Index: program/patch.prog
===================================================================
--- /YC3121_demo/ModuleDemo/BlueTooth/BT_code_patch/bt_hfp_ble/program/patch.prog	(revision 956)
+++ /YC3121_demo/ModuleDemo/BlueTooth/BT_code_patch/bt_hfp_ble/program/patch.prog	(working copy)
@@ -13,12 +13,11 @@
 	beq patch02_3,p_page_start
 	beq patch02_7,p_page_check_train
 	beq patch1b_1,p_ml2cap_proc_signal_disconn_req
-
 	//lpm exen patch
 	beq patch00_1,p_soft_reset
 	beq patch10_5,p_shutdown_radio
 	beq patch11_1,p_set_freq_tx
-	//
+	//enc patch
 	beq patch06_4,p_send_eir
 	//lpm patch
 	beq patch12_4,p_ahead_window
@@ -35,6 +34,7 @@
 	beq patch0c_0,p_process_dmh_data_end
 	beq patch0e_1,p_parse_l2cap_cont
 	beq patch1b_3,p_l2cap_malloc
+
 	//context patch
 	beq patch00_5,p_connection_incontext
 //	beq patch05_4,p_context_new
@@ -87,11 +87,8 @@
 	beq patch2a_4,p_parse_uih_rp_spp
 	beq patch2b_0,p_rfcomm_send_param_neg_cmd
 	beq patch2c_3,p_scheduler_process
-
-
-
+	
 	beq patch28_4,p_process_conn_sm
-
 	branch assert
 
 
@@ -209,8 +206,7 @@
 
 /*
 	YC3121 shutdown radio bugfix
-	rfen_adc bug 陶其文添加
-*/
+	rfen_adc bug 陶其文添�?*/
 p_shutdown_radio:
 	branch p_shutdown_radio0,is_rx
 	hjam 0xd4, 0x955
@@ -276,8 +272,7 @@
 	rtn
 
 /*
-	关闭广播不能休眠的问题
-*/
+	关闭广播不能休眠的问�?*/
 p_lpm_unconn_nossp:
 	branch lpm_unconn_cont				//BT/BLE discover don't infect lpm
 
@@ -828,7 +823,7 @@
 	branch lerx_loop
 
 /*
-	广播层收发等待100us左右
+	广播层收发等�?00us左右
 */
 p_le_transmit_receive_sifs:
 	call le_transmit
@@ -1163,11 +1158,12 @@
 	arg mem_le_txheader_temp,regc
 	fetcht 5,mem_le_pcnt_tx
 	call generate_mic
-	force regidx_xor,regext_index
-	iforce regext
 	force 0,rega					/* rega is block counter */
 	call first_block_data
 	call aes_init				// 1021s ->  do_aes_ctr
+	force regidx_data,regext_index
+	copy regb,regext
+	call do_aes_cfb
 	arg mem_le_txpayload_temp,regc
 	fetch 1,mem_le_txlen_temp
 	add pdata,-1,regb
@@ -1175,15 +1171,15 @@
 	force regidx_result,regext_index
 	deposit regext
 	istore 4,contw
+	force 0,rega
 	call aes_crypt_data
 	fetch 1,mem_le_txlen_temp
 	increase 4,pdata
 	store 1,mem_le_txlen_temp
-	branch le_encrypt+33
+	branch le_encrypt+21
 
 /*
-	l2cap 组包的问题
-*/
+	l2cap 组包的问�?*/
 p_le_parse:
 	rtnmark1 mark_old_packet
 	call le_fifo_check_full
Index: sched/109x.dat
===================================================================
--- /YC3121_demo/ModuleDemo/BlueTooth/BT_code_patch/bt_hfp_ble/sched/109x.dat	(revision 956)
+++ /YC3121_demo/ModuleDemo/BlueTooth/BT_code_patch/bt_hfp_ble/sched/109x.dat	(working copy)
@@ -26,7 +26,7 @@
 mem_inq_window:20 00
 mem_page_window:20 00
 mem_page_interval:00 00
-mem_page_to:80 0c
+mem_page_to:80 0c	#uint 0.625ms
 mem_rx_window_init:80 04
 mem_rx_window_sniff:00 10