a_data_gpio + call mouse_gpio_set_pupd_by_input + fetcht 1,mem_whee_b_data_gpio + call mouse_gpio_set_pupd_by_input + fetcht 1,mem_whee_ta_data_gpio + call mouse_gpio_set_pupd_by_input + fetcht 1,mem_whee_tb_data_gpio + branch mouse_gpio_set_pupd_by_input + +mouse_gpio_set_pupd_by_input: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + and temp,0x7f,queue + hfetch 4,core_gpio_in + qisolate1 pdata + hfetch 4,core_gpio_pu0 + qsetflag true,pdata + hstore 4,core_gpio_pu0 + hfetch 4,core_gpio_pd0 + nqsetflag true,pdata + hstore 4,core_gpio_pd0 + rtn + +mouse_before_hibernate: + enable user + hfetch 4,0x8138 + setflag user,26,pdata + hstore 4,core_lpm_reg + call lpm_write_ctrl + call mouse_devce_led_off + call mouse_before_hibernate_wheel_gpio_set +// call gpio_set_before_lpm_common + branch mouse_lpm_before_common + + + +mouse_process_lpm_before: + call mouse_lpm_before_common + fetch 1,mem_lpm_current_mult + nrtn blank // 7.5ms, no gpio wakeup + branch gpio_clr_wake + +mouse_lpm_before_common: + call mouse_wheel_check + arg MOUSE_SPI1_CLK_GPIO,temp // set sclk high + fetch MOUSE_FLAG_LEN,mem_mouse_flag + isolate1 MOUSE_ENABLE_SPI2,pdata + call mouse_spi_clk_gpio,true + call gpio_config_output + call twspi_disable + + + + fetcht 1,mem_lbutton_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_rbutton_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_mbutton_gpio + call gpio_set_wake_by_current_state + + fetcht 1,mem_bk_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_fw_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_dpi_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_config_select_device_button_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_a_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_b_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_ta_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_whee_tb_data_gpio + call gpio_set_wake_by_current_state + fetcht 1,mem_sensor_data_gpio + branch gpio_set_wake + + + +mouse_spi_clk_gpio: + arg MOUSE_SPI2_CLK_GPIO,temp + rtn + +mouse_wheel_check: + bpatch patch1c_4,mem_patch1c + call mouse_t_wheel_scan + call mouse_wheel_scan + fetch 1,mem_wheel_tb_new_pinlevel + fetcht 1,mem_wheel_tb_old_pinlevel + store 1,mem_wheel_tb_old_pinlevel + isub temp,null + nbranch app_lpm_wake_auto_lock,zero + fetch 1,mem_mwheel_b_new_pinlevel + fetcht 1,mem_mwheel_b_old_pinlevel + store 1,mem_mwheel_b_old_pinlevel + isub temp,null + nbranch app_lpm_wake_auto_lock,zero + rtn +mouse_t_wheel_scan: + fetch 1,mem_whee_ta_data_gpio + rtneq GPIO_DISABLE + arg 0,rega + fetcht 1,mem_whee_ta_data_gpio + call gpio_get_bit + setflag true,0,rega + fetcht 1,mem_whee_tb_data_gpio + call gpio_get_bit + setflag true,1,rega + copy rega,pdata + store 1,mem_wheel_tb_new_pinlevel + beq 0x01,mouse_t_wheel_scan_judge1 + beq 0x02,mouse_t_wheel_scan_judge2 + fetch 1,mem_wheel_tog + bbit1 7,mouse_t_wheel_scan_judge3 + rtn + +mouse_t_wheel_scan_judge1: + fetch 1,mem_wheel_tb_old_pinlevel + beq 0,mouse_t_wheel_scan_judge11 + beq 3,mouse_t_wheel_scan_judge12 + rtn +mouse_t_wheel_scan_judge2: + fetch 1,mem_wheel_tb_old_pinlevel + beq 0,mouse_t_wheel_scan_judge21 + beq 3,mouse_t_wheel_scan_judge22 + rtn +mouse_t_wheel_scan_judge11: + jam 0x82,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge12: + jam 0x81,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge21: + jam 0x80,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge22: + jam 0x83,mem_wheel_tog + rtn +mouse_t_wheel_scan_judge3: + fetch 1,mem_wheel_tog + set0 7,pdata + store 1,mem_wheel_tog + beq 0,mouse_t_wheel_scan_judge30 + beq 1,mouse_t_wheel_scan_judge31 + beq 2,mouse_t_wheel_scan_judge32 + beq 3,mouse_t_wheel_scan_judge33 + rtn +mouse_t_wheel_scan_judge30: + fetch 1,mem_wheel_tb_new_pinlevel + beq 3,mouse_wheel_t_forward + rtn +mouse_t_wheel_scan_judge31: + fetch 1,mem_wheel_tb_new_pinlevel + beq 0,mouse_wheel_t_forward + rtn +mouse_t_wheel_scan_judge32: + fetch 1,mem_wheel_tb_new_pinlevel + beq 3,mouse_wheel_t_back + rtn +mouse_t_wheel_scan_judge33: + fetch 1,mem_wheel_tb_new_pinlevel + beq 0,mouse_wheel_t_back + rtn +mouse_wheel_t_forward: + fetch 1,mem_mouse_tz_data_count1 + increase 1,pdata + store 1,mem_mouse_tz_data_count1 + sub pdata,1,null + rtn positive + jam 0,mem_mouse_tz_data_count1 + fetch 1,mem_mouse_tz_data + increase 1,pdata + store 1,mem_mouse_tz_data + rtn +mouse_wheel_t_back: + fetch 1,mem_mouse_tz_data_count + increase 1,pdata + store 1,mem_mouse_tz_data_count + sub pdata,1,null + rtn positive + jam 0,mem_mouse_tz_data_count + fetch 1,mem_mouse_tz_data + increase -1,pdata + store 1,mem_mouse_tz_data + rtn + + +mouse_wheel_scan: + fetch 1,mem_whee_a_data_gpio + rtneq GPIO_DISABLE + arg 0,rega + fetcht 1,mem_whee_a_data_gpio + call gpio_get_bit + setflag true,0,rega + fetcht 1,mem_whee_b_data_gpio + call gpio_get_bit + setflag true,1,rega + copy rega,pdata + store 1,mem_mwheel_b_new_pinlevel + beq 0x01,mouse_wheel_scan_judge1 + beq 0x02,mouse_wheel_scan_judge2 + fetch 1,mem_mwheel_tog + bbit1 7,mouse_wheel_scan_judge3 + rtn + +mouse_wheel_scan_judge1: + fetch 1,mem_mwheel_b_old_pinlevel + beq 0,mouse_wheel_scan_judge11 + beq 3,mouse_wheel_scan_judge12 + rtn +mouse_wheel_scan_judge2: + fetch 1,mem_mwheel_b_old_pinlevel + beq 0,mouse_wheel_scan_judge21 + beq 3,mouse_wheel_scan_judge22 + rtn +mouse_wheel_scan_judge11: + jam 0x82,mem_mwheel_tog + rtn +mouse_wheel_scan_judge12: + jam 0x81,mem_mwheel_tog + rtn +mouse_wheel_scan_judge21: + jam 0x80,mem_mwheel_tog + rtn +mouse_wheel_scan_judge22: + jam 0x83,mem_mwheel_tog + rtn +mouse_wheel_scan_judge3: + fetch 1,mem_mwheel_tog + set0 7,pdata + store 1,mem_mwheel_tog + beq 0,mouse_wheel_scan_judge30 + beq 1,mouse_wheel_scan_judge31 + beq 2,mouse_wheel_scan_judge32 + beq 3,mouse_wheel_scan_judge33 + rtn +mouse_wheel_scan_judge30: + fetch 1,mem_mwheel_b_new_pinlevel + beq 3,mouse_wheel_forward + rtn +mouse_wheel_scan_judge31: + fetch 1,mem_mwheel_b_new_pinlevel + beq 0,mouse_wheel_forward + rtn +mouse_wheel_scan_judge32: + fetch 1,mem_mwheel_b_new_pinlevel + beq 3,mouse_wheel_back + rtn +mouse_wheel_scan_judge33: + fetch 1,mem_mwheel_b_new_pinlevel + beq 0,mouse_wheel_back + rtn +mouse_wheel_forward: + jam 0,mem_mouse_z_data_count1 + fetch 1,mem_mouse_z_data + increase 1,pdata + store 1,mem_mouse_z_data + rtn +mouse_wheel_back: + jam 0,mem_mouse_z_data_count + fetch 1,mem_mouse_z_data + increase -1,pdata + store 1,mem_mouse_z_data + rtn + + +mouse_hid_connected: + setarg HID_HANDSHAKE_TIMEOUT + store 1,mem_hid_handshake_timer_count + rtn + +mouse_send_process: + fetch 1,mem_app_handshake_flag + rtn blank + call l2cap_malloc_is_fifo_nearly_full + nrtn blank + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOSUE_24G_PAIRING_FLAG,mouse_send_empty_data + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_send_empty_data + bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data + call mouse_motion + nrtn user +mouse_send_data: + arg 9,rega + call hid_malloc_tx_buff + fetch 2,mem_hid_int_remote_cid + istore 2,contw + setarg 0x02a1 + istore 2,contw + fetch 7,mem_mouse_key + istore 7,contw + rtn + + +mouse_send_empty_data: + setarg 0 + store 7,mem_mouse_key + branch mouse_send_data + + +mouse_no_data_timer_init: + fetch 2,mem_mouse_no_data_timeout + store 2,mem_mouse_no_data_timer + rtn + + +mouse_fill_data_le: + bpatch patch1c_5,mem_patch1c + arg 7,rega //len + fetcht 2,mem_le_notify_handle + call le_att_malloc_tx_notify + fetch 7,mem_mouse_key + istore 7,contw + rtn + +mouse_motion: + bpatch patch1c_6,mem_patch1c + disable user + setarg 0 + store 6,mem_mouse_x + call mouse_cheak_sensor_data + call mouse_zwheel + call mouse_t_zwheel + call mouse_key + nrtn user + call mouse_no_data_timer_init + arg MOUSE_STATUE_UP_FLAG,queue + branch mouse_enable_function_flag + +motion_6clk_direction_dispose: + fetch 2,mem_mouse_x + sub pdata,0,pdata + store 2,mem_mouse_x + branch enable_user +motion_12clk_direction_dispose: + fetch 2,mem_mouse_y + sub pdata,0,pdata + store 2,mem_mouse_y + branch enable_user +motion_9clk_direction_dispose: + fetch 2,mem_mouse_y + sub pdata,0,pdata + store 2,mem_mouse_y + fetch 2,mem_mouse_x + sub pdata,0,pdata + store 2,mem_mouse_x + call mouse_sensor_data_swap_places + branch enable_user +motion_3clk_direction_dispose: + call mouse_sensor_data_swap_places + branch enable_user +mouse_cheak_sensor_data: + fetch 1,mem_spi_write_flash_sm + rtnne FLASH_SM_NO_BUYS + fetch 1,mem_config_sensor_type + beq P3205,mouse_p32xx_sensor_motion + beq P3065,mouse_p32xx_sensor_motion + beq KA8,mouse_p32xx_sensor_motion + beq P3204,mouse_p32xx_sensor_motion + beq P3212,mouse_p3212_sensor_motion + beq P3610,mouse_p3610_sensor_motion + beq P3065_xy,mouse_p32xx_sensor_motion + branch mouse_p32xx_sensor_motion + +mouse_clear_sensor_data: + fetch 1,mem_mouse_move_flag + call mouse_read_sensor_common,blank + jam 1,mem_mouse_move_flag + rtn + + +mouse_p3212_sensor_motion: + call mouse_clear_sensor_data + fetcht 1,mem_sensor_data_gpio + call gpio_get_bit + nrtn true + setarg PAN_REG_PID_L + call twspi_read + bne P32XX_ID1,mouse_twspi_reset + setarg PAN_REG_MOTION_STAUS + call twspi_read + rtnbit0 7 + call mouse_read_sensor_common + call mouse_read_3212sensor_xy_high + store 1,mem_mouse_xy_h + rshift4 pdata,pdata + call extsign_bit3 + store 1,mem_mouse_x+1 + fetch 1,mem_mouse_xy_h + and pdata,0x0f,pdata + call extsign_bit3 + store 1,mem_mouse_y+1 + fetch 1,mem_config_sensor_angle + beq MOUSE_6CLK_ANGLE,motion_6clk_direction_dispose + beq MOUSE_9CLK_ANGLE,motion_9clk_direction_dispose + beq MOUSE_12CLK_ANGLE,motion_12clk_direction_dispose + beq MOUSE_3CLK_ANGLE,motion_3clk_direction_dispose + rtn + +mouse_read_3212sensor_xy_high: + setarg 0x12 + branch twspi_read + +mouse_p3065_judge: + beq P3065_ID1,mouse_p32xx_sensor_motion_1 + branch mouse_twspi_reset + +mouse_p32xx_sensor_motion: + call mouse_clear_sensor_data + disable user + fetcht 1,mem_sensor_data_gpio + call gpio_get_bit + nrtn true + setarg PAN_REG_PID_L + call twspi_read + bne P32XX_ID1,mouse_p3065_judge +mouse_p32xx_sensor_motion_1: + setarg PAN_REG_MOTION_STAUS + call twspi_read + rtnbit0 7 + call mouse_read_sensor_common + fetch 1,mem_mouse_x + call extsign + store 2,mem_mouse_x + fetch 1,mem_mouse_y + call extsign + store 2,mem_mouse_y + fetch 1,mem_config_sensor_angle + beq MOUSE_6CLK_ANGLE,motion32xx_6clk_direction_selection + beq MOUSE_9CLK_ANGLE,motion32xx_9clk_direction_selection + beq MOUSE_12CLK_ANGLE,motion32xx_12clk_direction_selection + beq MOUSE_3CLK_ANGLE,motion32xx_3clk_direction_selection + rtn + +motion32xx_6clk_direction_selection: + call motion_6clk_direction_dispose + branch mouse_sensor_sdio_low +motion32xx_9clk_direction_selection: + call motion_9clk_direction_dispose + branch mouse_sensor_sdio_low +motion32xx_12clk_direction_selection: + call motion_12clk_direction_dispose + branch mouse_sensor_sdio_low +motion32xx_3clk_direction_selection: + call motion_3clk_direction_dispose + branch mouse_sensor_sdio_low + +mouse_sensor_data_swap_places: + fetch 2, mem_mouse_y + fetcht 2,mem_mouse_x + store 2,mem_mouse_x + storet 2,mem_mouse_y + rtn +//input regb output:pdata +mouse_p3610sensor_read: + call spi_ncs_enable + nop 100 + copy regb,pdata + call twspi_read + copy pdata,regb + call spi_ncs_disable + nop 100 + copy regb,pdata + rtn +mouse_p3610_sensor_motion: + disable user + fetcht 1,mem_sensor_data_gpio + call gpio_get_bit + nrtn true + arg PAN_REG_MOTION_STAUS,regb + call mouse_p3610sensor_read + rtnbit0 7 + arg PAN_REG_PID_L,regb + call mouse_p3610sensor_read + store 1,mem_sensor_id1 + bne P3610_ID1,mouse_init_3610sensor_reset + fetch 1,mem_mouse_move_flag + call mouse_read_sensor3610_data,blank + jam 1,mem_mouse_move_flag + call mouse_read_sensor3610_data + fetch 1,mem_mouse_xy_h + rshift4 pdata,pdata + call extsign_bit3 + store 1,mem_mouse_x+1 + fetch 1,mem_mouse_xy_h + and pdata,0x0f,pdata + call extsign_bit3 + store 1,mem_mouse_y+1 + fetch 1,mem_config_sensor_angle + beq 0,motion3610_6clk_direction_selection + beq 1,motion3610_9clk_direction_selection + beq 2,motion3610_12clk_direction_selection + beq 3,motion3610_3clk_direction_selection + rtn + +mouse_3610_smart_select: + fetch 1,mem_sensor_smart_flag + beq P3610_SMART_ENABLE,mouse_3610_smart_disable + beq P3610_SMART_DISABLE,mouse_3610_smart_enable + rtn + + +motion3610_6clk_direction_selection: + call motion_6clk_direction_dispose + branch mouse_3610_smart_select + +motion3610_12clk_direction_selection: + call motion_12clk_direction_dispose + branch mouse_3610_smart_select + +motion3610_9clk_direction_selection: + call motion_9clk_direction_dispose + branch mouse_3610_smart_select + +motion3610_3clk_direction_selection: + call motion_3clk_direction_dispose + branch mouse_3610_smart_select + +mouse_read_sensor3610_data: + call spi_ncs_enable + call mouse_read_sensor_common + arg 5,pdata + call twspi_read + store 1,mem_mouse_xy_h + arg 7,pdata + call twspi_read + store 1,mem_sensor_shutter_hi + arg 8,pdata + call twspi_read + store 1,mem_sensor_shutter_lo + branch spi_ncs_disable + + +mouse_3610_smart_enable: + fetch 1,mem_sensor_shutter_hi + rtnne 0 + fetch 1,mem_sensor_shutter_lo + sub pdata,45,null + rtn positive + jam P3610_SMART_ENABLE,mem_sensor_smart_flag + setarg 0xba41 + call sensor_write + setarg 0x0032 + call sensor_write + setarg 0xb541 + branch sensor_write +mouse_3610_smart_disable: + fetch 1,mem_sensor_shutter_hi + rtnne 0 + fetch 1,mem_sensor_shutter_lo + sub pdata,45,null + nrtn positive + jam P3610_SMART_DISABLE,mem_sensor_smart_flag + setarg 0xba41 + call sensor_write + setarg 0x8032 + call sensor_write + setarg 0xb541 + branch sensor_write + + + +mouse_read_sensor_common: + arg PAN_REG_DELTA_X,pdata + call twspi_read + store 2,mem_mouse_x + arg PAN_REG_DELTA_Y,pdata + call twspi_read + store 2,mem_mouse_y + rtn + +mouse_set_qdecoder_x: + arg MOUSE_DEFAULT_XA_GPIO,temp + call gpio_config_input + arg MOUSE_DEFAULT_XA_GPIO,temp + call gpio_get_bit + rtn true + hfetch 1,core_qdec_cntx + set1 4,pdata + hstore 1,core_qdec_cntx + rtn + +mouse_hardware_zwheel: + fetcht 1,mem_mouse_z_data + hfetch 1,core_qdec_cntx + iadd temp,pdata + rtn blank + store 1,mem_mouse_z + jam 0,mem_mouse_z_data + branch enable_user +mouse_hardware_zwheel_beforelpm: + fetcht 1,mem_mouse_z_data + hfetch 1,core_qdec_cntx + iadd temp,pdata + store 1,mem_mouse_z_data + rtn +mouse_zwheel: + fetch 1,mem_mouse_z_data + rtn blank + store 1,mem_mouse_z + jam 0,mem_mouse_z_data + branch enable_user + +mouse_t_zwheel: + fetch 1,mem_mouse_tz_data + rtn blank + store 1,mem_mouse_tz + jam 0,mem_mouse_tz_data + branch enable_user + +mouse_check_key_gpio: + arg 0,rega + fetcht 1,mem_lbutton_gpio + call gpio_get_bit + setflag true,0,rega + fetcht 1,mem_rbutton_gpio + call gpio_get_bit + setflag true,1,rega + fetcht 1,mem_mbutton_gpio + call gpio_get_bit + setflag true,2,rega + call mouse_check_s_key_gpio + copy rega,pdata + rtn +mouse_check_s_key_gpio: + fetch 1,mem_bk_button_gpio + rtneq GPIO_DISABLE + fetcht 1,mem_bk_button_gpio + call gpio_get_bit + setflag true,3,rega + fetcht 1,mem_fw_button_gpio + call gpio_get_bit + setflag true,4,rega + rtn + +mouse_key: + call mouse_check_key_gpio + call mouse_set_mult + call mouse_24g_key + copy rega,pdata + fetcht 1,mem_mouse_key + store 1,mem_mouse_key + ixor temp,pdata + sub pdata,0,null + rtn zero + branch enable_user + +mouse_24g_key: + rtnmark0 mark_24g + copy rega,pdata + rtn blank + store 1,mem_mouse_key + branch enable_user + +//short mult: no key +mouse_set_mult: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,mouse_set_ble_mult + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,mouse_set_bt_mult + rtn +mouse_set_ble_mult: + copy rega,pdata + nbranch le_set_config_short_mult,blank + branch le_clr_config_short_mult +mouse_set_bt_mult: + copy rega,pdata + nbranch classic_bt_set_mult_short_flag,blank + branch classic_bt_clr_mult_short_flag + + /* sdio high will cost extra 9mA */ +mouse_sensor_sdio_low: + bpatch patch1c_7,mem_patch1c + arg MOUSE_SPI1_SDIO_GPIO,temp + fetch MOUSE_FLAG_LEN,mem_mouse_flag + isolate1 MOUSE_ENABLE_SPI2,pdata + call mouse_sensor_sdio_low2,true + call gpio_get_bit + rtn true + setarg 0x0a + call twspi_read + nop 1000 + branch mouse_sensor_sdio_low +mouse_sensor_sdio_low2: + arg MOUSE_SPI2_SDIO_GPIO,temp + rtn + +mouse_spi_sdio_gpio_pollup: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_SPI2,mouse_spi2_sdio_gpio_pollup +mouse_spi1_sdio_gpio_pollup: + arg MOUSE_SPI1_SDIO_GPIO,temp + branch gpio_config_input_without_wake +mouse_spi2_sdio_gpio_pollup: + arg MOUSE_SPI2_SDIO_GPIO,temp + branch gpio_config_input_without_wake + + +mouse_init_sunt: + call mouse_spi_init + rtn wake + call mouse_spi_sdio_gpio_pollup + fetch 1,mem_config_sensor_type + beq P3610,mouse_init_3610sensor +mouse_init_sensor: + call mouse_read_sensor_id + beq P32XX_ID1,mouse_init_p32xx_id2_judge + beq P3065_ID1,mouse_p3065_init_param + call mouse_twspi_reset + nop 1000 + branch mouse_init_sensor +mouse_twspi_reset: + bpatch patch1d_0,mem_patch1d + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_SPI2,twspi_reset2 + branch twspi_reset + +mouse_init_3610sensor: + call mouse_read_sensor_id + beq P3610_ID1,mouse_init_p3610 + call mouse_init_3610sensor_reset + branch mouse_init_3610sensor + +mouse_read_sensor_id: + setarg PAN_REG_PID_H + call twspi_read + store 1,mem_sensor_id2 + setarg PAN_REG_PID_L + call twspi_read + store 1,mem_sensor_id1 + rtn +mouse_init_p32xx_id2_judge: + fetch 1,mem_sensor_id2 + beq P3205_TJ3T_ID2,mouse_3205_3t_init_param + beq P3204_TJ3L_ID2,mouse_3204_3l_init_param + beq P3212_ID2,mouse_3212_init_param + beq PKA8_ID2,mouse_ka8_init_param + rtn +mouse_ka8_init_param: + jam KA8,mem_config_sensor_type + rtn +mouse_p3065xy_init_param: + jam P3065_XY,mem_config_sensor_type + rtn +mouse_p3065_init_param: + fetch 1,mem_sensor_id2 + beq P3065_XY_ID2,mouse_p3065xy_init_param + jam P3065,mem_config_sensor_type + rtn +mouse_3212_init_param: + jam P3212,mem_config_sensor_type + call mouse_sensor_disable_wp + setarg 0x3426 + call twspi_write + setarg 0x0419 + call twspi_write +mouse_sensor_enable_wp: + setarg 0x0009 + branch twspi_write +mouse_sensor_disable_wp: + setarg 0x5a09 + branch twspi_write + +mouse_3204_3l_init_param: + jam P3204,mem_config_sensor_type + call mouse_sensor_disable_wp + setarg 0x0f0d// + call twspi_write + setarg 0xe31d// + call twspi_write + setarg 0xd27d + call twspi_write + call mouse_32xx_init_param + branch mouse_32xx_init_param_1 + +mouse_32xx_init_param: + setarg 0x351b + call twspi_write + setarg 0xb428 + call twspi_write + setarg 0x4629 + call twspi_write + setarg 0x962a + call twspi_write + setarg 0x8c2b + call twspi_write + setarg 0x6e2c + call twspi_write + setarg 0x642d + call twspi_write + setarg 0x5f38 + call twspi_write + setarg 0x0f39 + call twspi_write + setarg 0x323a + call twspi_write + setarg 0x473b + call twspi_write + setarg 0x1042 + branch twspi_write +mouse_32xx_init_param_1: + setarg 0x2e54 + call twspi_write + setarg 0xf255 + call twspi_write + setarg 0xf461 + call twspi_write + setarg 0x7063 + call twspi_write + setarg 0x5275 + call twspi_write + setarg 0x4176 + call twspi_write + setarg 0xed77 + call twspi_write + setarg 0x2378 + call twspi_write + setarg 0x4679 + call twspi_write + setarg 0xe57a + call twspi_write + setarg 0x487c + call twspi_write + setarg 0x777e + call twspi_write + setarg 0x017f + call twspi_write + setarg 0x000b + call twspi_write + setarg 0x007f + call twspi_write + branch mouse_sensor_enable_wp + + +mouse_3205_3t_init_param: + jam P3205,mem_config_sensor_type + call mouse_sensor_disable_wp + setarg 0x100d// + call twspi_write + setarg 0xed1d// + call twspi_write + setarg 0x807d + call twspi_write + call mouse_32xx_init_param + setarg 0x0943 + call twspi_write + branch mouse_32xx_init_param_1 + + +mouse_init_3610sensor_reset: + fetcht 1,mem_sensor_reset_gpio + call gpio_out_active + call delay_10ms + fetcht 1,mem_sensor_reset_gpio + call gpio_out_inactive + branch delay_10ms + +mouse_init_p3610: + jam P3610,mem_config_sensor_type + setarg 0xba41 + call sensor_write + setarg 0x0d11 + call sensor_write + setarg 0x041b + call sensor_write + setarg 0x041c + call sensor_write + setarg 0x0f1d + call sensor_write + setarg 0x0032 + call sensor_write + setarg 0xb541 + branch sensor_write + + +//input-rega +mouse_set_sensor_reg: + setarg 0xba41 + call sensor_write + nop 4000 + setarg 0xff7f + call sensor_write + copy rega,pdata + call sensor_write + setarg 0x007f + call sensor_write + setarg 0xb541 + branch sensor_write + +extsign: + rtnbit0 7 + arg 0xff00,temp + ior temp,pdata + rtn + +extsign_bit3: + rtnbit0 3 + arg 0xf0,temp + ior temp,pdata + rtn + + +mouse_le: + call le_fifo_check_nearly_full + nrtn blank + fetch 1,mem_le_connect_statue_flag + and pdata,0x03,pdata + rtnne 0x03 + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOSUE_24G_PAIRING_FLAG,mouse_le_send_empty_packet + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_le_send_empty_packet + bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet + call mouse_motion + nrtn user + branch mouse_fill_data_le + +mouse_le_send_empty_packet: + setarg 0 + store 7,mem_mouse_key + branch mouse_fill_data_le + +mouse_priority_bb_event: + copy regc,pdata + beq BT_EVT_LE_CONNECTED,mouse_le_bb_event_connected + beq BT_EVT_BB_CONNECTED,mouse_stop_discovery + beq BT_EVT_LE_DISCONNECTED,mouse_bb_disconnected + beq BT_EVT_BB_DISCONNECTED,mouse_bb_disconnected + beq BT_EVT_SETUP_COMPLETE,mouse_bt_event_setup_complete + beq BT_EVT_BUTTON_LONG_PRESSED,mouse_bb_event_discovery_btn + beq BT_EVT_HID_HANDSHAKE,mouse_bt_hid_handshake + beq BT_EVT_HID_CONNECTED,mouse_bt_hid_connected + beq BT_EVT_RECONN_FAILED,mouse_bb_event_reconn_failed + beq BT_EVT_RECONN_PAGE_TIMEOUT,mouse_bb_event_reconn_timeout + beq BT_EVT_PINCODE_REQ,mouse_bb_event_pincode + beq BT_EVT_REMOTE_UNSNIFF,app_start_auto_sniff + beq BT_EVT_LE_PAIRING_SUCCESS,mouse_le_pairing_success + beq BT_EVT_LE_START_ENC,mouse_le_ll_start_encryt + beq BT_EVT_LE_PAIRING_COMPLETE,mouse_le_pairing_complete + beq BT_EVT_VIRTUAL_CABLE_UNPLUG,mouse_irtual_cable_unplug + beq BT_EVT_24G_PAIRING_COMPLETE,mouse_24g_pairing_complete + beq BT_EVT_24G_ATTEMPT_FAIL,mouse_24g_attempt_fail + beq BT_EVT_24G_ATTEMPT_SUCCESS,mouse_24g_attempt_success + rtn + + +mouse_le_pairing_complete: + branch app_ble_store_reconn_info + +mouse_24g_attempt_fail: + jam 1,mem_mouse_24g_enter_lpm_enable + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + fetch 1,mem_device_flag + fetcht 1,mem_24g_device_number + isub temp,null + branch app_enter_hibernate,zero + rtn +mouse_24g_attempt_success: + jam 1,mem_mouse_24g_enter_lpm_enable + rtn +mouse_24g_pairing_complete: + jam 1,mem_mouse_24g_enter_lpm_enable + arg MOSUE_24G_PAIRING_FLAG,queue + call mouse_disable_function_flag + setarg 0 + store 2,mem_24g_pairing_timer_count + jam 0,mem_mouse_move_flag + + fetch 1,mem_config_sensor_type + sub pdata,P3610,null + call mouse_read_sensor3610_data,zero + ncall mouse_read_sensor_common,zero + + fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_24g_address + call mouse_set_24g_addr_eeprom //store rx dongle addr to eeprom + branch iicd_write_protect_eep_data + +mouse_set_24g_addr_eeprom: + call g24_head_ptr2regc + add regc,offset_24g_addr,rega + arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb + arg 4,temp + rtn + +mouse_store_flash_24g_address: + call g24_head_ptr2regc + add regc,offset_24g_addr,regb + ifetch 1,regb + store 1,mem_mouse_24g_addr + branch mouse_store_flash_device_info + + +mouse_le_pairing_success: + arg LL_PAIRING_SUCCESS_FLAG,queue + branch mouse_le_enable_connect_flag +mouse_le_ll_start_encryt: + jam 2,mem_le_start_encrypt_timer + arg LL_START_ENC_FLAG,queue + branch mouse_le_enable_connect_flag + + +mouse_le_enable_connect_flag: + fetch 1,mem_le_connect_statue_flag + qset1 pdata + store 1,mem_le_connect_statue_flag + rtn + +mouse_le_disable_connect_flag: + fetch 1,mem_le_connect_statue_flag + qset0 pdata + store 1,mem_le_connect_statue_flag + rtn +mouse_le_clean_connect_flag: + jam 0,mem_le_connect_statue_flag + rtn + +mouse_le_bb_event_connected: + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + set0 APP_DISC_BY_BUTTON ,pdata + store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag + setarg 0 + store 2,mem_mouse_direct_timer + call mouse_no_data_timer_init + branch mouse_stop_discovery + +mouse_bb_event_pincode: + call pincode_reinit + branch app_bt_set_pincode +mouse_bb_event_reconn_timeout: +ifdef FPGA_DEBUG + arg MOUSE_FPGA_DEBUG_GPIO,temp + call gpio_config_output + arg MOUSE_FPGA_DEBUG_GPIO,temp + call gpio_out_inactive +endif +mouse_bb_event_reconn_failed: + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset + bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_start_discovery + bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1 + branch app_bb_hibernate + + +mouse_bt_hid_connected: + branch mouse_hid_connected + +mouse_bt_event_setup_complete: + rtn + +mouse_soft_reset: + call mouse_select_device_enable + branch soft_reset_chip + +mouse_bb_disconnected: + bpatch patch1d_1,mem_patch1d + call mouse_bb_discon_clear_stack + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset + bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1 + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason + bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn + bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear + bbit1 APP_DISC_AFTER_PAIRING,mouse_event_light_state_pairing + bbit1 APP_DISC_AFTER_RECONN,mouse_event_light_state_hibernate + bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate + branch mouse_start_discovery +mouse_bb_discon_clear_stack: + setarg 0 + store 8,mem_wheel_tb_old_pinlevel + istore 4,contw //clean wheel statue + jam 0,mem_mouse_send_blank_timer + jam 0,mem_mouse_move_flag + jam APP_HANDSHAKE_NULL,mem_app_handshake_flag + jam 0,mem_ltk_exists + rtn + +mouse_event_light_state_pairing: + bbit1 APP_DISC_AFTER_HANDSHAKE,mouse_event_light_state_hibernate + bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate + branch mouse_start_discovery +mouse_event_light_state_hibernate: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery + branch app_bb_hibernate + +mouse4_0_event_bb_disconn: + call mouse_le_clean_connect_flag + fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason + bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear + branch app_bb_hibernate + +mouse_bb_event_timer: + call mouse_adc_read + call mouse_24g_delay_timer + call mouse_ban_24g_pairing_timer + call mouse_dpi_led_blink_delay_timer + call mouse_statue_up_timer + //poll + call mouse_statue_cheak_timer + call mouse_select_device + call mouse_bt_discovery_cheak + call mouse_low_voltage_led_timer + call mouse_sensor_led_contrl_timer + call mouse_check_hid_handshake_timer + call mouse_check_discovery_timeout_timer + call mouse_check_direct_timeout_timer + call mouse_check_no_data_timeout_timer + call mouse_check_mouse_state_timer + branch mouse_le_enable_att_list_timer + + + +mouse_sensor_led_contrl_timer: + fetch 1,mem_mouse_sensor_timer_count + rtn blank + increase -1,pdata + store 1,mem_mouse_sensor_timer_count + nrtn blank + branch mouse_sensor_led_contrl +mouse_sensor_led_contrl: + fetch 1,mem_sensor_led_style + rtneq UI_LED_STATE_BLINK_STOP + beq UI_LED_STATE_BLINK_DARKING,mouse_sensor_led_blink_state_darking +mouse_sensor_led_blink_state_lighting: + call mouse_sensor_led_on + jam UI_LED_STATE_BLINK_DARKING,mem_sensor_led_style + jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count + rtn +mouse_sensor_led_blink_state_darking: + call mouse_sensor_led_off + jam UI_LED_STATE_BLINK_LIGHTING,mem_sensor_led_style + jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count + rtn + +mouse_sensor_led_blink_stop: +mouse_sensor_reset: + setarg 0x8006 + call twspi_write + nop 1000 + jam 0x00,mem_mouse_sensor_timer_count + jam UI_LED_STATE_BLINK_STOP,mem_sensor_led_style + branch mouse_init_p32xx_id2_judge + +mouse_p3212sensor_led_on: + setarg 0xa006 + call twspi_write + setarg 0xa005 + branch twspi_write +mouse_sensor_led_on_global: + jam 0,mem_mouse_sensor_timer_count +mouse_sensor_led_on: + fetch 1,mem_config_sensor_type + beq P3212,mouse_p3212sensor_led_on + setarg 0x0106 + call twspi_write + setarg 0xa105 + branch twspi_write + +mouse_sensor_led_off_global: + jam 0,mem_mouse_sensor_timer_count +mouse_sensor_led_off: + setarg 0x0906 + branch twspi_write +mouse_sensor_start_blink: + jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count + jam UI_LED_STATE_BLINK_START,mem_sensor_led_style + rtn + +mouse_check_hid_handshake_timer: + arg mem_hid_handshake_timer_count,regc + arg mouse_bt_hid_handshake,regb + branch timer_single_step + +mouse_check_discovery_timeout_timer: + arg mem_mouse_discovery_timer,regc + arg mouse_check_discovery_timeout,regb + branch timer_single_step_2B + +mouse_check_direct_timeout_timer: + arg mem_mouse_direct_timer,regc + arg mouse_check_direct_timeout,regb + branch timer_single_step_2B + +mouse_check_no_data_timeout_timer: + arg mem_mouse_no_data_timer,regc + arg mouse_check_no_data_timeout,regb + branch timer_single_step_2B + +mouse_check_mouse_state_timer: + arg mem_mouse_statue_led_timer,regc + arg mouse_statue_led_off,regb + branch timer_single_step + + + +mouse_le_enable_att_list_timer: + arg mem_le_start_encrypt_timer,regc + arg mouse_le_enable_att_list,regb + branch timer_single_step + +mouse_24g_delay_timer: + arg mem_24g_enter_lpm_timer,regc + arg mouse_24g_delay,regb + branch timer_single_step + +mouse_ban_24g_pairing_timer: + arg mem_24g_pairing_timer_count,regc + arg mouse_ban_24g_pairing,regb + branch timer_single_step_2B +mouse_ban_24g_pairing: +mouse_24g_delay: + rtn + + +mosue_dpi_led_blink_init: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_DPI_LED_BLINK + jam 10,mem_mouse_dpi_led_delay_count //delay 1s led blink + fetch 1,mem_dpi_led_gpio + store 1,mem_mouse_struct_led_gpio + rtn + + +mouse_dpi_led_blink_delay_timer: + arg mem_mouse_dpi_led_delay_count,regc + arg mouse_dpi_led_setting,regb + branch timer_single_step +mouse_dpi_led_setting: + fetch 1,mem_dpi_led_gpio + store 1,mem_mouse_struct_led_gpio + setarg LED_DPI_BLINK + store 2,mem_mouse_on_time + store 2,mem_mouse_off_time + arg 0,rega + fetcht 1,mem_mouse_dpi + increase 1,temp + storet 1,mem_mouse_blink_count + jam UI_LED_STATE_BLINK_START,mem_mouse_led_type + rtn + +mouse_le_enable_att_list: + fetch 1,mem_le_connect_statue_flag + rtnbit1 LL_PAIRING_SUCCESS_FLAG + jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp + call ui_ipc_send_cmd + arg WRITE_REQ_ENABLE_FLAG,queue + branch mouse_le_enable_connect_flag + + +mouse_check_discovery_timeout: + call mouse_stop_discovery + branch app_enter_hibernate + +mouse_check_direct_timeout: + call app_ble_stop_direct_adv + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + branch app_enter_hibernate + +mouse_check_no_data_timeout: + bmark1 mark_24g,check_51cmd_hibernate + branch mouse_disconnect + + + +mouse_bb_event_discovery_btn: + bpatch patch1d_2,mem_patch1d + jam 0,mem_mouse_send_blank_timer + call mouse_disconnect + call mouse_le_clean_connect_flag + branch mouse_start_discovery + + + +mouse3_0_check_reconn_target: + fetch 6,mem_hci_plap + branch app_bt_start_discovery_short,blank + call mouse_reconn_setting_led_gpio + jam 0x17,mem_connection_options //ssp + fetch 1,mem_ssp_enable + nbranch app_bt_start_reconnect,blank + jam 0x04,mem_connection_options //no ssp + branch app_bt_start_reconnect + +mouse4_0_check_reconn_target: + fetch 2,mem_mouse_direct_timeout + store 2,mem_mouse_direct_timer + call mouse_reconn_setting_led_gpio + call app_lpm_mult_disable + branch check_51cmd_adv + +mouse_reconn_setting_led_gpio: + setarg LED_RECONNECT_BLINK + store 2,mem_mouse_on_time + store 2,mem_mouse_off_time + branch mouse_setting_led_gpio_comman + +mouse_discover_setting_led_gpio: + setarg LED_DISCOVERY_BLINK + store 2,mem_mouse_on_time + store 2,mem_mouse_off_time +mouse_setting_led_gpio_comman: + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_device_led1 + beq MODE_BT_DEVICE2,mouse_device_led2 + beq MODE_BT_DEVICE3,mouse_device_led3 + rtn +mouse_device_led1: + fetch 1,mem_config_device1_led_gpio + branch mouse_led_blink +mouse_device_led2: + fetch 1,mem_config_device2_led_gpio + branch mouse_led_blink +mouse_device_led3: + fetch 1,mem_config_device3_led_gpio +mouse_led_blink: + store 1,mem_temp + call mouse_devce_led_off + fetch 1,mem_temp + store 1,mem_mouse_struct_led_gpio + arg 0,rega + jam UI_LED_STATE_BLINK_START,mem_mouse_led_type + branch ui_led_blink_start_global + +mouse_led_off: + arg 0,rega + branch ui_led_off_global +mouse_led_on: + arg 0,rega + branch ui_led_on_global + +mouse4_0_bb_event_discovery_btn: + branch mouse_le_clean_connect_flag + +mouse_bt_hid_handshake: + jam APP_HANDSHAKE_DONE,mem_app_handshake_flag + call app_lpm_mult_enable + call app_bt_store_reconn_info + setarg 0 + store 2,mem_discovery_timeout_timer_count + store 1,mem_hid_handshake_timer_count + branch app_bt_enter_sniff + +mouse_check_reconn_target: + call mouse_cheak_select_device_by_switch + fetch 1,mem_device_flag + fetcht 1,mem_24g_device_number + isub temp,null + branch mouse_connect_24g_mode,zero + fetch 1,mem_xrecord_mode + beq REC_3_MODE,mouse3_0_check_reconn_target + beq REC_4_MODE,mouse4_0_check_reconn_target + branch mouse_start_discovery +mouse_connect_24g_mode: + call mouse_start_24g_mode + rtnmark1 mark_24g + fetch 1,mem_reconn_times + nbranch mouse_polling_device,blank + rtn + +mouse_start_discovery: + bpatch patch1d_3,mem_patch1d + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_ADV,mouse_start_discovery_norandom + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,mouse_start_discovery_norandom + random pdata //random ble addr + store 1,mem_le_lap+1 +mouse_start_discovery_norandom: + call app_lpm_mult_disable + fetch 2,mem_discovery_timeout + store 2,mem_mouse_discovery_timer + jam 6,mem_connection_options + setarg 0 + store 2,mem_mouse_no_data_timer + store 2,mem_mouse_direct_timer + arg MOUSE_STORE_EEPROM_FLAG,queue + call mouse_enable_function_flag + call mouse_bt_discovery_button_down_disable + fetch 1,mem_device_option + isolate1 MODE_4_MOUSE,pdata + call check_51cmd_adv,true + fetch 1,mem_device_option + isolate1 MODE_3_MOUSE,pdata + call check_51cmd_start_discovery,true + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_start_blink + branch mouse_discover_setting_led_gpio + +mouse_stop_discovery: + bpatch patch1d_4,mem_patch1d + fetch 1,mem_device_option + isolate1 MODE_4_MOUSE,pdata + call mouse_stop_le_adv,true + fetch 1,mem_device_option + isolate1 MODE_3_MOUSE,pdata + call mouse_stop_bt3_discovery,true + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_led_blink_stop + branch mouse_devce_led_off +mouse_stop_le_adv: + setarg 0 + store 2,mem_mouse_direct_timer + branch check_51cmd_stop_adv +mouse_stop_bt3_discovery: + setarg 0 + store 2,mem_mouse_discovery_timer + branch check_51cmd_stop_discovery + + + + + +mouse_store_remote_bdaddr: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_STORE_EEPROM_FLAG + arg MOUSE_STORE_EEPROM_FLAG,queue + call mouse_disable_function_flag + call mouse_check_device_addr +mouse_unplug_clean_bdaddr: + call mouse_before_store_reconn_info + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_device_info + bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eeprom_device_info + rtn +mouse_store_eeprom_device_info: + arg 88,temp + arg mem_device_flag,rega + arg MOUSE_INFO_EEPROM_OFFECT,regb + branch iicd_write_protect_eep_data + +mouse_check_device_addr: + fetch 1,mem_record_bt_mode + beq REC_4_MODE,mouse_check_le_device_addr + beq REC_3_MODE,mouse_check_bt_device_addr + rtn +mouse_check_le_device_addr: + store 1,mem_device_addr_temp + fetch 6,mem_le_plap + branch mouse_check_bt_device_addr_common +mouse_check_bt_device_addr: + store 1,mem_device_addr_temp + fetch 6,mem_plap +mouse_check_bt_device_addr_common: + store 6,mem_device_addr_temp+1 + fetch 7,mem_device_addr_temp + arg mem_device1_type,contr + arg 3,loopcnt +mouse_check_device_addr_end: + ifetcht 7,contr + isub temp,null + branch mouse_clean_addr,zero + increase 22,contr + loop mouse_check_device_addr_end + rtn +mouse_before_store_reconn_info: + arg mem_device1_type,rega + fetch 1,mem_device_flag + increase -1,pdata + mul32 pdata,29,pdata + iadd rega,rega + fetch 1,mem_record_bt_mode + istore 1,rega + beq REC_4_MODE,mouse_store_le_device + beq REC_3_MODE,mouse_store_bt_device + rtn + +mouse_store_le_device: + fetch 6,mem_le_plap + istore 6,contw + arg mem_le_ltk,contr + call memcpy16 + fetch 6,mem_le_lap + istore 6,contw + rtn +mouse_store_bt_device: + fetch 6,mem_plap + istore 6,contw + arg mem_link_key,contr + branch memcpy16 + +mouse_clean_addr: + increase -6,contr + copy contr,contw + fetcht 6,mem_device_addr_temp+1 + increase 3,temp + istoret 6,contw + rtn + + + +mouse_eeprom_load_recon_info: + arg 88,temp + arg mem_device_flag,rega + arg MOUSE_INFO_EEPROM_OFFECT,regb + call iicd_read_eep_data +mouse_select_reconn_device: + arg mem_device1_type,rega + fetch 1,mem_device_flag + fetcht 1,mem_24g_device_number + isub temp,null + rtn zero + increase -1,pdata + mul32 pdata,29,pdata + iadd rega,rega + ifetch 1,rega + store 1,mem_xrecord_mode + beq REC_3_MODE,mouse_load_bt_device + beq REC_4_MODE,mouse_load_le_device + rtn + +mouse_load_bt_device: + ifetch 6,contr +mouse_load_bt_device_end: + store 6,mem_hci_plap + arg mem_link_key,contw + call memcpy16 + branch check_link_key_load + +mouse_load_le_device: + ifetch 6,contr +mouse_load_le_device_end: + store 6,mem_hci_plap + arg mem_le_ltk,contw + call memcpy16 + ifetch 6,contr + store 6,mem_le_lap + rtn + + +mouse_select_device: + fetch 1,mem_config_function_enable + bbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON,mouse_select_device_by_button + bbit1 ENABLE_SELECT_DEVICE_BY_SWITCH,mouse_select_device_by_switch + branch mouse_select_device_by_combination_key + +mouse_select_device_by_combination_key: + call mouse_check_key_gpio + beq MOUSE_RM_BUTTON,mouse_select_device_commbination_key_down +mouse_select_device_commbination_key_up: + jam 30,mem_combination_select_device_count //combination key timer init + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue + rtn + +mouse_select_device_commbination_key_down: + call mouse_combination_select_device_timer + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue + branch mouse_select_device_enable + +mouse_combination_select_device_timer: + fetch 1,mem_combination_select_device_count + rtn blank + pincrease -1 + store 1,mem_combination_select_device_count + nrtn blank + branch mouse_ready_reconnection_by_button + +mouse_select_device_by_button: + fetch 1,mem_config_select_device_button_gpio + rtneq GPIO_DISABLE + fetcht 1,mem_config_select_device_button_gpio + call gpio_get_bit + branch mouse_select_device_button_down,true +mouse_select_device_button_up: + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit1 MOUSE_LONG_BT_BUTTON_FLAG + branch mouse_ready_reconnection_by_button + +mouse_select_device_button_down: + fetch 1,mem_select_device_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue + arg MOUSE_LONG_BT_BUTTON_FLAG,queue + branch mouse_disable_function_flag + + + +mouse_select_device_by_switch: + fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_select1_device + beq MODE_24G_DEVICE,mouse_select2_device + rtn +mouse_cheak_select_device_by_switch: + fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH + fetcht 1,mem_config_select_device_button_gpio + call gpio_get_bit + branch mouse_cheak_select_24gdevice,true +mouse_select_btdevice: + jam MODE_BT_DEVICE1,mem_device_flag + rtn +mouse_cheak_select_24gdevice: + fetch 1,mem_24g_device_number + store 1,mem_device_flag + rtn +mouse_select1_device: + fetcht 1,mem_config_select_device_button_gpio + nbranch mouse_ready_reconnection_by_button,true + rtn +mouse_select2_device: + fetcht 1,mem_config_select_device_button_gpio + call gpio_get_bit + branch mouse_select_device_button_down,true + rtn + + + + +mouse_ready_reconnection_by_button: + fetcht 1,mem_device_flag + increase 1,temp + fetch 1,mem_device_number + isub temp,null + ncall mouse_select_device_count_clean,positive + storet 1,mem_device_flag + jam 0,mem_link_key_exists + call mouse_store_device_number2eeprom + call mouse_select_device_enable +// call p_select_reconn_device + branch mouse_set_reconnection + +mouse_store_device_number2eeprom: + arg 1,temp + arg mem_device_flag,rega + arg 0,regb + branch iicd_write_eep_data + +mouse_set_reconnection: + call mouse_stop_bluetooth_mode + call mouse_select_device_disable + branch mouse_soft_reset +mouse_stop_bluetooth_mode: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + branch mouse_stop_discovery + +mouse_disconnect: + bpatch patch1d_5,mem_patch1d + setarg 0 + store 2,mem_mouse_no_data_timer + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + rtn + +mouse_irtual_cable_unplug: + setarg 0x01 + store 6,mem_plap + jam REC_3_MODE,mem_record_bt_mode + branch mouse_unplug_clean_bdaddr + + +mouse_cancel_reconnect: + call mouse_bt_cannel_reconn_enable + branch check_51cmd_bb_reconn_cancel + +mouse_bt_discovery_by_button: + fetch 1,mem_config_bt_button_gpio + rtneq GPIO_DISABLE + fetcht 1,mem_config_bt_button_gpio + call gpio_get_bit + branch mouse_bt_discovery_button_down,true +mouse_bt_discovery_button_up: + fetch 1,mem_ui_button_timeout + store 1,mem_combination_ui_button_count //combination key timer init + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue + branch mouse_bt_discovery_button_down_disable +mouse_bt_discovery_button_down: + call mouse_bt_discovry_timer + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue + call check_51cmd_bb_reconn_cancel + branch mouse_bt_discovery_button_down_enable + + +mouse_bt_discovery_cheak: + fetch 1,mem_config_function_enable + bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button +mouse_bt_discovery_commbination_key: + call mouse_check_key_gpio + beq MOUSE_LMR_BUTTON,mouse_bt_discovery_commbination_key_down +mouse_bt_discovery_commbination_key_up: + fetch 1,mem_ui_button_timeout + store 1,mem_combination_ui_button_count //combination key timer init + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_UP + jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue + branch mouse_bt_discovery_button_down_disable + + +mouse_bt_discovery_commbination_key_down: + call mouse_bt_discovry_timer + fetch 1,mem_bt_discovey_button_statue + rtneq DPI_BUTTON_STATE_DOWN + jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue + call check_51cmd_bb_reconn_cancel + branch mouse_bt_discovery_button_down_enable + +mouse_bt_discovry_timer: + arg mem_combination_ui_button_count,regc + arg mouse_long_button_bt_discovry,regb + branch timer_single_step + +mouse_long_button_bt_discovry: + arg MOUSE_LONG_BT_BUTTON_FLAG,queue + call mouse_enable_function_flag + call app_evt_button_long_pressed + branch mouse_bb_event_discovery_btn + + +mouse_cpi_enable: + arg MOUSE_CPI_FLAG,queue + branch mouse_enable_function_flag +mouse_cpi_disable: + arg MOUSE_CPI_FLAG,queue + branch mouse_disable_function_flag +mouse_select_device_enable: + arg MOUSE_SELECT_DEVICE_FLAG,queue + branch mouse_enable_function_flag +mouse_select_device_disable: + arg MOUSE_SELECT_DEVICE_FLAG,queue + branch mouse_disable_function_flag +mouse_bt_cannel_reconn_enable: + arg MOUSE_BT_CANNEL_RECONN_FLAG,queue + branch mouse_enable_function_flag +mouse_bt_cannel_reconn_disable: + arg MOUSE_BT_CANNEL_RECONN_FLAG,queue + branch mouse_disable_function_flag +mouse_bt_discovery_button_down_enable: + arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue + branch mouse_enable_function_flag +mouse_bt_discovery_button_down_disable: + arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue + branch mouse_disable_function_flag + + + +mouse_select_device_count_clean: + arg 1,temp + rtn + +mouse_enable_function_flag: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + qset1 pdata + store MOUSE_FLAG_LEN,mem_mouse_flag + rtn + +mouse_disable_function_flag: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + qset0 pdata + store MOUSE_FLAG_LEN,mem_mouse_flag + rtn + +mouse_adc_read: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_ADC + fetch 1,mem_adc_read_timer + increase 1,pdata + store 1,mem_adc_read_timer + sub pdata,10,null //1s read adc + rtn positive + jam 0,mem_adc_read_timer + call adc_set_mode + call vdd_calculate_by_mode + store 2,mem_mouse_vdd_now_vol + arg mem_mouse_vdd_calculate_set,rega + call adc_bat_percent_lowpower_out + fetch 1,mem_adc_power_flag + bbit1 1,mouse_power_down + bbit0 0,mouse_adc_no_low_voltage + branch mouse_adc_low_voltage +mouse_adc_low_voltage: + arg MOUSE_LOW_VOLTAGE_FLAG,queue + branch mouse_enable_function_flag +mouse_adc_no_low_voltage: + arg MOUSE_LOW_VOLTAGE_FLAG,queue + branch mouse_disable_function_flag + +mouse_low_voltage_led_timer: + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_LOW_VOLTAGE_FLAG + fetch 1,mem_config_low_voltage_alarm_gpio + store 1,mem_mouse_struct_led_gpio + fetch 1,mem_adc_low_volatage_led_timer_count + pincrease 1 + store 1,mem_adc_low_volatage_led_timer_count + sub pdata,20,null + ncall mouse_adc_low_volatage_led_timer_count_clean,positive + beq 2,mouse_low_voltage_led_on + beq 4,mouse_low_voltage_led_off + beq 6,mouse_low_voltage_led_on + beq 8,mouse_low_voltage_led_off + rtn +mouse_adc_low_volatage_led_timer_count_clean: + jam 1,mem_adc_low_volatage_led_timer_count + branch mouse_low_voltage_led_off +mouse_low_voltage_led_on: + arg 0,rega + jam UI_LED_STATE_LIGHTING,mem_mouse_led_type + branch ui_led_on_global +mouse_low_voltage_led_off: + arg 0,rega + jam UI_LED_STATE_LIGHTING,mem_mouse_led_type + branch ui_led_off_global + +mouse_g24_package_data: + call mouse_motion + nrtn user + arg 7,rega //length + arg mem_mouse_key,regb //tx buff + rtn + +mouse_g24_enter_lpm: + fetch 1,mem_mouse_24g_enter_lpm_enable + rtn blank + //do not enter lpm when condition is unallowed + fetcht 1,mem_dpi_button_gpio + call gpio_get_bit + call mouse_24g_dpi_delay_init,true + fetch 1,mem_24g_enter_lpm_timer + nrtn blank + call mouse_check_key_gpio + nrtn blank + branch g24_lpm_long_sleep + +mouse_24g_dpi_delay_init: + fetch 1,mem_dpi_button_gpio + rtneq UI_BUTTON_GPIO_DISABLE + jam 10,mem_24g_enter_lpm_timer + rtn + + +mouse_load_flash_info_cheak: + call mouse_load_flash_flag + fetch 2,mem_store_flag + arg EEPROM_INIT_FLAG,temp + isub temp,null + branch mouse_load_flash_device_info,zero + storet 2,mem_store_flag + call mouse_ble_init_address + branch mouse_store_flash_device_info +mouse_ble_init_address: + fetch 6,mem_le_lap + store 6,mem_device1_locall_addr + add pdata,0x0100,pdata + store 6,mem_device2_locall_addr + add pdata,0x0100,pdata + store 6,mem_device3_locall_addr + rtn + + +mouse_load_flash_flag: + setarg mem_store_flag + arg mem_mouse_information_start,temp + isub temp,temp + fetch 3,mem_flash_base + iadd temp,pdata + arg 2,temp + arg mem_store_flag,rega + branch spid_read_flash + + +mouse_load_flash_device_info: + setarg mem_mouse_information_end + arg mem_mouse_information_start,temp + isub temp,temp + fetch 3,mem_flash_base + arg mem_mouse_information_start,rega + call spid_read_flash + call mouse_select_reconn_device + fetch 4,mem_mouse_24g_addr + call g24_head_ptr2regc + branch g24_store_mem_addr + +mouse_store_flash_device_info: + setarg mem_mouse_information_end + arg mem_mouse_information_start,temp + isub temp,temp + arg mem_mouse_information_start,rega + fetch 3,mem_flash_base + branch flash_write + +mouse_store_eerpom_dpi: + arg 1,temp + arg mem_mouse_dpi,rega + arg MOUSE_DPI_EEPROM_OFFECT,regb + branch iicd_write_protect_eep_data + +mouse_load_eeprom_dpi: + arg 1,temp + arg mem_mouse_dpi,rega + arg MOUSE_DPI_EEPROM_OFFECT,regb + branch iicd_read_eep_data + +mouse_statue_cheak_timer: + rtnmark1 mark_24g + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_ENABLE_STATUE_UP + fetch 1,mem_mouse_1step_up_count + pincrease 1 + and pdata,0x07,pdata + store 1,mem_mouse_1step_up_count + rtnne 0x07 //800ms read sensor + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,mouse_check_statue_up + bbit1 UI_STATE_BLE_CONNECTED,mouse_check_statue_up + rtn + + + +//mosue +mouse_check_statue_up: + bpatch patch1d_6,mem_patch1d + fetch 1,mem_mouse_2step_up_count + nrtn blank + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_STATUE_UP_FLAG + fetch 1,mem_sensor_squal_reg + call sensor_read + store 1,mem_sensor_iqc + sub pdata,0x10,null + branch mouse_statue_up_timer_init,positive + jam 0,mem_mouse_2step_up_count + rtn + +mouse_statue_up_timer_init: + jam 30,mem_mouse_2step_up_count + rtn +mouse_statue_up_timer: + arg mem_mouse_2step_up_count,regc + arg mouse_statue_up,regb + branch timer_single_step + +mouse_statue_up: + fetch 1,mem_sensor_squal_reg + call twspi_read + sub pdata,0x10,null + nrtn positive + fetch MOUSE_FLAG_LEN,mem_mouse_flag + rtnbit0 MOUSE_STATUE_UP_FLAG + arg MOUSE_STATUE_UP_FLAG,queue + call mouse_disable_function_flag + jam 0,mem_lpm_mult + jam 30,mem_mouse_statue_led_timer // led on3s + call mouse_devce_led_off + fetch MOUSE_FLAG_LEN,mem_mouse_flag + bbit1 MOUSE_ENABLE_STATUE_UP_THREE_LED,mouse_three_device_statue_up +mouse_two_device_statue_up: + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_device1_led_on //device_1 + beq MODE_BT_DEVICE2,mouse_device_blink_led_init //device_2 + rtn +mouse_three_device_statue_up: + fetch 1,mem_device_flag + beq MODE_BT_DEVICE1,mouse_device1_led_on //device_1 + beq MODE_BT_DEVICE2,mouse_device2_led_on //device_2 + beq MODE_BT_DEVICE3,mouse_device3_led_on //device_3 + rtn + +mouse_device_blink_led_init: + fetch 1,mem_config_device1_led_gpio + branch mouse_led_blink + + + +mouse_statue_led_off: + jam 0x20,mem_lpm_mult + branch mouse_devce_led_off + + + +mouse_devce1_led_off: + fetch 1,mem_config_device1_led_gpio + rtneq GPIO_DISABLE + store 1,mem_mouse_struct_led_gpio + branch mouse_led_off + +mouse_devce2_led_off: + fetch 1,mem_config_device2_led_gpio + rtneq GPIO_DISABLE + store 1,mem_mouse_struct_led_gpio + branch mouse_led_off + +mouse_devce_led_off: + call mouse_led_off + call mouse_devce1_led_off + call mouse_devce2_led_off +mouse_devce3_led_off: + fetch 1,mem_config_device3_led_gpio + rtneq GPIO_DISABLE + store 1,mem_mouse_struct_led_gpio + branch mouse_led_off + +mouse_device1_led_on: + fetch 1,mem_config_device1_led_gpio + store 1,mem_mouse_struct_led_gpio + branch mouse_led_on +mouse_device2_led_on: + fetch 1,mem_config_device2_led_gpio + store 1,mem_mouse_struct_led_gpio + branch mouse_led_on +mouse_device3_led_on: + fetch 1,mem_config_device3_led_gpio + store 1,mem_mouse_struct_led_gpio + branch mouse_led_on + + + +mouse_polling_device: + bpatch patch1d_7,mem_patch1d + fetch 1,mem_reconn_times + increase -1,pdata + store 1,mem_reconn_times + fetcht 1,mem_device_flag + increase 1,temp + fetch 1,mem_device_number + isub temp,null + ncall mouse_select_device_count_clean,positive + storet 1,mem_device_flag + jam 0,mem_link_key_exists + call mouse_store_device_number2eeprom + call mouse_before_store_reconn_info + branch mouse_check_reconn_target + +mouse_power_down: + call mouse_devce_led_off + setarg 0 + store 8,mem_gpio_wakeup_low + branch lpm_hibernate + + + + + + +endif + + + Index: 1066_OTP_FLASH/program/app_remote_car.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_remote_car.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_remote_car.prog (working copy) @@ -0,0 +1,480 @@ +ifdef COMPILE_REMOTE_CAR + +remote_car_init: + rtn wake + hfetch 1,core_gpio_sel1 + and_into 0xf0,pdata + hstore 1,core_gpio_sel1 + call keyscan_key_init + setarg remote_car_le_before_hibernate + store 2,mem_cb_before_hibernate + + setarg remote_car_process_lpm_before + store 2,mem_cb_before_lpm + + setarg remote_car_scale_process_idle + store 2,mem_cb_idle_process + + setarg remote_car_scale_process_bb_event + store 2,mem_cb_bb_event_process + + setarg app_get_lpm_wake_lock + store 2,mem_cb_check_wakelock + + call g24_head_ptr2regc + setarg remote_car_g24_package_data + add regc,offset_24g_cb_data,contw + istore 2,contw + + setarg remote_car_g24_enter_lpm + add regc,offset_24g_cb_lpm_prepare,contw + istore 2,contw + + setarg remote_car_process_lpm_before + add regc,offset_24g_cb_lpm_before,contw + istore 2,contw + + setarg remote_car_event_timer + store 2,mem_cb_event_timer + + setarg remote_car_power_off_signal + store 2,mem_remote_car_power_off_cb + + setarg remote_car_soft_switch_power_on_signal + store 2,mem_remote_car_power_standby_cb + + setarg remote_car_send_key_data + store 2,mem_cb_remote_car_keyscan + + bpatch patch1e_0,mem_patch1e + call remote_car_init_environment + call queue_init + jam 2,mem_lpm_mult + fetch 1,mem_remote_car_config_soft_switch_enable + store 1,mem_remote_car_hard_soft_switch + beq HARD_SWITCH, remote_car_hard_switch_power_on_signal + fetch 1,mem_remote_car_config_soft_switch_gpio + store 1,mem_ui_button_gpio +remote_car_soft_switch_power_on_init: + call remote_car_ui_led_init + call ui_button_init + call ui_button_polling + jam POWER_STARTING,mem_remote_car_power_state + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + + + +remote_car_hard_switch_power_on_signal: + jam POWER_STANDBY,mem_remote_car_power_state +remote_car_soft_switch_power_on_signal: + call remote_car_ui_led_init +// fetch 1,mem_remote_car_led_map + arg 0,rega + call ui_led_blink_start_global +remote_car_connect_24g_mode: + branch g24_auto_pair_start + +remote_car_power_off_signal: + branch remote_car_ui_led_init + +remote_car_ui_led_init: + bpatch patch1e_1,mem_patch1e + fetch 1,mem_remote_car_config_connect_led_gpio + bne INVALID_PIN_NUM,remote_car_pairing_led_gpio_set +remote_car_ui_led_init_1: + fetcht 1, mem_remote_car_led_map + branch gpio_config_output +remote_car_pairing_led_gpio_set: + store 1,mem_remote_car_led_map + branch remote_car_ui_led_init_1 + + +remote_car_init_environment: + call g24_set_device_addr + fetch 2,mem_remote_car_no_data_timeout + store 2,mem_remote_car_no_data_timer + branch remote_car_get_adc_default_data + +remote_car_le_before_hibernate: +// call keyscan_scan_key +// fetch 2, mem_key_value_temp +// branch remote_car_in_enter_hibernate,blank +// branch app_enter_hibernate +remote_car_in_enter_hibernate: + call gpio_set_before_lpm_common + call remote_car_process_lpm_before + branch app_enter_hibernate + +remote_car_process_lpm_before: + branch keyscan_process_lpm_before + +remote_car_g24_enter_lpm: + fetch 1,mem_remote_car_24g_enter_lpm_enable + rtn blank + //do not enter lpm when condition is unallowed + branch g24_lpm_long_sleep + +remote_car_process_auto_pair_exit: + rtn + +remote_car_key_scan_process: + branch keyscan_key_process + +remote_car_scale_process_idle: + call remote_car_rocker_process + call remote_car_24g_status_process + branch remote_car_key_scan_process + +remote_car_scale_process_bb_event: + copy regc,pdata + beq BT_EVT_BUTTON_UP,app_event_button_up + beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed + beq BT_EVT_24G_PAIRING_COMPLETE,remote_car_24g_pairing_complete + beq BT_EVT_24G_ATTEMPT_SUCCESS,remote_car_24g_attempt_success + beq BT_EVT_24G_ATTEMPT_FAIL,remote_car_24g_attempt_fail + rtn + +remote_car_24g_attempt_fail: + jam 1,mem_remote_car_24g_enter_lpm_enable + rtn + +remote_car_24g_pairing_complete: + jam 1,mem_remote_car_24g_enter_lpm_enable + jam WORK_PAIRED,mem_remote_car_24g_auto_work_step + jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag + rtn + +remote_car_24g_attempt_success: + jam 1,mem_remote_car_24g_enter_lpm_enable + jam WORK_PAIRED,mem_remote_car_24g_auto_work_step + jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag + rtn + +remote_car_24g_status_process: + fetch 1,mem_remote_car_24g_auto_work_step + rtneq POWER_ON + fetch 1,mem_remote_car_24g_status + rtneq WORK_PAIRED + jam WORK_PAIRED,mem_remote_car_24g_status +remote_car_scale_process_paired: + arg 0,rega + branch ui_led_off_global +remote_car_scale_process_shutdown: + arg 0,rega + call ui_led_off_global + call remote_car_ui_led_init + branch app_enter_hibernate + +remote_car_event_timer: + call app_power_timer + branch remote_car_no_data_timer + +remote_car_no_data_timer: + fetch 1,mem_remote_car_config_timeout_shutdown_enable + rtn blank + arg mem_remote_car_no_data_timer,regc + arg remote_car_scale_process_shutdown,regb + branch timer_single_step_2B + +////////////////////////////////////rocker///////////////////////////// +remote_car_get_adc_default_data: + call remote_car_rocker_get_x + storet 2,mem_current_vdd_value_default_mid_x + call remote_car_rocker_get_y + storet 2,mem_current_vdd_value_default_mid_y + rtn +remote_car_rocker_data_get: +remote_car_rocker_get_x: + fetch 2,mem_current_vdd_value_default_mid_x + store 2,mem_current_vdd_value_default_mid_temp + call remote_car_get_adc_from_gpio6 + call remote_car_rocker_get_value + store 1,mem_rocker_status +remote_car_rocker_get_y: + fetch 2,mem_current_vdd_value_default_mid_y + store 2,mem_current_vdd_value_default_mid_temp + call remote_car_get_adc_from_gpio7 + call remote_car_rocker_get_value + store 1,mem_rocker_status+1 + rtn +remote_car_rocker_get_value: + fetch 2,mem_current_vdd_default_range + copy pdata,rega + fetch 2,mem_current_vdd_value_default_mid_temp + call remote_car_rocker_mid_value_adjust + fetch 1,mem_rocker_work_status + nbranch remote_car_rocker_translate_key,blank + nrtn positive + fetcht 2,mem_current_vdd_value_default_mid_temp + rtn +remote_car_rocker_mid_value_adjust: + isub temp,pdata + branch remote_car_rocker_mid_adjust_positive,positive + sub pdata,0,pdata //negative adjust + jam 1,mem_rocker_negative_flag + isub rega,null + rtn +remote_car_rocker_mid_adjust_positive: + jam 0,mem_rocker_negative_flag + isub rega,null + rtn +remote_car_rocker_translate_key: + nbranch remote_car_rocker_middle_key,positive + fetch 1,mem_rocker_negative_flag + nbranch remote_car_rocker_negative_key,blank +remote_car_rocker_positive_key: + setarg ROCKER_POSITIVE_KEY + rtn +remote_car_rocker_negative_key: + setarg ROCKER_NEGATIVE_KEY + rtn +remote_car_rocker_middle_key: + setarg ROCKER_MIDDLE_KEY + rtn +remote_car_get_adc_from_gpio6: + jam 0x33,mem_adc_channel + branch adc_set_mode +remote_car_get_adc_from_gpio7: + jam 0x34,mem_adc_channel + branch adc_set_mode + + +remote_car_rocker_process: + fetch 1,mem_remote_car_config_check_way + rtnne CAR_REMOTE_CHECK_ROCKER +remote_car_read_rocker_check_start: + bpatch patch1e_2,mem_patch1e + jam 1,mem_rocker_work_status + call remote_car_rocker_data_get + fetch 2,mem_rocker_status + fetcht 2,mem_rocker_last_status + isub temp,null + rtn zero + store 2,mem_rocker_last_status + call remote_car_rocker_x_to_key + branch remote_car_rocker_y_to_key + +remote_car_rocker_x_to_key: + fetch 1,mem_rocker_x_status + branch rocker_to_queue_set_0,blank + increase -1,pdata + branch remote_car_rocker_to_key +remote_car_rocker_y_to_key: + fetch 1,mem_rocker_y_status + branch rocker_to_queue_set_2,blank + increase 1,pdata +remote_car_rocker_to_key: + copy pdata,queue + arg 1,rega + branch remote_car_send_key_data + +rocker_to_queue_set_0: + arg 0,queue + arg 0,rega + branch remote_car_send_key_data +rocker_to_queue_set_2: + arg 2,queue + arg 0,rega + branch remote_car_send_key_data + +remote_car_send_key_data: + copy rega,pdata + store 1,mem_remote_key_status + fetch 1,mem_remote_car_24g_auto_work_step + beq POWER_ON,g24_auto_pair_start + fetch 2,mem_remote_car_no_data_timeout + store 2,mem_remote_car_no_data_timer + fetch 1,mem_remote_key_status + branch remote_car_key_is_release,blank +remote_car_key_is_press: + bpatch patch1e_3,mem_patch1e + arg 0,rega + call ui_led_on_global +remote_car_attack_key_press: + copy queue,pdata + beq 4,remote_car_send_attack_key4_press + beq 5,remote_car_send_attack_key5_press + beq 6,remote_car_send_fire_key6_press +// fetch 1,mem_remote_car_config_check_way +// rtneq CAR_REMOTE_CHECK_ROCKER +remote_car_motor_key_press: + call remote_car_device_layout_select + beq CONTROL_F_B_TEN,remote_car_single_motor_key_is_press + beq CONTROL_L_R_TEN,remote_car_double_motor_key_press + beq CONTROL_L_R_LR,remote_car_single_motor_key_is_press + rtn + +remote_car_single_motor_key_is_press: + copy queue,pdata + beq 0,remote_car_send_motor1_key0_press + beq 1,remote_car_send_motor1_key1_press + beq 2,remote_car_send_motor2_key2_press + beq 3,remote_car_send_motor2_key3_press + rtn + +remote_car_double_motor_key_press: + copy queue,pdata + beq 0,remote_car_send_double_motor_key0_press + beq 1,remote_car_send_double_motor_key1_press + beq 2,remote_car_send_double_motor_key2_press + beq 3,remote_car_send_double_motor_key3_press + rtn + +remote_car_key_is_release: + bpatch patch1e_4,mem_patch1e + arg 0,rega + call ui_led_off_global +remote_car_attack_key_release: + copy queue,pdata + beq 4,remote_car_send_attack_key4_rel + beq 5,remote_car_send_attack_key5_rel +// fetch 1,mem_remote_car_config_check_way +// rtneq CAR_REMOTE_CHECK_ROCKER +remote_car_motor_key_release: + call remote_car_device_layout_select + beq CONTROL_F_B_TEN,remote_car_single_motor_key_rel + beq CONTROL_L_R_TEN,remote_car_double_motor_key_rel + beq CONTROL_L_R_LR,remote_car_single_motor_key_rel + rtn + +remote_car_device_layout_select: + fetch 1,mem_remote_car_config_layout + fetcht 1,mem_remote_car_config_key_map + ior temp,pdata + rtn + +//cross key,control front-back motor layout +remote_car_send_motor1_key0_press: //front + jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload + branch remote_car_send_key +remote_car_send_motor1_key1_press: //back + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload + branch remote_car_send_key +remote_car_send_motor2_key2_press: //left + jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_motor2_key3_press: //right + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +//cross key,control left-right motor layout +remote_car_send_double_motor_key0_press: //front + jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_double_motor_key1_press: //back + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_double_motor_key2_press: //left + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key +remote_car_send_double_motor_key3_press: //right + jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +//attack motor control +remote_car_send_attack_key4_press: //attack left + jam MOTOR_POSITIVE,mem_remote_car_24g_motor3_payload + branch remote_car_send_key +remote_car_send_attack_key5_press: //attack right + jam MOTOR_NEGATIVE,mem_remote_car_24g_motor3_payload + branch remote_car_send_key + +remote_car_send_fire_key6_press: + jam 0x01,mem_remote_car_24g_fire_send_payload + branch remote_car_send_attack + +remote_car_single_motor_key_rel: + copy queue,pdata + beq 0,remote_car_send_motor1_key0_rel + beq 1,remote_car_send_motor1_key1_rel + beq 2,remote_car_send_motor2_key2_rel + beq 3,remote_car_send_motor2_key3_rel + rtn + +remote_car_double_motor_key_rel: + copy queue,pdata + beq 0,remote_car_send_double_motor_key0_rel + beq 1,remote_car_send_double_motor_key1_rel + beq 2,remote_car_send_double_motor_key2_rel + beq 3,remote_car_send_double_motor_key3_rel + rtn + +remote_car_send_motor1_key0_rel: +remote_car_send_motor1_key1_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor1_payload + branch remote_car_send_key +remote_car_send_motor2_key2_rel: +remote_car_send_motor2_key3_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +remote_car_send_double_motor_key0_rel: +remote_car_send_double_motor_key1_rel: +remote_car_send_double_motor_key2_rel: +remote_car_send_double_motor_key3_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor1_payload + jam MOTOR_STOP,mem_remote_car_24g_motor2_payload + branch remote_car_send_key + +remote_car_send_attack_key4_rel: +remote_car_send_attack_key5_rel: + jam MOTOR_STOP,mem_remote_car_24g_motor3_payload + branch remote_car_send_key + +remote_car_send_key: + arg mem_remote_car_24g_motor_packet,rega + branch queue_push +remote_car_send_attack: + arg mem_remote_car_24g_fire_packet,rega + branch queue_push + +remote_car_g24_package_data: + fetch 1,mem_remote_car_24g_pair_success_flag + beq WORK_PAIRED,remote_car_g24_send_empty + arg mem_remote_car_24g_tx_temp,rega + call queue_pop + nbranch remote_car_moto_data,user +remote_car_g24_package_data_continue: + arg mem_remote_car_24g_tx_temp,contr + ifetch 1,contr + copy pdata,rega + arg mem_remote_car_24g_tx_temp+1,regb + //rega: length + //regb: tx buffer + rtn + +remote_car_g24_send_empty: + jam 0,mem_remote_car_24g_pair_success_flag + enable user + arg 1,rega + arg mem_remote_car_empty_packet,regb + rtn + +remote_car_moto_data: + fetch 1,mem_remote_car_24g_tx_temp+3 //cmd + beq CAR_CMD_L_R_MOTOR_CONTROL,remote_car_moto_data_next + beq CAR_CMD_F_B_MOTOR_CONTROL,remote_car_moto_data_next + rtn +remote_car_moto_data_next: + fetch 1,mem_remote_car_24g_tx_temp+6 //data moto1 + nbranch remote_car_moto_data_enable_user,blank + fetch 1,mem_remote_car_24g_tx_temp+8 //data moto2 + nbranch remote_car_moto_data_enable_user,blank + fetch 1,mem_remote_car_24g_tx_temp+10 //data moto3 + nbranch remote_car_moto_data_enable_user,blank + rtn +remote_car_moto_data_enable_user: + enable user + branch remote_car_g24_package_data_continue + +endif + + + + Index: 1066_OTP_FLASH/program/app_shutter.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_shutter.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_shutter.prog (working copy) @@ -0,0 +1,1170 @@ + +ifdef COMPILE_SHUTTER + +shutter_init: + rtn wake + hfetch 1,core_gpio_sel1 + and_into 0xfc,pdata + hstore 1,core_gpio_sel1 + setarg shutter_le_before_hibernate + store 2,mem_cb_before_hibernate + + setarg shutter_process_lpm_before + store 2,mem_cb_before_lpm + + setarg app_enter_hibernate + store 2,mem_cb_discovry_timeout + + setarg shutter_process_idle + store 2,mem_cb_idle_process + + setarg shutter_process_bb_event + store 2,mem_cb_bb_event_process + + setarg shutter_le_scale_lpm_lock + store 2,mem_cb_check_wakelock + + setarg ble_shutter_receive_data + store 2,mem_cb_att_write + + setarg shutter_le_bb_event_timer + store 2,mem_cb_event_timer + + setarg shutter_key_change + store 2,mem_cb_shutter_keycan + + setarg shutter_soft_swtich_power_on + store 2,mem_shutter_soft_switch_poweron_callback_function + setarg shutter_soft_swtich_power_off + store 2,mem_shutter_soft_switch_poweroff_callback_function + + call le_modified_name + call shutter_load_bluetooth_config_by_user_config + call shutter_init_bluetooth_config + call shutter_init_param + call keyscan_key_init + call shutter_load_buffer_config_form_DataRom + call queue_init + call ui_led_init_global + call shutter_load_bluetooth_config + call shutter_load_bluetooth_config_by_eeprom + + bpatch patch1e_5,mem_patch1e + call classic_shutter_load_reconn_info + fetch 1, mem_shutter_hard_soft_switch_case + beq HARD_SWITCH, shutter_hart_swtich_power_on + fetch 1,mem_shutter_soft_switch_button_gpio + store 1,mem_ui_button_gpio + branch ui_soft_swtich_init + +/**************hard swtich function**************/ +shutter_hart_swtich_power_on: + jam UI_BUTTON_GPIO_DISABLE,mem_ui_button_gpio + jam SS_STATE_POWER_ON,mem_shutter_soft_switch_power_state + branch shutter_start_reconnect +/****************************/ + +/**************lpm lock callback function**************/ +shutter_le_scale_lpm_lock: + fetch 1,mem_shutter_soft_switch_power_state + beq SS_STATE_POWER_OFF,app_get_lpm_wake_lock + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + nbranch app_get_lpm_wake_lock,blank + branch app_put_lpm_wake_lock +/****************************/ + +/**************c512bt event callback function*************/ +shutter_process_bb_event: + copy regc,pdata +/**************classic shutter event*****************/ + beq BT_EVT_BB_CONNECTED,classic_shutter_process_baseband_connect + beq BT_EVT_BB_DISCONNECTED,classic_shutter_process_baseband_disconnect + beq BT_EVT_RECONN_FAILED,classic_shutter_process_reconnect_failed + beq BT_EVT_SETUP_COMPLETE,classic_shutter_process_setup_complete + beq BT_EVT_HID_CONNECTED,classic_shutter_process_hid_connect + beq BT_EVT_HID_DISCONNECTED,classic_shutter_process_hid_disconnect + beq BT_EVT_HID_HANDSHAKE,classic_shutter_process_hid_handshake + beq BT_EVT_RECONN_PAGE_TIMEOUT,classic_shutter_process_reconnect_page_timeout + beq BT_EVT_VIRTUAL_CABLE_UNPLUG,classic_shutter_process_virtual_cable_unplug + beq BT_EVT_REMOTE_UNSNIFF,classic_shutter_process_remote_unsniff + beq BT_EVT_STORE_NVRAM,classic_shutter_process_store_reconnect_information +/**************ble shutter event*****************/ + beq BT_EVT_LE_CONNECTED,ble_shutter_process_baseband_connect + beq BT_EVT_LE_DISCONNECTED,ble_shutter_process_baseband_disconnect + beq BT_EVT_LE_RECONNECT_COMPLETE,ble_shutter_process_reconnect_complete + beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,ble_shutter_process_parse_connect_parameter_update_response +/***************soft swtich event****************/ + beq BT_EVT_BUTTON_LONG_PRESSED,shutter_process_soft_swtich_button_long_press + beq BT_EVT_BUTTON_DOWN,shutter_process_soft_swtich_button_down + beq BT_EVT_BUTTON_UP,shutter_process_soft_swtich_button_up + rtn +/****************************/ + + +/******************classic shutter event**********************/ +classic_shutter_process_baseband_connect: + jam 0,mem_classic_shutter_hid_disconn_count + jam 0,mem_classic_shutter_cable_unplug_conut + rtn + + +classic_shutter_process_baseband_disconnect: + call classic_shutter_disconnect_clear_flag + branch classic_shutter_process_reconnect_failed + +classic_shutter_disconnect_clear_flag: + jam APP_HANDSHAKE_NULL,mem_app_handshake_flag + jam 0,mem_hid_handshake_timer_count + jam 0,mem_unsniff2sniff_timer_count + jam 0,mem_classic_shutter_cable_unplug_conut + jam 0,mem_classic_shutter_hid_disconn_count + branch queue_init + + +classic_shutter_process_reconnect_failed: + call app_disconn_reason_clear + branch shutter_start_bluetooth_discovery + + +classic_shutter_process_setup_complete: + call shutter_stop_bluetooth_discovery + branch app_led_stop_blink + + +classic_shutter_process_hid_connect: + setarg HID_HANDSHAKE_TIMEOUT + store 1,mem_hid_handshake_timer_count + rtn + + +classic_shutter_process_hid_disconnect: + jam 0,mem_classic_shutter_cable_unplug_conut + setarg FLAG_SHUTTER_HID_DISCONN_TIMEOUT + store 1,mem_classic_shutter_hid_disconn_count + rtn + + +classic_shutter_process_hid_handshake: + fetch 1,mem_app_handshake_flag + rtneq APP_HANDSHAKE_DONE + jam APP_HANDSHAKE_DONE,mem_app_handshake_flag + call app_lpm_mult_enable + call app_store_reconn_info + call shutter_stop_bluetooth_discovery + call app_led_off + branch app_bt_enter_sniff + + +classic_shutter_process_reconnect_page_timeout: + branch classic_shutter_process_reconnect_failed + + +classic_shutter_process_virtual_cable_unplug: + setarg FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT + store 1,mem_classic_shutter_cable_unplug_conut + rtn + + +classic_shutter_process_remote_unsniff: + branch app_start_auto_sniff + + +/***************classic shutter store reconn info***********************/ +classic_shutter_process_store_reconnect_information: + arg NVRAM_EEPROM_OFFSET,regb + fetch 1,mem_nv_data_number + mul32 pdata,34,temp + fetch 2,mem_nv_data_ptr + copy pdata,rega + branch iicd_write_eep_data + +classic_shutter_load_reconn_info: + arg NVRAM_EEPROM_OFFSET,regb + fetch 1,mem_shutter_bluetooth_type + rtnbit0 CLASSIC_SHUTTER + fetch 1,mem_nv_data_number + rtn blank + mul32 pdata,34,temp + fetch 2,mem_nv_data_ptr + copy pdata,rega + branch iicd_read_eep_data +/**************************************/ + +/******************ble shutter event**********************/ +ble_shutter_process_baseband_connect: + call shutter_stop_bluetooth_discovery + setarg 0 + store 2,mem_ble_shutter_reconn_timer + branch app_led_off + + +ble_shutter_process_baseband_disconnect: + call queue_init + jam 0,mem_ble_shutter_enable_notify + branch shutter_start_reconnect + + +ble_shutter_process_reconnect_complete: + call queue_init + jam 1,mem_ble_shutter_enable_notify + fetch 8,mem_ble_shutter_interval_min + store 8,mem_le_interval_min + call app_lpm_mult_enable + branch le_l2cap_tx_update_req + + +ble_shutter_process_parse_connect_parameter_update_response: + fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED + fetch 8,mem_ble_shutter_interval_min_new + rtn blank + store 8,mem_le_interval_min + branch le_l2cap_tx_update_req +/**************************************/ + +/******************soft swtich event**********************/ +shutter_process_soft_swtich_button_long_press: + branch ui_soft_switch_botton_long_press + +shutter_process_soft_swtich_button_down: + fetch 1,mem_shutter_hard_soft_switch_case + rtneq HARD_SWITCH + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + call shutter_store_currenct_led_state + branch app_led_on + +shutter_store_currenct_led_state: + jam 1,mem_shutter_soft_swtich_botton_down + arg 11,loopcnt + arg mem_shutter_soft_swtich_led_struct_temp,contw + arg mem_shutter_led_struct_app_led,contr + branch memcpy + +shutter_process_soft_swtich_button_up: + fetch 1,mem_shutter_hard_soft_switch_case + rtneq HARD_SWITCH + fetch 1,mem_shutter_soft_switch_power_state + beq SS_STATE_POWER_ON,shutter_load_currenct_led_state + branch ui_soft_switch_botton_up + +shutter_load_currenct_led_state: + fetch 1,mem_shutter_soft_swtich_botton_down + rtnne 1 + jam 0,mem_shutter_soft_swtich_botton_down + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,app_led_off + bbit1 UI_STATE_BLE_CONNECTED,app_led_off + arg 11,loopcnt + arg mem_shutter_soft_swtich_led_struct_temp,contr + arg mem_shutter_led_struct_app_led,contw + branch memcpy + +/**************************************/ + + +shutter_le_bb_event_timer: +/**************shutter check sleep timer**********************/ + call shutter_check_sleep_timer +/************************************/ +/**************soft reset power off timer**********************/ + call shutter_check_power_off_timer +/************************************/ +/**************classic shutter timer**********************/ + call classic_shutter_check_unplug_timer + call classic_shutter_hid_handshake_timer + call classic_shutter_hid_disconn_timer +/************************************/ +/**************ble shutter timer**********************/ + branch ble_shutter_reconn_timer +/************************************/ + +/**************shutter check sleep timer**********************/ +shutter_check_sleep_timer: + arg mem_shutter_sleep_timer,regc + arg shutter_sleep_timeout,regb + branch timer_single_step_2B +shutter_sleep_timeout: + jam SS_STATE_POWER_OFF,mem_shutter_soft_switch_power_state + call app_led_off + call shutter_disconnect_current_connection + branch shutter_wait_power_off + +/**************soft reset power off timer**********************/ +shutter_check_power_off_timer: + arg mem_shutter_power_off_timer,regc + arg shutter_check_power_off_timeout,regb + branch timer_single_step + +shutter_check_power_off_timeout: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,shutter_wait_power_off + bbit1 UI_STATE_BT_CONNECTED,shutter_wait_power_off + fetch 1,mem_shutter_led_struct_app_led_type + beq UI_LED_STATE_BLINK_START,shutter_wait_power_off + beq UI_LED_STATE_BLINK_LIGHTING,shutter_wait_power_off + beq UI_LED_STATE_BLINK_DARKING,shutter_wait_power_off + branch app_enter_hibernate +/************************************/ + +/**************classic shutter timer**********************/ +classic_shutter_check_unplug_timer: + arg mem_classic_shutter_cable_unplug_conut,regc + arg classic_shutter_unplug_timeout,regb + branch timer_single_step + +classic_shutter_unplug_timeout: + fetch 1,mem_CONTROL_tasks + set1 L2CAP_DISCONNECT_INTERRUPT, pdata + set1 L2CAP_DISCONNECT_CONTROL, pdata + store 1,mem_CONTROL_tasks + rtn + +classic_shutter_hid_handshake_timer: + arg mem_hid_handshake_timer_count,regc + arg classic_shutter_process_hid_handshake,regb + branch timer_single_step + +classic_shutter_hid_disconn_timer: + arg mem_classic_shutter_hid_disconn_count,regc + arg app_bt_disconnect,regb + branch timer_single_step + +/************************************/ + +/**************ble shutter timer**********************/ +ble_shutter_reconn_timer: + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + arg mem_ble_shutter_reconn_timer,regc + arg shutter_start_bluetooth_discovery,regb + branch timer_single_step_2B +/************************************/ + +shutter_process_idle: + call shutter_send_data_to_master + branch keyscan_key_process + + +shutter_process_lpm_before: + branch keyscan_process_lpm_before + +shutter_le_before_hibernate: + call gpio_set_before_lpm_common + branch shutter_process_lpm_before + +////////////////////////////////////////////////////////////////////////////////////////// + + +/****************shutter bluetooth control**********************/ +shutter_stop_bluetooth_discovery: + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_stop_bluetooth_discovery + bbit1 BLE_SHUTTER,ble_shutter_stop_bluetooth_discovery + rtn + +ble_shutter_stop_bluetooth_discovery: + fetch 2,mem_ble_shutter_connect_timeout + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + branch app_ble_stop_adv + +classic_shutter_stop_bluetooth_discovery: + fetch 2,mem_classic_shutter_connect_timeout + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + branch app_bt_stop_discovery + +shutter_start_bluetooth_discovery: + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_start_discovery + bbit1 BLE_SHUTTER,ble_shutter_start_discovery + rtn + +classic_shutter_start_discovery: + fetch 2,mem_classic_shutter_discovery_timeout, + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + branch app_bt_start_discovery_short + +ble_shutter_start_discovery: + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_CONNECTED + fetch 2,mem_ble_shutter_discovery_timeout + store 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + fetch 2,mem_ble_shutter_discovery_adv_interval + call shutter_ble_adv_interval_set + call app_led_start_blink + fetch 4,mem_ble_shutter_discovery_blink_on_time + store 4,mem_shutter_led_struct_app_led_on_time + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_ADV + branch app_ble_start_adv + + +shutter_start_reconnect: + fetch 1,mem_shutter_soft_switch_power_state + rtnne SS_STATE_POWER_ON + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_start_reconnect + bbit1 BLE_SHUTTER,ble_shutter_start_reconnect + rtn + +classic_shutter_start_reconnect: + call app_check_reconn_target + branch shutter_start_bluetooth_discovery,blank + call app_led_on + call app_bt_stop_discovery + branch app_bt_start_reconnect + +ble_shutter_start_reconnect: + fetch 2,mem_ble_shutter_reconn_timer + fetcht 2,mem_ble_shutter_reconn_timeout + storet 2,mem_ble_shutter_reconn_timer + nrtn blank + fetch 2,mem_ble_shutter_reconn_dav_interval + call shutter_ble_adv_interval_set + call app_led_start_blink + fetch 4,mem_ble_shutter_reconn_blink_on_time + store 4,mem_shutter_led_struct_app_led_on_time + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BLE_ADV + branch app_ble_start_adv + +//pdata:adv interval value +shutter_ble_adv_interval_set: + store 2,mem_lpm_interval + increase -4,pdata + store 2,mem_le_adv_interval + rtn + + +shutter_disconnect_current_connection: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect + bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect + branch shutter_stop_bluetooth_discovery +/**************************************/ + +/******************classic shutter load reconnect*********************/ +app_check_reconn_target: + fetch 1,mem_nv_data_number + copy pdata,loopcnt + fetch 2,mem_nv_data_ptr + copy pdata,rega +app_check_reconn_target_loop: + ifetch 2,rega + beq 0,found_reconn_device + increase NV_DATA_LEN,rega + loop app_check_reconn_target_loop + branch enable_blank + +found_reconn_device: + ifetch 6,contr + store 6,mem_hci_plap + increase 10,contr + arg mem_link_key,contw + call memcpy16 + call check_link_key_load + branch disable_blank + +/**************************************/ + +///////////////////////////////////////////////////////////////////////// +//output:if user is enable,mean,can send data +shutter_check_data_enable: + call disable_user + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,shutter_check_bt_data_enable + bbit1 UI_STATE_BLE_CONNECTED,shutter_check_ble_data_enable + rtn + +shutter_check_bt_data_enable: + fetch 1,mem_hid_interrupt_state + rtnne 0x3f + branch enable_user + +shutter_check_ble_data_enable: + fetch 1,mem_ble_shutter_enable_notify + rtn blank + branch enable_user +///////////////////////////////////////////////////////////////////////// + +///////////////////////////////////////////////////////////////////////// +//output:if user is enable,mean,bluetooth disconnect +shutter_check_bluetooth_conn: + call disable_user + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BT_CONNECTED + rtnbit1 UI_STATE_BLE_CONNECTED + branch enable_user +///////////////////////////////////////////////////////////////////////// + +///////////////////////////////////////////////////////////////////////// +shutter_change_bluetooth_status_bt_disconn: + fetch 1,mem_shutter_bluetooth_type + bbit1 CLASSIC_SHUTTER,classic_shutter_change_bluetooth_status_bt_disconn + bbit1 BLE_SHUTTER,ble_shutter_change_bluetooth_status_bt_disconn + rtn + +classic_shutter_change_bluetooth_status_bt_disconn: + fetch 1,mem_scan_mode + rtnne 0x03 + branch shutter_start_reconnect + +ble_shutter_change_bluetooth_status_bt_disconn: + branch shutter_start_reconnect + +///////////////////////////////////////////////////////////////////////// +shutter_check_send_data: + disable user2 + fetch 2,mem_shutter_sleep_timeout + store 2,mem_shutter_sleep_timer + + call shutter_check_bluetooth_conn + branch shutter_change_bluetooth_status_bt_disconn,user + + call shutter_check_data_enable + nrtn user + enable user2 + rtn + +//queue = key index +//rega =1 press, =0 release +shutter_key_change: + call shutter_check_send_data + nrtn user2 + deposit rega + branch shutter_key_release,blank +shutter_key_press: + call app_led_on + arg mem_key0_press,regc + branch push_queue_press_or_release + +shutter_key_release: + call app_led_off + arg mem_key0_release,regc + +push_queue_press_or_release: + arg MAX_QUEUE_NUM,pdata + imul32 queue,pdata + iadd regc,regc + +//input:regc the address that want push to queue buffer +push_buffer_in_queue: + ifetch 1,regc + rtn blank + call queue_push_one_byte + increase 1,regc + branch push_buffer_in_queue + + +shutter_send_data_to_master: + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BLE_CONNECTED,pop_queue_to_ble_data + bbit1 UI_STATE_BT_CONNECTED,pop_queue_to_classic_data + rtn + +pop_queue_to_ble_data: + call le_fifo_check_nearly_full + nrtn blank + call queue_pop_one_byte + nrtn user + pincrease -1 + mul32 pdata,SHUTTER_BLE_DATA_BUFFER,pdata + arg mem_ble_data_buffer1,temp + iadd temp,contr +le_send_notify_from_list: + ifetch 1,contr //length + copy pdata,rega + ifetcht 2,contr //handle + call store_contr + call le_att_malloc_tx_notify + copy rega,loopcnt + call get_contr + branch memcpy + + +pop_queue_to_classic_data: + call l2cap_malloc_is_fifo_nearly_full + nrtn blank + call queue_pop_one_byte + nrtn user + pincrease -1 + mul32 pdata,SHUTTER_CLASSIC_DATA_BUFFER,pdata + arg mem_classic_data_buffer1,temp + iadd temp,contr + ifetch 5,contr + store 5,mem_classic_data_buffer +classic_send_hid_data: + fetch 1,mem_classic_data_buffer + copy pdata,rega + call hid_malloc_tx_buff + fetch 2,mem_hid_int_remote_cid + istore 2,contw + setarg 0xa1 + istore 1,contw + fetch 4,mem_classic_data_buffer + 1 + istore 9,contw + rtn + +///////////queue function//////////// +//input:pdata is data that want push +queue_push_one_byte: + store 1,mem_pdatatemp + arg mem_pdatatemp,rega + branch queue_push + +queue_pop_one_byte: + arg mem_pdatatemp,rega + call queue_pop + nrtn user + fetch 1,mem_pdatatemp + rtn + +///////////queue function ending//////////// +ble_shutter_receive_data: + fetch 2,mem_le_att_handle + beq GATT_KEYBOARD_WRITE_HANDLE,ble_shutter_process_reconnect_complete + rtn + +shutter_init_param: + setarg 0x02 + store 1,mem_shutter_power_off_timeout +/////////////ble connect interval////////////// + setarg 0x00200008 + store 4,mem_ble_shutter_interval_min //set min interval is 10ms,set max interval is 40ms + setarg 0x012c0005 + istore 4,contw +/////////////////////////////////////// +//////////////////MTU///////////// + jam 0x17,mem_le_local_mtu +/////////////////////////////////////// +////////////////justwork///////// + setarg 0x1b + store 2,mem_le_pairing_handle + call le_set_config_fixed_ltk + call le_set_fixed_ltk + call le_set_justwork + branch le_set_config_read_authentication +/////////////////////////////////////// + +shutter_load_buffer_config_form_DataRom: +///////load data Rom///////// + arg BLE_KEY_VALUE_LIST_SIZE,loopcnt + arg mem_ble_data_buffer1,contw + arg BLE_SHUTTER_KEY_VALUE_LIST,contr + call memcpy_fast + arg BT_KEY_VALUE_LIST_SIZE,loopcnt + arg mem_classic_data_buffer1,contw + arg CLASSIC_SHUTTER_KEY_VALUE_LIST,contr + branch memcpy_fast + + +shutter_load_ble_gatt_form_DataRom: + arg BLE_GATT_LIST_SIZE,loopcnt + arg BLE_SHUTTER_GATT_LIST,contr + branch memcpy_fast + + +shutter_load_bt_sdp_form_DataRom: + arg BT_SDP_LIST_SIZE,loopcnt + arg CLASSIC_SHUTTER_SDP_LIST,contr + branch memcpy_fast + + +///////////////////////////////gpio config//////////////////////////////////// +shutter_init_bluetooth_config: + call shutter_check_load_config_flag + nrtn user + fetch 1,mem_shutter_config_select_gpio1 + call shutter_init_bluetooth_config_gpio_input + fetch 1,mem_shutter_config_select_gpio2 + call shutter_init_bluetooth_config_gpio_input + fetch 1,mem_shutter_config_select_gpio3 + branch shutter_init_bluetooth_config_gpio_input + +shutter_init_bluetooth_config_gpio_input: + rtn blank + or pdata,0x80,temp + branch gpio_config_input_nowake + + +shutter_load_bluetooth_config: + call shutter_check_load_config_flag + nrtn user + call shutter_load_bluetooth_config_label + branch shutter_load_bluetooth_config_by_otp + +shutter_load_bluetooth_config_label: + arg 0,rega + fetch 1,mem_shutter_config_select_gpio1 + call shutter_load_bluetooth_config_read_gpio_input + nsetflag blank,0,rega + fetch 1,mem_shutter_config_select_gpio2 + call shutter_load_bluetooth_config_read_gpio_input + nsetflag blank,1,rega + fetch 1,mem_shutter_config_select_gpio3 + call shutter_load_bluetooth_config_read_gpio_input + nsetflag blank,2,rega + copy rega,pdata + store 1,mem_shutter_config_label + fetch 1,mem_shutter_config_size + imul32 rega,pdata + fetcht 2,mem_shutter_config_otp_base_address //base address + iadd temp,pdata + store 2,mem_shutter_config_otp_addr + rtn + +shutter_load_bluetooth_config_read_gpio_input: + rtn blank + or pdata,0x80,temp + call gpio_get_bit + nbranch enable_blank,true + branch disable_blank + + +shutter_check_load_config_flag: + call disable_user + fetch 1,mem_shutter_config_user_size + nrtn blank + fetch 1,mem_shutter_config_enable + rtn blank + branch enable_user + + +shutter_load_bluetooth_config_by_otp: + call otp_enable_chgpump + fetch 2,mem_shutter_config_otp_addr + arg mem_shutter_config_data_temp,rega + fetcht 1,mem_shutter_config_size + call otpd_read_data + call otp_disable_chgpump +shutter_load_bluetooth_config_store_name: + fetch 1,mem_shutter_config_data_temp + copy pdata,loopcnt + store 1,mem_le_name_len + call memcpy_fast + fetch 1,mem_shutter_config_data_temp + copy pdata,loopcnt + store 1,mem_local_name_length + call memcpy_fast + ifetch 1,contr + store 1,mem_shutter_key_num + ifetch 1,contr + store 1,mem_shutter_hard_soft_switch_case + rtn + + +shutter_load_bluetooth_config_by_eeprom: + fetch 1,mem_shutter_bluetooth_type + rtnbit0 CLASSIC_SHUTTER + arg 3,temp + fetch 2,mem_shutter_config_eeprom_offset_addr + copy pdata,regb + arg mem_shutter_config_eeprom_start_flag,rega + call iicd_read_eep_data + fetcht 2,mem_shutter_config_eeprom_start_flag + setarg SHUTTER_EEPROM_CONFIG_CRC + isub temp,null + nrtn zero + fetch 1,mem_shutter_config_user_size + rtn blank + copy pdata,temp + fetch 2,mem_shutter_config_eeprom_offset_addr + add pdata,3,regb + arg mem_shutter_config_data_temp,rega + call iicd_read_eep_data + branch shutter_store_config + +shutter_load_bluetooth_config_by_user_config: + fetch 2,mem_shutter_config_user_otp_address + rtn blank + call otp_enable_chgpump + arg 1,temp + arg mem_shutter_config_user_size,rega + call otpd_read_data + + fetch 1,mem_shutter_config_user_size + rtn blank + + fetch 2,mem_shutter_config_user_otp_address + pincrease 1 + arg mem_shutter_config_data_temp,rega + fetcht 1,mem_shutter_config_user_size + call otpd_read_data + call otp_disable_chgpump +shutter_store_config: + call shutter_load_bluetooth_config_store_name +shutter_load_bluetooth_config_custom: + ifetch 2,contr + rtn blank + copy pdata,contw + ifetcht 1,contr + copy temp,loopcnt + call memcpy + branch shutter_load_bluetooth_config_custom +/////////////////////////////////////////////////////////////////// + +//////////////////////////random mac address////////////////////////////// +shutter_random_mac_addr: + fetch 1,mem_shutter_bluetooth_type + rtnbit0 CLASSIC_SHUTTER + fetch 2,mem_classic_shutter_random_mac_offset_addr + copy pdata,regb + arg 4,temp + arg mem_shutter_random_mac_data_temp,rega + call iicd_read_eep_data + fetch 1,mem_shutter_random_mac_data_temp + bne 1,shutter_write_random_mac_addr_to_eeprom +shutter_write_random_mac_addr_to_eeprom: + setarg 1 + store 1,mem_shutter_random_mac_data_temp + force 3,loopcnt + call generate_random_loop + fetch 2,mem_classic_shutter_random_mac_offset_addr + copy pdata,regb + arg 4,temp + arg mem_shutter_random_mac_data_temp,rega + call iicd_write_eep_data +shutter_write_random_mac_addr: + fetch 3,mem_shutter_random_mac_data_temp + 1 + store 3,mem_lap + store 3,mem_le_lap + rtn + +///////////////////////////////////////////////////////////////// +shutter_soft_swtich_power_on: + branch shutter_start_reconnect + + +shutter_soft_swtich_power_off: + arg 0,rega + arg mem_shutter_power_off_led_style,regc + call ui_led_set_style_global + call shutter_disconnect_current_connection +shutter_wait_power_off: + fetch 1,mem_shutter_power_off_timeout + store 1,mem_shutter_power_off_timer + rtn + + +/*************soft swtich ui config*********************/ +ui_soft_swtich_init: + setarg SS_STATE_POWER_UP + call ui_soft_swtich_init_power_on_time + jam UI_BUTTON_STATE_UP,mem_ui_button_last_state + call ui_button_init + call ui_button_polling + fetch 2,mem_ui_state_map + rtnbit1 UI_STATE_BTN_DOWN + branch app_enter_hibernate + +ui_soft_swtich_init_power_on_time: + fetcht 2,mem_power_param_ptr + istore 1,temp //init power state + ifetch 1,contw //power on time + store 1,mem_ui_button_timeout + rtn + + +ui_soft_switch_botton_up: + fetch 2,mem_power_param_ptr + ifetch 1,pdata + rtnne SS_STATE_POWER_UP + branch app_enter_hibernate + + +ui_soft_switch_botton_long_press: + fetcht 2,mem_power_param_ptr + ifetch 1,temp + beq SS_STATE_POWER_ON,ui_soft_switch_power_off +ui_soft_switch_power_on: + setarg SS_STATE_POWER_ON + fetcht 2,mem_power_param_ptr + istore 1,temp //init power state + add temp,SS_POWER_OFF_TIME,contr + ifetch 1,contr + istore 1,mem_ui_button_timeout + ifetch 2,contr + branch callback_func + +ui_soft_switch_power_off: + setarg SS_STATE_POWER_OFF + call ui_soft_swtich_init_power_on_time + add temp,SS_POWER_OFF_CB,contr + ifetch 2,contr + branch app_enter_hibernate,blank //no call back function , just enter hibernate + branch callback_func + +/*************soft swtich ui config ending*********************/ + + +/*************unkown function*********************/ +shutter_byteswap: + store 6,mem_tmp_buffer + fetch 1,mem_tmp_buffer + store 1,mem_tmp_buffer+11 + ifetch 1,contr + store 1,mem_tmp_buffer+10 + ifetch 1,contr + store 1,mem_tmp_buffer+9 + ifetch 1,contr + store 1,mem_tmp_buffer+8 + ifetch 1,contr + store 1,mem_tmp_buffer+7 + ifetch 1,contr + store 1,mem_tmp_buffer+6 + fetch 6,mem_tmp_buffer+6 + rtn + +shutter_random_addr_by_otp: + call load_adc_init + fetch 1,mem_1v_adc_io_data + store 1,mem_le_lap + fetch 1,mem_5v_adc_hvin_data + istore 1,contw + fetch 1,mem_3v_adc_vinlpm_data + istore 1,contw + fetch 3,mem_le_lap + store 3,mem_lap + rtn + + + +//iic read function +//function name:sim_iic_read_eep_data +//input: +//temp:the length that simulation iic want to read eeprom data +//rega:the memmory point that simulation iic read data store +//regb:the eeprom address offset +//mark_eeprom_size:select 02 or other +//output:nc +sim_iic_read_eep_data: + fetch 2,mem_eeprom_base + iadd regb,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + copy temp,regb + + call sim_iic_start + setarg 0xa0 + call sim_iic_send_byte + fetch 1,mem_addr_mi + call sim_iic_send_byte + bmark1 mark_eeprom_size,sim_iic_read_eep_data_2k + fetch 1,mem_addr_mi + 1 + call sim_iic_send_byte +sim_iic_read_eep_data_2k: + call sim_iic_stop + + call sim_iic_start + setarg 0xa1 + call sim_iic_send_byte + +sim_iic_read_eep_data_loop: + call sim_iic_read_byte + istore 1,rega + increase 1,rega + increase -1,regb + nbranch sim_iic_read_eep_data_loop,zero + branch sim_iic_stop + + +//iic write data function +//function name:sim_iic_write_eep_data +//input: +//temp:the length that simulation iic want to write eeprom data +//rega:the memmory point that simulation iic write data read +//regb:the eeprom address +//mark_eeprom_size:select 02 or other +//output:nc +sim_iic_write_eep_data: + byteswap regb,pdata + store 2,mem_addr_mi + copy temp,regb + + call sim_iic_start + setarg 0xa0 + call sim_iic_send_byte + + fetch 1,mem_addr_mi + call sim_iic_send_byte + bmark1 mark_eeprom_size,sim_iic_write_eep_data_loop + fetch 1,mem_addr_mi + 1 + call sim_iic_send_byte +sim_iic_write_eep_data_loop: + ifetch 1,rega + call sim_iic_send_byte + increase 1,rega + increase -1,regb + nbranch sim_iic_write_eep_data_loop,zero + branch sim_iic_stop +// bmark1 mark_eeprom_size + +//use reg:pdata,contr,contw,loopcnt +sim_iic_wait_ack: + arg 10,loopcnt + call sim_iic_release_sda + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us +sim_iic_wait_ack_loop: + call sim_iic_read_sda_level + branch sim_iic_scl_output_low,blank //scl = 0 + loop sim_iic_wait_ack_loop + branch sim_iic_scl_output_low //scl = 0 + + +//use reg:pdata,contr,contw,rega,queue +sim_iic_ack_slave: + call sim_iic_scl_output_low //scl = 0 + call sim_iic_sda_output_low //sda = 0 + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + branch sim_iic_scl_output_low //scl = 0 + + +//output:pdata receive byte data +//use reg:pdata,contr,contw,loopcnt,regc,rega +sim_iic_read_byte: + arg 8,loopcnt + arg 0,regc + call sim_iic_release_sda +sim_iic_read_byte_loop: + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + lshift regc,regc + call sim_iic_read_sda_level + iadd regc,regc + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_low //scl = 0 + loop sim_iic_read_byte_loop + call sim_iic_ack_slave + copy regc,pdata + rtn + +//input:pdata send byte data +//use reg:pdata,contr,contw,loopcnt,regc,rega +sim_iic_send_byte: + arg 8,loopcnt + copy pdata,regc + call sim_iic_scl_output_low //scl = 0 +sim_iic_send_byte_loop: + isolate1 7,regc + call sim_iic_sda_output_high,true //sda = 1 + ncall sim_iic_sda_output_low,true //sda = 0 + lshift regc,regc + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + call sim_iic_scl_output_low //scl = 0 + call sim_iic_delay //delay 2.5us + loop sim_iic_send_byte_loop + branch sim_iic_wait_ack + + +//use reg:pdata,contr,contw,rega +sim_iic_start: + call sim_iic_sda_output_high //sda = 1 + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + call sim_iic_sda_output_low //sda = 0 + call sim_iic_delay //delay 2.5us + branch sim_iic_scl_output_low //scl = 0 + + +//use reg:pdata,contr,contw,rega +sim_iic_stop: + call sim_iic_sda_output_low //sda = 0 + call sim_iic_scl_output_high //scl = 1 + call sim_iic_delay //delay 2.5us + call sim_iic_sda_output_high //sda = 1 + branch sim_iic_delay //delay 2.5us + + +//scl = 1 +sim_iic_scl_output_high: + enable user + fetch 1,SIM_IIC_SCL_GPIO_NUM + branch sim_iic_config_gpio + +//scl = 0 +sim_iic_scl_output_low: + disable user + fetch 1,SIM_IIC_SCL_GPIO_NUM + branch sim_iic_config_gpio + +//sda = 1 +sim_iic_sda_output_high: + enable user + fetch 1,SIM_IIC_SDA_GPIO_NUM + branch sim_iic_config_gpio + +//sda = 0 +sim_iic_sda_output_low: + disable user + fetch 1,SIM_IIC_SDA_GPIO_NUM + branch sim_iic_config_gpio + +//input:pdata the gpio number +//input:user flag, if enable user,config gpio output high level; if disable user, config gpio output low level +//use reg:pdata,contr,contw,queue,rega +sim_iic_config_gpio: + and pdata,0x07,queue + rshift3 pdata,pdata + arg core_gpio_oe0,temp + iadd temp,temp + ifetch 1,temp + qset1 pdata + istore 1,temp + increase 4,temp + ifetch 1,temp + qsetflag user,pdata + istore 1,temp + rtn + + +sim_iic_release_sda: + fetch 1,SIM_IIC_SDA_GPIO_NUM + and pdata,0x07,queue + rshift3 pdata,pdata + arg core_gpio_oe0,temp + iadd temp,temp + ifetch 1,temp + qset0 pdata + istore 1,temp + rtn + +//get sda level +//output:if sda high level ,pdata is 1;if sda low level ,pdata is 0 +//use reg:pdata,contr,contw,queue,rega,temp +sim_iic_read_sda_level: + nop 4 + fetch 1,SIM_IIC_SDA_GPIO_NUM + and pdata,0x07,queue + rshift3 pdata,pdata + arg core_gpio_in,temp + iadd temp,temp + setarg 0 + ifetcht 1,temp + qisolate1 temp + setflag true,0,pdata + rtn + +//delay 2.5us +sim_iic_delay: +// nop 1 + rtn + +/**********************************/ + + +else + branch assert + +endif Index: 1066_OTP_FLASH/program/app_usb.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/app_usb.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/app_usb.prog (working copy) @@ -0,0 +1,997 @@ + +usb_isr: + bpatch patch1e_6,mem_patch1e + hfetch 1,core_usb_status + isolate1 7,pdata + call usb_init,true + call usb_nak_state_judge + hfetch 1,core_usb_status + store 1,mem_usb_status + hfetch 1,core_usb_fifo_empty + store 1,mem_usb_fifo_empty + hstore 1,core_usb_fifo_empty + pinvert + fetcht 1,mem_usb_tx_wait + iand temp,pdata + store 1,mem_usb_tx_wait + hjam 0xe0,core_usb_status + fetch 1,mem_usb_fifo_empty + compare 0x1,pdata,0x1 + call usb0_fifo_empty,true + fetch 1,mem_usb_status + compare 0x1,pdata,0x1 + call usb_status1,true + call usb_tx + branch usb_nak_state + +usb_init: + bpatch patch1e_7,mem_patch1e + call usb_init_param + hjam 0x00,core_usb_config +ifndef SIM + nop 10000 +endif + hjam 0xc0,core_usb_trig + hfetch 2,core_clkoff + set0 CLOCK_OFF_USB,pdata + hstore 2,core_clkoff + hjam 0x3c,core_usb_config + hjam 0xff,core_usb_status + hjam 0xff,core_usb_fifo_empty + hjam 0,core_usb_addr + jam DEV_DEFAULT,mem_usb0_state + setarg mem_usb_clear_mem_end + arg mem_usb_clear_mem_start,contw + isub contw,loopcnt + branch clear_mem + +usb_offline_check_init: + fetcht 1,mem_usb_offline_check_gpio + branch gpio_config_input +usb_offline_state: + fetch 1,mem_usb_device_enumeration_endflag + rtn blank + fetcht 1,mem_usb_offline_check_gpio + call gpio_get_bit + branch usb_init,true + rtn + + +usb_nak_state: + arg TIMER_NAK,queue + call timer_check + nrtn blank + fetch 1 ,mem_usb_wakestate_onetime_flag + nrtn blank + fetch 1,mem_usb_device_enumeration_endflag + ncall usb_mac_wakeup_judge,blank + rtn + +usb_mem_devicedesc_init: + arg mem_devicedesc,contw + setsect 0,0x11212 + setsect 1,0x8000 + setsect 2,0x0 + setsect 3,0x10000 + istore 9,contw + setsect 0,0x22412 + setsect 1,0x8604 + setsect 2,0x1000 + setsect 3,0x8 + istore 9,contw + setsect 0,0x1 + istore 1,contw + rtn + +usb_init_param: + jam 2,mem_usb0_state + setarg 0x0 + store 1,mem_remain + store 2,mem_usb_zero_packet + pincrease 1 + store 2,mem_usb_ones_packet + pincrease 1 + store 2,mem_usb_two_packet + setarg HID_KBDATA_ADDR + store 2,mem_hidreportdesc_kb + setarg HID_MSDATA_ADDR + store 2,mem_hidreportdesc_m + arg mem_confdesc,contw + arg HID_CONFDATA_ADDR,contr + call memcpy64 + fetch 1,mem_usb_tx_interval + ncall usb_tx_interval_config,blank + branch usb_mem_devicedesc_init + +usb_tx_interval_config: + store 1,mem_confdesc+34 + store 1,mem_confdesc+59 + rtn +usb_nak_state_judge: + hfetch 1,core_usb_status + bbit1 USB_STATUS_NAK,usb_nak_state_timer_init + rtn + +usb_nak_state_timer_init: + call usb0_attached_state_judge + call timer_reinit + setarg TIMER_NAK_DELAY + arg TIMER_NAK,queue + branch timer_init + +usb0_attached_state_judge: + fetch 1,mem_usb_state + bne USB_CONNECTED,usb_clear_halt_dispose + jam 0,mem_usb_wakestate_onetime_flag + jam 0,mem_usb_mac_wakeup_trig + rtn +usb_clear_halt_dispose: + fetch 1,mem_usb_clear_halt + rtn blank + jam 0,mem_usb_clear_halt + jam USB_CONNECTED,mem_usb_state + jam 1,mem_usb_device_enumeration_endflag + rtn + +usb0_fifo_empty: + hjam 0x1,core_usb_fifo_empty + branch usb0_tx + +usb_rx_no_data: + fetch 1,mem_usb_status + bbit1 USB_STATUS_SETUP,usb_class_type + rtn + +usb_rx_read: + hfetch 1,core_usb_ep + istore 1,contw + loop usb_rx_read + rtn + +usb_status1: + bpatch patch1f_0,mem_patch1f + hjam 0x11,core_usb_status + hfetch 1,core_usb_ep_len + store 1,mem_usb_read_len + copy pdata,loopcnt + branch usb_rx_no_data,blank + arg mem_usb_setup,contw + call usb_rx_read + fetch 1,mem_usb_read_len + sub pdata,7,null + rtn positive +usb_class_type: + fetch 1,mem_usb_setup_bmRequestType + and_into 0x80,pdata + beq IN_DEVICE,usb_in_device + beq OUT_DEVICE,usb_out_device + branch assert + +usb_in_device: + fetch 1,mem_usb_setup_bmRequestType + rshift4 pdata,pdata + rshift pdata,pdata + and_into 0x03,pdata + beq STANDARD_REQ,usb_in_standard_req + beq CLASS_REQ,usb_in_class_req + beq MANUFACTURER_REQ,usb_in_manufacturer_req + branch assert + +usb_out_device: + fetch 1,mem_usb_setup_bmRequestType + rshift4 pdata,pdata + rshift pdata,pdata + and_into 0x03,pdata + beq STANDARD_REQ,usb_out_standard_req + beq CLASS_REQ,usb_out_class_req + beq MANUFACTURER_REQ,usb_out_manufacturer_req + branch assert + +usb_in_standard_req: + fetch 1,mem_usb_setup_bRequest + beq GET_CONFIGURATION,usb0_request_get_configuration + beq GET_DESCRIPTOR,usb0_request_get_descriptor + beq GET_INTERFACE,usb0_request_get_interface + beq GET_STATUS,usb0_request_get_status + branch usb0_force_stall + +usb_in_class_req: + fetch 1,mem_usb_setup_bRequest + beq GET_IDLE,usb_get_idle + beq GET_REPORT,usb_get_report + beq GET_PROTOCOL,usb_get_protocol_req + branch usb0_force_stall + +usb_in_manufacturer_req: + branch usb0_force_stall + +usb_out_standard_req: + fetch 1,mem_usb_setup_bRequest + beq CLEAR_FEATURE,usb0_request_clear_feature + beq SET_FEATURE,usb0_request_set_feature + beq SET_ADDRESS,usb0_request_set_address + beq SET_CONFIGURATION,usb0_request_set_configuration + beq SET_INTERFACE,usb0_request_set_interface + beq SET_DESCRIPTOR,usb0_force_stall + branch usb0_force_stall + +usb_out_class_req: + fetch 1,mem_usb_setup_bRequest + beq SET_IDLE,usb_set_idle + beq SET_REPORT,usb_set_report + beq SET_PROTOCOL,usb_set_protocol_req + branch usb0_force_stall + +usb_out_manufacturer_req: + branch usb0_force_stall + +usb0_force_stall: + hfetch 1,core_usb_stall + set1 0,pdata + hstore 1,core_usb_stall + branch usb0_reply_zerolen + +usb0_reply_zerolen: + hjam 0x40,core_usb_clear + rtn + +usb0_request_get_configuration: + fetch 1,mem_usb_setup_bmRequestType + bne IN_DEVICE,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 1,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue+1 + bne 0,usb0_force_stall + fetch 1,mem_usb0_state + beq DEV_CONFIGURED,usb0_request_get_cfg_dev_cfg + beq DEV_ADDRESS,usb0_request_get_cfg_dev_addr + branch usb0_force_stall +//Return current config : 1 +usb0_request_get_cfg_dev_cfg: + arg 1,regb + branch usb_send_ones_packet +//Config do not work, return default config : 0 +usb0_request_get_cfg_dev_addr: + arg 1,regb + branch usb_send_zero_packet + +usb0_request_get_descriptor: + bpatch patch1f_1,mem_patch1f + set0 mark_isstr,mark + fetch 1,mem_usb_setup_bValueH + beq DSC_DEVICE,dsc_device_info + beq DSC_CONFIG,dsc_config_info + beq DSC_STRING,dsc_string_info + beq DSC_HID,dsc_hid_info + beq DSC_HID_REPORT,dsc_hid_report_info + branch usb0_force_stall + +dsc_hid_info: + jam 0,mem_usb_get_protocol_flag + fetch 1,mem_usb_setup_wIndex + beq 0,dsc_hid_info_interface0 + beq 1,dsc_hid_info_interface1 + branch usb0_force_stall +//class_descriptor hid_descriptor--keyboard +dsc_hid_info_interface0: + arg mem_confdesc+19,rega + ifetch 1,rega + iforce regb + branch usb0_respond +//class_descriptor hid_descriptor--mouse +dsc_hid_info_interface1: + arg mem_confdesc+44,rega + ifetch 1,rega + iforce regb + branch usb0_respond + +dsc_device_info: +//input : pdata : data poniter +//input : temp: data len +//sets the data pointer and len to correct descriptor + fetch 1,mem_usb_set_high_addr_flag + ncall usb_set_high_addr,blank + setarg mem_devicedesc + fetcht 1,mem_devicedesc +dsc_info_set_data_len: + store 2,mem_dsc_info_data_pointer + storet 1,mem_dsc_info_len + fetch 1,mem_usb_setup_bLength + isub temp,null + nbranch dsc_info_set_current_data_len,positive +dsc_info_set_initial_data_len: + fetch 1,mem_dsc_info_len +dsc_info_set_data_size_completed: + iforce regb + fetch 2,mem_dsc_info_data_pointer + add pdata,1,pdata + iforce rega + branch usb0_respond +dsc_info_set_current_data_len: + fetch 1,mem_usb_setup_bLength + branch dsc_info_set_data_size_completed + +usb_set_high_addr: + hfetch 1,core_usb_addr + ncall usb0_set_addr,blank + jam 0,mem_usb_set_high_addr_flag + rtn +usb0_set_addr: + hfetch 1,core_usb_addr + set1 7,pdata + hstore 1,core_usb_addr + rtn + +dsc_config_info: + setarg mem_confdesc + fetcht 1,mem_confdesc + branch dsc_info_set_data_len + +dsc_string_info: + fetch 1,mem_usb_setup_bValue + sub pdata,3,null + nbranch usb0_force_stall,positive + fetch 1,mem_usb_setup_bValue + arg mem_string0,rega + beq 0,usb0_respond_length + set1 mark_isstr,mark + arg mem_string1,rega + beq 1,usb0_respond_length + arg mem_string2,rega + beq 2,usb0_respond_length + arg mem_string3,rega + beq 3,usb0_respond_length + rtn + +dsc_hid_report_info: + fetch 2,mem_usb_setup_wIndex + beq 1,dsc_hid_report_info0 + fetch 2,mem_hidreportdesc_kb + copy pdata,rega +// arg mem_hidreportdesc_kb,rega + branch usb0_respond_length +dsc_hid_report_info0: + jam 1,mem_usb_device_enumeration_endflag + jam USB_GOT_REPORT_REQ,mem_usb_state + fetch 2,mem_hidreportdesc_m + copy pdata,rega +// arg mem_hidreportdesc_m,rega + branch usb0_respond_length + + +usb0_request_get_interface: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + bne IN_INTERFACE,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 1,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + arg 1,regb + branch usb_send_zero_packet + + +usb0_request_get_status: + fetch 1,mem_usb0_state + beq DEV_DEFAULT,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 2,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + beq IN_DEVICE,usb0_get_status_in_device + beq IN_INTERFACE,usb0_get_status_in_interface + beq IN_ENDPOINT,usb0_get_status_in_endpoint + branch usb0_force_stall + +usb0_get_status_in_device: + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + arg 2,regb + fetch 1,mem_usb_remote_wakeup + beq 0x01,usb_send_two_packet +//regb:length +usb_send_zero_packet: + arg mem_usb_zero_packet,rega + branch usb0_respond +usb_send_ones_packet: + arg mem_usb_ones_packet,rega + branch usb0_respond +usb_send_two_packet: + arg mem_usb_two_packet,rega + branch usb0_respond + +usb0_get_status_in_interface: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + arg 2,regb + branch usb_send_zero_packet + +usb0_get_status_in_endpoint: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + beq IN_EP1,usb0_get_status_in_ep_in_ep1 + beq IN_EP2,usb0_get_status_in_ep_in_ep2 + beq IN_EP3,usb0_get_status_in_ep_in_ep3 + and_into 0x7f,pdata + beq 0x00,usb0_get_status_in_ep_in_ep0 + branch usb0_force_stall + +usb0_get_status_in_ep_in_ep0: + fetch 1,mem_usb_ep0_stall_status +usb0_get_status_in_ep_in_ack: + arg 2,regb + beq 1,usb_send_ones_packet + branch usb_send_zero_packet +usb0_get_status_in_ep_in_ep1: + fetch 1,mem_usb_ep1_stall_status + branch usb0_get_status_in_ep_in_ack +usb0_get_status_in_ep_in_ep2: + fetch 1,mem_usb_ep2_stall_status + branch usb0_get_status_in_ep_in_ack +usb0_get_status_in_ep_in_ep3: + fetch 1,mem_usb_ep3_stall_status + branch usb0_get_status_in_ep_in_ack + +usb_get_idle: + jam 1,mem_usb_idle_flag + arg mem_usb_idle_rate,rega + arg 1,regb + branch usb0_respond + +usb_get_report: + fetch 2,mem_usb_setup_bValue + arg PC_GET_REPORT,temp + isub temp,null + nbranch usb0_force_stall,zero + set0 mark_isstr,mark +usb_get_report_dispose: + fetch 1,mem_usb0_data_ready_report + nbranch usb_get_report_data_success,blank + jam PC_GET_NONDATA,mem_usb0_get_report_data +usb_get_report_send_data: + fetch 1,mem_usb_setup_bLength + iforce regb + arg mem_usb0_get_report_data,rega + call usb0_respond +usb_get_report_data_release: + arg mem_usb0_get_report_data,contw + arg 8,loopcnt + branch memset0 +usb_get_report_data_success: + jam 0,mem_usb0_data_ready_report + jam PC_GET_DATA,mem_usb0_get_report_data + branch usb_get_report_send_data + +usb_get_protocol_req: + fetch 1,mem_usb_setup_bLength + bne 1,usb0_force_stall + jam 1,mem_usb_get_protocol_flag + arg 1,regb //length + fetch 1,mem_usb_set_protocol_value + beq 0,usb_get_report_protocol + beq 1,usb_get_boot_protocol + branch usb_send_zero_packet +usb_get_report_protocol: + branch usb_send_ones_packet +usb_get_boot_protocol: + branch usb_send_zero_packet + + + +//in device +usb0_request_clear_feature: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + beq OUT_DEVICE,usb0_request_clear_feature_out_device + beq OUT_INTERFACE,usb0_request_clear_feature_out_interface + beq OUT_ENDPOINT,usb0_request_clear_feature_out_endpoint + branch usb0_force_stall + +usb0_request_clear_feature_out_device: + fetch 1,mem_usb_setup_bValue + bne DEVICE_REMOTE_WAKEUP,usb0_force_stall + hfetch 1,core_usb_config + set0 7,pdata + hstore 1,core_usb_config + jam 0,mem_usb_remote_wakeup + jam 1,mem_usb_clear_remote_wakeup + branch usb0_reply_zerolen + +usb0_request_clear_feature_out_interface: + branch usb0_force_stall + +usb0_request_clear_feature_out_endpoint: + fetch 1,mem_usb_setup_bValue + bne ENDPOINT_HALT,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + beq IN_EP1,usb0_force_stall_ep1_in_off + beq IN_EP2,usb0_force_stall_ep2_in_off + beq IN_EP3,usb0_force_stall_ep3_in_off + and_into 0x7f,pdata + beq 0x00,usb0_force_stall_ep0_in_off + branch usb0_force_stall + +usb0_force_stall_ep0_in_off: + jam 0,mem_usb_ep0_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep1_in_off: + jam 0,mem_usb_ep1_stall_status +usb0_force_stall_ep1_in_off_reply: + jam 1,mem_usb_clear_halt + branch usb0_reply_zerolen +usb0_force_stall_ep2_in_off: + jam 0,mem_usb_ep2_stall_status + branch usb0_force_stall_ep1_in_off_reply +usb0_force_stall_ep3_in_off: + jam 0,mem_usb_ep3_stall_status + branch usb0_force_stall_ep1_in_off_reply + + +usb0_request_set_feature: + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + beq OUT_DEVICE,usb0_request_set_feature_out_device + beq OUT_INTERFACE,usb0_request_set_feature_out_interface + beq OUT_ENDPOINT,usb0_request_set_feature_out_endpoint + branch usb0_force_stall + +usb0_request_set_feature_out_device: + fetch 1,mem_usb_setup_bValue + bne DEVICE_REMOTE_WAKEUP,usb0_force_stall + hfetch 1,core_usb_config + set1 7,pdata + hstore 1,core_usb_config + jam 1,mem_usb_remote_wakeup + jam USB_SLEEP,mem_usb_state + jam 0,mem_usb_tx_win_enable + call usb0_reply_zerolen +usb_wakeup_timer_reinit: + call timer_reinit + setarg TIMER_WAKEUP_DELAY + arg TIMER_WAKEUP,queue + branch timer_init + +usb0_request_set_feature_out_interface: + branch usb0_force_stall + +usb0_request_set_feature_out_endpoint: + fetch 1,mem_usb_setup_bValue + bne ENDPOINT_HALT,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + beq IN_EP1,usb0_force_stall_ep1_in_on + beq IN_EP2,usb0_force_stall_ep2_in_on + beq IN_EP3,usb0_force_stall_ep3_in_on + and_into 0x7f,pdata + beq 0x00,usb0_force_stall_ep0_in_on + branch usb0_force_stall + +usb0_force_stall_ep0_in_on: + jam 1,mem_usb_ep0_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep1_in_on: + jam 1,mem_usb_ep1_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep2_in_on: + jam 1,mem_usb_ep2_stall_status + branch usb0_reply_zerolen +usb0_force_stall_ep3_in_on: + jam 1,mem_usb_ep3_stall_status + branch usb0_reply_zerolen + + +usb0_request_set_address: + fetch 1,mem_usb_setup_bmRequestType + bne OUT_DEVICE,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + and_into 0x80,pdata + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb_usb0_state_set_dev_addr +usb_usb0_state_set_dev_default: + jam DEV_DEFAULT,mem_usb0_state +usb0_request_set_wait_address: + fetch 1,mem_usb_setup_bValue + hstore 1,core_usb_addr + call usb0_reply_zerolen + jam 1,mem_usb_set_high_addr_flag + rtn +usb_usb0_state_set_dev_addr: + jam DEV_ADDRESS,mem_usb0_state + branch usb0_request_set_wait_address + + +usb0_request_set_configuration: + fetch 1,mem_usb0_state + beq DEV_DEFAULT,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + bne OUT_DEVICE,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue+1 + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + sub pdata,USB_MAX_NUM_CFG,null + nbranch usb0_force_stall,positive + fetch 1,mem_usb0_state + beq DEV_ADDRESS,usb0_request_set_cfg_addr_state + beq DEV_CONFIGURED,usb0_request_set_cfg_cfg_state + branch usb0_force_stall + // This software only supports config = 0,1 +usb0_request_set_cfg_addr_state: +usb0_request_set_cfg_cfg_state: + fetch 1,mem_usb_setup_bValue //1:Configured state 0:Address state + beq 0,usb0_request_set_cfg_stay_addr_state + jam DEV_CONFIGURED,mem_usb0_state + branch usb0_reply_zerolen +usb0_request_set_cfg_stay_addr_state: + jam DEV_ADDRESS,mem_usb0_state + branch usb0_reply_zerolen + + +usb0_request_set_interface: + fetch 1,mem_usb0_state + bne DEV_CONFIGURED,usb0_force_stall + fetch 1,mem_usb_setup_bmRequestType + bne OUT_INTERFACE,usb0_force_stall + fetch 1,mem_usb_setup_bValue + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValueH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bLengthH + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_wIndex+1 + bne 0,usb0_force_stall + branch usb0_reply_zerolen + + +usb_set_idle: + jam 1,mem_usb_idle_flag + fetch 1,mem_usb_setup_bValueH + store 1,mem_usb_idle_rate + fetch 1,mem_usb_setup_wIndex + sub pdata,1,null + call usb_clear_remote_wakeup_set0,zero + fetch 1,mem_usb_state + bne USB_RESUME,usb0_reply_zerolen + jam USB_CONNECTED,mem_usb_state + call usb0_reply_zerolen + nop 30000 + nop 30000 + rtn +usb_clear_remote_wakeup_set0: + jam 1,mem_usb_device_enumeration_endflag + jam 0,mem_usb_clear_remote_wakeup + jam USB_RESUME,mem_usb_state + rtn + + +usb_set_report: + jam 1,mem_usb0_get_set_report + call usb_set_report_resume_judge + fetch 2,mem_usb_setup_bValue + store 2,mem_usb_setup_bValue_temp + fetch 1,mem_usb_setup_bLength //max 0x40 + iforce loopcnt + arg mem_usb0_setup,contr + arg mem_usb0_set_report_data,contw + call memcpy + branch usb0_reply_zerolen + +usb_set_report_resume_judge: + fetch 2,mem_usb_setup_bValue + arg PC_SET_REPORT_bValue,temp + isub temp,null + nrtn zero + fetch 2,mem_usb_setup_wIndex + arg PC_SET_REPORT_wIndex,temp + isub temp,null + nrtn zero + fetch 2,mem_usb_setup_bLength + arg PC_SET_REPORT_bLength,temp + isub temp,null + nrtn zero + jam 1,mem_usb_tx_win_enable + rtn + + +usb_set_protocol_req: + fetch 1,mem_usb_setup_bLength + bne 0,usb0_force_stall + fetch 1,mem_usb_setup_bValue + beq BOOT_PROTOCOL,usb_set_boot_protocol + beq REPORT_PROTOCOL,usb_set_report_protocol + branch usb0_force_stall +usb_set_boot_protocol: + jam 0,mem_usb_set_protocol_status + jam 1,mem_usb_set_protocol_value + branch usb0_reply_zerolen +usb_set_report_protocol: + jam 1,mem_usb_tx_mac_enable + jam 1,mem_usb_set_protocol_status + jam 0,mem_usb_set_protocol_value + branch usb0_reply_zerolen + + +usb0_respond_length: + ifetch 1,rega + iforce regb + increase 1,rega +//rega=*buff,reb=size +usb0_respond: + bpatch patch1f_2,mem_patch1f + bmark0 mark_isstr,usb0_respond0 + add regb,1,pdata + lshift pdata,pdata + hstore 1,core_usb_dfifo0 + hjam 3,core_usb_dfifo0 + fetch 1,mem_usb_setup_bLength + increase -2,pdata + rshift pdata,pdata + store 1,mem_usb_setup_bLength + beq 0,usb_no_respond_data +usb0_respond0: + fetch 2,mem_usb_setup_bLength + isub regb,null + branch usb0_respond1,positive + copy pdata,regb +usb0_respond1: + deposit rega + store 2,mem_bufptr + deposit regb + store 1,mem_remain + branch usb0_tx + +usb_no_respond_data: + arg 0,queue + branch usb_trig + +//mem_bufptr=*buff,mem_remain=size,loopcnt=i,rega=len +usb0_tx: + bpatch patch1f_3,mem_patch1f + fetch 1,mem_remain + rtn blank + copy pdata,loopcnt + sub pdata,EP0_PACKET_SIZE,null + branch usb0_tx_info,positive + arg EP0_PACKET_SIZE,loopcnt +usb0_tx_info: + fetch 1,mem_remain + isub loopcnt,pdata + store 1,mem_remain//mem_remain -= len + fetch 2,mem_bufptr + copy pdata,contr +usb0_tx0: + ifetch 1,contr + hstore 1,core_usb_dfifo0 + bmark0 mark_isstr,usb0_tx1 + hjam 0,core_usb_dfifo0 +usb0_tx1: + loop usb0_tx0 + copy contr,pdata + store 2,mem_bufptr//mem_bufptr += len + arg 0,queue + call usb_trig + fetch 1,mem_remain + nrtn blank + fetch 1,mem_usb_state + rtnne USB_GOT_REPORT_REQ + jam USB_CONNECTED,mem_usb_state + rtn + + +usb_tx_ep1: + arg core_usb_dfifo1,rega + arg 1,queue +usb_tx_loop: + ifetch 1,contr + istore 1,rega + loop usb_tx_loop +usb_trig: + setarg 0 + qset1 pdata + hstore 1,core_usb_trig + fetcht 1,mem_usb_tx_wait + ior temp,pdata + store 1,mem_usb_tx_wait + rtn + +usb_tx_ep2: + arg 2,queue + arg core_usb_dfifo2,rega + branch usb_tx_loop + +usb_tx: + bpatch patch1f_4,mem_patch1f + fetch 1,mem_usb_tx_enable + rtn blank + fetch 1,mem_usb_tx_wait + nbranch usb_inwake_state_tx_dispose,blank + fetch 1,mem_usb_device_enumeration_endflag + branch usb_tx_fifo_release,blank + fetch 1,mem_usb_state + beq USB_SLEEP,usb_windows_wakeup + bne USB_CONNECTED,usb_tx_fifo_release + fetch 1,mem_usb_clear_remote_wakeup + nbranch usb_tx_fifo_release,blank + call usb_tx_data_ep1 + branch usb_tx_data_ep2 + +usb_tx_data_ep1: + fetch 1,mem_usb_tx_enable + rtnbit0 1 + fetch 1,mem_usb_tx_wait + rtnbit1 1 + fetch 1,mem_usb_tx_enable + set0 1,pdata + store 1,mem_usb_tx_enable + fetch 1,mem_usb_ep1_data + rtn blank + beq USB_EP1_KB,usb_tx_kb_normal_data + branch assert + +usb_tx_data_ep2: + fetch 1,mem_usb_tx_enable + rtnbit0 2 + fetch 1,mem_usb_tx_wait + rtnbit1 2 + fetch 1,mem_usb_tx_enable + set0 2,pdata + store 1,mem_usb_tx_enable + fetch 1,mem_usb_ep2_data + rtn blank + beq USB_EP2_MS,usb_tx_ms_data + beq USB_EP2_MULTIKEY,usb_tx_kb_multikey_data + branch assert + +usb_tx_fifo_release: + //clear mem_usb_mouse_data/mem_usb_kb_data/mem_usb_kb_multikey + arg mem_usb_mouse_data,contw + arg 6,loopcnt + branch memset0 + +usb_tx_ms_data: + fetch 1,mem_usb_idle_flag + fetcht 1,mem_usb_get_protocol_flag + iand temp,pdata + branch usb_tx_ms_data_normal_mode,blank + fetcht 1,mem_usb_set_protocol_status + iadd temp,pdata + beq MAC_BOOT_MODE,usb_tx_ms_data_mac_boot_mode + branch usb_tx_ms_data_normal_mode + +usb_tx_ms_data_mac_boot_mode: + jam 0,mem_usb_ep2_data +usb_tx_ms_data_mac_boot_regroup: + fetch 1,mem_usb_mouse_data+1 //key + beq R_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey + beq LR_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey + fetch 1,mem_usb_mouse_data+1 //key + store 1,mem_usb_mouse_data + fetch 1,mem_usb_mouse_data+2 //x low + istore 1,contw + fetch 1,mem_usb_mouse_data+4 //y low + istore 1,contw + fetch 1,mem_usb_mouse_data+6 //wheel + istore 1,contw + arg 4,loopcnt + arg mem_usb_mouse_data,contr + branch usb_tx_ep2 + +usb_tx_ms_data_normal_mode: + jam 0,mem_usb_ep2_data +usb_tx_mac_boot_ms_regroup_r_or_lrkey: + arg 8,loopcnt + arg mem_usb_mouse_data,contr + branch usb_tx_ep2 + +usb_tx_kb_multikey_data: + jam 0,mem_usb_ep2_data + arg 3,loopcnt + arg mem_usb_kb_multikey,contr + branch usb_tx_ep2 + +usb_tx_kb_normal_data: + jam 0,mem_usb_ep1_data + arg 8,loopcnt + arg mem_usb_kb_data,contr + branch usb_tx_ep1 + +usb_inwake_state_tx_dispose: + fetch 1,mem_usb_state + beq USB_SLEEP,usb_clear_tx_wait + beq USB_CONNECTED, usb_mac_wakeup_trig + rtn +usb_clear_tx_wait: + jam 0,mem_usb_tx_wait + rtn +usb_mac_wakeup_trig: + hfetch 1,core_usb_config + set1 7,pdata + hstore 1,core_usb_config + jam 1,mem_usb_mac_wakeup_trig + rtn + +usb_mac_wakeup_judge: + fetch 1,mem_usb_state + rtneq USB_SLEEP + beq USB_CONNECTED,usb_mac_wakeup + rtn +usb_mac_wakeup: + fetch 1,mem_usb_mac_wakeup_trig + rtn blank + jam 1,mem_usb_wakestate_onetime_flag + branch usb_wakeup + +usb_windows_wakeup: + arg TIMER_WAKEUP,queue + call timer_check + nrtn blank +usb_wakeup: + hfetch 1,core_usb_config + rtnbit0 7 //endpoint wakeup enable + hjam 0xfc,core_usb_config + nop 30000 + hjam 0x3c,core_usb_config + rtn + + + Index: 1066_OTP_FLASH/program/bt.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/bt.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/bt.prog (working copy) @@ -0,0 +1,4172 @@ +define REVD +//define FPGA +define ROMCODE +define PATCH +define ADC +//define RAM_VERSION +//define CLK6M +//define DEBUG_MALLOC +//define DEBUG_H4LOG_ENABLE +//define DEBUG_LIGHT_STATE +//define E2_LOG +//define LMP_DBG +//define ACL_DEBUG +//define DCDC +define NVRAM +define RELEASE +define SECURE_CONNECTION +define DEBUG_RF_INIT +//define SPI_SIMULATE +//define ROM_RESPIN_OPTIONAL + +define SIMPLE_PAIRING +define COMPILE_RFCOMM +define COMPILE_SHUTTER +define COMPILE_AntiLost +//define COMPILE_IR +define COMPILE_KEYBOARD +define COMPILE_MOUSE +define COMPILE_MODULE +//define COMPILE_AT +//define COMPILE_PRCP +//define COMPILE_USB +//define COMPILE_DONGLE +define COMPILE_LE +define COMPILE_24G +define COMPILE_CAR +define COMPILE_REMOTE_CAR + + +INCLUDE "bt_format" + +org 0x0000 // start from patch ram address start +ifdef SIM +include sim.prog +else +include patch.prog +endif + +/******************************************/ +/*********** ROM Start ***************/ +/******************************************/ + +org 0x2000 // start from rom address start +start: + call lpmstate + +soft_reset: + bpatch patch00_0,mem_patch00 + clear_stack + call spi_ncs_gpio_init // 0xff disable spi ncs gpio init + call initialize_radio + call iicd_init_12m + call init_param + call l2cap_init + bpatch patch00_1,mem_patch00 + call rfcomm_init + call init_lmp + call ui_init + call app_init + ncall load_chip_option,wake + bpatch patch00_2,mem_patch00 + call app_lpm_init,wake +ifdef SIMPLE_PAIRING + call publickey_init +else + call ssp_disable +ifdef SECURE_CONNECTION + call publickey_init + +endif +endif + call lpm_recover_clk,wake +main_loop: + bpatch patch00_3,mem_patch00 +ifdef SIMPLE_PAIRING + call sp_calc_sequence +endif +ifdef SECURE_CONNECTION + call sp_calc_sequence_256 +endif +ifdef SIMPLE_PAIRING +ifdef SECURE_CONNECTION + call sp_calc_sequence_256_check +endif +endif + call le_dispatch + bpatch patch00_4,mem_patch00 + call idle_dispatch + call app_process_idle + call inquiry_dispatch + call inquiry_scan_dispatch + call page_scan_dispatch + call connection_dispatch + call lpm_dispatch + call g24_dispatch + branch main_loop + +connection_dispatch: + call connection_incontext + rtnmark0 mark_context + set0 mark_context,mark + call context_save + branch le_disable + +connection_incontext: + bpatch patch00_5,mem_patch00 + call context_search_insniff + nbranch connection_nosniff,zero + call context_load + add rega,coffset_mode,contr + ifetch 1,contr + bbit1 mode_le,le_conn_dispatch + bbit1 mode_master, master_dispatch + branch slave_dispatch +connection_nosniff: + call context_get_next + copy loopcnt,null + rtn zero + call context_load + fetch 1,mem_state + bbit1 state_inpage,master_page + fetch 1,mem_mode + bbit1 mode_master, master_dispatch + branch slave_dispatch + + + +/**************************************/ +/**************idle dispatch*********/ +/**************************************/ + +idle_dispatch: + fetch 1,mem_hci_cmd + rtn blank + beq hci_cmd_inquiry,idle_inquiry + beq hci_cmd_inquiry_cancel,idle_inquiry_cancel + beq hci_cmd_remote_name_req,idle_remote_name_req + beq hci_cmd_create_conn,idle_create_conn + beq hci_cmd_le_create_conn,idle_le_create_conn + call context_search_conn_handle + rtn zero + call context_search_plap + rtn zero +idle_exit: + jam 0,mem_hci_cmd + rtn + +idle_le_create_conn: + jam hci_cmd_le_create_conn,mem_cmd_le_create_conn + jam 0,mem_hci_cmd + rtn + +idle_inquiry: + set1 mark_inquiry_on,mark + set0 mark_inquiry_trainb,mark + jam param_ninquiry,mem_ninqy_index + jam 31,mem_nfreq_index_inq + branch idle_exit + +idle_inquiry_cancel: + set0 mark_inquiry_on,mark + force 0,stop_watch + branch idle_exit + +idle_remote_name_req: + call context_search_plap + rtn zero + force LMP_NAME_REQ,temp + jam 5,mem_nameres_cnt + branch idle_start_page + +idle_create_conn: + bpatch patch00_6,mem_patch00 +idle_create_conn_device: + fetch 6,mem_hci_plap + branch idle_exit,blank + jam RECONNECT_HID,memui_reconnect_mode + //jam HS_INIT_CALL,mem_hs_mode //init as master + jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm + branch idle_create_conn_cont + +idle_create_conn_cont: + force LMP_VERSION_REQ,temp +idle_start_page: + bpatch patch00_7,mem_patch00 + fetch 1,mem_page_mode + branch idle_page_mode_r0,blank + lshift3 pdata,pdata + lshift4 pdata,pdata + increase -1,pdata +idle_page_mode_r0: + store 1,mem_npage + store 1,mem_npage_index + jam 31,mem_nfreq_index_page + set0 mark_page_trainb,mark + call context_new + nbranch idle_page_fail,zero + call get_free_amaddr + store 1,mem_amaddr + storet 1,mem_lmo_opcode2 + fetch 6,mem_hci_plap + store 6,mem_plap + bpatch patch01_0,mem_patch01 + call timer_reinit + force 0,pdata + compare LMP_NAME_REQ,temp,0xff + nsetflag true,state_init_seq,pdata + set1 state_inpage,pdata + store 1,mem_state + jam BT_EVT_RECONN_STARTED,mem_fifo_temp + call ui_ipc_send_event + force 0,pdata + setflag true,smap_name_req,pdata + store 1,mem_state_map + setarg 0 + set1 mode_master,pdata + store 1,mem_mode + enable master + call context_save + disable master + force page_length_timer,queue + fetch 2,mem_page_to + call timer_init + branch idle_exit +idle_page_fail: + bpatch patch01_1,mem_patch01 + fetch 6,mem_hci_plap + store 6,mem_plap + compare LMP_NAME_REQ,temp,0xff + branch idle_name_fail,true + branch idle_exit +idle_name_fail: + arg mem_tmp_buffer,contw + arg 8,loopcnt + call memset0 + jam BT_EVT_RECONN_FAILED,mem_fifo_temp + call ui_ipc_send_event + branch idle_exit + + +/******************************************/ +/************** Inquiry *****************/ +/******************************************/ + +inquiry_dispatch: + rtnmark0 mark_inquiry_on + force inquiry_length_timer,queue + call timer_check + nsetflag blank,mark_inquiry_on,mark + nbranch inquiry_start,blank + rtn + + + +inquiry_start: + bpatch patch01_2,mem_patch01 + fetcht 2,mem_inq_window + force 4,queue + call sniff_check_window + rtn user + call afh_clear + force 0,freq_mode +inquiry_restart: + rtn timeout + set0 mark_fhs_already_good,mark + set0 mark_fhs_eir,mark +inquiry_rx_restart: + add clkn_bt,1,bt_clk + isolate1 mark_inquiry_trainb,mark + setflag true,2,freq_mode + compare 0x00,bt_clk,0x02 /* see if this is even slot */ + nbranch inquiry_receive,true + +inquiry_transmit: + bpatch patch01_3,mem_patch01 + fetch 1,mem_inquiry_transmit + increase 1,pdata + store 1,mem_inquiry_transmit + call fetch_giac + call tx_radio_freq + call fetch_diac + call start_transmitter /* get ready for that id packet */ + call start_tx_native + call send_access_word + call end_of_packet + call inquiry_check_train + branch inquiry_restart + +inquiry_check_train: + bpatch patch01_4,mem_patch01 + fetch 1,mem_nfreq_index_inq + increase -1,pdata + store 1,mem_nfreq_index_inq + rtn positive /* if it's time to incremnt N */ + jam 31,mem_nfreq_index_inq + fetch 1,mem_ninqy_index + increase -1,pdata + store 1,mem_ninqy_index + rtn positive /* if it's time to change train */ + setflip mark_inquiry_trainb,mark + jam param_ninquiry,mem_ninqy_index + rtn + +inquiry_receive: + bpatch patch01_5,mem_patch01 + call fetch_giac + call rx_radio_freq + call fetch_diac + call start_rx_native + call start_receiver /* get ready for that id packet */ + call wait_access_clkn_rt + branch inquiry_sync,sync /* try look for id packet again if not found */ + call inquiry_check_train + branch inquiry_rx_restart +inquiry_sync: + bpatch patch01_6,mem_patch01 + call save_rssi + call scan_mode_whiten + call receive_packet_whitened + set0 mark_rxbuf_inuse,mark + rtnmark0 mark_fhs_already_good +inquiry_receive_rtn: + bpatch patch01_7,mem_patch01 +inquiry_receive_eir_rtn: + fetch 1,mem_inquiry_rcv + increase 1,pdata + store 1,mem_inquiry_rcv + rtn + +/******************************************/ +/************** Master Dispatch *************/ +/******************************************/ + + + +master_page: + bpatch patch02_0,mem_patch02 + enable master + enable clknt + fetch 2,mem_page_interval + branch master_page_no_interval,blank + force page_interval_timer,queue + call timer_check + nrtn blank +master_page_no_interval: + bpatch patch02_1,mem_patch02 + fetcht 2,mem_page_window + force 40,queue + call sniff_check_window + branch page_exit,user + force page_length_timer,queue + call timer_check + nbranch page_start,blank + fetch 1,mem_state_map + bbit1 smap_name_req,master_npage_timeout + branch master_page_timeout +master_npage_timeout: + arg mem_tmp_buffer,contw + arg 8,loopcnt + call memset0 +master_page_timeout: + bpatch patch02_2,mem_patch02 + jam 0,mem_state + call init_lmp_work + jam 0,memui_reconnect_mode + jam BT_EVT_RECONN_PAGE_TIMEOUT,mem_fifo_temp + call ui_ipc_send_event + branch page_exit + +page_start: + bpatch patch02_3,mem_patch02 + force 0,timeup + until clkn_rt,meet + fetch 1,mem_page_clk + increase -1,pdata + ixor clkn_bt,pdata + compare 0,pdata,3 + nbranch page_start,true + deposit am_addr + store 1,mem_fhs_am_addr + force 0,N_tx_slot + force 0,freq_mode + +page_restart: + bpatch patch02_4,mem_patch02 + branch page_exit,timeout + call fetch_page_bt_adr + arg param_rf_setup, timeup + until clkn_rt,meet /* wait for the start_receiver time against native real clk */ +page_rx_restart: + bpatch patch02_5,mem_patch02 + fetch 4,mem_page_clk /* deposit clk_estimate */ + iforce bt_clk + increase 1,pdata + store 4,mem_page_clk + isolate1 mark_page_trainb,mark + setflag true,2,freq_mode + compare 0x00,bt_clk,0x02 /* see if this is even slot */ + nbranch page_receive,true + fetch 1, mem_page_transmit + increase 1,pdata + store 1, mem_page_transmit + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + call start_tx_native + call send_access_word + call end_of_packet + call page_check_train + branch page_restart +page_exit: + bpatch patch02_6,mem_patch02 + disable master + fetch 2,mem_page_interval + rtn blank + force page_interval_timer,queue + branch timer_init + +page_check_train: + bpatch patch02_7,mem_patch02 + fetch 1,mem_nfreq_index_page + increase -1,pdata + store 1,mem_nfreq_index_page + rtn positive + jam 31,mem_nfreq_index_page + fetch 1,mem_npage_index + increase -1,pdata /* increment N */ + store 1,mem_npage_index + rtn positive /* if it's time to change train */ + setflip mark_page_trainb,mark /* change train */ + fetch 1,mem_npage + store 1,mem_npage_index + rtn + +page_receive: + bpatch patch03_0,mem_patch03 + call rx_radio_freq + call start_rx_native + call start_receiver /* get ready for that id packet */ + call wait_access_clkn_rt /* try id look for id packet again */ + branch page_sync,sync /* restart if didn't receive anything */ + call page_check_train + branch page_rx_restart +page_sync: + call end_of_packet + fetch 1, mem_page_rcv + increase 1,pdata + store 1, mem_page_rcv + force 0,stop_watch + fetch 4,mem_page_clk +page_send_fhs: + bpatch patch03_1,mem_patch03 + call rf_setup_time_master_slot + call fetch_page_bt_adr + increase 1,N_tx_slot +page_send_fhs_continue: + and_into 0x1fd,bt_clk + and_into 0x1fc,freq_mode /* master response = x00, even_train settin must remain the same */ + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + call start_tx_native + call send_access_word + deposit clkn_bt + store 4,mem_clkn_bt + force 0,am_addr + force type_fhs,type + call scan_mode_whiten + call transmit_packet_whitened +page_wait_fhs_reply: + bpatch patch03_2,mem_patch03 + call rf_setup_time_slave_slot + or_into 0x02,bt_clk + and_into 0x1fc,freq_mode /* master response sequence = x00, even train setting must be preserved */ + call rx_radio_freq + call start_rx_native + call start_receiver /* get ready for that id packet */ + call wait_access_clkn_rt /* look for that reply */ + call end_of_packet,sync /* id reply is enough */ + branch page_wait_fhs_reply_ok,sync /* no reply then send fhs again */ + fetch 1,mem_fhs_wait_counter + branch page_restart,blank + increase -1,pdata + store 1,mem_fhs_wait_counter + branch page_send_fhs + +page_wait_fhs_reply_ok: + bpatch patch03_3,mem_patch03 + fetch 1, mem_page_rcv_fhs + increase 1,pdata + store 1, mem_page_rcv_fhs + call prepare_newconn +master_newconn_loop: + call master_newconn_once + branch newconn_poll_responded,sync + call new_conn_timeout + nbranch master_newconn_loop,blank + branch page_restart + +newconn_poll_responded: + bpatch patch03_4,mem_patch03 + fetch 1,mem_state + set0 state_inpage,pdata + store 1,mem_state + call newconn_init + disable master + rtn + + +master_dispatch: + bpatch patch03_5,mem_patch03 + enable master + enable clknt + call role_switch_master + rtn user + call check_bt_disabled + call rf_setup_time_master_slot + add clkn_bt,1,bt_clk + call fetch_self_bt_adr + force 0x03,freq_mode + call scheduler_tx_l2cap_pkt + call prepare_tx + call tx_radio_freq + call start_transmitter + call start_tx_native + call send_access_word + call transmit_packet +master_loop: + bpatch patch03_6,mem_patch03 + call parse_lmp + call master_conn_recv_packet + nbranch master_notmatch,match + call supervision_flush + call parse_l2cap + fetch 1,mem_master_rcvcnt + increase 1,pdata + store 1,mem_master_rcvcnt +master_notmatch: + bpatch patch03_7,mem_patch03 + call scheduler_process + call check_master_disconnect + nrtn master /* disconnected */ + call check_attempt + nbranch master_attempt,blank +master_exit: + disable master + rtn + +master_attempt: + call prepare_tx + call master_conn_send_packet + branch master_loop + + +check_master_disconnect: + branch check_master_match,match + call supervision_update + branch master_disconnect,positive +check_master_match: + call check_disconnect_timeout + nbranch master_disconnect,user + fetch 1,mem_state_map + rtnbit0 smap_name_req + rtnbit1 smap_name_res + fetch 1,mem_op + rtnbit1 op_disconn + call conn_timer_expired + nrtn blank + fetch 1,mem_nameres_cnt + increase -1,pdata + store 1,mem_nameres_cnt + nrtn blank + branch lmp_disconnect + +master_disconnect: + bpatch patch04_0,mem_patch04 + call quit_connection + disable master + fetch 1,mem_state_map + bbit1 smap_name_req,master_name_disconnect + rtn + +master_name_disconnect: + fetch 1,mem_state_map + rtnbit1 smap_name_res +master_name_error: + arg mem_tmp_buffer,contw + arg 8,loopcnt + branch memset0 + +check_disconnect_timeout: + bpatch patch04_1,mem_patch04 + enable user + fetch 1,mem_op + rtnbit0 op_disconn + call conn_timer_expired + nrtn blank + branch disable_user + +conn_timer_expired: + fetch 1,mem_conn_timer + increase -1,pdata + store 1,mem_conn_timer + rtn + +linkkey_ready: + bpatch patch04_2,mem_patch04 + fetch 1,mem_state + bbit1 state_linkkey,linkkey_set + fetch 1,mem_pairing_auth + branch linkkey_set,blank + jam DEFALT_PAIRING_AUTH,mem_pairing_auth + jam BT_EVT_LINKKEY_GENERATE,mem_fifo_temp + call ui_ipc_send_event + branch linkkey_set +linkkey_set: + bpatch patch04_3,mem_patch04 + call context_traverse_linkkey + fetch 1,mem_state + set1 state_linkkey,pdata + store 1,mem_state + jam 1,mem_link_key_exists + fetch 1,mem_conn_sm + bne CONN_SM_PAIRING,linkkey_set_continue +linkkey_set_continue: + rtn + +generate_linkkey_continue: + jam PAIRING_AUTH,mem_pairing_auth +clear_linkstate: + fetch 1,mem_state + set0 state_linkkey,pdata + store 1,mem_state + rtn + + + /* rtn user if switch */ +role_switch_check: + bpatch patch04_4,mem_patch04 + disable user + fetch 2,mem_tsniff + arg 0xffff,temp + isub temp,null + nrtn zero + fetch 4,mem_sniff_anchor + branch role_switch_clkn,clknt + isub clke_bt,pdata + branch role_switch_clke +role_switch_clkn: + isub clkn_bt,pdata +role_switch_clke: + sub pdata,4,null + nrtn positive + force 0,pdata + store 2,mem_tsniff + branch enable_user + + + /* pdata: switch instant, set tsniff=0 for special sniff */ +role_switch_prepare: + copy pdata,temp + bpatch patch04_5,mem_patch04 + storet 4,mem_sniff_anchor +role_switch_prepare0: + jam SWITCH_FLAG_ACCEPT,mem_switch_flag + setarg 0xffff + store 2,mem_tsniff + jam 1,mem_sniff_attempt + rtn + + +role_switch_master: + bpatch patch04_6,mem_patch04 + call role_switch_check + nrtn user + disable user + jam param_newconnto,mem_newconnto_counter + set0 mark_fhs_already_good,mark +roles_waitfhs_loop: + call rf_setup_time_master_slot + call master_recv_packet + bmark1 mark_fhs_already_good,roles_replyto_fhs + call new_conn_timeout + nbranch roles_waitfhs_loop,blank +role_switch_fail_master: + bpatch patch04_7,mem_patch04 + disable user + deposit clkn_bt + store 4,mem_next_btclk + enable clknt + enable master + jam BT_EVT_SWITCH_FAIL_MASTER,mem_fifo_temp + branch ui_ipc_send_event + +roles_replyto_fhs: + bpatch patch05_0,mem_patch05 + call rf_setup_time_slave_slot + arg type_id,type + call master_send_packet + disable clknt + disable master + call apply_switch_clke + call prepare_newconn +roles_newconns_loop: + bpatch patch05_1,mem_patch05 + call slave_newconn_once + branch roles_newconns_responded,match + call new_conn_timeout + nbranch roles_newconns_loop,blank + branch role_switch_fail_master +roles_newconns_responded: + fetch 1,mem_mode + set0 mode_master,pdata + store 1,mem_mode + call supervision_flush + call calc_clke_offset + enable user + jam BT_EVT_SWITCH_SUCCESS_MASTER,mem_fifo_temp + branch ui_ipc_send_event + + + + +context_load: + bpatch patch05_2,mem_patch05 + set1 mark_context,mark + deposit rega + store 2,mem_context_ptr + force context_size,loopcnt + arg mem_le_state,contw + add rega,coffset_mode,contr + ifetch 1,contr + copy rega,contr + bbit1 mode_le,memcpy + arg mem_state,contw + call memcpy + disable attempt + fetch 1,mem_amaddr + iforce am_addr + jam 1,mem_current_sniff_attempt + branch context_load_master,master + jam 1,mem_current_sniff_attempt +context_load_master: + fetch 1,mem_state + rtnbit0 state_insniff + fetch 1,mem_sniff_attempt + store 1,mem_current_sniff_attempt + fetch 1,mem_sniff_timeout + store 1,mem_current_sniff_timeout + rtn + +context_save: + bpatch patch05_3,mem_patch05 + fetch 2,mem_context_ptr + iforce contw + force context_size,loopcnt + arg mem_le_state,contr + branch memcpy,le + arg mem_state,contr + branch memcpy + + + +context_get_next: + arg context_num,loopcnt + fetcht 1,mem_current_context +context_get_next_loop: + increase 1,temp + compare context_num,temp,0xff + nbranch context_get_next_cont,true + arg 0,temp +context_get_next_cont: + storet 1,mem_current_context + mul32 temp,context_size,pdata + arg mem_context,rega + iadd rega,rega + ifetch 1,rega + bbit1 state_insniff,context_get_next_sniff + rtnbit1 state_inconn + rtnbit1 state_inpage +context_get_next_sniff: + loop context_get_next_loop + rtn + +context_new: + bpatch patch05_4,mem_patch05 + arg context_search_empty,regc + call context_search + nrtn zero // all occupied + deposit rega + store 2,mem_context_ptr + force 0,null + rtn + + //return zero if anyone's wack is 1. + //return nzero if all wack is 0 +context_check_all_wack: + call check_esco_amaddr + branch context_check_esco_wack,true + fetch 2,mem_context_ptr + add pdata,coffset_arq,contw + fetch 1,mem_arq + istore 1,contw + arg context_check_a_wack,regc + branch context_search + +context_check_esco_wack: + fetch 1,mem_arq + isolate1 wack,pdata + branch context_esco_wack,true + force 1,null + rtn +context_esco_wack: + force 0,null + rtn + + //rtn nzero if idle(no conn) +context_check_idle: + arg context_check_inconn,regc + branch context_search + +context_traverse_linkkey: + fetcht 2,mem_context_ptr + arg context_traverse_clearkey,regc + branch context_search + + + /* return zero if conn handle is found */ +context_search_conn_handle: + fetcht 1,mem_hci_conn_handle +context_search_conn_handle2: + arg context_search_handle,regc + branch context_search + /* return zero if plap is found */ +context_search_plap: + bpatch patch05_5,mem_patch05 + fetcht 6,mem_hci_plap +context_search_plap2: + arg context_search_lap,regc + branch context_search + /* return zero if sniff anchor is meet and rega pointers to context */ +context_search_insniff: + arg context_search_sniff,regc + branch context_search + /* return zero if sniff window is in content with current transaction */ +context_search_sniff_window: + arg context_search_window,regc +context_search: + bpatch patch05_6,mem_patch05 + arg mem_context,rega + arg context_num,loopcnt +context_search_loop: + ifetch 1,rega + copy regc,pc +context_search_next: + increase context_size,rega + loop context_search_loop + force 1,null + rtn + +context_search_empty: + bbit1 state_inconn,context_search_next + bbit1 state_inpage,context_search_next + force 0,null + rtn + +context_search_lap: + bbit1 state_inpage,context_search_lap_cont + bbit0 state_inconn,context_search_next +context_search_lap_cont: + add rega,coffset_plap,contr + ifetch 6,contr + isub temp,null + rtn zero + branch context_search_next + +context_search_handle: + bbit0 state_inconn,context_search_next + add rega,coffset_conn_handle,contr + ifetch 1,contr + isub temp,null + rtn zero + branch context_search_next + +context_search_sniff: + bbit0 state_insniff,context_search_next +context_search_sniff_loop: + call context_get_anchor + call sign_pdata_temp + isub temp,pdata + increase 1,pdata + branch context_search_sniff_miss,positive + copy contr,regb + store 9,mem_temp + fetch 1,mem_le_sc_calc + nbranch context_search_sniff_sc,blank + fetch 9,mem_temp + copy regb,contr + increase 5,pdata + branch context_search_meet1 +context_search_sniff_sc: + fetch 9,mem_temp + copy regb,contr + increase 20,pdata +context_search_meet1: + nbranch context_search_next,positive +context_search_meet: + copy temp,bt_clk + call context_next_anchor + force 0,null + rtn + + +context_search_sniff_miss: + iforce regb + add rega,coffset_tsniff,contr + ifetch 2,contr + branch context_search_meet,blank + call context_next_anchor + branch context_search_sniff_loop + +sign_pdata_temp: + rshift16 pdata,timeup + rshift8 timeup,timeup + branch sign_pdata_temp_p0,zero + compare 0xf,timeup,0xf + nrtn true + rshift16 temp,timeup + rshift8 timeup,timeup + nrtn zero + set1 28,temp + rtn +sign_pdata_temp_p0: + rshift16 temp,timeup + rshift8 timeup,timeup + compare 0xf,timeup,0xf + nrtn true + set1 28,pdata + rtn + +context_check_inconn: + bbit0 state_inconn,context_search_next + force 0,null // found + rtn + +context_check_a_wack: + bbit0 state_inconn,context_search_next + add rega,coffset_mode,contr + ifetch 1,contr + bbit1 mode_le,context_search_next + add rega,coffset_arq,contr + ifetch 1,contr + bbit0 wack,context_search_next + force 0,null // found + rtn + +context_get_anchor: + add rega,coffset_mode,contr + ifetcht 1,contr + deposit clkn_bt + isolate1 mode_master,temp + add rega,coffset_sniff_anchor,contr + ifetcht 4,contr + rtn true + add rega,coffset_clk_offset,contr + ifetch 6,contr + call calc_clke2 + deposit clke_bt + rtn + +context_next_anchor: + add rega,coffset_tsniff,contr + add rega,coffset_sniff_anchor,contw + ifetch 2,contr + iadd temp,timeup /* wrap to 28 bits */ + deposit timeup + istore 4,contw + branch le_context_nexthop + + +context_search_window: + bbit0 state_insniff,context_search_next + call context_get_anchor + iadd stop_watch,pdata + iadd stop_watch,pdata + iadd queue,pdata + isub temp,null + nbranch context_search_next,positive + force 0,null + rtn + +context_traverse_clearkey: + bbit0 state_inconn,context_search_next + deposit temp + isub rega,null + branch context_search_next,null + add rega,coffset_mode,contr + ifetch 1,contr + bbit1 mode_le,context_search_next + ifetch 1,rega + set0 state_linkkey,pdata + istore 1,rega + branch context_search_next + + +master_conn_send_packet: + bpatch patch05_7,mem_patch05 + call rf_setup_time_master_slot +master_send_packet: + add clkn_bt,1,bt_clk /* master start to use native clock */ + call fetch_self_bt_adr + force 0x03,freq_mode /* we are in connection!! */ + call tx_radio_freq + call start_transmitter + call start_tx_native + call send_access_word + branch transmit_packet + +master_conn_recv_packet: + bpatch patch06_0,mem_patch06 + call rf_setup_time_slave_slot +master_recv_packet: + add clkn_bt,1,bt_clk /* master start to use native clock */ + call fetch_self_bt_adr + force 0x03,freq_mode /* we are in connection!! */ + call rx_radio_freq + call init_rx_packet_flags + call prep_crypt + call start_rx_native /* start listening at start_rx time */ + call start_receiver +master_rx_conn_finish_packet: + call wait_access_clkn_rt /* master use native clock */ + nrtn sync + call save_rssi + branch receive_packet + + + +master_newconn_once: + bpatch patch06_1,mem_patch06 + fetch 1,mem_fhs_am_addr + iforce am_addr //review + force type_poll,type + call master_conn_send_packet + branch master_conn_recv_packet + + + + + + +/******************************************/ +/************* Inquiry Scan ***************/ +/******************************************/ + +inquiry_scan_dispatch: + fetch 1,mem_scan_mode + rtnbit0 inq_scan_mode + force iscan_interval_timer,queue + call timer_check + nrtn blank + fetcht 2,mem_iscan_window + force 4,queue + call sniff_check_window + rtn user + call inquiry_scan_start + force iscan_interval_timer,queue + fetch 2,mem_iscan_interval + nbranch timer_init,sync + random pdata /* inquiry scan backoff */ + iand mask3ff,pdata + branch timer_init + + +inquiry_scan_start: + bpatch patch06_2,mem_patch06 + jam 0,mem_fhs_am_addr + disable clknt + disable attempt + call afh_clear + and clkn_bt,0x1fc,bt_clk /* freeze the clock, set bit[1] 0, this is version 1.1 */ + force 0x01,freq_mode /* slave in inquiry scan, kind of same as inquriy_response, this is version 1.1 */ + call fetch_giac + call rx_radio_freq + setflip mark_inquiry_state,mark + fetch 1,mem_inquiryscan_waitcnt + increase 1,pdata + store 1,mem_inquiryscan_waitcnt + call fetch_diac + call start_receiver /* get ready for that id packet */ + call wait_access_forever /* until there is timeout, or matched (true) */ + nrtn sync + bpatch patch06_3,mem_patch06 + force 0,stop_watch + call shutdown_radio /* must have heard */ + fetch 1,mem_inquiryscan_rcvcnt + increase 1,pdata + store 1,mem_inquiryscan_rcvcnt + call fetch_giac + call rf_setup_time_slave_slot + or_into 0x002,bt_clk /* put clk(1) to 1 */ + force 0x01,freq_mode /* slave in inquriy and page, response only */ + call tx_radio_freq + call fetch_diac + call start_transmitter /* get ready for that id packet */ + call start_tx_external + deposit clkn_bt + store 4,mem_clkn_bt + call send_access_word + force type_fhs,type + force 0,am_addr /* put 0 into am_addr field for fhs */ + call scan_mode_whiten + call transmit_packet_whitened + call send_eir + and_into 0x1fd,bt_clk /* put clk(1) back to 0 */ + increase 1,N_tx_slot + rtn + +send_eir: + bpatch patch06_4,mem_patch06 + fetch 1,mem_eir_enable + rtn blank + arg mem_eir,contw + fetch 1,mem_local_name_length + copy pdata,loopcnt + increase 1,pdata + istore 1,contw + copy contw,temp + increase 1,pdata + store 2,mem_tx_len + copy temp,contw + setarg 0x09 //type:name + istore 1,contw + arg mem_local_name,contr + call memcpy //name + + arg mem_all_uuid_128bits,regc + arg 4,loopcnt + call get_all_uuid + arg mem_all_uuid_16bits,regc + arg 1,loopcnt + call get_all_uuid + + force type_dm3,type /* DM3 */ + jam 2,mem_tx_lch + setarg mem_eir + store 2,mem_txptr + call rf_setup_time_slave_slot + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + call start_tx_external + call send_access_word + call scan_mode_whiten + call transmit_packet_whitened + rtn + + +get_all_uuid: + copy contw,temp + copy regc,contr + ifetch 1,contr + rtn blank +lshift_loop: + lshift pdata,pdata + loop lshift_loop + copy pdata,rega + increase 2,pdata + copy pdata,queue + fetch 2,mem_tx_len + iadd queue,pdata + store 2,mem_tx_len + copy temp,contw + copy rega,pdata + increase 1,pdata + istore 1,contw + copy regc,contr + ifetch 1,contr + ifetch 1,contr //fetch type + istore 1,contw + copy rega,loopcnt + branch memcpy //copy uuid + +/******************************************/ +/******** Slave dispatch ***********/ +/******************************************/ + +page_scan_dispatch: + fetch 1,mem_scan_mode + rtnbit0 page_scan_mode + force pscan_interval_timer,queue + call timer_check + nrtn blank + fetcht 2,mem_pscan_window + force 40,queue + call sniff_check_window + rtn user + force 0,am_addr + jam param_pagerespto,mem_fhs_wait_counter + set0 mark_fhs_already_good,mark + call page_scan_start + force pscan_interval_timer,queue + fetch 2,mem_pscan_interval + branch timer_init + + +page_scan_start: + bpatch patch06_5,mem_patch06 + disable clknt + call afh_clear + fetch 1,mem_pagescan_waitcnt + increase 1,pdata + store 1,mem_pagescan_waitcnt + force 0,N_tx_slot + call fetch_self_bt_adr + add clkn_bt,1,bt_clk /* freeze the clock on native clock until scan window is up */ + force 0x02, freq_mode /* slave in inquiry and page, not response */ + bpatch patch06_6,mem_patch06 + call rx_radio_freq + call start_receiver /* wait for that id packet from master */ + call wait_access_forever + nrtn sync /* pscan window timeout occured, back to dispatch */ + call shutdown_radio /* got the id packet */ + fetch 1,mem_pagescan_rcvcnt + increase 1,pdata + store 1,mem_pagescan_rcvcnt + force 0,stop_watch + call rf_setup_time_slave_slot + or_into 0x002,bt_clk /* put clk(1) to 1 */ + force 0x01,freq_mode /* slave in inquriy and page, response only */ + call tx_radio_freq + call start_transmitter + call start_tx_external + call send_access_word + call end_of_packet + force 0,am_addr + arg param_rf_setup, timeup + until clke_rt,meet + or_into 0x03,clke_bt + and_into 0x1fd,bt_clk +page_scan_wait_fhs_restart: + bpatch patch06_7,mem_patch06 + increase 1,N_tx_slot + call rx_radio_freq + call start_receiver + call wait_access_mhalfbnd + nbranch page_scan_wait_fhs_again,sync /* go back if didn't find access code */ + call scan_mode_whiten + call receive_packet_whitened + bmark1 mark_fhs_already_good,page_scan_reply_to_fhs +page_scan_wait_fhs_again: + bpatch patch07_0,mem_patch07 + fetch 1,mem_fhs_wait_counter + rtn blank + increase -1,pdata + store 1,mem_fhs_wait_counter + call rf_setup_time_master_slot /* set up expiration time */ + branch page_scan_wait_fhs_restart + + +page_scan_reply_to_fhs: + bpatch patch07_1,mem_patch07 + set0 1,clke_bt + set1 0,clke_bt + fetch 1,mem_pagescan_rcvfhscnt + increase 1,pdata + store 1,mem_pagescan_rcvfhscnt + call rf_setup_time_slave_slot + or_into 0x02,bt_clk + call tx_radio_freq + call start_transmitter + call start_tx_external + call send_access_word + call end_of_packet +slave_apply_clke_bt: + compare 0x03,clke_bt,0x03 + branch slave_apply_clke_bt_now,true + until null,mhalfbnd + branch slave_apply_clke_bt +slave_apply_clke_bt_now: + fetch 4,mem_clke_bt + or_into 0x03,pdata + icopy clke_bt + +start_slave_connection: + bpatch patch07_2,mem_patch07 + fetch 6,extm_lap + store 6,mem_plap + call prepare_newconn +slave_newconn_loop: + call slave_newconn_once + branch sconn_successful,match /* we were talked to */ + call new_conn_timeout + nbranch slave_newconn_loop,blank + rtn + + +sconn_successful: + bpatch patch07_3,mem_patch07 + call newconn_init + call context_new + nrtn zero + jam 0,mem_mode + call calc_clke_offset + branch context_save + + + + +slave_dispatch: + bpatch patch07_4,mem_patch07 + call calc_clke + call role_switch_slave + rtn user +slave_loop: + bpatch patch07_5,mem_patch07 + call check_bt_disabled + call scheduler_process + call slave_conn_recv_packet /* go listen for a packet */ + nbranch slave_notmatch,match + call supervision_flush + call scheduler_tx_l2cap_pkt + call prepare_tx + call slave_conn_send_packet + call parse_l2cap + call parse_lmp + fetch 1,mem_slave_rcvcnt + increase 1,pdata + store 1,mem_slave_rcvcnt + call calc_clke_offset +slave_notmatch: + bpatch patch07_6,mem_patch07 + call lpm_set_mult + call supervision_update + branch slave_disconnect,positive + call check_disconnect_timeout + nbranch slave_disconnect,user + call check_attempt + nbranch slave_loop,blank + rtn + +slave_disconnect: + bpatch patch07_7,mem_patch07 + jam 0,mem_tester_emulate + jam 0,mem_debug_config + call quit_connection + set0 mark_testmode,mark + call test_enable_white + fetch 1,mem_state + rtn + + +role_switch_slave: + bpatch patch08_0,mem_patch08 + call role_switch_check + nrtn user + copy am_addr,temp + call get_free_amaddr + store 1,mem_fhs_am_addr + copy temp,am_addr + jam param_newconnto,mem_newconnto_counter +roles_sendfhs_loop: + bpatch patch08_1,mem_patch08 + call rf_setup_time_master_slot + force type_fhs,type + call slave_send_access + deposit clkn_bt + store 4,mem_clkn_bt + call transmit_packet + call rf_setup_time_slave_slot + enable user3 + call slave_receive_access + branch roles_got_fhs_reply,sync + call shutdown_radio + call new_conn_timeout + nbranch roles_sendfhs_loop,blank + rtnmark0 mark_accept_switch + jam LMP_SLOT_OFFSET,mem_lmo_opcode2 + set1 mark_switch_initiated,mark + rtn +roles_got_fhs_reply: + enable clknt + call prepare_newconn + call afh_clear +roles_newconn_loop: + bpatch patch08_2,mem_patch08 + call master_newconn_once + branch roles_newconn_responded,sync + call new_conn_timeout + nbranch roles_newconn_loop,blank + disable clknt + deposit clke_bt + store 4,mem_next_btclk + rtn +roles_newconn_responded: + enable master + bmark0 mark_accept_switch,roles_newconn_nolmp + set0 mark_accept_switch,mark + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_HOST_CONNECTION_REQ,mem_lmi_opcode2 + call tid_set_reply +roles_newconn_nolmp: + deposit am_addr + store 1,mem_amaddr + force 0,pdata + store 6,mem_clk_offset + fetch 1,mem_mode + set1 mode_master,pdata + store 1,mem_mode + call supervision_flush + disable master + enable user + rtn + + + +init_rx_packet_flags: + bpatch patch08_3,mem_patch08 + disable match + set0 mark_loopback,mark + set0 mark_am_addr_broadcast,mark /* initialize slave flags */ + set0 mark_longpacket,mark + set0 mark_old_packet,mark + fetch 1,mem_arq /* mem_arq + am_addr */ + set0 arqnx,pdata + set1 flowx,pdata + store 1,mem_arq + rtn + +prepare_newconn: + bpatch patch08_4,mem_patch08 + jam param_newconnto,mem_newconnto_counter + jam param_newconn_arq,mem_arq + fetch 2,mem_rx_window_init + store 2,mem_rx_window + deposit clkn_bt + store 4,mem_next_btclk + rtn clknt + deposit clke_bt + store 4,mem_next_btclk + rtn + +newconn_init: + bpatch patch08_5,mem_patch08 + call init_lmp_reinit + call new_conn_handle + store 1,mem_conn_handle + setarg 0 + store 2,mem_l2cap_rxbuff1_len + setarg param_supervision_to + store 2,mem_supervision_to + fetch 1,mem_state + set1 state_inconn,pdata + store 1,mem_state + jam 0,mem_op + jam 0,mem_state_map + jam 0,mem_lpm_current_mult + branch supervision_flush + + +clear_linkkey: + bpatch patch08_6,mem_patch08 + force 0,pdata + store 8,mem_link_key + istore 8,contw + call clear_linkstate + branch context_traverse_linkkey + +new_conn_timeout: + fetch 1,mem_newconnto_counter + increase -1,pdata + store 1,mem_newconnto_counter + rtn + +new_conn_handle: + fetch 1,mem_handle_num + increase 1,pdata + store 1,mem_handle_num + rtn + + +quit_connection: + bpatch patch08_7,mem_patch08 + fetch 1,mem_hci_cmd + beq hci_cmd_remote_name_req,quit_connection_name + fetch 1,mem_lmp_to_send + bne LMP_NAME_REQ,quit_connection_cont +quit_connection_name: + call cmd_check_plap + nbranch quit_connection_cont,zero + call master_name_error + jam 0,mem_hci_cmd +quit_connection_cont: + bpatch patch09_0,mem_patch09 + call app_disconn_reason_collect_bt + call sniff_exit + jam BT_EVT_BB_DISCONNECTED,mem_fifo_temp + call ui_ipc_send_event + call init_lmp_work + call l2cap_init_work +ifdef SIMPLE_PAIRING + call sp_initialize +endif + fetch 1,mem_state + set0 state_inconn + store 1,mem_state + jam 0,memui_reconnect_mode + + fetch 1,mem_state_map + compare 0x0,pdata,0xc0 + branch quit_connection_not_clear_mark,true + set0 mark_rxbuf_inuse,mark +quit_connection_not_clear_mark: + fetch 1,mem_arq + bbit0 wack,quit_connection_not_clear_tx +quit_connection_not_clear_tx: + fetch 1,mem_op + rtnbit0 op_txl2cap + set0 mark_tx_l2cap,mark + rtn + +slave_newconn_once: + bpatch patch09_1,mem_patch09 + fetch 1,extm_newconn_am_addr + rtn blank + icopy am_addr + call slave_conn_recv_packet + nrtn match + force type_null,type + call slave_conn_send_packet + deposit am_addr + store 1,mem_amaddr /* now the new am_addr is official */ + force 0,pdata + store 1,extm_newconn_am_addr + rtn + + +/******************************************/ +/******** Time consuming task ***********/ +/******************************************/ +prepare_tx: + bpatch patch09_2,mem_patch09 + fetch 1,mem_state + bbit0 state_insco,prepare_tx_not_sco + force type_hv3,type + bmark0 mark_esco,prepare_tx_not_esco + call check_esco_amaddr + nbranch prepare_tx_not_sco,true + branch prepare_tx_not_sco,attempt + call set_wait_ack /* send esco only at the first attempt */ + setarg 2 /* esco only has 1 retry */ + store 2,mem_retransmission_cnt + rtn +prepare_tx_not_esco: + nrtn attempt /* send sco only at the first attempt */ +prepare_tx_not_sco: + bpatch patch09_3,mem_patch09 + call context_check_all_wack //abandon mark_retransmit, use context_check_all_wack instead. + nbranch prepare_tx_no_retransmit,zero + fetch 1,mem_arq + bbit0 wack,prepare_tx_pollnull /* other wack, tx buffer in use, but not me */ +prepare_tx_retransmit: + bmark1 mark_loopback,prepare_tx_loopback + fetch 1,mem_debug_config + bbit1 debug_tx_pattern,prepare_tx_txpat + fetch 2,mem_retransmission_cnt + increase -1,pdata + store 2,mem_retransmission_cnt + branch prepare_tx_nomore_retransmit,blank + fetch 1,mem_last_type + iforce type + rtn + +prepare_tx_nomore_retransmit: + bpatch patch09_4,mem_patch09 + call clear_got_tx +prepare_tx_no_retransmit: + call check_esco_amaddr + branch prepare_tx_pollnull,true + call send_lmp + branch prepare_tx_sendlmp,user + fetch 1,mem_op + bbit1 op_txl2cap,prepare_tx_sendl2cap + bmark1 mark_loopback,prepare_tx_loopback + fetch 1,mem_debug_config + bbit1 debug_tx_pattern,prepare_tx_txpat +prepare_tx_pollnull: + force type_poll,type /* POLL for master */ + rtn master + force type_null,type /* default is NULL */ + rtn +prepare_tx_loopback: + bpatch patch09_5,mem_patch09 + fetch 1,mem_rx_type + iforce type + rtnne 1 + force type_null,type + rtn +prepare_tx_txpat: + fetch 1,test_mode_packet_type + and pdata,0xf,type + set1 mark_loopback,mark + rtn +prepare_tx_sendlmp: + force type_lmp,type + branch set_wait_ack +prepare_tx_sendl2cap: + call tx_l2cap_type + +set_wait_ack: + bpatch patch09_6,mem_patch09 + fetcht 1,mem_arq + set1 wack,temp + storet 1,mem_arq + deposit type + store 1,mem_last_type + setarg 0xffff + store 2,mem_retransmission_cnt + rtn + +tx_l2cap_type: + bpatch patch09_7,mem_patch09 + fetch 1,mem_state_map + isolate1 smap_edr,pdata + fetch 2,mem_tx_len + branch tx_l2cap_type_edr,true + force type_dm1,type /* DM1 */ + sub pdata,17,null + rtn positive + force type_dh1,type /* DH1 */ + sub pdata,27,null + rtn positive + force type_dm3,type /* DM3 */ + sub pdata,121,null + rtn positive + force type_dh3,type /* DH3 */ + sub pdata,183,null + rtn positive + force type_dm5,type /* DM5 */ + sub pdata,224,null + rtn positive + force type_dh5,type /* DH5 */ + rtn +tx_l2cap_type_edr: + force type_dm1,type + sub pdata,17,null + rtn positive + force type_dh1,type /*2-DH1*/ + sub pdata,54,null + rtn positive + force type_dm3,type /*2-DH3*/ + arg 367,temp + isub temp,null + nrtn positive + force type_dm5,type /*2-DH5*/ + arg 679,temp + isub temp,null + nrtn positive + force type_dh5,type /*3-DH5*/ + rtn + + +/******************************************/ +/*********** Receive Packet *************/ +/******************************************/ + + + +slave_receive_master_slot: + fetch 1,mem_state + bbit0 state_insniff,slave_receive_notsniff + fetch 2,mem_tsniff + branch slave_receive_notsniff,blank /* role switch */ + nbranch slave_receive_sniff,attempt +slave_receive_notsniff: + call rf_setup_time_master_slot +slave_receive_access: + add clke_bt,1,bt_clk +slave_receive_sniff: + enable swfine + fetch 2,mem_rx_window + rshift pdata,pdata + arg param_pll_setup,temp + iadd temp,pdata + call ahead_window + call fetch_extm_bt_adr + force 0x03,freq_mode /* connection hop */ + call rx_radio_freq + call init_rx_packet_flags + call prep_crypt + bpatch patch0a_0,mem_patch0a + fetch 2,mem_rx_window + rshift pdata,pdata + call ahead_window + call start_receiver + enable decode_fec0 + fetch 2,mem_rx_window + arg param_clke_cal,temp + iadd temp,stop_watch + correlate null,timeout + copy clke,temp + storet 6,mem_sync_clke + disable decode_fec0 + nrtn sync + arg param_clke_cal,clke_rt + copy bt_clk,clke_bt + branch lpm_adjust_clk,wake + rtn + + +slave_conn_recv_packet: + bpatch patch0a_1,mem_patch0a + call slave_receive_master_slot + nbranch shutdown_radio,sync + call save_rssi + bmark0 mark_testmode,receive_packet + fetch 2,mem_tst_pktcnt_sync + increase 1,pdata + store 2,mem_tst_pktcnt_sync +receive_packet: + rshift bt_clk,temp + or temp,0x40,white_init +receive_packet_whitened: + bpatch patch0a_2,mem_patch0a + enable enable_white + enable enable_hec + enable decode_fec1 + parse demod,bucket,3 /* get am_addr */ + rshift8 pwindow,pdata + store 1,mem_temp_am_addr + parse demod,bucket,4 /* get type */ + inject bucket,7 /* align up to pwindow */ + copy pwindow,pdata + store 1,mem_rx_type + parse demod,bucket,3 /* get arq */ + rshift8 pwindow,pdata + store 1,mem_temp_arq + fetch 1,mem_rx_type + sub pdata,3,null + branch receive_packet_noedr,positive + beq 7,receive_packet_noedr /* esco packet */ + fetch 1,mem_state_map + isolate1 smap_edr,pdata + setflag true,PSK,radio_ctrl +receive_packet_noedr: + bpatch patch0a_3,mem_patch0a + parse demod,bucket,8 /* cycle thru hec */ + disable decode_fec1 + disable enable_hec /* at this moment, 1 seqn + 8 hec is in shift */ + branch error_header,crc_failed /* if hec error, nothing is valid */ + bmark0 mark_testmode,receive_packet_amchk + fetch 2,mem_tst_pktcnt_hec + increase 1,pdata + store 2,mem_tst_pktcnt_hec +receive_packet_amchk: + bpatch patch0a_4,mem_patch0a + fetch 1,mem_temp_am_addr + compare 0,pdata,0x07 /* check for broadcast */ + setflag true,mark_am_addr_broadcast,mark /* received a broadcast message, can fire ar_addr if during unpark_req */ + branch am_addr_ok,true + icompare 0x07,am_addr + branch am_addr_match,true + bmark0 mark_esco,end_of_packet + fetcht 1,mem_saved_amaddr + icompare 0x7,temp + nbranch end_of_packet,true + fetch 1,mem_arq /* mem_arq + am_addr */ + set0 arqnx,pdata + set1 flowx,pdata + store 1,mem_arq +am_addr_match: + enable match +am_addr_ok: + bpatch patch0a_5,mem_patch0a + fetch 1,mem_rx_type + icopy type + bmark1 mark_am_addr_broadcast,arqn_bypass /* arqn doesn't make sense */ + fetcht 1,mem_temp_arq + fetch 1,mem_arq + set0 flow,pdata + isolate1 flow,temp + setflag true,flow,pdata + isolate1 arqn,temp + setflag true,arqn,pdata + store 1,mem_arq + isolate0 arqn,temp + branch arqn_bypass,true + call clear_got_tx +arqn_bypass: + bpatch patch0a_6,mem_patch0a + arg 0,temp + call reserve_slot + and type,0xf,pdata + beq type_poll,process_poll + beq type_null,end_of_packet /* null */ + beq type_fhs,process_fhs + fetcht 1,mem_temp_arq + fetch 1,mem_arq + icompare 0x04,temp /* bit 2 is seqn */ + nbranch rx_type_dispatch,true /* different then it's new */ + bmark0 mark_am_addr_broadcast,failed_seqn /* seqn failed, and not broadcast */ + bbit0 bcast1,rx_type_dispatch /* first broadcast never fail seqn */ +failed_seqn: + set1 mark_old_packet,mark +rx_type_dispatch: + bpatch patch0a_7,mem_patch0a + deposit type + beq type_dm1, process_dm1 + beq type_dh1, process_dh1 + beq type_hv3, process_hev + beq type_3dh1, process_3dh1 + arg 4,temp + call reserve_slot + beq type_dm3, process_dm3 + beq type_dh3, process_dh3 + arg 8,temp + call reserve_slot + beq type_dm5, process_dm5 + beq type_dh5, process_dh5 + rtn + + +process_hev: + bpatch patch0b_0,mem_patch0b + enable decode_fec0 + enable enable_crc + enable encrypt + arg mem_sco_ibuf,contw + force 30,loopcnt +process_hev_loop: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop process_hev_loop + bmark0 mark_esco,end_of_packet + parse demod,bucket,16 /* cycle through the crc */ + nsetflag crc_failed,mark_esco_rxok,mark + branch error_payload,crc_failed + branch ack_payload + + +process_poll: + branch end_of_packet + +process_dm3: +process_dm5: + set1 mark_longpacket,mark +process_dm1: + enable decode_fec2 + branch process_dmh + +process_dh3: +process_dh5: + set1 mark_longpacket,mark +process_3dh1: + set1 PSK3M,radio_ctrl +process_dh1: + enable decode_fec0 +process_dmh: + bpatch patch0b_1,mem_patch0b + bmark1 mark_rxbuf_inuse,end_of_packet /* buffer in use, nack */ + isolate0 PSK,radio_ctrl + branch process_dmh_noedr,true + disable enable_white + enable decode_fec0 + disable decode_fec2 + add clkn_bt,2,timeup + correlate clkn_bt,meet + nbranch error_payload,sync + set1 mark_longpacket,mark + enable enable_white +process_dmh_noedr: + bpatch patch0b_2,mem_patch0b + enable encrypt + enable enable_crc + parse demod,bucket,3 /* parse in lch+l2cap flow */ + rshift8 pwindow,pdata + store 1,mem_lch_code /* for loopback */ + parse demod,bucket,5 /* parse in 5 bit packetlength */ + bmark1 mark_longpacket,process_dmh_long + rshift3 pwindow,loopcnt + rshift3 loopcnt,loopcnt + branch process_dmh_common +process_dmh_long: + parse demod,bucket,5 /* multi slot packet length of dh3 dh5 dm3 dm5 */ + rshift pwindow,loopcnt + parse demod,bucket,3 /* undefined+bit 9 of length */ +process_dmh_common: + bpatch patch0b_3,mem_patch0b + deposit loopcnt + store 2,mem_len + branch process_dmh_data_end,blank + isub mask3ff,null + branch error_payload,positive /* packet too large, discard */ + bpatch patch0b_4,mem_patch0b + set0 mark_fhs_eir,mark + fetch 1,mem_lch_code + and_into 0x03,pdata + arg mem_rxbuf,contw //lmp_data or test packet + beq LLID_LMP,process_lmp + bmark1 mark_testmode,process_dmh_data + //non-HCI mode + fetch 1,mem_lch_code + and_into 0x03,pdata + beq LLID_L2CAP_START,process_dmh_data_l2cap_start_pkt + beq LLID_L2CAP_CONT,process_dmh_data_l2cap_continue_pkt + branch error_payload + +process_lmp: + fetch 2,mem_len + sub pdata,0x70,null //lmp buffer size + nbranch error_payload,positive + bmark1 mark_old_packet,ack_payload + branch process_dmh_data + + +process_dmh_data_l2cap_start_pkt: + bpatch patch0b_5,mem_patch0b + bmark1 mark_old_packet,ack_payload + fetch 2,mem_len + arg 0x2e0,temp //l2cap buffer size + isub temp,null + branch error_payload,positive + fetch 1,mem_l2cap_rxbuff_inuse + bbit0 L2CAP_INUSE_BUFF1,process_dmh_data_into_buff1 + bbit0 L2CAP_INUSE_BUFF2,process_dmh_data_into_buff2 + branch end_of_packet +process_dmh_data_into_buff1: + jam 1,mem_l2cap_rxbuff_new //new data in buff 1 + fetch 2,mem_l2cap_rxbuff1_len + bne 0,end_of_packet //baseband head error + arg mem_l2cap_rxbuff1,contw + branch process_dmh_data +process_dmh_data_into_buff2: + jam 2,mem_l2cap_rxbuff_new //new data in buff 2 + fetch 2,mem_l2cap_rxbuff2_len + bne 0,end_of_packet + arg mem_l2cap_rxbuff2,contw + branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt: + bpatch patch0b_6,mem_patch0b + bmark1 mark_old_packet,ack_payload + fetch 2,mem_len + arg 0x2e0,temp //l2cap buffer size + isub temp,null + branch error_payload,positive + fetch 1,mem_l2cap_rxbuff_new + beq 1,process_dmh_data_l2cap_continue_pkt1 + beq 2,process_dmh_data_l2cap_continue_pkt2 + branch end_of_packet +process_dmh_data_l2cap_continue_pkt1: + arg mem_l2cap_rxbuff1,contw + fetch 2,mem_l2cap_rxbuff1_len + iadd contw,contw + branch process_dmh_data +process_dmh_data_l2cap_continue_pkt2: + arg mem_l2cap_rxbuff2,contw + fetch 2,mem_l2cap_rxbuff2_len + iadd contw,contw +process_dmh_data: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop process_dmh_data +process_dmh_data_end: + bpatch patch0b_7,mem_patch0b + parse demod,bucket,16 /* cycle through the crc */ + branch error_payload_crc,crc_failed + fetch 1,mem_l2cap_flow_ctrl_flag + beq L2CAP_FLOW_CTRL_ENABLE,end_of_packet + bmark1 mark_testmode,process_dmh_cont + bmark1 mark_old_packet,redundant_payload + fetch 1,mem_lch_code + compare 3,pdata,3 + branch process_dmh_cont,true + fetch 2,mem_len + branch process_dmh_cont,blank + bpatch patch0c_0,mem_patch0c + fetch 1,mem_l2cap_rxbuff_new + beq 1,process_l2cap_pass_crc_buff1 + beq 2,process_l2cap_pass_crc_buff2 + branch assert +process_l2cap_pass_crc_buff1: + fetch 2,mem_l2cap_rxbuff1_len + fetcht 2,mem_len + iadd temp,pdata + store 2,mem_l2cap_rxbuff1_len + beq 0,assert + fetcht 2,mem_l2cap_rxbuff1// l2cap payload length + increase 4,temp + isub temp,null + call l2cap_buff1_inuse,zero //l2cap pkts not ended + branch process_dmh_cont +process_l2cap_pass_crc_buff2: + fetch 2,mem_l2cap_rxbuff2_len + fetcht 2,mem_len + iadd temp,pdata + store 2,mem_l2cap_rxbuff2_len + beq 0,assert + fetcht 2,mem_l2cap_rxbuff2// l2cap payload length + add temp,4,temp + isub temp,null + call l2cap_buff2_inuse,zero //l2cap pkts not ended + branch process_dmh_cont +process_dmh_cont: + bpatch patch0c_1,mem_patch0c + fetcht 1,mem_state_map + fetch 1,mem_lch_code + compare 3,pdata,0x03 + setflag true,smap_rxlmp,temp + nsetflag true,smap_rxl2cap,temp + storet 1,mem_state_map + nbranch process_dmh_cont_rxbuf_not_use,true + set1 mark_rxbuf_inuse,mark +process_dmh_cont_rxbuf_not_use: + bmark0 mark_testmode,ack_payload + isolate1 smap_rxlmp,temp + branch ack_payload,true + fetch 2,mem_tst_pktcnt_crc + increase 1,pdata + store 2,mem_tst_pktcnt_crc + set1 mark_loopback,mark + set0 smap_rxl2cap,temp + set0 mark_rxbuf_inuse,mark + storet 1,mem_state_map +ack_payload: + bpatch patch0c_2,mem_patch0c + fetcht 1,mem_temp_arq + fetch 1,mem_arq + set1 arqnx,pdata + isolate1 seqn,temp /* if accept, seqn always copies from the header */ + setflag true,seqn,pdata + isolate1 mark_am_addr_broadcast,mark + setflag true,bcast1,pdata + store 1,mem_arq + fetch 2,mem_len + nbranch end_of_packet,blank + fetch 1,mem_state_map + set0 smap_rxl2cap,pdata//better to do this in l2cap_flow_ctrl_stop + store 1,mem_state_map + fetch 1,mem_lch_code + compare 0x01,pdata,0x07 + //call l2cap_flow_ctrl_stop,true + branch end_of_packet + +error_header: + bpatch patch0c_3,mem_patch0c + disable match + fetch 2,mem_rx_hec_err + increase 1,pdata + store 2,mem_rx_hec_err + branch end_of_packet +error_payload_crc: + fetch 2,mem_rx_crc_err + increase 1,pdata + store 2,mem_rx_crc_err + call discard_pkt + bmark0 mark_testmode,error_payload + set1 mark_loopback,mark +error_payload: + branch end_of_packet + +discard_pkt: + bpatch patch0c_4,mem_patch0c + fetch 1,mem_lch_code + compare 3,pdata,0x03 + nbranch discard_pkt_l2cap,true +discard_pkt_lmp: + fetcht 1,mem_state_map + set0 smap_rxlmp,temp + storet 1,mem_state_map + rtn +discard_pkt_l2cap: +// isolate1 mark_testmode,mark +// setflag true,mark_loopback,mark + fetcht 1,mem_state_map + set0 smap_rxl2cap,temp + storet 1,mem_state_map + branch h4_send_acl_trigger_clear + +redundant_payload: + fetch 1,mem_arq + set1 arqnx,pdata + store 1,mem_arq +end_of_packet: + bpatch patch0c_5,mem_patch0c + disable encode_fec0 + disable encode_fec2 + disable decode_fec0 + disable decode_fec2 + disable enable_crc + disable encrypt + disable enable_white + branch shutdown_radio,is_rx + until null,tx_clear + nop 100 /* flush out the last bit */ + branch shutdown_radio + +process_fhs: + bpatch patch0c_6,mem_patch0c + enable enable_crc + enable decode_fec2 + parse demod,bucket,72 + isolate1 58,pdata + setflag true,mark_fhs_eir,mark + copy bt_adr,temp /* save current address to aside */ + ialigned bt_adr /* send it to access gen */ + ialigned fhs0 /* get fhs_misc */ + pulse recalc /* calc the lap just received from the other guy */ + setsect 2,0xfffff /* preset ms of shift reg as big mask */ + setsect 3,0x0ffff /* preset ms of shift reg as big mask */ + nop 32 /* 30 cycles after recalc */ + iverify fhs_parity /* check fhs_parity against ls 34 bits at shift reg, with msb 36 bits as mask */ + deposit lap + store 3,extm_lap + deposit uap + store 1,extm_uap + copy temp,bt_adr /* put the address back */ + branch fhs_parity_ok,true /* fhs parity failed */ + branch error_payload +fhs_parity_ok: + bpatch patch0c_7,mem_patch0c + parse demod,bucket,72 + ialigned fhs1 /* give host the information on class and fhs_misc */ + ialigned am_addr /* store the am_addr the master assigned us */ + ialigned nap + ialigned regb /* store external clock in regb according to clock format */ + force 0,pdata + parse demod,bucket,16 /* cycle through the crc */ + branch error_payload,crc_failed + setarg 0x0ffffffc + iand regb,pdata + store 4,mem_clke_bt + deposit fhs_class + store 3,extm_class + deposit fhs_misc + store 1,extm_fhs_misc + deposit am_addr + store 1,extm_newconn_am_addr + deposit nap + store 2,extm_nap + deposit bt_clk + inject rxf,32 + compare type_fhs,type,0x0f /* see if this was fhs packet */ + setflag true,mark_fhs_already_good,mark + branch end_of_packet + +clear_got_tx: + bpatch patch0d_0,mem_patch0d + fetch 1,mem_arq + rtnbit0 wack + set0 wack,pdata + setflip seqnx,pdata + store 1,mem_arq + fetch 1,mem_last_type + beq type_lmp,clear_got_txlmp + rtneq type_hv3 + fetch 1,mem_op + rtnbit0 op_txl2cap,pdata + set0 op_txl2cap,pdata + set1 op_pkt_comp,pdata + store 1,mem_op + set0 mark_tx_l2cap,mark + fetch 2,mem_l2cap_tx_multi_offset + nrtn blank + fetch 1,mem_op + set0 op_pkt_comp,pdata + store 1,mem_op + branch l2cap_malloc_free + +clear_got_txlmp: + bpatch patch0d_1,mem_patch0d + fetch 1,mem_lmo_header_opcode + rshift pdata,pdata + beq LMP_START_ENCRYPTION_REQ,start_encryption + beq LMP_STOP_ENCRYPTION_REQ,stop_encryption + beq LMP_UNSNIFF_REQ, sniff_exit + beq LMP_ESCAPE,clear_lmp_escape + rtnne LMP_ACCEPTED + fetch 1,mem_lmo_payload + beq LMP_SCO_LINK_REQ,sco_link_req_by_slave + beq LMP_START_ENCRYPTION_REQ,clear_send_setup_complete + rtn + +clear_lmp_escape: + fetch 1,mem_lmo_payload + set1 7,pdata + rtn +clear_send_setup_complete: + rtn master + fetch 1,mem_state + rtnbit1 state_conn_comp + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + rtn + +// nokia BH-105 CALLING when reconnection +sco_link_req_by_slave: + rtn master + fetch 1,mem_mode + isolate1 send_sco_when_slave,pdata + branch clean_mem_mode,true + //jam LMP_REMOVE_SCO_LINK_REQ,mem_lmo_opcode2 + rtn +clean_mem_mode: + set0 send_sco_when_slave,pdata + store 1,mem_mode + rtn + +start_encryption: + bpatch patch0d_2,mem_patch0d + fetch 1,mem_state_map + set1 smap_encryption,pdata + store 1,mem_state_map + hjam 1,core_encrypt + fetch 1,mem_state + isolate1 state_conn_comp,pdata + rtn + +stop_encryption: + bpatch patch0d_3,mem_patch0d + fetch 1,mem_state_map + set0 smap_encryption,pdata + store 1,mem_state_map + hjam 0,core_encrypt + rtn + + +sniff_init: + bpatch patch0d_4,mem_patch0d + copy clkn_bt,pdata + store 4,mem_lpm_delay_after_sniff + add clkn_bt,3,rega + branch sniff_init_master,master + add clke_bt,3,rega +sniff_init_master: + fetcht 2,mem_tsniff + deposit rega + set0 27,pdata + idiv temp + fetch 2,mem_dsniff + call wait_div_end + remainder regc + isub regc,pdata + branch sniff_init_nowrap,positive + iadd temp,pdata +sniff_init_nowrap: + iadd rega,pdata + store 4,mem_sniff_anchor + jam SWITCH_FLAG_INIT,mem_switch_flag + fetch 1,mem_state + set1 state_insniff,pdata + store 1,mem_state + fetch 1,mem_sniff_attempt + store 1,mem_current_sniff_attempt + setarg 0 + store 3,mem_sniff_rcv + store 3,mem_sniff_lost + store 1,mem_sniff_unint_lost + jam BT_EVT_ENTER_SNIFF,mem_fifo_temp + call ui_ipc_send_event + fetch 2,mem_rx_window_sniff + store 2,mem_rx_window + nrtn master + add am_addr,-1,queue + rtn + +sniff_exit: + bpatch patch0d_5,mem_patch0d + fetch 1,mem_state + rtnbit0 state_insniff + set0 state_insniff,pdata + store 1,mem_state + fetch 2,mem_rx_window_init + store 2,mem_rx_window + disable wake + jam BT_EVT_EXIT_SNIFF,mem_fifo_temp + branch ui_ipc_send_event + + +check_attempt: + bpatch patch0d_6,mem_patch0d + enable attempt + fetch 1,mem_state + bbit1 state_insniff,check_attempt_sniff + rtnmark1 mark_testmode /* pdata won't be blank now, try attempt */ + fetch 1,mem_arq + rtnbit1 wack + fetch 1,mem_lmp_to_send + nrtn blank + fetch 1,mem_op + rtnbit1 op_txl2cap +check_attempt_nomore: + force 0,pdata + rtn + +check_attempt_sniff: + bbit0 state_insco,check_attempt_not_sco + fetch 1,mem_current_sniff_attempt + beq 2,check_attempt_sniff_restore_sco + fetch 1,mem_arq + bbit1 wack,check_attempt_notimeout + bmark0 mark_esco_rxok,check_attempt_notimeout +check_attempt_sniff_restore_sco: + nbranch check_attempt_notimeout,master + fetch 1,mem_lmp_to_send + nbranch check_attempt_notimeout,blank +check_attempt_sco_master: + fetch 1,mem_sco_poll + increase -1,pdata + store 1,mem_sco_poll + nbranch check_attempt_nomore,blank + jam param_sco_poll,mem_sco_poll + branch check_attempt_notimeout + + + + + + +check_attempt_not_sco: + fetch 1,mem_current_sniff_attempt + bne 1,check_attempt_notimeout + fetch 1,mem_current_sniff_timeout + branch check_attempt_notimeout,blank + increase -1,pdata + store 1,mem_current_sniff_timeout + fetch 1,mem_arq + rtnbit1 wack // waiting for next ack + nrtn match // waiting for next poll +check_attempt_notimeout: + fetch 1,mem_current_sniff_attempt + increase -1,pdata + store 1,mem_current_sniff_attempt + rtn + + + + + + + + + + /* enable user if sniff window vialation, queue is extra overhead */ +sniff_check_window: + bpatch patch0d_7,mem_patch0d + disable swfine + copy temp,stop_watch + call context_search_sniff_window + disable user + nrtn zero + force 0,stop_watch + enable user + rtn + + //return true if it is esco context +check_esco_amaddr: + fetch 1,mem_esco_addr + icompare 0xff,am_addr + rtn + + +parse_l2cap: + bpatch patch0e_0,mem_patch0e + set0 mark_rxbuf_inuse,mark +parse_l2cap_cont: + jam L2CAP_RX_CLEAR,mem_l2cap_rx_done + fetch 1,mem_l2cap_rxbuff_inuse + rtn blank + isolate1 L2CAP_INUSE_BUFF1,pdata + arg mem_l2cap_rxbuff1,contr + call process_rx_l2cap_pkt,true + bpatch patch0e_1,mem_patch0e + fetch 1,mem_l2cap_rx_done + beq L2CAP_RX_DONE,parse_l2cap_release_buff1 + + jam L2CAP_RX_CLEAR,mem_l2cap_rx_done + fetch 1,mem_l2cap_rxbuff_inuse + rtnbit0 L2CAP_INUSE_BUFF2 + arg mem_l2cap_rxbuff2,contr + call process_rx_l2cap_pkt + fetch 1,mem_l2cap_rx_done + beq L2CAP_RX_DONE,parse_l2cap_release_buff2 + rtn + +parse_l2cap_release_buff1: + fetch 1,mem_l2cap_rxbuff_inuse + set0 L2CAP_INUSE_BUFF1,pdata + store 1,mem_l2cap_rxbuff_inuse + setarg 0 + store 2,mem_l2cap_rxbuff1_len + rtn +parse_l2cap_release_buff2: + fetch 1,mem_l2cap_rxbuff_inuse + set0 L2CAP_INUSE_BUFF2,pdata + store 1,mem_l2cap_rxbuff_inuse + setarg 0 + store 2,mem_l2cap_rxbuff2_len + rtn + +l2cap_buff1_inuse: + fetch 1,mem_l2cap_rxbuff_inuse + set1 L2CAP_INUSE_BUFF1,pdata + store 1,mem_l2cap_rxbuff_inuse + rtn + +l2cap_buff2_inuse: + fetch 1,mem_l2cap_rxbuff_inuse + set1 L2CAP_INUSE_BUFF2,pdata + store 1,mem_l2cap_rxbuff_inuse + rtn + +/******************************************/ +/********** Transmit Packet *************/ +/******************************************/ + +slave_send_access: + bpatch patch0e_2,mem_patch0e + add clke_bt,1,bt_clk /* slave start to use native clock */ + call fetch_extm_bt_adr + force 0x03,freq_mode /* connection frequency */ + call tx_radio_freq + call start_transmitter + call start_tx_external + branch send_access_word + + +slave_conn_send_packet: + bpatch patch0e_3,mem_patch0e + call rf_setup_time_slave_slot + deposit clke_bt + fetcht 4,mem_next_btclk + isub temp,pdata + rtnne 1 /* missed slave slot */ + compare type_null,type,0x1f + nbranch slave_conn_send_access,true + fetch 1,mem_rx_type + rtn blank /* null packet, do nothing */ +slave_conn_send_access: + call slave_send_access +transmit_packet: + compare type_id,type,0x1f /* is this id only ? */ + branch end_of_packet,true + rshift bt_clk,temp + or temp,0x40,white_init +transmit_packet_whitened: + bpatch patch0e_4,mem_patch0e + enable enable_white + enable enable_hec + enable encode_fec1 + set0 mark_longpacket,mark + deposit am_addr + inject mod,3 /* am_addr, temp is disabled */ + deposit type + inject mod,4 + fetch 1,mem_arq /* aka mem_arq */ + inject bucket,4 /* align up to flowx, arqnx, seqnx */ + inject mod,3 + enable enable_parity + inject mod,8 /* transmit parity */ + disable encode_fec1 + disable enable_parity + disable enable_hec + set0 PSK3M,radio_ctrl + arg 0,temp + call reserve_slot + bpatch patch0e_5,mem_patch0e + and type,0x1f,pdata + beq type_lmp, transmit_lmp + beq type_null, end_of_packet + beq type_poll, end_of_packet + beq type_fhs, transmit_fhs /* master mode fhs need got_tx and ack */ + beq type_dm1, transmit_dm1 + beq type_dh1, transmit_dh1 + beq type_hv3, transmit_hev + beq type_3dh1, transmit_3dh1 + arg 4,temp + call reserve_slot + beq type_dm3, transmit_dm3 + beq type_dh3, transmit_dh3 + arg 8,temp + call reserve_slot + beq type_dh5, transmit_dh5 + branch transmit_dm5 /* must be 14, dm5 */ + + +transmit_hev: + bpatch patch0e_6,mem_patch0e + enable encode_fec0 + enable enable_crc + enable encrypt + force 30,loopcnt + arg mem_sco_obuf,contr +transmit_ev_loop: + ifetch 1,contr + inject mod,8 + loop transmit_ev_loop + bmark1 mark_esco,transmit_end + branch end_of_packet + +transmit_fhs: + bpatch patch0e_7,mem_patch0e + fetch 1,mem_fhs_am_addr /* this is the am_addr to assign to slave */ + icopy am_addr + fetch 1,mem_fhs_misc + icopy fhs_misc /* [7:6]SR [5:4]SP [3:1]PS [0]undef */ + fetch 3,mem_class /* store away class */ + icopy fhs_class + fetch 2,mem_nap + icopy nap + enable enable_crc + enable encode_fec2 + copy bt_adr,rega + call fetch_self_bt_adr + pulse recalc + nop 32 /* 30 cycles after recalc for sync word generation */ + copy bt_clk,timeup + fetch 4,mem_clkn_bt + icopy bt_clk + preload fhs0 + set1 58,pdata /* eir */ + inject mod,72 + preload fhs1 + inject mod,72 + copy timeup,bt_clk + copy rega,bt_adr + enable enable_parity + inject mod,16 /* generate CRC */ + disable enable_parity + branch end_of_packet + +transmit_lmp: /* expect the payload ready as in bb spec */ + bpatch patch0f_0,mem_patch0f + enable encrypt + enable enable_crc + enable encode_fec2 + fetch 1,mem_lmo_header_length /* this is the payload header */ + and pdata,0x1f8,temp /* temp is number of bits, check payload header format */ + arg mem_lmo_header_length,contr + increase 8,temp /* temp is in bits */ +transmit_lmp_loop: + add temp,-72,regc /* regc is remainder */ + nbranch transmit_lmp_finish,positive + ifetch 9,contr + inject mod,72 + copy regc,temp + branch transmit_lmp_loop +transmit_lmp_finish: + ifetch 9,contr + iinject mod,temp + branch transmit_end + +transmit_dm1: + enable encode_fec2 + branch transmit_dmh +transmit_dm3: +transmit_dm5: + enable encode_fec2 + set1 mark_longpacket,mark + branch transmit_dmh + +transmit_3dh1: + set1 PSK3M,radio_ctrl +transmit_dh1: + enable encode_fec0 + branch transmit_dmh + +transmit_dh3: +transmit_dh5: + set1 PSK3M,radio_ctrl + enable encode_fec0 + set1 mark_longpacket,mark + +transmit_dmh: + bpatch patch0f_1,mem_patch0f + fetch 1,mem_state_map + bbit0 smap_edr,transmit_noedr + sub type,3,null + branch transmit_noedr,positive + disable encrypt + disable encode_fec2 + enable encode_fec0 + disable enable_white + set1 PSK,radio_ctrl + isolate1 PSK3M,radio_ctrl + branch transmit_edr3m,true + setarg 0xabeee + inject mod,20 + branch transmit_edr_sync_end +transmit_edr3m: + setarg 0x5faeba + inject mod,24 + setarg 0x12 + inject mod,6 +transmit_edr_sync_end: + enable enable_white + set1 mark_longpacket,mark +transmit_noedr: + enable encrypt + enable enable_crc + bmark1 mark_loopback,transmit_loopback + fetch 1,mem_tx_lch + inject mod,3 + fetch 2,mem_tx_len + iforce loopcnt + bmark1 mark_longpacket,transmit_long + inject mod,5 + branch transmit_stuff +transmit_long: + inject mod,13 +transmit_stuff: + deposit loopcnt + branch transmit_end,blank + fetch 2,mem_txptr + iforce contr +transmit_stuff_loop: + ifetch 1,contr + inject mod,8 + loop transmit_stuff_loop +// branch transmit_end + +transmit_end: + enable enable_parity + inject mod,16 + disable enable_parity + call set_wait_ack + fetch 1,mem_state_map + bbit0 smap_edr,end_of_packet + force 0,pdata + inject mod,6 /* edr trailer */ + branch end_of_packet + + +transmit_loopback: + bpatch patch0f_2,mem_patch0f + bmark1 mark_longpacket,transmit_loopback_long +transmit_loopback_short: + fetch 1,mem_lch_code + inject mod,3 /* LLID and FLOW */ + fetch 1,mem_len /* take packet length */ + iforce regc + inject mod,5 + branch transmit_loopback_cont +transmit_loopback_long: + fetch 1,mem_lch_code + inject mod,3 /* LLID and FLOW */ + fetch 2,mem_len /* take packet length */ + iforce regc + inject mod,13 +transmit_loopback_cont: + arg mem_rxbuf,contr +transmit_loopback_loop: + copy regc,null + branch transmit_loopback_end,zero + ifetch 1,contr + inject mod,8 + increase -1,regc + branch transmit_loopback_loop +transmit_loopback_end: + fetch 2,mem_tst_pktcnt_dmh + increase 1,pdata + store 2,mem_tst_pktcnt_dmh + branch transmit_end + + +apply_switch_clke: + fetch 4,mem_clke_bt + add pdata,7,rega + fetch 2,mem_slot_offset + nbranch apply_switch_nozero,blank + increase -3,rega + branch apply_switch_wait_loop +apply_switch_nozero: + mul32 pdata,12,pdata + hfetcht 2,core_halfslot + increase 1,temp +apply_switch_loop: + isub temp,pdata + nbranch apply_switch_bt,positive + increase -1,rega + branch apply_switch_loop +apply_switch_bt: + sub pdata,0,pdata +apply_switch_wait_loop: + until null,oneslot + compare 0,clkn_bt,3 + nbranch apply_switch_wait_loop,true + iforce clke_rt + copy rega,clke_bt + iforce clke_rt + rtn + + +calc_slot_offset: + bpatch patch0f_3,mem_patch0f + until null,halfslot + deposit clke + iforce contr + rshift16,pdata,pdata + isub clkn_bt,loopcnt + and_into 3,loopcnt /* bt portion */ + nbranch calc_bt_portion,zero + force 0,pdata + branch calc_skip_bt +calc_bt_portion: + arg 3750,temp + force 0,pdata +calc_slot_offset_loop: + iadd temp,pdata + loop calc_slot_offset_loop +calc_skip_bt: + iadd contr,pdata /* add rt portion */ + div pdata,12 + call wait_div_end + quotient pdata + store 2,mem_slot_offset + rtn + +calc_clke_offset: + bpatch patch0f_4,mem_patch0f + deposit clke + copy clkn,temp + isub temp,null + nsetflag positive,44,pdata + isub temp,temp + setarg 3750 + isolate0 15,temp + branch calc_clke_pos,true + setarg -61786 + iadd temp,temp +calc_clke_pos: + storet 6,mem_le_clk_offset + rtn le + storet 6,mem_clk_offset + rtn + +calc_clke: + disable clknt + fetch 6,mem_le_clk_offset + branch calc_clke2,le + fetch 6,mem_clk_offset +calc_clke2: + iadd clkn,alarm + increase 10,alarm + setarg 3750 + isub alarm,pdata + isolate0 15,pdata + branch calc_clke_pos_adj,true + setarg 0xf15a + iadd alarm,alarm +calc_clke_pos2: + copy alarm,clke + rtn +calc_clke_pos_adj: /* add 2 clock */ + force 0,null + branch calc_clke_pos2 + +/******************************************/ +/********* RF related functions ***********/ +/******************************************/ + + +calc_radio_freq: + bpatch patch0f_5,mem_patch0f + call set_sync_on + copy bt_clk,pdata + and_into 0x180,pdata + compare 3,freq_mode,0x07 + nbranch freq_not_connection,true /* don't do the hack if not in connection */ + rshift3 pdata,pdata + iadd freq_index,pdata + branch do_hop_mod_now +freq_not_connection: + copy freq_index,pdata +do_hop_mod_now: + div pdata,79 + pulse recalc /* now is good time to recalc id */ + call wait_div_end + remainder rega + add rega,-40,temp + branch odd_half,positive + lshift rega,temp + branch freq_result +odd_half: + lshift temp,temp + increase 1,temp +freq_result: + bpatch patch0f_6,mem_patch0f + fetch 1,mem_mode + bbit0 afh_change,afh_process_con +afh_process_0: + fetch 4, mem_afh_instant + isub bt_clk, null + branch afh_process_con,positive + call afh_clear + fetch 1,mem_afh_new_mod + rtn blank + fetch 1,mem_mode + set1 afh_enable,pdata + store 1,mem_mode + fetch 5,mem_afh_map_new + store 5,mem_afh_map_lo + ifetch 5,contr + store 5,mem_afh_map_hi + call afh_process_freq_map +afh_process_con: + fetch 1,mem_mode + rtnbit0 afh_enable + isolate1 1,bt_clk + branch afh_same_channel,true /* at odd slot, use the same as last even */ + rshift3 temp,rega + and temp,7,queue + setarg mem_afh_map_lo + iadd rega, rega + ifetch 1, rega + qisolate0 pdata + branch afh_process_1,true /* not in map, do afh */ + deposit temp + branch afh_process_end +afh_process_1: + fetch 1, mem_afh_used + iforce regb + deposit bt_clk + and_into 0x180, pdata + rshift3 pdata,pdata + iadd freq_index,pdata + idiv regb + setarg mem_afh_map + call wait_div_end + remainder rega + iadd rega,contr + ifetch 1,contr +afh_process_end: + store 1,mem_afh_index + iforce temp + rtn + +afh_same_channel: + fetch 1, mem_afh_index /* last afh index */ + iforce temp + rtn + +afh_clear: + fetch 1,mem_mode + set0 afh_enable,pdata + set0 afh_change,pdata + store 1,mem_mode + rtn +/* +fixed_frequency: + fetcht 1,mem_fixed_freq + rtn +*/ +afh_process_freq_map: + bpatch patch0f_7,mem_patch0f + arg mem_afh_map,contw + force 10,loopcnt + call memset0 + arg mem_afh_map,contw + force 0,regC + force 2,queue +process_freq_3: + fetch 5,mem_afh_map_lo + iforce temp + compare 2,queue,0xff + branch process_freq_1,true + rshift temp,temp +process_freq_1: + isolate0 0,temp + branch process_freq_0,true + deposit regC + istore 1,contw +process_freq_0: + rshift2 temp,temp + increase 2,regC + compare 40,regC,0xfe + nbranch process_freq_2,true + fetch 5,mem_afh_map_hi + iforce temp + compare 2,queue,0xff + branch process_freq_2,true + rshift temp,temp +process_freq_2: + sub regC,78,null + branch process_freq_1,positive + force 1,regC + increase -1,queue + nbranch process_freq_3,zero + arg mem_afh_map,rega + deposit contw + isub rega,pdata + store 1,mem_afh_used + rtn + +rx_radio_freq: + bpatch patch10_0,mem_patch10 + call calc_radio_freq + fetch 1,mem_debug_config + bbit0 debug_rx_fixed_freq,rx_radio_freq_now + fetcht 1,mem_rx_fixed_freq +rx_radio_freq_now: + branch set_freq_rx + + +tx_radio_freq: + bpatch patch10_1,mem_patch10 + call calc_radio_freq + fetch 1,mem_debug_config + bbit0 debug_tx_fixed_freq,tx_radio_freq_now + fetcht 1,mem_tx_fixed_freq +tx_radio_freq_now: + branch set_freq_tx + + +fetch_giac: + force 0,uap + fetch 3,mem_glap + iforce lap + rtn + +fetch_page_bt_adr: + bpatch patch10_2,mem_patch10 + fetch 1,mem_hci_puap + icopy uap + fetch 3,mem_hci_plap + icopy lap + rtn + +fetch_self_bt_adr: + bpatch patch10_3,mem_patch10 + fetch 2,mem_nap + icopy nap + fetch 1,mem_uap + icopy uap + fetch 3,mem_lap + icopy lap /* copy self_adr,bt_adr */ /* use own address */ + rtn + +fetch_extm_bt_adr: + bpatch patch10_4,mem_patch10 + fetch 2,mem_pnap + icopy nap + fetch 1,mem_puap + icopy uap + fetch 3,mem_plap + icopy lap + rtn + + +fetch_diac: + bmark1 mark_all_diac,fetch_diac_do + rtnmark0 mark_inquiry_state + rtnmark0 mark_periodical_diac +fetch_diac_do: + and_into -256,lap + pulse recalc + nop 32 + rtn + + +shutdown_radio: + bpatch patch10_5,mem_patch10 + branch shutdown_radio0,is_rx + hjam 0xd4, 0x955 + nop 4 + hjam 0xd2, 0x955 + nop 4 + hjam 0xd1, 0x955 + nop 4 + fetch 1,mem_tx_power + beq TX_POWER_0DB,shutdown_radio_0db + beq TX_POWER_3DB,shutdown_radio_3db + beq TX_POWER_5DB,shutdown_radio_5db + beq TX_POWER_f3DB,shutdown_radio_f3db + beq TX_POWER_f5DB,shutdown_radio_f5db + beq TX_POWER_PAIR,shutdown_radio_pair +shutdown_radio_5db: +shutdown_radio_0db: + hjam 0xd0, 0x955 + hjam 0xe0, 0x956 +shutdown_radio0: + force 0,radio_ctrl + disable is_rx + disable is_tx + pulse packet_end + hjam 0x0,rfen_mdm + hjam 0x0,rfen_tx + hjam 0x0,rfen_rx + hjam 0,rfen_sn + hjam 0x70,rfen_msc + hjam 0x0,rfen_adc + rtn + +shutdown_radio_pair: +shutdown_radio_f5db: +shutdown_radio_f3db: +shutdown_radio_3db: + hjam 0xd0,0x955 + hjam 0xc0,0x956 + branch shutdown_radio0 + +set_sync_on: + bpatch patch10_6,mem_patch10 + hjam 0x0,rfen_mdm /* if called from tx or rx */ + hjam 0x0,rfen_tx + hjam 0x18,rfen_rx + hjam 0xa7,rfen_sn + hjam 0x7f,rfen_msc + rtn + +set_freq_rx: + bpatch patch10_7,mem_patch10 + /* IF is +2MHz */ + storet 1,mem_last_freq + add temp,rx_freq_offset,rega /* index to frequency */ + hjam 0x07,0x96d /*Max added, for best sensitivity*/ + branch rf_write_freq +rf_rx_enable: + bpatch patch11_0,mem_patch11 + hjam 0xcf,rfen_tx + nop 10 /* wait adc clk48 ready */ + hjam 0xff,rfen_rx + hjam 0xaf,rfen_sn + hjam 0xff,rfen_msc + nop 10 + hjam 0xa0,rfen_mdm + rtn + +set_freq_tx_offset: + fetch 1,mem_250k_freq_enable //default: 0 + branch set_freq_tx_2M_offset,blank +set_freq_tx_0M_offset: + add temp,2,rega //250k + rtn +set_freq_tx_2M_offset: + add temp,0,rega // bt 2M Medium Frequency + rtn + +set_freq_tx: + bpatch patch11_1,mem_patch11 + storet 1,mem_last_freq + call set_freq_tx_offset + call rf_write_freq + setarg param_pll_setup + call sleep +txon: + hjam 0x1,rfen_adc + hjam 0x3c,rfen_rx + hjam 0xe0,rfen_tx + hjam 0x12,0x96d + nop 10 + hjam 0x01,rfen_mdm + hjam 0x3d,rfen_mdm + nop 10 + hjam 0xb7,rfen_sn + nop 10 + hjam 0x7f, rfen_mdm + fetch 1,mem_tx_power + beq TX_POWER_0DB,set_tx_power_0db + beq TX_POWER_3DB,set_tx_power_3db + beq TX_POWER_5DB,set_tx_power_5db + beq TX_POWER_f3DB,set_tx_power_f3db + beq TX_POWER_f5DB,set_tx_power_f5db + beq TX_POWER_PAIR,set_tx_power_pair +set_tx_power_0db: + hjam 0xf0,0x956 + call txon_common + hjam 0xd8,0x955 + rtn + +set_tx_power_3db: + hjam 0xdf,0x956 + call txon_common + hjam 0xdf,0x955 + rtn + +set_tx_power_5db: + hjam 0xff,0x956 + call txon_common + hjam 0xdf,0x955 + rtn +set_tx_power_f3db: + hjam 0xce,0x956 + call txon_common + hjam 0xd8,0x955 + rtn + +set_tx_power_f5db: + hjam 0xcb,0x956 + call txon_common + hjam 0xd8,0x955 + rtn + +set_tx_power_pair: + hjam 0xd0,0x955 + hjam 0xc0,0x956 + hjam 0x4c,0x957 + hjam 0x6c,0x958 + hjam 0x50,0x959 + rtn + +txon_common: + nop 4 + hjam 0xd1,0x955 + nop 4 + hjam 0xd2,0x955 + nop 4 + hjam 0xd4,0x955 + rtn + + +initialize_radio: + hjam clksel_rc,core_clksel +initialize_radio_wait: + fetch 2,mem_rf_init_ptr + bbit0 14,initialize_radio_wait + iforce contr + arg 0x8900,temp +initialize_radio_loop: + ifetch 1,contr + beq 0xff,initialize_radio_cont + ior temp,contw + ifetch 1,contr + istore 1,contw + branch initialize_radio_loop +initialize_radio_cont: + bpatch patch11_2,mem_patch11 + call lpm_cal_xtal_startup + call switchto_dpllclk +// ncall check_dpll,wake + setarg param_dpll_start_delay + iadd clkn_bt,pdata + store 4,mem_dpll_clkn + set1 RESET,radio_ctrl + force 0,radio_ctrl + ncall do_rccal,wake + branch set_rccal + + /* rega is frequency, 00=2400Mhz */ +rf_write_freq: + bpatch patch11_3,mem_patch11 + setarg 2400 + iadd rega,temp + fetch 1,mem_fcomp_mul + hjam 0x04,rf_pll_rstn + imul32 temp,pdata + fetcht 1,mem_fcomp_div + idiv temp + call wait_div_end + quotient rega /* rega is FLOOR(FVCO/fcomp) */ + remainder pdata + lshift16 pdata,pdata + lshift4 pdata,pdata /* pdata is frac * 2^20 */ + idiv temp + call wait_div_end + quotient pdata /* pdata is frac *2^20/fcomp */ + lshift8 pdata,pdata + lshift pdata,pdata + ior rega,pdata + hstore 4,rf_pll_intg + hjam 0x44,rf_pll_rstn + hjam 0xc4,rf_pll_rstn + rtn + + +do_rccal: + bpatch patch11_4,mem_patch11 + hjam 0x02,rfen_adc + setarg 250000 + call sleep /* wait clkpll&xtal stable */ + hjam 0x7f,rfen_rx + nop 130 + hjam 0x30,rf_rccal_ctrl + hjam 0xd0,rfen_tx + hjam 0x70,rf_rccal_ctrl + hjam 0xf0,rf_rccal_ctrl + force 50,loopcnt +do_rccal_loop: + hfetch 1,rf_rccal_result + bbit1 5,do_rccal_end + loop do_rccal_loop +do_rccal_end: + store 1,mem_rf_rccal + hjam 0,rfen_tx + hjam 0,rfen_rx + hjam 0x00,rfen_adc + rtn + +set_rccal: + bpatch patch11_5,mem_patch11 + fetch 1,mem_rf_rccal + set1 5,pdata + hstore 1,rf_rccal_ctrl + hfetcht 1,rf_bpf_ctrim + and_into 7,temp + lshift3 pdata,pdata + ior temp,pdata + hstore 1,rf_bpf_ctrim + hfetch 1,rf_bpf_ib + set0 bpf_rccal,pdata + hstore 1,rf_bpf_ib + hfetch 1,rf_adc_rccal + set0 adc_rccal,pdata + hstore 1,rf_adc_rccal + rtn + +save_rssi: + bpatch patch11_6,mem_patch11 + hfetch 2,rf_afc_d2a + rshift4 pdata,pdata + rshift3 pdata,pdata + sub pdata,0,pdata + and_into 0xff,pdata + div pdata,10 + call wait_div_end + quotient pdata + lshift4 pdata,pdata + remainder temp + ior temp,pdata + store 1,mem_rssi /* bcd value */ + rtn + + +switchto_dpllclk: + hjam clksel_rc,core_clksel + hfetch 1,rf_clkpll_frac+2 + set0 4,pdata + set0 5,pdata + hstore 1,rf_clkpll_frac+2 + hjam 0x00,rfen_ck + hjam 0x00,rfen_msc + hjam 0x70,rfen_msc + hjam 0xff,rfen_ck + hfetch 1,rf_clkpll_frac+2 + set1 4,pdata + set1 5,pdata + hstore 1,rf_clkpll_frac+2 + call init_lpm_ctrl + hfetch 1,rf_clkpll_int + set1 7,pdata + hstore 1,rf_clkpll_int + set0 7,pdata + hstore 1,rf_clkpll_int + set1 7,pdata + hstore 1,rf_clkpll_int + hjam clksel_dpll,core_clksel + nop 1 + hjam clksel_xtal,core_clksel + hfetch 1,rf_clkpll_frac+2 + and_into 0xcf,pdata + hstore 1,rf_clkpll_frac+2 + or_into 0x30,pdata + hstore 1,rf_clkpll_frac+2 + rtn + + +xtal_fast_wake: + setarg 0xf0f + branch lpm_write_config + +init_lpm_ctrl: + setarg 0x80f + branch lpm_write_config + + + +start_receiver: + bpatch patch11_7,mem_patch11 + call rf_rx_enable + disable is_tx + enable is_rx + pulse init_encrypt + rtn + +prep_crypt: + bpatch patch12_0,mem_patch12 + fetch 1,mem_state_map + isolate1 smap_encryption,pdata + setflag true,0,pdata + hstore 1,core_encrypt + arg mem_kc,contr + ifetch 9,contr + iforce kc_ls + ifetch 7,contr + iforce kc_ms + fetch 1,mem_key_size + add pdata,-1,g1l + pulse kc_p_activate /* immediately start calculating primary Key */ + rtn + +wait_access_end: + deposit clke + store 6,mem_sync_clke + disable decode_fec0 + nbranch shutdown_radio,sync + arg param_clke_cal,clke_rt + increase 1,clke_bt + and_into 0x1fc,clke_bt + rtn + + + +wait_access_mhalfbnd: + enable decode_fec0 +wait_access_mhalfbnd_correlate: + correlate null,mhalfbnd /* keep correlating until sync is found, or clke half */ + branch wait_access_end,sync + compare 0x02,clke_bt,0x02 + nbranch wait_access_mhalfbnd_correlate,true + branch wait_access_end + +wait_access_clkn_rt: + bpatch patch12_1,mem_patch12 + arg param_conn_access,timeup /* found sync must occur within this time */ + enable decode_fec0 + correlate clkn_rt,meet /* keep correlating until sync is found, or until clkn_rt timeup */ + disable decode_fec0 + nbranch shutdown_radio,sync + rtn + +wait_access_forever: + bpatch patch12_2,mem_patch12 + enable decode_fec0 + correlate null,timeout /* keep correlating until sync is found, or timeout */ + disable decode_fec0 + nbranch shutdown_radio,sync + arg param_clke_cal,clke_rt + and_into 0x1fc,clke_bt + rtn + + /* reserve slots for mult-slot packet */ +reserve_slot: + bpatch patch12_3,mem_patch12 + iforce rega + deposit bt_clk + iadd temp,timeup + copy timeup,pdata + store 4,mem_next_btclk + deposit rega + rtn + + /* pdata = clks ahead of bt_clk */ +ahead_window: + copy pdata,temp + bpatch patch12_4,mem_patch12 + copy temp,pdata + call clk2bt + lshift16 bt_clk,pdata + set1 44,pdata + call clk_diff + set0 44,pdata + call get_clk + call clk_diff + rtn user + call clk2rt + iforce stop_watch + until null,timeout + rtn + + +setup_clk: + bpatch patch12_5,mem_patch12 + branch setup_clkn,clknt + until clke_rt,meet +skip_setup_clke: + copy clke_bt,temp + branch setup_clknbt +setup_clkn: + branch skip_setup_clkn,attempt + until clkn_rt,meet +skip_setup_clkn: + copy clkn_bt,temp +setup_clknbt: + branch setup_clk11,user + compare 1,temp,3 + nbranch setup_clk,true +setup_complete: + bpatch patch12_6,mem_patch12 + fetch 1,mem_state + rtnbit0 state_inconn + fetch 4,mem_next_btclk + isub temp,pdata + nrtn positive + sub pdata,0xff,null + branch setup_clk,positive + rtn +setup_clk11: + compare 3,temp,3 + nbranch setup_clk,true + branch setup_complete + +rf_setup_time: + bpatch patch12_7,mem_patch12 + arg param_rf_setup,timeup + branch setup_clk + +rf_setup_time_slave_slot: + disable user + branch rf_setup_time + +rf_setup_time_master_slot: + enable user + branch rf_setup_time + +start_transmitter: + bpatch patch13_0,mem_patch13 + call prep_crypt + disable is_rx + enable is_tx + rtn + + + +start_tx_native: + bpatch patch13_1,mem_patch13 + arg param_tx_setup,timeup + until clkn_rt,meet /* wait until start_tx time */ + pulse init_encrypt + rtn + +start_rx_native: + bpatch patch13_2,mem_patch13 + arg param_rx_setup,timeup + until clkn_rt,meet + rtn + + +start_tx_external: + bpatch patch13_3,mem_patch13 + arg param_tx_setup,timeup + until clke_rt,meet /* wait until start_tx time */ + pulse init_encrypt + rtn + +send_access_word: + bpatch patch13_4,mem_patch13 + preload access /* load in access word ready to be sent */ + enable encode_fec0 + set1 TXGFSK,radio_ctrl + inject mod,72 + disable encode_fec0 + rtn + + +scan_mode_whiten: + copy xin,temp + or_into 0x60,temp /* extend xin with 5->1, 6->1 */ + copy temp,white_init + rtn + + + + /* return blank if free amaddr is found */ +get_free_amaddr: + bpatch patch13_5,mem_patch13 + fetch 1,mem_current_amaddr + increase 1,pdata + bne param_esco_addr,get_free_amaddr_cont + force 1,pdata +get_free_amaddr_cont: + store 1,mem_current_amaddr + iforce am_addr + rtn + +get_clk: + copy clkn,temp + rtn master + copy clke,temp + rtn + +get_clkbt: + deposit clkn_bt + rtn master + deposit clke_bt + rtn + + +supervision_update: + bpatch patch13_6,mem_patch13 + fetcht 4,mem_supervision_timer + call get_clkbt + isub temp,timeup /* and to 28 bits */ + deposit timeup + fetcht 2,mem_supervision_to + lshift temp,temp + isub temp,pdata + rtn + +supervision_flush: + bpatch patch13_7,mem_patch13 + call get_clkbt + store 4,mem_supervision_timer + rtn + +assert: + bpatch patch14_0,mem_patch14 + branch assert + +loop: + branch loop + +sleep: + rtn blank + /* sleep pdata clocks, only even clocks are accurate */ + rshift pdata,pdata + increase -3,pdata +sleep_loop: + increase -1,pdata + nbranch sleep_loop,zero + force 0,pdata + rtn + + + +init_param: + /* clear specified sched ram */ + arg 0x10,loopcnt + arg 0,contw + call memset0 + arg mem_le_state,contw + arg 10,loopcnt + call memset0 + jam 0,mem_sp_calc + jam 0,mem_fifo_temp + jam 0,mem_le_testtype + jam 0,mem_debug_config + jam 0,mem_lmp_conn_state + bpatch patch14_1,mem_patch14 + jam 0,mem_connection_options + jam 0,mem_tester_emulate + jam 0,mem_tester_cnt + setarg param_glap + store 3,mem_glap + setarg param_acl_pktlen + store 2,mem_acl_pktlen + jam param_sco_pktlen,mem_sco_pktlen + jam param_acl_pktcnt,mem_acl_pktcnt + jam param_sco_pktcnt,mem_sco_pktcnt + setarg param_hci_version + store 3,mem_hci_version +// setarg param_lmp_version +// store 3,mem_lmp_version +// setarg param_lmp_subversion +// store 2,mem_lmp_subversion + jam 0x60,mem_fhs_misc /* R1 for 1.28s ps interval,P2 */ + jam param_max_slot,mem_max_slot + jam 0x02,mem_fw_ver /* set firmware version */ +ifdef SIMPLE_PAIRING + fetch 1,mem_ssp_enable + ncall init_memp,blank +endif +ifdef SECURE_CONNECTION + fetch 1,mem_le_secure_connect_enable + ncall init_memp_256,blank +endif + bpatch patch14_2,mem_patch14 + rtn wake + setarg 0 + store 2,mem_tx_len + rshift clkn_bt,pdata + store 4,mem_last_clkn + rtn + + + + +/*****************************************LPO************************************************/ + +lpmstate: + setarg 0xee21 + hstore 2,core_clkoff // disable unused peripherals + hfetch 4,core_gpio_in + store 4,mem_saved_gpio_in + hfetch 1,core_lpm_ldocnt + store 1,mem_wakup_from_power_flag + bbit0 gpio_latch,loadcode // power up boot + enable wake + bbit0 cold_wake,lpmwake + disable wake + deposit auxcnt + nbranch lpmwake,blank // sleep interrupted, wakeup + hfetch 1,core_lpm_ctrl + 3 + bbit1 reload_code,lpmwake + arg param_hibernate_clks,temp + branch lpm_enter_sleep +lpmwake: + hfetch 3,core_lpm_xtalcnt + hstore 3,core_lpm_reg + ifetch 1,contr + or_into isogate_mask,pdata // open all isolation gate&power switch + istore 1,contw + call lpm_write_ctrl2 + hfetch 1,core_lpm_isogate + set1 enable_retmem,pdata + hstore 1,core_lpm_isogate + call lpm_write_ctrl2 + call lpm_load_context,wake + hfetch 1,core_lpm_reg+2 + set0 gpio_latch,pdata // enable gpio fuction + hstore 1,core_lpm_reg+2 + call lpm_write_ctrl2 + nbranch loadcode,wake // wakeup from hibernate + rtnmark0 mark_otp_encrypt + hjam lock_otp,core_misc_ctrl // disable further read/write of key + rtn + +lpm_load_context: + fetch 1,mem_saved_spidctrl + hstore 1,core_spid_ctrl + fetch 3,mem_saved_gsel + hstore 3,core_gpio_sel + fetch 4,mem_saved_gpio+4 + hstore 4,core_gpio_out0 + fetch 4,mem_saved_gpio + hstore 4,core_gpio_oe0 + fetch 8,mem_saved_gpio+8 + hstore 8,core_gpio_pu0 + fetch 8,mem_saved_mark + iforce mark + hfetch 8,core_gpio_wakeup_low + store 8,mem_gpio_wakeup_low + call load_ucode + rtn + +lpm_save_context: + deposit mark + store 8,mem_saved_mark + hfetch 8,core_gpio_oe0 + store 8,mem_saved_gpio + ifetch 8,contr + istore 8,contw + hfetch 3,core_gpio_sel + store 3,mem_saved_gsel + hfetch 1,core_spid_ctrl + store 1,mem_saved_spidctrl + branch lpm_write_gpio_wakeup + +lpo_calibration: + hfetch 1,core_bist_ctrl + nbranch lpo_cal_inited,blank + fetch 3,mem_clks_per_lpo + nrtn blank + hjam 0xc0,core_bist_ctrl + hjam ccnt_start,core_misc_ctrl +lpo_cal_inited: + hfetch 1,core_perf_status + rtnbit0 1 + hfetch 3,core_clk_counter + store 3,mem_clks_per_lpo + rtn + + + /* temp is synced clke */ +lpm_adjust_clk: + bpatch patch14_3,mem_patch14 + deposit clke + call clk_diff_rt + fetcht 4,mem_sleep_counter_all + sub temp,0xff,null + rtn positive // interval too small + lshift8 pdata,pdata + lshift4 pdata,pdata + idiv temp + call wait_div_end + quotient pdata + arg param_lpm_adjmax,temp + call ceiling + store 1,mem_lpm_adjust + nbranch lpm_adjust_positive,user + sub pdata,0,pdata +lpm_adjust_positive: + fetcht 3,mem_clks_per_lpo + iadd temp,pdata + store 3,mem_clks_per_lpo +lpm_clear_counter: + setarg 0 + store 4,mem_sleep_counter_all + rtn + + + /* temp is lpo counter for doze */ +lpm_doze: + fetch 1,mem_lpm_config+2 + set1 reload_code,pdata + store 1,mem_lpm_config+2 + branch lpm_hibernate_normal + + + /* no retention memory at all */ +lpm_hibernate: + arg param_hibernate_clks,temp + fetch 1,mem_lpm_config+1 + set0 7,pdata /* lowest lpo */ + store 1,mem_lpm_config+1 +lpm_hibernate_normal: + bpatch patch14_4,mem_patch14 + call lpm_write_gpio_wakeup + fetch 1,mem_lpm_hibernate_switch + store 1,mem_lpm_xtalcnt + 4 + fetch 1,mem_lpm_xtalcnt + 2 + set1 cold_wake,pdata + store 1,mem_lpm_xtalcnt + 2 + + /* temp is lpo clocks to sleep */ +lpm_sleep: + bpatch patch14_5,mem_patch14 + call xtal_fast_wake + fetch 4,mem_sleep_counter_all + iadd temp,pdata + store 4,mem_sleep_counter_all + call lpm_save_context + fetch 5,mem_lpm_xtalcnt + hstore 4,core_lpm_reg + rshift32 pdata,rega + until null,lpo_edge + deposit clkn + store 6,mem_sleep_clkn + hjam lpmreg_sel_ctrl2,core_lpm_wr + until null,lpo_edge + until null,lpo_edge + deposit rega + hstore 1,core_lpm_isogate + hjam lpmreg_sel_ctrl2,core_lpm_wr +lpm_enter_sleep: + until null,lpo_edge + until null,lpo_edge + hstoret 4,core_lpm_reg + hjam lpmreg_sel_counter,core_lpm_wr + until null,never + + + + +lpm_recover_clk: + bpatch patch14_6,mem_patch14 + setarg 0 + copy auxcnt,null + branch lpm_recover_timeout,zero + hfetch 1,core_lpm_xtalcnt + hfetcht 1,core_lpm_buckcnt + isub temp,null + branch lpm_recover_xtal,positive + deposit temp +lpm_recover_xtal: + isub auxcnt,pdata + increase 1,pdata +lpm_recover_timeout: + increase 8,pdata + until null,lpo_edge + iadd lpo_time,pdata + fetcht 4,mem_sleep_counter + iadd temp,pdata + fetcht 3,mem_clks_per_lpo + imul32 temp,pdata + rshift8 pdata,pdata + rshift4 pdata,pdata + increase param_lpm_fix,pdata + arg 3750,temp + idiv temp + call wait_div_end + quotient pdata + lshift16 pdata,pdata + remainder temp + ior temp,pdata + fetcht 6,mem_sleep_clkn + call clk_add + copy temp,clkn + fetch 6,mem_context + coffset_clk_offset + call calc_clke2 + deposit clke + store 6,mem_pdatatemp + deposit auxcnt + istore 1,contw + hfetch 1,core_gpio_in1 + or_into 0xf0,pdata + istore 1,contw + rtn + +lpm_dispatch: + bpatch patch14_7,mem_patch14 + call lpo_calibration + fetch 3,mem_clks_per_lpo + rtn blank + fetch 1,mem_lpm_mode + rtn blank + fetch 1,mem_ssp_enable + branch lpm_dispatch_next,blank + fetch 1,mem_sp_local_key_invalid // simple pairing is not ready + rtn blank +lpm_dispatch_next: + fetch 1,mem_le_sc_calc + nrtn blank + call lpm_check_wake_lock + nrtn blank + fetch 1,mem_context + compare 3,pdata,0x7 /* sco won't sleep */ + nbranch lpm_dispatch_unconn,true + fetch 2,mem_context + coffset_tsniff + rtn blank /* role switch */ + rtn wake + bpatch patch15_0,mem_patch15 + fetcht 1,mem_lpm_current_mult + fetch 2,mem_context + coffset_tsniff + imul32 temp,pdata + rshift4 temp,temp + rshift2 temp,temp + isub temp,pdata + fetcht 4,mem_context + coffset_sniff_anchor + iadd temp,pdata + fetcht 1,mem_lpm_overhead + isub temp,pdata + lshift16 pdata,alarm + bpatch patch15_1,mem_patch15 + fetch 2,mem_context + coffset_rx_window + rshift pdata,pdata + call clk2bt + deposit alarm + call clk_diff + copy clke,temp + call clk_diff_rt + rtn user +lpm_dispatch_sleep: + call clk2lpo +lpm_dispatch_lpo: + bpatch patch15_2,mem_patch15 + fetch 1,mem_lpm_xtalcnt + isub temp,null + branch lpm_clear_counter,positive + storet 4,mem_sleep_counter + call app_will_enter_lpm + call l2cap_lpm_save_txbuf + fetcht 4,mem_sleep_counter + branch lpm_sleep + +lpm_dispatch_unconn: + bpatch patch15_3,mem_patch15 + fetch 1,mem_context + rtnbit1 state_inconn // wont sleep in connection + rtnbit1 state_inpage // wont sleep when paging + fetch 1,mem_ssp_enable + branch lpm_unconn_nossp,blank + fetch 1,mem_sp_local_key_invalid // simple pairing is not ready + rtn blank +lpm_unconn_nossp: + bpatch patch15_4,mem_patch15 + fetch 1,mem_le_adv_enable + nbranch lpm_unconn_cont,blank + fetch 1,mem_scan_mode + rtn blank +lpm_unconn_cont: + fetch 2,mem_lpm_interval + rtn blank +lpm_sleep_btclk: + fetcht 1,mem_lpm_overhead + isub temp,pdata + arg 7500,temp /* 1.25ms */ + imul32 temp,pdata + branch lpm_dispatch_sleep + +lpm_set_mult: + bpatch patch15_5,mem_patch15 + disable wake + fetch 1,mem_state + rtnbit0 state_insniff + nbranch lpm_not_match,match + call lpm_match + fetch 2,mem_rx_window_sniff + store 2,mem_rx_window + fetch 1,mem_arq + bbit1 wack,lpm_mult_short + bmark0 mark_lpm_mult_enable,lpm_mult_short + call l2cap_malloc_is_fifo_empty + nbranch lpm_mult_short,blank + fetch 1,mem_classic_bt_flag + bbit1 SHORT_MULT_FLAG,lpm_mult_short +lpm_mult_wait_timeout: + jam 0,mem_lpm_current_mult + bmark0 mark_lpm_mult_enable,lpm_mult_short + fetch 1,mem_lpm_mult_cnt + branch lpm_mult_long,blank + increase -1,pdata + store 1,mem_lpm_mult_cnt + rtn + + +classic_bt_set_mult_short_flag: + arg SHORT_MULT_FLAG,queue + branch classic_bluetooth_set_flag + +classic_bt_clr_mult_short_flag: + arg SHORT_MULT_FLAG,queue + branch classic_bluetooth_clr_flag + + + +lpm_match: + jam 0,mem_sniff_unint_lost + fetch 3,mem_sniff_rcv + increase 1,pdata + store 3,mem_sniff_rcv + rtn + +lpm_not_match: + bpatch patch15_6,mem_patch15 + fetcht 2,mem_rx_window_sniff + rshift temp,temp + fetch 2,mem_rx_window + iadd temp,pdata + store 2,mem_rx_window +lpm_lost: + jam 0,mem_lpm_current_mult + fetch 3,mem_sniff_lost + increase 1,pdata + store 3,mem_sniff_lost + fetch 1,mem_sniff_unint_lost + increase 1,pdata + store 1,mem_sniff_unint_lost + rtn + +lpm_mult_short: + jam 0,mem_lpm_current_mult + fetch 1,mem_lpm_mult_timeout + store 1,mem_lpm_mult_cnt + rtn + +lpm_mult_long: + fetcht 1,mem_lpm_mult + storet 1,mem_lpm_current_mult + rtn + +lpm_cal_xtal_startup: + bpatch patch15_7,mem_patch15 + fetch 1,mem_lpm_xtalcnt + nrtn blank + hjam clksel_rc,core_clksel + setarg 0xf0c + call lpm_write_config + setarg 200000 + call sleep + until null,lpo_edge + copy lpo_time,alarm + call xtal_fast_wake + hjam clksel_xtal,core_clksel + nop 10 + until null,lpo_edge + deposit lpo_time + isub alarm,pdata + increase 0x30,pdata + arg 0xff,temp + call ceiling + store 1,mem_lpm_xtalcnt + nop 30000 + nop 30000 + nop 30000 + rtn + +lpm_cal_xtal_startup_by_snooze: + fetch 1,mem_lpm_xtalcnt + nrtn blank + hjam 0xff,core_xtal_stable_time + hjam clksel_rc,core_clksel + call xtal_fast_wake + setarg 1000 + iadd lpo_time,alarm + snooze + deposit lpo_time + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + nop 12000 //delay about 1ms + isub alarm,pdata + add pdata,0x30,pdata + arg 0xff,temp + call ceiling + store 1,mem_lpm_xtalcnt + nop 30000 + nop 30000 + nop 30000 //delay 90000 nop + rtn + + + + /* pdata is lpm_reg[11:0] */ +lpm_write_config: + arg 0xfff,contw + iand contw,contw + fetch 1,mem_lpm_config + and_into 0xf0,pdata + lshift8 pdata,pdata + ior contw,pdata + hstore 2,core_lpm_reg + ifetch 2,contr + istore 2,contw + +lpm_write_ctrl: + setarg lpmreg_sel_ctrl + branch lpm_write + +lpm_write_ctrl2: + setarg lpmreg_sel_ctrl2 +lpm_write: + until null,lpo_edge + hstore 1,core_lpm_wr + until null,lpo_edge + until null,lpo_edge + rtn + + +lpm_write_gpio_wakeup: + bpatch patch16_0,mem_patch16 + fetch 4,mem_gpio_wakeup_low + hstore 4,core_lpm_reg + setarg lpmreg_sel_gpiolow + call lpm_write + fetch 4,mem_gpio_wakeup_high + hstore 4,core_lpm_reg + setarg lpmreg_sel_gpiohigh + branch lpm_write + +lpm_get_wake_lock: + fetch 2,mem_lpm_wake_lock + qset1 pdata + store 2,mem_lpm_wake_lock + rtn + +lpm_put_wake_lock: + fetch 2,mem_lpm_wake_lock + qset0 pdata + store 2,mem_lpm_wake_lock + rtn + + + +lpm_check_wake_lock: + bpatch patch16_1,mem_patch16 + call app_check_wake_lock + fetch 2,mem_lpm_wake_lock + copy pdata,rega + fetch 1,mem_state_map + isolate1 smap_rxlmp,pdata + setflag true,wake_lock_lmp_rx,rega + fetch 1,mem_lmo_opcode1 + fetcht 1,mem_lmo_opcode2 + iadd temp,pdata + fetcht 1,mem_lmp_to_send + iadd temp,pdata + nsetflag blank,wake_lock_lmp_tx,rega + fetch 1,mem_le_tx_buff_used + nsetflag blank,wake_lock_ble_tx,rega + fetch 2,mem_l2cap_rxbuff1_len + fetcht 2,mem_l2cap_rxbuff2_len + iadd temp,pdata + nsetflag blank,wake_lock_l2cap_rx,rega + fetch UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51 + nsetflag blank,wake_lock_ipc_bt2c51,rega + fetch UTIL_FIFO_LEN,mem_ipc_fifo_c512bt + nsetflag blank,wake_lock_ipc_c512bt,rega + fetch 1,mem_hci_cmd + nsetflag blank,wake_lock_cmd,rega + fetch 1,mem_device_option + compare dvc_op_module,pdata,0xff + call lpm_uart_wake_lock,true + setarg -8 + iand rega,rega + copy rega,pdata + store 2,mem_lpm_wake_lock + rtn + +lpm_uart_wake_lock: + hfetch 2,core_uart_rxitems + nsetflag blank,wake_lock_uart_rx ,rega + hfetch 2,core_uart_txitems + nsetflag blank,wake_lock_uart_tx ,rega + rtn + +lpm_shut_down: + hfetch 4,core_lpm_ctrl + set0 27,pdata + hstore 4,core_lpm_reg + call lpm_write_ctrl + branch assert + +lpm_disable_exen_output: + hfetch 4,core_lpm_xtalcnt + set0 20,pdata + hstore 4,core_lpm_reg + branch lpm_write_ctrl2 + +check_bt_disabled: + fetch 2,mem_chip_functions + bbit1 bt_disabled,assert + rtn +check_ble_disabled: + fetch 2,mem_chip_functions + bbit1 ble_disabled,assert + rtn +check_module_disabled: + fetch 2,mem_chip_functions + bbit1 module_disable,assert + rtn + + + + + + + +//p_check_attempt_sniff: +// bbit0 state_insco,p_check_attempt_not_sco +// fetch 1,mem_current_sniff_attempt +// beq 2,p_check_attempt_sniff_restore_sco +// fetch 1,mem_arq +// bbit1 wack,p_check_attempt_notimeout +// bmark0 mark_esco_rxok,p_check_attempt_notimeout +//p_check_attempt_sniff_restore_sco: +// nbranch p_check_attempt_notimeout,master +// fetch 1,mem_lmp_to_send +// nbranch p_check_attempt_notimeout,blank +//p_check_attempt_sco_master: +// fetch 1,mem_sco_poll +// increase -1,pdata +// store 1,mem_sco_poll +// nbranch check_attempt_nomore,blank +// jam param_sco_poll,mem_sco_poll +// branch check_attempt_notimeout +//p_check_attempt_not_sco: +// compare type_null,type,0x1f +// branch check_timeout,true +// compare type_poll,type,0x1f +// branch check_timeout,true +// branch check_anchor_end +//p_check_attempt_notimeout: +//check_atttemp_decrease: +// fetch 1,mem_current_sniff_attempt +// increase -1,pdata +// store 1,mem_current_sniff_attempt +// rtn +//check_timeout: +// fetch 1,mem_sniff_timeout_temp +// increase 1,pdata +// store 1,mem_sniff_timeout_temp +//check_anchor_end: +// fetch 1,mem_current_sniff_attempt +// branch check_anchor_end_attempt0,blank +// call check_atttemp_decrease +// nrtn blank +//check_anchor_end_attempt0: +// fetch 1,mem_sniff_timeout_temp +// fetcht 1,mem_current_sniff_timeout +// isub temp,null +// branch p_blank,positive +// arg 1,pdata +// rtn +//p_blank: +// arg 0,pdata +// rtn + + + Index: 1066_OTP_FLASH/program/hci_h4.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/hci_h4.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/hci_h4.prog (working copy) @@ -0,0 +1,138 @@ + +ifdef DEBUG_H4LOG_ENABLE +hci_log: + copy regc,pdata + rtneq 0x11 + fetch 1,mem_hci_log + increase 1,pdata + sub pdata,hci_log_cnt,null + branch hci_log_calc_ptr,positive + setarg 0 +hci_log_calc_ptr: + store 1,mem_hci_log + arg hci_log_size,temp + imul32 temp,pdata + arg mem_hci_log+hci_log_size,contw + iadd contw,contw +hci_log_write_content: + fetch 1,mem_hci_log + istore 1,contw//counter + copy regb,pdata + istore 1,contw + fetch 2,mem_le_event_count + istore 1,contw + copy clke_bt,pdata + istore 3,contw + fetch 1,mem_last_freq + istore 1,contw + fetch 1,mem_le_rxbuf + istore 1,contw + rtn +else + +endif + +hci_rx_h4: + bpatch patch1f_5,mem_patch1f + fetch 1,mem_hci_cmd + nrtn blank +hci_rx_h4_1: + call hci_h4_parse_packet + ncall h4_rx_discard_packet,user + rtn + +hci_h4_parse_packet: + bpatch patch1f_6,mem_patch1f + copy contru,rega + arg 4,temp + ifetch 1,contru //type + beq HCI_H4_TYPE_CMD,hci_h4_parse_packet_wait_len + increase 1,temp //acl packet has 2 bytes for length + beq HCI_H4_TYPE_ACL,hci_h4_parse_packet_wait_len + copy contru,pdata + hstore 2,core_uart_rrptr + rtn +hci_h4_parse_packet_wait_len: + hfetch 2,core_uart_rxitems + isub temp,null + nbranch hci_h4_parse_packet_wait_len,positive // while(rxitems >= 4 or 5); + //Make sure length has been recieved. + disable user + copy rega,contru + call h4_get_rx_payload_len + iadd temp,temp +hci_h4_parse_packet_wait: + hfetch 2,core_uart_rxitems + isub temp,null + nbranch hci_h4_parse_packet_wait,positive//wait for rcv a complete packet + copy rega,contru + ifetch 1,contru //HCI packet type + beq HCI_H4_TYPE_CMD,process_hci_cmd + branch assert + +h4_rx_discard_packet: + bpatch patch1f_7,mem_patch1f + hfetch 2,core_uart_rrptr + iforce contru + call h4_get_rx_payload_len + iadd contru,contru + deposit contru + hstore 2,core_uart_rrptr + rtn + + +//contru = pointer to packet start +//return len via pdata +h4_get_rx_payload_len: + ifetch 1,contru + increase 2,contru + beq HCI_H4_TYPE_ACL,h4_get_rx_payload_len_acl + ifetch 1,contru + rtn +h4_get_rx_payload_len_acl: + ifetch 2,contru + rtn + +h4_get_tx_ptr: + hfetch 2,core_uart_twptr + increase -5,contwu + iadd contwu,contwu + rtn + +h4_send_packet_event: + arg HCI_H4_TYPE_EVENT,temp //type + branch h4_send_packet +h4_send_packet_acl: //upgoing ACL + arg HCI_H4_TYPE_ACL,temp //type +h4_send_packet: + bpatchx patch20_0,mem_patch20 + increase 1,loopcnt + hfetch 2,core_uart_twptr + copy pdata,contwu + copy loopcnt,pdata //length + istoret 1,contwu //packet type in temp + increase -1,pdata + iadd contwu,contwu + copy contwu,pdata + store 2,mem_hci_acl_tx_trigger_wptr + copy temp,pdata +ifdef ACL_DEBUG + beq HCI_H4_TYPE_EVENT,h4_send_packet0 + hfetch 1,core_uart_txitems + ncall ice_break,blank + +h4_send_packet0: + copy temp,pdata +endif + rtneq HCI_H4_TYPE_ACL //not send acl packet immediately + fetch 2,mem_hci_acl_tx_trigger_wptr + hstore 2,core_uart_twptr + branch h4_send_acl_trigger_clear + + +h4_send_acl_trigger_clear: + setarg 0 + store 2,mem_hci_acl_tx_trigger_wptr + rtn + + Index: 1066_OTP_FLASH/program/hci_main.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/hci_main.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/hci_main.prog (working copy) @@ -0,0 +1,400 @@ +/*********************************/ +/********** HCI *****************/ +/*********************************/ + +hci_init: + rtn wake + setarg hci_idle_dispatch + store 2,mem_cb_idle_process + + setarg uart_baud_115200 + store uart_baud_len,mem_baud +hci_lpm_init: + setarg mem_h5rx_buf + hstore 2,core_uart_rsaddr + setarg mem_h5rx_buf_end + hstore 2,core_uart_readdr + setarg mem_h5tx_buf + hstore 2,core_uart_tsaddr + call hci_sel_init +hci_reinit: + hjam 0x0,core_uart_ctrl + setarg mem_h5tx_buf + hstore 2,core_uart_twptr + hstore 2,core_uart_trptrp + setarg mem_h5rx_buf + hstore 2,core_uart_rrptr + store 2,mem_h5rx_rptr +hci_init_common: + hfetch 2,core_clkoff + set0 CLOCK_OFF_UART,pdata + hstore 2,core_clkoff + call uart_set_baud_by_mem + hjam uartclk_dpll,core_uart_clksel + hjam uart_ctrl_h4,core_uart_ctrl + rtn + +hci_sel_init: + setarg mem_h5tx_buf_end + hstore 2,core_uart_teaddr + hfetch 1,core_gpio_sel1 + or_into 0x07,pdata + hstore 1,core_gpio_sel1 + rtn + + +hci_rx_packet: + bpatchx patch20_1,mem_patch20 + hfetch 1,core_uart_status + iforce regb + bbit0 uart_status_rx_fifo_empty,hci_rx_packet_cont + hfetch 2,core_uart_rxitems + iforce regc + arg 0x44f,temp + isub temp,null + nrtn zero +hci_rx_packet_cont: + hfetch 2,core_uart_rrptr + iforce contru + branch hci_rx_h4 + +uart_send_byte: + hfetcht 1,core_uart_status + isolate1 6,temp + branch uart_send_byte,true + hstore 1,core_uart_txd + rtn + +process_hci_cmd: + bpatchx patch20_2,mem_patch20 + fetch 1,mem_hci_cmd + branch process_hci_cmd_cont,blank + enable user /* last command still there */ + rtn +process_hci_cmd_cont: + ifetch 2,contru + iforce alarm /* alarm is used for sending */ + iforce queue /* queue is OCF */ + ifetch 1,contru /* skip hci length */ + iforce temp /* temp has the length */ + rshift2 alarm,pdata + rshift8 pdata,pdata + beq HCI_OGF_VENDOR_SPECIFIC,phci_grp_vendor_specific + rtn + + +phci_grp_vendor_specific: + bpatchx patch20_3,mem_patch20 + deposit queue + beq HCI_VENDOR_CMD_RESET,hci_normal_reply + beq HCI_VENDOR_CMD_CHIPID,phci_grp_vendor_chipid + beq HCI_VENDOR_CMD_BAUD,phci_grp_vendor_baud + beq HCI_VENDOR_CMD_PATCH,phci_grp_vendor_patch + beq HCI_VENDOR_CMD_PATCH_DONE,phci_grp_vendor_done + beq HCI_VENDOR_CMD_ECHO,hci_normal_reply + beq HCI_VENDOR_CMD_BDADDR,phci_grp_vendor_bdaddr + beq HCI_VENDOR_CMD_ENTER_LPM,phci_grp_vendor_enter_lpm + + beq HCI_VENDOR_CMD_MEM,phci_grp_vendor_mem + beq HCI_VENDOR_CMD_EEP,phci_grp_vendor_eep + beq HCI_VENDOR_CMD_PATCH_SEC_INIT,phci_grp_vendor_patch_sec_init + beq HCI_VENDOR_CMD_PATCH_SEC,phci_grp_vendor_patch_sec + branch hci_normal_reply + +phci_grp_vendor_enter_lpm: + call hci_normal_reply + call wait_uarttx + call gpio_pu_uart_tx +hci_enter_lpm: + call app_put_lpm_wake_lock + call app_l2cap_flow_control_enable + branch gpio_rx_config_input_with_pu + +hci_exit_lpm: + jam HCI_RX_READY,mem_hci_lt_rx_state + call app_get_lpm_wake_lock + call hci_lpm_init + branch app_l2cap_flow_control_disable + +phci_grp_vendor_chipid: + call hci_get_cmd_complete_ptr + hfetch 2,core_chipid + istore 2,contwu + force 6,loopcnt + branch hci_command_complete + +phci_grp_vendor_baud: + ifetch 2,contru + store 2,mem_baud + hstore 2,core_uart_baud + rtn + + +phci_grp_vendor_patch_common: + //hjam 0x80,core_ucode_ctrl + ifetch 1,contru + copy pdata,temp //check sum via temp + hstore 1,core_ucode_low + ifetch 1,contru + iadd temp,temp + set1 7,pdata + hstore 1,core_ucode_ctrl + ifetch 1,contru + iadd temp,temp + copy pdata,loopcnt + rtn + +phci_grp_vendor_patch: + bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad + call phci_grp_vendor_patch_common +phci_grp_vendor_patch_loop: + ifetch 1,contru + hstore 1,core_ucode_data + iadd temp,temp + loop phci_grp_vendor_patch_loop +phci_grp_vendor_patch_check_sum: + and temp,0xff,temp + ifetch 1,contru + isub temp,null + nbranch phci_grp_vendor_patch_bad,zero + branch hci_normal_reply + + +phci_grp_vendor_patch_sec: + bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad + call phci_grp_vendor_patch_common + store 8,mem_pdatatemp +phci_grp_vendor_patch_sec_loop: + call do_aes_cbc + arg 16,loopcnt + arg mem_temp_block0,contw + call load_uart_sum_loop + storet 8,mem_temp + arg mem_temp_block2,contw + call store_aes_result + arg mem_temp_block2,rega + arg mem_temp_block0,regb + arg mem_temp_block3,contw + call xor16 + arg 16,loopcnt + arg mem_temp_block3,contr + call load_ucode_only_loop + fetcht 8,mem_temp + fetch 8,mem_pdatatemp + increase -16,pdata + store 8,mem_pdatatemp + nbranch phci_grp_vendor_patch_sec_loop,blank + branch phci_grp_vendor_patch_check_sum + +load_ucode_only_loop: + ifetch 1,contr + hstore 1,core_ucode_data + loop load_ucode_only_loop + rtn + +load_uart_sum_loop: + ifetch 1,contru + istore 1,contw + iadd temp,temp + loop load_uart_sum_loop + rtn + +phci_grp_vendor_patch_sec_init: + bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad + arg 0,temp + arg 16,loopcnt + arg mem_temp_block0,contw + call load_uart_sum_loop + hfetch 1,core_gpio_key2 + and_into 0xfd,pdata // disable aes for iv + hstore 1,core_gpio_key2 + arg mem_temp_block0,contr + arg 16,loopcnt + call aes_load_data + call aes_init + call aes_clear_data + branch phci_grp_vendor_patch_check_sum + + +phci_grp_vendor_done: + arg 0x20,loopcnt //patch switch length + arg mem_patch00,contw + arg 0,temp //checksum +phci_grp_vendor_done_loop: + ifetch 1,contru + istore 1,contw + iadd temp,temp + loop phci_grp_vendor_done_loop + and temp,0xff,temp + ifetch 1,contru + isub temp,null + nbranch phci_grp_vendor_patch_bad,zero + hjam 0,core_ucode_ctrl + call hci_normal_reply + call h4_rx_discard_packet + call clear_key_buf + call wait_uarttx + branch soft_reset + +phci_grp_vendor_patch_bad: + hjam 0,core_ucode_ctrl + branch start + +phci_grp_vendor_bdaddr: + ifetch 6,contru + store 6,mem_lap + branch hci_normal_reply + + +phci_grp_vendor_mem: + ifetch 1,contru + store 1,mem_hci_curr_len + copy pdata,loopcnt + ifetch 2,contru + store 2,mem_hci_curr_target + copy pdata,contw + call uart_copy_rx_bytes + branch hci_normal_reply + + +phci_grp_vendor_eep: + ifetch 1,contru + store 1,mem_hci_curr_len + copy pdata,loopcnt + ifetch 2,contru + store 2,mem_hci_curr_target + arg mem_l2cap_rxbuff1,contw + call uart_copy_rx_bytes + fetcht 1,mem_hci_curr_len + arg mem_l2cap_rxbuff1,rega + fetch 2,mem_hci_curr_target + branch iicd_write_ota_data + + + + +hci_normal_reply: + force 4,loopcnt +hci_command_complete: /* loopcnt is hci length */ + call hci_get_payload_ptr + force 0x1,pdata + istore 1,contwu + deposit alarm + istore 3,contwu + force HCI_EVENT_COMMAND_COMPLETE,queue +hci_send_event: /* queue:event code, loopcnt: length */ + bpatchx patch20_4,mem_patch20 + call hci_get_packet_ptr + deposit queue + istore 1,contwu + deposit loopcnt + istore 1,contwu +hci_send_event_raw: + force 5,queue + increase 2,loopcnt +hci_send_packet: + branch h4_send_packet_event + +hci_send_commu_ready_event: + force HCI_EVENT_VENDOR_SPECIFIC,queue + call hci_get_payload_ptr + setarg HCI_VENDOR_EVENT_COMMU_READY + istore 1,contwu + force 1,loopcnt + branch hci_send_event + +hci_get_cmd_complete_ptr: + force 12,contwu + branch hci_get_tx_ptr + +hci_get_payload_ptr: + force 8,contwu + branch hci_get_tx_ptr + +hci_get_packet_ptr: + force 6,contwu +hci_get_tx_ptr: + branch h4_get_tx_ptr + + + +calc_tx_crc16: + pulse crc16 + enable enable_crc +crcloop: + ifetch 1,contwu + inject bucket,8 + loop crcloop + enable enable_parity + inject bucket,16 + disable enable_parity + disable enable_crc + disable crc16 + byteswap pdata,pdata + rtn + + + +cmd_exit: + jam 0,mem_hci_cmd + rtn +cmd_check_plap: + fetch 6,mem_hci_plap + fetcht 6,mem_plap + isub temp,null + rtn + + + +//enable ssp master sm +cmd_pair: + fetch 1,mem_op + bbit1 op_inrand_req,cmd_pair_passive + call tid_initiate + jam LMP_IN_RAND,mem_lmo_opcode2 + branch cmd_exit +cmd_pair_passive: + set0 op_inrand_req,pdata + store 1,mem_op + call lmp_accept_inrand + setarg 0 + setflag master,smap_lmptid,pdata + store 1,mem_lmo_tid2 + branch cmd_exit + rtn +cmd_in_sniff: + jam LMP_SNIFF_REQ,mem_lmo_opcode2 + arg mem_sniff_payload,contw + setarg 0 + isolate1 27,clke_bt + setflag true,1,pdata /* use init 2 if bit27 of clke is 1 */ + istore 1,contw + setarg 0 /* dsniff */ + istore 2,contw + fetch 2,mem_sniff_param_interval /* tsniff */ + istore 2,contw + fetch 1,mem_sniff_param_attempt /* attempt */ + istore 2,contw + fetch 1,mem_sniff_param_timeout /* timeout */ + istore 2,contw + branch cmd_exit + +cmd_exit_sniff: + jam LMP_UNSNIFF_REQ,mem_lmo_opcode2 + branch cmd_exit + +hci_idle_dispatch: + call gpio_check_uart_state + rtn true + arg UART_WAKEUP_RX,temp + call gpio_get_bit + nbranch uart_wake_up,true + jam HCI_RX_WAKE,mem_hci_lt_rx_state + rtn +uart_wake_up: + fetch 1,mem_hci_lt_rx_state + rtnne HCI_RX_WAKE + call hci_exit_lpm + branch hci_send_commu_ready_event + + Index: 1066_OTP_FLASH/program/hid.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/hid.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/hid.prog (working copy) @@ -0,0 +1,84 @@ +/** +* the following API is to send the HID data +* +*/ + +/** +* the following API is to process the hid rx data +* +*/ +//handle the hid data + +hid_rx_process: + bpatchx patch20_5,mem_patch20 + fetch 2,mem_l2cap_payload_ptr + copy pdata,contr + ifetch 1,contr + and pdata,0x0f,temp + rshift4 pdata,pdata //hidtype + beq hid_type_set_idle,hid_rx_process_handshake + beq hid_type_set_protocol,hid_rx_process_handshake + beq hid_type_data,hid_rx_process_data + beq HID_TYPE_SET_REPORT,hid_rx_process_set_report + beq HID_TYPE_CONTROL,hid_rx_process_hid_control + rtn + +hid_rx_process_hid_control: + copy temp,pdata + beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,hid_rx_process_virtual_cable_unplug + beq HID_CONTROL_P_SUSPEND,hid_rx_process_suspend + rtn + +hid_rx_process_virtual_cable_unplug: + jam BT_EVT_VIRTUAL_CABLE_UNPLUG,mem_fifo_temp + call ui_ipc_send_event + fetch 1,mem_device_option + rtnbit0 dvc_op_mouse + copy temp,pdata + beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,mouse_irtual_cable_unplug + rtn +hid_rx_process_suspend: + rtn + +hid_rx_process_set_report: + call hid_rx_process_data + arg 0x01,rega + call hid_malloc_tx_buff + fetch 2,mem_hid_ctrl_remote_cid + istore 2,contw + setarg 0x00 + istore 1,contw + rtn + +hid_rx_process_handshake: + arg 1,regA//payload length + call hid_malloc_tx_buff + fetch 2,mem_hid_ctrl_remote_cid + istore 2,contw + setarg 0 + istore 1,contw + jam 1,mem_ui_data_txbuff_length + fetch 1,mem_hid_control_state + set1 l2cap_channel_hid_handshake_done + store 1,mem_hid_control_state + jam BT_EVT_HID_HANDSHAKE,mem_fifo_temp + branch ui_ipc_send_event + +hid_rx_process_data: + ifetch 1,contr + beq HID_REPORT_ID_KB,hid_rx_process_data_hid_kb + rtn + +hid_rx_process_data_hid_kb: + rtn + + +hid_malloc_tx_buff: + call l2cap_malloc + copy rega,temp + storet 1,mem_ui_data_txbuff_length + copy pdata,contw + copy rega,pdata + istore 2,contw //hid payload length + rtn + Index: 1066_OTP_FLASH/program/kscan_peipherals.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/kscan_peipherals.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/kscan_peipherals.prog (working copy) @@ -0,0 +1,152 @@ + + + +ifdef COMPILE_KEYSCAN +/****************************************key scan***************************************/ +/******the key_scan use explain****** + +* First:call kscan_init +* Second:call kscan_main +* Finally: the key scanning reault is mem_kscan_value. + +****** +*************************************************************************************** +*/ +kscan_init: + fetch 2,mem_kscan_ptr + copy pdata,regc + call kscan_row_num_select + branch kscan_col_num_select + +kscan_col_init: + setarg 0 + add regc,KEYSCAN_OFFECT_SHIFT_COUNT,rega + istore 1,rega + add regc,KEYSCAN_OFFECT_COL_NUM,rega + ifetch 1,rega + branch kscan_value_init,blank + copy pdata,loopcnt + add regc,KEYSCAN_OFFECT_COL_CONF_PIN,regb +kscan_col_loop: + ifetcht 1, regb + call gpio_config_output + ifetcht 1, regb + call gpio_out_active + call kscan_value_init + ifetcht 1,regb + call gpio_config_input + increase 1,regb + loop kscan_col_loop + rtn +kscan_row_num_select: + add regc,KEYSCAN_OFFECT_ROW_NUM,contw + ifetch 1,contw + rtn blank + copy pdata,loopcnt + add regc,KEYSCAN_OFFECT_ROW_CONF_PIN,rega + branch kscan_ioselect_input +kscan_col_num_select: + add regc,KEYSCAN_OFFECT_COL_NUM,contw + ifetch 1,contw + rtn blank + copy pdata,loopcnt + add regc,KEYSCAN_OFFECT_COL_CONF_PIN,rega + branch kscan_ioselect_input +kscan_ioselect_input: + ifetcht 1,rega + call gpio_config_input + increase 1,rega + loop kscan_ioselect_input + rtn +kscan_value_init: + setarg 0 + add regc,KEYSCAN_OFFECT_ROW_COUNT,rega + istore 1,rega + add regc,KEYSCAN_OFFECT_ROW_CONF_PIN,rega +kscan_save_vaule: + ifetcht 1,rega + call gpio_get_bit + add regc,KEYSCAN_OFFECT_VALUE_TEMP,temp + ifetch 2,temp + add regc,KEYSCAN_OFFECT_SHIFT_COUNT,contr + ifetcht 1,contr + copy temp,queue + qsetflag true,pdata + + add regc,KEYSCAN_OFFECT_VALUE_TEMP,temp + istore 2,temp + increase 1,rega + + add regc,KEYSCAN_OFFECT_SHIFT_COUNT,contw + ifetch 1,contw + increase 1,pdata + istore 1,contw + + add regc,KEYSCAN_OFFECT_ROW_COUNT,contw + ifetcht 1,contw + increase 1,temp + istoret 1,contw + add regc,KEYSCAN_OFFECT_ROW_NUM,contw + ifetch 1,contw + ixor temp,null + nbranch kscan_save_vaule,zero + rtn + + +kscan_lpm_berfore: + fetch 2,mem_kscan_ptr + copy pdata,regc + add regc,KEYSCAN_OFFECT_ROW_NUM,contw + ifetch 1,contw + copy pdata,loopcnt + add regc,KEYSCAN_OFFECT_COL_CONF_PIN,rega +kscan_select_wake: + ifetcht 1,rega + call gpio_set_wake + increase 1,rega + loop kscan_select_wake + rtn + +kscan_clkn_bt_timer_check: + ifetcht 4,rega + copy clkn_bt,pdata + isub temp,null + rtn positive + setarg 0 + istore 4,rega + rtn + +kscan_process: + fetch 2,mem_kscan_ptr + copy pdata,regc + add regc,KEYSCAN_OFFECT_BTCLK,rega + call kscan_clkn_bt_timer_check + ifetch 4,rega + add regc,KEYSCAN_OFFECT_BTCLK_INTERVAL,regb + ifetcht 1,regb + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + istore 4,rega + call kscan_col_init + add regc,KEYSCAN_OFFECT_VALUE_TEMP,rega + ifetch 2,rega + add regc,KEYSCAN_OFFECT_LASVALUE,rega + ifetcht 2,rega + istore 2,rega + iand temp,pdata + add regc,KEYSCAN_OFFECT_VALUE,rega + istore 2,rega + rtn + +endif + + + + + + + + + Index: 1066_OTP_FLASH/program/l2cap.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/l2cap.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/l2cap.prog (working copy) @@ -0,0 +1,1929 @@ +/************************************/ +/*initialize L2CAP related variables*/ +/************************************/ +l2cap_init: + branch l2cap_init_wake,wake +l2cap_init_work: + setarg mem_l2cap_xmem_end + arg mem_l2cap_xmem_start,contw + isub contw,loopcnt + call clear_mem +l2cap_init_wake: + bpatchx patch20_6,mem_patch20 + setarg mem_sdp_mem_end + arg mem_sdp_mem_start,contw + isub contw,loopcnt + call clear_mem + setarg mem_l2cap_mem_end + arg mem_l2cap_mem_start,contw + isub contw,loopcnt + call clear_mem + branch l2cap_lpm_load_txbuf + +process_rx_l2cap_pkt: + bpatchx patch20_7,mem_patch20 + copy contr,temp + //call l2cap_malloc_is_fifo_full + //nrtn blank + copy temp,contr + ifetch 2,contr + store 2,mem_l2cap_rx_pkt_length + ifetch 2,contr + store 2,mem_l2cap_rx_cid + deposit contr + store 2,mem_l2cap_payload_ptr + fetch 1,memui_reconnect_mode + beq NO_RECONNECTION,l2cap_rx_multiplexing + branch ml2cap_rx_multiplexing + +l2cap_rx_multiplexing: + fetch 2, mem_l2cap_rx_pkt_length + branch l2cap_rx_reset_state,blank + bpatchx patch21_0,mem_patch21 + fetch 1,mem_l2cap_rx_cid + beq L2CAP_signal_channel,l2cap_call_proc_signal +l2cap_rx_multiplexing0: + beq L2CAP_SDP_channel,l2cap_call_proc_sdp + beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm + beq L2CAP_HID_Control_channel,l2cap_call_proc_hid + beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid + branch l2cap_rx_reset_state + +l2cap_check_map: +// call l2cap_malloc_is_fifo_full +// nrtn blank + bpatchx patch21_1,mem_patch21 + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + beq 0,set_pdata_0 + beq 1,set_pdata_0 + beq 2,set_pdata_0 + beq 3,set_pdata_0 + beq 0x81,set_pdata_0 + beq 0xc0,set_pdata_0 + beq 0x80,set_pdata_0 + beq 0x40,set_pdata_0 + rtn + +set_pdata_0: + setarg 0 + rtn + + +l2cap_call_proc_signal: + call l2cap_check_map + nrtn blank +l2cap_call_proc_signal0: + call l2cap_malloc_signal_channel + call l2cap_process_signal_pkt + fetcht 2,mem_l2cap_signal_tx_length + branch l2cap_call_proc_no_reply,blank + call l2cap_get_signal_tx_buff + fetch 2,mem_l2cap_signal_tx_length + istore 2,contw + force L2CAP_signal_channel,pdata + istore 2,contw + branch l2cap_rx_reset_state + +l2cap_call_proc_sigal_pending: + fetch 1,mem_l2cap_pending_item + rtn blank + copy pdata,rega + bpatchx patch21_2,mem_patch21 + fetch 4,mem_l2cap_sdpres_delay_time + arg 0x100,temp + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + jam 0,mem_l2cap_pending_item + copy rega,pdata + beq L2CAP_SDP_channel,l2cap_sdp_conn_succ + branch assert +l2cap_sdp_conn_succ: + arg 0,debug + call l2cap_malloc_signal_channel + call restore_l2cap_req_param + call l2cap_get_signal_tx_payload + call save_cont_pointers + call send_connection_sdp_res + call l2cap_get_signal_tx_buff + //fetch 2,mem_l2cap_signal_tx_length + setarg 0x000c + istore 2,contw + force L2CAP_signal_channel,pdata + istore 2,contw + branch l2cap_rx_reset_state + + + +l2cap_reset_sdp_map: + bpatchx patch21_3,mem_patch21 + fetch 2,mem_sdp_tx_pkt_length + increase 4,pdata + rshift4 pdata,pdata + rshift3 pdata,pdata + add pdata,1,temp ///temp: how many128 + arg mem_tx_fifo3,contr + ifetch 3,contr + rtn blank + store 3,mem_tx_fifo_map_temp + fetch 1,mem_tx_fifo_map_temp + copy pdata,rega + call check_l2cap_map + copy regb,pdata + store 1,mem_tx_fifo3 + rtn + +check_l2cap_map: + arg 0,queue + arg 0,regb + +check_l2cap_map_loop: + sub queue,7,null + nrtn positive + qisolate1 rega + branch check_l2cap_map_used,true + branch check_l2cap_map_used2 + +check_l2cap_map_used: + copy temp,pdata + branch check_l2cap_map_used2,blank + qset1 regb + increase -1,temp + +check_l2cap_map_used2: + increase 1,queue + branch check_l2cap_map_loop + +l2cap_call_proc_sdp: + call l2cap_malloc_is_fifo_empty + nrtn blank// not process this packet until fifo empty + call l2cap_check_map + nrtn blank + call l2cap_malloc_sdp_channel + call sdp_process + call l2cap_reset_sdp_map + branch l2cap_call_proc_sdp_common + + +ml2cap_call_proc_sdp: + call l2cap_malloc_is_fifo_empty + nrtn blank// not process this packet until fifo empty + call l2cap_malloc_sdp_channel + call sdp_process +l2cap_call_proc_sdp_common: + call l2cap_get_sdp_tx_buff + fetch 2,mem_sdp_tx_pkt_length + branch l2cap_call_proc_no_reply,blank + istore 2,contw + fetch 2,mem_sdp_remote_cid + istore 2,contw + branch l2cap_rx_reset_state + +l2cap_call_proc_hid: + call hid_rx_process + branch l2cap_rx_reset_state + +l2cap_call_proc_rfcomm: + bpatchx patch21_4,mem_patch21 + jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag + call rfcomm_rx_process + fetch 1,mem_rfcomm_malloc_fail_flag + rtneq RFCOMM_MALLOC_FAIL + branch l2cap_rx_reset_state +l2cap_call_proc_no_reply: + call l2cap_malloc_discard + //fall through +l2cap_rx_reset_state: + setarg 0 + store 2,mem_l2cap_rx_pkt_length + store 2,mem_l2cap_rx_cid + jam L2CAP_RX_DONE,mem_l2cap_rx_done + rtn +/* To process one L2CAP signalling pkt consisting of 1 or more signalling commands. */ +l2cap_process_signal_pkt: + bpatchx patch21_5,mem_patch21 + call l2cap_get_signal_tx_payload + force 0,regB + fetch 2,mem_l2cap_rx_pkt_length + copy pdata,regC + fetch 2,mem_l2cap_payload_ptr + iforce contr +l2cap_process_signal_pkt_loop: + call l2cap_process_one_signal + deposit regC + increase -4,regC + increase -4,pdata + nbranch l2cap_process_signal_pkt_loop,blank + copy regB,pdata + store 2,mem_l2cap_signal_tx_length + rtn + +l2cap_process_one_signal: + bpatchx patch21_6,mem_patch21 + ifetch 1,contr + beq signal_cmd_reject,l2cap_proc_signal_cmd_reject + beq signal_connect_req,l2cap_proc_signal_connect_req + beq signal_connect_rsp,l2cap_proc_signal_connect_rsp + beq signal_config_req,l2cap_proc_signal_config_req + beq signal_config_rsp,l2cap_proc_signal_config_rsp + beq signal_disconnect_req,l2cap_proc_signal_disconnect_req + beq signal_disconnect_rsp,l2cap_proc_signal_disconnect_rsp + beq signal_echo_req,l2cap_proc_signal_echo_req + beq signal_echo_rsp,l2cap_proc_signal_echo_rsp + beq signal_info_req,l2cap_proc_signal_info_req + beq signal_info_rsp,l2cap_proc_signal_info_rsp + call l2cap_reject_command +l2cap_process_one_signal_rtn: + rtn + +l2cap_proc_signal_info_req: + ifetch 1,contr //IDs + copy pdata,queue + ifetch 2,contr //length + copy pdata,rega + copy regc,pdata + isub rega,regc + setarg signal_info_rsp + istore 1,contw + copy queue,pdata + istore 1, contw + ifetch 2,contr +l2cap_proc_signal_info_req_reply: + beq L2CAP_SIG_EXT_FEATRUE,l2cap_proc_signal_info_req_ext + beq L2CAP_SIG_FIX_FEATRUE,l2cap_proc_signal_info_req_fix + rtn +l2cap_proc_signal_info_req_ext: + setarg 0x020008 + istore 6, contw + setarg 0x0280 + istore 4, contw + force 12,pdata + branch l2cap_proc_signal_info_req_common +l2cap_proc_signal_info_req_fix: + setarg 0x3000c + istore 6, contw + setarg 0x0006 + istore 8, contw + force 16,pdata +l2cap_proc_signal_info_req_common: + iadd regb,regb + branch l2cap_process_one_signal_rtn + +ml2cap_proc_signal_info_req: + ifetch 1,contr //IDs + copy pdata,queue + ifetch 2,contr //length + copy pdata,rega + ifetch 2,contr + store 2,mem_temp + copy regc,pdata + isub rega,regc + call l2cap_get_signal_tx_payload + setarg signal_info_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + fetch 2,mem_temp + branch l2cap_proc_signal_info_req_reply + + +/* Respond to the command reject signal sent from the remote BD. */ +l2cap_proc_signal_cmd_reject: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + iadd contr,contr + copy regC,pdata + isub regA,regC +l2cap_proc_signal_cmd_reject_rtn: + branch l2cap_process_one_signal_rtn +/* Respond to an L2CAP connection request from remote BD. (generate a connection_rsp) */ +l2cap_proc_signal_connect_req: + call save_cont_pointers + //fetch 6,mem_inquiry_bd_addr + //store 6,mem_master_paged_bd_addr + call load_cont_pointers + arg 0,debug + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,temp //PSM + ifetch 2,contr + copy pdata,timeup + bpatchx patch21_7,mem_patch21 + copy temp,pdata + beq PSM_SDP,l2cap_proc_signal_connect_req_sdp + beq PSM_RFCOMM,l2cap_proc_signal_connect_req_rfcomm + beq PSM_HID_control,l2cap_proc_signal_connect_req_hid_ctrl + beq PSM_HID_interrupt,l2cap_proc_signal_connect_req_hid_int + call l2cap_reject_command + branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_sdp: + call save_cont_pointers + arg L2CAP_SDP_channel,temp + fetch 2,mem_sdp_remote_cid + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_sdp_remote_cid + copy clkn_bt,pdata + store 4,mem_l2cap_sdpres_delay_time + call store_l2cap_req_param + branch send_connection_pending + +store_l2cap_req_param: + storet 2,mem_psm + deposit timeup + store 2,mem_scid + deposit rega + store 2,mem_cmd_length + deposit regb + store 2,mem_tt2 + deposit regc + store 2,mem_tt3 + deposit queue + store 2,mem_id + rtn + +restore_l2cap_req_param: + fetcht 2,mem_psm + fetch 2,mem_scid + copy pdata,timeup + fetch 2,mem_cmd_length + copy pdata,rega + fetch 2,mem_tt2 + copy pdata,regb + fetch 2,mem_tt3 + copy pdata,regc + fetch 2,mem_id + copy pdata,queue + rtn + +l2cap_proc_signal_connect_req_rfcomm: + call save_cont_pointers + setarg L2CAP_RFCOMM_channel + arg L2CAP_RFCOMM_channel,temp + fetch 2,mem_RFCOMM_remote_CID + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_RFCOMM_remote_CID + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_rfcomm_state + branch send_connection_res +l2cap_proc_signal_connect_req_hid_ctrl: + call save_cont_pointers + arg L2CAP_HID_Control_channel,temp + fetch 2,mem_hid_ctrl_remote_cid + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_hid_ctrl_remote_cid + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_control_state + branch send_connection_res +l2cap_proc_signal_connect_req_hid_int: + call save_cont_pointers + deposit clke + arg L2CAP_HID_Interrupt_channel,temp + fetch 2,mem_hid_int_remote_cid + nbranch already_connected,blank + copy timeup,pdata + store 2,mem_hid_int_remote_cid + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_interrupt_state + branch send_connection_res + +send_connection_pending: + setarg L2CAP_connect_pending + store 2,memL2CAP_T1 + jam L2CAP_SDP_channel,mem_l2cap_pending_item + branch send_connection_res0 +send_connection_sdp_res: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_sdp_state +send_connection_res: + setarg L2CAP_connect_successful + store 2,memL2CAP_T1 +send_connection_res0: + bpatchx patch22_0,mem_patch22 + call load_cont_pointers + setarg signal_connect_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0008 + istore 2,contw + copy temp,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + fetch 2,memL2CAP_T1 + beq L2CAP_connect_pending,connect_pending + isolate0 0,debug + branch connect_suc,true + setarg L2CAP_connect_refused_no_resources +connect_suc: + istore 2,contw + force 0x0000,pdata + istore 2,contw + setarg 12 + branch connect_req_update_byte_counts +connect_pending: + istore 2,contw + force 0x0002,pdata + istore 2,contw + setarg 12 + branch connect_req_update_byte_counts + +already_connected: + set1 0,debug + branch send_connection_res +connect_req_update_byte_counts: + iadd regB,regB + copy regC,pdata + isub regA,regC + branch l2cap_proc_signal_connect_req_rtn +l2cap_proc_signal_connect_req_rtn: + branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp: + ifetch 1,contr //identifier + copy pdata,queue + ifetch 2,contr //length + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr //remote cid + copy pdata,timeup + ifetch 2,contr //local cid + copy pdata,temp + bpatchx patch22_1,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_connect_rsp_hid_int,zero + rtn + +l2cap_proc_signal_connect_rsp_sdp: + copy timeup,pdata + store 2,mem_sdp_remote_cid + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_sdp_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_connect_rsp_rfcomm: + copy timeup,pdata + store 2,mem_rfcomm_remote_CID + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_rfcomm_state + rtn +l2cap_proc_signal_connect_rsp_hid_int: + copy timeup,pdata + store 2,mem_hid_ctrl_remote_cid + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_interrupt_state + rtn +l2cap_proc_signal_connect_rsp_hid_ctrl: + copy timeup,pdata + store 2,mem_hid_int_remote_cid + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata + store 1,mem_hid_control_state + rtn + +l2cap_proc_signal_config_req: + ifetch 1,contr//identifier + copy pdata,queue + ifetch 2,contr//length + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr//dest cid + copy pdata,temp + copy temp,regA + bpatchx patch22_2,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_config_req_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_config_req_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_config_req_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_config_req_hid_int,zero + branch l2cap_reject_command + //branch L2CAP_proc_signal_config_req_rtn +l2cap_proc_signal_config_req_sdp: + copy contw, timeup + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_sdp_state + copy timeup,contw + arg L2CAP_SDP_channel,timeup + fetch 2,mem_sdp_remote_cid + copy pdata,temp + branch l2cap_send_config_rsp +l2cap_proc_signal_config_req_hid_ctrl: + copy contw, timeup + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_control_state + copy timeup,contw + arg L2CAP_HID_Control_channel,timeup + fetch 2,mem_hid_ctrl_remote_cid + copy pdata,temp + branch l2cap_send_config_rsp +l2cap_proc_signal_config_req_hid_int: + copy contw, timeup + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_interrupt_state + copy timeup,contw + arg L2CAP_HID_Interrupt_channel,timeup + fetch 2,mem_hid_int_remote_cid + copy pdata,temp + branch l2cap_send_config_rsp +l2cap_proc_signal_config_req_rfcomm: + copy contw, timeup + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + //set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_rfcomm_state +// jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page + copy timeup,contw + arg L2CAP_RFCOMM_channel,timeup + fetch 2,mem_RFCOMM_remote_CID + copy pdata,temp +l2cap_send_config_rsp: + bpatchx patch22_3,mem_patch22 + setarg signal_config_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0006 + istore 2,contw + copy temp,pdata + istore 2,contw + force 0x00,pdata + istore 2,contw + force L2CAP_config_success,pdata + istore 2,contw + force 10,pdata + iadd regB,regB + //copy temp,pdata + storet 2,mem_config_req_dest_CID + copy queue,pdata + store 1,mem_config_identifier + force L2CAP_SDP_channel,pdata + icompare 0xff,timeup + branch l2cap_send_config_rsp_is_sdp,true + increase 1,pdata +l2cap_send_config_rsp_is_sdp: + //store 1,mem_send_config_req + rtn +l2cap_check_channel_state: + disable user + rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + rtnbit0 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + copy contr,contw + increase -1,contw + istore 1,contw + enable user + rtn +l2cap_send_config_req: +l2cap_send_config_req_sdp: + fetch 1,mem_sdp_state + call l2cap_check_channel_state + nbranch l2cap_send_config_req_rfcomm,user + jam L2CAP_SDP_channel,mem_send_config_req + fetch 2,mem_sdp_remote_cid + store 2,mem_config_req_dest_CID + branch l2cap_generate_config_req +l2cap_send_config_req_rfcomm: + fetch 1,mem_rfcomm_state + call l2cap_check_channel_state + nbranch l2cap_send_config_req_hid_ctrl,user + jam L2CAP_RFCOMM_channel,mem_send_config_req + fetch 2,mem_RFCOMM_remote_CID + store 2,mem_config_req_dest_CID + branch l2cap_generate_config_req +l2cap_send_config_req_hid_ctrl: + fetch 1,mem_hid_control_state + call l2cap_check_channel_state + nbranch l2cap_send_config_req_hid_int,user + jam L2CAP_HID_Control_channel,mem_send_config_req + fetch 2,mem_hid_ctrl_remote_cid + store 2,mem_config_req_dest_CID + branch l2cap_generate_config_req +l2cap_send_config_req_hid_int: + fetch 1,mem_hid_interrupt_state + call l2cap_check_channel_state + nrtn user//End of sending config req + jam L2CAP_HID_Interrupt_channel,mem_send_config_req + fetch 2,mem_hid_int_remote_cid + store 2,mem_config_req_dest_CID + //branch L2CAP_generate_config_req + +l2cap_generate_config_req: + bpatchx patch22_4,mem_patch22 + call l2cap_get_req_id + call l2cap_malloc_signal_channel + force 0,regB + call l2cap_get_signal_tx_payload + force signal_config_req,pdata + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0008 + istore 2,contw + fetch 2,mem_config_req_dest_CID + istore 2,contw + setarg 0x0000 + istore 2,contw + force 1,pdata + istore 1,contw + force 2,pdata + istore 1,contw + fetch 1,mem_send_config_req + beq L2CAP_RFCOMM_channel,l2cap_generate_config_req_rfcomm + setarg L2CAP_config_MTU_SDP + istore 2,contw + branch l2cap_generate_config_req_done +l2cap_generate_config_req_rfcomm: + setarg L2CAP_config_MTU_RFCOMM + istore 2,contw +l2cap_generate_config_req_done: + arg 0x0c,temp + storet 2,mem_l2cap_signal_tx_length + call l2cap_get_signal_tx_buff + fetch 2,mem_l2cap_signal_tx_length + istore 2,contw + force L2CAP_signal_channel,pdata + istore 2,contw + jam 0,mem_send_config_req +l2cap_proc_signal_config_req_rtn: + branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp: + increase 1,contr + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr //source cid + copy pdata,regA + bpatchx patch22_5,mem_patch22 + setarg L2CAP_SDP_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub rega,null + branch l2cap_proc_signal_config_rsp_hid_int,zero + increase 2,contr + ifetch 2,contr + iforce null + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_sdp: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_sdp_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_rfcomm: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_rfcomm_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_hid_ctrl: + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_hid_control_state + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_config_rsp_hid_int: + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata + store 1,mem_hid_interrupt_state + jam BT_EVT_HID_CONNECTED,mem_fifo_temp + branch ui_ipc_send_event + + + +l2cap_proc_signal_disconnect_req: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,timeup + copy regA,temp + call save_cont_pointers + bpatchx patch22_6,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_disconnect_req_hid_int,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_proc_signal_disconnect_req_hid_ctrl: + copy timeup,temp + fetch 2,mem_hid_ctrl_remote_cid + isub temp,null + branch l2cap_disconnect_hid_control_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_proc_signal_disconnect_req_hid_int: + copy timeup,temp + fetch 2,mem_hid_int_remote_cid + isub temp,null + branch l2cap_disconnect_hid_interrupt_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_sdp: + copy timeup,temp + fetch 2,mem_sdp_remote_cid + isub temp,null + branch l2cap_disconnect_sdp_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_disconnect_hid_control_now: + call l2cap_reset_hid_ctrl_state + branch l2cap_send_disconnect_rsp_pkt +l2cap_disconnect_hid_interrupt_now: + call l2cap_reset_hid_int_state + fetch 2, mem_hid_ctrl_remote_cid + branch l2cap_send_disconnect_rsp_pkt, blank + //set the flag,hid channel close + //should we set here? + //call HID_mem_lock + //fetch 1, mem_hid_cb1 + //set1 HID_CB_APP_HID_DISCONNECTED,pdata + //store 1, mem_hid_cb1 + //call HID_mem_unlock + branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_sdp_now: + call l2cap_reset_sdp_channel_state + fetch 1,mem_upper_sm_ss + nbranch l2cap_send_disconnect_rsp_pkt,blank + //jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2 + //jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page + branch l2cap_send_disconnect_rsp_pkt +l2cap_proc_signal_disconnect_req_rfcomm: + copy timeup,temp + fetch 2, mem_RFCOMM_remote_CID + isub temp,null + branch l2cap_disconnect_rfcomm_now,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_req_err_rtn +l2cap_disconnect_rfcomm_now: + call l2cap_reset_rfcomm_channel_state + branch l2cap_send_disconnect_rsp_pkt +l2cap_send_disconnect_rsp_pkt: + call load_cont_pointers + setarg signal_disconnect_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0004 + istore 2,contw + copy regA,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + force 8,pdata + branch l2cap_proc_signal_disconnect_req_rtn +l2cap_proc_signal_disconnect_req_err_rtn: + call load_cont_pointers + branch l2cap_proc_signal_disconnect_req_rtn +l2cap_proc_signal_disconnect_req_rtn: + iadd regB,regB + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_disconnect_rsp: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr + copy pdata,timeup + ifetch 2,contr + copy pdata,temp + call save_cont_pointers + bpatchx patch22_7,mem_patch22 + setarg L2CAP_SDP_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch l2cap_proc_signal_disconnect_rsp_hid_int,zero + call l2cap_reject_command + branch l2cap_proc_signal_disconnect_rsp_err_rtn +l2cap_proc_signal_disconnect_rsp_sdp: + copy temp,regA + copy timeup,temp + fetch 2,mem_sdp_remote_cid + isub temp,null + call l2cap_reset_sdp_channel_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_rfcomm: + copy temp,regA + copy timeup,temp + fetch 2,mem_rfcomm_remote_CID + isub temp,null + call l2cap_reset_rfcomm_channel_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_hid_ctrl: + copy temp,regA + copy timeup,temp + fetch 2,mem_hid_ctrl_remote_cid + isub temp,null + call l2cap_reset_hid_ctrl_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_hid_int: + copy temp,regA + copy timeup,temp + fetch 2,mem_hid_int_remote_cid + isub temp,null + call l2cap_reset_hid_int_state,zero + branch l2cap_proc_signal_disconnect_rsp_rtn +l2cap_proc_signal_disconnect_rsp_rtn: + call load_cont_pointers + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_disconnect_rsp_err_rtn: + branch l2cap_process_one_signal_rtn + +/* received an echo request from remote BD. Will echo the 1st 1 byte back, */ +l2cap_proc_signal_echo_req: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + iadd contr,contr + setarg 9 + istore 1,contw + copy queue,pdata + istore 1,contw + force 0x0000,pdata + istore 2,contw + force 4,pdata + iadd regB,regB + copy regC,pdata + isub regA,regC + branch l2cap_process_one_signal_rtn +l2cap_proc_signal_echo_rsp: + branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_info_rsp: + branch l2cap_process_one_signal_rtn +l2cap_reject_command: + force 0,regB + call l2cap_get_signal_tx_payload + setarg signal_cmd_reject + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 2 + istore 2,contw + setarg cmd_not_understood + istore 2,contw + increase 6,regB + arg 4,regC + branch l2cap_process_one_signal_rtn + + + +l2cap_reset_rfcomm_channel_state: + setarg 0 + store 2,mem_RFCOMM_Tx_pkt_length + store 2,mem_RFCOMM_remote_CID + jam 0,mem_rfcomm_state + rtn +l2cap_reset_sdp_channel_state: + setarg 0 + store 2,mem_sdp_tx_pkt_length + store 2,mem_sdp_remote_cid + jam 0,mem_sdp_state + rtn +l2cap_reset_hid_ctrl_state: + setarg 0 + store 2,mem_hid_ctrl_remote_cid + jam 0,mem_hid_control_state + fetch 1,mem_hid_interrupt_state + beq 0,l2cap_reset_hid_disconnected + rtn + +l2cap_reset_hid_int_state: + setarg 0 + store 2,mem_hid_int_remote_cid + jam 0,mem_hid_interrupt_state + fetch 1,mem_hid_control_state + beq 0,l2cap_reset_hid_disconnected + rtn + +l2cap_reset_hid_disconnected: + jam BT_EVT_HID_DISCONNECTED,mem_fifo_temp + branch ui_ipc_send_event + +l2cap_disconnect_interrupt_req: + fetch 1,mem_CONTROL_tasks + set0 L2CAP_DISCONNECT_INTERRUPT, pdata + store 1,mem_CONTROL_tasks + fetch 2, mem_hid_int_remote_cid + rtn blank + call l2cap_malloc_signal_channel + fetch 2, mem_hid_int_remote_cid + copy pdata,regA + force L2CAP_HID_Interrupt_channel,regB + branch l2cap_generate_disconnect_req +l2cap_disconnect_control_req: + fetch 1,mem_CONTROL_tasks + set0 L2CAP_DISCONNECT_CONTROL, pdata + store 1,mem_CONTROL_tasks + fetch 2, mem_hid_ctrl_remote_cid + rtn blank + call l2cap_malloc_signal_channel + fetch 2, mem_hid_ctrl_remote_cid + copy pdata,regA + force L2CAP_HID_Control_channel,regB +l2cap_generate_disconnect_req: + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + force signal_disconnect_req,pdata + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0004 + istore 2,contw + copy regA,pdata + istore 2,contw + copy regB,pdata + istore 2,contw + force 0x08,temp //signal tx length in temp + branch ml2cap_send_signal + +ml2cap_send_signal_connect_req: + bpatchx patch23_0,mem_patch23 + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + setarg signal_connect_req + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0004 + istore 2,contw + copy temp,pdata //PSM + istore 2,contw + copy timeup,pdata + istore 2,contw + arg 8,temp + branch ml2cap_send_signal +ml2cap_send_signal_config_req: + bpatchx patch23_1,mem_patch23 + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + setarg signal_config_req + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + istore 1,contw + setarg 0x0008 + istore 2,contw + /****modigy for nokia*****/ + copy temp,pdata + /*setarg 0x0040*/ + istore 2,contw + setarg 0x0000 + istore 2,contw + setarg 0x01 + istore 1,contw + setarg 0x02 + istore 1,contw + setarg L2CAP_config_MTU_RFCOMM + istore 2,contw + arg 0xc,temp + branch ml2cap_send_signal +ml2cap_send_signal_disconn_req: + bpatchx patch23_2,mem_patch23 + call l2cap_get_req_id + call l2cap_get_signal_tx_payload + setarg signal_disconnect_req + istore 1,contw + fetch 1,mem_ML2CAP_comm_id + increase 1,pdata + copy contw,regA + store 1,mem_ML2CAP_comm_id + copy regA,contw + istore 1,contw + setarg 0x0004 + istore 2,contw + copy temp,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + arg 0x8,temp + //branch ml2cap_send_signal + //Fall through +ml2cap_send_signal: + storet 2,mem_l2cap_signal_tx_length + copy temp,pdata + branch l2cap_malloc_discard,blank + call l2cap_get_signal_tx_buff + fetch 2,mem_l2cap_signal_tx_length + istore 2,contw //make sure that length is still in temp! + force L2CAP_signal_channel,pdata + istore 2,contw + rtn + +msdp_send_req_done: + fetch 2,mem_sdp_tx_pkt_length + branch assert,blank + call l2cap_get_sdp_tx_buff + fetch 2,mem_sdp_tx_pkt_length + istore 2,contw + fetch 2,mem_sdp_remote_cid + istore 2,contw + rtn +ml2cap_rx_multiplexing: + fetch 2, mem_l2cap_rx_pkt_length + branch l2cap_rx_reset_state,blank + bpatchx patch23_3,mem_patch23 + fetch 1,mem_l2cap_rx_cid + beq L2CAP_signal_channel,ml2cap_call_proc_signal + beq L2CAP_SDP_channel,ml2cap_call_proc_sdp + beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm + beq L2CAP_HID_Control_channel,l2cap_call_proc_hid + beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid + branch l2cap_rx_reset_state + +ml2cap_call_proc_signal: + bpatchx patch23_4,mem_patch23 + call l2cap_malloc_signal_channel + force 0,regB + call l2cap_get_signal_tx_payload + copy pdata,contw + fetch 2,mem_l2cap_rx_pkt_length + copy pdata,regC + fetch 2,mem_l2cap_payload_ptr + iforce contr +ml2cap_proc_one_comm_loop: + call ml2cap_proc_one_comm + increase -4,regC + nbranch ml2cap_proc_one_comm_loop,zero + copy regB,temp + call ml2cap_send_signal + branch l2cap_rx_reset_state + +ml2cap_proc_one_comm: + ifetch 1,contr + beq signal_connect_req,ml2cap_proc_signal_connect_req + beq signal_cmd_reject,ml2cap_proc_signal_cmd_reject + beq signal_connect_rsp,ml2cap_proc_signal_connect_rsp + beq signal_config_rsp,ml2cap_proc_signal_config_rsp + beq signal_config_req,ml2cap_proc_signal_config_req + beq signal_disconnect_rsp,ml2cap_proc_signal_disconn_rsp + beq signal_disconnect_req,ml2cap_proc_signal_disconn_req + beq signal_echo_req,l2cap_proc_signal_echo_req + beq signal_info_req,ml2cap_proc_signal_info_req + branch ml2cap_proc_send_reject + +ml2cap_proc_signal_connect_req: + call save_cont_pointers + //jam NO_RECONNECTION,memui_reconnect_mode + call load_cont_pointers + branch l2cap_proc_signal_connect_req +ml2cap_proc_signal_cmd_reject: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC +mvptr: + ifetch 1,contr + increase -1,regA + nbranch mvptr,zero + rtn +ml2cap_proc_signal_connect_rsp: + ifetch 1,contr //id + copy pdata,queue + ifetch 2,contr + copy pdata,regA //length + ifetch 2,contr + copy pdata,timeup //destination cid + ifetch 2,contr + copy pdata,temp //source cid + ifetch 2,contr // result + sub pdata,0,null + branch ml2cap_proc_signal_connect_rsp_sucessful,zero + beq L2CAP_connect_refused_PSM_unsupported,ml2cap_proc_signal_connect_refused_result + beq L2CAP_connect_refused_no_resources,ml2cap_proc_signal_connect_refused_result + branch ml2cap_proc_signal_connect_rsp_mnosucc +ml2cap_proc_signal_connect_refused_result: + jam BT_EVT_ML2CAP_CONN_REFUSED,mem_fifo_temp + call ui_ipc_send_event +ml2cap_proc_signal_connect_rsp_mnosucc: + ifetch 2,contr //reason + branch mnosucc +ml2cap_proc_signal_connect_rsp_sucessful: + call save_cont_pointers + //fetch 1,mem_ML2CAP_comm_id + //icompare 0xff,queue + //nbranch mnosucc1,true + bpatchx patch23_5,mem_patch23 + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_rfcomm,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_hid_int,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch ml2cap_proc_signal_connect_rsp_hid_ctrl,zero + branch mnosucc +ml2cap_proc_signal_connect_rsp_sdp: + copy timeup,pdata + store 2,mem_sdp_remote_cid + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_sdp_state + branch mnosucc1 +ml2cap_proc_signal_connect_rsp_rfcomm: + copy timeup,pdata + store 2,mem_RFCOMM_remote_CID + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_rfcomm_state + branch mnosucc1 +ml2cap_proc_signal_connect_rsp_hid_ctrl: + copy timeup,pdata + store 2,mem_hid_ctrl_remote_cid + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_hid_control_state + branch mnosucc1 +ml2cap_proc_signal_connect_rsp_hid_int: + copy timeup,pdata + store 2,mem_hid_int_remote_cid + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_RES + store 1,mem_hid_interrupt_state + //branch mnosucc1 + +mnosucc1: + call load_cont_pointers +mnosucc: + copy regC,pdata + isub regA,regC + rtn + +ml2cap_proc_signal_config_rsp: + ifetch 1,contr // Ident + copy pdata,queue + ifetch 2,contr // SigLen + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr // DestnCID + copy pdata,timeup + ifetch 2,contr + ifetch 2,contr // Get the result value, check success + nbranch mcrsdone1,blank + call save_cont_pointers + //fetch 1,mem_ML2CAP_comm_id + //icompare 0xff,queue + //nbranch mcfrsdone,true + copy timeup,temp + bpatchx patch23_6,mem_patch23 + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch ml2cap_proc_signal_config_rsp_hid_int,zero +ml2cap_proc_signal_config_rsp_sdp: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_sdp_state + rtn +ml2cap_proc_signal_config_rsp_rfcomm: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_rfcomm_state + rtn +ml2cap_proc_signal_config_rsp_hid_ctrl: + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_hid_control_state + rtn +ml2cap_proc_signal_config_rsp_hid_int: + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES + store 1,mem_hid_interrupt_state + jam BT_EVT_HID_CONNECTED,mem_fifo_temp + branch ui_ipc_send_event + + +mcfrsdone: + call load_cont_pointers +mcrsdone1: + increase -6,regA +mloop2: + branch mcrsdone,zero + increase 1,contr + increase -1,regA + branch mloop2 +mcrsdone: + rtn +ml2cap_proc_signal_config_req: + ifetch 1,contr // Ident + copy pdata,queue + ifetch 2,contr // SigLen + copy pdata,regA + copy regC,pdata + isub regA,regC + ifetch 2,contr // DestnCID + increase 2,contr + copy pdata,temp + setarg signal_config_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + increase 2,regA + copy regA,pdata + istore 2,contw + call save_cont_pointers + bpatchx patch23_7,mem_patch23 + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_config_req_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_config_req_rfcomm,zero + setarg L2CAP_HID_Control_channel + isub temp,null + branch ml2cap_proc_signal_config_req_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + isub temp,null + branch ml2cap_proc_signal_config_req_hid_int,zero + branch mcfgrq_done +ml2cap_proc_signal_config_req_sdp: + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_sdp_state + bbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,ml2cap_proc_signal_config_req_sdp_nsndreq + fetcht 1,mem_CONTROL_tasks + set1 L2CAP_init_Config_Req,temp + storet 1,mem_CONTROL_tasks + copy queue,pdata + increase 1,pdata + store 1,mem_config_identifier + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_sdp_state +ml2cap_proc_signal_config_req_sdp_nsndreq: + fetch 2,mem_sdp_remote_cid + store 2,mem_config_req_dest_CID + branch mcfgrq_done +ml2cap_proc_signal_config_req_rfcomm: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_rfcomm_state + fetch 2,mem_RFCOMM_remote_CID + branch mcfgrq_done +ml2cap_proc_signal_config_req_hid_ctrl: + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_hid_control_state + fetch 2,mem_hid_ctrl_remote_cid + branch mcfgrq_done +ml2cap_proc_signal_config_req_hid_int: + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata + set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata + store 1,mem_hid_interrupt_state + fetch 2,mem_hid_int_remote_cid + //branch mcfgrq_done + +mcfgrq_done: + copy pdata,timeup + call load_cont_pointers +/*******for Nokia**************/ + copy timeup,pdata + /*setarg 0x0040*/ + istore 2,contw + force 0x0000,pdata + istore 2,contw + force 0x0000,pdata + istore 2,contw + force 10,pdata + iadd regB,regB + increase -6,regA +mloop1: + branch mcrqdone,zero + ifetch 1,contr + istore 1,contw + increase 1,regB + increase -1,regA + branch mloop1 +mcrqdone: + rtn +ml2cap_proc_signal_disconn_req: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + copy regC,pdata + isub regA,regC + + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,timeup + call save_cont_pointers + bpatchx patch24_0,mem_patch24 + setarg L2CAP_SDP_channel + copy regA,temp + isub temp,null + branch ml2cap_proc_signal_disconn_sdp,zero + setarg L2CAP_HID_Control_channel + copy regA,temp + isub temp,null + branch ml2cap_proc_signal_disconn_hid_ctrl,zero + setarg L2CAP_HID_Interrupt_channel + copy regA,temp + isub temp,null + branch ml2cap_proc_signal_disconn_hid_int,zero + branch mclsrfc +ml2cap_proc_signal_disconn_sdp: + setarg 0x0000 + store 2,mem_sdp_tx_pkt_length + store 2,mem_sdp_remote_cid + store 1,mem_sdp_state + branch mclssdp +ml2cap_proc_signal_disconn_hid_ctrl: + call l2cap_reset_hid_ctrl_state + branch mclssdp +ml2cap_proc_signal_disconn_hid_int: + call l2cap_reset_hid_int_state + //call HID_mem_lock + //fetch 1, mem_hid_cb1 + //set1 HID_CB_APP_HID_DISCONNECTED,pdata + //store 1, mem_hid_cb1 + //call HID_mem_unlock + branch mclssdp +mclsrfc: + setarg 0x0000 + store 2,mem_RFCOMM_Tx_pkt_length +mclssdp: + call load_cont_pointers + setarg signal_disconnect_rsp + istore 1,contw + copy queue,pdata + istore 1,contw + setarg 0x0004 + istore 2,contw + copy regA,pdata + istore 2,contw + copy timeup,pdata + istore 2,contw + force 8,pdata + iadd regB,regB + rtn + +ml2cap_proc_signal_disconn_rsp: + ifetch 1,contr + copy pdata,queue + ifetch 2,contr + copy pdata,regA + ifetch 2,contr + copy pdata,timeup + ifetch 2,contr + copy pdata,temp + call save_cont_pointers + bpatchx patch24_1,mem_patch24 + fetch 1,mem_ML2CAP_comm_id + icompare 0xff,queue + nbranch mdisdone,true + setarg L2CAP_SDP_channel + isub temp,null + branch ml2cap_proc_signal_disconn_rsp_sdp,zero + setarg L2CAP_RFCOMM_channel + isub temp,null + branch ml2cap_proc_signal_disconn_rsp_rfcomm,zero + branch mdisdone +ml2cap_proc_signal_disconn_rsp_sdp: + jam 0,mem_sdp_remote_cid + jam 0,mem_sdp_state + branch mdisdone +ml2cap_proc_signal_disconn_rsp_rfcomm: + // + // +mdisdone: + call load_cont_pointers + copy regC,pdata + isub regA,regC + rtn + +ml2cap_proc_send_reject: + setarg signal_cmd_reject + istore 1,contw + ifetch 1,contr + istore 1,contw + setarg 0x0002 + istore 2,contw + setarg 0x0000 + istore 2,contw + setarg 0x0006 + iadd regB,regB + force 4,regC + rtn + +//l2cap command id, 0 is not allowed +l2cap_get_req_id: + fetch 1,mem_ML2CAP_comm_id + increase 1,pdata + bne 0,l2cap_get_req_id_ok + increase 1,pdata +l2cap_get_req_id_ok: + store 1,mem_ML2CAP_comm_id + rtn + + +/*********************************************************/ +//char* malloc(short len) +//input: regA -> len +//rtn: regB -> pbuff;return from pdata +//val: queue -> i +//val: timeup -> buff_cnt +/*********************************************************/ +l2cap_malloc: + bpatchx patch24_2,mem_patch24 + arg 0,regb + call l2cap_malloc_is_fifo_full + nbranch assert,blank//assert when fifo full + call l2cap_malloc_get_full_map +ifdef DEBUG_MALLOC + call l2cap_malloc_log_get_ptr + copy regA,pdata + istore 2,contw + sub pdata,1024,null + branch assert,positive + branch assert,blank +endif + arg mem_tx_buff0,regB//pbuff = buff0; + arg 0,queue // i = 0; +l2cap_malloc_loop: + fetcht 1,mem_used_map + qisolate1 temp + branch l2cap_malloc_next,true//if(1 == (used_map & (1 << i)))goto next; + call l2cap_malloc_enough + sub timeup,0,null// (0 - timeup) + branch l2cap_malloc_next,positive//if(buff_cnt <= 0)goto next; + call l2cap_malloc_into_fifo + branch l2cap_malloc_rtn//return (pbuff); +l2cap_malloc_next: + increase 128,regB//pbuff += BUFF_SIZE;//point to next buff + increase 1,queue + setarg 8//BUFF_MAX_COUNT + isub queue,null //BUFF_MAX_COUNT - i + branch l2cap_malloc_loop,positive//while(i < buff_max_count) + arg 0,regB//return NULL +l2cap_malloc_rtn: +ifdef DEBUG_MALLOC + call l2cap_malloc_log_get_ptr + copy regB,pdata + istore 2,contw +endif + copy regB,pdata + branch assert,blank + rtn//return pointer via pdata + +/*********************************************************/ +//void* l2cap_malloc_fifo_out(void) +//output:len -> temp +//output:ptr ->pdata +//only get ptr,not free +/*********************************************************/ +l2cap_malloc_fifo_out: + bpatchx patch24_3,mem_patch24 + call l2cap_malloc_fifo_get_first_ptr + increase 1,contr + ifetch 2,contr //ptr ->pdata + rtn + +/*********************************************************/ +//void free_first_buff_in_fifo(void) +//only free the first one +/*********************************************************/ +l2cap_malloc_free: + bpatchx patch24_4,mem_patch24 + call l2cap_malloc_fifo_get_first_ptr + copy contr,contw + copy contr,temp + setarg 0 + istore 3,contw +ifdef DEBUG_MALLOC + call l2cap_malloc_log_get_ptr + setarg 0xaa + istore 1,contw + istoret 1,contw +endif + rtn +/*********************************************************/ +//void l2cap_malloc_discard(void) +//discard the latest malloc +/*********************************************************/ +l2cap_malloc_discard: + bpatchx patch24_5,mem_patch24 + call l2cap_malloc_is_fifo_empty + branch assert,blank + fetch 3,mem_tx_fifo2 + store 3,mem_tx_fifo3 + fetch 3,mem_tx_fifo1 + store 3,mem_tx_fifo2 + fetch 3,mem_tx_fifo0 + store 3,mem_tx_fifo1 + rtn +/*********************************************************/ +//bool fifo_is_full(void) +//blank == 1: not full +//blank == 0: full +/*********************************************************/ +l2cap_malloc_is_fifo_full: + bpatchx patch24_6,mem_patch24 + fetch 3,mem_tx_fifo0 + rtn +/*********************************************************/ +//bool fifo_nearly_full(void) +//blank == 1: nearly full +//blank == 0: not nearly full +/*********************************************************/ +l2cap_malloc_is_fifo_nearly_full: + bpatchx patch24_7,mem_patch24 + fetch 3,mem_tx_fifo1 + rtn +/*********************************************************/ +//bool fifo_is_empty(void) +//blank == 1: empty +//blank == 0: not empty +/*********************************************************/ +l2cap_malloc_is_fifo_empty: + bpatchx patch25_0,mem_patch25 + fetch 3,mem_tx_fifo3 + rtn +/*********************************************************/ +//char* l2cap_malloc_fifo_get_first_ptr(void) +//output:contr -->ptr +/*********************************************************/ +l2cap_malloc_fifo_get_first_ptr: + call l2cap_malloc_is_fifo_empty + branch assert,blank // fifo is empty + arg mem_tx_fifo0,contr +ifdef DEBUG_MALLOC + arg 5,loopcnt +l2cap_malloc_free_loop: + increase -1,loopcnt + copy loopcnt,pdata + branch assert,blank +else +l2cap_malloc_free_loop: +endif + ifetch 3,contr + branch l2cap_malloc_free_loop,blank + increase -3,contr + rtn + +/*********************************************************/ +//char* l2cap_malloc_get_full_map(void) +//output:mem_used_map -->full_map +//add all maps into one +/*********************************************************/ +l2cap_malloc_get_full_map: + bpatchx patch25_1,mem_patch25 + arg 4,loopcnt + arg mem_tx_fifo0_map,contr + arg 0,temp +l2cap_malloc_get_full_map_loop: + ifetch 3,contr + and pdata,0xff,pdata + ior temp,temp + loop l2cap_malloc_get_full_map_loop + storet 1,mem_used_map + rtn +/*********************************************************/ +//void buff_into_fifo(char buff_index, char buff_cnt, short len) +//input: regA -> len +//input: regC -> buff_index +//input: timeup -> buff_cnt +//val:temp -> (fifo->map) +/*********************************************************/ +l2cap_malloc_into_fifo: + bpatchx patch25_2,mem_patch25 + call l2cap_malloc_is_fifo_full + nbranch assert,blank //fifo full + call l2cap_malloc_is_fifo_empty + branch l2cap_malloc_into_fifo_no_push,blank//fifo empty, no need to push + fetch 3,mem_tx_fifo1 + store 3,mem_tx_fifo0 + ifetch 3,contr//mem_tx_fifo2 + istore 3,contw//mem_tx_fifo1 + ifetch 3,contr//mem_tx_fifo3 + istore 3,contw//mem_tx_fifo2 + setarg 0 + istore 3,contw//mem_tx_fifo3 +l2cap_malloc_into_fifo_no_push: + arg 0,temp + copy timeup,pdata + iadd queue,pdata +l2cap_malloc_into_fifo_loop: + qset1 temp//fifo->map |= 1 << i; + increase 1,queue + isub queue,null + nbranch l2cap_malloc_into_fifo_loop,zero + //map in temp + lshift8 regB,pdata + ior temp,pdata + store 3,mem_tx_fifo3 + rtn + +/*********************************************************/ +//char is_size_enough(char buff_index, short len) +//input: regA -> len +//input: queue -> buff_index +//rtn: timeup -> buff_cnt +//val: max_size_fom_buff_index -> temp +//val: i -> loopcnt +/*********************************************************/ +l2cap_malloc_enough: + bpatchx patch25_3,mem_patch25 + call l2cap_malloc_get_full_map + copy queue,regC//restore buff_index to regC + arg 0,temp + arg 0,timeup//default return val + //increase 1,queue +l2cap_malloc_enough_loop: + copy queue,pdata + beq 8,l2cap_malloc_enough_end + fetch 1,mem_used_map + qisolate1 pdata + branch l2cap_malloc_enough_end,true + increase 128,temp + increase 1,queue + copy regA,pdata + isub temp,null + branch l2cap_malloc_enough_end,zero//(max_size_fom_buff_index == len) + branch l2cap_malloc_enough_loop,positive//(max_size_fom_buff_index < len) +l2cap_malloc_enough_end: + copy temp,pdata + isub regA,null + nbranch l2cap_malloc_enough_rtn,positive// max_size_fom_buff_index - len > 0 + copy queue,pdata//i + copy regC,temp//buff_index + isub temp,timeup//return (i - buff_index) +l2cap_malloc_enough_rtn: + copy regC,queue//restore buff_index to queue + rtn + +ifdef DEBUG_MALLOC +l2cap_malloc_log_get_ptr: + fetch 2,mem_tx_malloc_log + increase 2,pdata + store 2,mem_tx_malloc_log + sub pdata,62,null + nbranch l2cap_malloc_log_clean,positive + increase -2,pdata + iadd contw,contw + rtn +l2cap_malloc_log_clean: + jam 0x00,mem_tx_malloc_log + branch l2cap_malloc_log_get_ptr +endif + +l2cap_malloc_signal_channel: + bpatchx patch25_4,mem_patch25 + arg L2CAP_SIGNAL_MALLOC_SIZE,regA + call l2cap_malloc + store 2,mem_l2cap_signal_tx_buff_ptr + increase 4,pdata + store 2,mem_l2cap_signal_tx_payload_ptr + setarg 0 + store 2,mem_l2cap_signal_tx_length + rtn + +l2cap_get_signal_tx_buff: + fetch 2,mem_l2cap_signal_tx_buff_ptr + branch l2cap_util_pdata_to_contw + +l2cap_get_signal_tx_payload: + fetch 2,mem_l2cap_signal_tx_payload_ptr + branch l2cap_util_pdata_to_contw + + +l2cap_malloc_sdp_channel: + bpatchx patch25_5,mem_patch25 + arg SDP_MALLOC_SIZE,regA + call l2cap_malloc + store 2,mem_sdp_tx_buff_ptr + increase 4,pdata + store 2,mem_sdp_tx_payload_ptr + setarg 0 + store 2,mem_sdp_tx_pkt_length + rtn + +l2cap_get_sdp_tx_buff: + fetch 2,mem_sdp_tx_buff_ptr + branch l2cap_util_pdata_to_contw + +l2cap_get_sdp_tx_payload: + fetch 2,mem_sdp_tx_payload_ptr + branch l2cap_util_pdata_to_contw + + +l2cap_malloc_rfcomm_channel: + bpatchx patch25_6,mem_patch25 + call push_stack + jam RFCOMM_MALLOC_FAIL,mem_rfcomm_malloc_fail_flag + call l2cap_malloc_is_fifo_full + nrtn blank + arg RFCOMM_MALLOC_SIZE,regA + call l2cap_malloc + store 2,mem_rfcomm_tx_buff_ptr + increase 4,pdata + store 2,mem_rfcomm_tx_payload_ptr + setarg 0 + store 2,mem_rfcomm_tx_pkt_length + jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag + branch pop_stack + +l2cap_get_rfcomm_tx_buff: + fetch 2,mem_rfcomm_tx_buff_ptr + branch l2cap_util_pdata_to_contw + +l2cap_util_pdata_to_contw: + branch assert,blank + copy pdata,contw + rtn + + +l2cap_lpm_save_calc_len: + bpatchx patch25_7,mem_patch25 + arg 0,regb + arg mem_tx_fifo0_map,rega + increase -2,rega +l2cap_lpm_save_calc_len_loop: + increase 2,rega + setarg mem_tx_fifo_end + isub rega,null + branch l2cap_lpm_save_calc_len_end,zero //end of 2lcap tx fifo + ifetch 1,rega + increase 1,rega + branch l2cap_lpm_save_calc_len_loop,blank + ifetcht 2,rega + ifetch 2,temp + iadd regb,regb + increase 4,regb //l2cap header len + branch l2cap_lpm_save_calc_len_loop +l2cap_lpm_save_calc_len_end: + copy regb,pdata + rtn + + +l2cap_lpm_get_wake_lock: + arg wake_lock_l2cap_tx,queue + branch lpm_get_wake_lock + +l2cap_lpm_put_wake_lock: + arg wake_lock_l2cap_tx,queue + branch lpm_put_wake_lock + +l2cap_lpm_save_txbuf: + bpatchx patch26_0,mem_patch26 + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + rtn blank + call l2cap_lpm_save_calc_len + arg l2cap_lpm_txbuf_len,temp + isub temp,null + branch l2cap_lpm_get_wake_lock,positive //no enougth space to save l2cap tx data + call l2cap_lpm_put_wake_lock + arg mem_l2cap_lpm_txbuf,contw + arg mem_tx_fifo0,rega +l2cap_lpm_save_txbuf_loop: + setarg mem_tx_fifo_end + isub rega,null + rtn zero //end of 2lcap tx fifo + ifetch 1,rega //mem_tx_fifoX_map + increase 1,rega + nbranch l2cap_lpm_save_txbuf_nempty,blank + istore 2,contw // length = 0 + increase 2,rega + branch l2cap_lpm_save_txbuf_loop +l2cap_lpm_save_txbuf_nempty: + ifetch 2,rega //ptr + increase 2,rega + copy pdata,contr + ifetch 2,contr //l2cap len + istore 2,contw + copy pdata,loopcnt + increase 2,loopcnt //add CID len + call memcpy + branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_load_txbuf: + bpatchx patch26_1,mem_patch26 + call l2cap_malloc_get_full_map + fetch 1,mem_used_map + rtn blank + arg mem_tx_fifo0_ptr,rega + increase -3,rega //mem_tx_fifo0_ptr -3 + arg mem_l2cap_lpm_txbuf,contr +l2cap_lpm_load_txbuf_loop: + increase 3,rega //mem_tx_fifoX_ptr + setarg mem_tx_fifo_end+1 + isub rega,null + rtn zero //end of 2lcap tx fifo + ifetch 2,contr + branch l2cap_lpm_load_txbuf_loop,blank + increase 4,pdata //l2cap header len + copy pdata,loopcnt + copy contr,regb + ifetch 2,rega //ptr + copy pdata,contw + copy regb,contr + increase -2,contr + call memcpy + branch l2cap_lpm_load_txbuf_loop + + + + Index: 1066_OTP_FLASH/program/le.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/le.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/le.prog (working copy) @@ -0,0 +1,1841 @@ +ifdef COMPILE_LE +//******************************************// +//*************LE INIT ****************// +//******************************************// + + +le_init_conn: + bpatchx patch26_2,mem_patch26 + disable wake + jam 1,mem_le_conn_handle + jam 3,mem_le_state + jam 1,mem_le_arq + setarg -1 + store 2,mem_le_event_count + force 0,pdata + store 1,mem_le_ch + store 1,mem_le_op + store 3,mem_sniff_rcv + store 3,mem_sniff_lost + store 5,mem_le_pcnt_tx + set1 39,pdata + store 5,mem_le_pcnt_rx + jam 1,mem_le_txheader + jam 0,mem_le_txlen + branch le_supervision_flush + +le_init_master: + bpatchx patch26_3,mem_patch26 + enable master + jam lemode_master,mem_le_mode + jam 1,mem_le_att_handle + jam 1,mem_le_search_handle_start + setarg 0xffff + store 2,mem_le_search_handle_end + force 0,pdata + store 5,mem_le_pcnt_rx + set1 39,pdata + store 5,mem_le_pcnt_tx + branch le_init_conn + + +le_init_slave: + bpatchx patch26_4,mem_patch26 + disable master + setarg 0x17 + store 2,mem_le_remote_mtu + jam lemode_slave,mem_le_mode + jam 0,mem_le_adv_enable + jam 0,mem_lpm_current_mult + jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state + jam FLAG_LE_ENC_NULL,mem_le_enc_state + fetch 2,mem_le_superto + store 2,mem_le_init_superto + fetch 2,mem_le_tsniff + mul32 pdata,5,pdata + rshift4 pdata,pdata + store 2,mem_le_superto // vol.6 part B 4.5.2 only 6*conninterval before establish + branch le_init_conn + + +//******************************************// +//*************LE main process*********// +//******************************************// +le_dispatch: + call le_enable + call le_scan + call le_adv + branch le_disable + +le_conn_dispatch: + bpatchx patch26_5,mem_patch26 + call le_enable + call app_process_ble + fetch 1,mem_le_mode + beq lemode_master,le_master_dispatch + branch le_slave_dispatch + +//******************************************// +//***********LE master process*********// +//******************************************// + +le_master_dispatch: + bpatchx patch26_6,mem_patch26 + enable master + call le_supervision_update + branch le_master_disconn,positive + call check_ble_disabled + call le_setup + call le_prepare_tx + disable match + call le_transmit_receive_sifs + nrtn match + bpatchx patch26_7,mem_patch26 + fetch 1,mem_le_conn_rcv + increase 1,pdata + store 1,mem_le_conn_rcv + call le_acknowledge + disable master + rtn + +le_master_disconn: + call le_disconnect + disable master + rtn + +//******************************************// +//***********LE slave process***********// +//******************************************// +le_slave_dispatch: + bpatchx patch27_0,mem_patch27 + jam 0,mem_le_md_count +ifdef SECURE_CONNECTION + call sp_calc_sequence_256 + call le_secure_connect_sm +endif + disable attempt + call le_supervision_update + branch le_slave_disconn,positive + call check_ble_disabled + call le_setup + call le_receive_slave + nbranch le_slave_unsync,sync // vol.6 part B 4.5.1 respond even crc error + call le_got_first_packet + branch le_slave_match,match + branch le_slave_cont + + +le_slave_match: + bpatchx patch27_1,mem_patch27 + fetch 1,mem_le_md_count + pincrease 1 + store 1,mem_le_md_count + beq LE_MD_MAX_COUNT,le_slave_cont + call le_acknowledge + call le_prepare_tx + call le_transmit_norx + call le_parse + fetch 2,mem_cb_ble_transmit + call callback_func + call le_check_md + branch le_slave_more_data,user +le_slave_cont: + bpatchx patch27_2,mem_patch27 + call le_pairing_sm + call le_check_paring_time + call check_51cmd + fetch 1,mem_le_op + bbit1 op_disconn,le_slave_disconn +le_slave_unsync: + bpatchx patch27_3,mem_patch27 + call le_lpm_set_mult + call le_update_channel_map + call le_update_param + branch calc_clke_offset + + +le_check_md: + disable user + bmark1 mark_ble_rx_md,enable_user + bmark1 mark_ble_tx_md,enable_user + rtn + + +le_slave_more_data: + bpatchx patch27_4,mem_patch27 + enable attempt + call le_transmit_receive_sifs_notx + branch le_slave_match,match + branch le_slave_cont + +le_slave_disconn: + + //fall through +le_disconnect: + bpatchx patch27_5,mem_patch27 + call le_clear_connection_info + call app_disconn_reason_collect_ble +ifdef SECURE_CONNECTION + call sp_initialize_256 +endif + jam BT_EVT_LE_DISCONNECTED,mem_fifo_temp + branch ui_ipc_send_event + +le_clear_connection_info: + setarg 0 + store 9,mem_le_tx_buff_used + jam 0,mem_le_conn_handle + jam lemode_idle,mem_le_mode + jam 0,mem_le_state + jam FLAG_LE_ENC_NULL,mem_le_enc_state + jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state + rtn + +le_got_first_packet: + bpatchx patch27_6,mem_patch27 + fetch 1,mem_le_conn_rcv + increase 1,pdata + store 1,mem_le_conn_rcv + fetch 1,mem_le_state + rtnbit1 lestate_got_first_packet + set1 lestate_got_first_packet + store 1,mem_le_state + fetch 2,mem_le_init_superto + store 2,mem_le_superto + setarg 0 + store 4,mem_le_transmit_window + rtn + + +le_enable: + bpatchx patch27_7,mem_patch27 + hjam 0x36,0x90f /*For BLE, tune AGC_gain_offset, Max added*/ + hjam 0x5f,0x90b //for BLE + enable le + hjam 7,rfen_ulp /* enable ulp */ + call check_ble_disabled + fetch 1,mem_250k_freq_enable //default: 0 + rtn blank + hjam 0xb8,0x90a + rtn + +le_disable: + bpatchx patch28_0,mem_patch28 + hjam 0x2e,0x90f /*For BR/EDR, tune AGC_gain_offset, Max added*/ + hjam 0xff,0x90b //for EDR&BR + disable le + hjam 3,rfen_ulp + arg 0,stop_watch + rtn + +le_prep: + disable enable_crc + disable enable_white + fetch 3,mem_le_crcinit + iforce crc24_init + fetch 1,mem_le_ch_mapped + reverse pdata,temp + set1 1,temp + rshift temp,white_init + rtn + + +lerx_setfreq: + call le_setfreq + call set_freq_rx + setarg param_pll_setup + call sleep + branch rf_rx_enable + +letx_setfreq: + branch txon,match +letx_setfreq0: + call le_setfreq + branch set_freq_tx +le_setfreq: + bpatchx patch28_1,mem_patch28 + call set_sync_on + fetch 1, mem_le_testtype + nbranch le_ctf_test,blank + fetch 1,mem_le_ch_mapped + sub pdata,36,null + branch le_ctf_normal,positive + force 0,temp + rtneq 37 + force 24,temp + rtneq 38 + force 78,temp + rtn + +le_ctf_normal: + sub pdata,10,null + branch le_ctf_low,positive + increase 1,pdata + +le_ctf_low: + lshift pdata,pdata + add pdata,2,temp + rtn + +le_ctf_test: + fetch 1,mem_le_ch_mapped + lshift pdata,temp + rtn + +le_sca_map: + arg 500,temp + rtn blank + arg 250,temp + rtneq 1 + arg 150,temp + rtneq 2 + arg 100,temp + rtneq 3 + arg 75,temp + rtneq 4 + arg 50,temp + rtneq 5 + arg 40,temp + rtneq 6 + arg 20,temp + rtn + + + +le_adv_access: + setarg 0x8e89be + lshift8 pdata,pdata + or_into 0xd6,pdata + iforce access + setarg 0x555555 + store 3,mem_le_crcinit + rtn + +le_setup: + bpatchx patch28_2,mem_patch28 + enable swfine + fetch 4,mem_le_access + iforce access + call le_map_channel + setarg 0x200 + branch le_setup_master,master + fetch 2,mem_le_receive_window + rshift pdata,pdata +le_setup_master: + arg param_pll_setup,temp + iadd temp,pdata + call ahead_window + deposit clke + store 6,mem_le_rxon_ts + rtn + +le_next_adv_channel: + bpatchx patch28_3,mem_patch28 + fetch 1,mem_le_ch_mapped + beq 37,le_next_adv_channel_curr_channel_37 + beq 38,le_next_adv_channel_curr_channel_38 + beq 39,le_next_adv_channel_curr_channel_39 + branch le_next_adv_channel_curr_channel_39 + +le_next_adv_channel_curr_channel_37: + fetcht 1,mem_le_adv_channel_map + isolate1 BIT_ADV_CHANNEL_MAP_38,temp //check 38 channel enable + branch set_le_next_adv_channel_38,true + isolate1 BIT_ADV_CHANNEL_MAP_39,temp //check 39 channel enable + branch set_le_next_adv_channel_39,true + branch set_le_next_adv_channel_37 + + +le_next_adv_channel_curr_channel_38: + fetcht 1,mem_le_adv_channel_map + isolate1 BIT_ADV_CHANNEL_MAP_39,temp //check 39 channel enable + branch set_le_next_adv_channel_39,true + isolate1 BIT_ADV_CHANNEL_MAP_37,temp //check 37 channel enable + branch set_le_next_adv_channel_37,true + branch set_le_next_adv_channel_38 + + +le_next_adv_channel_curr_channel_39: + fetcht 1,mem_le_adv_channel_map + isolate1 BIT_ADV_CHANNEL_MAP_37,temp //check 37 channel enable + branch set_le_next_adv_channel_37,true + isolate1 BIT_ADV_CHANNEL_MAP_38,temp //check 38 channel enable + branch set_le_next_adv_channel_38,true + branch set_le_next_adv_channel_39 + + + +set_le_next_adv_channel_37: + jam 37,mem_le_ch_mapped + fetch 1,mem_le_adv_channel_map_temp + set1 BIT_ADV_CHANNEL_MAP_37,pdata + store 1,mem_le_adv_channel_map_temp + rtn + +set_le_next_adv_channel_38: + jam 38,mem_le_ch_mapped + fetch 1,mem_le_adv_channel_map_temp + set1 BIT_ADV_CHANNEL_MAP_38,pdata + store 1,mem_le_adv_channel_map_temp + rtn + +set_le_next_adv_channel_39: + jam 39,mem_le_ch_mapped + fetch 1,mem_le_adv_channel_map_temp + set1 BIT_ADV_CHANNEL_MAP_39,pdata + store 1,mem_le_adv_channel_map_temp + rtn + + + +le_context_nexthop: + bpatchx patch28_4,mem_patch28 + add rega,coffset_mode,contr + ifetch 1,contr + rtnbit0 mode_le + add rega,coffset_le_event_cnt,contw + ifetch 2,contw + increase 1,pdata + istore 2,contw + add rega,coffset_le_hop,contr + ifetch 1,contr + add rega,coffset_le_ch,contw + ifetcht 1,contw + iadd temp,pdata + sub pdata,36,null + branch le_nexthop_nowrap,positive + increase -37,pdata +le_nexthop_nowrap: + istore 1,contw + rtn + + +le_calc_channel_map: + bpatchx patch28_5,mem_patch28 + fetch 5,mem_le_channel_map + force 0,temp + force 37,loopcnt +le_count_channels_loop: + bbit0 0,le_count_channels_notused + increase 1,temp +le_count_channels_notused: + rshift pdata,pdata + loop le_count_channels_loop + add temp,-1,pdata + store 1,mem_le_channels + rtn + +le_map_channel: + bpatchx patch28_6,mem_patch28 + fetch 1,mem_le_ch + iforce queue + fetcht 5,mem_le_channel_map + qisolate1 temp + branch le_map_channel_end,true +le_map_channel_next: + bpatchx patch28_7,mem_patch28 + fetch 1,mem_le_channels + isub queue,pdata + branch le_map_channel_cont,positive + sub pdata,-1,queue + branch le_map_channel_next +le_map_channel_cont: + copy queue,loopcnt + force 0,queue +le_map_channel_loop: + qisolate1 temp + branch le_map_channel_skip,true + increase 1,loopcnt +le_map_channel_skip: + deposit loopcnt + branch le_map_channel_end,blank + increase 1,queue + increase -1,loopcnt + branch le_map_channel_loop +le_map_channel_end: + deposit queue + store 1,mem_le_ch_mapped + rtn + + +le_wait_tx: + branch le_wait_master,master + until null,timeout + rtn + +le_wait_master: + arg 0xea0,timeup + until clkn_rt,meet + rtn + +le_receive_adv: + disable swfine + fetch 2,mem_le_scan_window + copy pdata,timeup + branch le_receive_packet + + +le_receive_slave: + bpatchx patch29_0,mem_patch29 + enable swfine + fetch 2,mem_le_receive_window + fetcht 4,mem_le_transmit_window + iadd temp,timeup +le_receive_packet: + call lerx_setfreq +le_receive_rxon: + bpatchx patch29_1,mem_patch29 + call le_prep + disable match + enable decode_fec0 + enable is_rx + disable is_tx + copy timeup,stop_watch + correlate null,timeout + branch le_receive_on_attempt,attempt + copy clke,temp + storet 6,mem_sync_clke +le_receive_on_attempt: + nbranch end_of_packet,sync + branch le_receive_skip,attempt + arg param_clke_cal_le,clke_rt + copy bt_clk,clke_bt + fetch 1,mem_le_state + bbit0 lestate_got_first_packet,le_receive_skip + call lpm_adjust_clk,wake +le_receive_skip: + bpatchx patch29_2,mem_patch29 + call save_rssi + enable enable_white + enable enable_crc + parse demod,bucket,8 + rshift3 pwindow,pdata + store 1,mem_le_rxbuf + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + and pdata,0x3f,loopcnt + branch lerx_nopayload,zero + +lerx_loop: + parse demod,bucket,8 + rshift3 pwindow,pdata + istore 1,contw + loop lerx_loop + +lerx_nopayload: + bpatchx patch29_3,mem_patch29 + parse demod,bucket,24 + enable swfine + arg param_sifs,stop_watch // start SIFS timer after last bit of crc + rshift32 pdata,pdata + rshift16 pdata,pdata + istore 3,contw + branch end_of_packet,crc_failed + enable match + fetch 1,mem_last_freq + add pdata,0,rega // ble 2M Medium Frequency + call rf_write_freq /* set frequency to tx mode freq */ + disable decode_fec0 + branch set_sync_on + +le_transmit_receive_sifs: + bpatchx patch29_4,mem_patch29 + call le_transmit +le_transmit_receive_sifs_notx: + fetcht 1,mem_last_freq + call set_freq_rx + call rf_rx_enable + enable swfine + arg 5500,timeup + branch le_receive_rxon + +le_transmit_norx: + call le_transmit + branch end_of_packet + +le_transmit: + bpatchx patch29_5,mem_patch29 + call le_prep + call letx_setfreq + branch le_transmit0 + +le_transmit0: + set1 TXGFSK,radio_ctrl + enable encode_fec0 + enable is_tx + disable is_rx + call le_wait_tx + rshift16 access,pdata + rshift8 pdata,pdata + rshift4 pdata,pdata + inject mod,40 + enable enable_white + enable enable_crc + bpatchx patch29_6,mem_patch29 + fetch 1,mem_le_txheader + inject mod,8 + ifetch 1,contr + and pdata,0x3f,loopcnt + inject mod,8 + branch letr_nopayload,zero +letr_loop: + ifetch 1,contr + inject mod,8 + loop letr_loop + +letr_nopayload: + enable enable_parity + inject mod,24 + disable enable_parity + until null,tx_clear + nop 100 /* flush out the last bit */ + disable encode_fec0 + rtn + +le_send_adv_ind: + bpatchx patch29_7,mem_patch29 + fetch 1,mem_le_adv_type + beq ADV_DIRECT_IND,le_send_adv_direct_ind + fetch 1,mem_le_adv_own_addr_type + lshift4 pdata,pdata + lshift2 pdata,pdata + store 1,mem_le_txheader + fetcht 1,mem_le_adv_data_len + add temp,6,pdata + store 1,mem_le_txlen + fetch 6,mem_le_lap + store 6,mem_le_txpayload + copy temp,loopcnt + arg mem_le_adv_data,contr + call memcpy_fast + branch le_send_adv_transmit +le_send_adv_direct_ind: + fetch 1,mem_le_adv_direct_addr_type + lshift4 pdata,pdata + lshift2 pdata,pdata + increase 1,pdata + store 1,mem_le_txheader + setarg 12 + store 1,mem_le_txlen + fetch 6,mem_le_lap + store 6,mem_le_txpayload + fetch 6,mem_hci_plap + istore 6,contw +le_send_adv_transmit: + bpatchx patch2a_0,mem_patch2a + fetch 1,mem_le_adv_transmit + increase 1,pdata + store 1,mem_le_adv_transmit + arg 1800,stop_watch + disable match + branch le_transmit_receive_sifs + +le_send_scan_request: + bpatchx patch2a_1,mem_patch2a + fetch 1,mem_le_scan_type + rtnne LE_SCAN_TYPE_ACTIVE + fetch 1,mem_le_adv_transmit + increase 1,pdata + store 1,mem_le_adv_transmit + arg 0x0c03,temp// length + SCAN_REQ PDU + fetch 1,mem_le_scan_own_addr_type + nsetflag blank,LE_SENDER_ADDR_BIT,temp + copy regA,pdata + nsetflag blank,LE_RECEIVER_ADDR_BIT,temp + storet 2,mem_le_txheader + fetch 6,mem_le_lap + istore 6,contw + fetch 6,mem_le_plap + istore 6,contw + branch le_transmit_receive_sifs + + +le_send_scan_response: + bpatchx patch2a_2,mem_patch2a + arg SCAN_RSP,temp + fetch 1,mem_le_adv_own_addr_type + nsetflag blank,LE_SENDER_ADDR_BIT,temp + storet 1,mem_le_txheader + fetcht 1,mem_le_scan_data_len + add temp,6,pdata + store 1,mem_le_txlen + fetch 6,mem_le_lap + store 6,mem_le_txpayload + arg mem_le_scan_data,contr + copy temp,loopcnt + call memcpy_fast + call le_transmit_norx + branch le_adv_not_match + +le_connect_request: + bpatchx patch2a_3,mem_patch2a + force -1,pdata + setsect 2,1 + store 5,mem_le_channel_map + call le_calc_channel_map + force 4,loopcnt + arg mem_le_access,contw + call generate_random_loop + fetch 2,mem_le_timeout + store 2,mem_le_superto +le_con_req_hop_retry: + random pdata + and_into 0xf,pdata + sub pdata,4,null + branch le_con_req_hop_retry,positive + store 1,mem_le_hop + store 1,mem_tmp1 + bpatchx patch2a_4,mem_patch2a + fetcht 2,mem_le_conn_interval + storet 2,mem_le_tsniff + copy temp,regc // tsniff in regc + add clkn_bt,7,pdata // leave space for offset + idiv regc + call wait_div_end + remainder rega + isub rega,pdata + iadd regc,pdata + fetcht 2,mem_le_dsniff + iadd temp,pdata + store 4,mem_le_anchor + isub clkn_bt,rega + increase -6,rega // window offset + arg 0x2205,regb // length & CONN_REQ PDU + fetch 1,mem_le_conn_own_addr_type + nsetflag blank,LE_SENDER_ADDR_BIT,regb + fetch 1,mem_le_conn_peer_addr_type + nsetflag blank,LE_RECEIVER_ADDR_BIT,regb + copy regb,pdata + store 2,mem_le_txheader + fetch 6,mem_le_lap + istore 6,contw//own addr + fetch 6,mem_le_plap + istore 6,contw// peer addr + fetch 4,mem_le_access + istore 4,contw + random pdata + istore 2,contw /* crc init */ + random pdata + istore 1,contw + force 2,pdata /* window size */ + istore 1,contw + rshift2 rega,pdata + istore 2,contw /* window offset */ + rshift2 regc,pdata + istore 2,contw /* conn Interval */ + bpatchx patch2a_5,mem_patch2a + setarg 0 /* slave latency */ + istore 2,contw + fetch 2,mem_le_timeout + istore 2,contw + fetch 5,mem_le_channel_map + istore 5,contw /* channel map */ + fetch 1,mem_le_hop + arg param_le_sca,temp + ior temp,pdata + istore 1,contw + call le_transmit_norx + setarg mem_le_txheader + add pdata,18,contr + ifetch 3,contr + store 3,mem_le_crcinit + rtn + +le_init_adv: + bpatchx patch2a_6,mem_patch2a + disable master + branch le_adv_access + + + +le_update_param: + fetch 1,mem_le_state + rtnbit0 lestate_update_param + fetch 2,mem_le_event_count + fetcht 2,mem_le_instant + isub temp,pdata + nrtn positive + store 2,mem_pdatatemp + bpatchx patch2a_7,mem_patch2a + fetch 1,mem_le_state + set0 lestate_update_param,pdata + set0 lestate_got_first_packet,pdata + store 1,mem_le_state + fetch 4,mem_le_anchor + fetcht 2,mem_le_tsniff + storet 2,mem_temp + isub temp,rega + bpatchx patch2b_0,mem_patch2b + fetch 1,mem_le_new_param + store 1,mem_le_window_size + ifetcht 2,contr + ifetch 2,contr + lshift2 pdata,pdata + store 2,mem_le_tsniff + lshift2 temp,temp + iadd temp,pdata + ifetcht 4,contr + storet 4,mem_le_slave_latency // and superTO + iadd rega,pdata + copy pdata,regab + fetch 2,mem_le_tsniff + fetcht 2,mem_temp //last sniff + isub temp,pdata //last sniff - new sniff + fetcht 2,mem_pdatatemp + imul32 temp,pdata + iadd regab,pdata + store 4,mem_le_anchor + call le_receive_window_size + fetch 2,mem_le_superto + store 2,mem_le_init_superto + rtn + + +le_update_channel_map: + bpatchx patch2b_1,mem_patch2b + fetch 1,mem_le_state + rtnbit0 lestate_update_map + fetch 2,mem_le_event_count + fetcht 2,mem_le_instant + isub temp,pdata + nrtn positive + fetch 1,mem_le_state + set0 lestate_update_map,pdata + store 1,mem_le_state + fetch 5,mem_le_new_map + store 5,mem_le_channel_map + branch le_calc_channel_map + + +le_acknowledge: + bpatchx patch2b_2,mem_patch2b + call le_supervision_flush + call le_check_wak + fetch 1,mem_le_rxbuf + isolate1 md,pdata + setflag true,mark_ble_rx_md,mark + rshift pdata,pdata + ixor temp,pdata + isolate1 nesn,pdata + setflag true,mark_old_packet,mark /* retransmit */ + rtnmark1 mark_old_packet + fetch 1,mem_le_rxbuf+1 + branch le_ack_unenc,blank /* empty packet, no decryption */ + fetch 1,mem_le_state + bbit0 lestate_encryption,le_ack_unenc + call load_sk + call le_decrypt + nrtn blank +le_ack_unenc: + fetcht 1,mem_le_arq + setflip nesn,temp + storet 1,mem_le_arq + rtn + + +le_check_wak: + bpatchx patch2b_3,mem_patch2b + fetcht 1,mem_le_arq + isolate0 wak,temp + rtn true + fetch 1,mem_le_rxbuf + lshift pdata,pdata + ixor temp,pdata + rtnbit0 sn /* received NESN is same as SN, NAK */ + set0 wak,temp + setflip sn,temp + storet 1,mem_le_arq + compare 3,temp,3 + nrtn true + fetch 1,mem_le_txpayload + beq LL_START_ENC_REQ,le_set_enc + fetch 1,mem_le_enc_state + beq FLAG_LE_ENC_PAUSE,le_clear_enc + rtn + + +le_set_enc: + fetch 1,mem_le_state + set1 lestate_encryption,pdata + store 1,mem_le_state + rtn + +le_clear_enc: + bpatchx patch2b_4,mem_patch2b + jam FLAG_LE_ENC_NULL,mem_le_enc_state + arg 0,pdata + store 4,mem_le_last_mic + store 5,mem_le_pcnt_tx + set1 39,pdata + store 5,mem_le_pcnt_rx + fetch 1,mem_le_state + set0 lestate_encryption,pdata + store 1,mem_le_state + rtn + + +le_wait_adv: + bpatchx patch2b_5,mem_patch2b + call le_next_adv_channel + call le_receive_adv + fetch 1,mem_le_adv_waitcnt + increase 1,pdata + store 1,mem_le_adv_waitcnt + rtn + + +le_scan: + bpatchx patch2b_6,mem_patch2b + fetch 1,mem_le_scan_enable + rtnne LE_SCAN_ENABLE + arg le_scan_interval_timer,queue + call timer_check + nrtn blank + fetch 2,mem_le_scan_interval + fetcht 2,mem_le_scan_window + isub temp,pdata + arg le_scan_interval_timer,queue + call timer_init + disable master + call le_init_adv + call le_wait_adv + nrtn match + bpatchx patch2b_7,mem_patch2b + fetch 6,mem_le_rxbuf+2 + store 6,mem_le_plap +// call le_scan_dongle + + fetch 1,mem_le_adv_rcv + increase 1,pdata + store 1,mem_le_adv_rcv + call le_create_conn + rtn master + call le_send_scan_request + nrtn match + bpatchx patch2c_0,mem_patch2c + fetch 1,mem_le_scanrsp_rcv + increase 1,pdata + store 1,mem_le_scanrsp_rcv + fetch 9,mem_le_rxbuf+8 + store 9,mem_tmp_buffer + rtn + +le_create_conn: + bpatchx patch2c_1,mem_patch2c + fetch 1,mem_cmd_le_create_conn + rtnne hci_cmd_le_create_conn + fetch 6,mem_le_plap + fetcht 6,mem_le_conn_peer_addr + isub temp,null + nrtn zero + call context_new + nrtn zero + call le_connect_request + call le_init_master + bpatchx patch2c_2,mem_patch2c + jam 0,mem_hci_cmd + jam 0,mem_le_peer_sca + jam 0,mem_le_scan_enable + jam 0,mem_cmd_le_create_conn + branch context_save + +le_scan_check_sender_addr_type: + arg 1,rega// sender_addr_type + fetch 1,mem_le_rxbuf + rtnbit1 LE_SENDER_ADDR_BIT + arg 0,rega + rtn + + + +le_prepare_tx: + bpatchx patch2c_3,mem_patch2c + fetch 1,mem_le_arq + rtnbit1 wak + call le_check_tx_md + call le_fifo_get_first_tx_ptr //no packet to send + branch le_send_empty,blank + ifetch 1,contr + ifetcht 1,contr + copy temp,rega + isub rega,pdata + arg LE_MAX_PAKET_LEN,temp + call not_greater_than + copy pdata,temp + ifetch 1,contr + copy pdata,type + copy rega,pdata + iadd contr,contr + arg mem_le_txpayload,contw + copy temp,loopcnt + call memcpy + call le_update_tx_type + call le_send_packet + + call le_fifo_get_first_tx_ptr + ifetch 1,contr + copy pdata,rega + copy contr,regc + ifetcht 1,contr + copy temp,regb + isub regb,pdata + arg LE_MAX_PAKET_LEN,temp + call not_greater_than + iadd regb,pdata + istore 1,regc + isub rega,null + nrtn zero + branch le_fifo_release_first_node + + +le_check_tx_md: + call le_check_continue + rtnmark1 mark_ble_tx_md + fetch 1,mem_le_configuration + bbit0 BIT_BLE_TRANSMIT_PACKET_BY_MD,le_clear_md + call le_fifo_get_second_tx_ptr //no packet to send + branch le_clear_md,blank + branch le_set_md + + +le_check_continue: + call le_fifo_get_first_tx_ptr //no packet to send + branch le_clear_md,blank + ifetch 1,contr //pdata:length + ifetcht 1,contr //temp:offest + isub temp,pdata //pdata:length - offset + sub pdata,LE_MAX_PAKET_LEN,null + branch le_clear_md,positive //27 > length -offset +le_set_md: + set1 mark_ble_tx_md,mark + rtn + +le_clear_md: + set0 mark_ble_tx_md,mark + rtn + +le_update_tx_type: + copy rega,pdata + rtn blank + arg LLID_CONTINUE,type + rtn + + +le_att_check_notification_enable: // temp ->handle,output-> pdata,output :contr->rega + bpatchx patch2c_4,mem_patch2c + increase 1,temp + call le_att_get_handle_ptr + increase -2,contr + ifetch 2,contr + arg CLIENT_CHARACTERTIC_CONFIGURATION,temp + isub temp,null + nrtn zero + increase 1,contr + copy contr,rega + ifetch 1,contr + rtn + + +le_send_empty: + force 0,temp + force 1,type + +le_send_packet: + bpatchx patch2c_5,mem_patch2c + storet 1,mem_le_txlen + fetcht 1,mem_le_arq + set1 wak,temp + and temp,0xfc,pdata + ior type,pdata + store 1,mem_le_arq + and_into 0x1f,pdata + isolate1 mark_ble_tx_md,mark + setflag true,md,pdata + store 1,mem_le_txheader + + fetch 1,mem_le_txheader + compare 1,type,3 + nbranch le_send_no_txlen,true + fetch 1,mem_le_txlen + rtn blank +le_send_no_txlen: + fetch 1,mem_le_state + rtnbit0 lestate_encryption + call load_sk + branch le_encrypt + + +get_lpm_wake_ble_rx_lock: + arg wake_lock_ble_rx,queue + branch lpm_get_wake_lock + +put_lpm_wake_ble_rx_lock: + arg wake_lock_ble_rx,queue + branch lpm_put_wake_lock + + +le_parse: + bpatchx patch2c_6,mem_patch2c + rtnmark1 mark_old_packet + call le_fifo_check_full + nrtn blank + fetch 1,mem_le_rxbuf + and pdata,0x3,pdata + store 1,mem_le_packet_llid + ifetch 1,contr + and pdata,0x1f,pdata + store 1,mem_le_packet_size + rtn blank //empty rtn + copy contr,pdata + store 2,mem_le_payload_ptr + fetch 1,mem_le_packet_llid + beq LLID_LE_LL,le_parse_ll +le_parse_l2cap: + call le_check_l2cap_complete + nbranch get_lpm_wake_ble_rx_lock,user + call put_lpm_wake_ble_rx_lock + fetch 2,mem_le_payload_ptr + copy pdata,contr + ifetch 2,contr //l2cap len + store 2,mem_le_l2cap_size + bpatchx patch2c_7,mem_patch2c + ifetch 2,contr + beq LE_L2CAP_CID_ATT,le_parse_att + beq LE_L2CAP_CID_SMP,le_parse_smp + beq LE_L2CAP_CID_SIGNAL,le_parse_signaling + rtn + + +le_check_l2cap_complete: + fetch 1,mem_le_packet_llid + beq LLID_START,le_check_l2cap_llid_start + beq LLID_CONTINUE,le_check_l2cap_llid_continue + rtn + +//input: pdata is CID number +//output: if CID is legal ,enable user +// if ICD is illegal,disable user +le_check_l2cap_CID_legal: + call enable_user + arg LE_L2CAP_CID_ATT,temp + isub pdata,null + rtn zero + arg LE_L2CAP_CID_SIGNAL,temp + isub pdata,null + rtn zero + arg LE_L2CAP_CID_SMP,temp + isub pdata,null + rtn zero + branch disable_user + + +le_check_l2cap_llid_start: + fetch 2,mem_le_payload_ptr + copy pdata,contr + ifetch 2,contr + store 2,mem_le_l2cap_size + ifetch 2,contr //CID + call le_check_l2cap_CID_legal + nrtn user + fetcht 1,mem_le_packet_size + storet 1,mem_le_packet_len_recved + fetch 2,mem_le_l2cap_size + increase 4,pdata + isub temp,null + branch enable_user,zero + fetch 1,mem_le_packet_size + copy pdata,loopcnt + arg mem_le_l2capbuf,contw + fetch 2,mem_le_payload_ptr + copy pdata,contr + call memcpy + branch disable_user + +//no input +//output: if CID is legal ,enable user +// if ICD is illegal,disable user +le_check_l2cap_continue_legal: + call enable_user + fetch 1,mem_le_packet_len_recved + nrtn blank + branch disable_user + +le_check_l2cap_llid_continue: + call le_check_l2cap_continue_legal + nrtn user + fetch 1,mem_le_packet_len_recved + arg mem_le_l2capbuf,contw + iadd contw,rega + fetcht 1,mem_le_packet_size + iadd temp,pdata + store 1,mem_le_packet_len_recved + fetch 1,mem_le_packet_size + copy pdata,loopcnt + copy rega,contw + fetch 2,mem_le_payload_ptr + copy pdata,contr + call memcpy_fast + setarg mem_le_l2capbuf + store 2,mem_le_payload_ptr //update ptr->mem_le_l2capbuff + fetch 2,mem_le_l2cap_size + increase 4,pdata + fetcht 1,mem_le_packet_len_recved + isub temp,null + branch enable_user,zero + branch disable_user + + + + + +le_get_search_att_type: + call store_contr + arg mem_le_search_att_type_length,contw +le_get_search_common: + fetch 2,mem_le_l2cap_size + increase -5,pdata +le_get_search_common2: + istore 1,contw + copy pdata,loopcnt + call get_contr + branch memcpy_fast + +le_get_search_att_uuid: + call store_contr + arg mem_le_search_uuid_length,contw + branch le_get_search_common + + + /* rega pointers to data, regb is length */ +le_writeatt_cb: + fetch 2,mem_cb_att_write + branch callback_func + +le_supervision_update: + fetcht 4,mem_le_supervision_timer + call get_clkbt + isub temp,timeup /* and to 28 bits */ + deposit timeup + fetcht 2,mem_le_superto + lshift4 temp,temp + lshift temp,temp + isub temp,pdata + rtn + +le_supervision_flush: + call get_clkbt + store 4,mem_le_supervision_timer + rtn + + +le_adv: + jam 36,mem_le_ch_mapped + jam 0,mem_le_adv_channel_map_temp +le_adv_loop: + bpatchx patch2d_0,mem_patch2d + fetch 1,mem_le_adv_enable + rtn blank + arg le_adv_interval_timer,queue + call timer_check + nrtn blank + bpatchx patch2d_1,mem_patch2d +le_adv_loop_tx: + disable master + enable swfine + call le_init_adv + call le_next_adv_channel + call le_send_adv_ind + nbranch le_adv_not_match,match + fetch 1,mem_le_req_rcv + increase 1,pdata + store 1,mem_le_req_rcv + fetch 1,mem_le_rxbuf + and pdata,0x0f,pdata + beq SCAN_REQ,le_send_scan_response + beq CONNECT_REQ,le_parse_connect_req +le_adv_not_match: + bpatchx patch2d_2,mem_patch2d + random pdata + arg 0x1ff,temp + iand temp,pdata + add pdata,250,pdata + call delay + fetch 1,mem_le_adv_channel_map_temp + fetcht 1,mem_le_adv_channel_map + isub temp,null + nbranch le_adv_loop,zero + arg le_adv_interval_timer,queue + fetch 2,mem_le_adv_interval + branch timer_init + + +le_receive_window_size: + bpatchx patch2d_3,mem_patch2d + fetch 1,mem_le_peer_sca + call le_sca_map + fetch 2,mem_le_tsniff + imul32 temp,pdata + arg 375,temp + imul32 temp,pdata + arg 100000,temp + idiv temp + fetch 1,mem_le_window_size + arg 20000,temp + imul32 temp,pdata + iadd temp,pdata + store 4,mem_le_transmit_window + bpatchx patch2d_4,mem_patch2d + fetch 2,mem_rx_window_sniff + call wait_div_end + quotient temp + iadd temp,pdata + store 2,mem_le_receive_window + rtn + +le_parse_connect_req: + bpatchx patch2d_5,mem_patch2d + fetch 6,mem_le_rxbuf+8 + fetcht 6,mem_le_lap + isub temp,null + nrtn zero + call le_scan_check_sender_addr_type + copy rega,pdata + store 1,mem_le_conn_peer_addr_type + fetch 7,mem_le_rxbuf+21 + store 7,mem_tmp_buffer + ifetch 8,contr + istore 8,contw + fetch 6,mem_le_rxbuf+2 + store 6,mem_le_plap + increase 6,contr + ifetch 8,contr + store 8,mem_le_access // and crcinit & window size + ifetcht 2,contr // transmit offset + bpatchx patch2d_6,mem_patch2d +// increase 1,temp + lshift2 temp,temp + ifetch 2,contr // connInterval + lshift2 pdata,pdata + store 2,mem_le_tsniff + store 4,mem_le_anchor + isub temp,pdata + add pdata,-2,clke_bt + ifetch 9,contr + store 9,mem_le_slave_latency// and super to & channel map + bpatchx patch2d_7,mem_patch2d + ifetch 1,contr + rshift4 pdata,temp + rshift temp,temp + storet 1,mem_le_peer_sca + and_into 0x1f,pdata + store 1,mem_le_hop + call le_receive_window_size + call le_calc_channel_map + call le_init_slave + call context_new + nrtn zero + bpatchx patch2e_0,mem_patch2e + call calc_clke_offset + call le_l2cap_reset_signaling_identifier + jam BT_EVT_LE_CONNECTED,mem_fifo_temp + call ui_ipc_send_event +// call app_get_lpm_wake_lock + branch context_save + + +le_init_attlist_search: + bpatchx patch2e_1,mem_patch2e + fetch 2,mem_le_search_handle_start + iforce regb + fetch 2,mem_le_search_handle_end + iforce regc + fetch 2,mem_ui_le_uuid_table + iforce contr + enable user + rtn + + /* return handle in pdata, blank:end of list, positive:in range */ +le_att_handle_inrange: + ifetch 2,contr + rtn blank + isub regb,null /* less than start ? */ + nrtn positive + isub regc,null /* greater than end ? */ + rtn zero + branch le_att_handle_blank,positive + force 1,null + rtn +le_att_handle_blank: + force 0,pdata + rtn + + + /* handle in temp, return pointer in contr to length, blank not found */ +le_att_get_handle_ptr: + call le_att_get_handle_ptr2 + branch le_att_get_handle_ptr_found,zero + rtn + +le_att_get_handle_ptr2: + bpatchx patch2e_2,mem_patch2e + fetch 2,mem_ui_le_uuid_table + iforce contr +le_att_get_handle_loop1: + ifetch 2,contr + rtn blank + isub temp,null + rtn zero + ifetch 1,contr + iadd contr,contr + ifetch 1,contr // length + iadd contr,contr + branch le_att_get_handle_loop1 +le_att_get_handle_ptr_found: + ifetch 1,contr + iadd contr,contr + rtn + + + +le_att_get_short_uuid_ptr: + bpatchx patch2e_3,mem_patch2e + fetch 2,mem_ui_le_uuid_table + iforce contr +le_att_get_short_uuid_loop: + ifetch 2,contr + rtn blank + ifetch 1,contr + iadd contr,contr + increase -2,contr + ifetch 2,contr + isub temp,null + rtn zero + ifetch 1,contr + iadd contr,contr + branch le_att_get_short_uuid_loop + + + +le_att_get_handle_info_from_ptr: + fetch 2, mem_le_cur_attlist_start_ptr + branch le_att_get_handle_info_fast + +le_att_get_handle_info: + bpatchx patch2e_4,mem_patch2e + fetch 2,mem_ui_le_uuid_table +le_att_get_handle_info_fast: + iforce contr + copy temp,rega +le_att_get_handle_loop: + ifetch 2,contr + branch le_att_unfind_handle,blank + isub rega,null + branch le_att_finded_handle, zero + ifetch 1,contr // length + iadd contr,contr + ifetch 1,contr //length + iadd contr,contr + branch le_att_get_handle_loop +le_att_unfind_handle: + branch disable_blank + +le_att_finded_handle: + ifetch 1,contr + store 1,mem_le_cur_uuid_length + copy pdata,loopcnt + arg mem_le_cur_uuid,contw + call memcpy_fast + ifetch 1,contr + store 1,mem_le_curr_att_len + call store_contr + branch enable_blank + + +le_modified_name: + bpatchx patch2e_5,mem_patch2e + call le_modified_name_att_list + branch le_modified_name_adv + +le_modified_name_att_list: + arg UUID_CHRCTR_DEVICE_NAME,temp + call le_att_get_short_uuid_ptr + rtn blank + ifetch 1,contr // attribute length + copy contr,contw + fetcht 1,mem_le_name_len + copy temp,loopcnt + isub temp,null + nbranch le_name_length_longer_than_att,positive + isub temp,temp + arg mem_le_name,contr + call memcpy + copy temp,loopcnt + ncall memcpy_empty,zero + rtn +le_name_length_longer_than_att: + copy pdata,loopcnt + arg mem_le_name,contr + branch memcpy_fast + + +le_modified_name_adv: + arg mem_le_adv_data_len+32,regc + arg mem_le_adv_data,rega + call le_modified_name_adv_and_scan + setarg 0 + setflag user,0,pdata + store 1,mem_pdatatemp + arg mem_le_scan_data_len+32,regc + arg mem_le_scan_data,rega + call le_modified_name_adv_and_scan + rtn user + fetch 1,mem_pdatatemp + branch assert,blank + rtn + + +le_modified_name_adv_and_scan: + bpatchx patch2e_6,mem_patch2e + call enable_user + call clear_temp_block + arg 0,regb //current length + arg mem_le_data_temp,contw + call le_modified_name_adv_loop + fetch 1,mem_le_name_len + add pdata,1,temp + iadd regb,rega + increase 2,rega + sub rega,0x1f,null + nbranch le_modified_name_adv_and_scan_name_overflow,positive + istoret 1,contw //store ble name length + arg GAP_ADTYPE_LOCAL_NAME_COMPLETE,temp + istoret 1,contw //store ble name type + iforce loopcnt + call memcpy_fast + copy rega,regb +le_modified_name_adv_and_scan_store_data: + deposit regb + store 1,mem_le_data_len_temp + arg mem_le_data_len_temp,contr + setarg -32 + iadd regc,contw + branch memcpy32 + +le_modified_name_adv_and_scan_name_overflow: + call disable_user + branch le_modified_name_adv_and_scan_store_data + +le_modified_name_adv_loop: + ifetch 1,rega //pdata:length + rtn blank //length is zero,ending find + pincrease 1 //length += 1 + ifetcht 1,contr //pdata:type + sub temp,GAP_ADTYPE_LOCAL_NAME_COMPLETE,null + branch le_modified_name_adv_found_name,zero + iadd regb,regb + copy rega,contr + iforce loopcnt + call memcpy_fast + copy contr,rega +le_modified_name_adv_loop2: + deposit rega + isub regc,null + rtn positive + branch le_modified_name_adv_loop + +le_modified_name_adv_found_name: + iadd rega,rega + branch le_modified_name_adv_loop2 + + +memcpy_empty: + setarg SPACE + istore 1,contw + loop memcpy_empty + rtn + + +le_lpm_set_mult: + bpatchx patch2e_7,mem_patch2e + disable wake + branch le_lpm_set_mult_attempt,attempt + nbranch le_lpm_lost,match +le_lpm_set_mult_attempt: + call lpm_match + fetch 2,mem_rx_window_sniff + store 2,mem_le_receive_window + + nbranch lpm_mult_short,match + bmark1 mark_old_packet,lpm_mult_short + + fetch 1,mem_le_packet_size + nbranch lpm_mult_short,blank // rx not empty, short interval + fetch 1,mem_le_txlen + nbranch lpm_mult_short,blank // tx not empty, short interval + + fetch 1,mem_le_configuration + bbit1 BIT_BLE_SHORT_MULT,lpm_mult_short //check flag,if flag is 1,always short mult + + fetch 1,mem_le_state + bbit1 lestate_update_param,lpm_mult_short + branch lpm_mult_wait_timeout + +le_lpm_lost: + fetcht 2,mem_rx_window_sniff + rshift temp,temp + fetch 2,mem_le_receive_window + iadd temp,pdata + store 2,mem_le_receive_window + branch lpm_lost + +///////////////////////////////BLE CONFIG////////////////////////////////////////// +le_set_config_fixed_tk: + arg BIT_BLE_PASSKEY_FIXED_KEY,queue + branch le_set_config + +le_clr_config_fixed_tk: + arg BIT_BLE_PASSKEY_FIXED_KEY,queue + branch le_clr_config + +le_set_config_fixed_ltk: + arg BIT_BLE_PAIRING_FIXED_LTK,queue + branch le_set_config + +le_clr_config_fixed_ltk: + arg BIT_BLE_PAIRING_FIXED_LTK,queue + branch le_clr_config + +le_set_config_more_data: + arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue + branch le_set_config + +le_clr_config_more_data: + arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue + branch le_clr_config + +le_set_config_read_authentication: + arg BIT_BLE_READ_AUTH,queue + branch le_set_config + +le_clr_config_read_authentication: + arg BIT_BLE_READ_AUTH,queue + branch le_clr_config + +le_set_config_write_authentication: + arg BIT_BLE_WRITE_AUTH,queue + branch le_set_config + +le_clr_config_write_authentication: + arg BIT_BLE_WRITE_AUTH,queue + branch le_clr_config + +le_set_config_short_mult: + arg BIT_BLE_SHORT_MULT,queue + branch le_set_config + +le_clr_config_short_mult: + arg BIT_BLE_SHORT_MULT,queue + branch le_clr_config + + +le_set_config: + fetch 1,mem_le_configuration + qset1 pdata + store 1,mem_le_configuration + rtn + +le_clr_config: + fetch 1,mem_le_configuration + qset0 pdata + store 1,mem_le_configuration + rtn + +le_set_fixed_ltk: + setarg 0x112233 + store 3,mem_le_fixed_ltk + setarg 0x445566 + istore 3,contw + setarg 0x778899 + istore 3,contw + setarg 0x001122 + istore 3,contw + setarg 0x334455 + istore 3,contw + setarg 0x66 + istore 1,contw + rtn + + +le_set_justwork: + setarg 0x01000302 + store 4,mem_le_pres + setarg 0x010010 + store 3,mem_le_pres_max_keysize + jam 1,mem_le_pairing_mode + rtn + +///////////////////////////////////////////////////////////////////////// + +le_fifo_malloc_tx_empty: + arg 0,rega + arg LLID_EMPTY,type + branch le_fifo_malloc_tx + + +//rega:len regb:ll opcode +le_fifo_malloc_tx_ll: + arg LLID_LE_LL,type + call le_fifo_malloc_tx + copy regb,pdata + istore 1,contw + rtn + + +//rega:len regb:cid +le_fifo_malloc_tx_l2cap: + force LLID_L2CAP_START,type + increase 4,rega + call le_fifo_malloc_tx + increase -4,rega + copy rega,pdata + istore 2,contw + copy regb,pdata + istore 2,contw + rtn + + +//rega:len type:llid +le_fifo_malloc_tx: + sub rega,240,null //check max len + nbranch assert,positive + fetch 1,mem_le_tx_buff_used + arg 1,temp + arg LE_TX_BUFF_COUNT,loopcnt +le_fifo_malloc_tx_loop: + iand temp,null + branch le_fifo_malloc_tx_got_empty,zero + lshift temp,temp + loop le_fifo_malloc_tx_loop + branch assert //no empty buff +le_fifo_malloc_tx_got_empty: + ixor temp,pdata + store 1,mem_le_tx_buff_used + sub loopcnt,LE_TX_BUFF_COUNT,pdata + lshift4 pdata,pdata + lshift4 pdata,pdata + arg mem_le_tx_buffer0,temp + iadd temp,temp +le_fifo_tx_find_empty_ptr: + arg 0,loopcnt + arg mem_le_tx_ptr0,contr +le_fifo_tx_find_empty_ptr_loop: + ifetch 2,contr + branch le_fifo_tx_found_empty_ptr,blank + copy loopcnt,pdata + increase 1,loopcnt + bne LE_TX_BUFF_COUNT,le_fifo_tx_find_empty_ptr_loop + branch assert + + +le_fifo_tx_found_empty_ptr: + increase -2,contr + istoret 2,contr + copy temp,contw + copy rega,pdata + istore 1,contw //lengh + setarg 0 + istore 1,contw //offset + copy type,pdata + istore 1,contw //LLID + rtn + + + +le_fifo_get_first_tx_ptr: + fetch 2,mem_le_tx_ptr0 + copy pdata,contr + rtn + +le_fifo_get_second_tx_ptr: + fetch 2,mem_le_tx_ptr1 + copy pdata,contr + rtn + +le_fifo_get_last_tx_ptr: + call le_fifo_get_last_tx_ptr0 + copy pdata,contr + rtn +le_fifo_get_last_tx_ptr0: + fetch 2,mem_le_tx_ptr3 + nrtn blank + fetch 2,mem_le_tx_ptr2 + nrtn blank + fetch 2,mem_le_tx_ptr1 + nrtn blank + fetch 2,mem_le_tx_ptr0 + rtn + +le_fifo_get_first_l2cap_ptr: + call le_fifo_get_first_tx_ptr + increase 3,contr + rtn + +le_fifo_get_first_att_ptr: + call le_fifo_get_first_tx_ptr + increase 7,contr + rtn + +le_fifo_get_last_att_ptr: + call le_fifo_get_last_tx_ptr + increase 7,contr + rtn + +le_fifo_get_last_l2cap_ptr: + call le_fifo_get_last_tx_ptr + increase 3,contr + rtn + + + +le_fifo_check_full: + fetch 2,mem_le_tx_ptr3 + rtn + + +le_fifo_check_nearly_full: + fetch 2,mem_le_tx_ptr2 + rtn + + +le_fifo_check_empty: + fetch 2,mem_le_tx_ptr0 + rtn + + +le_fifo_release_first_node: + fetch 2,mem_le_tx_ptr0 + arg mem_le_tx_buffer0,temp + isub temp,pdata + rshift4 pdata,pdata + rshift4 pdata,queue + fetch 1,mem_le_tx_buff_used + qset0 pdata + store 1,mem_le_tx_buff_used + arg 0,loopcnt +le_fifo_release_first_node_loop: + lshift loopcnt,pdata + arg mem_le_tx_ptr1,temp + iadd temp,temp + ifetch 2,temp + increase -2,temp + istore 2,temp + copy loopcnt,pdata + increase 1,loopcnt + bne LE_TX_BUFF_UPDATE_LOOPCNT,le_fifo_release_first_node_loop + setarg 0 + istore 2,temp + rtn + + + Index: 1066_OTP_FLASH/program/le_l2cap_att.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/le_l2cap_att.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/le_l2cap_att.prog (working copy) @@ -0,0 +1,713 @@ + + +le_parse_att: + ifetch 3,contr + store 3,mem_le_att_opcode + beq ATTOP_EXCHANGE_MTU_REQUEST,le_parse_att_exchange_mtu_request + beq ATTOP_EXCHANGE_MTU_RESPONSE,le_parse_att_exchange_mtu_response + beq ATTOP_FIND_INFORMATION_REQUEST,le_parse_att_find_information_request + beq ATTOP_FIND_BY_TYPE_VALUE_REQUEST,le_parse_att_find_by_type_value_request + beq ATTOP_READ_BY_TYPE_REQUEST,le_parse_att_read_by_type_request + beq ATTOP_READ_REQUEST,le_parse_att_read_request + beq ATTOP_READ_BLOB_REQUEST,le_parse_att_read_blob_request + beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,le_parse_att_read_by_group_type_request + beq ATTOP_WRITE_REQUEST,le_parse_att_write_request + beq ATTOP_PREPARE_WRITE_REQUEST,le_parse_att_prepare_write_request + beq ATTOP_EXECUTE_WRITE_REQUEST,le_parse_att_execute_write_request + beq ATTOP_WRITE_COMMAND,le_parse_att_write_command + rtn + + +le_send_att_exchange_mtu_requset: + force 3,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_EXCHANGE_MTU_REQUEST + istore 1,contw + fetch 2,mem_le_local_mtu + istore 2,contw + rtn + + +le_parse_att_exchange_mtu_request: + call le_parse_att_exchange_mtu_response +le_send_att_exchange_mtu_response: + force 3,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_EXCHANGE_MTU_RESPONSE + istore 1,contw + fetch 2,mem_le_local_mtu + istore 2,contw + rtn + +le_parse_att_exchange_mtu_response: + rshift8 pdata,pdata + store 2,mem_le_remote_mtu + rtn + +le_parse_att_find_information_request: + call le_get_search_handle_start_end_common + call enable_user + branch le_send_att_find_information_response + +le_send_att_find_information_response: + arg 3,timeup + call le_init_attlist_search +le_send_att_find_information_res_loop: + call le_att_handle_inrange + branch le_send_att_find_information_res_end,blank + nbranch le_send_att_find_information_res_next,positive + increase -2,contr + call store_contr + call get_contw + nbranch le_send_att_find_information_res_store_info,user + call push_stack_rega_b_c + call disable_user + force 20,rega + call le_fifo_malloc_tx_l2cap_gatt + call pop_stack_rega_b_c + setarg ATTOP_FIND_INFORMATION_RESPONSE + istore 1,contw + setarg UUID_SIZE_16BIT + istore 1,contw +le_send_att_find_information_res_store_info: + call get_contr + ifetch 2,contr + istore 2,contw + ifetch 1,contr + copy pdata,loopcnt + call memcpy + call store_contw + increase -1,timeup + branch le_send_att_find_information_res_end,zero +le_send_att_find_information_res_cont: + ifetch 1,contr + iadd contr,contr + branch le_send_att_find_information_res_loop +le_send_att_find_information_res_next: + ifetch 1,contr + iadd contr,contr + branch le_send_att_find_information_res_cont +le_send_att_find_information_res_end: + branch le_send_att_error_response_notfound,user + branch le_send_auto_len_by_mem + + +le_parse_att_find_by_type_value_request: + call le_get_search_handle_start_end_common + ifetch 2,contr + store 2,mem_le_search_uuid + call store_contr + arg mem_le_search_att_type_length,contw + fetch 2,mem_le_l2cap_size + increase -7,pdata + call le_get_search_common2 + branch le_send_att_find_by_type_value_response + + +le_start_end_handle_check_1: + disable user + fetcht 2,mem_le_search_handle_start + fetch 2,mem_le_search_handle_end + isub temp,null + nbranch le_start_end_handle_check_1_fail,positive + deposit temp + rtnne 0 +le_start_end_handle_check_1_fail: + enable user + jam ATT_ERR_INVALID_HANDLE,mem_le_err_code + branch le_send_att_error_response + + +le_send_att_find_by_type_value_response: + call le_start_end_handle_check_1 + rtn user + fetcht 2,mem_le_search_uuid + setarg UUID_GATT_PRIMARY_SERVICE + isub temp,null + branch le_send_att_find_by_type_value_res_primary,zero + branch le_send_att_error_response_notfound + + +le_send_att_find_by_type_value_res_primary: + jam LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,mem_le_search_res + fetcht 2,mem_le_search_handle_start + storet 2,mem_temp + call le_att_get_handle_info + nbranch le_send_att_error_response_notfound,blank +le_send_att_find_primary_search_loop: + fetcht 2,mem_temp + call le_att_get_handle_info + nbranch le_send_att_error_response_notfound2,blank + copy contr,rega + fetch 1,mem_le_curr_att_len + copy pdata,loopcnt + fetcht 1,mem_le_search_att_type_length + isub temp,null + nbranch le_send_att_find_primary_search_loop1,zero + arg mem_le_search_att_type,regb + call string_compare + + branch le_send_att_find_primary_search_end_start_handle_found,zero + + fetch 2,mem_le_cur_uuid + fetcht 2,mem_le_search_uuid + isub temp,null + branch le_send_att_find_primary_search_end_ending_handle_found,zero +le_send_att_find_primary_search_loop1: + fetch 2,mem_temp + increase 1,pdata + store 2,mem_temp + branch le_send_att_find_primary_search_loop + +le_send_att_error_response_notfound2: + fetch 1,mem_le_search_res + beq LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,le_send_att_find_primary_search_end_ending_handle_found + branch le_send_att_error_response_notfound + + +le_send_att_find_primary_search_end_start_handle_found: + fetch 2,mem_le_cur_uuid + fetcht 2,mem_le_search_uuid + isub temp,null + nbranch le_send_att_find_primary_search_loop1,zero + jam LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,mem_le_search_res +// copy rega,temp + fetcht 2,mem_temp + storet 2,mem_le_cur_handle_start + branch le_send_att_find_primary_search_loop1 + +le_send_att_find_primary_search_end_ending_handle_found: + fetch 1,mem_le_search_res + beq LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,le_send_att_find_primary_search_loop1 + jam LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE,mem_le_search_res + fetcht 2,mem_temp + increase -1,temp + storet 2,mem_le_cur_handle_end + +le_send_att_find_primary_search_end: + arg 5,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_FIND_BY_TYPE_VALUE_RESPONSE + istore 1,contw + fetch 2,mem_le_cur_handle_start + istore 2,contw + fetch 2,mem_le_cur_handle_end + istore 2,contw + rtn + + + +le_parse_att_read_by_type_request: + call le_get_search_handle_start_end_common + call le_get_search_att_uuid + branch le_send_att_read_by_type_response + +le_send_att_read_by_type_response: + fetcht 2,mem_le_search_handle_start + storet 2,mem_temp + call le_init_attlist_search + call le_att_get_handle_ptr2 + increase -2,contr + copy contr,pdata + store 2,mem_le_cur_attlist_start_ptr + + fetcht 2,mem_le_search_uuid + setarg UUID_CHRCTR_DEVICE_NAME + isub temp,null + branch le_send_att_read_by_type_res_device_name,zero + setarg UUID_GATT_CHARACTERISTIC + isub temp,null + nbranch le_send_att_read_by_type_res_not_characteristic,zero + arg 2,timeup +le_send_att_read_by_type_response_loop: + call le_att_check_handle_end + nbranch le_send_att_read_by_type_response_end,positive + fetcht 2,mem_temp + call le_att_get_handle_info_from_ptr + beq 1,le_send_att_read_by_type_response_end + call le_att_same_uuid + nbranch le_send_att_read_by_type_response_next_handle,zero + nbranch le_send_att_read_by_type_res_found_next,user + disable user + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_TYPE_RESPONSE + istore 1,contw + copy contw,alarm + increase 1,contw + + call le_send_att_read_by_type_write_properties + call le_att_next_handle + call le_att_get_handle_info_from_ptr + call le_send_att_read_by_type_write_uuid + fetch 1,mem_le_cur_uuid_length + increase 5,pdata + istore 1,alarm + fetch 1,mem_le_cur_uuid_length + beq 16,le_send_att_read_by_type_response_end + increase -1,timeup + branch le_send_att_read_by_type_response_end,zero +le_send_att_read_by_type_response_next_handle: + call le_att_next_handle + branch le_send_att_read_by_type_response_loop +le_send_att_read_by_type_response_end: + branch le_send_att_error_response_notfound,user + branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_found_next: + call le_store_att_record + call le_att_next_handle + call le_att_get_handle_info_from_ptr + fetch 1,mem_le_cur_uuid_length + beq 16,le_send_att_read_by_type_response_end + + call get_contw + fetch 2,mem_temp + increase -1,pdata + istore 2,contw + call le_write_att_record_common + call le_send_att_read_by_type_write_uuid + increase -1,timeup + branch le_send_att_read_by_type_response_end,zero + branch le_send_att_read_by_type_response_next_handle + + +le_send_att_read_by_type_write_properties: + fetch 2,mem_temp + istore 2,contw + + fetch 1,mem_le_curr_att_len + copy pdata,loopcnt + call get_contr + call memcpy_fast + branch store_contw +le_send_att_read_by_type_write_uuid: + call get_contw + fetch 2,mem_temp + istore 2,contw + call store_contw + fetch 1,mem_le_cur_uuid_length + copy pdata,loopcnt + call get_contw + call get_contr + isub loopcnt,contr + increase -1,contr + call memcpy_fast + branch store_contw + + + +le_send_att_read_by_type_res_not_characteristic: + fetcht 2,mem_le_search_handle_start + storet 2,mem_temp +le_send_att_read_by_type_res_not_char_loop: + call le_att_check_handle_end + nbranch le_send_att_error_response_notfound,positive + call le_att_get_handle_info_from_ptr + beq 1,le_send_att_error_response_notfound + call le_att_same_uuid + nbranch le_send_att_read_by_type_res_not_char_next,zero + +le_send_att_read_by_type_res_not_char_common: + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_TYPE_RESPONSE + istore 1,contw + fetch 1,mem_le_curr_att_len + copy pdata,loopcnt + increase 2,pdata + istore 1,contw + fetch 2,mem_temp + istore 2,contw + call get_contr + call memcpy_fast + call store_contw + branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_not_char_next: + call le_att_next_handle + branch le_send_att_read_by_type_res_not_char_loop + + +le_send_att_read_by_type_res_device_name: + arg UUID_CHRCTR_DEVICE_NAME,temp + call le_att_get_short_uuid_ptr + rtn blank + increase -5,contr // point to handle + ifetch 2,contr + store 2,mem_temp + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_TYPE_RESPONSE + istore 1,contw + fetch 1,mem_le_name_len + copy pdata,loopcnt + increase 2,pdata + istore 1,contw + fetch 2,mem_temp + istore 2,contw + arg mem_le_name,contr + call memcpy_fast + call store_contw + branch le_send_auto_len_by_mem + + + +le_parse_att_read_request: + fetcht 2,mem_le_att_handle + fetch 1,mem_le_configuration + bbit1 BIT_BLE_READ_AUTH,le_send_att_read_response_check_auth + +le_send_att_read_response: + call le_att_get_handle_ptr + branch le_send_att_error_response_notfound,blank + increase -2,contr + ifetch 2,contr + arg UUID_CHRCTR_DEVICE_NAME,temp + isub temp,null + branch le_send_device_name,zero + ifetch 1,contr + sub pdata,22,null + branch le_send_att_read_response_less,positive + force 22,pdata +le_send_att_read_response_less: + copy pdata,regc + call store_contr + add regc,1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_RESPONSE + istore 1,contw + copy regc,loopcnt + call get_contr + branch memcpy + +le_send_device_name: + call store_contr + fetch 1,mem_le_name_len + add pdata,1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_RESPONSE + istore 1,contw + fetch 1,mem_le_name_len + copy pdata,loopcnt + arg mem_le_name,contr + branch memcpy + + +le_send_att_read_response_check_auth: + fetch 2,mem_le_pairing_handle + isub temp,null + nbranch le_send_att_read_response,zero +//le_send_att_read_response_error_insufficient_auth: + call le_check_encrypt_state + nbranch le_send_att_read_response,user + jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code + branch le_send_att_error_response + + +le_parse_att_read_blob_request: + ifetch 2,contr + store 2,mem_le_att_offset +le_send_att_read_blob_response: + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BLOB_RESPONSE + istore 1,contw + fetch 2,mem_le_att_offset + iforce rega + fetcht 2,mem_le_att_handle + call le_att_get_handle_ptr + branch le_send_att_error_response_notfound,blank + ifetch 1,contr + isub rega,loopcnt + nbranch le_send_att_error_response_notfound,positive + sub loopcnt,22,null + branch le_send_att_read_blob_response_less,positive + force 22,loopcnt +le_send_att_read_blob_response_less: + deposit rega + iadd contr,contr + call memcpy_fast + call store_contw + branch le_send_auto_len_by_mem + + +le_parse_att_read_by_group_type_request: + call le_get_search_handle_start_end_common + call le_get_search_att_type + branch le_send_att_read_by_group_type_response + +//mem_le_search_att_type +//mem_le_search_handle_start +//mem_le_search_handle_end +le_send_att_read_by_group_type_response: + arg 2,timeup + fetcht 2,mem_le_search_handle_start +// arg 23,pdata +// isub temp,null +// call ice_break,zero + storet 2,mem_temp + call le_init_attlist_search + call le_att_get_handle_ptr2 + increase -2,contr + copy contr,pdata + store 2,mem_le_cur_attlist_start_ptr +le_send_att_read_by_group_type_response_loop: + call le_att_check_handle_end + nbranch le_send_att_read_by_group_type_end0,positive + fetcht 2,mem_temp + call le_att_get_handle_info_from_ptr + beq 1,le_send_att_read_by_group_type_end1 + + call le_att_same_type + nbranch le_send_att_read_by_group_type_next_handle,zero + copy timeup,pdata + beq 0,le_send_att_read_by_group_type_end1 + nbranch le_send_att_read_by_group_type_store_write_record,user //un first + disable user + //first att uuid + arg 20,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_READ_BY_GROUP_TYPE_RESPONSE + istore 1,contw + fetch 1,mem_le_curr_att_len + increase 4,pdata + istore 1,contw + call store_contw + branch le_send_att_read_by_group_type_store_record +le_send_att_read_by_group_type_store_write_record: + fetch 1,mem_le_curr_att_len + beq 16,le_send_att_read_by_group_type_end1 + fetch 2,mem_temp + increase -1,pdata + store 2,mem_le_cur_handle_end + call le_write_att_record +le_send_att_read_by_group_type_store_record: + fetch 2,mem_temp + store 2,mem_le_cur_handle_start + call le_store_att_record + increase -1,timeup +// branch le_send_att_read_by_group_type_last_find,zero +le_send_att_read_by_group_type_next_handle: + call le_att_next_handle + branch le_send_att_read_by_group_type_response_loop + +le_send_att_read_by_group_type_end0: //> att handle end + fetch 2,mem_temp + store 2,mem_le_cur_handle_end + branch le_send_att_read_by_group_type_end_common +le_send_att_read_by_group_type_end1: //>att max list handle or diff len + fetch 2,mem_temp + increase -1,pdata + store 2,mem_le_cur_handle_end + branch le_send_att_read_by_group_type_end_common +le_send_att_read_by_group_type_end_common: + branch le_send_att_error_response_notfound,user + call le_write_att_record + branch le_send_auto_len_by_mem + + + + +le_parse_att_write_request: + copy contr,rega + fetch 2,mem_le_l2cap_size + add pdata,-3,regb + call le_writeatt_cb +le_send_att_write_response_check_auth: + fetch 1,mem_le_configuration + bbit0 BIT_BLE_WRITE_AUTH,le_send_att_write_response + + fetcht 2,mem_le_att_handle + fetch 2,mem_le_pairing_handle + isub temp,null + nbranch le_send_att_write_response,zero + call le_check_encrypt_state + nbranch le_send_att_write_response,user + jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code + branch le_send_att_error_response + +le_send_att_write_response: + force 1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_WRITE_RESPONSE + istore 1,contw + rtn + +le_check_encrypt_state: + call disable_user + fetch 1,mem_le_pairing_mode + rtneq LE_PAIRING_MODE_NONE + fetch 1,mem_context + rtnbit1 lestate_encryption + branch enable_user + + +le_parse_att_prepare_write_request: + add contr,2,rega + fetch 2,mem_le_l2cap_size + add pdata,-5,regb + call le_writeatt_cb + branch le_send_att_prepare_write_response + + +le_send_att_prepare_write_response: + fetch 2,mem_le_l2cap_size + copy pdata,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_PREPARE_WRITE_RESPONSE + istore 1,contw + fetch 2,mem_le_att_handle + istore 2,contw + fetch 2,mem_le_l2cap_size + add pdata,-5,loopcnt + fetch 2,mem_le_payload_ptr + add pdata,7,contr + ifetch 2,contr //offset + istore 2,contw + branch memcpy_fast + + + +le_parse_att_execute_write_request: + +le_send_att_execute_write_response: + force 1,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_EXECUTE_WRITE_RESPONSE + istore 1,contw + rtn + + + +le_parse_att_write_command: + copy contr,rega + fetch 2,mem_le_l2cap_size + add pdata,-3,regb + branch le_writeatt_cb + + + +//rga:len temp:handle;rgea,regb,regc already used +le_att_malloc_tx_notify: + copy temp,regc + increase 3,rega + call le_fifo_malloc_tx_l2cap_gatt + increase -3,rega + setarg ATTOP_HANDLE_VALUE_NOTIFICATION + istore 1,contw + copy regc,temp + istoret 2,contw + rtn + +//rga:len temp:handle;rgea,regb,regc already used +le_att_malloc_tx_indication: + copy temp,regc + increase 3,rega + call le_fifo_malloc_tx_l2cap_gatt + increase -3,rega + setarg ATTOP_HANDLE_VALUE_INDICATION + istore 1,contw + copy regc,temp + istoret 2,contw + rtn + + +///////////////////////////ATT common function//////////////////////////////////// + +le_send_att_error_response_notfound: + jam ATT_ERR_ATTRIBUTE_NOT_FOUND,mem_le_err_code +le_send_att_error_response: + force 5,rega + call le_fifo_malloc_tx_l2cap_gatt + setarg ATTOP_ERROR_RESPONSE + istore 1,contw + fetch 1,mem_le_att_opcode + istore 1,contw + fetch 2,mem_le_att_handle + istore 2,contw + fetch 1,mem_le_err_code + istore 1,contw + rtn + + +le_fifo_malloc_tx_l2cap_gatt: + force LE_L2CAP_CID_ATT,regb + branch le_fifo_malloc_tx_l2cap + + +le_att_next_handle: + fetcht 2,mem_temp + increase 1,temp + storet 2,mem_temp + rtn + +le_att_check_handle_end: + fetcht 2,mem_temp + fetch 2,mem_le_search_handle_end + isub temp,null + rtn + + +le_att_same_type: + fetcht 1,mem_le_search_att_type_length + arg mem_le_search_att_type,rega +le_att_check_same_common: + fetch 1,mem_le_cur_uuid_length + copy pdata,loopcnt + isub temp,null + nrtn zero + arg mem_le_cur_uuid ,regb + branch string_compare + +le_att_same_uuid: + fetcht 1,mem_le_search_uuid_length + arg mem_le_search_uuid,rega + branch le_att_check_same_common + + +le_store_att_record: + fetch 1,mem_le_curr_att_len + store 1, mem_tmp_buffer + copy pdata,loopcnt + call get_contr + branch memcpy_fast + + +le_write_att_record: + call get_contw + fetch 2,mem_le_cur_handle_start + istore 2,contw + fetch 2,mem_le_cur_handle_end + istore 2,contw +le_write_att_record_common: + fetch 1,mem_tmp_buffer + copy pdata,loopcnt + call memcpy_fast + branch store_contw + + + +le_send_auto_len_by_mem: + call get_contw + call le_fifo_get_last_att_ptr + copy contw,pdata + isub contr,rega + call le_fifo_get_last_l2cap_ptr + copy rega,pdata + istore 2,contr + increase 4,rega + call le_fifo_get_last_tx_ptr + copy rega,pdata + istore 1,contr + rtn + + +le_get_search_handle_start_end_common: + rshift8 pdata,pdata + store 2,mem_le_search_handle_start + ifetch 2,contr + store 2,mem_le_search_handle_end + rtn + + Index: 1066_OTP_FLASH/program/le_l2cap_signalling.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/le_l2cap_signalling.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/le_l2cap_signalling.prog (working copy) @@ -0,0 +1,54 @@ + + +le_parse_signaling: + ifetch 1,contr + ifetcht 1,contr //id + ifetcht 2,contr //length + beq L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE,le_l2cap_parse_conn_parameter_update_rsp + rtn +le_l2cap_parse_conn_parameter_update_rsp: + ifetch 2,contr //result + store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result + jam BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,mem_fifo_temp + branch ui_ipc_send_event + + +//mem_le_interval_min:the ptr that connection parameter, +//include ConnIntervalMin,ConnIntervalMax, +// ConnSlaveLatency,ConnSupervisionTimeout +le_l2cap_tx_update_req: + arg 0x0c,rega + arg L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST,regc + call le_fifo_malloc_tx_l2cap_signaling + setarg 0x08 + istore 2,contw + fetch 8,mem_le_interval_min + istore 8,contw + rtn + + +//rega:len regc:signaling opcode +le_fifo_malloc_tx_l2cap_signaling: + call le_l2cap_update_signaling_identifier + arg LE_L2CAP_CID_SIGNAL,regb + call le_fifo_malloc_tx_l2cap + copy regc,pdata + istore 1,contw + fetch 1,mem_le_signaling_identifier + istore 1,contw + rtn + + +le_l2cap_update_signaling_identifier: + fetch 1,mem_le_signaling_identifier + //beq 0xff,le_l2cap_signaling_identifier_set_1 + pincrease 1 + store 1,mem_le_signaling_identifier + rtnne 0 + +le_l2cap_reset_signaling_identifier: + jam 1,mem_le_signaling_identifier + rtn + + + Index: 1066_OTP_FLASH/program/le_l2cap_smp.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/le_l2cap_smp.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/le_l2cap_smp.prog (working copy) @@ -0,0 +1,594 @@ + +le_pairing_mode_init: + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_NONE, le_set_no_pairing + beq LE_PAIRING_MODE_LAGACY_JUSTWORK,le_set_pairing_mode_lagacy_just_work + beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_set_pairing_mode_lagacy_passkey +ifdef SECURE_CONNECTION + beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_set_pairing_mode_secure_justwork + beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,le_set_pairing_mode_secure_numeric + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_set_pairing_mode_secure_passkey +endif + rtn + +ifdef SECURE_CONNECTION +le_set_pairing_mode_secure_justwork: + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch le_set_noinputnooutput +le_set_pairing_mode_secure_numeric: + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap + rtn +le_set_pairing_mode_secure_passkey: + jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth + branch le_set_displayonly +endif +le_set_no_pairing: + jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth +le_set_noinputnooutput: + jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap + rtn +le_set_pairing_mode_lagacy_just_work: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth + branch le_set_noinputnooutput +le_set_pairing_mode_lagacy_passkey: + jam FLAG_LE_BONDING_MITM,mem_le_pres_auth +le_set_displayonly: + jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap + rtn + + +le_secure_connection_enable: + fetch 1,mem_le_pres_auth + set1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata + store 1,mem_le_pres_auth + rtn +le_secure_connection_disable: + fetch 1,mem_le_pres_auth + set0 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata + store 1,mem_le_pres_auth + rtn + +le_parse_smp: + ifetch 1,contr + beq SMP_PAIRING_REQUEST,le_parse_smp_pairing_request +// beq SMP_PAIRING_RESPONSE,le_parse_smp_pairing_response + beq SMP_PAIRING_CONFIRM,le_parse_smp_pairing_confirm + beq SMP_PAIRING_RANDOM,le_parse_smp_pairing_random + beq SMP_PAIRING_FAILED,le_parse_smp_pairing_failed + beq SMP_ENCRYPTION_INFORMATION,le_parse_smp_encryption_information + beq SMP_MASTER_IDENTIFICATION,le_parse_smp_master_identification + beq SMP_IDENTITY_INFORMATION,le_parse_smp_identity_information + beq SMP_IDENTITY_ADDRESS_INFORMATION,le_parse_smp_identity_address_information + beq SMP_SIGNING_INFORMATION,le_parse_smp_signing_information + beq SMP_SECURITY_REQUEST,le_parse_smp_security_request +ifdef SECURE_CONNECTION + beq SMP_PAIRING_PUBLIC_KEY,le_parse_smp_public_key + beq SMP_PAIRING_DHKEY_CHECK,le_parse_smp_dhkey_check +endif + rtn + + + +le_send_smp_security_request: + force 2,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_SECURITY_REQUEST + istore 1,contw + fetch 1,mem_le_pres_auth + istore 1,contw + rtn + +le_parse_smp_pairing_request: + store 1,mem_le_preq + ifetch 6,contr + istore 6,contw + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_NONE,le_smp_pairing_fail_reason_not_support_pairing + call le_send_smp_pairing_response + call le_check_master_support_secure_connect + jam FLAG_LE_PAIRING_RCV_PAIRING_REQ,mem_le_pairing_state + fetch 1,mem_le_preq_iocap + beq FLAG_IOCAP_DISPlAYONLY,le_set_tk_0 + beq FLAG_IOCAP_DISPLAYYESNO,le_set_tk_0 + beq FLAG_IOCAP_NOINPUTNOOUTPUT,le_set_tk_0 + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_parse_smp_pairing_req_passkey + rtneq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY +le_set_tk_0: + arg 0,pdata + store 4,mem_le_tk + rtn + +le_parse_smp_pairing_req_passkey: + fetch 1,mem_le_configuration + bbit1 BIT_BLE_PASSKEY_FIXED_KEY,le_parse_smp_pairing_req_fixed_passkey +le_genernate_tk: + arg mem_le_tk,rega + copy rega,contw + arg 3,loopcnt + call generate_random_loop + fetch 2,mem_le_tk + 2 + and_into 0x7,pdata + store 2,mem_le_tk + 2 +le_parse_smp_pairing_req_fixed_passkey: + jam BT_EVT_LE_TK_GENERATE,mem_fifo_temp + branch ui_ipc_send_event + +le_check_master_support_secure_connect: + fetch 1,mem_le_preq_auth + rtnbit1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT + fetch 1,mem_le_pairing_mode + rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT + branch app_ble_disconnect + +le_send_smp_pairing_response: + force 7,rega + call le_fifo_malloc_tx_l2cap_smp + fetch 7,mem_le_pres + istore 7,contw + rtn + + +le_parse_smp_pairing_confirm: +ifdef SECURE_CONNECTION + copy contr,rega + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_confirm_secure_passkey + copy rega,contr +endif + arg mem_le_rconfirm,contw + call memcpy16 + branch le_send_smp_pairing_confirm +ifdef SECURE_CONNECTION +le_parse_smp_pairing_confirm_secure_passkey: + copy rega,contr + arg mem_le_rconfirm,contw + call memcpy16 + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state + rtn +endif + + +le_send_smp_pairing_confirm: +ifdef SECURE_CONNECTION + fetch 1,mem_le_pairing_mode + bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_send_smp_pairing_confirm_sc +endif + call generate_confirm + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_CONFIRM + istore 1,contw + branch store_aes_result + + +ifdef SECURE_CONNECTION +le_send_smp_pairing_confirm_sc: + arg mem_le_srand,contw + call generate_random + call function_f4_cb + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_CONFIRM + istore 1,contw + branch load_inverse_result + +endif + + +le_parse_smp_pairing_random: +ifdef SECURE_CONNECTION + copy contr,rega + fetch 1,mem_le_pairing_mode + bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_parse_smp_pairing_random_sc + copy rega,contr +endif + call authenticate_rconfirm + branch le_parse_smp_pairing_random_success,zero +le_send_pairing_confirm_value_failed: + jam PAIRING_FAILED_CONFIRM_VALUE_FAILED,mem_le_ll_pairing_fail_reason +le_send_pairing_failed: + force 2,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_FAILED + istore 1,contw + fetch 1,mem_le_ll_pairing_fail_reason + istore 1,contw +le_parse_smp_pairing_failed: + force smp_pairing_timer,queue + call timer_stop + jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state + jam BT_EVT_LE_PAIRING_FAIL,mem_fifo_temp + branch ui_ipc_send_event + +le_smp_pairing_fail_reason_not_support_pairing: + jam PAIRING_FAILED_PAIRING_NOT_SUPPORTED,mem_le_ll_pairing_fail_reason + branch le_send_pairing_failed + + +ifdef SECURE_CONNECTION +le_parse_smp_pairing_random_sc: + arg mem_le_mrand,contw + copy rega,contr + call memcpy16 + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_random_sc_passkey + call function_g2 +// jam LE_SC_STAT_RECEIVE_RANDOM,mem_le_secure_connect_state +// jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + call le_send_smp_pairing_random + fetch 1,mem_le_pairing_mode + rtnne LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC + jam BT_EVT_LE_GKEY_GENERATE,mem_fifo_temp + branch ui_ipc_send_event + +le_parse_smp_pairing_random_sc_passkey: + call function_f4_ca + arg mem_AES_CMAC_temp,contw + call load_inverse_result + arg mem_AES_CMAC_temp,rega + arg mem_le_rconfirm ,regb + arg 16,loopcnt + call string_compare + nbranch le_send_pairing_confirm_value_failed,zero + branch le_send_smp_pairing_random +endif + +le_parse_smp_pairing_random_success: + call generate_stk + jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp + call ui_ipc_send_event + jam 1,mem_ltk_exists + jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state + +le_send_smp_pairing_random: + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_RANDOM + istore 1,contw + arg mem_le_srand,contr + branch memcpy16 + +le_parse_smp_encryption_information: + arg mem_le_peer_ltk,contw + branch memcpy16 + +le_send_smp_encryption_information: + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_ENCRYPTION_INFORMATION + istore 1,contw + fetch 1,mem_le_configuration + bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_send_fixed_ltk + arg mem_le_ltk,contr + branch memcpy16 + +le_send_fixed_ltk: + arg mem_le_fixed_ltk,contr + branch memcpy16 + + +le_send_smp_master_identification: + arg mem_le_ediv,contw + force 10,loopcnt + call generate_random_loop + force 11,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_MASTER_IDENTIFICATION + istore 1,contw + fetch 2,mem_le_ediv + istore 2,contw + fetch 8,mem_le_rand + istore 8,contw + rtn + +le_send_smp_identity_information: + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_IDENTITY_INFORMATION + istore 1,contw + setarg 0 + istore 8,contw + istore 8,contw + rtn + + +le_send_smp_identity_address_information: + force 8,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_IDENTITY_ADDRESS_INFORMATION + istore 1,contw + fetch 1,mem_le_conn_own_addr_type + istore 1,contw + fetch 6,mem_le_lap + istore 6,contw + rtn + + +le_send_pairing_fail_unspecified_reason: + jam PAIRING_FAILED_UNSPECIFIED_REASON,mem_le_ll_pairing_fail_reason + branch le_send_pairing_failed + +le_check_init_key_distribution: + fetch 1,mem_le_pres_init_key_distribution + fetcht 1,mem_le_pres_init_key_distribution + iand temp,pdata + rtn + +le_parse_smp_identity_information: + arg mem_le_irk,contw + call memcpy16 + call le_check_init_key_distribution + isolate0 LE_INITATOR_IRK_BIT,pdata + branch le_send_pairing_fail_unspecified_reason,true + fetch 1,mem_device_option + rtnne dvc_op_module + call le_check_master_addr_type + nrtn user + branch app_ble_store_reconn_info + +//output:user is enable ,random addr type +le_check_master_addr_type: + call disable_user + fetch 1,mem_le_conn_peer_addr_type + rtneq MASTER_PUBLIC_ADDR + fetch 1,mem_le_plap+5 + compare 0xc0,pdata,0xc0 + rtn true + branch enable_user + +le_parse_smp_identity_address_information: + call le_check_init_key_distribution + isolate0 LE_INITATOR_IRK_BIT,pdata + branch le_send_pairing_fail_unspecified_reason,true + rtn + +le_parse_smp_master_identification: +le_parse_smp_signing_information: +le_parse_smp_security_request: + rtn + +ifdef SECURE_CONNECTION +le_parse_smp_public_key: + arg mem_le_pubkey_remote_x_256,contw + call memcpy64 + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_RECEIVE_PUBLIC_KEY,mem_le_secure_connect_state + rtn + +le_parse_smp_dhkey_check: + arg mem_sp_confirm_remote,contw + call memcpy16 + jam LE_SC_STAT_RECEIVE_DHKEY,mem_le_secure_connect_state + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_send_smp_pairing_public_key: + force 65,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_PUBLIC_KEY + istore 1,contw + arg mem_le_pubkey_local_x_256,contr + branch memcpy64 + +le_send_smp_pairing_dhkey_check: + call function_f6_eb + force 17,rega + call le_fifo_malloc_tx_l2cap_smp + setarg SMP_PAIRING_DHKEY_CHECK + istore 1,contw + branch load_inverse_result + +endif + +le_check_paring_time: + fetch 1,mem_le_pairing_state + rtneq FLAG_LE_PAIRING_END + arg FLAG_LE_PAIRING_RCV_PAIRING_REQ,temp + isub temp,null + nrtn positive + arg smp_pairing_timer,queue + call timer_check + nrtn blank + branch le_send_pairing_fail_unspecified_reason + +le_pairing_sm: + bpatchx patch2f_0,mem_patch2f + fetch 1,mem_le_pairing_state + beq FLAG_LE_PAIRING_NULL,le_pairing_sm_null + beq FLAG_LE_PAIRING_START,le_pairing_sm_start + beq FLAG_LE_PAIRING_SEND_RECURITY_REQ,le_pairing_sm_send_sec_req + beq FLAG_LE_PAIRING_RCV_PAIRING_REQ,le_pairing_sm_rcv_pairing_req + beq FLAG_LE_PAIRING_AFTER_AUTH,le_pairing_sm_after_auth + beq FLAG_LE_PARING_SEND_ENC_INFORMATION,le_pairng_sm_send_enc_information + beq FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,le_pairng_sm_send_master_indentification + beq FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,le_pairng_sm_send_indentity_information + rtn + +le_pairing_sm_null: +le_pairing_sm_send_sec_req: + fetch 1,mem_le_enc_state + rtnne FLAG_LE_SEND_START_ENC_RSP + jam FLAG_LE_ENC_END,mem_le_enc_state + jam FLAG_LE_PAIRING_END,mem_le_pairing_state + jam BT_EVT_LE_RECONNECT_COMPLETE ,mem_fifo_temp + branch ui_ipc_send_event + + +le_pairing_sm_start: + jam FLAG_LE_PAIRING_SEND_RECURITY_REQ,mem_le_pairing_state + branch le_send_smp_security_request + +le_pairing_sm_rcv_pairing_req: + jam FLAG_LE_PAIRING_AUTH,mem_le_pairing_state + setarg TIMER_SMP_PAIRING_TIMEOUT + arg smp_pairing_timer,queue + branch timer_init + +le_pairing_sm_after_auth: + fetch 1,mem_le_enc_state + beq FLAG_LE_SEND_START_ENC_RSP,le_pairing_sm_after_auth_start_enc + rtn + +le_pairing_sm_after_auth_start_enc: + jam FLAG_LE_PARING_SEND_ENC_INFORMATION,mem_le_pairing_state + jam BT_EVT_LE_ENC_INFO,mem_fifo_temp + call ui_ipc_send_event + call le_send_smp_encryption_information + fetch 1,mem_device_option + rtnne dvc_op_module + call le_check_master_addr_type + rtn user + branch app_ble_store_reconn_info + + +le_pairng_sm_send_enc_information: + jam FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,mem_le_pairing_state + branch le_send_smp_master_identification + +le_pairng_sm_send_master_indentification: + fetch 1,mem_le_preq_resp_key_distribution + fetcht 1,mem_le_pres_resp_key_distribution + iand temp,pdata + isolate0 LE_INITATOR_IRK_BIT,pdata + branch le_parse_start_enc_rsp_after_auth_end,true + jam FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,mem_le_pairing_state + branch le_send_smp_identity_information + +le_pairng_sm_send_indentity_information: + call le_send_smp_identity_address_information + branch le_parse_start_enc_rsp_after_auth_end + + +le_parse_start_enc_rsp_after_auth_end: + force smp_pairing_timer,queue + call timer_stop + jam FLAG_LE_ENC_END,mem_le_enc_state + jam FLAG_LE_PAIRING_END,mem_le_pairing_state + jam BT_EVT_LE_PAIRING_COMPLETE ,mem_fifo_temp + branch ui_ipc_send_event + + +ifdef SECURE_CONNECTION + +le_secure_connect_sm: + bpatchx patch2f_1,mem_patch2f + fetch 1,mem_le_pairing_mode + rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT + fetch 1,mem_le_secure_connect_flag + rtnne LE_SP_FLAG_COMMIT_256 + jam SP_FLAG_STANDBY,mem_le_secure_connect_flag + fetch 1,mem_le_secure_connect_state + beq LE_SC_STAT_RECEIVE_PUBLIC_KEY,le_sc_sm_receive_public_key + beq LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,le_sc_sm_wait_send_public_key + beq LE_SC_STAT_SEND_PUBLIC_KEY,le_sc_sm_send_public_key + beq LE_SC_STAT_RECEIVE_DHKEY,le_sc_sm_receive_dhkey + beq LE_SC_STAT_WAIT_CONFIRM_GKEY,le_sc_sm_wait_confirm_gkey + beq LE_SC_STAT_PASSKEY_WAIT_CONFIRM,le_sc_sm_passkey_wait_confirm + rtn + + +le_sc_sm_passkey_wait_confirm: + fetch 1,mem_authentication_passkey_times + copy pdata,queue + increase 1,pdata + store 1,mem_authentication_passkey_times + fetch 4,mem_le_tk + qisolate1 pdata + setarg 0x80 + setflag true,0,pdata + store 1,mem_passkey_1bit + branch le_sc_sm_ready_send_pairing_confirm + +le_sc_sm_wait_confirm_gkey: + fetch 1,mem_le_sc_confirm_gkey_flag + jam FLAG_LE_SC_CONFRIM_NULL,mem_le_sc_confirm_gkey_flag + beq FLAG_LE_SC_CONFRIM_GKEY_OK,le_sc_confirm_gkey_ok + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_sc_confirm_gkey_ok: + jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp + call ui_ipc_send_event + jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state + branch le_send_smp_pairing_dhkey_check + +le_sc_sm_receive_dhkey: + fetch 1,mem_sp_dhkey_invalid + beq SP_KEY_VALID_256,le_dhkey_ready + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_dhkey_ready: + call function_f5 +// arg mem_le_r,contw +// force 2,loopcnt +// call memset0 + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_dhkey_ready_common + call le_set_tk_0 +le_dhkey_ready_common: + call function_f6_ea + arg mem_AES_CMAC_temp,rega + arg mem_sp_confirm_remote ,regb + arg 16,loopcnt + call string_compare + branch le_dhkey_check_ok,zero +le_dhkey_check_fail: + jam PAIRING_FAILED_DHKEY_CHECK_FAILED,mem_le_ll_pairing_fail_reason + branch le_send_pairing_failed + + +le_dhkey_check_ok: + call sp_calc_check_publickey_256 + nbranch le_dhkey_check_fail,zero + jam 1,mem_ltk_exists + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_sc_confirm_gkey_ok + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_sc_confirm_gkey_ok + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_WAIT_CONFIRM_GKEY,mem_le_secure_connect_state + rtn + +le_sc_sm_send_public_key: + fetch 1,mem_le_pairing_mode + beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_sc_sm_send_public_key_passkey + jam 0,mem_passkey_1bit +le_sc_sm_ready_send_pairing_confirm: + branch le_send_smp_pairing_confirm + +le_sc_sm_send_public_key_passkey: +// jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag +// jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state +// branch p_ng_event_le_get_passkey + jam 0,mem_authentication_passkey_times + branch le_parse_smp_pairing_req_passkey + + +le_sc_sm_receive_public_key: + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + fetch 1,mem_le_sc_local_key_invalid + beq SP_KEY_VALID_256,le_public_key_ready +// jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + rtn + +le_public_key_ready: + jam LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,mem_le_secure_connect_state + jam SP_KEY_INVALID,mem_sp_dhkey_invalid + branch sp_dhkey_calc_256 + +le_sc_sm_wait_send_public_key: + jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag + jam LE_SC_STAT_SEND_PUBLIC_KEY,mem_le_secure_connect_state + branch le_send_smp_pairing_public_key + +endif + + +le_fifo_malloc_tx_l2cap_smp: + force LE_L2CAP_CID_SMP,regb + branch le_fifo_malloc_tx_l2cap + + Index: 1066_OTP_FLASH/program/le_ll.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/le_ll.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/le_ll.prog (working copy) @@ -0,0 +1,212 @@ + +le_parse_ll: + fetch 1,mem_le_rxbuf+2 + beq LL_CONNECTION_UPDATE_REQ,le_parse_connection_update_req + beq LL_CHANNEL_MAP_REQ,le_parse_channel_map_req + beq LL_TERMINATE_IND,le_parse_terminate_ind + beq LL_ENC_REQ,le_parse_enc_req + beq LL_ENC_RSP,le_parse_enc_rsp + beq LL_START_ENC_REQ,le_parse_start_enc_req + beq LL_START_ENC_RSP,le_parse_start_enc_rsp + beq LL_UNKNOWN_RSP,le_parse_unknown_rsp + beq LL_FEATURE_REQ,le_parse_feature_req + beq LL_FEATURE_RSP,le_parse_feature_rsp + beq LL_PAUSE_ENC_REQ,le_parse_pause_enc_req + beq LL_PAUSE_ENC_RSP,le_parse_pause_enc_rsp + beq LL_VERSION_IND,le_parse_version_ind + beq LL_REJECT_IND,le_parse_reject_ind + beq LL_PING_REQ,le_parse_ping_req + beq LL_PING_RSP,le_parse_ping_rsp + arg 2,rega + arg LL_UNKNOWN_RSP,regb + call le_fifo_malloc_tx_ll + fetch 1,mem_le_rxbuf+2 + istore 1,contw + rtn + + +le_parse_connection_update_req: + ifetch 9,contr + store 9,mem_le_new_param + ifetch 2,contr + store 2,mem_le_instant + fetch 1,mem_le_state + set1 lestate_update_param,pdata + store 1,mem_le_state + rtn + +le_parse_channel_map_req: + ifetch 5,contr + store 5,mem_le_new_map + ifetch 2,contr + store 2,mem_le_instant + fetcht 2,mem_le_event_count + isub temp,null + nbranch le_parse_terminate_ind,positive + fetch 1,mem_le_state + set1 lestate_update_map,pdata + store 1,mem_le_state + rtn + + +le_parse_terminate_ind: + setarg 20 // 200ms + store 2,mem_le_superto + store 2,mem_le_init_superto + rtn + +le_send_terminate_ind_user_terminated: + arg ERROR_REMOTE_USER_TERMINATED_CONNECTION,regc + +//regc:The ErrorCode field shall be set to inform the remote device why the connection is about to be terminated. +le_send_terminate_ind: + arg 2,rega + arg LL_TERMINATE_IND,regb + call le_fifo_malloc_tx_ll + copy regc,pdata + istore 1,contw + rtn + +le_parse_feature_req: + +le_send_feature_rsp: + arg 9,rega + arg LL_FEATURE_RSP,regb + call le_fifo_malloc_tx_ll + setarg param_le_features + istore 8,contw + rtn + + +le_parse_version_ind: + rtn master +le_send_version_ind: + arg 6,rega + arg LL_VERSION_IND,regb + call le_fifo_malloc_tx_ll + fetch 5,mem_lmp_version + istore 5,contw + rtn + + +le_parse_ping_req: + arg LL_PING_RSP,regb + branch le_send_ll_one_lenth + +//regb:ll opcode +le_send_ll_one_lenth: + arg 1,rega + branch le_fifo_malloc_tx_ll + + +le_parse_enc_req: + ifetch 8,contr + store 8,mem_le_rand + ifetch 2,contr + store 2,mem_le_ediv + ifetch 8,contr + store 8,mem_le_skdm + ifetch 4,contr + store 4,mem_le_ivm + call le_send_enc_rsp + bpatchx patch2f_2,mem_patch2f + fetch 1,mem_le_pairing_state + beq FLAG_LE_PAIRING_AFTER_AUTH,le_parse_enc_req_after_auth + fetch 1,mem_le_configuration + bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_parse_enc_req_fixed_ltk + fetch 1,mem_nv_data_number + ncall load_device_list_mode_4,blank + fetch 1,mem_ltk_exists + beq 0,le_ltk_lost +le_parse_enc_req_after_auth: + jam FLAG_LE_RCV_ENC_START,mem_le_enc_state + call le_send_start_enc_req + branch generate_sk + +le_parse_enc_req_fixed_ltk: + jam 1,mem_ltk_exists + arg mem_le_fixed_ltk,contr + arg mem_le_ltk,contw + call memcpy16 + branch le_parse_enc_req_after_auth + + +le_ltk_lost: + bpatchx patch2f_3,mem_patch2f + jam FLAG_LE_ENC_NULL,mem_le_enc_state + jam FLAG_LE_ENC_NULL,mem_le_pairing_state + jam BT_EVT_LE_LTK_LOST,mem_fifo_temp + branch ui_ipc_send_event + +le_send_reject_ind: + arg 2,rega + arg LL_REJECT_IND,regb + call le_fifo_malloc_tx_ll + setarg LE_ERR_PIN_OR_KEY_MISSING + istore 1,contw + rtn + +le_send_enc_rsp: + arg mem_le_skds,contw + force 8,loopcnt + call generate_random_loop + arg mem_le_ivs,contw + force 4,loopcnt + call generate_random_loop + arg 13,rega + arg LL_ENC_RSP,regb + call le_fifo_malloc_tx_ll + fetch 8,mem_le_skds + istore 8,contw + fetch 4,mem_le_ivs + istore 4,contw + rtn + +le_send_start_enc_req: + arg LL_START_ENC_REQ,regb + branch le_send_ll_one_lenth + +le_send_start_enc_rsp: + arg LL_START_ENC_RSP,regb + branch le_send_ll_one_lenth + + +le_parse_enc_rsp: + ifetch 8,contr + store 8,mem_le_skds + ifetch 4,contr + store 4,mem_le_ivs + branch generate_sk + +le_parse_start_enc_req: + fetch 1,mem_le_state + set1 lestate_encryption,pdata + store 1,mem_le_state + rtn + +le_parse_start_enc_rsp: + rtn master + jam BT_EVT_LE_START_ENC,mem_fifo_temp + call ui_ipc_send_event + jam FLAG_LE_SEND_START_ENC_RSP,mem_le_enc_state + branch le_send_start_enc_rsp + +le_parse_pause_enc_req: + jam FLAG_LE_ENC_PAUSE,mem_le_enc_state + call le_send_pause_enc_rsp + jam BT_EVT_LE_PAUSE_ENC,mem_fifo_temp + branch ui_ipc_send_event + +le_send_pause_enc_rsp: + arg LL_PAUSE_ENC_RSP,regb + branch le_send_ll_one_lenth + + +le_parse_feature_rsp: +le_parse_unknown_rsp: +le_parse_pause_enc_rsp: +le_parse_reject_ind: +le_parse_ping_rsp: + rtn + + Index: 1066_OTP_FLASH/program/lmp.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/lmp.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/lmp.prog (working copy) @@ -0,0 +1,2521 @@ + +/******************************************/ +/************* LMP Parse **************/ +/******************************************/ +init_lmp: + rtn wake +init_lmp_work: + bpatchx patch2f_4,mem_patch2f + setarg 0 + store 1,mem_lmp_to_send + store 1,mem_conn_sm + store 1,mem_lmo_opcode1 + store 1,mem_lmo_opcode2 + store 1,mem_esco_addr + store 1,mem_auth_enable + store 1,mem_connection_options + store 1,mem_pairing_auth + jam SWITCH_FLAG_INIT,mem_switch_flag + jam 0,mem_switch_fail_master_count + jam NULL_ENCRYP,mem_wait_encryption +init_lmp_reinit: + jam 0,mem_pairing_auth + jam 0,mem_sp_localsm + jam 0,mem_lmp_conn_state + //fall through +parse_rx_done: + rtn + +parse_lmp: + bpatchx patch2f_5,mem_patch2f + call setlocalsm_master,master //use this flag in hci + ncall setlocalsm_slave,master + call lmo_fifo_check + nrtn blank + fetch 1,mem_state_map + rtnbit0 smap_rxlmp + set0 smap_rxlmp,pdata + set0 mark_rxbuf_inuse,mark + store 1,mem_state_map + fetch 1,mem_rxbuf + fetcht 1,mem_state_map + isolate1 smap_lmptidinit,pdata + setflag true,smap_lmptid,temp + storet 1,mem_state_map + and_into 0x2,temp //smap_lmptid only + storet 1,mem_lmo_tid2 + fetcht 1,mem_state_map + rshift pdata,pdata /* align lmp_opcode */ + store 1,mem_lmi_opcode2 + bpatchx patch2f_6,mem_patch2f + fetch 1,mem_lmi_opcode2 + beq LMP_ESCAPE,parse_lmp_escape//multi + beq LMP_ACCEPTED,parse_lmp_accepted//multi + beq LMP_NOT_ACCEPTED,parse_lmp_not_accepted//multi + beq LMP_SET_AFH, parse_lmp_set_afh + beq LMP_CLKOFFSET_REQ, parse_lmp_clkoffset_req + beq LMP_ENCRYPTION_MODE_REQ, parse_lmp_encryption_mode_req + beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_crypt_key + beq LMP_AUTO_RATE,parse_lmp_auto_rate + beq LMP_TEST_CONTROL,parse_lmp_test_control//multi + beq LMP_TEST_ACTIVATE,parse_lmp_test_activate + beq LMP_SETUP_COMPLETE,parse_lmp_setup_complete + beq LMP_SUPERVISION_TIMEOUT,parse_lmp_supervision_timeout + beq LMP_FEATURES_REQ,parse_lmp_features_req + beq LMP_HOST_CONNECTION_REQ,parse_lmp_conn_req + beq LMP_VERSION_REQ,parse_lmp_version_req + beq LMP_VERSION_RES,parse_lmp_version_res + beq LMP_DETACH,parse_lmp_detach + beq LMP_MAX_SLOT,parse_lmp_max_slot + beq LMP_MAX_SLOT_REQ,parse_lmp_max_slot_req + beq LMP_NAME_REQ,parse_lmp_name_req + beq LMP_NAME_RES,parse_lmp_name_res + beq LMP_FEATURES_RES,parse_lmp_features_res + beq LMP_COMB_KEY,parse_lmp_comb_key + beq LMP_AU_RAND, parse_lmp_au_rand + beq LMP_IN_RAND,parse_lmp_in_rand + beq LMP_SRES,parse_lmp_sres + beq LMP_INCR_POWER_REQ,parse_lmp_incr_power + beq LMP_DECR_POWER_REQ,parse_lmp_decr_power + beq LMP_MAX_POWER, parse_lmp_max_power + beq LMP_MIN_POWER, parse_lmp_min_power + beq LMP_PAGE_MODE_REQ, parse_lmp_page_mode_req + beq LMP_PAGE_SCAN_MODE_REQ, parse_lmp_page_scan_mode_req + beq LMP_PREFERRED_RATE, parse_lmp_preferred_rate + beq LMP_SLOT_OFFSET, parse_lmp_slot_offset + beq LMP_SNIFF_REQ, parse_lmp_sniff_req + beq LMP_START_ENCRYPTION_REQ, parse_lmp_start_encryption_req + beq LMP_STOP_ENCRYPTION_REQ, parse_lmp_stop_encryption_req + beq LMP_SWITCH_REQ, parse_lmp_switch_req + beq LMP_TEMP_RAND, parse_lmp_temp_rand + beq LMP_TEMP_KEY, parse_lmp_temp_key + beq LMP_TIMING_ACCURACY_REQ, parse_lmp_timing_accuracy_req + beq LMP_TIMING_ACCURACY_RES, parse_lmp_timing_accuracy_res + beq LMP_UNIT_KEY, parse_lmp_unit_key + beq LMP_UNSNIFF_REQ, parse_lmp_unsniff_req + beq LMP_USE_SEMI_PERMANENT_KEY, parse_lmp_use_semi_permanend_key + beq LMP_ENCAPSULATED_HEADER,parse_lmp_encapsulated_header + beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_encapsulated_payload + beq LMP_SIMPLE_PAIRING_CONFIRM,parse_simple_pairing_confirm + beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_simple_pairing_number + beq LMP_DHKEY_CHECK,parse_dhkey_check + beq LMP_CLKOFFSET_RES, parse_lmp_clkoffset_res + beq LMP_ENC_KEY_SIZE_MASK_REQ,parse_enc_key_size_mask_req +/* lmp is not recognized, check to see if we respond to all messages */ +/* rejecting the unrecognized message with PDU not recognized */ +reject_unknown_packet: + jam UNKNOWN_LMP_PDU,mem_lmo_reason2 +reject_lmp_packet: + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + rtn + +parse_lmp_clkoffset_req: + jam LMP_CLKOFFSET_RES,mem_lmo_opcode2 + rtn + +parse_enc_key_size_mask_req: + jam LMP_ENC_KEY_SIZE_MASK_RES,mem_lmo_opcode2 + rtn + +parse_lmp_set_afh: + fetch 4,mem_rxbuf+1 + lshift pdata,pdata + store 4,mem_afh_instant + fetch 1,mem_rxbuf+5 + store 1,mem_afh_new_mod + fetch 5,mem_rxbuf+6 + store 5,mem_afh_map_new + fetch 5,mem_rxbuf+11 + istore 5,contw + fetch 1,mem_mode + set1 afh_change,pdata + store 1,mem_mode + rtn +parse_lmp_escape: + bpatchx patch2f_7,mem_patch2f + fetch 1,mem_rxbuf+1 + set1 7,pdata + store 1,mem_lmi_opcode2 + beq LMP_EXT_ACCEPTED,parse_lmpext_accepted + beq LMP_NOT_ACCEPTED_EXT,parse_lmpext_not_accepted + beq LMP_SNIFF_SUBRATING_REQ, parse_lmp_sniff_subrating_req + beq LMP_SNIFF_SUBRATING_RES, parse_lmp_sniff_subrating_res + beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_packet_type_table_req + beq LMP_EXT_FEATURES_REQ,parse_lmpext_features_req + beq LMP_EXT_FEATURES_RES,parse_lmpext_features_res + beq LMP_EXT_CHN_CLASSIFICATION_REQ,parse_lmpext_chn_classification_req + beq LMP_PAUSE_ENCRYPTION_REQ,parse_lmpext_pause_encrypt + beq LMP_RESUME_ENCRYPTION_REQ,parse_lmpext_resume_encrypt + beq LMP_IO_CAP_REQ,parse_lmpext_iocap_req + beq LMP_IO_CAP_RES,parse_lmpext_iocap_res + rtneq LMP_EXT_FEATURES_RES + + +reject_unknown_ext_packet: + jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2 + jam UNKNOWN_LMP_PDU,mem_lmo_reason2 + + rtn +parse_lmpext_chn_classification_req: + jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2 + jam NOT_SUPPORT_CHN_CLASSIFICATION,mem_lmo_reason2 + rtn + +parse_lmpext_iocap_req: + call iocap_lmpext_load + jam LMP_IO_CAP_RES,mem_lmo_opcode2 + rtn + +parse_lmpext_iocap_res: + call iocap_lmpext_load + branch iocap_lmpext_common + +iocap_lmpext_load: + arg mem_sp_iocap_remote,contw + fetch 3, mem_rxbuf+2 + istore 3,contw + rtn + +iocap_lmpext_common: +ifdef SIMPLE_PAIRING + branch master_set_mem_master_sp_flag,true//is un very ok to use master flag,but we have to add many codes if wo don't +endif + rtn +parse_lmpext_accepted: + fetch 1,mem_rxbuf+3 + set1 7,pdata + store 1,mem_lmi_accepted_opcode + beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_accepted_ptt + rtn + + +parse_lmpext_not_accepted: + fetch 1,mem_rxbuf+3 + set1 7,pdata + store 1,mem_lmi_accepted_opcode + beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_not_accepted_ptt + rtn + +parse_lmpext_accepted_ptt: + fetch 1,mem_ptt + fetcht 1,mem_state_map + nsetflag blank,smap_edr,temp + storet 1,mem_state_map +parse_lmpext_not_accepted_ptt: + fetch 1,mem_state + rtnbit0 state_init_seq + set0 state_init_seq,pdata + store 1,mem_state + fetch 1,mem_auth_enable + nrtn blank + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + rtn + +parse_lmpext_pause_encrypt: + nbranch parse_lmpext_pause_encrypt_slave, master + jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2 + branch tid_reply + +parse_lmpext_pause_encrypt_slave: + jam LMP_PAUSE_ENCRYPTION_REQ, mem_lmo_opcode2 + rtn + +parse_lmpext_resume_encrypt: +//trans file to pc may cause pause/resume encrypt +//if ms is conn_sm_wait_end the controllor won't send ack after recieved start_encypt_accept + call tid_reply + branch lmp_start_encryption + +parse_lmpext_features_req: + jam LMP_EXT_FEATURES_RES,mem_lmo_opcode2 + rtn + +parse_lmpext_features_res: + fetcht 1,mem_rxbuf+4 + and temp,0x1,temp + storet 1,mem_remote_sppcap + fetch 1,mem_hci_cmd + bne hci_cmd_wait_remote_ext_feature,parse_lmpext_features_res_not_hci + jam 0,mem_hci_cmd +parse_lmpext_features_res_not_hci: + fetch 1,mem_conn_sm + rtnne CONN_SM_WAIT_FEATURES_EXT + jam CONN_SM_SEND_CONN_REQ,mem_conn_sm + branch process_conn_sm + +parse_lmp_accepted: + bpatchx patch30_0,mem_patch30 + fetch 1,mem_rxbuf+1 + store 1,mem_lmi_accepted_opcode + beq LMP_HOST_CONNECTION_REQ,parse_lmp_accepted_hostconn//ok + beq LMP_IN_RAND,parse_lmp_accepted_inrand//ok + beq LMP_ENCRYPTION_MODE_REQ,parse_lmp_accepted_enc_mode//ok + beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_accepted_enc_keysize//ok + beq LMP_START_ENCRYPTION_REQ,parse_lmp_accepted_start_enc//ok + beq LMP_STOP_ENCRYPTION_REQ,parse_lmp_accepted_stop_enc//ok + beq LMP_UNSNIFF_REQ,parse_lmp_accepted_unsniff_req//ok + beq LMP_SNIFF_REQ,parse_lmp_accepted_sniff_req//ok + beq LMP_SWITCH_REQ,parse_lmp_accepted_switch + // simple pairing + beq LMP_ENCAPSULATED_HEADER,parse_lmp_accepted_encapsulated_header//ok + beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_accepted_encapsulated_payload//ok + beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_accepted_simple_pairing_number//ok + beq LMP_DHKEY_CHECK,parse_lmp_accepted_dhkey_check//ok + rtn + +parse_lmp_not_accepted: + bpatchx patch30_1,mem_patch30 + fetch 1,mem_rxbuf+1 + store 1,mem_lmi_accepted_opcode + beq LMP_NAME_REQ,parse_lmp_not_accepted_name_req//ok + beq LMP_HOST_CONNECTION_REQ,parse_lmp_not_accepted_hostconn//ok + beq LMP_AU_RAND,parse_lmp_not_accepted_aurand//ok + beq LMP_IN_RAND,parse_lmp_not_accepted_inrand//ok + beq LMP_SWITCH_REQ,parse_lmp_not_accepted_switch//ok + /* simple pairing support */ + beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_not_accepted_simple_pairing_number//ok + beq LMP_DHKEY_CHECK,parse_lmp_not_accepted_dhkey_check//ok + beq LMP_UNSNIFF_REQ,parse_lmp_not_accepted_unsniff_req + beq LMP_SNIFF_REQ,parse_lmp_not_acdcept_sniff_req + rtn + +parse_lmp_accepted_switch: + jam BT_EVT_SWITCH_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + branch role_switch_prepare0 +parse_lmp_not_accepted_switch: + jam BT_EVT_SWITCH_NOT_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + jam SWITCH_FLAG_NOT_ACCEPT,mem_switch_flag + setarg TIMER_SWITCH_WAITE + arg switch_wait_timer,queue + branch timer_init + + +parse_lmp_accepted_hostconn: + //fetch 1,mem_state + //rtnbit0 state_init_seq + fetch 1,mem_lmp_conn_state + set1 RECEIVED_CONN_REQ,pdata + store 1,mem_lmp_conn_state + jam BT_EVT_BB_CONNECTED,mem_fifo_temp + call ui_ipc_send_event + jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2 + //nbranch parse_lmp_accepted_hostconn_ctn,master +parse_lmp_accepted_hostconn_ctn: + /* checking to see if we requested host connection */ + fetch 1,mem_conn_sm + bne CONN_SM_WAIT_CONN_ACCEPT, parse_rx_done + //branch parse_lmp_accepted_hostconn_master,master + /* continuing on with host connection state machine */ + jam CONN_SM_AUTH_PAIR,mem_conn_sm + rtn + //branch host_create_conn_auth_pair + + /* we need to move fast and send au_rand...jumping to next part of state machine for conn */ +//parse_lmp_accepted_hostconn_master: + //jam CONN_SM_AUTH_PAIR ,mem_conn_sm +// rtn + +parse_lmp_not_accepted_hostconn: + jam ACL_CONNECTION_ALREADY_EXISTS,mem_disconn_reason_send + jam LMP_DETACH,mem_lmo_opcode2 + /* clearing connection state machine */ + jam CONN_SM_STANDBY,mem_conn_sm + /* sending error message to host */ + branch parse_rx_done,true + rtn + +parse_lmp_accepted_inrand: + fetch 1,mem_link_key_exists + nrtn blank + call clear_linkkey + call lmp_generate_key + rtn master + set1 mark_slave_in_rand_accepted,mark + rtn + +parse_lmp_accepted_enc_mode: + nrtn master + jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2 + fetch 1,mem_state_map + rtnbit0 smap_encryption + jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2 + rtn + +parse_lmp_accepted_enc_keysize: + branch lmp_start_encryption + +parse_lmp_accepted_start_enc: + call send_create_conn_start_l2cap_timer_sm + fetch 1,mem_state + rtnbit1 state_conn_comp + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + fetch 1,mem_conn_sm + rtnne CONN_SM_ENCRYPT_WAIT + jam CONN_SM_ENCRYPT_WAIT_CLEAR,mem_conn_sm + rtn + +parse_lmp_accepted_stop_enc: + /* again this won't work with multipoint. keep track of anyone else encrypting */ + //jam HOST_STOP_ENCRYPTION,message_queue_B0 + //jam 1,message_queue_B1 + //jam HOST_RETURN_SUCCESS,message_queue_B2 + //fetch 1,mem_lmp_state2 + //set1 MESSAGE_QUEUE,pdata + //store 1,mem_lmp_state2 + rtn + +parse_lmp_not_accepted_aurand: +parse_lmp_not_accepted_aurand_send_detach: + jam LMP_DETACH,mem_lmo_opcode2 + jam OTHER_END_TERMINATED,mem_disconn_reason_send + rtn +/*in pair remote cancel the pair*/ +parse_lmp_not_accepted_inrand: + fetch 1,mem_rxbuf+2 + beq KEY_MISSING,parse_lmp_inrand_key_missing + rtnne PAIRING_NOT_ALLOWED + jam PAIRING_NOT_ALLOWED,mem_disconn_reason_send + jam LMP_DETACH,mem_lmo_opcode2 + rtn +parse_lmp_inrand_key_missing: + jam KEY_MISSING,mem_disconn_reason_send + jam LMP_DETACH,mem_lmo_opcode2 + rtn + +parse_lmp_not_accepted_name_req: + rtn + +parse_lmp_not_accepted_simple_pairing_number: + jam SP_STAT_NULL,mem_sp_state + jam LMP_DETACH,mem_lmo_opcode2 + branch parse_rx_done + +parse_lmp_not_accepted_dhkey_check: +ifdef LMP_DBG + call ice_break +endif + jam SP_STAT_NULL,mem_sp_state + jam LMP_DETACH,mem_lmo_opcode2 + branch parse_rx_done +parse_lmp_not_accepted_unsniff_req: + jam BT_EVT_UNSNIFF_NOT_ACCEPT,mem_fifo_temp + branch ui_ipc_send_event + +parse_lmp_accepted_unsniff_req: + jam BT_EVT_UNSNIFF_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + branch sniff_exit + +parse_lmp_accepted_sniff_req: + jam BT_EVT_SNIFF_ACCEPT,mem_fifo_temp + call ui_ipc_send_event + setarg 0 + store 2,mem_dsniff + fetch 2,mem_sniff_param_interval + lshift pdata,pdata + store 2,mem_tsniff + fetch 1,mem_sniff_param_attempt + store 1,mem_sniff_attempt + fetch 1,mem_sniff_param_timeout + store 1,mem_sniff_timeout + branch sniff_init + +parse_lmp_not_acdcept_sniff_req: + jam BT_EVT_SNIFF_NOT_ACCEPT,mem_fifo_temp + branch ui_ipc_send_event + +parse_lmp_crypt_key: + fetcht 1,mem_rxbuf+1 + storet 1,mem_key_size + branch accept_lmp_msg + +parse_lmp_setup_complete: + fetch 1,mem_lmp_conn_state + set1 RECEIVED_SETUP_COMPLETE,pdata + store 1,mem_lmp_conn_state + rtnbit1 SENT_SETUP_COMPLETE + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + branch parse_rx_done + +parse_lmp_max_slot: + //jam LMP_MAX_SLOT,mem_lmi_opcode2 + //branch accept_lmp_msg + rtn + +parse_lmp_max_slot_req: + fetch 1,mem_max_slot + fetcht 1,mem_rxbuf+1 + isub temp,null + //jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2 + branch accept_lmp_msg,positive + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam UNSPECIFIED_ERROR,mem_lmo_reason2 + jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2 + rtn + +parse_lmp_detach: + call prepare_disconnect + branch accept_lmp_msg + +accept_lmp_msg: + jam LMP_ACCEPTED,mem_lmo_opcode2 + rtn + +parse_lmp_incr_power: + jam LMP_MAX_POWER,mem_lmo_opcode2 + rtn + +parse_lmp_decr_power: + jam LMP_MIN_POWER,mem_lmo_opcode2 + rtn + +parse_lmp_version_res: + fetch 1,mem_conn_sm + rtneq CONN_SM_WAIT_VERSION + /* continuing on with host connection state machine */ + jam CONN_SM_SEND_FEATURES ,mem_conn_sm + /* we need to move fast and send au_rand...jumping to next part of state machine for conn */ + rtn + + +parse_lmp_auto_rate: + rtn + +parse_lmp_in_rand: + call lmp_copy_rand + jam pincode_state_wait_pincode,mem_pincode_state + jam BT_EVT_PINCODE_REQ,mem_fifo_temp + call ui_ipc_send_event + + call tid_check + nbranch lmp_accept_inrand,true + //fetch 1,mem_auth_enable + nbranch parse_lmp_inrand_res,master // ignore this because of not ssp temporary + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam LMP_IN_RAND,mem_lmi_opcode2 + jam TRANSACTION_COLLISION,mem_lmo_reason2 + rtn +parse_lmp_inrand_res: + fetch 1,mem_op + set1 op_inrand_req,pdata + store 1,mem_op + rtn + +//store current tid +pop_tid_follow: + fetcht 1,mem_state_map + nsetflag blank,smap_lmptid,temp + storet 1,mem_state_map + rtn + +//restore current tid +push_tid_follow: + fetch 1,mem_lmo_tid2 + rshift pdata,pdata + and_into 1,pdata + rtn + +parse_lmp_au_rand_moudle: + fetch 1,mem_nv_data_number + rtn blank + fetch 1,mem_pairing_auth + call load_device_list,blank + rtn + +parse_lmp_au_rand: + call parse_lmp_au_rand_moudle + call push_tid_follow + store 1,mem_sres_tid + call lmp_copy_rand + jam LMP_SRES,mem_lmo_opcode2 + fetch 1,mem_link_key_exists + nrtn blank + fetch 1,mem_state + rtnbit1 state_combkey /* we have comb key, but not verified */ + jam KEY_MISSING,mem_lmo_reason2 + branch reject_lmp_packet + +parse_lmp_sres: + arg mem_plap,rega + call function_e1 + fetch 4,mem_rxbuf+1 + fetcht 4,mem_input_store + isub temp,null + branch authentication_ok,zero + jam LMP_DETACH,mem_lmo_opcode2 + jam AUTHENTICATION_FAILURE_ERROR,mem_disconn_reason_send + rtn +authentication_ok: + call authentication_ok_common + fetch 1,mem_ssp_enable + branch pairing_success,blank + rtn + + +authentication_ok_common: + call copy_aco + call linkkey_ready///save link key + fetch 1,mem_op + isolate1 op_auth_req,pdata + set0 op_auth_req,pdata + store 1,mem_op + fetch 1,mem_conn_sm + beq CONN_SM_AUTH_WAIT,authentication_ok_conn_sm + beq CONN_SM_PAIRING_WAIT,authentication_ok_conn_sm + rtn +authentication_ok_conn_sm: + fetch 1,mem_pairing_auth + rtnne DEFALT_PAIRING_AUTH + fetch 1,mem_state_map + rtnbit1 smap_encryption + branch host_create_conn_encrypt + +parse_lmp_comb_key: + arg mem_rxbuf+1,rega + arg mem_kinit,regb + arg mem_random_number,contw + call xor16 + arg mem_plap,rega + call generate_linkkey + jam LMP_AU_RAND,mem_lmo_opcode2 + fetch 1,mem_state + bbit0 state_combkey,lmp_generate_key + rtn + +parse_lmp_name_res: + fetch 2,mem_len + add pdata,-3,loopcnt //for remote name length error + fetcht 1,mem_rxbuf+1 + setarg mem_tmp_buffer + iadd temp,contw + arg mem_rxbuf+3,contr + call memcpy + fetcht 1,mem_name_offset + fetch 1,mem_rxbuf+2 + isub temp,pdata + sub pdata,14,null + branch parse_lmp_name_res_end,positive + add temp,14,pdata + store 1,mem_name_offset + jam LMP_NAME_REQ,mem_lmo_opcode2 + rtn +parse_lmp_name_res_end: + fetch 1,mem_state_map + set1 smap_name_res,pdata + store 1,mem_state_map + bbit1 smap_name_req,lmp_disconnect + rtn +parse_lmp_name_req: + fetch 1,mem_rxbuf+1 + store 1,mem_lmi_opcode2 //offset + jam LMP_NAME_RES,mem_lmo_opcode2 + rtn + +parse_lmp_conn_req: + branch accept_lmp_msg + +parse_lmp_timing_accuracy_req: + jam LMP_TIMING_ACCURACY_RES,mem_lmo_opcode2 + rtn + +parse_lmp_features_req: + jam LMP_FEATURES_RES,mem_lmo_opcode2 + rtn + +parse_lmp_version_req: + jam LMP_VERSION_RES,mem_lmo_opcode2 + rtn + +parse_lmp_supervision_timeout: +// fetch 2,mem_rxbuf+1 +// store 2,mem_supervision_to + rtn + + + +parse_lmp_sniff_subrating_req: + fetch 2,mem_tsniff + iforce temp + fetch 1,mem_rxbuf+2 + store 1,mem_subsniff_rate + imul32 temp,temp + fetch 2,mem_rxbuf+3 + lshift pdata,pdata + store 2,mem_subsniff_tcmax + fetch 4,mem_rxbuf+5 + lshift pdata,pdata + store 4,mem_subsniff_instant + //product pdata + deposit temp + store 2,mem_subsniff_tsniff + rtn +parse_lmpext_packet_type_table_req: + fetcht 1,mem_ptt + fetch 1,mem_rxbuf+2 + ixor temp,null + nbranch reject_unknown_ext_packet,zero + isolate1 0,pdata + fetch 1,mem_state_map + setflag true,smap_edr,pdata + store 1,mem_state_map + jam LMP_EXT_ACCEPTED,mem_lmo_opcode2 + jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmi_opcode2 + rtn + + +parse_lmp_sniff_subrating_res: +parse_lmp_preferred_rate: +parse_lmp_max_power: +parse_lmp_min_power: + rtn +parse_lmp_page_mode_req: + //jam LMP_PAGE_MODE_REQ,mem_lmi_opcode2 + branch accept_lmp_msg +parse_lmp_page_scan_mode_req: + //this can influence connection. need accepted + //jam LMP_PAGE_SCAN_MODE_REQ,mem_lmi_opcode2 + branch accept_lmp_msg + + + +parse_lmp_slot_offset: + fetch 2,mem_rxbuf+1 + store 2,mem_slot_offset + rtn + +parse_lmp_sniff_req_check_sniff_para: + fetch 2,mem_rxbuf+4 /* tsniff */ + fetcht 1,mem_lpm_mult + imul32 temp,pdata + arg 0x640,temp + isub temp,null +// branch lmp_reject_sniff,positive + rtn + +parse_lmp_sniff_req: + fetch 2,mem_rxbuf+6 + branch lmp_reject_sniff,blank + call parse_lmp_sniff_req_check_sniff_para + branch lmp_reject_sniff,positive + fetch 1,mem_device_option + sub pdata,dvc_op_module,null + call module_set_lpm_mult_2,zero + fetch 1,mem_state + bbit1 state_insniff,lmp_reject_sniff + fetch 2,mem_rxbuf+2 /* dsniff */ + lshift pdata,pdata + store 2,mem_dsniff + fetch 2,mem_rxbuf+4 /* tsniff */ + lshift pdata,pdata + store 2,mem_tsniff + fetch 2,mem_rxbuf+6 /* sniff attempt */ + store 1,mem_sniff_attempt + iforce temp + fetch 2,mem_rxbuf+8 /* sniff timeout */ + store 1,mem_sniff_timeout + isub temp,null + nbranch set_big_value_to_attempt,positive + store 1,mem_sniff_attempt +set_big_value_to_attempt: + //call sniff_init + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_SNIFF_REQ,mem_lmi_opcode2 + rtn + +lmp_reject_sniff: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +parse_lmp_start_encryption_req: + call accept_lmp_msg + call lmp_copy_rand + call function_e3 + branch start_encryption + +parse_lmp_stop_encryption_req: + call accept_lmp_msg + branch stop_encryption + + +parse_lmp_switch_req: + fetch 4,mem_rxbuf+1 + lshift pdata,pdata + //branch parse_lmp_switch_req_not_accept + branch parse_lmp_switch_accept,master + fetcht 1,mem_link_key_exists + nbranch parse_lmp_switch_req_clear_mark,blank +parse_lmp_switch_req_not_accept: + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam LMP_SWITCH_REQ,mem_lmi_opcode2 + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + rtn +parse_lmp_switch_req_clear_mark: + jam LMP_SLOT_OFFSET,mem_lmo_opcode2 + jam 0,mem_conn_sm + branch role_switch_prepare + +parse_lmp_switch_accept: + call role_switch_prepare + set1 mark_reconn_recieve_switch,mark + fetch 1,mem_connection_options + set0 CONNECTION_SWITCH,pdata + store 1,mem_connection_options + branch accept_lmp_msg + + + +parse_lmp_temp_rand: +parse_lmp_temp_key: +parse_lmp_timing_accuracy_res: +parse_lmp_unit_key: +parse_lmp_use_semi_permanend_key: + rtn + + +parse_lmp_unsniff_req: + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_UNSNIFF_REQ,mem_lmi_opcode2 + jam BT_EVT_REMOTE_UNSNIFF,mem_fifo_temp + call ui_ipc_send_event + branch sniff_exit + +parse_lmp_encapsulated_header: + fetch 1,mem_rxbuf+1 + bne ENCAPSULATED_MAJOR_TYPE_P192,parse_lmp_encapsulated_header_reject + fetch 1,mem_rxbuf+2 + bne ENCAPSULATED_MINOR_TYPE_P192,parse_lmp_encapsulated_header_reject + fetch 1,mem_rxbuf+3 + bne ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_header_reject + call check_localsm + branch parse_lmp_encapsulated_header_master,true + jam SP_STAT_KEY_RECV,mem_sp_state +parse_lmp_encapsulated_header_master: + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_ENCAPSULATED_HEADER,mem_lmi_opcode2 + branch parse_rx_done + +parse_lmp_encapsulated_header_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +parse_lmp_accepted_encapsulated_header: + //jam LMP_ENCAPSULATED_PAYLOAD,mem_lmi_opcode2 + //branch accept_lmp_msg + jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2 + // branch accept_lmp_msg + rtn +parse_lmp_accepted_simple_pairing_number: + fetch 1,mem_ssp_mode_flag + beq SSP_MODE_SSP_PIN_FLAG,parse_lmp_accepted_simple_pairing_number_ssp_pin + beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_accepted_simple_pairing_number_passkey +parse_lmp_accepted_simple_pairing_number_common: + call check_localsm + rtn true + jam SP_STAT_CONFIRM_RECV,mem_sp_state + rtn + +parse_lmp_accepted_simple_pairing_number_ssp_pin: + call g_noninit_number_confirm + jam BT_EVT_BT_GKEY_GENERATE,mem_fifo_temp + call ui_ipc_send_event + branch parse_lmp_accepted_simple_pairing_number_common + + +parse_lmp_accepted_simple_pairing_number_passkey: + call check_localsm + rtn true + fetch 1,mem_authentication_passkey_times + beq 19,authentication_passkey_end + increase 1,pdata + store 1,mem_authentication_passkey_times +// branch p_authentication_passkey + +authentication_passkey: + jam SP_FLAG_COMMIT,mem_sp_flag + jam SP_STAT_COMMIT_CALC,mem_sp_state + fetch 1,mem_authentication_passkey_times + copy pdata,queue + fetch 6,mem_pin + qisolate1 pdata + setarg 0x80 + setflag true,0,pdata + store 1,mem_passkey_1bit + rtn + +authentication_passkey_end: + jam SP_STAT_CONFIRM_RECV,mem_sp_state + rtn + +parse_lmp_accepted_dhkey_check: + call parse_lmp_accepted_dhkey_check_common +pairing_success: + fetch 1,mem_flag_pairing_state + rtn blank + jam FLAG_PAIRING_STATE_NOT_PAIRING,mem_flag_pairing_state + jam BT_EVT_BT_PAIRING_SUCCESS,mem_fifo_temp + branch ui_ipc_send_event + + +parse_lmp_accepted_dhkey_check_common: + //here must be change*** shyd + call check_localsm +ifdef SIMPLE_PAIRING + ncall g_noninit,true //when be master call g_init + call g_init,true +endif + call check_localsm + rtn true + jam SP_STAT_LINK_KEY_CALC,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + rtn + +parse_simple_pairing_confirm: + arg mem_sp_confirm_remote,contw + arg mem_rxbuf+1,contr + call memcpy16 + fetch 1,mem_ssp_mode_flag + rtneq SSP_MODE_PASSKEY_ENTRY_FLAG +ifdef SIMPLE_PAIRING + branch master_set_mem_master_sp_flag +endif + +parse_lmp_encapsulated_payload: + fetch 1,mem_master_sp_state + beq SP_STAT_RANDOM_SEND,parse_encapsulated_payload_master + fetch 1,mem_sp_state + bne SP_STAT_KEY_RECV,parse_lmp_encapsulated_payload_reject +parse_encapsulated_payload_master: + fetch 1,mem_sp_remote_key_recv_count + sub pdata,0x20,contw + nbranch parse_lmp_encapsulated_payload_reject,positive + arg mem_sp_pubkey_remote,contw + iadd contw,contw + fetch 8,mem_rxbuf+1 + istore 8,contw + fetch 8,mem_rxbuf+9 + istore 8,contw + fetch 1,mem_sp_remote_key_recv_count + increase 16,pdata + store 1,mem_sp_remote_key_recv_count + bne ENCAPSULATED_LEN_P192,accept_lmp_msg +parse_lmp_encapsulated_payload_completed: + call check_localsm + branch accept_lmp_msg,true + jam SP_KEY_VALID,mem_sp_remote_key_invalid + jam SP_STAT_KEY_GENERATE,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + branch accept_lmp_msg +parse_lmp_encapsulated_payload_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet +parse_lmp_accepted_encapsulated_payload: + fetch 1,mem_sp_local_key_send_count + beq ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_payload_all_accepted + jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2 + branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted: + call check_localsm + branch parse_lmp_encapsulated_payload_all_accepted_master,true + fetch 1,mem_ssp_mode_flag + beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_encapsulated_payload_all_accepted_get_passkey + jam SP_FLAG_COMMIT,mem_sp_flag + jam SP_STAT_COMMIT_CALC,mem_sp_state + branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted_get_passkey: + jam BT_EVT_BT_GET_PASSKEY,mem_fifo_temp + branch ui_ipc_send_event + + +parse_lmp_encapsulated_payload_all_accepted_master: + //call sp_master_generate_local_key + branch parse_rx_done + +parse_lmp_simple_pairing_number: + fetch 1,mem_master_sp_state + beq SP_STAT_RANDOM_SEND,parse_lmp_simple_pairing_number_master + fetch 1,mem_sp_state + bne SP_STAT_RANDOM_RECV,parse_lmp_simple_pairing_number_reject +parse_lmp_simple_pairing_number_master: + arg mem_sp_random_remote,contw + fetch 8,mem_rxbuf+1 + istore 8,contw + fetch 8,mem_rxbuf+9 + istore 8,contw + call check_localsm + branch parse_lmp_simple_pairing_number_master0,true + jam SP_STAT_RANDOM_SEND,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + branch accept_lmp_msg +parse_lmp_simple_pairing_number_master0: + jam SP_STAT_COMMIT_CALC,mem_master_sp_state +ifdef SIMPLE_PAIRING + branch master_set_mem_master_sp_flag +endif + //jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 + //branch accept_lmp_msg +parse_lmp_simple_pairing_number_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +parse_dhkey_check: + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_SEND,parse_dhkey_check_master + fetch 1,mem_sp_state + bne SP_STAT_CONFIRM_RECV,parse_lmp_dhkey_check_reject +parse_dhkey_check_master: + arg mem_sp_check_result,contw + arg mem_rxbuf+1,contr + call memcpy16 + call check_localsm + branch parse_dhkey_check_master0,true + fetch 1,mem_ssp_mode_flag + beq SSP_MODE_SSP_PIN_FLAG,number_comparison_mode +number_comparison_successed: + jam 0,mem_flag_mode_ssp_pin + jam SP_STAT_CONFIRM_CHECK,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + jam LMP_DHKey_Check,mem_lmi_opcode2 + branch parse_rx_done + +parse_dhkey_check_master0: + jam SP_STAT_CONFIRM_CHECK,mem_master_sp_state + jam SP_FLAG_COMMIT,mem_master_sp_flag + branch parse_rx_done +parse_lmp_dhkey_check_reject: + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + branch reject_lmp_packet + +number_comparison_mode: + fetch 1,mem_flag_mode_ssp_pin + bbit1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,comparison_result + set1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,pdata + store 1,mem_flag_mode_ssp_pin + rtn + +comparison_result: + bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed + jam 0,mem_flag_mode_ssp_pin + branch parse_lmp_dhkey_check_reject + + +parse_lmp_clkoffset_res: + branch parse_rx_done + +parse_lmp_encryption_mode_req: + fetch 1,mem_connection_options + set0 CONNECTION_ENCRYPT + store 1,mem_connection_options + call accept_lmp_msg + nrtn master /* do sth only if we're master */ + fetch 1,mem_rxbuf+1 + fetcht 1,mem_op + setflag blank,op_stop_enc,temp + nsetflag blank,op_start_enc,temp + storet 1,mem_op + rtn + +parse_lmp_features_res: + fetcht 8,mem_rxbuf+1 /*fix bcp(baoshijie) err*/ +parse_lmp_features_res_not_hci: + fetch 1,mem_conn_sm + rtnne CONN_SM_WAIT_FEATURES_RES + + fetch 1,mem_connection_options + bbit0 CONNECTION_FEATURE_EXT,parse_lmp_send_conn + + jam CONN_SM_SEND_FEATURES_EXT,mem_conn_sm + rtn +parse_lmp_send_conn: + jam CONN_SM_SEND_CONN_REQ,mem_conn_sm + rtn +parse_lmp_test_activate: + fetch 1,mem_debug_config + store 1,mem_test_mode_old_debug_config + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_TEST_ACTIVATE,mem_lmi_opcode2 + rtn +parse_lmp_test_control: + /* the 9 test control parameters are XORed with 0x55 */ + /* doing the XOR here and storing in mem_temp_payload */ + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_TEST_CONTROL,mem_lmi_opcode2 + force 9,loopcnt + arg mem_rxbuf+1,contr + arg mem_temp_payload,contw +parse_lmp_test_xor: + ifetch 1,contr + xor_into 0x55,pdata + istore 1,contw + loop parse_lmp_test_xor + fetch 1,test_mode_scenario + fetcht 1,mem_tester_emulate + set0 tester_no_whitening,temp + set0 tester_pattern_test,temp + beq EXIT_TEST_MODE, parse_lmp_test_control_exit + beq PAUSE_TEST_MODE, parse_lmp_test_control_pause + beq CLOSED_LOOP_BACK_ACL, parse_lmp_test_control_loopback + beq ACL_WITHOUT_WHITENING, parse_lmp_test_control_loopback_nowhite + beq CLOSED_LOOP_BACK_SCO, parse_lmp_test_control_loopback + beq SCO_WITHOUT_WHITENING, parse_lmp_test_control_loopback_nowhite + beq ZERO_PATTERN, parse_lmp_test_control_pattern + beq ONE_PATTERN, parse_lmp_test_control_pattern + beq ALT_PATTERN, parse_lmp_test_control_pattern + beq ALT2_PATTERN, parse_lmp_test_control_pattern + beq PSEUDORANDOM, parse_lmp_test_control_pattern + rtn +parse_lmp_test_control_exit: + /* restoring old parameters */ + fetch 1,mem_tester_emulate + set1 tester_exit,pdata + set1 tester_change,pdata + store 1,mem_tester_emulate + rtn +parse_lmp_test_control_pattern: + set1 tester_pattern_test,temp + jam 5,mem_lch_code + fetch 2,test_mode_data_length + iforce loopcnt + store 2,mem_len + arg mem_rxbuf,contw + call pn9 +parse_lmp_test_control_loopback_nowhite: + set1 tester_no_whitening,temp +parse_lmp_test_control_loopback: + set1 tester_change,temp + force 0,pdata + store 1,mem_slave_rcvcnt + store 2,mem_tst_pktcnt_crc + store 2,mem_tst_pktcnt_dmh + store 2,mem_tst_pktcnt_hec + store 2,mem_tst_pktcnt_sync + fetch 1,test_mode_hopping_mode + compare FIXED_FREQ,pdata,0xff + setflag true,tester_fixed_freq,temp + storet 1,mem_tester_emulate + rtn + +parse_lmp_test_control_pause: + set0 mark_testmode,mark + jam 0,mem_tester_emulate + fetch 1,mem_debug_config + set0 debug_tx_pattern,pdata + store 1,mem_debug_config + rtn + + + + + +lmp_copy_rand: + arg mem_rxbuf+1,contr + arg mem_random_number,contw + branch memcpy16 + +lmp_generate_key: + jam LMP_COMB_KEY,mem_lmo_opcode2 + rtn + +lmp_start_encryption: + nrtn master + jam LMP_START_ENCRYPTION_REQ,mem_lmo_opcode2 + rtn + +lmp_accept_inrand: + arg mem_lap,rega + call generate_kinit + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_IN_RAND,mem_lmi_opcode2 + rtn + +lmp_disconnect: + jam 10,mem_conn_timer + jam LMP_DETACH,mem_lmo_opcode2 + jam LOCAL_HOST,mem_disconn_reason_send + rtn + +/*********************************/ +/*********lmp send*************/ +/********************************/ + /* enable user if a lmp packet is to send */ +send_lmp: + bpatchx patch30_2,mem_patch30 + disable user + call lmo_fifo_process + fetch 1,mem_lmp_to_send + rtn blank +/* lmp message to be processed. this will either be because host??? */ +/* wants to send a lmp message or because one resulted from the LMP */ +/* processing section */ +/********* outgoing lmp lookup table *************/ + bbit1 7,send_lmp_escape +send_lmp0: + beq LMP_NAME_REQ, send_lmp_name_req + beq LMP_NAME_RES, send_lmp_name_res + beq LMP_ACCEPTED, send_lmp_accepted + beq LMP_NOT_ACCEPTED, send_lmp_not_accepted + beq LMP_FEATURES_REQ, send_lmp_features_req + beq LMP_FEATURES_RES, send_lmp_features_res + beq LMP_TIMING_ACCURACY_RES, send_lmp_timing_accuracy_res + beq LMP_VERSION_REQ, send_lmp_version_req + beq LMP_VERSION_RES, send_lmp_version_res + beq LMP_SETUP_COMPLETE, send_lmp_setup_complete + beq LMP_SUPERVISION_TIMEOUT, send_lmp_superto + beq LMP_HOST_CONNECTION_REQ,send_lmp_no_payload + beq LMP_IN_RAND,send_lmp_inrand + beq LMP_COMB_KEY,send_lmp_comb_key + beq LMP_AU_RAND,send_lmp_aurand + beq LMP_SRES,send_lmp_sres + beq LMP_ENCRYPTION_MODE_REQ,send_lmp_encryption_mode_req + beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_encryption_key_size_req + beq LMP_START_ENCRYPTION_REQ,send_lmp_start_encryption + beq LMP_DETACH,send_lmp_detach + beq LMP_QUALITY_OF_SERVICE_REQ, send_lmp_quality_of_service_req + beq LMP_UNIT_KEY,send_lmp_unit_key + //Optional (O) + beq LMP_INCR_POWER_REQ,send_lmp_inc_power + beq LMP_CLKOFFSET_RES, send_lmp_clkoffset_res + beq LMP_MAX_POWER,send_lmp_nopayload_reply + beq LMP_MAX_SLOT, send_lmp_max_slot + beq LMP_MAX_SLOT_REQ, send_lmp_max_slot_req + beq LMP_MIN_POWER,send_lmp_nopayload_reply + beq LMP_SLOT_OFFSET, send_lmp_slot_offset + beq LMP_SWITCH_REQ, send_lmp_switch_req + beq LMP_SNIFF_REQ, send_lmp_sniff_req + beq LMP_STOP_ENCRYPTION_REQ, send_lmp_stop_encryption_req + beq LMP_TIMING_ACCURACY_REQ, send_lmp_timing_accuracy_req + beq LMP_UNSNIFF_REQ, send_lmp_unsniff_req + beq LMP_ENCAPSULATED_HEADER,send_lmp_encapsulated_header + beq LMP_ENCAPSULATED_PAYLOAD,send_lmp_encapsulated_payload + beq LMP_SIMPLE_PAIRING_CONFIRM,send_lmp_simple_pairing_comfirm + beq LMP_SIMPLE_PAIRING_NUMBER,send_lmp_simple_pairing_number + beq LMP_DHKEY_CHECK,send_lmp_dhkey_check + beq LMP_AUTO_RATE,send_lmp_auto_rate + beq LMP_ENC_KEY_SIZE_MASK_RES,send_lmp_enc_key_size_mask_res + //master only must(M) + beq LMP_CLKOFFSET_REQ, send_lmp_clkoffset_req + beq LMP_QUALITY_OF_SERVICE, send_lmp_quality_of_service + beq LMP_TEST_ACTIVATE, send_lmp_test_activate + beq LMP_TEST_CONTROL, send_lmp_test_control +send_lmp_error: + branch assert + rtn +send_lmp_escape: + beq LMP_EXT_ACCEPTED,send_lmpext_accepted + beq LMP_EXT_FEATURES_RES,send_lmpext_features_res + beq LMP_NOT_ACCEPTED_EXT,send_lmpext_not_accepted + beq LMP_EXT_FEATURES_REQ,send_lmpext_features_req + beq LMP_PACKET_TYPE_TABLE_REQ,send_lmpext_packet_type_table_req + beq LMP_PAUSE_ENCRYPTION_REQ,send_lmpext_pause_encryption_req + beq LMP_IO_CAP_REQ,send_lmp_io_cap_req + beq LMP_IO_CAP_RES,send_lmpext_io_cap_res + beq LMP_SNIFF_SUBRATING_REQ,send_lmpext_sniff_subrating_req + beq LMP_SNIFF_SUBRATING_RES,send_lmpext_sniff_subrating_res + branch assert + + +/******** LMP follow messages **********/ +/****** TID follow received packet *******/ + +send_lmp_accepted: + force 2,pdata + call msg_send_lmp + fetch 1,mem_lmi_opcode + istore 1,contw + call send_lmp_follow + bpatchx patch30_3,mem_patch30 + fetch 1,mem_lmi_opcode + beq LMP_IN_RAND,send_lmp_accepted_inrand + beq LMP_ENCRYPTION_MODE_REQ,send_lmp_accepted_enc_mode + beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_accepted_enc_key + beq LMP_SNIFF_REQ,send_lmp_accept_sniff_req + beq LMP_HOST_CONNECTION_REQ,send_lmp_accepted_connection + beq LMP_DHKEY_CHECK,send_lmp_accept_dhkey_check + beq LMP_START_ENCRYPTION_REQ,send_create_conn_start_l2cap_timer_sm + rtn + +send_create_conn_start_l2cap_timer_sm: + fetch 1,mem_conn_sm + rtn blank + jam CONN_SM_WAIT_DONE,mem_conn_sm + setarg TIMER_ENPT_WAITE + arg enpt_delay_timer,queue + branch timer_init + +send_lmp_accept_sniff_req: + branch sniff_init +send_lmp_not_accepted: + force 3,pdata + call msg_send_lmp + fetch 1,mem_lmi_opcode + beq LMP_AU_RAND,send_not_accept_aurand + istore 1,contw + fetch 1,mem_lmo_reason + istore 1,contw + branch send_lmp_follow + +send_not_accept_aurand: + istore 1,contw + fetch 1,mem_lmo_reason + istore 1,contw + arg mem_sres_tid,temp + branch special_tid_store + +send_lmpext_accepted: + force 4,queue + call send_lmpext + setarg LMP_ESCAPE + istore 1,contw + fetch 1,mem_lmi_opcode + set0 7,pdata + istore 1,contw + fetch 1,mem_lmi_opcode + branch send_lmp_follow + +send_lmpext_not_accepted: + force 5,queue + call send_lmpext + setarg LMP_ESCAPE + istore 1,contw + fetch 1,mem_lmi_opcode + set0 7,pdata + istore 1,contw + fetch 1,mem_lmo_reason + istore 1,contw + branch send_lmp_follow + + +send_lmp_accepted_inrand: + call clear_linkkey + call tid_check + rtn true + branch lmp_generate_key + +send_lmp_accepted_enc_mode: + fetch 1,mem_op + bbit1 op_start_enc,send_lmp_accepted_enc_start + rtnbit0 op_stop_enc + jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2 + set0 op_stop_enc,pdata + call tid_reply + branch send_lmp_accepted_enc_exit +send_lmp_accepted_enc_start: + jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2 + set0 op_start_enc,pdata +send_lmp_accepted_enc_exit: + store 1,mem_op + rtn + +send_lmp_accepted_enc_key: + call check_localsm + branch lmp_start_encryption,true + rtn + +send_lmp_accepted_connection: + jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2 + //jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + fetch 1,mem_lmp_conn_state + set1 RECEIVED_CONN_REQ,pdata + store 1,mem_lmp_conn_state + jam BT_EVT_BB_CONNECTED,mem_fifo_temp + branch ui_ipc_send_event + + +send_lmp_accept_dhkey_check: + rtn +/******** LMP reply messages **********/ +/****** TID always set to remote *******/ + +send_lmpext_features_res: + force 12,queue + call send_lmpext + setarg 0x01 + istore 1,contw + fetch 2,mem_lmpext_ssp_enable + istore 2,contw + setarg 0 + istore 3,contw + setarg 0x00 + istore 4,contw + branch send_lmp_reply +send_lmpext_io_cap_res: + force 5,queue + call send_lmpext + fetch 3,mem_sp_iocap_local + istore 3,contw + call send_lmp_reply + jam FLAG_PAIRING_STATE_PAIRING,mem_flag_pairing_state + fetch 1,mem_sp_iocap_local + beq DISPLAY_YESNO,responder_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output + rtn + +responder_iocap_keyboard_only: + fetch 1,mem_sp_iocap_remote + beq DISPLAY_ONLY,responder_iocap_keyboard_only_initiator_iocap_display_only + beq DISPLAY_YESNO,responder_iocap_keyboard_only_initiator_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_keyboard_only_initiator_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output + rtn + + +responder_iocap_display_yesno: + fetch 1,mem_sp_iocap_remote + beq DISPLAY_ONLY,responder_iocap_display_yesno_initiator_iocap_display_only + beq DISPLAY_YESNO,responder_iocap_display_yesno_initiator_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_display_yesno_initiator_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_display_yesno_initiator_iocap_no_input_no_output + rtn + + +responder_iocap_no_input_no_output: + fetch 1,mem_sp_iocap_remote + beq DISPLAY_ONLY,responder_iocap_no_input_no_output_initiator_iocap_display_only + beq DISPLAY_YESNO,responder_iocap_no_input_no_output_initiator_iocap_display_yesno + beq KEYBOARD_ONLY,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only + beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output + rtn + +responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: +responder_iocap_display_yesno_initiator_iocap_no_input_no_output: +responder_iocap_display_yesno_initiator_iocap_display_only: +responder_iocap_no_input_no_output_initiator_iocap_display_only: +responder_iocap_no_input_no_output_initiator_iocap_display_yesno: +responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: +responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: +set_ssp_mode_justwork: + jam SSP_MODE_JUST_WORK_FLAG,mem_ssp_mode_flag + fetch 1,mem_classic_bt_flag + bbit1 FLAG_SSP_REJECT_JUSTWORK,app_bt_disconnect + rtn + +responder_iocap_display_yesno_initiator_iocap_display_yesno: +set_ssp_mode_numeric_comparison: + jam SSP_MODE_SSP_PIN_FLAG,mem_ssp_mode_flag + rtn + +responder_iocap_keyboard_only_initiator_iocap_display_yesno: +responder_iocap_keyboard_only_initiator_iocap_keyboard_only: +responder_iocap_keyboard_only_initiator_iocap_display_only: +responder_iocap_display_yesno_initiator_iocap_keyboard_only: +set_ssp_mode_passkey: + jam SSP_MODE_PASSKEY_ENTRY_FLAG,mem_ssp_mode_flag + rtn + + +classic_bt_set_reject_justwork_flag: + arg FLAG_SSP_REJECT_JUSTWORK,queue + branch classic_bluetooth_set_flag + +classic_bt_clr_reject_justwork_flag: + arg FLAG_SSP_REJECT_JUSTWORK,queue + branch classic_bluetooth_clr_flag + +classic_bluetooth_set_flag: + fetch 1,mem_classic_bt_flag + qset1 pdata + store 1,mem_classic_bt_flag + rtn + +classic_bluetooth_clr_flag: + fetch 1,mem_classic_bt_flag + qset0 pdata + store 1,mem_classic_bt_flag + rtn + + +send_lmp_io_cap_req: + force 5,queue + call send_lmpext + fetch 3,mem_sp_iocap_local + istore 3,contw + branch send_lmp_request + + +send_lmpext_sniff_subrating_req: + + rtn +send_lmpext_sniff_subrating_res: + force 9,queue + call send_lmpext + fetch 1,mem_subsniff_rate + istore 1,contw + fetch 2,mem_subsniff_tcmax + istore 2,contw + fetch 4,mem_subsniff_instant + istore 4,contw + branch send_lmp_reply + +send_lmp_name_res: + force 17,pdata + call msg_send_lmp + fetch 1,mem_lmi_opcode /* loading name offset */ + copy pdata,temp + beq 0x00,send_lmp_name_res_offset_ok + beq 0x0e,send_lmp_name_res_offset_ok + beq 0x1c,send_lmp_name_res_offset_ok + rtn +send_lmp_name_res_offset_ok: + istore 1,contw /* writing name offset */ + fetch 1,mem_local_name_length + istore 1,contw /* writing name length */ + arg 14,loopcnt + setarg mem_local_name + iadd temp,contr /* setting read location */ + call memcpy + branch send_lmp_reply + + +send_lmp_timing_accuracy_res: + force 3,pdata + call msg_send_lmp + setarg 0x0114 + istore 2,contw + branch send_lmp_reply + +send_lmp_clkoffset_res: + // dopod s505 must wait for this res + force 3,pdata + call msg_send_lmp + fetch 4,mem_clke_bt + isub clkn_bt,pdata + branch send_lmp_clkoffset_res_master,master + sub pdata,0,pdata /* our role is slave */ +send_lmp_clkoffset_res_master: + // bit 16-2 of clkslave-clkmaster + rshift2 pdata,pdata + set0 15,pdata + istore 2,contw + branch send_lmp_reply + +send_lmp_version_res: + force 6,pdata + call msg_send_lmp + fetch 5,mem_lmp_version + istore 5,contw + branch send_lmp_reply + +send_lmp_features_res: + force 9,pdata + call msg_send_lmp + fetch 8,mem_features + istore 8,contw + branch send_lmp_reply + + +/******** LMP request messages **********/ +/****** TID always set to local initiated *******/ + + +send_lmpext_features_req: + force 12,queue + call send_lmpext + setarg 0x01 + istore 1,contw + fetch 2,mem_lmpext_ssp_enable + istore 2,contw + setarg 0 + istore 3,contw + setarg 0x00 + istore 4,contw + branch send_lmp_request + +send_lmpext_packet_type_table_req: + force 3,queue + call send_lmpext + fetch 1,mem_ptt + istore 1,contw + disable user + call send_lmp_request + nrtn user + nrtn master + fetch 1,mem_afh_cfg + rtnbit0 AFH_CFG_ON + call afh_init + branch afh_open_all_channels + +//default:featrue is enable,extfeature is disable +ssp_enable: + bpatchx patch30_4,mem_patch30 + fetch 1,mem_features+6 + set1 param_featrue_ssp,pdata + store 1,mem_features+6 + setarg param_lmpext_ssp_enable + store 2,mem_lmpext_ssp_enable + rtn + +ssp_disable: + bpatchx patch30_5,mem_patch30 + fetch 1,mem_features+6 + set0 param_featrue_ssp,pdata + store 1,mem_features+6 + setarg 0 + store 2,mem_lmpext_ssp_enable + rtn + +afh_init: + jam 0x3,mem_afh_cfg + setarg 0 + store 4,mem_afh_timer + arg mem_afh_map_lo,contw + call afh_reset_map + arg mem_afh_map_new,contw + call afh_reset_map + arg mem_afh_classify_channel_map,contw + call afh_reset_map + branch afh_clear_error_counter +afh_open_all_channels: + arg mem_afh_map_new,contw + call afh_reset_map + call afh_clear_error_counter + branch afh_set_send_flag + + +afh_reset_map: + setarg 0xffffff + istore 3,contw + istore 3,contw + istore 3,contw + setarg 0x7f + istore 1,contw + rtn +afh_clear_error_counter: + setarg 0 + store 2,mem_afh_error_total + rtn +afh_set_send_flag: + fetch 1,mem_afh_cfg + set1 send_lmp_set_afh,pdata + store 1,mem_afh_cfg + rtn + + +send_lmpext_pause_encryption_req: + force 2,queue + call send_lmpext + nbranch send_lmp_reply,master + // assume slave will not send pause req firstly??? + branch send_lmp_request + + + +send_lmp_detach: + force 2,pdata + call msg_send_lmp + fetch 1,mem_disconn_reason_send + istore 1,contw + call send_lmp_request +prepare_disconnect: + fetch 1,mem_op + set1 op_disconn,pdata + store 1,mem_op + jam 50,mem_conn_timer + rtn + + +send_lmp_no_payload: + force 1,pdata + call msg_send_lmp + branch send_lmp_request +send_lmp_nopayload_reply: + force 1,pdata + call msg_send_lmp + branch send_lmp_reply + + +send_lmp_encryption_mode_req: + force 2,pdata + call msg_send_lmp + fetch 1,mem_state_map + isolate0 smap_encryption,pdata + setflag true,0,pdata + and_into 1,pdata + istore 1,contw + branch send_lmp_request + + +send_lmp_superto: + force 3,pdata + call msg_send_lmp + fetch 2,mem_supervision_to + istore 2,contw + branch send_lmp_request + +send_lmp_name_req: + jam 250,mem_conn_timer + force 2,pdata + call msg_send_lmp + fetch 1,mem_name_offset + istore 1,contw + branch send_lmp_request + +send_lmp_test_control: + force 10,pdata + call msg_send_lmp + arg mem_temp_payload,contr + force 9,loopcnt +send_lmp_test_control_loop: + ifetch 1,contr + xor_into 0x55,pdata + istore 1,contw + loop send_lmp_test_control_loop + branch send_lmp_request + +send_lmp_quality_of_service_req: + branch send_lmp_request +send_lmp_unit_key: + branch send_lmp_request + +send_lmp_slot_offset: + rtn master + call calc_slot_offset + force 9,pdata + call msg_send_lmp + fetch 2,mem_slot_offset + istore 2,contw + fetch 3,mem_lap + istore 3,contw + fetch 1,mem_uap + istore 1,contw + fetch 2,mem_nap + istore 2,contw + bmark0 mark_switch_initiated,send_lmp_slot_offset_reply + set0 mark_switch_initiated,mark + call send_lmp_request + jam LMP_SWITCH_REQ,mem_lmo_opcode2 + rtn +send_lmp_slot_offset_reply: + call send_lmp_reply + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam LMP_SWITCH_REQ,mem_lmi_opcode2 + rtn + +send_lmp_switch_req: + arg 0x200,temp + branch switch_on_native,master + deposit clke_bt + branch switch_slack +switch_on_native: + deposit clkn_bt +switch_slack: + deposit bt_clk + iadd temp,pdata + and_into 0x1fc,pdata + store 4,mem_sniff_anchor + force 5,pdata + call msg_send_lmp + fetch 4,mem_sniff_anchor /* reused as switch instant */ + rshift pdata,pdata + istore 4,contw + branch send_lmp_request + +send_lmp_sniff_req: + force 10,pdata + call msg_send_lmp + arg mem_sniff_payload,contr + ifetch 9,contr + istore 9,contw + branch send_lmp_request + + +send_lmp_timing_accuracy_req: +/* default to TID_NORM_SEND */ + force 3,pdata + call msg_send_lmp + setarg 0x0114 + istore 2,contw + branch send_lmp_request + +send_lmp_unsniff_req: +//--------------------need to completa + force 1,pdata + call msg_send_lmp + //fetch 1,mem_unsniff_pending + //nbranch send_msg_done,blank + //jam 1,mem_unsniff_pending + //fetch 2,mem_sniff_attempt + //fetch 2,mem_nsniff_attempt + //lshift3 pdata,pdata + //lshift pdata,pdata + //store 1,mem_unsniff_cnt + branch send_lmp_request + + +send_lmp_max_slot: + force 2,pdata + call msg_send_lmp + fetch 1,mem_max_slot + istore 1,contw + branch send_lmp_request + + +send_lmp_max_slot_req: + force 2,pdata + call msg_send_lmp + setarg 0x05 /*5 slot*/ + istore 1,contw + branch send_lmp_request + + +send_lmp_inc_power: + force 2,pdata + call msg_send_lmp + setarg 0x00 /*5 slot*/ + istore 1,contw + branch send_lmp_request + + +send_lmp_setup_complete_by_module: + jam LMP_MAX_SLOT_REQ,mem_lmo_opcode2 + rtn +send_lmp_setup_complete: + fetch 1,mem_device_option + sub pdata,dvc_op_module,null + call send_lmp_setup_complete_by_module,zero + fetch 1,mem_state + set1 state_conn_comp,pdata + store 1,mem_state + copy clkn_bt,pdata + store 4,mem_aurand_send_delay_time + fetch 1,mem_lmp_conn_state + bbit1 SENT_SETUP_COMPLETE,send_lmp_setup_complete_has_sent + set1 SENT_SETUP_COMPLETE,pdata + store 1,mem_lmp_conn_state + jam BT_EVT_SETUP_COMPLETE,mem_fifo_temp + call ui_ipc_send_event + force 1,pdata + call msg_send_lmp + branch send_lmp_request +send_lmp_setup_complete_has_sent: + jam 0,mem_lmp_to_send + rtn + +send_lmp_version_req: + force 6,pdata + call msg_send_lmp + fetch 5,mem_lmp_version + istore 5,contw + branch send_lmp_request + +send_lmp_features_req: + force 9,pdata + call msg_send_lmp + fetch 8,mem_features + istore 8,contw + branch send_lmp_request + +sp_master_send_io_cap_get: + jam SP_FLAG_COMMIT,mem_master_sp_flag + fetch 1,mem_sp_local_key_invalid + rtnne SP_KEY_VALID + jam SP_MASTER_STAT_START_DONE,mem_master_sp_state + rtn + +sp_master_send_io_cap_send: + call tid_initiate + jam LMP_IO_CAP_REQ,mem_lmo_opcode2 + jam SP_STAT_KEY_SEND,mem_master_sp_state + rtn + + +sp_master_send_LMP_ENCAPSULATED_HEADER: + call tid_initiate + jam LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2 + jam SP_STAT_RANDOM_SEND,mem_master_sp_state + rtn + +sp_master_commitment_compare: + arg mem_sp_calc_result_high,rega + arg mem_sp_confirm_remote,regb + arg 16,loopcnt + call string_compare + branch sp_master_commitment_compare_success,zero + jam SP_STAT_NULL,mem_master_sp_state +ifdef SIMPLE_PAIRING + call master_clear_mem_master_sp_flag +endif + jam PDU_NOT_ALLOWED,mem_lmo_reason2 + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 +ifdef LMP_DBG + call ice_break +endif + branch reject_lmp_packet +sp_master_commitment_compare_success: + jam SP_STAT_CONFIRM_CALC,mem_master_sp_state +ifdef SIMPLE_PAIRING + call master_set_mem_master_sp_flag +endif + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 + branch accept_lmp_msg + + + +sp_master_send_lmp_simple_pairing_number: + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2 + rtn + + + +sp_send_lmp_encapsulated_header: + // calculate the private & public key here + //jam LMP_ENCAPSULATED_HEADER,mem_lmp_to_send + jam LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2 + //jam TID_PAIRING,mem_lmp_tid + rtn + //fetch 1,mem_tid_table + //set1 TID_PAIRING,pdata + //store 1,mem_tid_table + + +send_lmp_encapsulated_header: + jam 0,mem_sp_local_key_send_count + force 4,pdata + call msg_send_lmp + force ENCAPSULATED_MAJOR_TYPE_P192,pdata + istore 1,contw + force ENCAPSULATED_MINOR_TYPE_P192,pdata + istore 1,contw + force ENCAPSULATED_LEN_P192,pdata + istore 1,contw + call check_localsm + branch send_lmp_request,true + branch send_lmp_reply + +send_lmp_encapsulated_payload: + //jam TID_PAIRING,mem_lmp_tid + force 17,pdata + call msg_send_lmp + fetch 1,mem_sp_local_key_send_count + arg mem_sp_pubkey_local,contr + iadd contr,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + fetch 1,mem_sp_local_key_send_count + increase 16,pdata + store 1,mem_sp_local_key_send_count + call check_localsm + branch send_lmp_request,true + branch send_lmp_reply + //branch send_lmp_request + +sp_send_lmp_simple_pairing_comfirm: + jam SP_STAT_RANDOM_RECV,mem_sp_state + jam LMP_SIMPLE_PAIRING_CONFIRM,mem_lmo_opcode2 + rtn +send_lmp_simple_pairing_comfirm: + //jam SP_STAT_RANDOM_RECV,mem_sp_state + //jam TID_PAIRING,mem_lmp_tid + force 17,pdata + call msg_send_lmp + arg mem_sp_calc_result_high,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + branch send_lmp_reply + +sp_send_lmp_simple_pairing_number: + jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2 + rtn + +send_lmp_simple_pairing_number: + //jam TID_PAIRING,mem_lmp_tid + call check_localsm +ifdef SIMPLE_PAIRING + call sp_local_random_key_generator,true +endif + force 17,pdata + call msg_send_lmp + arg mem_sp_random_local,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + call check_localsm + nbranch send_lmp_reply,true + branch send_lmp_request,true + +master_sp_sm_end: + //jam DEFAULT_STATEMACHINE,mem_sp_localsm + jam SP_STAT_DONE,mem_master_sp_state +sp_aurand_send: + call tid_initiate + jam LMP_AU_RAND,mem_lmo_opcode2 + call check_localsm_master +ifdef SIMPLE_PAIRING + branch sp_master_key_prarm_push,true + branch sp_link_key_prarm_push +endif +master_sp_send_lmp_dhkey_check: + call tid_reply +sp_send_lmp_dhkey_check: + jam LMP_DHKEY_CHECK,mem_lmo_opcode2 + rtn +send_lmp_dhkey_check: + //jam TID_PAIRING,mem_lmp_tid + force 17,pdata + call msg_send_lmp + arg mem_sp_calc_result_high,contr + ifetch 8,contr + istore 8,contw + ifetch 8,contr + istore 8,contw + call check_localsm + nbranch send_lmp_reply,true + branch send_lmp_request,true + +send_lmp_enc_key_size_mask_res: + force 3,pdata + call msg_send_lmp + setarg 0xfffe //enc key size mask + istore 2,contw + branch send_lmp_reply + +send_lmp_auto_rate: + branch send_lmp_request +send_lmp_clkoffset_req: + branch send_lmp_request +send_lmp_quality_of_service: + branch send_lmp_request +send_lmp_test_activate: + branch send_lmp_request + +/******** LMP request/reply messages **********/ +/****** TID transaction specific *******/ + +send_lmp_comb_key: + call generate_random_number + arg mem_lap,rega + call generate_linkkey + force 17,pdata + call msg_send_lmp + arg mem_kinit,rega + arg mem_random_number,regb + call xor16 + nbranch send_lmp_follow,master + branch send_lmp_tid + +send_lmp_inrand: + call generate_random_number + arg mem_plap,rega + call generate_kinit +send_lmp_rand: /* used by in_rand,au_rand,start_encrypt */ + force 17,pdata + call msg_send_lmp + arg mem_random_number,contr + call memcpy16 + fetch 1,mem_conn_sm + beq CONN_SM_AUTH_WAIT,send_lmp_request + beq CONN_SM_PAIRING_WAIT,send_lmp_request + branch send_lmp_tid + +send_lmp_aurand: + fetch 1,mem_pairing_auth + branch send_lmp_aurand_notpairing,blank + call check_localsm + call tid_initiate,true + ncall tid_reply,true + branch send_lmp_aurand_common +send_lmp_aurand_notpairing: + call tid_initiate +send_lmp_aurand_common: + call generate_random_number + branch send_lmp_rand + +send_lmp_sres: + arg mem_lap,rega + call function_e1 + force 5,pdata + call msg_send_lmp + fetch 4,mem_input_store + istore 4,contw + arg mem_sres_tid,temp + call special_tid_store + call copy_aco + call check_localsm + branch send_lmp_sres_master,true + jam DONE_ENCRYP,mem_wait_encryption + fetch 1,mem_pairing_auth + rtn blank + jam LMP_AU_RAND,mem_lmo_opcode2 +send_lmp_sres_master: + fetch 1,mem_link_key_exists + rtn blank +send_lmp_sres_startenc: + call check_localsm + nbranch send_lmp_sres_startenc_slave,true + fetch 1,mem_auth_enable + rtn blank + jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2 + rtn +send_lmp_sres_startenc_slave: + rtnmark0 mark_slave_in_rand_accepted + set0 mark_slave_in_rand_accepted,mark + jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2 + rtn + + + +send_lmp_start_encryption: + call generate_random_number + call function_e3 + force 17,pdata + call msg_send_lmp + arg mem_random_number,contr + call memcpy16 + branch send_lmp_tid + +send_lmp_stop_encryption_req: + force 1,pdata + call msg_send_lmp + branch send_lmp_tid + +send_lmp_encryption_key_size_req: + force 2,pdata + call msg_send_lmp + force 16,pdata + istore 1,contw + store 1,mem_key_size + branch send_lmp_tid + +msg_send_lmp: +/* FLOW is set high and LMP is indicated */ + lshift3 pdata,pdata + or_into 0x07,pdata + store 1,mem_lmo_header_length + arg 17,loopcnt + arg mem_lmo_payload,contw + call clear_mem + arg mem_lmo_payload,contw + rtn + +send_lmpext: + and pdata,0x7f,rega + jam LMP_ESCAPE,mem_lmp_to_send + deposit queue + call msg_send_lmp + deposit rega + istore 1,contw + rtn + +send_lmp_follow: + fetch 1,mem_lmp_to_send + lshift pdata,pdata + fetcht 1,mem_state_map + isolate1 smap_lmptid,temp + setflag true,0,pdata + branch send_lmp_exit + + +send_lmp_tid: + fetcht 1,mem_state_map + and_into 1,temp + branch send_lmp_end + +send_lmp_reply: + force 0,temp + branch send_lmp_end + +send_lmp_request: + force 1,temp +send_lmp_end: + fetch 1,mem_lmp_to_send + lshift pdata,pdata + setflag master,0,pdata + ixor temp,pdata +send_lmp_exit: + store 1,mem_lmo_header_opcode + jam 0,mem_lmp_to_send + call lmo_fifo_process_lmo0empty + enable user + rtn + +//blank : not full +lmo_fifo_check: + fetch 1,mem_lmo_opcode2 + rtn blank + call lmo_fifo_process + fetch 1,mem_lmo_opcode2 + rtn + +lmo_fifo_process: + bpatchx patch30_6,mem_patch30 + fetch 1,mem_lmp_to_send + branch lmo_fifo_process_lmo0empty,blank + fetch 1,mem_lmo_opcode1 + nrtn blank + branch lmo_fifo_process_lmo2to1 +lmo_fifo_process_lmo0empty: + fetch 1,mem_lmo_opcode1 + branch lmo_fifo_process_lmo1_empty,blank + fetch 3,mem_lmo_opcode1 + store 3,mem_lmp_to_send//1=>0 + fetcht 1,mem_lmo_tid1 + fetch 1,mem_state_map + set0 smap_lmptid,pdata + ior temp,pdata + store 1,mem_state_map + jam 0,mem_lmo_opcode1 +lmo_fifo_process_lmo2to1: + fetch 1,mem_lmo_opcode2 + rtn blank + fetch 4,mem_lmo_opcode2 + store 4,mem_lmo_opcode1//2=>1 + jam 0,mem_lmo_opcode2 + rtn +lmo_fifo_process_lmo1_empty: + fetch 1,mem_lmo_opcode2 + rtn blank + fetch 3,mem_lmo_opcode2 + store 3,mem_lmp_to_send//2=>0 + fetcht 1,mem_lmo_tid2 + fetch 1,mem_state_map + set0 smap_lmptid,pdata + ior temp,pdata + store 1,mem_state_map + jam 0,mem_lmo_opcode2 + rtn + +//input:temp +special_tid_store: + bpatchx patch30_7,mem_patch30 + fetch 1,mem_state_map + copy pdata,regc + ifetch 1,temp + call pop_tid_follow + call send_lmp_follow + copy regc,pdata + store 1,mem_state_map + rtn + +tid_reply: + fetcht 1,mem_state_map + set0 smap_lmptidinit,temp + storet 1,mem_state_map + rtn + +tid_initiate: + fetcht 1,mem_state_map + set1 smap_lmptidinit,temp + storet 1,mem_state_map + rtn + + /* true if transaction from remote */ +tid_check: + nsetflag master,smap_lmptid,pdata //it is ok + fetcht 1,mem_state_map + ixor temp,pdata + isolate1 smap_lmptid,pdata + rtn + + /* set to remote */ +tid_set_reply: + fetch 1,mem_state_map + setflag master,smap_lmptid,pdata //it is ok + store 1,mem_state_map + rtn + + /*rtn true when we lead lmp*/ +check_localsm: + fetch 1,mem_sp_localsm + compare LOCAL_STATEMACHINE,pdata,0x7f + rtn +setlocalsm_master: + fetch 1,mem_sp_localsm + set1 7,pdata + store 1,mem_sp_localsm + rtn +setlocalsm_slave: + fetch 1,mem_sp_localsm + set0 7,pdata + store 1,mem_sp_localsm + rtn +check_localsm_master: + fetch 1,mem_sp_localsm + isolate1 7,pdata + store 1,mem_sp_localsm + rtn + +generate_random_number: + /* generating a 16 byte random number,storing in ape_random_number */ + arg mem_random_number,contw +generate_random: + force 16,loopcnt +generate_random_another: +generate_random_loop: + random pdata + istore 1,contw + loop generate_random_another + rtn + +generate_linkkey: + call function_e21 + arg mem_link_key,rega + arg mem_input_store,regb + ifetch 8,rega /* check if already got comb key */ + fetcht 1,mem_state + nsetflag blank,state_combkey,temp + storet 1,mem_state + copy rega,contw + call xor16 + branch generate_linkkey_continue + +/*********************************/ +/*********lmp send*************/ +/********************************/ + +process_conn_sm: + //nrtn master + bpatchx patch31_0,mem_patch31 + + call lmo_fifo_check + nrtn blank +process_conn_sm_continue: + fetch 1,mem_conn_sm + rtn blank + /* state machine begins in standby */ + //beq CONN_SM_STANDBY, host_create_conn_begin + //beq CONN_SM_WAIT_PAGE, host_create_conn_wait_page + beq CONN_SM_SEND_CONN_REQ, host_create_conn_send_conn_req + beq CONN_SM_WAIT_CONN_ACCEPT, host_create_conn_wait_accept + beq CONN_SM_SEND_FEATURES, host_create_conn_send_features + beq CONN_SM_WAIT_FEATURES_RES, host_create_conn_waiting + beq CONN_SM_SEND_SWITCH,host_create_conn_send_switch + beq CONN_SM_AUTH_PAIR, host_create_conn_auth_pair + beq CONN_SM_AUTH_PAIR_WAIT, host_create_conn_auth_pair_wait + beq CONN_SM_ENCRYPT, host_create_conn_encrypt + beq CONN_SM_ENCRYPT_WAIT, host_create_conn_encrypt_wait + beq CONN_SM_ENCRYPT_WAIT_CLEAR, host_create_conn_encrypt_wait_clear + beq CONN_SM_SEND_SETUP_COMPLETE, host_create_conn_send_setup_complete + beq CONN_SM_WAIT_SETUP_COMPLETE, host_create_conn_wait_setup_complete + beq CONN_SM_DETACH_DELAY,host_create_conn_master_detach + beq CONN_SM_SEND_VERSION, host_create_conn_send_version + beq CONN_SM_WAIT_VERSION, host_create_conn_waiting + beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION, host_creat_conn_wait_switch + beq CONN_SM_SEND_FEATURES_EXT,host_creat_conn_send_feat_ext + beq CONN_SM_WAIT_FEATURES_EXT,host_create_conn_waiting + beq CONN_SM_PAIRING,host_create_conn_pairing + beq CONN_SM_PAIRING_WAIT,host_create_conn_pairing_wait + beq CONN_SM_AUTH,host_create_conn_auth + beq CONN_SM_AUTH_WAIT,host_create_conn_auth_wait + beq CONN_SM_DONE,host_create_conn_done + beq CONN_SM_WAIT_DONE,host_create_conn_done_wait + jam CONN_SM_STANDBY,mem_conn_sm + /* sending error message to host */ + rtn +host_create_conn_done: + fetch 1,mem_lmp_conn_state + rtnbit0 RECEIVED_SETUP_COMPLETE + rtnbit0 SENT_SETUP_COMPLETE + jam CONN_SM_STANDBY,mem_conn_sm + call host_conn_judge_encrypt + branch scheduler_start_upper_sm + +host_conn_judge_encrypt: + fetch 1,mem_connection_options + rtnbit0 CONNECTION_ENCRYPT + jam CONN_SM_ENCRYPT_WAIT,mem_conn_sm + rtn + +host_create_conn_done_wait: + arg enpt_delay_timer,queue + call timer_check + nrtn blank + jam CONN_SM_DONE,mem_conn_sm + rtn + +host_create_conn_auth: + fetch 1,mem_connection_options + set0 CONNECTION_AUTH,pdata + store 1,mem_connection_options + jam CONN_SM_AUTH_WAIT,mem_conn_sm + jam LMP_AU_RAND,mem_lmo_opcode2 + rtn +host_create_conn_auth_wait: + rtn +host_create_conn_pairing: + fetch 1,mem_pincode_state + rtnne pincode_state_pincode_ready //wait for pincode + call host_auth + jam CONN_SM_PAIRING_WAIT,mem_conn_sm + rtn + +host_create_conn_pairing_wait: + rtn +host_creat_conn_send_feat_ext: + jam CONN_SM_WAIT_FEATURES_EXT,mem_conn_sm + jam LMP_EXT_FEATURES_REQ,mem_lmo_opcode2 + rtn +host_create_conn_send_version: + jam CONN_SM_WAIT_VERSION,mem_conn_sm + jam LMP_VERSION_REQ,mem_lmo_opcode2 + rtn + +host_creat_conn_wait_switch: + fetch 1,mem_switch_flag + rtneq SWITCH_FLAG_INIT + beq SWITCH_FLAG_ACCEPT,host_create_conn_switch_accept + arg switch_wait_timer,queue + call timer_check + nrtn blank + jam SWITCH_FLAG_INIT,mem_switch_flag + branch host_create_conn_switch +host_create_conn_switch_accept: + rtn master + branch host_create_conn_auth_pair + +host_create_conn_send_features: + jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm + jam LMP_FEATURES_REQ,mem_lmo_opcode2 + rtn +host_create_conn_send_switch: + jam LMP_SWITCH_REQ,mem_lmo_opcode2 + set1 mark_switch_initiated,mark + jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm + setarg 0x1ff + store 2, mem_soft_timer + rtn +host_create_conn_send_conn_req: + jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm + jam 0xff,mem_soft_timer + set0 mark_reconn_recieve_switch,mark + jam LMP_HOST_CONNECTION_REQ,mem_lmo_opcode2 + branch init_lmp_reinit +host_create_conn_wait_accept: + rtnmark1 mark_reconn_recieve_switch + fetch 2,mem_soft_timer + sub pdata,1,pdata + branch host_create_conn_resend,zero + store 2, mem_soft_timer + rtn +host_create_conn_resend: + jam CONN_SM_SEND_SWITCH,mem_conn_sm + rtn +host_create_conn_waiting: + /* we will exit waiting for connection request accepted, features res, or other commands to finish */ + rtn + +host_create_conn_switch: + fetch 1,mem_lmp_conn_state + rtnbit0 SENT_SETUP_COMPLETE + rtnbit0 RECEIVED_SETUP_COMPLETE + fetch 1,mem_connection_options + set0 CONNECTION_SWITCH,pdata + store 1,mem_connection_options + jam LMP_SWITCH_REQ,mem_lmo_opcode2 + jam CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,mem_conn_sm + rtn + +host_create_conn_send_setup_complete: + jam CONN_SM_WAIT_SETUP_COMPLETE,mem_conn_sm + jam LMP_SETUP_COMPLETE,mem_lmo_opcode2 + rtn + +host_create_conn_wait_setup_complete: + fetch 1,mem_lmp_conn_state + rtnbit0 RECEIVED_SETUP_COMPLETE + jam CONN_SM_STANDBY,mem_conn_sm + + rtn +host_create_conn_wait_setup_complete_rtn: + jam CONN_SM_AUTH_PAIR ,mem_conn_sm + rtn + +host_create_conn_master_detach: + fetch 1, mem_soft_timer + increase -1,pdata + branch host_create_conn_send_detach,blank//detach + store 1, mem_soft_timer + rtn +host_create_conn_send_detach: + jam LMP_DETACH,mem_lmo_opcode2 + jam LOCAL_HOST,mem_disconn_reason_send + jam 0,mem_conn_sm + rtn +host_create_conn_auth_pair: + /* checking whether or not to do m/s switch */ + fetch 1,mem_connection_options + bbit1 CONNECTION_SWITCH,host_create_conn_switch + bbit1 CONNECTION_AUTH,host_create_conn_auth_pair_true +host_create_conn_sm_done: + jam CONN_SM_DONE,mem_conn_sm + rtn +host_create_conn_auth_pair_true: + fetch 1,mem_link_key_exists + branch host_create_conn_auth_pair_nokey,blank + fetch 1,mem_lmp_conn_state + rtnbit0 SENT_SETUP_COMPLETE + rtnbit0 RECEIVED_SETUP_COMPLETE + fetch 4,mem_aurand_send_delay_time + arg 100,temp + iadd temp,temp + copy clkn_bt,pdata + isub temp,null + nrtn positive + branch host_create_conn_auth + + + +host_create_conn_auth_pair_nokey: + jam CONN_SM_PAIRING,mem_conn_sm + jam 4,mem_pin_length + setarg 0x3030 + store 2,mem_pin + istore 2,contw + jam pincode_state_pincode_ready,mem_pincode_state + branch host_create_conn_pairing + +host_create_conn_auth_pair_wait: + rtn +host_create_conn_encrypt: + fetch 1,mem_connection_options + bbit1 CONNECTION_ENCRYPT,host_create_conn_encrypt_start + jam CONN_SM_DONE,mem_conn_sm + rtn + +host_create_conn_encrypt_start: + fetch 1,mem_connection_options + set0 CONNECTION_ENCRYPT,pdata + store 1,mem_connection_options + jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2 + rtn + +host_create_conn_encrypt_wait: + fetch 1, mem_wait_encryption + rtn blank + jam CONN_SM_STANDBY,mem_conn_sm + branch host_create_conn_encrypt_start + +host_create_conn_encrypt_wait_clear: + jam CONN_SM_SEND_SETUP_COMPLETE,mem_conn_sm + rtn + +host_auth: + fetch 1,mem_op + bbit1 op_inrand_req,remote_auth + call tid_initiate + jam LMP_IN_RAND,mem_lmo_opcode2 + branch cmd_exit +remote_auth: + fetch 1,mem_op + set0 op_inrand_req,pdata + store 1,mem_op + call lmp_accept_inrand + call tid_set_reply + branch cmd_exit + +pincode_reinit: + setarg 4 + store 1,mem_pin_length + setarg 0x3030 + istore 2,contw + istore 2,contw + rtn + + Index: 1066_OTP_FLASH/program/patch.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/patch.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/patch.prog (working copy) @@ -0,0 +1,28 @@ + +ifdef PATCH + call initialize_radio_cont + 1 + setarg 0x0 + store 3,mem_addr_hi + call spid_b_init_flash + call spid_unlock_flash + arg 0xab,temp + call spid_write_flash_common + arg spid_load_flash,regc + call read_first_block + branch load_storage + +spid_b_init_flash: + hjam 0x40,core_spid_ctrl + hjam 0x0,core_spid_delay + hfetch 1,core_gpio_sel1 + set0 0,pdata + set0 1,pdata + set1 3,pdata + hstore 1,core_gpio_sel1 + setarg 0 + store 4,mem_spid_tbuf + rtn + + +endif + Index: 1066_OTP_FLASH/program/peripherals.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/peripherals.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/peripherals.prog (working copy) @@ -0,0 +1,2440 @@ + +/* ===================== two wire SPI gpio ======================= */ + +twspi_reset: + bpatchx patch31_4,mem_patch31 + hfetch 1,core_gpio_oe3 + arg 0x06,temp + ior temp,pdata + hstore 1,core_gpio_oe3 + hfetch 1,core_gpio_out3 + ior temp,pdata + hstore 1,core_gpio_out3 + call twspi_disable + hfetch 1,core_gpio_out3 + set0 1,pdata + set0 2,pdata + hstore 1,core_gpio_out3 + nop 30 + branch twspi_enable + +twspi_reset2: + hfetch 1,core_gpio_oe3 + arg 0xc0,temp + ior temp,pdata + hstore 1,core_gpio_oe3 + hfetch 1,core_gpio_out3 + ior temp,pdata + hstore 1,core_gpio_out3 + call twspi_disable + hfetch 1,core_gpio_out3 + set0 6,pdata + set0 7,pdata + hstore 1,core_gpio_out3 + nop 30 + branch twspi_enable2 + +twspi_disable: + hfetch 1,core_gpio_sel1 + and pdata,0xfc,pdata + hstore 1,core_gpio_sel1 //disable spi + rtn +twspi_enable: + hfetch 1,core_gpio_sel1 + or pdata,0x01,pdata + hstore 1,core_gpio_sel1 //enable spi + rtn +twspi_enable2: + hfetch 1,core_gpio_sel1 + or pdata,0x03,pdata + set0 4,pdata + hstore 1,core_gpio_sel1 //enable spi2 + rtn + +// input read reg number: pdata +//output reg data: pdata +sensor_read: + copy pdata,regb + call spi_ncs_enable + nop 100 + copy regb,pdata + call twspi_read + copy pdata,regb + call spi_ncs_disable + nop 100 + copy regb,pdata + rtn +// input write reg number: pdata +sensor_write: + copy pdata,regb + call spi_ncs_enable + nop 100 + copy regb,pdata + call twspi_write + call spi_ncs_disable + nop 100 + rtn +//spi gpio init . +//0xff :disable spi ncs gpio init +spi_ncs_gpio_init: + fetcht 1,mem_spi_ncs_gpio + branch gpio_config_output + +//nsc gpio ouput low +spi_ncs_enable: + fetcht 1,mem_spi_ncs_gpio + branch gpio_out_active + +//ncs gpio output high +spi_ncs_disable: + fetcht 1,mem_spi_ncs_gpio + branch gpio_out_inactive + + +twspi_write: + branch spid_write_reg + +twspi_read: + branch spid_read_reg + + + +/* ===================== code loading ======================= */ + + +read_function_aes: + nbranch read_function,user + hfetch 1,core_gpio_key2 + or_into 0x2,pdata // enable aes + hstore 1,core_gpio_key2 +read_function: + copy temp,null + branch read_fuction_zero,zero + copy regc,pc +read_fuction_zero: + isolate0 0,null + branch set_ucode_status + +/* return temp = block length */ +get_block_header: + force 4,temp +get_block_header0: + arg mem_ucode_buf,rega + hfetch 1,core_gpio_key2 + and_into 0xfd,pdata // disable aes for header + hstore 1,core_gpio_key2 + call read_function + arg 0x55aa,rega + fetch 2,mem_ucode_buf + ifetcht 2,contr + isub rega,null + rtn + +read_first_block: + arg 2,temp + arg mem_ucode_ptr,rega + call read_function + fetch 2,mem_ucode_ptr + store 2,mem_addr_mi + call get_iv,user + rtn + +get_iv: + arg 16,temp + arg mem_ucode_keybuf,rega + hfetch 1,core_gpio_key2 + and_into 0xfd,pdata // disable aes for iv + hstore 1,core_gpio_key2 + call read_function + arg mem_ucode_keybuf,contr + arg 16,loopcnt + call aes_load_data + call aes_init + call aes_clear_data + branch do_aes_cbc /* generate first IV */ + +load_storage: + disable match + call get_block_header + nrtn zero + enable match + hjam 0x80, core_ucode_ctrl + hjam 0,core_ucode_hi + hjam 0,core_ucode_low + arg core_ucode_data,rega + call read_function_aes + hjam 0x0, core_ucode_ctrl +load_storage_loop: + arg 6,temp + call get_block_header0 + nrtn zero + ifetch 2,contr + iforce rega + call read_function + branch load_storage_loop + + + /* only load memory data from eeprom */ +reload_eeprom: + call clean_mem + setarg 0x1000 + store 2,mem_addr_mi + arg iicd_read_eep,regc + arg 2,loopcnt +reload_eeprom_loop: + call get_block_header + nrtn zero + fetch 2,mem_addr_mi + byteswap pdata,pdata + iadd temp,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + loop reload_eeprom_loop + branch load_storage_loop + +loadcode: + call clean_mem + disable user + call otp_enable_chgpump + setarg otp_ucode_flag + arg mem_otp_ucode_flag,rega + arg 2,temp + call otpd_read_data + fetch 2,mem_otp_ucode_flag + bbit0 otp_uflag_aes, loadcode_otp + hjam 0x25,core_clkoff // disable debug uart + setarg otp_ucode_aeskey + arg mem_ucode_keybuf,rega + arg 16,temp + call otpd_read_data + hjam lock_otp,core_misc_ctrl // disable further read/write of key + set1 mark_otp_encrypt,mark + arg mem_ucode_keybuf,contr + call load_key + enable user // set user for aes +loadcode_otp: + jam 0,mem_loadcode_times +loadcode_otp_2: + call loadcode_check_times + fetch 2,mem_otp_ucode_flag + byteswap pdata,pdata + arg 0x7ff,temp + iand temp,pdata + branch loadcode_iic, zero + call otp_set_addr + arg otpd_read_code,regc + call get_iv,user + call load_storage + fetch 1,mem_ucode_status + bbit0 0,loadcode_otp_2 // crc error, try again + +loadcode_iic: + call otp_disable_chgpump + jam 0,mem_loadcode_times +loadcode_iic_2: + call loadcode_check_times + call clear_eeprom_size_2k + fetch 1,mem_otp_ucode_flag + bbit1 otp_uflag_skip_eep,loadcode_spi + call loadcode_iic_by_eeprom + nbranch loadcode_iic_eeprom_2k,match + fetch 1,mem_ucode_status + bbit0 0,loadcode_iic_2 // crc error, try again + branch loadcode_hci +loadcode_iic_eeprom_2k: + call set_eeprom_size_2k + fetch 1,mem_otp_ucode_flag + bbit1 otp_uflag_skip_eep,loadcode_spi + call loadcode_iic_by_eeprom + nbranch loadcode_spi,match + fetch 1,mem_ucode_status + bbit0 0,loadcode_iic_2 // crc error, try again + branch loadcode_hci + +loadcode_spi: + jam 0,mem_loadcode_times +loadcode_spi_2: + call loadcode_check_times + fetch 1,mem_otp_ucode_flag + bbit1 otp_uflag_skip_flash, loadcode_hci + setarg 0x0 + store 3,mem_addr_hi + call spid_init_flash + arg spid_load_flash,regc + call read_first_block + call load_storage + nbranch loadcode_hci,match + fetch 1,mem_ucode_status + bbit0 0,loadcode_spi_2 // crc error, try again + +loadcode_hci: + bmark1 mark_otp_encrypt,loadcode_hci_enc + call clear_key_buf +loadcode_hci_enc: + fetch 1,mem_otp_ucode_flag + bbit0 otp_uflag_hci,clear_key_buf + hjam 0x21,core_clkoff // enable debug uart + call hci_init +loadcode_hci_loop: + call hci_rx_packet + branch loadcode_hci_loop + +clear_key_buf: + setarg 0 + store 8,mem_ucode_keybuf + store 8,mem_ucode_keybuf+8 + force regidx_key,regext_index + call aes_clear + hjam 0x21,core_clkoff // enable debug uart + rtn + + +loadcode_iic_by_eeprom: + setarg 0x0 + store 2,mem_addr_mi + arg iicd_read_eep,regc + call iicd_init_12m + call read_first_block + branch load_storage + + +loadcode_check_times: + fetch 1,mem_loadcode_times + increase 1,pdata + sub pdata,3,null + nbranch loadcode_error,positive + store 1,mem_loadcode_times + rtn + +loadcode_error: + call clear_key_buf + call ice_break + rtn + + +/* true flag is set into status */ +set_ucode_status: + fetch 1,mem_ucode_status + lshift pdata,pdata + setflag true,0,pdata + isolate0 15,rega + rtn true + store 1,mem_ucode_status + rtn + + /* queue is bit position of hw done status */ +decrypt_code: + hfetch 1,core_gpio_key2 + rtnbit0 1 + branch decrypt_code_skip /* skip to key generation at first for speed */ +decrypt_code_loop: + hfetch 1,core_dma_status + qisolate1 pdata + rtn true +decrypt_code_skip: + hfetch 1,core_misc_status + bbit0 1,decrypt_code_loop + call do_aes_cbc + branch decrypt_code_loop + + + +load_ucode: + fetch 2,mem_patch_ptr + rtn blank + hjam 0x80, core_ucode_ctrl + hjam 0,core_ucode_hi + hjam 0,core_ucode_low + fetcht 2,mem_patch_len + lshift2 temp,loopcnt + iforce contr +load_ucode_loop: + ifetch 1,contr + hstore 1,core_ucode_data + loop load_ucode_loop + hjam 0x0, core_ucode_ctrl + rtn + + +/* ===================== SPI dma ======================= */ + +spid_init: + bpatchx patch31_5,mem_patch31 + call spid_init_common + branch twspi_enable + +spid_init2: + call spid_init_common + call twspi_disable + branch twspi_enable2 + +spid_init_common: + fetch 1,mem_spi_init_clk + hstore 1,core_spid_ctrl // A7530 should at least 34, or write fail + fetch 1,mem_spi_init_delay_time + hstore 1,core_spid_delay // 4us delay + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + setarg mem_spid_rbuf + hstore 2,core_spid_rxaddr + branch twspi_disable + +spid_reset: + hfetch 1,core_spid_ctrl + set1 7,pdata + hstore 1,core_spid_ctrl + set0 7,pdata + hstore 1,core_spid_ctrl + rtn + + +/* pdata 6:0 is reg address, 15:8 is data to write */ +spid_write_reg: + set1 7,pdata + store 2,mem_spid_tbuf + bpatchx patch31_6,mem_patch31 + hjam 2,core_spid_txlen + hjam 0,core_spid_rxlen + hjam spid_start,core_misc_ctrl + branch wait_spid_done + +/* pdata 6:0 is reg address */ +spid_read_reg: + force 1,temp +/* pdata 6:0 is burst reg address, temp is bytes to read */ +spid_read_regs: +// nop 100 + store 1,mem_spid_tbuf + bpatchx patch31_7,mem_patch31 + hjam 1,core_spid_txlen + hstoret 2,core_spid_rxlen + hjam spid_start,core_misc_ctrl + call wait_spid_done + fetch 1,mem_spid_rbuf + rtn + +wait_spid_done: + fetch 2,mem_afh_error_total + increase 1,pdata + store 2,mem_afh_error_total + hfetch 1,core_dma_status + bbit0 spid_done,wait_spid_done + rtn + +spid_init_flash: + hjam 0x40,core_spid_ctrl + hjam 0x0,core_spid_delay + hfetch 1,core_gpio_sel1 + set0 0,pdata + set1 1,pdata + hstore 1,core_gpio_sel1 + setarg 0 + store 4,mem_spid_tbuf + rtn + + +spid_unlock_flash: + setarg 0 + hstore 2,core_spid_rxlen + setarg 1 + hstore 2,core_spid_txlen + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + jam 6,mem_spid_tbuf + hjam spid_start,core_misc_ctrl + branch wait_spid_done + + +/** + ****************************************************************************** + ** \brief write flash + ** + ** \param [in] rega: 2byte write ptr + ** pdata:3byte flash address + ** temp:2byte write data length + ** + ** \retval user 0: flash buys 1:write flash setting complate + ** + ******************************************************************************/ + +flash_write: + disable user + copy pdata,regb + fetch 1,mem_spi_write_flash_sm + rtnne FLASH_SM_NO_BUYS + enable user + copy regb,pdata + branch flash_write_start + + +flash_write_spi_sm_timer: + fetch 1,mem_spi_write_flash_sm + beq FLASH_SM_START,flash_write_start + beq FLASH_SM_ERASE_SECTOR,flash_erase_sector + beq FLASH_SM_WAIT_ERASE_SECTOR,flash_wait_erase_sector + beq FLASH_SM_WRITE_DATA,flash_write_data + beq FLASH_SM_WAIT_WRITE_DATA,flash_wait_write_data + rtn + +flash_write_start: + store 3,mem_spi_write_addr + copy rega,pdata + store 2,mem_spi_write_ptr + storet 2,mem_spi_write_len + jam FLASH_SM_ERASE_SECTOR,mem_spi_write_flash_sm + branch spid_init_flash +flash_erase_sector: + call spid_init_flash + jam FLASH_SM_WAIT_ERASE_SECTOR,mem_spi_write_flash_sm + call spid_unlock_flash + arg mem_spid_tbuf,rega + fetch 3,mem_spi_write_addr + hjam 4,core_spid_txlen + arg FLASH_COMMAND_SECTOR_ERASE,temp + branch spid_write_flash_common + +flash_wait_erase_sector: + call spid_init_flash + call spid_unlock_flash + setarg FLASH_READ_SATUS + call spid_read_reg + rtnbit1 FLASH_STATUS_WIP + jam FLASH_SM_WRITE_DATA,mem_spi_write_flash_sm + rtn +flash_write_data: + call spid_init_flash + jam FLASH_SM_WAIT_WRITE_DATA,mem_spi_write_flash_sm + call spid_unlock_flash + call flash_data_preserve + call spid_write_flash + branch flash_data_recover +flash_wait_write_data: + call spid_init_flash + call spid_unlock_flash + setarg FLASH_READ_SATUS + call spid_read_reg + rtnbit1 FLASH_STATUS_WIP + jam FLASH_SM_NO_BUYS,mem_spi_write_flash_sm + fetch 2,mem_cb_spi_flash_write_complate + branch callback_func +flash_data_recover: + fetch 4,mem_temp + fetcht 2,mem_spi_write_ptr + increase -4,temp + istore 4,temp + rtn +flash_data_preserve: + fetcht 2,mem_spi_write_ptr + copy temp,rega + increase -4,temp + ifetch 4,temp + store 4,mem_temp + fetcht 2,mem_spi_write_len + fetch 3,mem_spi_write_addr + rtn + + +/* pdata is flash address, rega pointers to txdata(4 ahead bytes should be left), temp is length */ +spid_write_flash: + increase 4,temp + hstoret 2,core_spid_txlen + arg FLASH_COMMAND_WRITE_DATA,temp + increase -4,rega +spid_write_flash_common: + + istoret 1,rega + rshift16 pdata,temp + istoret 1,contw + rshift8 pdata,temp + istoret 1,contw + istore 1,contw + deposit rega + hstore 2,core_spid_txaddr + setarg 0 + hstore 2,core_spid_rxlen + hjam spid_start,core_misc_ctrl + branch wait_spid_done + + +/* temp is length, rega pointers to buf */ +spid_read_flash: + hstoret 2,core_spid_rxlen + rshift16 pdata,temp + storet 1,mem_addr_hi + rshift8 pdata,temp + storet 1,mem_addr_mi + store 1,mem_addr_lo + setarg 4 + hstore 2,core_spid_txlen + jam FLASH_COMMAND_READ_DATA,mem_spid_tbuf + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + deposit rega + hstore 2,core_spid_rxaddr + hfetch 1,core_spid_ctrl + isolate0 15,rega + setflag true,6,pdata + hstore 1,core_spid_ctrl + hjam spid_start,core_misc_ctrl +spi_read_flash_wait: + hfetch 1,core_dma_status + bbit1 7,spi_read_flash_wait // waiting for spid write + arg spid_done,queue + branch wait_spid_done + + +/* temp is length, rega pointers to buf */ +spid_load_flash: + hstoret 2,core_spid_rxlen + setarg 4 + hstore 2,core_spid_txlen + jam 3,mem_spid_tbuf + setarg mem_spid_tbuf + hstore 2,core_spid_txaddr + deposit rega + hstore 2,core_spid_rxaddr + hfetch 1,core_spid_ctrl + isolate0 15,rega + setflag true,6,pdata + hstore 1,core_spid_ctrl + hjam spid_start,core_misc_ctrl +spi_load_flash_wait: + hfetch 1,core_dma_status + bbit1 7,spi_load_flash_wait // waiting for spid write + arg spid_done,queue + call decrypt_code + call wait_spid_done + isolate1 spid_crcok,pdata + call set_ucode_status + fetch 1,mem_addr_hi + lshift16 pdata,regb + fetch 1,mem_addr_mi + lshift8 pdata,pdata + ior regb,regb + fetch 1,mem_addr_lo + ior regb,pdata + iadd temp,pdata + store 1,mem_addr_lo + rshift8 pdata,pdata + store 1,mem_addr_mi + rshift8 pdata,pdata + store 1,mem_addr_hi + rtn + +/***************************************************************************** +*soft reset chip +*****************************************************************************/ +soft_reset_chip: + hjam 1,core_reset + rtn + + + +/* ===================== I2C dma ======================= */ + +iic_init_390k: //390khz + hjam 12,core_iicd_scl_low + hjam 13,core_iicd_scl_high + hjam 13,core_iicd_start_setup + hjam 13,core_iicd_start_hold + hjam 13,core_iicd_stop_setup + hjam 12,core_iicd_data_setup + branch iicd_init_gpio + + +iicd_init_12m: + hjam 5,core_iicd_scl_low + hjam 7,core_iicd_scl_high + hjam 7,core_iicd_start_setup + hjam 7,core_iicd_start_hold + hjam 7,core_iicd_stop_setup + hjam 5,core_iicd_data_setup +iicd_init_gpio: + hfetch 1,core_gpio_pu3 + or_into 0xc0,pdata + hstore 1,core_gpio_pu3 + hfetch 1,core_gpio_sel1 + or_into 0x10,pdata + hstore 1,core_gpio_sel1 + rtn + + + +wait_iicd_done: + hfetch 1,core_dma_status + bbit0 iicd_done,wait_iicd_done + rtn + +/* +pdata is tx length +rega is points to tx buffer +regb is points to rx buffer +temp is rx length +*/ +iicd_read_data: + hstore 2,core_iicd_txlen + deposit rega + hstore 2,core_iicd_txaddr + deposit regb + hstore 2,core_iicd_rxaddr + deposit temp + hstore 2,core_iicd_rxlen + arg 1,temp + nsetflag blank,1,temp + hstore 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + branch wait_iicd_done + + +set_eeprom_size_2k: + set1 mark_eeprom_size,mark + jam 0x08,mem_eeprom_block_size + rtn + +clear_eeprom_size_2k: + set0 mark_eeprom_size,mark + jam 0x20,mem_eeprom_block_size + rtn + + +iicd_read_eep_data_size_2k: + fetch 1,mem_eeprom_base + iadd regb,pdata + store 1,mem_addr_mi + branch iicd_read_eep_size_2k + +iicd_read_eep_size_2k_lcadcode: + fetch 2,mem_addr_mi + byteswap pdata,pdata + store 1,mem_addr_mi + +//length:temp +//mem ptr:rega +//eeprom addr:pdata +iicd_read_eep_size_2k: + setarg 3 + hstore 2,core_iicd_txlen + jam 0xa0,mem_iicd_tbuf + jam 0xa1,mem_iicd_tbuf+2 + branch iicd_read_eep_common + + +//length:temp +//mem ptr:rega +//eeprom addr:regb +iicd_write_protect_eep_data: + storet 2,mem_temp + call iicd_eeprom_write_enable + fetcht 2,mem_temp + call iicd_write_eep_data + branch iicd_eeprom_write_disable + +iicd_eeprom_write_enable: + fetch 1,mem_eeprom_wp_gpio + rtneq GPIO_DISABLE + bbit0 6,iicd_wp_gpio_output_low + setarg 150000 + call sleep +iicd_wp_gpio_output_low: + fetcht 1,mem_eeprom_wp_gpio + branch gpio_out_active + +iicd_eeprom_write_disable: + fetcht 1,mem_eeprom_wp_gpio + branch gpio_out_inactive + +//length:temp +//mem ptr:rega +//eeprom addr offset:regb +iicd_read_eep_data: + bpatchx patch32_0,mem_patch32 + bmark1 mark_eeprom_size,iicd_read_eep_data_size_2k + fetch 2,mem_eeprom_base + iadd regb,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + +/* rega pointers to buf, temp is length */ +iicd_read_eep: + bpatchx patch32_1,mem_patch32 + bmark1 mark_eeprom_size,iicd_read_eep_size_2k_lcadcode + setarg 4 + hstore 2,core_iicd_txlen + jam 0xa0,mem_iicd_tbuf + jam 0xa1,mem_iicd_tbuf+3 +iicd_read_eep_common: + setarg mem_iicd_tbuf + hstore 2,core_iicd_txaddr + hstoret 2,core_iicd_rxlen + deposit rega + hstore 2,core_iicd_rxaddr + setarg 2 + isolate0 15,rega + setflag true,0,pdata + hstore 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + arg iicd_done,queue + call decrypt_code + call wait_iicd_done + isolate1 iicd_crcok,pdata + call set_ucode_status + bmark1 mark_eeprom_size,iicd_read_eep_load_code_size_2k + fetch 2,mem_addr_mi + byteswap pdata,pdata + iadd temp,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + rtn + +iicd_read_eep_load_code_size_2k: + fetch 1,mem_addr_mi + iadd temp,pdata + byteswap pdata,pdata + store 2,mem_addr_mi + rtn + + +//length:temp +//mem ptr:rega +//eeprom addr offset:regb +iicd_write_eep_data: + fetch 2,mem_eeprom_base + iadd regb,pdata + +//cuur ptr:pdata length:temp buf:rega +iicd_write_ota_data: + store 2,mem_pdatatemp //curr ptr + bpatchx patch32_2,mem_patch32 + storet 2,mem_temp //len + copy rega,pdata + store 2,mem_contr +iicd_write_eep_loop: + call iicd_eep_transparency + + fetcht 2,mem_regb + fetch 2,mem_contr + copy pdata,rega + fetch 2,mem_pdatatemp + + call iicd_write_eep + + fetch 2,mem_regb + fetcht 2,mem_contr + iadd temp,temp + storet 2,mem_contr + fetcht 2,mem_pdatatemp + iadd temp,temp + storet 2,mem_pdatatemp + fetch 2,mem_temp + nbranch iicd_write_eep_loop,blank + rtn + +//in: +//1.size 2.len 3.src 4.des +//mem_regc page's area +//mem_pdatatemp curr ptr +//mem_temp all len +//mem_regb curr len +iicd_eep_transparency: + bpatchx patch32_3,mem_patch32 + fetch 1,mem_eeprom_block_size + increase -1,pdata + fetcht 2,mem_pdatatemp + ior temp,pdata + increase 1,pdata + store 3,mem_regc + + fetch 2,mem_temp + iadd temp,pdata + + fetcht 3,mem_regc + isub temp,pdata + nbranch iicd_eep_deal_short_packet,positive + store 2,mem_temp + fetch 3,mem_regc + fetcht 2,mem_pdatatemp + isub temp,pdata + store 2,mem_regb + rtn +iicd_eep_deal_short_packet: + fetch 2,mem_temp + store 2,mem_regb + setarg 0 + store 2,mem_temp + rtn + +iicd_write_eep_size_2k: + increase 2,temp + hstoret 2,core_iicd_txlen + increase -2,rega + ifetcht 3,rega + copy temp,regb + arg 0xa0,temp + istoret 1,rega +// byteswap pdata,pdata + istore 1,contw + branch iicd_write_eep_common + + /* pdata is eeprom address, rega pointers to txdata(3 ahead bytes should be left), temp is length */ +iicd_write_eep: + copy pdata,regb + bpatchx patch32_4,mem_patch32 + bmark1 mark_eeprom_size,iicd_write_eep_size_2k + copy regb,pdata + increase 3,temp + hstoret 2,core_iicd_txlen + increase -3,rega + ifetcht 3,rega + copy temp,regb + arg 0xa0,temp + istoret 1,rega + byteswap pdata,pdata + istore 2,contw +iicd_write_eep_common: + deposit rega + hstore 2,core_iicd_txaddr + setarg 0 + hstore 2,core_iicd_rxlen + hjam 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + call wait_iicd_done + copy regb,pdata + istore 3,rega + +iic_check_eeprom_standby: + bpatchx patch32_5,mem_patch32 + jam 0,mem_iicd_tbuf+3 +iic_check_eeprom_standby_wait: + setarg 1 + hstore 2,core_iicd_txlen + jam 0xa0,mem_iicd_tbuf + setarg mem_iicd_tbuf + hstore 2,core_iicd_txaddr + setarg 0 + hstore 2,core_iicd_rxlen + hstore 2,core_iicd_rxaddr + setarg 3 + hstore 1,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + call wait_iicd_done + hfetch 1,core_dma_status + rtnbit0 iicd_ack + nop 1500 + fetch 1,mem_iicd_tbuf+3 + increase 1,pdata + store 1,mem_iicd_tbuf+3 + sub pdata,40,null + nrtn positive//polling timeout 6ms + branch iic_check_eeprom_standby_wait + +/* ===================== OTP ======================= */ + +otp_enable_chgpump: + hjam 0x70,rfen_chgpump + nop param_chgpump_delay + rtn + +otp_disable_chgpump: + hjam 0x30,rfen_chgpump + rtn + +otp_set_addr: + lshift3 pdata,pdata + hstore 2,core_otp_addr + hjam 0,core_otpd_ctrl + rtn + +/* pdata = otp address, rega pointers data, loopcnt is count */ +otp_write: + call otp_set_addr + call otp_ce +otp_program: + ifetcht 1,rega + increase 1,rega + force 0,queue +otp_program_bit: + qisolate0 temp + branch otp_skip_0,true + hfetch 1,core_otp_din + set1 6,pdata /* din */ + set1 7,pdata /* dle */ + hstore 1,core_otp_din + hjam 0x02,core_otp_ctrl /* web */ + hjam 0x82,core_otp_ctrl + set0 7,pdata /* dle */ + hstore 1,core_otp_din + hjam 0x8a,core_otp_ctrl /* pgmen */ + nop 11 + hjam 0xca,core_otp_ctrl /* vppen */ + nop 33 + hjam 0x4a,core_otp_ctrl /* web 2nd */ + nop 44 + hjam 0xca,core_otp_ctrl /* release web */ + nop 22 + hjam 0x8a,core_otp_ctrl /* release vppen */ + nop 33 + hjam 0x82,core_otp_ctrl /* release pgmen */ + nop 1 + hjam 0x92,core_otp_ctrl /* pgmvfy */ + nop 10 + hjam 0xb2,core_otp_ctrl /* readen */ + hfetch 1,core_otp_rdata + hjam 0x92,core_otp_ctrl /* release readen */ + nop 1 + hjam 0x82,core_otp_ctrl /* release pgmvfy */ + qisolate0 pdata + branch otp_program_bit,true /* program error */ +otp_skip_0: + hfetch 2,core_otp_addr + increase 1,pdata + hstore 2,core_otp_addr + increase 1,queue + compare 8,queue,0xf + nbranch otp_program_bit,true + loop otp_program + hjam 0x83,core_otp_ctrl + rtn + +otp_ce: + hjam 0x82,core_otp_ctrl /* ceb */ + nop 12 + hjam 0x80,core_otp_ctrl /* rstn */ + hjam 0x82,core_otp_ctrl /* release rstn */ + nop 150 /* waiting for vdd25 stable */ + rtn + + /* rega points to data, temp is count */ +otpd_read_init: + call otp_ce + hjam 0xa2,core_otp_ctrl /* readen */ + deposit rega + hstore 2,core_otpd_addr + set1 11,temp + isolate0 15,pdata + setflag true,15,temp + hstoret 2,core_otpd_len + hjam otpd_start,core_misc_ctrl + rtn + +otpd_wait_end: + hfetch 1,core_dma_status + bbit0 otpd_done,otpd_wait_end + rtn + + /* pdata=otp address, rega points to data, temp is count */ +otpd_read_data: + call otp_set_addr + call otpd_read_init + call otpd_wait_end + hjam 0x83,core_otp_ctrl /* release ceb */ + rtn + + + +/* rega pointers to buf, temp is length */ +otpd_read_code: + hfetch 2,core_current_otp_addr + hstore 2,core_otp_addr + call otpd_read_init + arg otpd_done,queue + call decrypt_code + call otpd_wait_end + isolate1 otpd_crcok,pdata + call set_ucode_status + hjam 0x83,core_otp_ctrl /* release ceb */ + rtn + +/* ===================== uart dma ======================= */ +uartd_prepare_tx: + hfetch 2,core_uart_twptr + iforce contwu + rtn + +uartd_send: + deposit contwu + hstore 2,core_uart_twptr + rtn + +uartd_rxdone: + deposit contru + hstore 2,core_uart_rrptr + rtn + +uartd_prepare_rx: + hfetch 2,core_uart_rrptr + copy pdata,contru + rtn + +uart_set_baud_by_mem: + fetch uart_baud_len,mem_baud + hstore uart_baud_len,core_uart_baud + rtn + +uart_copy_tx_bytes_fast: + deposit loopcnt + rtn blank +uart_copy_tx_bytes_fast_loop: + increase -8,loopcnt + call uart_tx_8_bytes,positive + rtn zero + branch uart_copy_tx_bytes_fast_loop,positive + increase 8,loopcnt +uart_copy_tx_bytes_fast_loop_four: + increase -4,loopcnt + call uart_tx_4_bytes,positive + rtn zero + branch uart_copy_tx_bytes_fast_loop_four,positive + increase 4,loopcnt + branch uart_copy_tx_bytes + +uart_tx_8_bytes: + ifetch 8,contr + istore 8,contwu + rtn + +uart_tx_4_bytes: + ifetch 4,contr + istore 4,contwu + rtn + +uart_copy_tx_bytes: + deposit loopcnt + rtn blank +uart_copy_tx_bytes_loop: + ifetch 1,contr + istore 1,contwu + loop uart_copy_tx_bytes_loop + rtn + +uart_copy_rx_bytes_fast: + deposit loopcnt + rtn blank +uart_copy_rx_bytes_fast_loop: + increase -8,loopcnt + call uart_rx_8_bytes,positive + rtn zero + branch uart_copy_rx_bytes_fast_loop,positive + increase 8,loopcnt +uart_copy_rx_bytes_fast_loop_four: + increase -4,loopcnt + call uart_rx_4_bytes,positive + rtn zero + branch uart_copy_rx_bytes_fast_loop_four,positive + increase 4,loopcnt + branch uart_copy_rx_bytes + +uart_rx_8_bytes: + ifetch 8,contru + istore 8,contw + rtn + +uart_rx_4_bytes: + ifetch 4,contru + istore 4,contw + rtn + + +uart_copy_rx_bytes: + deposit loopcnt + rtn blank +uart_copy_rx_bytes_loop: + ifetch 1,contru + istore 1,contw + loop uart_copy_rx_bytes_loop + rtn + + +uart_copy_rx2tx: + deposit loopcnt + rtn blank +uart_copy_rx2tx_loop: + ifetch 1,contru + istore 1,contwu + loop uart_copy_rx2tx_loop + rtn + + +/* ===================== eeprom data ======================= */ + +app_store_nvram_event: + jam BT_EVT_STORE_NVRAM,mem_fifo_temp + branch ui_ipc_send_event + +check_51cmd_store_reconn_info: +check_51cmd_update_device_record: + bpatchx patch32_6,mem_patch32 + fetch 1,mem_nv_data_number + rtn blank // not nv data + call check_nvram + call init_device_list,zero + call nvram_find_addr_from_bd_list +write_device_record: + fetch 1,mem_nv_data_number + icopy regc + fetcht 2,mem_nv_data_ptr + storet 2,mem_list_item_ptr +write_device_loop_find: + copy regc,pdata + branch app_store_nvram_event,blank //EEPROM + increase -1,regc + copy temp,rega + ifetch 1,rega + fetcht 1,mem_select_list_item + isub temp,null + call set_index_finded_device,zero + branch write_device_loop_find0,positive + ifetch 1,rega + increase 1,pdata + istore 1,rega +write_device_loop_find0: + fetcht 2,mem_list_item_ptr + increase NV_DATA_LEN,temp + storet 2,mem_list_item_ptr + branch write_device_loop_find + +set_index_finded_device: + setarg 0 + istore 1,rega + fetch 1,mem_temp_reconn_record + istore 1,contw + bne REC_3_MODE,set_index_finded_device_ble_mode + arg mem_link_key,regb +set_index_find_device_MASTER_ADDR: + ifetch 6,contr + istore 8,contw + setarg 0 + istore 8,contw + copy regb,contr +store_rec_data_common: + call memcpy16 + force 1,null + rtn + +set_index_finded_device_ble_mode: + beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_IRK + beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_EDIV + arg mem_le_ltk,regb + branch set_index_find_device_MASTER_ADDR + +set_index_finded_device_IRK: + arg mem_le_irk,contr + call memcpy16 +store_ble_rec_data_common: + arg mem_le_ltk,contr + branch store_rec_data_common + +set_index_finded_device_EDIV: + arg mem_le_rand,contr + call memcpy16 + branch store_ble_rec_data_common + + +nvram_find_addr_from_bd_list: + call disable_user + fetch 1,mem_nv_data_number + rtn blank // not nv data + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,find_addr_from_bd_list_SPP_mode +find_addr_from_bd_list_ble_mode: + bpatchx patch32_7,mem_patch32 + fetch 1,mem_le_conn_peer_addr_type + beq MASTER_PUBLIC_ADDR,find_addr_from_bd_list_static_addr + fetch 1,mem_le_plap+5 + compare 0xc0,pdata,0xc0 + branch find_addr_from_bd_list_static_addr,true + compare 0x40,pdata,0xc0 + branch find_addr_from_bd_list_random_addr,true + compare 0x00,pdata,0xc0 + branch find_addr_from_bd_list_random_non_resolvable_private_address,true +find_addr_from_bd_list_static_addr: + jam REC_4_MODE_STATIC_ADDRESS,mem_temp_reconn_record + fetch 6,mem_le_plap + branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_non_resolvable_private_address: + jam REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record + branch find_addr_from_bd_list_common + +//input :pdata EDIV and rands +find_addr_from_bd_list_random_addr: + jam REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record + branch find_addr_from_bd_list_common + +//input :pdata EDIV and rands +find_addr_from_bd_list_SPP_mode: + bpatchx patch33_0,mem_patch33 + jam REC_3_MODE,mem_temp_reconn_record + fetch 6,mem_plap +find_addr_from_bd_list_common: + store 6,mem_temp_reconn_record+1 + fetch 2,mem_nv_data_ptr + ifetcht 1,pdata + pincrease 1 + store 2,mem_list_item_ptr + storet 1,mem_select_list_item + fetch 1,mem_nv_data_number + icopy regc +nvram_find_addr_from_list: + fetch 2,mem_list_item_ptr + copy pdata,rega + call nvram_find_addr_from_list_compare + rtn user + fetcht 2,mem_list_item_ptr + increase NV_DATA_LEN,temp + storet 2,mem_list_item_ptr + increase -1,temp + ifetch 1,temp + store 1,mem_select_list_item + increase -1,regc + nbranch nvram_find_addr_from_list,zero + fetch 1,mem_nv_data_number + pincrease DECREASED_ONE + store 1,mem_select_list_item + rtn +nvram_find_addr_from_list_compare: + fetch 1,mem_temp_reconn_record + bne REC_3_MODE,find_addr_from_list_compare_ble_mode +find_master_addr_from_list_compare: + arg mem_temp_reconn_record,regb + arg 7,loopcnt + call string_compare + branch enable_user,zero + rtn + +find_addr_from_list_compare_ble_mode: + beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,find_irk_form_list_compare + beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,find_ediv_form_list_compare + branch find_master_addr_from_list_compare + +find_irk_form_list_compare: + ifetcht 1,rega + isub temp,null + nrtn zero + arg mem_le_prand,contw + arg 16,loopcnt + call clear_mem + fetch 3,mem_le_plap+3 + store 3,mem_le_prand + call genernate_master_MacAddress + fetch 2,mem_le_aes_128+13 + byteswap pdata,pdata + lshift8 pdata,temp + ifetch 1,contr + iadd temp,pdata + fetcht 3,mem_le_plap + isub temp,null + branch enable_user,zero + rtn + + +genernate_master_MacAddress: + arg mem_le_prand ,contr + call load_data128 +// arg mem_le_irk,contr + ifetch 1,rega + call load_regext + force 0x38,aes_ctrl + force 0x0,aes_ctrl + call wait_aes + arg mem_le_aes_128,contw + branch store_aes_result + +find_ediv_form_list_compare: + ifetcht 1,rega + isub temp,null + nrtn zero + copy contr,rega + add contr,8,regc + arg mem_le_rand,regb + arg 8,loopcnt + call string_compare + branch enable_user,zero + copy regc,rega + arg mem_le_irk,regb + arg 8,loopcnt + call string_compare + branch enable_user,zero + rtn + +check_nvram: + fetch 2,mem_nv_data_ptr + ifetcht 1,pdata + pincrease NV_DATA_LEN + ifetch 1,pdata + isub temp,null + rtn + +init_device_list: + fetch 1,mem_nv_data_number + icopy loopcnt + fetcht 2,mem_nv_data_ptr + setarg 0 +init_device_list_loop: + istore 1,temp + increase NV_DATA_LEN,temp + pincrease 1 + loop init_device_list_loop + rtn + +load_device_list: + bpatchx patch33_1,mem_patch33 + call nvram_find_addr_from_bd_list + fetch 1,mem_state + setflag user,state_combkey,pdata /* we have link key */ + store 1,mem_state + nbranch clear_key_exists,user + add rega,10,contr +// copy rega,contr + arg mem_link_key,contw + call memcpy16 + branch check_link_key_load +clear_key_exists: + jam 0,mem_link_key_exists + rtn + +load_device_list_mode_4: + fetch 9,mem_le_ediv + branch clear_ltk_exists,blank + call nvram_find_addr_from_bd_list + nbranch clear_ltk_exists,user + fetch 2,mem_list_item_ptr + add pdata,1,contr + arg mem_le_irk,contw + call memcpy16 + arg mem_le_ltk,contw + call memcpy16 + jam 1,mem_ltk_exists + rtn + +clear_ltk_exists: + jam 0,mem_ltk_exists + rtn + + +eeprom_store_le_reconn_info: + fetch 6,mem_le_plap + store 6,mem_temp_lap + jam REC_4_MODE,mem_record_bt_mode + branch eeprom_store_reconn_info +eeprom_store_bd_reconn_info: + fetch 6,mem_plap + store 6,mem_temp_lap + jam REC_3_MODE,mem_record_bt_mode +eeprom_store_reconn_info: + fetch 1,mem_device_option + beq dvc_op_module,check_51cmd_update_device_record + bbit1 dvc_op_mouse,mouse_store_remote_bdaddr + rtn + + +check_link_key_load: + fetch 8,mem_link_key + fetcht 8,mem_link_key+8 + ior temp,pdata + rtn blank + jam 1,mem_link_key_exists + rtn + + +/* =============== GPIO CONTROL ================= */ + + + //temp [4:0]=GPIO number, 0-31, +gpio_set_wake_by_current_state: + bpatchx patch33_2,mem_patch33 + set1 7,temp + call gpio_get_bit + nsetflag true,7,temp + //branch gpio_set_wake + //fall through + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active +gpio_set_wake: + bpatchx patch33_3,mem_patch33 + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate0 7,temp + and temp,0x1f,queue + fetch 4,mem_gpio_wakeup_low + qsetflag true,pdata + store 4,mem_gpio_wakeup_low + fetch 4,mem_gpio_wakeup_high + nqsetflag true,pdata + store 4,mem_gpio_wakeup_high + rtn + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active +gpio_clr_wake: + bpatchx patch33_4,mem_patch33 + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate0 7,temp + and temp,0x1f,queue + fetch 4,mem_gpio_wakeup_low + qset0 pdata + store 4,mem_gpio_wakeup_low + fetch 4,mem_gpio_wakeup_high + qset0 pdata + store 4,mem_gpio_wakeup_high + rtn + + +gpio_config_input_nowake: + call gpio_clr_wake + branch gpio_config_input_without_wake + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active +gpio_config_input: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + ncall gpio_set_wake,wake + +gpio_config_input_without_wake: + arg core_gpio_pd0,contw + call gpio_set_bit + setflip gpio_active_bit,temp + arg core_gpio_pu0,contw + call gpio_set_bit + set0 gpio_active_bit,temp + arg core_gpio_oe0,contw + branch gpio_set_bit + + +gpio_set_high_impedance: + arg core_gpio_pd0,contw + call gpio_set_bit + set0 gpio_active_bit,temp + arg core_gpio_pu0,contw + call gpio_set_bit + set0 gpio_active_bit,temp + arg core_gpio_oe0,contw + branch gpio_set_bit + + + //temp [4:0]=GPIO number, 0-31, [7]=0, low active. set gpio to inactive state +gpio_config_output: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + setflip gpio_active_bit,temp + call gpio_out +gpio_config_output0: + set1 gpio_active_bit,temp + arg core_gpio_oe0,contw + branch gpio_set_bit + +gpio_common: + and temp,0x07,queue + rshift3 temp,pdata + and_into 3,pdata + iadd contw,contw + ifetch 1,contw + rtn + +gpio_check_active: + arg core_gpio_out0,contw + branch get_bit_common + + + /* temp is gpio number, return true if gpio active */ +gpio_get_bit: + arg core_gpio_in,contw +get_bit_common: + call gpio_common + isolate1 gpio_active_bit,temp + branch gpio_get_bit_reverse,true + qisolate0 pdata + rtn +gpio_get_bit_reverse: + qisolate1 pdata + rtn + +gpio_out_inactive: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate1 7,null + branch gpio_out_flag + +gpio_out_active: + sub temp,UI_BUTTON_GPIO_DISABLE,null + rtn zero + isolate0 7,null + + /* temp is gpio number, [7]=1,set out equa true flag if gpio active */ +gpio_out_flag: + setarg 0 + nsetflag true,gpio_active_bit,pdata + ixor temp,temp + + /* temp is gpio number,0-31, [7]=out bit value */ +gpio_out: + arg core_gpio_out0,contw + + //temp [4:0]=GPIO number, 0-31, [7]=bit value; contw is gpio reg base +gpio_set_bit: + call gpio_common + isolate1 gpio_active_bit,temp + qsetflag true,pdata + istore 1,contw + rtn + +gpio_set_before_lpm_common: + arg -1,rega + hfetch 1,core_gpio_sel1 + compare 0x02,pdata,0x03 + call neglact4_from_23_pin,true //spi + + compare 0x01,pdata,0x03 + call neglact2_form_25_pin,true //two spi gpio25 26 + + compare 0x03,pdata,0x03 + call neglact2_form_25_pin,true //two spi gpio30 31 + + isolate1 2,pdata + call neglect2_from_6_pin,true //uart + + isolate1 3,pdata + call neglect4_from_9_pin,true //spi + + isolate1 4,pdata + call neglact2_form_30_pin,true //IIC GPIO30 31 + + isolate1 6,pdata + nsetflag true,04,rega //pwm0 gpio4 + + isolate1 7,pdata + nsetflag true,05,rega //pwm1 gpio5 + + hfetch 1,core_gpio_sel2 + isolate1 0,pdata + nsetflag true,27,rega //pwm2 gpio27 + isolate1 1,pdata + nsetflag true,28,rega //pwm3 gpio28 + isolate1 2,pdata + nsetflag true,03,rega //pwm4 gpio03 + isolate1 3,pdata + nsetflag true,08,rega //pwm5 gpio08 + isolate1 4,pdata + nsetflag true,20,rega //pwm0 gpio20 + isolate1 5,pdata + nsetflag true,21,rega //pwm1 gpio21 + isolate1 6,pdata + nsetflag true,22,rega //pwm2 gpio22 + isolate1 7,pdata + nsetflag true,23,rega //pwm3 gpio23 + + hfetch 1,core_gpio_sel + isolate1 0,pdata + nsetflag true,05,rega //ADC GPIO05 + isolate1 1,pdata + nsetflag true,06,rega //ADC GPIO06 + isolate1 2,pdata + nsetflag true,07,rega //ADC GPIO07 + isolate1 3,pdata + nsetflag true,18,rega //ADC GPIO18 + isolate1 4,pdata + nsetflag true,19,rega //ADC GPIO19 + isolate1 5,pdata + nsetflag true,20,rega //ADC GPIO20 + isolate1 6,pdata + nsetflag true,21,rega //ADC GPIO21 + isolate1 7,pdata + nsetflag true,22,rega //ADC GPIO22 + + hfetch 1,core_uart_ctrl + isolate1 4,pdata + call neglact2_form_2_pin,true + bpatchx patch33_5,mem_patch33 + + hfetch 4,core_gpio_pu0 + hfetcht 4,core_gpio_pd0 + ior temp,pdata + invert pdata,pdata + iand rega,pdata + //set0 4,pdata //revc + hstore 4,core_gpio_oe0 + rtn + + +neglect2_from_6_pin: //uart + arg 6,queue + branch neglect_2_pin +neglect4_from_9_pin: + arg 9,queue + branch neglact_4_pin +neglact4_from_23_pin: + arg 23,queue + branch neglact_4_pin +neglact2_form_25_pin: + arg 25,queue + branch neglect_2_pin +neglact2_form_30_pin: + arg 30,queue + branch neglect_2_pin +neglact2_form_2_pin: + arg 2,queue + branch neglect_2_pin +neglact_1_pin: + arg 1,loopcnt + branch neglect_pin_loop +neglact_4_pin: + arg 4,loopcnt + branch neglect_pin_loop +neglect_2_pin: + arg 2,loopcnt +neglect_pin_loop: + qset0 rega + increase 1,queue + loop neglect_pin_loop + rtn + + + + + + +/* ===================== sniff GPIO CONTROL ======================= */ +gpio_cfg_uart_tx_output: + call gpio_uart2gpio + arg UART_WAKEUP_TX,temp + branch gpio_config_output + +gpio_pu_uart_tx: + call gpio_cfg_uart_tx_output + arg UART_WAKEUP_TX,temp + branch gpio_out_inactive + + + +gpio_rx_config_input_with_pu: + call gpio_uart2gpio + hfetch 1, core_gpio_pu0 + set1 UART_WAKEUP_RX,pdata + hstore 1,core_gpio_pu0 + arg UART_WAKEUP_RX,temp + branch gpio_config_input + +gpio_uart2gpio: + hfetch 1,core_gpio_sel1 + and_into 0xfb,pdata + hstore 1,core_gpio_sel1 + rtn + +gpio_check_uart_state: + hfetch 1,core_gpio_sel1 + isolate1 2,pdata + rtn + +load_chip_option: + call otp_enable_chgpump + setarg OTP_CHIP_FUNCTIONS + arg mem_chip_functions,rega + arg 0x02,temp + call otpd_read_data + branch otp_disable_chgpump + + +load_adc_init: + call otp_enable_chgpump + setarg otp_adc_io_0_5V_addr + arg mem_0_5_adc_io_data,rega + arg 14,temp + call otpd_read_data + branch otp_disable_chgpump + + +//mem_adc_config_flag 0:vinlpm 1:Hvin 2: GPIO +adc_init_data: + bpatchx patch33_6,mem_patch33 + + call load_adc_init + + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,adc_init_data_vinlpm + beq ADC_CONFIG_HVIN,adc_init_data_hvin + beq ADC_CONFIG_GPIO,adc_init_data_io + rtn + +adc_init_data_vinlpm: + fetcht 2,mem_otp_adc_flag + setarg OTP_ADC_FLAG + isub temp,null + branch adc_check_data_vinlpm,zero + setarg 0x4dfa + store 2,mem_3v_adc_vinlpm_data + setarg 0x4894 + store 2,mem_2v_adc_vinlpm_data + branch set_vdd_reference_voltage_1v + +adc_check_data_vinlpm: + fetch 2,mem_3v_adc_vinlpm_data + nbranch adc_check_2v_vinlpm,blank + setarg 0x4dfa + store 2,mem_3v_adc_vinlpm_data +adc_check_2v_vinlpm: + fetch 2,mem_2v_adc_vinlpm_data + nbranch set_vdd_reference_voltage_1v,blank + setarg 0x4894 + store 2,mem_2v_adc_vinlpm_data +set_vdd_reference_voltage_1v: + setarg 100 + store 2,mem_reference_voltage //set reference voltage = 1V + rtn + +adc_init_data_hvin: + fetcht 2,mem_otp_adc_flag + setarg OTP_ADC_FLAG + isub temp,null + branch adc_check_data_hvin,zero + setarg 0x5932 + store 2,mem_5v_adc_hvin_data + setarg 0x4323 + store 2,mem_1v_adc_hvin_data + branch set_vdd_reference_voltage_4v + +adc_check_data_hvin: + fetch 2,mem_5v_adc_hvin_data + nbranch adc_check_1v_hvin,blank + setarg 0x5932 + store 2,mem_5v_adc_hvin_data +adc_check_1v_hvin: + fetch 2,mem_1v_adc_hvin_data + nbranch set_vdd_reference_voltage_4v,blank + setarg 0x4323 + store 2,mem_1v_adc_hvin_data +set_vdd_reference_voltage_4v: + setarg 400 + store 2,mem_reference_voltage //set reference voltage = 4V + rtn + +adc_init_data_io: + fetcht 2,mem_otp_adc_flag + setarg OTP_ADC_FLAG + isub temp,null + branch adc_check_data_io,zero + setarg 0x6946 + store 2,mem_1v_adc_io_data + setarg 0x5377 + store 2,mem_0_5_adc_io_data + branch set_vdd_reference_voltage_0_5v + +adc_check_data_io: + fetch 2,mem_1v_adc_io_data + nbranch adc_check_0_5v_io,blank + setarg 0x6946 + store 2,mem_1v_adc_io_data +adc_check_0_5v_io: + fetch 2,mem_0_5_adc_io_data + nbranch set_vdd_reference_voltage_0_5v,blank + setarg 0x5377 + store 2,mem_0_5_adc_io_data +set_vdd_reference_voltage_0_5v: + setarg 50 + store 2,mem_reference_voltage //set reference voltage = 0.5V + rtn + + +adc_set_mode: + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,adc_check_vinlpm + beq ADC_CONFIG_HVIN,adc_check_hvin + beq ADC_CONFIG_GPIO,adc_check_gpio + rtn +adc_check_vinlpm: + hjam 0xbf,rf_adc_mode //read VINLPM voltage directly + branch read_adc +adc_check_hvin: + hjam 0xaf,rf_adc_mode //read HVIN voltage directly + branch read_adc +adc_check_gpio: + hjam 0x8f,rf_adc_mode + fetch 1,mem_adc_channel + hstore 1,rf_adc_ch + branch read_adc +read_adc: + bpatchx patch33_7,mem_patch33 + hfetch 1,core_uart_baud + 1 + set1 7,pdata + hstore 1,core_uart_baud + 1 + hfetch 1,rf_adc_ch + or_into 0x30,pdata + hstore 1,rf_adc_ch + hjam 0x7c,rfen_adc + hjam 0xaa,rf_adc_gc + nop 5000 + hfetcht 2,core_adc_sum + hfetch 1,core_uart_baud + 1 + set0 7,pdata + hstore 1,core_uart_baud + 1 + storet 2,mem_adc_current_value + rtn + +vdd_calculate_by_mode: + bpatchx patch34_0,mem_patch34 + fetch 1,mem_adc_config_flag + beq ADC_CONFIG_VINLPM,vdd_calculate_vinlpm + beq ADC_CONFIG_HVIN,vdd_calculate_hvin + beq ADC_CONFIG_GPIO,vdd_calculate_io + rtn + +vdd_calculate_vinlpm: + fetch 2,mem_3v_adc_vinlpm_data + fetcht 2,mem_2v_adc_vinlpm_data + arg 200,regc + branch vdd_calculate + +vdd_calculate_hvin: + fetch 2,mem_5v_adc_hvin_data + fetcht 2,mem_1v_adc_hvin_data + arg 100,regc + branch vdd_calculate + +vdd_calculate_io: + fetch 2,mem_1v_adc_io_data + fetcht 2,mem_0_5_adc_io_data + arg 50,regc + branch vdd_calculate + +vdd_calculate: + isub temp,rega + fetch 2,mem_adc_current_value + isub temp,pdata + nbranch vdd_calculate1,positive + fetcht 2,mem_reference_voltage + imul32 temp,regb + copy regc,pdata + imul32 rega,pdata + iadd regb,pdata +vdd_calculate2: + idiv rega + call wait_div_end + quotient pdata + rtn + +vdd_calculate1: + copy temp,pdata + fetcht 2,mem_adc_current_value + isub temp,pdata + fetcht 2,mem_reference_voltage + imul32 temp,regb + copy regc,pdata + imul32 rega,pdata + isub regb,pdata + branch vdd_calculate2 + +/* typedef struct +* { +* uint16 full_vol +* uint16 empty_vol +* uint16 low_vol +* uint16 now_vol +* }bat_calculate; +*/ +//out: pdata->bat percent +adc_bat_percent_lowpower_out: + ifetch 8,rega + store 8,mem_pdatatemp + fetch 2,mem_pdatatemp + fetcht 2,mem_pdatatemp+2 + isub temp,rega + fetch 2,mem_pdatatemp+6 + isub temp,regb + fetcht 2,mem_pdatatemp+4 + isub temp,null + ncall adc_set_low_power_flag,positive + mul32 regb,100,pdata + idiv rega + call wait_div_end + quotient pdata + call adc_set_no_power_flag,blank + rtn +adc_set_low_power_flag: + fetch 1,mem_adc_power_flag + set1 0,pdata + store 1,mem_adc_power_flag + rtn +adc_set_no_power_flag: + fetcht 1,mem_adc_power_flag + set1 1,temp + storet 1,mem_adc_power_flag + rtn + +ifdef SPI_SIMULATE +/******************************simulate spi slave start**********************************/ + +/* +// Define SPI struct, gpio config +mem_spi_simulate_struct: +02 #cs +03 #sclk +04 #mosi +05 #miso +08 #motion +*/ + +/* +Brief: spi_simulate_init_slave +Input: None +Output: None +Return: None +Brief: cs_gpio,sclk_gpio,mosi_gpio : input + miso_gpio : output +*/ +spi_simulate_init_slave: + call spi_simulate_variable_release_slave + branch spi_simulate_gpio_config_slave + +spi_simulate_variable_release_slave: + arg mem_spi_simulate_read_byte_slave,contw + arg 53,loopcnt + call buffer_release + arg mem_spi_simulate_write_byte_slave,contw + arg 54,loopcnt + branch buffer_release + +buffer_release: + setarg 0 +buffer_release_loop: + istore 1,contw + loop buffer_release_loop + rtn + +spi_simulate_gpio_config_slave: + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_config_input + fetcht 1,mem_spi_simulate_sclk_gpio + call gpio_config_input + fetcht 1,mem_spi_simulate_mosi_gpio + call gpio_config_input + fetcht 1,mem_spi_simulate_miso_gpio + call gpio_config_output + fetcht 1,mem_spi_simulate_motion_gpio + call gpio_config_output + branch spi_simulate_motion_disable + +spi_simulate_motion_enable: + fetcht 1,mem_spi_simulate_motion_gpio + branch gpio_out_inactive +spi_simulate_motion_disable: + fetcht 1,mem_spi_simulate_motion_gpio + branch gpio_out_active + +/* +Brief: spi_simulate_read_byte_slave +Input: rega: read length +Output: mem_spi_simulate_read_byte_slave: read buffer +Return: None +Brief: when the cs_gpio is low level,slave reads data from master at the rising edge of the sclk gpio +*/ +spi_simulate_read_byte_slave: + copy rega,pdata + store 1,mem_spi_simulate_read_length_slave + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + nrtn true +spi_simulate_read_byte_slave1: + jam 0,mem_spi_simulate_read_byte_slave_temp + arg 8,loopcnt +spi_simulate_read_byte_slave_loop: + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + nbranch spi_simulate_read_byte_slave_end,true + + fetcht 1, mem_spi_simulate_sclk_gpio + call gpio_get_bit + branch spi_simulate_read_byte_slave_loop,true + fetch 1,mem_spi_simulate_read_byte_slave_temp + lshift pdata,pdata + store 1,mem_spi_simulate_read_byte_slave_temp + fetcht 1, mem_spi_simulate_mosi_gpio + call gpio_get_bit + ncall spi_simulate_read_byte_or_one,true +spi_simulate_read_byte_slave_loop1: + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + nbranch spi_simulate_read_byte_slave_end,true + + fetcht 1, mem_spi_simulate_sclk_gpio + call gpio_get_bit + nbranch spi_simulate_read_byte_slave_loop1,true + loop spi_simulate_read_byte_slave_loop + + fetcht 1,mem_spi_simulate_read_length_slave_temp + setarg mem_spi_simulate_read_byte_slave + iadd temp,contw + copy contw,regb + increase 1,temp + storet 1,mem_spi_simulate_read_length_slave_temp + fetch 1,mem_spi_simulate_read_byte_slave_temp + copy regb,contw + istore 1,contw + + fetch 1,mem_spi_simulate_read_length_slave + increase -1,pdata + store 1,mem_spi_simulate_read_length_slave + nbranch spi_simulate_read_byte_slave1,blank + +spi_simulate_read_byte_slave_loop2: + fetcht 1, mem_spi_simulate_cs_gpio + call gpio_get_bit + nbranch spi_simulate_read_byte_slave_loop2,true +spi_simulate_read_byte_slave_end: + jam 0,mem_spi_simulate_read_length_slave + jam 0,mem_spi_simulate_read_length_slave_temp + jam 0,mem_spi_simulate_read_byte_slave_temp + rtn + +spi_simulate_read_byte_or_one: + fetch 1,mem_spi_simulate_read_byte_slave_temp + or_into 1,pdata + store 1,mem_spi_simulate_read_byte_slave_temp + rtn + + +/* +Brief: spi_simulate_write_byte_slave +Input: rega: write length; write buffer:mem_spi_simulate_write_byte_slave; +Output: None +Return: None +Brief: when the cs_gpio is low level,slave writes data to master at the falling edge of the sclk gpio +*/ +spi_simulate_write_byte_slave: + copy rega,pdata + store 1,mem_spi_simulate_write_length_slave + jam 0,mem_spi_simulate_write_length_slave_temp + jam 0,mem_spi_simulate_write_byte_slave_temp + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + nrtn true +spi_simulate_write_byte_slave1: + fetcht 1,mem_spi_simulate_write_length_slave_temp + setarg mem_spi_simulate_write_byte_slave + iadd temp,contr + copy contr,regb + increase 1,temp + storet 1,mem_spi_simulate_write_length_slave_temp + copy regb,contr + ifetch 1,contr + store 1,mem_spi_simulate_write_byte_slave_temp + + arg 8,loopcnt +spi_simulate_write_byte_slave_loop: + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + nbranch spi_simulate_write_byte_slave_end,true + fetcht 1, mem_spi_simulate_sclk_gpio + call gpio_get_bit + branch spi_simulate_write_byte_slave_loop,true +spi_simulate_write_byte_slave_loop1: + fetch 1,mem_spi_simulate_write_byte_slave_temp + store 1,mem_spi_simulate_write_byte_slave_temp_temp + and_into 0x80,pdata + beq 0x80,spi_simulate_set_miso_gpio_high + call spi_simulate_set_miso_gpio_low +spi_simulate_write_byte_slave_loop2: + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + nbranch spi_simulate_write_byte_slave_end,true + fetcht 1, mem_spi_simulate_sclk_gpio + call gpio_get_bit + nbranch spi_simulate_write_byte_slave_loop2,true + fetch 1,mem_spi_simulate_write_byte_slave_temp_temp + lshift pdata,pdata + store 1,mem_spi_simulate_write_byte_slave_temp + loop spi_simulate_write_byte_slave_loop + + fetch 1,mem_spi_simulate_write_length_slave + increase -1,pdata + store 1,mem_spi_simulate_write_length_slave + nbranch spi_simulate_write_byte_slave1,blank + +spi_simulate_write_byte_slave_loop3: + fetcht 1,mem_spi_simulate_cs_gpio + call gpio_get_bit + branch spi_simulate_write_byte_slave_loop3,true +spi_simulate_write_byte_slave_end: + jam 0,mem_spi_simulate_write_length_slave_temp + jam 0,mem_spi_simulate_write_byte_slave_temp + jam 0,mem_spi_simulate_write_byte_slave_temp_temp + rtn + +spi_simulate_set_miso_gpio_high: + fetcht 1,mem_spi_simulate_miso_gpio + call gpio_out_inactive + branch spi_simulate_write_byte_slave_loop2 +spi_simulate_set_miso_gpio_low: + fetcht 1,mem_spi_simulate_miso_gpio + branch gpio_out_active + +/******************************simulate spi slave end**********************************/ + +endif //SPI_SIMULATE + + +/****************************************key scan***************************************/ +keyscan_key_init: + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_key_init_next: + rtn blank + copy pdata,loopcnt +// copy contr,rega + fetch 2,mem_keyscan_ptr + increase 3,pdata //mem_key_conf0_pin + copy pdata,rega +keyscan_key_init_lp1: + ifetcht 1, rega + call gpio_config_input + increase KEY_CONF_STRUCT_LEN,rega + loop keyscan_key_init_lp1 +keyscan_key_init_end: + rtn + +keyscan_scan_key: + fetch 2,mem_keyscan_ptr + increase 3,pdata //mem_key_conf0_pin + copy pdata,rega +// arg mem_key_conf0_pin,rega + force 0,regb + jam 0,mem_key_value_temp +keyscan_scan_key_lp1: + ifetcht 1, rega + call gpio_get_bit + bpatchx patch34_1,mem_patch34 + fetch 2, mem_key_value_temp + copy regb,queue + qsetflag true,pdata + store 2, mem_key_value_temp + increase KEY_CONF_STRUCT_LEN,rega + increase 1,regb + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_scan_key_lp1_next: + ixor regb,null + nbranch keyscan_scan_key_lp1,zero + fetch 2,mem_key_value_temp + fetcht 2,mem_key_value + ixor temp,null + rtn zero + enable user + rtn + +keyscan_process_lpm_before: + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_process_lpm_before_next: + rtn blank + copy pdata,loopcnt + fetch 2,mem_keyscan_ptr + increase 3,pdata //mem_key_conf0_pin + copy pdata,rega +keyscan_process_lpm_before_lp1: + ifetcht 1, rega + call gpio_set_wake_by_current_state + increase KEY_CONF_STRUCT_LEN,rega + loop keyscan_process_lpm_before_lp1 +keyscan_process_lpm_before_end: + rtn + +keyscan_key_process: + arg key_scan_timer,queue + call timer_check + nrtn blank + setarg 0x20 + arg key_scan_timer,queue + call timer_init + disable user + call keyscan_process_lpm_before + bpatchx patch34_2,mem_patch34 + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_key_process_next: + rtn blank + call keyscan_scan_key + nbranch lpm_button_clean_wake_lock,user + call lpm_button_get_wake_lock + disable user + fetch 2, mem_key_value_temp + store 2,mem_key_value_temp4 + jam 0,mem_key_value_temp6 + force 0,queue +keyscan_key_lp1: + fetch 2, mem_key_value + rshift pdata,temp + storet 2,mem_key_value + and pdata,0x01,pdata + fetcht 2, mem_key_value_temp4 + and temp,0x01,rega + rshift temp,temp + storet 2,mem_key_value_temp4 + ixor rega,null + ncall keyscan_send_key_data,zero + fetch 2,mem_key_num_ptr + ifetch 1,pdata +keyscan_key_lp1_next: + fetcht 1, mem_key_value_temp6 + increase 1,temp + storet 1, mem_key_value_temp6 + copy temp,queue + ixor queue,null + nbranch keyscan_key_lp1,zero + fetch 2,mem_key_value_temp + store 2, mem_key_value + rtn +keyscan_send_key_data: + bpatchx patch34_3,mem_patch34 + fetch 2,mem_keyscan_ptr + increase 1,pdata + ifetch 2,pdata + branch callback_func + + +/*************************************pwm*************************************/ + +//rega:clk select(0:system clk; 1:system clk undivied; 2:lpo) +/*rega:clk select + 0x00:select system clock 12M; + 0x40:select undivied system clock 24M/48M; + 0x80:select lpo clock:33K +*/ +pwm_init: + hfetch 1,core_clksel + ior rega,pdata + hstore 1,core_clksel + hfetch 2,core_clkoff + set0 CLOCK_OFF_PWM,pdata + hstore 2,core_clkoff + nop 100 + rtn + +/* typedef struct +* { +* uint8 gpio_num +* uint8 pwm_channel +* uint24 frequency +* uint8 duty_cycle //0-100 +* }PWM_Style; + addr: mem_pdatatemp +*/ +pwm_out_set: + fetcht 3,mem_pdatatemp+2 + setarg PWM_12MHZ + idiv temp + call wait_div_end + quotient temp + fetch 1,mem_pdatatemp+5 + imul32 temp,pdata + div pdata,100 + call wait_div_end + quotient rega + copy temp,pdata + isub rega,regb + fetch 1,mem_pdatatemp+1 + call pwm_duty_cycle_set + fetch 1,mem_pdatatemp + branch pwm_enable + +//rega:pcnt ;regb:ncnt ;pdata:pwm channel select +pwm_duty_cycle_set: + beq 0,pwm_pwm0_duty_set + beq 1,pwm_pwm1_duty_set + beq 2,pwm_pwm2_duty_set + beq 3,pwm_pwm3_duty_set + beq 4,pwm_pwm4_duty_set + beq 5,pwm_pwm5_duty_set +pwm_pwm0_duty_set: + arg core_pwm_pcnt0,contw + branch pwm_set_pncnt +pwm_pwm1_duty_set: + arg core_pwm_pcnt1,contw + branch pwm_set_pncnt +pwm_pwm2_duty_set: + arg core_pwm_pcnt2,contw + branch pwm_set_pncnt +pwm_pwm3_duty_set: + arg core_pwm_pcnt3,contw + branch pwm_set_pncnt +pwm_pwm4_duty_set: + arg core_pwm_pcnt4,contw + branch pwm_set_pncnt +pwm_pwm5_duty_set: + arg core_pwm_pcnt5,contw + branch pwm_set_pncnt +pwm_set_pncnt: + copy rega,pdata + istore 2,contw + copy regb,pdata + istore 2,contw + rtn + + +//pdata:gpio select +pwm_enable: + enable user + branch pwm_gpio_set +pwm_disable: + disable user +pwm_gpio_set: + beq 4,pwm_gpio4_set + beq 5,pwm_gpio5_set + beq 27,pwm_gpio27_set + beq 28,pwm_gpio28_set + beq 3,pwm_gpio3_set + beq 8,pwm_gpio8_set + beq 20,pwm_gpio20_set + beq 21,pwm_gpio21_set + beq 22,pwm_gpio22_set + beq 23,pwm_gpio23_set + rtn + + +pwm_gpio4_set: //pwm 0 + arg 6,queue + branch pwm_one_set_select +pwm_gpio5_set: //pwm 1 + arg 7,queue + branch pwm_one_set_select +pwm_gpio27_set: //pwm 2 + arg 8,queue + branch pwm_one_set_select +pwm_gpio28_set: //pwm 3 + arg 9,queue + branch pwm_one_set_select +pwm_gpio3_set: //pwm 4 + arg 10,queue + branch pwm_one_set_select +pwm_gpio8_set: //pwm 5 + arg 11,queue + branch pwm_one_set_select +pwm_gpio20_set: //pwm 0 + arg 12,queue + branch pwm_tw0_set_select +pwm_gpio21_set: //pwm 1 + arg 13,queue + branch pwm_tw0_set_select +pwm_gpio22_set: //pwm 2 + arg 14,queue + branch pwm_tw0_set_select +pwm_gpio23_set: //pwm 3 + arg 15,queue + branch pwm_tw0_set_select + +pwm_set_select: + hfetch 2,core_gpio_sel1 + qsetflag user,pdata + hstore 2,core_gpio_sel1 + copy rega,queue + hfetch 1,core_gpio_key2 + qsetflag user,pdata + hstore 1,core_gpio_key2 + rtn + +pwm_one_set_select: + add queue,-4,rega + branch pwm_set_select + +pwm_tw0_set_select: + add queue,-10,rega + branch pwm_set_select + + + Index: 1066_OTP_FLASH/program/rfcomm.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/rfcomm.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/rfcomm.prog (working copy) @@ -0,0 +1,960 @@ + +ifdef COMPILE_RFCOMM +rfcomm_init: + rtn wake + jam 0,mem_rfcomm_send_more_pkt + jam BITS9600,memRemoteRPNBitRate + jam DATABITS8,memRemotePRNDataBits + jam 0x11,memRemotePRNXon + jam 0x13,memRemotePRNXoff + setarg 0 + store 3,memRemotePRNStopBit + store 1,mem_spp_state + jam 0,memui_reconnect_mode + //branch rfcomm_init_spp +rfcomm_init_spp: + bpatchx patch34_4,mem_patch34 + setarg 0 + store 1,mem_spp_state + store 1,mem_remote_spp_channel + store 1,mem_pn_dlci + fetch 1,mem_credit_flag + beq CREDIT_ENABLE,rfcomm_init_spp_with_credit + jam 0x50,mem_credit_given + rtn + +rfcomm_init_spp_with_credit: + jam 0x00,mem_credit_given + rtn + +set_CR_bit: + or_into 0x02,temp + rtn + + +/*below added by koufan*/ + +/*rfcomm_send */ + + + + /*rfcomm_calculate_FCS_sabm*/ + /*input: address in temp*/ + /*output: FCS in pdata */ +rfcomm_calculate_FCS_sabm: + copy temp,pdata + reverse pdata,pdata //address + store 1,memFCStemp3 + force INI_TX_SABM,pdata + reverse pdata,pdata + store 1,memFCStemp2 + force 0x01,pdata + reverse pdata,pdata + store 1,memFCStemp1 + call caculate_fcs + copy temp,pdata + rtn +rfcomm_calculate_FCS_ua: + reverse pdata,pdata //address + store 1,memFCStemp3 + force RSP_TX_UA, pdata + reverse pdata, pdata + store 1, memFCStemp2 + force 0x01, pdata + reverse pdata, pdata + store 1, memFCStemp1 + branch caculate_fcs + /* FCS return from temp */ +rfcomm_calculate_FCS_dlci0: + fetch 1,mem_rfcomm_initiator + branch rfcomm_calculate_FCS_dlci0_res,blank + setarg 0x70 //FCS of initiator + rtn +rfcomm_calculate_FCS_dlci0_res: + setarg 0xaa//FCS of responder + rtn + +rfcomm_save_FCS_uih: + reverse pdata, pdata //address + store 1,memFCStemp3 /* contw distroided */ + force RSP_RX_UIH,pdata + call caculate_UIHdata_fcs + fetcht 2,mem_contw_temp + copy temp,contw + istore 1,contw /* save FCS for later use */ + copy contw,temp + storet 2,mem_contw_temp + force RSP_RX_UIH_WDATA,pdata /* P/F =1 + RSP_RX_UIH */ + call caculate_UIHdata_fcs + fetcht 2,mem_contw_temp + copy temp,contw + istore 1,contw /* save FCS for later use */ + rtn +/**********************************************************************/ +/* This subroutine caculates the FCS for UIH data */ +/* Input: */ +/* the address byte at memFCStemp3(bit reversed), control byte */ +/* at pdata (not bit reversed) */ +/* Output: */ +/* pdata: the FCS */ +/**********************************************************************/ +caculate_UIHdata_fcs: + reverse pdata,pdata + store 1,memFCStemp2 + fetch 2, memFCStemp2 + lshift8 pdata,pdata + store 3,mem_mod2div_temp + arg 0x107,regA + arg 0xf,regB + call mod2div + xor_into 0xd7, pdata + invert pdata,pdata + reverse pdata,pdata + rtn + +/**********************************************************************/ +/* This subroutine caculates the FCS */ +/* Input: */ +/* the address byte at memFCStemp3, control byte at memFCStemp2*/ +/* lenght at memFCStemp1 (all above data are bit reversed) */ +/* Output: */ +/* temp: the FCS */ +/**********************************************************************/ +caculate_fcs: + fetch 3, memFCStemp1 /* load 3 bytes start at memFCStemp1 */ + store 3,mem_mod2div_temp + arg 0x107,regA + arg 0xf,regB //24bit(memFCStemp1+..+memFCStemp3) - 9bit(regA) = 15bit + call mod2div + lshift8 pdata,pdata + arg 0x7, regB //16bit(lshift8 pdata,pdata ) - 9bit(regA) = 7bit + call mod2div + xor_into 0x2b, pdata //0x3d + invert pdata, pdata + reverse pdata, pdata /* FCS at pdata */ + copy pdata, temp + rtn + +mod2div: + arg 0,regC + copy regB,loopcnt + call right_shift_n // right shift pdata (regB)bit + icopy temp +mod2div_loop: + //jam 1,0x1fff +//mod2div_loop1: + //fetch 1,0x1fff + //nbranch mod2div_loop1,blank + copy temp,pdata + lshift regC,regC//quotient + bbit0 8, mod2div_not_enough_reduction//the high bit of 0x107 + ixor regA,temp// temp----remainer + increase 1,regC// quotient +mod2div_not_enough_reduction: //Minuend smaller than Subtrahend + lshift temp,temp + fetch 3,mem_mod2div_temp + increase -1,regB + compare 0xff,regB,0xff + branch mod2div_end,true + copy regB,loopcnt + call right_shift_n // right shift pdata (regB)bit + isolate1 0,pdata + setflag true,0,temp //move a new bit from Dividend(queue) into Minuend(pdata) + branch mod2div_loop +mod2div_end: + //output:remainer in pdata + rshift temp,pdata + rtn + +get_rfcomm_snd_adss: + fetcht 1,mem_pn_dlci +dlci_to_address_cmd: + //input DLCI from temp + lshift2 temp,temp + set1 RFCOMM_ADDRESS_EXT_LEN,temp + fetch 1,mem_rfcomm_initiator + ncall set_CR_bit,blank + storet 1,mem_rfcomm_send_adss + rtn + +channel_to_dlci: + //input channel from temp + lshift temp,temp + fetch 1,mem_rfcomm_initiator + setflag blank,0,temp //direction in dlci + //output dlci to temp + rtn +rfcomm_rx_process_DLCI0_sabm: + fetcht 1,mem_current_channel //address + jam 0xd7,mem_current_fcs //FCS + call rfcomm_send_ua + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata + set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata + store 1,mem_rfcomm_state + jam 0,mem_rfcomm_initiator + branch rfcomm_rx_process_end +rfcomm_rx_process_DLCI0_ua: + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata + store 1,mem_rfcomm_state + branch rfcomm_rx_process_end + + +rfcomm_rx_process: + bpatchx patch34_5,mem_patch34 + fetch 1,memui_reconnect_mode + beq NO_RECONNECTION,rfcomm_rx_process_remote_page + branch rfcomm_rx_process_reconn + +rfcomm_rx_process_remote_page: + fetch 2,mem_l2cap_payload_ptr + copy pdata,contr + call get_rfcomm_head_struct + fetch 1,mem_current_channel + beq 0,parse_dlci0_rp + branch parse_uih_rp +parse_dlci0_rp: + bpatchx patch34_6,mem_patch34 + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm + beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua + beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_rp_uih + beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn_send_event + rtn + + +parse_DLCI0_rp_uih: + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + call get_rfcomm_uih_head_struct + fetch 1,mem_uih_cmd_type + beq UIH_PARAM_NEG_CMD,parse_DLCI0_rp_uih_pn_cmd + beq UIH_PARAM_NEG_RES,parse_DLCI0_rp_uih_pn_res + beq UIH_MODEM_STATUS_CMD,parse_DLCI0_rp_uih_ms_cmd + beq UIH_MODEM_STATUS_RES,parse_DLCI0_rp_uih_ms_res + beq UIH_PARAM_CMD_REMOVE_PORT,parse_DLCI0_rp_uih_cmd_port + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_pn_cmd: + call parse_DLCI0_rp_uih_pn_res_common + + branch parse_DLCI0_rp_uih_pn_cmd_spp + +parse_DLCI0_rp_uih_pn_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_PN_CMD,pdata + set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata + store 1,mem_spp_state + call rfcomm_send_param_neg_res + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_pn_res: + call parse_DLCI0_rp_uih_pn_res_common + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_pn_res_common: + call get_param_payload_ptr + branch get_rfcomm_prarmer_negotiation + +get_rfcomm_param_modem_status: + call get_param_payload_ptr + ifetch 1,contr + rshift3 pdata,pdata + store 1,mem_ms_channel + ifetch 1,contr + store 1,mem_ms_param + rtn + + +get_rfcomm_head_struct: + ifetch 1,contr + store 1,mem_current_adss + rshift3 pdata,pdata + store 1,mem_current_channel + ifetch 1,contr + store 1,mem_current_frame_type +get_rfcomm_current_length: + call get_rfcomm_length_common + storet 2,mem_current_length + copy contr,pdata + store 2,mem_rfcomm_uih_payload_ptr + rtn + +get_rfcomm_uih_head_struct: + ifetch 1,contr + rshift pdata,pdata + store 1,mem_uih_cmd_type + call get_rfcomm_length_common + storet 2,mem_uih_length + copy contr,pdata + store 2,mem_param_payload_ptr + rtn + + +get_param_payload_ptr: + fetch 2,mem_param_payload_ptr + copy pdata,contr + rtn + +get_rfcomm_length_common: + ifetch 1,contr + copy pdata,temp + rshift temp,temp + rtnbit1 0 + ifetch 1,contr + lshift3 pdata,pdata + lshift4 pdata,pdata + iadd temp,temp + rtn + +get_rfcomm_prarmer_negotiation: + ifetch 1,contr + store 1,mem_pn_dlci + ifetch 1,contr + store 1,mem_pn_credit_flow_type_info + ifetch 1,contr + store 1,mem_pn_priority + ifetch 1,contr + store 1,mem_pn_acknowledg_timer + ifetch 2,contr + store 2,mem_pn_max_frame_size + ifetch 1,contr + store 1,mem_pn_max_retrans + ifetch 1,contr + store 1,mem_remote_credits + rtn + + +parse_DLCI0_rp_uih_ms_cmd: + call get_rfcomm_param_modem_status + + branch parse_DLCI0_rp_uih_ms_cmd_spp + +parse_DLCI0_rp_uih_ms_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata + set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata + store 1,mem_spp_state + fetcht 1,mem_pn_dlci + lshift2 temp,temp + or_into 3,temp + call rfcomm_send_modem_status_res + jam MORE_PKT_MSC_CMD_SPP,mem_rfcomm_send_more_pkt + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_ms_res: + jam BT_EVT_SPP_CONNECTED,mem_fifo_temp + call ui_ipc_send_event + call get_rfcomm_param_modem_status + fetch 1,mem_ms_channel + sub pdata,1,null + branch parse_DLCI0_rp_uih_MS_RES_spp,zero + branch assert +parse_DLCI0_rp_uih_ms_res_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end + +parse_DLCI0_rp_uih_cmd_port: + call get_param_payload_ptr + ifetch 1,contr + store 1,mem_rpn_dlci + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x000e + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + //setarg 5 + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch34_7,mem_patch34 + setarg 0x15ef + istore 2,contw + setarg 0x1191 + istore 2,contw + //fetch 1,mem_pn_dlci + //setarg 0x0b + fetch 1,mem_rpn_dlci + istore 1,contw //DLCI + setarg 0x000007 + istore 5,contw +// setarg 0 //max frame size +// istore 2,contw + setarg 0x01 //max retrans + istore 2,contw +// setarg 0x00 +// istore 1,contw // init credits + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn + + + +parse_uih_rp: + branch parse_uih_rp_spp + +parse_uih_rp_spp: + bpatchx patch35_0,mem_patch35 + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_UA,parse_uih_rp_spp_ua + beq RFCOMM_FRAME_TYPE_SABM,parse_uih_rp_spp_sabm + beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih + beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits + beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn + rtn +parse_uih_rp_spp_ua: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_UA,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end +parse_uih_rp_spp_sabm: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_UA,pdata + set1 RFCOMM_CHANNEL_STATE_SABM,pdata + store 1,mem_spp_state + fetch 1,mem_current_adss + call rfcomm_calculate_FCS_ua + store 1,mem_current_fcs + call rfcomm_send_ua + fetch 1,mem_current_adss + rshift2 pdata,pdata + store 1,mem_pn_dlci + lshift2 pdata,pdata + set0 RFCOMM_ADDRESS_CR,pdata + set1 RFCOMM_ADDRESS_EXT_LEN,pdata + arg mem_HIUfcs_spp,temp // mem_HIUfcs_HF_WCredits in regB++ + storet 2,mem_contw_temp + call rfcomm_save_FCS_uih + branch rfcomm_rx_process_end + +parse_uih_spp_uih_credits: + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + increase 1,pdata + store 2,mem_rfcomm_uih_payload_ptr + ifetch 1,contr //remote credits + fetcht 1,mem_remote_credits + iadd temp,pdata + store 1,mem_remote_credits +parse_uih_spp_uih: + call rfcomm_increase_credit_given +parse_uih_spp_uih_cont: + call get_rfcomm_snd_adss + call rfcomm_send_uih_without_payload + call spp_process_rx_data + branch rfcomm_rx_process_end + +parse_uih_rp_spp_disconn_send_event: + jam BT_EVT_SPP_DISCONNECTED,mem_fifo_temp + call ui_ipc_send_event +parse_uih_rp_spp_disconn: + call rfcomm_init_spp + fetch 1,mem_current_adss + call rfcomm_calculate_FCS_ua + store 1,mem_current_fcs + call rfcomm_send_ua + branch rfcomm_rx_process_end + +/////////////////////////////////////////// +/////////////////////////////////////////// +/////////////////////////////////////////// +rfcomm_rx_process_reconn: + fetch 2,mem_l2cap_payload_ptr + copy pdata,contr + call get_rfcomm_head_struct + fetch 1,mem_current_channel + beq 0,parse_DLCI0_reconn + branch parse_uih_reconn + +parse_DLCI0_reconn: + bpatchx patch35_1,mem_patch35 + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm + beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua + beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_reconn_uih + branch rfcomm_rx_process_end +parse_DLCI0_reconn_uih: + fetch 2,mem_rfcomm_uih_payload_ptr + copy pdata,contr + call get_rfcomm_uih_head_struct + fetch 1,mem_uih_cmd_type + beq UIH_PARAM_NEG_CMD,parse_DLCI0_reconn_uih_pn_cmd + beq UIH_PARAM_NEG_RES,parse_DLCI0_reconn_uih_pn_cmd + beq UIH_MODEM_STATUS_CMD,parse_DLCI0_reconn_uih_ms_cmd + beq UIH_MODEM_STATUS_RES,parse_DLCI0_reconn_uih_ms_res + branch rfcomm_rx_process_end + +parse_DLCI0_reconn_uih_pn_cmd: + call parse_DLCI0_rp_uih_pn_res_common + fetch 1,mem_pn_dlci + rshift pdata,pdata + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_DLCI0_reconn_uih_pn_cmd_spp,zero + branch assert +parse_DLCI0_reconn_uih_pn_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end + +parse_DLCI0_reconn_uih_ms_cmd: + call get_rfcomm_param_modem_status + fetch 1,mem_ms_channel + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_DLCI0_reconn_uih_ms_cmd_spp,zero + branch assert + branch rfcomm_rx_process_end +parse_DLCI0_reconn_uih_ms_cmd_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata + set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata + store 1,mem_spp_state + fetcht 1,mem_pn_dlci + lshift2 temp,temp + or_into 3,temp + call rfcomm_send_modem_status_res + branch rfcomm_rx_process_end + +parse_DLCI0_reconn_uih_ms_res: + call get_rfcomm_param_modem_status + fetch 1,mem_ms_channel + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_DLCI0_reconn_uih_ms_res_spp,zero + branch assert +parse_DLCI0_reconn_uih_ms_res_spp: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end + +parse_uih_reconn: + fetch 1,mem_current_channel + fetcht 1,mem_remote_spp_channel + isub temp,null + branch parse_uih_reconn_spp,zero + branch assert + branch rfcomm_rx_process_end + +parse_uih_reconn_spp: + fetch 1,mem_current_frame_type + beq RFCOMM_FRAME_TYPE_UA,parse_uih_reconn_spp_ua + beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih + beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits + beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_reconn_spp_disconn +parse_uih_reconn_spp_ua: + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_UA,pdata + store 1,mem_spp_state + branch rfcomm_rx_process_end +parse_uih_reconn_spp_sabm: + branch parse_uih_reconn_spp_sabm//loop +parse_uih_reconn_spp_disconn: + branch parse_uih_rp_spp_disconn +rfcomm_rx_process_end: + rtn + +rfcomm_send_more_pkt: + fetch 1,mem_rfcomm_send_more_pkt + rtn blank + beq MORE_PKT_MSC_CMD_SPP,rfcomm_send_more_pkt_msc_cmd_spp + branch assert + +rfcomm_send_more_pkt_msc_cmd_spp: + jam 0,mem_rfcomm_send_more_pkt + call l2cap_malloc_rfcomm_channel + arg SPP_SLAVE_CHANNEL,temp + fetcht 1,mem_pn_dlci + lshift2 temp,temp +rfcomm_send_more_pkt_msc_cmd_spp0: + or_into 0x03,temp + arg 0xaa,regA + call rfcomm_send_modem_status_cmd + call l2cap_get_rfcomm_tx_buff + copy contw,contr + ifetch 2, contr + branch assert,blank + rtn + +rfcomm_send_sabm: + call l2cap_get_rfcomm_tx_buff + setarg 0x0004 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_current_adss + istore 1,contw //address + bpatchx patch35_2,mem_patch35 + setarg 0x013f + istore 2,contw + fetch 1,mem_current_fcs + istore 1,contw + rtn +rfcomm_send_ua: + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x0004 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_current_adss + istore 1,contw //address + bpatchx patch35_3,mem_patch35 + setarg 0x0173 + istore 2,contw + fetch 1,mem_current_fcs + istore 1,contw + rtn +rfcomm_send_param_neg_cmd: + call l2cap_get_rfcomm_tx_buff + setarg 0x000e + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_4,mem_patch35 + setarg 0x15ef + istore 2,contw + setarg 0x1183 + istore 2,contw + copy temp,pdata //DLCI in temp + istore 1,contw + setarg 0x0000f0 + istore 3,contw + setarg RFCOMM_MAX_FRAME_SIZE + istore 2,contw + setarg 0 + istore 1,contw + setarg 0x01 //change here later + istore 1,contw + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + jam 0x10,mem_credit_given + rtn +rfcomm_send_param_neg_res: + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x000e + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_5,mem_patch35 + setarg 0x15ef + istore 2,contw + setarg 0x1181 + istore 2,contw + fetch 1,mem_pn_dlci + istore 1,contw //DLCI + setarg 0x0000e0 + istore 3,contw + fetch 2,mem_rfcomm_max_frame_size + istore 2,contw + setarg 0x00 //max retrans + istore 1,contw + fetch 1,mem_rfcomm_credit_init_data + istore 1,contw // init credits + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn +rfcomm_send_modem_status_cmd: + call l2cap_get_rfcomm_tx_buff + setarg 0x0008 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_6,mem_patch35 + setarg 0x09ef + istore 2,contw + setarg 0x05e3 + istore 2,contw + copy temp,pdata //DLCI adress + istore 1,contw + setarg 0x8d + istore 1,contw + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn + +rfcomm_send_modem_status_res: + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x0008 + istore 2,contw //l2cap len + fetch 2,mem_rfcomm_remote_cid + istore 2,contw//cid + copy temp,timeup + fetch 1,mem_rfcomm_initiator + lshift pdata,pdata + set1 0,pdata //ext len + istore 1,contw //DLCI0 address + bpatchx patch35_7,mem_patch35 + setarg 0x09ef + istore 2,contw + setarg 0x05e1 + istore 2,contw + copy timeup,pdata //DLCI address in temp + istore 1,contw + setarg 0x8d + istore 1,contw + call rfcomm_calculate_FCS_dlci0 + istore 1,contw + rtn + +rfcomm_send_uih_without_payload: + bpatchx patch36_0,mem_patch36 + fetch 1,mem_credit_given + rtn blank + hfetch 2,core_uart_rxitems + nrtn blank + copy rega,pdata + store 1,mem_pdatatemp+1 + storet 1,mem_pdatatemp + call l2cap_malloc_is_fifo_full + nrtn blank + call l2cap_malloc_rfcomm_channel + call l2cap_get_rfcomm_tx_buff + setarg 0x05 + istore 2,contw + fetch 2,mem_RFCOMM_remote_CID + istore 2,contw + fetch 1,mem_rfcomm_send_adss + istore 1,contw + setarg 0x01ff + istore 2,contw + fetch 1,mem_credit_given + istore 1,contw + fetch 1,mem_HIUfcs_SPP_WCredits + istore 1,contw + jam 0,mem_credit_given + rtn + +rfcomm_increase_credit_given: + bpatchx patch36_1,mem_patch36 + fetch 1,mem_credit_flag + rtneq CREDIT_ENABLE + fetch 2,mem_current_length + rtn blank + fetch 1,mem_credit_given + increase 1,pdata + store 1,mem_credit_given + rtn + +spp_process_rx_data: + fetch 2,mem_cb_receive_spp_data + branch callback_func + +spp_tx_rfcomm_packet: + bpatchx patch36_2,mem_patch36 + //credit + fetch 1,mem_remote_credits + rtn blank + increase -1,pdata + store 1,mem_remote_credits + fetch 2,mem_pn_max_frame_size + fetcht 2,mem_current_packet_length + isub temp,null + branch ssp_tx_rfcomm_from_uart,positive + store 2,mem_current_packet_length +ssp_tx_rfcomm_from_uart: + fetch 1,mem_credit_given + branch ssp_tx_rfcomm_from_uart_without_credit,blank + jam 1,mem_rfcomm_send_offset + fetch 1,mem_HIUfcs_SPP_WCredits + store 1,mem_rfcomm_send_fcs + setarg RSP_RX_UIH_WDATA + store 1,mem_rfcomm_send_frame_type + branch ssp_tx_rfcomm_from_uart_common +ssp_tx_rfcomm_from_uart_without_credit: + jam 0,mem_rfcomm_send_offset + fetch 1,mem_HIUfcs_SPP + store 1,mem_rfcomm_send_fcs + setarg RSP_TX_UIH + store 1,mem_rfcomm_send_frame_type +ssp_tx_rfcomm_from_uart_common: + bpatchx patch36_3,mem_patch36 + fetch 2,mem_current_packet_length + sub pdata,127,null + branch ssp_tx_rfcomm_from_uart_common0,positive + fetch 1,mem_rfcomm_send_offset + increase 1,pdata + store 1,mem_rfcomm_send_offset +ssp_tx_rfcomm_from_uart_common0: + call get_rfcomm_snd_adss + fetch 2,mem_current_packet_length + increase 8,pdata //fcs + rfcommhead + l2caphead == 8 + fetcht 1,mem_rfcomm_send_offset + iadd temp,rega + //rfcomm payload + call l2cap_malloc + store 2,mem_rfcomm_tx_buff_ptr + increase 4,pdata + store 2,mem_rfcomm_tx_payload_ptr + copy pdata,contw + fetch 1,mem_rfcomm_send_adss + istore 1,contw + fetch 1,mem_rfcomm_send_frame_type + istore 1,contw + call ssp_tx_write_length + call ssp_tx_write_given_credit + bpatchx patch36_4,mem_patch36 + fetch 2,mem_nl_rx_data_src //src + copy pdata,contru + fetch 2,mem_current_packet_length + copy pdata,loopcnt + call uart_copy_rx_bytes_fast + copy contw,temp + copy contru,pdata + store 2,mem_nl_rx_data_src + copy temp,contw + fetch 1,mem_rfcomm_send_fcs + istore 1,contw + fetch 2,mem_rfcomm_tx_buff_ptr + copy pdata,contw + fetch 2,mem_current_packet_length + fetcht 1,mem_rfcomm_send_offset + iadd temp,pdata + increase 4,pdata + istore 2,contw + fetch 2,mem_rfcomm_remote_cid + istore 2,contw + jam 0,mem_credit_given //whatever mem_credit_given is set to 0 + fetch 2,mem_nl_rx_len_all + beq 0,module_hci_command_tx_spp_tx_complete + jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet + rtn + +ssp_tx_write_length: + bpatchx patch36_5,mem_patch36 + fetch 2,mem_current_packet_length + sub pdata,0x7f,null + nbranch ssp_tx_write_long_packet,positive + lshift pdata,pdata + set1 0,pdata + istore 1,contw + rtn +ssp_tx_write_long_packet: + fetch 2,mem_current_packet_length + rshift3 pdata,pdata + rshift4 pdata,temp + and_into 0x7f,pdata + lshift pdata,pdata + set0 0,pdata + istore 1,contw + istoret 1,contw + rtn +ssp_tx_write_given_credit: + fetch 1,mem_credit_given + rtn blank + istore 1,contw + rtn + + + + +else + +rfcomm_init: + rtn +rfcomm_init_spp: +set_CR_bit: +rfcomm_calculate_FCS_sabm: +rfcomm_calculate_FCS_ua: +rfcomm_calculate_FCS_dlci0: +rfcomm_calculate_FCS_dlci0_res: +rfcomm_save_FCS_uih: +caculate_UIHdata_fcs: +caculate_fcs: +mod2div: +mod2div_loop: +mod2div_not_enough_reduction: +mod2div_end: +get_rfcomm_snd_adss: +dlci_to_address_cmd: +dlci_to_address_res: +channel_to_dlci: +rfcomm_rx_process_DLCI0_sabm: +rfcomm_rx_process_DLCI0_ua: +rfcomm_rx_process: +rfcomm_rx_process_remote_page: +parse_dlci0_rp: +parse_DLCI0_rp_uih: +parse_DLCI0_rp_uih_pn_cmd: +parse_DLCI0_rp_uih_pn_cmd_spp: +parse_DLCI0_rp_uih_pn_res: +parse_DLCI0_rp_uih_pn_res_common: +get_rfcomm_param_modem_status: +get_rfcomm_head_struct: +get_rfcomm_current_length: +get_rfcomm_uih_head_struct: +get_param_payload_ptr: +get_rfcomm_param_length_common: +get_rfcomm_length_common: +get_rfcomm_prarmer_negotiation: +parse_DLCI0_rp_uih_ms_cmd: +parse_DLCI0_rp_uih_ms_cmd_spp: +parse_DLCI0_rp_uih_ms_res: +parse_DLCI0_rp_uih_ms_res_spp: +parse_uih_rp: +parse_uih_rp_spp: +parse_uih_rp_spp_ua: +parse_uih_rp_spp_sabm: +parse_uih_spp_uih_credits: +parse_uih_spp_uih: +parse_uih_spp_uih_cont: +parse_uih_rp_spp_disconn: +rfcomm_rx_process_reconn: + branch assert +parse_DLCI0_reconn: +parse_DLCI0_reconn_uih: +parse_DLCI0_reconn_uih_pn_cmd: +parse_DLCI0_reconn_uih_pn_cmd_spp: +parse_DLCI0_reconn_uih_ms_cmd: +parse_DLCI0_reconn_uih_ms_cmd_spp: +parse_DLCI0_reconn_uih_ms_res: +parse_DLCI0_reconn_uih_ms_res_noext: +parse_DLCI0_reconn_uih_ms_res_spp: +parse_uih_reconn: +parse_uih_reconn_spp: +parse_uih_reconn_spp_ua: +parse_uih_reconn_spp_sabm: +parse_uih_reconn_spp_disconn: +rfcomm_rx_process_end: +rfcomm_send_more_pkt: +rfcomm_send_more_pkt_msc_cmd_spp: +rfcomm_send_sabm: +rfcomm_send_ua: +rfcomm_send_param_neg_cmd: +rfcomm_send_param_neg_res: +rfcomm_send_modem_status_cmd: +rfcomm_send_modem_status_res: +rfcomm_send_uih_without_payload: +rfcomm_increase_credit_given: +spp_process_rx_data: +spp_tx_rfcomm_packet: +ssp_tx_rfcomm_from_uart: +ssp_tx_rfcomm_from_uart_without_credit: +ssp_tx_rfcomm_from_uart_common: +ssp_tx_rfcomm_from_uart_common0: +ssp_tx_write_length: +ssp_tx_write_long_packet: +ssp_tx_write_given_credit: + branch assert +endif Index: 1066_OTP_FLASH/program/scheduler.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/scheduler.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/scheduler.prog (working copy) @@ -0,0 +1,461 @@ +scheduler_process: + bpatchx patch36_6,mem_patch36 + call check_51cmd + call app_process_bb_event + call process_conn_sm +/* check the connection state sequence byte */ + bpatchx patch36_7,mem_patch36 +ifdef SIMPLE_PAIRING + call sp_calc_sequence + call simple_pairing_sequence + call master_simple_paring_sequence +endif +//return if it is hci mode. 'cause the following is host part. +//notify BB to tx a l2cap packet + call l2cap_malloc_is_fifo_full + nrtn blank + //for conn to MTK + call l2cap_call_proc_sigal_pending + call l2cap_malloc_is_fifo_full + nrtn blank + bpatchx patch37_0,mem_patch37 +//to generat a new l2cap packet + call process_upper_sm + call l2cap_send_config_req +ifdef COMPILE_RFCOMM + call rfcomm_send_more_pkt//use this function to send msc_cmd after msc_rep sent +endif +scheduler_process0: + call scheduler_tx_disconnect_hid //may not used + bpatchx patch37_1,mem_patch37 +// call l2cap_malloc_is_fifo_full +// nrtn blank + branch app_process_bt + +scheduler_tx_disconnect_hid: + fetch 1,mem_CONTROL_tasks + bbit1 L2CAP_DISCONNECT_INTERRUPT,L2CAP_disconnect_interrupt_req + bbit1 L2CAP_DISCONNECT_CONTROL,L2CAP_disconnect_control_req + rtn + +scheduler_tx_l2cap_pkt: + bpatchx patch37_2,mem_patch37 + call l2cap_malloc_is_fifo_empty + rtn blank //empty + fetch 1,mem_op + rtnbit1 op_txl2cap + call l2cap_malloc_fifo_out + store 2,mem_txptr + copy pdata,contr + ifetch 2,contr + increase 4,pdata + store 2,mem_tx_len + jam 6,mem_tx_lch//start pkt + bpatchx patch37_3,mem_patch37 + fetch 2,mem_l2cap_tx_multi_offset + branch scheduler_tx_l2cap_start_pkt,blank + fetch 1,mem_op + rtnbit0 op_pkt_comp + set0 op_pkt_comp,pdata + store 1,mem_op + jam 5,mem_tx_lch//continue pkt + fetcht 2,mem_l2cap_tx_multi_offset + fetch 2,mem_txptr + iadd temp,pdata + store 2,mem_txptr + fetch 2,mem_tx_len + isub temp,pdata + store 2,mem_tx_len +scheduler_tx_l2cap_start_pkt: + bpatchx patch37_4,mem_patch37 + fetch 2,mem_tx_len + branch assert,blank + arg l2cap_max_pkt_len,temp //max len of dh3 pkt + isub temp,pdata + nbranch scheduler_Tx_l2cap_last_pkt,positive + bpatchx patch37_5,mem_patch37 + storet 2,mem_tx_len //l2cap_max_pkt_len + fetch 2,mem_l2cap_tx_multi_offset + iadd temp,pdata + store 2,mem_l2cap_tx_multi_offset + branch scheduler_Tx_l2cap_pkt_end +scheduler_Tx_l2cap_last_pkt: + setarg 0 + store 2,mem_l2cap_tx_multi_offset +scheduler_Tx_l2cap_pkt_end: + fetch 1,mem_op + set1 op_txl2cap,pdata + store 1,mem_op + rtn + +scheduler_start_upper_sm: + fetch 1,mem_UI_profile_supported + bbit1 support_HID,scheduler_start_upper_sm_hid + jam UPPERSM_RECONN_SDP_CONN,mem_upper_sm_reconn + rtn +scheduler_start_upper_sm_hid: + jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn + rtn + +process_upper_sm: + fetch 1,memui_reconnect_mode + nbranch process_upper_sm_reconn,blank +process_upper_sm_remote_page: + fetch 1,mem_upper_sm_remote_page + //beq UPPERSM_RP_IDLE,process_upper_sm_rp_idle + rtn blank + //nothing to do when remote page to create a connection. + jam 0,mem_upper_sm_remote_page +process_upper_sm_rp_wait: + rtn + + +process_upper_sm_reconn: + bpatchx patch37_6,mem_patch37 + fetch 1,mem_upper_sm_reconn + rtn blank + beq UPPERSM_RECONN_SDP_CONN,process_upper_sm_reconn_sdp_conn + beq UPPERSM_RECONN_SDP_CONN_WAIT,process_upper_sm_reconn_sdp_conn_wait + beq UPPERSM_RECONN_SDP_CFG,process_upper_sm_reconn_sdp_cfg + beq UPPERSM_RECONN_SDP_CFG_WAIT,process_upper_sm_reconn_sdp_cfg_wait + beq UPPERSM_RECONN_SS_SPP,process_upper_sm_reconn_ss_spp + beq UPPERSM_RECONN_SS_SPP_WAIT,process_upper_sm_reconn_ss_spp_wait + beq UPPERSM_RECONN_SDP_DISCONN,process_upper_sm_reconn_sdp_disconn + beq UPPERSM_RECONN_SDP_DISCONN_WAIT,process_upper_sm_reconn_sdp_disconn_wait + beq UPPERSM_RECONN_HID_CTRL_CONN,process_upper_sm_reconn_hid_ctrl_conn + beq UPPERSM_RECONN_HID_CTRL_CONN_WAIT,process_upper_sm_reconn_hid_ctrl_conn_wait + beq UPPERSM_RECONN_HID_CTRL_CFG,process_upper_sm_reconn_hid_ctrl_cfg + beq UPPERSM_RECONN_HID_CTRL_CFG_WAIT,process_upper_sm_reconn_hid_ctrl_cfg_wait + beq UPPERSM_RECONN_HID_INT_CONN,process_upper_sm_reconn_hid_int_conn + beq UPPERSM_RECONN_HID_INT_CONN_WAIT,process_upper_sm_reconn_hid_int_conn_wait + beq UPPERSM_RECONN_HID_INT_CFG,process_upper_sm_reconn_hid_int_cfg + beq UPPERSM_RECONN_HID_INT_CFG_WAIT,process_upper_sm_reconn_hid_int_cfg_wait + beq UPPERSM_RECONN_RFCOMM_CONN,process_upper_sm_reconn_rfcomm_conn + beq UPPERSM_RECONN_RFCOMM_CONN_WAIT,process_upper_sm_reconn_rfcomm_conn_wait + beq UPPERSM_RECONN_RFCOMM_CFG,process_upper_sm_reconn_rfcomm_cfg + beq UPPERSM_RECONN_RFCOMM_CFG_WAIT,process_upper_sm_reconn_rfcomm_cfg_wait + beq UPPERSM_RECONN_RFCOMM_SABM,process_upper_sm_reconn_rfcomm_sabm + beq UPPERSM_RECONN_RFCOMM_SABM_WAIT,process_upper_sm_reconn_rfcomm_sabm_wait + beq UPPERSM_RECONN_SPP_CMD_PN,process_upper_sm_reconn_spp_cmd_pn + beq UPPERSM_RECONN_SPP_CMD_PN_WAIT,process_upper_sm_reconn_spp_cmd_pn_wait + beq UPPERSM_RECONN_SPP_SABM,process_upper_sm_reconn_spp_sabm + beq UPPERSM_RECONN_SPP_SABM_WAIT,process_upper_sm_reconn_spp_sabm_wait + beq UPPERSM_RECONN_SPP_CMD_MS,process_upper_sm_reconn_spp_cmd_ms + beq UPPERSM_RECONN_SPP_CMD_MS_WAIT,process_upper_sm_reconn_spp_cmd_ms_wait +process_upper_sm_reconn_wait: + rtn +process_upper_sm_reconn_sdp_conn: + call upper_sm_send_sdp_conn //return n-user if sending failed + jam UPPERSM_RECONN_SDP_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_sdp_state + rtn +process_upper_sm_reconn_sdp_cfg: + jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_sdp_state + rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ + jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn + call upper_sm_send_sdp_cfg //return n-user if sending failed + jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_sdp_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_sdp_state + rtn +process_upper_sm_reconn_ss_spp: + call l2cap_malloc_is_fifo_empty + nrtn blank + call upper_sm_send_ss_spp + jam UPPERSM_RECONN_SS_SPP_WAIT,mem_upper_sm_reconn + rtn +process_upper_sm_reconn_sdp_disconn: + call upper_sm_send_sdp_disconn + jam UPPERSM_RECONN_SDP_DISCONN_WAIT,mem_upper_sm_reconn + rtn +process_upper_sm_reconn_hid_ctrl_conn: + call upper_sm_send_hid_ctrl_conn + jam UPPERSM_RECONN_HID_CTRL_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_hid_control_state + rtn +process_upper_sm_reconn_hid_ctrl_cfg: + call upper_sm_send_hid_ctrl_cfg + jam UPPERSM_RECONN_HID_CTRL_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_control_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_control_state + rtn +process_upper_sm_reconn_hid_int_conn: + call upper_sm_send_hid_int_conn + jam UPPERSM_RECONN_HID_INT_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_hid_interrupt_state + rtn +process_upper_sm_reconn_hid_int_cfg: + call upper_sm_send_hid_int_cfg + jam UPPERSM_RECONN_HID_INT_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_hid_interrupt_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_hid_interrupt_state + rtn +process_upper_sm_reconn_rfcomm_conn: + call upper_sm_send_rfcomm_conn + jam UPPERSM_RECONN_RFCOMM_CONN_WAIT,mem_upper_sm_reconn + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata + store 1,mem_rfcomm_state + rtn +process_upper_sm_reconn_rfcomm_cfg: + call upper_sm_send_rfcomm_cfg + jam UPPERSM_RECONN_RFCOMM_CFG_WAIT,mem_upper_sm_reconn + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata + store 1,mem_rfcomm_state + rtn +process_upper_sm_reconn_rfcomm_sabm: + call upper_sm_send_rfcomm_sabm + jam UPPERSM_RECONN_RFCOMM_SABM_WAIT,mem_upper_sm_reconn + fetch 1,mem_rfcomm_state + set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata + store 1,mem_rfcomm_state + rtn +process_upper_sm_reconn_spp_cmd_pn: + call upper_sm_send_spp_cmd_pn + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_PN_CMD + store 1,mem_spp_state + jam UPPERSM_RECONN_SPP_CMD_PN_WAIT,mem_upper_sm_reconn + rtn +process_upper_sm_reconn_spp_sabm: + call upper_sm_send_spp_sabm + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_SABM + store 1,mem_spp_state + jam UPPERSM_RECONN_SPP_SABM_WAIT,mem_upper_sm_reconn + fetch 1,mem_remote_spp_channel //address in pdata + lshift3 pdata,pdata + or_into 3,pdata + arg mem_HIUfcs_SPP,temp // mem_HIUfcs_spp_WCredits in regB++ + storet 2,mem_contw_temp + branch rfcomm_save_FCS_uih +process_upper_sm_reconn_spp_cmd_ms: + call upper_sm_send_spp_cmd_ms + fetch 1,mem_spp_state + set1 RFCOMM_CHANNEL_STATE_SND_MS_CMD + store 1,mem_spp_state + jam UPPERSM_RECONN_SPP_CMD_MS_WAIT,mem_upper_sm_reconn + rtn + +process_upper_sm_reconn_sdp_conn_wait: + fetch 1,mem_sdp_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_sdp_cfg_wait: + fetch 1,mem_sdp_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + jam UPPERSM_RECONN_SS_SPP ,mem_upper_sm_reconn +process_upper_sm_reconn_ss_spp_wait: + fetch 1,mem_message_to_uppersm + rtnne RECIEVE_SS_REASULT_HF + jam 0,mem_message_to_uppersm + jam UPPERSM_RECONN_SDP_DISCONN,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_sdp_disconn_wait: + fetch 1,mem_sdp_state + nrtn blank + fetch 1,mem_UI_profile_supported + bbit1 support_HID,process_upper_sm_reconn_setup_hid + bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm + branch process_upper_sm_reconn_termination +process_upper_sm_reconn_hid_ctrl_conn_wait: + fetch 1,mem_hid_control_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_HID_CTRL_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_hid_ctrl_cfg_wait: + fetch 1,mem_hid_control_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + jam UPPERSM_RECONN_HID_INT_CONN,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_hid_int_conn_wait: + fetch 1,mem_hid_interrupt_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_HID_INT_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_hid_int_cfg_wait: + fetch 1,mem_hid_interrupt_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + fetch 1,mem_UI_profile_supported + bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm + branch process_upper_sm_reconn_termination +process_upper_sm_reconn_rfcomm_conn_wait: + fetch 1,mem_rfcomm_state + rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES + jam UPPERSM_RECONN_RFCOMM_CFG,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_rfcomm_cfg_wait: + fetch 1,mem_rfcomm_state + rtnne L2CAP_CHANNEL_SETUP_COMPLETE + jam UPPERSM_RECONN_RFCOMM_SABM,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_rfcomm_sabm_wait: + fetch 1,mem_rfcomm_state + rtnne L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED + fetch 1,mem_UI_profile_supported + bbit1 support_SPP,process_upper_sm_reconn_setup_spp + branch process_upper_sm_reconn_termination +process_upper_sm_reconn_spp_cmd_pn_wait: + fetch 1,mem_spp_state + rtnbit0 RFCOMM_CHANNEL_STATE_PN_RES + jam UPPERSM_RECONN_SPP_SABM,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_spp_sabm_wait: + fetch 1,mem_spp_state + rtnbit0 RFCOMM_CHANNEL_STATE_UA + jam UPPERSM_RECONN_SPP_CMD_MS ,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_spp_cmd_ms_wait: + fetch 1,mem_spp_state + rtnne RFCOMM_CHANNEL_SETUP_COMPLETE + branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_setup_hid: + jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn + branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_rfcomm: + jam UPPERSM_RECONN_RFCOMM_CONN,mem_upper_sm_reconn + branch process_upper_sm_reconn +process_upper_sm_reconn_setup_spp: + jam UPPERSM_RECONN_SPP_CMD_PN,mem_upper_sm_reconn + branch process_upper_sm_reconn + + + +process_upper_sm_reconn_termination: + jam 0,mem_upper_sm_reconn + rtn +upper_sm_send_sdp_conn: + bpatchx patch37_7,mem_patch37 + call l2cap_malloc_signal_channel + setarg PSM_SDP + copy pdata,temp + setarg L2CAP_SDP_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_sdp_cfg: + bpatchx patch38_0,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_SDP_remote_CID + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_sdp_disconn: + bpatchx patch38_1,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_SDP_remote_CID + copy pdata,temp + arg L2CAP_SDP_channel,timeup + call ML2CAP_send_signal_disconn_req + fetch 1,mem_sdp_state + set0 L2CAP_CHANNEL_STATE_RCV_CFG_RES ,pdata + store 1,mem_sdp_state + rtn +//service search +upper_sm_send_ss_spp: + bpatchx patch38_2,mem_patch38 + call l2cap_malloc_sdp_channel + call sdp_send_spp_request + branch MSDP_send_req_done + +upper_sm_send_rfcomm_conn: + bpatchx patch38_3,mem_patch38 + call l2cap_malloc_signal_channel + setarg PSM_RFCOMM + copy pdata,temp + setarg L2CAP_RFCOMM_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_rfcomm_cfg: + bpatchx patch38_4,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_rfcomm_remote_cid + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_hid_ctrl_conn: + bpatchx patch38_5,mem_patch38 + call l2cap_malloc_signal_channel + setarg PSM_HID_control + copy pdata,temp + setarg L2CAP_HID_Control_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_hid_ctrl_cfg: + bpatchx patch38_6,mem_patch38 + call l2cap_malloc_signal_channel + fetch 2,mem_hid_ctrl_remote_cid + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_hid_int_conn: + bpatchx patch38_7,mem_patch38 + call l2cap_malloc_signal_channel + setarg PSM_HID_interrupt + copy pdata,temp + setarg L2CAP_HID_interrupt_channel + copy pdata,timeup + branch ML2CAP_send_signal_connect_req + +upper_sm_send_hid_int_cfg: + bpatchx patch39_0,mem_patch39 + call l2cap_malloc_signal_channel + fetch 2,mem_hid_int_remote_cid + copy pdata,temp + branch ML2CAP_send_signal_config_req + +upper_sm_send_rfcomm_sabm: + bpatchx patch39_1,mem_patch39 + call l2cap_malloc_rfcomm_channel + //force 3,temp //address + jam 3,mem_current_adss + jam 0x1c,mem_current_fcs + call rfcomm_send_sabm + jam 1,mem_rfcomm_initiator + rtn + +upper_sm_send_spp_cmd_pn: + bpatchx patch39_2,mem_patch39 + call l2cap_malloc_rfcomm_channel + fetcht 1,mem_remote_spp_channel + call channel_to_dlci + storet 1,mem_pn_dlci + branch rfcomm_send_param_neg_cmd + +upper_sm_send_spp_sabm: + bpatchx patch39_3,mem_patch39 + call l2cap_malloc_rfcomm_channel + fetcht 1,mem_pn_dlci + call dlci_to_address_cmd + call rfcomm_calculate_FCS_sabm //sabm fcs use once only,not need to save + store 1,mem_current_fcs + fetcht 1,mem_pn_dlci + call dlci_to_address_cmd + storet 1,mem_current_adss + branch rfcomm_send_sabm + +upper_sm_send_spp_cmd_ms: + bpatchx patch39_4,mem_patch39 + call l2cap_malloc_rfcomm_channel + fetcht 1,mem_pn_dlci + call dlci_to_address_cmd //address in temp + branch rfcomm_send_modem_status_cmd + + + Index: 1066_OTP_FLASH/program/sdp.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/sdp.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/sdp.prog (working copy) @@ -0,0 +1,1206 @@ +/**********************************************************************/ +/* Subroutine: sdp_process */ +/* Process Service Discovery Request */ +/* Called from L2CAP, check PDUID, branch to different req processings*/ +/* */ +/* Input: mem_L2CAP_Rx_payload */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process: + bpatchx patch39_5,mem_patch39 + fetch 2,mem_l2cap_payload_ptr + iforce contr +// ifetchr regb,1,contr /* PDUID */ +// storer regb,1,mem_sdp_pduid + ifetch 1,contr + copy pdata,regb + store 1,mem_sdp_pduid + ifetch 2,contr + store 2,mem_sdp_transactionid /* save transaction id */ + ifetch 1,contr /* higher byte of parameter length */ + lshift8 pdata,timeup + ifetch 1,contr /* lower byte of parameter length */ + iadd timeup,timeup /* parameter length stored in "timeup" */ + bpatchx patch39_6,mem_patch39 + copy contr,temp + arg 4,loopcnt + arg mem_sdp_handle_list,contw + call memset0 + copy temp,contr + deposit regb /* PDUID */ + beq SDP_ERROR_RES,sdp_process_error_res + beq SDP_SEARCH_REQ,sdp_process_ss_req + beq SDP_SEARCH_RES,sdp_process_ss_res + beq SDP_ATTRIBUTE_REQ,sdp_process_sa_req + beq SDP_ATTRIBUTE_RES,sdp_process_sa_res + beq SDP_SEARCHATTRIB_REQ,sdp_process_ssa_req + beq SDP_SEARCHATTRIB_RES,sdp_process_ssa_res + branch sdp_insufficient_resource + +/**********************************************************************/ +/* ss_req */ +/* Processing Service Search Request */ +/* Call: ask_serviceclassid, empty_response */ +/* */ +/* Input: mem_L2CAP_Rx_payload pointer in contr */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process_ss_req: + bpatchx patch39_7,mem_patch39 + call ask_serviceclassid + compare 1,temp,0xff + branch ss_empty_rsp,true + compare 0xff,temp,0xff + branch sdp_invalid_request_syntax,true + + ifetch 2,contr /* max aservice record count */ + store 2,mem_sdp_record_maxcnt + increase -2,timeup + + increase -1,timeup /* continuation state 1 byte (0) */ + nbranch sdp_invalid_pdu_size,zero /* invalid pdu size */ + arg mem_sdp_uuid_search_ptr,timeup + ifetch 2,timeup + rtn blank + call search_all_uuid + call l2cap_get_sdp_tx_payload /* put the pointer to Tx buffer */ + force 3,pdata /* PDUID 3, Service Search Response */ + istore 1,contw + fetch 2,mem_sdp_transactionid /* write transaction id */ + istore 2,contw + lshift2 queue,pdata + add pdata,5,pdata + add pdata,5,regc + byteswap pdata,pdata + istore 2,contw /* write parLength */ + deposit queue + byteswap pdata,pdata + istore 2,contw /* write TotSrvRecCount */ + istore 2,contw /* write CurSrvRecCount */ + arg mem_sdp_handle_list,contr + copy queue,loopcnt + branch ss_req_blank,zero +ss_req_loop: + ifetch 4,contr + istore 4,contw + loop ss_req_loop +ss_req_blank: + force 0,pdata + istore 1,contw /* continuation state */ + deposit regc + store 2,mem_sdp_tx_pkt_length +// branch assert,blank + rtn + +/**********************************************************************/ +/* sa_req */ +/* Processing Service Attribute Request */ +/* Call: ask_attributeid, empty_response (if 3 stored attr. */ +/* not asked) or answer_attributelist */ +/* Input: mem_L2CAP_Rx_payload pointer in contr */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process_sa_req: + bpatchx patch3a_0,mem_patch3a + ifetch 4,contr /* service record handle */ + store 4,mem_sdp_record_handle + increase -4,timeup + call sdp_store_maxbyte + store 2,mem_sdp_attribute_maxbyte + increase -2,timeup + call dataelementtype6 /* result: data size stored in rega */ + branch sdp_invalid_request_syntax,zero + compare 5,rega,0xff // length + //branch sa_req_all,true + branch sa_judge_wholerange,true +sa_isnot_wholerange: + arg mem_sdp_attrib_list,contw + force 0,queue + branch sa_req_loop +sa_judge_wholerange: + ifetch 1,contr + bne SDP_ATTRIBUTE_RANGE,sdp_invalid_request_syntax + ifetch 2,contr + nbranch sa_judge_wholerange_false1,blank + ifetch 1,contr + bne 0xff,sa_judge_wholerange_false2 + ifetch 1,contr + bne 0xff,sa_judge_wholerange_false3 //also exist potential bug because mem_sdp_attrib_list length is only 7f + branch sa_req_all +sa_judge_wholerange_false3: + increase -5,contr + branch sa_isnot_wholerange +sa_judge_wholerange_false2: + increase -4,contr + branch sa_isnot_wholerange +sa_judge_wholerange_false1: + increase -3,contr + branch sa_isnot_wholerange +sa_req_loop: + ifetch 1,contr + beq SDP_ATTRIBUTE_ID, sa_req_one_id + beq SDP_ATTRIBUTE_RANGE, sa_req_range +sa_req_range: + ifetch 2, contr + istore 2, contw + increase 1,queue + byteswap pdata,regb + ifetch 2, contr + byteswap pdata,pdata +sa_req_range_id_increase: + increase 1, regb + isub regb, null + nbranch sa_req_range_id_finish,positive + copy pdata, regc + byteswap regb,pdata + istore 2, contw + increase 1,queue + copy regc, pdata + branch sa_req_range_id_increase +sa_req_range_id_finish: + increase -5,timeup + increase -5,rega + branch sa_req_check_next_id +sa_req_one_id: + ifetch 2,contr + istore 2,contw //save the attribute id in mem_sdp_attrib_list + increase 1,queue + increase -3,timeup + increase -3,rega +sa_req_check_next_id: + nbranch sdp_invalid_request_syntax,positive + nbranch sa_req_loop,zero //another attribute + increase -1,timeup + nbranch sdp_invalid_request_syntax,zero + + call l2cap_get_sdp_tx_payload + increase 10,contw + arg mem_sdp_attrib_list,rega +sa_req_handle_attributelist_next: + copy queue,pdata + branch sa_req_handle_attributelist_end,blank + ifetch 2,rega + branch sa_req_handle_attributelist_end,blank + iforce regb /* regb is the attribute ID */ + fetch 4,mem_sdp_record_handle + iforce temp + call search_handle_attrib + copy contr,pdata + branch sa_req_handle_attributelist_notfound,blank + increase -3,contr + ifetch 3,contr + istore 3,contw + call sdp_data_len + iforce loopcnt + call memcpy +sa_req_handle_attributelist_notfound: + increase 2,rega + increase -1, queue + branch sa_req_handle_attributelist_next + +sa_req_handle_attributelist_end: + arg SDP_ATTRIBUTE_RES,rega + call ssa_req_range_lastfreg_common + fetch 2,mem_sdp_tx_pkt_length + beq 11,sa_empty_rsp + branch ssa_req_range_attrbutes_length_no_continue + + +sdp_store_continue_common: + ifetch 1, contr + beq 0, sdp_store_continue_0byte + beq 1,sdp_store_continue_1byte + beq 2, sdp_store_continue_2byte +sdp_store_continue_0byte: + increase -1,timeup /* continuation state byte (0) */ + branch sdp_store_continue_end +sdp_store_continue_1byte: + ifetch 1, contr + increase -2,timeup /* continuation state byte (1) */ + branch sdp_store_continue_end +sdp_store_continue_2byte: + ifetch 2, contr + byteswap pdata,pdata + increase -3,timeup /* continuation state byte (2) */ +sdp_store_continue_end: + store 2, mem_sdp_continue_byte + rtn + +sa_req_all: + increase -5,timeup + call sdp_store_continue_common + nbranch sdp_invalid_pdu_size,zero + fetcht 4,mem_sdp_record_handle + call search_handle + nbranch sdp_invalid_service_record_handle,zero + copy contr,rega + call l2cap_get_sdp_tx_payload + copy rega,contr + increase 3,contw//arg mem_SDP_Tx_payload+3,contw + copy contr,timeup //sdp start pointer + call sdp_get_data + copy pdata, rega //sdp total length +// fetchr regb,2,mem_sdp_continue_byte + fetch 2,mem_sdp_continue_byte + copy pdata,regb + copy rega,pdata + isub regb,regb //total_length - continue_byte in regb + fetch 2, mem_sdp_attribute_maxbyte + isub regb, null + nbranch sa_req_all_fragment_sdp, positive + // the last fragment + disable user + fetch 2, mem_sdp_continue_byte + branch sa_req_all_fisrt_fragment,blank + iadd timeup, contr //set the read pointer + increase 3,regb //include the total length field, 3 bytes + copy regb, loopcnt + copy loopcnt, pdata + increase 3, pdata + byteswap pdata,pdata + istore 2, contw + copy loopcnt, pdata + byteswap pdata,pdata + istore 2, contw + branch sa_req_all_answer_attributelist_full_loop +sa_req_all_fisrt_fragment: + add rega,6,loopcnt + branch sa_req_all_parlength_continue_byte, user + byteswap loopcnt,pdata + branch sa_req_all_parlength_continue_byte_end +sa_req_all_parlength_continue_byte: + copy loopcnt, pdata + increase 2, pdata + byteswap pdata,pdata +sa_req_all_parlength_continue_byte_end: + istore 2,contw /* ParLength */ + increase -3,loopcnt + byteswap loopcnt,pdata + istore 2,contw /* AttrListByteCount */ + copy timeup,contr + branch sa_req_all_answer_attributelist_full_loop +sa_req_all_fragment_sdp: + enable user +// fetchr rega,2,mem_sdp_attribute_maxbyte + fetch 2,mem_sdp_attribute_maxbyte + copy pdata,rega + copy rega,loopcnt + fetch 2, mem_sdp_continue_byte + branch sa_req_all_fisrt_fragment,blank + iadd timeup, contr + copy rega,pdata + increase 5,pdata + byteswap pdata,pdata + istore 2, contw + copy rega,pdata + byteswap pdata,pdata + istore 2, contw +sa_req_all_answer_attributelist_full_loop: + call memcpy + nbranch sa_req_all_last_frag_continue, user + force 2,pdata + istore 1,contw + copy contr, pdata + isub timeup, pdata + byteswap pdata,pdata + istore 2, contw // continuation length + branch sa_req_all_frag_end +sa_req_all_last_frag_continue: + force 0,pdata + istore 1,contw +sa_req_all_frag_end: + arg SDP_ATTRIBUTE_RES,rega + branch ssa_req_range_common + +/**********************************************************************/ +/* ssa_req */ +/* Processing Service Search Attribute Request */ +/* Call: ask_serviceclassid, ask_attributeid, empty_response */ +/* or answer_attributelist */ +/* Input: contr */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +sdp_process_ssa_req: + bpatchx patch3a_1,mem_patch3a + call ask_serviceclassid + compare 0xff,temp,0xff + branch sdp_invalid_request_syntax,true + call sdp_store_maxbyte + store 2,mem_sdp_attribute_maxbyte + increase -2,timeup + call dataelementtype6 + arg mem_sdp_attrib_list,contw + force 0,queue +ssa_req_loop: + ifetch 1,contr + beq SDP_ATTRIBUTE_RANGE,ssa_req_range + ifetch 2,contr + istore 2,contw //save the attribute id in mem_sdp_attrib_list + increase 1,queue + increase -3,timeup + increase -3,rega + nbranch sdp_invalid_request_syntax,positive + nbranch ssa_req_loop,zero + increase -1,timeup + nbranch sdp_invalid_request_syntax,zero + call l2cap_get_sdp_tx_payload + increase 13,contw//arg mem_SDP_Tx_payload+13,contw + fetch 2,mem_sdp_uuid_search_ptr + iforce regc + arg mem_sdp_attrib_list,rega +ssa_req_attributelist_next: + ifetch 2,rega + branch ssa_req_attributelist_end,blank + iforce regb /* regb is the attribute ID */ + call search_attrib + branch ssa_req_attributelist_notfound,blank + increase -3,contr + ifetch 3,contr + istore 3,contw + call sdp_data_len + iforce loopcnt + call memcpy +ssa_req_attributelist_notfound: + increase 2,rega + branch ssa_req_attributelist_next + +ssa_req_attributelist_end: + call ssa_req_range_lastfreg + fetch 2,mem_sdp_tx_pkt_length + beq 14,ssa_empty_rsp + call ssa_req_range_attrbutes_length_no_continue + branch ssa_req_range_attrbutes_length_no_continue + + +sdp_store_maxbyte: + ifetch 2,contr + byteswap pdata,pdata + increase -3,pdata + arg 200,temp + isub temp,null + nrtn positive + setarg 200 + rtn + + +ssa_req_range: + increase 4,contr + increase -5,timeup + increase -5,rega + nbranch sdp_invalid_request_syntax,zero + call sdp_store_continue_common + nbranch sdp_invalid_pdu_size,zero + arg mem_sdp_uuid_search_ptr,timeup + call search_all_uuid + deposit queue + branch ssa_empty_rsp,blank + store 1,mem_handle_humber +// storer regb,2,mem_sdp_all_length + copy regb,pdata + store 2,mem_sdp_all_length + arg 0,queue + arg 0,rega + call l2cap_get_sdp_tx_payload + increase 10,contw +ssa_req_range_find_handle: + call ssa_req_range_get_length + nbranch assert,user + copy contr,timeup + copy pdata,regc + iadd rega,rega +// copy pdata,rega +// fetch 2,mem_sdp_all_length + fetch 2,mem_sdp_continue_byte + copy pdata,regb + branch ssa_req_range_first_freg,blank +ssa_req_range_later_freg_with_continue: + copy rega,pdata + isub regb,regb //total_length - continue_byte in rega + branch ssa_req_range_next_handle,zero + nbranch ssa_req_range_next_handle,positive + fetch 2, mem_sdp_attribute_maxbyte + isub regb, null + branch ssa_req_range_maxbyte_with_continue,zero + nbranch ssa_req_range_maxbyte_with_continue, positive + + // data length < =maxbyte +ssa_req_range_send_not_maxbyte: + copy regb,loopcnt + call ssa_req_range_maxbyte_with_continue_cpy + fetch 1,mem_handle_humber + increase 1,queue + isub queue,null + branch ssa_req_range_lastfreg,zero + branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue: + copy pdata,loopcnt + call ssa_req_range_maxbyte_with_continue_cpy + branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue_cpy: + increase -3,contw + copy loopcnt,temp + copy regc,pdata + isub regb,pdata + iadd timeup,contr + branch memcpy + +ssa_req_range_next_handle: + fetch 1,mem_handle_humber + increase 1,queue + isub queue,null + rtn zero // + branch ssa_req_range_find_handle + +ssa_req_range_get_length: + call disable_user + arg mem_sdp_handle_list,contr + lshift2 queue,pdata + iadd contr,contr + ifetcht 4, contr + call search_handle + nrtn zero + call sdp_data_len + branch enable_user + +ssa_req_range_first_freg: + fetch 2, mem_sdp_attribute_maxbyte + isub rega, null + nbranch ssa_req_range_firstfreg_maxbyte_with_continue,positive + copy rega,loopcnt + copy loopcnt,temp + copy timeup,contr + call memcpy + fetch 2,mem_sdp_all_length + isub rega,null + branch ssa_req_range_freg_no_continue,zero +ssa_req_range_firstfreg_not_maxbyte_with_continue: + call ssa_req_range_freg_with_continue + branch ssa_req_range_attrbutes_length + +ssa_req_range_freg_no_continue: + call ssa_req_range_lastfreg + branch ssa_req_range_attrbutes_length + +ssa_req_range_lastfreg: + arg SDP_SEARCHATTRIB_RES,rega //PUD ID +ssa_req_range_lastfreg_common: + force 0,pdata + istore 1,contw + call ssa_req_range_common + fetcht 2,mem_sdp_tx_pkt_length + increase -5,temp + byteswap temp,pdata + istore 2, contw + increase -3,temp + byteswap temp,pdata + istore 2, contw //attribute length + rtn + +ssa_req_range_firstfreg_maxbyte_with_continue: + copy pdata,loopcnt + copy loopcnt,temp + copy timeup,contr + call memcpy + call ssa_req_range_freg_with_continue +ssa_req_range_attrbutes_length: + setarg 0x36 + istore 1,contw + fetch 2,mem_sdp_all_length + byteswap pdata,pdata + istore 2, contw + rtn + +ssa_req_range_attrbutes_length_no_continue: + setarg 0x36 + istore 1,contw + increase -3,temp + byteswap temp,pdata + istore 2, contw + rtn + +ssa_req_range_freg_with_continue: + arg SDP_SEARCHATTRIB_RES,rega //PUD ID + setarg 2 + istore 1,contw + fetch 2,mem_sdp_continue_byte + iadd temp,temp + byteswap temp,pdata + istore 2,contw + call ssa_req_range_common + fetcht 2,mem_sdp_tx_pkt_length + increase -5,temp + byteswap temp,pdata + istore 2, contw + increase -5,temp + byteswap temp,pdata + istore 2, contw + rtn + +ssa_req_range_common: + fetch 2,mem_sdp_tx_payload_ptr + isub contw,pdata + sub pdata,0,pdata + store 2,mem_sdp_tx_pkt_length + call l2cap_get_sdp_tx_payload + copy rega,pdata //PUD ID + istore 1,contw + fetch 2,mem_sdp_transactionid + istore 2,contw + rtn + + + + +/**********************************************************************/ +/* ssa_res */ +/* Processing Service Search Attribute Response */ +/* Call: dataelementtype6, attribute_reading */ +/* Input: contr */ +/* Output: mem_sdp_record_handle,mem_sdp_search_failed */ +/* */ +/**********************************************************************/ +sdp_process_ssa_res: +sdp_process_ss_res: +sdp_process_sa_res: +sdp_process_error_res: + rtn +/* +sdp_process_ss_res: + bpatchx patch3a_2,mem_patch3a + ifetch 2,contr + ifetch 2,contr + byteswap pdata,pdata + bne 1,assert + ifetch 4,contr + store 4,mem_sdp_record_handle + fetchr regc,2,mem_sdp_l2capch_ptr + add regc,offset_lc_state,regc + ifetch 1,regc + set1 L2CAP_CHANNEL_STATE_RECV_SEARCH_RES,pdata + istore 1,regc + rtn + +sdp_process_sa_res: + bpatchx patch3a_3,mem_patch3a + fetchr regc,2,mem_sdp_l2capch_ptr + add regc,offset_lc_state,regc + ifetch 1,regc + set1 L2CAP_CHANNEL_STATE_RECV_ATTRIB_RES,pdata + istore 1,regc + copy temp,contr + ifetch 2,contr + call search_rfcomm_cn + store 1,mem_profile_channel + rtn +*/ + + + +sdp_invalid_service_record_handle: + setarg 0x0200 + store 2,mem_sdp_error_code + branch sdp_error_response +sdp_invalid_pdu_size: + setarg 0x0400 + store 2,mem_sdp_error_code + branch sdp_error_response +sdp_insufficient_resource: + setarg 0x0600 + store 2,mem_sdp_error_code + branch sdp_error_response +sdp_invalid_request_syntax: + setarg 0x0300 + store 2,mem_sdp_error_code +sdp_error_response: + call l2cap_get_sdp_tx_payload + istore 1,contw + fetch 2,mem_sdp_transactionid + istore 2,contw + setarg 0x0200 + istore 2,contw + fetch 2,mem_sdp_error_code + istore 2,contw + jam 7,mem_sdp_tx_pkt_length + rtn + + +//store uuid in mem_sdp_uuid_search_ptr, +//return temp 0xff if wrong +ask_serviceclassid: + arg 0,regb + force 0,temp /* use "temp" to mark syntax error or to mark 128 bit uuid */ + arg mem_sdp_uuid_search_ptr,contw + call dataelementtype6 + branch asksrv_error,zero +classidloop: + increase 1,regb + ifetch 1,contr + increase -1,rega + increase -1,timeup + compare 0x18,pdata,0xf8 /* 5 MSB: b00011: uuid */ + nbranch asksrv_error,true + compare 0x04,pdata,0x07 /* 3 LSB: b100 128 bits uuid */ + nbranch cmp032,true + force 1,temp /* mark it as 128 bit uuid */ +skip2bytes: + ifetch 1,contr + increase -1,rega + increase -1,timeup + bne 0x00, frstbwrong + ifetch 1,contr + increase -1,rega + increase -1,timeup + beq 0x00, cmpuuid + branch scndbwrong +frstbwrong: + increase 1,contr + increase -1,rega + increase -1,timeup +scndbwrong: + increase 2,contr /* skip 2 bytes, first 2 bytes already wrong */ + increase -2,rega + increase -2,timeup + compare 0x00,temp,0xff /* 128 bits or 32 bits ? */ + branch loopornot,true + increase 12,contr /* skip 12 bytes, first 2 bytes already wrong */ + increase -12,rega + increase -12,timeup + branch loopornot +cmp032: + compare 0x02,pdata,0x07 /* 3 LSB: b010 32 bits uuid */ + nbranch cmp016,true + branch skip2bytes +cmp016: + compare 0x01,pdata,0x07 /* 3 LSB: b001 16 bit uuid */ + nbranch asksrv_error,true +cmpuuid: + increase -2,rega + increase -2,timeup + ifetch 2,contr /* higher order byte */ + sub regb,4,null + branch uuidsize,zero //max store uuids =3 + istore 2,contw +uuidsize: + compare 0x00,temp,0xff /* is this 128 bits uuid */ + branch loopornot,true + copy contr,temp + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x10, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x80, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x00, wrong12b + ifetch 1,contr + bne 0x80, wrong12b + ifetch 1,contr + bne 0x5f, wrong12b + ifetch 1,contr + bne 0x9b, wrong12b + ifetch 1,contr + bne 0x34, wrong12b + ifetch 1,contr + beq 0xfb, chck12dn +wrong12b: + copy temp,contr +wrong12b1: + increase 12,contr /* skip 12 bytes */ + force 0x00,queue + force 0x00,temp + branch chck12dn + +chck12dn: + increase -12,timeup + increase -12,rega +loopornot: + force 0x00,temp + compare 0x00,rega,0xff + nbranch classidloop,true + force 0,pdata + istore 2,contw /* end list with null */ + rtn +asksrv_error: + arg 0xff,temp + rtn + +/**********************************************************************/ +/* Subroutine: dataelementtype6 */ +/* Parse Data Element Sequence, obtain the data size */ +/* Input: SDP Rx Buf Pointer in contr, parameter count in timeup */ +/* Output: data length in rega, data pointer in contr */ +/* and parameter count in timeup, return with zero flag set: */ +/* syntax error */ +/**********************************************************************/ +dataelementtype6: + bpatchx patch3a_4,mem_patch3a + ifetch 1,contr + increase -1,timeup + compare 0x30,pdata,0xf8 /* 5 MSB: b00110: type 6 */ + nbranch dsize_error,true + compare 0x07,pdata,0x07 /* 3 LSB: b111: 32 bits */ + branch dsize32,true + compare 0x06,pdata,0x07 /* 3 LSB: b110: 16 bits */ + branch dsize16,true + compare 0x05,pdata,0x07 /* 3 LSB: b101: 8 bits */ + nbranch dsize_error,true +// ifetchr rega,1,contr /* data length in reg A */ + ifetch 1,contr + copy pdata,rega + increase -1,timeup + branch dsize +dsize32: + increase 2,contr + increase -2,timeup +dsize16: + ifetch 2,contr + byteswap pdata,rega + increase -2,timeup +dsize: + force 0x01,pdata + rtn +dsize_error: + force 0x00,pdata + rtn + +/**********************************************************************/ +/* Subroutine: sa_empty_rsp */ +/* Send empty response */ +/* */ +/* Input: mem_sdp_pduid, mem_sdp_transactionid */ +/* Output: mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length */ +/* */ +/**********************************************************************/ +ss_empty_rsp: + setarg SDP_SEARCH_RES + store 1, mem_sdp_pduid + branch empty_response +sa_empty_rsp: + setarg SDP_ATTRIBUTE_RES + store 1, mem_sdp_pduid + branch empty_response +ssa_empty_rsp: + setarg SDP_SEARCHATTRIB_RES + store 1, mem_sdp_pduid +empty_response: + call l2cap_get_sdp_tx_payload /* empty attribute list */ +// fetchr regb,1,mem_sdp_pduid /* PDUID */ +// istorer regb,1,contw + fetch 1,mem_sdp_pduid + copy pdata,regb + istore 1,contw + fetch 2,mem_sdp_transactionid /* copy back transaction id */ + istore 2,contw + setarg 0x0500 + istore 2, contw + compare SDP_ATTRIBUTE_RES,regb,0xff + branch fullsearch,true + compare SDP_SEARCHATTRIB_RES,regb,0xff + branch fullsearch,true + setarg 0x000000 + istore 5,contw + branch outempty + +fullsearch: /* pduid must be 5 or 7 */ + setarg 0x350200 + istore 5,contw +outempty: + jam 10,mem_sdp_tx_pkt_length + rtn + +//return length in pdata(whole element ,include header and data ), contr not change +sdp_data_len: + call store_contw + call store_contr + call sdp_get_data + call get_contw + call get_contr + copy temp,pdata + rtn + +//return data length in pdata, contr is data pionter,return length in temp(whole element ,include header and data ) +sdp_get_data: + ifetch 1,contr + and pdata,0x7,loopcnt + rshift3 pdata,pdata + bne 0,sdp_get_data_type_not0 +sdp_get_data_type0: + force 1,pdata + force 1,temp + rtn + +sdp_get_data_type_not0_sizeindex01234: + call left_shift_n + add pdata,1,temp //add header length + rtn +sdp_get_data_type_not0: + deposit loopcnt + sub pdata,4,null + branch sdp_get_data_type_not0_sizeindex01234,positive + beq 5,sdp_get_data_type_not0_sizeindex5 + beq 6,sdp_get_data_type_not0_sizeindex6 + beq 7,sdp_get_data_type_not0_sizeindex7 + rtn + +sdp_get_data_type_not0_sizeindex5: + ifetch 1,contr + add pdata,2,temp //add header length + rtn +sdp_get_data_type_not0_sizeindex6: + ifetch 2,contr + byteswap pdata,pdata + add pdata,3,temp //add header length + rtn +sdp_get_data_type_not0_sizeindex7: + ifetch 2,contr + byteswap pdata,pdata + ifetcht 2,contr + byteswap temp,temp + lshift16 temp,temp + iadd temp,pdata + add pdata,5,temp //add header length + rtn + +/* find with uuids +input uuids pionter in timeup +return handles in mem_sdp_handle_list; handles number in queue if found +return regb all length*/ +search_all_uuid: + bpatchx patch3a_5,mem_patch3a + force 0,queue + arg 0,regb + arg mem_sdp_handle_list,contw +search_all_uuid_llop: + ifetch 2,timeup + rtn blank + call search_uuid + copy queue,pdata + rtneq SDP_MAX_HANDLE_NUMBER + increase 2,timeup + branch search_all_uuid_llop + +search_uuid: +// arg 0,regb + iforce regc +// force 0,queue + fetch 2, mem_ui_uuid_table + iforce contr +search_uuid_next: + copy queue,pdata + rtneq SDP_MAX_HANDLE_NUMBER + disable user + ifetch 1,contr + rtn blank + iforce loopcnt +search_uuid_loop: + ifetch 2,contr + isub regc,null + nbranch search_uuid_not_found,zero + enable user // uuid match +search_uuid_not_found: + loop search_uuid_loop + ifetcht 4,contr // get handle + copy contr,rega + nbranch search_uuid_nomatch,user + arg mem_sdp_handle_list,contr + arg SDP_MAX_HANDLE_NUMBER,loopcnt +search_uuid_check_same_handle: + ifetch 4,contr + branch search_uuid_store_handle,blank + isub temp,null + branch search_uuid_nomatch,zero + loop search_uuid_check_same_handle + rtn +search_uuid_store_handle: + istoret 4,contw + increase 1,queue + copy rega,contr + call sdp_data_len + iadd regb,regb + iadd contr,contr + branch search_uuid_next +search_uuid_nomatch: + copy rega,contr + call sdp_get_data + iadd contr,contr // next paragraph + branch search_uuid_next + +/* temp is handle, +return zero if found +return data pointer in contr +*/ +search_handle: + bpatchx patch3a_6,mem_patch3a + fetch 2,mem_ui_uuid_table + iforce contr +search_handle_loop: + ifetch 1,contr + branch disable_zero,blank + lshift pdata,pdata + iadd contr,contr + ifetch 4,contr + isub temp,null + rtn zero + deposit contw + store 2,mem_contw + storet 8,mem_temp + call sdp_get_data + iadd contr,contr + copy contr,pdata + fetcht 2,mem_contw + copy temp,contw + fetcht 8,mem_temp + copy pdata,contr + branch search_handle_loop + +/** +* input regb and regc.regb is the attribute ID and regc is UUID. +* set contr if find attribute or 0 if not +*/ +search_attrib: + bpatchx patch3a_7,mem_patch3a + fetch 2,mem_ui_uuid_table + iforce contr +search_attrib_next: + ifetch 1,contr + branch search_attrib_end, blank + iforce loopcnt +search_attrib_loop: + ifetch 2,contr + isub regc,null /* regc is UUID, compare it */ + branch search_attrib_found_uuid,zero + loop search_attrib_loop + increase 4,contr + call sdp_get_data + iadd contr,contr /* next paragraph */ + branch search_attrib_next +search_attrib_found_uuid: + increase -1,loopcnt + lshift loopcnt,pdata + iadd contr,contr + increase 4,contr + call sdp_get_data + iadd contr,timeup /* attribute list end */ +search_attrib_loop_attribs: + increase 1,contr + ifetch 2,contr + isub regb,null + //force 0x1,pdata,zero +// setflag zero, 0,pdata +// copy timeup, timeup + branch disable_blank,zero /* attribute found */ + call sdp_data_len + iadd contr,contr + deposit timeup + isub contr,null + branch search_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/ + branch search_attrib_loop_attribs +search_attrib_end: + force 0,contr + force 0,pdata + rtn + + +//search the attribute according the record handle +//record handle in temp, attribute in regb +//set the contr to zero if not found +search_handle_attrib: + bpatchx patch3b_0,mem_patch3b + fetch 2,mem_ui_uuid_table + iforce contr +search_handle_attrib_next: + ifetch 1,contr + branch search_handle_attrib_end, blank + lshift pdata,pdata + iadd contr, contr + ifetch 4,contr + isub temp,null /* regc is UUID, compare it */ + branch search_handl_attrib_found_handle,zero + call sdp_get_data + iadd contr,contr /* next paragraph */ + branch search_handle_attrib_next +search_handl_attrib_found_handle: + call sdp_get_data + iadd contr,timeup /* attribute list end */ +search_handle_attrib_loop_attribs: + increase 1,contr + ifetch 2,contr + isub regb,null + rtn zero /* attribute found */ + call sdp_data_len + iadd contr,contr + deposit timeup + isub contr,null + branch search_handle_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/ + branch search_handle_attrib_loop_attribs +search_handle_attrib_end: + force 0,contr + rtn + + +//enable user if find rfcomm channel number, pdata is channel number +search_rfcomm_cn: + arg 0x0400,regb // attribute protocol edscriptor list + call search_handl_attrib_found_handle + arg 0x0300,regb // uuid rfcomm + call search_uuid_in_data + nrtn user + sub rega,3,null + branch disable_user,positive + ifetch 1,contr + bne 0x08,disable_user + ifetch 1,contr + rtn + + //input timeup is lenth + //input contr is data ptr + //return contr is end of uuid; enable user if found uuid +search_uuid_in_data: + bpatchx patch3b_1,mem_patch3b + call sdp_get_data + copy pdata,rega +search_uuid_in_data_loop: + ifetch 1,contr + and pdata,0x7,loopcnt + rshift3 pdata,pdata + sub pdata,3,null + branch search_uuid_in_data_found_uuid,zero + copy loopcnt,pdata + beq 5,search_uuid_in_data_found_element_index5 + beq 6,search_uuid_in_data_found_element_index6 + beq 7,search_uuid_in_data_found_element_index7 + increase -1,contr + call sdp_get_data + iadd contr,contr + copy rega,pdata + isub temp,rega + branch disable_user,zero + branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index5: + increase -2,rega + increase 1,contr + branch search_uuid_in_data_loop +search_uuid_in_data_found_element_index6: + increase -3,rega + increase 2,contr + branch search_uuid_in_data_loop +search_uuid_in_data_found_element_index7: + increase -5,rega + increase 4,contr + branch search_uuid_in_data_loop + +search_uuid_in_data_found_uuid: + increase -1,rega + copy loopcnt,pdata + beq 1,search_uuid_in_data_type_uuid_16 + beq 2,search_uuid_in_data_type_uuid_32 + beq 4,search_uuid_in_data_type_uuid_128 + branch disable_user +search_uuid_in_data_type_uuid_128: + increase -12,rega +search_uuid_in_data_type_uuid_32: + ifetch 2,contr + increase -2,rega +search_uuid_in_data_type_uuid_16: + ifetch 2,contr + isub regb,null + branch enable_user,zero + increase -2,rega + branch disable_user,zero + branch search_uuid_in_data_loop + +/* +//rega:l2cap len ,mem_search_uuid:uuid to search +sdp_send_search_req: + call l2cap_malloc_sdp_req + setarg SDP_SEARCH_REQ + istore 1,contw + fetch 2,mem_sdp_transactionid_local + byteswap pdata,pdata + istore 2,contw + increase -5,rega + byteswap rega,rega + //istorer rega,2,contw + copy rega,pdata + istore 2,contw + setarg 0x0335 + istore 2,contw + setarg 0x19 + istore 1,contw + fetch 2,mem_search_uuid + istore 2,contw + setarg 0x0008 + istore 2,contw + setarg 0 + istore 1,contw + rtn + +//rega:l2cap len +sdp_send_attribute_req: + call l2cap_malloc_sdp_req + setarg SDP_ATTRIBUTE_REQ + istore 1,contw + fetch 2,mem_sdp_transactionid_local + byteswap pdata,pdata + istore 2,contw + increase -5,rega + byteswap rega,rega +// istorer rega,2,contw + copy rega,pdata + istore 2,contw + fetch 4,mem_sdp_record_handle + istore 4,contw + setarg 0x2c01 + istore 2,contw + setarg 0x0535 + istore 2,contw + setarg 0x0a + istore 1,contw + setarg 0 + istore 2,contw + setarg -1 + istore 2,contw + setarg 0 + istore 1,contw + rtn +*/ + + +sdp_send_spp_request: + call l2cap_get_sdp_tx_payload + copy pdata,contw + setarg 6//Search Attr Req + istore 1,contw + setarg sdp_tid_spp + istore 2,contw + setarg 0x0f00 //length15 + istore 2,contw + setarg 0x1a0535 + istore 3,contw + setarg 0x0111 + lshift16 pdata,pdata //UUID + istore 4,contw + setarg 0x2600 //max return len + istore 2,contw + setarg 0x0335 + istore 2,contw + setarg 0x0009 + istore 2,contw + setarg 0x0004 + istore 2,contw + jam 0x14,mem_sdp_tx_pkt_length + rtn + Index: 1066_OTP_FLASH/program/security.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/security.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/security.prog (working copy) @@ -0,0 +1,1642 @@ + +ifdef SECURE_CONNECTION + +function_g2: + bpatchx patch3b_2,mem_patch3b + jam 80,mem_AES_CMAC_data_length + arg memdat,contw + arg mem_le_srand,contr + call memcpy16 + arg mem_le_pubkey_local_x_256,contr + call memcpy32 + arg mem_le_pubkey_remote_x_256,contr + call memcpy32 + call inverse_memdat + arg mem_le_mrand,contr + call store_inverse_k + call function_AES_CMAC + + arg mem_AES_CMAC_temp,contw + call load_inverse_result + setarg 1000000 + copy pdata,rega + fetch 4,mem_AES_CMAC_temp + idiv rega + call wait_div_end + remainder pdata + store 4,mem_gkey +//call ice_break + rtn + +function_f6_eb: + jam 65,mem_AES_CMAC_data_length + arg memdat,contw + call store_addr_common_a + call store_addr_common_b + fetch 3,mem_le_pres+1 + istore 3,contw +// arg mem_le_r,contr +// call memcpy16 + call get_r + + arg mem_le_mrand,contr + call memcpy16 + arg mem_le_srand,contr + call memcpy16 + call inverse_memdat + arg mem_le_mackey ,contr + arg mem_AES_CMAC_k,contw + call memcpy16 +// call p_store_inverse_k + branch function_AES_CMAC +// arg mem_AES_CMAC_temp,contw +// branch p_load_inverse_result + +get_r: + fetch 4,mem_le_tk + istore 4,contw + call memset0_4 + branch memset0_8 + +function_f6_ea: + bpatchx patch3b_3,mem_patch3b + jam 65,mem_AES_CMAC_data_length + arg memdat,contw + call store_addr_common_b + call store_addr_common_a + fetch 3,mem_le_preq+1 + istore 3,contw +// arg mem_le_r,contr +// call memcpy16 + call get_r + arg mem_le_srand,contr + call memcpy16 + arg mem_le_mrand,contr + call memcpy16 + call inverse_memdat + arg mem_le_mackey ,contr + arg mem_AES_CMAC_k,contw + call memcpy16 +// call p_store_inverse_k + call function_AES_CMAC + arg mem_AES_CMAC_temp,contw + branch load_inverse_result + +function_f5: + jam 32,mem_AES_CMAC_data_length + arg mem_le_dhkey_256 ,contr + arg memdat,contw + call memcpy32 + call inverse_memdat + arg mem_le_slat,contr + call store_inverse_k + call function_AES_CMAC + arg mem_AES_CMAC_k,contw + call store_aes_result + arg 1,temp + call function_f5_common + arg mem_le_ltk,contw + call load_inverse_result + arg 0,temp + call function_f5_common + arg mem_le_mackey,contw +// branch p_load_inverse_result + branch store_aes_result + + +function_f5_common: + bpatchx patch3b_4,mem_patch3b + jam 53,mem_AES_CMAC_data_length + setarg 0x100 + store 2,memdat + call store_addr_common_b + call store_addr_common_a + arg mem_le_srand,contr + call memcpy16 + arg mem_le_mrand,contr + call memcpy16 +// fetch 4,mem_le_keyid 0x62746c65 + setarg 0x6c65 + istore 2,contw + setarg 0x6274 + istore 2,contw + istoret 1,contw //counter + call inverse_memdat + branch function_AES_CMAC + +store_addr_common_b: + fetch 6,mem_le_lap + istore 6,contw + fetch 1,mem_le_conn_own_addr_type + istore 1,contw + rtn + +store_addr_common_a: + fetch 6,mem_le_plap + istore 6,contw +// setarg 0x2dcfc1 +// istore 3,contw +// setarg 0xa71370 +// istore 3,contw + fetch 1,mem_le_conn_peer_addr_type + istore 1,contw + rtn + +function_f4_ca: + jam 65,mem_AES_CMAC_data_length + fetch 1,mem_passkey_1bit + store 1,memdat + arg mem_le_pubkey_local_x_256,contr + call memcpy32 + arg mem_le_pubkey_remote_x_256,contr + call memcpy32 + call inverse_memdat + arg mem_le_mrand,contr + call store_inverse_k + branch function_AES_CMAC + + +function_f4_cb: + jam 65,mem_AES_CMAC_data_length + fetch 1,mem_passkey_1bit + store 1,memdat + arg mem_le_pubkey_remote_x_256,contr + call memcpy32 + arg mem_le_pubkey_local_x_256,contr + call memcpy32 + call inverse_memdat + arg mem_le_srand,contr + call store_inverse_k + branch function_AES_CMAC + +function_AES_CMAC: + bpatchx patch3b_5,mem_patch3b + call function_AES_CMAC_Generate_Subkey +//call ice_break +// jam 65,mem_AES_CMAC_data_length +//call ice_break + fetch 1,mem_AES_CMAC_data_length + copy pdata,temp +function_ceil16: + increase 15,pdata + rshift4 pdata,pdata + copy pdata,regb + branch function_AES_CMAC_set_flag_0_balnk,blank + and temp,0x0f,pdata + nbranch function_AES_CMAC_set_flag_0,blank +// flag =1; + arg mem_AES_CMAC_k1,regc + arg memdat,pdata + increase -16,pdata +// iadd temp,pdata +// isub rega,rega + iadd temp,rega + arg mem_AES_CMAC_M_last,contw + arg 4,loopcnt + call xor_loop +//call ice_break +// arg mem_f4_k1,contr +// call load_key + branch function_AES_CMAC_aes + +function_AES_CMAC_set_flag_0_balnk: + arg 1,regb + arg 0,rega +// arg mem_f4_test_data,pdata + branch function_AES_CMAC_set_flag_0_common +//call ice_break + +function_AES_CMAC_set_flag_0: +// flag = 0; + and temp,0x0f,rega +function_AES_CMAC_set_flag_0_common: + arg memdat,pdata + iadd temp,pdata + isub rega,contr +//call ice_break + arg mem_AES_CMAC_temp,contw + call function_AES_CMAC_padding +//call ice_break + arg mem_AES_CMAC_k2,regc + arg mem_AES_CMAC_temp,rega + arg mem_AES_CMAC_M_last,contw + arg 4,loopcnt + call xor_loop +//call ice_break + +// arg mem_f4_k2,contr +// call load_key + +// branch p_function_f4_aes +function_AES_CMAC_aes: +// arg mem_f4_k,contr +// call load_key +// arg mem_AES_CMAC_xor,contr +// call load_data128 + call aes_clear_data + call aes_init +// arg mem_f4_k,contr +// call load_key + arg memdat,contr +function_AES_CMAC_aes_loop: +//generate_mic_loop: + increase -1,regb + deposit regb + branch function_AES_CMAC_aes_loop_end,blank + call load_data128 + call do_aes_cbc + branch function_AES_CMAC_aes_loop +//generate_mic_end: +function_AES_CMAC_aes_loop_end: + arg mem_AES_CMAC_temp,contw + call store_aes_result + arg mem_AES_CMAC_M_last,contr + call load_data128 + call aes_init + arg mem_AES_CMAC_temp,contr + call load_data128 + branch do_aes_cbc + + + +load_inverse_result: +// arg mem_AES_CMAC_temp,contw + copy contw,rega + call store_aes_result +// arg mem_AES_CMAC_temp,rega + arg 16,loopcnt + branch inverse_data + +store_inverse_k: + arg mem_AES_CMAC_k,contw + call memcpy16 +inverse_k: + arg 16,loopcnt + arg mem_AES_CMAC_k,rega + branch inverse_data + +inverse_memdat: + fetch 1,mem_AES_CMAC_data_length + copy pdata,loopcnt + arg memdat,rega + branch inverse_data + +bn_lshift_0_inverse: + ifetch 1,regA + lshift pdata,pdata + isolate1 0,regC + setflag true,0,pdata + isolate1 8,pdata + setflag true,0,regC + istore 1,rega + increase -1,rega + loop bn_lshift_0_inverse + rtn + +function_AES_CMAC_k1_inverse: + arg mem_AES_CMAC_k1,regA +function_AES_CMAC_inverse_common: + increase 15,rega + force 16,loopcnt + force 0,regC + branch bn_lshift_0_inverse + +function_AES_CMAC_k2_inverse: + arg mem_AES_CMAC_k2,regA + branch function_AES_CMAC_inverse_common + + +function_AES_CMAC_Generate_Subkey: + arg mem_AES_CMAC_k,contr + call load_key +// arg mem_AES_CMAC_xor,contr +// call aes_load_xor + force regidx_xor,regext_index + call aes_clear + call aes_clear_data + call do_aes_ocb + +// force 0x38,aes_ctrl +// force 0x0,aes_ctrl +// call wait_aes + arg mem_AES_CMAC_k1,contw + call store_aes_result +function_AES_CMAC_k1: + bpatchx patch3b_6,mem_patch3b + fetch 1,mem_AES_CMAC_k1 + isolate1 7,pdata + nbranch function_AES_CMAC_k1_0,true + call function_AES_CMAC_k1_inverse + +//p_function_f4_k1_xor: + arg mem_AES_CMAC_k1,regc +// arg mem_AES_CMAC_rb,rega + arg mem_AES_CMAC_k1,contw +// arg 3,loopcnt +// call xor_loop + call function_AES_CMAC_xor_rb + branch function_AES_CMAC_k2 +function_AES_CMAC_k1_0: + call function_AES_CMAC_k1_inverse +function_AES_CMAC_k2: +//call ice_break + arg mem_AES_CMAC_k1,contr + arg mem_AES_CMAC_k2,contw + call memcpy16 + fetch 1,mem_AES_CMAC_k2 + isolate1 7,pdata + nbranch function_AES_CMAC_k2_inverse,true + call function_AES_CMAC_k2_inverse +//p_function_f4_k2_xor: + arg mem_AES_CMAC_k2,regc +// arg mem_AES_CMAC_rb,rega + arg mem_AES_CMAC_k2,contw +// arg 3,loopcnt +// branch xor_loop + + +//rb:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 +function_AES_CMAC_xor_rb: + arg 3,loopcnt +function_AES_CMAC_xor_rb_loop: + arg 0,temp + call function_AES_CMAC_xor_loop_common + increase 4,regc + loop function_AES_CMAC_xor_rb_loop + arg 0x8700,temp + lshift16 temp,temp +function_AES_CMAC_xor_loop_common: + ifetch 4,regc + ixor temp,pdata + istore 4,contw + rtn + + + + +//input rega :length <16 contr,contw +function_AES_CMAC_padding: + bpatchx patch3b_7,mem_patch3b + arg 16,loopcnt + arg 0,pdata +function_AES_CMAC_padding_loop: + isub rega,null + branch function_AES_CMAC_padding_beq_length,zero + branch function_AES_CMAC_padding_big_length,positive + ifetcht 1,contr + istoret 1,contw +function_AES_CMAC_padding_loop2: + increase 1,pdata + loop function_AES_CMAC_padding_loop + rtn +function_AES_CMAC_padding_beq_length: + arg 0x80,temp +function_AES_CMAC_padding_common: + istoret 1,contw + branch function_AES_CMAC_padding_loop2 + +function_AES_CMAC_padding_big_length: + arg 0,temp + branch function_AES_CMAC_padding_common + +endif + +generate_kinit: + call function_e22 + arg mem_input_store,contr + arg mem_kinit,contw /* Kinit is ready */ + branch memcpy16 + + +function_e21: /* rega pointers to bdaddr */ + disable user + call function_expand + arg mem_random_number,contr + arg mem_x,contw + force 15,loopcnt + call memcpy + ifetch 1,contr + xor_into 6,pdata + istore 1,contw + setarg mem_y + store 2,memp_ar_input + setarg mem_x + store 2,memp_ar_key + set1 mark_ar2,mark + branch function_ar + + + +function_e22: /* rega pointers to bdaddr */ + fetcht 1,mem_pin_length + force 16,regb /* total 16 bytes */ + add temp,6,regc /* regc is l' */ + sub regc,16,null + branch function_e22_pin_init,positive + force 16,regc +function_e22_pin_init: /* generate x from pin and bdaddr */ + arg mem_x,contw +function_e22_genx_pin: + arg mem_pin,contr + copy temp,loopcnt + disable user +function_e22_genx_loop: + ifetch 1,contr + istore 1,contw + increase -1,regb + branch function_e22_genx_end,zero + loop function_e22_genx_loop + branch function_e22_genx_pin,user + enable user + force 6,loopcnt + copy rega,contr + branch function_e22_genx_loop +function_e22_genx_end: + arg mem_random_number,contr + arg mem_y,contw + call memcpy16 + fetch 1,mem_y15 + ixor regc,pdata + store 1,mem_y15 /* inpy[15] = rand_num[15]^l'; */ + setarg mem_y + store 2,memp_ar_input + setarg mem_x + store 2,memp_ar_key + set1 mark_ar2,mark + branch function_ar + + + + +function_e1: /* rega pointers to bdaddr */ + disable user + call function_expand + branch function_hash + +function_e3: + arg mem_aco,rega + enable user + call function_expand + call function_hash + arg mem_input_store,contr + arg mem_kc,contw + branch memcpy16 + + /* costs 41769 clocks */ +function_hash: + setarg mem_random_number + store 2,memp_ar_input + setarg mem_link_key + store 2,memp_ar_key + set0 mark_ar2,mark + call function_ar + arg mem_input_store,rega + arg mem_random_number,regb + arg mem_x,contw + call xor16 + arg mem_x,rega + arg mem_y,regb + copy regb,contw + enable user + call add16 + call key_offset + setarg mem_y + store 2,memp_ar_input + setarg mem_x + store 2,memp_ar_key + set1 mark_ar2,mark + branch function_ar + + + /* totally costs 20700 clocks */ +function_ar: + jam 0,mem_ar_hround + fetch 2,memp_ar_key + iforce contr + arg mem_key_store,contw + call memcpy16 + fetch 2,memp_ar_input + iforce contr + arg mem_input_store,contw + call memcpy16 + +function_ar_loop: + call key_scheduling + disable user + bmark0 mark_ar2,function_ar_original + fetch 1,mem_ar_hround + bne 4,function_ar_original + fetch 2,memp_ar_input + iforce regb + call xor_mod32_ar2 +function_ar_original: + call xor_mod32 + call el_boxes + fetch 1,mem_ar_hround + increase 1,pdata + store 1,mem_ar_hround + + call key_scheduling + enable user + call xor_mod32 + call pht + call permute + call pht + call permute + call pht + call permute + call pht + fetch 1,mem_ar_hround + increase 1,pdata + store 1,mem_ar_hround + bne 16,function_ar_loop + call key_scheduling + disable user + branch xor_mod32 + +/* input round number and temp key in mem_key_store, and output the next temp key in mem_key_store */ +/* round key is generated and store in mem_round_key */ +key_scheduling: + fetch 1,mem_ar_hround + arg mem_key_store,contr + branch key_sched_zero,blank + iforce regb /* regb is half round */ + force 17,loopcnt + copy contr,contw +key_rotateloop: + ifetch 1,contr + lshift3 pdata,temp + rshift2 pdata,pdata + rshift3 pdata,pdata + ior temp,pdata + istore 1,contw + loop key_rotateloop + setarg mem_key_store + iadd regb,contr + force 16,loopcnt + arg mem_round_key,contw +key_select_octet_loop: + ifetch 1,contr + istore 1,contw + compare mem_key_store_end,contr,0xff + nbranch key_select_octet_nwrap,true + increase -17,contr +key_select_octet_nwrap: + loop key_select_octet_loop + force 0,rega /* rega is index of octet within row */ + add regb,-1,regc /* this is the row index, half_round#1 is 0 */ + lshift2 regc,regc + lshift2 regc,regc + call enable_authrom + setarg mem_b_box + iadd regc,regc /* regc hold the starting address of the row */ + arg mem_round_key,contw + force 16,loopcnt +bias_round_key_loop: + ifetcht 1,regc + ifetch 1,contw + iadd temp,pdata + istore 1,contw + increase 1,regc + loop bias_round_key_loop + branch disable_authrom + +key_sched_zero: /* round 0, key1 */ + force 16,loopcnt + force 0,temp +create_byte_16_loop: + ifetch 1,contr + ixor temp,temp + loop create_byte_16_loop + deposit temp + istore 1,contr /* store the byte #16 */ + arg mem_key_store,contr + arg mem_round_key,contw + branch memcpy16 + +xor_mod32: /* xor on 0,3, add on 1,2. if user is set, invert. x in rega and y in regb, out in contw */ + arg mem_round_key,regb +xor_mod32_ar2: + force 16,loopcnt + arg mem_input_store,rega + copy rega,contw +xor_mod32_loop: + ifetcht 1,rega + ifetch 1,regb + ixor temp,alarm + and loopcnt,3,regc + nbranch xor_mod32_invert,user + xor_into 3,regc +xor_mod32_invert: + sub regc,1,regc + branch xor_even,positive + iadd temp,alarm +xor_even: + deposit alarm + istore 1,contw + increase 1,rega + increase 1,regb + loop xor_mod32_loop + rtn + +el_boxes: + call enable_authrom + force 16,loopcnt + arg mem_input_store,rega +el_box_loop: + ifetch 1,rega + arg mem_e_box,contr + and loopcnt,3,regc + sub regc,1,null + branch e_boxes,positive + arg mem_l_box,contr +e_boxes: + iadd contr,contr + ifetch 1,contr + istore 1,rega + increase 1,rega + loop el_box_loop + branch disable_authrom + +pht: + force 8,loopcnt + arg mem_input_store,contr + copy contr,contw +pht_loop: + ifetch 1,contr + iforce rega + ifetch 1,contr + iforce regb + lshift rega,pdata + iadd regb,pdata + istore 1,contw + deposit rega + iadd regb,pdata + istore 1,contw + loop pht_loop + rtn + +/* 8 11 12 15 2 1 6 5 10 9 14 13 0 7 4 3 */ +permute: + setarg 0x8ae42c + iforce temp + force 7,loopcnt + call permute_exchange + setarg 0xd751b + iforce temp + force 5,loopcnt + call permute_exchange + fetch 1,mem_input_store+15 + iforce rega + fetch 1,mem_input_store+3 + store 1,mem_input_store+15 + deposit rega + store 1,mem_input_store+3 + rtn + +permute_exchange: + and temp,0xf,regb +permute_loop: + and temp,0xf,pdata + arg mem_input_store,contw + iadd contw,contw + ifetch 1,contw + iforce regc + deposit rega + istore 1,contw + copy regc,rega + rshift4 temp,temp + loop permute_loop + setarg mem_input_store + iadd regb,contw + deposit rega + istore 1,contw + rtn + +add16: + enable user + branch xor_add16 + +xor16: + disable user +xor_add16: /* if user is set, do add, else do xor */ + force 16,loopcnt /* rega and regb pointers to src, contw is result */ +xoradd_loop: + ifetcht 1,rega + ifetch 1,regb + branch xoradd_add,user + ixor temp,pdata + branch xoradd_store +xoradd_add: + iadd temp,pdata +xoradd_store: + istore 1,contw + increase 1,rega + increase 1,regb + loop xoradd_loop + rtn + + +function_expand: /* rega pointers to bdaddr, or aco and user is set */ + arg mem_y,contw + ifetch 6,rega + istore 6,contw + branch expand_12,user + ifetch 6,rega + branch expand_cont +expand_12: + ifetch 6,contr +expand_cont: + istore 6,contw + ifetch 4,rega + istore 4,contw + rtn + +key_offset: + arg mem_link_key,contr + arg mem_x,contw + arg 0,temp + setarg 0x8395a7 + call concatenate_temp24 + setarg 0xb3c1df + call concatenate_temp24 + setarg 0xe5e9 + call concatenate_temp16 + copy temp,regab + disable user + call key_addxor + copy regab,temp + enable user + branch key_addxor + +key_addxor: + force 8,loopcnt +key_addxor_loop: + ifetch 1,contr + compare 1,loopcnt,1 + branch key_high,user + branch key_xor,true +key_add: + iadd temp,pdata + branch key_store +key_high: + branch key_add,true +key_xor: + ixor temp,pdata +key_store: + istore 1,contw + rshift8 temp,temp + loop key_addxor_loop + rtn + +copy_aco: + fetch 6,mem_input_store+4 + store 6,mem_aco + ifetch 6,contr + istore 6,contw + rtn + +concatenate_temp24: + lshift8 temp,temp +concatenate_temp16: + lshift16 temp,temp + ior temp,temp + rtn + +ifdef TESTING +test_security: + fetch 1,0xff + branch test_security,blank + + /* inrand */ + setarg 0x1BC683 + store 3,0x0 + setarg 0x122980 + istore 3,contw + setarg 0xD0DB17 + istore 3,contw + setarg 0x2B1D78 + istore 3,contw + setarg 0x2743A6 + istore 3,contw + setarg 0xD8 + istore 1,contw + + /* comb A */ + setarg 0xA6D0C9 + store 3,0x10 + setarg 0xA9E86C + istore 3,contw + setarg 0x9E89D5 + istore 3,contw + setarg 0xC61838 + istore 3,contw + setarg 0x6F0318 + istore 3,contw + setarg 0x9F + istore 1,contw + + /* comb B */ + setarg 0x7F6833 + store 3,0x20 + setarg 0xE62E1B + istore 3,contw + setarg 0x9F67FC + istore 3,contw + setarg 0x8D3712 + istore 3,contw + setarg 0x0B846C + istore 3,contw + setarg 0x4A + istore 1,contw + + /* auth rand A */ + setarg 0xFBB686 + store 3,0x30 + setarg 0x19FE7F + istore 3,contw + setarg 0x16A439 + istore 3,contw + setarg 0xF4F6A4 + istore 3,contw + setarg 0x10D61D + istore 3,contw + setarg 0xDE + istore 1,contw + + /* auth rand B */ + setarg 0x735B0C + store 3,0x40 + setarg 0xA7F06B + istore 3,contw + setarg 0x04625E + istore 3,contw + setarg 0x3463B0 + istore 3,contw + setarg 0xB8F17A + istore 3,contw + setarg 0x7C + istore 1,contw + + /* address A */ + setarg 0xf91330 + store 3,0xb0 + setarg 0x664c7d + istore 3,contw + + /* address B */ + setarg 0xdc7100 + store 3,0xb8 + setarg 0x2ea003 + istore 3,contw + + /* sres A */ + setarg 0x2EEE19 + store 3,0x50 + setarg 0x7E + istore 1,contw + + /* sres B */ + setarg 0x4231A4 + store 3,0x58 + setarg 0xD1 + istore 1,contw + + /* linkA */ + setarg 0xa6a026 + store 3,0x60 + setarg 0x2569d2 + istore 3,contw + setarg 0xab4a9d + istore 3,contw + setarg 0x5e87c0 + istore 3,contw + setarg 0x792aa9 + istore 3,contw + setarg 0x4b + istore 1,contw + + /* linkB */ + setarg 0xa1f07d + store 3,0x70 + setarg 0xec97a6 + istore 3,contw + setarg 0xae31eb + istore 3,contw + setarg 0x6fe3c4 + istore 3,contw + setarg 0xa1ae1a + istore 3,contw + setarg 0x3a + istore 1,contw + + /* linkkey */ + setarg 0x07505b + store 3,0x80 + setarg 0xc9fe74 + istore 3,contw + setarg 0x057b76 + istore 3,contw + setarg 0x316404 + istore 3,contw + setarg 0xd884b3 + istore 3,contw + setarg 0x71 + istore 1,contw + + /* K */ + setarg 0x0c333f + store 3,0x90 + setarg 0x41de70 + istore 3,contw + setarg 0x9b05a2 + istore 3,contw + setarg 0xb954a2 + istore 3,contw + setarg 0xb37516 + istore 3,contw + setarg 0x36 + istore 1,contw + + /* kinit */ + setarg 0x5ff91a + store 3,0xa0 + setarg 0x39b5a4 + istore 3,contw + setarg 0x258f2d + istore 3,contw + setarg 0x5d4a85 + istore 3,contw + setarg 0x656ad3 + istore 3,contw + setarg 0xab + istore 1,contw + + arg 0,contr + arg mem_random_number,contw + call memcpy16 + setarg 0x3131 + store 2,mem_pin + istore 2,contw + jam 4,mem_pin_length + arg 0xb8,rega + call function_e22 + arg mem_input_store,contr + arg mem_kinit,contw + call memcpy16 + arg 0x10,rega + arg mem_kinit,regb + arg mem_random_number,contw + call xor16 + arg 0xb0,rega + call function_e21 + arg 0x60,regb + call compare16 +error_lka: + nbranch error_lka,zero + arg mem_input_store,contr + arg mem_link_key,contw + call memcpy16 + arg 0x20,rega + arg mem_kinit,regb + arg mem_random_number,contw + call xor16 + arg 0xb8,rega + call function_e21 + arg 0x70,regb + call compare16 +error_lkb: + nbranch error_lkb,zero + arg mem_input_store,rega + arg mem_link_key,regb + arg mem_link_key,contw + call xor16 + arg 0x30,contr + arg mem_random_number,contw + call memcpy16 + arg 0xb8,rega + call function_e1 + arg 0x50,regb + force 4,loopcnt + call compare_key +error_sresa: + nbranch error_sresa,zero + arg 0x40,contr + arg mem_random_number,contw + call memcpy16 + arg 0xb0,rega + call function_e1 + arg 0x58,regb + force 4,loopcnt + call compare_key +error_sresb: + nbranch error_sresb,zero + branch loop1 + + arg 0,contr + arg mem_random_number,contw + call memcpy16 + force 12,loopcnt + call memcpy + arg 0x1c,contr + arg mem_link_key,contw + call memcpy16 + arg 0x10,rega + call function_e3 + branch loop1 + +compare16: + force 16,loopcnt +compare_key: + arg mem_input_store,rega + branch compare_loop + +compare_loop: + ifetch 1,rega + ifetcht 1,regb + isub temp,null + nrtn zero + increase 1,rega + increase 1,regb + loop compare_loop + force 0,pdata + rtn + +endif + + +loop1: + branch loop1 + +/* ==================== LE security ================= */ + +generate_stk: + bpatchx patch3c_0,mem_patch3c + call function_s1 + arg mem_le_ltk,contw + branch store_aes_result + + /* contr = rand pointer */ +authenticate_rconfirm: + arg mem_le_srand,contw + branch authenticate_mconfirm,master + arg mem_le_mrand,contw +authenticate_mconfirm: + copy contr,rega + call memcpy16 + call function_c1 + arg mem_le_rconfirm,contr + branch compare_res + +generate_confirm: + arg mem_le_mrand,rega + branch generate_mrand,master + arg mem_le_srand,rega +generate_mrand: + copy rega,contw + call generate_random + branch function_c1 + +generate_sk: + arg mem_le_skdm,contr + call load_data128 + arg mem_le_ltk,contr + call load_regext + force 0x38,aes_ctrl + force 0x0,aes_ctrl + call wait_aes + arg mem_le_sk,contw + branch store_aes_result + + /* temp=packet counter, rega = length or block counter*/ +first_block_counter: + force 0x49,pdata + branch first_block +first_block_data: + force 1,pdata +first_block: + force regidx_data,regext_index /* B0 */ + lshift8 temp,regext + ior regext,regext + increase 1,regext_index + rshift8 temp,regext + rshift16 regext,regext + fetch 2,mem_le_ivm + lshift16,pdata,pdata + ior regext,regext /* octet3&octet4 of counter and low 16 bit of IV */ + increase 1,regext_index + ifetch 4,contr /* IV2-IV5 */ + iforce regext + increase 1,regext_index + ifetch 2,contr /* IV6-IV7 */ + byteswap rega,regext + lshift16 regext,regext + ior regext,regext + increase 1,regext_index + rtn + + + /* temp=packet counter, regc pointers to data */ +generate_mic: + add regc,1,contr + ifetch 1,contr + iforce rega + call first_block_counter + call do_aes_ocb + + force regidx_data,regext_index /* B1 */ + ifetch 1,regc + and_into 0x3,pdata + lshift16 pdata,regext + set1 8,regext + call clear_hidata + call do_aes_cbc + + copy rega,loopcnt + add regc,2,contr + call padding_data +generate_mic_loop: + call aes_load_data + call do_aes_cbc + deposit loopcnt + branch generate_mic_end,blank + branch generate_mic_loop +generate_mic_end: + force regidx_result,regext_index + deposit regext + store 4,mem_le_mic + rtn + +aes_crypt_data: + increase 1,rega + call first_block_data + copy regc,contr + call aes_load_xor + call do_aes_ctr + call store_enc_data + increase 16,regc + increase -16,regb + branch aes_crypt_data,positive + rtn + +le_encrypt: + bpatchx patch3c_1,mem_patch3c + arg mem_le_txheader,regc + fetcht 5,mem_le_pcnt_tx + call generate_mic + force regidx_xor,regext_index + iforce regext + force 0,rega /* rega is block counter */ + call first_block_data + call do_aes_ctr + arg mem_le_txpayload,regc + fetch 1,mem_le_txlen + add pdata,-1,regb + iadd regc,contw + force regidx_result,regext_index + deposit regext + istore 4,contw + call aes_crypt_data + fetch 1,mem_le_txlen + increase 4,pdata + store 1,mem_le_txlen + fetcht 5,mem_le_pcnt_tx + increase 1,temp + storet 5,mem_le_pcnt_tx + rtn + +le_decrypt: + bpatchx patch3c_2,mem_patch3c + fetch 1,mem_le_rxbuf+1 + sub pdata,20,null + branch le_dec_cont,positive +le_dec_cont: + arg mem_le_rxbuf+2,regc + add pdata,-1,regb + increase -4,pdata /* mic will be discarded */ + store 1,mem_le_rxbuf+1 + iadd regc,contr + ifetch 4,contr + force regidx_xor,regext_index + iforce regext + force 0,rega /* rega is block counter */ + fetcht 5,mem_le_pcnt_rx + call first_block_data + call do_aes_ctr + force regidx_result,regext_index + deposit regext + store 4,mem_le_peer_mic + call aes_crypt_data + arg mem_le_rxbuf,regc + call generate_mic + fetcht 4,mem_le_peer_mic + isub temp,pdata /* MIC ok? */ + nrtn blank + fetch 4,mem_le_last_mic /* reduntdant packet? */ + isub temp,pdata + rtn blank + storet 4,mem_le_last_mic + fetch 5,mem_le_pcnt_rx + increase 1,pdata + store 5,mem_le_pcnt_rx + force 0,pdata + rtn + +wait_aes: + nbranch wait_aes,aes_ready + rtn + +do_aes_ocb: + force 0x30,aes_ctrl + force 0x0,aes_ctrl + branch wait_aes + +do_aes_cbc: + force 0x32,aes_ctrl + force 0x2,aes_ctrl + branch wait_aes + +do_aes_ctr: + force 0x34,aes_ctrl + force 0x4,aes_ctrl + branch wait_aes + + +aes_init: + force 1,aes_ctrl + force 0,aes_ctrl + rtn +function_s1: + force regidx_data,regext_index + fetch 4,mem_le_mrand + iforce regext + increase 1,regext_index + ifetch 4,contr + iforce regext + increase 1,regext_index + fetch 4,mem_le_srand + iforce regext + increase 1,regext_index + ifetch 4,contr + iforce regext + increase 1,regext_index + call aes_clear + increase -4,regext_index + fetch 4,mem_le_tk + copy pdata,regext + increase 4,regext_index + force 0x38,aes_ctrl + force 0x8,aes_ctrl + branch wait_aes + + /* rega pointers to random number */ +function_c1: + bpatchx patch3c_3,mem_patch3c + fetch 6,mem_le_lap + fetcht 6,mem_le_plap + branch function_c1_master,master + fetch 6,mem_le_plap + fetcht 6,mem_le_lap +function_c1_master: + force regidx_xor,regext_index + copy temp,regext + increase 1,regext_index + rshift32 temp,regext + lshift16 pdata,pdata + ior regext,regext + increase 1,regext_index + rshift32 pdata,regext + increase 1,regext_index + force 0,regext /* p2 = ia || ra */ + force 0,pdata + fetch 1,mem_le_conn_peer_addr_type + fetcht 1,mem_le_adv_own_addr_type + nbranch function_c1_irat,master + //conn as master + fetch 1,mem_le_conn_own_addr_type + fetcht 1,mem_le_conn_peer_addr_type +function_c1_irat: + store 1,mem_le_iat + storet 1,mem_le_rat + force regidx_data,regext_index + arg mem_le_iat,regb + force 4,loopcnt +function_c1_loop1: + ifetch 4,rega + ifetcht 4,regb + ixor temp,regext + increase 1,regext_index + increase 4,rega + increase 4,regb + loop function_c1_loop1 /* p1 ^ r */ + call aes_clear /* k = 0 */ + increase -4,regext_index + fetch 4,mem_le_tk + copy pdata,regext + increase 4,regext_index + force 0x38,aes_ctrl + force 0xc,aes_ctrl + call wait_aes + + call aes_clear_data + force 0x3a,aes_ctrl + force 0x8,aes_ctrl + branch wait_aes + +padding_data: + compare 0,loopcnt,3 + rtn true + deposit contr + iadd loopcnt,contw + force 0,pdata +padding_loop: + istore 1,contw + increase 1,loopcnt + compare 0,loopcnt,3 + rtn true + branch padding_loop + +aes_load_data: + force regidx_data,regext_index +load_data_loop: + deposit loopcnt + branch load_data_padding,blank + ifetch 4,contr + increase -4,loopcnt +load_data_padding: + iforce regext + increase 1,regext_index + compare regidx_key,regext_index,0xf + rtn true + branch load_data_loop + +aes_load_xor: + force regidx_xor,regext_index + branch load_regext +load_key: + force regidx_key,regext_index + branch load_regext +load_data128: + force regidx_data,regext_index +load_regext: + force 4,loopcnt +load_regext_loop: + ifetch 4,contr + iforce regext + increase 1,regext_index + loop load_regext_loop + rtn + +load_sk: + arg mem_le_sk,contr + branch load_key + +clear_hidata: + force 4,loopcnt + branch clear_data_rest + +aes_clear_data: + force regidx_data,regext_index +aes_clear: + force 4,loopcnt +clear_loop: + force 0,regext +clear_data_rest: + increase 1,regext_index + loop clear_loop + rtn + +store_aes_result: + force regidx_result,regext_index + force 4,loopcnt +send_aes_result_loop: + deposit regext + istore 4,contw + increase 1,regext_index + loop send_aes_result_loop + rtn + +store_enc_data: + force regidx_result,regext_index + copy regc,contw + add regb,1,loopcnt + sub loopcnt,15,null + branch store_enc_loop,positive + force 16,loopcnt +store_enc_loop: + deposit regext + sub loopcnt,3,null + branch store_enc_byte,positive + istore 4,contw + increase -4,loopcnt + rtn zero + increase 1,regext_index + branch store_enc_loop +store_enc_byte: + istore 1,contw + rshift8 pdata,pdata + loop store_enc_byte + rtn + + /* contr pointers to value to be compared */ +compare_res: + force regidx_result,regext_index + force 4,loopcnt +compare_res_loop: + ifetch 4,contr + isub regext,null + nrtn zero + increase 1,regext_index + loop compare_res_loop + force 0,null + rtn + +enable_authrom: + hfetch 1,core_clkoff + set0 CLOCK_OFF_AUTH_ROM,pdata + hstore 1,core_clkoff + rtn + +disable_authrom: + hfetch 1,core_clkoff + set1 CLOCK_OFF_AUTH_ROM,pdata + hstore 1,core_clkoff + rtn + +init_memp: + arg mem_p,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3fbff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3cfff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffef + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x26c7f + setsect 2,0x146b + setsect 3,0x37bb3 + istore 9,contw + setsect 0,0x1feb8 + setsect 1,0x10c12 + setsect 2,0x2b722 + setsect 3,0x29fa6 + istore 9,contw + setsect 0,0xe70f + setsect 1,0x16720 + setsect 2,0x519e + setsect 3,0x19084 + istore 9,contw + setsect 0,0x31012 + setsect 1,0x360bf + setsect 2,0x3f0af + setsect 3,0x3d3 + istore 9,contw + setsect 0,0x3a188 + setsect 1,0x3ad0 + setsect 2,0x3cbf2 + setsect 3,0x243d9 + istore 9,contw + setsect 0,0x2b030 + setsect 1,0x36a03 + setsect 2,0x11188 + setsect 3,0x1e520 + istore 9,contw + setsect 0,0x3a11e + setsect 1,0xfe5d + setsect 2,0xdd57 + setsect 3,0x1ac93 + istore 9,contw + setsect 0,0x11ed + setsect 1,0x218c4 + setsect 2,0x8da7 + setsect 3,0x257ff + istore 9,contw + setsect 0,0x3192b + setsect 1,0x34641 + setsect 2,0x1be0c + setsect 3,0x366ad + istore 9,contw + setsect 0,0x1f83 + setsect 1,0x15a23 + setsect 2,0x3f9b0 + setsect 3,0x3949 + istore 9,contw + setsect 0,0x13a51 + setsect 1,0x153fd + setsect 2,0x3372a + setsect 3,0xf1bb + istore 9,contw + setsect 0,0x3ae85 + setsect 1,0x1eed9 + setsect 2,0x9e66 + setsect 3,0x1a8 + istore 8,contw + rtn + +ifdef SECURE_CONNECTION + + +init_memp_256: + arg mem_p_256,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3f + setsect 2,0x0 + setsect 3,0x0 + istore 9,contw + setsect 0,0x0 + setsect 1,0x0 + setsect 2,0x1000 + setsect 3,0x0 + istore 9,contw + setsect 0,0x3ff00 + setsect 1,0x3ffff + setsect 2,0x3ffcf + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x3ffff + setsect 1,0x3ffff + setsect 2,0x3ffff + setsect 3,0x3ff + istore 9,contw + setsect 0,0x0 + setsect 1,0x0 + setsect 2,0x0 + setsect 3,0x0 + istore 9,contw + setsect 0,0x10000 + setsect 1,0x0 + setsect 2,0x3f000 + setsect 3,0x3ffff + istore 9,contw + setsect 0,0x296ff + setsect 1,0x22630 + setsect 2,0x3945d + setsect 3,0x3d284 + istore 9,contw + setsect 0,0x333a0 + setsect 1,0x4b7a + setsect 2,0x37d8 + setsect 3,0x3c9dc + istore 9,contw + setsect 0,0x3a440 + setsect 1,0x1b958 + setsect 2,0x38bce + setsect 3,0x1091f + istore 9,contw + setsect 0,0x2e12c + setsect 1,0x1f47c + setsect 2,0x356b1 + setsect 3,0x2fd47 + istore 9,contw + setsect 0,0x6837 + setsect 1,0x2ed90 + setsect 2,0x1ecec + setsect 3,0x1acc5 + istore 9,contw + setsect 0,0x23357 + setsect 1,0x18af3 + setsect 2,0xf9e1 + setsect 3,0x129f0 + istore 9,contw + setsect 0,0x2e7eb + setsect 1,0x3e6e3 + setsect 2,0x3e1a7 + setsect 3,0x10b8b + istore 9,contw + setsect 0,0x24fe3 + setsect 1,0x20ef + setsect 2,0x1b5a6 + setsect 3,0xdc2f + istore 9,contw + setsect 0,0x13860 + setsect 1,0x2bd69 + setsect 2,0x391a + setsect 3,0x1b222 + istore 9,contw + rtn +endif + Index: 1066_OTP_FLASH/program/sim.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/sim.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/sim.prog (working copy) @@ -0,0 +1,327 @@ +simstart: + force 8,radio_ctrl + force 0,radio_ctrl + hjam 0xe0,0x907 // set if_phase=7 for simulation environment + hjam 0xe0,0x90a + hjam 0x25,0x912 + hjam 0xff,rfen_ck + hjam 5,core_clksel + hfetch 3,0xffd +// branch sim_usb +// branch sim_iic +// branch sim_clk +// call sim_uart +// branch sim_lpm +// branch sim_c1 +// branch loop +// call sim_spi +// call sim_eep +// branch test_tx +// branch sim_le +// branch sim_250k + branch sim_main +sim_lpm: + hfetch 1,1 + bbit1 7,sim_assert + hfetch 1,core_lpm_xtalcnt + nbranch sim_lpm_sleep,blank + setarg 0 + set1 31,pdata + store 8,mem_gpio_wakeup_low + branch lpm_hibernate +sim_lpm_sleep: + jam 1,mem_context + branch sim_lpm_wait,wake + hjam 0x70,core_bist_ctrl + hjam ccnt_start,core_misc_ctrl +sim_lpm_wait: + call lpo_calibration + fetch 3,mem_clks_per_lpo + branch sim_lpm_wait,blank + call lpm_recover_clk,wake + jam 0x1b,mem_lpm_ldocnt + arg sim_assert,loopcnt + hfetch 1,core_gpio_wakeup_low+2 + bbit0 2,sim_lpm_loop + until null,lpo_edge + hjam 0x20,core_misc_ctrl + until null,lpo_edge +sim_lpm_loop: + hfetch 1,core_misc_status + bbit1 6,sim_lpm_loop + hfetch 1,core_gpio_in+3 + compare 0x20,pdata,0x20 + setarg 0 + setflag true,29,pdata + setflag true,30,pdata + store 4,mem_gpio_wakeup_low + setarg 0 + nsetflag true,29,pdata + nsetflag true,30,pdata + store 4,mem_gpio_wakeup_high + arg 300,temp + branch lpm_sleep + +sim_assert: + branch sim_assert + + +sim_main: + call init_param + setarg 0 + hstore 2,core_clkoff + setarg 0xff00 + hstore 2,core_lpm_reg+2 + hjam lpmreg_sel_ctrl2,core_lpm_wr + hfetch 1,1 + bbit1 7,sim_slave + jam dvc_op_hci,mem_device_option + fetch 6,mem_lap + store 6,mem_hci_plap + setarg 0xbdbdbd + store 3,mem_lap + istore 3,contw + jam hci_cmd_create_conn,mem_hci_cmd + force 0x10,pdata + add pdata,-2,clkn_bt + store 4,mem_page_clk + rshift clkn_bt,pdata + store 4,mem_last_clkn + jam 0,mem_scan_mode +sim_loop: + call idle_dispatch + fetch 1,mem_context + bbit0 state_inconn,sim_skip + set1 mark_tx_l2cap,mark + fetch 1,mem_context + coffset_op + set1 op_txl2cap,pdata + store 1,mem_context + coffset_op + jam 0,mem_context + coffset_lmp_to_send + jam 0,mem_lmo_opcode2 + setarg 700 + store 2,mem_tx_len + setarg mem_tmp_buffer + store 2,mem_txptr + jam 6,mem_tx_lch + jam 1,mem_hci_conn_handle +sim_skip: + call connection_dispatch + branch sim_loop + +sim_slave: + jam 2,mem_scan_mode + call page_scan_dispatch + branch sim_loop + +sim_iic: + call iicd_init_12m + setarg 3 + hstore 2,core_iicd_txlen + setarg 0x1f051e + store 3,mem_iicd_addr + setarg mem_iicd_addr + hstore 2,core_iicd_txaddr + setarg 1 + hstore 2,core_iicd_rxlen + hjam 3,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + call wait_iicd_done + nop 300 + setarg 0xd321d2 + store 3,mem_iicd_addr + hjam iicd_start,core_misc_ctrl + call wait_iicd_done +s_loop: + branch s_loop + +sim_usb: + call usb_init +sim_usb_loop: + call usb_isr + branch sim_usb_loop + +ifdef NULL +sim_250k: + call init_250k + hfetch 1,1 + bbit1 7,sim_250k_rx + call tx_radio_freq + call start_transmitter /* get ready for that id packet */ + nop 600 + enable encode_fec0 + set1 TXGFSK,radio_ctrl + force 0,pdata + inject mod,9 + setarg 0xaa + inject mod,8 + preload access + inject mod,32 + setarg 0x1da861 + inject mod,24 + setarg 0x94445b + inject mod,24 + setarg 0x1275f + inject mod,24 + branch loop +sim_250k_rx: + call rx_radio_freq + call start_receiver /* wait for that id packet from master */ + enable decode_fec0 + correlate null,never + parse demod,bucket,72 + branch loop + + + + + +sim_uart: + setarg mem_le_test_uart_rxbuf + hstore 2,core_uart_tsaddr + hstore 2,core_uart_twptr + hstore 2,core_uart_trptrp + increase 0x80,pdata + hstore 2,core_uart_teaddr + hstore 2,core_uart_rsaddr + hstore 2,core_uart_rrptr + increase 0x80,pdata + hstore 2,core_uart_readdr + increase 1,pdata + hjam 0x84,core_gpio_sel1 + hjam 0x80,core_gpio_pu2 + hjam 0xe5,core_uart_ctrl + setarg 0x30 + hstore 2,core_uart_baud + hfetch 1,1 + bbit1 7,sim_uart_wait + setarg 0x1357d9a + store 4,mem_le_test_uart_rxbuf + setarg 0x55aa69 + istore 3,contw + setarg 0xfedcb3 + istore 3,contw + deposit contw + hstore 2,core_uart_twptr +sim_uart_wait: + nop 20000 + rtn + +sim_spi: + call spid_init_flash + call spid_unlock_flash + call spid_init + setarg 0x35 + call spid_read_reg + nop 200 + force 4,temp + setarg 0x42 + branch spid_read_regs + +sim_eep: + call iicd_init_12m + setarg 3 + hstore 2,core_iicd_txlen + setarg 0x1f051e + store 3,mem_iicd_addr + setarg mem_iicd_addr + hstore 2,core_iicd_txaddr + setarg 1 + hstore 2,core_iicd_rxlen + hjam 3,core_iicd_ctrl + hjam iicd_start,core_misc_ctrl + call wait_iicd_done + nop 200 + setarg 0x18f7a3b + store 4,mem_iicd_addr + arg mem_iicd_addr,rega + arg 4,temp + setarg 0x1235 + call iicd_write_eep + nop 300 + arg mem_ucode_keybuf,rega + arg 1,temp + setarg 0x3512 + store 2,mem_addr_mi + call iicd_read_eep + arg 1,temp + setarg 0x3512 + store 2,mem_addr_mi + call iicd_read_eep + nop 200 + setarg 0xa1 + arg 3,temp + arg mem_ucode_keybuf,rega + branch iicd_read_data + +sim_otp: + setarg 0x123456 + store 3,0x800 + setarg 0x10 + arg 0x800,rega + arg 0x10,loopcnt + branch otp_write + +sim_clk: + add lpo_time,12,alarm + snooze +clock_loop: + nop 100 + hjam 1,core_config + setflag user,0,pdata + random pdata + and_into 0x1f,pdata + hstore 1,core_clksel + nop 70 + hjam 2,core_kick + nop 200 + branch clock_loop + hjam 2,core_clksel + setarg 1500 + call sleep + hjam 0x42,core_clksel + add lpo_time,200,alarm + snooze + branch 0x4000 + +sim_c1: + setarg 0xb4b5b6 + store 3,mem_le_lap + setarg 0xb1b2b3 + istore 3,contw + setarg 0xa4a5a6 + store 3,mem_le_plap + setarg 0xa1a2a3 + istore 3,contw + setarg 0x101 + store 4,mem_le_preq + setarg 0x70710 + istore 3,contw + setarg 0x302 + store 4,mem_le_pres + setarg 0x50008 + istore 3,contw + + arg regidx_key,regext_index + arg 4,loopcnt +sim_clear_key_loop: + arg 0,regext + increase 1,regext_index + loop sim_clear_key_loop + + setarg 0x702EE0 + store 3,mem_le_rconfirm + setarg 0x274EC6 + istore 3,contw + setarg 0x0E6388 + istore 3,contw + setarg 0x56AD6F + istore 3,contw + setarg 0x83D521 + istore 3,contw + setarg 0x57 + istore 1,contw + arg mem_le_rconfirm,rega + call aes_init + call function_c1 + branch loop +endif Index: 1066_OTP_FLASH/program/simple_pairing.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/simple_pairing.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/simple_pairing.prog (working copy) @@ -0,0 +1,2362 @@ + +publickey_init: + fetch 1,mem_ssp_enable + nbranch sp_initialize,blank + branch sp_initialize_256 + +sp_calc_sequence_256_check: + bpatchx patch3c_4,mem_patch3c + fetch 1,mem_ssp_enable + rtn blank + fetch 1,mem_sp_local_key_invalid + rtnne SP_KEY_VALID + fetch 1,mem_le_secure_connect_enable + rtn blank + fetch 1,mem_le_sc_local_key_invalid + rtneq SP_KEY_VALID_256 + fetch 2,mem_ui_state_map + bbit1 UI_STATE_BT_CONNECTED,stop_publickey_calc_256 + fetch 1,mem_le_sc_calc + beq SP_CALC_STANDBY,sp_initialize_256 + rtn +stop_publickey_calc_256: + jam SP_CALC_STANDBY,mem_le_sc_calc + rtn + +ifdef SIMPLE_PAIRING + +sp_initialize: + bpatchx patch3c_5,mem_patch3c + fetch 1,mem_ssp_enable + branch ssp_disable, blank + call ssp_enable + call sp_clear_flags + branch sp_pubkey_calc + +sp_clear_flags: + setarg 0 + store 8,mem_sp_state_start + store 4,mem_sp_flag_start + store 7,mem_sp_iocap_remote + rtn + +sp_generate_local_key: + jam SP_FLAG_COMMIT,mem_sp_flag + branch sp_generate_local_key0 +sp_master_generate_local_key: + fetch 1,mem_sp_local_key_invalid + beq SP_KEY_VALID,sp_dhkey_calc + branch assert +sp_generate_local_key0: + fetch 1,mem_sp_local_key_invalid + beq SP_KEY_VALID,sp_start_send_pubkey + branch sp_pubkey_calc + +sp_start_send_pubkey: + call sp_dhkey_calc + fetch 1,mem_master_sp_state + nrtn blank + jam SP_STAT_KEY_SEND,mem_sp_state + rtn + + +sp_calc_check_publickey_256: + call sp_calc_b256 + arg mem_le_pubkey_remote_y_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 + arg mem_le_pubkey_remote_x_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 + arg mem_t2_256,regA + arg mem_le_pubkey_remote_x_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 + arg mem_a_256,regA + arg mem_le_pubkey_remote_x_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod_256 + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + call bn_addmod_256 + arg 32,loopcnt + arg mem_t7_256,regA + arg mem_t0_256,regB + branch string_compare + +sp_calc_b256: + arg mem_gy_256,regA + arg mem_t0_256,contw + call bn_sqrmod_256 + arg mem_gx_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 + arg mem_t2_256,regA + arg mem_gx_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 + arg mem_a_256,regA + arg mem_gx_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod_256 + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + branch bn_submod_256 + +sp_calc_check_publickey: + call sp_calc_b + arg mem_sp_pubkey_remote_y,regA + arg mem_t7_256,contw + call bn_sqrmod + arg mem_sp_pubkey_remote_x,regA + arg mem_t2_256,contw + call bn_sqrmod + arg mem_t2_256,regA + arg mem_sp_pubkey_remote_x,regB + arg mem_t2_256,contw + call bn_mulmod + arg mem_a,regA + arg mem_sp_pubkey_remote_x,regB + arg mem_t3_256,contw + call bn_mulmod + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + call bn_addmod + arg 24,loopcnt + arg mem_t7_256,regA + arg mem_t0_256,regB + branch string_compare + +sp_calc_b: + arg mem_gy,regA + arg mem_t0_256,contw + call bn_sqrmod + arg mem_gx,regA + arg mem_t2_256,contw + call bn_sqrmod + arg mem_t2_256,regA + arg mem_gx,regB + arg mem_t2_256,contw + call bn_mulmod + arg mem_a,regA + arg mem_gx,regB + arg mem_t3_256,contw + call bn_mulmod + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_addmod + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + branch bn_submod + + +sp_calculate_commitment: + fetch 1,mem_sp_calc + bne SP_CALC_STANDBY,sp_calculate_commitment_wait_dhkey_calc + call sp_local_random_key_generator + arg mem_sp_prarm_stack,contw + setarg mem_sp_random_local_end + istore 2,contw + setarg mem_sp_pubkey_local_x_end + istore 2,contw + setarg mem_sp_pubkey_remote_x_end + istore 2,contw + branch sp_calculate_commitment0 +master_sp_calculate_commitment: + arg mem_sp_prarm_stack,contw + setarg mem_sp_random_remote_end + istore 2,contw + setarg mem_sp_pubkey_remote_x_end + istore 2,contw + setarg mem_sp_pubkey_local_x_end + istore 2,contw +sp_calculate_commitment0: + call function_f1 + fetch 1,mem_master_sp_state + beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment0 + jam SP_FLAG_COMMIT,mem_sp_flag + jam SP_STAT_COMMIT_SEND,mem_sp_state + rtn +master_sp_calculate_commitment0: + jam SP_STAT_COMMITMENT_COMPARE,mem_master_sp_state + call sp_master_generate_local_key + branch master_set_mem_master_sp_flag + +sp_local_random_key_generator: + arg mem_sp_random_local,contw + force 8,queue + branch random_generator + +sp_calculate_commitment_wait_dhkey_calc: + jam SP_FLAG_COMMIT,mem_sp_flag + rtn + +sp_confirm_check: + /* calculate Ea here */ + bpatchx patch3c_6,mem_patch3c + arg mem_addr_value,contw + fetch 6,mem_lap + istore 6,contw + fetch 6,mem_plap + istore 6,contw + fetch 3,mem_sp_iocap_remote + istore 3,contw + + call function_f3a + + arg mem_sp_calc_result_high,regA + arg mem_sp_check_result,regB + force 4,queue + call compare4 + nbranch sp_confirm_check_failed,true + + call sp_confirm_check_success + jam LMP_DHKey_Check,mem_lmi_opcode2 + branch tid_set_reply + +sp_confirm_check_success: + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_success_master + jam SP_STAT_CONFIRM_CALC,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + jam LMP_ACCEPTED,mem_lmo_opcode2 + rtn +sp_confirm_check_success_master: + jam LMP_ACCEPTED,mem_lmo_opcode2 + jam SP_STATE_END,mem_master_sp_state + branch master_set_mem_master_sp_flag + //accept opcode? + +sp_confirm_check_failed: + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_failed_master + jam SP_STAT_NULL,mem_sp_state + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + //accept opcode? + jam AUTHENTICATION_FAILURE_ERROR,mem_lmo_reason2 + rtn +sp_confirm_check_failed_master: + jam LMP_NOT_ACCEPTED,mem_lmo_opcode2 + jam SP_STAT_NULL,mem_master_sp_state + rtn + +sp_confirm_calc: + fetch 1,mem_sp_dh_ready + beq SP_FLAG_COMMIT, sp_confirm_calc_ready + jam SP_STAT_CONFIRM_CALC,mem_master_sp_state + branch master_set_mem_master_sp_flag +sp_confirm_calc_ready: + arg mem_addr_value,contw + fetch 6,mem_plap + istore 6,contw + fetch 6,mem_lap + istore 6,contw + fetch 3,mem_sp_iocap_local + istore 3,contw + + call function_f3b + fetch 1,mem_master_sp_state + beq SP_STAT_CONFIRM_CALC,sp_confirm_calc_master + jam SP_STAT_CONFIRM_SEND,mem_sp_state + jam SP_FLAG_COMMIT,mem_sp_flag + rtn +sp_confirm_calc_master: + jam SP_STAT_CONFIRM_SEND,mem_master_sp_state + jam SP_FLAG_COMMIT,mem_master_sp_flag + rtn + +sp_master_key_prarm_push: + arg mem_sp_prarm_stack,contw + fetch 6,mem_plap + istore 6,contw + fetch 6,mem_lap + istore 6,contw + setarg mem_sp_random_local_end + istore 2,contw + setarg mem_sp_random_remote_end + istore 2,contw + branch sp_link_key_calc +sp_link_key_prarm_push: + jam SP_STAT_DONE,mem_sp_state + arg mem_sp_prarm_stack,contw + fetch 6,mem_lap + istore 6,contw + fetch 6,mem_plap + istore 6,contw + setarg mem_sp_random_remote_end + istore 2,contw + setarg mem_sp_random_local_end + istore 2,contw +sp_link_key_calc: + /*calculate Link key here */ + arg mem_addr_value,contw + fetch 6,mem_sp_prarm_stack + istore 6,contw + fetch 6,mem_sp_prarm_stack+6 + istore 6,contw + + call function_f2 + + /*handle linkkey */ + jam 1,mem_link_key_exists + arg mem_link_key,contw + arg mem_sp_calc_result_high,contr + call memcpy16 + branch generate_linkkey_continue + + +sp_pubkey_calc: + bpatchx patch3c_7,mem_patch3c + fetch 1,mem_sp_local_key_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_sp_calc + rtnne SP_CALC_STANDBY + arg mem_sp_private_key,contw + force 11,queue + call random_generator + random pdata + rshift pdata,pdata + istore 2,contw +/* we don't need fixed private key,generate random key instead */ + arg mem_k,contw + arg mem_sp_private_key,contr + call memcpy24 //mem_sp_private_key=>mem_k 24BYTES + + arg mem_ax,contw + arg mem_gx,contr + call memcpy48 //mem_gx=>mem_ax 48bytes + + arg mem_az,contw + call bn_zero + jam 1,mem_az //0=>mem_az 24bytes + + call eckp_calc_init + jam SP_CALC_PUBKEY,mem_sp_calc + rtn + +sp_pubkey_generated: + arg mem_sp_pubkey_local,contw + arg mem_bx,contr + call memcpy48 + jam SP_KEY_VALID,mem_sp_local_key_invalid + jam SP_CALC_STANDBY,mem_sp_calc + rtn + +sp_dhkey_calc: + bpatchx patch3d_0,mem_patch3d + fetch 1,mem_sp_dhkey_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_sp_calc + rtnne SP_CALC_STANDBY + + arg mem_k,contw + arg mem_sp_private_key,contr + call memcpy24 + + arg mem_ax,contw + arg mem_sp_pubkey_remote,contr + call memcpy48 + + arg mem_az,contw + call bn_zero + jam 1,mem_az + + call eckp_calc_init + jam SP_CALC_DHKEY,mem_sp_calc + rtn + +sp_dhkey_generated: + jam SP_FLAG_COMMIT,mem_sp_dh_ready + arg mem_sp_dhkey,contw + arg mem_bx,contr + call memcpy24 + jam SP_KEY_VALID,mem_sp_dhkey_invalid + jam SP_CALC_STANDBY,mem_sp_calc + rtn + +random_generator: + increase -1,queue + nrtn positive + random pdata + istore 2,contw + branch random_generator +compare4: + increase -1,queue + nbranch compare4_success,positive + ifetch 4,regA + copy pdata,temp + ifetch 4,regB + iflip temp,pdata + nbranch compare4_failed,zero + increase 4,regA + increase 4,regB + branch compare4 +compare4_failed: + disable true + rtn +compare4_success: + enable true + rtn + +/*************************************************/ +/** Message state machine routines ***************/ +/*************************************************/ +// simple pairing support + +simple_pairing_sequence: + bpatchx patch3d_1,mem_patch3d + fetch 1,mem_sp_flag + rtn blank + call lmo_fifo_check + nrtn blank + jam SP_FLAG_STANDBY,mem_sp_flag + fetch 1,mem_sp_state + beq SP_STAT_KEY_SEND,sp_send_LMP_ENCAPSULATED_HEADER + beq SP_STAT_COMMIT_SEND,sp_send_LMP_SIMPLE_PAIRING_COMFIRM + beq SP_STAT_RANDOM_SEND,sp_send_LMP_SIMPLE_PAIRING_NUMBER + beq SP_STAT_CONFIRM_SEND,sp_send_LMP_DHKEY_CHECK + beq SP_STAT_KEY_GENERATE,sp_generate_local_key + beq SP_STAT_COMMIT_CALC,sp_calculate_commitment + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check + beq SP_STAT_CONFIRM_CALC,sp_confirm_calc + beq SP_STAT_LINK_KEY_CALC,sp_link_key_prarm_push + //beq SP_STAT_FEATURE_EXT_SEND,send_LMP_FEATURES_REQ_EXT + rtn + +master_simple_paring_sequence: + bpatchx patch3d_2,mem_patch3d + fetch 1,mem_master_sp_flag + rtn blank + call lmo_fifo_check + nrtn blank + jam SP_FLAG_STANDBY,mem_master_sp_flag + fetch 1,mem_master_sp_state + beq SP_MASTER_STAT_START_SKIP,sp_master_send_io_cap_get + beq SP_MASTER_STAT_START_DONE,sp_master_send_io_cap_send + beq SP_STAT_KEY_SEND,sp_master_send_LMP_ENCAPSULATED_HEADER + beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment + beq SP_STAT_COMMITMENT_COMPARE,sp_master_commitment_compare + beq SP_STAT_RANDOM_SEND,sp_master_send_LMP_SIMPLE_PAIRING_NUMBER + beq SP_STAT_CONFIRM_CALC,sp_confirm_calc + beq SP_STAT_CONFIRM_SEND,master_sp_send_lmp_dhkey_check + beq SP_STAT_CONFIRM_CHECK,sp_confirm_check + beq SP_STATE_END,master_sp_sm_end + rtn + +master_set_mem_master_sp_flag: + jam SP_FLAG_COMMIT,mem_master_sp_flag + rtn + +master_clear_mem_master_sp_flag: + jam SP_FLAG_STANDBY,mem_master_sp_flag + rtn +sp_calc_sequence: + bpatchx patch3d_3,mem_patch3d + fetch 1,mem_ssp_enable + rtn blank + fetch 1,mem_sp_calc + rtn blank + increase 0x80,pdata + store 1,mem_sp_calc + rtnbit1 7 + fetch 1,mem_ec_loopc + branch sp_calc_sequence_done,blank + branch eckp_calc + +sp_calc_sequence_done: + call ecunmapz + fetch 1,mem_sp_calc + beq SP_CALC_PUBKEY,sp_pubkey_generated + beq SP_CALC_DHKEY,sp_dhkey_generated + rtn + + +bn_testbit: + and pdata,7,queue + rshift3 pdata,pdata + iadd contr,contr + ifetch 1,contr + qisolate0 pdata + rtn + + +ec_copy: + call memcpy24 + call memcpy24 + branch memcpy24 + + +bn_eq_zero: + ifetch 8,contr + nrtn blank + ifetch 8,contr + nrtn blank + ifetch 8,contr + rtn + + + /* return zero if eq */ + +bn_eq_0: + ifetch 4,regA + iforce temp + ifetch 4,regB + isub temp,null + nrtn zero + increase 4,regA + increase 4,regB + loop bn_eq_0 + rtn + + /* return positive if A >= B */ +bn_bigeq: + force 6,loopcnt + increase 20,regA + increase 20,regB +bn_bigeq_0: + ifetch 4,regB + iforce temp + ifetch 4,regA + isub temp,pdata + nrtn positive + nrtn blank + increase -4,regA + increase -4,regB + loop bn_bigeq_0 + rtn + +bn_add: + force 6,loopcnt + force 0,regC +bn_add_0: + ifetch 4,regA + iforce temp + ifetch 4,regB + iadd temp,pdata + iadd regC,pdata + istore 4,contw + isolate1 32,pdata + setflag true,0,regC + increase 4,regA + increase 4,regB + loop bn_add_0 + rtn + +bn_sub: + force 6,loopcnt + force 0,regC +bn_sub_0: + ifetch 4,regB + iforce temp + ifetch 4,regA + isub temp,pdata + isub regC,pdata + istore 4,contw + isolate1 32,pdata + setflag true,0,regC + increase 4,regA + increase 4,regB + loop bn_sub_0 + rtn + +bn_rshift6: + force 6,loopcnt + increase 20,regA +bn_rshift: + force 0,regC +bn_rshift_0: + ifetch 4,regA + isolate1 0,pdata + setflag true,1,regC + rshift pdata,pdata + isolate1 0,regC + setflag true,31,pdata + istore 4,regA + increase -4,regA + rshift regC,regC + loop bn_rshift_0 + rtn + +bn_lshift: + force 6,loopcnt + force 0,regC +bn_lshift_0: + ifetch 4,regA + isolate1 31,pdata + setflag true,1,regC + lshift pdata,pdata + isolate1 0,regC + setflag true,0,pdata + istore 4,regA + increase 4,regA + rshift regC,regC + loop bn_lshift_0 + rtn + +bn_lshiftmod: + call bn_lshift +bn_lshiftmod_ismod: + isolate1 0,regC + branch bn_lshiftmod_0,true + arg mem_p,regB + copy regA,regC + increase -24,regA + call bn_bigeq + nrtn positive + copy regC,regA +bn_lshiftmod_0: + increase -24,regA + arg mem_p,regB + copy regA,contw + branch bn_sub + + +bn_addmod: + call bn_add + copy contw,regA + branch bn_lshiftmod_ismod + +bn_submod: + call bn_sub + isolate0 0,regC + rtn true + arg mem_p,regB + add contw,-24,regA + copy regA,contw + branch bn_add + + +bn_p192mod: + copy contw,timeup /* save result ptr */ + copy regA,alarm /* temp save regA */ + arg mem_tmp2,regB + copy regB,contw + add regA,24,contr + ifetch 8,contr + istore 8,contw + istore 8,contw + force 0,pdata + istore 8,contw + copy timeup,contw + call bn_addmod + arg mem_tmp2,regB + copy regB,contw + force 0,pdata + istore 8,contw + add alarm,32,contr + ifetch 8,contr + istore 8,contw + istore 8,contw + copy timeup,regA + copy regA,contw + call bn_addmod + arg mem_tmp2,regB + copy regB,contw + add alarm,40,contr + ifetch 8,contr + istore 8,contw + istore 8,contw + istore 8,contw + copy timeup,regA + copy regA,contw + branch bn_addmod + + +bn_load: + force 6,loopcnt +bn_load_0: + ifetch 4,contr + iforce regext + increase 1,regext_index + loop bn_load_0 + rtn + + + /* cost 1562 clks */ +bn_mulmod: + copy contw,timeup /* save result ptr */ + arg mem_tmp1,contw + call bn_zero + arg mem_tmp1,contw + copy regA,contr + force 0,regext_index + call bn_load + copy regB,contr + call bn_load + force 0,regB +bn_mulmod_1: + force 0,temp + force 6,regC +bn_mulmod_0: + ifetch 4,contw /* d[i+j] */ + iforce regA + copy regB,regext_index + deposit regext + copy regC,regext_index + imul32 regext,pdata + iadd regA,pdata /* uv = a[i]*b[j] + d[i+j] */ + iadd temp,pdata /* uv += u */ + istore 4,contw /* ->d[i+j] */ + rshift32 pdata,temp /* temp = u = uv >> 32 */ + increase 1,regC + compare 12,regC,0xff + nbranch bn_mulmod_0,true + deposit temp + istore 4,contw /* d[i + 12] = u */ + increase -24,contw + increase 1,regB + compare 6,regB,0xff + nbranch bn_mulmod_1,true + arg mem_tmp1,regA + copy timeup,contw + branch bn_p192mod + + +bn_sqrmod: + copy regA,regB + branch bn_mulmod + +bn_rshifteven: + copy regA,alarm +bn_rshifteven_1: + copy alarm,regA + ifetch 1,regA + isolate1 0,pdata + rtn true + call bn_rshift6 + ifetch 1,regB + isolate0 0,pdata + branch bn_rshifteven_0,true + arg mem_p,regA + copy regB,contw + call bn_add + ifetch 1,regB + iadd regC,pdata + istore 1,regB /* [6] */ + increase -24,regB +bn_rshifteven_0: + add regB,24,regA + force 7,loopcnt + call bn_rshift + branch bn_rshifteven_1 + + /* cost 141910 clks */ +bn_invmod: + copy contw,timeup /* save result ptr */ + arg mem_tmp0,contw /* x */ + call bn_zero + force 0,pdata + store 4,mem_tmp5 + store 4,mem_t2 + jam 1,mem_tmp0 + arg mem_tmp1,contw /* y */ + call bn_zero + arg mem_p,contr + arg mem_tmp2,contw /* a */ + call memcpy24 + copy regA,contr + arg mem_tmp3,contw /* b */ + call memcpy24 +bn_invmod_2: + arg mem_tmp3,contr + call bn_eq_zero + branch bn_invmod_0,blank + arg mem_tmp3,regA + arg mem_tmp0,regB + call bn_rshifteven + + arg mem_tmp2,regA + arg mem_tmp1,regB + call bn_rshifteven + arg mem_tmp3,regA + arg mem_tmp2,regB + call bn_bigeq + branch bn_invmod_1,positive + arg mem_tmp2,regA + arg mem_tmp3,regB + copy regA,contw + call bn_sub + arg mem_tmp0,regA + arg mem_tmp1,regB + copy regB,contw + call bn_add + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_2 +bn_invmod_1: + arg mem_tmp3,regA + arg mem_tmp2,regB + copy regA,contw + call bn_sub + arg mem_tmp1,regA + arg mem_tmp0,regB + copy regB,contw + call bn_add + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_2 +bn_invmod_0: + arg mem_tmp0,contw + call bn_zero + fetch 1,mem_tmp5 + store 1,mem_tmp0 + store 1,mem_tmp0a + arg mem_tmp0,regA + arg mem_tmp1,regB + copy regB,contw + call bn_addmod + arg mem_p,regA + arg mem_tmp1,regB + copy timeup,contw + branch bn_submod + + + + /* cost 64742 clks */ +ecdbl: + arg mem_cz,regA + arg mem_t2,contw + call bn_sqrmod + arg mem_t2,regA + arg mem_t3,contw + call bn_sqrmod + arg mem_a,regA + arg mem_t3,regB + arg mem_t3,contw + call bn_mulmod /* t3=a*z4 */ + arg mem_cx,regA + arg mem_t2,contw + call bn_sqrmod + arg mem_t2,contr + arg mem_t1,contw + call memcpy24 + arg mem_t1,regA + call bn_lshiftmod + arg mem_t2,regA + arg mem_t1,regB + arg mem_t2,contw + call bn_addmod + arg mem_t2,regA + arg mem_t3,regB + arg mem_t2,contw + call bn_addmod /* t2=3*x2 + z*z4 D */ + arg mem_cx,contr + arg mem_t1,contw + call memcpy24 + arg mem_cy,regA + arg mem_t3,contw + call bn_sqrmod + arg mem_t1,regA + call bn_lshiftmod + arg mem_t1,regA + call bn_lshiftmod + arg mem_t1,regA + arg mem_t3,regB + arg mem_t1,contw + call bn_mulmod /* t1=4x*y2 B */ + arg mem_t3,regA + arg mem_t0,contw + call bn_sqrmod + arg mem_t0,regA + call bn_lshiftmod + arg mem_t0,regA + call bn_lshiftmod + arg mem_t0,regA + call bn_lshiftmod /* t0=8*y4 C */ + arg mem_cy,contr + arg mem_t3,contw + call memcpy24 + arg mem_t3,regA + call bn_lshiftmod + arg mem_t3,regA + arg mem_cz,regB + arg mem_cz,contw + call bn_mulmod + arg mem_t2,regA + arg mem_t3,contw + call bn_sqrmod + arg mem_t3,regA + arg mem_t1,regB + arg mem_t3,contw + call bn_submod + arg mem_t3,regA + arg mem_t1,regB + arg mem_cx,contw + call bn_submod + arg mem_t1,regA + arg mem_cx,regB + arg mem_t3,contw + call bn_submod + arg mem_t3,regA + arg mem_t2,regB + arg mem_t3,contw + call bn_mulmod + arg mem_t3,regA + arg mem_t0,regB + arg mem_cy,contw + branch bn_submod + + + /* cost 104904 clks */ +ecadd: + arg mem_az,regA + arg mem_t7,contw + call bn_sqrmod + arg mem_cx,regA + arg mem_t7,regB + arg mem_t0,contw + call bn_mulmod /* n1=t0=xa*zb2 */ + arg mem_az,regA + arg mem_t7,regB + arg mem_t7,contw + call bn_mulmod + arg mem_cy,regA + arg mem_t7,regB + arg mem_t1,contw + call bn_mulmod /* n2=t1=ya*zb3 */ + arg mem_cz,regA + arg mem_t7,contw + call bn_sqrmod + arg mem_ax,regA + arg mem_t7,regB + arg mem_t2,contw + call bn_mulmod /* n3=t2=xb*za2 */ + arg mem_cz,regA + arg mem_t7,regB + arg mem_t7,contw + call bn_mulmod + arg mem_ay,regA + arg mem_t7,regB + arg mem_t3,contw + call bn_mulmod /* n4=t3=yb*za3 */ + arg mem_t0,regA + arg mem_t2,regB + arg mem_t7,contw + call bn_submod /* n5=t7=n1-n3=t0-t2 */ + arg mem_t0,regA + arg mem_t2,regB + arg mem_t0,contw + call bn_addmod /* n7=t0=n1+n3=t0+t2 */ + arg mem_t1,regA + arg mem_t3,regB + arg mem_t2,contw + call bn_submod /* n6=t2=n2-n4=t1-t3 */ + arg mem_t1,regA + arg mem_t3,regB + arg mem_t1,contw + call bn_addmod /* n8=t1=n2+n4=t1+t3 */ + arg mem_t1,regA + arg mem_t7,regB + arg mem_t1,contw + call bn_mulmod /* t1=n8*n5 */ + arg mem_cz,regA + arg mem_az,regB + arg mem_t3,contw + call bn_mulmod + arg mem_t3,regA + arg mem_t7,regB + arg mem_cz,contw + call bn_mulmod /* z=za*zb*n5 */ + arg mem_t7,regA + arg mem_t7,contw + call bn_sqrmod /* t7=n5^2 */ + arg mem_t7,regA + arg mem_t0,regB + arg mem_t3,contw + call bn_mulmod /* t3=n5^2*n7 */ + arg mem_t7,regA + arg mem_t1,regB + arg mem_t1,contw + call bn_mulmod /* t1=n8*n5^3 */ + arg mem_t2,regA + arg mem_cx,contw + call bn_sqrmod + arg mem_cx,regA + arg mem_t3,regB + arg mem_cx,contw + call bn_submod /* x=n6^2-n5^2*n7 */ + arg mem_cx,contr + arg mem_t7,contw + call memcpy24 + arg mem_t7,regA + call bn_lshiftmod /* t7=2*x */ + arg mem_t3,regA + arg mem_t7,regB + arg mem_t3,contw + call bn_submod /* t3=n9 */ + arg mem_t3,regA + arg mem_t2,regB + arg mem_t2,contw + call bn_mulmod /* t2=n9*n6 */ + arg mem_t2,regA + arg mem_t1,regB + arg mem_cy,contw + call bn_submod + arg mem_cy,regA + arg mem_p,regB + arg mem_cy,contw + force 0,regC + fetch 1,mem_cy + isolate1 0,pdata + call bn_add,true + copy regC,alarm + arg mem_cy,regA + call bn_rshift6 + fetch 1,mem_cy5 + isolate1 0,alarm + setflag true,7,pdata + store 1,mem_cy5 + rtn + + /* cost 22276983 clks */ + +eckp_0: + fetch 1,mem_ec_loopc + increase -1,pdata + nrtn positive + store 1,mem_ec_loopc + fetch 1,mem_ec_infinite + call ecdbl,blank + fetch 1,mem_ec_loopc + arg mem_k,contr + call bn_testbit + branch eckp_0,true + fetch 1,mem_ec_infinite + nbranch eckp_1,blank + call ecadd + branch eckp_0 +eckp_1: + jam 0,mem_ec_infinite + arg mem_ax,contr + arg mem_cx,contw + call ec_copy + branch eckp_0 + + /* cost 162522 clks */ +ecunmapz: + arg mem_cz,regA + arg mem_t3,contw + call bn_invmod /* t3 = 1/z */ + arg mem_t3,regA + arg mem_t1,contw + call bn_sqrmod /* t1 = 1/z2 */ + arg mem_cx,regA + arg mem_t1,regB + arg mem_bx,contw + call bn_mulmod + arg mem_t3,regA + arg mem_t1,regB + arg mem_t2,contw + call bn_mulmod /* t2 = 1/z3 */ + arg mem_cy,regA + arg mem_t2,regB + arg mem_by,contw + branch bn_mulmod + + + +sha_endian_swap2: + ifetch 4,contr + force 4,regA + increase 3,contw +sha_endian_loop: + istore 1,contw + rshift8 pdata,pdata + increase -2,contw + increase -1,regA + nbranch sha_endian_loop,zero + increase 5,contw + loop sha_endian_swap2 + rtn + + +sha_getw: + lshift2 queue,pdata + iadd timeup,contr + ifetch 4,contr + rtn + +sha_r: + force 16,alarm + arg memdat,timeup +sha_r_loop: + add alarm,-7,queue + call sha_getw + iforce temp /* W[t - 7] */ + add alarm,-16,queue + call sha_getw + iadd temp,temp /* W[t-7] + W[t-16] */ + add alarm,-2,queue + call sha_getw + shasx pdata,1,pdata + iadd temp,temp /* S1(W[t - 2]) + W[t-7] + W[t-16] */ + add alarm,-15,queue + call sha_getw + shasx pdata,0,pdata + iadd temp,temp /* S0(W[t - 15]) + S1(W[t - 2]) + W[t-7] + W[t-16] */ + lshift2 alarm,pdata + iadd timeup,contw + istoret 4,contw + increase 1,alarm + compare 64,alarm,0xff + nbranch sha_r_loop,true + rtn + + +sha_init: + arg memh0,contr + force 7,regext_index +sha_init_0: + ifetch 4,contr + iforce regext + increase -1,regext_index + branch sha_init_0,positive + rtn + +sha: + bpatchx patch3d_4,mem_patch3d + call sha_r /* preprocessing data into R() */ + arg memahbak,contw + force 0,regext_index +sha_0: + deposit regext + istore 4,contw + increase 1,regext_index + compare 8,regext_index,0xff + nbranch sha_0,true + call enable_authrom + arg memk,timeup + arg memdat,alarm + force 64,loopcnt +sha_loop: + ifetcht 4,alarm + ifetch 4,timeup + increase 4,timeup + increase 4,alarm + iadd temp,pdata /* x+K */ + force 7,regext_index + iadd regext,temp /* x+K+h */ + force 4,regext_index + shasx regext,3,pdata + iadd temp,temp /* temp = s3(e)+x+K+h */ + force 5,regext_index + deposit regext + force 6,regext_index + ixor regext,pdata + force 4,regext_index + iand regext,pdata /* (e & (f ^ g)) */ + force 6,regext_index + ixor regext,pdata /* F1(e, f, g) = g ^ (e & (f ^ g)) */ + iadd temp,temp /* temp1 = h + S3(e) + F1(e,f,g) + K + x */ + force 7,regext_index + copy temp,regext /* save to H */ + force 3,regext_index + deposit regext + iadd temp,regext /* save to D */ + force 0,regext_index + deposit regext + force 1,regext_index + iand regext,temp /* a & b */ + ior regext,pdata /* a | b */ + force 2,regext_index + iand regext,pdata /* (c & (a | b)) */ + ior temp,temp /* F0:(a & b) | (c & (a | b)) */ + force 0,regext_index + shasx regext,2,pdata + iadd temp,pdata /* temp2 = S2(a) + F0(a,b,c) */ + force 7,regext_index + iadd regext,regext /* h = temp1 + temp2 */ + regexrot /* rotate move h,a-g => a-h */ + loop sha_loop + arg memahbak,contr + force 0,regext_index +sha_1: + ifetch 4,contr + iadd regext,regext + increase 1,regext_index + compare 8,regext_index,0xff + nbranch sha_1,true + branch disable_authrom + + +sha_result: + arg memresult,contw + force 7,regext_index +sha_regext_save: + deposit regext + istore 4,contw + increase -1,regext_index + branch sha_regext_save,positive + rtn + +pad_xor: +// arg memx_end,contr + arg memdat,contw + increase -4,contr + sub loopcnt,16,regA +pad_xor_0: + ifetch 4,contr + ixor temp,pdata + istore 4,contw + increase -8,contr + loop pad_xor_0 + copy regA,loopcnt + deposit temp +pad_xor_1: + istore 4,contw + loop pad_xor_1 + rtn + +g_noninit_number_confirm: + call g_noninit0 + call sha_result + branch g_common0 + +g_noninit: + call g_noninit0 + branch g_common0 + +g_noninit0: + arg mem_sp_pubkey_remote_x_end,contr + arg memdat,contw + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_pubkey_local_x_end,contr + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_random_remote_end,contr + call memcpy_dword_swap4 + call sha_init + call sha + arg mem_sp_random_local_end,contr + arg memdat,contw + branch g_common + +g_init: + arg mem_sp_pubkey_local_x_end,contr + arg memdat,contw + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_pubkey_remote_x_end,contr + force 6,loopcnt + call memcpy_dword_swap + arg mem_sp_random_local_end,contr + call memcpy_dword_swap4 + call sha_init + call sha + arg mem_sp_random_remote_end,contr + arg memdat,contw + call g_common + branch g_common0 + +g_common: + call memcpy_dword_swap4 + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + force 5,loopcnt + call memset0 + setarg 640 + istore 4,contw + branch sha +g_common0: + fetch 4,memresult +// store 4,mem_gkey + arg 1000,rega + idiv rega + call wait_div_end + remainder pdata + store 4,mem_gkey + quotient pdata + arg 1000,rega + idiv rega + call wait_div_end + remainder pdata + arg 1000,rega + imul32 rega,pdata + fetcht 4,mem_gkey + iadd temp,pdata + store 4,mem_gkey + rtn + +function_f1_no_key: + jam 0,mem_passkey_1bit + branch function_f1_common + +function_f1: + fetch 1,mem_ssp_mode_flag + bne SSP_MODE_PASSKEY_ENTRY_FLAG,function_f1_no_key +function_f1_common: + bpatchx patch3d_5,mem_patch3d + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + fetch 2,mem_sp_prarm_stack + copy pdata,contr + force 4,loopcnt + call pad_xor + call sha_init + call sha + fetch 2,mem_sp_prarm_stack+2 + copy pdata,contr + arg memdat,contw + force 6,loopcnt + call memcpy_dword_swap + fetch 2,mem_sp_prarm_stack+4 + copy pdata,contr + force 6,loopcnt + call memcpy_dword_swap + setarg 0x800000 + istore 3,contw + + fetch 1,mem_passkey_1bit + + istore 1,contw + force 0,pdata + istore 8,contw + setarg 0x0388 + istore 4,contw + call sha + call sha_result + arg memresult,contr + arg memahsave,contw + call memcpy32 + + setarg 0x5c5c5c + lshift8 pdata,temp + or_into 0x5c,temp + fetch 2,mem_sp_prarm_stack + copy pdata,contr + force 4,loopcnt + call pad_xor + call sha_init + call sha + arg memahsave_end,contr + arg memdat,contw + force 8,loopcnt + call memcpy_dword_swap + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + call bn_zero + setarg 0x0300 + istore 4,contw + call sha + branch sha_result + + +function_f2: + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + fetch 2,mem_sp_prarm_stack+12 + copy pdata,contr + arg memdat,contw + call memcpy_dword_swap4 + fetch 2,mem_sp_prarm_stack+14 + copy pdata,contr + call memcpy_dword_swap4 + + setarg 0x62746c + lshift8 pdata,pdata + or_into 0x6b,pdata + istore 4,contw + arg mem_addr_value_end,contr + force 3,loopcnt + call memcpy_dword_swap + + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + force 0,pdata + istore 8,contw + setarg 0x0380 + istore 4,contw + call sha + + call sha_result + arg memresult,contr + arg memahsave,contw + call memcpy32 + + setarg 0x5c5c5c + lshift8 pdata,temp + or_into 0x5c,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + arg memahsave_end,contr + arg memdat,contw + force 8,loopcnt + call memcpy_dword_swap + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + call bn_zero + setarg 0x0300 + istore 4,contw + call sha + branch sha_result + + +function_f3a: + fetch 1,mem_ssp_mode_flag + bne SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3a_no_pin +function_f3a_common: + bpatchx patch3d_6,mem_patch3d + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + arg mem_sp_random_remote_end,contr + arg memdat,contw + call memcpy_dword_swap4 + arg mem_sp_random_local_end,contr + call memcpy_dword_swap4 + branch function_f3_common + +function_f3a_no_pin: + setarg 0 + store 4,mem_pin + branch function_f3a_common + +function_f3b_no_pin: + setarg 0 + store 4,mem_pin + branch function_f3b_common + + +function_f3b: + fetch 1,mem_ssp_mode_flag + bne SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3b_no_pin +function_f3b_common: + setarg 0x363636 + lshift8 pdata,temp + or_into 0x36,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + + arg mem_sp_random_local_end,contr + arg memdat,contw + call memcpy_dword_swap4 + arg mem_sp_random_remote_end,contr + call memcpy_dword_swap4 +function_f3_common: + setarg 0x0 + istore 8,contw + istore 4,contw + fetch 4,mem_pin + istore 4,contw + + copy contw,temp + jam 0x80,mem_addr_padding + copy temp,contw + arg mem_addr_iocap_end,contr + call memcpy_dword_swap4 + + call sha + + arg memdat,contw + force 7,loopcnt + call memset0 + istore 4,contw + setarg 0x03F8 + istore 4,contw + call sha + call sha_result + + arg memresult,contr + arg memahsave,contw + call memcpy32 + + setarg 0x5c5c5c + lshift8 pdata,temp + or_into 0x5c,temp + arg mem_sp_dhkey_end,contr + force 6,loopcnt + call pad_xor + call sha_init + call sha + arg memahsave_end,contr + arg memdat,contw + force 8,loopcnt + call memcpy_dword_swap + setarg 0x800000 + lshift8 pdata,pdata + istore 4,contw + call bn_zero + setarg 0x0300 + istore 4,contw + call sha + branch sha_result + +/* +eckp: + jam 192,mem_ec_loopc + jam 1,mem_ec_infinite +*/ +eckp_calc_init: + jam 192,mem_ec_loopc +eckp_calc_init_1: + fetch 1,mem_ec_loopc + rtn blank + increase -1,pdata + store 1,mem_ec_loopc + arg mem_k,contr + call bn_testbit + branch eckp_calc_init_1,true + arg mem_ax,contr + arg mem_cx,contw + branch ec_copy + +eckp_calc: + call ecdbl + fetch 1,mem_ec_loopc + increase -1,pdata + store 1,mem_ec_loopc + arg mem_k,contr + call bn_testbit + rtn true + branch ecadd + +memcpy_dword_swap4: + force 4,loopcnt +memcpy_dword_swap: + increase -4,contr +memcpy_dword_swap_loop: + ifetch 4,contr + istore 4,contw + increase -8,contr + loop memcpy_dword_swap_loop + rtn + +else +sp_initialize: + rtn + +endif + + +ifdef SECURE_CONNECTION + +sp_initialize_256: + bpatchx patch3d_7,mem_patch3d + fetch 1,mem_le_secure_connect_enable + branch le_secure_connection_disable,blank + call le_secure_connection_enable + call sp_clear_flags +// jam SP_KEY_INVALID_256,mem_le_sc_local_key_invalid + branch sp_pubkey_calc_256 + + + + +sp_pubkey_calc_256: + fetch 1,mem_le_sc_local_key_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_le_sc_calc + rtnne SP_CALC_STANDBY + + arg mem_le_private_key_256,contw + force 15,queue + call random_generator + random pdata + rshift pdata,pdata + istore 2,contw + + arg mem_k_256,contw + arg mem_le_private_key_256,contr + call memcpy32 //mem_sp_private_key=>mem_k + + arg mem_ax_256,contw + arg mem_gx_256,contr + call memcpy64 //mem_gx=>mem_ax + + arg mem_az_256,contw + call clear_mem_256 + jam 1,mem_az_256 //0=>mem_az + + call eckp_calc_init_256 + jam SP_CALC_PUBKEY_256,mem_le_sc_calc + rtn + +sp_pubkey_generated_256: + arg mem_le_pubkey_local_x_256,contw + arg mem_bx_256,contr + call memcpy64 + jam SP_KEY_VALID_256,mem_le_sc_local_key_invalid + jam SP_CALC_STANDBY,mem_le_sc_calc + rtn + + + +sp_dhkey_calc_256: + fetch 1,mem_sp_dhkey_invalid + rtnne SP_KEY_INVALID + fetch 1,mem_le_sc_calc + rtnne SP_CALC_STANDBY + + arg mem_k_256,contw + arg mem_le_private_key_256,contr + call memcpy32 + + arg mem_ax_256,contw + arg mem_le_pubkey_remote_x_256,contr + call memcpy64 + + arg mem_az_256,contw + call clear_mem_256 + jam 1,mem_az_256 //0=>mem_az + + call eckp_calc_init_256 + jam SP_CALC_DHKEY_256,mem_le_sc_calc + rtn + + +sp_dhkey_generated_256: +// jam SP_FLAG_COMMIT,mem_sp_dh_ready + arg mem_le_dhkey_256,contw + arg mem_bx_256,contr + call memcpy32 + jam SP_KEY_VALID_256,mem_sp_dhkey_invalid + jam SP_CALC_STANDBY,mem_le_sc_calc + rtn + + + +sp_calc_sequence_256: + fetch 1,mem_le_secure_connect_enable + rtn blank + fetch 1,mem_le_sc_calc + rtn blank + increase 0x80,pdata + store 1,mem_le_sc_calc + rtnbit1 7 + fetch 2,mem_ec_loopc + branch sp_calc_sequence_done_256,blank + branch eckp_calc_256 + +sp_calc_sequence_done_256: + bpatchx patch3e_0,mem_patch3e + call ecunmapz_256 + fetch 1,mem_le_sc_calc + beq SP_CALC_PUBKEY_256,sp_pubkey_generated_256 + beq SP_CALC_DHKEY_256,sp_dhkey_generated_256 + rtn + + +eckp_calc_256: + call ecdbl_256 + fetch 2,mem_ec_loopc + increase -1,pdata + store 2,mem_ec_loopc + arg mem_k_256,contr + call bn_testbit + rtn true + branch ecadd_256 + +eckp_calc_init_256: + bpatchx patch3e_1,mem_patch3e + setarg 256,pdata + store 2,mem_ec_loopc +eckp_calc_init_256_1: + fetch 2,mem_ec_loopc + rtn blank + increase -1,pdata + store 2,mem_ec_loopc + arg mem_k_256,contr + call bn_testbit + branch eckp_calc_init_256_1,true + arg mem_ax_256,contr + arg mem_cx_256,contw + branch memcpy96 + + +ecunmapz_256: + arg mem_cz_256,regA + arg mem_t3_256,contw + call bn_invmod_256 /* t3 = 1/z */ + arg mem_t3_256,regA + arg mem_t1_256,contw + call bn_sqrmod_256 /* t1 = 1/z2 */ + arg mem_cx_256,regA + arg mem_t1_256,regB + arg mem_bx_256,contw + call bn_mulmod_256 + arg mem_t3_256,regA + arg mem_t1_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 /* t2 = 1/z3 */ + arg mem_cy_256,regA + arg mem_t2_256,regB + arg mem_by_256,contw + branch bn_mulmod_256 + +ecdbl_256: + arg mem_cz_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 + arg mem_t2_256,regA + arg mem_t3_256,contw + call bn_sqrmod_256 +//call ice_break + arg mem_a_256,regA + arg mem_t3_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 /* t3=a*z4 */ + arg mem_cx_256,regA + arg mem_t2_256,contw + call bn_sqrmod_256 +//call ice_break + arg mem_t2_256,contr + arg mem_t1_256,contw + call memcpy32 + arg mem_t1_256,regA + call bn_lshiftmod_256 + arg mem_t2_256,regA + arg mem_t1_256,regB + arg mem_t2_256,contw + call bn_addmod_256 +//call ice_break + arg mem_t2_256,regA + arg mem_t3_256,regB + arg mem_t2_256,contw + call bn_addmod_256 /* t2=3*x2 + z*z4 D */ +//call ice_break + arg mem_cx_256,contr + arg mem_t1_256,contw + call memcpy32 + arg mem_cy_256,regA + arg mem_t3_256,contw + call bn_sqrmod_256 + arg mem_t1_256,regA + call bn_lshiftmod_256 + arg mem_t1_256,regA + call bn_lshiftmod_256 + arg mem_t1_256,regA + arg mem_t3_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 //S = 4X1Y1^2/* t1=4x*y2 B */ + arg mem_t3_256,regA + arg mem_t0_256,contw + call bn_sqrmod_256 + arg mem_t0_256,regA + call bn_lshiftmod_256 + arg mem_t0_256,regA + call bn_lshiftmod_256 + arg mem_t0_256,regA + call bn_lshiftmod_256 //T = 8Y1^4 /* t0=8*y4 C */ + arg mem_cy_256,contr + arg mem_t3_256,contw + call memcpy32 + arg mem_t3_256,regA + call bn_lshiftmod_256 + arg mem_t3_256,regA + arg mem_cz_256,regB + arg mem_cz_256,contw + call bn_mulmod_256 //z = 2Y1Z1 + + + arg mem_t2_256,regA + arg mem_t3_256,contw + call bn_sqrmod_256 // M ^2 +//call ice_break + arg mem_t3_256,regA + arg mem_t1_256,regB + arg mem_t3_256,contw + call bn_submod_256 // t2^2 - 4*cx *cy^2 + arg mem_t3_256,regA + arg mem_t1_256,regB + arg mem_cx_256,contw + call bn_submod_256 //X2 + arg mem_t1_256,regA + arg mem_cx_256,regB + arg mem_t3_256,contw + call bn_submod_256 //S-X2 + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 //M(S-X2) + arg mem_t3_256,regA + arg mem_t0_256,regB + arg mem_cy_256,contw + branch bn_submod_256 //M(S-X2)-T Y2 + +ecadd_256: + + arg mem_az_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 + arg mem_cx_256,regA + arg mem_t7_256,regB + arg mem_t0_256,contw + call bn_mulmod_256 /* n1=t0=xa*zb2 U1 = X1Z0^2*/ + + + arg mem_az_256,regA + arg mem_t7_256,regB + arg mem_t7_256,contw + call bn_mulmod_256 + arg mem_cy_256,regA + arg mem_t7_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 /* n2=t1=ya*zb3 S1 = Y1Z0^3*/ + + + arg mem_cz_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 + arg mem_ax_256,regA + arg mem_t7_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 /* n3=t2=xb*za2 U0 = X0Z1^2*/ + + arg mem_cz_256,regA + arg mem_t7_256,regB + arg mem_t7_256,contw + call bn_mulmod_256 + arg mem_ay_256,regA + arg mem_t7_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 /* n4=t3=yb*za3 S0 = Y0Z1^3*/ + + +// arg mem_t0_256,regA +// arg mem_t2_256,regB + arg mem_t0_256,regb + arg mem_t2_256,rega + arg mem_t7_256,contw + call bn_submod_256 /* n5=t7=n1-n3=t0-t2 W=U1-U0*/ + arg mem_t0_256,regA + arg mem_t2_256,regB + arg mem_t0_256,contw + call bn_addmod_256 /* n7=t0=n1+n3=t0+t2 T=U1+U0 */ +// arg mem_t1_256,regA +// arg mem_t3_256,regB + arg mem_t1_256,regb + arg mem_t3_256,rega + arg mem_t2_256,contw + call bn_submod_256 /* n6=t2=n2-n4=t1-t3 S1-S0 */ + arg mem_t1_256,regA + arg mem_t3_256,regB + arg mem_t1_256,contw + call bn_addmod_256 /* n8=t1=n2+n4=t1+t3 M=S1+S0*/ + arg mem_t1_256,regA + arg mem_t7_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 /* t1=n8*n5 MW */ + arg mem_cz_256,regA + arg mem_az_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 //Z0Z1 + arg mem_t3_256,regA + arg mem_t7_256,regB + arg mem_cz_256,contw + call bn_mulmod_256 /* z=za*zb*n5 Z0Z1W */ + + arg mem_t7_256,regA + arg mem_t7_256,contw + call bn_sqrmod_256 /* t7=n5^2 */ + arg mem_t7_256,regA + arg mem_t0_256,regB + arg mem_t3_256,contw + call bn_mulmod_256 /* t3=n5^2*n7 */ + arg mem_t7_256,regA + arg mem_t1_256,regB + arg mem_t1_256,contw + call bn_mulmod_256 /* t1=n8*n5^3 */ + arg mem_t2_256,regA + arg mem_cx_256,contw + call bn_sqrmod_256 + arg mem_cx_256,regA + arg mem_t3_256,regB + arg mem_cx_256,contw + call bn_submod_256 /* x=n6^2-n5^2*n7 */ + arg mem_cx_256,contr + arg mem_t7_256,contw + call memcpy32 + arg mem_t7_256,regA + call bn_lshiftmod_256 /* t7=2*x */ + arg mem_t3_256,regA + arg mem_t7_256,regB + arg mem_t3_256,contw + call bn_submod_256 /* t3=n9 */ + arg mem_t3_256,regA + arg mem_t2_256,regB + arg mem_t2_256,contw + call bn_mulmod_256 /* t2=n9*n6 */ + arg mem_t2_256,regA + arg mem_t1_256,regB + arg mem_cy_256,contw + call bn_submod_256 + arg mem_cy_256,regA + arg mem_p_256,regB + arg mem_cy_256,contw + force 0,regC + fetch 1,mem_cy_256 + isolate1 0,pdata + call bn_add_256,true + copy regC,alarm + arg mem_cy_256,regA + call bn_rshift_256 + fetch 1,mem_cy5_256 + isolate1 0,alarm + setflag true,7,pdata + store 1,mem_cy5_256 + rtn + +bn_invmod_256: + copy contw,timeup + arg mem_tmp0_256,contw + call clear_mem_256 + force 0,pdata +// store 4,mem_tmp52 + store 4,mem_t2_256 + jam 1,mem_tmp0_256 //y1 + arg mem_tmp1_256,contw //y2 + call clear_mem_512 + arg mem_p_256,contr + arg mem_tmp2_256,contw //j + call memcpy32 + copy regA,contr + arg mem_tmp3_256,contw //i + call memcpy32 + +// arg mem_tmp22,regA +// arg mem_tmp32,regB +// call p_bn_bigeq_256 +// branch assert,positive +bn_invmod_256_2: + arg mem_tmp3_256,contr + call bn_eq_zero_256 + branch bn_invmod_256_0,blank +//call ice_break +//fetch 1,0x4ffe +//increase 1,pdata +//store 1,0x4ffe + arg mem_tmp3_256,regA + arg mem_tmp0_256,regB + call bn_rshifteven_256 + arg mem_tmp2_256,regA + arg mem_tmp1_256,regB + call bn_rshifteven_256 + + arg mem_tmp3_256,regA + arg mem_tmp2_256,regB + call bn_bigeq_256 + branch bn_invmod_256_1,positive + arg mem_tmp2_256,regA + arg mem_tmp3_256,regB + copy regA,contw + call bn_sub_256 + arg mem_tmp0_256,regA + arg mem_tmp1_256,regB + copy regB,contw + call bn_add_256 + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_256_2 +bn_invmod_256_1: + arg mem_tmp3_256,regA + arg mem_tmp2_256,regB + copy regA,contw + call bn_sub_256 + arg mem_tmp1_256,regA + arg mem_tmp0_256,regB + copy regB,contw + call bn_add_256 + ifetch 1,regA + iadd regC,regC + ifetch 1,regB + iadd regC,pdata + istore 1,regB + branch bn_invmod_256_2 +bn_invmod_256_0: +//call ice_break + arg mem_tmp1_256,regA + copy timeup,contw + call bn_p256mod +//call ice_break + arg mem_p_256,regA + copy timeup,regB + copy timeup,contw + branch bn_submod_256 + + +bn_mulmod_256: + copy contw,timeup /* save result ptr */ + + force 0,regext_index + + arg mem_tmp1_256,contw + call clear_mem_512 + arg mem_regext,contw + call clear_mem_512 +// jam 0,mem_regext_index + +// arg mem_tmp12,contw + copy regA,contr +// force 0,regext_index + jam 0,mem_regext + setarg 0 + call bn_load_mem + copy regB,contr + call bn_load_256 +// force 0,regB +// jam 0,mem_regb + force 0,queue + arg mem_tmp1_256,contw +bn_mulmod_256_1: +// copy regb,pdata +// store 1, + arg mem_regext,temp + copy queue,regb + lshift2 regb,pdata +// lshift4 pdata,pdata + iadd temp,regb + force 0,temp + force 0,regC +bn_mulmod_256_0: +// copy contw,pdata +// store 2,mem_contw +//call ice_break +// copy pdata,contw + ifetch 4,contw /* d[i+j] */ + iforce regA +// copy regB,regext_index +// deposit regext + ifetch 4,regb + copy regC,regext_index + imul32 regext,pdata + iadd regA,pdata /* uv = a[i]*b[j] + d[i+j] */ + iadd temp,pdata /* uv += u */ + istore 4,contw /* ->d[i+j] */ + rshift32 pdata,temp /* temp = u = uv >> 32 */ + increase 1,regC + compare 8,regC,0xff + nbranch bn_mulmod_256_0,true +//call ice_break + deposit temp + istore 4,contw /* d[i + 12] = u */ + increase -32,contw +// fetch 1,mem_regb +// copy pdata,regb + increase 1,queue + compare 8,queue,0xff + nbranch bn_mulmod_256_1,true + arg mem_tmp1_256,regA + copy timeup,contw + branch bn_p256mod + +bn_p256mod: + bpatchx patch3e_2,mem_patch3e + copy contw,timeup /* save result ptr */ + copy regA,alarm /* temp save regA */ + arg mem_tmp2_256,regB + copy regB,contw + call memset0_4 + istore 8,contw + add regA,44,contr + call memcpy8 + call memcpy12 + copy regb,rega + call bn_lshiftmod_256 //2S1 + arg mem_tmp2_256,regB + copy alarm,rega + copy timeup,contw + call bn_addmod_256 //T+2S1 +//call ice_break + arg mem_tmp2_256,regB + copy regB,contw + call memset0_4 + istore 8,contw + add alarm,48,contr + call memcpy16 + call memset0_4 + copy regb,rega + call bn_lshiftmod_256 //2S2 +//call ice_break +// arg 0,regB + + arg mem_tmp2_256,regB + copy timeup,rega + copy regA,contw + call bn_addmod_256 //+2S2 +//call ice_break +// arg 0,regB + + arg mem_tmp2_256,regB + copy regB,contw + add alarm,32,contr + call memcpy12 + call memset0_4 + istore 8,contw + add alarm,56,contr + call memcpy8 + copy timeup,regA + copy regA,contw + call bn_addmod_256 //+S3 +//call ice_break +// arg 0,regB + + arg mem_tmp2_256,regB + copy regB,contw + add alarm,36,contr + call memcpy12 + add alarm,52,contr + call memcpy12 + add alarm,52,contr + call memcpy4 + add alarm,32,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_addmod_256 //+S4 +//call ice_break +// arg 1,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,44,contr + call memcpy12 + call memset0_4 + istore 8,contw + add alarm,32,contr + call memcpy4 + add alarm,40,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_submod_256 //-D1 +//call ice_break +// arg 2,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,48,contr + call memcpy8 + call memcpy8 + force 0,pdata + istore 8,contw + add alarm,36,contr + call memcpy4 + add alarm,44,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_submod_256 //-D2 +//call ice_break +// arg 3,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,52,contr + call memcpy12 + add alarm,32,contr + call memcpy12 + call memset0_4 + add alarm,48,contr + call memcpy4 + copy timeup,regA + copy regA,contw + call bn_submod_256 //-D3 +//call ice_break +// arg 4,regB + arg mem_tmp2_256,regB + copy regB,contw + add alarm,56,contr + call memcpy8 + call memset0_4 + add alarm,36,contr + call memcpy12 + call memset0_4 + add alarm,52,contr + call memcpy4 + copy timeup,regA + copy regA,contw + branch bn_submod_256 //-D4 + + +bn_load_mem: + force 32,loopcnt + arg mem_regext,contw + iadd contw,contw + branch memcpy + +bn_load_256: + force 8,loopcnt + branch bn_load_0 + +bn_sqrmod_256: + copy regA,regB + branch bn_mulmod_256 + +bn_add_256: + force 8,loopcnt + branch bn_add+1 + +bn_addmod_256: + call bn_add_256 + copy contw,regA + branch bn_lshiftmod_ismod_256 + +bn_lshiftmod_256: + call bn_lshift_256 +bn_lshiftmod_ismod_256: + isolate1 0,regC + branch bn_lshiftmod_p_256,true + arg mem_p_256,regB + copy regA,regC + increase -32,regA + call bn_bigeq_256 + nrtn positive + copy regC,regA + branch sub_p2_256 + +bn_lshiftmod_p_256: + call sub_p2_256 +// nrtn true + copy regA,regC + increase -32,regA + arg mem_p_256,regB + call bn_bigeq_256 + nrtn positive + copy regC,regA + branch sub_p2_256 + + +sub_p2_256: + increase -32,regA + arg mem_p_256,regB + copy regA,contw + branch bn_sub_256 + + + + +bn_submod_256: + call bn_sub_256 +// isolate1 0,regC + branch bn_submod_256_np,true +// copy regA,regC +// increase -32,regA + add contw,-32,regA + arg mem_p_256,regB + call bn_bigeq_256 + nrtn positive + arg mem_p_256,regB + add contw,-32,regA +// copy regC,regA + copy rega,contw + branch bn_sub_256 +bn_submod_256_np: + add contw,-32,regA + arg mem_p_256,regB + copy regA,contw + call bn_add_256 +// isolate1 0,regC + rtn true + add contw,-32,regA + arg mem_p_256,regB + copy regA,contw + branch bn_add_256 + + + +bn_sub_256: + force 8,loopcnt + branch bn_sub+1 + +bn_rshift_256: + force 8,loopcnt + increase 28,regA + branch bn_rshift + +bn_lshift_256: + force 8,loopcnt + force 0,regC + branch bn_lshift_0 + +bn_bigeq_256: + force 8,loopcnt + increase 28,regA + increase 28,regB + branch bn_bigeq_0 + + +bn_eq_zero_256: + ifetch 8,contr + nrtn blank + branch bn_eq_zero + + + + +bn_rshifteven_256: + copy regA,alarm +bn_rshifteven_256_1: + copy alarm,regA + ifetch 1,regA + isolate1 0,pdata + rtn true + call bn_rshift_256 + ifetch 1,regB + isolate0 0,pdata + branch bn_rshifteven_256_0,true + arg mem_p_256,regA + copy regB,contw + call bn_add_256 + ifetch 1,regB + iadd regC,pdata + istore 1,regB + increase -32,regB +bn_rshifteven_256_0: + add regB,32,regA + force 9,loopcnt + call bn_rshift + branch bn_rshifteven_256_1 + +else +sp_initialize_256: + rtn + +endif + + Index: 1066_OTP_FLASH/program/ui.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/ui.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/ui.prog (working copy) @@ -0,0 +1,701 @@ +ui_init: + call lpm_disable_exen_output + rtn wake + call ui_button_init + call ui_timer_init + branch ui_led_init_global + +ui_dispatch: + call ui_led_dispatch + + branch ui_timer_check + +ui_button_init: + fetch 1,mem_ui_button_gpio + rtneq UI_BUTTON_GPIO_DISABLE + iforce temp + call gpio_config_output + fetcht 1,mem_ui_button_gpio + call gpio_out_inactive + nop 100 + fetcht 1,mem_ui_button_gpio + call gpio_config_input + branch ui_button_polling + + + +ui_button_polling: + bpatchx patch3e_3,mem_patch3e + fetch 1,mem_ui_button_gpio + rtneq UI_BUTTON_GPIO_DISABLE + copy pdata,temp + call gpio_get_bit + nbranch ui_button_up,true + //fall through +ui_button_down: + call ui_button_check_long_press + fetch 2,mem_ui_state_map + set1 UI_STATE_BTN_DOWN + store 2,mem_ui_state_map + fetch 1,mem_ui_button_last_state + rtneq UI_BUTTON_STATE_DOWN + jam UI_BUTTON_STATE_DOWN,mem_ui_button_last_state + //Down Edge + fetch 1,mem_ui_button_timeout + store 1,mem_ui_button_timer //start long press timer + call lpm_button_get_wake_lock + jam BT_EVT_BUTTON_DOWN,mem_fifo_temp + branch ui_ipc_send_event +ui_button_up: + fetch 2,mem_ui_state_map + set0 UI_STATE_BTN_DOWN + store 2,mem_ui_state_map + fetch 1,mem_ui_button_last_state + rtneq UI_BUTTON_STATE_UP + jam UI_BUTTON_STATE_UP,mem_ui_button_last_state + //Up Edge + jam 0,mem_ui_button_timer//stop long press timer + call lpm_button_clean_wake_lock + jam BT_EVT_BUTTON_UP,mem_fifo_temp + branch ui_ipc_send_event + +ui_button_check_long_press: + fetch 1,mem_ui_button_timer + rtn blank + increase -1,pdata + store 1,mem_ui_button_timer + nrtn blank + //Long Press + jam BT_EVT_BUTTON_LONG_PRESSED,mem_fifo_temp + branch ui_ipc_send_event + +lpm_button_get_wake_lock: + arg wake_lock_button,queue + branch lpm_get_wake_lock + +lpm_button_clean_wake_lock: + arg wake_lock_button,queue + branch lpm_put_wake_lock + + + +/***********************ui led function****************************/ +/****************** +led function + +ui_led_init_global +ui_led_on_global + +ui_led_off_global +//input:rega :struct number +ui_led_blink_start_global + +//input:rega :struct number +//contr: the point that want to set led style address +ui_led_set_style_global + +******************/ +//input:rega :struct number +//output:regb :current strutct starting pointer +calc_curr_struct_prt: + fetch 2,mem_ui_led_struct_ptr + mul32 rega,LED_OFFSET_LENGTH,regb + iadd regb,regb + rtn + + +ui_led_init_global: + fetch 1,mem_ui_led_struct_num + rtn blank + copy pdata,loopcnt + fetch 2,mem_ui_led_struct_ptr + copy pdata,regb +ui_led_init_loop: + add regb,LED_OFFSET_LED_GPIO,regc + ifetcht 1,regc + call gpio_config_output + call ui_led_off_static + increase LED_OFFSET_LENGTH,regb + loop ui_led_init_loop + rtn + + +//input:rega :struct number +ui_led_on_global: + call calc_curr_struct_prt + setarg UI_LED_STATE_LIGHTING + istore 1,regb + call ui_led_stop_timer + branch ui_led_on_static + + +//input:rega :struct number +ui_led_blink_stop_global: +ui_led_off_global: + call calc_curr_struct_prt + setarg UI_LED_STATE_DARKING + istore 1,regb + call ui_led_stop_timer + branch ui_led_off_static + + +//input:rega :struct number +ui_led_blink_start_global: + call calc_curr_struct_prt + setarg UI_LED_STATE_BLINK_START + istore 1,regb + setarg LED_INFINITE_FLASH_NUM + istore 1,contw + branch ui_led_off_static + + +//input:rega :struct number +//REGC: the point that want to set led style address +ui_led_set_style_global: + call calc_curr_struct_prt + arg LED_OFFSET_LENGTH,loopcnt + copy regc,contr + copy regb,contw + branch memcpy_fast + + + +ui_led_dispatch: + fetch 1,mem_ui_led_struct_num + rtn blank + arg 0,rega +ui_led_blink_polling: + call ui_led_change_style_by_type + increase 1,rega + fetch 1,mem_ui_led_struct_num + isub rega,null + rtn zero + branch ui_led_blink_polling + + +ui_led_off_static: + add regb,LED_OFFSET_LED_GPIO,regc + ifetcht 1,regc + branch gpio_out_inactive + + +ui_led_on_static: + add regb,LED_OFFSET_LED_GPIO,regc + ifetcht 1,regc + branch gpio_out_active + + +//input:rega :struct number +ui_led_change_style_by_type: + add rega,ui_led_blink,queue + call timer_check + nrtn blank //timer out + + call calc_curr_struct_prt + + ifetch 1,regb //led type + + beq UI_LED_STATE_LIGHTING,ui_led_on_static + beq UI_LED_STATE_DARKING,ui_led_off_static + beq UI_LED_STATE_BLINK_STOP,ui_led_off_static + beq UI_LED_STATE_BLINK_DARKING,ui_led_blink_state_darking +ui_led_blink_state_lighting: + call ui_led_on_static + add regb,LED_OFFSET_CB_LEDON,regc + call push_stack + ifetch 2,regc + call callback_func + call pop_stack + setarg UI_LED_STATE_BLINK_DARKING + istore 1,regb + add regb,LED_OFFSET_ON_TIME,regc + ifetch 2,regc + branch ui_led_blink_timer_start + + +ui_led_blink_state_darking: + call ui_led_off_static + add regb,LED_OFFSET_CB_LEDOFF,regc + call push_stack + ifetch 2,regc + call callback_func + call pop_stack + + add regb,LED_OFFSET_BLINK_COUNT,regc + ifetch 1,regc + beq LED_INFINITE_FLASH_NUM,ui_led_blink_infinite + increase -1,pdata + istore 1,regc + branch ui_led_blink_stop_global,blank //End of flicker +ui_led_blink_infinite: + setarg UI_LED_STATE_BLINK_LIGHTING + istore 1,regb + add regb,LED_OFFSET_OFF_TIME,regc + ifetch 2,regc +ui_led_blink_timer_start: + add rega,ui_led_blink,queue + branch timer_init + +ui_led_stop_timer: + setarg 0 + branch ui_led_blink_timer_start + +/***********************ui led function ending****************************/ + + + +ui_timer_timeout: + setarg 0x1000 + lshift16 pdata,pdata + iadd regb,regb + rtn + +ui_timer_check: + bpatchx patch3e_4,mem_patch3e + arg 0,rega + fetcht 4,mem_ui_timer_last_btclk + copy clkn_bt,regb + copy regb,pdata + isub temp,null + ncall ui_timer_timeout,positive + //call ice_break +ui_timer_check_loop: + copy regb,pdata + increase 160,temp //320btclk = 100ms + increase 160,temp + isub temp,null + nbranch ui_timer_check_end,positive + increase 1,rega //increase 1 every 100ms count + and rega,0x0f,pdata + nbranch ui_timer_check_loop,blank + arg 0,rega //reset timer if it's longer than 1.5s between 2 checks + call ui_timer_check_send_evt +ui_timer_init: + copy clkn_bt,pdata + store 4,mem_ui_timer_last_btclk + rtn +ui_timer_check_end: + bpatchx patch3e_5,mem_patch3e + copy rega,pdata + rtn blank + increase -160,temp //320btclk = 100ms + increase -160,temp + set0 28,temp + storet 4,mem_ui_timer_last_btclk +ui_timer_check_send_evt: + branch app_evt_timer + + + +//**********************************************************// +//************UI Inter-Processor Communication*******// +//**********************************************************// +ui_ipc_get_lock: + jam 1,mem_ipc_lock_bt +ui_ipc_get_lock_wait: + fetch 1,mem_ipc_lock_c51 + nbranch ui_ipc_get_lock_wait,blank + rtn + +ui_ipc_put_lock: + jam 0,mem_ipc_lock_bt + rtn + + + +ui_ipc_send_event: + bpatchx patch3e_6,mem_patch3e + call ui_ipc_get_lock + copy rega,pdata + store 4,mem_ipc_rega_temp + arg mem_ipc_fifo_bt2c51,rega + call fifo_in + fetch 4,mem_ipc_rega_temp + copy pdata,rega + branch ui_ipc_put_lock + +ui_ipc_send_cmd: + bpatchx patch3e_7,mem_patch3e + call ui_ipc_get_lock + copy rega,pdata + store 4,mem_ipc_rega_temp + arg mem_ipc_fifo_c512bt,rega + call fifo_in + fetch 4,mem_ipc_rega_temp + copy pdata,rega + branch ui_ipc_put_lock + +ui_ipc_clean_all_fifo: + setarg 0 + store UTIL_FIFO_LEN,mem_ipc_fifo_c512bt + store UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51 + rtn + +check_51cmd: + bpatchx patch3f_0,mem_patch3f + fetch 1,mem_hci_cmd + nrtn blank + arg mem_ipc_fifo_c512bt,rega + call fifo_is_empty + rtn blank + jam IPC_CONTINUE_PROCESS,mem_ipc_skip_continue_proc + call check_51cmd_once + fetch 1,mem_ipc_skip_continue_proc + branch check_51cmd,blank + rtn + +check_51cmd_once: + call ui_ipc_get_lock + arg mem_ipc_fifo_c512bt,rega + call fifo_out + copy pdata,temp + call ui_ipc_put_lock + bpatchx patch3f_1,mem_patch3f + copy temp,pdata + rtn blank + beq BT_CMD_START_DISCOVERY,check_51cmd_start_discovery + beq BT_CMD_STOP_DISCOVERY,check_51cmd_stop_discovery + beq BT_CMD_RECONNECT,check_51cmd_reconnect + beq BT_CMD_ENTER_SNIFF_SUBRATING,check_51cmd_enter_sniff_subrating + beq BT_CMD_EXIT_SNIFF_SUBRATING,check_51cmd_exit_sniff_subrating + beq BT_CMD_SNIFF_TEST,check_51cmd_sniff_test + beq BT_CMD_START_INQUIRY,check_51cmd_inq + beq BT_CMD_STOP_INQUIRY,check_51cmd_stop_inq + beq BT_CMD_START_ADV,check_51cmd_adv + beq BT_CMD_STOP_ADV,check_51cmd_stop_adv + beq BT_CMD_START_DIRECT_ADV,check_51cmd_direct_adv + beq BT_CMD_STOP_DIRECT_ADV,check_51cmd_stop_direct_adv + beq BT_CMD_LED_OFF,check_51cmd_led_off + beq BT_CMD_LED_ON,check_51cmd_led_on + beq BT_CMD_LED_BLINK,check_51cmd_led_start_blink + beq BT_CMD_LE_START_CONN,check_51cmd_le_start_con + beq BT_CMD_LE_START_SCAN,check_51cmd_start_scan + beq BT_CMD_LE_STOP_SCAN,check_51cmd_stop_scan + beq BT_CMD_ENTER_HIBERNATE,check_51cmd_hibernate + beq BT_CMD_LE_SMP_SECURITY_REQUEST,check_51cmd_le_smp_sec_req + beq BT_CMD_BB_RECONN_CANCEL,check_51cmd_bb_reconn_cancel + //context related, process in context + store 1,mem_fifo_temp + bpatchx patch3f_2,mem_patch3f + call lmo_fifo_check + nbranch check_51cmd_restore,blank //process this cmd next time while lmo fifo is full +check_51cmd_once_continue: + fetch 1,mem_fifo_temp + bmark0 mark_context,check_51cmd_check_idle + beq BT_CMD_DISCONNECT,check_51cmd_disconnect + beq BT_CMD_ENTER_SNIFF,cmd_in_sniff + beq BT_CMD_EXIT_SNIFF,cmd_exit_sniff + beq BT_CMD_SET_PIN_CODE,check_51cmd_pincode + beq BT_CMD_LE_DISCONNECT,check_51cmd_le_disconnect + beq BT_CMD_LE_UPDATE_CONN,check_51cmd_ble_update_connect_param + beq BT_CMD_ROLE_SWITCH,check_51cmd_role_switch + beq BT_CMD_STORE_RECONN_INFO_LE,eeprom_store_le_reconn_info + beq BT_CMD_STORE_RECONN_INFO_BT,eeprom_store_bd_reconn_info + beq BT_CMD_DHKEY_NOT_ACCEPT,check_51cmd_dhkey_not_accept + beq BT_CMD_STORE_RECONN_INFO,check_51cmd_store_reconn_info + rtn + +check_51cmd_check_idle: + store 1,mem_fifo_temp + call context_check_idle + branch check_51cmd_restore,zero + call context_search_plap + nrtn zero +check_51cmd_restore: + jam IPC_SKIP_CONTINUE_PROCESS,mem_ipc_skip_continue_proc + branch ui_ipc_send_cmd + + /******************** 51COMMAND*********************/ + +//command opcode 0x01 +check_51cmd_start_discovery: + fetch 2,mem_ui_state_map + set1 UI_STATE_BT_DISCOVERY + store 2,mem_ui_state_map + jam 3,mem_scan_mode + rtn + + +//command opcode 0x02 +check_51cmd_stop_discovery: + jam 0,mem_hid_handshake_timer_count + jam 0,mem_scan_mode + fetch 2,mem_ui_state_map + set0 UI_STATE_BT_DISCOVERY + store 2,mem_ui_state_map + rtn + + +//command opcode 0x03 +check_51cmd_reconnect: + jam hci_cmd_create_conn,mem_hci_cmd + rtn + + +//command opcode 0x04 +check_51cmd_disconnect: + jam LMP_DETACH,mem_lmo_opcode2 + jam OTHER_END_TERMINATED,mem_disconn_reason_send + rtn + + +//command opcode 0x07 +check_51cmd_enter_sniff_subrating: + rtn + + +//command opcode 0x08 +check_51cmd_exit_sniff_subrating: + rtn + + +//command opcode 0x09 +check_51cmd_sniff_test: + rtn + + +//command opcode 0x10 +check_51cmd_pincode: + jam pincode_state_pincode_ready,mem_pincode_state + branch cmd_pair + + +//command opcode 0x11 +check_51cmd_inq: + rtn + + +//command opcode 0x12 +check_51cmd_stop_inq: + rtn + + +//command opcode 0x13 +check_51cmd_adv: + jam ON,mem_le_adv_enable + jam ADV_IND,mem_le_adv_type + fetch 2,mem_ui_state_map + set1 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + rtn + + +//command opcode 0x14 +check_51cmd_stop_adv: + fetch 2,mem_ui_state_map + set0 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + jam OFF,mem_le_adv_enable + rtn + + +//command opcode 0x15 +check_51cmd_direct_adv: + jam ON,mem_le_adv_enable + jam ADV_DIRECT_IND,mem_le_adv_type + fetch 2,mem_ui_state_map + set1 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + rtn + + +//command opcode 0x16 +check_51cmd_stop_direct_adv: + fetch 2,mem_ui_state_map + set0 UI_STATE_BLE_ADV,pdata + store 2,mem_ui_state_map + jam OFF,mem_le_adv_enable + rtn + + +//command opcode 0x17 +check_51cmd_le_disconnect: + setarg 20 // 100ms + store 2,mem_le_superto + store 2,mem_le_init_superto + branch le_send_terminate_ind_user_terminated + + +//command opcode 0x18 +check_51cmd_ble_update_connect_param: + branch le_l2cap_tx_update_req + + +//command opcode 19 +check_51cmd_led_off: + arg 0,rega + branch ui_led_off_global + + +//command opcode 20 +check_51cmd_led_on: + arg 0,rega + branch ui_led_on_global + + +//command opcode 21 +check_51cmd_led_start_blink: + arg 0,rega + branch ui_led_blink_start_global + + +//command opcode 0x22 +check_51cmd_le_start_con: + jam ON,mem_le_scan_enable + jam hci_cmd_le_create_conn,mem_hci_cmd +// fetch 6,mem_app_peer_addr +// store 6,mem_le_conn_peer_addr + rtn + + +//command opcode 0x23 +check_51cmd_start_scan: + jam ON,mem_le_scan_enable + rtn + + +//command opcode 0x24 +check_51cmd_stop_scan: + jam OFF,mem_le_scan_enable + jam 0,mem_hci_cmd + rtn + + +//command opcode 0x25 +check_51cmd_hibernate: + fetch 2,mem_cb_before_hibernate + call callback_func + fetch 1,mem_ui_button_gpio + beq UI_BUTTON_GPIO_DISABLE,check_51cmd_hibernate_btn_disabled + copy pdata,temp + call gpio_config_input +check_51cmd_hibernate_btn_disabled: + call ui_ipc_clean_all_fifo + branch lpm_hibernate + + +//command opcode 0x27 +check_51cmd_le_smp_sec_req: + branch le_send_smp_security_request + + +//command opcode 0x29 +check_51cmd_role_switch: + jam LMP_SLOT_OFFSET,mem_lmo_opcode2 + set1 mark_switch_initiated,mark + nrtn master + jam SWITCH_FLAG_INIT,mem_switch_flag + jam LMP_SWITCH_REQ ,mem_lmo_opcode2 + fetch 1,mem_connection_options + set0 CONNECTION_SWITCH,pdata + store 1,mem_connection_options + rtn + + +//command opcode 0x30 +check_51cmd_bb_reconn_cancel: + force page_length_timer,queue + branch timer_stop + + +//command opcode 0x33 +check_51cmd_dhkey_not_accept: + call tid_set_reply + jam LMP_DHKey_Check,mem_lmi_opcode2 + branch parse_lmp_dhkey_check_reject + + +ui_check_paring_button: + fetch 1,mem_ui_state_map + rtnbit0 UI_STATE_BTN_DOWN + rtnbit0 UI_STATE_BT_RECONNECT + branch check_51cmd_bb_reconn_cancel + + + +///////////queue function//////////// +queue_init: + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,contw + setarg 0 + istore 3,contw + rtn + +//input:rega:the address of the data to which you want to input queue +//output:if user is disable,mean queue no have space +queue_push: + call disable_user + call queue_full + rtn blank + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,regb + ifetcht 1,regb + increase 1,temp + istoret 1,regb //number add + + ifetcht 1,pdata //temp:each length + copy temp,loopcnt + add pdata,QUEUE_OFFSET_WRITE_PTR,regb + ifetch 1,regb + imul32 temp,pdata //offset + iadd contr,contw + copy rega,contr +calc_queue_next_ptr: + call memcpy + call queue_get_size + pincrease -1 + ifetcht 1,regb + increase 1,temp + iand temp,temp + istoret 1,regb + branch enable_user + + +//input:rega:the address of the data to which you want to output queue +//output:if user is disable,mean queue no have data +queue_pop: + call disable_user + call queue_empty + rtn blank + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,regb + ifetcht 1,regb + increase -1,temp + istoret 1,regb + ifetcht 1,pdata //each size + copy temp,loopcnt + add pdata,QUEUE_OFFSET_READ_PTR,regb + ifetch 1,regb + imul32 temp,pdata //offset + iadd contr,contr + increase 1,contr + copy rega,contw + branch calc_queue_next_ptr + + +//output:if blank is 1,mean queue is empty +queue_empty: + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_CURR_NUM,contr + ifetch 1,contr + rtn + +//output:if blank is 1,mean queue is full +queue_full: + call queue_get_size + ifetcht 1,contr + isub temp,pdata + rtn + +//output:pdata is queue size +queue_get_size: + fetch 2,mem_queue_ptr + add pdata,QUEUE_OFFSET_LENGTH,contr + ifetch 1,contr + rtn + +///////////queue function end//////////// + + + + Index: 1066_OTP_FLASH/program/utility.prog =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/program/utility.prog (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/program/utility.prog (working copy) @@ -0,0 +1,614 @@ + +right_shift_n: //rshiftN pdata,pdata + sub loopcnt,0,null + rtn zero +right_shift_n_loop: + rshift pdata,pdata + loop right_shift_n_loop + rtn + +/* lshift. 0:1 byte; 1:2byte; 2:4byte; 3:8byte; 4:16byte*/ +left_shift_n: + force 1,pdata + sub loopcnt,0,null + rtn zero +left_shift_n_loop: + lshift pdata,pdata + loop left_shift_n_loop + rtn +push_stack: + deposit contw + store 2, mem_contw + storet 8,mem_temp + deposit timeup + store 4,mem_timeup + call push_stack_rega_b_c + deposit contr + store 2, mem_contr + rtn + +push_stack_rega_b_c: + deposit rega + store 4, mem_rega + deposit regb + store 4, mem_regb + deposit regc + store 3, mem_regc + rtn + +pop_stack: + fetcht 8,mem_temp + fetch 4,mem_timeup + iforce timeup + call pop_stack_rega_b_c + fetch 2, mem_contw + iforce contw + fetch 2, mem_contr + iforce contr + rtn + +pop_stack_rega_b_c: + fetch 4, mem_rega + iforce rega + fetch 4, mem_regb + iforce regb + fetch 3,mem_regc + iforce regc + rtn + +get_contw: + fetch 2,mem_contw + copy pdata,contw + rtn +get_contr: + fetch 2,mem_contr + copy pdata,contr + rtn +store_contw: + copy contw,pdata + store 2,mem_contw + rtn +store_contr: + copy contr,pdata + store 2,mem_contr + rtn + + +// +save_cont_pointers: + copy contw,pdata + store 2,mem_hold_contw + copy contr,pdata + store 2,mem_hold_contr + rtn +load_cont_pointers: + fetch 2,mem_hold_contw + copy pdata,contw + fetch 2,mem_hold_contr + copy pdata,contr + rtn + +memcpy96: + call memcpy32 +memcpy64: + call memcpy32 + branch memcpy32 +memcpy12: + call memcpy8 +memcpy4: + ifetch 4,contr + istore 4,contw + rtn +memcpy8: + ifetch 8,contr + istore 8,contw + rtn + +memcpy48: + call memcpy16 +memcpy32: + call memcpy8 +memcpy24: + call memcpy8 +memcpy16: + call memcpy8 + branch memcpy8 + + + +delay_10ms: + arg 10,loopcnt +delay_ms_wait: + nop 12000 + loop delay_ms_wait + rtn + +bn_zero: + force 3,loopcnt +memset0: + force 0,pdata +memset8: + istore 8,contw + loop memset8 + rtn + +memset0_8: + force 0,pdata + istore 8,contw + rtn +memset0_4: + force 0,pdata + istore 4,contw + rtn + +clear_mem_256: + force 4,loopcnt + branch memset0 +clear_mem_512: + force 8,loopcnt + branch memset0 + +clear_mem: + deposit loopcnt + rtn blank + setarg 0 +clear_mem_loop: + istore 1,contw + loop clear_mem_loop + rtn + + +clear_temp_block: + arg 32,loopcnt + arg mem_temp_block0,contw + branch clear_mem + +xor_loop: + ifetch 4,regc + ifetcht 4,rega + ixor temp,pdata + istore 4,contw + increase 4,rega + increase 4,regc + loop xor_loop + rtn + +// 11 22 -> 22 11; 11 22 33 -> 33 22 11 +// rega:data addr ;loopnct:length +inverse_data: + bpatchx patch3f_3,mem_patch3f + copy loopcnt,pdata + sub pdata,1,null + rtn positive + iadd rega,regb + increase -1,regb + rshift loopcnt,loopcnt +inverse_loop: + ifetcht 1,rega + ifetch 1,regb + istore 1,rega + istoret 1,regb + increase -1,regb + increase 1,rega + loop inverse_loop + rtn + + +memcpy_fast: + deposit loopcnt + rtn blank +memcpy_fast_loop: + increase -8,loopcnt + call memcpy8,positive + rtn zero + branch memcpy_fast_loop,positive + increase 8,loopcnt +memcpy_fast_loop_four: + increase -4,loopcnt + call memcpy4,positive + rtn zero + branch memcpy_fast_loop_four,positive + increase 4,loopcnt + branch memcpy + +memcpy: + deposit loopcnt + rtn blank +memcpy_loop: + ifetch 1,contr + istore 1,contw + loop memcpy_loop + rtn + +timer_stop: + setarg 0 +timer_init: + rshift clkn_bt,temp + storet 4,mem_last_clkn + arg mem_timers,contw + iforce temp + lshift queue,pdata + iadd contw,contw + istoret 2,contw + bpatchx patch3f_4,mem_patch3f + rtn + +timer_check_timeout: + arg 0x800,timeup + lshift16 timeup,timeup + iadd timeup,pdata + rtn + + +timer_reinit: + arg 0,queue +timer_check: + bpatchx patch3f_5,mem_patch3f + fetcht 4,mem_last_clkn + rshift clkn_bt,pdata + store 4,mem_last_clkn + isub temp,null + ncall timer_check_timeout,positive + isub temp,timeup + copy timeup,temp + arg mem_timers,contr + copy contr,contw + arg 16,loopcnt +timer_loop: + ifetch 2,contr + isub temp,pdata + branch timer_counting,positive + force 0,pdata +timer_counting: + istore 2,contw + loop timer_loop + arg mem_timers,contr + lshift queue,pdata + iadd contr,contr + ifetch 2,contr + rtn + + + + /* pdata 28+16 bit add temp 26+16 bit, result in temp */ +clk_add: + iadd temp,temp + copy temp, loopcnt + setarg 3750 + isub loopcnt,pdata + rtn positive + sub pdata,0,pdata + rshift16 temp,temp + increase 1,temp + lshift16 temp,temp + ior temp,temp + rtn + +clk_diff_rt: + call clk_diff + branch clk2rt + +/* pdata -temp -> pdata, all are 28+16 bits, set user if negative */ +clk_diff: + disable user + isub temp,pdata + branch clk_diff_pos,positive + enable user + sub pdata,0,pdata +clk_diff_pos: + rtnbit0 15 + arg -61786,temp + iadd temp,pdata + set0 64,pdata + rtn + +clk2rt: + iforce contr + rshift16 pdata,pdata + arg 3750,temp + imul32 temp,pdata + iadd contr,pdata + rtn + + /* pdata = clks in, temp = lpo out */ +clk2lpo: + lshift8 pdata,pdata + lshift4 pdata,pdata + fetcht 3,mem_clks_per_lpo + idiv temp + call wait_div_end + quotient temp + rtn + + /* rt clk -> bt+rt clk */ +clk2bt: + arg 3750,temp + idiv temp + call wait_div_end + quotient pdata + lshift16 pdata,pdata + remainder temp + ior temp,temp + rtn + + + +//input:contru +//output:temp +//used register: temp regc +string2dec_from_uart: + arg 0,temp +string2dec_from_uart_done: + copy temp,regc + ifetch 1,contru + call uchar2dialog + copy regc,temp + call swap + arg 10,regb + imul32 regb,pdata + iadd temp,pdata + copy pdata,temp + loop string2dec_from_uart_done + rtn + + + +uchar2dialog: + arg 0x3a,temp + isub temp,null + nbranch uchar2dialog_number,positive + arg 0x61,temp + isub temp,null + branch uchar2dialog_a2f,positive + arg 0x37,temp + isub temp,pdata + rtn +uchar2dialog_number: + arg 0x30,temp + isub temp,pdata + rtn +uchar2dialog_a2f: + arg 0x57,temp + isub temp,pdata + rtn + +pn9: + copy temp,alarm + setarg 0x1ff + force 0,regb +pn9_loop: + rshift3 pdata,rega + rshift rega,rega + ixor rega,rega + isolate1 0,rega + setflag true,9,pdata + rshift temp,temp + isolate1 0,pdata + setflag true,7,temp + rshift pdata,pdata + increase 1,regb + compare 0,regb,0x7 + nbranch pn9_loop,true + istoret 1,contw + loop pn9_loop + copy alarm,temp + rtn + + +wait_div_end: + rtn modone + branch wait_div_end + + + +//input: +// count:loopcnt str1:rega str2:regb +//output: +// same:set falg true ,diff set falg false +// using: +// reg:temp null flag:zero +compare_loop: +string_compare: + ifetch 1,rega + ifetcht 1,regb + isub temp,null + nrtn zero + increase 1,rega + increase 1,regb + loop string_compare + force 0,null + rtn + + /* pdata = temp if pdata > temp */ +ceiling: + isub temp,null + nrtn positive + deposit temp + rtn + +swap: + iadd temp,pdata + isub temp,temp + isub temp,pdata + rtn + +clean_mem: + arg 0x200,loopcnt + arg 0x4000,contw + branch memset0 // clear xram at boot + + //cb function ptr in pdata +callback_func: + rtn blank + copy pdata,pc //rtn through cb functon. + //branch assert + +wait_uarttx: + hfetch 2,core_uart_txitems + nbranch wait_uarttx,blank + rtn + +ice_break: + hjam 0x1,core_ice_ctrl + rtn + +ice_setbp: + hstore 2,core_ice_break0 + hfetch 1,core_ice_ctrl + set1 4,pdata + hstore 1,core_ice_ctrl + rtn +ice_setbp2: + hstore 2,core_ice_break1 + hfetch 1,core_ice_ctrl + set1 6,pdata + hstore 1,core_ice_ctrl + rtn + +ice_set_write_bp: + hstore 2,core_ice_break0 + hjam 0x30,core_ice_ctrl + rtn + + + +test_enable_white: + hfetch 1,core_config + set0 whiteoff_bit,pdata + hstore 1,core_config /* whitening on */ + rtn + +check_uart_tx_buff: + hfetch 2,core_uart_txitems + arg UART_AIR_CONTROL_THRESHOLD,temp +pdata_sub_temp: + isub temp,null + rtn + + //fuction fifo_in + //rega pointer to fifo memory , *(rega+len) is the end of fifo + //mem_fifo_temp data into fifo + //assert if fifo was full +fifo_in: + bpatchx patch3f_6,mem_patch3f + ifetcht UTIL_FIFO_LEN,rega + and temp,0xff,pdata + nbranch fifo_in_push,blank + rshift8 temp,pdata + istore UTIL_FIFO_LEN,rega +fifo_in_push: + increase UTIL_FIFO_LEN+UTIL_FIFO_OFFSET,rega + ifetch 1,rega + nbranch assert,blank //fifo full + fetch 1,mem_fifo_temp + istore 1,rega + rtn + + //fuction fifo_out + //rega pointer to fifo memory + //pdata data from fifo, blank mains fifo empty +fifo_out: + bpatchx patch3f_7,mem_patch3f + arg UTIL_FIFO_LEN,loopcnt + ifetch UTIL_FIFO_LEN,rega + rtn blank +fifo_out_loop: + ifetch 1,rega + nbranch fifo_out_end,blank + increase 1,rega + loop fifo_out_loop + branch assert +fifo_out_end: + arg 0,temp + istoret 1,rega + rtn + + //fuction fifo_is_empty + //rega pointer to fifo memory + //blank--- fifo is empty +fifo_is_empty: + ifetch UTIL_FIFO_LEN,rega + rtn + + //fuction fifo_is_full + //rega pointer to fifo memory + //blank--- fifo is NOT full +fifo_is_full: + ifetch 1,rega + rtn + //rega pointer to fifo memory + //blank--- fifo is NOT near full +fifo_is_near_full: + ifetch 2,rega + rtn + + //rega pointer to fifo memory + //count output via pdata +fifo_content_count: + arg 0,temp +fifo_content_count_loop: + fetch 1,contr + loop fifo_content_count_loop,blank + increase 1,temp + loop fifo_content_count_loop + copy temp,pdata + rtn + +not_greater_than: + isub temp,null + nrtn positive + copy temp,pdata + rtn + + +disable_positive: + force -1,null + rtn +enable_positive: +disable_zero: + force 1,null + rtn +enable_zero: + force 0,null + rtn + +enable_user: + enable user + rtn + +disable_user: + disable user + rtn + +enable_user2: + enable user2 + rtn + +disable_user2: + disable user2 + rtn + +disable_blank: + setarg 1 + rtn + +enable_blank: + setarg 0 + rtn + + +reverse_byte: + copy loopcnt,pdata + rtn blank + copy contr,pdata + iadd loopcnt,pdata + increase -1,pdata + copy pdata,contr +reverse_loop: + ifetch 1,contr + increase -2,contr + istore 1,contw + loop reverse_loop + rtn + + Index: 1066_OTP_FLASH/sched/hci_boot.dat =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/sched/hci_boot.dat (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/sched/hci_boot.dat (working copy) @@ -0,0 +1,7 @@ + +mem_patch11:04 +mem_lpm_config:8f 10 ca +mem_rf_init_data: +ff +mem_rf_init_ptr:mem_rf_init_data + Index: 1066_OTP_FLASH/util/a1bugfix.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/a1bugfix.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/a1bugfix.pl (working copy) @@ -0,0 +1,81 @@ +#get sched ram content +$add = 0; +if(open file, "sched.rom") { + while() { + next if(/^#/); + s/#.*//g; + if(/^([a-z0-9_]+):(.*)/) { + push @dat, $1; + $_ = $2; + } + if(/^\'/) { + s/[\'\r\n]//g; + for($i = 0;$i < length($_);$i++) { + push @dat, ord(substr($_, $i, 1)); + } + } else { + s/\s//g; + for($i = 0;$i < length($_);$i+=2) { + push @dat, hex(substr($_, $i, 2)); + } + } + } + close file; +} +for($j = $k = $n = 0;$j < @dat;$j++) { + if($dat[$j] =~ /^mem_/ && $j > 0 || $n == 3) { + push @init, sprintf "\tsetarg 0x%x\n", $k; + push @init, sprintf "\tistore %d,contw\n", $n; + $n = $k = 0; + } + if($dat[$j] =~ /^mem_/) { + push @init, sprintf "\targ %s,contw\n", $dat[$j]; + } else { + $k |= $dat[$j] << $n++*8; + } +} +push @init, sprintf "\tsetarg 0x%x\n", $k; +push @init, sprintf "\tistore %d,contw\n", $n; + +open file,"eeprom.dat"; +for($i = 0;$i < 4;$i++) { + $_ = ; +} +close file; +$len = int(((hex($_) + @init*4 + 12) & 0xff)/4); +if($len > 0x3b) { + for($i = 0;$i < 0x40 - $len;$i++) { push @init, "\trtn\n"; } + $len = 0; +} +printf "len=%x\n", $len; + +open file, "bt_program23.list"; +while(){ + if(/^0x([0-9a-f]+)\s+([0-9]+)/) { + $line = 0 + $2; + last if(hex($1) == $len); + } +} +close file; +open file, "bt_program23.meta"; +@f = ; +close file; + + +open file, ">bt_program23.meta"; +for($i = 0;$i < @f;$i++) { + $_ = $f[$i]; + if($i == $line) { + printf file "\tbranch skip_a1bugfix_romdat\n"; + printf file "\tromdat 0x00,0x00,0x55,0xaa\n"; + printf file "\tromdat 0x00,0x08,0x90,0x01\n"; + printf file "\tromdat 0xa0,0x74,0x01,0xf0\n"; + printf file "\tromdat 0x80,0xfe,0x00,0x00\n"; + printf file "skip_a1bugfix_romdat:\n"; + } + print file $_; + if(/^init_sched:/) { + print file @init; + } +} +close file; Index: 1066_OTP_FLASH/util/bytecnt.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/bytecnt.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/bytecnt.pl (working copy) @@ -0,0 +1,12 @@ +while() { + next if(/^#/); + s/#.*//g; + if(/^\'/) { + s/[\r\n]//g; + $len += length($_) - 1; + } else { + s/\s//g; + $len += length($_)/2; + } +} +printf "len = %x\n", $len; Index: 1066_OTP_FLASH/util/crc16_ccitt.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/crc16_ccitt.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/crc16_ccitt.pl (working copy) @@ -0,0 +1,61 @@ +sub swap +{ + my($b) = @_; + my($i, $j); + for($i = 0, $j = 0;$i < 8;$i++) { + $j |= 1 << $i if($b & 1 << (7 - $i)); + } + return $j; +} + +@crc_tabccitt = (); +$initd = 0; +sub init_crcccitt_tab +{ + my($crc, $i, $c, $j); + + for ($i=0; $i<256; $i++) { + $crc = 0; + $c = $i << 8; + for ($j=0; $j<8; $j++) { + if ( ($crc ^ $c) & 0x8000 ) { $crc = ( $crc << 1 ) ^ 0x1021; } + else { $crc = $crc << 1; } + $c = $c << 1; + } + $crc_tabccitt[$i] = $crc & 0xffff; + } + $initd = 1; +} + +sub crc16_ccitt + +{ + my($crc, $c) = @_; + my($tmp, $short_c); + + init_crcccitt_tab() if(!$initd); + $short_c = 0x00ff & $c; + + $tmp = ($crc >> 8) ^ $short_c; + $crc = (($crc << 8) ^ $crc_tabccitt[$tmp]) & 0xffff; + + return $crc; + +} + +sub crc16_ccitt2 +{ + my($crc, $c) = @_; + + $crc = ($crc >> 8) | ($crc << 8); + $crc ^= $c; + $crc ^= ($crc & 0xff) >> 4; + $crc ^= $crc << 12; + $crc ^= ($crc & 0xff) << 5; + $crc &= 0xffff; + return $crc; +} + +init_crcccitt_tab(); + +1; \ No newline at end of file Index: 1066_OTP_FLASH/util/define_info.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/define_info.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/define_info.pl (working copy) @@ -0,0 +1,55 @@ +use strict; +use warnings; + +sub read_definfo{ + my $filename = shift(); + my $const_chip = "CHIP VERSION："; + my $const_config = "CONFIG: "; + my $version = ""; + my @res; + open(FILE,$filename) || die("can not open file:$filename ！\n"); + while(my $line = ){ + next if ($line eq "\n"||$line =~ "REVD"); + last if ($line =~ "INCLUDE"); + last if ($line =~ "SIMPLE_PAIRING"); + + if ($line =~ "FPGA" && $line !~ "//"){ + $version = $version."FPGA"; + }elsif($line =~ "ROMCODE" && $line !~ "//"){ + $version = $version."ROMCODE"; + print $const_chip.$version."\n\n"; + }elsif($line !~ "//"){ # valid + if ($line =~"liandi"){ + print "baud rate : boot rate\n"; + } + elsif ($line =~ "CREDIT"){ + print "credit : from mcu\n"; + } + elsif ($line =~ "SSP_EXT"){ + print "ssp confirm: suport\n"; + } + elsif ($line =~ "NVRAM"){ + print "nvram : by mcu\n"; + }elsif ($line=~"RELEASE"){ + print "version : release\n"; + } + }elsif ($line =~ "//"){ #noted + if ($line =~"liandi"){ + print "baud rate : 115200 or other \n"; + } + elsif ($line =~ "CREDIT"){ + print "credit : auto\n"; + } + elsif ($line =~ "SSP_EXT"){ + print "ssp confirm: justwork only\n"; + } + elsif ($line =~ "NVRAM"){ + print "nvram : in eep\n"; + }elsif ($line =~ "RELEASE"){ + print "version : debug\n"; + } + } + } +} + +&read_definfo("bt.prog"); \ No newline at end of file Index: 1066_OTP_FLASH/util/gen_patch_h.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/gen_patch_h.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/gen_patch_h.pl (working copy) @@ -0,0 +1,135 @@ +#!/usr/bin/perl +sub clear_print_buf{ + for($i = 0; $i < 10; $i++){ + $binData[$i] = 0; + } +} + +sub print_line{ + if($byte_cnt == 0){ + #new line print header; + $offset = $patch_cmd_len * $line_cnt; + printf "{"; + printf "0x%x%x, ", ($offset / 16 ) % 16, ($offset) % 16; + printf "0x%x%x, ", ($offset / 4096) % 16, ($offset / 256) % 16; + printf "0x%x%x, ", ($patch_cmd_len / 16) % 16, ($patch_cmd_len) % 16; + $line_cnt ++; + } + printf "0x%s%s, 0x%s%s, 0x%s%s, 0x%s%s",$binData[0],$binData[1],$binData[2],$binData[3],$binData[4],$binData[5],$binData[6],$binData[7]; + + $byte_cnt += 4; + if($byte_cnt >= $patch_cmd_len){ + $byte_cnt = 0; + printf "},\n\t"; + }else{ + printf ", "; + } +} + +################STATIC######################## + +$patch_cmd_len = 96; +$patch_cmd_header_len = 3; +$patch_cmd_checksum_len = 1; + +################main fuction################## + +printf "/******************************************************************************\n"; +printf " ** File Name: yc_patch_yc1021.h *\n"; +printf " ** *\n"; +printf " ******************************************************************************\n"; +printf "\n"; +printf " ******************************************************************************\n"; +printf " ** Edit History *\n"; +printf " ** ------------------------------------------------------------------------- *\n"; +printf " ** DATE NAME DESCRIPTION *\n"; +printf " ** 2015.3.17 fan.kou Create. *\n"; +printf " ******************************************************************************/\n"; +printf "/******************************************************************************/\n"; +printf "#ifndef _YC_PATCH_YC1021_H_2015_03_17_16_39_59_298_\n"; +printf "#define _YC_PATCH_YC1021_H_2015_03_17_16_39_59_298_\n"; +printf "\n"; +printf "/**---------------------------------------------------------------------------*\n"; +printf " ** Dependencies *\n"; +printf " **---------------------------------------------------------------------------*/\n"; +printf "/**---------------------------------------------------------------------------*\n"; +printf " ** Compiler Flag *\n"; +printf " **---------------------------------------------------------------------------*/\n"; +printf "#ifdef __cplusplus\n"; +printf "extern \"C\" \n"; +printf "{\n"; +printf "#endif\n"; +printf "/**---------------------------------------------------------------------------*\n"; +printf " ** Macros & Enums *\n"; +printf " **---------------------------------------------------------------------------*/\n"; + +open(FILE,"ramcode.rom") or die $!; +$line_cnt = 0; +while($line = ){ + $line_cnt++; +} +$cmd_cnt = $line_cnt * 4 / $patch_cmd_len + (($line_cnt * 4 % $patch_cmd_len) > 0); +close(FILE); + +printf "#define YC_PATCH_CMD_CNT %d\n",$cmd_cnt; +printf "#define YC_PATCH_CMD_LEN %d\n",$patch_cmd_len + $patch_cmd_header_len + $patch_cmd_checksum_len; +printf "#define YC_PATCH_ARRAY_LEN 0x20\n"; +printf "/**---------------------------------------------------------------------------*\n"; +printf " ** Data Structures *\n"; +printf " **---------------------------------------------------------------------------*/\n"; +printf "\n"; +printf "/**---------------------------------------------------------------------------*\n"; +printf " ** Variables *\n"; +printf " **---------------------------------------------------------------------------*/\n"; +printf "\n"; + +printf "const uint8_t yc_patch_array[YC_PATCH_ARRAY_LEN] =\n"; +printf "{\n"; +printf "\t0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \n"; +printf "\t0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \n"; +printf "\t0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \n"; +printf "\t0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, \n"; +printf("\n"); +printf("};\n"); + + +printf "const uint8_t yc_patch_cmd[YC_PATCH_CMD_CNT][YC_PATCH_CMD_LEN] =\n"; +printf "{\n\t"; + +open(BINFILE,"ramcode.rom") or die $!; +binmode (BINFILE); +$byte_cnt = 0; +$end_of_file = 0; +$checksum = 0; +$line_cnt = 0; +while(!$end_of_file) +{ + for($i = 0; $i < 10; $i++){ + if(!read(BINFILE, $binData[$i], 1)){ + $end_of_file = 1; + if(i != 0){ + printf "Error: Error at the end of file."; + } + } + } + if(!$end_of_file){ + &print_line; + } +} +while($byte_cnt){ + &clear_print_buf; + &print_line; +} +printf("\n"); +printf("};\n"); +printf "\n"; +printf "/**---------------------------------------------------------------------------*\n"; +printf " ** Function Prototypes *\n"; +printf " **---------------------------------------------------------------------------*/\n"; +printf "\n"; +printf "#ifdef __cplusplus\n"; +printf "}\n"; +printf "#endif\n"; +printf "\n"; +printf "/******************************************************************************/\n"; +printf "#endif //#ifndef _YC_PATCH_YC1021_H_2015_03_17_16_39_59_298_\n"; \ No newline at end of file Index: 1066_OTP_FLASH/util/hex2mif.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/hex2mif.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/hex2mif.pl (working copy) @@ -0,0 +1,103 @@ +#!/usr/bin/perl +# 2005 - David Grant. +# Take an ihex input from STDIN, and write a .mif file to STDOUT +# This script could probably be implemented with something like: +# $#!@_%^$@%$@%$_!^$@#^@%$#@_%$@^&!%$_!%!%&$*(#^#@%^) +# But I perfer the somewhat readable version. + +# Flow from within the Nios2 SDK Shell: +# nios2-elf-as file.asm -o file.o +# nios2-elf-objcopy file.o --target ihex file.hex +# cat file.hex | perl hex2mif.pl > file.mif + +my @rom = (); +my @ram = (); + +sub conv { + my ($in) = @_; + $out = substr($in,6,2).substr($in,4,2).substr($in,2,2).substr($in,0,2); + return hex $out; +} + +sub writeromfile { + my (@buf) = @_; + my($x); + + for($x=0; $x<@buf; $x++) { + printf ("%02x\n", $buf[$x]); + } +} + +sub writebinfile { + my (@buf) = @_; + my($x); + + for($x=0; $x<@buf; $x++) { + for($y=0;$y<8;$y++) { + printf ("%d", $buf[$x] & 1<<(7-$y) ? 1 : 0); + } + printf "\n" if(($x & 3) == 3); + } +} + +sub writemiffile { + my (@buf) = @_; + my($x); + print ("WIDTH=8;\n"); + print ("DEPTH=".@buf.";\n"); + print ("CONTENT BEGIN\n"); + for($x=0; $x<@buf; $x++) { + printf ("\t%04x : %02x;\n", $x, $buf[$x]); + } + print ("END;\n"); +} + +if($ARGV[0] eq "ram" || $ARGV[0] eq "rammif") +{ + $org = 0x8000; + $limit = 0xffff; +} elsif($ARGV[0] eq "rom" || $ARGV[0] eq "bin" || $ARGV[0] eq "mif" || $ARGV[0] eq "rommif" ) { + $org = 0; + $limit = 0x7fff; +} else { + $org = 0; + $limit = 0xffffff; +} + + +$org = 0; +$limit = 0x7fff; + +while () { + $l = $_; + next if(!/\w/); + $count = (hex substr($l, 1, 2)); + $addr = (hex substr($l, 3, 4)); + $type = (hex substr($l, 7, 2)); + last if $type eq 1; + if($type == 4) { + $org = -(hex substr($l, 9, 4))*0x10000; + } + if($addr >= $org && $addr <= $limit) + { + $addr*=4 if($ARGV[0] eq "bin"); + $addr -= $org; + for($x=0; $x<$count; $x++) { + $rom[$addr + $x] = (hex substr($l, 9+2*$x, 2)) ; + } + } +} + +if($ARGV[0] eq "rom" || $ARGV[0] eq "ram" || $ARGV[0] eq "mem") +{ + writeromfile(@rom); +} +elsif($ARGV[0] eq "bin") +{ + writebinfile(@rom); +} +else +{ + writemiffile(@rom); +} + Index: 1066_OTP_FLASH/util/ifdef.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/ifdef.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/ifdef.pl (working copy) @@ -0,0 +1,8 @@ +open file, "bt_program23.meta" +@prog = ; +close file; +open file, "bt_format.meta" +@fmt = ; +close file; + + Index: 1066_OTP_FLASH/util/memalloc.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/memalloc.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/memalloc.pl (working copy) @@ -0,0 +1,55 @@ +$path=$ARGV[0]; +open file, $path; +@f = ; +close file; +open file, ">$path"; +$path =~ s/\/.*//; +open file1, ">$path/memmap.format"; +$xaddr = 0x4000; +$oaddr = $saddr = 0; +for($i = 0;$i < @f;$i++) { + $_ = $f[$i]; + $start = 1 if(/^\s*memalloc\s*\(\s*$/); + $start = 2 if(/^\s*xmemalloc\s*\(\s*$/); + $start = 3 if(/^\s*omemalloc\s*\(\s*$/); + if($start) { + if(/^\s*([0-9]+)\s+([a-zA-Z0-9_]+)\s*(.*)$/) { + if($start == 1) { + $str = sprintf "0x%04x %s%s\n", $addr, $2, $3; + $addr += $1; + $bstr .= $str; + $sstr .= $str; + } elsif($start == 2) { + $str = sprintf "0x%04x %s%s\n", $xaddr, $2, $3; + $xaddr += $1; + $xstr .= $str; + } else { + push @ostr, $_; + } + } + if(/^\s*\)\s*$/) { + $start = 0; + push @omalloc,[@ostr] if(@ostr > 0); + @ostr = (); + } + } else { + $sstr .= $_; + } +} + +for($i = 0;$i <= $#omalloc;$i++) { + for($j = 0, $oaddr = $xaddr;$j <= $#{$omalloc[$i]};$j++) { + if($omalloc[$i][$j] =~ /^\s*([0-9]+)\s+([a-zA-Z0-9_]+)\s*(.*)$/) { + $str = sprintf "0x%04x %s%s\n", $oaddr, $2, $3; + $oaddr += $1; + $xstr .= $str; + } + } + $xend = $oaddr if($oaddr > $xend); +} +print file $xstr, $sstr; +print file1 $bstr, $xstr; +close file; +close file1; +printf "\nLast allocated address is %04x\n", $addr; +printf "\nLast allocated xmem address is %04x\n", $xend; \ No newline at end of file Index: 1066_OTP_FLASH/util/mergepatch.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/mergepatch.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/mergepatch.pl (working copy) @@ -0,0 +1,63 @@ +$defs = ""; +$fmt = 0; +sub reva { + return $_ if($defs =~ /REV[CD]/ || $fmt); + if(/bmark([01])\s+([a-z0-9_]+)\s*,\s*([a-z0-9_]+)/) { + $ret = sprintf("\tisolate%d %s,mark\n\tbranch %s,true\n", $1, $2, $3); + } elsif(/rtnmark([01])\s+([a-z0-9_]+)\s*/) { + $ret = sprintf("\tisolate%d %s,mark\n\trtn true\n", $1, $2); + } else { + $ret = $_; + } + return $ret if($defs =~ /REVB/); + if(/mul32\s+([a-z]+)\s*,\s*([a-z0-9_]+)\s*,\s*([a-z]+)/) { + $ret = sprintf("\tmult %s,%s\n\tnop 19\n\tproduct %s\n", $2, $1, $3); + } elsif(/imul32\s+([a-z]+)\s*,\s*([a-z]+)/) { + $ret = sprintf("\timult %s\n\tnop 19\n\tproduct %s\n", $1, $2); + } else { + $ret = $_; + } + return $ret; +} + +sub parseif { + my($fname) = @_; + open file, $fname; + @f = ; + close file; + open file, ">$fname"; + @valid = (1); + for($i = 0;$i < @f;$i++) { + $_ = $f[$i]; + $defs .= $1 . " " if(/^define\s+(\w+)\s*/); + if(/^ifdef\s+(\w+)\s*/) { + push @valid, ($defs =~ /$1 / ? 1 : 0) & $valid[$#valid]; + } elsif(/^ifndef\s+(\w+)\s*/) { + push @valid, ($defs =~ /$1 / ? 0 : 1) & $valid[$#valid]; + } elsif(/^else/) { + printf "%s\nelse without if at line %d\n", $f[$i - 3], $i if($#valid == 0); + $valid[$#valid] = (1 - $valid[$#valid]) & $valid[$#valid - 1]; + } elsif(/^endif/) { + printf "%s\nendif without if at line %d\n", $_, $i if($#valid == 0); + pop @valid; + } elsif($valid[$#valid]) { + if(/^include\s+(.+)\s*/) { + open file2, "program/$1"; + @f2 = ; + close file2; + splice(@f, $i + 1, 0, @f2); + } else { + next if(/^\s*bpatch\s+/ && $defs !~ /ROMCODE/); + next if(/^\s*set[01] mark_ext_patch/ && $defs !~ /ROMCODE/); + print file reva($_); + } + } + } + close file; +} + +parseif("output/bt_program23.meta"); +$fmt = 1; +parseif("output/bt_format.meta"); + + Index: 1066_OTP_FLASH/util/rom2mif.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/rom2mif.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/rom2mif.pl (working copy) @@ -0,0 +1,50 @@ +#!/usr/bin/perl +#perl hex2mif.pl + + +$file0 = $file1 = $ARGV[0]; +$file1 =~ s/\.rom/.mif/; +$wid = 8; + + + +print ("opening $file0\n"); +open(ifile, "$file0") || die("cannot find $file0 file\n"); +for($l = 0;$val = ;$l++) +{ + if($l == 0) + { + if(substr($val, 1, 1) !~ /[0-9a-fA-F]/) { $wid = 1; } + elsif(substr($val, 2, 1) !~ /[0-9a-fA-F]/) { $wid = 8; } + elsif(substr($val, 4, 1) !~ /[0-9a-fA-F]/) { $wid = 16; } + else { $wid = 32; } + } +} +printf ("width is %d\n", $wid); +printf ("totally %d words\n", $l); +seek(ifile, 0, 0); +open(ofile, ">$file1"); +printf ofile ("DEPTH = %d;\n", $wid == 1 ? $l/8 : $l); +printf ofile ("WIDTH = %d;\n", $wid == 1 ? 8 : $wid); +print ofile ("ADDRESS_RADIX = HEX;\n"); +print ofile ("DATA_RADIX = HEX;\n"); +print ofile ("CONTENT\n"); +print ofile ("BEGIN\n"); +for($l = 0, $val1 = 0;$val = ;$l++) +{ + $val =~ s/\n//g; + $val0 = hex(substr($val, 0, $wid == 1 ? 1 : $wid/4)); + if($wid > 1) { + printf ofile ("%x : %x;\n", $l, $val0); + } elsif($l % 8 == 0 && $l > 0) { + printf ofile ("%x : %x;\n", $l/8 - 1, $val1); + $val1 = 0; + } + $val1 |= $val0 << ($l & 7); +} +if($wid == 1) { printf ofile ("%x : %x;\n", $l/8 - 1, $val1); } +print ofile ("END;\n"); + +close(ifile); +close(ofile); + Index: 1066_OTP_FLASH/util/route.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/route.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/route.pl (working copy) @@ -0,0 +1,10 @@ +system("route print > 1"); +open file,"1"; +while() { + if(/^\s+0\.0\.0\.0\s+0\.0\.0\.0\s+([\.0-9]+)\s+([\.0-9]+)\s+1\s+$/) { + print "added route to " . $1; + system("route add 192.168.2.126 " .$1); + last; + } +} +close file; \ No newline at end of file Index: 1066_OTP_FLASH/util/setarg.pl =================================================================== --- /branch/mouse_project/1066/1066_OTP_FLASH/util/setarg.pl (nonexistent) +++ /branch/mouse_project/1066/1066_OTP_FLASH/util/setarg.pl (working copy) @@ -0,0 +1,100 @@ +@dat = @init = (); + +sub setarg { +my ($j, $k, $n); +for($j = $k = $n = 0;$j < @dat;$j++) { + if($dat[$j] =~ /^mem_/ && $j > 0 || $n == 3) { + push @init, sprintf "\tsetarg 0x%x\n", $k; + push @init, sprintf "\tistore %d,contw\n", $n; + $n = $k = 0; + } + if($dat[$j] =~ /^mem_/) { + push @init, sprintf "\targ %s,contw\n", $dat[$j]; + } else { + $k |= $dat[$j] << $n++*8; + } +} +push @init, sprintf "\tsetarg 0x%x\n", $k; +push @init, sprintf "\tistore %d,contw\n", $n; +} + +sub setsect { +my($i,$j,$k,$n); + +if($ARGV[1] eq "c51") { + push @init, sprintf "ifdef C51\ndownload_pdata:\n\tforce 9,loopcnt\ndownload_pdata_loop:\n\thstore 1,core_docd_pdata\n"; + push @init, sprintf "\trshift8 pdata,pdata\n\tloop download_pdata_loop\n\trtn\n"; + push @init, sprintf "download_c51:\n\thjam 5,core_docd_ctrl\n\tforce 0,pdata\n\thstore 2,core_docd_paddr\n"; +} +for($i = $j = $k = $n = 0;$i < @dat + 2;$i++) { + if($i == @dat && $n == 0) { + push @init, sprintf "\tsetarg 0x%x\n", $k; + if($ARGV[1] eq "c51") { + push @init, sprintf "\tcall download_pdata\n"; + } else { + push @init, sprintf "\tistore %d,contw\n", ($j + 7)/8; + } + last; + } + if($i == @dat) { + $i = $i; + } + if($j > 18 || $i == @dat + 1) { + push @init, sprintf "\tsetsect %d,0x%x\n", $n,$k & 0x3ffff; + if($n == 3 || $i == @dat + 1) { + if($ARGV[1] eq "c51") { + push @init, sprintf "\tcall download_pdata\n"; + } else { + push @init, sprintf "\tistore %d,contw\n", ($n*18 + ($j > 18 ? 18 : $j))/8; + } + $n = -1; + } + $k >>= 18; + $j -= 18; + $n++; + } + if($i < @dat) { + if($dat[$i] =~ /^mem_/) { + push @init, sprintf "\targ %s,contw\n", $dat[$i]; + } else { + $k |= $dat[$i] << $j; + $j += 8; + } + } +} +if($ARGV[1] eq "c51") { + push @init, sprintf "\thjam 3,core_docd_ctrl\n\trtn\nendif\n"; +} +} + +if(@ARGV == 0) { + printf "missing file name\n"; + exit; +} +if(open file, $ARGV[0]) { + while() { + next if(/^#/); + s/#.*//g; + if(/^([a-z0-9_]+):(.*)/) { + push @dat, $1; + $_ = $2; + } + if(/^\'/) { + s/[\'\r\n]//g; + for($i = 0;$i < length($_);$i++) { + push @dat, ord(substr($_, $i, 1)); + } + } else { + s/\s//g; + for($i = 0;$i < length($_);$i+=2) { + push @dat, hex(substr($_, $i, 2)); + } + } + } + close file; +} + +setsect(); + +print @init; +